modelence 0.15.3 → 0.16.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/server.js CHANGED
@@ -1,19 +1,19 @@
1
- import {a as a$2,b as b$1}from'./chunk-D6FY7A77.js';import {d as d$1,a as a$3}from'./chunk-C3UESBRX.js';import {a}from'./chunk-DO5TZLF5.js';import {a as a$1,b,f,e,g,c,h,k,d as d$2,j as j$1,i,l,m as m$1}from'./chunk-3SPXJEOR.js';export{a as getConfig}from'./chunk-3SPXJEOR.js';import {s}from'./chunk-J5SB2KAY.js';import Yn from'dotenv';import jo from'fs/promises';import Wr from'os';import ut from'path';import {Server}from'socket.io';import {createAdapter}from'@socket.io/mongo-adapter';import {MongoError,ObjectId,MongoClient,MongoServerError}from'mongodb';export{ObjectId}from'mongodb';import {randomBytes,randomUUID}from'crypto';import {isDeepStrictEqual}from'util';import z$1,{z}from'zod';import _r from'bcrypt';import {createServer,defineConfig,loadConfigFromFile,mergeConfig}from'vite';import so from'@vitejs/plugin-react';import ao from'fs';import q,{Router}from'express';import Mo from'cookie-parser';import Io from'http';var x=class{constructor(e,{stores:n=[],queries:r={},mutations:o={},routes:i=[],cronJobs:s={},configSchema:a={},rateLimits:c=[],channels:l=[]}={}){this.name=e,this.stores=n,this.queries=r,this.mutations=o,this.routes=i,this.cronJobs=s,this.configSchema=a,this.rateLimits=c,this.channels=l;}getConfig(e){return a$1(`${this.name}.${e}`)}};function L(t){let e=t._def;if(e.typeName==="ZodString")return {type:"string"};if(e.typeName==="ZodNumber")return {type:"number"};if(e.typeName==="ZodBoolean")return {type:"boolean"};if(e.typeName==="ZodDate")return {type:"date"};if(e.typeName==="ZodArray")return {type:"array",items:L(e.type)};if(e.typeName==="ZodObject"){let r=e.shape(),o={};for(let[i,s]of Object.entries(r))o[i]=L(s);return {type:"object",items:o}}if(e.typeName==="ZodOptional")return {...L(e.innerType),optional:true};if(e.typeName==="ZodNullable")return {...L(e.innerType),optional:true};if(e.typeName==="ZodEnum")return {type:"enum",items:e.values};if(e.typeName==="ZodUnion")return {type:"union",items:e.options.map(L)};if(e.typeName==="ZodEffects"){let n=e;return n.description?{type:"custom",typeName:n.description}:L(n.schema)}return {type:"custom",typeName:e.typeName}}function Se(t){let e={};for(let[n,r]of Object.entries(t))Array.isArray(r)?e[n]=r.map(o=>typeof o=="object"&&"_def"in o?L(o):Se(o)):typeof r=="object"&&"_def"in r?e[n]=L(r):e[n]=Se(r);return e}var nr=["background","bits","bucketSize","collation","default_language","expireAfterSeconds","hidden","language_override","max","min","partialFilterExpression","sparse","storageEngine","textIndexVersion","unique","weights","wildcardProjection","2dsphereIndexVersion"],ze=t=>typeof t=="object"&&t!==null&&!Array.isArray(t),rr=t=>t.startsWith("_modelence_"),qe=t=>{let e={};for(let n of nr){let r=t[n];r!==void 0&&(e[n]=r);}return e},or=(t,e)=>{if(!ze(t)||!ze(e))return false;let n=Object.entries(t),r=Object.entries(e);return n.length!==r.length?false:n.every(([o,i],s)=>{let[a,c]=r[s]||[];return o===a&&isDeepStrictEqual(i,c)})},At=(t,e)=>or(t.key,e.key)?isDeepStrictEqual(qe(t),qe(e)):false,je=t=>ze(t)?Object.entries(t).map(([e,n])=>`${e}:${JSON.stringify(n)}`).join("|"):null,ir=async t=>{try{return await t.listIndexes().toArray()}catch(e){if(e instanceof MongoError&&e.code===26)return [];throw e}},sr=t=>Object.entries(t).map(([e,n])=>`${e}_${n}`).join("_"),ar=t=>{if(t.name){let n=t.name.startsWith("_modelence_")?t.name:`_modelence_${t.name}`;return {...t,name:n}}let e=sr(t.key);return {...t,name:`_modelence_${e}`}},v=class t{constructor(e,n){this._chainParent=null;this._chainChild=null;this.name=e,this.schema=n.schema,this.methods=n.methods,this.indexes=n.indexes.map(ar),this.searchIndexes=n.searchIndexes||[],this.indexCreationMode=n.indexCreationMode??"background";}getName(){return this.name}getIndexCreationMode(){return this.indexCreationMode}getSchema(){return this.schema}getSerializedSchema(){return Se(this.schema)}getIndexes(){return this.indexes}getSearchIndexes(){return this.searchIndexes}getChainTail(){let e=this;for(;e._chainChild;)e=e._chainChild;return e}getChainRoot(){let e=this;for(;e._chainParent;)e=e._chainParent;return e}extend(e){let n=this.getChainTail();if(this.client||n.client)throw new Error(`Store.extend() must be called before startApp(). Store '${this.name}' has already been initialized and cannot be extended.`);let r={...n.schema,...e.schema||{}},o=[...n.indexes,...e.indexes||[]],i=[...n.searchIndexes,...e.searchIndexes||[]],s={...n.methods||{},...e.methods||{}},a=new t(this.name,{schema:r,methods:s,indexes:o,searchIndexes:i,indexCreationMode:e.indexCreationMode??n.indexCreationMode});return n._chainChild=a,a._chainParent=n,a}init(e){if(this.collection)throw new Error(`Collection ${this.name} is already initialized`);this.client=e,this.collection=this.client.db().collection(this.name);}async createIndexes(e="full"){let n=this.requireCollection(),r=e!=="create-only",o=e!=="drop-only",i=await ir(n),s=new Map,a=new Map,c=new Set,l=u=>{s.set(u.name,u);let y=je(u.key);if(!y)return;let g=a.get(y);g?g.add(u.name):a.set(y,new Set([u.name]));},p=u=>{let y=s.get(u);if(!y)return;s.delete(u);let g=je(y.key);if(!g)return;let C=a.get(g);C&&(C.delete(u),C.size===0&&a.delete(g));};for(let u of i)typeof u.name=="string"&&l({...u,name:u.name});let f=async u=>{if(!(u==="_id_"||c.has(u))){try{await n.dropIndex(u);}catch(y){if(!(y instanceof MongoError&&y.code===27))throw y}c.add(u),p(u);}};if(r){let u=new Set(this.indexes.map(g=>g.name).filter(g=>typeof g=="string")),y=[...s.values()].filter(g=>rr(g.name)&&!u.has(g.name));for(let g of y)await f(g.name);}if(this.indexes.length>0)for(let u of this.indexes){if(!u.name)continue;let y=false,g=s.get(u.name);g&&!At(g,u)&&(r?await f(g.name):y=true);let C=je(u.key);if(C){let M=[...a.get(C)||[]];for(let k of M)k!==u.name&&(r?await f(k):y=true);}let P=s.get(u.name);!(!!P&&At(P,u))&&o&&!y&&(await n.createIndexes([u]),l({name:u.name,key:u.key,...qe(u)}));}if(o&&this.searchIndexes.length>0)for(let u of this.searchIndexes)try{await n.createSearchIndexes([u]);}catch(y){if(y instanceof MongoError&&y.code===68&&u.name)await n.dropSearchIndex(u.name),await n.createSearchIndexes([u]);else throw y}}wrapDocument(e){return this.methods?Object.create(null,Object.getOwnPropertyDescriptors({...e,...this.methods})):e}getSelector(e){return typeof e=="string"?{_id:new ObjectId(e)}:e instanceof ObjectId?{_id:e}:e}requireCollection(){if(!this.collection)throw new Error(`Collection ${this.name} is not provisioned`);return this.collection}requireClient(){if(!this.client)throw new Error("Database is not connected");return this.client}async findOne(e,n){let r=await this.requireCollection().findOne(e,n);return r?this.wrapDocument(r):null}async requireOne(e,n,r){let o=await this.findOne(e,n);if(!o)throw r?r():new Error(`Record not found in ${this.name}`);return o}find(e,n){let r=this.requireCollection().find(e,n?.projection?{projection:n.projection}:void 0);return n?.sort&&r.sort(n.sort),n?.limit&&r.limit(n.limit),n?.skip&&r.skip(n.skip),r}async findById(e){let n=typeof e=="string"?{_id:new ObjectId(e)}:{_id:e};return await this.findOne(n)}async requireById(e,n){let r=await this.findById(e);if(!r)throw n?n():new Error(`Record with id ${e} not found in ${this.name}`);return r}countDocuments(e){return this.requireCollection().countDocuments(e)}async fetch(e,n){return (await this.find(e,n).toArray()).map(this.wrapDocument.bind(this))}async insertOne(e,n){return await this.requireCollection().insertOne(e,n)}async insertMany(e,n){return await this.requireCollection().insertMany(e,n)}async updateOne(e,n,r){return await this.requireCollection().updateOne(this.getSelector(e),n,r)}async upsertOne(e,n,r){return await this.requireCollection().updateOne(this.getSelector(e),n,{upsert:true,...r})}async updateMany(e,n,r){return await this.requireCollection().updateMany(e,n,r)}async upsertMany(e,n,r){return await this.requireCollection().updateMany(e,n,{upsert:true,...r})}async deleteOne(e,n){return await this.requireCollection().deleteOne(e,n)}async deleteMany(e,n){return await this.requireCollection().deleteMany(e,n)}async findOneAndUpdate(e,n,r){let o=await this.requireCollection().findOneAndUpdate(this.getSelector(e),n,r??{});return o?this.wrapDocument(o):null}async findOneAndDelete(e,n){let r=await this.requireCollection().findOneAndDelete(this.getSelector(e),n??{});return r?this.wrapDocument(r):null}async findOneAndReplace(e,n,r){let o=await this.requireCollection().findOneAndReplace(this.getSelector(e),n,r??{});return o?this.wrapDocument(o):null}async replaceOne(e,n,r){return await this.requireCollection().replaceOne(this.getSelector(e),n,r)}async distinct(e,n,r){let o=n??{};return r!==void 0?await this.requireCollection().distinct(e,o,r):await this.requireCollection().distinct(e,o)}watch(e,n){return this.requireCollection().watch(e,n)}aggregate(e,n){return this.requireCollection().aggregate(e,n)}bulkWrite(e){return this.requireCollection().bulkWrite(e)}getDatabase(){return this.requireClient().db()}rawCollection(){return this.requireCollection()}async renameFrom(e,n){let r=this.getDatabase();if(!this.collection||!r)throw new Error(`Store ${this.name} is not provisioned`);if((await r.listCollections({name:e}).toArray()).length===0)throw new Error(`Collection ${e} not found`);if((await r.listCollections({name:this.name}).toArray()).length>0)throw new Error(`Collection ${this.name} already exists`);await r.collection(e).rename(this.name,n);}async vectorSearch({field:e,embedding:n,numCandidates:r,limit:o,projection:i,indexName:s}){return this.aggregate([{$vectorSearch:{index:s||e+"VectorSearch",path:e,queryVector:n,numCandidates:r||100,limit:o||10}},{$project:{_id:1,score:{$meta:"vectorSearchScore"},...i}}])}static vectorIndex({field:e,dimensions:n,similarity:r="cosine",indexName:o}){return {type:"vectorSearch",name:o||e+"VectorSearch",definition:{fields:[{type:"vector",path:e,numDimensions:n,similarity:r}]}}}};var cr=z.string.bind(z),lr=z.number.bind(z),dr=z.date.bind(z),ur=z.boolean.bind(z),pr=z.array.bind(z),mr=z.object.bind(z),fr=z.enum.bind(z),d={string:cr,number:lr,date:dr,boolean:ur,array:pr,object:mr,enum:fr,embedding(){return z.array(z.number())},objectId(){return z.instanceof(ObjectId).describe("ObjectId")},userId(){return z.instanceof(ObjectId).describe("UserId")},ref(t){return z.instanceof(ObjectId).describe("Ref")},union:z.union.bind(z),infer(t){return {}}};var W=new v("_modelenceSessions",{schema:{authToken:d.string(),createdAt:d.date(),expiresAt:d.date(),userId:d.userId().nullable()},indexes:[{key:{authToken:1},unique:true},{key:{expiresAt:1},expireAfterSeconds:0},{key:{userId:1}}]});async function Rt(t){let e=t?await W.findOne({authToken:t}):null;return e?{authToken:String(e.authToken),expiresAt:new Date(e.expiresAt),userId:e.userId??null}:await ae()}async function Mt(t,e){await W.updateOne({authToken:t},{$set:{userId:e}});}async function It(t){await W.updateOne({authToken:t},{$set:{userId:null}});}async function Dt(t){await W.deleteMany({userId:t});}async function ae(t=null){let e=randomBytes(32).toString("base64url"),n=Date.now(),r=new Date(n+a.days(7));return await W.insertOne({authToken:e,createdAt:new Date(n),expiresAt:r,userId:t}),{authToken:e,expiresAt:r,userId:t}}async function gr(t){let e=Date.now(),n=new Date(e+a.days(7));await W.updateOne({authToken:t.authToken},{$set:{lastActiveDate:new Date(e),expiresAt:n}});}function xe(t,e){t.cookie("authToken",e,{httpOnly:true,secure:process.env.NODE_ENV==="production",sameSite:"strict",path:"/"});}var Pt=new x("_system.session",{stores:[W],mutations:{init:async function(t,{session:e,user:n}){return {session:e,user:n,configs:b()}},heartbeat:async function(t,{session:e}){e&&await gr(e);}}});var m=new v("_modelenceUsers",{schema:{handle:d.string(),emails:d.array(d.object({address:d.string(),verified:d.boolean()})).optional(),status:d.enum(["active","disabled","deleted"]).optional(),firstName:d.string().optional(),lastName:d.string().optional(),avatarUrl:d.string().optional(),createdAt:d.date(),disabledAt:d.date().optional(),deletedAt:d.date().optional(),roles:d.array(d.string()).optional(),authMethods:d.object({password:d.object({hash:d.string()}).optional(),google:d.object({id:d.string()}).optional(),github:d.object({id:d.string()}).optional()})},indexes:[{key:{handle:1},unique:true,collation:{locale:"en",strength:2}},{key:{"emails.address":1,status:1}},{key:{"authMethods.google.id":1},sparse:true,unique:true},{key:{"authMethods.github.id":1},sparse:true,unique:true}]}),ce=new v("_modelenceDisposableEmailDomains",{schema:{domain:d.string(),addedAt:d.date()},indexes:[{key:{domain:1},unique:true}]}),U=new v("_modelenceEmailVerificationTokens",{schema:{userId:d.objectId(),email:d.string().optional(),token:d.string(),createdAt:d.date(),expiresAt:d.date()},indexes:[{key:{token:1},unique:true},{key:{expiresAt:1},expireAfterSeconds:0}]}),I=new v("_modelenceResetPasswordTokens",{schema:{userId:d.objectId(),email:d.string().optional(),token:d.string(),createdAt:d.date(),expiresAt:d.date()},indexes:[{key:{token:1},unique:true},{key:{expiresAt:1},expireAfterSeconds:0}]});var Nt=new Map,ee={authenticated:null,unauthenticated:null};function Lt(t,e){ee.authenticated=e.authenticated,ee.unauthenticated=e.unauthenticated;for(let[n,r]of Object.entries(t))Nt.set(n,r);}function Ce(){return ee.unauthenticated?[ee.unauthenticated]:[]}function Ut(){return ee.authenticated?[ee.authenticated]:[]}function Ve(t,e){let n=e.find(r=>!yr(t,r));if(n)throw new Error(`Access denied - missing permission: '${n}'`)}function yr(t,e){for(let n of t)if(Nt.get(n)?.permissions?.includes(e))return true;return false}async function D(t){let e=await Rt(t),n=e.userId?await m.findOne({_id:new ObjectId(e.userId),status:{$nin:["deleted","disabled"]}}):null,r=n?{id:n._id.toString(),handle:n.handle,roles:n.roles||[],hasRole:i=>(n.roles||[]).includes(i),requireRole:i=>{if(!(n.roles||[]).includes(i))throw new Error(`Access denied - role '${i}' required`)},firstName:n.firstName??void 0,lastName:n.lastName??void 0,avatarUrl:n.avatarUrl??void 0}:null,o=r?Ut():Ce();return {user:r,session:e,roles:o}}var le=new x("_system",{configSchema:{mongodbUri:{type:"secret",isPublic:false,default:""},mongodbPoolSize:{type:"number",isPublic:false,default:10},"env.type":{type:"string",isPublic:true,default:""},"site.url":{type:"string",isPublic:true,default:""},multiInstance:{type:"boolean",isPublic:false,default:false}}});var $=null;async function $t(){if($)return $;let t=G();if(!t)throw new Error("MongoDB URI is not set");let e=le.getConfig("mongodbPoolSize");$=new MongoClient(t,{driverInfo:{name:"Modelence",version:s.version},ignoreUndefined:true,maxPoolSize:e});try{return await $.connect(),await $.db("admin").command({ping:1}),console.log("Pinged your deployment. You successfully connected to MongoDB!"),$}catch(n){throw console.error(n),$=null,n}}function G(){return le.getConfig("mongodbUri")||void 0}function ve(){return $}var te=class{constructor(e){this.fetch=e.fetch,this.watch=e.watch;}};function Sr(){return typeof window!="object"}function j(){if(!Sr())throw new Error("This function can only be called on the server")}function Ee(t){return t.replace(/<[^>]*>/g,"").replace(/\s+/g," ").trim()}var Te={};function We(t,e){return j(),qt(t),ke("query",t,e)}function jt(t,e){return j(),qt(t),ke("mutation",t,e)}function Ft(t,e){return j(),Ht(t),ke("query",t,e)}function zt(t,e){return j(),Ht(t),ke("mutation",t,e)}function qt(t){if(t.toLowerCase().startsWith("_system."))throw new Error(`Method name cannot start with a reserved prefix: '_system.' (${t})`)}function Ht(t){if(!t.toLowerCase().startsWith("_system."))throw new Error(`System method name must start with a prefix: '_system.' (${t})`)}function ke(t,e,n){if(j(),Te[e])throw new Error(`Method with name '${e}' is already defined.`);let r=typeof n=="function"?n:n.handler,o=typeof n=="function"?[]:n.permissions??[];Te[e]={type:t,name:e,handler:r,permissions:o};}async function Vt(t,e,n){j();let r=Te[t];if(!r)throw new Error(`Method with name '${t}' is not defined.`);let{type:o,handler:i}=r,s=l("method",`method:${t}`,{type:o,args:e}),a;try{Ve(n.roles,r.permissions),a=await i(e,n);}catch(c){throw s.end("error"),c}return s.end(),a}async function Wt(t,e,n){j();let r=Te[t];if(!r)throw new Error(`Method with name '${t}' is not defined.`);let{type:o,handler:i}=r;if(o!=="query")throw new Error("Live methods are only supported for queries");let s=l("method",`method:${t}:live`,{type:o,args:e}),a;try{if(Ve(n.roles,r.permissions),a=await i(e,n),!(a instanceof te))throw new Error(`Live query handler for '${t}' must return a LiveData object with fetch and watch functions. See https://docs.modelence.com/live-queries`)}catch(c){throw s.end("error"),c}return s.end(),a}var de=new Map;function xr(t){let e=de.get(t.id);return e||(e=new Map,de.set(t.id,e)),e}async function Ge(t,e){let n=z.object({subscriptionId:z.string().min(1),method:z.string().min(1),args:z.record(z.unknown()).default({}),authToken:z.string().nullish(),clientInfo:z.object({screenWidth:z.number(),screenHeight:z.number(),windowWidth:z.number(),windowHeight:z.number(),pixelRatio:z.number(),orientation:z.string().nullable()}).optional()}).safeParse(e);if(!n.success){t.emit("liveQueryError",{subscriptionId:null,error:`Invalid payload: ${n.error.message}`});return}let{subscriptionId:r,method:o,args:i,authToken:s,clientInfo:a}=n.data,c=xr(t),l=c.get(r);if(l)if(l.cleanup)try{l.cleanup();}catch(f){console.error("[LiveQuery] Error cleaning up existing subscription:",f);}else l.aborted=true;let p={cleanup:null};c.set(r,p);try{let{session:f,user:u,roles:y}=await D(s??null),g={session:f,user:u,roles:y,clientInfo:a??{screenWidth:0,screenHeight:0,windowWidth:0,windowHeight:0,pixelRatio:1,orientation:null},connectionInfo:{ip:t.handshake.address,userAgent:t.handshake.headers["user-agent"]}},C=await Wt(o,i,g),P=async()=>{let _=a$2(await C.fetch());p.aborted||t.emit("liveQueryData",{subscriptionId:r,data:_,typeMap:b$1(_)});},O=!0,M=!1,k=()=>{p.aborted||!O||M||(O=!1,M=!0,P().catch(_=>{p.aborted||(console.error(`[LiveQuery] Error fetching data for ${o}:`,_),t.emit("liveQueryError",{subscriptionId:r,error:_ instanceof Error?_.message:String(_)}));}).finally(()=>{M=!1,k();}));},H=C.watch({publish:()=>{O=!0,k();}});if(p.aborted){if(H)try{H();}catch(_){console.error("[LiveQuery] Error cleaning up after disconnect during setup:",_);}return}p.cleanup=H||null,k();}catch(f){c.delete(r),console.error(`[LiveQuery] Error in ${o}:`,f),t.emit("liveQueryError",{subscriptionId:r,error:f instanceof Error?f.message:String(f)});}}function Be(t,e){let n=z.object({subscriptionId:z.string().min(1)}).safeParse(e);if(!n.success){console.warn(`[LiveQuery] Invalid unsubscribe payload: ${n.error.message}`);return}let{subscriptionId:r}=n.data,o=de.get(t.id);if(!o)return;let i=o.get(r);if(i){if(i.cleanup)try{i.cleanup();}catch(s){console.error("[LiveQuery] Error in cleanup:",s);}else i.aborted=true;o.delete(r);}}function Ze(t){let e=de.get(t.id);if(e){for(let n of e.values())if(n.cleanup)try{n.cleanup();}catch(r){console.error("[LiveQuery] Error in cleanup on disconnect:",r);}else n.aborted=true;de.delete(t.id);}}var ue=null,Er="_modelenceSocketio",Gt=60;async function Tr({httpServer:t,channels:e}){let n=ve(),r=!!a$1("_system.multiInstance");console.log("Initializing Socket.IO server...");let o=null;if(r&&n){o=n.db().collection(Er);try{await o.createIndex({createdAt:1},{expireAfterSeconds:Gt,background:!0});}catch(i){if(i instanceof Error&&"code"in i&&i.code===85)try{await o.dropIndex("createdAt_1"),await o.createIndex({createdAt:1},{expireAfterSeconds:Gt,background:!0});}catch(s){console.error("Failed to recreate index on MongoDB collection for Socket.IO:",s);}else console.error("Failed to create index on MongoDB collection for Socket.IO:",i);}}ue=new Server(t,{cors:{origin:"*",methods:["GET","POST"]},adapter:o?createAdapter(o):void 0,transports:["websocket"],perMessageDeflate:false}),ue.on("error",i=>{console.error("Socket.IO error:",i);}),ue.use(async(i,s)=>{let a=i.handshake.auth.token;try{i.data=await D(a);}finally{s();}}),ue.on("connection",i=>{i.on("disconnect",()=>{Ze(i);}),i.on("joinChannel",async s=>{let[a]=s.split(":"),c=false;for(let l of e)if(l.category===a){(!l.canAccessChannel||await l.canAccessChannel(i.data))&&(i.join(s),c=true,i.emit("joinedChannel",s));break}c||i.emit("joinError",{channel:s,error:"Access denied"});}),i.on("leaveChannel",s=>{i.leave(s),console.log(`User ${i.id} left channel ${s}`),i.emit("leftChannel",s);}),i.on("subscribeLiveQuery",s=>Ge(i,s)),i.on("unsubscribeLiveQuery",s=>Be(i,s));}),console.log("Socket.IO server initialized");}function kr({category:t,id:e,data:n}){ue?.to(`${t}:${e}`).emit(t,n);}var Bt={init:Tr,broadcast:kr};async function Zt(t){let e=t.toLowerCase().trim().split("@");if(e.length!==2)return false;let n=e[1];return !!await ce.findOne({domain:n})}var Jt={interval:a.days(1),async handler(){let t=await fetch("https://disposable.github.io/disposable-email-domains/domains.txt");if(!t.ok)throw new Error(`HTTP ${t.status}: ${t.statusText}`);let n=(await t.text()).split(`
2
- `).map(i=>i.trim().toLowerCase()).filter(i=>i.length>0),r=new Date,o=500;for(let i=0;i<n.length;i+=o){let s=n.slice(i,i+o);try{await ce.insertMany(s.map(a=>({domain:a,addedAt:r})));}catch(a){a&&typeof a=="object"&&"name"in a&&a.name;}}}};var Oe=3,B=50,Kt=8,Qt=128,Yt=254,Xt=t=>z.string().trim().min(t.min??1,{message:`must be at least ${t.min??1} characters`}).max(t.max,{message:`must be at most ${t.max} characters`}),Je=t=>z.string().trim().max(t.max,{message:`must be at most ${t.max} characters`}).transform(e=>e===""?void 0:e).optional(),Or=z.object({firstName:Je({max:50}),lastName:Je({max:50}),avatarUrl:Je({max:400}),handle:Xt({min:Oe,max:B})}).strict();function Ae(t){let e=Or.partial().safeParse(t);if(!e.success){let n=e.error.issues[0],r=n.path.join("."),o=r?`${r}: ${n.message}`:n.message;throw new Error(o)}return e.data}function _e(t){return z.string().min(Kt,{message:`Password must contain at least ${Kt} characters`}).max(Qt,{message:`Password must be at most ${Qt} characters`}).parse(t)}function F(t){return z.string().max(Yt,{message:`Email must be at most ${Yt} characters`}).email({message:"Invalid email address"}).parse(t).toLowerCase()}function en(t){return Xt({min:Oe,max:B}).parse(t)}function Re(t){return {id:t._id,handle:t.handle,roles:t.roles||[],firstName:t.firstName??void 0,lastName:t.lastName??void 0,avatarUrl:t.avatarUrl??void 0}}async function tn(t){let e=t.slice(0,B);try{if(!await m.findOne({handle:e},{collation:{locale:"en",strength:2}}))return e}catch(o){throw new Error(`Database error while checking handle availability: ${o}`)}let n=51;for(let o=2;o<=n;o++){let i=`_${o}`,s=`${e.slice(0,B-i.length)}${i}`;try{if(!await m.findOne({handle:s},{collation:{locale:"en",strength:2}}))return s}catch(a){throw new Error(`Database error while checking handle "${s}": ${a}`)}}let r=10;for(let o=0;o<r;o++){let i=`_${randomBytes(3).toString("hex")}`,s=`${e.slice(0,B-i.length)}${i}`;try{if(!await m.findOne({handle:s},{collation:{locale:"en",strength:2}}))return s}catch(a){throw new Error(`Database error while checking handle "${s}": ${a}`)}}throw new Error(`Could not generate a unique handle for base "${t}" after exhausting all attempts.`)}async function Z(t,e,{throwOnConflict:n=true}={}){if(t!=null&&String(t).trim()!==""){let o=en(String(t).trim());if(n){if(await m.findOne({handle:o},{collation:{locale:"en",strength:2}}))throw new Error("Handle already taken.");return o}return tn(o)}let r=e.split("@")[0].padEnd(Oe,"_").slice(0,B);return tn(r)}var Ke=Object.freeze({});function nn(t){Ke=Object.freeze(Object.assign({},Ke,t));}function S(){return Ke}var Qe=Object.freeze({});function rn(t){Qe=Object.freeze(Object.assign({},Qe,t));}function E(){return Qe}async function sn(t,{user:e,session:n,connectionInfo:r}){try{if(!n)throw new Error("Session is not initialized");let o=r?.ip;o&&await R({bucket:"signin",type:"ip",value:o});let i=F(t.email),s=z.string().parse(t.password),a=await m.findOne({"emails.address":i,status:{$nin:["deleted","disabled"]}},{collation:{locale:"en",strength:2}}),c=a?.authMethods?.password?.hash;if(!c)throw on();if(!a.emails?.find(f=>f.address.toLowerCase()===i)?.verified&&S()?.provider)throw new Error("Your email address hasn't been verified yet. Please check your inbox for the verification email.");if(!await _r.compare(s,c))throw on();return await Mt(n.authToken,a._id),E().onAfterLogin?.({provider:"email",user:a,session:n,connectionInfo:r}),E().login?.onSuccess?.(a),{user:Re(a)}}catch(o){throw o instanceof Error&&(E().onLoginError?.({provider:"email",error:o,session:n,connectionInfo:r}),E().login?.onError?.(o)),o}}async function an(t,{session:e}){if(!e)throw new Error("Session is not initialized");await It(e.authToken);}function on(){return new Error("Incorrect email/password combination")}async function cn(t,{user:e}){if(!e)throw new Error("Not authenticated");let n=await m.requireById(e.id);return {handle:n.handle,emails:n.emails,authMethods:Object.keys(n.authMethods||{}),firstName:n.firstName??void 0,lastName:n.lastName??void 0,avatarUrl:n.avatarUrl??void 0}}async function ln(t,{user:e}){if(!e)throw new Error("Not authenticated");let n=await m.requireById(e.id),r=Ae(t);if(await E().validateProfileUpdate?.(r),"handle"in r&&r.handle!==void 0&&await m.findOne({handle:r.handle,_id:{$ne:n._id}},{collation:{locale:"en",strength:2}}))throw new Error("Handle already taken.");if(Object.keys(r).length>0){let o={},i={};for(let[a,c]of Object.entries(r))c===void 0?i[a]="":o[a]=c;let s={};Object.keys(o).length>0&&(s.$set=o),Object.keys(i).length>0&&(s.$unset=i);try{await m.updateOne({_id:n._id},s);let a=Object.fromEntries(Object.keys(i).map(c=>[c,void 0]));n={...n,...o,...a};}catch(a){throw a instanceof Error&&"code"in a&&a.code===11e3?new Error("Handle already taken."):a}}return {user:Re(n)}}var Ye=["google","github"];async function dn({provider:t},{user:e}){if(!e)throw new Error("You must be signed in to unlink a provider.");if(typeof t!="string"||!Ye.includes(t))throw new Error(`Invalid provider. Supported providers are: ${Ye.join(", ")}.`);let n=await m.requireById(e.id),r=n.authMethods??{};if(!r[t])throw new Error(`${t} is not linked to your account.`);if(Object.values(r).filter(Boolean).length<=1)throw new Error("Cannot unlink your only authentication method. Please add another method first.");let s=Object.keys(r).filter(l=>l!==t&&r[l]),a=s.length>0?{$or:s.map(l=>({[`authMethods.${l}`]:{$exists:true}}))}:{};if((await m.updateOne({_id:n._id,...a},{$unset:{[`authMethods.${t}`]:""}})).matchedCount===0)throw new Error("Cannot unlink your only authentication method. Please add another method first.")}var me=new v("_modelenceRateLimits",{schema:{bucket:d.string(),type:d.enum(["ip","user","email"]),value:d.string(),windowMs:d.number(),windowStart:d.date(),windowCount:d.number(),prevWindowCount:d.number(),expiresAt:d.date()},indexes:[{key:{bucket:1,type:1,value:1,windowMs:1},unique:true},{key:{expiresAt:1},expireAfterSeconds:0}]});var Xe=[];function un(t){if(Xe.length>0)throw new Error("Duplicate call to initRateLimits - already initialized");Xe=t;}async function R(t){let{bucket:e,type:n,value:r,message:o}=t,i=Xe.filter(a=>a.bucket===e&&a.type===n),s=o?()=>new d$1(o):void 0;for(let a of i)await Mr(a,r,s);}async function Mr(t,e,n){let r=()=>n?n():new d$1(`Rate limit exceeded for ${t.bucket}`),o=await me.findOne({bucket:t.bucket,type:t.type,value:e,windowMs:t.window}),i=Date.now(),s=Math.floor(i/t.window)*t.window,{count:a,modifier:c}=o?Ir(o,s,i):{count:0,modifier:{$setOnInsert:{windowStart:new Date(s),windowCount:1,prevWindowCount:0,expiresAt:new Date(s+t.window+t.window)}}};if(a>=t.limit)throw r();await me.upsertOne({bucket:t.bucket,type:t.type,value:e,windowMs:t.window},c);}function Ir(t,e,n){let r=e-t.windowMs;if(t.windowStart.getTime()===e){let o=t.windowCount,i=t.prevWindowCount,s=1-(n-e)/t.windowMs;return {count:Math.round(o+i*s),modifier:{$inc:{windowCount:1},$setOnInsert:{windowStart:new Date(e),prevWindowCount:0,expiresAt:new Date(e+t.windowMs+t.windowMs)}}}}if(t.windowStart.getTime()===r){let o=1-(n-e)/t.windowMs;return {count:Math.round(t.windowCount*o),modifier:{$set:{windowStart:new Date(e),windowCount:1,prevWindowCount:t.windowCount,expiresAt:new Date(e+t.windowMs+t.windowMs)}}}}return {count:0,modifier:{$set:{windowStart:new Date(e),windowCount:1,prevWindowCount:0,expiresAt:new Date(e+t.windowMs+t.windowMs)}}}}function pn({name:t,email:e,verificationUrl:n}){return `
1
+ import {a as a$2,b as b$1}from'./chunk-5M6FUMUK.js';import {d as d$1,a as a$3}from'./chunk-C3UESBRX.js';import {a}from'./chunk-DO5TZLF5.js';import {a as a$1,b,f,e,g,c,h,k,d as d$2,j as j$1,i,l,m as m$1}from'./chunk-3SPXJEOR.js';export{a as getConfig}from'./chunk-3SPXJEOR.js';import {s}from'./chunk-S7G3G6KJ.js';import Xr from'dotenv';import zo from'fs/promises';import Bn from'os';import ft from'path';import {Server}from'socket.io';import {createAdapter}from'@socket.io/mongo-adapter';import {MongoError,ObjectId,MongoClient,MongoServerError}from'mongodb';export{ObjectId}from'mongodb';import {randomBytes,randomUUID}from'crypto';import {isDeepStrictEqual}from'util';import q,{z as z$1}from'zod';import Mn from'bcrypt';import {createServer,defineConfig,loadConfigFromFile,mergeConfig}from'vite';import co from'@vitejs/plugin-react';import lo from'fs';import H,{Router}from'express';import Do from'cookie-parser';import Po from'http';var x=class{constructor(e,{stores:r=[],queries:n={},mutations:o={},routes:i=[],cronJobs:s={},configSchema:a={},rateLimits:c=[],channels:l=[]}={}){this.name=e,this.stores=r,this.queries=n,this.mutations=o,this.routes=i,this.cronJobs=s,this.configSchema=a,this.rateLimits=c,this.channels=l;}getConfig(e){return a$1(`${this.name}.${e}`)}};function U(t){let e=t._def;if(e.typeName==="ZodString")return {type:"string"};if(e.typeName==="ZodNumber")return {type:"number"};if(e.typeName==="ZodBoolean")return {type:"boolean"};if(e.typeName==="ZodDate")return {type:"date"};if(e.typeName==="ZodArray")return {type:"array",items:U(e.type)};if(e.typeName==="ZodObject"){let n=e.shape(),o={};for(let[i,s]of Object.entries(n))o[i]=U(s);return {type:"object",items:o}}if(e.typeName==="ZodOptional")return {...U(e.innerType),optional:true};if(e.typeName==="ZodNullable")return {...U(e.innerType),optional:true};if(e.typeName==="ZodEnum")return {type:"enum",items:e.values};if(e.typeName==="ZodUnion")return {type:"union",items:e.options.map(U)};if(e.typeName==="ZodEffects"){let r=e;return r.description?{type:"custom",typeName:r.description}:U(r.schema)}return {type:"custom",typeName:e.typeName}}function Ce(t){let e={};for(let[r,n]of Object.entries(t))Array.isArray(n)?e[r]=n.map(o=>typeof o=="object"&&"_def"in o?U(o):Ce(o)):typeof n=="object"&&"_def"in n?e[r]=U(n):e[r]=Ce(n);return e}var nn=["background","bits","bucketSize","collation","default_language","expireAfterSeconds","hidden","language_override","max","min","partialFilterExpression","sparse","storageEngine","textIndexVersion","unique","weights","wildcardProjection","2dsphereIndexVersion"],qe=t=>typeof t=="object"&&t!==null&&!Array.isArray(t),on=t=>t.startsWith("_modelence_"),He=t=>{let e={};for(let r of nn){let n=t[r];n!==void 0&&(e[r]=n);}return e},sn=(t,e)=>{if(!qe(t)||!qe(e))return false;let r=Object.entries(t),n=Object.entries(e);return r.length!==n.length?false:r.every(([o,i],s)=>{let[a,c]=n[s]||[];return o===a&&isDeepStrictEqual(i,c)})},Mt=(t,e)=>sn(t.key,e.key)?isDeepStrictEqual(He(t),He(e)):false,Fe=t=>qe(t)?Object.entries(t).map(([e,r])=>`${e}:${JSON.stringify(r)}`).join("|"):null,an=async t=>{try{return await t.listIndexes().toArray()}catch(e){if(e instanceof MongoError&&e.code===26)return [];throw e}},cn=t=>Object.entries(t).map(([e,r])=>`${e}_${r}`).join("_"),ln=t=>{if(t.name){let r=t.name.startsWith("_modelence_")?t.name:`_modelence_${t.name}`;return {...t,name:r}}let e=cn(t.key);return {...t,name:`_modelence_${e}`}},T=class t{constructor(e,r){this._chainParent=null;this._chainChild=null;this.name=e,this.schema=r.schema,this.methods=r.methods,this.indexes=r.indexes.map(ln),this.searchIndexes=r.searchIndexes||[],this.indexCreationMode=r.indexCreationMode??"background";}getName(){return this.name}getIndexCreationMode(){return this.indexCreationMode}getSchema(){return this.schema}getSerializedSchema(){return Ce(this.schema)}getIndexes(){return this.indexes}getSearchIndexes(){return this.searchIndexes}getChainTail(){let e=this;for(;e._chainChild;)e=e._chainChild;return e}getChainRoot(){let e=this;for(;e._chainParent;)e=e._chainParent;return e}extend(e){let r=this.getChainTail();if(this.client||r.client)throw new Error(`Store.extend() must be called before startApp(). Store '${this.name}' has already been initialized and cannot be extended.`);let n={...r.schema,...e.schema||{}},o=[...r.indexes,...e.indexes||[]],i=[...r.searchIndexes,...e.searchIndexes||[]],s={...r.methods||{},...e.methods||{}},a=new t(this.name,{schema:n,methods:s,indexes:o,searchIndexes:i,indexCreationMode:e.indexCreationMode??r.indexCreationMode});return r._chainChild=a,a._chainParent=r,a}init(e){if(this.collection)throw new Error(`Collection ${this.name} is already initialized`);this.client=e,this.collection=this.client.db().collection(this.name);}async createIndexes(e="full"){let r=this.requireCollection(),n=e!=="create-only",o=e!=="drop-only",i=await an(r),s=new Map,a=new Map,c=new Set,l=u=>{s.set(u.name,u);let y=Fe(u.key);if(!y)return;let g=a.get(y);g?g.add(u.name):a.set(y,new Set([u.name]));},p=u=>{let y=s.get(u);if(!y)return;s.delete(u);let g=Fe(y.key);if(!g)return;let E=a.get(g);E&&(E.delete(u),E.size===0&&a.delete(g));};for(let u of i)typeof u.name=="string"&&l({...u,name:u.name});let f=async u=>{if(!(u==="_id_"||c.has(u))){try{await r.dropIndex(u);}catch(y){if(!(y instanceof MongoError&&y.code===27))throw y}c.add(u),p(u);}};if(n){let u=new Set(this.indexes.map(g=>g.name).filter(g=>typeof g=="string")),y=[...s.values()].filter(g=>on(g.name)&&!u.has(g.name));for(let g of y)await f(g.name);}if(this.indexes.length>0)for(let u of this.indexes){if(!u.name)continue;let y=false,g=s.get(u.name);g&&!Mt(g,u)&&(n?await f(g.name):y=true);let E=Fe(u.key);if(E){let I=[...a.get(E)||[]];for(let A of I)A!==u.name&&(n?await f(A):y=true);}let N=s.get(u.name);!(!!N&&Mt(N,u))&&o&&!y&&(await r.createIndexes([u]),l({name:u.name,key:u.key,...He(u)}));}if(o&&this.searchIndexes.length>0)for(let u of this.searchIndexes)try{await r.createSearchIndexes([u]);}catch(y){if(y instanceof MongoError&&y.code===68&&u.name)await r.dropSearchIndex(u.name),await r.createSearchIndexes([u]);else throw y}}wrapDocument(e){return this.methods?Object.create(null,Object.getOwnPropertyDescriptors({...e,...this.methods})):e}getSelector(e){return typeof e=="string"?{_id:new ObjectId(e)}:e instanceof ObjectId?{_id:e}:e}requireCollection(){if(!this.collection)throw new Error(`Collection ${this.name} is not provisioned`);return this.collection}requireClient(){if(!this.client)throw new Error("Database is not connected");return this.client}async findOne(e,r){let n=await this.requireCollection().findOne(e,r);return n?this.wrapDocument(n):null}async requireOne(e,r,n){let o=await this.findOne(e,r);if(!o)throw n?n():new Error(`Record not found in ${this.name}`);return o}find(e,r){let n=this.requireCollection().find(e,r?.projection?{projection:r.projection}:void 0);return r?.sort&&n.sort(r.sort),r?.limit&&n.limit(r.limit),r?.skip&&n.skip(r.skip),n}async findById(e){let r=typeof e=="string"?{_id:new ObjectId(e)}:{_id:e};return await this.findOne(r)}async requireById(e,r){let n=await this.findById(e);if(!n)throw r?r():new Error(`Record with id ${e} not found in ${this.name}`);return n}countDocuments(e){return this.requireCollection().countDocuments(e)}async fetch(e,r){return (await this.find(e,r).toArray()).map(this.wrapDocument.bind(this))}async insertOne(e,r){return await this.requireCollection().insertOne(e,r)}async insertMany(e,r){return await this.requireCollection().insertMany(e,r)}async updateOne(e,r,n){return await this.requireCollection().updateOne(this.getSelector(e),r,n)}async upsertOne(e,r,n){return await this.requireCollection().updateOne(this.getSelector(e),r,{upsert:true,...n})}async updateMany(e,r,n){return await this.requireCollection().updateMany(e,r,n)}async upsertMany(e,r,n){return await this.requireCollection().updateMany(e,r,{upsert:true,...n})}async deleteOne(e,r){return await this.requireCollection().deleteOne(e,r)}async deleteMany(e,r){return await this.requireCollection().deleteMany(e,r)}async findOneAndUpdate(e,r,n){let o=await this.requireCollection().findOneAndUpdate(this.getSelector(e),r,n??{});return o?this.wrapDocument(o):null}async findOneAndDelete(e,r){let n=await this.requireCollection().findOneAndDelete(this.getSelector(e),r??{});return n?this.wrapDocument(n):null}async findOneAndReplace(e,r,n){let o=await this.requireCollection().findOneAndReplace(this.getSelector(e),r,n??{});return o?this.wrapDocument(o):null}async replaceOne(e,r,n){return await this.requireCollection().replaceOne(this.getSelector(e),r,n)}async distinct(e,r,n){let o=r??{};return n!==void 0?await this.requireCollection().distinct(e,o,n):await this.requireCollection().distinct(e,o)}watch(e,r){return this.requireCollection().watch(e,r)}aggregate(e,r){return this.requireCollection().aggregate(e,r)}bulkWrite(e){return this.requireCollection().bulkWrite(e)}getDatabase(){return this.requireClient().db()}rawCollection(){return this.requireCollection()}async renameFrom(e,r){let n=this.getDatabase();if(!this.collection||!n)throw new Error(`Store ${this.name} is not provisioned`);if((await n.listCollections({name:e}).toArray()).length===0)throw new Error(`Collection ${e} not found`);if((await n.listCollections({name:this.name}).toArray()).length>0)throw new Error(`Collection ${this.name} already exists`);await n.collection(e).rename(this.name,r);}async vectorSearch({field:e,embedding:r,numCandidates:n,limit:o,projection:i,indexName:s}){return this.aggregate([{$vectorSearch:{index:s||e+"VectorSearch",path:e,queryVector:r,numCandidates:n||100,limit:o||10}},{$project:{_id:1,score:{$meta:"vectorSearchScore"},...i}}])}static vectorIndex({field:e,dimensions:r,similarity:n="cosine",indexName:o}){return {type:"vectorSearch",name:o||e+"VectorSearch",definition:{fields:[{type:"vector",path:e,numDimensions:r,similarity:n}]}}}};var dn=z$1.string.bind(z$1),un=z$1.number.bind(z$1),pn=z$1.date.bind(z$1),mn=z$1.boolean.bind(z$1),fn=z$1.array.bind(z$1),hn=z$1.object.bind(z$1),gn=z$1.enum.bind(z$1),d={string:dn,number:un,date:pn,boolean:mn,array:fn,object:hn,enum:gn,embedding(){return z$1.array(z$1.number())},objectId(){return z$1.instanceof(ObjectId).describe("ObjectId")},userId(){return z$1.instanceof(ObjectId).describe("UserId")},ref(t){return z$1.instanceof(ObjectId).describe("Ref")},union:z$1.union.bind(z$1),infer(t){return {}}};var G=new T("_modelenceSessions",{schema:{authToken:d.string(),createdAt:d.date(),expiresAt:d.date(),userId:d.userId().nullable()},indexes:[{key:{authToken:1},unique:true},{key:{expiresAt:1},expireAfterSeconds:0},{key:{userId:1}}]});async function Dt(t){let e=t?await G.findOne({authToken:t}):null;return e?{authToken:String(e.authToken),expiresAt:new Date(e.expiresAt),userId:e.userId??null}:await ce()}async function Pt(t,e){await G.updateOne({authToken:t},{$set:{userId:e}});}async function Nt(t){await G.updateOne({authToken:t},{$set:{userId:null}});}async function Lt(t){await G.deleteMany({userId:t});}async function ce(t=null){let e=randomBytes(32).toString("base64url"),r=Date.now(),n=new Date(r+a.days(7));return await G.insertOne({authToken:e,createdAt:new Date(r),expiresAt:n,userId:t}),{authToken:e,expiresAt:n,userId:t}}async function wn(t){let e=Date.now(),r=new Date(e+a.days(7));await G.updateOne({authToken:t.authToken},{$set:{lastActiveDate:new Date(e),expiresAt:r}});}function xe(t,e){t.cookie("authToken",e,{httpOnly:true,secure:process.env.NODE_ENV==="production",sameSite:"strict",path:"/"});}var Ut=new x("_system.session",{stores:[G],mutations:{init:async function(t,{session:e,user:r}){return {session:e,user:r,configs:b()}},heartbeat:async function(t,{session:e}){e&&await wn(e);}}});var m=new T("_modelenceUsers",{schema:{handle:d.string(),emails:d.array(d.object({address:d.string(),verified:d.boolean()})).optional(),status:d.enum(["active","disabled","deleted"]).optional(),firstName:d.string().optional(),lastName:d.string().optional(),avatarUrl:d.string().optional(),createdAt:d.date(),disabledAt:d.date().optional(),deletedAt:d.date().optional(),roles:d.array(d.string()).optional(),authMethods:d.object({password:d.object({hash:d.string()}).optional(),google:d.object({id:d.string()}).optional(),github:d.object({id:d.string()}).optional()})},indexes:[{key:{handle:1},unique:true,collation:{locale:"en",strength:2}},{key:{"emails.address":1,status:1}},{key:{"authMethods.google.id":1},sparse:true,unique:true},{key:{"authMethods.github.id":1},sparse:true,unique:true}]}),le=new T("_modelenceDisposableEmailDomains",{schema:{domain:d.string(),addedAt:d.date()},indexes:[{key:{domain:1},unique:true}]}),$=new T("_modelenceEmailVerificationTokens",{schema:{userId:d.objectId(),email:d.string().optional(),token:d.string(),createdAt:d.date(),expiresAt:d.date()},indexes:[{key:{token:1},unique:true},{key:{expiresAt:1},expireAfterSeconds:0}]}),D=new T("_modelenceResetPasswordTokens",{schema:{userId:d.objectId(),email:d.string().optional(),token:d.string(),createdAt:d.date(),expiresAt:d.date()},indexes:[{key:{token:1},unique:true},{key:{expiresAt:1},expireAfterSeconds:0}]});var $t=new Map,te={authenticated:null,unauthenticated:null};function jt(t,e){te.authenticated=e.authenticated,te.unauthenticated=e.unauthenticated;for(let[r,n]of Object.entries(t))$t.set(r,n);}function ve(){return te.unauthenticated?[te.unauthenticated]:[]}function Ft(){return te.authenticated?[te.authenticated]:[]}function We(t,e){let r=e.find(n=>!bn(t,n));if(r)throw new Error(`Access denied - missing permission: '${r}'`)}function bn(t,e){for(let r of t)if($t.get(r)?.permissions?.includes(e))return true;return false}async function P(t){let e=await Dt(t),r=e.userId?await m.findOne({_id:new ObjectId(e.userId),status:{$nin:["deleted","disabled"]}}):null,n=r?{id:r._id.toString(),handle:r.handle,roles:r.roles||[],hasRole:i=>(r.roles||[]).includes(i),requireRole:i=>{if(!(r.roles||[]).includes(i))throw new Error(`Access denied - role '${i}' required`)},firstName:r.firstName??void 0,lastName:r.lastName??void 0,avatarUrl:r.avatarUrl??void 0}:null,o=n?Ft():ve();return {user:n,session:e,roles:o}}var de=new x("_system",{configSchema:{mongodbUri:{type:"secret",isPublic:false,default:""},mongodbPoolSize:{type:"number",isPublic:false,default:10},"env.type":{type:"string",isPublic:true,default:""},"site.url":{type:"string",isPublic:true,default:""},multiInstance:{type:"boolean",isPublic:false,default:false}}});var j=null;async function zt(){if(j)return j;let t=B();if(!t)throw new Error("MongoDB URI is not set");let e=de.getConfig("mongodbPoolSize");j=new MongoClient(t,{driverInfo:{name:"Modelence",version:s.version},ignoreUndefined:true,maxPoolSize:e});try{return await j.connect(),await j.db("admin").command({ping:1}),console.log("Pinged your deployment. You successfully connected to MongoDB!"),j}catch(r){throw console.error(r),j=null,r}}function B(){return de.getConfig("mongodbUri")||void 0}function Ee(){return j}var re=class{constructor(e){this.fetch=e.fetch,this.watch=e.watch;}};function xn(){return typeof window!="object"}function F(){if(!xn())throw new Error("This function can only be called on the server")}function Te(t){return t.replace(/<[^>]*>/g,"").replace(/\s+/g," ").trim()}var ke={};function Ge(t,e){return F(),Wt(t),Ae("query",t,e)}function qt(t,e){return F(),Wt(t),Ae("mutation",t,e)}function Ht(t,e){return F(),Gt(t),Ae("query",t,e)}function Vt(t,e){return F(),Gt(t),Ae("mutation",t,e)}function Wt(t){if(t.toLowerCase().startsWith("_system."))throw new Error(`Method name cannot start with a reserved prefix: '_system.' (${t})`)}function Gt(t){if(!t.toLowerCase().startsWith("_system."))throw new Error(`System method name must start with a prefix: '_system.' (${t})`)}function Ae(t,e,r){if(F(),ke[e])throw new Error(`Method with name '${e}' is already defined.`);let n=typeof r=="function"?r:r.handler,o=typeof r=="function"?[]:r.permissions??[];ke[e]={type:t,name:e,handler:n,permissions:o};}async function Bt(t,e,r){F();let n=ke[t];if(!n)throw new Error(`Method with name '${t}' is not defined.`);let{type:o,handler:i}=n,s=l("method",`method:${t}`,{type:o,args:e}),a;try{We(r.roles,n.permissions),a=await i(e,r);}catch(c){throw s.end("error"),c}return s.end(),a}async function Zt(t,e,r){F();let n=ke[t];if(!n)throw new Error(`Method with name '${t}' is not defined.`);let{type:o,handler:i}=n;if(o!=="query")throw new Error("Live methods are only supported for queries");let s=l("method",`method:${t}:live`,{type:o,args:e}),a;try{if(We(r.roles,n.permissions),a=await i(e,r),!(a instanceof re))throw new Error(`Live query handler for '${t}' must return a LiveData object with fetch and watch functions. See https://docs.modelence.com/live-queries`)}catch(c){throw s.end("error"),c}return s.end(),a}var ue=new Map;function vn(t){let e=ue.get(t.id);return e||(e=new Map,ue.set(t.id,e)),e}async function Be(t,e){let r=z$1.object({subscriptionId:z$1.string().min(1),method:z$1.string().min(1),args:z$1.record(z$1.unknown()).default({}),authToken:z$1.string().nullish(),clientInfo:z$1.object({screenWidth:z$1.number(),screenHeight:z$1.number(),windowWidth:z$1.number(),windowHeight:z$1.number(),pixelRatio:z$1.number(),orientation:z$1.string().nullable()}).optional()}).safeParse(e);if(!r.success){t.emit("liveQueryError",{subscriptionId:null,error:`Invalid payload: ${r.error.message}`});return}let{subscriptionId:n,method:o,args:i,authToken:s,clientInfo:a}=r.data,c=vn(t),l=c.get(n);if(l)if(l.cleanup)try{l.cleanup();}catch(f){console.error("[LiveQuery] Error cleaning up existing subscription:",f);}else l.aborted=true;let p={cleanup:null};c.set(n,p);try{let{session:f,user:u,roles:y}=await P(s??null),g={session:f,user:u,roles:y,clientInfo:a??{screenWidth:0,screenHeight:0,windowWidth:0,windowHeight:0,pixelRatio:1,orientation:null},connectionInfo:{ip:t.handshake.address,userAgent:t.handshake.headers["user-agent"]}},E=await Zt(o,i,g),N=async()=>{let _=a$2(await E.fetch());p.aborted||t.emit("liveQueryData",{subscriptionId:n,data:_,typeMap:b$1(_)});},O=!0,I=!1,A=()=>{p.aborted||!O||I||(O=!1,I=!0,N().catch(_=>{p.aborted||(console.error(`[LiveQuery] Error fetching data for ${o}:`,_),t.emit("liveQueryError",{subscriptionId:n,error:_ instanceof Error?_.message:String(_)}));}).finally(()=>{I=!1,A();}));},V=E.watch({publish:()=>{O=!0,A();}});if(p.aborted){if(V)try{V();}catch(_){console.error("[LiveQuery] Error cleaning up after disconnect during setup:",_);}return}p.cleanup=V||null,A();}catch(f){c.delete(n),console.error(`[LiveQuery] Error in ${o}:`,f),t.emit("liveQueryError",{subscriptionId:n,error:f instanceof Error?f.message:String(f)});}}function Ze(t,e){let r=z$1.object({subscriptionId:z$1.string().min(1)}).safeParse(e);if(!r.success){console.warn(`[LiveQuery] Invalid unsubscribe payload: ${r.error.message}`);return}let{subscriptionId:n}=r.data,o=ue.get(t.id);if(!o)return;let i=o.get(n);if(i){if(i.cleanup)try{i.cleanup();}catch(s){console.error("[LiveQuery] Error in cleanup:",s);}else i.aborted=true;o.delete(n);}}function Je(t){let e=ue.get(t.id);if(e){for(let r of e.values())if(r.cleanup)try{r.cleanup();}catch(n){console.error("[LiveQuery] Error in cleanup on disconnect:",n);}else r.aborted=true;ue.delete(t.id);}}var pe=null,kn="_modelenceSocketio",Jt=60;async function An({httpServer:t,channels:e}){let r=Ee(),n=!!a$1("_system.multiInstance");console.log("Initializing Socket.IO server...");let o=null;if(n&&r){o=r.db().collection(kn);try{await o.createIndex({createdAt:1},{expireAfterSeconds:Jt,background:!0});}catch(i){if(i instanceof Error&&"code"in i&&i.code===85)try{await o.dropIndex("createdAt_1"),await o.createIndex({createdAt:1},{expireAfterSeconds:Jt,background:!0});}catch(s){console.error("Failed to recreate index on MongoDB collection for Socket.IO:",s);}else console.error("Failed to create index on MongoDB collection for Socket.IO:",i);}}pe=new Server(t,{cors:{origin:"*",methods:["GET","POST"]},adapter:o?createAdapter(o):void 0,transports:["websocket"],perMessageDeflate:false}),pe.on("error",i=>{console.error("Socket.IO error:",i);}),pe.use(async(i,s)=>{let a=i.handshake.auth.token;try{i.data=await P(a);}finally{s();}}),pe.on("connection",i=>{i.on("disconnect",()=>{Je(i);}),i.on("joinChannel",async s=>{let[a]=s.split(":"),c=false;for(let l of e)if(l.category===a){(!l.canAccessChannel||await l.canAccessChannel(i.data))&&(i.join(s),c=true,i.emit("joinedChannel",s));break}c||i.emit("joinError",{channel:s,error:"Access denied"});}),i.on("leaveChannel",s=>{i.leave(s),console.log(`User ${i.id} left channel ${s}`),i.emit("leftChannel",s);}),i.on("subscribeLiveQuery",s=>Be(i,s)),i.on("unsubscribeLiveQuery",s=>Ze(i,s));}),console.log("Socket.IO server initialized");}function On({category:t,id:e,data:r}){pe?.to(`${t}:${e}`).emit(t,r);}var Kt={init:An,broadcast:On};async function Qt(t){let e=t.toLowerCase().trim().split("@");if(e.length!==2)return false;let r=e[1];return !!await le.findOne({domain:r})}var Yt={interval:a.days(1),async handler(){let t=await fetch("https://disposable.github.io/disposable-email-domains/domains.txt");if(!t.ok)throw new Error(`HTTP ${t.status}: ${t.statusText}`);let r=(await t.text()).split(`
2
+ `).map(i=>i.trim().toLowerCase()).filter(i=>i.length>0),n=new Date,o=500;for(let i=0;i<r.length;i+=o){let s=r.slice(i,i+o);try{await le.insertMany(s.map(a=>({domain:a,addedAt:n})));}catch(a){a&&typeof a=="object"&&"name"in a&&a.name;}}}};var Oe=3,Z=50,Xt=8,er=128,tr=254,rr=t=>z$1.string().trim().min(t.min??1,{message:`must be at least ${t.min??1} characters`}).max(t.max,{message:`must be at most ${t.max} characters`}),Ke=t=>z$1.string().trim().max(t.max,{message:`must be at most ${t.max} characters`}).transform(e=>e===""?void 0:e).optional(),Rn=z$1.object({firstName:Ke({max:50}),lastName:Ke({max:50}),avatarUrl:Ke({max:400}),handle:rr({min:Oe,max:Z})}).strict();function Re(t){let e=Rn.partial().safeParse(t);if(!e.success){let r=e.error.issues[0],n=r.path.join("."),o=n?`${n}: ${r.message}`:r.message;throw new Error(o)}return e.data}function _e(t){return z$1.string().min(Xt,{message:`Password must contain at least ${Xt} characters`}).max(er,{message:`Password must be at most ${er} characters`}).parse(t)}function z(t){return z$1.string().max(tr,{message:`Email must be at most ${tr} characters`}).email({message:"Invalid email address"}).parse(t).toLowerCase()}function nr(t){return rr({min:Oe,max:Z}).parse(t)}function Me(t){return {id:t._id,handle:t.handle,roles:t.roles||[],firstName:t.firstName??void 0,lastName:t.lastName??void 0,avatarUrl:t.avatarUrl??void 0}}async function or(t){let e=t.slice(0,Z);try{if(!await m.findOne({handle:e},{collation:{locale:"en",strength:2}}))return e}catch(o){throw new Error(`Database error while checking handle availability: ${o}`)}let r=51;for(let o=2;o<=r;o++){let i=`_${o}`,s=`${e.slice(0,Z-i.length)}${i}`;try{if(!await m.findOne({handle:s},{collation:{locale:"en",strength:2}}))return s}catch(a){throw new Error(`Database error while checking handle "${s}": ${a}`)}}let n=10;for(let o=0;o<n;o++){let i=`_${randomBytes(3).toString("hex")}`,s=`${e.slice(0,Z-i.length)}${i}`;try{if(!await m.findOne({handle:s},{collation:{locale:"en",strength:2}}))return s}catch(a){throw new Error(`Database error while checking handle "${s}": ${a}`)}}throw new Error(`Could not generate a unique handle for base "${t}" after exhausting all attempts.`)}async function J(t,e,{throwOnConflict:r=true}={}){if(t!=null&&String(t).trim()!==""){let o=nr(String(t).trim());if(r){if(await m.findOne({handle:o},{collation:{locale:"en",strength:2}}))throw new Error("Handle already taken.");return o}return or(o)}let n=e.split("@")[0].padEnd(Oe,"_").slice(0,Z);return or(n)}var Qe=Object.freeze({});function ir(t){Qe=Object.freeze(Object.assign({},Qe,t));}function C(){return Qe}var Ye=Object.freeze({});function sr(t){Ye=Object.freeze(Object.assign({},Ye,t));}function v(){return Ye}async function cr(t,{user:e,session:r,connectionInfo:n}){try{if(!r)throw new Error("Session is not initialized");let o=n?.ip;o&&await M({bucket:"signin",type:"ip",value:o});let i=z(t.email),s=z$1.string().parse(t.password),a=await m.findOne({"emails.address":i,status:{$nin:["deleted","disabled"]}},{collation:{locale:"en",strength:2}}),c=a?.authMethods?.password?.hash;if(!c)throw ar();if(!a.emails?.find(f=>f.address.toLowerCase()===i)?.verified&&C()?.provider)throw new Error("Your email address hasn't been verified yet. Please check your inbox for the verification email.");if(!await Mn.compare(s,c))throw ar();return await Pt(r.authToken,a._id),v().onAfterLogin?.({provider:"email",user:a,session:r,connectionInfo:n}),v().login?.onSuccess?.(a),{user:Me(a)}}catch(o){throw o instanceof Error&&(v().onLoginError?.({provider:"email",error:o,session:r,connectionInfo:n}),v().login?.onError?.(o)),o}}async function lr(t,{session:e}){if(!e)throw new Error("Session is not initialized");await Nt(e.authToken);}function ar(){return new Error("Incorrect email/password combination")}async function dr(t,{user:e}){if(!e)throw new Error("Not authenticated");let r=await m.requireById(e.id);return {handle:r.handle,emails:r.emails,authMethods:Object.keys(r.authMethods||{}),firstName:r.firstName??void 0,lastName:r.lastName??void 0,avatarUrl:r.avatarUrl??void 0}}async function ur(t,{user:e}){if(!e)throw new Error("Not authenticated");let r=await m.requireById(e.id),n=Re(t);if(await v().validateProfileUpdate?.(n),"handle"in n&&n.handle!==void 0&&await m.findOne({handle:n.handle,_id:{$ne:r._id}},{collation:{locale:"en",strength:2}}))throw new Error("Handle already taken.");if(Object.keys(n).length>0){let o={},i={};for(let[a,c]of Object.entries(n))c===void 0?i[a]="":o[a]=c;let s={};Object.keys(o).length>0&&(s.$set=o),Object.keys(i).length>0&&(s.$unset=i);try{await m.updateOne({_id:r._id},s);let a=Object.fromEntries(Object.keys(i).map(c=>[c,void 0]));r={...r,...o,...a};}catch(a){throw a instanceof Error&&"code"in a&&a.code===11e3?new Error("Handle already taken."):a}}return {user:Me(r)}}var Xe=["google","github"];async function pr({provider:t},{user:e}){if(!e)throw new Error("You must be signed in to unlink a provider.");if(typeof t!="string"||!Xe.includes(t))throw new Error(`Invalid provider. Supported providers are: ${Xe.join(", ")}.`);let r=await m.requireById(e.id),n=r.authMethods??{};if(!n[t])throw new Error(`${t} is not linked to your account.`);if(Object.values(n).filter(Boolean).length<=1)throw new Error("Cannot unlink your only authentication method. Please add another method first.");let s=Object.keys(n).filter(l=>l!==t&&n[l]),a=s.length>0?{$or:s.map(l=>({[`authMethods.${l}`]:{$exists:true}}))}:{};if((await m.updateOne({_id:r._id,...a},{$unset:{[`authMethods.${t}`]:""}})).matchedCount===0)throw new Error("Cannot unlink your only authentication method. Please add another method first.")}var fe=new T("_modelenceRateLimits",{schema:{bucket:d.string(),type:d.enum(["ip","user","email"]),value:d.string(),windowMs:d.number(),windowStart:d.date(),windowCount:d.number(),prevWindowCount:d.number(),expiresAt:d.date()},indexes:[{key:{bucket:1,type:1,value:1,windowMs:1},unique:true},{key:{expiresAt:1},expireAfterSeconds:0}]});var et=[];function mr(t){if(et.length>0)throw new Error("Duplicate call to initRateLimits - already initialized");et=t;}async function M(t){let{bucket:e,type:r,value:n,message:o}=t,i=et.filter(a=>a.bucket===e&&a.type===r),s=o?()=>new d$1(o):void 0;for(let a of i)await Dn(a,n,s);}async function Dn(t,e,r){let n=()=>r?r():new d$1(`Rate limit exceeded for ${t.bucket}`),o=await fe.findOne({bucket:t.bucket,type:t.type,value:e,windowMs:t.window}),i=Date.now(),s=Math.floor(i/t.window)*t.window,{count:a,modifier:c}=o?Pn(o,s,i):{count:0,modifier:{$setOnInsert:{windowStart:new Date(s),windowCount:1,prevWindowCount:0,expiresAt:new Date(s+t.window+t.window)}}};if(a>=t.limit)throw n();await fe.upsertOne({bucket:t.bucket,type:t.type,value:e,windowMs:t.window},c);}function Pn(t,e,r){let n=e-t.windowMs;if(t.windowStart.getTime()===e){let o=t.windowCount,i=t.prevWindowCount,s=1-(r-e)/t.windowMs;return {count:Math.round(o+i*s),modifier:{$inc:{windowCount:1},$setOnInsert:{windowStart:new Date(e),prevWindowCount:0,expiresAt:new Date(e+t.windowMs+t.windowMs)}}}}if(t.windowStart.getTime()===n){let o=1-(r-e)/t.windowMs;return {count:Math.round(t.windowCount*o),modifier:{$set:{windowStart:new Date(e),windowCount:1,prevWindowCount:t.windowCount,expiresAt:new Date(e+t.windowMs+t.windowMs)}}}}return {count:0,modifier:{$set:{windowStart:new Date(e),windowCount:1,prevWindowCount:0,expiresAt:new Date(e+t.windowMs+t.windowMs)}}}}function fr({name:t,email:e,verificationUrl:r}){return `
3
3
  <p>Hi${t?` ${t}`:""},</p>
4
4
  <p>Please verify your email address ${e} by clicking the link below:</p>
5
- <p><a href="${n}">${n}</a></p>
5
+ <p><a href="${r}">${r}</a></p>
6
6
  <p>If you did not request this, please ignore this email.</p>
7
- `}async function Nr(t){let e=await U.findOne({token:t,expiresAt:{$gt:new Date}});if(!e)throw new Error("Invalid or expired verification token");if(!await m.findOne({_id:e.userId,status:{$nin:["deleted","disabled"]}}))throw new Error("User not found");let r=e.email;if(!r)throw new Error("Email not found in token");let o=await m.findOneAndUpdate({_id:e.userId,status:{$nin:["deleted","disabled"]},"emails.address":r,"emails.verified":{$ne:true}},{$set:{"emails.$.verified":true}},{returnDocument:"after"});if(!o)throw await m.findOne({_id:e.userId,"emails.address":r})?new Error("Email is already verified"):new Error("Email address not found for this user");return await U.deleteOne({_id:e._id}),{userDoc:o,email:r}}async function mn(t){let e=a$1("_system.site.url"),n=S().verification?.redirectUrl||S().emailVerifiedRedirectUrl||e||"/";try{let r=z.string().parse(t.query.token),{userDoc:o}=await Nr(r);E().onAfterEmailVerification?.({provider:"email",user:o,session:null,connectionInfo:{baseUrl:e,ip:t.req.ip||t.req.socket.remoteAddress,userAgent:t.headers["user-agent"],acceptLanguage:t.headers["accept-language"],referrer:t.headers.referer}});let{authToken:s}=await ae(o._id);return xe(t.res,s),{status:301,redirect:`${n}?status=verified`}}catch(r){let o=r instanceof Error?r.message:"An unexpected error occurred";return r instanceof Error&&(E().onEmailVerificationError?.({provider:"email",error:r,session:null,connectionInfo:{baseUrl:e,ip:t.req.ip||t.req.socket.remoteAddress,userAgent:t.headers["user-agent"],acceptLanguage:t.headers["accept-language"],referrer:t.headers.referer}}),console.error("Error verifying email:",r)),{status:301,redirect:`${n}?status=error&message=${encodeURIComponent(o)}`}}}async function tt({userId:t,email:e,baseUrl:n=a$1("_system.site.url")}){if(S().provider){let r=S().provider,o=randomBytes(32).toString("hex"),i=new Date(Date.now()+a.hours(24));await U.insertOne({userId:t,email:e,token:o,createdAt:new Date,expiresAt:i});let s=`${n}/api/_internal/auth/verify-email?token=${o}`,c=(S()?.verification?.template||pn)({name:"",email:e,verificationUrl:s}),l=Ee(c);await r?.sendEmail({to:e,from:S()?.from||"noreply@modelence.com",subject:S()?.verification?.subject||"Verify your email address",text:l,html:c});}}var et={success:true,message:"If that email is registered and not yet verified, a verification email has been sent"};async function fn(t,{connectionInfo:e}){let n=F(t.email),r=await m.findOne({"emails.address":n,status:{$nin:["deleted","disabled"]}},{collation:{locale:"en",strength:2}});if(!r)return et;let o=r.emails?.find(i=>i.address.toLowerCase()===n);if(!o||o.verified)return et;if(!S().provider)throw new Error("Email provider is not configured");return await R({bucket:"verification",type:"user",value:r._id.toString(),message:"Please wait at least 60 seconds before requesting another verification email"}),await tt({userId:r._id,email:n,baseUrl:e?.baseUrl}),et}async function hn(t,{user:e,session:n,connectionInfo:r}){let o=E();try{let i=t,{firstName:s,lastName:a,avatarUrl:c,handle:l}=i,p=F(i.email),f=_e(i.password),u=r?.ip;if(u&&await R({bucket:"signupAttempt",type:"ip",value:u}),await Zt(p))throw new Error("Please use a permanent email address");let y=await m.findOne({"emails.address":p},{collation:{locale:"en",strength:2}});if(y){let k=y.emails?.find(H=>H.address.toLowerCase()===p);throw y.status==="disabled"?new Error("User is marked for deletion, please contact support if you want to restore the account."):new Error(`User with email already exists: ${k?.address}`)}u&&await R({bucket:"signup",type:"ip",value:u});let g=Ae({firstName:s,lastName:a,avatarUrl:c,handle:l});await o.validateSignup?.({email:p,password:f,...g});let C;if(g.handle)C=await Z(g.handle,p);else if(o.generateHandle){let k=await o.generateHandle({email:p,firstName:g.firstName,lastName:g.lastName});C=await Z(k,p,{throwOnConflict:!1});}else C=await Z(void 0,p);let P=await _r.hash(f,10),O=await m.insertOne({handle:C,status:"active",emails:[{address:p,verified:!1}],createdAt:new Date,authMethods:{password:{hash:P}},...g.firstName!==void 0&&{firstName:g.firstName},...g.lastName!==void 0&&{lastName:g.lastName},...g.avatarUrl!==void 0&&{avatarUrl:g.avatarUrl}}),M=await m.findOne({_id:O.insertedId},{readPreference:"primary"});if(!M)throw new Error("User not found");return await tt({userId:O?.insertedId,email:p,baseUrl:r?.baseUrl}),o.onAfterSignup?.({provider:"email",user:M,session:n,connectionInfo:r}),o.signup?.onSuccess?.(M),O.insertedId}catch(i){throw i instanceof Error&&(o.onSignupError?.({provider:"email",error:i,session:n,connectionInfo:r}),o.signup?.onError?.(i)),i}}function Fr(t,e){return e?e.startsWith("http://")||e.startsWith("https://")?e:`${t}${e.startsWith("/")?"":"/"}${e}`:t}function zr({email:t,resetUrl:e}){return `
7
+ `}async function Un(t){let e=await $.findOne({token:t,expiresAt:{$gt:new Date}});if(!e)throw new Error("Invalid or expired verification token");if(!await m.findOne({_id:e.userId,status:{$nin:["deleted","disabled"]}}))throw new Error("User not found");let n=e.email;if(!n)throw new Error("Email not found in token");let o=await m.findOneAndUpdate({_id:e.userId,status:{$nin:["deleted","disabled"]},"emails.address":n,"emails.verified":{$ne:true}},{$set:{"emails.$.verified":true}},{returnDocument:"after"});if(!o)throw await m.findOne({_id:e.userId,"emails.address":n})?new Error("Email is already verified"):new Error("Email address not found for this user");return await $.deleteOne({_id:e._id}),{userDoc:o,email:n}}async function hr(t){let e=a$1("_system.site.url"),r=C().verification?.redirectUrl||C().emailVerifiedRedirectUrl||e||"/";try{let n=z$1.string().parse(t.query.token),{userDoc:o}=await Un(n);v().onAfterEmailVerification?.({provider:"email",user:o,session:null,connectionInfo:{baseUrl:e,ip:t.req.ip||t.req.socket.remoteAddress,userAgent:t.headers["user-agent"],acceptLanguage:t.headers["accept-language"],referrer:t.headers.referer}});let{authToken:s}=await ce(o._id);return xe(t.res,s),{status:301,redirect:`${r}?status=verified`}}catch(n){let o=n instanceof Error?n.message:"An unexpected error occurred";return n instanceof Error&&(v().onEmailVerificationError?.({provider:"email",error:n,session:null,connectionInfo:{baseUrl:e,ip:t.req.ip||t.req.socket.remoteAddress,userAgent:t.headers["user-agent"],acceptLanguage:t.headers["accept-language"],referrer:t.headers.referer}}),console.error("Error verifying email:",n)),{status:301,redirect:`${r}?status=error&message=${encodeURIComponent(o)}`}}}async function rt({userId:t,email:e,baseUrl:r=a$1("_system.site.url")}){if(C().provider){let n=C().provider,o=randomBytes(32).toString("hex"),i=new Date(Date.now()+a.hours(24));await $.insertOne({userId:t,email:e,token:o,createdAt:new Date,expiresAt:i});let s=`${r}/api/_internal/auth/verify-email?token=${o}`,c=(C()?.verification?.template||fr)({name:"",email:e,verificationUrl:s}),l=Te(c);await n?.sendEmail({to:e,from:C()?.from||"noreply@modelence.com",subject:C()?.verification?.subject||"Verify your email address",text:l,html:c});}}var tt={success:true,message:"If that email is registered and not yet verified, a verification email has been sent"};async function gr(t,{connectionInfo:e}){let r=z(t.email),n=await m.findOne({"emails.address":r,status:{$nin:["deleted","disabled"]}},{collation:{locale:"en",strength:2}});if(!n)return tt;let o=n.emails?.find(i=>i.address.toLowerCase()===r);if(!o||o.verified)return tt;if(!C().provider)throw new Error("Email provider is not configured");return await M({bucket:"verification",type:"user",value:n._id.toString(),message:"Please wait at least 60 seconds before requesting another verification email"}),await rt({userId:n._id,email:r,baseUrl:e?.baseUrl}),tt}async function yr(t,{user:e,session:r,connectionInfo:n}){let o=v();try{let i=t,{firstName:s,lastName:a,avatarUrl:c,handle:l}=i,p=z(i.email),f=_e(i.password),u=n?.ip;if(u&&await M({bucket:"signupAttempt",type:"ip",value:u}),await Qt(p))throw new Error("Please use a permanent email address");let y=await m.findOne({"emails.address":p},{collation:{locale:"en",strength:2}});if(y){let A=y.emails?.find(V=>V.address.toLowerCase()===p);throw y.status==="disabled"?new Error("User is marked for deletion, please contact support if you want to restore the account."):new Error(`User with email already exists: ${A?.address}`)}u&&await M({bucket:"signup",type:"ip",value:u});let g=Re({firstName:s,lastName:a,avatarUrl:c,handle:l});await o.validateSignup?.({email:p,password:f,...g});let E;if(g.handle)E=await J(g.handle,p);else if(o.generateHandle){let A=await o.generateHandle({email:p,firstName:g.firstName,lastName:g.lastName});E=await J(A,p,{throwOnConflict:!1});}else E=await J(void 0,p);let N=await Mn.hash(f,10),O=await m.insertOne({handle:E,status:"active",emails:[{address:p,verified:!1}],createdAt:new Date,authMethods:{password:{hash:N}},...g.firstName!==void 0&&{firstName:g.firstName},...g.lastName!==void 0&&{lastName:g.lastName},...g.avatarUrl!==void 0&&{avatarUrl:g.avatarUrl}}),I=await m.findOne({_id:O.insertedId},{readPreference:"primary"});if(!I)throw new Error("User not found");return await rt({userId:O?.insertedId,email:p,baseUrl:n?.baseUrl}),o.onAfterSignup?.({provider:"email",user:I,session:r,connectionInfo:n}),o.signup?.onSuccess?.(I),O.insertedId}catch(i){throw i instanceof Error&&(o.onSignupError?.({provider:"email",error:i,session:r,connectionInfo:n}),o.signup?.onError?.(i)),i}}function qn(t,e){return e?e.startsWith("http://")||e.startsWith("https://")?e:`${t}${e.startsWith("/")?"":"/"}${e}`:t}function Hn({email:t,resetUrl:e}){return `
8
8
  <p>Hi,</p>
9
9
  <p>We received a request to reset your password for ${t}.</p>
10
10
  <p>Click the link below to reset your password:</p>
11
11
  <p><a href="${e}">${e}</a></p>
12
12
  <p>This link will expire in 1 hour.</p>
13
13
  <p>If you did not request this password reset, please ignore this email.</p>
14
- `}var nt={success:true,message:"If an account with that email exists, a password reset link has been sent"};async function gn(t,{connectionInfo:e}){let n=F(t.email),r=e?.ip;r&&await R({bucket:"passwordReset",type:"ip",value:r}),await R({bucket:"passwordReset",type:"email",value:n});let o=await m.findOne({"emails.address":n,status:{$nin:["deleted","disabled"]}},{collation:{locale:"en",strength:2}});if(!o||!o.authMethods?.password)return nt;let i=S().provider;if(!i)throw new Error("Email provider is not configured");let s=randomBytes(32).toString("hex"),a$2=Date.now(),c=new Date(a$2),l=new Date(a$2+a.hours(1));await I.insertOne({userId:o._id,email:n,token:s,createdAt:c,expiresAt:l});let p=a$1("_system.site.url")||e?.baseUrl,u=`${Fr(p,S().passwordReset?.redirectUrl)}?token=${s}`,g=(S()?.passwordReset?.template||zr)({email:n,resetUrl:u,name:""}),C=Ee(g);return await i.sendEmail({to:n,from:S()?.from||"noreply@modelence.com",subject:S()?.passwordReset?.subject||"Reset your password",text:C,html:g}),nt}async function yn(t,{}){let e=z.string().parse(t.token),n=_e(t.password),r=await I.findOne({token:e});if(!r)throw new Error("Invalid or expired reset token");if(r.expiresAt<new Date)throw await I.deleteOne({token:e}),new Error("Reset token has expired");let o=await m.findOne({_id:r.userId});if(!o)throw new Error("User not found");let i=await _r.hash(n,10);return await m.updateOne({_id:o._id},{$set:{"authMethods.password.hash":i}}),r.email&&await m.updateOne({_id:o._id,"emails.address":r.email},{$set:{"emails.$.verified":true}}),await Dt(o._id),await I.deleteOne({token:e}),{success:true,message:"Password has been reset successfully"}}var wn=new x("_system.user",{stores:[m,ce,U,I],queries:{getOwnProfile:cn},mutations:{signupWithPassword:hn,loginWithPassword:sn,logout:an,resendEmailVerification:fn,sendResetPasswordToken:gn,resetPassword:yn,updateProfile:ln,unlinkOAuthProvider:dn},cronJobs:{updateDisposableEmailList:Jt},rateLimits:[{bucket:"signup",type:"ip",window:a.minutes(15),limit:20},{bucket:"signup",type:"ip",window:a.days(1),limit:200},{bucket:"signupAttempt",type:"ip",window:a.minutes(15),limit:50},{bucket:"signupAttempt",type:"ip",window:a.days(1),limit:500},{bucket:"signin",type:"ip",window:a.minutes(15),limit:50},{bucket:"signin",type:"ip",window:a.days(1),limit:500},{bucket:"verification",type:"user",window:a.seconds(60),limit:1},{bucket:"verification",type:"user",window:a.days(1),limit:10},{bucket:"passwordReset",type:"ip",window:a.minutes(15),limit:10},{bucket:"passwordReset",type:"ip",window:a.days(1),limit:100},{bucket:"passwordReset",type:"email",window:a.hours(1),limit:5},{bucket:"passwordReset",type:"email",window:a.days(1),limit:10}],configSchema:{"auth.email.enabled":{type:"boolean",isPublic:true,default:true},"auth.email.from":{type:"string",isPublic:false,default:""},"auth.email.verification":{type:"boolean",isPublic:true,default:false},"auth.google.enabled":{type:"boolean",isPublic:true,default:false},"auth.google.clientId":{type:"string",isPublic:false,default:""},"auth.google.clientSecret":{type:"secret",isPublic:false,default:""},"auth.github.enabled":{type:"boolean",isPublic:true,default:false},"auth.github.clientId":{type:"string",isPublic:false,default:""},"auth.github.clientSecret":{type:"secret",isPublic:false,default:""}},routes:[{path:"/api/_internal/auth/verify-email",handlers:{get:mn}}]});var qr={withoutRemoteServer:{MONGODB_URI:"_system.mongodbUri",MONGODB_POOL_SIZE:"_system.mongodbPoolSize",MODELENCE_AUTH_GOOGLE_ENABLED:"_system.user.auth.google.enabled",MODELENCE_AUTH_GOOGLE_CLIENT_ID:"_system.user.auth.google.clientId",MODELENCE_AUTH_GOOGLE_CLIENT_SECRET:"_system.user.auth.google.clientSecret",MODELENCE_AUTH_GITHUB_ENABLED:"_system.user.auth.github.enabled",MODELENCE_AUTH_GITHUB_CLIENT_ID:"_system.user.auth.github.clientId",MODELENCE_AUTH_GITHUB_CLIENT_SECRET:"_system.user.auth.github.clientSecret",MODELENCE_AUTH_GITHUB_CLIENT_SCOPES:"_system.user.auth.github.scopes",MODELENCE_EMAIL_RESEND_API_KEY:"_system.email.resend.apiKey",MODELENCE_EMAIL_AWS_SES_REGION:"_system.email.awsSes.region",MODELENCE_EMAIL_AWS_SES_ACCESS_KEY_ID:"_system.email.awsSes.accessKeyId",MODELENCE_EMAIL_AWS_SES_SECRET_ACCESS_KEY:"_system.email.awsSes.secretAccessKey",MODELENCE_EMAIL_SMTP_HOST:"_system.email.smtp.host",MODELENCE_EMAIL_SMTP_PORT:"_system.email.smtp.port",MODELENCE_EMAIL_SMTP_USER:"_system.email.smtp.user",MODELENCE_EMAIL_SMTP_PASS:"_system.email.smtp.pass",MODELENCE_SITE_URL:"_system.site.url",MODELENCE_ENV_TYPE:"_system.env.type",MODELENCE_MULTI_INSTANCE:"_system.multiInstance",MODELENCE_ENV:"_system.env",GOOGLE_AUTH_ENABLED:"_system.user.auth.google.enabled",GOOGLE_AUTH_CLIENT_ID:"_system.user.auth.google.clientId",GOOGLE_AUTH_CLIENT_SECRET:"_system.user.auth.google.clientSecret"},withRemoteServer:{MODELENCE_SITE_URL:"_system.site.url"}};function Hr(t,e){if(e==="number"){let n=Number(t);if(isNaN(n))throw new Error(`Invalid number value for config: ${t}`);return n}if(e==="boolean"){if(t.toLowerCase()==="true")return true;if(t.toLowerCase()==="false")return false;throw new Error(`Invalid boolean value for config: ${t}`)}return t}function Vr(t,e){let n=[];for(let[r,o]of Object.entries(t)){let i=process.env[r],s=e[o];if(i){let a=s?.type??"string";n.push({key:o,type:a,value:Hr(i,a)});}}return n}function Me(t,e="withoutRemoteServer"){let n=qr[e];return Vr(n,t)}async function bn({configSchema:t,cronJobsMetadata:e,stores:n,roles:r}){let o=process.env.MODELENCE_CONTAINER_ID;if(!o)throw new Error("Unable to connect to Modelence Cloud: MODELENCE_CONTAINER_ID is not set");try{let i=(n??[]).map(a=>({name:a.getName(),schema:a.getSerializedSchema(),collections:[a.getName()],version:2,indexes:a.getIndexes(),searchIndexes:a.getSearchIndexes(),indexCreationMode:a.getIndexCreationMode()})),s=await rt("/api/connect","POST",{hostname:Wr.hostname(),containerId:o,dataModels:i,configSchema:t,cronJobsMetadata:e,roles:r});if(s.status==="error")throw new Error(s.error);return console.log("Successfully connected to Modelence Cloud"),s}catch(i){throw console.error("Unable to connect to Modelence Cloud:",i),i}}async function Sn(){return rt("/api/configs","GET")}async function xn(){return await rt("/api/sync","POST",{containerId:process.env.MODELENCE_CONTAINER_ID})}async function rt(t,e,n){return ne(t,e,n?JSON.stringify(n):void 0,n?{"Content-Type":"application/json"}:{})}async function ne(t,e,n,r){let{MODELENCE_SERVICE_ENDPOINT:o,MODELENCE_SERVICE_TOKEN:i}=process.env;if(!o)throw new Error("Unable to connect to Modelence Cloud: MODELENCE_SERVICE_ENDPOINT is not set");let s=await fetch(`${o}${t}`,{method:e,headers:{Authorization:`Bearer ${i}`,...r},body:n});if(!s.ok){let a=await s.text();try{let c=JSON.parse(a);throw new Error(`Unable to connect to Modelence Cloud: HTTP status: ${s.status}, ${c?.error}`)}catch{throw new Error(`Unable to connect to Modelence Cloud: HTTP status: ${s.status}, ${a}`)}}if(!(s.status===204||s.headers?.get("content-length")==="0"))return await s.json()}var ot=false,Gr=a.seconds(10);function Cn(){setInterval(async()=>{if(!ot){ot=true;try{await xn();}catch(t){console.error("Error syncing status",t);}try{await Br();}catch(t){console.error("Error syncing config",t);}ot=false;}},Gr);}function it(t){c(t),c(Me(d$2(),"withRemoteServer"));}async function Br(){let{configs:t}=await Sn();it(t);}var J=new v("_modelenceLocks",{schema:{_id:d.string(),instanceId:d.string(),acquiredAt:d.date(),resource:d.string()},indexes:[{key:{resource:1},unique:true},{key:{resource:1,instanceId:1}},{key:{resource:1,acquiredAt:1}}],indexCreationMode:"blocking"});var K={},vn=a.seconds(10),On=randomBytes(32).toString("base64url"),Kr=a.seconds(30),re=new Map,st=t=>t instanceof MongoError&&t.code===11e3,En=(t,e)=>typeof t.keyPattern=="object"&&t.keyPattern!==null&&Object.prototype.hasOwnProperty.call(t.keyPattern,e),Qr=async({error:t,resource:e})=>{if(En(t,"resource"))return true;if(En(t,"_id"))return false;let n=await J.findOne({resource:e});return !!n&&n._id!==e},Tn=async({resource:t,staleThresholdDate:e,instanceId:n})=>{let r=await J.upsertOne({_id:t,$or:[{instanceId:n},{acquiredAt:{$lt:e}}]},{$set:{resource:t,instanceId:n,acquiredAt:new Date},$setOnInsert:{_id:t}});return r.upsertedCount>0||r.modifiedCount>0},An=async({resource:t,instanceId:e,staleThresholdDate:n})=>{let r=n?{resource:t,_id:{$ne:t},$or:[{instanceId:e},{acquiredAt:{$lt:n}}]}:{resource:t,instanceId:e};return (await J.deleteOne(r)).deletedCount>0},Yr=t=>{let e=t,n=re.get(e);n&&(n.stopRequested=true,n.timer&&(clearTimeout(n.timer),n.timer=null),re.delete(e));},kn=({resource:t,lockDuration:e,instanceId:n})=>{let r=Math.floor(e/3),o=t,i$1=re.get(o);if(i$1&&!i$1.stopRequested&&i$1.heartbeatInterval===r&&i$1.lockDuration===e)return;i$1&&(i$1.stopRequested=true,i$1.timer&&(clearTimeout(i$1.timer),i$1.timer=null),re.delete(o));let s={timer:null,stopRequested:false,lockDuration:e,heartbeatInterval:r},a=()=>{s.timer=setTimeout(()=>{Q(t,{lockDuration:e,bypassCache:true,instanceId:n}).then(c=>{c||(s.stopRequested=true,i(`Lost lock while refreshing heartbeat: ${t}`,{source:"lock",resource:t,instanceId:n}));}).finally(()=>{if(s.stopRequested){re.delete(o);return}a();});},r);};re.set(o,s),a();};async function Q(t,{lockDuration:e=Kr,successfulLockCacheDuration:n=vn,failedLockCacheDuration:r=vn,heartbeat:o,bypassCache:i$1,instanceId:s=On}={}){let a=Date.now();if(!i$1&&K[t]&&a<K[t].expiresAt)return K[t].value&&o&&kn({resource:t,lockDuration:e,instanceId:s}),K[t].value;let c=new Date(a-e);i(`Attempting to acquire lock: ${t}`,{source:"lock",resource:t,instanceId:s});try{let l=await Xr({resource:t,staleThresholdDate:c,instanceId:s});return K[t]={value:l,expiresAt:a+(l?n:r)},l?(o&&kn({resource:t,lockDuration:e,instanceId:s}),i(`Lock acquired: ${t}`,{source:"lock",resource:t,instanceId:s})):i(`Failed to acquire lock (already held): ${t}`,{source:"lock",resource:t,instanceId:s}),l}catch{return K[t]={value:false,expiresAt:a+r},i(`Failed to acquire lock (already held): ${t}`,{source:"lock",resource:t,instanceId:s}),false}}var Xr=async({resource:t,staleThresholdDate:e,instanceId:n})=>{try{return await Tn({resource:t,staleThresholdDate:e,instanceId:n})}catch(r){if(st(r)&&await Qr({error:r,resource:t})){if(!await An({resource:t,staleThresholdDate:e,instanceId:n}))return false;try{return await Tn({resource:t,staleThresholdDate:e,instanceId:n})}catch(i){if(st(i))return false;throw i}}if(st(r))return false;throw r}};async function fe(t,{instanceId:e=On}={}){Yr(t);try{let n=await J.deleteOne({_id:t,instanceId:e});return n.deletedCount===0?await An({resource:t,instanceId:e}):n.deletedCount>0}catch{return false}finally{delete K[t];}}var Y={},at=null,ct=new v("_modelenceCronJobs",{schema:{alias:d.string(),lastStartDate:d.date().optional()},indexes:[{key:{alias:1},unique:true,background:true}]});function Rn(t,{description:e="",interval:n,timeout:r=Math.min(Math.max(n,a.minutes(1)),a.days(1)),handler:o}){if(Y[t])throw new Error(`Duplicate cron job declaration: '${t}' already exists`);if(at)throw new Error(`Unable to add a cron job - cron jobs have already been initialized: [${t}]`);if(n<a.seconds(5))throw new Error(`Cron job interval should not be less than 5 second [${t}]`);if(r>a.days(1))throw new Error(`Cron job timeout should not be longer than 1 day [${t}]`);Y[t]={alias:t,params:{description:e,interval:n,timeout:r},handler:o,state:{isRunning:false}};}async function Mn(){if(at)throw new Error("Cron jobs already started");let t=Object.keys(Y);if(t.length>0){let e={alias:{$in:t}},n=await ct.fetch(e),r=Date.now();n.forEach(o=>{let i=Y[o.alias];i&&(i.state.scheduledRunTs=o.lastStartDate?o.lastStartDate.getTime()+i.params.interval:r);}),Object.values(Y).forEach(o=>{o.state.scheduledRunTs||(o.state.scheduledRunTs=r);}),at=setInterval(eo,a.seconds(1));}}async function eo(){let t=Date.now();await Q("cron",{successfulLockCacheDuration:a.seconds(10),failedLockCacheDuration:a.seconds(30)})&&Object.values(Y).forEach(async n=>{let{params:r,state:o}=n;if(o.isRunning){o.startTs&&o.startTs+r.timeout<t&&(o.isRunning=false);return}o.scheduledRunTs&&o.scheduledRunTs<=t&&await to(n);});}async function to(t){let{alias:e,params:n,handler:r,state:o}=t;o.isRunning=true,o.startTs=Date.now(),await ct.updateOne({alias:e},{$set:{lastStartDate:new Date(o.startTs)}});let i=l("cron",`cron:${e}`);try{await r(),_n(o,n),i.end("success");}catch(s){_n(o,n);let a=s instanceof Error?s:new Error(String(s));m$1(a),i.end("error"),console.error(`Error in cron job '${e}':`,s);}}function _n(t,e){t.scheduledRunTs=t.startTs?t.startTs+e.interval:Date.now(),t.startTs=void 0,t.isRunning=false;}function In(){return Object.values(Y).map(({alias:t,params:e})=>({alias:t,description:e.description,interval:e.interval,timeout:e.timeout}))}var Dn=new x("_system.cron",{stores:[ct]});function Pn(t){let e=[...new Set(t)],n=new Map;for(let i of e){let s=i.getChainRoot();n.set(s,s.getChainTail());}let r=[...new Set(n.values())],o=new Map;for(let[i,s]of n){let a=s.getName(),c=o.get(a);if(c!==void 0&&c!==i)throw new Error(`Store collision: multiple unrelated stores use collection name '${a}'. Use .extend() to create a single extension chain instead of independent stores.`);o.set(a,i);}return {storesToInit:e,effectiveStores:r}}var lt=new x("_system.lock",{stores:[J]});var he=new v("_modelenceMigrations",{schema:{version:d.number(),status:d.enum(["completed","failed"]),description:d.string().optional(),output:d.string().optional(),appliedAt:d.date()},indexes:[{key:{version:1},unique:true},{key:{version:1,status:1}}]});async function dt(t,{lockMode:e="acquire"}={}){if(t.length!==0){if(e==="acquire"&&!await Q("migrations")){j$1("Another instance is running migrations. Skipping migration run.",{source:"migrations"});return}try{let n=t.map(({version:s})=>s),r=await he.fetch({version:{$in:n}}),o=new Set(r.map(({version:s})=>s)),i=t.filter(({version:s})=>!o.has(s));if(i.length===0)return;j$1(`Running migrations (${i.length})...`,{source:"migrations"});for(let{version:s,description:a,handler:c}of i){j$1(`Running migration v${s}: ${a}`,{source:"migrations"});try{let p=(await c()||"").toString().trim(),f=15*1024*1024,u=p.length>f?p.slice(0,f)+`
15
- [Output truncated - exceeded size limit]`:p;await he.upsertOne({version:s},{$set:{version:s,status:"completed",description:a,output:u,appliedAt:new Date}}),j$1(`Migration v${s} complete`,{source:"migrations"});}catch(l){l instanceof Error&&(await he.upsertOne({version:s},{$set:{version:s,status:"failed",description:a,output:l.message||"",appliedAt:new Date}}),j$1(`Migration v${s} is failed: ${l.message}`,{source:"migrations"}));}}}finally{e==="acquire"&&await fe("migrations");}}}function Nn(t){setTimeout(()=>{dt(t).catch(e=>{console.error("Error running migrations:",e);});},0);}var Ln=new x("_system.migration",{stores:[he]});var Un=new x("_system.rateLimit",{stores:[me]});async function $n({filePath:t,contentType:e,visibility:n}){return await ne("/api/files/upload","POST",JSON.stringify({filePath:t,contentType:e,visibility:n}),{"Content-Type":"application/json"})}async function jn(t){await ne("/api/files/delete","POST",JSON.stringify({filePath:t}),{"Content-Type":"application/json"});}async function Fn(t){return await ne("/api/files/download","POST",JSON.stringify({filePath:t}),{"Content-Type":"application/json"})}async function zn(t){return await ne("/api/files/url","POST",JSON.stringify({filePath:t}),{"Content-Type":"application/json"})}var qn=new x("_system.files",{queries:{async downloadFile({filePath:t}){return Fn(t)},async getFileUrl({filePath:t}){return zn(t)}},mutations:{async getUploadUrl({filePath:t,contentType:e,visibility:n}){return $n({filePath:t,contentType:e,visibility:n})},async deleteFile({filePath:t}){return jn(t)}}});var pt=class{async init({httpServer:e}){this.config=await uo(this.isDev()?e:void 0),this.isDev()&&(console.log("Starting Vite dev server..."),this.viteServer=await createServer(this.config));}middlewares(){if(this.isDev())return this.viteServer?.middlewares??[];let e=[q.static("./.modelence/build/client".replace(/\\/g,"/"))];return this.config?.publicDir&&e.push(q.static(this.config.publicDir)),e}handler(e,n){if(this.isDev())try{n.setHeader("Cache-Control","no-store"),n.sendFile("index.html",{root:"./src/client"});}catch(r){console.error("Error serving index.html:",r),n.status(500).send("Internal Server Error");}else n.sendFile("index.html",{root:"./.modelence/build/client".replace(/\\/g,"/")});}isDev(){return process.env.NODE_ENV!=="production"}};async function co(){let t=process.cwd();try{return (await loadConfigFromFile({command:"serve",mode:"development"},void 0,t))?.config||{}}catch(e){return console.warn("Could not load vite config:",e),{}}}function lo(t,e){let n=mergeConfig(t,e);if(n.plugins&&Array.isArray(n.plugins)){let r=new Set;n.plugins=n.plugins.flat().filter(o=>{if(!o||typeof o!="object"||Array.isArray(o))return true;let i=o.name;return !i||r.has(i)?false:(r.add(i),true)}).reverse(),n.plugins.reverse();}return n}async function uo(t){let e=process.cwd(),n=await co(),r=[".eslintrc.js",".eslintrc.json",".eslintrc","eslint.config.js",".eslintrc.yml",".eslintrc.yaml"].find(s=>ao.existsSync(ut.join(e,s))),o=[so(),po()];if(r){let s=(await import('vite-plugin-eslint')).default;o.push(s({failOnError:false,include:["src/**/*.js","src/**/*.jsx","src/**/*.ts","src/**/*.tsx"],cwd:e,overrideConfigFile:ut.resolve(e,r)}));}let i=defineConfig({plugins:o,build:{outDir:".modelence/build/client".replace(/\\/g,"/"),emptyOutDir:true},server:{middlewareMode:true,hmr:t?{server:t}:void 0},root:"./src/client",resolve:{alias:{"@":ut.resolve(e,"src").replace(/\\/g,"/")}}});return lo(i,n)}function po(){return {name:"modelence-asset-handler",async transform(t,e){if(/\.(png|jpe?g|gif|svg|mpwebm|ogg|mp3|wav|flac|aac)$/.test(e))return process.env.NODE_ENV==="development",t}}}var Vn=new pt;async function mt(t,e){let{authToken:n}=await ae(e);xe(t,n),t.status(302),t.redirect("/");}async function fo(t,e,n,r,o){let i=E();try{if(n.status==="disabled"||n.status==="deleted"){t.status(400).json({error:"User account is not active."});return}let s={};n.firstName===void 0&&e.firstName&&(s.firstName=e.firstName),n.lastName===void 0&&e.lastName&&(s.lastName=e.lastName),n.avatarUrl===void 0&&e.avatarUrl&&(s.avatarUrl=e.avatarUrl);let a=n;Object.keys(s).length>0&&(await m.updateOne({_id:n._id},{$set:s}),a={...n,...s}),await mt(t,n._id),i.onAfterLogin?.({provider:e.providerName,user:a,session:r,connectionInfo:o}),i.login?.onSuccess?.(a);}catch(s){throw s instanceof Error&&(i.login?.onError?.(s),i.onLoginError?.({provider:e.providerName,error:s,session:r,connectionInfo:o})),s}}async function ho(t,e,n,r,o){let i=E();if((i.oauthAccountLinking??"manual")==="auto"&&e.emailVerified){if(n.status==="disabled"||n.status==="deleted"){t.status(400).json({error:"User account is not active."});return}if(!n.emails?.find(c=>c.address.toLowerCase()===e.email.toLowerCase())?.verified){t.status(400).json({error:"User with this email already exists. Please log in instead."});return}try{let c={...n.firstName===void 0&&e.firstName&&{firstName:e.firstName},...n.lastName===void 0&&e.lastName&&{lastName:e.lastName},...n.avatarUrl===void 0&&e.avatarUrl&&{avatarUrl:e.avatarUrl}};if(!((await m.updateOne({_id:n._id,status:{$nin:["deleted","disabled"]},$or:[{[`authMethods.${e.providerName}.id`]:{$exists:!1}},{[`authMethods.${e.providerName}.id`]:e.id}]},{$set:{[`authMethods.${e.providerName}.id`]:e.id,...c}})).matchedCount>0)){t.status(400).json({error:"User with this email already exists. Please log in instead."});return}await mt(t,n._id);let f={...n,...c,authMethods:{...n.authMethods,[e.providerName]:{id:e.id}}};i.onAfterLogin?.({provider:e.providerName,user:f,session:r,connectionInfo:o}),i.login?.onSuccess?.(f);return}catch(c){throw c instanceof Error&&(i.login?.onError?.(c),i.onLoginError?.({provider:e.providerName,error:c,session:r,connectionInfo:o})),c}}t.status(400).json({error:"User with this email already exists. Please log in instead."});}async function go(t,e,n,r){let o=E();try{let i;if(o.generateHandle){let l=await o.generateHandle({email:e.email,firstName:e.firstName,lastName:e.lastName});i=await Z(l,e.email,{throwOnConflict:!1});}else i=await Z(void 0,e.email);let s={handle:i,status:"active",emails:[{address:e.email,verified:e.emailVerified}],createdAt:new Date,authMethods:{[e.providerName]:{id:e.id}},...e.firstName!==void 0&&{firstName:e.firstName},...e.lastName!==void 0&&{lastName:e.lastName},...e.avatarUrl!==void 0&&{avatarUrl:e.avatarUrl}},a=await m.insertOne(s);await mt(t,a.insertedId);let c=await m.findOne({_id:a.insertedId},{readPreference:"primary"});c&&(o.onAfterSignup?.({provider:e.providerName,user:c,session:n,connectionInfo:r}),o.signup?.onSuccess?.(c));}catch(i){throw i instanceof Error&&(o.onSignupError?.({provider:e.providerName,error:i,session:n,connectionInfo:r}),o.signup?.onError?.(i)),i}}function ie(t){return `${a$1("_system.site.url")}/api/_internal/auth/${t}/callback`}async function Ie(t,e,n){let r=await m.findOne({[`authMethods.${n.providerName}.id`]:n.id}),{session:o,connectionInfo:i}=await ge(t);if(r)return fo(e,n,r,o,i);if(!n.email){e.status(400).json({error:`Email address is required for ${n.providerName} authentication.`});return}let s;try{s=await m.findOne({"emails.address":n.email,status:{$ne:"deleted"}},{collation:{locale:"en",strength:2}});}catch(a){if(a instanceof Error){let c=E();c.onSignupError?.({provider:n.providerName,error:a,session:o,connectionInfo:i}),c.signup?.onError?.(a);}throw a}return s?ho(e,n,s,o,i):go(e,n,o,i)}function A(t){t.cookie("oauthLinkToken","",{httpOnly:true,maxAge:0,path:"/api/_internal/auth/",sameSite:"lax",secure:process.env.NODE_ENV==="production"});}function oe(t){if(t)try{t();}catch(e){console.error("Error executing OAuth hook:",e);}}function De(t,e,n){let r=t.query.state,o=t.cookies[n],[i,s]=(o||"").split(":");return !r||!o||r!==i?(e.status(400).json({error:"Invalid OAuth state - possible CSRF attack"}),null):(e.clearCookie(n),s||"login")}async function Pe(t,e,n){let r=E(),{session:o,connectionInfo:i}=await ge(t);if(!o?.userId){A(e),e.status(401).json({error:"You must be signed in to link a provider."});return}let s=o.userId;try{let a=`authMethods.${n.providerName}.id`;if((await m.updateOne({_id:s,status:{$nin:["deleted","disabled"]},$or:[{[a]:{$exists:!1}},{[a]:n.id}]},{$set:{[a]:n.id}})).matchedCount===0){let p=await m.findOne({_id:s});if(!p||p.status==="deleted"||p.status==="disabled"){oe(()=>r.onOAuthLinkError?.({provider:n.providerName,error:new Error("User account not found or not active"),session:o,connectionInfo:i})),A(e),e.status(400).json({error:"User account is not active."});return}let f=p?.authMethods?.[n.providerName]?.id;if(f&&f!==n.id){oe(()=>r.onOAuthLinkError?.({provider:n.providerName,error:new Error(`User already has a different ${n.providerName} account linked`),session:o,connectionInfo:i})),A(e),e.status(400).json({error:`You have already linked a different ${n.providerName} account.`});return}oe(()=>r.onOAuthLinkError?.({provider:n.providerName,error:new Error(`Unexpected OAuth linking state for ${n.providerName}`),session:o,connectionInfo:i})),A(e),e.status(400).json({error:`Unable to link ${n.providerName} account.`});return}let l=await m.findOne({_id:s},{readPreference:"primary"});l&&oe(()=>r.onAfterOAuthLink?.({provider:n.providerName,user:l,session:o,connectionInfo:i})),A(e),e.status(302).redirect("/");}catch(a){if(a instanceof MongoServerError&&a.code===11e3){oe(()=>r.onOAuthLinkError?.({provider:n.providerName,error:a,session:o,connectionInfo:i})),A(e),e.status(400).json({error:`This ${n.providerName} account is already linked to a different user.`});return}if(a instanceof Error&&oe(()=>r.onOAuthLinkError?.({provider:n.providerName,error:a,session:o,connectionInfo:i})),A(e),!e.headersSent)throw a}}function Ne(t){return !t||typeof t!="string"?null:t}async function bo(t,e,n,r){let o=await fetch("https://oauth2.googleapis.com/token",{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({code:t,client_id:e,client_secret:n,redirect_uri:r,grant_type:"authorization_code"})});if(!o.ok)throw new Error(`Failed to exchange code for token: ${o.statusText}`);return o.json()}async function So(t){let e=await fetch("https://www.googleapis.com/oauth2/v2/userinfo",{headers:{Authorization:`Bearer ${t}`}});if(!e.ok)throw new Error(`Failed to fetch user info: ${e.statusText}`);return e.json()}async function xo(t,e){let n=Ne(t.query.code);if(!n){e.status(400).json({error:"Missing authorization code"});return}let r=De(t,e,"authStateGoogle");if(!r)return;let o=String(a$1("_system.user.auth.google.clientId")),i=String(a$1("_system.user.auth.google.clientSecret")),s=ie("google");try{let a=await bo(n,o,i,s),c=await So(a.access_token),l={id:c.id,email:c.email,emailVerified:c.verified_email,providerName:"google",firstName:c.given_name||void 0,lastName:c.family_name||void 0,avatarUrl:c.picture||void 0};r==="link"?await Pe(t,e,l):await Ie(t,e,l);}catch(a){console.error("Google OAuth error:",a),r==="link"&&A(e),e.status(500).json({error:"Authentication failed"});}}function Co(){let t=Router(),e=(n,r,o)=>{let i=!!a$1("_system.user.auth.google.enabled"),s=String(a$1("_system.user.auth.google.clientId")),a=String(a$1("_system.user.auth.google.clientSecret"));if(!i||!s||!a){r.status(503).json({error:"Google authentication is not configured"});return}o();};return t.get("/api/_internal/auth/google",e,(n,r)=>{let o=String(a$1("_system.user.auth.google.clientId")),i=ie("google"),s=randomBytes(32).toString("hex"),a$2=n.query.mode==="link"?"link":"login";r.cookie("authStateGoogle",`${s}:${a$2}`,{httpOnly:true,secure:process.env.NODE_ENV==="production",sameSite:"lax",maxAge:a.minutes(10)});let c=new URL("https://accounts.google.com/o/oauth2/v2/auth");c.searchParams.append("client_id",o),c.searchParams.append("redirect_uri",i),c.searchParams.append("response_type","code"),c.searchParams.append("scope","profile email"),c.searchParams.append("access_type","online"),c.searchParams.append("state",s),r.redirect(c.toString());}),t.get("/api/_internal/auth/google/callback",e,xo),t}var Wn=Co;async function To(t,e,n,r){let o=await fetch("https://github.com/login/oauth/access_token",{method:"POST",headers:{"Content-Type":"application/json",Accept:"application/json"},body:JSON.stringify({client_id:e,client_secret:n,code:t,redirect_uri:r})});if(!o.ok)throw new Error(`Failed to exchange code for token: ${o.statusText}`);return o.json()}async function ko(t){let e=await fetch("https://api.github.com/user",{headers:{Authorization:`Bearer ${t}`,Accept:"application/vnd.github.v3+json"}});if(!e.ok)throw new Error(`Failed to fetch user info: ${e.statusText}`);return e.json()}async function Oo(t){let e=await fetch("https://api.github.com/user/emails",{headers:{Authorization:`Bearer ${t}`,Accept:"application/vnd.github.v3+json"}});if(!e.ok)throw new Error(`Failed to fetch user emails: ${e.statusText}`);return e.json()}async function Ao(t,e){return t.email?t.email:(await Oo(e)).find(r=>r.primary&&r.verified)?.email??null}async function _o(t,e){let n=Ne(t.query.code);if(!n){e.status(400).json({error:"Missing authorization code"});return}let r=De(t,e,"authStateGithub");if(!r)return;let o=String(a$1("_system.user.auth.github.clientId")),i=String(a$1("_system.user.auth.github.clientSecret")),s=ie("github");try{let a=await To(n,o,i,s),c=await ko(a.access_token),l=await Ao(c,a.access_token);if(!l){r==="link"&&A(e),e.status(400).json({error:"Unable to retrieve a primary verified email from GitHub. Please ensure your GitHub account has a verified email set as primary."});return}let p=c.name?c.name.trim().split(/\s+/):[],f=p[0]||void 0,u=p.length>1?p.slice(1).join(" "):void 0,y={id:String(c.id),email:l,emailVerified:!0,providerName:"github",firstName:f,lastName:u,avatarUrl:c.avatar_url||void 0};r==="link"?await Pe(t,e,y):await Ie(t,e,y);}catch(a){console.error("GitHub OAuth error:",a),r==="link"&&A(e),e.status(500).json({error:"Authentication failed"});}}function Ro(){let t=Router(),e=(n,r,o)=>{let i=!!a$1("_system.user.auth.github.enabled"),s=String(a$1("_system.user.auth.github.clientId")),a=String(a$1("_system.user.auth.github.clientSecret"));if(!i||!s||!a){r.status(503).json({error:"GitHub authentication is not configured"});return}o();};return t.get("/api/_internal/auth/github",e,(n,r)=>{let o=String(a$1("_system.user.auth.github.clientId")),i=ie("github"),s=a$1("_system.user.auth.github.scopes"),a$2=s?String(s).split(",").map(f=>f.trim()).join(" "):"user:email",c=randomBytes(32).toString("hex"),l=n.query.mode==="link"?"link":"login";r.cookie("authStateGithub",`${c}:${l}`,{httpOnly:true,secure:process.env.NODE_ENV==="production",sameSite:"lax",maxAge:a.minutes(10)});let p=new URL("https://github.com/login/oauth/authorize");p.searchParams.append("client_id",o),p.searchParams.append("redirect_uri",i),p.searchParams.append("scope",a$2),p.searchParams.append("state",c),r.redirect(p.toString());}),t.get("/api/_internal/auth/github/callback",e,_o),t}var Gn=Ro;function Bn(t,e,n){return async(r,o,i)=>{let s=r.headers["x-modelence-auth-token"],a={session:null,user:null};if(typeof s=="string"&&G())try{let{session:l,user:p}=await D(s);a={session:l,user:p};}catch{}let c=l("route",`route:${t.toLowerCase()}:${e}`,{method:t,path:e,query:r.query,body:r.body,params:r.params});try{let l=await n({query:r.query,body:r.body,params:r.params,headers:r.headers,cookies:r.cookies,rawBody:Buffer.isBuffer(r.body)?r.body:void 0,req:r,res:o,next:i},a);c.end(),l&&(o.status(l.status||200),l.redirect&&o.redirect(l.redirect),l.headers&&Object.entries(l.headers).forEach(([p,f])=>{o.setHeader(p,f);}),o.send(l.data));}catch(l){c.end("error"),l instanceof a$3?o.status(l.status).send(l.message):(console.error(`Error in route handler: ${r.path}`),console.error(l),o.status(500).send(String(l)));}}}var ft=Object.freeze({});function Zn(t){ft=Object.freeze(Object.assign({},ft,t));}function Jn(){return ft}var ht=Object.freeze({});function Kn(t){ht=Object.freeze(Object.assign({},ht,t));}function Le(){return ht}function Do(t){let e=[];if(!t)return e.push(q.json({limit:"16mb"})),e.push(q.urlencoded({extended:true,limit:"16mb"})),e;if(t.json!==false){let n=typeof t.json=="object"?t.json:{limit:"16mb"};e.push(q.json(n));}if(t.urlencoded!==false){let n=typeof t.urlencoded=="object"?t.urlencoded:{extended:true,limit:"16mb"};e.push(q.urlencoded(n));}if(t.raw){let n=typeof t.raw=="object"?t.raw:{},r={limit:n.limit||"16mb",type:n.type||"*/*"};e.push(q.raw(r));}return e}function Po(t,e){for(let n of e)for(let r of n.routes){let{path:o,handlers:i,body:s}=r,a=Do(s);Object.entries(i).forEach(([c,l])=>{t[c](o,...a,Bn(c,o,l));});}}async function Qn(t,{combinedModules:e,channels:n}){let r=q();r.use(Mo()),r.use(Uo()),Po(r,e),r.use(q.json({limit:"16mb"})),r.use(q.urlencoded({extended:true,limit:"16mb"})),r.use(Wn()),r.use(Gn()),r.post("/api/_internal/auth/set-link-cookie",async(a,c)=>{let{session:l}=await ge(a);if(!l?.userId){c.status(401).json({error:"Not authenticated"});return}c.cookie("oauthLinkToken",l.authToken,{httpOnly:true,secure:process.env.NODE_ENV==="production",sameSite:"lax",path:"/api/_internal/auth/",maxAge:10*60*1e3}),c.json({ok:true});}),r.post("/api/_internal/method/:methodName(*)",async(a,c)=>{let{methodName:l}=a.params,p=await ge(a);try{let f=a$2(await Vt(l,a.body.args,p));c.json({data:f,typeMap:b$1(f)});}catch(f){No(c,l,f);}});let o=Io.createServer(r);await t.init({httpServer:o}),t.middlewares&&r.use(t.middlewares()),r.all("*",(a,c)=>t.handler(a,c)),process.on("unhandledRejection",(a,c)=>{console.error("Unhandled Promise Rejection:"),console.error(a instanceof Error?a.stack:a),console.error("Promise:",c);}),process.on("uncaughtException",a=>{console.error("Uncaught Exception:"),console.error(a.stack),console.trace("Full application stack:");});let i=Le()?.provider;i&&i.init({httpServer:o,channels:n});let s=process.env.MODELENCE_PORT||process.env.PORT||3e3;o.listen(s,()=>{j$1("Application started",{source:"app"});let a=a$1("_system.site.url")||`http://localhost:${s}`;console.log(`
14
+ `}var nt={success:true,message:"If an account with that email exists, a password reset link has been sent"};async function wr(t,{connectionInfo:e}){let r=z(t.email),n=e?.ip;n&&await M({bucket:"passwordReset",type:"ip",value:n}),await M({bucket:"passwordReset",type:"email",value:r});let o=await m.findOne({"emails.address":r,status:{$nin:["deleted","disabled"]}},{collation:{locale:"en",strength:2}});if(!o||!o.authMethods?.password)return nt;let i=C().provider;if(!i)throw new Error("Email provider is not configured");let s=randomBytes(32).toString("hex"),a$2=Date.now(),c=new Date(a$2),l=new Date(a$2+a.hours(1));await D.insertOne({userId:o._id,email:r,token:s,createdAt:c,expiresAt:l});let p=a$1("_system.site.url")||e?.baseUrl,u=`${qn(p,C().passwordReset?.redirectUrl)}?token=${s}`,g=(C()?.passwordReset?.template||Hn)({email:r,resetUrl:u,name:""}),E=Te(g);return await i.sendEmail({to:r,from:C()?.from||"noreply@modelence.com",subject:C()?.passwordReset?.subject||"Reset your password",text:E,html:g}),nt}async function br(t,{}){let e=z$1.string().parse(t.token),r=_e(t.password),n=await D.findOne({token:e});if(!n)throw new Error("Invalid or expired reset token");if(n.expiresAt<new Date)throw await D.deleteOne({token:e}),new Error("Reset token has expired");let o=await m.findOne({_id:n.userId});if(!o)throw new Error("User not found");let i=await Mn.hash(r,10);return await m.updateOne({_id:o._id},{$set:{"authMethods.password.hash":i}}),n.email&&await m.updateOne({_id:o._id,"emails.address":n.email},{$set:{"emails.$.verified":true}}),await Lt(o._id),await D.deleteOne({token:e}),{success:true,message:"Password has been reset successfully"}}function ot(t={}){return [{bucket:"signup",type:"ip",window:a.minutes(15),limit:t.signup?.perIp15Minutes??20},{bucket:"signup",type:"ip",window:a.days(1),limit:t.signup?.perIpPerDay??200},{bucket:"signupAttempt",type:"ip",window:a.minutes(15),limit:t.signupAttempt?.perIp15Minutes??50},{bucket:"signupAttempt",type:"ip",window:a.days(1),limit:t.signupAttempt?.perIpPerDay??500},{bucket:"signin",type:"ip",window:a.minutes(15),limit:t.signin?.perIp15Minutes??50},{bucket:"signin",type:"ip",window:a.days(1),limit:t.signin?.perIpPerDay??500},{bucket:"verification",type:"user",window:a.seconds(60),limit:t.verification?.perUserPerMinute??1},{bucket:"verification",type:"user",window:a.days(1),limit:t.verification?.perUserPerDay??10},{bucket:"passwordReset",type:"ip",window:a.minutes(15),limit:t.passwordReset?.perIp15Minutes??10},{bucket:"passwordReset",type:"ip",window:a.days(1),limit:t.passwordReset?.perIpPerDay??100},{bucket:"passwordReset",type:"email",window:a.hours(1),limit:t.passwordReset?.perEmailPerHour??5},{bucket:"passwordReset",type:"email",window:a.days(1),limit:t.passwordReset?.perEmailPerDay??10}]}var it=new x("_system.user",{stores:[m,le,$,D],queries:{getOwnProfile:dr},mutations:{signupWithPassword:yr,loginWithPassword:cr,logout:lr,resendEmailVerification:gr,sendResetPasswordToken:wr,resetPassword:br,updateProfile:ur,unlinkOAuthProvider:pr},cronJobs:{updateDisposableEmailList:Yt},rateLimits:ot(),configSchema:{"auth.email.enabled":{type:"boolean",isPublic:true,default:true},"auth.email.from":{type:"string",isPublic:false,default:""},"auth.email.verification":{type:"boolean",isPublic:true,default:false},"auth.google.enabled":{type:"boolean",isPublic:true,default:false},"auth.google.clientId":{type:"string",isPublic:false,default:""},"auth.google.clientSecret":{type:"secret",isPublic:false,default:""},"auth.github.enabled":{type:"boolean",isPublic:true,default:false},"auth.github.clientId":{type:"string",isPublic:false,default:""},"auth.github.clientSecret":{type:"secret",isPublic:false,default:""}},routes:[{path:"/api/_internal/auth/verify-email",handlers:{get:hr}}]});var Vn={withoutRemoteServer:{MONGODB_URI:"_system.mongodbUri",MONGODB_POOL_SIZE:"_system.mongodbPoolSize",MODELENCE_AUTH_GOOGLE_ENABLED:"_system.user.auth.google.enabled",MODELENCE_AUTH_GOOGLE_CLIENT_ID:"_system.user.auth.google.clientId",MODELENCE_AUTH_GOOGLE_CLIENT_SECRET:"_system.user.auth.google.clientSecret",MODELENCE_AUTH_GITHUB_ENABLED:"_system.user.auth.github.enabled",MODELENCE_AUTH_GITHUB_CLIENT_ID:"_system.user.auth.github.clientId",MODELENCE_AUTH_GITHUB_CLIENT_SECRET:"_system.user.auth.github.clientSecret",MODELENCE_AUTH_GITHUB_CLIENT_SCOPES:"_system.user.auth.github.scopes",MODELENCE_EMAIL_RESEND_API_KEY:"_system.email.resend.apiKey",MODELENCE_EMAIL_AWS_SES_REGION:"_system.email.awsSes.region",MODELENCE_EMAIL_AWS_SES_ACCESS_KEY_ID:"_system.email.awsSes.accessKeyId",MODELENCE_EMAIL_AWS_SES_SECRET_ACCESS_KEY:"_system.email.awsSes.secretAccessKey",MODELENCE_EMAIL_SMTP_HOST:"_system.email.smtp.host",MODELENCE_EMAIL_SMTP_PORT:"_system.email.smtp.port",MODELENCE_EMAIL_SMTP_USER:"_system.email.smtp.user",MODELENCE_EMAIL_SMTP_PASS:"_system.email.smtp.pass",MODELENCE_SITE_URL:"_system.site.url",MODELENCE_ENV_TYPE:"_system.env.type",MODELENCE_MULTI_INSTANCE:"_system.multiInstance",MODELENCE_ENV:"_system.env",GOOGLE_AUTH_ENABLED:"_system.user.auth.google.enabled",GOOGLE_AUTH_CLIENT_ID:"_system.user.auth.google.clientId",GOOGLE_AUTH_CLIENT_SECRET:"_system.user.auth.google.clientSecret"},withRemoteServer:{MODELENCE_SITE_URL:"_system.site.url"}};function Wn(t,e){if(e==="number"){let r=Number(t);if(isNaN(r))throw new Error(`Invalid number value for config: ${t}`);return r}if(e==="boolean"){if(t.toLowerCase()==="true")return true;if(t.toLowerCase()==="false")return false;throw new Error(`Invalid boolean value for config: ${t}`)}return t}function Gn(t,e){let r=[];for(let[n,o]of Object.entries(t)){let i=process.env[n],s=e[o];if(i){let a=s?.type??"string";r.push({key:o,type:a,value:Wn(i,a)});}}return r}function Ie(t,e="withoutRemoteServer"){let r=Vn[e];return Gn(r,t)}async function Sr({configSchema:t,cronJobsMetadata:e,stores:r,roles:n}){let o=process.env.MODELENCE_CONTAINER_ID;if(!o)throw new Error("Unable to connect to Modelence Cloud: MODELENCE_CONTAINER_ID is not set");try{let i=(r??[]).map(a=>({name:a.getName(),schema:a.getSerializedSchema(),collections:[a.getName()],version:2,indexes:a.getIndexes(),searchIndexes:a.getSearchIndexes(),indexCreationMode:a.getIndexCreationMode()})),s=await st("/api/connect","POST",{hostname:Bn.hostname(),containerId:o,dataModels:i,configSchema:t,cronJobsMetadata:e,roles:n});if(s.status==="error")throw new Error(s.error);return console.log("Successfully connected to Modelence Cloud"),s}catch(i){throw console.error("Unable to connect to Modelence Cloud:",i),i}}async function Cr(){return st("/api/configs","GET")}async function xr(){return await st("/api/sync","POST",{containerId:process.env.MODELENCE_CONTAINER_ID})}async function st(t,e,r){return ne(t,e,r?JSON.stringify(r):void 0,r?{"Content-Type":"application/json"}:{})}async function ne(t,e,r,n){let{MODELENCE_SERVICE_ENDPOINT:o,MODELENCE_SERVICE_TOKEN:i}=process.env;if(!o)throw new Error("Unable to connect to Modelence Cloud: MODELENCE_SERVICE_ENDPOINT is not set");let s=await fetch(`${o}${t}`,{method:e,headers:{Authorization:`Bearer ${i}`,...n},body:r});if(!s.ok){let a=await s.text();try{let c=JSON.parse(a);throw new Error(`Unable to connect to Modelence Cloud: HTTP status: ${s.status}, ${c?.error}`)}catch{throw new Error(`Unable to connect to Modelence Cloud: HTTP status: ${s.status}, ${a}`)}}if(!(s.status===204||s.headers?.get("content-length")==="0"))return await s.json()}var at=false,Zn=a.seconds(10);function vr(){setInterval(async()=>{if(!at){at=true;try{await xr();}catch(t){console.error("Error syncing status",t);}try{await Jn();}catch(t){console.error("Error syncing config",t);}at=false;}},Zn);}function ct(t){c(t),c(Ie(d$2(),"withRemoteServer"));}async function Jn(){let{configs:t}=await Cr();ct(t);}var K=new T("_modelenceLocks",{schema:{_id:d.string(),instanceId:d.string(),acquiredAt:d.date(),resource:d.string()},indexes:[{key:{resource:1},unique:true},{key:{resource:1,instanceId:1}},{key:{resource:1,acquiredAt:1}}],indexCreationMode:"blocking"});var Q={},Er=a.seconds(10),Or=randomBytes(32).toString("base64url"),Yn=a.seconds(30),oe=new Map,lt=t=>t instanceof MongoError&&t.code===11e3,Tr=(t,e)=>typeof t.keyPattern=="object"&&t.keyPattern!==null&&Object.prototype.hasOwnProperty.call(t.keyPattern,e),Xn=async({error:t,resource:e})=>{if(Tr(t,"resource"))return true;if(Tr(t,"_id"))return false;let r=await K.findOne({resource:e});return !!r&&r._id!==e},kr=async({resource:t,staleThresholdDate:e,instanceId:r})=>{let n=await K.upsertOne({_id:t,$or:[{instanceId:r},{acquiredAt:{$lt:e}}]},{$set:{resource:t,instanceId:r,acquiredAt:new Date},$setOnInsert:{_id:t}});return n.upsertedCount>0||n.modifiedCount>0},Rr=async({resource:t,instanceId:e,staleThresholdDate:r})=>{let n=r?{resource:t,_id:{$ne:t},$or:[{instanceId:e},{acquiredAt:{$lt:r}}]}:{resource:t,instanceId:e};return (await K.deleteOne(n)).deletedCount>0},eo=t=>{let e=t,r=oe.get(e);r&&(r.stopRequested=true,r.timer&&(clearTimeout(r.timer),r.timer=null),oe.delete(e));},Ar=({resource:t,lockDuration:e,instanceId:r})=>{let n=Math.floor(e/3),o=t,i$1=oe.get(o);if(i$1&&!i$1.stopRequested&&i$1.heartbeatInterval===n&&i$1.lockDuration===e)return;i$1&&(i$1.stopRequested=true,i$1.timer&&(clearTimeout(i$1.timer),i$1.timer=null),oe.delete(o));let s={timer:null,stopRequested:false,lockDuration:e,heartbeatInterval:n},a=()=>{s.timer=setTimeout(()=>{Y(t,{lockDuration:e,bypassCache:true,instanceId:r}).then(c=>{c||(s.stopRequested=true,i(`Lost lock while refreshing heartbeat: ${t}`,{source:"lock",resource:t,instanceId:r}));}).finally(()=>{if(s.stopRequested){oe.delete(o);return}a();});},n);};oe.set(o,s),a();};async function Y(t,{lockDuration:e=Yn,successfulLockCacheDuration:r=Er,failedLockCacheDuration:n=Er,heartbeat:o,bypassCache:i$1,instanceId:s=Or}={}){let a=Date.now();if(!i$1&&Q[t]&&a<Q[t].expiresAt)return Q[t].value&&o&&Ar({resource:t,lockDuration:e,instanceId:s}),Q[t].value;let c=new Date(a-e);i(`Attempting to acquire lock: ${t}`,{source:"lock",resource:t,instanceId:s});try{let l=await to({resource:t,staleThresholdDate:c,instanceId:s});return Q[t]={value:l,expiresAt:a+(l?r:n)},l?(o&&Ar({resource:t,lockDuration:e,instanceId:s}),i(`Lock acquired: ${t}`,{source:"lock",resource:t,instanceId:s})):i(`Failed to acquire lock (already held): ${t}`,{source:"lock",resource:t,instanceId:s}),l}catch{return Q[t]={value:false,expiresAt:a+n},i(`Failed to acquire lock (already held): ${t}`,{source:"lock",resource:t,instanceId:s}),false}}var to=async({resource:t,staleThresholdDate:e,instanceId:r})=>{try{return await kr({resource:t,staleThresholdDate:e,instanceId:r})}catch(n){if(lt(n)&&await Xn({error:n,resource:t})){if(!await Rr({resource:t,staleThresholdDate:e,instanceId:r}))return false;try{return await kr({resource:t,staleThresholdDate:e,instanceId:r})}catch(i){if(lt(i))return false;throw i}}if(lt(n))return false;throw n}};async function he(t,{instanceId:e=Or}={}){eo(t);try{let r=await K.deleteOne({_id:t,instanceId:e});return r.deletedCount===0?await Rr({resource:t,instanceId:e}):r.deletedCount>0}catch{return false}finally{delete Q[t];}}var X={},dt=null,ut=new T("_modelenceCronJobs",{schema:{alias:d.string(),lastStartDate:d.date().optional()},indexes:[{key:{alias:1},unique:true,background:true}]});function Mr(t,{description:e="",interval:r,timeout:n=Math.min(Math.max(r,a.minutes(1)),a.days(1)),handler:o}){if(X[t])throw new Error(`Duplicate cron job declaration: '${t}' already exists`);if(dt)throw new Error(`Unable to add a cron job - cron jobs have already been initialized: [${t}]`);if(r<a.seconds(5))throw new Error(`Cron job interval should not be less than 5 second [${t}]`);if(n>a.days(1))throw new Error(`Cron job timeout should not be longer than 1 day [${t}]`);X[t]={alias:t,params:{description:e,interval:r,timeout:n},handler:o,state:{isRunning:false}};}async function Ir(){if(dt)throw new Error("Cron jobs already started");let t=Object.keys(X);if(t.length>0){let e={alias:{$in:t}},r=await ut.fetch(e),n=Date.now();r.forEach(o=>{let i=X[o.alias];i&&(i.state.scheduledRunTs=o.lastStartDate?o.lastStartDate.getTime()+i.params.interval:n);}),Object.values(X).forEach(o=>{o.state.scheduledRunTs||(o.state.scheduledRunTs=n);}),dt=setInterval(ro,a.seconds(1));}}async function ro(){let t=Date.now();await Y("cron",{successfulLockCacheDuration:a.seconds(10),failedLockCacheDuration:a.seconds(30)})&&Object.values(X).forEach(async r=>{let{params:n,state:o}=r;if(o.isRunning){o.startTs&&o.startTs+n.timeout<t&&(o.isRunning=false);return}o.scheduledRunTs&&o.scheduledRunTs<=t&&await no(r);});}async function no(t){let{alias:e,params:r,handler:n,state:o}=t;o.isRunning=true,o.startTs=Date.now(),await ut.updateOne({alias:e},{$set:{lastStartDate:new Date(o.startTs)}});let i=l("cron",`cron:${e}`);try{await n(),_r(o,r),i.end("success");}catch(s){_r(o,r);let a=s instanceof Error?s:new Error(String(s));m$1(a),i.end("error"),console.error(`Error in cron job '${e}':`,s);}}function _r(t,e){t.scheduledRunTs=t.startTs?t.startTs+e.interval:Date.now(),t.startTs=void 0,t.isRunning=false;}function Dr(){return Object.values(X).map(({alias:t,params:e})=>({alias:t,description:e.description,interval:e.interval,timeout:e.timeout}))}var Pr=new x("_system.cron",{stores:[ut]});function Nr(t){let e=[...new Set(t)],r=new Map;for(let i of e){let s=i.getChainRoot();r.set(s,s.getChainTail());}let n=[...new Set(r.values())],o=new Map;for(let[i,s]of r){let a=s.getName(),c=o.get(a);if(c!==void 0&&c!==i)throw new Error(`Store collision: multiple unrelated stores use collection name '${a}'. Use .extend() to create a single extension chain instead of independent stores.`);o.set(a,i);}return {storesToInit:e,effectiveStores:n}}var pt=new x("_system.lock",{stores:[K]});var ge=new T("_modelenceMigrations",{schema:{version:d.number(),status:d.enum(["completed","failed"]),description:d.string().optional(),output:d.string().optional(),appliedAt:d.date()},indexes:[{key:{version:1},unique:true},{key:{version:1,status:1}}]});async function mt(t,{lockMode:e="acquire"}={}){if(t.length!==0){if(e==="acquire"&&!await Y("migrations")){j$1("Another instance is running migrations. Skipping migration run.",{source:"migrations"});return}try{let r=t.map(({version:s})=>s),n=await ge.fetch({version:{$in:r}}),o=new Set(n.map(({version:s})=>s)),i=t.filter(({version:s})=>!o.has(s));if(i.length===0)return;j$1(`Running migrations (${i.length})...`,{source:"migrations"});for(let{version:s,description:a,handler:c}of i){j$1(`Running migration v${s}: ${a}`,{source:"migrations"});try{let p=(await c()||"").toString().trim(),f=15*1024*1024,u=p.length>f?p.slice(0,f)+`
15
+ [Output truncated - exceeded size limit]`:p;await ge.upsertOne({version:s},{$set:{version:s,status:"completed",description:a,output:u,appliedAt:new Date}}),j$1(`Migration v${s} complete`,{source:"migrations"});}catch(l){l instanceof Error&&(await ge.upsertOne({version:s},{$set:{version:s,status:"failed",description:a,output:l.message||"",appliedAt:new Date}}),j$1(`Migration v${s} is failed: ${l.message}`,{source:"migrations"}));}}}finally{e==="acquire"&&await he("migrations");}}}function Lr(t){setTimeout(()=>{mt(t).catch(e=>{console.error("Error running migrations:",e);});},0);}var Ur=new x("_system.migration",{stores:[ge]});var $r=new x("_system.rateLimit",{stores:[fe]});async function jr({filePath:t,contentType:e,visibility:r}){return await ne("/api/files/upload","POST",JSON.stringify({filePath:t,contentType:e,visibility:r}),{"Content-Type":"application/json"})}async function Fr(t){await ne("/api/files/delete","POST",JSON.stringify({filePath:t}),{"Content-Type":"application/json"});}async function zr(t){return await ne("/api/files/download","POST",JSON.stringify({filePath:t}),{"Content-Type":"application/json"})}async function qr(t){return await ne("/api/files/url","POST",JSON.stringify({filePath:t}),{"Content-Type":"application/json"})}var Hr=new x("_system.files",{queries:{async downloadFile({filePath:t}){return zr(t)},async getFileUrl({filePath:t}){return qr(t)}},mutations:{async getUploadUrl({filePath:t,contentType:e,visibility:r}){return jr({filePath:t,contentType:e,visibility:r})},async deleteFile({filePath:t}){return Fr(t)}}});var ht=class{async init({httpServer:e}){this.config=await mo(this.isDev()?e:void 0),this.isDev()&&(console.log("Starting Vite dev server..."),this.viteServer=await createServer(this.config));}middlewares(){if(this.isDev())return this.viteServer?.middlewares??[];let e=[H.static("./.modelence/build/client".replace(/\\/g,"/"))];return this.config?.publicDir&&e.push(H.static(this.config.publicDir)),e}handler(e,r){if(this.isDev())try{r.setHeader("Cache-Control","no-store"),r.sendFile("index.html",{root:"./src/client"});}catch(n){console.error("Error serving index.html:",n),r.status(500).send("Internal Server Error");}else r.sendFile("index.html",{root:"./.modelence/build/client".replace(/\\/g,"/")});}isDev(){return process.env.NODE_ENV!=="production"}};async function uo(){let t=process.cwd();try{return (await loadConfigFromFile({command:"serve",mode:"development"},void 0,t))?.config||{}}catch(e){return console.warn("Could not load vite config:",e),{}}}function po(t,e){let r=mergeConfig(t,e);if(r.plugins&&Array.isArray(r.plugins)){let n=new Set;r.plugins=r.plugins.flat().filter(o=>{if(!o||typeof o!="object"||Array.isArray(o))return true;let i=o.name;return !i||n.has(i)?false:(n.add(i),true)}).reverse(),r.plugins.reverse();}return r}async function mo(t){let e=process.cwd(),r=await uo(),n=[".eslintrc.js",".eslintrc.json",".eslintrc","eslint.config.js",".eslintrc.yml",".eslintrc.yaml"].find(s=>lo.existsSync(ft.join(e,s))),o=[co(),fo()];if(n){let s=(await import('vite-plugin-eslint')).default;o.push(s({failOnError:false,include:["src/**/*.js","src/**/*.jsx","src/**/*.ts","src/**/*.tsx"],cwd:e,overrideConfigFile:ft.resolve(e,n)}));}let i=defineConfig({plugins:o,build:{outDir:".modelence/build/client".replace(/\\/g,"/"),emptyOutDir:true},server:{middlewareMode:true,hmr:t?{server:t}:void 0},root:"./src/client",resolve:{alias:{"@":ft.resolve(e,"src").replace(/\\/g,"/")}}});return po(i,r)}function fo(){return {name:"modelence-asset-handler",async transform(t,e){if(/\.(png|jpe?g|gif|svg|mpwebm|ogg|mp3|wav|flac|aac)$/.test(e))return process.env.NODE_ENV==="development",t}}}var Wr=new ht;function S(t,e,r){let n=v(),o=t.status(e);if(n.errorComponent)try{let i=n.errorComponent({error:r,statusCode:e});if(i)return o.send(i)}catch(i){console.error("Unhandled error in authConfig.errorComponent:",i);}return o.json({error:r})}async function gt(t,e){let{authToken:r}=await ce(e);xe(t,r),t.status(302),t.redirect("/");}async function go(t,e,r,n,o){let i=v();try{if(r.status==="disabled"||r.status==="deleted"){S(t,400,"User account is not active.");return}let s={};r.firstName===void 0&&e.firstName&&(s.firstName=e.firstName),r.lastName===void 0&&e.lastName&&(s.lastName=e.lastName),r.avatarUrl===void 0&&e.avatarUrl&&(s.avatarUrl=e.avatarUrl);let a=r;Object.keys(s).length>0&&(await m.updateOne({_id:r._id},{$set:s}),a={...r,...s}),await gt(t,r._id),i.onAfterLogin?.({provider:e.providerName,user:a,session:n,connectionInfo:o}),i.login?.onSuccess?.(a);}catch(s){throw s instanceof Error&&(i.login?.onError?.(s),i.onLoginError?.({provider:e.providerName,error:s,session:n,connectionInfo:o})),s}}async function yo(t,e,r,n,o){let i=v();if((i.oauthAccountLinking??"manual")==="auto"&&e.emailVerified){if(r.status==="disabled"||r.status==="deleted"){S(t,400,"User account is not active.");return}if(!r.emails?.find(c=>c.address.toLowerCase()===e.email.toLowerCase())?.verified){S(t,400,"User with this email already exists. Please log in instead.");return}try{let c={...r.firstName===void 0&&e.firstName&&{firstName:e.firstName},...r.lastName===void 0&&e.lastName&&{lastName:e.lastName},...r.avatarUrl===void 0&&e.avatarUrl&&{avatarUrl:e.avatarUrl}};if(!((await m.updateOne({_id:r._id,status:{$nin:["deleted","disabled"]},$or:[{[`authMethods.${e.providerName}.id`]:{$exists:!1}},{[`authMethods.${e.providerName}.id`]:e.id}]},{$set:{[`authMethods.${e.providerName}.id`]:e.id,...c}})).matchedCount>0)){S(t,400,"User with this email already exists. Please log in instead.");return}await gt(t,r._id);let f={...r,...c,authMethods:{...r.authMethods,[e.providerName]:{id:e.id}}};i.onAfterLogin?.({provider:e.providerName,user:f,session:n,connectionInfo:o}),i.login?.onSuccess?.(f);return}catch(c){throw c instanceof Error&&(i.login?.onError?.(c),i.onLoginError?.({provider:e.providerName,error:c,session:n,connectionInfo:o})),c}}S(t,400,"User with this email already exists. Please log in instead.");}async function wo(t,e,r,n){let o=v();try{let i;if(o.generateHandle){let l=await o.generateHandle({email:e.email,firstName:e.firstName,lastName:e.lastName});i=await J(l,e.email,{throwOnConflict:!1});}else i=await J(void 0,e.email);let s={handle:i,status:"active",emails:[{address:e.email,verified:e.emailVerified}],createdAt:new Date,authMethods:{[e.providerName]:{id:e.id}},...e.firstName!==void 0&&{firstName:e.firstName},...e.lastName!==void 0&&{lastName:e.lastName},...e.avatarUrl!==void 0&&{avatarUrl:e.avatarUrl}},a=await m.insertOne(s);await gt(t,a.insertedId);let c=await m.findOne({_id:a.insertedId},{readPreference:"primary"});c&&(o.onAfterSignup?.({provider:e.providerName,user:c,session:r,connectionInfo:n}),o.signup?.onSuccess?.(c));}catch(i){throw i instanceof Error&&(o.onSignupError?.({provider:e.providerName,error:i,session:r,connectionInfo:n}),o.signup?.onError?.(i)),i}}function se(t){return `${a$1("_system.site.url")}/api/_internal/auth/${t}/callback`}async function De(t,e,r){let n=await m.findOne({[`authMethods.${r.providerName}.id`]:r.id}),{session:o,connectionInfo:i}=await ye(t);if(n)return go(e,r,n,o,i);if(!r.email){S(e,400,`Email address is required for ${r.providerName} authentication.`);return}let s;try{s=await m.findOne({"emails.address":r.email,status:{$ne:"deleted"}},{collation:{locale:"en",strength:2}});}catch(a){if(a instanceof Error){let c=v();c.onSignupError?.({provider:r.providerName,error:a,session:o,connectionInfo:i}),c.signup?.onError?.(a);}throw a}return s?yo(e,r,s,o,i):wo(e,r,o,i)}function R(t){t.cookie("oauthLinkToken","",{httpOnly:true,maxAge:0,path:"/api/_internal/auth/",sameSite:"lax",secure:process.env.NODE_ENV==="production"});}function ie(t){if(t)try{t();}catch(e){console.error("Error executing OAuth hook:",e);}}function Pe(t,e,r){let n=t.query.state,o=t.cookies[r],[i,s]=(o||"").split(":");return !n||!o||n!==i?(S(e,400,"Invalid OAuth state - possible CSRF attack"),null):(e.clearCookie(r),s||"login")}async function Ne(t,e,r){let n=v(),{session:o,connectionInfo:i}=await ye(t);if(!o?.userId){R(e),S(e,401,"You must be signed in to link a provider.");return}let s=o.userId;try{let a=`authMethods.${r.providerName}.id`;if((await m.updateOne({_id:s,status:{$nin:["deleted","disabled"]},$or:[{[a]:{$exists:!1}},{[a]:r.id}]},{$set:{[a]:r.id}})).matchedCount===0){let p=await m.findOne({_id:s});if(!p||p.status==="deleted"||p.status==="disabled"){ie(()=>n.onOAuthLinkError?.({provider:r.providerName,error:new Error("User account not found or not active"),session:o,connectionInfo:i})),R(e),S(e,400,"User account is not active.");return}let f=p?.authMethods?.[r.providerName]?.id;if(f&&f!==r.id){ie(()=>n.onOAuthLinkError?.({provider:r.providerName,error:new Error(`User already has a different ${r.providerName} account linked`),session:o,connectionInfo:i})),R(e),S(e,400,`You have already linked a different ${r.providerName} account.`);return}ie(()=>n.onOAuthLinkError?.({provider:r.providerName,error:new Error(`Unexpected OAuth linking state for ${r.providerName}`),session:o,connectionInfo:i})),R(e),S(e,400,`Unable to link ${r.providerName} account.`);return}let l=await m.findOne({_id:s},{readPreference:"primary"});l&&ie(()=>n.onAfterOAuthLink?.({provider:r.providerName,user:l,session:o,connectionInfo:i})),R(e),e.status(302).redirect("/");}catch(a){if(a instanceof MongoServerError&&a.code===11e3){ie(()=>n.onOAuthLinkError?.({provider:r.providerName,error:a,session:o,connectionInfo:i})),R(e),S(e,400,`This ${r.providerName} account is already linked to a different user.`);return}if(a instanceof Error&&ie(()=>n.onOAuthLinkError?.({provider:r.providerName,error:a,session:o,connectionInfo:i})),R(e),!e.headersSent)throw a}}function Le(t){return !t||typeof t!="string"?null:t}async function Co(t,e,r,n){let o=await fetch("https://oauth2.googleapis.com/token",{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({code:t,client_id:e,client_secret:r,redirect_uri:n,grant_type:"authorization_code"})});if(!o.ok)throw new Error(`Failed to exchange code for token: ${o.statusText}`);return o.json()}async function xo(t){let e=await fetch("https://www.googleapis.com/oauth2/v2/userinfo",{headers:{Authorization:`Bearer ${t}`}});if(!e.ok)throw new Error(`Failed to fetch user info: ${e.statusText}`);return e.json()}async function vo(t,e){let r=Le(t.query.code);if(!r){S(e,400,"Missing authorization code");return}let n=Pe(t,e,"authStateGoogle");if(!n)return;let o=String(a$1("_system.user.auth.google.clientId")),i=String(a$1("_system.user.auth.google.clientSecret")),s=se("google");try{let a=await Co(r,o,i,s),c=await xo(a.access_token),l={id:c.id,email:c.email,emailVerified:c.verified_email,providerName:"google",firstName:c.given_name||void 0,lastName:c.family_name||void 0,avatarUrl:c.picture||void 0};n==="link"?await Ne(t,e,l):await De(t,e,l);}catch(a){console.error("Google OAuth error:",a),n==="link"&&R(e),S(e,500,"Authentication failed");}}function Eo(){let t=Router(),e=(r,n,o)=>{let i=!!a$1("_system.user.auth.google.enabled"),s=String(a$1("_system.user.auth.google.clientId")),a=String(a$1("_system.user.auth.google.clientSecret"));if(!i||!s||!a){S(n,503,"Google authentication is not configured");return}o();};return t.get("/api/_internal/auth/google",e,(r,n)=>{let o=String(a$1("_system.user.auth.google.clientId")),i=se("google"),s=randomBytes(32).toString("hex"),a$2=r.query.mode==="link"?"link":"login";n.cookie("authStateGoogle",`${s}:${a$2}`,{httpOnly:true,secure:process.env.NODE_ENV==="production",sameSite:"lax",maxAge:a.minutes(10)});let c=new URL("https://accounts.google.com/o/oauth2/v2/auth");c.searchParams.append("client_id",o),c.searchParams.append("redirect_uri",i),c.searchParams.append("response_type","code"),c.searchParams.append("scope","profile email"),c.searchParams.append("access_type","online"),c.searchParams.append("state",s),n.redirect(c.toString());}),t.get("/api/_internal/auth/google/callback",e,vo),t}var Gr=Eo;async function Ao(t,e,r,n){let o=await fetch("https://github.com/login/oauth/access_token",{method:"POST",headers:{"Content-Type":"application/json",Accept:"application/json"},body:JSON.stringify({client_id:e,client_secret:r,code:t,redirect_uri:n})});if(!o.ok)throw new Error(`Failed to exchange code for token: ${o.statusText}`);return o.json()}async function Oo(t){let e=await fetch("https://api.github.com/user",{headers:{Authorization:`Bearer ${t}`,Accept:"application/vnd.github.v3+json"}});if(!e.ok)throw new Error(`Failed to fetch user info: ${e.statusText}`);return e.json()}async function Ro(t){let e=await fetch("https://api.github.com/user/emails",{headers:{Authorization:`Bearer ${t}`,Accept:"application/vnd.github.v3+json"}});if(!e.ok)throw new Error(`Failed to fetch user emails: ${e.statusText}`);return e.json()}async function _o(t,e){return t.email?t.email:(await Ro(e)).find(n=>n.primary&&n.verified)?.email??null}async function Mo(t,e){let r=Le(t.query.code);if(!r){S(e,400,"Missing authorization code");return}let n=Pe(t,e,"authStateGithub");if(!n)return;let o=String(a$1("_system.user.auth.github.clientId")),i=String(a$1("_system.user.auth.github.clientSecret")),s=se("github");try{let a=await Ao(r,o,i,s),c=await Oo(a.access_token),l=await _o(c,a.access_token);if(!l){n==="link"&&R(e),S(e,400,"Unable to retrieve a primary verified email from GitHub. Please ensure your GitHub account has a verified email set as primary.");return}let p=c.name?c.name.trim().split(/\s+/):[],f=p[0]||void 0,u=p.length>1?p.slice(1).join(" "):void 0,y={id:String(c.id),email:l,emailVerified:!0,providerName:"github",firstName:f,lastName:u,avatarUrl:c.avatar_url||void 0};n==="link"?await Ne(t,e,y):await De(t,e,y);}catch(a){console.error("GitHub OAuth error:",a),n==="link"&&R(e),S(e,500,"Authentication failed");}}function Io(){let t=Router(),e=(r,n,o)=>{let i=!!a$1("_system.user.auth.github.enabled"),s=String(a$1("_system.user.auth.github.clientId")),a=String(a$1("_system.user.auth.github.clientSecret"));if(!i||!s||!a){S(n,503,"GitHub authentication is not configured");return}o();};return t.get("/api/_internal/auth/github",e,(r,n)=>{let o=String(a$1("_system.user.auth.github.clientId")),i=se("github"),s=a$1("_system.user.auth.github.scopes"),a$2=s?String(s).split(",").map(f=>f.trim()).join(" "):"user:email",c=randomBytes(32).toString("hex"),l=r.query.mode==="link"?"link":"login";n.cookie("authStateGithub",`${c}:${l}`,{httpOnly:true,secure:process.env.NODE_ENV==="production",sameSite:"lax",maxAge:a.minutes(10)});let p=new URL("https://github.com/login/oauth/authorize");p.searchParams.append("client_id",o),p.searchParams.append("redirect_uri",i),p.searchParams.append("scope",a$2),p.searchParams.append("state",c),n.redirect(p.toString());}),t.get("/api/_internal/auth/github/callback",e,Mo),t}var Br=Io;function Zr(t,e,r){return async(n,o,i)=>{let s=n.headers["x-modelence-auth-token"],a={session:null,user:null};if(typeof s=="string"&&B())try{let{session:l,user:p}=await P(s);a={session:l,user:p};}catch{}let c=l("route",`route:${t.toLowerCase()}:${e}`,{method:t,path:e,query:n.query,body:n.body,params:n.params});try{let l=await r({query:n.query,body:n.body,params:n.params,headers:n.headers,cookies:n.cookies,rawBody:Buffer.isBuffer(n.body)?n.body:void 0,req:n,res:o,next:i},a);c.end(),l&&(o.status(l.status||200),l.redirect&&o.redirect(l.redirect),l.headers&&Object.entries(l.headers).forEach(([p,f])=>{o.setHeader(p,f);}),o.send(l.data));}catch(l){c.end("error"),l instanceof a$3?o.status(l.status).send(l.message):(console.error(`Error in route handler: ${n.path}`),console.error(l),o.status(500).send(String(l)));}}}var yt=Object.freeze({});function Jr(t){yt=Object.freeze(Object.assign({},yt,t));}function Kr(){return yt}var wt=Object.freeze({});function Qr(t){wt=Object.freeze(Object.assign({},wt,t));}function Ue(){return wt}function No(t){let e=[];if(!t)return e.push(H.json({limit:"16mb"})),e.push(H.urlencoded({extended:true,limit:"16mb"})),e;if(t.json!==false){let r=typeof t.json=="object"?t.json:{limit:"16mb"};e.push(H.json(r));}if(t.urlencoded!==false){let r=typeof t.urlencoded=="object"?t.urlencoded:{extended:true,limit:"16mb"};e.push(H.urlencoded(r));}if(t.raw){let r=typeof t.raw=="object"?t.raw:{},n={limit:r.limit||"16mb",type:r.type||"*/*"};e.push(H.raw(n));}return e}function Lo(t,e){for(let r of e)for(let n of r.routes){let{path:o,handlers:i,body:s}=n,a=No(s);Object.entries(i).forEach(([c,l])=>{t[c](o,...a,Zr(c,o,l));});}}async function Yr(t,{combinedModules:e,channels:r}){let n=H();n.use(Do()),n.use(jo()),Lo(n,e),n.use(H.json({limit:"16mb"})),n.use(H.urlencoded({extended:true,limit:"16mb"})),n.use(Gr()),n.use(Br()),n.post("/api/_internal/auth/set-link-cookie",async(a,c)=>{let{session:l}=await ye(a);if(!l?.userId){c.status(401).json({error:"Not authenticated"});return}c.cookie("oauthLinkToken",l.authToken,{httpOnly:true,secure:process.env.NODE_ENV==="production",sameSite:"lax",path:"/api/_internal/auth/",maxAge:10*60*1e3}),c.json({ok:true});}),n.post("/api/_internal/method/:methodName(*)",async(a,c)=>{let{methodName:l}=a.params,p=await ye(a);try{let f=a$2(await Bt(l,a.body.args,p));c.json({data:f,typeMap:b$1(f)});}catch(f){Uo(c,l,f);}});let o=Po.createServer(n);await t.init({httpServer:o}),t.middlewares&&n.use(t.middlewares()),n.all("*",(a,c)=>t.handler(a,c)),process.on("unhandledRejection",(a,c)=>{console.error("Unhandled Promise Rejection:"),console.error(a instanceof Error?a.stack:a),console.error("Promise:",c);}),process.on("uncaughtException",a=>{console.error("Uncaught Exception:"),console.error(a.stack),console.trace("Full application stack:");});let i=Ue()?.provider;i&&i.init({httpServer:o,channels:r});let s=process.env.MODELENCE_PORT||process.env.PORT||3e3;o.listen(s,()=>{j$1("Application started",{source:"app"});let a=a$1("_system.site.url")||`http://localhost:${s}`;console.log(`
16
16
  Application started on ${a}
17
- `);});}async function ge(t){let e=(t.path??t.url??"").split("?")[0],n=e.startsWith("/api/_internal/auth/")&&e.endsWith("/callback"),r=z$1.string().nullish().transform(a=>a??null).parse(t.cookies.authToken||(n?t.cookies.oauthLinkToken:null)||t.body.authToken),o=z$1.object({screenWidth:z$1.number(),screenHeight:z$1.number(),windowWidth:z$1.number(),windowHeight:z$1.number(),pixelRatio:z$1.number(),orientation:z$1.string().nullable()}).nullish().parse(t.body.clientInfo)??{screenWidth:0,screenHeight:0,windowWidth:0,windowHeight:0,pixelRatio:1,orientation:null},i={ip:$o(t),userAgent:t.get("user-agent"),acceptLanguage:t.get("accept-language"),referrer:t.get("referrer"),baseUrl:t.protocol+"://"+t.get("host")};if(!!G()){let{session:a,user:c,roles:l}=await D(r);return {clientInfo:o,connectionInfo:i,session:a,user:c,roles:l}}return {clientInfo:o,connectionInfo:i,session:null,user:null,roles:Ce()}}function No(t,e,n){if(n instanceof a$3){n.status>=500&&n.status<600&&console.error(`Error calling ${e}:`,n),t.status(n.status).send(n.message);return}if(n instanceof Error&&n?.constructor?.name==="ZodError"&&"errors"in n){let r="";try{r=Lo(n);}catch(o){console.error(`Error parsing Zod error in ${e}:`,o),r="Validation failed";}t.status(400).send(r);return}console.error(`Error calling ${e}:`,n),t.status(500).send(n instanceof Error?n.message:String(n));}function Lo(t){let e=t.flatten(),n=Object.entries(e.fieldErrors).map(([i,s])=>`${i}: ${(s??[]).join(", ")}`),r=e.formErrors;return [...n,...r].filter(Boolean).join("; ")}function Uo(){let{frameAncestors:t}=Jn(),e=t&&t.length>0,n=e?["'self'",...t].join(" "):"'self'";return (r,o,i)=>{o.setHeader("Content-Security-Policy",`frame-ancestors ${n}`),e||o.setHeader("X-Frame-Options","SAMEORIGIN"),i();}}function $o(t){let e=t.headers["x-forwarded-for"];if(e)return (Array.isArray(e)?e[0]:e.split(",")[0]).trim();let n=t.ip||t.socket?.remoteAddress;if(n)return n.startsWith("::ffff:")?n.substring(7):n}async function qo({modules:t=[],roles:e$1={},defaultRoles:n={},server:r=Vn,migrations:o=[],email:i={},auth:s={},security:a={},websocket:c$1={}}){Yn.config(),Yn.config({path:".modelence.env"});let l=!!process.env.MODELENCE_SERVICE_ENDPOINT;Xo().then(()=>{}).catch(()=>{});let p=[wn,Pt,Dn,Ln,Un,le,lt,qn],f$1=[...p,...t];f(),Vo(p),Ho(t),Lt(e$1,n);let u=Ko(f$1);e(u);let y=Wo(f$1),g$1=Go(f$1);Qo(f$1);let C=Bo(f$1);un(C);let{storesToInit:P,effectiveStores:O}=Pn(y);if(l){let{configs:k,environmentId:H,appAlias:_,environmentAlias:er,telemetry:tr}=await bn({configSchema:u,cronJobsMetadata:In(),stores:O,roles:e$1});it(k),g({environmentId:H,appAlias:_,environmentAlias:er,telemetry:tr});}else c(Me(u));if(nn(i),rn(s),Zn(a),Kn({...c$1,provider:c$1.provider||Bt}),G()){await $t();let k=[...new Set([...P,...O])];Yo(k),await Jo(O,o);}else Nn(o);l&&(await h(),Cn()),Mn().catch(console.error),await Qn(r,{combinedModules:f$1,channels:g$1});}function Ho(t){for(let e of t){for(let[n,r]of Object.entries(e.queries))We(`${e.name}.${n}`,r);for(let[n,r]of Object.entries(e.mutations))jt(`${e.name}.${n}`,r);}}function Vo(t){for(let e of t){for(let[n,r]of Object.entries(e.queries))Ft(`${e.name}.${n}`,r);for(let[n,r]of Object.entries(e.mutations))zt(`${e.name}.${n}`,r);}}function Wo(t){return t.flatMap(e=>e.stores)}function Go(t){return t.flatMap(e=>e.channels)}function Bo(t){return t.flatMap(e=>e.rateLimits)}function Zo(t,e){console.warn(`Failed to create indexes for store '${t}'. Continuing startup.`,e);}var gt="migrations";async function Jo(t,e){if(!await Q(gt,{lockDuration:a.seconds(30),heartbeat:true}))return;let r,o;try{r=t.filter(a=>a.getIndexCreationMode()==="blocking"),o=t.filter(a=>a.getIndexCreationMode()==="background");for(let a of r)await yt(a,"full");for(let a of o)await yt(a,"drop-only");}catch(a){throw await fe(gt),a}let i=(async()=>{for(let a of o)await yt(a,"create-only");})(),s=dt(e,{lockMode:"skip"});Promise.allSettled([i,s]).then(([a,c])=>{a.status==="rejected"&&console.error("Error creating background indexes:",a.reason),c.status==="rejected"&&console.error("Error running migrations:",c.reason);}).finally(async()=>{await fe(gt);});}async function yt(t,e="full"){let n=t.getName();try{await t.createIndexes(e);}catch(r){Zo(n,r);}}function Ko(t){let e={};for(let n of t)for(let[r,o]of Object.entries(n.configSchema)){let i=`${n.name}.${r}`;if(i in e)throw new Error(`Duplicate config schema key: ${i} (${n.name})`);e[i]=o;}return e}function Qo(t){for(let e of t)for(let[n,r]of Object.entries(e.cronJobs))Rn(`${e.name}.${n}`,r);}function Yo(t){let e=ve();if(!e)throw new Error("Failed to initialize stores: MongoDB client not initialized");for(let n of t)n.init(e);}async function Xo(){if(process.env.MODELENCE_TRACKING_ENABLED!=="false"){let e=process.env.MODELENCE_SERVICE_ENDPOINT??"https://cloud.modelence.com",n=process.env.MODELENCE_ENVIRONMENT_ID,r=await ei(),o=await import('./package-XV5V7NHM.js');await fetch(`${e}/api/track/app-start`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({projectName:r.name,version:o.default.version,localHostname:Wr.hostname(),environmentId:n})});}}async function ei(){try{let t=ut.join(process.cwd(),"package.json"),e=await jo.readFile(t,"utf-8");return {name:JSON.parse(e).name||"unknown"}}catch{return {name:"unknown"}}}async function Xn(t){await U.deleteMany({userId:t}),await I.deleteMany({userId:t});}async function ni(t){await Xn(t),await m.updateOne(t,{$set:{status:"disabled",disabledAt:new Date}});}async function ri(t){await Xn(t),await m.updateOne({_id:t},{$set:{handle:`deleted-${t}-${randomUUID()}`,status:"deleted",deletedAt:new Date,authMethods:{},emails:[]}});}var wt=class{constructor(e,n){this.category=e,this.canAccessChannel=n||null;}broadcast(e,n){let r=Le().provider;if(!r){k("Websockets provider should be added to startApp",{});return}r.broadcast({category:this.category,id:e,data:n});}};function oi(t){if(!S().provider)throw new Error("Email provider is not configured, see https://docs.modelence.com/email for more details.");return S().provider?.sendEmail(t)}
18
- export{te as LiveData,x as Module,wt as ServerChannel,v as Store,D as authenticate,R as consumeRateLimit,We as createQuery,m as dbUsers,jn as deleteFile,ri as deleteUser,ni as disableUser,Fn as downloadFile,zn as getFileUrl,$n as getUploadUrl,d as schema,oi as sendEmail,qo as startApp};//# sourceMappingURL=server.js.map
17
+ `);});}async function ye(t){let e=(t.path??t.url??"").split("?")[0],r=e.startsWith("/api/_internal/auth/")&&e.endsWith("/callback"),n=q.string().nullish().transform(a=>a??null).parse(t.cookies.authToken||(r?t.cookies.oauthLinkToken:null)||t.body.authToken),o=q.object({screenWidth:q.number(),screenHeight:q.number(),windowWidth:q.number(),windowHeight:q.number(),pixelRatio:q.number(),orientation:q.string().nullable()}).nullish().parse(t.body.clientInfo)??{screenWidth:0,screenHeight:0,windowWidth:0,windowHeight:0,pixelRatio:1,orientation:null},i={ip:Fo(t),userAgent:t.get("user-agent"),acceptLanguage:t.get("accept-language"),referrer:t.get("referrer"),baseUrl:t.protocol+"://"+t.get("host")};if(!!B()){let{session:a,user:c,roles:l}=await P(n);return {clientInfo:o,connectionInfo:i,session:a,user:c,roles:l}}return {clientInfo:o,connectionInfo:i,session:null,user:null,roles:ve()}}function Uo(t,e,r){if(r instanceof a$3){r.status>=500&&r.status<600&&console.error(`Error calling ${e}:`,r),t.status(r.status).send(r.message);return}if(r instanceof Error&&r?.constructor?.name==="ZodError"&&"errors"in r){let n="";try{n=$o(r);}catch(o){console.error(`Error parsing Zod error in ${e}:`,o),n="Validation failed";}t.status(400).send(n);return}console.error(`Error calling ${e}:`,r),t.status(500).send(r instanceof Error?r.message:String(r));}function $o(t){let e=t.flatten(),r=Object.entries(e.fieldErrors).map(([i,s])=>`${i}: ${(s??[]).join(", ")}`),n=e.formErrors;return [...r,...n].filter(Boolean).join("; ")}function jo(){let{frameAncestors:t}=Kr(),e=t&&t.length>0,r=e?["'self'",...t].join(" "):"'self'";return (n,o,i)=>{o.setHeader("Content-Security-Policy",`frame-ancestors ${r}`),e||o.setHeader("X-Frame-Options","SAMEORIGIN"),i();}}function Fo(t){let e=t.headers["x-forwarded-for"];if(e)return (Array.isArray(e)?e[0]:e.split(",")[0]).trim();let r=t.ip||t.socket?.remoteAddress;if(r)return r.startsWith("::ffff:")?r.substring(7):r}async function Vo({modules:t=[],roles:e$1={},defaultRoles:r={},server:n=Wr,migrations:o=[],email:i={},auth:s={},security:a={},websocket:c$1={}}){Xr.config(),Xr.config({path:".modelence.env"});let l=!!process.env.MODELENCE_SERVICE_ENDPOINT;ti().then(()=>{}).catch(()=>{});let p=[it,Ut,Pr,Ur,$r,de,pt,Hr],f$1=[...p,...t];f(),Go(p),Wo(t),jt(e$1,r);let u=Yo(f$1);e(u);let y=Bo(f$1),g$1=Zo(f$1);Xo(f$1),it.rateLimits=ot(s.rateLimits);let E=Jo(f$1);mr(E);let{storesToInit:N,effectiveStores:O}=Nr(y);if(l){let{configs:A,environmentId:V,appAlias:_,environmentAlias:tn,telemetry:rn}=await Sr({configSchema:u,cronJobsMetadata:Dr(),stores:O,roles:e$1});ct(A),g({environmentId:V,appAlias:_,environmentAlias:tn,telemetry:rn});}else c(Ie(u));if(ir(i),sr(s),Jr(a),Qr({...c$1,provider:c$1.provider||Kt}),B()){await zt();let A=[...new Set([...N,...O])];ei(A),await Qo(O,o);}else Lr(o);l&&(await h(),vr()),Ir().catch(console.error),await Yr(n,{combinedModules:f$1,channels:g$1});}function Wo(t){for(let e of t){for(let[r,n]of Object.entries(e.queries))Ge(`${e.name}.${r}`,n);for(let[r,n]of Object.entries(e.mutations))qt(`${e.name}.${r}`,n);}}function Go(t){for(let e of t){for(let[r,n]of Object.entries(e.queries))Ht(`${e.name}.${r}`,n);for(let[r,n]of Object.entries(e.mutations))Vt(`${e.name}.${r}`,n);}}function Bo(t){return t.flatMap(e=>e.stores)}function Zo(t){return t.flatMap(e=>e.channels)}function Jo(t){return t.flatMap(e=>e.rateLimits)}function Ko(t,e){console.warn(`Failed to create indexes for store '${t}'. Continuing startup.`,e);}var bt="migrations";async function Qo(t,e){if(!await Y(bt,{lockDuration:a.seconds(30),heartbeat:true}))return;let n,o;try{n=t.filter(a=>a.getIndexCreationMode()==="blocking"),o=t.filter(a=>a.getIndexCreationMode()==="background");for(let a of n)await St(a,"full");for(let a of o)await St(a,"drop-only");}catch(a){throw await he(bt),a}let i=(async()=>{for(let a of o)await St(a,"create-only");})(),s=mt(e,{lockMode:"skip"});Promise.allSettled([i,s]).then(([a,c])=>{a.status==="rejected"&&console.error("Error creating background indexes:",a.reason),c.status==="rejected"&&console.error("Error running migrations:",c.reason);}).finally(async()=>{await he(bt);});}async function St(t,e="full"){let r=t.getName();try{await t.createIndexes(e);}catch(n){Ko(r,n);}}function Yo(t){let e={};for(let r of t)for(let[n,o]of Object.entries(r.configSchema)){let i=`${r.name}.${n}`;if(i in e)throw new Error(`Duplicate config schema key: ${i} (${r.name})`);e[i]=o;}return e}function Xo(t){for(let e of t)for(let[r,n]of Object.entries(e.cronJobs))Mr(`${e.name}.${r}`,n);}function ei(t){let e=Ee();if(!e)throw new Error("Failed to initialize stores: MongoDB client not initialized");for(let r of t)r.init(e);}async function ti(){if(process.env.MODELENCE_TRACKING_ENABLED!=="false"){let e=process.env.MODELENCE_SERVICE_ENDPOINT??"https://cloud.modelence.com",r=process.env.MODELENCE_ENVIRONMENT_ID,n=await ri(),o=await import('./package-GDCAE67E.js');await fetch(`${e}/api/track/app-start`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({projectName:n.name,version:o.default.version,localHostname:Bn.hostname(),environmentId:r})});}}async function ri(){try{let t=ft.join(process.cwd(),"package.json"),e=await zo.readFile(t,"utf-8");return {name:JSON.parse(e).name||"unknown"}}catch{return {name:"unknown"}}}async function en(t){await $.deleteMany({userId:t}),await D.deleteMany({userId:t});}async function oi(t){await en(t),await m.updateOne(t,{$set:{status:"disabled",disabledAt:new Date}});}async function ii(t){await en(t),await m.updateOne({_id:t},{$set:{handle:`deleted-${t}-${randomUUID()}`,status:"deleted",deletedAt:new Date,authMethods:{},emails:[]}});}var Ct=class{constructor(e,r){this.category=e,this.canAccessChannel=r||null;}broadcast(e,r){let n=Ue().provider;if(!n){k("Websockets provider should be added to startApp",{});return}n.broadcast({category:this.category,id:e,data:r});}};function si(t){if(!C().provider)throw new Error("Email provider is not configured, see https://docs.modelence.com/email for more details.");return C().provider?.sendEmail(t)}
18
+ export{re as LiveData,x as Module,Ct as ServerChannel,T as Store,P as authenticate,M as consumeRateLimit,Ge as createQuery,m as dbUsers,Fr as deleteFile,ii as deleteUser,oi as disableUser,zr as downloadFile,qr as getFileUrl,jr as getUploadUrl,d as schema,si as sendEmail,Vo as startApp};//# sourceMappingURL=server.js.map
19
19
  //# sourceMappingURL=server.js.map