modelence 0.21.0-ml.dev.3 → 0.21.0-ml.dev.5

package/dist/{render-UY7R4EKL.js.map → render-F724NVRL.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/ssr/render.tsx"],"names":["sessionResolver","ctx","getSsrContext","_parseSessionUser","configResolver","key","ensureSsrResolversInstalled","_setSsrSessionResolver","_setSsrConfigResolver","renderSsrTreeStream","options","callContext","loadingElement","routesElement","router","location","onShellReady","onError","sessionPayload","callInProcessMethod","queryClient","QueryClient","routedTree","tree","jsx","AppProvider","ModelenceQueryProvider","streamRef","resolve","reject","runWithSsrContext","stream","renderToPipeableStream","error","queryStateJson","pipe","destination","passthrough","Writable","chunk","_encoding","callback","err","dehydratedState","dehydrate"],"mappings":"+ZAkBA,IAAMA,CAAAA,CAAkB,IAAM,CAC5B,IAAMC,CAAAA,CAAMC,CAAAA,EAAc,CAC1B,OAAKD,CAAAA,CAGEE,CAAAA,CAAkBF,CAAAA,CAAI,OAAA,CAAQ,IAAI,CAAA,CAFhC,IAGX,CAAA,CAEMG,CAAAA,CAAkBC,GAAmB,CACzC,IAAMJ,CAAAA,CAAMC,CAAAA,GACZ,GAAKD,CAAAA,CAGL,OAAOA,CAAAA,CAAI,QAAQ,OAAA,CAAQI,CAAG,CAAA,EAAG,KACnC,EAEA,SAASC,CAAAA,EAA8B,CACrCC,CAAAA,CAAuBP,CAAe,CAAA,CACtCQ,CAAAA,CAAsBJ,CAAc,EACtC,CA0BA,eAAsBK,CAAAA,CAAoBC,CAAAA,CAAqD,CAC7F,GAAM,CAAE,WAAA,CAAAC,CAAAA,CAAa,cAAA,CAAAC,EAAgB,aAAA,CAAAC,CAAAA,CAAe,MAAA,CAAAC,CAAAA,CAAQ,SAAAC,CAAAA,CAAU,YAAA,CAAAC,CAAAA,CAAc,OAAA,CAAAC,GAAQ,CAAA,CAC1FP,CAAAA,CAEFJ,CAAAA,EAA4B,CAE5B,IAAMY,CAAAA,CAAiB,MAAMC,CAAAA,CAC3B,sBAAA,CACA,EAAC,CACDR,CACF,CAAA,CAEMS,GAAAA,CAAc,IAAIC,WAAAA,CAAY,CAClC,cAAA,CAAgB,CACd,QAAS,CACP,KAAA,CAAO,KAAA,CACP,MAAA,CAAQ,CACV,CACF,CACF,CAAC,CAAA,CAEKC,EAAaR,CAAAA,CAASA,CAAAA,CAAO,CAAE,QAAA,CAAUD,EAAe,QAAA,CAAAE,CAAS,CAAC,CAAA,CAAIF,EACtEU,CAAAA,CACJC,GAAAA,CAACC,GAAAA,CAAA,CAAY,eAAgBb,CAAAA,CAC3B,QAAA,CAAAY,GAAAA,CAACE,CAAAA,CAAA,CAAuB,MAAA,CAAQN,GAAAA,CAAc,QAAA,CAAAE,CAAAA,CAAW,EAC3D,CAAA,CAGEK,CAAAA,CAAmC,IAAA,CAmCvC,MAhCmB,IAAI,OAAA,CAAwB,CAACC,CAAAA,CAASC,CAAAA,GAAW,CAGlEC,CAAAA,CACE,CACE,WAAA,CAAAnB,CAAAA,CACA,YAAAS,GAAAA,CACA,OAAA,CAAS,CACP,IAAA,CAAMF,EAAe,IAAA,CACrB,OAAA,CAAUA,CAAAA,CAAe,OAAA,EAAuB,EAClD,CACF,CAAA,CACA,IAAM,CACJ,IAAMa,CAAAA,CAASC,sBAAAA,CAAuBT,CAAAA,CAAM,CAC1C,YAAA,EAAe,CACbI,CAAAA,CAAYI,CAAAA,CACZf,KAAe,CACfY,CAAAA,CAAQG,CAAM,EAChB,EACA,YAAA,CAAaE,CAAAA,CAAO,CAClBJ,CAAAA,CAAOI,CAAK,EACd,CAAA,CACA,OAAA,CAAQA,CAAAA,CAAO,CACbhB,GAAAA,GAAUgB,CAAK,EACjB,CACF,CAAC,CAAA,CACD,OAAOF,CACT,CACF,EACF,CAAC,CAAA,CAKD,IAAIG,GAAAA,CAAgC,KAE9BC,CAAAA,CAAQC,CAAAA,EACL,IAAI,OAAA,CAAQ,CAACR,CAAAA,CAASC,CAAAA,GAAW,CACtC,GAAI,CAACF,CAAAA,CAAW,CACdE,CAAAA,CAAO,IAAI,MAAM,gCAAgC,CAAC,CAAA,CAClD,MACF,CAKA,IAAMQ,CAAAA,CAAc,IAAIC,QAAAA,CAAS,CAC/B,KAAA,CAAMC,CAAAA,CAAOC,CAAAA,CAAWC,CAAAA,CAAU,CAChCL,CAAAA,CAAY,KAAA,CAAMG,CAAAA,CAAQG,CAAAA,EAAQD,EAASC,CAAAA,EAAO,MAAS,CAAC,EAC9D,EACA,KAAA,CAAMD,CAAAA,CAAU,CACd,GAAI,CACF,IAAME,CAAAA,CAAmCC,SAAAA,CAAUxB,GAAW,EAC9Dc,GAAAA,CAAiB,IAAA,CAAK,SAAA,CAAUS,CAAe,EACjD,CAAA,OAAE,CACAvB,GAAAA,CAAY,KAAA,GACd,CACAqB,CAAAA,EAAS,CACTb,CAAAA,GACF,CACF,CAAC,CAAA,CAEDS,CAAAA,CAAY,GAAG,OAAA,CAASR,CAAM,CAAA,CAC9BO,CAAAA,CAAY,GAAG,OAAA,CAASP,CAAM,CAAA,CAE9BF,CAAAA,CAAU,KAAKU,CAAW,EAC5B,CAAC,CAAA,CAGH,OAAO,CACL,YAAA,CAAc,IAAA,CAAK,SAAA,CAAU,CAAE,OAAA,CAASnB,CAAe,CAAC,CAAA,CACxD,KAAAiB,CAAAA,CACA,aAAA,CAAe,IAAM,CACnB,GAAID,GAAAA,GAAmB,IAAA,CACrB,MAAM,IAAI,MAAM,+CAA+C,CAAA,CAEjE,OAAOA,GACT,CACF,CACF","file":"render-UY7R4EKL.js","sourcesContent":["import React from 'react';\nimport { renderToPipeableStream, type PipeableStream } from 'react-dom/server';\nimport { Writable } from 'node:stream';\nimport { QueryClient, dehydrate, type DehydratedState } from '@tanstack/react-query';\nimport { AppProvider } from '../client/AppProvider';\nimport { ModelenceQueryProvider } from '../client/queryProvider';\nimport { getSsrContext, runWithSsrContext } from './context';\nimport { callInProcessMethod } from './callInProcess';\nimport type { Context } from '../methods/types';\nimport {\n  _parseSessionUser,\n  _setSsrSessionResolver,\n  type SessionInitPayload,\n} from '../client/session';\nimport { _setSsrConfigResolver } from '../config/client';\nimport type { ConfigKey, Configs } from '../config/types';\nimport type { SsrRouter } from '../client/renderApp';\n\nconst sessionResolver = () => {\n  const ctx = getSsrContext();\n  if (!ctx) {\n    return null;\n  }\n  return _parseSessionUser(ctx.session.user);\n};\n\nconst configResolver = (key: ConfigKey) => {\n  const ctx = getSsrContext();\n  if (!ctx) {\n    return undefined;\n  }\n  return ctx.session.configs[key]?.value;\n};\n\nfunction ensureSsrResolversInstalled() {\n  _setSsrSessionResolver(sessionResolver);\n  _setSsrConfigResolver(configResolver);\n}\n\nexport type SsrRenderOptions = {\n  callContext: Context;\n  loadingElement: React.ReactNode;\n  routesElement: React.ReactNode;\n  router?: SsrRouter;\n  location?: string;\n};\n\nexport type SsrStreamHandle = {\n  /** Session bootstrap payload — inline before the shell flushes. */\n  sessionState: string;\n  /** Pipe React's HTML into `destination`. Resolves when streaming finishes. */\n  pipe: (destination: Writable) => Promise<void>;\n  /** Dehydrated query state. Only call after `pipe()` resolves. */\n  getQueryState: () => string;\n};\n\nexport type SsrStreamOptions = SsrRenderOptions & {\n  /** Fires when the shell is flushed; caller writes prelude + state here. */\n  onShellReady?: () => void;\n  /** Non-fatal SSR errors (Suspense fallbacks, etc.). */\n  onError?: (error: unknown) => void;\n};\n\nexport async function renderSsrTreeStream(options: SsrStreamOptions): Promise<SsrStreamHandle> {\n  const { callContext, loadingElement, routesElement, router, location, onShellReady, onError } =\n    options;\n\n  ensureSsrResolversInstalled();\n\n  const sessionPayload = await callInProcessMethod<SessionInitPayload>(\n    '_system.session.init',\n    {},\n    callContext\n  );\n\n  const queryClient = new QueryClient({\n    defaultOptions: {\n      queries: {\n        retry: false,\n        gcTime: 0,\n      },\n    },\n  });\n\n  const routedTree = router ? router({ children: routesElement, location }) : routesElement;\n  const tree = (\n    <AppProvider loadingElement={loadingElement}>\n      <ModelenceQueryProvider client={queryClient}>{routedTree}</ModelenceQueryProvider>\n    </AppProvider>\n  );\n\n  let streamRef: PipeableStream | null = null;\n  // Resolves with the stream once React renders above-fallback content;\n  // rejects on shell errors so the caller can fall back to a static response.\n  const shellReady = new Promise<PipeableStream>((resolve, reject) => {\n    // Run the render inside the SSR context so components can resolve\n    // session/config/query state from the per-request scope.\n    runWithSsrContext(\n      {\n        callContext,\n        queryClient,\n        session: {\n          user: sessionPayload.user,\n          configs: (sessionPayload.configs as Configs) ?? {},\n        },\n      },\n      () => {\n        const stream = renderToPipeableStream(tree, {\n          onShellReady() {\n            streamRef = stream;\n            onShellReady?.();\n            resolve(stream);\n          },\n          onShellError(error) {\n            reject(error);\n          },\n          onError(error) {\n            onError?.(error);\n          },\n        });\n        return stream;\n      }\n    );\n  });\n\n  // Await so shell errors surface before the caller starts piping.\n  await shellReady;\n\n  let queryStateJson: string | null = null;\n\n  const pipe = (destination: Writable): Promise<void> => {\n    return new Promise((resolve, reject) => {\n      if (!streamRef) {\n        reject(new Error('SSR stream was not initialized'));\n        return;\n      }\n\n      // react-dom calls `destination.end()` when done. The caller still needs\n      // to write the epilogue + query state, so wrap with a passthrough whose\n      // `final()` resolves the pipe promise without closing the response.\n      const passthrough = new Writable({\n        write(chunk, _encoding, callback) {\n          destination.write(chunk, (err) => callback(err ?? undefined));\n        },\n        final(callback) {\n          try {\n            const dehydratedState: DehydratedState = dehydrate(queryClient);\n            queryStateJson = JSON.stringify(dehydratedState);\n          } finally {\n            queryClient.clear();\n          }\n          callback();\n          resolve();\n        },\n      });\n\n      passthrough.on('error', reject);\n      destination.on('error', reject);\n\n      streamRef.pipe(passthrough);\n    });\n  };\n\n  return {\n    sessionState: JSON.stringify({ session: sessionPayload }),\n    pipe,\n    getQueryState: () => {\n      if (queryStateJson === null) {\n        throw new Error('getQueryState() called before stream finished');\n      }\n      return queryStateJson;\n    },\n  };\n}\n"]}
+{"version":3,"sources":["../src/ssr/render.tsx"],"names":["sessionResolver","ctx","getSsrContext","_parseSessionUser","configResolver","key","ensureSsrResolversInstalled","_setSsrSessionResolver","_setSsrConfigResolver","renderSsrTreeStream","options","callContext","loadingElement","routesElement","router","location","onShellReady","onError","sessionPayload","callInProcessMethod","queryClient","QueryClient","routedTree","tree","jsx","AppProvider","ModelenceQueryProvider","streamRef","resolve","reject","runWithSsrContext","stream","renderToPipeableStream","error","queryStateJson","pipe","destination","passthrough","Writable","chunk","_encoding","callback","err","dehydratedState","dehydrate"],"mappings":"+ZAkBA,IAAMA,CAAAA,CAAkB,IAAM,CAC5B,IAAMC,CAAAA,CAAMC,CAAAA,EAAc,CAC1B,OAAKD,CAAAA,CAGEE,CAAAA,CAAkBF,CAAAA,CAAI,OAAA,CAAQ,IAAI,CAAA,CAFhC,IAGX,CAAA,CAEMG,CAAAA,CAAkBC,GAAmB,CACzC,IAAMJ,CAAAA,CAAMC,CAAAA,GACZ,GAAKD,CAAAA,CAGL,OAAOA,CAAAA,CAAI,QAAQ,OAAA,CAAQI,CAAG,CAAA,EAAG,KACnC,EAEA,SAASC,CAAAA,EAA8B,CACrCC,CAAAA,CAAuBP,CAAe,CAAA,CACtCQ,CAAAA,CAAsBJ,CAAc,EACtC,CA0BA,eAAsBK,CAAAA,CAAoBC,CAAAA,CAAqD,CAC7F,GAAM,CAAE,WAAA,CAAAC,CAAAA,CAAa,cAAA,CAAAC,EAAgB,aAAA,CAAAC,CAAAA,CAAe,MAAA,CAAAC,CAAAA,CAAQ,SAAAC,CAAAA,CAAU,YAAA,CAAAC,CAAAA,CAAc,OAAA,CAAAC,GAAQ,CAAA,CAC1FP,CAAAA,CAEFJ,CAAAA,EAA4B,CAE5B,IAAMY,CAAAA,CAAiB,MAAMC,CAAAA,CAC3B,sBAAA,CACA,EAAC,CACDR,CACF,CAAA,CAEMS,GAAAA,CAAc,IAAIC,WAAAA,CAAY,CAClC,cAAA,CAAgB,CACd,QAAS,CACP,KAAA,CAAO,KAAA,CACP,MAAA,CAAQ,CACV,CACF,CACF,CAAC,CAAA,CAEKC,EAAaR,CAAAA,CAASA,CAAAA,CAAO,CAAE,QAAA,CAAUD,EAAe,QAAA,CAAAE,CAAS,CAAC,CAAA,CAAIF,EACtEU,CAAAA,CACJC,GAAAA,CAACC,GAAAA,CAAA,CAAY,eAAgBb,CAAAA,CAC3B,QAAA,CAAAY,GAAAA,CAACE,CAAAA,CAAA,CAAuB,MAAA,CAAQN,GAAAA,CAAc,QAAA,CAAAE,CAAAA,CAAW,EAC3D,CAAA,CAGEK,CAAAA,CAAmC,IAAA,CAmCvC,MAhCmB,IAAI,OAAA,CAAwB,CAACC,CAAAA,CAASC,CAAAA,GAAW,CAGlEC,CAAAA,CACE,CACE,WAAA,CAAAnB,CAAAA,CACA,YAAAS,GAAAA,CACA,OAAA,CAAS,CACP,IAAA,CAAMF,EAAe,IAAA,CACrB,OAAA,CAAUA,CAAAA,CAAe,OAAA,EAAuB,EAClD,CACF,CAAA,CACA,IAAM,CACJ,IAAMa,CAAAA,CAASC,sBAAAA,CAAuBT,CAAAA,CAAM,CAC1C,YAAA,EAAe,CACbI,CAAAA,CAAYI,CAAAA,CACZf,KAAe,CACfY,CAAAA,CAAQG,CAAM,EAChB,EACA,YAAA,CAAaE,CAAAA,CAAO,CAClBJ,CAAAA,CAAOI,CAAK,EACd,CAAA,CACA,OAAA,CAAQA,CAAAA,CAAO,CACbhB,GAAAA,GAAUgB,CAAK,EACjB,CACF,CAAC,CAAA,CACD,OAAOF,CACT,CACF,EACF,CAAC,CAAA,CAKD,IAAIG,GAAAA,CAAgC,KAE9BC,CAAAA,CAAQC,CAAAA,EACL,IAAI,OAAA,CAAQ,CAACR,CAAAA,CAASC,CAAAA,GAAW,CACtC,GAAI,CAACF,CAAAA,CAAW,CACdE,CAAAA,CAAO,IAAI,MAAM,gCAAgC,CAAC,CAAA,CAClD,MACF,CAKA,IAAMQ,CAAAA,CAAc,IAAIC,QAAAA,CAAS,CAC/B,KAAA,CAAMC,CAAAA,CAAOC,CAAAA,CAAWC,CAAAA,CAAU,CAChCL,CAAAA,CAAY,KAAA,CAAMG,CAAAA,CAAQG,CAAAA,EAAQD,EAASC,CAAAA,EAAO,MAAS,CAAC,EAC9D,EACA,KAAA,CAAMD,CAAAA,CAAU,CACd,GAAI,CACF,IAAME,CAAAA,CAAmCC,SAAAA,CAAUxB,GAAW,EAC9Dc,GAAAA,CAAiB,IAAA,CAAK,SAAA,CAAUS,CAAe,EACjD,CAAA,OAAE,CACAvB,GAAAA,CAAY,KAAA,GACd,CACAqB,CAAAA,EAAS,CACTb,CAAAA,GACF,CACF,CAAC,CAAA,CAEDS,CAAAA,CAAY,GAAG,OAAA,CAASR,CAAM,CAAA,CAC9BO,CAAAA,CAAY,GAAG,OAAA,CAASP,CAAM,CAAA,CAE9BF,CAAAA,CAAU,KAAKU,CAAW,EAC5B,CAAC,CAAA,CAGH,OAAO,CACL,YAAA,CAAc,IAAA,CAAK,SAAA,CAAU,CAAE,OAAA,CAASnB,CAAe,CAAC,CAAA,CACxD,KAAAiB,CAAAA,CACA,aAAA,CAAe,IAAM,CACnB,GAAID,GAAAA,GAAmB,IAAA,CACrB,MAAM,IAAI,MAAM,+CAA+C,CAAA,CAEjE,OAAOA,GACT,CACF,CACF","file":"render-F724NVRL.js","sourcesContent":["import React from 'react';\nimport { renderToPipeableStream, type PipeableStream } from 'react-dom/server';\nimport { Writable } from 'node:stream';\nimport { QueryClient, dehydrate, type DehydratedState } from '@tanstack/react-query';\nimport { AppProvider } from '../client/AppProvider';\nimport { ModelenceQueryProvider } from '../client/queryProvider';\nimport { getSsrContext, runWithSsrContext } from './context';\nimport { callInProcessMethod } from './callInProcess';\nimport type { Context } from '../methods/types';\nimport {\n  _parseSessionUser,\n  _setSsrSessionResolver,\n  type SessionInitPayload,\n} from '../client/session';\nimport { _setSsrConfigResolver } from '../config/client';\nimport type { ConfigKey, Configs } from '../config/types';\nimport type { SsrRouter } from '../client/renderApp';\n\nconst sessionResolver = () => {\n  const ctx = getSsrContext();\n  if (!ctx) {\n    return null;\n  }\n  return _parseSessionUser(ctx.session.user);\n};\n\nconst configResolver = (key: ConfigKey) => {\n  const ctx = getSsrContext();\n  if (!ctx) {\n    return undefined;\n  }\n  return ctx.session.configs[key]?.value;\n};\n\nfunction ensureSsrResolversInstalled() {\n  _setSsrSessionResolver(sessionResolver);\n  _setSsrConfigResolver(configResolver);\n}\n\nexport type SsrRenderOptions = {\n  callContext: Context;\n  loadingElement: React.ReactNode;\n  routesElement: React.ReactNode;\n  router?: SsrRouter;\n  location?: string;\n};\n\nexport type SsrStreamHandle = {\n  /** Session bootstrap payload — inline before the shell flushes. */\n  sessionState: string;\n  /** Pipe React's HTML into `destination`. Resolves when streaming finishes. */\n  pipe: (destination: Writable) => Promise<void>;\n  /** Dehydrated query state. Only call after `pipe()` resolves. */\n  getQueryState: () => string;\n};\n\nexport type SsrStreamOptions = SsrRenderOptions & {\n  /** Fires when the shell is flushed; caller writes prelude + state here. */\n  onShellReady?: () => void;\n  /** Non-fatal SSR errors (Suspense fallbacks, etc.). */\n  onError?: (error: unknown) => void;\n};\n\nexport async function renderSsrTreeStream(options: SsrStreamOptions): Promise<SsrStreamHandle> {\n  const { callContext, loadingElement, routesElement, router, location, onShellReady, onError } =\n    options;\n\n  ensureSsrResolversInstalled();\n\n  const sessionPayload = await callInProcessMethod<SessionInitPayload>(\n    '_system.session.init',\n    {},\n    callContext\n  );\n\n  const queryClient = new QueryClient({\n    defaultOptions: {\n      queries: {\n        retry: false,\n        gcTime: 0,\n      },\n    },\n  });\n\n  const routedTree = router ? router({ children: routesElement, location }) : routesElement;\n  const tree = (\n    <AppProvider loadingElement={loadingElement}>\n      <ModelenceQueryProvider client={queryClient}>{routedTree}</ModelenceQueryProvider>\n    </AppProvider>\n  );\n\n  let streamRef: PipeableStream | null = null;\n  // Resolves with the stream once React renders above-fallback content;\n  // rejects on shell errors so the caller can fall back to a static response.\n  const shellReady = new Promise<PipeableStream>((resolve, reject) => {\n    // Run the render inside the SSR context so components can resolve\n    // session/config/query state from the per-request scope.\n    runWithSsrContext(\n      {\n        callContext,\n        queryClient,\n        session: {\n          user: sessionPayload.user,\n          configs: (sessionPayload.configs as Configs) ?? {},\n        },\n      },\n      () => {\n        const stream = renderToPipeableStream(tree, {\n          onShellReady() {\n            streamRef = stream;\n            onShellReady?.();\n            resolve(stream);\n          },\n          onShellError(error) {\n            reject(error);\n          },\n          onError(error) {\n            onError?.(error);\n          },\n        });\n        return stream;\n      }\n    );\n  });\n\n  // Await so shell errors surface before the caller starts piping.\n  await shellReady;\n\n  let queryStateJson: string | null = null;\n\n  const pipe = (destination: Writable): Promise<void> => {\n    return new Promise((resolve, reject) => {\n      if (!streamRef) {\n        reject(new Error('SSR stream was not initialized'));\n        return;\n      }\n\n      // react-dom calls `destination.end()` when done. The caller still needs\n      // to write the epilogue + query state, so wrap with a passthrough whose\n      // `final()` resolves the pipe promise without closing the response.\n      const passthrough = new Writable({\n        write(chunk, _encoding, callback) {\n          destination.write(chunk, (err) => callback(err ?? undefined));\n        },\n        final(callback) {\n          try {\n            const dehydratedState: DehydratedState = dehydrate(queryClient);\n            queryStateJson = JSON.stringify(dehydratedState);\n          } finally {\n            queryClient.clear();\n          }\n          callback();\n          resolve();\n        },\n      });\n\n      passthrough.on('error', reject);\n      destination.on('error', reject);\n\n      streamRef.pipe(passthrough);\n    });\n  };\n\n  return {\n    sessionState: JSON.stringify({ session: sessionPayload }),\n    pipe,\n    getQueryState: () => {\n      if (queryStateJson === null) {\n        throw new Error('getQueryState() called before stream finished');\n      }\n      return queryStateJson;\n    },\n  };\n}\n"]}

package/dist/renderApp-MUFL3XZS.js

@@ -0,0 +1,2 @@
+export{c as _getSsrSnapshot,d as renderApp}from'./chunk-FETZWGRY.js';import'./chunk-FPJ4JADS.js';import'./chunk-AMJHJA2V.js';import'./chunk-5M6FUMUK.js';import'./chunk-DO5TZLF5.js';//# sourceMappingURL=renderApp-MUFL3XZS.js.map
+//# sourceMappingURL=renderApp-MUFL3XZS.js.map

package/dist/{renderApp-ZMIJGGAP.js.map → renderApp-MUFL3XZS.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"renderApp-ZMIJGGAP.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"renderApp-MUFL3XZS.js"}

package/dist/server-MX562GVR.js

@@ -0,0 +1,2 @@
+export{g as getCallContext,f as startServer}from'./chunk-GSNESHYT.js';import'./chunk-POLHYJF6.js';import'./chunk-UP2DHNXI.js';import'./chunk-MIRF7FP3.js';import'./chunk-ENHGU3X4.js';import'./chunk-5M6FUMUK.js';import'./chunk-DO5TZLF5.js';//# sourceMappingURL=server-MX562GVR.js.map
+//# sourceMappingURL=server-MX562GVR.js.map

package/dist/{server-WW7YMRBB.js.map → server-MX562GVR.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"server-WW7YMRBB.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"server-MX562GVR.js"}

package/dist/server.d.ts

@@ -387,9 +387,7 @@ type AuthConfig = {
     /** @deprecated Use {@link AuthConfig.onAfterSignup} and {@link AuthConfig.onSignupError} instead. */
     signup?: AuthOption;
     /**
-     * Enables passwordless magic link authentication. Disabled by default —
-     * magic link doubles as sign-up (an unknown email gets an account created
-     * when the link is used), so it must be opted into explicitly.
+     * Enables passwordless magic link authentication. Disabled by default.
      *
      * Requires an email provider and delivery settings under the `email` option
      * (see `EmailConfig.magicLink`).
@@ -398,13 +396,20 @@ type AuthConfig = {
      * ```typescript
      * startApp({
      *   auth: {
-     *     magicLink: { enabled: true },
+     *     magicLink: { enabled: true, allowSignup: true },
      *   },
      * });
      * ```
      */
     magicLink?: {
         enabled?: boolean;
+        /**
+         * Allows a magic link (or its one-time code) to create an account when
+         * the email has no existing one — combined sign-in/sign-up, like OAuth.
+         * Disabled by default: unknown emails get the same generic "link sent"
+         * response but no email, and no account is ever auto-created.
+         */
+        allowSignup?: boolean;
     };
     /**
      * Controls how OAuth providers handle existing accounts with matching email.

package/dist/server.js

@@ -1,2 +1,2 @@
-export{m as ObjectId,k as ServerChannel,a as consumeRateLimit,c as deleteFile,j as deleteUser,i as disableUser,d as downloadFile,e as getFileUrl,b as getUploadUrl,l as sendEmail,h as startApp}from'./chunk-B5XMG3OE.js';import'./chunk-M24E3CAP.js';export{w as LiveData,a as Module,b as Store,v as authenticate,i as clearSessionUser,y as createQuery,k as createSession,f as dbSessions,o as dbUsers,j as invalidateAllUserSessions,g as obtainSession,c as schema,l as setAuthTokenCookie,h as setSessionUser}from'./chunk-LVB7YU4P.js';import'./chunk-MIRF7FP3.js';export{a as getConfig}from'./chunk-ENHGU3X4.js';import'./chunk-5M6FUMUK.js';import'./chunk-DO5TZLF5.js';//# sourceMappingURL=server.js.map
+export{m as ObjectId,k as ServerChannel,a as consumeRateLimit,c as deleteFile,j as deleteUser,i as disableUser,d as downloadFile,e as getFileUrl,b as getUploadUrl,l as sendEmail,h as startApp}from'./chunk-GSNESHYT.js';import'./chunk-POLHYJF6.js';export{w as LiveData,a as Module,b as Store,v as authenticate,i as clearSessionUser,y as createQuery,k as createSession,f as dbSessions,o as dbUsers,j as invalidateAllUserSessions,g as obtainSession,c as schema,l as setAuthTokenCookie,h as setSessionUser}from'./chunk-UP2DHNXI.js';import'./chunk-MIRF7FP3.js';export{a as getConfig}from'./chunk-ENHGU3X4.js';import'./chunk-5M6FUMUK.js';import'./chunk-DO5TZLF5.js';//# sourceMappingURL=server.js.map
 //# sourceMappingURL=server.js.map

package/dist/transport-ESHFT6E2.js

@@ -0,0 +1,2 @@
+import {c,a}from'./chunk-WN6LHVUX.js';import'./chunk-UP2DHNXI.js';import'./chunk-ENHGU3X4.js';import {v,u}from'./chunk-AMJHJA2V.js';import'./chunk-5M6FUMUK.js';import'./chunk-DO5TZLF5.js';function d(){return v(async(t,r)=>{let o=c();return o?a(t,r,o.callContext):u(t,r)})}export{d as installSsrCallMethodTransport};//# sourceMappingURL=transport-ESHFT6E2.js.map
+//# sourceMappingURL=transport-ESHFT6E2.js.map

package/dist/{transport-Q6Q42CSY.js.map → transport-ESHFT6E2.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/ssr/transport.ts"],"names":["installSsrCallMethodTransport","setCallMethodTransport","methodName","args","ssrCtx","getSsrContext","callInProcessMethod","defaultCallMethodTransport"],"mappings":"4LAcO,SAASA,CAAAA,EAA4C,CAC1D,OAAOC,CAAAA,CAAuB,MAAUC,EAAoBC,CAAAA,GAAqB,CAC/E,IAAMC,CAAAA,CAASC,CAAAA,EAAc,CAC7B,OAAKD,CAAAA,CAIEE,CAAAA,CAAuBJ,CAAAA,CAAYC,CAAAA,CAAMC,CAAAA,CAAO,WAAW,CAAA,CAHzDG,CAAAA,CAA8BL,CAAAA,CAAYC,CAAI,CAIzD,CAAC,CACH","file":"transport-Q6Q42CSY.js","sourcesContent":["import {\n  setCallMethodTransport,\n  defaultCallMethodTransport,\n  type MethodArgs,\n} from '../client/method';\nimport { callInProcessMethod } from './callInProcess';\nimport { getSsrContext } from './context';\n\n/**\n * Routes `callMethod` through `runMethod` in-process during an active SSR\n * render. Outside a render (e.g. server-side `callMethod` from jobs or other\n * non-render code) there is no request context, so it falls back to the\n * default HTTP transport — installing SSR must not break those call sites.\n */\nexport function installSsrCallMethodTransport(): () => void {\n  return setCallMethodTransport(async <T>(methodName: string, args: MethodArgs) => {\n    const ssrCtx = getSsrContext();\n    if (!ssrCtx) {\n      return defaultCallMethodTransport<T>(methodName, args);\n    }\n\n    return callInProcessMethod<T>(methodName, args, ssrCtx.callContext);\n  });\n}\n"]}
+{"version":3,"sources":["../src/ssr/transport.ts"],"names":["installSsrCallMethodTransport","setCallMethodTransport","methodName","args","ssrCtx","getSsrContext","callInProcessMethod","defaultCallMethodTransport"],"mappings":"4LAcO,SAASA,CAAAA,EAA4C,CAC1D,OAAOC,CAAAA,CAAuB,MAAUC,EAAoBC,CAAAA,GAAqB,CAC/E,IAAMC,CAAAA,CAASC,CAAAA,EAAc,CAC7B,OAAKD,CAAAA,CAIEE,CAAAA,CAAuBJ,CAAAA,CAAYC,CAAAA,CAAMC,CAAAA,CAAO,WAAW,CAAA,CAHzDG,CAAAA,CAA8BL,CAAAA,CAAYC,CAAI,CAIzD,CAAC,CACH","file":"transport-ESHFT6E2.js","sourcesContent":["import {\n  setCallMethodTransport,\n  defaultCallMethodTransport,\n  type MethodArgs,\n} from '../client/method';\nimport { callInProcessMethod } from './callInProcess';\nimport { getSsrContext } from './context';\n\n/**\n * Routes `callMethod` through `runMethod` in-process during an active SSR\n * render. Outside a render (e.g. server-side `callMethod` from jobs or other\n * non-render code) there is no request context, so it falls back to the\n * default HTTP transport — installing SSR must not break those call sites.\n */\nexport function installSsrCallMethodTransport(): () => void {\n  return setCallMethodTransport(async <T>(methodName: string, args: MethodArgs) => {\n    const ssrCtx = getSsrContext();\n    if (!ssrCtx) {\n      return defaultCallMethodTransport<T>(methodName, args);\n    }\n\n    return callInProcessMethod<T>(methodName, args, ssrCtx.callContext);\n  });\n}\n"]}

package/package.json

@@ -1,7 +1,7 @@
 {
   "type": "module",
   "name": "modelence",
-  "version": "0.21.0-ml.dev.3",
+  "version": "0.21.0-ml.dev.5",
   "description": "The Node.js Framework for Real-Time MongoDB Apps",
   "main": "dist/index.js",
   "types": "dist/global.d.ts",

package/dist/chunk-54MUUAZG.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/client/localStorage.ts","../src/client/clientConfig.ts","../src/client/errorHandler.ts","../src/client/method.ts","../src/config/client.ts","../src/client/session.ts","../src/auth/client/index.ts"],"names":["SESSION_KEY","hasLocalStorage","getLocalStorageSession","sessionJson","e","setLocalStorageSession","session","config","configureClient","userConfig","getClientConfig","errorHandler","error","methodName","setErrorHandler","handler","handleError","MethodError","message","status","code","defaultCallMethodTransport","args","baseUrl","call","TRANSPORT_KEY","getTransport","setCallMethodTransport","next","previous","callMethod","options","endpoint","response","getAuthToken","getClientInfo","text","result","reviveResponseTypes","ssrConfigResolver","_setSsrConfigResolver","resolver","getConfig","key","_setConfig","configs","useSessionStore","create","set","user","isInitialized","pendingReconciliation","SESSION_HEARTBEAT_INTERVAL","time","heartbeatTimer","userSchema","z","parseUser","parsedData","role","hydrateSession","payload","existingToken","ssrSession","reconcileSession","_isReconciliationPending","initSession","loopSessionHeartbeat","startSessionHeartbeat","setCurrentUser","enrichedUser","isSessionInitialized","ssrSessionResolver","_setSsrSessionResolver","_parseSessionUser","useSession","state","signupWithPassword","email","password","handle","firstName","lastName","avatarUrl","loginWithPassword","updateProfile","verifyEmail","token","resendEmailVerification","logout","sendResetPasswordToken","sendMagicLink","loginWithMagicLink","loginWithOneTimeCode","resetPassword","linkOAuthProvider","provider","nonceResponse","nonce","url","unlinkOAuthProvider"],"mappings":"uIAAA,IAAMA,EAAc,mBAAA,CAEpB,SAASC,CAAAA,EAA2B,CAClC,OAAO,OAAO,UAAA,CAAe,GAAA,EAAe,OAAO,WAAW,YAAA,CAAiB,GACjF,CAEO,SAASC,CAAAA,EAAyB,CACvC,GAAI,CAACD,CAAAA,EAAgB,CACnB,OAAO,IAAA,CAGT,IAAME,EAAc,UAAA,CAAW,YAAA,CAAa,QAAQH,CAAW,CAAA,CAC/D,GAAI,CACF,OAAOG,CAAAA,CAAc,IAAA,CAAK,MAAMA,CAAW,CAAA,CAAI,IACjD,CAAA,MAASC,CAAAA,CAAG,CACV,OAAA,OAAA,CAAQ,MAAM,yCAAA,CAA2CA,CAAC,CAAA,CACnD,IACT,CACF,CAEO,SAASC,CAAAA,CAAuBC,CAAAA,CAAiB,CACjDL,CAAAA,EAAgB,EAIrB,WAAW,YAAA,CAAa,OAAA,CAAQD,EAAa,IAAA,CAAK,SAAA,CAAUM,CAAO,CAAC,EACtE,CCDA,IAAIC,EAA8B,IAAA,CAgC3B,SAASC,EAAgBC,CAAAA,CAA0B,CACxDF,CAAAA,CAASE,EACX,CAEO,SAASC,CAAAA,EAAuC,CACrD,OAAOH,CACT,CC7DA,IAAII,EAA6B,CAACC,CAAAA,CAAOC,CAAAA,GAAe,CACtD,QAAQ,KAAA,CAAM,CAAA,sBAAA,EAAyBA,CAAU,CAAA,EAAA,CAAA,CAAMD,CAAK,EAC9D,CAAA,CAEO,SAASE,CAAAA,CAAgBC,CAAAA,CAAuB,CACrDJ,CAAAA,CAAeI,EACjB,CAEO,SAASC,CAAAA,CAAYJ,EAAcC,CAAAA,CAAoB,CAC5D,OAAOF,CAAAA,CAAaC,EAAOC,CAAU,CACvC,CCEO,IAAMI,CAAAA,CAAN,cAA0B,KAAM,CAUrC,WAAA,CAAYC,CAAAA,CAAiBC,EAAgBC,CAAAA,CAAe,CAC1D,KAAA,CAAMF,CAAO,EACb,IAAA,CAAK,IAAA,CAAO,aAAA,CACZ,IAAA,CAAK,OAASC,CAAAA,CACd,IAAA,CAAK,KAAOC,EACd,CACF,EAiBaC,CAAAA,CAAkD,MAC7DR,CAAAA,CACAS,CAAAA,GACG,CACH,IAAMC,CAAAA,CAAUb,GAAgB,EAAG,OAAA,EAAW,GAC9C,OAAOc,CAAAA,CAAQ,CAAA,EAAGD,CAAO,yBAAyBV,CAAU,CAAA,CAAA,CAAIS,CAAI,CACtE,CAAA,CAEMG,EAAgB,sCAMtB,SAASC,CAAAA,EAAoC,CAC3C,OAAQ,UAAA,CAAmCD,CAAa,CAAA,EAAKJ,CAC/D,CAGO,SAASM,CAAAA,CAAuBC,CAAAA,CAAuC,CAC5E,IAAMC,CAAAA,CAAY,UAAA,CAAmCJ,CAAa,CAAA,CAClE,OAAC,WAAmCA,CAAa,CAAA,CAAIG,CAAAA,CAC9C,IAAM,CACV,UAAA,CAAmCH,CAAa,EAAII,EACvD,CACF,CA8BA,eAAsBC,CAAAA,CACpBjB,CAAAA,CACAS,CAAAA,CACAS,EACY,CACZT,CAAAA,CAAOA,GAAQ,EAAC,CAChBS,EAAUA,CAAAA,EAAW,EAAC,CACtB,GAAI,CACF,OAAO,MAAML,CAAAA,EAAa,CAAKb,EAAYS,CAAI,CACjD,CAAA,MAASV,CAAAA,CAAO,CAEd,MAAA,CADgBmB,CAAAA,CAAQ,cAAgBf,CAAAA,EAChCJ,CAAAA,CAAgBC,CAAU,CAAA,CAC5BD,CACR,CACF,CAEA,eAAeY,CAAAA,CAAkBQ,CAAAA,CAAkBV,EAA8B,CAC/E,IAAMW,EAAW,MAAM,KAAA,CAAMD,CAAAA,CAAU,CACrC,OAAQ,MAAA,CASR,WAAA,CAAatB,GAAgB,EAAG,WAAA,EAAe,UAC/C,OAAA,CAAS,CACP,cAAA,CAAgB,kBAClB,EACA,IAAA,CAAM,IAAA,CAAK,SAAA,CAAU,CACnB,KAAAY,CAAAA,CACA,SAAA,CAAWY,CAAAA,EAAa,CACxB,WAAYC,CAAAA,EACd,CAAC,CACH,CAAC,EAED,GAAI,CAACF,CAAAA,CAAS,EAAA,CAAI,CAChB,IAAMrB,CAAAA,CAAQ,MAAMqB,CAAAA,CAAS,IAAA,GACvBb,CAAAA,CAAOa,CAAAA,CAAS,OAAA,EAAS,GAAA,CAAI,wBAAwB,CAAA,EAAK,MAAA,CAChE,MAAM,IAAIhB,CAAAA,CAAYL,EAAOqB,CAAAA,CAAS,MAAA,CAAQb,CAAI,CACpD,CAEA,IAAMgB,CAAAA,CAAO,MAAMH,CAAAA,CAAS,IAAA,GACtBI,CAAAA,CAASD,CAAAA,CAAO,IAAA,CAAK,KAAA,CAAMA,CAAI,CAAA,CAAI,MAAA,CACzC,GAAI,CAACC,CAAAA,CACH,MAAM,IAAI,KAAA,CAAM,8BAA8B,CAAA,CAGhD,OAAOC,GAAAA,CAAoBD,CAAAA,CAAO,KAAMA,CAAAA,CAAO,OAAO,CACxD,CCvJA,IAAI9B,CAAAA,CAAuC,GAGvCgC,CAAAA,CAA8C,IAAA,CAG3C,SAASC,CAAAA,CAAsBC,CAAAA,CAAoC,CACxEF,CAAAA,CAAoBE,EACtB,CAQO,SAASC,EAAUC,CAAAA,CAAuD,CAC/E,OAAI,OAAO,OAAW,GAAA,EAAeJ,CAAAA,CAC5BA,CAAAA,CAAkBI,CAAG,EAEvBpC,CAAAA,CAAOoC,CAAG,GAAG,KACtB,CAEO,SAASC,CAAAA,CAAWC,CAAAA,CAAkB,CAC3CtC,CAAAA,CAASsC,EACX,CCFO,IAAMC,EAAkBC,MAAAA,CAAsBC,CAAAA,GAAS,CAC5D,IAAA,CAAM,IAAA,CACN,OAAA,CAAUC,CAAAA,EAASD,EAAI,CAAE,IAAA,CAAAC,CAAK,CAAC,CACjC,EAAE,CAAA,CAEEC,CAAAA,CAAgB,KAAA,CAIhBC,CAAAA,CAAwB,MACtBC,CAAAA,CAA6BC,GAAAA,CAAK,OAAA,CAAQ,EAAE,EAC9CC,CAAAA,CAAuD,IAAA,CAErDC,CAAAA,CAAaC,CAAAA,CAAE,OAAO,CAC1B,EAAA,CAAIA,EAAE,MAAA,EAAO,CACb,OAAQA,CAAAA,CAAE,MAAA,EAAO,CACjB,KAAA,CAAOA,EAAE,KAAA,CAAMA,CAAAA,CAAE,QAAQ,CAAA,CACzB,UAAWA,CAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,GACtB,QAAA,CAAUA,CAAAA,CAAE,QAAO,CAAE,QAAA,GACrB,SAAA,CAAWA,CAAAA,CAAE,MAAA,EAAO,CAAE,UACxB,CAAC,CAAA,CAED,SAASC,EAAUR,CAAAA,CAA4B,CAC7C,GAAI,CAACA,EACH,OAAO,IAAA,CAGT,IAAMZ,CAAAA,CAASkB,CAAAA,CAAW,UAAUN,CAAI,CAAA,CAExC,GAAI,CAACZ,EAAO,OAAA,CACV,OAAA,OAAA,CAAQ,MAAM,qCAAA,CAAuCA,CAAAA,CAAO,KAAK,CAAA,CAC1D,IAAA,CAGT,IAAMqB,CAAAA,CAAarB,EAAO,IAAA,CAE1B,OAAO,OAAO,MAAA,CAAO,CACnB,GAAGqB,CAAAA,CACH,SAAA,CAAWA,CAAAA,CAAW,SAAA,EAAa,OACnC,QAAA,CAAUA,CAAAA,CAAW,QAAA,EAAY,MAAA,CACjC,UAAWA,CAAAA,CAAW,SAAA,EAAa,MAAA,CACnC,OAAA,CAAUC,GAAiBD,CAAAA,CAAW,KAAA,CAAM,SAASC,CAAI,CAAA,CACzD,YAAcA,CAAAA,EAAiB,CAC7B,GAAI,CAACD,EAAW,KAAA,CAAM,QAAA,CAASC,CAAI,CAAA,CACjC,MAAM,IAAI,KAAA,CAAM,CAAA,sBAAA,EAAyBA,CAAI,CAAA,UAAA,CAAY,CAE7D,CACF,CAAC,CACH,CASO,SAASC,GAAeC,CAAAA,CAA6B,CAC1D,GAAIX,CAAAA,CACF,OAGFA,CAAAA,CAAgB,IAAA,CAEhBN,CAAAA,CAAWiB,CAAAA,CAAQ,OAAO,CAAA,CAM1B,IAAMC,CAAAA,CADuB5D,CAAAA,IACe,SAAA,CACtC6D,CAAAA,CAAaF,EAAQ,OAAA,CAE3B,GAAIC,GAAiB,CAACD,CAAAA,CAAQ,IAAA,EAAQC,CAAAA,GAAkBC,EAAW,SAAA,CAAW,CAC5EZ,EAAwB,IAAA,CAExBL,CAAAA,CAAgB,UAAS,CAAE,OAAA,CAAQW,CAAAA,CAAUI,CAAAA,CAAQ,IAAI,CAAC,CAAA,CAC1D,MACF,CAEAxD,CAAAA,CAAuBwD,EAAQ,OAAO,CAAA,CACtCf,CAAAA,CAAgB,QAAA,GAAW,OAAA,CAAQW,CAAAA,CAAUI,CAAAA,CAAQ,IAAI,CAAC,EAC5D,CAGA,eAAsBG,EAAAA,EAAmB,CACvC,GAAKb,CAAAA,CAGL,CAAAA,CAAAA,CAAwB,KAAA,CAExB,GAAI,CACF,GAAM,CAAE,OAAA,CAAAN,EAAS,OAAA,CAAAvC,CAAAA,CAAS,KAAA2C,CAAK,CAAA,CAAI,MAAMnB,CAAAA,CAA+B,sBAAsB,CAAA,CAC9Fc,CAAAA,CAAWC,CAAO,CAAA,CAClBxC,CAAAA,CAAuBC,CAAO,CAAA,CAC9BwC,CAAAA,CAAgB,UAAS,CAAE,OAAA,CAAQW,CAAAA,CAAUR,CAAI,CAAC,EACpD,CAAA,MAASrC,CAAAA,CAAO,CACd,QAAQ,KAAA,CAAM,0CAAA,CAA4CA,CAAK,EACjE,EACF,CAGO,SAASqD,IAAoC,CAClD,OAAOd,CACT,CAEA,eAAsBe,EAAAA,EAAc,CAClC,GAAIhB,CAAAA,CACF,OAGFA,EAAgB,IAAA,CAEhB,GAAM,CAAE,OAAA,CAAAL,CAAAA,CAAS,OAAA,CAAAvC,CAAAA,CAAS,KAAA2C,CAAK,CAAA,CAAI,MAAMnB,CAAAA,CAA+B,sBAAsB,EAC9Fc,CAAAA,CAAWC,CAAO,CAAA,CAElB,IAAMtC,EAASG,CAAAA,EAAgB,CAC3BH,EACFA,CAAAA,CAAO,YAAA,CAAaD,EAAQ,SAAS,CAAA,CAErCD,CAAAA,CAAuBC,CAAO,EAGhCwC,CAAAA,CAAgB,QAAA,GAAW,OAAA,CAAQW,CAAAA,CAAUR,CAAI,CAAC,CAAA,CAElD,MAAMkB,CAAAA,GACR,CAGA,eAAsBC,IAAwB,CACxC,OAAO,OAAW,GAAA,EAAed,CAAAA,GAAmB,IAAA,EAGxD,MAAMa,IACR,CAEA,eAAeA,CAAAA,EAAuB,CACpC,GAAI,EAAA,OAAO,MAAA,CAAW,GAAA,CAAA,CAItB,CAAA,GAAI,CACF,MAAMrC,CAAAA,CAAW,2BAAA,CAA6B,GAAI,CAAE,YAAA,CAAc,IAAM,CAAC,CAAE,CAAC,EAC9E,MAAQ,CAER,CACAwB,EAAiB,UAAA,CAAWa,CAAAA,CAAsBf,CAA0B,EAAA,CAC9E,CAEO,SAASiB,CAAAA,CAAepB,EAAe,CAC5C,IAAMqB,EAAeb,CAAAA,CAAUR,CAAI,CAAA,CACnC,OAAAH,EAAgB,QAAA,EAAS,CAAE,QAAQwB,CAAY,CAAA,CACxCA,CACT,CAEO,SAASC,EAAAA,EAAuB,CACrC,OAAOrB,CACT,CAcA,IAAIsB,CAAAA,CAAgD,KAG7C,SAASC,EAAAA,CAAuBhC,CAAAA,CAAqC,CAC1E+B,EAAqB/B,EACvB,CAGO,SAASiC,EAAAA,CAAkBzB,CAAAA,CAA4B,CAC5D,OAAOQ,CAAAA,CAAUR,CAAI,CACvB,CAeO,SAAS0B,EAAAA,EAAa,CAC3B,OAAI,OAAO,OAAW,GAAA,EAAeH,CAAAA,CAC5B,CAAE,IAAA,CAAMA,GAAqB,CAAA,CAG/B,CAAE,IAAA,CADI1B,CAAAA,CAAiB8B,GAAUA,CAAAA,CAAM,IAAI,CACpC,CAChB,CCzLA,eAAsBC,EAAAA,CAAmB9C,CAAAA,CAOtC,CACD,GAAM,CAAE,KAAA,CAAA+C,CAAAA,CAAO,QAAA,CAAAC,EAAU,MAAA,CAAAC,CAAAA,CAAQ,UAAAC,CAAAA,CAAW,QAAA,CAAAC,EAAU,SAAA,CAAAC,CAAU,CAAA,CAAIpD,CAAAA,CACpE,MAAMD,CAAAA,CAAW,iCAAA,CAAmC,CAClD,KAAA,CAAAgD,CAAAA,CACA,SAAAC,CAAAA,CACA,GAAIC,CAAAA,GAAW,MAAA,CAAY,CAAE,MAAA,CAAAA,CAAO,EAAI,EAAC,CACzC,GAAIC,CAAAA,GAAc,MAAA,CAAY,CAAE,SAAA,CAAAA,CAAU,CAAA,CAAI,EAAC,CAC/C,GAAIC,IAAa,MAAA,CAAY,CAAE,QAAA,CAAAA,CAAS,EAAI,EAAC,CAC7C,GAAIC,CAAAA,GAAc,MAAA,CAAY,CAAE,SAAA,CAAAA,CAAU,CAAA,CAAI,EAChD,CAAC,EACH,CAYA,eAAsBC,EAAAA,CAAkBrD,EAA8C,CACpF,GAAM,CAAE,KAAA,CAAA+C,EAAO,QAAA,CAAAC,CAAS,EAAIhD,CAAAA,CACtB,CAAE,KAAAkB,CAAAA,CAAM,OAAA,CAAA3C,CAAQ,CAAA,CAAI,MAAMwB,CAAAA,CAC9B,gCAAA,CACA,CACE,KAAA,CAAAgD,EACA,QAAA,CAAAC,CACF,CACF,CAAA,CACMxE,EAASG,CAAAA,EAAgB,CAC/B,OAAIH,CAAAA,EACFA,CAAAA,CAAO,aAAaD,CAAAA,CAAQ,SAAS,CAAA,CAElB+D,CAAAA,CAAepB,CAAI,CAE1C,CAcA,eAAsBoC,EAAAA,CAActD,CAAAA,CAKjC,CACD,GAAM,CAAE,SAAA,CAAAkD,CAAAA,CAAW,SAAAC,CAAAA,CAAU,SAAA,CAAAC,EAAW,MAAA,CAAAH,CAAO,EAAIjD,CAAAA,CAC7C,CAAE,IAAA,CAAAkB,CAAK,EAAI,MAAMnB,CAAAA,CAAkC,4BAAA,CAA8B,CACrF,GAAImD,CAAAA,GAAc,MAAA,CAAY,CAAE,SAAA,CAAAA,CAAU,CAAA,CAAI,GAC9C,GAAIC,CAAAA,GAAa,OAAY,CAAE,QAAA,CAAAA,CAAS,CAAA,CAAI,EAAC,CAC7C,GAAIC,IAAc,MAAA,CAAY,CAAE,UAAAA,CAAU,CAAA,CAAI,EAAC,CAC/C,GAAIH,CAAAA,GAAW,MAAA,CAAY,CAAE,MAAA,CAAAA,CAAO,EAAI,EAC1C,CAAC,CAAA,CAED,OADqBX,CAAAA,CAAepB,CAAI,CAE1C,CAWA,eAAsBqC,EAAAA,CAAYvD,CAAAA,CAA4B,CAC5D,GAAM,CAAE,KAAA,CAAAwD,CAAM,EAAIxD,CAAAA,CAClB,MAAMD,EAAkC,0BAAA,CAA4B,CAAE,KAAA,CAAAyD,CAAM,CAAC,EAC/E,CAaA,eAAsBC,EAAAA,CAAwBzD,CAAAA,CAA4B,CACxE,GAAM,CAAE,KAAA,CAAA+C,CAAM,EAAI/C,CAAAA,CAClB,MAAMD,EAAW,sCAAA,CAAwC,CAAE,MAAAgD,CAAM,CAAC,EACpE,CAMA,eAAsBW,EAAAA,EAAS,CAC7B,MAAM3D,CAAAA,CAAW,qBAAqB,EACtC,IAAMvB,CAAAA,CAASG,CAAAA,EAAgB,CAC3BH,GACFA,CAAAA,CAAO,YAAA,CAAa,IAAI,CAAA,CAE1B8D,CAAAA,CAAe,IAAI,EACrB,CAMA,eAAsBqB,EAAAA,CAAuB3D,EAA4B,CACvE,GAAM,CAAE,KAAA,CAAA+C,CAAM,EAAI/C,CAAAA,CAClB,MAAMD,CAAAA,CAAW,qCAAA,CAAuC,CACtD,KAAA,CAAAgD,CACF,CAAC,EACH,CAeA,eAAsBa,EAAAA,CAAc5D,CAAAA,CAA4B,CAC9D,GAAM,CAAE,KAAA,CAAA+C,CAAM,CAAA,CAAI/C,CAAAA,CAClB,MAAMD,CAAAA,CAAW,4BAAA,CAA8B,CAC7C,KAAA,CAAAgD,CACF,CAAC,EACH,CAeA,eAAsBc,EAAAA,EAAqB,CACzC,GAAM,CAAE,IAAA,CAAA3C,CAAAA,CAAM,QAAA3C,CAAQ,CAAA,CAAI,MAAMwB,CAAAA,CAC9B,iCACF,EACMvB,CAAAA,CAASG,CAAAA,EAAgB,CAC/B,OAAIH,GACFA,CAAAA,CAAO,YAAA,CAAaD,EAAQ,SAAS,CAAA,CAElB+D,EAAepB,CAAI,CAE1C,CAiBA,eAAsB4C,GAAqB9D,CAAAA,CAA0C,CACnF,GAAM,CAAE,MAAA+C,CAAAA,CAAO,IAAA,CAAA1D,CAAK,CAAA,CAAIW,EAClB,CAAE,IAAA,CAAAkB,EAAM,OAAA,CAAA3C,CAAQ,EAAI,MAAMwB,CAAAA,CAC9B,mCAAA,CACA,CAAE,MAAAgD,CAAAA,CAAO,IAAA,CAAA1D,CAAK,CAChB,CAAA,CACMb,EAASG,CAAAA,EAAgB,CAC/B,OAAIH,CAAAA,EACFA,EAAO,YAAA,CAAaD,CAAAA,CAAQ,SAAS,CAAA,CAElB+D,CAAAA,CAAepB,CAAI,CAE1C,CAYA,eAAsB6C,EAAAA,CAAc/D,EAA+C,CACjF,GAAM,CAAE,KAAA,CAAAwD,EAAO,QAAA,CAAAR,CAAS,CAAA,CAAIhD,CAAAA,CAC5B,MAAMD,CAAAA,CAAW,4BAAA,CAA8B,CAC7C,GAAIyD,CAAAA,CAAQ,CAAE,KAAA,CAAAA,CAAM,CAAA,CAAI,GACxB,QAAA,CAAAR,CACF,CAAC,EACH,CAaA,eAAsBgB,EAAAA,CAAkBhE,CAAAA,CAAqD,CAC3F,GAAM,CAAE,QAAA,CAAAiE,CAAS,EAAIjE,CAAAA,CACfxB,CAAAA,CAASG,GAAgB,CACzBa,CAAAA,CAAUhB,CAAAA,EAAQ,OAAA,EAAW,GAEnC,GAAIA,CAAAA,EAAQ,OAAA,CAAS,CAInB,IAAMgF,CAAAA,CAAQrD,CAAAA,EAAa,CAC3B,GAAI,CAACqD,CAAAA,CACH,MAAM,IAAI,KAAA,CAAM,sEAAsE,EAExF,IAAMU,CAAAA,CAAgB,MAAM,KAAA,CAAM,GAAG1E,CAAO,CAAA,oCAAA,CAAA,CAAwC,CAClF,MAAA,CAAQ,MAAA,CACR,QAAS,CAAE,cAAA,CAAgB,kBAAmB,CAAA,CAC9C,KAAM,IAAA,CAAK,SAAA,CAAU,CAAE,SAAA,CAAWgE,CAAM,CAAC,CAC3C,CAAC,CAAA,CACD,GAAI,CAACU,CAAAA,CAAc,EAAA,CACjB,MAAM,IAAI,MAAM,sEAAsE,CAAA,CAExF,GAAM,CAAE,MAAAC,CAAM,CAAA,CAAI,MAAMD,CAAAA,CAAc,IAAA,GAChCE,CAAAA,CAAM,CAAA,EAAG5E,CAAO,CAAA,oBAAA,EAAuByE,CAAQ,CAAA,qBAAA,EAAwB,kBAAA,CAAmBE,CAAK,CAAC,CAAA,CAAA,CACtG3F,EAAO,OAAA,CAAQ4F,CAAG,EACpB,CAAA,KAAO,CAEL,IAAMZ,CAAAA,CAAQrD,GAAa,CAC3B,GAAIqD,GAOE,CAAA,CANa,MAAM,KAAA,CAAM,CAAA,EAAGhE,CAAO,CAAA,mCAAA,CAAA,CAAuC,CAC5E,MAAA,CAAQ,MAAA,CACR,QAAS,CAAE,cAAA,CAAgB,kBAAmB,CAAA,CAC9C,KAAM,IAAA,CAAK,SAAA,CAAU,CAAE,SAAA,CAAWgE,CAAM,CAAC,CAAA,CACzC,WAAA,CAAa,SACf,CAAC,GACa,EAAA,CACZ,MAAM,IAAI,KAAA,CAAM,sEAAsE,EAG1F,MAAA,CAAO,QAAA,CAAS,IAAA,CAAO,CAAA,EAAGhE,CAAO,CAAA,oBAAA,EAAuByE,CAAQ,aAClE,CACF,CAUA,eAAsBI,EAAAA,CAAoBrE,CAAAA,CAAqD,CAC7F,GAAM,CAAE,QAAA,CAAAiE,CAAS,CAAA,CAAIjE,CAAAA,CACrB,MAAMD,CAAAA,CAAW,kCAAA,CAAoC,CAAE,QAAA,CAAAkE,CAAS,CAAC,EACnE,CAMO,SAAS9D,CAAAA,EAAmC,CACjD,IAAM3B,CAAAA,CAASG,CAAAA,EAAgB,CAC/B,OAAIH,CAAAA,CACKA,CAAAA,CAAO,cAAa,CAEtBL,CAAAA,IAA0B,SACnC,CAEO,SAASiC,CAAAA,EAA4B,CAC1C,IAAM5B,CAAAA,CAASG,GAAgB,CAC/B,OAAIH,EACKA,CAAAA,CAAO,aAAA,EAAc,CAG1B,OAAO,OAAW,GAAA,CACb,CACL,YAAa,CAAA,CACb,YAAA,CAAc,EACd,WAAA,CAAa,CAAA,CACb,YAAA,CAAc,CAAA,CACd,WAAY,CAAA,CACZ,WAAA,CAAa,IACf,CAAA,CAGK,CACL,YAAa,MAAA,CAAO,MAAA,CAAO,KAAA,CAC3B,YAAA,CAAc,OAAO,MAAA,CAAO,MAAA,CAC5B,YAAa,MAAA,CAAO,UAAA,CACpB,aAAc,MAAA,CAAO,WAAA,CACrB,UAAA,CAAY,MAAA,CAAO,iBACnB,WAAA,CAAa,MAAA,CAAO,OAAO,WAAA,EAAa,IAAA,EAAQ,IAClD,CACF","file":"chunk-54MUUAZG.js","sourcesContent":["const SESSION_KEY = 'modelence.session';\n\nfunction hasLocalStorage(): boolean {\n  return typeof globalThis !== 'undefined' && typeof globalThis.localStorage !== 'undefined';\n}\n\nexport function getLocalStorageSession() {\n  if (!hasLocalStorage()) {\n    return null;\n  }\n\n  const sessionJson = globalThis.localStorage.getItem(SESSION_KEY);\n  try {\n    return sessionJson ? JSON.parse(sessionJson) : null;\n  } catch (e) {\n    console.error('Error parsing session from localStorage', e);\n    return null;\n  }\n}\n\nexport function setLocalStorageSession(session: object) {\n  if (!hasLocalStorage()) {\n    return;\n  }\n\n  globalThis.localStorage.setItem(SESSION_KEY, JSON.stringify(session));\n}\n","import type { ClientInfo } from '@/methods/types';\n\nexport interface ClientConfig {\n  baseUrl: string;\n  getAuthToken: () => string | undefined;\n  setAuthToken: (token: string | null) => void;\n  getClientInfo: () => ClientInfo;\n  /**\n   * Opens a URL for OAuth redirects. React Native must use\n   * `(url) => Linking.openURL(url)` — WebView is not supported.\n   * Defaults to `window.location.href` when not provided.\n   */\n  openUrl?: (url: string) => void;\n  /**\n   * Credentials mode for method-call requests. Defaults to `'include'`, which\n   * browser apps need for the cookie-based flows (password reset, magic link).\n   *\n   * Clients configured with token-in-body auth (React Native / Expo) never use\n   * cookies, so set `'omit'` there — on Expo Web a credentialed cross-origin\n   * request is otherwise blocked by any server answering\n   * `Access-Control-Allow-Origin: *`, surfacing as \"TypeError: Failed to fetch\".\n   */\n  credentials?: RequestCredentials;\n}\n\nlet config: ClientConfig | null = null;\n\n/**\n * Configure the Modelence client for non-browser environments like React Native.\n *\n * When configured, the client uses the provided functions for auth-token\n * storage, client-info collection, and URL resolution instead of the\n * default browser APIs (localStorage, window.screen, relative URLs).\n *\n * @example\n * ```ts\n * import { configureClient } from 'modelence/client';\n * import { Linking } from 'react-native';\n *\n * let authToken: string | undefined;\n *\n * configureClient({\n *   baseUrl: 'https://myapp.com',\n *   getAuthToken: () => authToken,\n *   setAuthToken: (token) => { authToken = token ?? undefined; },\n *   getClientInfo: () => ({\n *     screenWidth: Dimensions.get('screen').width,\n *     screenHeight: Dimensions.get('screen').height,\n *     windowWidth: Dimensions.get('window').width,\n *     windowHeight: Dimensions.get('window').height,\n *     pixelRatio: PixelRatio.get(),\n *     orientation: null,\n *   }),\n *   openUrl: (url) => Linking.openURL(url),\n * });\n * ```\n */\nexport function configureClient(userConfig: ClientConfig) {\n  config = userConfig;\n}\n\nexport function getClientConfig(): ClientConfig | null {\n  return config;\n}\n","export type ErrorHandler = (error: Error, methodName: string) => void;\n\nlet errorHandler: ErrorHandler = (error, methodName) => {\n  console.error(`Error calling method '${methodName}':`, error);\n};\n\nexport function setErrorHandler(handler: ErrorHandler) {\n  errorHandler = handler;\n}\n\nexport function handleError(error: Error, methodName: string) {\n  return errorHandler(error, methodName);\n}\n","/*\n  The \"use client\" directive is specifically for the Next.js layout component, which is rendered on the server by default.\n  Because of this, we are explicitly marking it as a client component, so we can render this component on the client\n  and properly initialize config on the client side.\n  \n  While this is specific to Next.js, it is simply ignored outside of Next.js and should not cause errors.\n*/\n'use client';\n\nimport { getAuthToken, getClientInfo } from '@/auth/client';\nimport { handleError } from '@/client/errorHandler';\nimport { getClientConfig } from '@/client/clientConfig';\nimport { reviveResponseTypes } from '@/methods/serialize';\n\nexport class MethodError extends Error {\n  status: number;\n  /**\n   * Machine-readable error code set by the server (when available), so callers\n   * can branch on the error kind without matching the human-readable message.\n   * For example, a login attempt with an unverified email yields\n   * `code === 'EMAIL_NOT_VERIFIED'`.\n   */\n  code?: string;\n\n  constructor(message: string, status: number, code?: string) {\n    super(message);\n    this.name = 'MethodError';\n    this.status = status;\n    this.code = code;\n  }\n}\n\nexport type MethodArgs = Record<string, unknown>;\n\nexport type CallMethodOptions = {\n  errorHandler?: (error: Error, methodName: string) => void;\n};\n\n// Default: fetch HTTP. SSR swaps in an in-process transport via globalThis\n// so Vite's ssrLoadModule (separate module graph) shares the same instance.\nexport type CallMethodTransport = <T = unknown>(methodName: string, args: MethodArgs) => Promise<T>;\n\n/**\n * The default HTTP transport. Exported so alternative transports (e.g. the SSR\n * in-process transport) can delegate to it when they don't apply.\n * @internal\n */\nexport const defaultCallMethodTransport: CallMethodTransport = async <T>(\n  methodName: string,\n  args: MethodArgs\n) => {\n  const baseUrl = getClientConfig()?.baseUrl ?? '';\n  return call<T>(`${baseUrl}/api/_internal/method/${methodName}`, args);\n};\n\nconst TRANSPORT_KEY = '__modelence_call_method_transport__';\n\ntype GlobalWithTransport = typeof globalThis & {\n  [TRANSPORT_KEY]?: CallMethodTransport;\n};\n\nfunction getTransport(): CallMethodTransport {\n  return (globalThis as GlobalWithTransport)[TRANSPORT_KEY] ?? defaultCallMethodTransport;\n}\n\n/** Returns a disposer that restores the previous transport. */\nexport function setCallMethodTransport(next: CallMethodTransport): () => void {\n  const previous = (globalThis as GlobalWithTransport)[TRANSPORT_KEY];\n  (globalThis as GlobalWithTransport)[TRANSPORT_KEY] = next;\n  return () => {\n    (globalThis as GlobalWithTransport)[TRANSPORT_KEY] = previous;\n  };\n}\n\n/**\n * Calls a server-side method (query or mutation) defined on a Modelence module.\n *\n * Both `args` and `options` are optional. Use the type parameter `T` to type the return value.\n *\n * @example\n * ```typescript\n * import { callMethod } from 'modelence/client';\n *\n * // No arguments\n * const todos = await callMethod<Todo[]>('todo.getAll');\n *\n * // With arguments\n * const todo = await callMethod<Todo>('todo.getOne', { id: '123' });\n *\n * // With a custom error handler\n * const created = await callMethod<Todo>(\n *   'todo.create',\n *   { title: 'Buy groceries' },\n *   { errorHandler: (error, methodName) => console.error(methodName, error) }\n * );\n * ```\n *\n * @param methodName - Fully qualified method name, e.g. `'todo.getAll'`.\n * @param args - Arguments passed to the server-side method. Defaults to `{}`.\n * @param options - Call-site options such as a custom {@link CallMethodOptions.errorHandler}. Defaults to `{}`.\n * @returns A promise that resolves to the method's return value.\n */\nexport async function callMethod<T = unknown>(\n  methodName: string,\n  args?: MethodArgs,\n  options?: CallMethodOptions\n): Promise<T> {\n  args = args ?? {};\n  options = options ?? {};\n  try {\n    return await getTransport()<T>(methodName, args);\n  } catch (error) {\n    const handler = options.errorHandler ?? handleError;\n    handler(error as Error, methodName);\n    throw error;\n  }\n}\n\nasync function call<T = unknown>(endpoint: string, args: MethodArgs): Promise<T> {\n  const response = await fetch(endpoint, {\n    method: 'POST',\n    // Send cookies even when the SPA and API are on different origins. The\n    // password-reset and magic-link flows rely on httpOnly cookies set by the\n    // server landing routes; with the default `same-origin` policy the cookie\n    // would be dropped on cross-origin POSTs and those flows would fail.\n    // (Cross-origin use also requires the server to emit\n    // `Access-Control-Allow-Credentials: true` and a non-wildcard origin.)\n    // Token-in-body clients (React Native / Expo) don't use cookies and can\n    // override this via `configureClient({ credentials: 'omit' })`.\n    credentials: getClientConfig()?.credentials ?? 'include',\n    headers: {\n      'Content-Type': 'application/json',\n    },\n    body: JSON.stringify({\n      args,\n      authToken: getAuthToken(),\n      clientInfo: getClientInfo(),\n    }),\n  });\n\n  if (!response.ok) {\n    const error = await response.text();\n    const code = response.headers?.get('X-Modelence-Error-Code') ?? undefined;\n    throw new MethodError(error, response.status, code);\n  }\n\n  const text = await response.text();\n  const result = text ? JSON.parse(text) : undefined;\n  if (!result) {\n    throw new Error('Invalid response from server');\n  }\n\n  return reviveResponseTypes(result.data, result.typeMap);\n}\n","import { AppConfig, ConfigKey, Configs } from './types';\n\nlet config: Record<ConfigKey, AppConfig> = {};\n\ntype SsrConfigResolver = (key: ConfigKey) => string | number | boolean | undefined;\nlet ssrConfigResolver: SsrConfigResolver | null = null;\n\n/** @internal SSR resolver reads from AsyncLocalStorage (per-request scoped). */\nexport function _setSsrConfigResolver(resolver: SsrConfigResolver | null) {\n  ssrConfigResolver = resolver;\n}\n\n/**\n * @sidebarTitle getConfig (client)\n *\n * @param key\n * @returns\n */\nexport function getConfig(key: ConfigKey): string | number | boolean | undefined {\n  if (typeof window === 'undefined' && ssrConfigResolver) {\n    return ssrConfigResolver(key);\n  }\n  return config[key]?.value;\n}\n\nexport function _setConfig(configs: Configs) {\n  config = configs;\n}\n","import { create } from 'zustand';\nimport { z } from 'zod';\nimport { callMethod } from './method';\nimport { _setConfig } from '../config/client';\nimport { getLocalStorageSession, setLocalStorageSession } from './localStorage';\nimport { getClientConfig } from './clientConfig';\nimport { time } from '../time';\nimport { Configs } from '../config/types';\n\ntype User = {\n  id: string;\n  handle: string;\n  roles: string[];\n  hasRole: (role: string) => boolean;\n  requireRole: (role: string) => void;\n  firstName?: string;\n  lastName?: string;\n  avatarUrl?: string;\n};\n\ntype SessionStore = {\n  user: User | null;\n  setUser: (user: User | null) => void;\n};\n\nexport const useSessionStore = create<SessionStore>((set) => ({\n  user: null,\n  setUser: (user) => set({ user }),\n}));\n\nlet isInitialized = false;\n// Set when SSR rendered anonymously but localStorage holds a token (no\n// cookie yet). `reconcileSession()` then re-auths via the body and refreshes\n// the cookie for subsequent SSR requests.\nlet pendingReconciliation = false;\nconst SESSION_HEARTBEAT_INTERVAL = time.seconds(30);\nlet heartbeatTimer: ReturnType<typeof setTimeout> | null = null;\n\nconst userSchema = z.object({\n  id: z.string(),\n  handle: z.string(),\n  roles: z.array(z.string()),\n  firstName: z.string().optional(),\n  lastName: z.string().optional(),\n  avatarUrl: z.string().optional(),\n});\n\nfunction parseUser(user: unknown): User | null {\n  if (!user) {\n    return null;\n  }\n\n  const result = userSchema.safeParse(user);\n\n  if (!result.success) {\n    console.error('Session Error: Invalid user payload', result.error);\n    return null;\n  }\n\n  const parsedData = result.data;\n\n  return Object.freeze({\n    ...parsedData,\n    firstName: parsedData.firstName ?? undefined,\n    lastName: parsedData.lastName ?? undefined,\n    avatarUrl: parsedData.avatarUrl ?? undefined,\n    hasRole: (role: string) => parsedData.roles.includes(role),\n    requireRole: (role: string) => {\n      if (!parsedData.roles.includes(role)) {\n        throw new Error(`Access denied - role '${role}' required`);\n      }\n    },\n  });\n}\n\nexport type SessionInitPayload = {\n  configs: Configs;\n  session: object & { authToken: string };\n  user: object;\n};\n\n/** Hydrate session state from the SSR payload, skipping the network round-trip. */\nexport function hydrateSession(payload: SessionInitPayload) {\n  if (isInitialized) {\n    return;\n  }\n\n  isInitialized = true;\n\n  _setConfig(payload.configs);\n\n  // localStorage token + anonymous SSR payload = server couldn't read the\n  // token (no cookie yet). Preserve the localStorage token and defer to\n  // `reconcileSession()`; overwriting here would log the user out permanently.\n  const existingLocalSession = getLocalStorageSession() as { authToken?: string } | null;\n  const existingToken = existingLocalSession?.authToken;\n  const ssrSession = payload.session as { authToken?: string };\n\n  if (existingToken && !payload.user && existingToken !== ssrSession.authToken) {\n    pendingReconciliation = true;\n    // First render must match the server (anonymous); reconcile swaps later.\n    useSessionStore.getState().setUser(parseUser(payload.user));\n    return;\n  }\n\n  setLocalStorageSession(payload.session);\n  useSessionStore.getState().setUser(parseUser(payload.user));\n}\n\n/** Re-auth via the body token when SSR couldn't read it from a cookie. */\nexport async function reconcileSession() {\n  if (!pendingReconciliation) {\n    return;\n  }\n  pendingReconciliation = false;\n\n  try {\n    const { configs, session, user } = await callMethod<SessionInitPayload>('_system.session.init');\n    _setConfig(configs);\n    setLocalStorageSession(session);\n    useSessionStore.getState().setUser(parseUser(user));\n  } catch (error) {\n    console.error('Modelence: session reconciliation failed', error);\n  }\n}\n\n/** @internal */\nexport function _isReconciliationPending(): boolean {\n  return pendingReconciliation;\n}\n\nexport async function initSession() {\n  if (isInitialized) {\n    return;\n  }\n\n  isInitialized = true;\n\n  const { configs, session, user } = await callMethod<SessionInitPayload>('_system.session.init');\n  _setConfig(configs);\n\n  const config = getClientConfig();\n  if (config) {\n    config.setAuthToken(session.authToken);\n  } else {\n    setLocalStorageSession(session);\n  }\n\n  useSessionStore.getState().setUser(parseUser(user));\n\n  await loopSessionHeartbeat();\n}\n\n/** Idempotent, client-only. Auto-started by `initSession`; call explicitly after `hydrateSession`. */\nexport async function startSessionHeartbeat() {\n  if (typeof window === 'undefined' || heartbeatTimer !== null) {\n    return;\n  }\n  await loopSessionHeartbeat();\n}\n\nasync function loopSessionHeartbeat() {\n  if (typeof window === 'undefined') {\n    return;\n  }\n\n  try {\n    await callMethod('_system.session.heartbeat', {}, { errorHandler: () => {} });\n  } catch {\n    // Silently ignore heartbeat errors - they're expected during HMR/reconnects\n  }\n  heartbeatTimer = setTimeout(loopSessionHeartbeat, SESSION_HEARTBEAT_INTERVAL);\n}\n\nexport function setCurrentUser(user: unknown) {\n  const enrichedUser = parseUser(user);\n  useSessionStore.getState().setUser(enrichedUser);\n  return enrichedUser;\n}\n\nexport function isSessionInitialized() {\n  return isInitialized;\n}\n\nexport function getHeartbeatTimer() {\n  return heartbeatTimer;\n}\n\nexport function stopHeartbeatTimer() {\n  if (heartbeatTimer) {\n    clearTimeout(heartbeatTimer);\n    heartbeatTimer = null;\n  }\n}\n\ntype SsrSessionResolver = () => User | null;\nlet ssrSessionResolver: SsrSessionResolver | null = null;\n\n/** @internal SSR resolver reads from AsyncLocalStorage (per-request scoped). */\nexport function _setSsrSessionResolver(resolver: SsrSessionResolver | null) {\n  ssrSessionResolver = resolver;\n}\n\n/** @internal */\nexport function _parseSessionUser(user: unknown): User | null {\n  return parseUser(user);\n}\n\n/**\n * `useSession` is a hook that returns the current user, and in the future will also return other details about the current session.\n *\n * @example\n * ```ts\n * import { useSession } from 'modelence/client';\n *\n * function MyComponent() {\n *   const { user } = useSession();\n *   return <div>{user?.handle}</div>;\n * }\n * ```\n */\nexport function useSession() {\n  if (typeof window === 'undefined' && ssrSessionResolver) {\n    return { user: ssrSessionResolver() };\n  }\n  const user = useSessionStore((state) => state.user);\n  return { user };\n}\n","import { setCurrentUser } from '@/client/session';\nimport { callMethod } from '@/client/method';\nimport { getLocalStorageSession } from '@/client/localStorage';\nimport { getClientConfig } from '@/client/clientConfig';\nimport type { ClientInfo } from '@/methods/types';\nimport { OAuthProvider } from '../types';\n\nexport type UserInfo = {\n  id: string;\n  handle: string;\n  roles: string[];\n  hasRole: (role: string) => boolean;\n  requireRole: (role: string) => void;\n  firstName?: string;\n  lastName?: string;\n  avatarUrl?: string;\n};\n\ntype RawUserData = {\n  id: string;\n  handle: string;\n  roles: string[];\n  firstName?: string;\n  lastName?: string;\n  avatarUrl?: string;\n};\n\n/**\n * Sign up a new user with an email and password.\n *\n * @example\n * ```ts\n * await signupWithPassword({ email: 'test@example.com', password: '12345678' });\n * await signupWithPassword({ email: 'test@example.com', password: '12345678', handle: 'myhandle', firstName: 'John' });\n * ```\n * @param options.email - The email of the user.\n * @param options.password - The password of the user.\n * @param options.handle - Optional custom handle. If omitted, one is derived from the email.\n * @param options.firstName - Optional first name.\n * @param options.lastName - Optional last name.\n * @param options.avatarUrl - Optional avatar URL.\n */\nexport async function signupWithPassword(options: {\n  email: string;\n  password: string;\n  handle?: string;\n  firstName?: string;\n  lastName?: string;\n  avatarUrl?: string;\n}) {\n  const { email, password, handle, firstName, lastName, avatarUrl } = options;\n  await callMethod('_system.user.signupWithPassword', {\n    email,\n    password,\n    ...(handle !== undefined ? { handle } : {}),\n    ...(firstName !== undefined ? { firstName } : {}),\n    ...(lastName !== undefined ? { lastName } : {}),\n    ...(avatarUrl !== undefined ? { avatarUrl } : {}),\n  });\n}\n\n/**\n * Login a user with an email and password.\n *\n * @example\n * ```ts\n * await loginWithPassword({ email: 'test@example.com', password: '12345678' });\n * ```\n * @param options.email - The email of the user.\n * @param options.password - The password of the user.\n */\nexport async function loginWithPassword(options: { email: string; password: string }) {\n  const { email, password } = options;\n  const { user, session } = await callMethod<{ user: RawUserData; session: { authToken: string } }>(\n    '_system.user.loginWithPassword',\n    {\n      email,\n      password,\n    }\n  );\n  const config = getClientConfig();\n  if (config) {\n    config.setAuthToken(session.authToken);\n  }\n  const enrichedUser = setCurrentUser(user);\n  return enrichedUser;\n}\n\n/**\n * Update the current user's profile.\n *\n * @example\n * ```ts\n * await updateProfile({ firstName: 'Atul', lastName: 'Yadav', avatarUrl: 'https://example.com/avatar.jpg', handle: 'atulyadav' });\n * ```\n * @param options.firstName - The first name of the user.\n * @param options.lastName - The last name of the user.\n * @param options.avatarUrl - The avatar URL of the user.\n * @param options.handle - The handle of the user.\n */\nexport async function updateProfile(options: {\n  firstName?: string;\n  lastName?: string;\n  avatarUrl?: string;\n  handle?: string;\n}) {\n  const { firstName, lastName, avatarUrl, handle } = options;\n  const { user } = await callMethod<{ user: RawUserData }>('_system.user.updateProfile', {\n    ...(firstName !== undefined ? { firstName } : {}),\n    ...(lastName !== undefined ? { lastName } : {}),\n    ...(avatarUrl !== undefined ? { avatarUrl } : {}),\n    ...(handle !== undefined ? { handle } : {}),\n  });\n  const enrichedUser = setCurrentUser(user);\n  return enrichedUser;\n}\n\n/**\n * Verify user's email with a verification token.\n *\n * @example\n * ```ts\n * await verifyEmail({ token: 'verification-token' });\n * ```\n * @param options.token - The email verification token.\n */\nexport async function verifyEmail(options: { token: string }) {\n  const { token } = options;\n  await callMethod<{ user: RawUserData }>('_system.user.verifyEmail', { token });\n}\n\n/**\n * Resend the verification email for a given email address.\n * The email is only sent if the address is registered and not yet verified.\n * A generic response is always returned to avoid leaking account information.\n *\n * @example\n * ```ts\n * await resendEmailVerification({ email: 'user@example.com' });\n * ```\n * @param options.email - The email address to resend verification to.\n */\nexport async function resendEmailVerification(options: { email: string }) {\n  const { email } = options;\n  await callMethod('_system.user.resendEmailVerification', { email });\n}\n\n/**\n * Logout the current user.\n *\n */\nexport async function logout() {\n  await callMethod('_system.user.logout');\n  const config = getClientConfig();\n  if (config) {\n    config.setAuthToken(null);\n  }\n  setCurrentUser(null);\n}\n\n/**\n * Send reset password token.\n * @param options.email - The email of the user.\n */\nexport async function sendResetPasswordToken(options: { email: string }) {\n  const { email } = options;\n  await callMethod('_system.user.sendResetPasswordToken', {\n    email,\n  });\n}\n\n/**\n * Send a magic sign-in link to the given email address.\n *\n * Works for both existing and new users: clicking the emailed link signs the\n * user in, creating the account first if the email is unknown. A generic\n * response is always returned to avoid leaking account information.\n *\n * @example\n * ```ts\n * await sendMagicLink({ email: 'user@example.com' });\n * ```\n * @param options.email - The email address to send the magic link to.\n */\nexport async function sendMagicLink(options: { email: string }) {\n  const { email } = options;\n  await callMethod('_system.user.sendMagicLink', {\n    email,\n  });\n}\n\n/**\n * Complete a magic link sign-in.\n *\n * Call this from the page the magic link landing route redirects to. The\n * token is exchanged server-side via an httpOnly cookie, so no arguments are\n * needed. Signs the user in — creating the account first when the email is\n * not registered yet — and returns the logged-in user.\n *\n * @example\n * ```ts\n * const user = await loginWithMagicLink();\n * ```\n */\nexport async function loginWithMagicLink() {\n  const { user, session } = await callMethod<{ user: RawUserData; session: { authToken: string } }>(\n    '_system.user.loginWithMagicLink'\n  );\n  const config = getClientConfig();\n  if (config) {\n    config.setAuthToken(session.authToken);\n  }\n  const enrichedUser = setCurrentUser(user);\n  return enrichedUser;\n}\n\n/**\n * Complete a magic link sign-in by typing the one-time code from the email.\n *\n * Alternative to `loginWithMagicLink()` for contexts where clicking the link\n * can't reach the app — native apps without deep links, or when the email is\n * read on a different device. Signs the user in — creating the account first\n * when the email is not registered yet — and returns the logged-in user.\n *\n * @example\n * ```ts\n * const user = await loginWithOneTimeCode({ email: 'user@example.com', code: '482193' });\n * ```\n * @param options.email - The email the magic link was sent to.\n * @param options.code - The one-time code from the email.\n */\nexport async function loginWithOneTimeCode(options: { email: string; code: string }) {\n  const { email, code } = options;\n  const { user, session } = await callMethod<{ user: RawUserData; session: { authToken: string } }>(\n    '_system.user.loginWithOneTimeCode',\n    { email, code }\n  );\n  const config = getClientConfig();\n  if (config) {\n    config.setAuthToken(session.authToken);\n  }\n  const enrichedUser = setCurrentUser(user);\n  return enrichedUser;\n}\n\n/**\n * Reset password.\n *\n * The token is normally exchanged server-side via an httpOnly cookie, so the\n * client only submits the new password. Pass `token` only for legacy flows\n * that still carry it client-side (deprecated).\n *\n * @param options.token - Reset token (optional; read from the httpOnly cookie when omitted).\n * @param options.password - The new password.\n */\nexport async function resetPassword(options: { token?: string; password: string }) {\n  const { token, password } = options;\n  await callMethod('_system.user.resetPassword', {\n    ...(token ? { token } : {}),\n    password,\n  });\n}\n\n/**\n * Link an OAuth provider to the currently signed-in user's account.\n * Redirects the browser to the OAuth provider's authorization page.\n * The provider will redirect back and the account will be linked.\n *\n * @example\n * ```ts\n * linkOAuthProvider({ provider: 'google' });\n * ```\n * @param options.provider - The OAuth provider to link ('google' or 'github').\n */\nexport async function linkOAuthProvider(options: { provider: OAuthProvider }): Promise<void> {\n  const { provider } = options;\n  const config = getClientConfig();\n  const baseUrl = config?.baseUrl ?? '';\n\n  if (config?.openUrl) {\n    // React Native: exchange authToken for a single-use nonce via an authenticated\n    // request, then put the nonce in the URL. A crafted external link can't work\n    // because the nonce is bound to this session and consumed on first use.\n    const token = getAuthToken();\n    if (!token) {\n      throw new Error('Failed to initialize OAuth linking. Please ensure you are logged in.');\n    }\n    const nonceResponse = await fetch(`${baseUrl}/api/_internal/auth/issue-link-nonce`, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json' },\n      body: JSON.stringify({ authToken: token }),\n    });\n    if (!nonceResponse.ok) {\n      throw new Error('Failed to initialize OAuth linking. Please ensure you are logged in.');\n    }\n    const { nonce } = await nonceResponse.json();\n    const url = `${baseUrl}/api/_internal/auth/${provider}?mode=link&linkNonce=${encodeURIComponent(nonce)}`;\n    config.openUrl(url);\n  } else {\n    // Browser: set httpOnly cookie via same-origin fetch (keeps token out of redirect params).\n    const token = getAuthToken();\n    if (token) {\n      const response = await fetch(`${baseUrl}/api/_internal/auth/set-link-cookie`, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({ authToken: token }),\n        credentials: 'include',\n      });\n      if (!response.ok) {\n        throw new Error('Failed to initialize OAuth linking. Please ensure you are logged in.');\n      }\n    }\n    window.location.href = `${baseUrl}/api/_internal/auth/${provider}?mode=link`;\n  }\n}\n/**\n * Unlink an OAuth provider from the currently signed-in user's account.\n *\n * @example\n * ```ts\n * await unlinkOAuthProvider({ provider: 'github' });\n * ```\n * @param options.provider - The OAuth provider to unlink ('google' or 'github').\n */\nexport async function unlinkOAuthProvider(options: { provider: OAuthProvider }): Promise<void> {\n  const { provider } = options;\n  await callMethod('_system.user.unlinkOAuthProvider', { provider });\n}\n\n/**\n * Get the current auth token associated with the current session.\n * @returns The auth token or undefined if not authenticated.\n */\nexport function getAuthToken(): string | undefined {\n  const config = getClientConfig();\n  if (config) {\n    return config.getAuthToken();\n  }\n  return getLocalStorageSession()?.authToken;\n}\n\nexport function getClientInfo(): ClientInfo {\n  const config = getClientConfig();\n  if (config) {\n    return config.getClientInfo();\n  }\n\n  if (typeof window === 'undefined') {\n    return {\n      screenWidth: 0,\n      screenHeight: 0,\n      windowWidth: 0,\n      windowHeight: 0,\n      pixelRatio: 1,\n      orientation: null,\n    };\n  }\n\n  return {\n    screenWidth: window.screen.width,\n    screenHeight: window.screen.height,\n    windowWidth: window.innerWidth,\n    windowHeight: window.innerHeight,\n    pixelRatio: window.devicePixelRatio,\n    orientation: window.screen.orientation?.type ?? null,\n  };\n}\n"]}

package/dist/chunk-B5XMG3OE.js

@@ -1,37 +0,0 @@
-import {s as s$1}from'./chunk-M24E3CAP.js';import {a,b,c,o,p,q as q$1,r,s,k,l,x as x$1,j,i,m,h as h$1,n,t,y as y$1,z as z$2,A as A$1,B as B$1,d as d$1,C as C$1,v,u,e as e$1,F as F$1,D as D$1,E as E$1}from'./chunk-LVB7YU4P.js';import {b as b$1,d,a as a$4}from'./chunk-MIRF7FP3.js';import {a as a$2,f,e,g,c as c$1,h as h$2,l as l$1,k as k$1,d as d$2,j as j$2,m as m$1,i as i$1,n as n$1}from'./chunk-ENHGU3X4.js';import {a as a$3,b as b$2}from'./chunk-5M6FUMUK.js';import {a as a$1}from'./chunk-DO5TZLF5.js';import tr from'dotenv';import Sn from'fs/promises';import Vr from'os';import K from'path';import {Server}from'socket.io';import {createAdapter}from'@socket.io/mongo-adapter';import {MongoClient,MongoError,ObjectId,MongoServerError}from'mongodb';export{ObjectId as m}from'mongodb';import br from'bcrypt';import D,{z as z$1}from'zod';import {randomBytes,randomInt,createHash,randomUUID}from'crypto';import {createServer,defineConfig,loadConfigFromFile,mergeConfig}from'vite';import ln from'@vitejs/plugin-react';import Re from'fs';import j$1,{Router}from'express';import ci from'cookie-parser';import li from'http';var ce=new a("_system",{configSchema:{mongodbUri:{type:"secret",isPublic:false,default:""},mongodbPoolSize:{type:"number",isPublic:false,default:10},"env.type":{type:"string",isPublic:true,default:""},"site.url":{type:"string",isPublic:true,default:""},multiInstance:{type:"boolean",isPublic:false,default:false}}});var N=null;async function jt(){if(N)return N;let e=F();if(!e)throw new Error("MongoDB URI is not set");let t=ce.getConfig("mongodbPoolSize");N=new MongoClient(e,{driverInfo:{name:"Modelence",version:s$1.version},ignoreUndefined:true,maxPoolSize:t});try{return await N.connect(),await N.db("admin").command({ping:1}),console.log("Pinged your deployment. You successfully connected to MongoDB!"),N}catch(o){throw console.error(o),N=null,o}}function F(){return ce.getConfig("mongodbUri")||void 0}function be(){return N}var le=null,gr="_modelenceSocketio",Ht=60;async function hr({httpServer:e,channels:t}){let o=be(),r=!!a$2("_system.multiInstance");console.log("Initializing Socket.IO server...");let n=null;if(r&&o){n=o.db().collection(gr);try{await n.createIndex({createdAt:1},{expireAfterSeconds:Ht,background:!0});}catch(i){if(i instanceof Error&&"code"in i&&i.code===85)try{await n.dropIndex("createdAt_1"),await n.createIndex({createdAt:1},{expireAfterSeconds:Ht,background:!0});}catch(s){console.error("Failed to recreate index on MongoDB collection for Socket.IO:",s);}else console.error("Failed to create index on MongoDB collection for Socket.IO:",i);}}le=new Server(e,{cors:{origin:"*",methods:["GET","POST"]},adapter:n?createAdapter(n):void 0,transports:["websocket"],perMessageDeflate:false}),le.on("error",i=>{console.error("Socket.IO error:",i);}),le.use(async(i,s)=>{let a=i.handshake.auth.token;try{i.data=await v(a);}finally{s();}}),le.on("connection",i=>{i.on("disconnect",()=>{F$1(i);}),i.on("joinChannel",async s=>{let[a]=s.split(":"),c=false;for(let l of t)if(l.category===a){(!l.canAccessChannel||await l.canAccessChannel(i.data))&&(i.join(s),c=true,i.emit("joinedChannel",s));break}c||i.emit("joinError",{channel:s,error:"Access denied"});}),i.on("leaveChannel",s=>{i.leave(s),console.log(`User ${i.id} left channel ${s}`),i.emit("leftChannel",s);}),i.on("subscribeLiveQuery",s=>D$1(i,s)),i.on("unsubscribeLiveQuery",s=>E$1(i,s));}),console.log("Socket.IO server initialized");}function wr({category:e,id:t,data:o}){le?.to(`${e}:${t}`).emit(e,o);}var Gt={init:hr,broadcast:wr};async function ve(e){let t=e.toLowerCase().trim().split("@");if(t.length!==2)return  false;let o=t[1];return !!await p.findOne({domain:o})}var Ft={interval:a$1.days(1),async handler(){let e=await fetch("https://disposable.github.io/disposable-email-domains/domains.txt");if(!e.ok)throw new Error(`HTTP ${e.status}: ${e.statusText}`);let o=(await e.text()).split(`
-`).map(i=>i.trim().toLowerCase()).filter(i=>i.length>0),r=new Date,n=500;for(let i=0;i<o.length;i+=n){let s=o.slice(i,i+n);try{await p.insertMany(s.map(a=>({domain:a,addedAt:r})));}catch(a){a&&typeof a=="object"&&"name"in a&&a.name;}}}};var Ce=3,V=50,Vt=8,Bt=128,qt=254,zt=e=>z$1.string().trim().min(e.min??1,{message:`must be at least ${e.min??1} characters`}).max(e.max,{message:`must be at most ${e.max} characters`}),je=e=>z$1.string().trim().max(e.max,{message:`must be at most ${e.max} characters`}).transform(t=>t===""?void 0:t).optional(),yr=z$1.object({firstName:je({max:50}),lastName:je({max:50}),avatarUrl:je({max:400}),handle:zt({min:Ce,max:V})}).strict();function ke(e){let t=yr.partial().safeParse(e);if(!t.success){let o=t.error.issues[0],r=o.path.join("."),n=r?`${r}: ${o.message}`:o.message;throw new Error(n)}return t.data}function Se(e){return z$1.string().min(Vt,{message:`Password must contain at least ${Vt} characters`}).max(Bt,{message:`Password must be at most ${Bt} characters`}).parse(e)}function x(e){return z$1.string().max(qt,{message:`Email must be at most ${qt} characters`}).email({message:"Invalid email address"}).parse(e).toLowerCase()}function Wt(e){return zt({min:Ce,max:V}).parse(e)}function Ae(e,t){return t?t.startsWith("http://")||t.startsWith("https://")?t:`${e}${t.startsWith("/")?"":"/"}${t}`:e}function B(e){return {id:e._id,handle:e.handle,roles:e.roles||[],firstName:e.firstName??void 0,lastName:e.lastName??void 0,avatarUrl:e.avatarUrl??void 0}}async function Jt(e){let t=e.slice(0,V);try{if(!await o.findOne({handle:t},{collation:{locale:"en",strength:2}}))return t}catch(n){throw new Error(`Database error while checking handle availability: ${n}`)}let o$1=51;for(let n=2;n<=o$1;n++){let i=`_${n}`,s=`${t.slice(0,V-i.length)}${i}`;try{if(!await o.findOne({handle:s},{collation:{locale:"en",strength:2}}))return s}catch(a){throw new Error(`Database error while checking handle "${s}": ${a}`)}}let r=10;for(let n=0;n<r;n++){let i=`_${randomBytes(3).toString("hex")}`,s=`${t.slice(0,V-i.length)}${i}`;try{if(!await o.findOne({handle:s},{collation:{locale:"en",strength:2}}))return s}catch(a){throw new Error(`Database error while checking handle "${s}": ${a}`)}}throw new Error(`Could not generate a unique handle for base "${e}" after exhausting all attempts.`)}async function O(e,t,{throwOnConflict:o$1=true}={}){if(e!=null&&String(e).trim()!==""){let n=Wt(String(e).trim());if(o$1){if(await o.findOne({handle:n},{collation:{locale:"en",strength:2}}))throw new Error("Handle already taken.");return n}return Jt(n)}let r=t.split("@")[0].padEnd(Ce,"_").slice(0,V);return Jt(r)}var He=Object.freeze({});function Ge(e){He=Object.freeze(Object.assign({},He,e));}function h(){return He}var Fe=Object.freeze({});function Kt(e){Fe=Object.freeze(Object.assign({},Fe,e));}function y(){return Fe}function Cr(){return h()?.provider?!!a$2("_system.user.auth.email.verification"):false}async function Qt(e,{user:t,session:o$1,connectionInfo:r,res:n}){try{if(!o$1)throw new Error("Session is not initialized");let i=r?.ip;i&&await C({bucket:"signin",type:"ip",value:i});let s=x(e.email),a=z$1.string().parse(e.password),c=await o.findOne({"emails.address":s,status:{$nin:["deleted","disabled"]}},{collation:{locale:"en",strength:2}}),l$1=c?.authMethods?.password?.hash;if(!l$1)throw Yt();if(!c.emails?.find(f=>f.address.toLowerCase()===s)?.verified&&Cr())throw new b$1("Your email address hasn't been verified yet. Please check your inbox for the verification email.","EMAIL_NOT_VERIFIED");if(!await br.compare(a,l$1))throw Yt();return await h$1(o$1.authToken,c._id),n&&l(n,o$1.authToken),y().onAfterLogin?.({provider:"email",user:c,session:o$1,connectionInfo:r}),y().login?.onSuccess?.(c),{user:B(c),session:{authToken:o$1.authToken}}}catch(i){throw i instanceof Error&&(y().onLoginError?.({provider:"email",error:i,session:o$1,connectionInfo:r}),y().login?.onError?.(i)),i}}async function Xt(e,{session:t,res:o}){if(!t)throw new Error("Session is not initialized");await i(t.authToken),o&&m(o);}function Yt(){return new Error("Incorrect email/password combination")}async function Zt(e,{user:t}){if(!t)throw new Error("Not authenticated");let o$1=await o.requireById(t.id);return {handle:o$1.handle,emails:o$1.emails,authMethods:Object.keys(o$1.authMethods||{}),firstName:o$1.firstName??void 0,lastName:o$1.lastName??void 0,avatarUrl:o$1.avatarUrl??void 0}}async function eo(e,{user:t}){if(!t)throw new Error("Not authenticated");let o$1=await o.requireById(t.id),r=ke(e);if(await y().validateProfileUpdate?.(r),"handle"in r&&r.handle!==void 0&&await o.findOne({handle:r.handle,_id:{$ne:o$1._id}},{collation:{locale:"en",strength:2}}))throw new Error("Handle already taken.");if(Object.keys(r).length>0){let n={},i={};for(let[a,c]of Object.entries(r))c===void 0?i[a]="":n[a]=c;let s={};Object.keys(n).length>0&&(s.$set=n),Object.keys(i).length>0&&(s.$unset=i);try{await o.updateOne({_id:o$1._id},s);let a=Object.fromEntries(Object.keys(i).map(c=>[c,void 0]));o$1={...o$1,...n,...a};}catch(a){throw a instanceof Error&&"code"in a&&a.code===11e3?new Error("Handle already taken."):a}}return {user:B(o$1)}}var Ve=["google","github"];async function to({provider:e},{user:t}){if(!t)throw new Error("You must be signed in to unlink a provider.");if(typeof e!="string"||!Ve.includes(e))throw new Error(`Invalid provider. Supported providers are: ${Ve.join(", ")}.`);let o$1=await o.requireById(t.id),r=o$1.authMethods??{};if(!r[e])throw new Error(`${e} is not linked to your account.`);if(Object.values(r).filter(Boolean).length<=1)throw new Error("Cannot unlink your only authentication method. Please add another method first.");let s=Object.keys(r).filter(l=>l!==e&&r[l]),a=s.length>0?{$or:s.map(l=>({[`authMethods.${l}`]:{$exists:true}}))}:{};if((await o.updateOne({_id:o$1._id,...a},{$unset:{[`authMethods.${e}`]:""}})).matchedCount===0)throw new Error("Cannot unlink your only authentication method. Please add another method first.")}var ue=new b("_modelenceRateLimits",{schema:{bucket:c.string(),type:c.enum(["ip","user","email"]),value:c.string(),windowMs:c.number(),windowStart:c.date(),windowCount:c.number(),prevWindowCount:c.number(),expiresAt:c.date()},indexes:[{key:{bucket:1,type:1,value:1,windowMs:1},unique:true},{key:{expiresAt:1},expireAfterSeconds:0}]});var Be=[];function oo(e){if(Be.length>0)throw new Error("Duplicate call to initRateLimits - already initialized");Be=e;}async function C(e){let{bucket:t,type:o,value:r,message:n}=e,i=Be.filter(a=>a.bucket===t&&a.type===o),s=n?()=>new d(n):void 0;for(let a of i)await kr(a,r,s);}async function kr(e,t,o){let r=()=>o?o():new d(`Rate limit exceeded for ${e.bucket}`),n=await ue.findOne({bucket:e.bucket,type:e.type,value:t,windowMs:e.window}),i=Date.now(),s=Math.floor(i/e.window)*e.window,{count:a,modifier:c}=n?Sr(n,s,i):{count:0,modifier:{$setOnInsert:{windowStart:new Date(s),windowCount:1,prevWindowCount:0,expiresAt:new Date(s+e.window+e.window)}}};if(a>=e.limit)throw r();await ue.upsertOne({bucket:e.bucket,type:e.type,value:t,windowMs:e.window},c);}function Sr(e,t,o){let r=t-e.windowMs;if(e.windowStart.getTime()===t){let n=e.windowCount,i=e.prevWindowCount,s=1-(o-t)/e.windowMs;return {count:Math.round(n+i*s),modifier:{$inc:{windowCount:1},$setOnInsert:{windowStart:new Date(t),prevWindowCount:0,expiresAt:new Date(t+e.windowMs+e.windowMs)}}}}if(e.windowStart.getTime()===r){let n=1-(o-t)/e.windowMs;return {count:Math.round(e.windowCount*n),modifier:{$set:{windowStart:new Date(t),windowCount:1,prevWindowCount:e.windowCount,expiresAt:new Date(t+e.windowMs+e.windowMs)}}}}return {count:0,modifier:{$set:{windowStart:new Date(t),windowCount:1,prevWindowCount:0,expiresAt:new Date(t+e.windowMs+e.windowMs)}}}}function ro({name:e,email:t,verificationUrl:o}){return `
-    <p>Hi${e?` ${e}`:""},</p>
-    <p>Please verify your email address ${t} by clicking the link below:</p>
-    <p><a href="${o}">${o}</a></p>
-    <p>If you did not request this, please ignore this email.</p>
-  `}async function Rr(e){let t=await q$1.findOne({token:e,expiresAt:{$gt:new Date}});if(!t)throw new Error("Invalid or expired verification token");if(!await o.findOne({_id:t.userId,status:{$nin:["deleted","disabled"]}}))throw new Error("User not found");let r=t.email;if(!r)throw new Error("Email not found in token");let n=await o.findOneAndUpdate({_id:t.userId,status:{$nin:["deleted","disabled"]},"emails.address":r,"emails.verified":{$ne:true}},{$set:{"emails.$.verified":true}},{returnDocument:"after"});if(!n)throw await o.findOne({_id:t.userId,"emails.address":r})?new Error("Email is already verified"):new Error("Email address not found for this user");return await q$1.deleteOne({_id:t._id}),{userDoc:n,email:r}}async function no(e){let t=a$2("_system.site.url"),o=h().verification?.redirectUrl||h().emailVerifiedRedirectUrl||t||"/";try{let r=z$1.string().parse(e.query.token),{userDoc:n}=await Rr(r);y().onAfterEmailVerification?.({provider:"email",user:n,session:null,connectionInfo:{baseUrl:t,ip:e.req.ip||e.req.socket.remoteAddress,userAgent:e.headers["user-agent"],acceptLanguage:e.headers["accept-language"],referrer:e.headers.referer}});let{authToken:s}=await k(n._id);return l(e.res,s),{status:301,headers:{"Referrer-Policy":"no-referrer"},redirect:`${o}?status=verified`}}catch(r){let n=r instanceof Error?r.message:"An unexpected error occurred";return r instanceof Error&&(y().onEmailVerificationError?.({provider:"email",error:r,session:null,connectionInfo:{baseUrl:t,ip:e.req.ip||e.req.socket.remoteAddress,userAgent:e.headers["user-agent"],acceptLanguage:e.headers["accept-language"],referrer:e.headers.referer}}),console.error("Error verifying email:",r)),{status:301,headers:{"Referrer-Policy":"no-referrer"},redirect:`${o}?status=error&message=${encodeURIComponent(n)}`}}}async function ze({userId:e,email:t,baseUrl:o}){let r=a$2("_system.site.url")||o;if(h().provider){let n=h().provider,i=randomBytes(32).toString("hex"),s=new Date(Date.now()+a$1.hours(24));await q$1.insertOne({userId:e,email:t,token:i,createdAt:new Date,expiresAt:s});let a=`${r}/api/_internal/auth/verify-email?token=${i}`,l=(h()?.verification?.template||ro)({name:"",email:t,verificationUrl:a}),d=x$1(l);await n?.sendEmail({to:t,from:h()?.from||"noreply@modelence.com",subject:h()?.verification?.subject||"Verify your email address",text:d,html:l});}}var qe={success:true,message:"If that email is registered and not yet verified, a verification email has been sent"};async function io(e,{connectionInfo:t}){let o$1=x(e.email),r=await o.findOne({"emails.address":o$1,status:{$nin:["deleted","disabled"]}},{collation:{locale:"en",strength:2}});if(!r)return qe;let n=r.emails?.find(i=>i.address.toLowerCase()===o$1);if(!n||n.verified)return qe;if(!h().provider)throw new Error("Email provider is not configured");return await C({bucket:"verification",type:"user",value:r._id.toString(),message:"Please wait at least 60 seconds before requesting another verification email"}),await ze({userId:r._id,email:o$1,baseUrl:t?.baseUrl}),qe}async function so(e,{user:t,session:o$1,connectionInfo:r}){let n=y();try{let i=e,{firstName:s,lastName:a,avatarUrl:c,handle:l}=i,d=x(i.email),p=Se(i.password),f=r?.ip;if(f&&await C({bucket:"signupAttempt",type:"ip",value:f}),!n.allowDisposableEmails&&await ve(d))throw new Error("Please use a permanent email address");let b=await o.findOne({"emails.address":d},{collation:{locale:"en",strength:2}});if(b){let he=b.emails?.find(P=>P.address.toLowerCase()===d);throw b.status==="disabled"?new Error("User is marked for deletion, please contact support if you want to restore the account."):new Error(`User with email already exists: ${he?.address}`)}await n.onBeforeSignup?.({email:d,firstName:s,lastName:a,handle:l,provider:"email",connectionInfo:r}),f&&await C({bucket:"signup",type:"ip",value:f});let v=ke({firstName:s,lastName:a,avatarUrl:c,handle:l});await n.validateSignup?.({email:d,password:p,...v});let S;if(v.handle)S=await O(v.handle,d);else if(n.generateHandle){let he=await n.generateHandle({email:d,firstName:v.firstName,lastName:v.lastName});S=await O(he,d,{throwOnConflict:!1});}else S=await O(void 0,d);let re=await br.hash(p,10),ne=await o.insertOne({handle:S,status:"active",emails:[{address:d,verified:!1}],createdAt:new Date,authMethods:{password:{hash:re}},...v.firstName!==void 0&&{firstName:v.firstName},...v.lastName!==void 0&&{lastName:v.lastName},...v.avatarUrl!==void 0&&{avatarUrl:v.avatarUrl}}),H=await o.findOne({_id:ne.insertedId},{readPreference:"primary"});if(!H)throw new Error("User not found");return await ze({userId:ne?.insertedId,email:d,baseUrl:r?.baseUrl}),n.onAfterSignup?.({provider:"email",user:H,session:o$1,connectionInfo:r}),n.signup?.onSuccess?.(H),ne.insertedId}catch(i){throw i instanceof Error&&(n.onSignupError?.({provider:"email",error:i,session:o$1,connectionInfo:r}),n.signup?.onError?.(i)),i}}function $(e){return createHash("sha256").update(e).digest("hex")}var Je="resetPasswordToken",Tr="/api/_internal/",lo={httpOnly:true,secure:process.env.NODE_ENV==="production",sameSite:"lax",path:Tr};async function uo(e){return r.findOne({token:$(e)})}async function ao(e){return r.findOneAndDelete({_id:e})}function Mr({email:e,resetUrl:t}){return `
-    <p>Hi,</p>
-    <p>We received a request to reset your password for ${e}.</p>
-    <p>Click the link below to reset your password:</p>
-    <p><a href="${t}">${t}</a></p>
-    <p>This link will expire in 1 hour.</p>
-    <p>If you did not request this password reset, please ignore this email.</p>
-  `}var We={success:true,message:"If an account with that email exists, a password reset link has been sent"};async function mo(e,{connectionInfo:t}){let o$1=x(e.email),r$1=t?.ip;r$1&&await C({bucket:"passwordReset",type:"ip",value:r$1}),await C({bucket:"passwordReset",type:"email",value:o$1});let n=await o.findOne({"emails.address":o$1,status:{$nin:["deleted","disabled"]}},{collation:{locale:"en",strength:2}});if(!n||!n.authMethods?.password)return We;let i=h().provider;if(!i)throw new Error("Email provider is not configured");let s=randomBytes(32).toString("hex"),a=Date.now(),c=new Date(a),l=new Date(a+a$1.hours(1));await r.insertOne({userId:n._id,email:o$1,token:$(s),createdAt:c,expiresAt:l});let d=a$2("_system.site.url")||t?.baseUrl;if(!d)throw new Error("Unable to build password reset link: set _system.site.url (MODELENCE_SITE_URL)");let p=`${d}/api/_internal/auth/reset-password?token=${s}`,b=(h()?.passwordReset?.template||Mr)({email:o$1,resetUrl:p,name:""}),v=x$1(b);return await i.sendEmail({to:o$1,from:h()?.from||"noreply@modelence.com",subject:h()?.passwordReset?.subject||"Reset your password",text:v,html:b}),We}async function po(e){let t=a$2("_system.site.url")||`${e.req.protocol}://${e.req.get("host")}`,o=Ae(t,h().passwordReset?.redirectUrl);try{let r=z$1.string().parse(e.query.token),n=await uo(r);if(!n||n.expiresAt<new Date)throw new Error("This password reset link is invalid or has expired.");return e.res.cookie(Je,r,{...lo,maxAge:a$1.hours(1)}),{status:302,headers:{"Referrer-Policy":"no-referrer"},redirect:o}}catch(r){return console.error("Error handling password reset landing:",r),{status:302,headers:{"Referrer-Policy":"no-referrer"},redirect:`${o}?status=error&message=${encodeURIComponent("This password reset link is invalid or has expired.")}`}}}async function fo(e,t){let o$1=t.req?.cookies?.[Je];!o$1&&e.token&&console.warn("[modelence] resetPassword received a token via request args instead of the httpOnly cookie. This path is deprecated and will be removed; ensure password reset emails link to /api/_internal/auth/reset-password so the token is exchanged server-side.");let r=z$1.string().parse(o$1??e.token),n=Se(e.password),i=()=>{t.res?.clearCookie(Je,lo);},s=await uo(r);if(!s)throw i(),new Error("Invalid or expired reset token");if(s.expiresAt<new Date)throw await ao(s._id),i(),new Error("Reset token has expired");let a=await o.findOne({_id:s.userId});if(!a)throw new Error("User not found");let c=await br.hash(n,10);if(!await ao(s._id))throw i(),new Error("Invalid or expired reset token");return await o.updateOne({_id:a._id},{$set:{"authMethods.password.hash":c}}),s.email&&await o.updateOne({_id:a._id,"emails.address":s.email},{$set:{"emails.$.verified":true}}),await j(a._id),i(),{success:true,message:"Password has been reset successfully"}}function go({name:e,email:t,magicLinkUrl:o,code:r}){return `
-    <p>Hi${e?` ${e}`:""},</p>
-    <p>Click the link below to sign in as ${t}:</p>
-    <p><a href="${o}">${o}</a></p>
-    <p>Or enter this one-time code in the app:</p>
-    <p><strong style="font-size: 24px; letter-spacing: 4px;">${r}</strong></p>
-    <p>The link and code can only be used once and will expire in 15 minutes.</p>
-    <p>If you did not request this, please ignore this email.</p>
-  `}var Ke="magicLinkToken",Nr="/api/_internal/",yo={httpOnly:true,secure:process.env.NODE_ENV==="production",sameSite:"lax",path:Nr},Eo=15,ho=6,$r=5;function Qe(){return !!y().magicLink?.enabled}async function bo(e){return s.findOne({token:$(e)})}async function me(e){return s.findOneAndDelete({_id:e})}var wo={success:true,message:"If this email can be used to sign in, a link has been sent"};async function vo(e,{connectionInfo:t}){if(!Qe())throw new Error("Magic link authentication is not enabled");let o$1=x(e.email),r=t?.ip;r&&await C({bucket:"magicLink",type:"ip",value:r}),await C({bucket:"magicLink",type:"email",value:o$1});let n=h().provider;if(!n)throw new Error("Email provider is not configured");if(!y().allowDisposableEmails&&await ve(o$1))throw new Error("Please use a permanent email address");let i=await o.findOne({"emails.address":o$1},{collation:{locale:"en",strength:2}});if(i&&(i.status==="disabled"||i.status==="deleted"))return wo;let s$1=randomBytes(32).toString("hex"),a=randomInt(0,10**ho).toString().padStart(ho,"0"),c=Date.now(),l=new Date(c),d=new Date(c+a$1.minutes(Eo));await s.insertOne({email:o$1,token:$(s$1),code:$(a),attempts:0,createdAt:l,expiresAt:d});let p=a$2("_system.site.url")||t?.baseUrl;if(!p)throw new Error("Unable to build magic link: set _system.site.url (MODELENCE_SITE_URL)");let f=`${p}/api/_internal/auth/magic-link?token=${s$1}`,v=(h()?.magicLink?.template||go)({email:o$1,magicLinkUrl:f,code:a,name:""}),S=x$1(v);return await n.sendEmail({to:o$1,from:h()?.from||"noreply@modelence.com",subject:h()?.magicLink?.subject||"Your sign-in link",text:S,html:v}),wo}async function Co(e){let t=a$2("_system.site.url")||`${e.req.protocol}://${e.req.get("host")}`,o=Ae(t,h().magicLink?.redirectUrl);try{let r=z$1.string().parse(e.query.token),n=await bo(r);if(!n||n.expiresAt<new Date)throw new Error("This sign-in link is invalid or has expired.");return e.res.cookie(Ke,r,{...yo,maxAge:a$1.minutes(Eo)}),{status:302,headers:{"Referrer-Policy":"no-referrer"},redirect:o}}catch(r){return console.error("Error handling magic link landing:",r),{status:302,headers:{"Referrer-Policy":"no-referrer"},redirect:`${o}?status=error&message=${encodeURIComponent("This sign-in link is invalid or has expired.")}`}}}async function ko(e,t){let{tokenDoc:o$1,session:r,connectionInfo:n,res:i,clearCookie:s}=t,a=y();try{if(e.status==="disabled"||e.status==="deleted")throw await me(o$1._id),s(),new Error("User account is not active");if(!await me(o$1._id))throw s(),new Error("Invalid or expired magic link");let d=!e.emails?.find(p=>p.address.toLowerCase()===o$1.email)?.verified;return await o.updateOne({_id:e._id,"emails.address":o$1.email},{$set:{"emails.$.verified":!0}}),await h$1(r.authToken,e._id),i&&l(i,r.authToken),d&&a.onAfterEmailVerification?.({provider:"magicLink",user:e,session:r,connectionInfo:n}),a.onAfterLogin?.({provider:"magicLink",user:e,session:r,connectionInfo:n}),s(),{user:B(e),session:{authToken:r.authToken}}}catch(c){throw c instanceof Error&&a.onLoginError?.({provider:"magicLink",error:c,session:r,connectionInfo:n}),c}}async function So(e){let{tokenDoc:t,session:o$1,connectionInfo:r,res:n,clearCookie:i}=e,s=t.email,a=y();try{await a.onBeforeSignup?.({email:s,provider:"magicLink",connectionInfo:r});let c=r?.ip;c&&await C({bucket:"signup",type:"ip",value:c});let l$1;if(a.generateHandle){let b=await a.generateHandle({email:s});l$1=await O(b,s,{throwOnConflict:!1});}else l$1=await O(void 0,s);if(!await me(t._id))throw i(),new Error("Invalid or expired magic link");let p=await o.insertOne({handle:l$1,status:"active",emails:[{address:s,verified:!0}],createdAt:new Date,authMethods:{}}),f=await o.findOne({_id:p.insertedId},{readPreference:"primary"});if(!f)throw new Error("User not found");return await h$1(o$1.authToken,f._id),n&&l(n,o$1.authToken),a.onAfterSignup?.({provider:"magicLink",user:f,session:o$1,connectionInfo:r}),i(),{user:B(f),session:{authToken:o$1.authToken}}}catch(c){throw c instanceof Error&&a.onSignupError?.({provider:"magicLink",error:c,session:o$1,connectionInfo:r}),c}}async function Ao(e,t){let{session:o$1,connectionInfo:r,res:n,req:i}=t;if(!o$1)throw new Error("Session is not initialized");if(!Qe())throw new Error("Magic link authentication is not enabled");let s=z$1.string().parse(i?.cookies?.[Ke]),a=()=>{n?.clearCookie(Ke,yo);},c=await bo(s);if(!c)throw a(),new Error("Invalid or expired magic link");if(c.expiresAt<new Date)throw await me(c._id),a(),new Error("Magic link has expired");let l=await o.findOne({"emails.address":c.email},{collation:{locale:"en",strength:2}}),d={tokenDoc:{_id:c._id,email:c.email},session:o$1,connectionInfo:r,res:n,clearCookie:a};return l?ko(l,d):So(d)}async function xo(e,t){let{session:o$1,connectionInfo:r,res:n}=t;if(!o$1)throw new Error("Session is not initialized");if(!Qe())throw new Error("Magic link authentication is not enabled");let i=x(e.email),s$1=z$1.string().parse(e.code).replace(/[\s-]/g,""),a=r?.ip;a&&await C({bucket:"oneTimeCode",type:"ip",value:a}),await C({bucket:"oneTimeCode",type:"email",value:i});let c=await s.findOne({email:i,code:$(s$1),attempts:{$lt:$r}});if(!c)throw await s.updateMany({email:i},{$inc:{attempts:1}}),new Error("Invalid or expired code");if(c.expiresAt<new Date)throw await me(c._id),new Error("Code has expired");let l=await o.findOne({"emails.address":i},{collation:{locale:"en",strength:2}}),d={tokenDoc:{_id:c._id,email:c.email},session:o$1,connectionInfo:r,res:n,clearCookie:()=>{}};return l?ko(l,d):So(d)}function Ro(e){return `${e.bucket}
-${e.type}
-${e.window}`}function Dr(){return [{bucket:"signup",type:"ip",window:a$1.minutes(15),limit:20},{bucket:"signup",type:"ip",window:a$1.days(1),limit:200},{bucket:"signupAttempt",type:"ip",window:a$1.minutes(15),limit:50},{bucket:"signupAttempt",type:"ip",window:a$1.days(1),limit:500},{bucket:"signin",type:"ip",window:a$1.minutes(15),limit:50},{bucket:"signin",type:"ip",window:a$1.days(1),limit:500},{bucket:"verification",type:"user",window:a$1.seconds(60),limit:1},{bucket:"verification",type:"user",window:a$1.days(1),limit:10},{bucket:"passwordReset",type:"ip",window:a$1.minutes(15),limit:10},{bucket:"passwordReset",type:"ip",window:a$1.days(1),limit:100},{bucket:"passwordReset",type:"email",window:a$1.hours(1),limit:5},{bucket:"passwordReset",type:"email",window:a$1.days(1),limit:10},{bucket:"magicLink",type:"ip",window:a$1.minutes(15),limit:10},{bucket:"magicLink",type:"ip",window:a$1.days(1),limit:100},{bucket:"magicLink",type:"email",window:a$1.hours(1),limit:5},{bucket:"magicLink",type:"email",window:a$1.days(1),limit:10},{bucket:"oneTimeCode",type:"ip",window:a$1.minutes(15),limit:20},{bucket:"oneTimeCode",type:"ip",window:a$1.days(1),limit:100},{bucket:"oneTimeCode",type:"email",window:a$1.hours(1),limit:10},{bucket:"oneTimeCode",type:"email",window:a$1.days(1),limit:20}]}function jr(e){let t=[],o=["signup","signupAttempt","signin","verification","passwordReset","magicLink","oneTimeCode"];for(let r of o){let n=e[r];if(n!==void 0)for(let i of n)t.push({bucket:r,...i});}return t}function Xe(e={}){let t=Dr(),o=jr(e),r=new Map;for(let s of o)r.set(Ro(s),s);let n=[],i=new Set;for(let s of t){let a=Ro(s),c=r.get(a);c!==void 0?(n.push(c),i.add(a)):n.push(s);}for(let[s,a]of r)i.has(s)||n.push(a);return n}var Ze=new a("_system.user",{stores:[o,p,q$1,r,s],queries:{getOwnProfile:Zt},mutations:{signupWithPassword:so,loginWithPassword:Qt,logout:Xt,resendEmailVerification:io,sendResetPasswordToken:mo,resetPassword:fo,sendMagicLink:vo,loginWithMagicLink:Ao,loginWithOneTimeCode:xo,updateProfile:eo,unlinkOAuthProvider:to},cronJobs:{updateDisposableEmailList:Ft},rateLimits:Xe(),configSchema:{"auth.email.enabled":{type:"boolean",isPublic:true,default:true},"auth.email.from":{type:"string",isPublic:false,default:""},"auth.email.verification":{type:"boolean",isPublic:true,default:true},"auth.google.enabled":{type:"boolean",isPublic:true,default:false},"auth.google.clientId":{type:"string",isPublic:false,default:""},"auth.google.clientSecret":{type:"secret",isPublic:false,default:""},"auth.github.enabled":{type:"boolean",isPublic:true,default:false},"auth.github.clientId":{type:"string",isPublic:false,default:""},"auth.github.clientSecret":{type:"secret",isPublic:false,default:""}},routes:[{path:"/api/_internal/auth/verify-email",handlers:{get:no}},{path:"/api/_internal/auth/reset-password",handlers:{get:po}},{path:"/api/_internal/auth/magic-link",handlers:{get:Co}}]});var Hr={withoutRemoteServer:{MONGODB_URI:"_system.mongodbUri",MONGODB_POOL_SIZE:"_system.mongodbPoolSize",MODELENCE_AUTH_GOOGLE_ENABLED:"_system.user.auth.google.enabled",MODELENCE_AUTH_GOOGLE_CLIENT_ID:"_system.user.auth.google.clientId",MODELENCE_AUTH_GOOGLE_CLIENT_SECRET:"_system.user.auth.google.clientSecret",MODELENCE_AUTH_GITHUB_ENABLED:"_system.user.auth.github.enabled",MODELENCE_AUTH_GITHUB_CLIENT_ID:"_system.user.auth.github.clientId",MODELENCE_AUTH_GITHUB_CLIENT_SECRET:"_system.user.auth.github.clientSecret",MODELENCE_AUTH_GITHUB_CLIENT_SCOPES:"_system.user.auth.github.scopes",MODELENCE_EMAIL_RESEND_API_KEY:"_system.email.resend.apiKey",MODELENCE_EMAIL_AWS_SES_REGION:"_system.email.awsSes.region",MODELENCE_EMAIL_AWS_SES_ACCESS_KEY_ID:"_system.email.awsSes.accessKeyId",MODELENCE_EMAIL_AWS_SES_SECRET_ACCESS_KEY:"_system.email.awsSes.secretAccessKey",MODELENCE_EMAIL_SMTP_HOST:"_system.email.smtp.host",MODELENCE_EMAIL_SMTP_PORT:"_system.email.smtp.port",MODELENCE_EMAIL_SMTP_USER:"_system.email.smtp.user",MODELENCE_EMAIL_SMTP_PASS:"_system.email.smtp.pass",MODELENCE_SITE_URL:"_system.site.url",MODELENCE_ENV_TYPE:"_system.env.type",MODELENCE_MULTI_INSTANCE:"_system.multiInstance",MODELENCE_ENV:"_system.env",GOOGLE_AUTH_ENABLED:"_system.user.auth.google.enabled",GOOGLE_AUTH_CLIENT_ID:"_system.user.auth.google.clientId",GOOGLE_AUTH_CLIENT_SECRET:"_system.user.auth.google.clientSecret"},withRemoteServer:{MODELENCE_SITE_URL:"_system.site.url"}};function Gr(e,t){if(t==="number"){let o=Number(e);if(isNaN(o))throw new Error(`Invalid number value for config: ${e}`);return o}if(t==="boolean"){if(e.toLowerCase()==="true")return  true;if(e.toLowerCase()==="false")return  false;throw new Error(`Invalid boolean value for config: ${e}`)}return e}function Fr(e,t){let o=[];for(let[r,n]of Object.entries(e)){let i=process.env[r],s=t[n];if(i){let a=s?.type??"string";o.push({key:n,type:a,value:Gr(i,a)});}}return o}function xe(e,t="withoutRemoteServer"){let o=Hr[t];return Fr(o,e)}async function Oo({configSchema:e,cronJobsMetadata:t,stores:o,roles:r}){let n=process.env.MODELENCE_CONTAINER_ID;if(!n)throw new Error("Unable to connect to Modelence Cloud: MODELENCE_CONTAINER_ID is not set");try{let i=(o??[]).map(a=>({name:a.getName(),schema:a.getSerializedSchema(),collections:[a.getName()],version:2,indexes:a.getIndexes(),searchIndexes:a.getSearchIndexes(),indexCreationMode:a.getIndexCreationMode()})),s=await _("/api/connect","POST",{hostname:Vr.hostname(),containerId:n,dataModels:i,configSchema:e,cronJobsMetadata:t,roles:r});if(s.status==="error")throw new Error(s.error);return console.log("Successfully connected to Modelence Cloud"),s}catch(i){throw console.error("Unable to connect to Modelence Cloud:",i),i}}async function _o(){return _("/api/configs","GET")}async function Lo(){return await _("/api/sync","POST",{containerId:process.env.MODELENCE_CONTAINER_ID})}async function _(e,t,o){let{MODELENCE_SERVICE_ENDPOINT:r,MODELENCE_SERVICE_TOKEN:n}=process.env;if(!r)throw new Error("Unable to connect to Modelence Cloud: MODELENCE_SERVICE_ENDPOINT is not set");let i=await fetch(`${r}${e}`,{method:t,headers:{Authorization:`Bearer ${n}`,...o?{"Content-Type":"application/json"}:{}},body:o?JSON.stringify(o):void 0});if(!i.ok){let s=await i.text(),a,c=s;try{a=JSON.parse(s);let d=a.error;if(typeof d=="string")c=d;else if(d&&typeof d=="object"){let p=d.message;typeof p=="string"&&(c=p);}}catch{}let l=new Error(`Unable to connect to Modelence Cloud: HTTP status: ${i.status}, ${c}`);throw a!==void 0&&(l.responseBody=a),l.status=i.status,l}if(!(i.status===204||i.headers?.get("content-length")==="0"))return await i.json()}var et=false,Br=a$1.seconds(10);function Po(){setInterval(async()=>{if(!et){et=true;try{await Lo();}catch(e){console.error("Error syncing status",e);}try{await qr();}catch(e){console.error("Error syncing config",e);}et=false;}},Br);}function tt(e){c$1(e),c$1(xe(d$2(),"withRemoteServer"));}async function qr(){let{configs:e}=await _o();tt(e);}var q=new b("_modelenceLocks",{schema:{_id:c.string(),instanceId:c.string(),acquiredAt:c.date(),resource:c.string()},indexes:[{key:{resource:1},unique:true},{key:{resource:1,instanceId:1}},{key:{resource:1,acquiredAt:1}}],indexCreationMode:"blocking"});var z={},To=a$1.seconds(10),No=randomBytes(32).toString("base64url"),Jr=a$1.seconds(30),Z=new Map,ot=e=>e instanceof MongoError&&e.code===11e3,Mo=(e,t)=>typeof e.keyPattern=="object"&&e.keyPattern!==null&&Object.prototype.hasOwnProperty.call(e.keyPattern,t),Kr=async({error:e,resource:t})=>{if(Mo(e,"resource"))return  true;if(Mo(e,"_id"))return  false;let o=await q.findOne({resource:t});return !!o&&o._id!==t},Io=async({resource:e,staleThresholdDate:t,instanceId:o})=>{let r=await q.upsertOne({_id:e,$or:[{instanceId:o},{acquiredAt:{$lt:t}}]},{$set:{resource:e,instanceId:o,acquiredAt:new Date},$setOnInsert:{_id:e}});return r.upsertedCount>0||r.modifiedCount>0},$o=async({resource:e,instanceId:t,staleThresholdDate:o})=>{let r=o?{resource:e,_id:{$ne:e},$or:[{instanceId:t},{acquiredAt:{$lt:o}}]}:{resource:e,instanceId:t};return (await q.deleteOne(r)).deletedCount>0},Yr=e=>{let t=e,o=Z.get(t);o&&(o.stopRequested=true,o.timer&&(clearTimeout(o.timer),o.timer=null),Z.delete(t));},Uo=({resource:e,lockDuration:t,instanceId:o})=>{let r=Math.floor(t/3),n=e,i=Z.get(n);if(i&&!i.stopRequested&&i.heartbeatInterval===r&&i.lockDuration===t)return;i&&(i.stopRequested=true,i.timer&&(clearTimeout(i.timer),i.timer=null),Z.delete(n));let s={timer:null,stopRequested:false,lockDuration:t,heartbeatInterval:r},a=()=>{s.timer=setTimeout(()=>{W(e,{lockDuration:t,bypassCache:true,instanceId:o}).then(c=>{c||(s.stopRequested=true,j$2(`Lost lock while refreshing heartbeat: ${e}`,{source:"lock",resource:e,instanceId:o}));}).finally(()=>{if(s.stopRequested){Z.delete(n);return}a();});},r);};Z.set(n,s),a();};async function W(e,{lockDuration:t=Jr,successfulLockCacheDuration:o=To,failedLockCacheDuration:r=To,heartbeat:n,bypassCache:i,instanceId:s=No}={}){let a=Date.now();if(!i&&z[e]&&a<z[e].expiresAt)return z[e].value&&n&&Uo({resource:e,lockDuration:t,instanceId:s}),z[e].value;let c=new Date(a-t);j$2(`Attempting to acquire lock: ${e}`,{source:"lock",resource:e,instanceId:s});try{let l=await Qr({resource:e,staleThresholdDate:c,instanceId:s});return z[e]={value:l,expiresAt:a+(l?o:r)},l?(n&&Uo({resource:e,lockDuration:t,instanceId:s}),j$2(`Lock acquired: ${e}`,{source:"lock",resource:e,instanceId:s})):j$2(`Failed to acquire lock (already held): ${e}`,{source:"lock",resource:e,instanceId:s}),l}catch{return z[e]={value:false,expiresAt:a+r},j$2(`Failed to acquire lock (already held): ${e}`,{source:"lock",resource:e,instanceId:s}),false}}var Qr=async({resource:e,staleThresholdDate:t,instanceId:o})=>{try{return await Io({resource:e,staleThresholdDate:t,instanceId:o})}catch(r){if(ot(r)&&await Kr({error:r,resource:e})){if(!await $o({resource:e,staleThresholdDate:t,instanceId:o}))return  false;try{return await Io({resource:e,staleThresholdDate:t,instanceId:o})}catch(i){if(ot(i))return  false;throw i}}if(ot(r))return  false;throw r}};async function pe(e,{instanceId:t=No}={}){Yr(e);try{let o=await q.deleteOne({_id:e,instanceId:t});return o.deletedCount===0?await $o({resource:e,instanceId:t}):o.deletedCount>0}catch{return  false}finally{delete z[e];}}var J={},rt=null,nt=new b("_modelenceCronJobs",{schema:{alias:c.string(),lastStartDate:c.date().optional()},indexes:[{key:{alias:1},unique:true,background:true}]});function jo(e,{description:t="",interval:o,timeout:r=Math.min(Math.max(o,a$1.minutes(1)),a$1.days(1)),handler:n}){if(J[e])throw new Error(`Duplicate cron job declaration: '${e}' already exists`);if(rt)throw new Error(`Unable to add a cron job - cron jobs have already been initialized: [${e}]`);if(o<a$1.seconds(5))throw new Error(`Cron job interval should not be less than 5 second [${e}]`);if(r>a$1.days(1))throw new Error(`Cron job timeout should not be longer than 1 day [${e}]`);J[e]={alias:e,params:{description:t,interval:o,timeout:r},handler:n,state:{isRunning:false}};}async function Ho(){if(rt)throw new Error("Cron jobs already started");let e=Object.keys(J);if(e.length>0){let t={alias:{$in:e}},o=await nt.fetch(t),r=Date.now();o.forEach(n=>{let i=J[n.alias];i&&(i.state.scheduledRunTs=n.lastStartDate?n.lastStartDate.getTime()+i.params.interval:r);}),Object.values(J).forEach(n=>{n.state.scheduledRunTs||(n.state.scheduledRunTs=r);}),rt=setInterval(Xr,a$1.seconds(1));}}async function Xr(){let e=Date.now();await W("cron",{successfulLockCacheDuration:a$1.seconds(10),failedLockCacheDuration:a$1.seconds(30)})&&Object.values(J).forEach(async o=>{let{params:r,state:n}=o;if(n.isRunning){n.startTs&&n.startTs+r.timeout<e&&(n.isRunning=false);return}n.scheduledRunTs&&n.scheduledRunTs<=e&&await Zr(o);});}async function Zr(e){let{alias:t,params:o,handler:r,state:n}=e;n.isRunning=true,n.startTs=Date.now(),await nt.updateOne({alias:t},{$set:{lastStartDate:new Date(n.startTs)}});let i=m$1("cron",`cron:${t}`);try{await r(),Do(n,o),i.end("success");}catch(s){Do(n,o);let a=s instanceof Error?s:new Error(String(s));n$1(a),i.end("error"),console.error(`Error in cron job '${t}':`,s);}}function Do(e,t){e.scheduledRunTs=e.startTs?e.startTs+t.interval:Date.now(),e.startTs=void 0,e.isRunning=false;}function Go(){return Object.values(J).map(({alias:e,params:t})=>({alias:e,description:t.description,interval:t.interval,timeout:t.timeout}))}var Fo=new a("_system.cron",{stores:[nt]});function Vo(e){let t=[...new Set(e)],o=new Map;for(let i of t){let s=i.getChainRoot();o.set(s,s.getChainTail());}let r=[...new Set(o.values())],n=new Map;for(let[i,s]of o){let a=s.getName(),c=n.get(a);if(c!==void 0&&c!==i)throw new Error(`Store collision: multiple unrelated stores use collection name '${a}'. Use .extend() to create a single extension chain instead of independent stores.`);n.set(a,i);}return {storesToInit:t,effectiveStores:r}}var it=new a("_system.lock",{stores:[q]});var fe=new b("_modelenceMigrations",{schema:{version:c.number(),status:c.enum(["completed","failed"]),description:c.string().optional(),output:c.string().optional(),appliedAt:c.date()},indexes:[{key:{version:1},unique:true},{key:{version:1,status:1}}]});async function st(e,{lockMode:t="acquire"}={}){if(e.length!==0){if(t==="acquire"&&!await W("migrations")){k$1("Another instance is running migrations. Skipping migration run.",{source:"migrations"});return}try{let o=e.map(({version:s})=>s),r=await fe.fetch({version:{$in:o}}),n=new Set(r.map(({version:s})=>s)),i=e.filter(({version:s})=>!n.has(s));if(i.length===0)return;k$1(`Running migrations (${i.length})...`,{source:"migrations"});for(let{version:s,description:a,handler:c}of i){k$1(`Running migration v${s}: ${a}`,{source:"migrations"});try{let d=(await c()||"").toString().trim(),p=15*1024*1024,f=d.length>p?d.slice(0,p)+`
-[Output truncated - exceeded size limit]`:d;await fe.upsertOne({version:s},{$set:{version:s,status:"completed",description:a,output:f,appliedAt:new Date}}),k$1(`Migration v${s} complete`,{source:"migrations"});}catch(l){l instanceof Error&&(await fe.upsertOne({version:s},{$set:{version:s,status:"failed",description:a,output:l.message||"",appliedAt:new Date}}),k$1(`Migration v${s} is failed: ${l.message}`,{source:"migrations"}));}}}finally{t==="acquire"&&await pe("migrations");}}}function Bo(e){setTimeout(()=>{st(e).catch(t=>{console.error("Error running migrations:",t);});},0);}var qo=new a("_system.migration",{stores:[fe]});var zo=new a("_system.rateLimit",{stores:[ue]});async function en({filePath:e,contentType:t,visibility:o}){return await _("/api/files/upload","POST",{filePath:e,contentType:t,visibility:o})}async function tn(e){await _("/api/files/delete","POST",{filePath:e});}async function on(e){return await _("/api/files/download","POST",{filePath:e})}async function rn(e){return await _("/api/files/url","POST",{filePath:e})}var Wo=new a("_system.files",{});function at(e){return e.replace(/[<>&\u2028\u2029]/g,t=>`\\u${t.charCodeAt(0).toString(16).padStart(4,"0")}`)}var ge="./.modelence/build/client".replace(/\\/g,"/"),Ko="./.modelence/build/ssr".replace(/\\/g,"/"),Yo="/index.tsx",dn=/(<div\b[^>]*\bid\s*=\s*["']root["'][^>]*>)\s*<\/div>/i,un="</head>",ct=class{constructor(){this.ssrEnabled=false;this.ssrTransportInstalled=false;this.prodEntryLoaded=false;}enableSsr(){this.ssrEnabled=true;}async init({httpServer:t}){if(this.config=await yn(this.isDev()?t:void 0,{ssr:this.ssrEnabled}),this.isDev())console.log("Starting Vite dev server..."),this.viteServer=await createServer(this.config);else if(this.ssrEnabled){let o=K.resolve(process.cwd(),Ko,"index.mjs");if(!Re.existsSync(o))throw new Error(`Modelence: SSR is enabled (startApp({ ssr: true })) but the SSR bundle is missing at ${o}.
-
-This usually means \`postBuildCommand\` is set in modelence.config.ts, which replaces the default Vite client build (and the SSR build along with it). Either:
-  \u2022 remove \`postBuildCommand\` so Modelence builds the SSR bundle, or
-  \u2022 remove \`ssr: true\` from startApp() if your custom toolchain handles SSR itself.`)}if(this.ssrEnabled&&!this.ssrTransportInstalled){let{installSsrCallMethodTransport:o}=await import('./transport-Q6Q42CSY.js');o(),this.ssrTransportInstalled=true;}}middlewares(){if(this.isDev())return this.viteServer?.middlewares??[];let t=this.ssrEnabled?{index:false}:void 0,o=[j$1.static(ge,t)];return this.config?.publicDir&&o.push(j$1.static(this.config.publicDir,t)),o}async handler(t,o){if(this.ssrEnabled&&mn(t)){if(t.method==="HEAD"){o.setHeader("Content-Type","text/html; charset=utf-8"),o.setHeader("Cache-Control","no-store"),o.status(200).end();return}try{await this.handleSsr(t,o);}catch(r){if(this.isDev()&&this.viteServer&&r instanceof Error&&this.viteServer.ssrFixStacktrace(r),console.error("SSR render error:",{url:t.originalUrl,method:t.method,userAgent:t.get("user-agent"),error:r}),o.headersSent){o.end();return}this.serveStaticShell(o);}return}if(this.ssrEnabled){o.status(404).end();return}this.serveStaticShell(o);}async handleSsr(t,o){let r=await this.getTemplate(t.originalUrl),n=await this.captureSsrSnapshot();if(!n)throw new Error("Modelence SSR is enabled but no SSR snapshot was captured. Make sure 'src/client/index.tsx' calls renderApp(...) from 'modelence/client'.");let[{renderSsrTreeStream:i},{getCallContext:s},a]=await Promise.all([import('./render-UY7R4EKL.js'),import('./server-WW7YMRBB.js'),import('./collectCss-4YETFI7P.js')]),c=await s(t,o),l=this.collectCssAssets(a);gn(o,a.buildEarlyHintsLink(l));let{sessionState:d,pipe:p,getQueryState:f}=await i({callContext:c,loadingElement:n.loadingElement,routesElement:n.routesElement,router:n.router,location:t.originalUrl}),{prelude:b,rootOpenTag:v,epilogue:S}=pn(r),re=fn(b,a.renderStylesheetLinks(l));o.setHeader("Content-Type","text/html; charset=utf-8"),o.setHeader("Cache-Control","no-store"),o.status(200),o.write(re),o.write(`<script id="__MODELENCE_STATE__" type="application/json">${at(d)}</script>`),o.write(v),await p(o),o.write("</div>"),o.write(`<script id="__MODELENCE_QUERY_STATE__" type="application/json">${at(f())}</script>`),o.end(S);}collectCssAssets(t){return this.isDev()?this.viteServer?t.collectDevCssAssets(this.viteServer,Yo):{hrefs:[],source:"dev"}:(this.prodCssAssetsCache||(this.prodCssAssetsCache=t.loadProdCssAssets(ge)),this.prodCssAssetsCache)}async getTemplate(t){if(this.isDev()){let o=K.resolve(process.cwd(),"src/client/index.html"),r=Re.readFileSync(o,"utf-8");return this.viteServer&&(r=await this.viteServer.transformIndexHtml(t,r)),r}if(!this.prodTemplateCache){let o=K.resolve(process.cwd(),ge,"index.html");this.prodTemplateCache=Re.readFileSync(o,"utf-8");}return this.prodTemplateCache}async captureSsrSnapshot(){let{_getSsrSnapshot:t}=await import('./renderApp-ZMIJGGAP.js');if(this.isDev()){if(!this.viteServer)throw new Error("Vite dev server not initialized");return await this.viteServer.ssrLoadModule(Yo),t()}return this.prodEntryLoaded||(await import(K.resolve(process.cwd(),Ko,"index.mjs")),this.prodEntryLoaded=true),t()}serveStaticShell(t){if(this.isDev())try{t.setHeader("Cache-Control","no-store"),t.sendFile("index.html",{root:"./src/client"});}catch(o){console.error("Error serving index.html:",o),t.status(500).send("Internal Server Error");}else t.sendFile("index.html",{root:ge});}isDev(){return process.env.NODE_ENV!=="production"}};function mn(e){if(e.method!=="GET"&&e.method!=="HEAD")return  false;let t=e.get("accept")??"";if(t&&!t.includes("text/html")&&!t.includes("*/*"))return  false;let o=(e.path??e.url??"").split("?")[0];if(o.startsWith("/api/"))return  false;let r=o.split("/").pop()??"",n=r.lastIndexOf(".");if(n>0){let i=r.slice(n).toLowerCase();if(i!==".html"&&i!==".htm")return  false}return  true}function pn(e){let t=e.match(dn);if(!t||t.index===void 0)throw new Error('SSR template is missing the expected `<div id="root"></div>` placeholder.');let o=e.slice(0,t.index),r=e.slice(t.index+t[0].length);return {prelude:o,rootOpenTag:t[1],epilogue:r}}function fn(e,t){if(!t)return e;let o=e.lastIndexOf(un);return o===-1?t+e:e.slice(0,o)+t+e.slice(o)}function gn(e,t){if(t.length===0)return;let o=e;if(typeof o.writeEarlyHints=="function")try{o.writeEarlyHints({link:t});}catch(r){process.env.NODE_ENV!=="production"&&console.warn("Modelence SSR: writeEarlyHints failed",r);}}async function hn(){let e=process.cwd();try{return (await loadConfigFromFile({command:"serve",mode:"development"},void 0,e))?.config||{}}catch(t){return console.warn("Could not load vite config:",t),{}}}function wn(e,t){let o=mergeConfig(e,t);if(o.plugins&&Array.isArray(o.plugins)){let r=new Set;o.plugins=o.plugins.flat().filter(n=>{if(!n||typeof n!="object"||Array.isArray(n))return  true;let i=n.name;return !i||r.has(i)?false:(r.add(i),true)}).reverse(),o.plugins.reverse();}return o}async function yn(e,t={}){let o=process.cwd(),r=await hn(),n=[".eslintrc.js",".eslintrc.json",".eslintrc","eslint.config.js",".eslintrc.yml",".eslintrc.yaml"].find(a=>Re.existsSync(K.join(o,a))),i=[ln(),En()];if(n){let a=(await import('vite-plugin-eslint')).default;i.push(a({failOnError:false,include:["src/**/*.js","src/**/*.jsx","src/**/*.ts","src/**/*.tsx"],cwd:o,overrideConfigFile:K.resolve(o,n)}));}let s=defineConfig({plugins:i,build:{outDir:ge,emptyOutDir:true},server:{middlewareMode:true,hmr:e?{server:e}:void 0},appType:t.ssr?"custom":"spa",root:"./src/client",resolve:{alias:{"@":K.resolve(o,"src").replace(/\\/g,"/")}}});return wn(s,r)}function En(){return {name:"modelence-asset-handler",async transform(e,t){if(/\.(png|jpe?g|gif|svg|mpwebm|ogg|mp3|wav|flac|aac)$/.test(t))return process.env.NODE_ENV==="development",e}}}var Oe=new ct;function bn(e){return e?e.match(/^\s*"?([^"<]+?)"?\s*<[^>]+>\s*$/)?.[1]?.trim():void 0}function vn(e){if(e)return Array.isArray(e)?e:[e]}function Cn(e){return {to:Array.isArray(e.to)?e.to:[e.to],subject:e.subject,html:e.html,text:e.text,fromName:bn(e.from),replyTo:vn(e.replyTo)}}function kn(e){if(!(e instanceof Error))return new Error("Managed email send failed");let t=e.responseBody,o=t?.error?.code,r=t?.error?.message;return o&&r?new Error(`Managed email rejected (${o}): ${r}`):e}var Qo={async sendEmail(e){if(e.cc||e.bcc||e.attachments||e.headers)throw new Error("Modelence managed email does not support cc, bcc, attachments, or custom headers in v1. Configure your own provider (Resend, SES, SMTP) to use these features. See https://docs.modelence.com/email/managed.");try{await _("/api/email/send","POST",Cn(e));}catch(t){throw kn(t)}}};var lt=Object.freeze({});function Xo(e){lt=Object.freeze(Object.assign({},lt,e));}function Zo(){return lt}var dt=Object.freeze({});function er(e){dt=Object.freeze(Object.assign({},dt,e));}function _e(){return dt}async function Rn({modules:e$1=[],roles:t$1={},defaultRoles:o={},server:r=Oe,migrations:n$1=[],email:i={},auth:s={},security:a={},websocket:c={},ssr:l=false}){l&&r===Oe&&Oe.enableSsr(),tr.config(),tr.config({path:".modelence.env"});let d=!!process.env.MODELENCE_SERVICE_ENDPOINT;Dn().then(()=>{}).catch(()=>{});for(let P of e$1)if(P.name.toLowerCase().startsWith("_system."))throw new Error(`Invalid module name: '${P.name}'
-
-The '_system.' prefix is reserved for internal use and cannot be used in user-defined modules.
-
-Rename your module to something that does not start with '_system.'`);let p=[Ze,n,Fo,qo,zo,ce,it,Wo],f$1=[...p,...e$1];f(),_n(p),On(e$1),t(t$1,o);let b=Un(f$1);e(b);let v=Ln(f$1),S=Pn(f$1);Nn(f$1),Ze.rateLimits=Xe(s.rateLimits);let re=Tn(f$1);oo(re);let{storesToInit:ne,effectiveStores:H}=Vo(v);if(d){let{configs:P,environmentId:cr,appAlias:lr,environmentAlias:dr,telemetry:ur}=await Oo({configSchema:b,cronJobsMetadata:Go(),stores:H,roles:t$1});tt(P),g({environmentId:cr,appAlias:lr,environmentAlias:dr,telemetry:ur});}else c$1(xe(b));if(d&&!i.provider?Ge({...i,provider:Qo}):Ge(i),Kt(s),Xo(a),er({...c,provider:c.provider||Gt}),F()){await jt();let P=[...new Set([...ne,...H])];$n(P),await In(H,n$1);}else Bo(n$1);d&&(await h$2(),Po()),Ho().catch(console.error),await or(r,{combinedModules:f$1,channels:S});}function On(e){for(let t of e){for(let[o,r]of Object.entries(t.queries))y$1(`${t.name}.${o}`,r);for(let[o,r]of Object.entries(t.mutations))z$2(`${t.name}.${o}`,r);}}function _n(e){for(let t of e){for(let[o,r]of Object.entries(t.queries))A$1(`${t.name}.${o}`,r);for(let[o,r]of Object.entries(t.mutations))B$1(`${t.name}.${o}`,r);}}function Ln(e){return e.flatMap(t=>t.stores)}function Pn(e){return e.flatMap(t=>t.channels)}function Tn(e){return e.flatMap(t=>t.rateLimits)}function Mn(e,t){console.warn(`Failed to create indexes for store '${e}'. Continuing startup.`,t);}var ut="migrations";async function In(e,t){if(!await W(ut,{lockDuration:a$1.seconds(30),heartbeat:true}))return;let r,n;try{r=e.filter(a=>a.getIndexCreationMode()==="blocking"),n=e.filter(a=>a.getIndexCreationMode()==="background");for(let a of r)await mt(a,"full");for(let a of n)await mt(a,"drop-only");}catch(a){throw await pe(ut),a}let i=(async()=>{for(let a of n)await mt(a,"create-only");})(),s=st(t,{lockMode:"skip"});Promise.allSettled([i,s]).then(([a,c])=>{a.status==="rejected"&&console.error("Error creating background indexes:",a.reason),c.status==="rejected"&&console.error("Error running migrations:",c.reason);}).finally(async()=>{await pe(ut);});}async function mt(e,t="full"){let o=e.getName();try{await e.createIndexes(t);}catch(r){Mn(o,r);}}function Un(e){let t={};for(let o of e)for(let[r,n]of Object.entries(o.configSchema)){let i=`${o.name}.${r}`;if(i in t)throw new Error(`Duplicate config schema key: ${i} (${o.name})`);t[i]=n;}return t}function Nn(e){for(let t of e)for(let[o,r]of Object.entries(t.cronJobs))jo(`${t.name}.${o}`,r);}function $n(e){let t=be();if(!t)throw new Error("Failed to initialize stores: MongoDB client not initialized");for(let o of e)o.init(t);}async function Dn(){if(process.env.MODELENCE_TRACKING_ENABLED!=="false"){let t=process.env.MODELENCE_SERVICE_ENDPOINT??"https://cloud.modelence.com",o=process.env.MODELENCE_ENVIRONMENT_ID,r=await jn(),n=await import('./package-PEWLDTN6.js');await fetch(`${t}/api/track/app-start`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({projectName:r.name,version:n.default.version,localHostname:Vr.hostname(),environmentId:o})});}}async function jn(){try{let e=K.join(process.cwd(),"package.json"),t=await Sn.readFile(e,"utf-8");return {name:JSON.parse(t).name||"unknown"}}catch{return {name:"unknown"}}}async function rr(e){await q$1.deleteMany({userId:e}),await r.deleteMany({userId:e});}async function Gn(e){await rr(e),await o.updateOne(e,{$set:{status:"disabled",disabledAt:new Date}});}async function Fn(e){await rr(e),await o.updateOne({_id:e},{$set:{handle:`deleted-${e}-${randomUUID()}`,status:"deleted",deletedAt:new Date,authMethods:{},emails:[]}});}var pt=class{constructor(t,o){this.category=t,this.canAccessChannel=o||null;}broadcast(t,o){let r=_e().provider;if(!r){l$1("Websockets provider should be added to startApp",{});return}r.broadcast({category:this.category,id:t,data:o});}};function Vn(e){if(!h().provider)throw new Error("Email provider is not configured, see https://docs.modelence.com/email for more details.");return h().provider?.sendEmail(e)}async function Le(e){return !e||typeof e!="string"?null:e$1(e)}function E(e,t,o){let r=y(),n=e.status(t);if(r.errorComponent)try{let i=r.errorComponent({error:o,statusCode:t});if(i)return n.send(i)}catch(i){console.error("Unhandled error in authConfig.errorComponent:",i);}return n.json({error:o})}async function ft(e,t){let{authToken:o}=await k(t);l(e,o),e.status(302),e.redirect("/");}async function qn(e,t,o$1,r,n){let i=y();try{if(o$1.status==="disabled"||o$1.status==="deleted"){E(e,400,"User account is not active.");return}let s={};o$1.firstName===void 0&&t.firstName&&(s.firstName=t.firstName),o$1.lastName===void 0&&t.lastName&&(s.lastName=t.lastName),o$1.avatarUrl===void 0&&t.avatarUrl&&(s.avatarUrl=t.avatarUrl);let a=o$1;Object.keys(s).length>0&&(await o.updateOne({_id:o$1._id},{$set:s}),a={...o$1,...s}),await ft(e,o$1._id),i.onAfterLogin?.({provider:t.providerName,user:a,session:r,connectionInfo:n}),i.login?.onSuccess?.(a);}catch(s){throw s instanceof Error&&(i.login?.onError?.(s),i.onLoginError?.({provider:t.providerName,error:s,session:r,connectionInfo:n})),s}}async function zn(e,t,o$1,r,n){let i=y();if((i.oauthAccountLinking??"manual")==="auto"&&t.emailVerified){if(o$1.status==="disabled"||o$1.status==="deleted"){E(e,400,"User account is not active.");return}if(!o$1.emails?.find(c=>c.address.toLowerCase()===t.email.toLowerCase())?.verified){E(e,400,"User with this email already exists. Please log in instead.");return}try{let c={...o$1.firstName===void 0&&t.firstName&&{firstName:t.firstName},...o$1.lastName===void 0&&t.lastName&&{lastName:t.lastName},...o$1.avatarUrl===void 0&&t.avatarUrl&&{avatarUrl:t.avatarUrl}};if(!((await o.updateOne({_id:o$1._id,status:{$nin:["deleted","disabled"]},$or:[{[`authMethods.${t.providerName}.id`]:{$exists:!1}},{[`authMethods.${t.providerName}.id`]:t.id}]},{$set:{[`authMethods.${t.providerName}.id`]:t.id,...c}})).matchedCount>0)){E(e,400,"User with this email already exists. Please log in instead.");return}await ft(e,o$1._id);let p={...o$1,...c,authMethods:{...o$1.authMethods,[t.providerName]:{id:t.id}}};i.onAfterLogin?.({provider:t.providerName,user:p,session:r,connectionInfo:n}),i.login?.onSuccess?.(p);return}catch(c){throw c instanceof Error&&(i.login?.onError?.(c),i.onLoginError?.({provider:t.providerName,error:c,session:r,connectionInfo:n})),c}}E(e,400,"User with this email already exists. Please log in instead.");}async function Wn(e,t,o$1,r){let n=y();try{let i;if(n.generateHandle){let l=await n.generateHandle({email:t.email,firstName:t.firstName,lastName:t.lastName});i=await O(l,t.email,{throwOnConflict:!1});}else i=await O(void 0,t.email);let s={handle:i,status:"active",emails:[{address:t.email,verified:t.emailVerified}],createdAt:new Date,authMethods:{[t.providerName]:{id:t.id}},...t.firstName!==void 0&&{firstName:t.firstName},...t.lastName!==void 0&&{lastName:t.lastName},...t.avatarUrl!==void 0&&{avatarUrl:t.avatarUrl}},a=await o.insertOne(s);await ft(e,a.insertedId);let c=await o.findOne({_id:a.insertedId},{readPreference:"primary"});c&&(n.onAfterSignup?.({provider:t.providerName,user:c,session:o$1,connectionInfo:r}),n.signup?.onSuccess?.(c));}catch(i){throw i instanceof Error&&(n.onSignupError?.({provider:t.providerName,error:i,session:o$1,connectionInfo:r}),n.signup?.onError?.(i)),i}}function te(e){return `${a$2("_system.site.url")}/api/_internal/auth/${e}/callback`}async function Pe(e,t,o$1){let r=await o.findOne({[`authMethods.${o$1.providerName}.id`]:o$1.id}),{session:n,connectionInfo:i}=await oe(e,t);if(r)return qn(t,o$1,r,n,i);if(!o$1.email){E(t,400,`Email address is required for ${o$1.providerName} authentication.`);return}let s;try{s=await o.findOne({"emails.address":o$1.email,status:{$ne:"deleted"}},{collation:{locale:"en",strength:2}});}catch(a){if(a instanceof Error){let c=y();c.onSignupError?.({provider:o$1.providerName,error:a,session:n,connectionInfo:i}),c.signup?.onError?.(a);}throw a}return s?zn(t,o$1,s,n,i):Wn(t,o$1,n,i)}function A(e){e.cookie("oauthLinkToken","",{httpOnly:true,maxAge:0,path:"/api/_internal/auth/",sameSite:"lax",secure:process.env.NODE_ENV==="production"});}function ee(e){if(e)try{e();}catch(t){console.error("Error executing OAuth hook:",t);}}function Te(e,t,o){let r=e.query.state,n=e.cookies[o],[i,s,a]=(n||"").split(":");return !r||!n||r!==i?(E(t,400,"Invalid OAuth state - possible CSRF attack"),null):(t.clearCookie(o),{mode:s||"login",...a?{linkedUserId:a}:{}})}async function Me(e,t,o$1,r){let n=y(),{session:i,connectionInfo:s}=await oe(e,t),a=null;if(r){if(!ObjectId.isValid(r)){A(t),E(t,400,"Invalid OAuth linking state.");return}a=new ObjectId(r);}else a=i?.userId??null;if(!a){A(t),E(t,401,"You must be signed in to link a provider.");return}let c=a;try{let l=`authMethods.${o$1.providerName}.id`;if((await o.updateOne({_id:c,status:{$nin:["deleted","disabled"]},$or:[{[l]:{$exists:!1}},{[l]:o$1.id}]},{$set:{[l]:o$1.id}})).matchedCount===0){let f=await o.findOne({_id:c});if(!f||f.status==="deleted"||f.status==="disabled"){ee(()=>n.onOAuthLinkError?.({provider:o$1.providerName,error:new Error("User account not found or not active"),session:i,connectionInfo:s})),A(t),E(t,400,"User account is not active.");return}let b=f?.authMethods?.[o$1.providerName]?.id;if(b&&b!==o$1.id){ee(()=>n.onOAuthLinkError?.({provider:o$1.providerName,error:new Error(`User already has a different ${o$1.providerName} account linked`),session:i,connectionInfo:s})),A(t),E(t,400,`You have already linked a different ${o$1.providerName} account.`);return}ee(()=>n.onOAuthLinkError?.({provider:o$1.providerName,error:new Error(`Unexpected OAuth linking state for ${o$1.providerName}`),session:i,connectionInfo:s})),A(t),E(t,400,`Unable to link ${o$1.providerName} account.`);return}let p=await o.findOne({_id:c},{readPreference:"primary"});p&&ee(()=>n.onAfterOAuthLink?.({provider:o$1.providerName,user:p,session:i,connectionInfo:s})),A(t),t.status(302).redirect("/");}catch(l){if(l instanceof MongoServerError&&l.code===11e3){ee(()=>n.onOAuthLinkError?.({provider:o$1.providerName,error:l,session:i,connectionInfo:s})),A(t),E(t,400,`This ${o$1.providerName} account is already linked to a different user.`);return}if(l instanceof Error&&ee(()=>n.onOAuthLinkError?.({provider:o$1.providerName,error:l,session:i,connectionInfo:s})),A(t),!t.headersSent)throw l}}function Ie(e){return !e||typeof e!="string"?null:e}async function Yn(e,t,o,r){let n=await fetch("https://oauth2.googleapis.com/token",{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({code:e,client_id:t,client_secret:o,redirect_uri:r,grant_type:"authorization_code"})});if(!n.ok)throw new Error(`Failed to exchange code for token: ${n.statusText}`);return n.json()}async function Qn(e){let t=await fetch("https://www.googleapis.com/oauth2/v2/userinfo",{headers:{Authorization:`Bearer ${e}`}});if(!t.ok)throw new Error(`Failed to fetch user info: ${t.statusText}`);return t.json()}async function Xn(e,t){let o=Ie(e.query.code);if(!o){E(t,400,"Missing authorization code");return}let r=Te(e,t,"authStateGoogle");if(!r)return;let{mode:n,linkedUserId:i}=r,s=String(a$2("_system.user.auth.google.clientId")),a=String(a$2("_system.user.auth.google.clientSecret")),c=te("google");try{let l=await Yn(o,s,a,c),d=await Qn(l.access_token),p={id:d.id,email:d.email,emailVerified:d.verified_email,providerName:"google",firstName:d.given_name||void 0,lastName:d.family_name||void 0,avatarUrl:d.picture||void 0};n==="link"?await Me(e,t,p,i):await Pe(e,t,p);}catch(l){console.error("Google OAuth error:",l),n==="link"&&A(t),E(t,500,"Authentication failed");}}function Zn(){let e=Router(),t=(o,r,n)=>{let i=!!a$2("_system.user.auth.google.enabled"),s=String(a$2("_system.user.auth.google.clientId")),a=String(a$2("_system.user.auth.google.clientSecret"));if(!i||!s||!a){E(r,503,"Google authentication is not configured");return}n();};return e.get("/api/_internal/auth/google",t,async(o,r)=>{let n=String(a$2("_system.user.auth.google.clientId")),i=te("google"),s=randomBytes(32).toString("hex"),a=o.query.mode==="link"?"link":"login",c=null;if(a==="link"&&o.query.linkNonce&&(c=await Le(o.query.linkNonce),!c)){E(r,401,"Invalid or expired link nonce for OAuth linking.");return}let l=c?`${s}:${a}:${c}`:`${s}:${a}`;r.cookie("authStateGoogle",l,{httpOnly:true,secure:process.env.NODE_ENV==="production",sameSite:"lax",maxAge:a$1.minutes(10)});let d=new URL("https://accounts.google.com/o/oauth2/v2/auth");d.searchParams.append("client_id",n),d.searchParams.append("redirect_uri",i),d.searchParams.append("response_type","code"),d.searchParams.append("scope","profile email"),d.searchParams.append("access_type","online"),d.searchParams.append("state",s),r.redirect(d.toString());}),e.get("/api/_internal/auth/google/callback",t,Xn),e}var ir=Zn;async function oi(e,t,o,r){let n=await fetch("https://github.com/login/oauth/access_token",{method:"POST",headers:{"Content-Type":"application/json",Accept:"application/json"},body:JSON.stringify({client_id:t,client_secret:o,code:e,redirect_uri:r})});if(!n.ok)throw new Error(`Failed to exchange code for token: ${n.statusText}`);return n.json()}async function ri(e){let t=await fetch("https://api.github.com/user",{headers:{Authorization:`Bearer ${e}`,Accept:"application/vnd.github.v3+json"}});if(!t.ok)throw new Error(`Failed to fetch user info: ${t.statusText}`);return t.json()}async function ni(e){let t=await fetch("https://api.github.com/user/emails",{headers:{Authorization:`Bearer ${e}`,Accept:"application/vnd.github.v3+json"}});if(!t.ok)throw new Error(`Failed to fetch user emails: ${t.statusText}`);return t.json()}async function ii(e,t){return e.email?e.email:(await ni(t)).find(r=>r.primary&&r.verified)?.email??null}async function si(e,t){let o=Ie(e.query.code);if(!o){E(t,400,"Missing authorization code");return}let r=Te(e,t,"authStateGithub");if(!r)return;let{mode:n,linkedUserId:i}=r,s=String(a$2("_system.user.auth.github.clientId")),a=String(a$2("_system.user.auth.github.clientSecret")),c=te("github");try{let l=await oi(o,s,a,c),d=await ri(l.access_token),p=await ii(d,l.access_token);if(!p){n==="link"&&A(t),E(t,400,"Unable to retrieve a primary verified email from GitHub. Please ensure your GitHub account has a verified email set as primary.");return}let f=d.name?d.name.trim().split(/\s+/):[],b=f[0]||void 0,v=f.length>1?f.slice(1).join(" "):void 0,S={id:String(d.id),email:p,emailVerified:!0,providerName:"github",firstName:b,lastName:v,avatarUrl:d.avatar_url||void 0};n==="link"?await Me(e,t,S,i):await Pe(e,t,S);}catch(l){console.error("GitHub OAuth error:",l),n==="link"&&A(t),E(t,500,"Authentication failed");}}function ai(){let e=Router(),t=(o,r,n)=>{let i=!!a$2("_system.user.auth.github.enabled"),s=String(a$2("_system.user.auth.github.clientId")),a=String(a$2("_system.user.auth.github.clientSecret"));if(!i||!s||!a){E(r,503,"GitHub authentication is not configured");return}n();};return e.get("/api/_internal/auth/github",t,async(o,r)=>{let n=String(a$2("_system.user.auth.github.clientId")),i=te("github"),s=a$2("_system.user.auth.github.scopes"),a=s?String(s).split(",").map(b=>b.trim()).join(" "):"user:email",c=randomBytes(32).toString("hex"),l=o.query.mode==="link"?"link":"login",d=null;if(l==="link"&&o.query.linkNonce&&(d=await Le(o.query.linkNonce),!d)){E(r,401,"Invalid or expired link nonce for OAuth linking.");return}let p=d?`${c}:${l}:${d}`:`${c}:${l}`;r.cookie("authStateGithub",p,{httpOnly:true,secure:process.env.NODE_ENV==="production",sameSite:"lax",maxAge:a$1.minutes(10)});let f=new URL("https://github.com/login/oauth/authorize");f.searchParams.append("client_id",n),f.searchParams.append("redirect_uri",i),f.searchParams.append("scope",a),f.searchParams.append("state",c),r.redirect(f.toString());}),e.get("/api/_internal/auth/github/callback",t,si),e}var sr=ai;function ar(e,t,o){return async(r,n,i)=>{let s=r.headers["x-modelence-auth-token"],a={session:null,user:null};if(typeof s=="string"&&F())try{let{session:l,user:d}=await v(s);a={session:l,user:d};}catch{}let c=m$1("route",`route:${e.toLowerCase()}:${t}`,{method:e,path:t,query:i$1(r.query),body:i$1(r.body),params:i$1(r.params)});try{let l=await o({query:r.query,body:r.body,params:r.params,headers:r.headers,cookies:r.cookies,rawBody:Buffer.isBuffer(r.body)?r.body:void 0,req:r,res:n,next:i},a);c.end(),l&&(n.status(l.status||200),l.headers&&Object.entries(l.headers).forEach(([d,p])=>{n.setHeader(d,p);}),l.redirect?n.redirect(l.redirect):n.send(l.data));}catch(l){c.end("error"),l instanceof a$4?n.status(l.status).send(l.message):(console.error(`Error in route handler: ${r.path}`),console.error(l),n.status(500).send(String(l)));}}}function di(e){let t=[];if(!e)return t.push(j$1.json({limit:"16mb"})),t.push(j$1.urlencoded({extended:true,limit:"16mb"})),t;if(e.json!==false){let o=typeof e.json=="object"?e.json:{limit:"16mb"};t.push(j$1.json(o));}if(e.urlencoded!==false){let o=typeof e.urlencoded=="object"?e.urlencoded:{extended:true,limit:"16mb"};t.push(j$1.urlencoded(o));}if(e.raw){let o=typeof e.raw=="object"?e.raw:{},r={limit:o.limit||"16mb",type:o.type||"*/*"};t.push(j$1.raw(r));}return t}function ui(e,t){for(let o of t)for(let r of o.routes){let{path:n,handlers:i,body:s}=r,a=di(s);Object.entries(i).forEach(([c,l])=>{e[c](n,...a,ar(c,n,l));});}}async function or(e,{combinedModules:t,channels:o}){let r=j$1();r.use(ci()),r.use(fi()),ui(r,t),r.use(j$1.json({limit:"16mb"})),r.use(j$1.urlencoded({extended:true,limit:"16mb"})),r.use(ir()),r.use(sr()),r.post("/api/_internal/auth/set-link-cookie",async(a,c)=>{let{session:l}=await oe(a,c);if(!l?.userId){c.status(401).json({error:"Not authenticated"});return}c.cookie("oauthLinkToken",l.authToken,{httpOnly:true,secure:process.env.NODE_ENV==="production",sameSite:"lax",path:"/api/_internal/auth/",maxAge:10*60*1e3}),c.json({ok:true});}),r.post("/api/_internal/auth/issue-link-nonce",async(a,c)=>{let{session:l}=await oe(a,c);if(!l?.userId){c.status(401).json({error:"Not authenticated"});return}let d=await d$1(String(l.userId));c.json({nonce:d});}),r.post("/api/_internal/method/:methodName(*)",async(a,c)=>{let l=a.params.methodName,d=await oe(a,c);try{let p=a$3(await C$1(l,a.body.args,d));c.json({data:p,typeMap:b$2(p)});}catch(p){mi(c,l,p);}});let n=li.createServer(r);await e.init({httpServer:n}),e.middlewares&&r.use(e.middlewares()),r.all("*",(a,c,l)=>{Promise.resolve(e.handler(a,c)).catch(l);}),process.on("unhandledRejection",(a,c)=>{console.error("Unhandled Promise Rejection:"),console.error(a instanceof Error?a.stack:a),console.error("Promise:",c);}),process.on("uncaughtException",a=>{console.error("Uncaught Exception:"),console.error(a.stack),console.trace("Full application stack:");});let i=_e()?.provider;i&&i.init({httpServer:n,channels:o});let s=process.env.MODELENCE_PORT||process.env.PORT||3e3;n.listen(s,()=>{k$1("Application started",{source:"app"});let a=a$2("_system.site.url")||`http://localhost:${s}`;console.log(`
-Application started on ${a}
-`);});}async function oe(e,t=null){let o=(e.path??e.url??"").split("?")[0],r=o.startsWith("/api/_internal/auth/")&&o.endsWith("/callback"),n=e.body??{},i=D.string().nullish().transform(l=>l??null).parse(e.cookies.authToken||(r?e.cookies.oauthLinkToken:null)||n.authToken),s=D.object({screenWidth:D.number(),screenHeight:D.number(),windowWidth:D.number(),windowHeight:D.number(),pixelRatio:D.number(),orientation:D.string().nullable()}).nullish().parse(n.clientInfo)??{screenWidth:0,screenHeight:0,windowWidth:0,windowHeight:0,pixelRatio:1,orientation:null},a={ip:hi(e),userAgent:e.get("user-agent"),acceptLanguage:e.get("accept-language"),referrer:e.get("referrer"),baseUrl:gi(e)};if(!!F()){let{session:l,user:d,roles:p}=await v(i);return {clientInfo:s,connectionInfo:a,session:l,user:d,roles:p,req:e,res:t}}return {clientInfo:s,connectionInfo:a,session:null,user:null,roles:u(),req:e,res:t}}function mi(e,t,o){if(o instanceof a$4){o.status>=500&&o.status<600&&console.error(`Error calling ${t}:`,o),o.code&&e.setHeader("X-Modelence-Error-Code",o.code),e.status(o.status).send(o.message);return}if(o instanceof Error&&o?.constructor?.name==="ZodError"&&"errors"in o){let r="";try{r=pi(o);}catch(n){console.error(`Error parsing Zod error in ${t}:`,n),r="Validation failed";}e.status(400).send(r);return}console.error(`Error calling ${t}:`,o),e.status(500).send(o instanceof Error?o.message:String(o));}function pi(e){let t=e.flatten(),o=Object.entries(t.fieldErrors).map(([i,s])=>`${i}: ${(s??[]).join(", ")}`),r=t.formErrors;return [...o,...r].filter(Boolean).join("; ")}function fi(){let{frameAncestors:e}=Zo(),t=e&&e.length>0,o=t?["'self'",...e].join(" "):"'self'";return (r,n,i)=>{n.setHeader("Content-Security-Policy",`frame-ancestors ${o}`),t||n.setHeader("X-Frame-Options","SAMEORIGIN"),i();}}function gi(e){let t=e.headers["x-forwarded-host"],o=(Array.isArray(t)?t[0]:t?.split(",")[0])?.trim()||e.get("host"),r=e.headers["x-forwarded-proto"];return `${(Array.isArray(r)?r[0]:r?.split(",")[0])?.trim()||e.protocol}://${o}`}function hi(e){let t=e.headers["x-forwarded-for"];if(t)return (Array.isArray(t)?t[0]:t.split(",")[0]).trim();let o=e.ip||e.socket?.remoteAddress;if(o)return o.startsWith("::ffff:")?o.substring(7):o}
-export{C as a,en as b,tn as c,on as d,rn as e,or as f,oe as g,Rn as h,Gn as i,Fn as j,pt as k,Vn as l};//# sourceMappingURL=chunk-B5XMG3OE.js.map
-//# sourceMappingURL=chunk-B5XMG3OE.js.map