modelence 0.5.14-dev.0 → 0.6.0-dev.0

package/dist/server.js

@@ -1,18 +1,18 @@
-import {a as a$3}from'./chunk-DN5SVAO2.js';import {d as d$1,a as a$4}from'./chunk-C3UESBRX.js';import {a as a$1}from'./chunk-R7MPLJMA.js';import {b as b$1,e,d as d$2,c,f as f$1,g as g$1,a as a$2,h as h$1,j as j$1,k}from'./chunk-2QLNYYBR.js';export{a as getConfig}from'./chunk-2QLNYYBR.js';import ft from'dotenv';import ho from'fs/promises';import Jt from'os';import ie from'path';import {randomBytes}from'crypto';import {ObjectId,MongoClient}from'mongodb';export{ObjectId}from'mongodb';import E,{z as z$1}from'zod';import Ot from'bcrypt';import {createServer,defineConfig,loadConfigFromFile}from'vite';import Yt from'@vitejs/plugin-react';import Xt from'fs';import ce,{Router}from'express';import ae from'passport';import {Strategy}from'passport-google-oauth20';import co from'cookie-parser';import lo from'http';var ye=new Map,M={authenticated:null,unauthenticated:null};function be(t,e){M.authenticated=e.authenticated,M.unauthenticated=e.unauthenticated;for(let[o,n]of Object.entries(t))ye.set(o,n);}function J(){return M.unauthenticated?[M.unauthenticated]:[]}function Ee(){return M.authenticated?[M.authenticated]:[]}function Ce(t,e){let o=e.find(n=>!wt(t,n));if(o)throw new Error(`Access denied - missing permission: '${o}'`)}function wt(t,e){for(let o of t){let n=ye.get(o);if(n&&n.permissions.includes(e))return  true}return  false}var g=class{constructor(e,{stores:o=[],queries:n={},mutations:i={},routes:r=[],cronJobs:s={},configSchema:c={},rateLimits:u=[]}){this.name=e,this.stores=o,this.queries=n,this.mutations=i,this.routes=r,this.cronJobs=s,this.configSchema=c,this.rateLimits=u;}};var f=class{constructor(e,o){this.name=e,this.schema=o.schema,this.methods=o.methods,this.indexes=o.indexes;}getName(){return this.name}getSchema(){return this.schema}init(e){if(this.collection)throw new Error(`Collection ${this.name} is already initialized`);this.client=e,this.collection=this.client.db().collection(this.name);}async createIndexes(){this.indexes.length>0&&await this.requireCollection().createIndexes(this.indexes);}wrapDocument(e){return this.methods?Object.create(null,Object.getOwnPropertyDescriptors({...e,...this.methods})):e}getSelector(e){return typeof e=="string"?{_id:new ObjectId(e)}:e instanceof ObjectId?{_id:e}:e}requireCollection(){if(!this.collection)throw new Error(`Collection ${this.name} is not provisioned`);return this.collection}requireClient(){if(!this.client)throw new Error("Database is not connected");return this.client}async findOne(e,o){let n=await this.requireCollection().findOne(e,o);return n?this.wrapDocument(n):null}async requireOne(e,o,n){let i=await this.findOne(e,o);if(!i)throw n?n():new Error(`Record not found in ${this.name}`);return i}find(e,o){let n=this.requireCollection().find(e);return o?.sort&&n.sort(o.sort),o?.limit&&n.limit(o.limit),o?.skip&&n.skip(o.skip),n}async findById(e){let o=typeof e=="string"?{_id:new ObjectId(e)}:{_id:e};return await this.findOne(o)}async requireById(e,o){let n=await this.findById(e);if(!n)throw o?o():new Error(`Record with id ${e} not found in ${this.name}`);return n}countDocuments(e){return this.requireCollection().countDocuments(e)}async fetch(e,o){return (await this.find(e,o).toArray()).map(this.wrapDocument.bind(this))}async insertOne(e){return await this.requireCollection().insertOne(e)}async insertMany(e){return await this.requireCollection().insertMany(e)}async updateOne(e,o){return await this.requireCollection().updateOne(this.getSelector(e),o)}async upsertOne(e,o){return await this.requireCollection().updateOne(this.getSelector(e),o,{upsert:true})}async updateMany(e,o,n){return await this.requireCollection().updateMany(e,o,n)}async upsertMany(e,o){return await this.requireCollection().updateMany(e,o,{upsert:true})}async deleteOne(e){return await this.requireCollection().deleteOne(e)}async deleteMany(e){return await this.requireCollection().deleteMany(e)}aggregate(e,o){return this.requireCollection().aggregate(e,o)}bulkWrite(e){return this.requireCollection().bulkWrite(e)}getDatabase(){return this.requireClient().db()}rawCollection(){return this.requireCollection()}async renameFrom(e,o){let n=this.getDatabase();if(!this.collection||!n)throw new Error(`Store ${this.name} is not provisioned`);if((await n.listCollections({name:e}).toArray()).length===0)throw new Error(`Collection ${e} not found`);if((await n.listCollections({name:this.name}).toArray()).length>0)throw new Error(`Collection ${this.name} already exists`);await n.collection(e).rename(this.name,o);}};var yt=z$1.string.bind(z$1),bt=z$1.number.bind(z$1),Et=z$1.date.bind(z$1),Ct=z$1.boolean.bind(z$1),xt=z$1.array.bind(z$1),St=z$1.object.bind(z$1),Rt=z$1.enum.bind(z$1),a={string:yt,number:bt,date:Et,boolean:Ct,array:xt,object:St,enum:Rt,objectId(){return z$1.instanceof(ObjectId)},userId(){return z$1.instanceof(ObjectId)},ref(t){return z$1.instanceof(ObjectId)},union:z$1.union.bind(z$1),infer(t){return {}}};var v=new f("_modelenceSessions",{schema:{authToken:a.string(),createdAt:a.date(),expiresAt:a.date(),userId:a.userId().nullable()},indexes:[{key:{authToken:1},unique:true},{key:{expiresAt:1}}]});async function xe(t){let e=t?await v.findOne({authToken:t}):null;return e?{authToken:String(e.authToken),expiresAt:new Date(e.expiresAt),userId:e.userId??null}:await Z()}async function Se(t,e){await v.updateOne({authToken:t},{$set:{userId:e}});}async function Re(t){await v.updateOne({authToken:t},{$set:{userId:null}});}async function Z(t=null){let e=randomBytes(32).toString("base64url"),o=Date.now(),n=new Date(o+a$1.days(7));return await v.insertOne({authToken:e,createdAt:new Date(o),expiresAt:n,userId:t}),{authToken:e,expiresAt:n,userId:t}}async function Mt(t){let e=Date.now(),o=new Date(e+a$1.days(7));await v.updateOne({authToken:t.authToken},{$set:{lastActiveDate:new Date(e),expiresAt:o}});}var De=new g("_system.session",{stores:[v],mutations:{init:async function(t,{session:e,user:o}){return {session:e,user:o,configs:b$1()}},heartbeat:async function(t,{session:e}){e&&await Mt(e);}}});var d=new f("_modelenceUsers",{schema:{handle:a.string(),emails:a.array(a.object({address:a.string(),verified:a.boolean()})).optional(),createdAt:a.date(),authMethods:a.object({password:a.object({hash:a.string()}).optional(),google:a.object({id:a.string()}).optional()})},indexes:[{key:{handle:1},unique:true,collation:{locale:"en",strength:2}}]}),A=new f("_modelenceDisposableEmailDomains",{schema:{domain:a.string(),addedAt:a.date()},indexes:[{key:{domain:1},unique:true}]}),_=new f("_modelenceEmailVerificationTokens",{schema:{userId:a.objectId(),email:a.string().optional(),token:a.string(),createdAt:a.date(),expiresAt:a.date()},indexes:[{key:{token:1},unique:true},{key:{expiresAt:1},expireAfterSeconds:0}]}),x=new f("_modelenceResetPasswordTokens",{schema:{userId:a.objectId(),token:a.string(),createdAt:a.date(),expiresAt:a.date()},indexes:[{key:{token:1},unique:true},{key:{expiresAt:1},expireAfterSeconds:0}]});async function Me(t){let e=t.toLowerCase().trim().split("@");if(e.length!==2)return  false;let o=e[1];return !!await A.findOne({domain:o})}var ve={interval:a$1.days(1),async handler(){let t=await fetch("https://disposable.github.io/disposable-email-domains/domains.txt");if(!t.ok)throw new Error(`HTTP ${t.status}: ${t.statusText}`);let o=(await t.text()).split(`
-`).map(r=>r.trim().toLowerCase()).filter(r=>r.length>0),n=new Date,i=500;for(let r=0;r<o.length;r+=i){let s=o.slice(r,r+i);try{await A.insertMany(s.map(c=>({domain:c,addedAt:n})));}catch(c){c.name==="MongoBulkWriteError"&&c.result?.nInserted;}}}};var Q=Object.freeze({});function _e(t){Q=Object.freeze(Object.assign({},Q,t));}function h(){return Q}function vt(){return typeof window!="object"}function S(){if(!vt())throw new Error("This function can only be called on the server")}function q(t){return t.replace(/<[^>]*>/g,"").replace(/\s+/g," ").trim()}function Te({name:t,email:e,verificationUrl:o}){return `
-    <p>Hi${t?` ${t}`:""},</p>
-    <p>Please verify your email address ${e} by clicking the link below:</p>
+import {a as a$2}from'./chunk-DN5SVAO2.js';import {f,g,e,l,m,n,o,i,h as h$1,d,k,p,a as a$3,t,s,q as q$1,r,j as j$2}from'./chunk-5TLHWYXF.js';export{e as Module,f as Store,l as dbUsers,g as schema}from'./chunk-5TLHWYXF.js';import {a}from'./chunk-R7MPLJMA.js';import {e as e$1,d as d$1,c,f as f$1,g as g$1,a as a$1,h as h$2,j as j$1,k as k$1}from'./chunk-2QLNYYBR.js';export{a as getConfig}from'./chunk-2QLNYYBR.js';import ct from'dotenv';import Qt from'fs/promises';import xt from'os';import ee from'path';import ft from'bcrypt';import E,{z as z$1}from'zod';import {randomBytes}from'crypto';import {MongoClient}from'mongodb';export{ObjectId}from'mongodb';import {createServer,defineConfig,loadConfigFromFile}from'vite';import Pt from'@vitejs/plugin-react';import $t from'fs';import re,{Router}from'express';import oe from'passport';import {Strategy}from'passport-google-oauth20';import Gt from'cookie-parser';import zt from'http';async function Ce(e){let t=e.toLowerCase().trim().split("@");if(t.length!==2)return  false;let o=t[1];return !!await m.findOne({domain:o})}var ve={interval:a.days(1),async handler(){let e=await fetch("https://disposable.github.io/disposable-email-domains/domains.txt");if(!e.ok)throw new Error(`HTTP ${e.status}: ${e.statusText}`);let o=(await e.text()).split(`
+`).map(i=>i.trim().toLowerCase()).filter(i=>i.length>0),r=new Date,n=500;for(let i=0;i<o.length;i+=n){let s=o.slice(i,i+n);try{await m.insertMany(s.map(a=>({domain:a,addedAt:r})));}catch(a){a.name==="MongoBulkWriteError"&&a.result?.nInserted;}}}};var z=Object.freeze({});function Me(e){z=Object.freeze(Object.assign({},z,e));}function u(){return z}function dt(){return typeof window!="object"}function v(){if(!dt())throw new Error("This function can only be called on the server")}function U(e){return e.replace(/<[^>]*>/g,"").replace(/\s+/g," ").trim()}function xe({name:e,email:t,verificationUrl:o}){return `
+    <p>Hi${e?` ${e}`:""},</p>
+    <p>Please verify your email address ${t} by clicking the link below:</p>
     <p><a href="${o}">${o}</a></p>
     <p>If you did not request this, please ignore this email.</p>
-  `}async function Oe(t){let e=process.env.MODELENCE_SITE_URL,o=h().emailVerifiedRedirectUrl||e||"/";try{let n=z$1.string().parse(t.query.token),i=await _.findOne({token:n,expiresAt:{$gt:new Date}});if(!i)throw new Error("Invalid or expired verification token");if(!await d.findOne({_id:i.userId}))throw new Error("User not found");let s=i.email;if(!s)throw new Error("Email not found in token");if((await d.updateOne({_id:i.userId,"emails.address":s,"emails.verified":{$ne:!0}},{$set:{"emails.$.verified":!0}})).matchedCount===0)throw await d.findOne({_id:i.userId,"emails.address":s})?new Error("Email is already verified"):new Error("Email address not found for this user");await _.deleteOne({_id:i._id});}catch(n){if(n instanceof Error)return console.error("Error verifying email:",n),{status:301,redirect:`${o}?status=error&message=${encodeURIComponent(n.message)}`}}return {status:301,redirect:`${o}?status=verified`}}async function B({userId:t,email:e,baseUrl:o=process.env.MODELENCE_SITE_URL}){if(h().provider){let n=h().provider,i=randomBytes(32).toString("hex"),r=new Date(Date.now()+a$1.hours(24));await _.insertOne({userId:t,email:e,token:i,createdAt:new Date,expiresAt:r});let s=`${o}/api/_internal/auth/verify-email?token=${i}`,u=(h()?.verification?.template||Te)({name:"",email:e,verificationUrl:s}),l=q(u);await n?.sendEmail({to:e,from:h()?.from||"noreply@modelence.com",subject:h()?.verification?.subject||"Verify your email address",text:l,html:u});}}function z(t){return z$1.string().min(8,{message:"Password must contain at least 8 characters"}).parse(t)}function T(t){return z$1.string().email({message:"Invalid email address"}).parse(t)}async function Ae(t,{user:e,session:o,connectionInfo:n}){if(!o)throw new Error("Session is not initialized");let i=n?.ip;i&&await R({bucket:"signin",type:"ip",value:i});let r=T(t.email),s=z$1.string().parse(t.password),c=await d.findOne({"emails.address":r},{collation:{locale:"en",strength:2}}),u=c?.authMethods?.password?.hash;if(!u)throw ke();if(!c.emails?.find(w=>w.address===r)?.verified&&h()?.provider){if(i)try{await R({bucket:"verification",type:"user",value:c._id.toString()});}catch{throw new Error("Your email address hasn't been verified yet. Please use the verification email we've send earlier to your inbox.")}throw await B({userId:c?._id,email:r,baseUrl:n?.baseUrl}),new Error("Your email address hasn't been verified yet. We've sent a new verification email to your inbox.")}if(!await Ot.compare(s,u))throw ke();return await Se(o.authToken,c._id),{user:{id:c._id,handle:c.handle}}}async function Pe(t,{user:e,session:o}){if(!o)throw new Error("Session is not initialized");await Re(o.authToken);}function ke(){return new Error("Incorrect email/password combination")}async function Le(t,{user:e}){if(!e)throw new Error("Not authenticated");let o=await d.requireById(e.id);return {handle:o.handle,emails:o.emails,authMethods:Object.keys(o.authMethods||{})}}var P=new f("_modelenceRateLimits",{schema:{bucket:a.string(),type:a.enum(["ip","user"]),value:a.string(),windowMs:a.number(),windowStart:a.date(),windowCount:a.number(),prevWindowCount:a.number(),expiresAt:a.date()},indexes:[{key:{bucket:1,type:1,value:1,windowMs:1},unique:true},{key:{expiresAt:1},expireAfterSeconds:0}]});var Y=[];function je(t){if(Y.length>0)throw new Error("Duplicate call to initRateLimits - already initialized");Y=t;}async function R(t){let{bucket:e,type:o,value:n}=t,i=Y.filter(r=>r.bucket===e&&r.type===o);for(let r of i)await kt(r,n);}async function kt(t,e,o){let n=()=>new d$1(`Rate limit exceeded for ${t.bucket}`),i=await P.findOne({bucket:t.bucket,type:t.type,value:e,windowMs:t.window}),r=Date.now(),s=Math.floor(r/t.window)*t.window,{count:c,modifier:u}=i?At(i,s,r):{count:0,modifier:{$setOnInsert:{windowStart:new Date(s),windowCount:1,prevWindowCount:0,expiresAt:new Date(s+t.window+t.window)}}};if(c>=t.limit)throw n();await P.upsertOne({bucket:t.bucket,type:t.type,value:e,windowMs:t.window},u);}function At(t,e,o){let n=e-t.windowMs;if(t.windowStart.getTime()===e){let i=t.windowCount,r=t.prevWindowCount,s=1-(o-e)/t.windowMs;return {count:Math.round(i+r*s),modifier:{$inc:{windowCount:1},$setOnInsert:{windowStart:new Date(e),prevWindowCount:0,expiresAt:new Date(e+t.windowMs+t.windowMs)}}}}if(t.windowStart.getTime()===n){let i=1-(o-e)/t.windowMs;return {count:Math.round(t.windowCount*i),modifier:{$set:{windowStart:new Date(e),windowCount:1,prevWindowCount:t.windowCount,expiresAt:new Date(e+t.windowMs+t.windowMs)}}}}return {count:0,modifier:{$set:{windowStart:new Date(e),windowCount:1,prevWindowCount:0,expiresAt:new Date(e+t.windowMs+t.windowMs)}}}}async function $e(t,{user:e,connectionInfo:o}){let n=T(t.email),i=z(t.password),r=o?.ip;if(r&&await R({bucket:"signupAttempt",type:"ip",value:r}),await Me(n))throw new Error("Please use a permanent email address");let s=await d.findOne({"emails.address":n},{collation:{locale:"en",strength:2}});if(s){let l=s.emails?.find(y=>y.address===n);throw new Error(`User with email already exists: ${l?.address}`)}r&&await R({bucket:"signup",type:"ip",value:r});let c=await Ot.hash(i,10),u=await d.insertOne({handle:n,emails:[{address:n,verified:false}],createdAt:new Date,authMethods:{password:{hash:c}}});return await B({userId:u?.insertedId,email:n,baseUrl:o?.baseUrl}),u.insertedId}function Ut(t,e){return e?e.startsWith("http://")||e.startsWith("https://")?e:`${t}${e.startsWith("/")?"":"/"}${e}`:t}function Nt({email:t,resetUrl:e}){return `
+  `}async function Re(e){let t=process.env.MODELENCE_SITE_URL,o=u().emailVerifiedRedirectUrl||t||"/";try{let r=z$1.string().parse(e.query.token),n$1=await n.findOne({token:r,expiresAt:{$gt:new Date}});if(!n$1)throw new Error("Invalid or expired verification token");if(!await l.findOne({_id:n$1.userId}))throw new Error("User not found");let s=n$1.email;if(!s)throw new Error("Email not found in token");if((await l.updateOne({_id:n$1.userId,"emails.address":s,"emails.verified":{$ne:!0}},{$set:{"emails.$.verified":!0}})).matchedCount===0)throw await l.findOne({_id:n$1.userId,"emails.address":s})?new Error("Email is already verified"):new Error("Email address not found for this user");await n.deleteOne({_id:n$1._id});}catch(r){if(r instanceof Error)return console.error("Error verifying email:",r),{status:301,redirect:`${o}?status=error&message=${encodeURIComponent(r.message)}`}}return {status:301,redirect:`${o}?status=verified`}}async function j({userId:e,email:t,baseUrl:o=process.env.MODELENCE_SITE_URL}){if(u().provider){let r=u().provider,n$1=randomBytes(32).toString("hex"),i=new Date(Date.now()+a.hours(24));await n.insertOne({userId:e,email:t,token:n$1,createdAt:new Date,expiresAt:i});let s=`${o}/api/_internal/auth/verify-email?token=${n$1}`,c=(u()?.verification?.template||xe)({name:"",email:t,verificationUrl:s}),f=U(c);await r?.sendEmail({to:t,from:u()?.from||"noreply@modelence.com",subject:u()?.verification?.subject||"Verify your email address",text:f,html:c});}}function J(e){return z$1.string().min(8,{message:"Password must contain at least 8 characters"}).parse(e)}function _(e){return z$1.string().email({message:"Invalid email address"}).parse(e)}async function De(e,{user:t,session:o,connectionInfo:r}){if(!o)throw new Error("Session is not initialized");let n=r?.ip;n&&await M({bucket:"signin",type:"ip",value:n});let i=_(e.email),s=z$1.string().parse(e.password),a=await l.findOne({"emails.address":i},{collation:{locale:"en",strength:2}}),c=a?.authMethods?.password?.hash;if(!c)throw _e();if(!a.emails?.find(l=>l.address===i)?.verified&&u()?.provider){if(n)try{await M({bucket:"verification",type:"user",value:a._id.toString()});}catch{throw new Error("Your email address hasn't been verified yet. Please use the verification email we've send earlier to your inbox.")}throw await j({userId:a?._id,email:i,baseUrl:r?.baseUrl}),new Error("Your email address hasn't been verified yet. We've sent a new verification email to your inbox.")}if(!await ft.compare(s,c))throw _e();return await h$1(o.authToken,a._id),{user:{id:a._id,handle:a.handle}}}async function Oe(e,{user:t,session:o}){if(!o)throw new Error("Session is not initialized");await i(o.authToken);}function _e(){return new Error("Incorrect email/password combination")}async function ke(e,{user:t}){if(!t)throw new Error("Not authenticated");let o=await l.requireById(t.id);return {handle:o.handle,emails:o.emails,authMethods:Object.keys(o.authMethods||{})}}var T=new f("_modelenceRateLimits",{schema:{bucket:g.string(),type:g.enum(["ip","user"]),value:g.string(),windowMs:g.number(),windowStart:g.date(),windowCount:g.number(),prevWindowCount:g.number(),expiresAt:g.date()},indexes:[{key:{bucket:1,type:1,value:1,windowMs:1},unique:true},{key:{expiresAt:1},expireAfterSeconds:0}]});var q=[];function Te(e){if(q.length>0)throw new Error("Duplicate call to initRateLimits - already initialized");q=e;}async function M(e){let{bucket:t,type:o,value:r}=e,n=q.filter(i=>i.bucket===t&&i.type===o);for(let i of n)await wt(i,r);}async function wt(e,t,o){let r=()=>new d(`Rate limit exceeded for ${e.bucket}`),n=await T.findOne({bucket:e.bucket,type:e.type,value:t,windowMs:e.window}),i=Date.now(),s=Math.floor(i/e.window)*e.window,{count:a,modifier:c}=n?ht(n,s,i):{count:0,modifier:{$setOnInsert:{windowStart:new Date(s),windowCount:1,prevWindowCount:0,expiresAt:new Date(s+e.window+e.window)}}};if(a>=e.limit)throw r();await T.upsertOne({bucket:e.bucket,type:e.type,value:t,windowMs:e.window},c);}function ht(e,t,o){let r=t-e.windowMs;if(e.windowStart.getTime()===t){let n=e.windowCount,i=e.prevWindowCount,s=1-(o-t)/e.windowMs;return {count:Math.round(n+i*s),modifier:{$inc:{windowCount:1},$setOnInsert:{windowStart:new Date(t),prevWindowCount:0,expiresAt:new Date(t+e.windowMs+e.windowMs)}}}}if(e.windowStart.getTime()===r){let n=1-(o-t)/e.windowMs;return {count:Math.round(e.windowCount*n),modifier:{$set:{windowStart:new Date(t),windowCount:1,prevWindowCount:e.windowCount,expiresAt:new Date(t+e.windowMs+e.windowMs)}}}}return {count:0,modifier:{$set:{windowStart:new Date(t),windowCount:1,prevWindowCount:0,expiresAt:new Date(t+e.windowMs+e.windowMs)}}}}async function Ae(e,{user:t,connectionInfo:o}){let r=_(e.email),n=J(e.password),i=o?.ip;if(i&&await M({bucket:"signupAttempt",type:"ip",value:i}),await Ce(r))throw new Error("Please use a permanent email address");let s=await l.findOne({"emails.address":r},{collation:{locale:"en",strength:2}});if(s){let f=s.emails?.find(g=>g.address===r);throw new Error(`User with email already exists: ${f?.address}`)}i&&await M({bucket:"signup",type:"ip",value:i});let a=await ft.hash(n,10),c=await l.insertOne({handle:r,emails:[{address:r,verified:false}],createdAt:new Date,authMethods:{password:{hash:a}}});return await j({userId:c?.insertedId,email:r,baseUrl:o?.baseUrl}),c.insertedId}function vt(e,t){return t?t.startsWith("http://")||t.startsWith("https://")?t:`${e}${t.startsWith("/")?"":"/"}${t}`:e}function Mt({email:e,resetUrl:t}){return `
     <p>Hi,</p>
-    <p>We received a request to reset your password for ${t}.</p>
+    <p>We received a request to reset your password for ${e}.</p>
     <p>Click the link below to reset your password:</p>
-    <p><a href="${e}">${e}</a></p>
+    <p><a href="${t}">${t}</a></p>
     <p>This link will expire in 1 hour.</p>
     <p>If you did not request this password reset, please ignore this email.</p>
-  `}var X={success:true,message:"If an account with that email exists, a password reset link has been sent"};async function Ue(t,{connectionInfo:e}){let o=T(t.email),n=await d.findOne({"emails.address":o},{collation:{locale:"en",strength:2}});if(!n||!n.authMethods?.password)return X;let i=h().provider;if(!i)throw new Error("Email provider is not configured");let r=randomBytes(32).toString("hex"),s=new Date(Date.now()+a$1.hours(1));await x.insertOne({userId:n._id,token:r,createdAt:new Date,expiresAt:s});let c=process.env.MODELENCE_SITE_URL||e?.baseUrl,l=`${Ut(c,h().passwordReset?.redirectUrl)}?token=${r}`,w=(h()?.passwordReset?.template||Nt)({email:o,resetUrl:l,name:""}),O=q(w);return await i.sendEmail({to:o,from:h()?.from||"noreply@modelence.com",subject:h()?.passwordReset?.subject||"Reset your password",text:O,html:w}),X}async function Ne(t,{}){let e=z$1.string().parse(t.token),o=z(t.password),n=await x.findOne({token:e});if(!n)throw new Error("Invalid or expired reset token");if(n.expiresAt<new Date)throw await x.deleteOne({token:e}),new Error("Reset token has expired");let i=await d.findOne({_id:n.userId});if(!i)throw new Error("User not found");let r=await Ot.hash(o,10);return await d.updateOne({_id:i._id},{$set:{"authMethods.password.hash":r}}),await x.deleteOne({token:e}),{success:true,message:"Password has been reset successfully"}}var Je=new g("_system.user",{stores:[d,A,_,x],queries:{getOwnProfile:Le},mutations:{signupWithPassword:$e,loginWithPassword:Ae,logout:Pe,sendResetPasswordToken:Ue,resetPassword:Ne},cronJobs:{updateDisposableEmailList:ve},rateLimits:[{bucket:"signup",type:"ip",window:a$1.minutes(15),limit:20},{bucket:"signup",type:"ip",window:a$1.days(1),limit:200},{bucket:"signupAttempt",type:"ip",window:a$1.minutes(15),limit:50},{bucket:"signupAttempt",type:"ip",window:a$1.days(1),limit:500},{bucket:"signin",type:"ip",window:a$1.minutes(15),limit:50},{bucket:"signin",type:"ip",window:a$1.days(1),limit:500},{bucket:"verification",type:"user",window:a$1.minutes(15),limit:3},{bucket:"verification",type:"user",window:a$1.days(1),limit:10}],configSchema:{"auth.email.enabled":{type:"boolean",isPublic:true,default:true},"auth.email.from":{type:"string",isPublic:false,default:""},"auth.email.verification":{type:"boolean",isPublic:true,default:false},"auth.google.enabled":{type:"boolean",isPublic:true,default:false},"auth.google.clientId":{type:"string",isPublic:false,default:""},"auth.google.clientSecret":{type:"secret",isPublic:false,default:""}},routes:[{path:"/api/_internal/auth/verify-email",handlers:{get:Oe}}]});async function qe({configSchema:t,cronJobsMetadata:e,stores:o}){let n=process.env.MODELENCE_CONTAINER_ID;if(!n)throw new Error("Unable to connect to Modelence Cloud: MODELENCE_CONTAINER_ID is not set");try{let i=Object.values(o).map(s=>({name:s.getName(),schema:s.getSchema(),collections:[s.getName()]})),r=await ee("/api/connect","POST",{hostname:Jt.hostname(),containerId:n,dataModels:i,configSchema:t,cronJobsMetadata:e});if(r.status==="error")throw new Error(r.error);return console.log("Successfully connected to Modelence Cloud"),r}catch(i){throw console.error("Unable to connect to Modelence Cloud:",i),i}}async function Be(){return await ee("/api/configs","GET")}async function ze(){return await ee("/api/sync","POST",{containerId:process.env.MODELENCE_CONTAINER_ID})}async function ee(t,e,o){let{MODELENCE_SERVICE_ENDPOINT:n,MODELENCE_SERVICE_TOKEN:i}=process.env;if(!n)throw new Error("Unable to connect to Modelence Cloud: MODELENCE_SERVICE_ENDPOINT is not set");let r=await fetch(`${n}${t}`,{method:e,headers:{Authorization:`Bearer ${i}`,...o?{"Content-Type":"application/json"}:{}},body:o?JSON.stringify(o):void 0});if(!r.ok){let s=await r.text();try{let c=JSON.parse(s);throw new Error(`Unable to connect to Modelence Cloud: HTTP status: ${r.status}, ${c?.error}`)}catch{throw new Error(`Unable to connect to Modelence Cloud: HTTP status: ${r.status}, ${s}`)}}return await r.json()}var te=false,qt=a$1.seconds(10);function Fe(){setInterval(async()=>{if(!te){te=true;try{await ze();}catch(t){console.error("Error syncing status",t);}try{await Bt();}catch(t){console.error("Error syncing config",t);}te=false;}},qt);}async function Bt(){let{configs:t}=await Be();c(t);}var zt=a$1.minutes(1),Ft=a$1.seconds(10),D={},oe,L=new f("_modelenceCronJobs",{schema:{alias:a.string(),lastStartDate:a.date().optional(),lock:a.object({containerId:a.string(),acquireDate:a.date()}).optional()},indexes:[{key:{alias:1},unique:true,background:true}]});function We(t,{description:e="",interval:o,timeout:n=zt,handler:i}){if(D[t])throw new Error(`Duplicate cron job declaration: '${t}' already exists`);if(oe)throw new Error(`Unable to add a cron job - cron jobs have already been initialized: [${t}]`);if(o<a$1.seconds(5))throw new Error(`Cron job interval should not be less than 5 second [${t}]`);if(n>a$1.days(1))throw new Error(`Cron job timeout should not be longer than 1 day [${t}]`);D[t]={alias:t,params:{description:e,interval:o,timeout:n},handler:i,state:{isRunning:false}};}async function He(){if(oe)throw new Error("Cron jobs already started");let t=Object.keys(D);if(t.length>0){let e={alias:{$in:t}},o=await L.findOne({...e,"lock.containerId":{$exists:true}});await Promise.all(t.map(r=>L.upsertOne({alias:r},{$set:{lock:{containerId:process.env.MODELENCE_CONTAINER_ID||"unknown",acquireDate:new Date}}}))),o&&await Vt(Ft);let n=await L.fetch(e),i=Date.now();n.forEach(r=>{let s=D[r.alias];s&&(s.state.scheduledRunTs=r.lastStartDate?r.lastStartDate.getTime()+s.params.interval:i);}),Object.values(D).forEach(r=>{r.state.scheduledRunTs||(r.state.scheduledRunTs=i);}),oe=setInterval(Wt,a$1.seconds(1));}}function Vt(t){return new Promise(e=>setTimeout(e,t))}async function Wt(){let t=Date.now();Object.values(D).forEach(async e=>{let{params:o,state:n}=e;if(n.isRunning){n.startTs&&n.startTs+o.timeout<t&&(n.isRunning=false);return}n.scheduledRunTs&&n.scheduledRunTs<=t&&await Ht(e);});}async function Ht(t){let{alias:e,params:o,handler:n,state:i}=t;i.isRunning=true,i.startTs=Date.now();let r=j$1("cron",`cron:${e}`);n().then(()=>{Ve(i,o),r.end("success");}).catch(s=>{Ve(i,o),k(s),r.end("error"),console.error(`Error in cron job '${e}':`,s);}),await L.updateOne({alias:e},{$set:{lastStartDate:new Date(i.startTs)}});}function Ve(t,e){t.scheduledRunTs=t.startTs?t.startTs+e.interval:Date.now(),t.startTs=void 0,t.isRunning=false;}function Ke(){return Object.values(D).map(({alias:t,params:e})=>({alias:t,description:e.description,interval:e.interval,timeout:e.timeout}))}var Ge=new g("_system.cron",{stores:[L]});var b=null;async function Ze(){if(b)return b;let t=j();if(!t)throw new Error("MongoDB URI is not set");b=new MongoClient(t,{maxPoolSize:20});try{return await b.connect(),await b.db("admin").command({ping:1}),console.log("Pinged your deployment. You successfully connected to MongoDB!"),b}catch(e){throw console.error(e),b=null,e}}function j(){let t=a$2("_system.mongodbUri");return t?String(t):void 0}function Qe(){return b}var ne={};function re(t,e){return S(),tt(t),F("query",t,e)}function Ye(t,e){return S(),tt(t),F("mutation",t,e)}function Xe(t,e){return S(),ot(t),F("query",t,e)}function et(t,e){return S(),ot(t),F("mutation",t,e)}function tt(t){if(t.toLowerCase().startsWith("_system."))throw new Error(`Method name cannot start with a reserved prefix: '_system.' (${t})`)}function ot(t){if(!t.toLowerCase().startsWith("_system."))throw new Error(`System method name must start with a prefix: '_system.' (${t})`)}function F(t,e,o){if(S(),ne[e])throw new Error(`Method with name '${e}' is already defined.`);let n=typeof o=="function"?o:o.handler,i=typeof o=="function"?[]:o.permissions??[];ne[e]={type:t,name:e,handler:n,permissions:i};}async function nt(t,e,o){S();let n=ne[t];if(!n)throw new Error(`Method with name '${t}' is not defined.`);let{type:i,handler:r}=n,s=j$1("method",`method:${t}`,{type:i,args:e}),c;try{Ce(o.roles,n.permissions),c=await r(e,o);}catch(u){throw s.end("error"),u}return s.end(),c}var V=new f("_modelenceMigrations",{schema:{version:a.number(),appliedAt:a.date()},indexes:[{key:{version:1},unique:true}]});async function rt(t){if(t.length===0)return;let e=t.map(({version:r})=>r),o=await V.fetch({version:{$in:e}}),n=new Set(o.map(({version:r})=>r)),i=t.filter(({version:r})=>!n.has(r));if(i.length!==0){console.log(`Running migrations (${i.length})...`);for(let{version:r,description:s,handler:c}of i)console.log(`Running migration v${r}: ${s}`),await V.insertOne({version:r,appliedAt:new Date}),await c(),console.log(`Migration v${r} complete`);}}var it=new g("_system.migration",{stores:[V]});var st=new g("_system.rateLimit",{stores:[P]});var se=class{async init(){this.config=await to(),this.isDev()&&(console.log("Starting Vite dev server..."),this.viteServer=await createServer({...defineConfig(this.config),server:{middlewareMode:true},root:"./src/client"}));}middlewares(){if(this.isDev())return this.viteServer?.middlewares??[];let e=[ce.static("./.modelence/build/client".replace(/\\/g,"/"))];return this.config?.publicDir&&e.push(ce.static(this.config.publicDir)),e}handler(e,o){if(this.isDev())try{o.sendFile("index.html",{root:"./src/client"});}catch(n){console.error("Error serving index.html:",n),o.status(500).send("Internal Server Error");}else o.sendFile("index.html",{root:"./.modelence/build/client".replace(/\\/g,"/")});}isDev(){return process.env.NODE_ENV!=="production"}};async function eo(){let t=process.cwd();try{return (await loadConfigFromFile({command:"serve",mode:"development"},void 0,t))?.config||{}}catch(e){return console.warn("Could not load vite config:",e),{}}}async function to(){let t=process.cwd(),e=await eo(),o=[".eslintrc.js",".eslintrc.json",".eslintrc","eslint.config.js",".eslintrc.yml",".eslintrc.yaml"].find(i=>Xt.existsSync(ie.join(t,i))),n=[Yt(),oo()];if(o){let i=(await import('vite-plugin-eslint')).default;n.push(i({failOnError:false,include:["src/**/*.js","src/**/*.jsx","src/**/*.ts","src/**/*.tsx"],cwd:t,overrideConfigFile:ie.resolve(t,o)}));}return {plugins:n,root:t,build:{outDir:".modelence/build/client".replace(/\\/g,"/"),emptyOutDir:true},server:{proxy:{"/api":"http://localhost:4000"},headers:{"Cache-Control":"no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0",Pragma:"no-cache",Expires:"0"},hmr:{port:0}},resolve:{alias:{"@":ie.resolve(t,"src").replace(/\\/g,"/")}},publicDir:e.publicDir}}function oo(){return {name:"modelence-asset-handler",async transform(t,e){if(/\.(png|jpe?g|gif|svg|mpwebm|ogg|mp3|wav|flac|aac)$/.test(e))return process.env.NODE_ENV==="development",t},async generateBundle(t,e){}}}var ct=new se;async function lt(t,e){let{authToken:o}=await Z(e);t.cookie("authToken",o,{httpOnly:true,secure:process.env.NODE_ENV==="production",sameSite:"strict"}),t.status(301),t.redirect("/");}async function io(t,e){let o=t.user,n=await d.findOne({"authMethods.google.id":o.id});if(n){await lt(e,n._id);return}let i=o.emails[0]&&o.emails[0]?.value;if(i||e.status(400).json({error:"Email address is required for Google authentication."}),await d.findOne({"emails.address":i},{collation:{locale:"en",strength:2}})){e.status(400).json({error:"User with this email already exists. Please log in instead."});return}let s=await d.insertOne({handle:i,emails:[{address:i,verified:true}],createdAt:new Date,authMethods:{google:{id:o.id}}});await lt(e,s.insertedId);}function so(){let t=Router(),e=!!a$2("_system.user.auth.google.enabled"),o=String(a$2("_system.user.auth.google.clientId")),n=String(a$2("_system.user.auth.google.clientSecret"));return !e||!o||!n||(ae.use(new Strategy({clientID:o,clientSecret:n,callbackURL:"/api/_internal/auth/google/callback",proxy:true},(i,r,s,c)=>c(null,s))),t.get("/api/_internal/auth/google",ae.authenticate("google",{scope:["profile","email"],session:false})),t.get("/api/_internal/auth/google/callback",ae.authenticate("google",{session:false}),io)),t}var mt=so;function dt(t){return async(e,o)=>{try{let n=await t({query:e.query,body:e.body,params:e.params,headers:e.headers,cookies:e.cookies,req:e});o.status(n.status||200),n.redirect&&o.redirect(n.redirect),n.headers&&Object.entries(n.headers).forEach(([i,r])=>{o.setHeader(i,r);}),o.send(n.data);}catch(n){n instanceof a$4?o.status(n.status).send(n.message):(console.error(`Error in route handler: ${e.path}`),console.error(n),o.status(500).send(String(n)));}}}async function ut(t){let e=await xe(t),o=e.userId?await d.findOne({_id:new ObjectId(e.userId)}):null,n=o?{id:o._id.toString(),handle:o.handle}:null,i=n?Ee():J();return {user:n,session:e,roles:i}}function uo(t,e){for(let o of e)for(let n of o.routes){let{path:i,handlers:r}=n;Object.entries(r).forEach(([s,c])=>{t[s](i,dt(c));});}}async function pt(t,{combinedModules:e}){let o=ce();o.use(ce.json()),o.use(ce.urlencoded({extended:true})),o.use(co()),o.use(ae.initialize()),o.use(mt()),o.post("/api/_internal/method/:methodName(*)",async(r,s)=>{let{methodName:c}=r.params,u=await po(r);try{let l=await nt(c,r.body.args,u);s.json({data:l,typeMap:a$3(l)});}catch(l){if(console.error(`Error in method ${c}:`,l),l instanceof a$4)s.status(l.status).send(l.message);else if(l instanceof Error&&l?.constructor?.name==="ZodError"&&"errors"in l){let w=l.flatten(),O=Object.entries(w.fieldErrors).map(([W,H])=>`${W}: ${(H??[]).join(", ")}`).join("; "),$=w.formErrors.join("; "),I=[O,$].filter(Boolean).join("; ");s.status(400).send(I);}else s.status(500).send(l instanceof Error?l.message:String(l));}}),uo(o,e),await t.init(),t.middlewares&&o.use(t.middlewares()),o.all("*",(r,s)=>t.handler(r,s)),process.on("unhandledRejection",(r,s)=>{console.error("Unhandled Promise Rejection:"),console.error(r instanceof Error?r.stack:r),console.error("Promise:",s);}),process.on("uncaughtException",r=>{console.error("Uncaught Exception:"),console.error(r.stack),console.trace("Full application stack:");});let n=lo.createServer(o),i=process.env.PORT||3e3;n.listen(i,()=>{h$1("Application started",{source:"app"}),console.log(`
-Application started on http://localhost:${i}
-`);});}async function po(t){let e=E.string().nullish().transform(r=>r??null).parse(t.cookies.authToken||t.body.authToken),o=E.object({screenWidth:E.number(),screenHeight:E.number(),windowWidth:E.number(),windowHeight:E.number(),pixelRatio:E.number(),orientation:E.string().nullable()}).parse(t.body.clientInfo),n={ip:fo(t),userAgent:t.get("user-agent"),acceptLanguage:t.get("accept-language"),referrer:t.get("referrer"),baseUrl:t.protocol+"://"+t.get("host")};if(!!j()){let{session:r,user:s,roles:c}=await ut(e);return {clientInfo:o,connectionInfo:n,session:r,user:s,roles:c}}return {clientInfo:o,connectionInfo:n,session:null,user:null,roles:J()}}function fo(t){let e=t.headers["x-forwarded-for"];if(e)return (Array.isArray(e)?e[0]:e.split(",")[0]).trim();let o=t.ip||t.socket?.remoteAddress;if(o)return o.startsWith("::ffff:")?o.substring(7):o}async function yo({modules:t=[],roles:e$1={},defaultRoles:o={},server:n=ct,migrations:i=[],email:r={}}){ft.config(),ft.config({path:".modelence.env"});let s=!!process.env.MODELENCE_SERVICE_ENDPOINT,c$1=process.env.MODELENCE_CRON_ENABLED==="true";To().then(()=>{}).catch(()=>{});let u=[Je,De,Ge,it,st],l=[...u,...t];e(),Eo(u),bo(t),be(e$1,o);let y=So(l);d$2(y);let w=Co(l);c$1&&Ro(l);let O=xo(l);if(je(O),s){let{configs:I,environmentId:W,appAlias:H,environmentAlias:ht,telemetry:gt}=await qe({configSchema:y,cronJobsMetadata:c$1?Ke():void 0,stores:w});c(I),f$1({environmentId:W,appAlias:H,environmentAlias:ht,telemetry:gt});}else c(_o(y));_e(r);let $=j();if($&&(await Ze(),Do(w)),c$1&&await rt(i),$)for(let I of w)I.createIndexes();s&&(await g$1(),Fe()),c$1&&He().catch(console.error),await pt(n,{combinedModules:l});}function bo(t){for(let e of t){for(let[o,n]of Object.entries(e.queries))re(`${e.name}.${o}`,n);for(let[o,n]of Object.entries(e.mutations))Ye(`${e.name}.${o}`,n);}}function Eo(t){for(let e of t){for(let[o,n]of Object.entries(e.queries))Xe(`${e.name}.${o}`,n);for(let[o,n]of Object.entries(e.mutations))et(`${e.name}.${o}`,n);}}function Co(t){return t.flatMap(e=>e.stores)}function xo(t){return t.flatMap(e=>e.rateLimits)}function So(t){let e={};for(let o of t)for(let[n,i]of Object.entries(o.configSchema)){let r=`${o.name}.${n}`;if(r in e)throw new Error(`Duplicate config schema key: ${r} (${o.name})`);e[r]=i;}return e}function Ro(t){for(let e of t)for(let[o,n]of Object.entries(e.cronJobs))We(`${e.name}.${o}`,n);}function Do(t){let e=Qe();if(!e)throw new Error("Failed to initialize stores: MongoDB client not initialized");for(let o of t)o.init(e);}var Mo={MONGODB_URI:"_system.mongodbUri",MODELENCE_AUTH_GOOGLE_ENABLED:"_system.user.auth.google.enabled",MODELENCE_AUTH_GOOGLE_CLIENT_ID:"_system.user.auth.google.clientId",MODELENCE_AUTH_GOOGLE_CLIENT_SECRET:"_system.user.auth.google.clientSecret",MODELENCE_EMAIL_RESEND_API_KEY:"_system.email.resend.apiKey",MODELENCE_EMAIL_AWS_SES_REGION:"_system.email.awsSes.region",MODELENCE_EMAIL_AWS_SES_ACCESS_KEY_ID:"_system.email.awsSes.accessKeyId",MODELENCE_EMAIL_AWS_SES_SECRET_ACCESS_KEY:"_system.email.awsSes.secretAccessKey",MODELENCE_EMAIL_SMTP_HOST:"_system.email.smtp.host",MODELENCE_EMAIL_SMTP_PORT:"_system.email.smtp.port",MODELENCE_EMAIL_SMTP_USER:"_system.email.smtp.user",MODELENCE_EMAIL_SMTP_PASS:"_system.email.smtp.pass",GOOGLE_AUTH_ENABLED:"_system.user.auth.google.enabled",GOOGLE_AUTH_CLIENT_ID:"_system.user.auth.google.clientId",GOOGLE_AUTH_CLIENT_SECRET:"_system.user.auth.google.clientSecret"};function vo(t,e){if(e==="number"){let o=Number(t);if(isNaN(o))throw new Error(`Invalid number value for config: ${t}`);return o}if(e==="boolean"){if(t.toLowerCase()==="true")return  true;if(t.toLowerCase()==="false")return  false;throw new Error(`Invalid boolean value for config: ${t}`)}return t}function _o(t){let e=[];for(let[o,n]of Object.entries(Mo)){let i=process.env[o],r=t[n];if(i){let s=r?.type??"string";e.push({key:n,type:s,value:vo(i,s)});}}return e}async function To(){if(process.env.MODELENCE_TRACKING_ENABLED!=="false"){let e=process.env.MODELENCE_SERVICE_ENDPOINT??"https://cloud.modelence.com",o=process.env.MODELENCE_ENVIRONMENT_ID,n=await Oo(),i=await import('./package-4RSIRWA5.js');await fetch(`${e}/api/track/app-start`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({projectName:n.name,version:i.default.version,localHostname:Jt.hostname(),environmentId:o})});}}async function Oo(){try{let t=ie.join(process.cwd(),"package.json"),e=await ho.readFile(t,"utf-8");return {name:JSON.parse(e).name||"unknown"}}catch{return {name:"unknown"}}}
-export{g as Module,f as Store,R as consumeRateLimit,re as createQuery,d as dbUsers,a as schema,yo as startApp};//# sourceMappingURL=server.js.map
+  `}var F={success:true,message:"If an account with that email exists, a password reset link has been sent"};async function Ie(e,{connectionInfo:t}){let o$1=_(e.email),r=await l.findOne({"emails.address":o$1},{collation:{locale:"en",strength:2}});if(!r||!r.authMethods?.password)return F;let n=u().provider;if(!n)throw new Error("Email provider is not configured");let i=randomBytes(32).toString("hex"),s=new Date(Date.now()+a.hours(1));await o.insertOne({userId:r._id,token:i,createdAt:new Date,expiresAt:s});let a$1=process.env.MODELENCE_SITE_URL||t?.baseUrl,f=`${vt(a$1,u().passwordReset?.redirectUrl)}?token=${i}`,l$1=(u()?.passwordReset?.template||Mt)({email:o$1,resetUrl:f,name:""}),R=U(l$1);return await n.sendEmail({to:o$1,from:u()?.from||"noreply@modelence.com",subject:u()?.passwordReset?.subject||"Reset your password",text:R,html:l$1}),F}async function Le(e,{}){let t=z$1.string().parse(e.token),o$1=J(e.password),r=await o.findOne({token:t});if(!r)throw new Error("Invalid or expired reset token");if(r.expiresAt<new Date)throw await o.deleteOne({token:t}),new Error("Reset token has expired");let n=await l.findOne({_id:r.userId});if(!n)throw new Error("User not found");let i=await ft.hash(o$1,10);return await l.updateOne({_id:n._id},{$set:{"authMethods.password.hash":i}}),await o.deleteOne({token:t}),{success:true,message:"Password has been reset successfully"}}var Ne=new e("_system.user",{stores:[l,m,n,o],queries:{getOwnProfile:ke},mutations:{signupWithPassword:Ae,loginWithPassword:De,logout:Oe,sendResetPasswordToken:Ie,resetPassword:Le},cronJobs:{updateDisposableEmailList:ve},rateLimits:[{bucket:"signup",type:"ip",window:a.minutes(15),limit:20},{bucket:"signup",type:"ip",window:a.days(1),limit:200},{bucket:"signupAttempt",type:"ip",window:a.minutes(15),limit:50},{bucket:"signupAttempt",type:"ip",window:a.days(1),limit:500},{bucket:"signin",type:"ip",window:a.minutes(15),limit:50},{bucket:"signin",type:"ip",window:a.days(1),limit:500},{bucket:"verification",type:"user",window:a.minutes(15),limit:3},{bucket:"verification",type:"user",window:a.days(1),limit:10}],configSchema:{"auth.email.enabled":{type:"boolean",isPublic:true,default:true},"auth.email.from":{type:"string",isPublic:false,default:""},"auth.email.verification":{type:"boolean",isPublic:true,default:false},"auth.google.enabled":{type:"boolean",isPublic:true,default:false},"auth.google.clientId":{type:"string",isPublic:false,default:""},"auth.google.clientSecret":{type:"secret",isPublic:false,default:""}},routes:[{path:"/api/_internal/auth/verify-email",handlers:{get:Re}}]});async function Pe({configSchema:e,cronJobsMetadata:t,stores:o}){let r=process.env.MODELENCE_CONTAINER_ID;if(!r)throw new Error("Unable to connect to Modelence Cloud: MODELENCE_CONTAINER_ID is not set");try{let n=Object.values(o).map(s=>({name:s.getName(),schema:s.getSchema(),collections:[s.getName()]})),i=await K("/api/connect","POST",{hostname:xt.hostname(),containerId:r,dataModels:n,configSchema:e,cronJobsMetadata:t});if(i.status==="error")throw new Error(i.error);return console.log("Successfully connected to Modelence Cloud"),i}catch(n){throw console.error("Unable to connect to Modelence Cloud:",n),n}}async function $e(){return await K("/api/configs","GET")}async function Ue(){return await K("/api/sync","POST",{containerId:process.env.MODELENCE_CONTAINER_ID})}async function K(e,t,o){let{MODELENCE_SERVICE_ENDPOINT:r,MODELENCE_SERVICE_TOKEN:n}=process.env;if(!r)throw new Error("Unable to connect to Modelence Cloud: MODELENCE_SERVICE_ENDPOINT is not set");let i=await fetch(`${r}${e}`,{method:t,headers:{Authorization:`Bearer ${n}`,...o?{"Content-Type":"application/json"}:{}},body:o?JSON.stringify(o):void 0});if(!i.ok){let s=await i.text();try{let a=JSON.parse(s);throw new Error(`Unable to connect to Modelence Cloud: HTTP status: ${i.status}, ${a?.error}`)}catch{throw new Error(`Unable to connect to Modelence Cloud: HTTP status: ${i.status}, ${s}`)}}return await i.json()}var Y=false,Rt=a.seconds(10);function je(){setInterval(async()=>{if(!Y){Y=true;try{await Ue();}catch(e){console.error("Error syncing status",e);}try{await St();}catch(e){console.error("Error syncing config",e);}Y=false;}},Rt);}async function St(){let{configs:e}=await $e();c(e);}var _t=a.minutes(1),Dt=a.seconds(10),x={},Q,A=new f("_modelenceCronJobs",{schema:{alias:g.string(),lastStartDate:g.date().optional(),lock:g.object({containerId:g.string(),acquireDate:g.date()}).optional()},indexes:[{key:{alias:1},unique:true,background:true}]});function Ve(e,{description:t="",interval:o,timeout:r=_t,handler:n}){if(x[e])throw new Error(`Duplicate cron job declaration: '${e}' already exists`);if(Q)throw new Error(`Unable to add a cron job - cron jobs have already been initialized: [${e}]`);if(o<a.seconds(5))throw new Error(`Cron job interval should not be less than 5 second [${e}]`);if(r>a.days(1))throw new Error(`Cron job timeout should not be longer than 1 day [${e}]`);x[e]={alias:e,params:{description:t,interval:o,timeout:r},handler:n,state:{isRunning:false}};}async function Be(){if(Q)throw new Error("Cron jobs already started");let e=Object.keys(x);if(e.length>0){let t={alias:{$in:e}},o=await A.findOne({...t,"lock.containerId":{$exists:true}});await Promise.all(e.map(i=>A.upsertOne({alias:i},{$set:{lock:{containerId:process.env.MODELENCE_CONTAINER_ID||"unknown",acquireDate:new Date}}}))),o&&await Ot(Dt);let r=await A.fetch(t),n=Date.now();r.forEach(i=>{let s=x[i.alias];s&&(s.state.scheduledRunTs=i.lastStartDate?i.lastStartDate.getTime()+s.params.interval:n);}),Object.values(x).forEach(i=>{i.state.scheduledRunTs||(i.state.scheduledRunTs=n);}),Q=setInterval(kt,a.seconds(1));}}function Ot(e){return new Promise(t=>setTimeout(t,e))}async function kt(){let e=Date.now();Object.values(x).forEach(async t=>{let{params:o,state:r}=t;if(r.isRunning){r.startTs&&r.startTs+o.timeout<e&&(r.isRunning=false);return}r.scheduledRunTs&&r.scheduledRunTs<=e&&await Tt(t);});}async function Tt(e){let{alias:t,params:o,handler:r,state:n}=e;n.isRunning=true,n.startTs=Date.now();let i=j$1("cron",`cron:${t}`);r().then(()=>{Je(n,o),i.end("success");}).catch(s=>{Je(n,o),k$1(s),i.end("error"),console.error(`Error in cron job '${t}':`,s);}),await A.updateOne({alias:t},{$set:{lastStartDate:new Date(n.startTs)}});}function Je(e,t){e.scheduledRunTs=e.startTs?e.startTs+t.interval:Date.now(),e.startTs=void 0,e.isRunning=false;}function He(){return Object.values(x).map(({alias:e,params:t})=>({alias:e,description:t.description,interval:t.interval,timeout:t.timeout}))}var We=new e("_system.cron",{stores:[A]});var h=null;async function Ge(){if(h)return h;let e=I();if(!e)throw new Error("MongoDB URI is not set");h=new MongoClient(e,{maxPoolSize:20});try{return await h.connect(),await h.db("admin").command({ping:1}),console.log("Pinged your deployment. You successfully connected to MongoDB!"),h}catch(t){throw console.error(t),h=null,t}}function I(){let e=a$1("_system.mongodbUri");return e?String(e):void 0}function ze(){return h}var Z={};function X(e,t){return v(),Ye(e),V("query",e,t)}function qe(e,t){return v(),Ye(e),V("mutation",e,t)}function Fe(e,t){return v(),Qe(e),V("query",e,t)}function Ke(e,t){return v(),Qe(e),V("mutation",e,t)}function Ye(e){if(e.toLowerCase().startsWith("_system."))throw new Error(`Method name cannot start with a reserved prefix: '_system.' (${e})`)}function Qe(e){if(!e.toLowerCase().startsWith("_system."))throw new Error(`System method name must start with a prefix: '_system.' (${e})`)}function V(e,t,o){if(v(),Z[t])throw new Error(`Method with name '${t}' is already defined.`);let r=typeof o=="function"?o:o.handler,n=typeof o=="function"?[]:o.permissions??[];Z[t]={type:e,name:t,handler:r,permissions:n};}async function Ze(e,t,o){v();let r$1=Z[e];if(!r$1)throw new Error(`Method with name '${e}' is not defined.`);let{type:n,handler:i}=r$1,s=j$1("method",`method:${e}`,{type:n,args:t}),a;try{r(o.roles,r$1.permissions),a=await i(t,o);}catch(c){throw s.end("error"),c}return s.end(),a}var B=new f("_modelenceMigrations",{schema:{version:g.number(),appliedAt:g.date()},indexes:[{key:{version:1},unique:true}]});async function Xe(e){if(e.length===0)return;let t=e.map(({version:i})=>i),o=await B.fetch({version:{$in:t}}),r=new Set(o.map(({version:i})=>i)),n=e.filter(({version:i})=>!r.has(i));if(n.length!==0){console.log(`Running migrations (${n.length})...`);for(let{version:i,description:s,handler:a}of n)console.log(`Running migration v${i}: ${s}`),await B.insertOne({version:i,appliedAt:new Date}),await a(),console.log(`Migration v${i} complete`);}}var et=new e("_system.migration",{stores:[B]});var tt=new e("_system.rateLimit",{stores:[T]});var te=class{async init(){this.config=await jt(),this.isDev()&&(console.log("Starting Vite dev server..."),this.viteServer=await createServer({...defineConfig(this.config),server:{middlewareMode:true},root:"./src/client"}));}middlewares(){if(this.isDev())return this.viteServer?.middlewares??[];let t=[re.static("./.modelence/build/client".replace(/\\/g,"/"))];return this.config?.publicDir&&t.push(re.static(this.config.publicDir)),t}handler(t,o){if(this.isDev())try{o.sendFile("index.html",{root:"./src/client"});}catch(r){console.error("Error serving index.html:",r),o.status(500).send("Internal Server Error");}else o.sendFile("index.html",{root:"./.modelence/build/client".replace(/\\/g,"/")});}isDev(){return process.env.NODE_ENV!=="production"}};async function Ut(){let e=process.cwd();try{return (await loadConfigFromFile({command:"serve",mode:"development"},void 0,e))?.config||{}}catch(t){return console.warn("Could not load vite config:",t),{}}}async function jt(){let e=process.cwd(),t=await Ut(),o=[".eslintrc.js",".eslintrc.json",".eslintrc","eslint.config.js",".eslintrc.yml",".eslintrc.yaml"].find(n=>$t.existsSync(ee.join(e,n))),r=[Pt(),Jt()];if(o){let n=(await import('vite-plugin-eslint')).default;r.push(n({failOnError:false,include:["src/**/*.js","src/**/*.jsx","src/**/*.ts","src/**/*.tsx"],cwd:e,overrideConfigFile:ee.resolve(e,o)}));}return {plugins:r,root:e,build:{outDir:".modelence/build/client".replace(/\\/g,"/"),emptyOutDir:true},server:{proxy:{"/api":"http://localhost:4000"},headers:{"Cache-Control":"no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0",Pragma:"no-cache",Expires:"0"},hmr:{port:0}},resolve:{alias:{"@":ee.resolve(e,"src").replace(/\\/g,"/")}},publicDir:t.publicDir}}function Jt(){return {name:"modelence-asset-handler",async transform(e,t){if(/\.(png|jpe?g|gif|svg|mpwebm|ogg|mp3|wav|flac|aac)$/.test(t))return process.env.NODE_ENV==="development",e},async generateBundle(e,t){}}}var rt=new te;async function nt(e,t){let{authToken:o}=await j$2(t);e.cookie("authToken",o,{httpOnly:true,secure:process.env.NODE_ENV==="production",sameSite:"strict"}),e.status(301),e.redirect("/");}async function Ht(e,t){let o=e.user,r=await l.findOne({"authMethods.google.id":o.id});if(r){await nt(t,r._id);return}let n=o.emails[0]&&o.emails[0]?.value;if(n||t.status(400).json({error:"Email address is required for Google authentication."}),await l.findOne({"emails.address":n},{collation:{locale:"en",strength:2}})){t.status(400).json({error:"User with this email already exists. Please log in instead."});return}let s=await l.insertOne({handle:n,emails:[{address:n,verified:true}],createdAt:new Date,authMethods:{google:{id:o.id}}});await nt(t,s.insertedId);}function Wt(){let e=Router(),t=!!a$1("_system.user.auth.google.enabled"),o=String(a$1("_system.user.auth.google.clientId")),r=String(a$1("_system.user.auth.google.clientSecret"));return !t||!o||!r||(oe.use(new Strategy({clientID:o,clientSecret:r,callbackURL:"/api/_internal/auth/google/callback",proxy:true},(n,i,s,a)=>a(null,s))),e.get("/api/_internal/auth/google",oe.authenticate("google",{scope:["profile","email"],session:false})),e.get("/api/_internal/auth/google/callback",oe.authenticate("google",{session:false}),Ht)),e}var it=Wt;function st(e){return async(t,o)=>{try{let r=await e({query:t.query,body:t.body,params:t.params,headers:t.headers,cookies:t.cookies,req:t});o.status(r.status||200),r.redirect&&o.redirect(r.redirect),r.headers&&Object.entries(r.headers).forEach(([n,i])=>{o.setHeader(n,i);}),o.send(r.data);}catch(r){r instanceof a$3?o.status(r.status).send(r.message):(console.error(`Error in route handler: ${t.path}`),console.error(r),o.status(500).send(String(r)));}}}function Ft(e,t){for(let o of t)for(let r of o.routes){let{path:n,handlers:i}=r;Object.entries(i).forEach(([s,a])=>{e[s](n,st(a));});}}async function at(e,{combinedModules:t$1,websockets:o,rooms:r}){let n=re();n.use(re.json()),n.use(re.urlencoded({extended:true})),n.use(Gt()),n.use(oe.initialize()),n.use(it()),n.post("/api/_internal/method/:methodName(*)",async(a,c)=>{let{methodName:f}=a.params,g=await Kt(a);try{let l=await Ze(f,a.body.args,g);c.json({data:l,typeMap:a$2(l)});}catch(l){if(console.error(`Error in method ${f}:`,l),l instanceof a$3)c.status(l.status).send(l.message);else if(l instanceof Error&&l?.constructor?.name==="ZodError"&&"errors"in l){let L=l.flatten(),H=Object.entries(L.fieldErrors).map(([W,G])=>`${W}: ${(G??[]).join(", ")}`).join("; "),N=L.formErrors.join("; "),D=[H,N].filter(Boolean).join("; ");c.status(400).send(D);}else c.status(500).send(l instanceof Error?l.message:String(l));}}),Ft(n,t$1),await e.init(),e.middlewares&&n.use(e.middlewares()),n.all("*",(a,c)=>e.handler(a,c)),process.on("unhandledRejection",(a,c)=>{console.error("Unhandled Promise Rejection:"),console.error(a instanceof Error?a.stack:a),console.error("Promise:",c);}),process.on("uncaughtException",a=>{console.error("Uncaught Exception:"),console.error(a.stack),console.trace("Full application stack:");});let i=zt.createServer(n);o?.enabled&&t(i,r);let s=process.env.PORT||3e3;i.listen(s,()=>{h$2("Application started",{source:"app"}),console.log(`
+Application started on http://localhost:${s}
+`);});}async function Kt(e){let t=E.string().nullish().transform(i=>i??null).parse(e.cookies.authToken||e.body.authToken),o=E.object({screenWidth:E.number(),screenHeight:E.number(),windowWidth:E.number(),windowHeight:E.number(),pixelRatio:E.number(),orientation:E.string().nullable()}).parse(e.body.clientInfo),r={ip:Yt(e),userAgent:e.get("user-agent"),acceptLanguage:e.get("accept-language"),referrer:e.get("referrer"),baseUrl:e.protocol+"://"+e.get("host")};if(!!I()){let{session:i,user:s$1,roles:a}=await s(t);return {clientInfo:o,connectionInfo:r,session:i,user:s$1,roles:a}}return {clientInfo:o,connectionInfo:r,session:null,user:null,roles:q$1()}}function Yt(e){let t=e.headers["x-forwarded-for"];if(t)return (Array.isArray(t)?t[0]:t.split(",")[0]).trim();let o=e.ip||e.socket?.remoteAddress;if(o)return o.startsWith("::ffff:")?o.substring(7):o}async function eo({modules:e=[],roles:t={},defaultRoles:o={},server:r=rt,migrations:n=[],email:i={},websockets:s={}}){ct.config(),ct.config({path:".modelence.env"});let a=!!process.env.MODELENCE_SERVICE_ENDPOINT,c$1=process.env.MODELENCE_CRON_ENABLED==="true";uo().then(()=>{}).catch(()=>{});let f=[Ne,k,We,et,tt],g=[...f,...e];e$1(),oo(f),to(e),p(t,o);let l=so(g);d$1(l);let R=ro(g),L=no(g);c$1&&ao(g);let H=io(g);if(Te(H),a){let{configs:D,environmentId:W,appAlias:G,environmentAlias:lt,telemetry:mt}=await Pe({configSchema:l,cronJobsMetadata:c$1?He():void 0,stores:R});c(D),f$1({environmentId:W,appAlias:G,environmentAlias:lt,telemetry:mt});}else c(po(l));Me(i);let N=I();if(N&&(await Ge(),co(R)),c$1&&await Xe(n),N)for(let D of R)D.createIndexes();a&&(await g$1(),je()),c$1&&Be().catch(console.error),await at(r,{combinedModules:g,websockets:s,rooms:L});}function to(e){for(let t of e){for(let[o,r]of Object.entries(t.queries))X(`${t.name}.${o}`,r);for(let[o,r]of Object.entries(t.mutations))qe(`${t.name}.${o}`,r);}}function oo(e){for(let t of e){for(let[o,r]of Object.entries(t.queries))Fe(`${t.name}.${o}`,r);for(let[o,r]of Object.entries(t.mutations))Ke(`${t.name}.${o}`,r);}}function ro(e){return e.flatMap(t=>t.stores)}function no(e){return e.flatMap(t=>t.rooms)}function io(e){return e.flatMap(t=>t.rateLimits)}function so(e){let t={};for(let o of e)for(let[r,n]of Object.entries(o.configSchema)){let i=`${o.name}.${r}`;if(i in t)throw new Error(`Duplicate config schema key: ${i} (${o.name})`);t[i]=n;}return t}function ao(e){for(let t of e)for(let[o,r]of Object.entries(t.cronJobs))Ve(`${t.name}.${o}`,r);}function co(e){let t=ze();if(!t)throw new Error("Failed to initialize stores: MongoDB client not initialized");for(let o of e)o.init(t);}var lo={MONGODB_URI:"_system.mongodbUri",MODELENCE_AUTH_GOOGLE_ENABLED:"_system.user.auth.google.enabled",MODELENCE_AUTH_GOOGLE_CLIENT_ID:"_system.user.auth.google.clientId",MODELENCE_AUTH_GOOGLE_CLIENT_SECRET:"_system.user.auth.google.clientSecret",MODELENCE_EMAIL_RESEND_API_KEY:"_system.email.resend.apiKey",MODELENCE_EMAIL_AWS_SES_REGION:"_system.email.awsSes.region",MODELENCE_EMAIL_AWS_SES_ACCESS_KEY_ID:"_system.email.awsSes.accessKeyId",MODELENCE_EMAIL_AWS_SES_SECRET_ACCESS_KEY:"_system.email.awsSes.secretAccessKey",MODELENCE_EMAIL_SMTP_HOST:"_system.email.smtp.host",MODELENCE_EMAIL_SMTP_PORT:"_system.email.smtp.port",MODELENCE_EMAIL_SMTP_USER:"_system.email.smtp.user",MODELENCE_EMAIL_SMTP_PASS:"_system.email.smtp.pass",GOOGLE_AUTH_ENABLED:"_system.user.auth.google.enabled",GOOGLE_AUTH_CLIENT_ID:"_system.user.auth.google.clientId",GOOGLE_AUTH_CLIENT_SECRET:"_system.user.auth.google.clientSecret"};function mo(e,t){if(t==="number"){let o=Number(e);if(isNaN(o))throw new Error(`Invalid number value for config: ${e}`);return o}if(t==="boolean"){if(e.toLowerCase()==="true")return  true;if(e.toLowerCase()==="false")return  false;throw new Error(`Invalid boolean value for config: ${e}`)}return e}function po(e){let t=[];for(let[o,r]of Object.entries(lo)){let n=process.env[o],i=e[r];if(n){let s=i?.type??"string";t.push({key:r,type:s,value:mo(n,s)});}}return t}async function uo(){if(process.env.MODELENCE_TRACKING_ENABLED!=="false"){let t=process.env.MODELENCE_SERVICE_ENDPOINT??"https://cloud.modelence.com",o=process.env.MODELENCE_ENVIRONMENT_ID,r=await fo(),n=await import('./package-EK42D2UK.js');await fetch(`${t}/api/track/app-start`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({projectName:r.name,version:n.default.version,localHostname:xt.hostname(),environmentId:o})});}}async function fo(){try{let e=ee.join(process.cwd(),"package.json"),t=await Qt.readFile(e,"utf-8");return {name:JSON.parse(t).name||"unknown"}}catch{return {name:"unknown"}}}
+export{M as consumeRateLimit,X as createQuery,eo as startApp};//# sourceMappingURL=server.js.map
 //# sourceMappingURL=server.js.map