modelence 0.5.14 → 0.6.0-dev.1

package/dist/server.d.ts

@@ -1,26 +1,12 @@
 import { EmailProvider, AppServer } from '@modelence/types';
+import { P as Permission, a as Session, U as UserInfo, S as ServerRoom, R as RoleDefinition } from './serverRoom-Dn45ATJ4.js';
+import { C as ConfigSchema, a as ConfigKey, A as AppConfig } from './types-B7qvJJOF.js';
 import { ObjectId as ObjectId$1, WithId, IndexDescription, MongoClient, Collection, Filter, FindOptions, Document, OptionalUnlessRequiredId, InsertOneResult, InsertManyResult, UpdateFilter, UpdateResult, ClientSession, DeleteResult, AggregateOptions, AggregationCursor, AnyBulkWriteOperation, BulkWriteResult, Db } from 'mongodb';
 export { ObjectId } from 'mongodb';
-import { C as ConfigSchema, a as ConfigKey, A as AppConfig } from './types-B7qvJJOF.js';
 import * as zod from 'zod';
 import { z } from 'zod';
 import { Request } from 'express';
 
-type UserInfo = {
-    id: string;
-    handle: string;
-};
-type Session = {
-    authToken: string;
-    expiresAt: Date;
-    userId: ObjectId$1 | null;
-};
-type Permission = string;
-type RoleDefinition = {
-    description?: string;
-    permissions: Permission[];
-};
-
 type CronJobHandler = () => Promise<void>;
 type CronJobInputParams = {
     description?: string;
@@ -387,6 +373,8 @@ declare class Module {
     readonly configSchema: ConfigSchema;
     /** @internal */
     readonly rateLimits: RateLimitRule[];
+    /** @internal */
+    readonly rooms: ServerRoom[];
     /**
      * Creates a new Module instance
      *
@@ -396,7 +384,7 @@ declare class Module {
      *
      * @param options - Module configuration options
      */
-    constructor(name: string, { stores, queries, mutations, routes, cronJobs, configSchema, rateLimits }: {
+    constructor(name: string, { stores, queries, mutations, routes, cronJobs, configSchema, rateLimits, rooms }: {
         stores?: Store<any, any>[];
         queries?: Queries;
         mutations?: Mutations;
@@ -404,6 +392,7 @@ declare class Module {
         cronJobs?: Record<string, CronJobInputParams>;
         configSchema?: ConfigSchema;
         rateLimits?: RateLimitRule[];
+        rooms?: ServerRoom[];
     });
 }
 
@@ -444,8 +433,11 @@ type AppOptions = {
     roles?: Record<string, RoleDefinition>;
     defaultRoles?: Record<string, string>;
     migrations?: Array<MigrationScript>;
+    websockets?: {
+        enabled?: boolean;
+    };
 };
-declare function startApp({ modules, roles, defaultRoles, server, migrations, email }: AppOptions): Promise<void>;
+declare function startApp({ modules, roles, defaultRoles, server, migrations, email, websockets }: AppOptions): Promise<void>;
 
 declare function createQuery<T extends any[]>(name: string, methodDef: MethodDefinition<T>): void;
 
@@ -685,7 +677,7 @@ declare const usersCollection: Store<{
             id: string;
         } | undefined;
     }>;
-}>, "handle" | "createdAt" | "emails" | "authMethods"> & {
+}>, "createdAt" | "handle" | "emails" | "authMethods"> & {
     _id: ObjectId;
 }, ...args: Parameters<any>) => any>>;
 
@@ -734,4 +726,4 @@ type CloudBackendConnectErrorResponse = {
 };
 type CloudBackendConnectResponse = CloudBackendConnectOkResponse | CloudBackendConnectErrorResponse;
 
-export { type AppOptions, type CloudBackendConnectResponse, type CronJobInputParams, type HttpMethod, Module, type RateLimitRule, type RateLimitType, type RouteDefinition, type RouteHandler, type RouteParams, type RouteResponse, Store, type UserInfo, consumeRateLimit, createQuery, usersCollection as dbUsers, getConfig, schema, startApp };
+export { type AppOptions, type CloudBackendConnectResponse, type CronJobInputParams, type HttpMethod, Module, type RateLimitRule, type RateLimitType, type RouteDefinition, type RouteHandler, type RouteParams, type RouteResponse, Store, UserInfo, consumeRateLimit, createQuery, usersCollection as dbUsers, getConfig, schema, startApp };

package/dist/server.js

@@ -1,18 +1,18 @@
-import {a as a$3}from'./chunk-DN5SVAO2.js';import {d as d$1,a as a$4}from'./chunk-C3UESBRX.js';import {a as a$1}from'./chunk-R7MPLJMA.js';import {b as b$1,e,d as d$2,c,f as f$1,g as g$1,a as a$2,h as h$1,j as j$1,k}from'./chunk-2QLNYYBR.js';export{a as getConfig}from'./chunk-2QLNYYBR.js';import ft from'dotenv';import ho from'fs/promises';import Jt from'os';import ie from'path';import {randomBytes}from'crypto';import {ObjectId,MongoClient}from'mongodb';export{ObjectId}from'mongodb';import E,{z as z$1}from'zod';import Ot from'bcrypt';import {createServer,defineConfig,loadConfigFromFile}from'vite';import Yt from'@vitejs/plugin-react';import Xt from'fs';import ce,{Router}from'express';import ae from'passport';import {Strategy}from'passport-google-oauth20';import co from'cookie-parser';import lo from'http';var ye=new Map,M={authenticated:null,unauthenticated:null};function be(t,e){M.authenticated=e.authenticated,M.unauthenticated=e.unauthenticated;for(let[o,n]of Object.entries(t))ye.set(o,n);}function J(){return M.unauthenticated?[M.unauthenticated]:[]}function Ee(){return M.authenticated?[M.authenticated]:[]}function Ce(t,e){let o=e.find(n=>!wt(t,n));if(o)throw new Error(`Access denied - missing permission: '${o}'`)}function wt(t,e){for(let o of t){let n=ye.get(o);if(n&&n.permissions.includes(e))return  true}return  false}var g=class{constructor(e,{stores:o=[],queries:n={},mutations:i={},routes:r=[],cronJobs:s={},configSchema:c={},rateLimits:u=[]}){this.name=e,this.stores=o,this.queries=n,this.mutations=i,this.routes=r,this.cronJobs=s,this.configSchema=c,this.rateLimits=u;}};var f=class{constructor(e,o){this.name=e,this.schema=o.schema,this.methods=o.methods,this.indexes=o.indexes;}getName(){return this.name}getSchema(){return this.schema}init(e){if(this.collection)throw new Error(`Collection ${this.name} is already initialized`);this.client=e,this.collection=this.client.db().collection(this.name);}async createIndexes(){this.indexes.length>0&&await this.requireCollection().createIndexes(this.indexes);}wrapDocument(e){return this.methods?Object.create(null,Object.getOwnPropertyDescriptors({...e,...this.methods})):e}getSelector(e){return typeof e=="string"?{_id:new ObjectId(e)}:e instanceof ObjectId?{_id:e}:e}requireCollection(){if(!this.collection)throw new Error(`Collection ${this.name} is not provisioned`);return this.collection}requireClient(){if(!this.client)throw new Error("Database is not connected");return this.client}async findOne(e,o){let n=await this.requireCollection().findOne(e,o);return n?this.wrapDocument(n):null}async requireOne(e,o,n){let i=await this.findOne(e,o);if(!i)throw n?n():new Error(`Record not found in ${this.name}`);return i}find(e,o){let n=this.requireCollection().find(e);return o?.sort&&n.sort(o.sort),o?.limit&&n.limit(o.limit),o?.skip&&n.skip(o.skip),n}async findById(e){let o=typeof e=="string"?{_id:new ObjectId(e)}:{_id:e};return await this.findOne(o)}async requireById(e,o){let n=await this.findById(e);if(!n)throw o?o():new Error(`Record with id ${e} not found in ${this.name}`);return n}countDocuments(e){return this.requireCollection().countDocuments(e)}async fetch(e,o){return (await this.find(e,o).toArray()).map(this.wrapDocument.bind(this))}async insertOne(e){return await this.requireCollection().insertOne(e)}async insertMany(e){return await this.requireCollection().insertMany(e)}async updateOne(e,o){return await this.requireCollection().updateOne(this.getSelector(e),o)}async upsertOne(e,o){return await this.requireCollection().updateOne(this.getSelector(e),o,{upsert:true})}async updateMany(e,o,n){return await this.requireCollection().updateMany(e,o,n)}async upsertMany(e,o){return await this.requireCollection().updateMany(e,o,{upsert:true})}async deleteOne(e){return await this.requireCollection().deleteOne(e)}async deleteMany(e){return await this.requireCollection().deleteMany(e)}aggregate(e,o){return this.requireCollection().aggregate(e,o)}bulkWrite(e){return this.requireCollection().bulkWrite(e)}getDatabase(){return this.requireClient().db()}rawCollection(){return this.requireCollection()}async renameFrom(e,o){let n=this.getDatabase();if(!this.collection||!n)throw new Error(`Store ${this.name} is not provisioned`);if((await n.listCollections({name:e}).toArray()).length===0)throw new Error(`Collection ${e} not found`);if((await n.listCollections({name:this.name}).toArray()).length>0)throw new Error(`Collection ${this.name} already exists`);await n.collection(e).rename(this.name,o);}};var yt=z$1.string.bind(z$1),bt=z$1.number.bind(z$1),Et=z$1.date.bind(z$1),Ct=z$1.boolean.bind(z$1),xt=z$1.array.bind(z$1),St=z$1.object.bind(z$1),Rt=z$1.enum.bind(z$1),a={string:yt,number:bt,date:Et,boolean:Ct,array:xt,object:St,enum:Rt,objectId(){return z$1.instanceof(ObjectId)},userId(){return z$1.instanceof(ObjectId)},ref(t){return z$1.instanceof(ObjectId)},union:z$1.union.bind(z$1),infer(t){return {}}};var v=new f("_modelenceSessions",{schema:{authToken:a.string(),createdAt:a.date(),expiresAt:a.date(),userId:a.userId().nullable()},indexes:[{key:{authToken:1},unique:true},{key:{expiresAt:1}}]});async function xe(t){let e=t?await v.findOne({authToken:t}):null;return e?{authToken:String(e.authToken),expiresAt:new Date(e.expiresAt),userId:e.userId??null}:await Z()}async function Se(t,e){await v.updateOne({authToken:t},{$set:{userId:e}});}async function Re(t){await v.updateOne({authToken:t},{$set:{userId:null}});}async function Z(t=null){let e=randomBytes(32).toString("base64url"),o=Date.now(),n=new Date(o+a$1.days(7));return await v.insertOne({authToken:e,createdAt:new Date(o),expiresAt:n,userId:t}),{authToken:e,expiresAt:n,userId:t}}async function Mt(t){let e=Date.now(),o=new Date(e+a$1.days(7));await v.updateOne({authToken:t.authToken},{$set:{lastActiveDate:new Date(e),expiresAt:o}});}var De=new g("_system.session",{stores:[v],mutations:{init:async function(t,{session:e,user:o}){return {session:e,user:o,configs:b$1()}},heartbeat:async function(t,{session:e}){e&&await Mt(e);}}});var d=new f("_modelenceUsers",{schema:{handle:a.string(),emails:a.array(a.object({address:a.string(),verified:a.boolean()})).optional(),createdAt:a.date(),authMethods:a.object({password:a.object({hash:a.string()}).optional(),google:a.object({id:a.string()}).optional()})},indexes:[{key:{handle:1},unique:true,collation:{locale:"en",strength:2}}]}),A=new f("_modelenceDisposableEmailDomains",{schema:{domain:a.string(),addedAt:a.date()},indexes:[{key:{domain:1},unique:true}]}),_=new f("_modelenceEmailVerificationTokens",{schema:{userId:a.objectId(),email:a.string().optional(),token:a.string(),createdAt:a.date(),expiresAt:a.date()},indexes:[{key:{token:1},unique:true},{key:{expiresAt:1},expireAfterSeconds:0}]}),x=new f("_modelenceResetPasswordTokens",{schema:{userId:a.objectId(),token:a.string(),createdAt:a.date(),expiresAt:a.date()},indexes:[{key:{token:1},unique:true},{key:{expiresAt:1},expireAfterSeconds:0}]});async function Me(t){let e=t.toLowerCase().trim().split("@");if(e.length!==2)return  false;let o=e[1];return !!await A.findOne({domain:o})}var ve={interval:a$1.days(1),async handler(){let t=await fetch("https://disposable.github.io/disposable-email-domains/domains.txt");if(!t.ok)throw new Error(`HTTP ${t.status}: ${t.statusText}`);let o=(await t.text()).split(`
-`).map(r=>r.trim().toLowerCase()).filter(r=>r.length>0),n=new Date,i=500;for(let r=0;r<o.length;r+=i){let s=o.slice(r,r+i);try{await A.insertMany(s.map(c=>({domain:c,addedAt:n})));}catch(c){c.name==="MongoBulkWriteError"&&c.result?.nInserted;}}}};var Q=Object.freeze({});function _e(t){Q=Object.freeze(Object.assign({},Q,t));}function h(){return Q}function vt(){return typeof window!="object"}function S(){if(!vt())throw new Error("This function can only be called on the server")}function q(t){return t.replace(/<[^>]*>/g,"").replace(/\s+/g," ").trim()}function Te({name:t,email:e,verificationUrl:o}){return `
-    <p>Hi${t?` ${t}`:""},</p>
-    <p>Please verify your email address ${e} by clicking the link below:</p>
+import {a as a$2}from'./chunk-DN5SVAO2.js';import {f,g,e,l,m,n,o,i,h as h$1,d,k,p,a as a$3,t,s,q as q$1,r,j as j$2}from'./chunk-5TLHWYXF.js';export{e as Module,f as Store,l as dbUsers,g as schema}from'./chunk-5TLHWYXF.js';import {a}from'./chunk-R7MPLJMA.js';import {e as e$1,d as d$1,c,f as f$1,g as g$1,a as a$1,h as h$2,j as j$1,k as k$1}from'./chunk-2QLNYYBR.js';export{a as getConfig}from'./chunk-2QLNYYBR.js';import ct from'dotenv';import Qt from'fs/promises';import xt from'os';import ee from'path';import ft from'bcrypt';import E,{z as z$1}from'zod';import {randomBytes}from'crypto';import {MongoClient}from'mongodb';export{ObjectId}from'mongodb';import {createServer,defineConfig,loadConfigFromFile}from'vite';import Pt from'@vitejs/plugin-react';import $t from'fs';import re,{Router}from'express';import oe from'passport';import {Strategy}from'passport-google-oauth20';import Gt from'cookie-parser';import zt from'http';async function Ce(e){let t=e.toLowerCase().trim().split("@");if(t.length!==2)return  false;let o=t[1];return !!await m.findOne({domain:o})}var ve={interval:a.days(1),async handler(){let e=await fetch("https://disposable.github.io/disposable-email-domains/domains.txt");if(!e.ok)throw new Error(`HTTP ${e.status}: ${e.statusText}`);let o=(await e.text()).split(`
+`).map(i=>i.trim().toLowerCase()).filter(i=>i.length>0),r=new Date,n=500;for(let i=0;i<o.length;i+=n){let s=o.slice(i,i+n);try{await m.insertMany(s.map(a=>({domain:a,addedAt:r})));}catch(a){a.name==="MongoBulkWriteError"&&a.result?.nInserted;}}}};var z=Object.freeze({});function Me(e){z=Object.freeze(Object.assign({},z,e));}function u(){return z}function dt(){return typeof window!="object"}function v(){if(!dt())throw new Error("This function can only be called on the server")}function U(e){return e.replace(/<[^>]*>/g,"").replace(/\s+/g," ").trim()}function xe({name:e,email:t,verificationUrl:o}){return `
+    <p>Hi${e?` ${e}`:""},</p>
+    <p>Please verify your email address ${t} by clicking the link below:</p>
     <p><a href="${o}">${o}</a></p>
     <p>If you did not request this, please ignore this email.</p>
-  `}async function Oe(t){let e=process.env.MODELENCE_SITE_URL,o=h().emailVerifiedRedirectUrl||e||"/";try{let n=z$1.string().parse(t.query.token),i=await _.findOne({token:n,expiresAt:{$gt:new Date}});if(!i)throw new Error("Invalid or expired verification token");if(!await d.findOne({_id:i.userId}))throw new Error("User not found");let s=i.email;if(!s)throw new Error("Email not found in token");if((await d.updateOne({_id:i.userId,"emails.address":s,"emails.verified":{$ne:!0}},{$set:{"emails.$.verified":!0}})).matchedCount===0)throw await d.findOne({_id:i.userId,"emails.address":s})?new Error("Email is already verified"):new Error("Email address not found for this user");await _.deleteOne({_id:i._id});}catch(n){if(n instanceof Error)return console.error("Error verifying email:",n),{status:301,redirect:`${o}?status=error&message=${encodeURIComponent(n.message)}`}}return {status:301,redirect:`${o}?status=verified`}}async function B({userId:t,email:e,baseUrl:o=process.env.MODELENCE_SITE_URL}){if(h().provider){let n=h().provider,i=randomBytes(32).toString("hex"),r=new Date(Date.now()+a$1.hours(24));await _.insertOne({userId:t,email:e,token:i,createdAt:new Date,expiresAt:r});let s=`${o}/api/_internal/auth/verify-email?token=${i}`,u=(h()?.verification?.template||Te)({name:"",email:e,verificationUrl:s}),l=q(u);await n?.sendEmail({to:e,from:h()?.from||"noreply@modelence.com",subject:h()?.verification?.subject||"Verify your email address",text:l,html:u});}}function z(t){return z$1.string().min(8,{message:"Password must contain at least 8 characters"}).parse(t)}function T(t){return z$1.string().email({message:"Invalid email address"}).parse(t)}async function Ae(t,{user:e,session:o,connectionInfo:n}){if(!o)throw new Error("Session is not initialized");let i=n?.ip;i&&await R({bucket:"signin",type:"ip",value:i});let r=T(t.email),s=z$1.string().parse(t.password),c=await d.findOne({"emails.address":r},{collation:{locale:"en",strength:2}}),u=c?.authMethods?.password?.hash;if(!u)throw ke();if(!c.emails?.find(w=>w.address===r)?.verified&&h()?.provider){if(i)try{await R({bucket:"verification",type:"user",value:c._id.toString()});}catch{throw new Error("Your email address hasn't been verified yet. Please use the verification email we've send earlier to your inbox.")}throw await B({userId:c?._id,email:r,baseUrl:n?.baseUrl}),new Error("Your email address hasn't been verified yet. We've sent a new verification email to your inbox.")}if(!await Ot.compare(s,u))throw ke();return await Se(o.authToken,c._id),{user:{id:c._id,handle:c.handle}}}async function Pe(t,{user:e,session:o}){if(!o)throw new Error("Session is not initialized");await Re(o.authToken);}function ke(){return new Error("Incorrect email/password combination")}async function Le(t,{user:e}){if(!e)throw new Error("Not authenticated");let o=await d.requireById(e.id);return {handle:o.handle,emails:o.emails,authMethods:Object.keys(o.authMethods||{})}}var P=new f("_modelenceRateLimits",{schema:{bucket:a.string(),type:a.enum(["ip","user"]),value:a.string(),windowMs:a.number(),windowStart:a.date(),windowCount:a.number(),prevWindowCount:a.number(),expiresAt:a.date()},indexes:[{key:{bucket:1,type:1,value:1,windowMs:1},unique:true},{key:{expiresAt:1},expireAfterSeconds:0}]});var Y=[];function je(t){if(Y.length>0)throw new Error("Duplicate call to initRateLimits - already initialized");Y=t;}async function R(t){let{bucket:e,type:o,value:n}=t,i=Y.filter(r=>r.bucket===e&&r.type===o);for(let r of i)await kt(r,n);}async function kt(t,e,o){let n=()=>new d$1(`Rate limit exceeded for ${t.bucket}`),i=await P.findOne({bucket:t.bucket,type:t.type,value:e,windowMs:t.window}),r=Date.now(),s=Math.floor(r/t.window)*t.window,{count:c,modifier:u}=i?At(i,s,r):{count:0,modifier:{$setOnInsert:{windowStart:new Date(s),windowCount:1,prevWindowCount:0,expiresAt:new Date(s+t.window+t.window)}}};if(c>=t.limit)throw n();await P.upsertOne({bucket:t.bucket,type:t.type,value:e,windowMs:t.window},u);}function At(t,e,o){let n=e-t.windowMs;if(t.windowStart.getTime()===e){let i=t.windowCount,r=t.prevWindowCount,s=1-(o-e)/t.windowMs;return {count:Math.round(i+r*s),modifier:{$inc:{windowCount:1},$setOnInsert:{windowStart:new Date(e),prevWindowCount:0,expiresAt:new Date(e+t.windowMs+t.windowMs)}}}}if(t.windowStart.getTime()===n){let i=1-(o-e)/t.windowMs;return {count:Math.round(t.windowCount*i),modifier:{$set:{windowStart:new Date(e),windowCount:1,prevWindowCount:t.windowCount,expiresAt:new Date(e+t.windowMs+t.windowMs)}}}}return {count:0,modifier:{$set:{windowStart:new Date(e),windowCount:1,prevWindowCount:0,expiresAt:new Date(e+t.windowMs+t.windowMs)}}}}async function $e(t,{user:e,connectionInfo:o}){let n=T(t.email),i=z(t.password),r=o?.ip;if(r&&await R({bucket:"signupAttempt",type:"ip",value:r}),await Me(n))throw new Error("Please use a permanent email address");let s=await d.findOne({"emails.address":n},{collation:{locale:"en",strength:2}});if(s){let l=s.emails?.find(y=>y.address===n);throw new Error(`User with email already exists: ${l?.address}`)}r&&await R({bucket:"signup",type:"ip",value:r});let c=await Ot.hash(i,10),u=await d.insertOne({handle:n,emails:[{address:n,verified:false}],createdAt:new Date,authMethods:{password:{hash:c}}});return await B({userId:u?.insertedId,email:n,baseUrl:o?.baseUrl}),u.insertedId}function Ut(t,e){return e?e.startsWith("http://")||e.startsWith("https://")?e:`${t}${e.startsWith("/")?"":"/"}${e}`:t}function Nt({email:t,resetUrl:e}){return `
+  `}async function Re(e){let t=process.env.MODELENCE_SITE_URL,o=u().emailVerifiedRedirectUrl||t||"/";try{let r=z$1.string().parse(e.query.token),n$1=await n.findOne({token:r,expiresAt:{$gt:new Date}});if(!n$1)throw new Error("Invalid or expired verification token");if(!await l.findOne({_id:n$1.userId}))throw new Error("User not found");let s=n$1.email;if(!s)throw new Error("Email not found in token");if((await l.updateOne({_id:n$1.userId,"emails.address":s,"emails.verified":{$ne:!0}},{$set:{"emails.$.verified":!0}})).matchedCount===0)throw await l.findOne({_id:n$1.userId,"emails.address":s})?new Error("Email is already verified"):new Error("Email address not found for this user");await n.deleteOne({_id:n$1._id});}catch(r){if(r instanceof Error)return console.error("Error verifying email:",r),{status:301,redirect:`${o}?status=error&message=${encodeURIComponent(r.message)}`}}return {status:301,redirect:`${o}?status=verified`}}async function j({userId:e,email:t,baseUrl:o=process.env.MODELENCE_SITE_URL}){if(u().provider){let r=u().provider,n$1=randomBytes(32).toString("hex"),i=new Date(Date.now()+a.hours(24));await n.insertOne({userId:e,email:t,token:n$1,createdAt:new Date,expiresAt:i});let s=`${o}/api/_internal/auth/verify-email?token=${n$1}`,c=(u()?.verification?.template||xe)({name:"",email:t,verificationUrl:s}),f=U(c);await r?.sendEmail({to:t,from:u()?.from||"noreply@modelence.com",subject:u()?.verification?.subject||"Verify your email address",text:f,html:c});}}function J(e){return z$1.string().min(8,{message:"Password must contain at least 8 characters"}).parse(e)}function _(e){return z$1.string().email({message:"Invalid email address"}).parse(e)}async function De(e,{user:t,session:o,connectionInfo:r}){if(!o)throw new Error("Session is not initialized");let n=r?.ip;n&&await M({bucket:"signin",type:"ip",value:n});let i=_(e.email),s=z$1.string().parse(e.password),a=await l.findOne({"emails.address":i},{collation:{locale:"en",strength:2}}),c=a?.authMethods?.password?.hash;if(!c)throw _e();if(!a.emails?.find(l=>l.address===i)?.verified&&u()?.provider){if(n)try{await M({bucket:"verification",type:"user",value:a._id.toString()});}catch{throw new Error("Your email address hasn't been verified yet. Please use the verification email we've send earlier to your inbox.")}throw await j({userId:a?._id,email:i,baseUrl:r?.baseUrl}),new Error("Your email address hasn't been verified yet. We've sent a new verification email to your inbox.")}if(!await ft.compare(s,c))throw _e();return await h$1(o.authToken,a._id),{user:{id:a._id,handle:a.handle}}}async function Oe(e,{user:t,session:o}){if(!o)throw new Error("Session is not initialized");await i(o.authToken);}function _e(){return new Error("Incorrect email/password combination")}async function ke(e,{user:t}){if(!t)throw new Error("Not authenticated");let o=await l.requireById(t.id);return {handle:o.handle,emails:o.emails,authMethods:Object.keys(o.authMethods||{})}}var T=new f("_modelenceRateLimits",{schema:{bucket:g.string(),type:g.enum(["ip","user"]),value:g.string(),windowMs:g.number(),windowStart:g.date(),windowCount:g.number(),prevWindowCount:g.number(),expiresAt:g.date()},indexes:[{key:{bucket:1,type:1,value:1,windowMs:1},unique:true},{key:{expiresAt:1},expireAfterSeconds:0}]});var q=[];function Te(e){if(q.length>0)throw new Error("Duplicate call to initRateLimits - already initialized");q=e;}async function M(e){let{bucket:t,type:o,value:r}=e,n=q.filter(i=>i.bucket===t&&i.type===o);for(let i of n)await wt(i,r);}async function wt(e,t,o){let r=()=>new d(`Rate limit exceeded for ${e.bucket}`),n=await T.findOne({bucket:e.bucket,type:e.type,value:t,windowMs:e.window}),i=Date.now(),s=Math.floor(i/e.window)*e.window,{count:a,modifier:c}=n?ht(n,s,i):{count:0,modifier:{$setOnInsert:{windowStart:new Date(s),windowCount:1,prevWindowCount:0,expiresAt:new Date(s+e.window+e.window)}}};if(a>=e.limit)throw r();await T.upsertOne({bucket:e.bucket,type:e.type,value:t,windowMs:e.window},c);}function ht(e,t,o){let r=t-e.windowMs;if(e.windowStart.getTime()===t){let n=e.windowCount,i=e.prevWindowCount,s=1-(o-t)/e.windowMs;return {count:Math.round(n+i*s),modifier:{$inc:{windowCount:1},$setOnInsert:{windowStart:new Date(t),prevWindowCount:0,expiresAt:new Date(t+e.windowMs+e.windowMs)}}}}if(e.windowStart.getTime()===r){let n=1-(o-t)/e.windowMs;return {count:Math.round(e.windowCount*n),modifier:{$set:{windowStart:new Date(t),windowCount:1,prevWindowCount:e.windowCount,expiresAt:new Date(t+e.windowMs+e.windowMs)}}}}return {count:0,modifier:{$set:{windowStart:new Date(t),windowCount:1,prevWindowCount:0,expiresAt:new Date(t+e.windowMs+e.windowMs)}}}}async function Ae(e,{user:t,connectionInfo:o}){let r=_(e.email),n=J(e.password),i=o?.ip;if(i&&await M({bucket:"signupAttempt",type:"ip",value:i}),await Ce(r))throw new Error("Please use a permanent email address");let s=await l.findOne({"emails.address":r},{collation:{locale:"en",strength:2}});if(s){let f=s.emails?.find(g=>g.address===r);throw new Error(`User with email already exists: ${f?.address}`)}i&&await M({bucket:"signup",type:"ip",value:i});let a=await ft.hash(n,10),c=await l.insertOne({handle:r,emails:[{address:r,verified:false}],createdAt:new Date,authMethods:{password:{hash:a}}});return await j({userId:c?.insertedId,email:r,baseUrl:o?.baseUrl}),c.insertedId}function vt(e,t){return t?t.startsWith("http://")||t.startsWith("https://")?t:`${e}${t.startsWith("/")?"":"/"}${t}`:e}function Mt({email:e,resetUrl:t}){return `
     <p>Hi,</p>
-    <p>We received a request to reset your password for ${t}.</p>
+    <p>We received a request to reset your password for ${e}.</p>
     <p>Click the link below to reset your password:</p>
-    <p><a href="${e}">${e}</a></p>
+    <p><a href="${t}">${t}</a></p>
     <p>This link will expire in 1 hour.</p>
     <p>If you did not request this password reset, please ignore this email.</p>
-  `}var X={success:true,message:"If an account with that email exists, a password reset link has been sent"};async function Ue(t,{connectionInfo:e}){let o=T(t.email),n=await d.findOne({"emails.address":o},{collation:{locale:"en",strength:2}});if(!n||!n.authMethods?.password)return X;let i=h().provider;if(!i)throw new Error("Email provider is not configured");let r=randomBytes(32).toString("hex"),s=new Date(Date.now()+a$1.hours(1));await x.insertOne({userId:n._id,token:r,createdAt:new Date,expiresAt:s});let c=process.env.MODELENCE_SITE_URL||e?.baseUrl,l=`${Ut(c,h().passwordReset?.redirectUrl)}?token=${r}`,w=(h()?.passwordReset?.template||Nt)({email:o,resetUrl:l,name:""}),O=q(w);return await i.sendEmail({to:o,from:h()?.from||"noreply@modelence.com",subject:h()?.passwordReset?.subject||"Reset your password",text:O,html:w}),X}async function Ne(t,{}){let e=z$1.string().parse(t.token),o=z(t.password),n=await x.findOne({token:e});if(!n)throw new Error("Invalid or expired reset token");if(n.expiresAt<new Date)throw await x.deleteOne({token:e}),new Error("Reset token has expired");let i=await d.findOne({_id:n.userId});if(!i)throw new Error("User not found");let r=await Ot.hash(o,10);return await d.updateOne({_id:i._id},{$set:{"authMethods.password.hash":r}}),await x.deleteOne({token:e}),{success:true,message:"Password has been reset successfully"}}var Je=new g("_system.user",{stores:[d,A,_,x],queries:{getOwnProfile:Le},mutations:{signupWithPassword:$e,loginWithPassword:Ae,logout:Pe,sendResetPasswordToken:Ue,resetPassword:Ne},cronJobs:{updateDisposableEmailList:ve},rateLimits:[{bucket:"signup",type:"ip",window:a$1.minutes(15),limit:20},{bucket:"signup",type:"ip",window:a$1.days(1),limit:200},{bucket:"signupAttempt",type:"ip",window:a$1.minutes(15),limit:50},{bucket:"signupAttempt",type:"ip",window:a$1.days(1),limit:500},{bucket:"signin",type:"ip",window:a$1.minutes(15),limit:50},{bucket:"signin",type:"ip",window:a$1.days(1),limit:500},{bucket:"verification",type:"user",window:a$1.minutes(15),limit:3},{bucket:"verification",type:"user",window:a$1.days(1),limit:10}],configSchema:{"auth.email.enabled":{type:"boolean",isPublic:true,default:true},"auth.email.from":{type:"string",isPublic:false,default:""},"auth.email.verification":{type:"boolean",isPublic:true,default:false},"auth.google.enabled":{type:"boolean",isPublic:true,default:false},"auth.google.clientId":{type:"string",isPublic:false,default:""},"auth.google.clientSecret":{type:"secret",isPublic:false,default:""}},routes:[{path:"/api/_internal/auth/verify-email",handlers:{get:Oe}}]});async function qe({configSchema:t,cronJobsMetadata:e,stores:o}){let n=process.env.MODELENCE_CONTAINER_ID;if(!n)throw new Error("Unable to connect to Modelence Cloud: MODELENCE_CONTAINER_ID is not set");try{let i=Object.values(o).map(s=>({name:s.getName(),schema:s.getSchema(),collections:[s.getName()]})),r=await ee("/api/connect","POST",{hostname:Jt.hostname(),containerId:n,dataModels:i,configSchema:t,cronJobsMetadata:e});if(r.status==="error")throw new Error(r.error);return console.log("Successfully connected to Modelence Cloud"),r}catch(i){throw console.error("Unable to connect to Modelence Cloud:",i),i}}async function Be(){return await ee("/api/configs","GET")}async function ze(){return await ee("/api/sync","POST",{containerId:process.env.MODELENCE_CONTAINER_ID})}async function ee(t,e,o){let{MODELENCE_SERVICE_ENDPOINT:n,MODELENCE_SERVICE_TOKEN:i}=process.env;if(!n)throw new Error("Unable to connect to Modelence Cloud: MODELENCE_SERVICE_ENDPOINT is not set");let r=await fetch(`${n}${t}`,{method:e,headers:{Authorization:`Bearer ${i}`,...o?{"Content-Type":"application/json"}:{}},body:o?JSON.stringify(o):void 0});if(!r.ok){let s=await r.text();try{let c=JSON.parse(s);throw new Error(`Unable to connect to Modelence Cloud: HTTP status: ${r.status}, ${c?.error}`)}catch{throw new Error(`Unable to connect to Modelence Cloud: HTTP status: ${r.status}, ${s}`)}}return await r.json()}var te=false,qt=a$1.seconds(10);function Fe(){setInterval(async()=>{if(!te){te=true;try{await ze();}catch(t){console.error("Error syncing status",t);}try{await Bt();}catch(t){console.error("Error syncing config",t);}te=false;}},qt);}async function Bt(){let{configs:t}=await Be();c(t);}var zt=a$1.minutes(1),Ft=a$1.seconds(10),D={},oe,L=new f("_modelenceCronJobs",{schema:{alias:a.string(),lastStartDate:a.date().optional(),lock:a.object({containerId:a.string(),acquireDate:a.date()}).optional()},indexes:[{key:{alias:1},unique:true,background:true}]});function We(t,{description:e="",interval:o,timeout:n=zt,handler:i}){if(D[t])throw new Error(`Duplicate cron job declaration: '${t}' already exists`);if(oe)throw new Error(`Unable to add a cron job - cron jobs have already been initialized: [${t}]`);if(o<a$1.seconds(5))throw new Error(`Cron job interval should not be less than 5 second [${t}]`);if(n>a$1.days(1))throw new Error(`Cron job timeout should not be longer than 1 day [${t}]`);D[t]={alias:t,params:{description:e,interval:o,timeout:n},handler:i,state:{isRunning:false}};}async function He(){if(oe)throw new Error("Cron jobs already started");let t=Object.keys(D);if(t.length>0){let e={alias:{$in:t}},o=await L.findOne({...e,"lock.containerId":{$exists:true}});await Promise.all(t.map(r=>L.upsertOne({alias:r},{$set:{lock:{containerId:process.env.MODELENCE_CONTAINER_ID||"unknown",acquireDate:new Date}}}))),o&&await Vt(Ft);let n=await L.fetch(e),i=Date.now();n.forEach(r=>{let s=D[r.alias];s&&(s.state.scheduledRunTs=r.lastStartDate?r.lastStartDate.getTime()+s.params.interval:i);}),Object.values(D).forEach(r=>{r.state.scheduledRunTs||(r.state.scheduledRunTs=i);}),oe=setInterval(Wt,a$1.seconds(1));}}function Vt(t){return new Promise(e=>setTimeout(e,t))}async function Wt(){let t=Date.now();Object.values(D).forEach(async e=>{let{params:o,state:n}=e;if(n.isRunning){n.startTs&&n.startTs+o.timeout<t&&(n.isRunning=false);return}n.scheduledRunTs&&n.scheduledRunTs<=t&&await Ht(e);});}async function Ht(t){let{alias:e,params:o,handler:n,state:i}=t;i.isRunning=true,i.startTs=Date.now();let r=j$1("cron",`cron:${e}`);n().then(()=>{Ve(i,o),r.end("success");}).catch(s=>{Ve(i,o),k(s),r.end("error"),console.error(`Error in cron job '${e}':`,s);}),await L.updateOne({alias:e},{$set:{lastStartDate:new Date(i.startTs)}});}function Ve(t,e){t.scheduledRunTs=t.startTs?t.startTs+e.interval:Date.now(),t.startTs=void 0,t.isRunning=false;}function Ke(){return Object.values(D).map(({alias:t,params:e})=>({alias:t,description:e.description,interval:e.interval,timeout:e.timeout}))}var Ge=new g("_system.cron",{stores:[L]});var b=null;async function Ze(){if(b)return b;let t=j();if(!t)throw new Error("MongoDB URI is not set");b=new MongoClient(t,{maxPoolSize:20});try{return await b.connect(),await b.db("admin").command({ping:1}),console.log("Pinged your deployment. You successfully connected to MongoDB!"),b}catch(e){throw console.error(e),b=null,e}}function j(){let t=a$2("_system.mongodbUri");return t?String(t):void 0}function Qe(){return b}var ne={};function re(t,e){return S(),tt(t),F("query",t,e)}function Ye(t,e){return S(),tt(t),F("mutation",t,e)}function Xe(t,e){return S(),ot(t),F("query",t,e)}function et(t,e){return S(),ot(t),F("mutation",t,e)}function tt(t){if(t.toLowerCase().startsWith("_system."))throw new Error(`Method name cannot start with a reserved prefix: '_system.' (${t})`)}function ot(t){if(!t.toLowerCase().startsWith("_system."))throw new Error(`System method name must start with a prefix: '_system.' (${t})`)}function F(t,e,o){if(S(),ne[e])throw new Error(`Method with name '${e}' is already defined.`);let n=typeof o=="function"?o:o.handler,i=typeof o=="function"?[]:o.permissions??[];ne[e]={type:t,name:e,handler:n,permissions:i};}async function nt(t,e,o){S();let n=ne[t];if(!n)throw new Error(`Method with name '${t}' is not defined.`);let{type:i,handler:r}=n,s=j$1("method",`method:${t}`,{type:i,args:e}),c;try{Ce(o.roles,n.permissions),c=await r(e,o);}catch(u){throw s.end("error"),u}return s.end(),c}var V=new f("_modelenceMigrations",{schema:{version:a.number(),appliedAt:a.date()},indexes:[{key:{version:1},unique:true}]});async function rt(t){if(t.length===0)return;let e=t.map(({version:r})=>r),o=await V.fetch({version:{$in:e}}),n=new Set(o.map(({version:r})=>r)),i=t.filter(({version:r})=>!n.has(r));if(i.length!==0){console.log(`Running migrations (${i.length})...`);for(let{version:r,description:s,handler:c}of i)console.log(`Running migration v${r}: ${s}`),await V.insertOne({version:r,appliedAt:new Date}),await c(),console.log(`Migration v${r} complete`);}}var it=new g("_system.migration",{stores:[V]});var st=new g("_system.rateLimit",{stores:[P]});var se=class{async init(){this.config=await to(),this.isDev()&&(console.log("Starting Vite dev server..."),this.viteServer=await createServer({...defineConfig(this.config),server:{middlewareMode:true},root:"./src/client"}));}middlewares(){if(this.isDev())return this.viteServer?.middlewares??[];let e=[ce.static("./.modelence/build/client".replace(/\\/g,"/"))];return this.config?.publicDir&&e.push(ce.static(this.config.publicDir)),e}handler(e,o){if(this.isDev())try{o.sendFile("index.html",{root:"./src/client"});}catch(n){console.error("Error serving index.html:",n),o.status(500).send("Internal Server Error");}else o.sendFile("index.html",{root:"./.modelence/build/client".replace(/\\/g,"/")});}isDev(){return process.env.NODE_ENV!=="production"}};async function eo(){let t=process.cwd();try{return (await loadConfigFromFile({command:"serve",mode:"development"},void 0,t))?.config||{}}catch(e){return console.warn("Could not load vite config:",e),{}}}async function to(){let t=process.cwd(),e=await eo(),o=[".eslintrc.js",".eslintrc.json",".eslintrc","eslint.config.js",".eslintrc.yml",".eslintrc.yaml"].find(i=>Xt.existsSync(ie.join(t,i))),n=[Yt(),oo()];if(o){let i=(await import('vite-plugin-eslint')).default;n.push(i({failOnError:false,include:["src/**/*.js","src/**/*.jsx","src/**/*.ts","src/**/*.tsx"],cwd:t,overrideConfigFile:ie.resolve(t,o)}));}return {plugins:n,root:t,build:{outDir:".modelence/build/client".replace(/\\/g,"/"),emptyOutDir:true},server:{proxy:{"/api":"http://localhost:4000"},headers:{"Cache-Control":"no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0",Pragma:"no-cache",Expires:"0"},hmr:{port:0}},resolve:{alias:{"@":ie.resolve(t,"src").replace(/\\/g,"/")}},publicDir:e.publicDir}}function oo(){return {name:"modelence-asset-handler",async transform(t,e){if(/\.(png|jpe?g|gif|svg|mpwebm|ogg|mp3|wav|flac|aac)$/.test(e))return process.env.NODE_ENV==="development",t},async generateBundle(t,e){}}}var ct=new se;async function lt(t,e){let{authToken:o}=await Z(e);t.cookie("authToken",o,{httpOnly:true,secure:process.env.NODE_ENV==="production",sameSite:"strict"}),t.status(301),t.redirect("/");}async function io(t,e){let o=t.user,n=await d.findOne({"authMethods.google.id":o.id});if(n){await lt(e,n._id);return}let i=o.emails[0]&&o.emails[0]?.value;if(i||e.status(400).json({error:"Email address is required for Google authentication."}),await d.findOne({"emails.address":i},{collation:{locale:"en",strength:2}})){e.status(400).json({error:"User with this email already exists. Please log in instead."});return}let s=await d.insertOne({handle:i,emails:[{address:i,verified:true}],createdAt:new Date,authMethods:{google:{id:o.id}}});await lt(e,s.insertedId);}function so(){let t=Router(),e=!!a$2("_system.user.auth.google.enabled"),o=String(a$2("_system.user.auth.google.clientId")),n=String(a$2("_system.user.auth.google.clientSecret"));return !e||!o||!n||(ae.use(new Strategy({clientID:o,clientSecret:n,callbackURL:"/api/_internal/auth/google/callback",proxy:true},(i,r,s,c)=>c(null,s))),t.get("/api/_internal/auth/google",ae.authenticate("google",{scope:["profile","email"],session:false})),t.get("/api/_internal/auth/google/callback",ae.authenticate("google",{session:false}),io)),t}var mt=so;function dt(t){return async(e,o)=>{try{let n=await t({query:e.query,body:e.body,params:e.params,headers:e.headers,cookies:e.cookies,req:e});o.status(n.status||200),n.redirect&&o.redirect(n.redirect),n.headers&&Object.entries(n.headers).forEach(([i,r])=>{o.setHeader(i,r);}),o.send(n.data);}catch(n){n instanceof a$4?o.status(n.status).send(n.message):(console.error(`Error in route handler: ${e.path}`),console.error(n),o.status(500).send(String(n)));}}}async function ut(t){let e=await xe(t),o=e.userId?await d.findOne({_id:new ObjectId(e.userId)}):null,n=o?{id:o._id.toString(),handle:o.handle}:null,i=n?Ee():J();return {user:n,session:e,roles:i}}function uo(t,e){for(let o of e)for(let n of o.routes){let{path:i,handlers:r}=n;Object.entries(r).forEach(([s,c])=>{t[s](i,dt(c));});}}async function pt(t,{combinedModules:e}){let o=ce();o.use(ce.json()),o.use(ce.urlencoded({extended:true})),o.use(co()),o.use(ae.initialize()),o.use(mt()),o.post("/api/_internal/method/:methodName(*)",async(r,s)=>{let{methodName:c}=r.params,u=await po(r);try{let l=await nt(c,r.body.args,u);s.json({data:l,typeMap:a$3(l)});}catch(l){if(console.error(`Error in method ${c}:`,l),l instanceof a$4)s.status(l.status).send(l.message);else if(l instanceof Error&&l?.constructor?.name==="ZodError"&&"errors"in l){let w=l.flatten(),O=Object.entries(w.fieldErrors).map(([W,H])=>`${W}: ${(H??[]).join(", ")}`).join("; "),$=w.formErrors.join("; "),I=[O,$].filter(Boolean).join("; ");s.status(400).send(I);}else s.status(500).send(l instanceof Error?l.message:String(l));}}),uo(o,e),await t.init(),t.middlewares&&o.use(t.middlewares()),o.all("*",(r,s)=>t.handler(r,s)),process.on("unhandledRejection",(r,s)=>{console.error("Unhandled Promise Rejection:"),console.error(r instanceof Error?r.stack:r),console.error("Promise:",s);}),process.on("uncaughtException",r=>{console.error("Uncaught Exception:"),console.error(r.stack),console.trace("Full application stack:");});let n=lo.createServer(o),i=process.env.PORT||3e3;n.listen(i,()=>{h$1("Application started",{source:"app"}),console.log(`
-Application started on http://localhost:${i}
-`);});}async function po(t){let e=E.string().nullish().transform(r=>r??null).parse(t.cookies.authToken||t.body.authToken),o=E.object({screenWidth:E.number(),screenHeight:E.number(),windowWidth:E.number(),windowHeight:E.number(),pixelRatio:E.number(),orientation:E.string().nullable()}).parse(t.body.clientInfo),n={ip:fo(t),userAgent:t.get("user-agent"),acceptLanguage:t.get("accept-language"),referrer:t.get("referrer"),baseUrl:t.protocol+"://"+t.get("host")};if(!!j()){let{session:r,user:s,roles:c}=await ut(e);return {clientInfo:o,connectionInfo:n,session:r,user:s,roles:c}}return {clientInfo:o,connectionInfo:n,session:null,user:null,roles:J()}}function fo(t){let e=t.headers["x-forwarded-for"];if(e)return (Array.isArray(e)?e[0]:e.split(",")[0]).trim();let o=t.ip||t.socket?.remoteAddress;if(o)return o.startsWith("::ffff:")?o.substring(7):o}async function yo({modules:t=[],roles:e$1={},defaultRoles:o={},server:n=ct,migrations:i=[],email:r={}}){ft.config(),ft.config({path:".modelence.env"});let s=!!process.env.MODELENCE_SERVICE_ENDPOINT,c$1=process.env.MODELENCE_CRON_ENABLED==="true";To().then(()=>{}).catch(()=>{});let u=[Je,De,Ge,it,st],l=[...u,...t];e(),Eo(u),bo(t),be(e$1,o);let y=So(l);d$2(y);let w=Co(l);c$1&&Ro(l);let O=xo(l);if(je(O),s){let{configs:I,environmentId:W,appAlias:H,environmentAlias:ht,telemetry:gt}=await qe({configSchema:y,cronJobsMetadata:c$1?Ke():void 0,stores:w});c(I),f$1({environmentId:W,appAlias:H,environmentAlias:ht,telemetry:gt});}else c(_o(y));_e(r);let $=j();if($&&(await Ze(),Do(w)),c$1&&await rt(i),$)for(let I of w)I.createIndexes();s&&(await g$1(),Fe()),c$1&&He().catch(console.error),await pt(n,{combinedModules:l});}function bo(t){for(let e of t){for(let[o,n]of Object.entries(e.queries))re(`${e.name}.${o}`,n);for(let[o,n]of Object.entries(e.mutations))Ye(`${e.name}.${o}`,n);}}function Eo(t){for(let e of t){for(let[o,n]of Object.entries(e.queries))Xe(`${e.name}.${o}`,n);for(let[o,n]of Object.entries(e.mutations))et(`${e.name}.${o}`,n);}}function Co(t){return t.flatMap(e=>e.stores)}function xo(t){return t.flatMap(e=>e.rateLimits)}function So(t){let e={};for(let o of t)for(let[n,i]of Object.entries(o.configSchema)){let r=`${o.name}.${n}`;if(r in e)throw new Error(`Duplicate config schema key: ${r} (${o.name})`);e[r]=i;}return e}function Ro(t){for(let e of t)for(let[o,n]of Object.entries(e.cronJobs))We(`${e.name}.${o}`,n);}function Do(t){let e=Qe();if(!e)throw new Error("Failed to initialize stores: MongoDB client not initialized");for(let o of t)o.init(e);}var Mo={MONGODB_URI:"_system.mongodbUri",MODELENCE_AUTH_GOOGLE_ENABLED:"_system.user.auth.google.enabled",MODELENCE_AUTH_GOOGLE_CLIENT_ID:"_system.user.auth.google.clientId",MODELENCE_AUTH_GOOGLE_CLIENT_SECRET:"_system.user.auth.google.clientSecret",MODELENCE_EMAIL_RESEND_API_KEY:"_system.email.resend.apiKey",MODELENCE_EMAIL_AWS_SES_REGION:"_system.email.awsSes.region",MODELENCE_EMAIL_AWS_SES_ACCESS_KEY_ID:"_system.email.awsSes.accessKeyId",MODELENCE_EMAIL_AWS_SES_SECRET_ACCESS_KEY:"_system.email.awsSes.secretAccessKey",MODELENCE_EMAIL_SMTP_HOST:"_system.email.smtp.host",MODELENCE_EMAIL_SMTP_PORT:"_system.email.smtp.port",MODELENCE_EMAIL_SMTP_USER:"_system.email.smtp.user",MODELENCE_EMAIL_SMTP_PASS:"_system.email.smtp.pass",GOOGLE_AUTH_ENABLED:"_system.user.auth.google.enabled",GOOGLE_AUTH_CLIENT_ID:"_system.user.auth.google.clientId",GOOGLE_AUTH_CLIENT_SECRET:"_system.user.auth.google.clientSecret"};function vo(t,e){if(e==="number"){let o=Number(t);if(isNaN(o))throw new Error(`Invalid number value for config: ${t}`);return o}if(e==="boolean"){if(t.toLowerCase()==="true")return  true;if(t.toLowerCase()==="false")return  false;throw new Error(`Invalid boolean value for config: ${t}`)}return t}function _o(t){let e=[];for(let[o,n]of Object.entries(Mo)){let i=process.env[o],r=t[n];if(i){let s=r?.type??"string";e.push({key:n,type:s,value:vo(i,s)});}}return e}async function To(){if(process.env.MODELENCE_TRACKING_ENABLED!=="false"){let e=process.env.MODELENCE_SERVICE_ENDPOINT??"https://cloud.modelence.com",o=process.env.MODELENCE_ENVIRONMENT_ID,n=await Oo(),i=await import('./package-EJHFKB5T.js');await fetch(`${e}/api/track/app-start`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({projectName:n.name,version:i.default.version,localHostname:Jt.hostname(),environmentId:o})});}}async function Oo(){try{let t=ie.join(process.cwd(),"package.json"),e=await ho.readFile(t,"utf-8");return {name:JSON.parse(e).name||"unknown"}}catch{return {name:"unknown"}}}
-export{g as Module,f as Store,R as consumeRateLimit,re as createQuery,d as dbUsers,a as schema,yo as startApp};//# sourceMappingURL=server.js.map
+  `}var F={success:true,message:"If an account with that email exists, a password reset link has been sent"};async function Ie(e,{connectionInfo:t}){let o$1=_(e.email),r=await l.findOne({"emails.address":o$1},{collation:{locale:"en",strength:2}});if(!r||!r.authMethods?.password)return F;let n=u().provider;if(!n)throw new Error("Email provider is not configured");let i=randomBytes(32).toString("hex"),s=new Date(Date.now()+a.hours(1));await o.insertOne({userId:r._id,token:i,createdAt:new Date,expiresAt:s});let a$1=process.env.MODELENCE_SITE_URL||t?.baseUrl,f=`${vt(a$1,u().passwordReset?.redirectUrl)}?token=${i}`,l$1=(u()?.passwordReset?.template||Mt)({email:o$1,resetUrl:f,name:""}),R=U(l$1);return await n.sendEmail({to:o$1,from:u()?.from||"noreply@modelence.com",subject:u()?.passwordReset?.subject||"Reset your password",text:R,html:l$1}),F}async function Le(e,{}){let t=z$1.string().parse(e.token),o$1=J(e.password),r=await o.findOne({token:t});if(!r)throw new Error("Invalid or expired reset token");if(r.expiresAt<new Date)throw await o.deleteOne({token:t}),new Error("Reset token has expired");let n=await l.findOne({_id:r.userId});if(!n)throw new Error("User not found");let i=await ft.hash(o$1,10);return await l.updateOne({_id:n._id},{$set:{"authMethods.password.hash":i}}),await o.deleteOne({token:t}),{success:true,message:"Password has been reset successfully"}}var Ne=new e("_system.user",{stores:[l,m,n,o],queries:{getOwnProfile:ke},mutations:{signupWithPassword:Ae,loginWithPassword:De,logout:Oe,sendResetPasswordToken:Ie,resetPassword:Le},cronJobs:{updateDisposableEmailList:ve},rateLimits:[{bucket:"signup",type:"ip",window:a.minutes(15),limit:20},{bucket:"signup",type:"ip",window:a.days(1),limit:200},{bucket:"signupAttempt",type:"ip",window:a.minutes(15),limit:50},{bucket:"signupAttempt",type:"ip",window:a.days(1),limit:500},{bucket:"signin",type:"ip",window:a.minutes(15),limit:50},{bucket:"signin",type:"ip",window:a.days(1),limit:500},{bucket:"verification",type:"user",window:a.minutes(15),limit:3},{bucket:"verification",type:"user",window:a.days(1),limit:10}],configSchema:{"auth.email.enabled":{type:"boolean",isPublic:true,default:true},"auth.email.from":{type:"string",isPublic:false,default:""},"auth.email.verification":{type:"boolean",isPublic:true,default:false},"auth.google.enabled":{type:"boolean",isPublic:true,default:false},"auth.google.clientId":{type:"string",isPublic:false,default:""},"auth.google.clientSecret":{type:"secret",isPublic:false,default:""}},routes:[{path:"/api/_internal/auth/verify-email",handlers:{get:Re}}]});async function Pe({configSchema:e,cronJobsMetadata:t,stores:o}){let r=process.env.MODELENCE_CONTAINER_ID;if(!r)throw new Error("Unable to connect to Modelence Cloud: MODELENCE_CONTAINER_ID is not set");try{let n=Object.values(o).map(s=>({name:s.getName(),schema:s.getSchema(),collections:[s.getName()]})),i=await K("/api/connect","POST",{hostname:xt.hostname(),containerId:r,dataModels:n,configSchema:e,cronJobsMetadata:t});if(i.status==="error")throw new Error(i.error);return console.log("Successfully connected to Modelence Cloud"),i}catch(n){throw console.error("Unable to connect to Modelence Cloud:",n),n}}async function $e(){return await K("/api/configs","GET")}async function Ue(){return await K("/api/sync","POST",{containerId:process.env.MODELENCE_CONTAINER_ID})}async function K(e,t,o){let{MODELENCE_SERVICE_ENDPOINT:r,MODELENCE_SERVICE_TOKEN:n}=process.env;if(!r)throw new Error("Unable to connect to Modelence Cloud: MODELENCE_SERVICE_ENDPOINT is not set");let i=await fetch(`${r}${e}`,{method:t,headers:{Authorization:`Bearer ${n}`,...o?{"Content-Type":"application/json"}:{}},body:o?JSON.stringify(o):void 0});if(!i.ok){let s=await i.text();try{let a=JSON.parse(s);throw new Error(`Unable to connect to Modelence Cloud: HTTP status: ${i.status}, ${a?.error}`)}catch{throw new Error(`Unable to connect to Modelence Cloud: HTTP status: ${i.status}, ${s}`)}}return await i.json()}var Y=false,Rt=a.seconds(10);function je(){setInterval(async()=>{if(!Y){Y=true;try{await Ue();}catch(e){console.error("Error syncing status",e);}try{await St();}catch(e){console.error("Error syncing config",e);}Y=false;}},Rt);}async function St(){let{configs:e}=await $e();c(e);}var _t=a.minutes(1),Dt=a.seconds(10),x={},Q,A=new f("_modelenceCronJobs",{schema:{alias:g.string(),lastStartDate:g.date().optional(),lock:g.object({containerId:g.string(),acquireDate:g.date()}).optional()},indexes:[{key:{alias:1},unique:true,background:true}]});function Ve(e,{description:t="",interval:o,timeout:r=_t,handler:n}){if(x[e])throw new Error(`Duplicate cron job declaration: '${e}' already exists`);if(Q)throw new Error(`Unable to add a cron job - cron jobs have already been initialized: [${e}]`);if(o<a.seconds(5))throw new Error(`Cron job interval should not be less than 5 second [${e}]`);if(r>a.days(1))throw new Error(`Cron job timeout should not be longer than 1 day [${e}]`);x[e]={alias:e,params:{description:t,interval:o,timeout:r},handler:n,state:{isRunning:false}};}async function Be(){if(Q)throw new Error("Cron jobs already started");let e=Object.keys(x);if(e.length>0){let t={alias:{$in:e}},o=await A.findOne({...t,"lock.containerId":{$exists:true}});await Promise.all(e.map(i=>A.upsertOne({alias:i},{$set:{lock:{containerId:process.env.MODELENCE_CONTAINER_ID||"unknown",acquireDate:new Date}}}))),o&&await Ot(Dt);let r=await A.fetch(t),n=Date.now();r.forEach(i=>{let s=x[i.alias];s&&(s.state.scheduledRunTs=i.lastStartDate?i.lastStartDate.getTime()+s.params.interval:n);}),Object.values(x).forEach(i=>{i.state.scheduledRunTs||(i.state.scheduledRunTs=n);}),Q=setInterval(kt,a.seconds(1));}}function Ot(e){return new Promise(t=>setTimeout(t,e))}async function kt(){let e=Date.now();Object.values(x).forEach(async t=>{let{params:o,state:r}=t;if(r.isRunning){r.startTs&&r.startTs+o.timeout<e&&(r.isRunning=false);return}r.scheduledRunTs&&r.scheduledRunTs<=e&&await Tt(t);});}async function Tt(e){let{alias:t,params:o,handler:r,state:n}=e;n.isRunning=true,n.startTs=Date.now();let i=j$1("cron",`cron:${t}`);r().then(()=>{Je(n,o),i.end("success");}).catch(s=>{Je(n,o),k$1(s),i.end("error"),console.error(`Error in cron job '${t}':`,s);}),await A.updateOne({alias:t},{$set:{lastStartDate:new Date(n.startTs)}});}function Je(e,t){e.scheduledRunTs=e.startTs?e.startTs+t.interval:Date.now(),e.startTs=void 0,e.isRunning=false;}function He(){return Object.values(x).map(({alias:e,params:t})=>({alias:e,description:t.description,interval:t.interval,timeout:t.timeout}))}var We=new e("_system.cron",{stores:[A]});var h=null;async function Ge(){if(h)return h;let e=I();if(!e)throw new Error("MongoDB URI is not set");h=new MongoClient(e,{maxPoolSize:20});try{return await h.connect(),await h.db("admin").command({ping:1}),console.log("Pinged your deployment. You successfully connected to MongoDB!"),h}catch(t){throw console.error(t),h=null,t}}function I(){let e=a$1("_system.mongodbUri");return e?String(e):void 0}function ze(){return h}var Z={};function X(e,t){return v(),Ye(e),V("query",e,t)}function qe(e,t){return v(),Ye(e),V("mutation",e,t)}function Fe(e,t){return v(),Qe(e),V("query",e,t)}function Ke(e,t){return v(),Qe(e),V("mutation",e,t)}function Ye(e){if(e.toLowerCase().startsWith("_system."))throw new Error(`Method name cannot start with a reserved prefix: '_system.' (${e})`)}function Qe(e){if(!e.toLowerCase().startsWith("_system."))throw new Error(`System method name must start with a prefix: '_system.' (${e})`)}function V(e,t,o){if(v(),Z[t])throw new Error(`Method with name '${t}' is already defined.`);let r=typeof o=="function"?o:o.handler,n=typeof o=="function"?[]:o.permissions??[];Z[t]={type:e,name:t,handler:r,permissions:n};}async function Ze(e,t,o){v();let r$1=Z[e];if(!r$1)throw new Error(`Method with name '${e}' is not defined.`);let{type:n,handler:i}=r$1,s=j$1("method",`method:${e}`,{type:n,args:t}),a;try{r(o.roles,r$1.permissions),a=await i(t,o);}catch(c){throw s.end("error"),c}return s.end(),a}var B=new f("_modelenceMigrations",{schema:{version:g.number(),appliedAt:g.date()},indexes:[{key:{version:1},unique:true}]});async function Xe(e){if(e.length===0)return;let t=e.map(({version:i})=>i),o=await B.fetch({version:{$in:t}}),r=new Set(o.map(({version:i})=>i)),n=e.filter(({version:i})=>!r.has(i));if(n.length!==0){console.log(`Running migrations (${n.length})...`);for(let{version:i,description:s,handler:a}of n)console.log(`Running migration v${i}: ${s}`),await B.insertOne({version:i,appliedAt:new Date}),await a(),console.log(`Migration v${i} complete`);}}var et=new e("_system.migration",{stores:[B]});var tt=new e("_system.rateLimit",{stores:[T]});var te=class{async init(){this.config=await jt(),this.isDev()&&(console.log("Starting Vite dev server..."),this.viteServer=await createServer({...defineConfig(this.config),server:{middlewareMode:true},root:"./src/client"}));}middlewares(){if(this.isDev())return this.viteServer?.middlewares??[];let t=[re.static("./.modelence/build/client".replace(/\\/g,"/"))];return this.config?.publicDir&&t.push(re.static(this.config.publicDir)),t}handler(t,o){if(this.isDev())try{o.sendFile("index.html",{root:"./src/client"});}catch(r){console.error("Error serving index.html:",r),o.status(500).send("Internal Server Error");}else o.sendFile("index.html",{root:"./.modelence/build/client".replace(/\\/g,"/")});}isDev(){return process.env.NODE_ENV!=="production"}};async function Ut(){let e=process.cwd();try{return (await loadConfigFromFile({command:"serve",mode:"development"},void 0,e))?.config||{}}catch(t){return console.warn("Could not load vite config:",t),{}}}async function jt(){let e=process.cwd(),t=await Ut(),o=[".eslintrc.js",".eslintrc.json",".eslintrc","eslint.config.js",".eslintrc.yml",".eslintrc.yaml"].find(n=>$t.existsSync(ee.join(e,n))),r=[Pt(),Jt()];if(o){let n=(await import('vite-plugin-eslint')).default;r.push(n({failOnError:false,include:["src/**/*.js","src/**/*.jsx","src/**/*.ts","src/**/*.tsx"],cwd:e,overrideConfigFile:ee.resolve(e,o)}));}return {plugins:r,root:e,build:{outDir:".modelence/build/client".replace(/\\/g,"/"),emptyOutDir:true},server:{proxy:{"/api":"http://localhost:4000"},headers:{"Cache-Control":"no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0",Pragma:"no-cache",Expires:"0"},hmr:{port:0}},resolve:{alias:{"@":ee.resolve(e,"src").replace(/\\/g,"/")}},publicDir:t.publicDir}}function Jt(){return {name:"modelence-asset-handler",async transform(e,t){if(/\.(png|jpe?g|gif|svg|mpwebm|ogg|mp3|wav|flac|aac)$/.test(t))return process.env.NODE_ENV==="development",e},async generateBundle(e,t){}}}var rt=new te;async function nt(e,t){let{authToken:o}=await j$2(t);e.cookie("authToken",o,{httpOnly:true,secure:process.env.NODE_ENV==="production",sameSite:"strict"}),e.status(301),e.redirect("/");}async function Ht(e,t){let o=e.user,r=await l.findOne({"authMethods.google.id":o.id});if(r){await nt(t,r._id);return}let n=o.emails[0]&&o.emails[0]?.value;if(n||t.status(400).json({error:"Email address is required for Google authentication."}),await l.findOne({"emails.address":n},{collation:{locale:"en",strength:2}})){t.status(400).json({error:"User with this email already exists. Please log in instead."});return}let s=await l.insertOne({handle:n,emails:[{address:n,verified:true}],createdAt:new Date,authMethods:{google:{id:o.id}}});await nt(t,s.insertedId);}function Wt(){let e=Router(),t=!!a$1("_system.user.auth.google.enabled"),o=String(a$1("_system.user.auth.google.clientId")),r=String(a$1("_system.user.auth.google.clientSecret"));return !t||!o||!r||(oe.use(new Strategy({clientID:o,clientSecret:r,callbackURL:"/api/_internal/auth/google/callback",proxy:true},(n,i,s,a)=>a(null,s))),e.get("/api/_internal/auth/google",oe.authenticate("google",{scope:["profile","email"],session:false})),e.get("/api/_internal/auth/google/callback",oe.authenticate("google",{session:false}),Ht)),e}var it=Wt;function st(e){return async(t,o)=>{try{let r=await e({query:t.query,body:t.body,params:t.params,headers:t.headers,cookies:t.cookies,req:t});o.status(r.status||200),r.redirect&&o.redirect(r.redirect),r.headers&&Object.entries(r.headers).forEach(([n,i])=>{o.setHeader(n,i);}),o.send(r.data);}catch(r){r instanceof a$3?o.status(r.status).send(r.message):(console.error(`Error in route handler: ${t.path}`),console.error(r),o.status(500).send(String(r)));}}}function Ft(e,t){for(let o of t)for(let r of o.routes){let{path:n,handlers:i}=r;Object.entries(i).forEach(([s,a])=>{e[s](n,st(a));});}}async function at(e,{combinedModules:t$1,websockets:o,rooms:r}){let n=re();n.use(re.json()),n.use(re.urlencoded({extended:true})),n.use(Gt()),n.use(oe.initialize()),n.use(it()),n.post("/api/_internal/method/:methodName(*)",async(a,c)=>{let{methodName:f}=a.params,g=await Kt(a);try{let l=await Ze(f,a.body.args,g);c.json({data:l,typeMap:a$2(l)});}catch(l){if(console.error(`Error in method ${f}:`,l),l instanceof a$3)c.status(l.status).send(l.message);else if(l instanceof Error&&l?.constructor?.name==="ZodError"&&"errors"in l){let L=l.flatten(),H=Object.entries(L.fieldErrors).map(([W,G])=>`${W}: ${(G??[]).join(", ")}`).join("; "),N=L.formErrors.join("; "),D=[H,N].filter(Boolean).join("; ");c.status(400).send(D);}else c.status(500).send(l instanceof Error?l.message:String(l));}}),Ft(n,t$1),await e.init(),e.middlewares&&n.use(e.middlewares()),n.all("*",(a,c)=>e.handler(a,c)),process.on("unhandledRejection",(a,c)=>{console.error("Unhandled Promise Rejection:"),console.error(a instanceof Error?a.stack:a),console.error("Promise:",c);}),process.on("uncaughtException",a=>{console.error("Uncaught Exception:"),console.error(a.stack),console.trace("Full application stack:");});let i=zt.createServer(n);o?.enabled&&t(i,r);let s=process.env.PORT||3e3;i.listen(s,()=>{h$2("Application started",{source:"app"}),console.log(`
+Application started on http://localhost:${s}
+`);});}async function Kt(e){let t=E.string().nullish().transform(i=>i??null).parse(e.cookies.authToken||e.body.authToken),o=E.object({screenWidth:E.number(),screenHeight:E.number(),windowWidth:E.number(),windowHeight:E.number(),pixelRatio:E.number(),orientation:E.string().nullable()}).parse(e.body.clientInfo),r={ip:Yt(e),userAgent:e.get("user-agent"),acceptLanguage:e.get("accept-language"),referrer:e.get("referrer"),baseUrl:e.protocol+"://"+e.get("host")};if(!!I()){let{session:i,user:s$1,roles:a}=await s(t);return {clientInfo:o,connectionInfo:r,session:i,user:s$1,roles:a}}return {clientInfo:o,connectionInfo:r,session:null,user:null,roles:q$1()}}function Yt(e){let t=e.headers["x-forwarded-for"];if(t)return (Array.isArray(t)?t[0]:t.split(",")[0]).trim();let o=e.ip||e.socket?.remoteAddress;if(o)return o.startsWith("::ffff:")?o.substring(7):o}async function eo({modules:e=[],roles:t={},defaultRoles:o={},server:r=rt,migrations:n=[],email:i={},websockets:s={}}){ct.config(),ct.config({path:".modelence.env"});let a=!!process.env.MODELENCE_SERVICE_ENDPOINT,c$1=process.env.MODELENCE_CRON_ENABLED==="true";uo().then(()=>{}).catch(()=>{});let f=[Ne,k,We,et,tt],g=[...f,...e];e$1(),oo(f),to(e),p(t,o);let l=so(g);d$1(l);let R=ro(g),L=no(g);c$1&&ao(g);let H=io(g);if(Te(H),a){let{configs:D,environmentId:W,appAlias:G,environmentAlias:lt,telemetry:mt}=await Pe({configSchema:l,cronJobsMetadata:c$1?He():void 0,stores:R});c(D),f$1({environmentId:W,appAlias:G,environmentAlias:lt,telemetry:mt});}else c(po(l));Me(i);let N=I();if(N&&(await Ge(),co(R)),c$1&&await Xe(n),N)for(let D of R)D.createIndexes();a&&(await g$1(),je()),c$1&&Be().catch(console.error),await at(r,{combinedModules:g,websockets:s,rooms:L});}function to(e){for(let t of e){for(let[o,r]of Object.entries(t.queries))X(`${t.name}.${o}`,r);for(let[o,r]of Object.entries(t.mutations))qe(`${t.name}.${o}`,r);}}function oo(e){for(let t of e){for(let[o,r]of Object.entries(t.queries))Fe(`${t.name}.${o}`,r);for(let[o,r]of Object.entries(t.mutations))Ke(`${t.name}.${o}`,r);}}function ro(e){return e.flatMap(t=>t.stores)}function no(e){return e.flatMap(t=>t.rooms)}function io(e){return e.flatMap(t=>t.rateLimits)}function so(e){let t={};for(let o of e)for(let[r,n]of Object.entries(o.configSchema)){let i=`${o.name}.${r}`;if(i in t)throw new Error(`Duplicate config schema key: ${i} (${o.name})`);t[i]=n;}return t}function ao(e){for(let t of e)for(let[o,r]of Object.entries(t.cronJobs))Ve(`${t.name}.${o}`,r);}function co(e){let t=ze();if(!t)throw new Error("Failed to initialize stores: MongoDB client not initialized");for(let o of e)o.init(t);}var lo={MONGODB_URI:"_system.mongodbUri",MODELENCE_AUTH_GOOGLE_ENABLED:"_system.user.auth.google.enabled",MODELENCE_AUTH_GOOGLE_CLIENT_ID:"_system.user.auth.google.clientId",MODELENCE_AUTH_GOOGLE_CLIENT_SECRET:"_system.user.auth.google.clientSecret",MODELENCE_EMAIL_RESEND_API_KEY:"_system.email.resend.apiKey",MODELENCE_EMAIL_AWS_SES_REGION:"_system.email.awsSes.region",MODELENCE_EMAIL_AWS_SES_ACCESS_KEY_ID:"_system.email.awsSes.accessKeyId",MODELENCE_EMAIL_AWS_SES_SECRET_ACCESS_KEY:"_system.email.awsSes.secretAccessKey",MODELENCE_EMAIL_SMTP_HOST:"_system.email.smtp.host",MODELENCE_EMAIL_SMTP_PORT:"_system.email.smtp.port",MODELENCE_EMAIL_SMTP_USER:"_system.email.smtp.user",MODELENCE_EMAIL_SMTP_PASS:"_system.email.smtp.pass",GOOGLE_AUTH_ENABLED:"_system.user.auth.google.enabled",GOOGLE_AUTH_CLIENT_ID:"_system.user.auth.google.clientId",GOOGLE_AUTH_CLIENT_SECRET:"_system.user.auth.google.clientSecret"};function mo(e,t){if(t==="number"){let o=Number(e);if(isNaN(o))throw new Error(`Invalid number value for config: ${e}`);return o}if(t==="boolean"){if(e.toLowerCase()==="true")return  true;if(e.toLowerCase()==="false")return  false;throw new Error(`Invalid boolean value for config: ${e}`)}return e}function po(e){let t=[];for(let[o,r]of Object.entries(lo)){let n=process.env[o],i=e[r];if(n){let s=i?.type??"string";t.push({key:r,type:s,value:mo(n,s)});}}return t}async function uo(){if(process.env.MODELENCE_TRACKING_ENABLED!=="false"){let t=process.env.MODELENCE_SERVICE_ENDPOINT??"https://cloud.modelence.com",o=process.env.MODELENCE_ENVIRONMENT_ID,r=await fo(),n=await import('./package-ULFSXQ7D.js');await fetch(`${t}/api/track/app-start`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({projectName:r.name,version:n.default.version,localHostname:xt.hostname(),environmentId:o})});}}async function fo(){try{let e=ee.join(process.cwd(),"package.json"),t=await Qt.readFile(e,"utf-8");return {name:JSON.parse(t).name||"unknown"}}catch{return {name:"unknown"}}}
+export{M as consumeRateLimit,X as createQuery,eo as startApp};//# sourceMappingURL=server.js.map
 //# sourceMappingURL=server.js.map