nuxt-users 1.10.0 → 1.12.0

package/dist/runtime/constants.d.ts

@@ -1 +1,2 @@
 export declare const NO_AUTH_PATHS: string[];
+export declare const NO_AUTH_API_PATHS: string[];

package/dist/runtime/constants.js

@@ -1 +1,2 @@
-export const NO_AUTH_PATHS = ["/login", "/api/auth/login", "/api/auth/forgot-password"];
+export const NO_AUTH_PATHS = ["/login"];
+export const NO_AUTH_API_PATHS = ["/session", "/password/forgot", "/password/reset"];

package/dist/runtime/middleware/authorization.client.js

@@ -1,14 +1,19 @@
 import { defineNuxtRouteMiddleware, navigateTo, useRuntimeConfig } from "#app";
 import { useAuthentication } from "../composables/useAuthentication.js";
 import { hasPermission, isWhitelisted } from "../utils/permissions.js";
-import { NO_AUTH_PATHS } from "../constants.js";
+import { NO_AUTH_PATHS, NO_AUTH_API_PATHS } from "../constants.js";
 export default defineNuxtRouteMiddleware((to) => {
   const { public: { nuxtUsers: publicNuxtUsers } } = useRuntimeConfig();
   const publicOptions = publicNuxtUsers;
+  const base = publicOptions.apiBasePath || "/api/nuxt-users";
   if (NO_AUTH_PATHS.includes(to.path)) {
     console.log(`[Nuxt Users] client.middleware.auth.global: ${to.path}`);
     return;
   }
+  const openApiPaths = NO_AUTH_API_PATHS.map((path) => `${base}${path}`);
+  if (openApiPaths.includes(to.path)) {
+    return;
+  }
   if (isWhitelisted(to.path, publicOptions.auth.whitelist)) {
     console.log(`[Nuxt Users] client.middleware.auth.global: Whitelisted: ${to.path}`);
     return;

package/dist/runtime/server/api/nuxt-users/index.get.d.ts

@@ -0,0 +1,20 @@
+declare const _default: import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<{
+    users: {
+        id: number;
+        email: string;
+        name: string;
+        role: string;
+        created_at: string;
+        updated_at: string;
+        last_login_at: string | null;
+    }[];
+    pagination: {
+        page: number;
+        limit: number;
+        total: number;
+        totalPages: number;
+        hasNext: boolean;
+        hasPrev: boolean;
+    };
+}>>;
+export default _default;

package/dist/runtime/server/api/nuxt-users/index.get.js

@@ -0,0 +1,58 @@
+import { createError, defineEventHandler, getQuery } from "h3";
+import { useRuntimeConfig } from "#imports";
+import { useDb } from "../../utils/db.js";
+import { getLastLoginTime } from "../../utils/user.js";
+export default defineEventHandler(async (event) => {
+  const { nuxtUsers } = useRuntimeConfig();
+  const options = nuxtUsers;
+  const db = await useDb(options);
+  const usersTable = options.tables.users;
+  const query = getQuery(event);
+  const page = Number(query.page) || 1;
+  const limit = Number(query.limit) || 10;
+  const offset = (page - 1) * limit;
+  if (page < 1 || limit < 1 || limit > 100) {
+    throw createError({
+      statusCode: 400,
+      statusMessage: "Invalid pagination parameters. Page must be >= 1, limit must be between 1 and 100."
+    });
+  }
+  try {
+    const countResult = await db.sql`SELECT COUNT(*) as total FROM {${usersTable}}`;
+    const total = countResult.rows[0].total;
+    const usersResult = await db.sql`
+      SELECT id, email, name, role, created_at, updated_at 
+      FROM {${usersTable}} 
+      ORDER BY name ASC 
+      LIMIT ${limit} OFFSET ${offset}
+    `;
+    const users = await Promise.all(usersResult.rows.map(async (user) => {
+      const lastLoginTime = await getLastLoginTime(user.id, options);
+      return {
+        id: user.id,
+        email: user.email,
+        name: user.name,
+        role: user.role,
+        created_at: user.created_at instanceof Date ? user.created_at.toISOString() : user.created_at,
+        updated_at: user.updated_at instanceof Date ? user.updated_at.toISOString() : user.updated_at,
+        last_login_at: lastLoginTime
+      };
+    }));
+    return {
+      users,
+      pagination: {
+        page,
+        limit,
+        total,
+        totalPages: Math.ceil(total / limit),
+        hasNext: page * limit < total,
+        hasPrev: page > 1
+      }
+    };
+  } catch (error) {
+    throw createError({
+      statusCode: 500,
+      statusMessage: `Error fetching users: ${error instanceof Error ? error.message : String(error)}`
+    });
+  }
+});

package/dist/runtime/server/api/{auth/forgot-password.post.js → nuxt-users/password/forgot.post.js}

@@ -1,5 +1,5 @@
 import { defineEventHandler, readBody, createError } from "h3";
-import { sendPasswordResetLink } from "../../services/password.js";
+import { sendPasswordResetLink } from "../../../services/password.js";
 export default defineEventHandler(async (event) => {
   const body = await readBody(event);
   const { email } = body;

package/dist/runtime/server/api/{auth/update-password.post.js → nuxt-users/password/index.patch.js}

@@ -1,8 +1,8 @@
 import { createError, defineEventHandler, getCookie, readBody } from "h3";
 import bcrypt from "bcrypt";
 import { useRuntimeConfig } from "#imports";
-import { getCurrentUserFromToken, updateUserPassword } from "../../utils/index.js";
-import { validatePassword, getPasswordValidationOptions } from "../../../../utils.js";
+import { getCurrentUserFromToken, updateUserPassword } from "../../../utils/index.js";
+import { validatePassword, getPasswordValidationOptions } from "../../../../../utils.js";
 export default defineEventHandler(async (event) => {
   const { nuxtUsers } = useRuntimeConfig();
   const options = nuxtUsers;

package/dist/runtime/server/api/{auth/reset-password.post.js → nuxt-users/password/reset.post.js}

@@ -1,7 +1,7 @@
 import { defineEventHandler, readBody, createError, H3Error } from "h3";
-import { resetPassword } from "../../services/password.js";
+import { resetPassword } from "../../../services/password.js";
 import { useRuntimeConfig } from "#imports";
-import { validatePassword, getPasswordValidationOptions } from "../../../../utils.js";
+import { validatePassword, getPasswordValidationOptions } from "../../../../../utils.js";
 export default defineEventHandler(async (event) => {
   const body = await readBody(event);
   const { token, email, password, password_confirmation } = body;

package/dist/runtime/server/api/{auth/logout.get.js → nuxt-users/session/index.delete.js}

@@ -1,6 +1,6 @@
 import { defineEventHandler, getCookie, setCookie } from "h3";
 import { useRuntimeConfig } from "#imports";
-import { useDb } from "../../utils/index.js";
+import { useDb } from "../../../utils/index.js";
 export default defineEventHandler(async (event) => {
   const { nuxtUsers } = useRuntimeConfig();
   const options = nuxtUsers;

package/dist/runtime/server/api/{auth/login.post.d.ts → nuxt-users/session/index.post.d.ts}

@@ -6,6 +6,7 @@ declare const _default: import("h3").EventHandler<import("h3").EventHandlerReque
         role: string;
         created_at: string;
         updated_at: string;
+        last_login_at?: string;
     };
 }>>;
 export default _default;

package/dist/runtime/server/api/{auth/login.post.js → nuxt-users/session/index.post.js}

@@ -2,7 +2,7 @@ import { createError, defineEventHandler, readBody, setCookie } from "h3";
 import bcrypt from "bcrypt";
 import crypto from "node:crypto";
 import { useRuntimeConfig } from "#imports";
-import { useDb } from "../../utils/index.js";
+import { useDb } from "../../../utils/index.js";
 export default defineEventHandler(async (event) => {
   const body = await readBody(event);
   const { email, password } = body;

package/dist/runtime/server/middleware/authorization.server.js

@@ -1,17 +1,22 @@
-import { defineEventHandler, getCookie, sendRedirect } from "h3";
+import { defineEventHandler, getCookie, createError } from "h3";
 import { useRuntimeConfig } from "#imports";
 import { getCurrentUserFromToken } from "../utils/index.js";
 import { hasPermission, isWhitelisted } from "../../utils/permissions.js";
-import { NO_AUTH_PATHS } from "../../constants.js";
+import { NO_AUTH_PATHS, NO_AUTH_API_PATHS } from "../../constants.js";
 export default defineEventHandler(async (event) => {
   const { nuxtUsers } = useRuntimeConfig();
   const options = nuxtUsers;
+  const base = options.apiBasePath || "/api/nuxt-users";
   const isPageOrApiRoute = !event.path.includes(".") && (event.path === "/" || event.path.startsWith("/api/") || !event.path.startsWith("/_"));
   if (!isPageOrApiRoute) {
     return;
   }
   if (NO_AUTH_PATHS.includes(event.path)) {
-    console.log("[Nuxt Users] server.middleware.auth.global: /login");
+    console.log(`[Nuxt Users] server.middleware.auth.global: NO_AUTH_PATH: ${event.path}`);
+    return;
+  }
+  const openApiPaths = NO_AUTH_API_PATHS.map((path) => `${base}${path}`);
+  if (openApiPaths.includes(event.path)) {
     return;
   }
   if (isWhitelisted(event.path, options.auth.whitelist)) {
@@ -20,17 +25,32 @@ export default defineEventHandler(async (event) => {
   }
   const token = getCookie(event, "auth_token");
   if (!token) {
-    console.log(`[Nuxt Users] server.middleware.auth.global: ${event.path} No token found redirecting to login`);
-    return sendRedirect(event, "/login");
+    if (event.path.startsWith("/api/")) {
+      console.log(`[Nuxt Users] server.middleware.auth.global: ${event.path} No token found - API request rejected`);
+      throw createError({ statusCode: 401, statusMessage: "Unauthorized" });
+    } else {
+      console.log(`[Nuxt Users] server.middleware.auth.global: ${event.path} No token found - letting client handle page redirect`);
+      return;
+    }
   }
   const user = await getCurrentUserFromToken(token, options);
   if (!user) {
-    console.log(`[Nuxt Users] server.middleware.auth.global: ${event.path} No user found redirecting to login`);
-    return sendRedirect(event, "/login");
+    if (event.path.startsWith("/api/")) {
+      console.log(`[Nuxt Users] server.middleware.auth.global: ${event.path} Invalid token - API request rejected`);
+      throw createError({ statusCode: 401, statusMessage: "Unauthorized" });
+    } else {
+      console.log(`[Nuxt Users] server.middleware.auth.global: ${event.path} Invalid token - letting client handle page redirect`);
+      return;
+    }
   }
   if (!hasPermission(user.role, event.path, options.auth.permissions)) {
-    console.log(`[Nuxt Users] server.middleware.auth.global: ${event.path} User ${user.id} with role ${user.role} denied access`);
-    return sendRedirect(event, "/login");
+    if (event.path.startsWith("/api/")) {
+      console.log(`[Nuxt Users] server.middleware.auth.global: ${event.path} User ${user.id} with role ${user.role} denied access - API request rejected`);
+      throw createError({ statusCode: 403, statusMessage: "Forbidden" });
+    } else {
+      console.log(`[Nuxt Users] server.middleware.auth.global: ${event.path} User ${user.id} with role ${user.role} denied access - letting client handle page redirect`);
+      return;
+    }
   }
   console.log(`[Nuxt Users] server.middleware.auth.global: Authenticated request to ${event.path} for ${user.id} with role ${user.role}`);
   return;

package/dist/runtime/server/utils/user.js

@@ -69,21 +69,24 @@ export const findUserById = async (id, options, withPass = false) => {
 export const updateUser = async (id, userData, options) => {
   const db = await useDb(options);
   const usersTable = options.tables.users;
-  const currentUser = await findUserById(id, options, true);
+  const currentUser = await findUserById(id, options);
   if (!currentUser) {
     throw new Error("User not found.");
   }
   const fieldsToUpdate = { ...userData };
   delete fieldsToUpdate.id;
+  delete fieldsToUpdate.created_at;
+  delete fieldsToUpdate.updated_at;
+  delete fieldsToUpdate.last_login_at;
   delete fieldsToUpdate.password;
   if (Object.keys(fieldsToUpdate).length === 0) {
-    const { password, ...user } = currentUser;
-    return user;
+    return currentUser;
   }
-  for (const [key, value] of Object.entries(fieldsToUpdate)) {
+  const dirtyFields = Object.keys(fieldsToUpdate).filter((key) => currentUser[key] != fieldsToUpdate[key]);
+  for (const key of dirtyFields) {
     await db.sql`
       UPDATE {${usersTable}}
-      SET ${key} = ${value}, updated_at = CURRENT_TIMESTAMP
+      SET {${key}} = ${fieldsToUpdate[key]}, updated_at = CURRENT_TIMESTAMP
       WHERE id = ${id}
     `;
   }

package/dist/shared/{nuxt-users.CXezgQLO.d.mts → nuxt-users.B5ttEpIO.d.mts}

@@ -12,6 +12,11 @@ interface RuntimeModuleOptions {
         name: DatabaseType;
         options: DatabaseConfig;
     };
+    /**
+     * Base path for all module API endpoints
+     * @default '/api/nuxt-users'
+     */
+    apiBasePath?: string;
     tables?: {
         migrations?: string;
         users?: string;
@@ -49,7 +54,7 @@ interface RuntimeModuleOptions {
          * @default {}
          * @example {
          *   admin: ['*'], // admin can access everything
-         *   user: ['/profile', '/api/user/profile'],
+         *   user: ['/profile', '/api/nuxt-users/me'],
          *   moderator: ['/admin/*', '/api/admin/*']
          * }
          */
@@ -96,6 +101,7 @@ interface ModuleOptions {
         name: DatabaseType;
         options: DatabaseConfig;
     };
+    apiBasePath: string;
     tables: {
         migrations: string;
         users: string;
@@ -138,6 +144,7 @@ interface User {
     role: string;
     created_at: string;
     updated_at: string;
+    last_login_at?: string;
 }
 type UserWithoutPassword = Omit<User, 'password'>;
 interface PersonalAccessToken {

package/dist/shared/{nuxt-users.CXezgQLO.d.ts → nuxt-users.B5ttEpIO.d.ts}

@@ -12,6 +12,11 @@ interface RuntimeModuleOptions {
         name: DatabaseType;
         options: DatabaseConfig;
     };
+    /**
+     * Base path for all module API endpoints
+     * @default '/api/nuxt-users'
+     */
+    apiBasePath?: string;
     tables?: {
         migrations?: string;
         users?: string;
@@ -49,7 +54,7 @@ interface RuntimeModuleOptions {
          * @default {}
          * @example {
          *   admin: ['*'], // admin can access everything
-         *   user: ['/profile', '/api/user/profile'],
+         *   user: ['/profile', '/api/nuxt-users/me'],
          *   moderator: ['/admin/*', '/api/admin/*']
          * }
          */
@@ -96,6 +101,7 @@ interface ModuleOptions {
         name: DatabaseType;
         options: DatabaseConfig;
     };
+    apiBasePath: string;
     tables: {
         migrations: string;
         users: string;
@@ -138,6 +144,7 @@ interface User {
     role: string;
     created_at: string;
     updated_at: string;
+    last_login_at?: string;
 }
 type UserWithoutPassword = Omit<User, 'password'>;
 interface PersonalAccessToken {

package/dist/utils.d.mts

@@ -1,5 +1,4 @@
-export { L as LoginFormData, M as ModuleOptions, b as PasswordResetToken, P as PersonalAccessToken, U as User, a as UserWithoutPassword } from './shared/nuxt-users.CXezgQLO.mjs';
-export { findUserByEmail, getCurrentUserFromToken, getLastLoginTime } from '../dist/runtime/server/utils/user.js';
+export { L as LoginFormData, M as ModuleOptions, b as PasswordResetToken, P as PersonalAccessToken, U as User, a as UserWithoutPassword } from './shared/nuxt-users.B5ttEpIO.mjs';
 
 interface PasswordValidationResult {
     isValid: boolean;

package/dist/utils.d.ts

@@ -1,5 +1,4 @@
-export { L as LoginFormData, M as ModuleOptions, b as PasswordResetToken, P as PersonalAccessToken, U as User, a as UserWithoutPassword } from './shared/nuxt-users.CXezgQLO.js';
-export { findUserByEmail, getCurrentUserFromToken, getLastLoginTime } from '../dist/runtime/server/utils/user.js';
+export { L as LoginFormData, M as ModuleOptions, b as PasswordResetToken, P as PersonalAccessToken, U as User, a as UserWithoutPassword } from './shared/nuxt-users.B5ttEpIO.js';
 
 interface PasswordValidationResult {
     isValid: boolean;

package/dist/utils.mjs

@@ -1,2 +1,162 @@
-export { a as getPasswordStrengthColor, b as getPasswordStrengthText, g as getPasswordValidationOptions, v as validatePassword } from './shared/nuxt-users.BnOQs2LI.mjs';
-export { findUserByEmail, getCurrentUserFromToken, getLastLoginTime } from '../dist/runtime/server/utils/user.js';
+const DEFAULT_OPTIONS = {
+  minLength: 8,
+  requireUppercase: true,
+  requireLowercase: true,
+  requireNumbers: true,
+  requireSpecialChars: true,
+  preventCommonPasswords: true
+};
+const getPasswordValidationOptions = (moduleOptions) => {
+  if (!moduleOptions?.passwordValidation) {
+    return DEFAULT_OPTIONS;
+  }
+  return {
+    ...DEFAULT_OPTIONS,
+    ...moduleOptions.passwordValidation
+  };
+};
+const COMMON_PASSWORDS = [
+  "password",
+  "123456",
+  "123456789",
+  "qwerty",
+  "abc123",
+  "password123",
+  "admin",
+  "letmein",
+  "welcome",
+  "monkey",
+  "dragon",
+  "master",
+  "hello",
+  "freedom",
+  "whatever",
+  "qazwsx",
+  "trustno1",
+  "jordan",
+  "harley",
+  "ranger",
+  "buster",
+  "thomas",
+  "tigger",
+  "robert",
+  "soccer",
+  "batman",
+  "test",
+  "pass",
+  "user",
+  "guest",
+  "login",
+  "secret",
+  "god",
+  "love",
+  "sex",
+  "money",
+  "password1",
+  "12345678",
+  "qwerty123",
+  "admin123",
+  "password!",
+  "password1!",
+  "password123",
+  "password123!"
+];
+const validatePassword = (password, options = {}) => {
+  const config = { ...DEFAULT_OPTIONS, ...options };
+  const errors = [];
+  const hints = [];
+  let score = 0;
+  if (password.length < config.minLength) {
+    errors.push(`Password must be at least ${config.minLength} characters long`);
+    hints.push(`Use at least ${config.minLength} characters`);
+  } else {
+    score += 20;
+    if (password.length < 12) {
+      hints.push("Use 12 or more characters for extra security");
+    }
+  }
+  if (config.requireUppercase && !/[A-Z]/.test(password)) {
+    errors.push("Password must contain at least one uppercase letter");
+    hints.push("Add an uppercase letter (A-Z)");
+  } else if (/[A-Z]/.test(password)) {
+    score += 15;
+  }
+  if (config.requireLowercase && !/[a-z]/.test(password)) {
+    errors.push("Password must contain at least one lowercase letter");
+    hints.push("Add a lowercase letter (a-z)");
+  } else if (/[a-z]/.test(password)) {
+    score += 15;
+  }
+  if (config.requireNumbers && !/\d/.test(password)) {
+    errors.push("Password must contain at least one number");
+    hints.push("Add a number (0-9)");
+  } else if (/\d/.test(password)) {
+    score += 15;
+  }
+  if (config.requireSpecialChars && !/[!@#$%^&*()_+\-=[\]{};':"\\|,.<>/?]/.test(password)) {
+    errors.push("Password must contain at least one special character");
+    hints.push("Add a special character (e.g. !@#$%)");
+  } else if (/[!@#$%^&*()_+\-=[\]{};':"\\|,.<>/?]/.test(password)) {
+    score += 15;
+  }
+  if (config.preventCommonPasswords && COMMON_PASSWORDS.includes(password.toLowerCase())) {
+    errors.push("Password is too common. Please choose a more unique password");
+    hints.push("Avoid common passwords or names");
+  }
+  if (password.length >= 12) {
+    score += 10;
+  } else if (password.length >= 10) {
+    score += 5;
+  }
+  const hasUppercase = /[A-Z]/.test(password);
+  const hasLowercase = /[a-z]/.test(password);
+  const hasNumbers = /\d/.test(password);
+  const hasSpecial = /[!@#$%^&*()_+\-=[\]{};':"\\|,.<>/?]/.test(password);
+  const complexityTypes = [hasUppercase, hasLowercase, hasNumbers, hasSpecial].filter(Boolean).length;
+  if (complexityTypes >= 4) {
+    score += 10;
+  } else if (complexityTypes >= 3) {
+    score += 5;
+    hints.push("Use a mix of uppercase, lowercase, numbers, and special characters");
+  }
+  let strength = "weak";
+  if (score >= 80) {
+    strength = "strong";
+  } else if (score >= 60) {
+    strength = "medium";
+  }
+  return {
+    isValid: errors.length === 0,
+    errors,
+    strength,
+    score: Math.min(score, 100),
+    hints: Array.from(new Set(hints))
+    // deduplicate
+  };
+};
+const getPasswordStrengthColor = (strength) => {
+  switch (strength) {
+    case "weak":
+      return "#dc3545";
+    case "medium":
+      return "#ffc107";
+    case "strong":
+      return "#28a745";
+    default:
+      return "#6c757d";
+  }
+};
+const getPasswordStrengthText = (strength) => {
+  switch (strength) {
+    case "weak":
+      return "Weak";
+    case "medium":
+      return "Medium";
+    case "strong":
+      return "Strong";
+    default:
+      return "Unknown";
+  }
+};
+
+export { getPasswordStrengthColor, getPasswordStrengthText, getPasswordValidationOptions, validatePassword };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nuxt-users",
-  "version": "1.10.0",
+  "version": "1.12.0",
   "description": "A comprehensive user management module for Nuxt 3 and Nuxt 4 applications with authentication, authorization, database support, and CLI tools",
   "keywords": [
     "nuxt",
@@ -111,7 +111,7 @@
     "@nuxt/devtools": "^2.6.2",
     "@nuxt/eslint-config": "^1.5.2",
     "@nuxt/kit": "^3.17.6",
-    "@nuxt/module-builder": "^1.0.1",
+    "@nuxt/module-builder": "^1.0.2",
     "@nuxt/schema": "^3.17.6",
     "@nuxt/test-utils": "^3.19.2",
     "@types/bcrypt": "^6.0.0",

package/dist/runtime/assets/colors.css

@@ -1 +0,0 @@
-:root{--color-primary:#60a5fa;--color-primary-dark:#3b82f6;--color-primary-light:#93c5fd;--color-secondary:#10b981;--color-secondary-dark:#059669;--color-secondary-light:#34d399;--color-white:#000;--color-black:#fff;--color-gray-50:#111827;--color-gray-100:#1f2937;--color-gray-200:#374151;--color-gray-300:#4b5563;--color-gray-400:#6b7280;--color-gray-500:#9ca3af;--color-gray-600:#d1d5db;--color-gray-700:#e5e7eb;--color-gray-800:#f3f4f6;--color-gray-900:#f9fafb;--color-success:#10b981;--color-success-light:#064e3b;--color-warning:#fbbf24;--color-warning-light:#451a03;--color-warning-text:#fef3c7;--color-error:#ef4444;--color-error-light:#450a0a;--color-error-border:#7f1d1d;--color-error-alt:#f87171;--color-border:#374151;--color-border-light:#4b5563;--color-border-dark:#6b7280;--color-bg-primary:#111827;--color-bg-secondary:#1f2937;--color-bg-tertiary:#374151}@media (prefers-color-scheme:light){.light,:root{--color-primary:#3b82f6;--color-primary-dark:#2563eb;--color-primary-light:#60a5fa;--color-secondary:#059669;--color-secondary-dark:#047857;--color-secondary-light:#10b981;--color-white:#fff;--color-black:#000;--color-gray-50:#f9fafb;--color-gray-100:#f3f4f6;--color-gray-200:#e5e7eb;--color-gray-300:#d1d5db;--color-gray-400:#9ca3af;--color-gray-500:#6b7280;--color-gray-600:#4b5563;--color-gray-700:#374151;--color-gray-800:#1f2937;--color-gray-900:#111827;--color-success:#059669;--color-success-light:#f0fdf4;--color-warning:#f59e0b;--color-warning-light:#fef3c7;--color-warning-text:#92400e;--color-error:#dc2626;--color-error-light:#fef2f2;--color-error-border:#fecaca;--color-error-alt:#db5050;--color-border:#e5e7eb;--color-border-light:#d1d5db;--color-border-dark:#ccc;--color-bg-primary:#fff;--color-bg-secondary:#f9fafb;--color-bg-tertiary:#f3f4f6}}