opacacms 0.1.13 → 0.1.15

package/dist/{chunk-0d9aqz6z.js → chunk-5ftxp8m2.js}

@@ -736,9 +736,9 @@ function createGlobalHandlers(config, globalConfig, getAuth) {
 }
 
 // src/server/router.ts
-import { Hono as Hono3 } from "hono";
+import { Hono as Hono4 } from "hono";
 
-// src/server/admin-router.ts
+// src/server/routers/admin.ts
 import { Hono } from "hono";
 
 // src/server/middlewares/admin.ts
@@ -759,7 +759,7 @@ var adminMiddleware = async (c, next) => {
   return c.json({ message: "Forbidden" }, 403);
 };
 
-// src/server/admin-router.ts
+// src/server/routers/admin.ts
 function createAdminRouter(config, state) {
   const adminRouter = new Hono;
   const adminHandlers = createAdminHandlers(config, () => state.auth);
@@ -771,8 +771,259 @@ function createAdminRouter(config, state) {
   return adminRouter;
 }
 
-// src/server/collection-router.ts
+// src/server/routers/auth.ts
+import { Hono as Hono2 } from "hono";
+function createAuthRouter(config, state) {
+  const authRouter = new Hono2;
+  authRouter.all("/*", async (c) => {
+    if (!state.auth) {
+      return c.json({ message: "Auth not initialized" }, 503);
+    }
+    return await state.auth.handler(c.req.raw);
+  });
+  return authRouter;
+}
+
+// src/server/routers/collections.ts
 init_system_schema();
+import { Hono as Hono3 } from "hono";
+
+// src/server/assets.ts
+function createAssetsHandlers(config) {
+  return {
+    async upload(c) {
+      const user = c.get("user");
+      if (!user)
+        return c.json({ error: "Unauthorized" }, 401);
+      const bucket = c.req.query("bucket") || "default";
+      if (!config.storages)
+        return c.json({ error: "Storage not configured" }, 500);
+      const storageAdapter = config.storages[bucket];
+      if (!storageAdapter) {
+        return c.json({ error: `Bucket '${bucket}' not found` }, 404);
+      }
+      try {
+        try {
+          if (config.db.name === "sqlite" || config.db.name === "d1") {
+            const tableInfo = await config.db.unsafe(`PRAGMA table_info(_opaca_assets)`);
+            const columns = tableInfo.map((c2) => c2.name);
+            if (!columns.includes("folder"))
+              await config.db.unsafe(`ALTER TABLE _opaca_assets ADD COLUMN folder TEXT`);
+            if (!columns.includes("alt_text"))
+              await config.db.unsafe(`ALTER TABLE _opaca_assets ADD COLUMN alt_text TEXT`);
+            if (!columns.includes("caption"))
+              await config.db.unsafe(`ALTER TABLE _opaca_assets ADD COLUMN caption TEXT`);
+          } else if (config.db.name === "postgres") {
+            const checkCols = await config.db.unsafe(`
+              SELECT column_name FROM information_schema.columns 
+              WHERE table_name = '_opaca_assets' AND column_name IN ('folder', 'alt_text', 'caption')
+             `);
+            const existing = checkCols.map((c2) => c2.column_name);
+            if (!existing.includes("folder"))
+              await config.db.unsafe(`ALTER TABLE _opaca_assets ADD COLUMN folder TEXT`);
+            if (!existing.includes("alt_text"))
+              await config.db.unsafe(`ALTER TABLE _opaca_assets ADD COLUMN "alt_text" TEXT`);
+            if (!existing.includes("caption"))
+              await config.db.unsafe(`ALTER TABLE _opaca_assets ADD COLUMN caption TEXT`);
+          }
+        } catch (e) {
+          console.error("Auto-patch columns failed", e);
+        }
+        const folder = c.req.query("folder") || null;
+        const keyPrefix = folder ? `${folder}/` : "";
+        const now = new Date().toISOString();
+        const formData = await c.req.parseBody({ all: true });
+        const fileRaw = formData["file"];
+        const file = Array.isArray(fileRaw) ? fileRaw[0] : fileRaw;
+        if (!file || typeof file !== "object" && typeof file !== "string") {
+          return c.json({ error: "No file provided" }, 400);
+        }
+        const fileName = file.name || "unnamed";
+        const fileType = file.type || "application/octet-stream";
+        const fileSize = file.size || 0;
+        const fileRecord = {
+          filename: fileName,
+          original_filename: fileName,
+          mime_type: fileType,
+          filesize: fileSize,
+          stream: typeof file.stream === "function" ? file.stream() : new Response(file).body
+        };
+        const uploadedFileData = await storageAdapter.upload(fileRecord, {
+          generateUniqueName: true,
+          keyPrefix
+        });
+        const storedKey = keyPrefix + uploadedFileData.filename;
+        try {
+          const assetId = (globalThis.crypto?.randomUUID?.() || Math.random().toString(36).slice(2)).replace(/-/g, "");
+          await config.db.create("_opaca_assets", {
+            id: assetId,
+            key: storedKey,
+            filename: fileName,
+            originalFilename: fileName,
+            mimeType: uploadedFileData.mime_type,
+            filesize: uploadedFileData.filesize,
+            bucket,
+            folder,
+            altText: null,
+            caption: null,
+            uploadedBy: user.id || null
+          });
+          return c.json({
+            assetId,
+            ...uploadedFileData,
+            key: storedKey
+          }, 201);
+        } catch (dbError) {
+          console.error(`[OpacaCMS] Registry insert failed, rolling back physical file upload: ${storedKey}`);
+          storageAdapter.delete(storedKey).catch((cleanupError) => {
+            console.error(`[OpacaCMS] CRITICAL: Failed to clean up orphaned file ${storedKey}!`, cleanupError);
+          });
+          throw dbError;
+        }
+      } catch (error) {
+        return c.json({ error: error.message }, 400);
+      }
+    },
+    async list(c) {
+      const user = c.get("user");
+      if (!user || user.role !== "admin" && !user.role?.includes("admin")) {
+        return c.json({ error: "Unauthorized" }, 401);
+      }
+      const bucket = c.req.query("bucket") || "all";
+      const page = parseInt(c.req.query("page") || "1", 10);
+      const limit = parseInt(c.req.query("limit") || "20", 10);
+      const offset = (page - 1) * limit;
+      const folder = c.req.query("folder") || null;
+      try {
+        let query = {};
+        if (bucket !== "all")
+          query.bucket = bucket;
+        if (folder !== null && folder !== "") {
+          query.folder = folder;
+        } else {
+          if (bucket !== "all") {
+            query = {
+              and: [{ bucket }, { or: [{ folder: null }, { folder: "" }] }]
+            };
+          } else {
+            query = { or: [{ folder: null }, { folder: "" }] };
+          }
+        }
+        const result = await config.db.find("_opaca_assets", query, {
+          page,
+          limit,
+          sort: "created_at:desc"
+        });
+        const rows = result.docs;
+        const total = result.totalDocs;
+        let folderRows = [];
+        const bucketFilter = bucket !== "all" ? `AND bucket = ?` : "";
+        const bucketParam = bucket !== "all" ? [bucket] : [];
+        if (config.db.name === "postgres") {
+          const pgBucketFilter = bucketFilter.replace("?", "$1");
+          if (folder === null || folder === "") {
+            folderRows = await config.db.unsafe(`SELECT DISTINCT split_part(folder, '/', 1) as subfolder, bucket FROM _opaca_assets WHERE folder IS NOT NULL AND folder != '' ${pgBucketFilter}`, bucketParam);
+          } else {
+            folderRows = await config.db.unsafe(`SELECT DISTINCT split_part(substring(folder from length($1) + 2), '/', 1) as subfolder, bucket FROM _opaca_assets WHERE folder LIKE $2 ${bucket !== "all" ? "AND bucket = $3" : ""}`, [folder, `${folder}/%`, ...bucketParam]);
+          }
+        } else {
+          if (folder === null || folder === "") {
+            folderRows = await config.db.unsafe(`
+              SELECT DISTINCT 
+                CASE 
+                  WHEN INSTR(folder, '/') > 0 THEN SUBSTR(folder, 1, INSTR(folder, '/') - 1)
+                  ELSE folder 
+                END as subfolder,
+                bucket
+              FROM _opaca_assets WHERE folder IS NOT NULL AND folder != '' ${bucketFilter}
+            `, bucketParam);
+          } else {
+            const skipLen = folder.length + 2;
+            folderRows = await config.db.unsafe(`
+              SELECT DISTINCT 
+                CASE 
+                  WHEN INSTR(SUBSTR(folder, ?), '/') > 0 THEN SUBSTR(SUBSTR(folder, ?), 1, INSTR(SUBSTR(folder, ?), '/') - 1)
+                  ELSE SUBSTR(folder, ?)
+                END as subfolder,
+                bucket
+              FROM _opaca_assets WHERE folder LIKE ? ${bucketFilter}
+            `, [skipLen, skipLen, skipLen, skipLen, `${folder}/%`, ...bucketParam]);
+          }
+        }
+        const folderMap = {};
+        for (const row of folderRows) {
+          if (!row.subfolder)
+            continue;
+          if (!folderMap[row.subfolder])
+            folderMap[row.subfolder] = [];
+          if (!folderMap[row.subfolder]?.includes(row.bucket)) {
+            folderMap[row.subfolder]?.push(row.bucket);
+          }
+        }
+        const folders = Object.entries(folderMap).map(([name, buckets]) => ({
+          name,
+          buckets
+        }));
+        return c.json({
+          docs: rows,
+          folders,
+          totalDocs: total,
+          limit,
+          page,
+          totalPages: Math.ceil(total / limit)
+        });
+      } catch (e) {
+        return c.json({ error: e.message }, 500);
+      }
+    },
+    async presign(c) {
+      const user = c.get("user");
+      if (!user)
+        return c.json({ error: "Unauthorized" }, 401);
+      const { filename, bucket = "default", operation = "write" } = await c.req.json();
+      if (!config.storages || !config.storages[bucket]) {
+        return c.json({ error: "Bucket not found" }, 404);
+      }
+      const adapter = config.storages[bucket];
+      if (!adapter.generatePresignedUrl) {
+        return c.json({ error: "Adapter does not support presigned URLs" }, 400);
+      }
+      try {
+        const url = await adapter.generatePresignedUrl(filename, operation, 3600);
+        return c.json({ uploadUrl: url, filename });
+      } catch (e) {
+        return c.json({ error: e.message }, 500);
+      }
+    },
+    async serve(c) {
+      const id = c.req.param("id");
+      try {
+        const asset = await config.db.findOne("_opaca_assets", { id });
+        if (!asset) {
+          return c.json({ error: "Asset not found" }, 404);
+        }
+        const bucket = asset.bucket || "default";
+        if (!config.storages || !config.storages[bucket]) {
+          return c.json({ error: "Storage bucket not configured" }, 500);
+        }
+        const adapter = config.storages[bucket];
+        if (!adapter.download) {
+          return c.json({ error: "Storage adapter does not support direct downloads" }, 400);
+        }
+        const stream = await adapter.download(asset.key || asset.filename);
+        c.header("Content-Type", asset.mimeType || "application/octet-stream");
+        c.header("Content-Length", asset.filesize.toString());
+        c.header("Cache-Control", "public, max-age=86400");
+        return c.body(stream);
+      } catch (e) {
+        console.error(`[OpacaCMS] Failed to serve asset ${id}:`, e);
+        return c.json({ error: e.message }, 500);
+      }
+    }
+  };
+}
+
+// src/server/routers/collections.ts
 function mountCollectionRoutes(router, config, state) {
   const combinedCollections = [...config.collections];
   for (const systemCol of getSystemCollections()) {
@@ -804,18 +1055,38 @@ function mountGlobalRoutes(router, config, state) {
     }
   }
 }
-
-// src/server/middlewares/auth.ts
-function createAuthMiddleware(getAuth) {
-  return async (c, next) => {
-    const auth = getAuth();
-    if (!auth) {
-      c.set("user", null);
-      c.set("session", null);
-      c.set("apiKey", null);
-      await next();
-      return;
-    }
+function createSystemRouter(config) {
+  const systemRouter = new Hono3;
+  if (config.storages) {
+    const assetsHandlers = createAssetsHandlers(config);
+    systemRouter.post("/assets/upload", adminMiddleware, assetsHandlers.upload);
+    systemRouter.get("/assets", adminMiddleware, assetsHandlers.list);
+    systemRouter.post("/assets/presign-upload", adminMiddleware, assetsHandlers.presign);
+  }
+  return systemRouter;
+}
+function createAssetsServingRouter(config) {
+  const assetsServingRouter = new Hono3;
+  if (config.storages) {
+    const assetsHandlers = createAssetsHandlers(config);
+    const assetCol = getSystemCollections().find((c) => c.slug === "_opaca_assets");
+    const assetPath = `/${assetCol?.apiPath || assetCol?.slug || "_opaca_assets"}`;
+    assetsServingRouter.get(`${assetPath}/:id/view`, assetsHandlers.serve);
+  }
+  return assetsServingRouter;
+}
+
+// src/server/middlewares/auth.ts
+function createAuthMiddleware(getAuth) {
+  return async (c, next) => {
+    const auth = getAuth();
+    if (!auth) {
+      c.set("user", null);
+      c.set("session", null);
+      c.set("apiKey", null);
+      await next();
+      return;
+    }
     const session = await auth.api.getSession({ headers: c.req.raw.headers });
     if (session) {
       c.set("user", session.user);
@@ -1064,288 +1335,19 @@ function setupMiddlewares(router, config, state) {
   });
 }
 function setupAuthMiddlewares(router, config, state) {
-  const supportsAuth = config.db.name === "sqlite" || config.db.name === "postgres" || config.db.name === "d1";
-  if (supportsAuth) {
-    router.use("*", createAuthMiddleware(() => state.auth));
-    router.on(["POST", "GET"], ["/auth/*"], async (c) => {
-      if (!state.auth) {
-        return c.json({ message: "Auth not initialized" }, 503);
-      }
-      return await state.auth.handler(c.req.raw);
-    });
-  }
-}
-
-// src/server/system-router.ts
-init_system_schema();
-import { Hono as Hono2 } from "hono";
-
-// src/server/assets.ts
-function createAssetsHandlers(config) {
-  return {
-    async upload(c) {
-      const user = c.get("user");
-      if (!user)
-        return c.json({ error: "Unauthorized" }, 401);
-      const bucket = c.req.query("bucket") || "default";
-      if (!config.storages)
-        return c.json({ error: "Storage not configured" }, 500);
-      const storageAdapter = config.storages[bucket];
-      if (!storageAdapter) {
-        return c.json({ error: `Bucket '${bucket}' not found` }, 404);
-      }
-      try {
-        try {
-          if (config.db.name === "sqlite" || config.db.name === "d1") {
-            const tableInfo = await config.db.unsafe(`PRAGMA table_info(_opaca_assets)`);
-            const columns = tableInfo.map((c2) => c2.name);
-            if (!columns.includes("folder"))
-              await config.db.unsafe(`ALTER TABLE _opaca_assets ADD COLUMN folder TEXT`);
-            if (!columns.includes("alt_text"))
-              await config.db.unsafe(`ALTER TABLE _opaca_assets ADD COLUMN alt_text TEXT`);
-            if (!columns.includes("caption"))
-              await config.db.unsafe(`ALTER TABLE _opaca_assets ADD COLUMN caption TEXT`);
-          } else if (config.db.name === "postgres") {
-            const checkCols = await config.db.unsafe(`
-              SELECT column_name FROM information_schema.columns 
-              WHERE table_name = '_opaca_assets' AND column_name IN ('folder', 'alt_text', 'caption')
-             `);
-            const existing = checkCols.map((c2) => c2.column_name);
-            if (!existing.includes("folder"))
-              await config.db.unsafe(`ALTER TABLE _opaca_assets ADD COLUMN folder TEXT`);
-            if (!existing.includes("alt_text"))
-              await config.db.unsafe(`ALTER TABLE _opaca_assets ADD COLUMN "alt_text" TEXT`);
-            if (!existing.includes("caption"))
-              await config.db.unsafe(`ALTER TABLE _opaca_assets ADD COLUMN caption TEXT`);
-          }
-        } catch (e) {
-          console.error("Auto-patch columns failed", e);
-        }
-        const folder = c.req.query("folder") || null;
-        const keyPrefix = folder ? `${folder}/` : "";
-        const now = new Date().toISOString();
-        const formData = await c.req.parseBody({ all: true });
-        const fileRaw = formData["file"];
-        const file = Array.isArray(fileRaw) ? fileRaw[0] : fileRaw;
-        if (!file || typeof file !== "object" && typeof file !== "string") {
-          return c.json({ error: "No file provided" }, 400);
-        }
-        const fileName = file.name || "unnamed";
-        const fileType = file.type || "application/octet-stream";
-        const fileSize = file.size || 0;
-        const fileRecord = {
-          filename: fileName,
-          original_filename: fileName,
-          mime_type: fileType,
-          filesize: fileSize,
-          stream: typeof file.stream === "function" ? file.stream() : new Response(file).body
-        };
-        const uploadedFileData = await storageAdapter.upload(fileRecord, {
-          generateUniqueName: true,
-          keyPrefix
-        });
-        const storedKey = keyPrefix + uploadedFileData.filename;
-        try {
-          const assetId = (globalThis.crypto?.randomUUID?.() || Math.random().toString(36).slice(2)).replace(/-/g, "");
-          await config.db.create("_opaca_assets", {
-            id: assetId,
-            key: storedKey,
-            filename: fileName,
-            originalFilename: fileName,
-            mimeType: uploadedFileData.mime_type,
-            filesize: uploadedFileData.filesize,
-            bucket,
-            folder,
-            altText: null,
-            caption: null,
-            uploadedBy: user.id || null
-          });
-          return c.json({
-            assetId,
-            ...uploadedFileData,
-            key: storedKey
-          }, 201);
-        } catch (dbError) {
-          console.error(`[OpacaCMS] Registry insert failed, rolling back physical file upload: ${storedKey}`);
-          storageAdapter.delete(storedKey).catch((cleanupError) => {
-            console.error(`[OpacaCMS] CRITICAL: Failed to clean up orphaned file ${storedKey}!`, cleanupError);
-          });
-          throw dbError;
-        }
-      } catch (error) {
-        return c.json({ error: error.message }, 400);
-      }
-    },
-    async list(c) {
-      const user = c.get("user");
-      if (!user || user.role !== "admin" && !user.role?.includes("admin")) {
-        return c.json({ error: "Unauthorized" }, 401);
-      }
-      const bucket = c.req.query("bucket") || "all";
-      const page = parseInt(c.req.query("page") || "1", 10);
-      const limit = parseInt(c.req.query("limit") || "20", 10);
-      const offset = (page - 1) * limit;
-      const folder = c.req.query("folder") || null;
-      try {
-        let query = {};
-        if (bucket !== "all")
-          query.bucket = bucket;
-        if (folder !== null && folder !== "") {
-          query.folder = folder;
-        } else {
-          if (bucket !== "all") {
-            query = {
-              and: [{ bucket }, { or: [{ folder: null }, { folder: "" }] }]
-            };
-          } else {
-            query = { or: [{ folder: null }, { folder: "" }] };
-          }
-        }
-        const result = await config.db.find("_opaca_assets", query, {
-          page,
-          limit,
-          sort: "created_at:desc"
-        });
-        const rows = result.docs;
-        const total = result.totalDocs;
-        let folderRows = [];
-        const bucketFilter = bucket !== "all" ? `AND bucket = ?` : "";
-        const bucketParam = bucket !== "all" ? [bucket] : [];
-        if (config.db.name === "postgres") {
-          const pgBucketFilter = bucketFilter.replace("?", "$1");
-          if (folder === null || folder === "") {
-            folderRows = await config.db.unsafe(`SELECT DISTINCT split_part(folder, '/', 1) as subfolder, bucket FROM _opaca_assets WHERE folder IS NOT NULL AND folder != '' ${pgBucketFilter}`, bucketParam);
-          } else {
-            folderRows = await config.db.unsafe(`SELECT DISTINCT split_part(substring(folder from length($1) + 2), '/', 1) as subfolder, bucket FROM _opaca_assets WHERE folder LIKE $2 ${bucket !== "all" ? "AND bucket = $3" : ""}`, [folder, `${folder}/%`, ...bucketParam]);
-          }
-        } else {
-          if (folder === null || folder === "") {
-            folderRows = await config.db.unsafe(`
-              SELECT DISTINCT 
-                CASE 
-                  WHEN INSTR(folder, '/') > 0 THEN SUBSTR(folder, 1, INSTR(folder, '/') - 1)
-                  ELSE folder 
-                END as subfolder,
-                bucket
-              FROM _opaca_assets WHERE folder IS NOT NULL AND folder != '' ${bucketFilter}
-            `, bucketParam);
-          } else {
-            const skipLen = folder.length + 2;
-            folderRows = await config.db.unsafe(`
-              SELECT DISTINCT 
-                CASE 
-                  WHEN INSTR(SUBSTR(folder, ?), '/') > 0 THEN SUBSTR(SUBSTR(folder, ?), 1, INSTR(SUBSTR(folder, ?), '/') - 1)
-                  ELSE SUBSTR(folder, ?)
-                END as subfolder,
-                bucket
-              FROM _opaca_assets WHERE folder LIKE ? ${bucketFilter}
-            `, [skipLen, skipLen, skipLen, skipLen, `${folder}/%`, ...bucketParam]);
-          }
-        }
-        const folderMap = {};
-        for (const row of folderRows) {
-          if (!row.subfolder)
-            continue;
-          if (!folderMap[row.subfolder])
-            folderMap[row.subfolder] = [];
-          if (!folderMap[row.subfolder]?.includes(row.bucket)) {
-            folderMap[row.subfolder]?.push(row.bucket);
-          }
-        }
-        const folders = Object.entries(folderMap).map(([name, buckets]) => ({
-          name,
-          buckets
-        }));
-        return c.json({
-          docs: rows,
-          folders,
-          totalDocs: total,
-          limit,
-          page,
-          totalPages: Math.ceil(total / limit)
-        });
-      } catch (e) {
-        return c.json({ error: e.message }, 500);
-      }
-    },
-    async presign(c) {
-      const user = c.get("user");
-      if (!user)
-        return c.json({ error: "Unauthorized" }, 401);
-      const { filename, bucket = "default", operation = "write" } = await c.req.json();
-      if (!config.storages || !config.storages[bucket]) {
-        return c.json({ error: "Bucket not found" }, 404);
-      }
-      const adapter = config.storages[bucket];
-      if (!adapter.generatePresignedUrl) {
-        return c.json({ error: "Adapter does not support presigned URLs" }, 400);
-      }
-      try {
-        const url = await adapter.generatePresignedUrl(filename, operation, 3600);
-        return c.json({ uploadUrl: url, filename });
-      } catch (e) {
-        return c.json({ error: e.message }, 500);
-      }
-    },
-    async serve(c) {
-      const id = c.req.param("id");
-      try {
-        const asset = await config.db.findOne("_opaca_assets", { id });
-        if (!asset) {
-          return c.json({ error: "Asset not found" }, 404);
-        }
-        const bucket = asset.bucket || "default";
-        if (!config.storages || !config.storages[bucket]) {
-          return c.json({ error: "Storage bucket not configured" }, 500);
-        }
-        const adapter = config.storages[bucket];
-        if (!adapter.download) {
-          return c.json({ error: "Storage adapter does not support direct downloads" }, 400);
-        }
-        const stream = await adapter.download(asset.key || asset.filename);
-        c.header("Content-Type", asset.mimeType || "application/octet-stream");
-        c.header("Content-Length", asset.filesize.toString());
-        c.header("Cache-Control", "public, max-age=86400");
-        return c.body(stream);
-      } catch (e) {
-        console.error(`[OpacaCMS] Failed to serve asset ${id}:`, e);
-        return c.json({ error: e.message }, 500);
-      }
-    }
-  };
-}
-
-// src/server/system-router.ts
-function createSystemRouter(config) {
-  const systemRouter = new Hono2;
-  if (config.storages) {
-    const assetsHandlers = createAssetsHandlers(config);
-    systemRouter.post("/assets/upload", adminMiddleware, assetsHandlers.upload);
-    systemRouter.get("/assets", adminMiddleware, assetsHandlers.list);
-    systemRouter.post("/assets/presign-upload", adminMiddleware, assetsHandlers.presign);
-  }
-  return systemRouter;
-}
-function createAssetsServingRouter(config) {
-  const assetsServingRouter = new Hono2;
-  if (config.storages) {
-    const assetsHandlers = createAssetsHandlers(config);
-    const assetCol = getSystemCollections().find((c) => c.slug === "_opaca_assets");
-    const assetPath = `/${assetCol?.apiPath || assetCol?.slug || "_opaca_assets"}`;
-    assetsServingRouter.get(`${assetPath}/:id/view`, assetsHandlers.serve);
-  }
-  return assetsServingRouter;
+  router.use("*", createAuthMiddleware(() => state.auth));
 }
 
 // src/server/router.ts
 function createAPIRouter(config) {
   const state = { auth: undefined, migrated: false };
-  const router = new Hono3().basePath("/api");
+  const router = new Hono4().basePath("/api");
   setupMiddlewares(router, config, state);
   setupAuthMiddlewares(router, config, state);
   router.get("/", (c) => {
     return c.json({ status: "ok", version: "1.0.0", appName: config.appName });
   });
+  router.route("/auth", createAuthRouter(config, state));
   router.route("/__admin", createAdminRouter(config, state));
   router.route("/__system", createSystemRouter(config));
   router.route("/", createAssetsServingRouter(config));

package/dist/runtimes/bun.js

@@ -1,6 +1,6 @@
 import {
   createAPIRouter
-} from "../chunk-0d9aqz6z.js";
+} from "../chunk-5ftxp8m2.js";
 import"../chunk-dy5t83hr.js";
 import"../chunk-62ev8gnc.js";
 import"../chunk-2kyhqvhc.js";

package/dist/runtimes/cloudflare-workers.js

@@ -1,6 +1,6 @@
 import {
   createAPIRouter
-} from "../chunk-0d9aqz6z.js";
+} from "../chunk-5ftxp8m2.js";
 import"../chunk-dy5t83hr.js";
 import"../chunk-62ev8gnc.js";
 import"../chunk-2kyhqvhc.js";

package/dist/runtimes/next.js

@@ -1,6 +1,6 @@
 import {
   createAPIRouter
-} from "../chunk-0d9aqz6z.js";
+} from "../chunk-5ftxp8m2.js";
 import"../chunk-dy5t83hr.js";
 import"../chunk-62ev8gnc.js";
 import"../chunk-2kyhqvhc.js";

package/dist/runtimes/node.js

@@ -1,6 +1,6 @@
 import {
   createAPIRouter
-} from "../chunk-0d9aqz6z.js";
+} from "../chunk-5ftxp8m2.js";
 import"../chunk-dy5t83hr.js";
 import"../chunk-62ev8gnc.js";
 import"../chunk-2kyhqvhc.js";

package/dist/server/routers/admin.d.ts

@@ -0,0 +1,9 @@
+import { Hono } from "hono";
+import type { Auth } from "../../auth";
+import type { OpacaConfig } from "../../types";
+import type { ApiContextVariables } from "../router";
+export declare function createAdminRouter(config: OpacaConfig, state: {
+    auth: Auth | undefined;
+}): Hono<{
+    Variables: ApiContextVariables;
+}, import("hono/types").BlankSchema, "/">;

package/dist/server/routers/auth.d.ts

@@ -0,0 +1,9 @@
+import { Hono } from "hono";
+import type { Auth } from "../../auth";
+import type { OpacaConfig } from "../../types";
+import type { ApiContextVariables } from "../router";
+export declare function createAuthRouter(config: OpacaConfig, state: {
+    auth: Auth | undefined;
+}): Hono<{
+    Variables: ApiContextVariables;
+}, import("hono/types").BlankSchema, "/">;