sitero 0.1.6 → 0.2.0

package/dist/src/core/domain/resources/file/utils/is-file-locked.js

@@ -1,10 +0,0 @@
-const isFileLocked = (file) => {
-  if (!file) return false;
-  if (!("adminAsAvatarImage" in file && "postsAsCoverImage" in file && "postsAsContentImage" in file && "postsAsFiles1" in file && "postsAsFiles2" in file && "postsAsFile1" in file && "postsAsFile2" in file && "postsAsFile3" in file && "postsAsFile4" in file && "configsAsFiles1" in file && "configsAsFiles2" in file && "configsAsFile1" in file && "configsAsFile2" in file && "configsAsFile3" in file && "configsAsFile4" in file)) {
-    return false;
-  }
-  const locked = file.adminAsAvatarImage.length > 0 || file.postsAsCoverImage.length > 0 || file.postsAsContentImage.length > 0 || file.postsAsFiles1.length > 0 || file.postsAsFiles2.length > 0 || file.postsAsFile1.length > 0 || file.postsAsFile2.length > 0 || file.postsAsFile3.length > 0 || file.postsAsFile4.length > 0 || file.configsAsFiles1.length > 0 || file.configsAsFiles2.length > 0 || file.configsAsFile1.length > 0 || file.configsAsFile2.length > 0 || file.configsAsFile3.length > 0 || file.configsAsFile4.length > 0;
-  return locked;
-};
-
-export { isFileLocked };

package/dist/src/core/domain/resources/folder/utils/file-manager-double-click.js

@@ -1,7 +0,0 @@
-const fileManagerDoubleClick = (item) => {
-  const url = new URL(globalThis.location.href);
-  url.searchParams.set("folderKey", item.key);
-  globalThis.history.pushState({}, "", url);
-};
-
-export { fileManagerDoubleClick };

package/dist/src/core/domain/resources/folder/utils/is-folder-locked.js

@@ -1,8 +0,0 @@
-const isFolderLocked = (folder) => {
-  if (!folder) return false;
-  if (!("subFolders" in folder)) return false;
-  const locked = folder.subFolders?.length > 0 || folder.files?.length > 0;
-  return locked;
-};
-
-export { isFolderLocked };

package/dist/src/core/domain/resources/folder/utils/normalize-folder-key.js

@@ -1,16 +0,0 @@
-const normalizeFolderKey = (key) => {
-  if (!key) {
-    return { folderKeys: [], segments: [], parentKey: "" };
-  }
-  const segments = key.split("/").filter(Boolean);
-  const folderKeys = [];
-  segments.reduce((acc, seg) => {
-    const next = acc ? `${acc}/${seg}` : seg;
-    folderKeys.push(next);
-    return next;
-  }, "");
-  const parentKey = segments.slice(0, -1).join("/");
-  return { folderKeys, segments, parentKey };
-};
-
-export { normalizeFolderKey };

package/dist/src/core/server/applications/create-core-applications.js

@@ -1,31 +0,0 @@
-import { createAdminEmailVerificationEmail } from './emails/admin/email-verification-email.js';
-import { createAdminForgotPasswordEmail } from './emails/admin/forgot-password-email.js';
-import { createAdminAuthUseCases } from './use-cases/admin/auth-use-cases.js';
-
-function createCoreApplications(input) {
-  const { infrastructure, constants } = input;
-  const useCaseContext = {
-    infrastructure,
-    constants
-  };
-  const adminAuthUseCases = createAdminAuthUseCases(useCaseContext);
-  const emailContext = {
-    infrastructure,
-    constants
-  };
-  const adminEmailVerificationEmail = createAdminEmailVerificationEmail(emailContext);
-  const adminForgotPasswordEmail = createAdminForgotPasswordEmail(emailContext);
-  return {
-    // auth
-    useCases: {
-      adminAuthUseCases
-    },
-    // emails
-    emails: {
-      adminEmailVerificationEmail,
-      adminForgotPasswordEmail
-    }
-  };
-}
-
-export { createCoreApplications };

package/dist/src/core/server/applications/emails/admin/email-verification-email.js

@@ -1,47 +0,0 @@
-import { CMS_PATHS } from '../../../../../constants/paths/cms-paths.js';
-import '../../../../../constants/paths/redirect.js';
-import '../../../../../constants/cms-locale.js';
-import 'mime-types';
-import 'sitero-domain';
-import 'clsx';
-import 'tailwind-merge';
-import { joinUrl } from '../../../../../shared/utils/join-url.js';
-import 'zod';
-
-function createAdminEmailVerificationEmail(ctx) {
-  const { infrastructure, constants } = ctx;
-  async function generateHtml(locale, replacements) {
-    return await infrastructure.email.renderEmailTemplate({
-      locale,
-      layoutType: "admin",
-      fileKey: constants.staticEmails.adminVerifyEmail.filePath,
-      replacements
-    });
-  }
-  async function send({
-    subject,
-    locale,
-    email,
-    emailVerificationToken
-  }) {
-    const url = joinUrl(
-      constants.webUrl,
-      CMS_PATHS.auth["verify-email"].pathname
-    );
-    const emailVerificationUrl = `${url}?email=${email}&emailVerificationToken=${emailVerificationToken}`;
-    const html = await generateHtml(locale, {
-      emailVerificationUrl
-    });
-    return infrastructure.email.sendEmail({
-      to: email,
-      subject,
-      html
-    });
-  }
-  return {
-    generateHtml,
-    send
-  };
-}
-
-export { createAdminEmailVerificationEmail };

package/dist/src/core/server/applications/emails/admin/forgot-password-email.js

@@ -1,47 +0,0 @@
-import { CMS_PATHS } from '../../../../../constants/paths/cms-paths.js';
-import '../../../../../constants/paths/redirect.js';
-import '../../../../../constants/cms-locale.js';
-import 'mime-types';
-import 'sitero-domain';
-import 'clsx';
-import 'tailwind-merge';
-import { joinUrl } from '../../../../../shared/utils/join-url.js';
-import 'zod';
-
-function createAdminForgotPasswordEmail(ctx) {
-  const { infrastructure, constants } = ctx;
-  async function generateHtml(locale, replacements) {
-    return await infrastructure.email.renderEmailTemplate({
-      locale,
-      layoutType: "admin",
-      fileKey: constants.staticEmails.adminForgotPassword.filePath,
-      replacements
-    });
-  }
-  async function send({
-    subject,
-    locale,
-    email,
-    passwordResetToken
-  }) {
-    const url = joinUrl(
-      constants.webUrl,
-      CMS_PATHS.auth["reset-password"].pathname
-    );
-    const passwordResetUrl = `${url}?passwordResetToken=${passwordResetToken}`;
-    const html = await generateHtml(locale, {
-      passwordResetUrl
-    });
-    return infrastructure.email.sendEmail({
-      to: email,
-      subject,
-      html
-    });
-  }
-  return {
-    generateHtml,
-    send
-  };
-}
-
-export { createAdminForgotPasswordEmail };

package/dist/src/core/server/applications/use-cases/admin/auth-use-cases.js

@@ -1,211 +0,0 @@
-import { getTranslator } from 'intor/next/server';
-import '../../../../../constants/paths/redirect.js';
-import { name } from '../../../../../constants/name.js';
-import '../../../../../constants/cms-locale.js';
-import 'mime-types';
-import 'sitero-domain';
-import 'clsx';
-import 'tailwind-merge';
-import { TIME } from '../../../../../shared/units.js';
-import 'zod';
-import { ServerError } from '../../../server-error.js';
-
-function createAdminAuthUseCases(ctx) {
-  const {
-    infrastructure: { prisma, services, i18n, repositories }
-  } = ctx;
-  const {
-    appName,
-    secret,
-    // access token
-    accessTokenTtl = 15 * TIME.MINUTE,
-    accessTokenSecret,
-    // refresh token
-    refreshTokenTtl = 7 * TIME.DAY,
-    // reset password
-    resetPasswordTtl = 10 * TIME.MINUTE,
-    resetPasswordSecret,
-    // verify email
-    verifyEmailTtl = 60 * TIME.MINUTE,
-    verifyEmailSecret
-  } = ctx.constants;
-  async function verifyCredentials({
-    id,
-    password
-  }) {
-    const { t } = await getTranslator(
-      i18n.serverIntorConfig
-    );
-    const admin = await repositories.adminQueryRepository.findWithPasswordHash({
-      id
-    });
-    if (!admin) {
-      throw new ServerError({ message: t("error.credentials-incorrect") });
-    }
-    const isValid = await services.argon2Service.verify(
-      admin.passwordHash,
-      password
-    );
-    if (!isValid) {
-      throw new ServerError({ message: t("error.credentials-incorrect") });
-    }
-  }
-  async function updatePassword({
-    id,
-    password
-  }) {
-    const updatedAdmin = await prisma.admin.update({
-      where: { id },
-      data: { passwordHash: await services.argon2Service.hash(password) }
-    });
-    return updatedAdmin;
-  }
-  async function removeAuthCookies() {
-    await services.cookieService.delete({
-      name: name.toAdminAccessTokenName(appName)
-    });
-    await services.cookieService.delete({
-      name: name.toAdminRefreshTokenName(appName)
-    });
-  }
-  async function createRefreshToken({
-    admin,
-    deviceInfo,
-    ip
-  }) {
-    const token = services.cryptoService.generateToken();
-    const tokenHash = services.cryptoService.hash(token);
-    await repositories.adminRefreshTokenCommandRepository.create({
-      tokenHash,
-      ip,
-      deviceInfo,
-      expiresAt: new Date(Date.now() + refreshTokenTtl * 1e3),
-      adminId: admin.id,
-      email: admin.email
-    });
-    return token;
-  }
-  async function refreshTokens({
-    admin,
-    deviceInfo,
-    ip
-  }) {
-    const token = await createRefreshToken({ admin, deviceInfo, ip });
-    await services.cookieService.setSignedCookie({
-      name: name.toAdminRefreshTokenName(appName),
-      value: token,
-      expireSeconds: refreshTokenTtl
-    });
-    const accessToken = services.jwtService.sign({
-      payload: { id: admin.id },
-      secret: services.cryptoService.hash(accessTokenSecret ?? secret),
-      expiresIn: accessTokenTtl
-    });
-    await services.cookieService.setSignedCookie({
-      name: name.toAdminAccessTokenName(appName),
-      value: accessToken,
-      expireSeconds: accessTokenTtl
-    });
-  }
-  async function removeTokens(params) {
-    if (params.scope === "current") {
-      if (params.token) {
-        const found = await repositories.adminRefreshTokenQueryRepository.findByToken({
-          tokenHash: services.cryptoService.hash(params.token)
-        });
-        if (found) {
-          await repositories.adminRefreshTokenCommandRepository.delete({
-            id: found.id
-          });
-        }
-      }
-      await removeAuthCookies();
-      return;
-    }
-    if (params.scope === "all") {
-      await repositories.adminRefreshTokenCommandRepository.deleteMany({
-        adminId: params.adminId
-      });
-      await removeAuthCookies();
-      return;
-    }
-    await repositories.adminRefreshTokenCommandRepository.deleteMany({
-      adminId: params.adminId,
-      ...params.token ? { excludeTokenHash: services.cryptoService.hash(params.token) } : {}
-    });
-  }
-  function signPasswordResetToken({ adminId }) {
-    const passwordResetToken = services.jwtService.sign({
-      payload: { id: adminId },
-      secret: resetPasswordSecret ?? secret,
-      expiresIn: resetPasswordTtl
-    });
-    return passwordResetToken;
-  }
-  async function verifyPasswordResetToken({ token }) {
-    const { t } = await getTranslator(
-      i18n.serverIntorConfig
-    );
-    try {
-      const { id } = services.jwtService.verify({
-        token,
-        secret: resetPasswordSecret ?? secret
-      });
-      return id;
-    } catch {
-      throw ServerError.forbidden(t("error.forbidden"));
-    }
-  }
-  function signEmailVerificationToken({
-    adminId
-  }) {
-    const emailVerificationToken = services.jwtService.sign({
-      payload: { id: adminId },
-      secret: verifyEmailSecret ?? secret,
-      expiresIn: verifyEmailTtl
-    });
-    return emailVerificationToken;
-  }
-  async function verifyEmailAndUpdate({
-    token,
-    admin
-  }) {
-    const { t } = await getTranslator(
-      i18n.serverIntorConfig
-    );
-    try {
-      const { id } = services.jwtService.verify({
-        token,
-        secret: verifyEmailSecret ?? secret
-      });
-      const found = await repositories.adminQueryRepository.find({ id });
-      if (found?.email !== admin.email)
-        throw ServerError.forbidden(t("error.forbidden"));
-      const updatedAdmin = await prisma.admin.update({
-        where: { id },
-        data: { emailVerifiedAt: /* @__PURE__ */ new Date() }
-      });
-      return updatedAdmin;
-    } catch {
-      throw ServerError.forbidden(t("error.forbidden"));
-    }
-  }
-  return {
-    verifyCredentials,
-    updatePassword,
-    // cookie
-    removeAuthCookies,
-    // auth tokens
-    createRefreshToken,
-    refreshTokens,
-    removeTokens,
-    // reset password
-    signPasswordResetToken,
-    verifyPasswordResetToken,
-    // verify email
-    signEmailVerificationToken,
-    verifyEmailAndUpdate
-  };
-}
-
-export { createAdminAuthUseCases };

package/dist/src/core/server/create-core-server.js

@@ -1,53 +0,0 @@
-import { createCoreApplications } from './applications/create-core-applications.js';
-import 'intor/next/server';
-import '../../constants/paths/redirect.js';
-import '../../constants/cms-locale.js';
-import 'mime-types';
-import 'sitero-domain';
-import 'clsx';
-import 'tailwind-merge';
-import 'zod';
-import { createCoreInfrastructure } from './infrastructure/create-core-infrastructure.js';
-import 'jsonwebtoken';
-import './infrastructure/argon2/argon2-service.js';
-import 'node:crypto';
-import './infrastructure/cookie/cookie-service.js';
-import '@keyv/redis';
-import 'keyv';
-import 'nodemailer';
-import './infrastructure/email/template/render-email-template.js';
-import 'ulid';
-import { createCoreInterfaces } from './interfaces/create-core-interfaces.js';
-import 'next/dist/client/components/redirect-error';
-import 'next/server';
-import 'node:path/posix';
-import 'p-limit';
-
-function createCoreServer(input) {
-  const { logger, prisma, next, services, constants } = input;
-  const infrastructure = createCoreInfrastructure({
-    services,
-    logger,
-    prisma,
-    next,
-    constants
-  });
-  const applications = createCoreApplications({
-    constants,
-    infrastructure
-  });
-  const interfaces = createCoreInterfaces({
-    logger,
-    next,
-    constants,
-    infrastructure,
-    applications
-  });
-  return {
-    infrastructure,
-    applications,
-    interfaces
-  };
-}
-
-export { createCoreServer };

package/dist/src/core/server/infrastructure/argon2/argon2-service.js

@@ -1,23 +0,0 @@
-import argon2 from 'argon2';
-
-const DEFAULT_OPTIONS = {
-  type: argon2.argon2id,
-  memoryCost: 19456,
-  // ~19MB
-  timeCost: 2,
-  parallelism: 1
-};
-function createArgon2Service() {
-  async function hash(password) {
-    return await argon2.hash(password, DEFAULT_OPTIONS);
-  }
-  async function verify(digest, password) {
-    return await argon2.verify(digest, password);
-  }
-  return {
-    hash,
-    verify
-  };
-}
-
-export { createArgon2Service };

package/dist/src/core/server/infrastructure/cache/cache-result.js

@@ -1,42 +0,0 @@
-import { normalizeCacheKey } from './normalize-cache-key.js';
-
-const DAY = 1e3 * 60 * 60 * 24;
-function createCacheResult(cache, logger) {
-  return async function cacheResult({
-    key: rawKey,
-    ttl = DAY,
-    load,
-    isList = false
-  }) {
-    const key = normalizeCacheKey(rawKey);
-    if (!key) {
-      logger.error("Cache skipped due to invalid key", {
-        rawKey,
-        scope: "cacheResult"
-      });
-      return load();
-    }
-    try {
-      const cached = await cache.get(key);
-      if (cached !== void 0) {
-        logger.trace("Cache hit.", { key }, { scope: "cacheResult" });
-        return cached;
-      }
-      const data = await load();
-      if (data !== void 0) {
-        const shouldCache = isList ? typeof data === "object" && data !== null && "data" in data && typeof data.data === "object" && data.data !== null && "items" in data.data && Array.isArray(data.data.items) && data.data.items.length > 0 : true;
-        if (shouldCache) await cache.set(key, data, ttl);
-      }
-      return data;
-    } catch (error) {
-      logger.error("Cache failure, falling back to loader", {
-        key,
-        error,
-        scope: "cacheResult"
-      });
-      return load();
-    }
-  };
-}
-
-export { createCacheResult };

package/dist/src/core/server/infrastructure/cache/cache.js

@@ -1,20 +0,0 @@
-import KeyvRedis from '@keyv/redis';
-import Keyv from 'keyv';
-import { CACHE_KEY_DELIMITER } from './constants.js';
-
-function createCache({
-  appName,
-  redisUrl,
-  keyDelimiter = CACHE_KEY_DELIMITER
-}) {
-  const redisStore = new KeyvRedis(redisUrl, {
-    keyPrefixSeparator: keyDelimiter
-  });
-  return new Keyv({
-    store: redisStore,
-    namespace: appName,
-    useKeyPrefix: false
-  });
-}
-
-export { createCache };

package/dist/src/core/server/infrastructure/cache/clear-cache.js

@@ -1,32 +0,0 @@
-import { IP_RATE_LIMITER_KEY } from './constants.js';
-
-const CLEAR_CACHE_BATCH_SIZE = 1e3;
-function createClearCache(cache) {
-  return async function clearCache({
-    exclude: rawExclude = []
-  } = {}) {
-    const exclude = [IP_RATE_LIMITER_KEY, ...rawExclude];
-    const iterator = cache.iterator;
-    if (!iterator) {
-      await cache.clear();
-      return;
-    }
-    const keysToDelete = [];
-    try {
-      for await (const [key] of iterator(cache.namespace)) {
-        if (exclude.some((fragment) => key.includes(fragment))) continue;
-        keysToDelete.push(key);
-        if (keysToDelete.length >= CLEAR_CACHE_BATCH_SIZE) {
-          await cache.delete(keysToDelete.splice(0, keysToDelete.length));
-        }
-      }
-      if (keysToDelete.length > 0) {
-        await cache.delete(keysToDelete);
-      }
-    } catch (error) {
-      cache.emit("error", error);
-    }
-  };
-}
-
-export { createClearCache };

package/dist/src/core/server/infrastructure/cache/constants.js

@@ -1,4 +0,0 @@
-const CACHE_KEY_DELIMITER = "|";
-const IP_RATE_LIMITER_KEY = "ip-rate-limiter";
-
-export { CACHE_KEY_DELIMITER, IP_RATE_LIMITER_KEY };

package/dist/src/core/server/infrastructure/cache/ip-rate-limiter.js

@@ -1,57 +0,0 @@
-import { getTranslator } from 'intor/next/server';
-import { ServerError } from '../../server-error.js';
-import { IP_RATE_LIMITER_KEY } from './constants.js';
-import { normalizeCacheKey } from './normalize-cache-key.js';
-
-const DEFAULT_MAX_ATTEMPTS = 60;
-const DEFAULT_TIME_WINDOW = 60;
-const lua = `
-    local current = redis.call('INCR', KEYS[1])
-    if current == 1 then
-      redis.call('EXPIRE', KEYS[1], ARGV[1])
-    end
-    return current
-  `;
-function createIpRateLimiter({
-  appName,
-  cache,
-  headers,
-  serverIntorConfig
-}) {
-  async function ipRateLimiterCore({
-    key: rawKey,
-    maxAttempts = DEFAULT_MAX_ATTEMPTS,
-    timeWindow = DEFAULT_TIME_WINDOW
-  }) {
-    const secondaryStore = cache.store;
-    const redis = await secondaryStore.getClient();
-    if (!redis) return true;
-    const headersStore = await headers();
-    const ip = headersStore.get("cf-connecting-ip")?.trim() || headersStore.get("x-forwarded-for")?.split(",")[0]?.trim() || "unknown";
-    const key = normalizeCacheKey([
-      appName,
-      IP_RATE_LIMITER_KEY,
-      ...Array.isArray(rawKey) ? rawKey : [rawKey],
-      ip
-    ]);
-    const currentRaw = await redis.eval(lua, {
-      keys: [key],
-      arguments: [timeWindow.toString()]
-    });
-    const current = typeof currentRaw === "number" ? currentRaw : Number(currentRaw);
-    return current <= maxAttempts;
-  }
-  return async function ipRateLimiter({
-    key,
-    maxAttempts,
-    timeWindow
-  }) {
-    const { t } = await getTranslator(
-      serverIntorConfig
-    );
-    const pass = await ipRateLimiterCore({ key, maxAttempts, timeWindow });
-    if (!pass) throw new ServerError({ message: t("error.too-many-attempts") });
-  };
-}
-
-export { createIpRateLimiter };

package/dist/src/core/server/infrastructure/cache/normalize-cache-key.js

@@ -1,20 +0,0 @@
-import { CACHE_KEY_DELIMITER } from './constants.js';
-
-const sanitize = (k) => k.replaceAll(/[\u200B-\u200D\uFEFF]/g, "").replaceAll(/[\r\n]/g, "").trim();
-const normalizeCacheKey = (key, delimiter = CACHE_KEY_DELIMITER) => {
-  if (key == null || key === "") return null;
-  if (Array.isArray(key)) {
-    if (key.length === 0) return null;
-    const normalized = key.map((k) => {
-      if (k === null) return "__null";
-      if (k === void 0) return "__undefined";
-      if (typeof k === "boolean") return k ? "__true" : "__false";
-      return sanitize(String(k));
-    });
-    return normalized.join(delimiter);
-  }
-  if (typeof key === "boolean") return key ? "__true" : "__false";
-  return String(key);
-};
-
-export { normalizeCacheKey };