Click the link below to log in to ${this.appName}:

This link can be used multiple times and expires in 15 minutes.

`,\n };\n await this._send(body);\n }\n\n async sendInvite(email: string, magicLinkUrl: string): Promise {\n const tpl = this.templates?.invite?.(email, magicLinkUrl);\n const body = {\n from: this.from,\n to: [{ email }],\n project_id: this.projectId,\n subject: tpl?.subject ?? `You're invited to ${this.appName}`,\n text: tpl?.text ?? `You've been invited to use ${this.appName}!\\n\\nClick this link to create your account and get started:\\n\\n${magicLinkUrl}\\n\\nThis link can be used multiple times and expires in 15 minutes.`,\n html: tpl?.html ?? `

You've been invited to use ${this.appName}!

Click the link below to create your account and get started:

Join ${this.appName}

This link can be used multiple times and expires in 15 minutes.

`,\n };\n await this._send(body);\n }\n\n async sendChangeEmailLink(newEmail: string, changeUrl: string): Promise {\n const tpl = this.templates?.emailChange?.(newEmail, changeUrl);\n const body = {\n from: this.from,\n to: [{ email: newEmail }],\n project_id: this.projectId,\n subject: tpl?.subject ?? `Confirm your new ${this.appName} email address`,\n text: tpl?.text ?? `Click this link to confirm your new email address:\\n\\n${changeUrl}\\n\\nThis link expires in 15 minutes and can only be used once. If you did not request this change, you can ignore this email.`,\n html: tpl?.html ?? `

Click the link below to confirm your new email address for ${this.appName}:

Confirm new email address

This link expires in 15 minutes and can only be used once. If you did not request this change, you can ignore this email.

`,\n };\n await this._send(body);\n }\n\n private async _send(body: object): Promise {\n const response = await fetch(`${this.apiUrl}/emails`, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"X-Auth-Token\": this.apiKey,\n },\n body: JSON.stringify(body),\n });\n\n if (!response.ok) {\n const errorData = await response.json().catch(() => ({}));\n console.warn(\"Scaleway Transactional Email returned error\", errorData);\n throw new Error(`Failed to send magic link email: HTTP ${response.status}`);\n }\n }\n}\n\nexport function createDefaultEmailService(appName: string, templates?: AuthConfig[\"emailTemplates\"]): EmailService {\n const scalewayConfigured = Deno.env.get(\"SCW_SECRET_KEY\") && Deno.env.get(\"SCW_PROJECT_ID\");\n return scalewayConfigured\n ? new ScalewayEmailService({ appName, templates })\n : new ConsoleEmailService();\n}\n",[],[162,181],{"_105":190,"_97":191,"_163":192,"_165":164,"_166":146,"_167":145,"_169":170,"_107":193,"_102":151,"_172":185,"_174":194,"_175":22,"_176":-5,"_177":195,"_101":196},"ceae2e00-22b7-11f1-9f2e-42dde27851f2","index.ts","36a2d04a-22b5-11f1-87ee-42dde27851f2",["D",1773830826690],"import type { Hono } from \"npm:hono\";\nimport type { AuthConfig, StudioKareUser } from \"../types.ts\";\nimport { createAuthQueries } from \"./queries.ts\";\nimport { createAuthMigrations } from \"./migrations.ts\";\nimport { createSessionService } from \"./session.ts\";\nimport { createMagicLinkService } from \"./magic-link.ts\";\nimport { createAuthMiddleware } from \"./middleware.ts\";\nimport { createAuthRoutes } from \"./routes.ts\";\nimport { createDefaultEmailService, ConsoleEmailService } from \"./email.ts\";\n\nconst THIRTY_DAYS_MS = 30 * 24 * 60 * 60 * 1000;\nconst FIFTEEN_MINUTES_MS = 15 * 60 * 1000;\n\nexport function createAuthApp(config: AuthConfig) {\n const prefix = config.tablePrefix ?? \"studiokare\";\n const cookieName = config.cookieName ?? \"studiokare_session\";\n const sessionLifetimeMs = config.sessionLifetimeMs ?? THIRTY_DAYS_MS;\n const magicLinkTtlMs = config.magicLinkTtlMs ?? FIFTEEN_MINUTES_MS;\n\n const queries = createAuthQueries(prefix);\n const sessionService = createSessionService(queries, { sessionLifetimeMs });\n const magicLinkService = createMagicLinkService(queries, { magicLinkTtlMs });\n const emailService = config.emailService ?? createDefaultEmailService(config.appName, config.emailTemplates);\n const { authMiddleware, buildSessionCookie, clearSessionCookie } = createAuthMiddleware(sessionService, { cookieName, sessionLifetimeMs });\n const runAuthMigrations = createAuthMigrations(prefix);\n\n const authApp = createAuthRoutes({\n magicLinkService,\n sessionService,\n queries,\n emailService,\n appName: config.appName,\n buildSessionCookie,\n clearSessionCookie,\n });\n\n return {\n authApp,\n authMiddleware,\n runAuthMigrations,\n getUserById: queries.getUserById,\n getUserByEmail: queries.getUserByEmail,\n createMagicLinkToken: magicLinkService.createMagicLinkToken,\n emailService,\n };\n}\n\nexport type { AuthConfig, StudioKareUser };\nexport type { StudioKareSession } from \"../types.ts\";\nexport { ConsoleEmailService };\nexport type { EmailService } from \"../types.ts\";\n",[],[162,191],{"_105":198,"_97":199,"_163":200,"_165":164,"_166":146,"_167":201,"_169":170,"_107":202,"_102":33,"_172":185,"_174":203,"_175":22,"_176":-5,"_177":204,"_101":205},"1661d9f2-22b5-11f1-934e-42dde27851f2","magic-link.ts","1661daba-22b5-11f1-934e-42dde27851f2",5,["D",1773829658505],"import type { AuthQueries } from \"./queries.ts\";\nimport { generateId, generateToken, hashToken } from \"./session.ts\";\n\nexport interface MagicLinkResult {\n token: string;\n email: string;\n}\n\nexport interface VerifyMagicLinkResult {\n userId: string;\n email: string;\n isNewUser: boolean;\n}\n\nexport interface VerifyEmailChangeResult {\n userId: string;\n newEmail: string;\n}\n\nexport function createMagicLinkService(queries: AuthQueries, opts: { magicLinkTtlMs: number }) {\n const { magicLinkTtlMs } = opts;\n\n async function createMagicLinkToken(email: string): Promise {\n const token = generateToken();\n const hashedId = await hashToken(token);\n const expiresAt = new Date(Date.now() + magicLinkTtlMs);\n\n await queries.createMagicLinkRecord(hashedId, email, expiresAt);\n\n return { token, email };\n }\n\n async function createEmailChangeToken(userId: string, newEmail: string): Promise<{ token: string }> {\n const token = generateToken();\n const hashedId = await hashToken(token);\n const expiresAt = new Date(Date.now() + magicLinkTtlMs);\n await queries.createMagicLinkRecord(hashedId, newEmail, expiresAt, userId);\n return { token };\n }\n\n async function verifyEmailChangeToken(token: string): Promise {\n const hashedId = await hashToken(token);\n const link = await queries.getMagicLinkRecord(hashedId);\n\n if (!link) return null;\n // Reject login tokens used on the email-change route\n if (link.userId === null) return null;\n\n // Delete immediately (single-use)\n await queries.deleteMagicLinkRecord(hashedId);\n\n // Check expiry\n if (link.expiresAt <= new Date()) return null;\n\n await queries.updateUserEmail(link.userId, link.email);\n return { userId: link.userId, newEmail: link.email };\n }\n\n async function verifyMagicLinkToken(token: string): Promise {\n const hashedId = await hashToken(token);\n const link = await queries.getMagicLinkRecord(hashedId);\n\n if (!link) return null;\n // Reject email-change tokens used on the login route\n if (link.userId !== null) return null;\n\n // Check expiry (token stays valid for reuse until it expires)\n if (link.expiresAt <= new Date()) return null;\n\n // Find or create user\n const existingUser = await queries.getUserByEmail(link.email);\n if (existingUser) {\n return { userId: existingUser.id, email: existingUser.email, isNewUser: false };\n }\n\n const userId = generateId();\n await queries.createUser(userId, link.email);\n return { userId, email: link.email, isNewUser: true };\n }\n\n return { createMagicLinkToken, createEmailChangeToken, verifyEmailChangeToken, verifyMagicLinkToken };\n}\n\nexport type MagicLinkService = ReturnType;\n",[],[162,199],{"_105":207,"_97":208,"_163":209,"_165":164,"_166":146,"_167":210,"_169":170,"_107":211,"_102":33,"_172":185,"_174":212,"_175":22,"_176":-5,"_177":213,"_101":214},"250f5010-22b5-11f1-b451-42dde27851f2","middleware.ts","250f50ce-22b5-11f1-b451-42dde27851f2",7,["D",1773829683130],"import { createMiddleware } from \"npm:hono/factory\";\nimport { getCookie, setCookie, deleteCookie } from \"npm:hono/cookie\";\nimport type { SessionService } from \"./session.ts\";\n\nexport function createAuthMiddleware(sessionService: SessionService, opts: { cookieName: string; sessionLifetimeMs: number }) {\n const { cookieName, sessionLifetimeMs } = opts;\n const maxAgeSeconds = Math.floor(sessionLifetimeMs / 1000);\n\n const authMiddleware = createMiddleware(async (c, next) => {\n const token = getCookie(c, cookieName);\n\n if (!token) {\n c.set(\"user\", null);\n c.set(\"sessionToken\", null);\n return next();\n }\n\n const result = await sessionService.validateSession(token);\n\n if (!result) {\n deleteCookie(c, cookieName, { path: \"/\" });\n c.set(\"user\", null);\n c.set(\"sessionToken\", null);\n return next();\n }\n\n c.set(\"user\", result.user);\n c.set(\"sessionToken\", token);\n\n if (result.rotated) {\n setCookie(c, cookieName, token, {\n path: \"/\",\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n maxAge: maxAgeSeconds,\n });\n }\n\n return next();\n });\n\n function buildSessionCookie(token: string): string {\n return `${cookieName}=${token}; Path=/; HttpOnly; Secure; SameSite=Lax; Max-Age=${maxAgeSeconds}`;\n }\n\n function clearSessionCookie(c: any): void {\n deleteCookie(c, cookieName, { path: \"/\" });\n }\n\n return { authMiddleware, buildSessionCookie, clearSessionCookie };\n}\n",[],[162,208],{"_105":216,"_97":217,"_163":218,"_165":164,"_166":146,"_167":219,"_169":170,"_107":220,"_102":33,"_172":185,"_174":221,"_175":22,"_176":-5,"_177":222,"_101":223},"08fd1768-22b5-11f1-b87b-42dde27851f2","migrations.ts","08fd184e-22b5-11f1-b87b-42dde27851f2",3,["D",1773829636036],"import { sqlite } from \"https://esm.town/v/std/sqlite\";\n\nexport function createAuthMigrations(prefix: string) {\n const usersTable = `${prefix}_users`;\n const sessionsTable = `${prefix}_sessions`;\n const magicLinksTable = `${prefix}_magic_links`;\n\n return async function runAuthMigrations() {\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ${usersTable} (\n id TEXT PRIMARY KEY,\n email TEXT NOT NULL UNIQUE,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ${sessionsTable} (\n id TEXT PRIMARY KEY,\n user_id TEXT NOT NULL REFERENCES ${usersTable}(id),\n expires_at TEXT NOT NULL\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ${magicLinksTable} (\n id TEXT PRIMARY KEY,\n email TEXT NOT NULL,\n created_at TEXT NOT NULL DEFAULT (datetime('now')),\n expires_at TEXT NOT NULL\n )\n `);\n\n // Add user_id to magic_links for email-change tokens (nullable; null = login token)\n try {\n await sqlite.execute(`ALTER TABLE ${magicLinksTable} ADD COLUMN user_id TEXT REFERENCES ${usersTable}(id)`);\n } catch (_) {}\n\n try {\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_${prefix}_sessions_user ON ${sessionsTable}(user_id)`);\n } catch (_) {}\n };\n}\n",[],[162,217],{"_105":225,"_97":226,"_163":227,"_165":164,"_166":146,"_167":168,"_169":170,"_107":228,"_102":33,"_172":185,"_174":229,"_175":22,"_176":-5,"_177":230,"_101":231},"05ccbd78-22b5-11f1-8d15-42dde27851f2","queries.ts","05ccbe4a-22b5-11f1-8d15-42dde27851f2",["D",1773829630683],"import { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport type { StudioKareSession, StudioKareUser } from \"../types.ts\";\n\nexport function createAuthQueries(prefix: string) {\n const usersTable = `${prefix}_users`;\n const sessionsTable = `${prefix}_sessions`;\n const magicLinksTable = `${prefix}_magic_links`;\n\n // ---- Users ----\n\n async function getUserByEmail(email: string): Promise {\n const result = await sqlite.execute({\n sql: `SELECT id, email, created_at FROM ${usersTable} WHERE email = ?`,\n args: [email],\n });\n if (result.rows.length === 0) return null;\n const row = result.rows[0];\n const cols = result.columns;\n const col = (name: string) => row[cols.indexOf(name)];\n return {\n id: col(\"id\") as string,\n email: col(\"email\") as string,\n createdAt: col(\"created_at\") as string,\n };\n }\n\n async function getUserById(id: string): Promise {\n const result = await sqlite.execute({\n sql: `SELECT id, email, created_at FROM ${usersTable} WHERE id = ?`,\n args: [id],\n });\n if (result.rows.length === 0) return null;\n const row = result.rows[0];\n const cols = result.columns;\n const col = (name: string) => row[cols.indexOf(name)];\n return {\n id: col(\"id\") as string,\n email: col(\"email\") as string,\n createdAt: col(\"created_at\") as string,\n };\n }\n\n async function createUser(id: string, email: string): Promise {\n await sqlite.execute({\n sql: `INSERT INTO ${usersTable} (id, email) VALUES (?, ?)`,\n args: [id, email],\n });\n return { id, email, createdAt: new Date().toISOString() };\n }\n\n // ---- Sessions ----\n\n async function createSessionRecord(sessionId: string, userId: string, expiresAt: Date): Promise {\n await sqlite.execute({\n sql: `INSERT INTO ${sessionsTable} (id, user_id, expires_at) VALUES (?, ?, ?)`,\n args: [sessionId, userId, expiresAt.toISOString()],\n });\n }\n\n async function getSessionRecord(\n sessionId: string,\n ): Promise<{ session: StudioKareSession; user: StudioKareUser } | null> {\n const result = await sqlite.execute({\n sql: `SELECT s.id, s.user_id, s.expires_at, u.email, u.created_at\n FROM ${sessionsTable} s\n JOIN ${usersTable} u ON s.user_id = u.id\n WHERE s.id = ?`,\n args: [sessionId],\n });\n if (result.rows.length === 0) return null;\n const row = result.rows[0];\n const cols = result.columns;\n const col = (name: string) => row[cols.indexOf(name)];\n return {\n session: {\n id: col(\"id\") as string,\n userId: col(\"user_id\") as string,\n expiresAt: new Date(col(\"expires_at\") as string),\n },\n user: {\n id: col(\"user_id\") as string,\n email: col(\"email\") as string,\n createdAt: col(\"created_at\") as string,\n },\n };\n }\n\n async function updateSessionExpiry(sessionId: string, expiresAt: Date): Promise {\n await sqlite.execute({\n sql: `UPDATE ${sessionsTable} SET expires_at = ? WHERE id = ?`,\n args: [expiresAt.toISOString(), sessionId],\n });\n }\n\n async function deleteSessionRecord(sessionId: string): Promise {\n await sqlite.execute({\n sql: `DELETE FROM ${sessionsTable} WHERE id = ?`,\n args: [sessionId],\n });\n }\n\n // ---- Magic Links ----\n\n async function createMagicLinkRecord(id: string, email: string, expiresAt: Date, userId?: string): Promise {\n await sqlite.execute({\n sql: `INSERT INTO ${magicLinksTable} (id, email, expires_at, user_id) VALUES (?, ?, ?, ?)`,\n args: [id, email, expiresAt.toISOString(), userId ?? null],\n });\n }\n\n async function getMagicLinkRecord(id: string): Promise<{ email: string; expiresAt: Date; userId: string | null } | null> {\n const result = await sqlite.execute({\n sql: `SELECT email, expires_at, user_id FROM ${magicLinksTable} WHERE id = ?`,\n args: [id],\n });\n if (result.rows.length === 0) return null;\n const row = result.rows[0];\n const cols = result.columns;\n const col = (name: string) => row[cols.indexOf(name)];\n return {\n email: col(\"email\") as string,\n expiresAt: new Date(col(\"expires_at\") as string),\n userId: col(\"user_id\") as string | null,\n };\n }\n\n async function updateUserEmail(userId: string, newEmail: string): Promise {\n await sqlite.execute({\n sql: `UPDATE ${usersTable} SET email = ? WHERE id = ?`,\n args: [newEmail, userId],\n });\n }\n\n async function deleteMagicLinkRecord(id: string): Promise {\n await sqlite.execute({\n sql: `DELETE FROM ${magicLinksTable} WHERE id = ?`,\n args: [id],\n });\n }\n\n return {\n getUserByEmail,\n getUserById,\n createUser,\n createSessionRecord,\n getSessionRecord,\n updateSessionExpiry,\n deleteSessionRecord,\n createMagicLinkRecord,\n getMagicLinkRecord,\n updateUserEmail,\n deleteMagicLinkRecord,\n };\n}\n\nexport type AuthQueries = ReturnType;\n",[],[162,226],{"_105":233,"_97":234,"_163":235,"_165":164,"_166":146,"_167":236,"_169":170,"_107":237,"_102":33,"_172":185,"_174":238,"_175":22,"_176":-5,"_177":239,"_101":240},"2f5ffefc-22b5-11f1-8301-42dde27851f2","routes.ts","2f600014-22b5-11f1-8301-42dde27851f2",8,["D",1773829700437],"import { Hono } from \"npm:hono\";\nimport type { MagicLinkService } from \"./magic-link.ts\";\nimport type { SessionService } from \"./session.ts\";\nimport type { AuthQueries } from \"./queries.ts\";\nimport type { EmailService } from \"../types.ts\";\n\ninterface RouteDeps {\n magicLinkService: MagicLinkService;\n sessionService: SessionService;\n queries: AuthQueries;\n emailService: EmailService;\n appName: string;\n buildSessionCookie: (token: string) => string;\n clearSessionCookie: (c: any) => void;\n}\n\nexport function createAuthRoutes(deps: RouteDeps): Hono {\n const { magicLinkService, sessionService, queries, emailService, appName, buildSessionCookie, clearSessionCookie } = deps;\n\n const authApp = new Hono();\n\n // CSRF protection for POST routes: require JSON content type\n authApp.use(\"/*\", async (c, next) => {\n if (c.req.method === \"POST\") {\n const contentType = c.req.header(\"Content-Type\");\n if (!contentType?.includes(\"application/json\")) {\n return c.json({ error: \"Content-Type must be application/json\" }, 400);\n }\n }\n return next();\n });\n\n // POST /magic-link — request a magic link\n authApp.post(\"/magic-link\", async (c) => {\n const { email } = await c.req.json();\n\n if (!email || typeof email !== \"string\") {\n return c.json({ error: \"Email is required\" }, 400);\n }\n\n const trimmedEmail = email.trim().toLowerCase();\n if (!trimmedEmail.includes(\"@\")) {\n return c.json({ error: \"Invalid email\" }, 400);\n }\n\n const { token } = await magicLinkService.createMagicLinkToken(trimmedEmail);\n\n const url = new URL(c.req.url);\n const magicLinkUrl = `${url.origin}/auth/magic-link/${token}`;\n\n await emailService.sendMagicLink(trimmedEmail, magicLinkUrl);\n\n return c.json({ success: true });\n });\n\n // GET /magic-link/:token — verify and authenticate\n authApp.get(\"/magic-link/:token\", async (c) => {\n const token = c.req.param(\"token\");\n const result = await magicLinkService.verifyMagicLinkToken(token);\n\n if (!result) {\n return c.html(\n `\n

Invalid or expired link

This magic link has expired or has already been used.

\n Go back to ${appName}\n `,\n 400,\n );\n }\n\n const { token: sessionToken } = await sessionService.createUserSession(result.userId);\n const cookie = buildSessionCookie(sessionToken);\n\n return new Response(null, {\n status: 302,\n headers: {\n Location: \"/\",\n \"Set-Cookie\": cookie,\n },\n });\n });\n\n // POST /logout\n authApp.post(\"/logout\", async (c) => {\n const sessionToken = c.get(\"sessionToken\");\n\n if (sessionToken) {\n await sessionService.invalidateSession(sessionToken);\n }\n\n clearSessionCookie(c);\n return c.json({ success: true });\n });\n\n // POST /change-email — authenticated; sends a confirmation link to the new address\n authApp.post(\"/change-email\", async (c) => {\n const user = c.get(\"user\");\n if (!user) {\n return c.json({ error: \"Not authenticated\" }, 401);\n }\n\n const { email } = await c.req.json();\n if (!email || typeof email !== \"string\") {\n return c.json({ error: \"Email is required\" }, 400);\n }\n\n const newEmail = email.trim().toLowerCase();\n if (!newEmail.includes(\"@\")) {\n return c.json({ error: \"Invalid email\" }, 400);\n }\n\n if (newEmail === user.email) {\n return c.json({ error: \"That is already your email address\" }, 400);\n }\n\n const existing = await queries.getUserByEmail(newEmail);\n if (existing) {\n return c.json({ error: \"That email is already in use\" }, 400);\n }\n\n const { token } = await magicLinkService.createEmailChangeToken(user.id, newEmail);\n const url = new URL(c.req.url);\n const changeUrl = `${url.origin}/auth/change-email/${token}`;\n\n await emailService.sendChangeEmailLink(newEmail, changeUrl);\n\n return c.json({ success: true });\n });\n\n // GET /change-email/:token — verify and update email\n authApp.get(\"/change-email/:token\", async (c) => {\n const token = c.req.param(\"token\");\n const result = await magicLinkService.verifyEmailChangeToken(token);\n\n if (!result) {\n return c.html(\n `\n

Invalid or expired link

This email change link has expired or has already been used.

\n Go back to ${appName}\n `,\n 400,\n );\n }\n\n return new Response(null, {\n status: 302,\n headers: { Location: \"/?email_changed=1\" },\n });\n });\n\n // GET /me — return current user or null\n authApp.get(\"/me\", async (c) => {\n const user = c.get(\"user\");\n return c.json({ user: user || null });\n });\n\n return authApp;\n}\n",[],[162,234],{"_105":242,"_97":243,"_163":244,"_165":164,"_166":146,"_167":245,"_169":170,"_107":246,"_102":33,"_172":185,"_174":247,"_175":22,"_176":-5,"_177":248,"_101":249},"0e5c0b56-22b5-11f1-8d15-42dde27851f2","session.ts","0e5c0c14-22b5-11f1-8d15-42dde27851f2",4,["D",1773829645044],"import type { StudioKareSession, StudioKareUser } from \"../types.ts\";\nimport type { AuthQueries } from \"./queries.ts\";\n\nfunction bytesToHex(bytes: Uint8Array): string {\n return Array.from(bytes)\n .map((b) => b.toString(16).padStart(2, \"0\"))\n .join(\"\");\n}\n\nexport function generateToken(): string {\n const bytes = new Uint8Array(32);\n crypto.getRandomValues(bytes);\n return bytesToHex(bytes);\n}\n\nexport async function hashToken(token: string): Promise {\n const encoder = new TextEncoder();\n const hash = await crypto.subtle.digest(\"SHA-256\", encoder.encode(token));\n return bytesToHex(new Uint8Array(hash));\n}\n\nexport function generateId(): string {\n const bytes = new Uint8Array(16);\n crypto.getRandomValues(bytes);\n return bytesToHex(bytes);\n}\n\nexport interface ValidateResult {\n session: StudioKareSession;\n user: StudioKareUser;\n rotated: boolean;\n}\n\nexport function createSessionService(queries: AuthQueries, opts: { sessionLifetimeMs: number }) {\n const { sessionLifetimeMs } = opts;\n const sessionRotationMs = sessionLifetimeMs / 2;\n\n async function createUserSession(\n userId: string,\n ): Promise<{ token: string; session: StudioKareSession }> {\n const token = generateToken();\n const sessionId = await hashToken(token);\n const expiresAt = new Date(Date.now() + sessionLifetimeMs);\n\n await queries.createSessionRecord(sessionId, userId, expiresAt);\n\n return {\n token,\n session: { id: sessionId, userId, expiresAt },\n };\n }\n\n async function validateSession(token: string): Promise {\n const sessionId = await hashToken(token);\n const result = await queries.getSessionRecord(sessionId);\n\n if (!result) return null;\n\n const { session, user } = result;\n const now = new Date();\n\n if (session.expiresAt <= now) {\n await queries.deleteSessionRecord(sessionId);\n return null;\n }\n\n // Rotate if past the halfway point\n const timeRemaining = session.expiresAt.getTime() - now.getTime();\n if (timeRemaining < sessionRotationMs) {\n const newExpiresAt = new Date(Date.now() + sessionLifetimeMs);\n await queries.updateSessionExpiry(sessionId, newExpiresAt);\n session.expiresAt = newExpiresAt;\n return { session, user, rotated: true };\n }\n\n return { session, user, rotated: false };\n }\n\n async function invalidateSession(token: string): Promise {\n const sessionId = await hashToken(token);\n await queries.deleteSessionRecord(sessionId);\n }\n\n return { createUserSession, validateSession, invalidateSession };\n}\n\nexport type SessionService = ReturnType;\n",[],[162,243],[162],{"_105":252,"_97":253,"_163":254,"_165":-5,"_166":146,"_167":255,"_169":170,"_107":256,"_102":33,"_172":173,"_174":-5,"_175":22,"_176":-5,"_177":257,"_101":275},"3a4ada1c-22b5-11f1-b671-42dde27851f2","frontend","b9b6582f-6f53-4bb1-8a14-ce04d0d202e4",10,["D",1773829718740],[258,267],{"_105":259,"_97":260,"_163":261,"_165":254,"_166":146,"_167":262,"_169":170,"_107":263,"_102":33,"_172":185,"_174":264,"_175":22,"_176":-5,"_177":265,"_101":266},"3f7b2442-22b5-11f1-975b-42dde27851f2","LoginForm.tsx","3f7b2528-22b5-11f1-975b-42dde27851f2",11,["D",1773829727457],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\n\nimport { useState } from \"https://esm.sh/react@18.2.0\";\nimport { requestMagicLink } from \"./auth.ts\";\n\nexport function LoginForm({ onClose, Input }: { onClose?: () => void; Input?: any }) {\n const [email, setEmail] = useState(\"\");\n const [status, setStatus] = useState<\"idle\" | \"sending\" | \"sent\" | \"error\">(\"idle\");\n const [errorMessage, setErrorMessage] = useState(\"\");\n\n const handleSubmit = async (e?: React.FormEvent) => {\n e?.preventDefault();\n if (!email.trim()) return;\n\n setStatus(\"sending\");\n const result = await requestMagicLink(email.trim());\n\n if (result.success) {\n setStatus(\"sent\");\n } else {\n setStatus(\"error\");\n setErrorMessage(result.error || \"Something went wrong\");\n }\n };\n\n if (status === \"sent\") {\n return (\n

Check your email

\n We sent a login link to {email}\n

\n {onClose && (\n \n Close\n \n )}\n

\n );\n }\n\n const inputElement = Input ? (\n e.key === \"Enter\" && handleSubmit()}\n placeholder=\"Email address\"\n size=\"sm\"\n className=\"text-xs w-44\"\n />\n ) : (\n setEmail(e.target.value)}\n onKeyDown={(e: any) => e.key === \"Enter\" && handleSubmit()}\n placeholder=\"Email address\"\n className=\"text-xs w-44 px-2 py-1 border rounded\"\n />\n );\n\n return (\n

\n {inputElement}\n \n {status === \"sending\" ? \"Sending...\" : \"Log in\"}\n \n {status === \"error\" && {errorMessage}}\n \n );\n}\n",[],[253,260],{"_105":268,"_97":269,"_163":270,"_165":254,"_166":146,"_167":255,"_169":170,"_107":271,"_102":33,"_172":185,"_174":272,"_175":22,"_176":-5,"_177":273,"_101":274},"3a4aad58-22b5-11f1-b671-42dde27851f2","auth.ts","3a4aae2a-22b5-11f1-b671-42dde27851f2",["D",1773829718740],"import type { StudioKareUser } from \"../types.ts\";\n\ndeclare global {\n interface Window {\n __STUDIOKARE_USER__?: StudioKareUser | null;\n }\n}\n\nexport function getAuthUser(): StudioKareUser | null {\n return window.__STUDIOKARE_USER__ ?? null;\n}\n\nexport async function requestMagicLink(\n email: string,\n): Promise<{ success: boolean; error?: string }> {\n try {\n const response = await fetch(\"/auth/magic-link\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ email }),\n });\n if (!response.ok) {\n const data = await response.json();\n return { success: false, error: data.error || \"Failed to send magic link\" };\n }\n return { success: true };\n } catch {\n return { success: false, error: \"Network error\" };\n }\n}\n\nexport async function logout(): Promise {\n await fetch(\"/auth/logout\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n });\n window.location.reload();\n}\n\nexport async function requestEmailChange(\n newEmail: string,\n): Promise<{ success: boolean; error?: string }> {\n try {\n const response = await fetch(\"/auth/change-email\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ email: newEmail }),\n });\n if (!response.ok) {\n const data = await response.json();\n return { success: false, error: data.error || \"Failed to send confirmation\" };\n }\n return { success: true };\n } catch {\n return { success: false, error: \"Network error\" };\n }\n}\n",[],[253,269],[253],{"_105":277,"_97":278,"_163":279,"_165":-5,"_166":146,"_167":151,"_169":170,"_107":280,"_102":33,"_172":185,"_174":281,"_175":22,"_176":-5,"_177":282,"_101":283},"0024d84c-22b5-11f1-b87b-42dde27851f2","types.ts","0024d900-22b5-11f1-b87b-42dde27851f2",["D",1773829621196],"export interface StudioKareUser {\n id: string;\n email: string;\n createdAt: string;\n}\n\nexport interface StudioKareSession {\n id: string;\n userId: string;\n expiresAt: Date;\n}\n\nexport interface EmailService {\n sendMagicLink(email: string, magicLinkUrl: string): Promise;\n sendChangeEmailLink(newEmail: string, changeUrl: string): Promise;\n sendInvite(email: string, magicLinkUrl: string): Promise;\n}\n\nexport interface AuthConfig {\n appName: string;\n tablePrefix?: string; // default: \"studiokare\"\n cookieName?: string; // default: \"studiokare_session\"\n sessionLifetimeMs?: number; // default: 30 days\n magicLinkTtlMs?: number; // default: 15 minutes\n emailService?: EmailService; // default: ConsoleEmailService\n emailTemplates?: {\n magicLink?: (email: string, url: string) => { subject: string; text: string; html: string };\n emailChange?: (email: string, url: string) => { subject: string; text: string; html: string };\n invite?: (email: string, url: string) => { subject: string; text: string; html: string };\n };\n}\n",[],[278],"files",[160,179,189,197,206,215,224,232,241,251,258,267,276],"counts",{"_288":33,"_289":168,"_290":33,"_291":292,"_295":296},"pulls","branches","forks","envVars",{"_293":236,"_294":33},"count","emptyCount","connections",{"_293":33,"_297":33},"unfilledCount","contents",[300,303,306],{"_105":161,"_97":162,"_163":164,"_165":-5,"_166":146,"_167":168,"_169":170,"_107":301,"_102":33,"_172":173,"_174":-5,"_175":22,"_176":-5,"_101":302},["D",1773829630683],[162],{"_105":252,"_97":253,"_163":254,"_165":-5,"_166":146,"_167":255,"_169":170,"_107":304,"_102":33,"_172":173,"_174":-5,"_175":22,"_176":-5,"_101":305},["D",1773829718740],[253],{"_105":277,"_97":278,"_163":279,"_165":-5,"_166":146,"_167":151,"_169":170,"_107":307,"_102":33,"_172":185,"_174":281,"_175":22,"_176":-5,"_101":308},["D",1773829621196],[278],"file","upstreamProject","upstreamBranch",{"_105":149,"_107":313,"_314":315,"_97":45,"_147":106,"_102":316,"_148":-5,"_150":-5,"_317":-5,"_109":-5,"_157":22,"_111":112,"_156":96,"_16":122,"_155":98},["D",1773829593631],"updatedAt",["D",1773846129406],19,"lockfileKey","emptyEnvVars","isNew","flags",[],"routes/_app.x.$handle.$name.compare.$branch",{"_95":96,"_97":98,"_99":100,"_103":324,"_329":33,"_330":331,"_332":333,"_339":22,"_340":328,"_341":342,"_345":-5},{"_105":106,"_97":98,"_107":325,"_109":-5,"_110":22,"_111":112,"_113":114,"_115":-5,"_14":116,"_117":-5,"_118":22,"_119":-5,"_120":-5,"_121":33,"_16":122,"_123":-5,"_124":-5,"_125":-5,"_126":127,"_128":127,"_129":130,"_131":130,"_132":130,"_133":127,"_134":127,"_23":326,"_138":327,"_143":328,"_157":22},["D",1773829593631],{"_95":96,"_136":137},{"_95":96,"_140":137,"_14":116,"_141":142},{"_102":145,"_97":100,"_105":146,"_147":106,"_148":149,"_150":151,"_152":112,"_153":106,"_154":122,"_155":98,"_156":96},"ahead","behind",18,"diff",{"_334":335,"_175":336,"_337":338},"added",[],[],"modified",[],"hasChanges","sourceBranch","targetBranch",{"_105":149,"_107":343,"_314":344,"_97":45,"_147":106,"_102":316,"_148":-5,"_150":-5,"_317":-5,"_109":-5,"_157":22,"_111":112,"_156":96,"_16":122,"_155":98},["D",1773829593631],["D",1773846129406],"pull","actionData","errors"]

cricks_unmixed4u

studiokare-auth

Mergeinitial-setupintomain