@dyrected/core 2.15.0 → 2.16.0

package/dist/server.cjs

@@ -6466,6 +6466,134 @@ function isPlainObject2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
+// src/utils/id.ts
+var import_node_crypto2 = require("crypto");
+var NANOID_ALPHABET = "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ_-";
+var BASE62_ALPHABET = "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";
+var CROCKFORD_BASE32 = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
+var COMMON_SLUG_PREFIXES = {
+  users: "usr",
+  members: "mem",
+  accounts: "acc",
+  applications: "app",
+  customers: "cus",
+  products: "prd",
+  orders: "ord",
+  reports: "rpt",
+  sessions: "ses",
+  transactions: "txn",
+  wallets: "wal",
+  media: "med",
+  files: "fil",
+  posts: "post",
+  pages: "page",
+  tags: "tag",
+  categories: "cat",
+  comments: "com"
+};
+function nanoid(size = 21, alphabet = NANOID_ALPHABET) {
+  const mask = (2 << 31 - Math.clz32(alphabet.length - 1 | 1)) - 1;
+  const step = Math.ceil(1.6 * mask * size / alphabet.length);
+  let id = "";
+  while (true) {
+    const bytes = (0, import_node_crypto2.randomBytes)(step);
+    for (let i = 0; i < step; i++) {
+      const byte = bytes[i] & mask;
+      if (alphabet[byte]) {
+        id += alphabet[byte];
+        if (id.length === size) return id;
+      }
+    }
+  }
+}
+function encodeUlidTime(now2, len = 10) {
+  let str = "";
+  let time = Math.floor(now2);
+  for (let i = len - 1; i >= 0; i--) {
+    const mod = time % 32;
+    str = CROCKFORD_BASE32[mod] + str;
+    time = (time - mod) / 32;
+  }
+  return str;
+}
+function encodeUlidRandom(bytes) {
+  let str = "";
+  let bitBuffer = 0;
+  let bitsInBuffer = 0;
+  for (let i = 0; i < bytes.length; i++) {
+    bitBuffer = bitBuffer << 8 | bytes[i];
+    bitsInBuffer += 8;
+    while (bitsInBuffer >= 5) {
+      bitsInBuffer -= 5;
+      const index = bitBuffer >> bitsInBuffer & 31;
+      str += CROCKFORD_BASE32[index];
+    }
+  }
+  return str;
+}
+function ulid(seedTime = Date.now()) {
+  const timePart = encodeUlidTime(seedTime);
+  const randPart = encodeUlidRandom((0, import_node_crypto2.randomBytes)(10));
+  return timePart + randPart;
+}
+function uuid() {
+  return (0, import_node_crypto2.randomUUID)();
+}
+function resolvePrefix(slug, explicitPrefix) {
+  if (explicitPrefix && typeof explicitPrefix === "string" && explicitPrefix.trim().length > 0) {
+    const cleaned = explicitPrefix.trim().toLowerCase().replace(/[^a-z0-9_]/g, "");
+    if (cleaned.length > 0) return cleaned;
+  }
+  if (!slug || typeof slug !== "string") return "col";
+  const s = slug.trim().toLowerCase();
+  if (COMMON_SLUG_PREFIXES[s]) return COMMON_SLUG_PREFIXES[s];
+  const pieces = s.split(/[-_]/).filter(Boolean);
+  if (pieces.length > 1 && pieces[0].length >= 2) {
+    const first2 = pieces[0].replace(/[^a-z0-9]/g, "");
+    if (first2.length >= 2) return first2.slice(0, 4);
+  }
+  const cleanWord = s.replace(/[^a-z0-9]/g, "");
+  if (cleanWord.length <= 4) return cleanWord || "col";
+  return cleanWord.slice(0, 3) || "col";
+}
+function prefixedId(prefix = "col", size = 16) {
+  const cleanPrefix = (prefix || "col").toLowerCase().replace(/[^a-z0-9_]/g, "") || "col";
+  return `${cleanPrefix}_${nanoid(size, BASE62_ALPHABET)}`;
+}
+function generateId(options) {
+  if (typeof options === "string") {
+    return prefixedId(resolvePrefix(options));
+  }
+  const opts = options || {};
+  const type = opts.type || "prefixed-nanoid";
+  switch (type) {
+    case "uuid":
+      return uuid();
+    case "ulid":
+      return ulid();
+    case "nanoid":
+      return nanoid(opts.size || 21);
+    case "prefixed-nanoid":
+    default:
+      return prefixedId(opts.prefix || "col", opts.size || 16);
+  }
+}
+function generateDocumentId(collectionOrSlug) {
+  if (!collectionOrSlug) {
+    return prefixedId("col");
+  }
+  if (typeof collectionOrSlug === "string") {
+    const prefix2 = resolvePrefix(collectionOrSlug);
+    return prefixedId(prefix2);
+  }
+  if (typeof collectionOrSlug.idGenerator === "function") {
+    return collectionOrSlug.idGenerator(collectionOrSlug.slug);
+  }
+  const type = collectionOrSlug.idType || "prefixed-nanoid";
+  const prefix = resolvePrefix(collectionOrSlug.slug, collectionOrSlug.idPrefix);
+  return generateId({ prefix, type });
+}
+
 // src/workflows.ts
 var WORKFLOW_HISTORY_COLLECTION = "__workflow_history";
 var LIFECYCLE_EVENTS_COLLECTION = "__lifecycle_events";
@@ -7434,6 +7562,9 @@ var CollectionController = class {
       surface: "collection.beforeChange",
       path: `collection:${this.collection.slug}.hooks.beforeChange`
     });
+    if (!data.id) {
+      data = { ...data, id: generateDocumentId(this.collection) };
+    }
     const doc = this.collection.workflow ? (await createWorkflowDocument({
       config,
       collection: this.collection,
@@ -7584,6 +7715,9 @@ var CollectionController = class {
       surface: "collection.beforeChange",
       path: `collection:${this.collection.slug}.hooks.beforeChange`
     });
+    if (!data.id) {
+      data = { ...data, id: generateDocumentId(this.collection) };
+    }
     const doc = await db.create({
       collection: this.collection.slug,
       data
@@ -7849,7 +7983,8 @@ var CollectionController = class {
     }
     const body = await c.req.json().catch(() => ({}));
     const requestedIds = Array.isArray(body?.ids) ? body.ids.filter((value) => typeof value === "string") : typeof body?.id === "string" ? [body.id] : [];
-    if (!requestedIds.length) {
+    const isHeaderAction = action.type === "header";
+    if (!requestedIds.length && !isHeaderAction) {
       return c.json(
         { error: true, message: "Provide an `id` or an `ids` array of documents to act on." },
         400
@@ -7877,6 +8012,30 @@ var CollectionController = class {
         return c.json({ error: true, message: `Access denied: action "${action.name}"` }, 403);
       }
     }
+    if (isHeaderAction && !requestedIds.length) {
+      if (typeof action.handler === "function") {
+        try {
+          const handlerResult = await action.handler({
+            doc: null,
+            docs: [],
+            user: user ?? null,
+            input,
+            collection: {
+              slug: this.collection.slug,
+              label: this.collection.labels?.singular ?? this.collection.slug
+            }
+          });
+          return c.json(handlerResult ?? { success: true });
+        } catch (error) {
+          const status = typeof error.statusCode === "number" ? error.statusCode : 500;
+          return c.json(
+            { error: true, message: error instanceof Error ? error.message : String(error) },
+            status
+          );
+        }
+      }
+      return c.json({ success: true });
+    }
     const results = [];
     for (const id of requestedIds) {
       const targetDoc = await db.findOne({ collection: this.collection.slug, id });
@@ -9285,7 +9444,7 @@ var MediaFolderController = class {
 };
 
 // src/controllers/auth.controller.ts
-var import_node_crypto2 = require("crypto");
+var import_node_crypto3 = require("crypto");
 
 // src/auth/lockout.ts
 var DEFAULT_MAX_LOGIN_ATTEMPTS = 5;
@@ -9596,7 +9755,7 @@ var AuthController = class {
     const data = {
       ...safeExtraFields,
       email,
-      password: await hashPassword((0, import_node_crypto2.randomBytes)(32).toString("hex"))
+      password: await hashPassword((0, import_node_crypto3.randomBytes)(32).toString("hex"))
     };
     if (this.hasField("status")) {
       data.status = "pending";
@@ -10199,7 +10358,7 @@ var AuthController = class {
 };
 
 // src/controllers/admin-auth.controller.ts
-var import_node_crypto3 = require("crypto");
+var import_node_crypto4 = require("crypto");
 var import_node_util2 = require("util");
 var import_jose2 = require("jose");
 var AdminAuthController = class {
@@ -10409,7 +10568,7 @@ var AdminAuthController = class {
             access.roles,
             access.data
           ),
-          password: await hashPassword((0, import_node_crypto3.randomBytes)(32).toString("hex"))
+          password: await hashPassword((0, import_node_crypto4.randomBytes)(32).toString("hex"))
         }
       });
     } else if (user) {
@@ -10496,7 +10655,7 @@ var AdminAuthController = class {
   }
   async buildOidcStartUrl(provider, returnTo, siteId, origin) {
     const discovery = await this.getOidcDiscovery(provider);
-    const nonce = (0, import_node_crypto3.randomBytes)(16).toString("hex");
+    const nonce = (0, import_node_crypto4.randomBytes)(16).toString("hex");
     const state = await this.signState({
       providerId: provider.id,
       returnTo,
@@ -11057,7 +11216,7 @@ function formatAIErrorMessage(error) {
   }
   return msg;
 }
-function generateId() {
+function generateId2() {
   return Math.random().toString(36).substring(2, 15) + Math.random().toString(36).substring(2, 15);
 }
 function buildDyrectedSystemPrompt(context) {
@@ -11203,7 +11362,7 @@ var AIAgent = class {
   }
   async createThread(title, id) {
     const thread = {
-      id: id || generateId(),
+      id: id || generateId2(),
       projectId: this.projectId,
       userId: this.userId,
       title: title || "New Conversation",
@@ -11270,7 +11429,7 @@ var AIAgent = class {
   }
   async persistUserMessage(threadId, content) {
     const message = {
-      id: generateId(),
+      id: generateId2(),
       threadId,
       role: "user",
       content,
@@ -11286,7 +11445,7 @@ var AIAgent = class {
   }
   async persistAssistantMessage(threadId, content, metadata, parts) {
     const message = {
-      id: generateId(),
+      id: generateId2(),
       threadId,
       role: "assistant",
       content,
@@ -14848,11 +15007,31 @@ function normalizeConfig(config) {
     }
     const updatedFieldNames = new Set(fields.map((f) => f.name));
     const fieldsToInject = SYSTEM_FIELDS.filter((f) => !updatedFieldNames.has(f.name));
+    const indexedFieldNames = /* @__PURE__ */ new Set();
+    if (col.indexes) {
+      for (const idx of col.indexes) {
+        if (Array.isArray(idx.fields)) {
+          for (const f of idx.fields) {
+            indexedFieldNames.add(f);
+          }
+        }
+      }
+    }
+    const allFields = [...fields, ...fieldsToInject].map((field) => {
+      if (field.unique || field.name && indexedFieldNames.has(field.name)) {
+        return { ...field, promoted: true };
+      }
+      return field;
+    });
     const workflow = col.workflow || (col.drafts ? simplePublishingWorkflow() : void 0);
+    const idPrefix = col.idPrefix || resolvePrefix(col.slug);
+    const idType = col.idType || "prefixed-nanoid";
     return {
       ...col,
+      idPrefix,
+      idType,
       workflow,
-      fields: [...fields, ...fieldsToInject]
+      fields: allFields
     };
   });
   const hasAuditCollection = normalizedCollections.some((col) => col.slug === AUDIT_COLLECTION_SLUG);

package/dist/server.d.cts

@@ -1,5 +1,5 @@
-import { M as DyrectedContext, D as DyrectedConfig, C as CollectionConfig, G as GlobalConfig, bl as DatabaseAdapter, b as AuthenticatedUser, bG as DyrectedAIContext, an as AIThread, aj as AIMessage, cw as RAGSearchResult, am as AIRateLimitStore, al as AIRateLimitResult } from './app-Cmp5lFLJ.cjs';
-export { da as CollectionTokenPayload, db as DEFAULT_SESSION_EXPIRY, dc as DyrectedObservabilityRuntime, dd as RequestBodyCapture, de as RequestTraceContext, df as ResolvedObservabilityConfig, dg as attachRequestMetrics, dh as bindObservabilityRuntime, di as buildRequestLogger, dj as captureRequestBody, dk as createDyrectedApp, dl as createObservabilityRuntime, dm as createRequestSpan, dn as decodeCollectionToken, dp as endRequestSpan, dq as getConfigLogger, dr as getObservabilityRuntime, ds as getRequestLogger, dt as redactBody, du as redactHeaders, dv as renderPrometheusMetrics, dw as resolveObservabilityConfig, dx as resolveSessionTokenExpiry, dy as shouldSampleRequest, dz as signCollectionToken, dA as verifyCollectionToken } from './app-Cmp5lFLJ.cjs';
+import { M as DyrectedContext, D as DyrectedConfig, C as CollectionConfig, G as GlobalConfig, bn as DatabaseAdapter, b as AuthenticatedUser, bI as DyrectedAIContext, ao as AIThread, ak as AIMessage, cz as RAGSearchResult, an as AIRateLimitStore, am as AIRateLimitResult } from './app-KSDgfXsw.cjs';
+export { dd as CollectionTokenPayload, de as DEFAULT_SESSION_EXPIRY, df as DyrectedObservabilityRuntime, dg as RequestBodyCapture, dh as RequestTraceContext, di as ResolvedObservabilityConfig, dj as attachRequestMetrics, dk as bindObservabilityRuntime, dl as buildRequestLogger, dm as captureRequestBody, dn as createDyrectedApp, dp as createObservabilityRuntime, dq as createRequestSpan, dr as decodeCollectionToken, ds as endRequestSpan, dt as getConfigLogger, du as getObservabilityRuntime, dv as getRequestLogger, dw as redactBody, dx as redactHeaders, dy as renderPrometheusMetrics, dz as resolveObservabilityConfig, dA as resolveSessionTokenExpiry, dB as shouldSampleRequest, dC as signCollectionToken, dD as verifyCollectionToken } from './app-KSDgfXsw.cjs';
 import * as hono from 'hono';
 import { Hono, Context, Next } from 'hono';
 import * as hono_utils_http_status from 'hono/utils/http-status';

package/dist/server.d.ts

@@ -1,5 +1,5 @@
-import { M as DyrectedContext, D as DyrectedConfig, C as CollectionConfig, G as GlobalConfig, bl as DatabaseAdapter, b as AuthenticatedUser, bG as DyrectedAIContext, an as AIThread, aj as AIMessage, cw as RAGSearchResult, am as AIRateLimitStore, al as AIRateLimitResult } from './app-Cmp5lFLJ.js';
-export { da as CollectionTokenPayload, db as DEFAULT_SESSION_EXPIRY, dc as DyrectedObservabilityRuntime, dd as RequestBodyCapture, de as RequestTraceContext, df as ResolvedObservabilityConfig, dg as attachRequestMetrics, dh as bindObservabilityRuntime, di as buildRequestLogger, dj as captureRequestBody, dk as createDyrectedApp, dl as createObservabilityRuntime, dm as createRequestSpan, dn as decodeCollectionToken, dp as endRequestSpan, dq as getConfigLogger, dr as getObservabilityRuntime, ds as getRequestLogger, dt as redactBody, du as redactHeaders, dv as renderPrometheusMetrics, dw as resolveObservabilityConfig, dx as resolveSessionTokenExpiry, dy as shouldSampleRequest, dz as signCollectionToken, dA as verifyCollectionToken } from './app-Cmp5lFLJ.js';
+import { M as DyrectedContext, D as DyrectedConfig, C as CollectionConfig, G as GlobalConfig, bn as DatabaseAdapter, b as AuthenticatedUser, bI as DyrectedAIContext, ao as AIThread, ak as AIMessage, cz as RAGSearchResult, an as AIRateLimitStore, am as AIRateLimitResult } from './app-KSDgfXsw.js';
+export { dd as CollectionTokenPayload, de as DEFAULT_SESSION_EXPIRY, df as DyrectedObservabilityRuntime, dg as RequestBodyCapture, dh as RequestTraceContext, di as ResolvedObservabilityConfig, dj as attachRequestMetrics, dk as bindObservabilityRuntime, dl as buildRequestLogger, dm as captureRequestBody, dn as createDyrectedApp, dp as createObservabilityRuntime, dq as createRequestSpan, dr as decodeCollectionToken, ds as endRequestSpan, dt as getConfigLogger, du as getObservabilityRuntime, dv as getRequestLogger, dw as redactBody, dx as redactHeaders, dy as renderPrometheusMetrics, dz as resolveObservabilityConfig, dA as resolveSessionTokenExpiry, dB as shouldSampleRequest, dC as signCollectionToken, dD as verifyCollectionToken } from './app-KSDgfXsw.js';
 import * as hono from 'hono';
 import { Hono, Context, Next } from 'hono';
 import * as hono_utils_http_status from 'hono/utils/http-status';

package/dist/server.js

@@ -6406,6 +6406,134 @@ function isPlainObject2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
+// src/utils/id.ts
+import { randomBytes as randomBytes2, randomUUID } from "crypto";
+var NANOID_ALPHABET = "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ_-";
+var BASE62_ALPHABET = "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";
+var CROCKFORD_BASE32 = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
+var COMMON_SLUG_PREFIXES = {
+  users: "usr",
+  members: "mem",
+  accounts: "acc",
+  applications: "app",
+  customers: "cus",
+  products: "prd",
+  orders: "ord",
+  reports: "rpt",
+  sessions: "ses",
+  transactions: "txn",
+  wallets: "wal",
+  media: "med",
+  files: "fil",
+  posts: "post",
+  pages: "page",
+  tags: "tag",
+  categories: "cat",
+  comments: "com"
+};
+function nanoid(size = 21, alphabet = NANOID_ALPHABET) {
+  const mask = (2 << 31 - Math.clz32(alphabet.length - 1 | 1)) - 1;
+  const step = Math.ceil(1.6 * mask * size / alphabet.length);
+  let id = "";
+  while (true) {
+    const bytes = randomBytes2(step);
+    for (let i = 0; i < step; i++) {
+      const byte = bytes[i] & mask;
+      if (alphabet[byte]) {
+        id += alphabet[byte];
+        if (id.length === size) return id;
+      }
+    }
+  }
+}
+function encodeUlidTime(now2, len = 10) {
+  let str = "";
+  let time = Math.floor(now2);
+  for (let i = len - 1; i >= 0; i--) {
+    const mod = time % 32;
+    str = CROCKFORD_BASE32[mod] + str;
+    time = (time - mod) / 32;
+  }
+  return str;
+}
+function encodeUlidRandom(bytes) {
+  let str = "";
+  let bitBuffer = 0;
+  let bitsInBuffer = 0;
+  for (let i = 0; i < bytes.length; i++) {
+    bitBuffer = bitBuffer << 8 | bytes[i];
+    bitsInBuffer += 8;
+    while (bitsInBuffer >= 5) {
+      bitsInBuffer -= 5;
+      const index = bitBuffer >> bitsInBuffer & 31;
+      str += CROCKFORD_BASE32[index];
+    }
+  }
+  return str;
+}
+function ulid(seedTime = Date.now()) {
+  const timePart = encodeUlidTime(seedTime);
+  const randPart = encodeUlidRandom(randomBytes2(10));
+  return timePart + randPart;
+}
+function uuid() {
+  return randomUUID();
+}
+function resolvePrefix(slug, explicitPrefix) {
+  if (explicitPrefix && typeof explicitPrefix === "string" && explicitPrefix.trim().length > 0) {
+    const cleaned = explicitPrefix.trim().toLowerCase().replace(/[^a-z0-9_]/g, "");
+    if (cleaned.length > 0) return cleaned;
+  }
+  if (!slug || typeof slug !== "string") return "col";
+  const s = slug.trim().toLowerCase();
+  if (COMMON_SLUG_PREFIXES[s]) return COMMON_SLUG_PREFIXES[s];
+  const pieces = s.split(/[-_]/).filter(Boolean);
+  if (pieces.length > 1 && pieces[0].length >= 2) {
+    const first2 = pieces[0].replace(/[^a-z0-9]/g, "");
+    if (first2.length >= 2) return first2.slice(0, 4);
+  }
+  const cleanWord = s.replace(/[^a-z0-9]/g, "");
+  if (cleanWord.length <= 4) return cleanWord || "col";
+  return cleanWord.slice(0, 3) || "col";
+}
+function prefixedId(prefix = "col", size = 16) {
+  const cleanPrefix = (prefix || "col").toLowerCase().replace(/[^a-z0-9_]/g, "") || "col";
+  return `${cleanPrefix}_${nanoid(size, BASE62_ALPHABET)}`;
+}
+function generateId(options) {
+  if (typeof options === "string") {
+    return prefixedId(resolvePrefix(options));
+  }
+  const opts = options || {};
+  const type = opts.type || "prefixed-nanoid";
+  switch (type) {
+    case "uuid":
+      return uuid();
+    case "ulid":
+      return ulid();
+    case "nanoid":
+      return nanoid(opts.size || 21);
+    case "prefixed-nanoid":
+    default:
+      return prefixedId(opts.prefix || "col", opts.size || 16);
+  }
+}
+function generateDocumentId(collectionOrSlug) {
+  if (!collectionOrSlug) {
+    return prefixedId("col");
+  }
+  if (typeof collectionOrSlug === "string") {
+    const prefix2 = resolvePrefix(collectionOrSlug);
+    return prefixedId(prefix2);
+  }
+  if (typeof collectionOrSlug.idGenerator === "function") {
+    return collectionOrSlug.idGenerator(collectionOrSlug.slug);
+  }
+  const type = collectionOrSlug.idType || "prefixed-nanoid";
+  const prefix = resolvePrefix(collectionOrSlug.slug, collectionOrSlug.idPrefix);
+  return generateId({ prefix, type });
+}
+
 // src/workflows.ts
 var WORKFLOW_HISTORY_COLLECTION = "__workflow_history";
 var LIFECYCLE_EVENTS_COLLECTION = "__lifecycle_events";
@@ -7374,6 +7502,9 @@ var CollectionController = class {
       surface: "collection.beforeChange",
       path: `collection:${this.collection.slug}.hooks.beforeChange`
     });
+    if (!data.id) {
+      data = { ...data, id: generateDocumentId(this.collection) };
+    }
     const doc = this.collection.workflow ? (await createWorkflowDocument({
       config,
       collection: this.collection,
@@ -7524,6 +7655,9 @@ var CollectionController = class {
       surface: "collection.beforeChange",
       path: `collection:${this.collection.slug}.hooks.beforeChange`
     });
+    if (!data.id) {
+      data = { ...data, id: generateDocumentId(this.collection) };
+    }
     const doc = await db.create({
       collection: this.collection.slug,
       data
@@ -7789,7 +7923,8 @@ var CollectionController = class {
     }
     const body = await c.req.json().catch(() => ({}));
     const requestedIds = Array.isArray(body?.ids) ? body.ids.filter((value) => typeof value === "string") : typeof body?.id === "string" ? [body.id] : [];
-    if (!requestedIds.length) {
+    const isHeaderAction = action.type === "header";
+    if (!requestedIds.length && !isHeaderAction) {
       return c.json(
         { error: true, message: "Provide an `id` or an `ids` array of documents to act on." },
         400
@@ -7817,6 +7952,30 @@ var CollectionController = class {
         return c.json({ error: true, message: `Access denied: action "${action.name}"` }, 403);
       }
     }
+    if (isHeaderAction && !requestedIds.length) {
+      if (typeof action.handler === "function") {
+        try {
+          const handlerResult = await action.handler({
+            doc: null,
+            docs: [],
+            user: user ?? null,
+            input,
+            collection: {
+              slug: this.collection.slug,
+              label: this.collection.labels?.singular ?? this.collection.slug
+            }
+          });
+          return c.json(handlerResult ?? { success: true });
+        } catch (error) {
+          const status = typeof error.statusCode === "number" ? error.statusCode : 500;
+          return c.json(
+            { error: true, message: error instanceof Error ? error.message : String(error) },
+            status
+          );
+        }
+      }
+      return c.json({ success: true });
+    }
     const results = [];
     for (const id of requestedIds) {
       const targetDoc = await db.findOne({ collection: this.collection.slug, id });
@@ -9225,7 +9384,7 @@ var MediaFolderController = class {
 };
 
 // src/controllers/auth.controller.ts
-import { randomBytes as randomBytes2 } from "crypto";
+import { randomBytes as randomBytes3 } from "crypto";
 
 // src/auth/lockout.ts
 var DEFAULT_MAX_LOGIN_ATTEMPTS = 5;
@@ -9536,7 +9695,7 @@ var AuthController = class {
     const data = {
       ...safeExtraFields,
       email,
-      password: await hashPassword(randomBytes2(32).toString("hex"))
+      password: await hashPassword(randomBytes3(32).toString("hex"))
     };
     if (this.hasField("status")) {
       data.status = "pending";
@@ -10139,7 +10298,7 @@ var AuthController = class {
 };
 
 // src/controllers/admin-auth.controller.ts
-import { randomBytes as randomBytes3 } from "crypto";
+import { randomBytes as randomBytes4 } from "crypto";
 import { TextEncoder as TextEncoder2 } from "util";
 import {
   SignJWT as SignJWT2,
@@ -10354,7 +10513,7 @@ var AdminAuthController = class {
             access.roles,
             access.data
           ),
-          password: await hashPassword(randomBytes3(32).toString("hex"))
+          password: await hashPassword(randomBytes4(32).toString("hex"))
         }
       });
     } else if (user) {
@@ -10441,7 +10600,7 @@ var AdminAuthController = class {
   }
   async buildOidcStartUrl(provider, returnTo, siteId, origin) {
     const discovery = await this.getOidcDiscovery(provider);
-    const nonce = randomBytes3(16).toString("hex");
+    const nonce = randomBytes4(16).toString("hex");
     const state = await this.signState({
       providerId: provider.id,
       returnTo,
@@ -11002,7 +11161,7 @@ function formatAIErrorMessage(error) {
   }
   return msg;
 }
-function generateId() {
+function generateId2() {
   return Math.random().toString(36).substring(2, 15) + Math.random().toString(36).substring(2, 15);
 }
 function buildDyrectedSystemPrompt(context) {
@@ -11148,7 +11307,7 @@ var AIAgent = class {
   }
   async createThread(title, id) {
     const thread = {
-      id: id || generateId(),
+      id: id || generateId2(),
       projectId: this.projectId,
       userId: this.userId,
       title: title || "New Conversation",
@@ -11215,7 +11374,7 @@ var AIAgent = class {
   }
   async persistUserMessage(threadId, content) {
     const message = {
-      id: generateId(),
+      id: generateId2(),
       threadId,
       role: "user",
       content,
@@ -11231,7 +11390,7 @@ var AIAgent = class {
   }
   async persistAssistantMessage(threadId, content, metadata, parts) {
     const message = {
-      id: generateId(),
+      id: generateId2(),
       threadId,
       role: "assistant",
       content,
@@ -14793,11 +14952,31 @@ function normalizeConfig(config) {
     }
     const updatedFieldNames = new Set(fields.map((f) => f.name));
     const fieldsToInject = SYSTEM_FIELDS.filter((f) => !updatedFieldNames.has(f.name));
+    const indexedFieldNames = /* @__PURE__ */ new Set();
+    if (col.indexes) {
+      for (const idx of col.indexes) {
+        if (Array.isArray(idx.fields)) {
+          for (const f of idx.fields) {
+            indexedFieldNames.add(f);
+          }
+        }
+      }
+    }
+    const allFields = [...fields, ...fieldsToInject].map((field) => {
+      if (field.unique || field.name && indexedFieldNames.has(field.name)) {
+        return { ...field, promoted: true };
+      }
+      return field;
+    });
     const workflow = col.workflow || (col.drafts ? simplePublishingWorkflow() : void 0);
+    const idPrefix = col.idPrefix || resolvePrefix(col.slug);
+    const idType = col.idType || "prefixed-nanoid";
     return {
       ...col,
+      idPrefix,
+      idType,
       workflow,
-      fields: [...fields, ...fieldsToInject]
+      fields: allFields
     };
   });
   const hasAuditCollection = normalizedCollections.some((col) => col.slug === AUDIT_COLLECTION_SLUG);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dyrected/core",
-  "version": "2.15.0",
+  "version": "2.16.0",
   "type": "module",
   "main": "./dist/index.js",
   "module": "./dist/index.js",