@dyrected/core 2.5.44 → 2.5.45

package/dist/server.js

@@ -13,14 +13,14 @@ import {
   runCollectionHooks,
   saveWorkflowDraft,
   transitionWorkflow
-} from "./chunk-44O2LDPT.js";
+} from "./chunk-FCXE5CVC.js";
 
-// src/app.js
+// src/app.ts
 import { Hono } from "hono";
 import { cors } from "hono/cors";
 import { requestId } from "hono/request-id";
 
-// src/services/defaults.service.js
+// src/services/defaults.service.ts
 var DefaultsService = class {
   /**
    * Recursively apply default values to a data object based on field definitions.
@@ -28,14 +28,12 @@ var DefaultsService = class {
   static apply(fields, data = {}) {
     const result = { ...data || {} };
     fields.forEach((field) => {
-      if (field.type === "join")
-        return;
+      if (field.type === "join") return;
       if (field.type === "row" && field.fields) {
         Object.assign(result, this.apply(field.fields, data));
         return;
       }
-      if (!field.name)
-        return;
+      if (!field.name) return;
       let value = result[field.name];
       if ((value === void 0 || value === null) && field.renameTo) {
         const legacyValue = result[field.renameTo];
@@ -48,12 +46,9 @@ var DefaultsService = class {
         if (field.defaultValue !== void 0) {
           result[field.name] = field.defaultValue;
         } else {
-          if (field.type === "boolean")
-            result[field.name] = false;
-          else if (field.type === "array")
-            result[field.name] = [];
-          else if (field.type === "multiSelect")
-            result[field.name] = [];
+          if (field.type === "boolean") result[field.name] = false;
+          else if (field.type === "array") result[field.name] = [];
+          else if (field.type === "multiSelect") result[field.name] = [];
           else if (field.type === "object") {
             result[field.name] = this.apply(field.fields || [], {});
           }
@@ -68,7 +63,7 @@ var DefaultsService = class {
   }
 };
 
-// src/services/population.service.js
+// src/services/population.service.ts
 var PopulationService = class {
   db;
   collections;
@@ -121,31 +116,29 @@ var PopulationService = class {
         Object.assign(populatedDoc, rowPopulated);
         continue;
       }
-      if (!field.name)
-        continue;
+      if (!field.name) continue;
       const value = populatedDoc[field.name];
       if (field.type === "relationship" && field.relationTo && value) {
         const relatedCollection = this.collections.find((c) => c.slug === field.relationTo);
-        if (!relatedCollection)
-          continue;
+        if (!relatedCollection) continue;
         if (Array.isArray(value)) {
-          populatedDoc[field.name] = await Promise.all(value.map(async (id) => {
-            if (!id)
-              return id;
-            let doc = id;
-            if (typeof id === "string") {
-              doc = await this.db.findOne({ collection: field.relationTo, id });
-            }
-            if (!doc || typeof doc !== "object")
-              return id;
-            const docWithDefaults = DefaultsService.apply(relatedCollection.fields, doc);
-            return this.populate({
-              data: docWithDefaults,
-              fields: relatedCollection.fields,
-              currentDepth: currentDepth + 1,
-              maxDepth
-            });
-          }));
+          populatedDoc[field.name] = await Promise.all(
+            value.map(async (id) => {
+              if (!id) return id;
+              let doc = id;
+              if (typeof id === "string") {
+                doc = await this.db.findOne({ collection: field.relationTo, id });
+              }
+              if (!doc || typeof doc !== "object") return id;
+              const docWithDefaults = DefaultsService.apply(relatedCollection.fields, doc);
+              return this.populate({
+                data: docWithDefaults,
+                fields: relatedCollection.fields,
+                currentDepth: currentDepth + 1,
+                maxDepth
+              });
+            })
+          );
         } else if (value) {
           let doc = value;
           if (typeof value === "string") {
@@ -194,17 +187,18 @@ var PopulationService = class {
         });
       }
       if (field.type === "blocks" && field.blocks && Array.isArray(value)) {
-        populatedDoc[field.name] = await Promise.all(value.map(async (blockData) => {
-          const blockConfig = field.blocks.find((b) => b.slug === blockData.blockType);
-          if (!blockConfig)
-            return blockData;
-          return this.populate({
-            data: blockData,
-            fields: blockConfig.fields,
-            currentDepth,
-            maxDepth
-          });
-        }));
+        populatedDoc[field.name] = await Promise.all(
+          value.map(async (blockData) => {
+            const blockConfig = field.blocks.find((b) => b.slug === blockData.blockType);
+            if (!blockConfig) return blockData;
+            return this.populate({
+              data: blockData,
+              fields: blockConfig.fields,
+              currentDepth,
+              maxDepth
+            });
+          })
+        );
       }
     }
     return populatedDoc;
@@ -213,8 +207,7 @@ var PopulationService = class {
    * Helper to populate a PaginatedResult
    */
   async populateResult(result, fields, maxDepth) {
-    if (maxDepth <= 0)
-      return result;
+    if (maxDepth <= 0) return result;
     const populatedDocs = await this.populate({
       data: result.docs,
       fields,
@@ -228,7 +221,7 @@ var PopulationService = class {
   }
 };
 
-// src/services/audit.service.js
+// src/services/audit.service.ts
 var AuditService = class {
   /**
    * Writes a single entry to the __audit collection.
@@ -256,7 +249,7 @@ var AuditService = class {
   }
 };
 
-// src/auth/password.js
+// src/auth/password.ts
 import { promisify } from "util";
 import { scrypt, randomBytes, timingSafeEqual } from "crypto";
 var scryptAsync = promisify(scrypt);
@@ -269,23 +262,23 @@ async function hashPassword(plain) {
 }
 async function verifyPassword(plain, stored) {
   const [salt, storedHash] = stored.split(":");
-  if (!salt || !storedHash)
-    return false;
+  if (!salt || !storedHash) return false;
   const derivedKey = await scryptAsync(plain, salt, KEY_LEN);
   const storedBuffer = Buffer.from(storedHash, "hex");
-  if (derivedKey.length !== storedBuffer.length)
-    return false;
+  if (derivedKey.length !== storedBuffer.length) return false;
   return timingSafeEqual(derivedKey, storedBuffer);
 }
 
-// src/utils/readonly-db.js
+// src/utils/readonly-db.ts
 var WRITE_METHODS = ["create", "update", "delete", "updateGlobal", "execute"];
 function createReadonlyDb(db) {
   return new Proxy(db, {
     get(target, prop) {
       if (WRITE_METHODS.includes(prop)) {
         return () => {
-          throw new Error(`[dyrected] Write operation "${String(prop)}" is not allowed in this hook phase. Use afterChange/afterDelete hooks for write operations.`);
+          throw new Error(
+            `[dyrected] Write operation "${String(prop)}" is not allowed in this hook phase. Use afterChange/afterDelete hooks for write operations.`
+          );
         };
       }
       return Reflect.get(target, prop);
@@ -293,13 +286,11 @@ function createReadonlyDb(db) {
   });
 }
 
-// src/auth/jexl.js
+// src/auth/jexl.ts
 import jexl from "jexl";
 async function evaluateAccess(expression, context) {
-  if (expression === void 0 || expression === null)
-    return false;
-  if (typeof expression === "boolean")
-    return expression;
+  if (expression === void 0 || expression === null) return false;
+  if (typeof expression === "boolean") return expression;
   try {
     const result = await jexl.eval(expression, context);
     return !!result;
@@ -309,7 +300,7 @@ async function evaluateAccess(expression, context) {
   }
 }
 
-// src/controllers/collection.controller.js
+// src/controllers/collection.controller.ts
 var CollectionController = class {
   collection;
   constructor(collection) {
@@ -317,8 +308,8 @@ var CollectionController = class {
   }
   getDelegatedProvider(c) {
     const config = c.get("config");
-    const authCollectionSlug = config.adminAuth?.collectionSlug || "__admins";
-    if (this.collection.slug !== authCollectionSlug) {
+    const authCollection = getAdminAuthCollection(config);
+    if (!authCollection || this.collection.slug !== authCollection.slug) {
       return null;
     }
     return config.adminAuth?.providers?.find((p) => p.members) || null;
@@ -326,8 +317,7 @@ var CollectionController = class {
   async find(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const provider = this.getDelegatedProvider(c);
     if (provider && provider.members?.list) {
       const limit2 = Number(c.req.query("limit")) || 10;
@@ -382,7 +372,7 @@ var CollectionController = class {
       if (this.collection.admin?.filterable === false) {
         where = void 0;
       } else {
-        const { sanitizeWhereClause } = await import("./where-sanitizer-7Q4JXMX6.js");
+        const { sanitizeWhereClause } = await import("./where-sanitizer-WJ2W2QCE.js");
         where = sanitizeWhereClause(where, this.collection.fields);
         if (Object.keys(where).length === 0) {
           where = void 0;
@@ -445,13 +435,11 @@ var CollectionController = class {
   async findOne(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const provider = this.getDelegatedProvider(c);
     if (provider && (provider.members?.get || provider.members?.list)) {
       const id2 = c.req.param("id");
-      if (!id2)
-        return c.json({ message: "Missing ID" }, 400);
+      if (!id2) return c.json({ message: "Missing ID" }, 400);
       const localDoc = await db.findOne({ collection: this.collection.slug, id: id2 });
       const externalSubject = localDoc?.externalSubject || id2;
       let member = null;
@@ -461,8 +449,7 @@ var CollectionController = class {
         const listResult = await provider.members.list({ req: c.req });
         member = listResult.docs.find((m) => m.id === externalSubject) || null;
       }
-      if (!member)
-        return c.json({ message: "Not Found" }, 404);
+      if (!member) return c.json({ message: "Not Found" }, 404);
       return c.json({
         ...member,
         id: localDoc ? localDoc.id : member.id,
@@ -473,15 +460,12 @@ var CollectionController = class {
     const id = c.req.param("id");
     const depth = c.req.query("depth") !== void 0 ? Number(c.req.query("depth")) : 10;
     const user = c.get("user");
-    if (!id)
-      return c.json({ message: "Missing ID" }, 400);
+    if (!id) return c.json({ message: "Missing ID" }, 400);
     let doc = await db.findOne({ collection: this.collection.slug, id });
-    if (!doc)
-      return c.json({ message: "Not Found" }, 404);
+    if (!doc) return c.json({ message: "Not Found" }, 404);
     if (this.collection.workflow) {
       doc = materializeWorkflowDocument(doc, this.collection.workflow, user);
-      if (!doc)
-        return c.json({ message: "Not Found" }, 404);
+      if (!doc) return c.json({ message: "Not Found" }, 404);
     }
     const docWithDefaults = DefaultsService.apply(this.collection.fields, doc);
     const docWithCollectionHooks = await runCollectionHooks(this.collection.hooks?.afterRead, {
@@ -506,8 +490,7 @@ var CollectionController = class {
   async create(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const provider = this.getDelegatedProvider(c);
     if (provider && provider.members?.create) {
       const contentType2 = c.req.header("Content-Type") || "";
@@ -582,16 +565,13 @@ var CollectionController = class {
   async upload(c) {
     const config = c.get("config");
     const storage = config.storage;
-    if (!storage)
-      return c.json({ message: "Storage not configured" }, 500);
+    if (!storage) return c.json({ message: "Storage not configured" }, 500);
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const readonlyDb = createReadonlyDb(db);
     const formData = await c.req.formData();
     const file = formData.get("file");
-    if (!file)
-      return c.json({ message: "No file uploaded" }, 400);
+    if (!file) return c.json({ message: "No file uploaded" }, 400);
     const buffer = new Uint8Array(await file.arrayBuffer());
     const siteId = c.get("siteId");
     const workspaceId = c.get("workspaceId");
@@ -650,13 +630,11 @@ var CollectionController = class {
   async update(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const provider = this.getDelegatedProvider(c);
     if (provider && provider.members?.update) {
       const id2 = c.req.param("id");
-      if (!id2)
-        return c.json({ message: "Missing ID" }, 400);
+      if (!id2) return c.json({ message: "Missing ID" }, 400);
       const body2 = await c.req.json();
       const localDoc = await db.findOne({ collection: this.collection.slug, id: id2 });
       const externalSubject = localDoc?.externalSubject || id2;
@@ -669,8 +647,7 @@ var CollectionController = class {
     }
     const readonlyDb = createReadonlyDb(db);
     const id = c.req.param("id");
-    if (!id)
-      return c.json({ message: "Missing ID" }, 400);
+    if (!id) return c.json({ message: "Missing ID" }, 400);
     const body = await c.req.json();
     const user = c.get("user");
     let data = { ...body };
@@ -684,8 +661,7 @@ var CollectionController = class {
       updatedBy: user?.sub ?? null
     });
     const originalDoc = await db.findOne({ collection: this.collection.slug, id });
-    if (!originalDoc)
-      return c.json({ message: "Not Found" }, 404);
+    if (!originalDoc) return c.json({ message: "Not Found" }, 404);
     let before = null;
     if (this.collection.audit) {
       before = originalDoc;
@@ -729,10 +705,8 @@ var CollectionController = class {
   }
   async transition(c) {
     const config = c.get("config");
-    if (!config.db)
-      return c.json({ message: "Database not configured" }, 500);
-    if (!this.collection.workflow)
-      return c.json({ message: "Workflows are not enabled for this collection" }, 404);
+    if (!config.db) return c.json({ message: "Database not configured" }, 500);
+    if (!this.collection.workflow) return c.json({ message: "Workflows are not enabled for this collection" }, 404);
     const id = c.req.param("id");
     const transitionName = c.req.param("transition");
     const body = await c.req.json().catch(() => ({}));
@@ -755,16 +729,12 @@ var CollectionController = class {
   }
   async workflowHistory(c) {
     const config = c.get("config");
-    if (!config.db)
-      return c.json({ message: "Database not configured" }, 500);
-    if (!this.collection.workflow)
-      return c.json({ message: "Workflows are not enabled for this collection" }, 404);
+    if (!config.db) return c.json({ message: "Database not configured" }, 500);
+    if (!this.collection.workflow) return c.json({ message: "Workflows are not enabled for this collection" }, 404);
     const documentId = c.req.param("id");
-    if (!documentId)
-      return c.json({ message: "Missing ID" }, 400);
+    if (!documentId) return c.json({ message: "Missing ID" }, 400);
     const document = await config.db.findOne({ collection: this.collection.slug, id: documentId });
-    if (!document)
-      return c.json({ message: "Not Found" }, 404);
+    if (!document) return c.json({ message: "Not Found" }, 404);
     const readAccess = this.collection.access?.read;
     if (readAccess !== void 0 && readAccess !== null) {
       const args = { user: c.get("user"), req: c.req, doc: document };
@@ -778,8 +748,7 @@ var CollectionController = class {
         });
         allowed = match.total > 0;
       }
-      if (!allowed)
-        return c.json({ error: true, message: `Access denied: read on ${this.collection.slug}` }, 403);
+      if (!allowed) return c.json({ error: true, message: `Access denied: read on ${this.collection.slug}` }, 403);
     }
     const result = await config.db.find({
       collection: WORKFLOW_HISTORY_COLLECTION,
@@ -803,17 +772,14 @@ var CollectionController = class {
   async changePassword(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     if (!this.collection.auth) {
       return c.json({ message: "This collection does not support authentication" }, 400);
     }
     const id = c.req.param("id");
-    if (!id)
-      return c.json({ message: "Missing ID" }, 400);
+    if (!id) return c.json({ message: "Missing ID" }, 400);
     const user = c.get("user");
-    if (!user)
-      return c.json({ message: "Authentication required" }, 401);
+    if (!user) return c.json({ message: "Authentication required" }, 401);
     const body = await c.req.json().catch(() => null);
     const { oldPassword, newPassword, confirmPassword } = body ?? {};
     if (!newPassword) {
@@ -835,8 +801,7 @@ var CollectionController = class {
         return c.json({ message: "Current password is required" }, 400);
       }
       const existing = await db.findOne({ collection: this.collection.slug, id });
-      if (!existing)
-        return c.json({ message: "User not found" }, 404);
+      if (!existing) return c.json({ message: "User not found" }, 404);
       const valid = await verifyPassword(oldPassword, existing.password);
       if (!valid) {
         return c.json({ message: "Invalid current password" }, 400);
@@ -867,13 +832,11 @@ var CollectionController = class {
   async delete(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const provider = this.getDelegatedProvider(c);
     if (provider && provider.members?.delete) {
       const id2 = c.req.param("id");
-      if (!id2)
-        return c.json({ message: "Missing ID" }, 400);
+      if (!id2) return c.json({ message: "Missing ID" }, 400);
       const localDoc = await db.findOne({ collection: this.collection.slug, id: id2 });
       const externalSubject = localDoc?.externalSubject || id2;
       await provider.members.delete({ externalSubject, req: c.req });
@@ -881,12 +844,10 @@ var CollectionController = class {
     }
     const readonlyDb = createReadonlyDb(db);
     const id = c.req.param("id");
-    if (!id)
-      return c.json({ message: "Missing ID" }, 400);
+    if (!id) return c.json({ message: "Missing ID" }, 400);
     const user = c.get("user");
     const doc = await db.findOne({ collection: this.collection.slug, id });
-    if (!doc)
-      return c.json({ message: "Not Found" }, 404);
+    if (!doc) return c.json({ message: "Not Found" }, 404);
     let before = null;
     if (this.collection.audit) {
       before = doc;
@@ -921,8 +882,7 @@ var CollectionController = class {
   async deleteMany(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const readonlyDb = createReadonlyDb(db);
     const user = c.get("user");
     let ids = [];
@@ -937,8 +897,7 @@ var CollectionController = class {
       const raw = c.req.queries("ids") ?? c.req.queries("ids[]") ?? [];
       ids = raw.filter(Boolean);
     }
-    if (!ids.length)
-      return c.json({ message: "No IDs provided" }, 400);
+    if (!ids.length) return c.json({ message: "No IDs provided" }, 400);
     const deleted = [];
     const failed = [];
     for (const id of ids) {
@@ -991,8 +950,7 @@ var CollectionController = class {
   async seed(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const body = await c.req.json();
     const initialData = body.data;
     if (!initialData || !Array.isArray(initialData)) {
@@ -1012,7 +970,7 @@ var CollectionController = class {
   }
 };
 
-// src/controllers/global.controller.js
+// src/controllers/global.controller.ts
 var GlobalController = class {
   global;
   constructor(global) {
@@ -1021,8 +979,7 @@ var GlobalController = class {
   async get(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const readonlyDb = createReadonlyDb(db);
     const depth = c.req.query("depth") !== void 0 ? Number(c.req.query("depth")) : 10;
     const user = c.get("user");
@@ -1066,8 +1023,7 @@ var GlobalController = class {
   async update(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const readonlyDb = createReadonlyDb(db);
     const body = await c.req.json();
     const user = c.get("user");
@@ -1102,8 +1058,7 @@ var GlobalController = class {
   async seed(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const body = await c.req.json();
     const initialData = body.data;
     if (!initialData) {
@@ -1119,23 +1074,20 @@ var GlobalController = class {
   }
 };
 function isFunctionallyEmpty(obj) {
-  if (obj === null || obj === void 0 || obj === "")
-    return true;
+  if (obj === null || obj === void 0 || obj === "") return true;
   if (Array.isArray(obj)) {
-    if (obj.length === 0)
-      return true;
+    if (obj.length === 0) return true;
     return obj.every(isFunctionallyEmpty);
   }
   if (typeof obj === "object") {
     const keys = Object.keys(obj);
-    if (keys.length === 0)
-      return true;
+    if (keys.length === 0) return true;
     return keys.every((key) => isFunctionallyEmpty(obj[key]));
   }
   return false;
 }
 
-// src/controllers/media.controller.js
+// src/controllers/media.controller.ts
 var MediaController = class {
   collection;
   constructor(collection = "media") {
@@ -1215,8 +1167,7 @@ var MediaController = class {
       }
     }
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const doc = await db.create({
       collection: this.collection,
       data: finalFileData
@@ -1225,8 +1176,7 @@ var MediaController = class {
   }
   async find(c) {
     const db = c.get("config").db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const limit = Number(c.req.query("limit")) || 10;
     const page = Number(c.req.query("page")) || 1;
     const result = await db.find({
@@ -1240,14 +1190,11 @@ var MediaController = class {
     const config = c.get("config");
     const storage = config.storage;
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const id = c.req.param("id");
-    if (!id)
-      return c.json({ message: "Missing ID" }, 400);
+    if (!id) return c.json({ message: "Missing ID" }, 400);
     const doc = await db.findOne({ collection: this.collection, id });
-    if (!doc)
-      return c.json({ message: "Not Found" }, 404);
+    if (!doc) return c.json({ message: "Not Found" }, 404);
     if (storage) {
       await storage.delete({ filename: doc.filename });
       if (doc.sizes) {
@@ -1268,26 +1215,26 @@ var MediaController = class {
       return c.json({ message: "Storage not configured for serving" }, 404);
     }
     const filename = c.req.param("filename");
-    if (!filename)
-      return c.json({ message: "Missing filename" }, 400);
+    if (!filename) return c.json({ message: "Missing filename" }, 400);
     let res = await storage.resolve({ filename });
     if (!res && !filename.includes("/")) {
       res = await storage.resolve({ filename: `default/${filename}` });
     }
-    if (!res)
-      return c.json({ message: "Not Found" }, 404);
+    if (!res) return c.json({ message: "Not Found" }, 404);
     c.header("Content-Type", res.mimeType);
     return c.body(res.buffer);
   }
 };
 
-// src/auth/token.js
+// src/auth/token.ts
 import { SignJWT, jwtVerify, decodeJwt } from "jose";
 import { TextEncoder } from "util";
 function getSecret() {
   const secret = process.env.DYRECTED_JWT_SECRET || process.env.JWT_SECRET;
   if (!secret) {
-    throw new Error("[dyrected/core] DYRECTED_JWT_SECRET is not set. Add it to your environment variables to enable auth collections.");
+    throw new Error(
+      "[dyrected/core] DYRECTED_JWT_SECRET is not set. Add it to your environment variables to enable auth collections."
+    );
   }
   return new TextEncoder().encode(secret);
 }
@@ -1300,7 +1247,7 @@ async function verifyCollectionToken(token) {
   return payload;
 }
 
-// src/services/email-template.js
+// src/services/email-template.ts
 var emailTokens = {
   colors: {
     canvas: "#f6f7f2",
@@ -1364,9 +1311,11 @@ function detailBox(content, monospace = false) {
 }
 function ctaButton(label, href) {
   const safeHref = safeHttpUrl(href);
-  if (!safeHref)
-    return "";
-  return table(row(`<a href="${safeHref}" style="display:inline-block;padding:13px 22px;border-radius:${emailTokens.radius.control};background:${emailTokens.colors.accent};font-family:${emailTokens.font};font-size:14px;line-height:1.2;font-weight:700;color:${emailTokens.colors.text};text-decoration:none">${escapeHtml(label)}</a>`, "padding:8px 0 24px"), "width:auto");
+  if (!safeHref) return "";
+  return table(row(
+    `<a href="${safeHref}" style="display:inline-block;padding:13px 22px;border-radius:${emailTokens.radius.control};background:${emailTokens.colors.accent};font-family:${emailTokens.font};font-size:14px;line-height:1.2;font-weight:700;color:${emailTokens.colors.text};text-decoration:none">${escapeHtml(label)}</a>`,
+    "padding:8px 0 24px"
+  ), "width:auto");
 }
 function alertBox(content) {
   return table(row(escapeHtml(content), `padding:13px 16px;font-family:${emailTokens.font};font-size:13px;line-height:1.5;color:${emailTokens.colors.dangerText}`), `width:100%;background:${emailTokens.colors.dangerSurface};border:1px solid ${emailTokens.colors.dangerBorder};border-radius:${emailTokens.radius.control}`);
@@ -1377,19 +1326,23 @@ function layout({ preheader, title, content, footer }) {
   <head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"></head>
   <body style="margin:0;padding:0;background:${emailTokens.colors.canvas}">
     <div style="display:none;max-height:0;overflow:hidden;opacity:0;color:transparent">${escapeHtml(preheader)}</div>
-    ${table(row(table(row("&nbsp;", `height:5px;background:${emailTokens.colors.accent};font-size:0;line-height:0`) + row(`${sectionLabel("Dyrected")}${heading(title)}`, "padding:30px 32px 24px") + row(content, "padding:0 32px 32px") + row(`${divider()}${paragraph(footer, "20px 0 6px")}${paragraph("Privacy: this message contains account-related information; please avoid forwarding it.", "0")}`, "padding:0 32px 28px"), `width:100%;max-width:${emailTokens.width};background:${emailTokens.colors.surface};border:1px solid ${emailTokens.colors.border};border-radius:${emailTokens.radius.card};overflow:hidden`), "padding:32px 12px"), `width:100%;background:${emailTokens.colors.canvas}`)}
+    ${table(row(
+    table(
+      row("&nbsp;", `height:5px;background:${emailTokens.colors.accent};font-size:0;line-height:0`) + row(`${sectionLabel("Dyrected")}${heading(title)}`, "padding:30px 32px 24px") + row(content, "padding:0 32px 32px") + row(`${divider()}${paragraph(footer, "20px 0 6px")}${paragraph("Privacy: this message contains account-related information; please avoid forwarding it.", "0")}`, "padding:0 32px 28px"),
+      `width:100%;max-width:${emailTokens.width};background:${emailTokens.colors.surface};border:1px solid ${emailTokens.colors.border};border-radius:${emailTokens.radius.card};overflow:hidden`
+    ),
+    "padding:32px 12px"
+  ), `width:100%;background:${emailTokens.colors.canvas}`)}
   </body>
 </html>`;
 }
 
-// src/services/email.service.js
+// src/services/email.service.ts
 var _devSend = null;
 var _devSendPromise = null;
 async function getDevSend() {
-  if (_devSend)
-    return _devSend;
-  if (_devSendPromise)
-    return _devSendPromise;
+  if (_devSend) return _devSend;
+  if (_devSendPromise) return _devSendPromise;
   _devSendPromise = (async () => {
     try {
       const nodemailer = await import("nodemailer");
@@ -1473,7 +1426,7 @@ function buildPasswordChangedEmail(config, args) {
   };
 }
 
-// src/controllers/auth.controller.js
+// src/controllers/auth.controller.ts
 var AuthController = class {
   collection;
   constructor(collection) {
@@ -1485,8 +1438,7 @@ var AuthController = class {
   // ---------------------------------------------------------------------------
   async init(c) {
     const db = c.get("config").db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const result = await db.find({
       collection: this.collection.slug,
       limit: 1
@@ -1502,8 +1454,7 @@ var AuthController = class {
   async registerFirstUser(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const check = await db.find({
       collection: this.collection.slug,
       limit: 1
@@ -1531,7 +1482,9 @@ var AuthController = class {
       collection: this.collection.slug
     });
     const { subject, html } = buildWelcomeEmail(config, { email: body.email });
-    sendEmail(config, { to: body.email, subject, html }).catch((err) => console.error("[dyrected/core] Failed to send welcome email:", err));
+    sendEmail(config, { to: body.email, subject, html }).catch(
+      (err) => console.error("[dyrected/core] Failed to send welcome email:", err)
+    );
     const { password: _, ...safeUser } = user;
     return c.json({ token, user: safeUser });
   }
@@ -1540,8 +1493,7 @@ var AuthController = class {
   // ---------------------------------------------------------------------------
   async login(c) {
     const db = c.get("config").db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const body = await c.req.json().catch(() => null);
     if (!body?.email || !body?.password) {
       return c.json({ error: true, message: "email and password are required." }, 400);
@@ -1580,8 +1532,7 @@ var AuthController = class {
   // ---------------------------------------------------------------------------
   async me(c) {
     const db = c.get("config").db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const requestUser = c.get("user");
     if (!requestUser) {
       return c.json({ error: true, message: "Authentication required." }, 401);
@@ -1616,8 +1567,7 @@ var AuthController = class {
   async forgotPassword(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const body = await c.req.json().catch(() => null);
     if (!body?.email) {
       return c.json({ error: true, message: "email is required." }, 400);
@@ -1629,7 +1579,10 @@ var AuthController = class {
     });
     const user = result.docs[0];
     if (user) {
-      const resetToken = await signCollectionToken({ sub: user.id, email: user.email, collection: this.collection.slug, purpose: "reset" }, "1h");
+      const resetToken = await signCollectionToken(
+        { sub: user.id, email: user.email, collection: this.collection.slug, purpose: "reset" },
+        "1h"
+      );
       const resetUrl = body?.resetUrl;
       const url = resetUrl ? `${resetUrl}${resetUrl.includes("?") ? "&" : "?"}token=${encodeURIComponent(resetToken)}` : void 0;
       try {
@@ -1652,8 +1605,7 @@ var AuthController = class {
   async resetPassword(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const body = await c.req.json().catch(() => null);
     if (!body?.token || !body?.password) {
       return c.json({ error: true, message: "token and password are required." }, 400);
@@ -1674,7 +1626,9 @@ var AuthController = class {
       data: { password: hashedPassword }
     });
     const { subject, html } = buildPasswordChangedEmail(config, { email: payload.email });
-    sendEmail(config, { to: payload.email, subject, html }).catch((err) => console.error("[dyrected/core] Failed to send password-changed email:", err));
+    sendEmail(config, { to: payload.email, subject, html }).catch(
+      (err) => console.error("[dyrected/core] Failed to send password-changed email:", err)
+    );
     return c.json({ success: true, message: "Password has been reset. You can now log in." });
   }
   // ---------------------------------------------------------------------------
@@ -1684,8 +1638,7 @@ var AuthController = class {
   async invite(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const requestUser = c.get("user");
     if (!requestUser) {
       return c.json({ error: true, message: "Authentication required." }, 401);
@@ -1702,7 +1655,10 @@ var AuthController = class {
     if (existing.total > 0) {
       return c.json({ error: true, message: "An account with that email already exists." }, 409);
     }
-    const inviteToken = await signCollectionToken({ sub: body.email, email: body.email, collection: this.collection.slug, purpose: "invite" }, "7d");
+    const inviteToken = await signCollectionToken(
+      { sub: body.email, email: body.email, collection: this.collection.slug, purpose: "invite" },
+      "7d"
+    );
     try {
       const { subject, html } = buildInviteEmail(config, {
         token: inviteToken,
@@ -1722,8 +1678,7 @@ var AuthController = class {
   async acceptInvite(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const body = await c.req.json().catch(() => null);
     if (!body?.token || !body?.password) {
       return c.json({ error: true, message: "token and password are required." }, 400);
@@ -1758,21 +1713,28 @@ var AuthController = class {
       collection: this.collection.slug
     });
     const { subject, html } = buildWelcomeEmail(config, { email: inviteeEmail });
-    sendEmail(config, { to: inviteeEmail, subject, html }).catch((err) => console.error("[dyrected/core] Failed to send welcome email:", err));
+    sendEmail(config, { to: inviteeEmail, subject, html }).catch(
+      (err) => console.error("[dyrected/core] Failed to send welcome email:", err)
+    );
     const { password: _, ...safeUser } = user;
     return c.json({ token: sessionToken, user: safeUser }, 201);
   }
 };
 
-// src/controllers/admin-auth.controller.js
+// src/controllers/admin-auth.controller.ts
 import { randomBytes as randomBytes2 } from "crypto";
 import { TextEncoder as TextEncoder2 } from "util";
-import { SignJWT as SignJWT2, createRemoteJWKSet, jwtVerify as jwtVerify2, decodeJwt as decodeJwt2 } from "jose";
+import {
+  SignJWT as SignJWT2,
+  createRemoteJWKSet,
+  jwtVerify as jwtVerify2,
+  decodeJwt as decodeJwt2
+} from "jose";
 var AdminAuthController = class {
-  config;
   constructor(config) {
     this.config = config;
   }
+  config;
   providers(c) {
     return c.json(getPublicAdminAuthConfig(this.config.adminAuth));
   }
@@ -1785,7 +1747,12 @@ var AdminAuthController = class {
     const siteId = this.getSiteId(c);
     const returnTo = this.normalizeReturnTo(c.req.query("returnTo"), c);
     if (provider.type === "oidc") {
-      const redirectUrl = await this.buildOidcStartUrl(provider, returnTo, siteId, new URL(c.req.url).origin);
+      const redirectUrl = await this.buildOidcStartUrl(
+        provider,
+        returnTo,
+        siteId,
+        new URL(c.req.url).origin
+      );
       return c.redirect(redirectUrl, 302);
     }
     if (!provider.startUrl) {
@@ -1793,14 +1760,16 @@ var AdminAuthController = class {
     }
     const url = this.buildCustomProviderStartUrl(provider.startUrl, new URL(c.req.url).origin);
     if (!url) {
-      return c.json({
-        error: true,
-        message: `Admin auth provider "${provider.id}" has an invalid start URL.`
-      }, 500);
+      return c.json(
+        {
+          error: true,
+          message: `Admin auth provider "${provider.id}" has an invalid start URL.`
+        },
+        500
+      );
     }
     url.searchParams.set("returnTo", returnTo);
-    if (siteId)
-      url.searchParams.set("siteId", siteId);
+    if (siteId) url.searchParams.set("siteId", siteId);
     url.searchParams.set("provider", provider.id);
     return c.redirect(url.toString(), 302);
   }
@@ -1847,8 +1816,7 @@ var AdminAuthController = class {
     return c.json({ success: true, message: "Logged out. Discard your token." });
   }
   getProvider(config, id) {
-    if (config.adminAuth?.mode !== "external")
-      return void 0;
+    if (config.adminAuth?.mode !== "external") return void 0;
     return config.adminAuth.providers.find((provider) => provider.id === id);
   }
   async completeProviderAuth(requestConfig, provider, c) {
@@ -1860,8 +1828,7 @@ var AdminAuthController = class {
       throw new Error("Admin auth collection is not configured.");
     }
     const db = c.get("config").db;
-    if (!db)
-      throw new Error("Database not configured.");
+    if (!db) throw new Error("Database not configured.");
     let user = await this.findUserByExternalIdentity(db, adminCollection.slug, provider.id, identity.sub) ?? (identity.email ? (await db.find({
       collection: adminCollection.slug,
       where: { email: identity.email },
@@ -1921,8 +1888,7 @@ var AdminAuthController = class {
       },
       user
     });
-    if (resolved)
-      return resolved;
+    if (resolved) return resolved;
     return { allowed: true, roles: identity.roles, data: {} };
   }
   async buildUserData(identity, providerId, roles, extraData) {
@@ -1953,8 +1919,7 @@ var AdminAuthController = class {
   }
   async getRequestConfig(c) {
     const siteId = this.getSiteId(c);
-    if (!siteId || !this.config.onSchemaFetch)
-      return this.config;
+    if (!siteId || !this.config.onSchemaFetch) return this.config;
     const dynamic = await this.config.onSchemaFetch(siteId);
     return {
       ...this.config,
@@ -1985,8 +1950,7 @@ var AdminAuthController = class {
   async resolveOidcIdentity(provider, c) {
     const code = c.req.query("code");
     const state = c.req.query("state");
-    if (!code || !state)
-      throw new Error("Missing OIDC callback parameters.");
+    if (!code || !state) throw new Error("Missing OIDC callback parameters.");
     const parsedState = await this.verifyState(state, provider.id);
     const discovery = await this.getOidcDiscovery(provider);
     const redirectUri = provider.redirectUri || this.defaultCallbackPath(provider.id, new URL(c.req.url).origin);
@@ -2021,8 +1985,7 @@ var AdminAuthController = class {
       const userInfo = await fetch(provider.userInfoEndpoint || discovery.userinfo_endpoint, {
         headers: { Authorization: `Bearer ${tokenBody.access_token}` }
       });
-      if (!userInfo.ok)
-        throw new Error("OIDC userinfo request failed.");
+      if (!userInfo.ok) throw new Error("OIDC userinfo request failed.");
       claims = await userInfo.json();
     } else {
       throw new Error("OIDC provider did not return usable identity claims.");
@@ -2062,13 +2025,15 @@ var AdminAuthController = class {
       if (provider.audience) {
         const aud = claims.aud;
         const matches = Array.isArray(aud) ? aud.includes(provider.audience) : aud === provider.audience;
-        if (!matches)
-          throw new Error("External auth audience mismatch.");
+        if (!matches) throw new Error("External auth audience mismatch.");
       }
     }
     return {
       identity: this.mapClaims(claims, provider.claimMapping),
-      returnTo: this.normalizeReturnTo(body?.returnTo || c.req.query("returnTo"), c)
+      returnTo: this.normalizeReturnTo(
+        body?.returnTo || c.req.query("returnTo"),
+        c
+      )
     };
   }
   mapClaims(claims, mapping) {
@@ -2098,20 +2063,19 @@ var AdminAuthController = class {
     return typeof value === "string" ? value : void 0;
   }
   readStringArrayClaim(value) {
-    if (!value)
-      return void 0;
+    if (!value) return void 0;
     if (Array.isArray(value)) {
       return value.filter((entry) => typeof entry === "string");
     }
-    if (typeof value === "string")
-      return [value];
+    if (typeof value === "string") return [value];
     return void 0;
   }
   async getOidcDiscovery(provider) {
-    const discoveryUrl = new URL(provider.issuer.replace(/\/$/, "") + "/.well-known/openid-configuration");
+    const discoveryUrl = new URL(
+      provider.issuer.replace(/\/$/, "") + "/.well-known/openid-configuration"
+    );
     const response = await fetch(discoveryUrl.toString());
-    if (!response.ok)
-      throw new Error("Failed to load OIDC discovery document.");
+    if (!response.ok) throw new Error("Failed to load OIDC discovery document.");
     return response.json();
   }
   defaultCallbackPath(providerId, origin = "") {
@@ -2119,12 +2083,10 @@ var AdminAuthController = class {
   }
   buildCustomProviderStartUrl(startUrl, origin) {
     const value = startUrl.trim();
-    if (!value || /^(undefined|null)(\/|$)/i.test(value))
-      return null;
+    if (!value || /^(undefined|null)(\/|$)/i.test(value)) return null;
     try {
       const url = new URL(value, origin);
-      if (url.protocol !== "http:" && url.protocol !== "https:")
-        return null;
+      if (url.protocol !== "http:" && url.protocol !== "https:") return null;
       return url;
     } catch {
       return null;
@@ -2149,14 +2111,13 @@ var AdminAuthController = class {
     return new TextEncoder2().encode(secret);
   }
   normalizeReturnTo(returnTo, c) {
-    if (returnTo)
-      return returnTo;
+    if (returnTo) return returnTo;
     const url = new URL(c.req.url);
     return `${url.origin}/admin`;
   }
 };
 
-// src/controllers/preview.controller.js
+// src/controllers/preview.controller.ts
 import { SignJWT as SignJWT3, jwtVerify as jwtVerify3 } from "jose";
 import { TextEncoder as TextEncoder3 } from "util";
 var PreviewController = class {
@@ -2199,7 +2160,7 @@ var PreviewController = class {
   }
 };
 
-// src/middleware/auth.js
+// src/middleware/auth.ts
 function requireAuth() {
   return async (c, next) => {
     const authHeader = c.req.header("Authorization");
@@ -2231,7 +2192,7 @@ function optionalAuth() {
   };
 }
 
-// src/utils/swagger.js
+// src/utils/swagger.ts
 function getSwaggerHtml(specUrl = "/api/openapi.json") {
   return `
 <!DOCTYPE html>
@@ -2280,7 +2241,7 @@ function getSwaggerHtml(specUrl = "/api/openapi.json") {
   `;
 }
 
-// src/router.js
+// src/router.ts
 function accessGate(target, action) {
   return async (c, next) => {
     const user = c.get("user");
@@ -2297,8 +2258,7 @@ function accessGate(target, action) {
   };
 }
 async function checkAccess(access, accessArgs) {
-  if (access === void 0 || access === null)
-    return true;
+  if (access === void 0 || access === null) return true;
   if (typeof access === "function") {
     try {
       const result = await access(accessArgs);
@@ -2314,8 +2274,7 @@ async function checkAccess(access, accessArgs) {
   return true;
 }
 function serializeFieldForApi(f) {
-  if (!f)
-    return f;
+  if (!f) return f;
   const serialized = { ...f };
   if (serialized.admin?.hooks) {
     const hooks = { ...serialized.admin.hooks };
@@ -2348,10 +2307,8 @@ function registerRoutes(app, config) {
     let globals = [...config.globals];
     if (siteId && config.onSchemaFetch) {
       const dynamic = await config.onSchemaFetch(siteId);
-      if (dynamic.collections)
-        collections = [...collections, ...dynamic.collections];
-      if (dynamic.globals)
-        globals = [...globals, ...dynamic.globals];
+      if (dynamic.collections) collections = [...collections, ...dynamic.collections];
+      if (dynamic.globals) globals = [...globals, ...dynamic.globals];
       if (dynamic.admin) {
         config.admin = { ...config.admin, ...dynamic.admin };
       }
@@ -2362,10 +2319,8 @@ function registerRoutes(app, config) {
     const user = c.get("user");
     const accessArgs = { user, req: c.req, doc: null };
     const serializeAccess = async (access) => {
-      if (typeof access === "string")
-        return access;
-      if (typeof access === "boolean")
-        return access;
+      if (typeof access === "string") return access;
+      if (typeof access === "boolean") return access;
       return checkAccess(access, accessArgs);
     };
     const filteredCollections = await Promise.all(collections.filter((col) => !siteId || col.shared || !col.siteId || col.siteId === siteId).map(async (col) => ({
@@ -2458,8 +2413,7 @@ function registerRoutes(app, config) {
     let collections = [...config.collections];
     if (siteId && config.onSchemaFetch) {
       const dynamic = await config.onSchemaFetch(siteId);
-      if (dynamic.collections)
-        collections = [...collections, ...dynamic.collections];
+      if (dynamic.collections) collections = [...collections, ...dynamic.collections];
     }
     const user = c.get("user");
     let collection = collections.find((col) => col.slug === colSlug);
@@ -2478,8 +2432,7 @@ function registerRoutes(app, config) {
       let globals = [...config.globals];
       if (siteId && config.onSchemaFetch) {
         const dynamic = await config.onSchemaFetch(siteId);
-        if (dynamic.globals)
-          globals = [...globals, ...dynamic.globals];
+        if (dynamic.globals) globals = [...globals, ...dynamic.globals];
       }
       const glb = globals.find((g) => g.slug === colSlug);
       if (!glb) {
@@ -2537,12 +2490,9 @@ function registerRoutes(app, config) {
     const user = c.get("user");
     const key = c.req.param("key");
     const scope = c.req.query("scope");
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
-    if (!user?.collection || !user.sub)
-      return c.json({ error: true, message: "Authentication required." }, 401);
-    if (!key)
-      return c.json({ error: true, message: "Preference key is required." }, 400);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
+    if (!user?.collection || !user.sub) return c.json({ error: true, message: "Authentication required." }, 401);
+    if (!key) return c.json({ error: true, message: "Preference key is required." }, 400);
     const getGlobalPreference = async () => {
       const globalDoc = await db.findOne({ collection: "__global_preferences", id: key });
       return globalDoc ? globalDoc.value : null;
@@ -2552,8 +2502,7 @@ function registerRoutes(app, config) {
       return c.json({ key, value: globalValue2 });
     }
     const doc = await db.findOne({ collection: user.collection, id: user.sub });
-    if (!doc)
-      return c.json({ error: true, message: "User not found." }, 404);
+    if (!doc) return c.json({ error: true, message: "User not found." }, 404);
     const preferences = typeof doc.__preferences === "object" && doc.__preferences !== null ? doc.__preferences : {};
     if (key in preferences) {
       return c.json({ key, value: preferences[key] ?? null });
@@ -2566,12 +2515,9 @@ function registerRoutes(app, config) {
     const user = c.get("user");
     const key = c.req.param("key");
     const scope = c.req.query("scope");
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
-    if (!user?.collection || !user.sub)
-      return c.json({ error: true, message: "Authentication required." }, 401);
-    if (!key)
-      return c.json({ error: true, message: "Preference key is required." }, 400);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
+    if (!user?.collection || !user.sub) return c.json({ error: true, message: "Authentication required." }, 401);
+    if (!key) return c.json({ error: true, message: "Preference key is required." }, 400);
     const body = await c.req.json().catch(() => ({}));
     if (scope === "global") {
       const isAdminUser = Array.isArray(user?.roles) && user.roles.includes("admin");
@@ -2594,8 +2540,7 @@ function registerRoutes(app, config) {
       return c.json({ key, value: body.value });
     }
     const doc = await db.findOne({ collection: user.collection, id: user.sub });
-    if (!doc)
-      return c.json({ error: true, message: "User not found." }, 404);
+    if (!doc) return c.json({ error: true, message: "User not found." }, 404);
     const preferences = typeof doc.__preferences === "object" && doc.__preferences !== null ? doc.__preferences : {};
     const nextPreferences = { ...preferences, [key]: body.value };
     await db.update({
@@ -2610,12 +2555,9 @@ function registerRoutes(app, config) {
     const user = c.get("user");
     const key = c.req.param("key");
     const scope = c.req.query("scope");
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
-    if (!user?.collection || !user.sub)
-      return c.json({ error: true, message: "Authentication required." }, 401);
-    if (!key)
-      return c.json({ error: true, message: "Preference key is required." }, 400);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
+    if (!user?.collection || !user.sub) return c.json({ error: true, message: "Authentication required." }, 401);
+    if (!key) return c.json({ error: true, message: "Preference key is required." }, 400);
     if (scope === "global") {
       const isAdminUser = Array.isArray(user?.roles) && user.roles.includes("admin");
       if (!isAdminUser) {
@@ -2625,8 +2567,7 @@ function registerRoutes(app, config) {
       return c.json({ success: true });
     }
     const doc = await db.findOne({ collection: user.collection, id: user.sub });
-    if (!doc)
-      return c.json({ error: true, message: "User not found." }, 404);
+    if (!doc) return c.json({ error: true, message: "User not found." }, 404);
     const preferences = typeof doc.__preferences === "object" && doc.__preferences !== null ? { ...doc.__preferences } : {};
     delete preferences[key];
     await db.update({
@@ -2662,8 +2603,7 @@ function registerRoutes(app, config) {
   app.post("/api/admin/auth/:provider/exchange", (c) => adminAuthController.exchange(c));
   app.post("/api/admin/logout", (c) => adminAuthController.logout(c));
   for (const collection of config.collections) {
-    if (!collection.auth)
-      continue;
+    if (!collection.auth) continue;
     const path = `/api/collections/${collection.slug}`;
     const authController = new AuthController(collection);
     app.post(`${path}/login`, (c) => authController.login(c));
@@ -2765,39 +2705,25 @@ function registerRoutes(app, config) {
         if (collection.auth && id) {
           const authController = new AuthController(collection);
           const method2 = c.req.method;
-          if (method2 === "POST" && id === "login")
-            return authController.login(c);
-          if (method2 === "POST" && id === "logout")
-            return authController.logout(c);
-          if (method2 === "GET" && id === "me")
-            return authController.me(c);
-          if (method2 === "POST" && id === "refresh-token")
-            return authController.refreshToken(c);
-          if (method2 === "POST" && id === "forgot-password")
-            return authController.forgotPassword(c);
-          if (method2 === "POST" && id === "reset-password")
-            return authController.resetPassword(c);
+          if (method2 === "POST" && id === "login") return authController.login(c);
+          if (method2 === "POST" && id === "logout") return authController.logout(c);
+          if (method2 === "GET" && id === "me") return authController.me(c);
+          if (method2 === "POST" && id === "refresh-token") return authController.refreshToken(c);
+          if (method2 === "POST" && id === "forgot-password") return authController.forgotPassword(c);
+          if (method2 === "POST" && id === "reset-password") return authController.resetPassword(c);
         }
         const controller = new CollectionController(collection);
         const method = c.req.method;
         if (id) {
-          if (method === "GET")
-            return controller.findOne(c);
-          if (method === "PATCH")
-            return controller.update(c);
-          if (method === "DELETE" && id === "delete-many")
-            return controller.deleteMany(c);
-          if (method === "DELETE")
-            return controller.delete(c);
-          if (method === "POST" && id === "media")
-            return controller.create(c);
-          if (method === "POST" && id === "seed")
-            return controller.seed(c);
+          if (method === "GET") return controller.findOne(c);
+          if (method === "PATCH") return controller.update(c);
+          if (method === "DELETE" && id === "delete-many") return controller.deleteMany(c);
+          if (method === "DELETE") return controller.delete(c);
+          if (method === "POST" && id === "media") return controller.create(c);
+          if (method === "POST" && id === "seed") return controller.seed(c);
         } else {
-          if (method === "GET")
-            return controller.find(c);
-          if (method === "POST")
-            return controller.create(c);
+          if (method === "GET") return controller.find(c);
+          if (method === "POST") return controller.create(c);
         }
       }
     }
@@ -2818,13 +2744,10 @@ function registerRoutes(app, config) {
         const controller = new GlobalController(global);
         const method = c.req.method;
         if (id) {
-          if (method === "POST" && id === "seed")
-            return controller.seed(c);
+          if (method === "POST" && id === "seed") return controller.seed(c);
         } else {
-          if (method === "GET")
-            return controller.get(c);
-          if (method === "PATCH")
-            return controller.update(c);
+          if (method === "GET") return controller.get(c);
+          if (method === "PATCH") return controller.update(c);
         }
       }
     }
@@ -2832,7 +2755,7 @@ function registerRoutes(app, config) {
   });
 }
 
-// src/app.js
+// src/app.ts
 async function createDyrectedApp(rawConfig) {
   const config = normalizeConfig(rawConfig);
   const app = new Hono();