@dyrected/core 2.5.44 → 2.5.46

package/dist/server.cjs

@@ -30,7 +30,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
-// src/utils/where-sanitizer.js
+// src/utils/where-sanitizer.ts
 var where_sanitizer_exports = {};
 __export(where_sanitizer_exports, {
   sanitizeWhereClause: () => sanitizeWhereClause
@@ -67,12 +67,9 @@ function sanitizeWhereClause(where, fields) {
         continue;
       }
       const fieldDef = fieldMap.get(key);
-      if (!fieldDef)
-        continue;
-      if (fieldDef.admin?.filterable === false)
-        continue;
-      if (NEVER_FILTERABLE_TYPES.includes(fieldDef.type))
-        continue;
+      if (!fieldDef) continue;
+      if (fieldDef.admin?.filterable === false) continue;
+      if (NEVER_FILTERABLE_TYPES.includes(fieldDef.type)) continue;
       result[key] = value;
     }
     return result;
@@ -81,7 +78,7 @@ function sanitizeWhereClause(where, fields) {
 }
 var NEVER_FILTERABLE_TYPES;
 var init_where_sanitizer = __esm({
-  "src/utils/where-sanitizer.js"() {
+  "src/utils/where-sanitizer.ts"() {
     "use strict";
     NEVER_FILTERABLE_TYPES = [
       "password",
@@ -108,12 +105,12 @@ __export(server_exports, {
 });
 module.exports = __toCommonJS(server_exports);
 
-// src/app.js
+// src/app.ts
 var import_hono = require("hono");
 var import_cors = require("hono/cors");
 var import_request_id = require("hono/request-id");
 
-// src/services/defaults.service.js
+// src/services/defaults.service.ts
 var DefaultsService = class {
   /**
    * Recursively apply default values to a data object based on field definitions.
@@ -121,14 +118,12 @@ var DefaultsService = class {
   static apply(fields, data = {}) {
     const result = { ...data || {} };
     fields.forEach((field) => {
-      if (field.type === "join")
-        return;
+      if (field.type === "join") return;
       if (field.type === "row" && field.fields) {
         Object.assign(result, this.apply(field.fields, data));
         return;
       }
-      if (!field.name)
-        return;
+      if (!field.name) return;
       let value = result[field.name];
       if ((value === void 0 || value === null) && field.renameTo) {
         const legacyValue = result[field.renameTo];
@@ -141,12 +136,9 @@ var DefaultsService = class {
         if (field.defaultValue !== void 0) {
           result[field.name] = field.defaultValue;
         } else {
-          if (field.type === "boolean")
-            result[field.name] = false;
-          else if (field.type === "array")
-            result[field.name] = [];
-          else if (field.type === "multiSelect")
-            result[field.name] = [];
+          if (field.type === "boolean") result[field.name] = false;
+          else if (field.type === "array") result[field.name] = [];
+          else if (field.type === "multiSelect") result[field.name] = [];
           else if (field.type === "object") {
             result[field.name] = this.apply(field.fields || [], {});
           }
@@ -161,7 +153,7 @@ var DefaultsService = class {
   }
 };
 
-// src/services/population.service.js
+// src/services/population.service.ts
 var PopulationService = class {
   db;
   collections;
@@ -214,31 +206,29 @@ var PopulationService = class {
         Object.assign(populatedDoc, rowPopulated);
         continue;
       }
-      if (!field.name)
-        continue;
+      if (!field.name) continue;
       const value = populatedDoc[field.name];
       if (field.type === "relationship" && field.relationTo && value) {
         const relatedCollection = this.collections.find((c) => c.slug === field.relationTo);
-        if (!relatedCollection)
-          continue;
+        if (!relatedCollection) continue;
         if (Array.isArray(value)) {
-          populatedDoc[field.name] = await Promise.all(value.map(async (id) => {
-            if (!id)
-              return id;
-            let doc = id;
-            if (typeof id === "string") {
-              doc = await this.db.findOne({ collection: field.relationTo, id });
-            }
-            if (!doc || typeof doc !== "object")
-              return id;
-            const docWithDefaults = DefaultsService.apply(relatedCollection.fields, doc);
-            return this.populate({
-              data: docWithDefaults,
-              fields: relatedCollection.fields,
-              currentDepth: currentDepth + 1,
-              maxDepth
-            });
-          }));
+          populatedDoc[field.name] = await Promise.all(
+            value.map(async (id) => {
+              if (!id) return id;
+              let doc = id;
+              if (typeof id === "string") {
+                doc = await this.db.findOne({ collection: field.relationTo, id });
+              }
+              if (!doc || typeof doc !== "object") return id;
+              const docWithDefaults = DefaultsService.apply(relatedCollection.fields, doc);
+              return this.populate({
+                data: docWithDefaults,
+                fields: relatedCollection.fields,
+                currentDepth: currentDepth + 1,
+                maxDepth
+              });
+            })
+          );
         } else if (value) {
           let doc = value;
           if (typeof value === "string") {
@@ -287,17 +277,18 @@ var PopulationService = class {
         });
       }
       if (field.type === "blocks" && field.blocks && Array.isArray(value)) {
-        populatedDoc[field.name] = await Promise.all(value.map(async (blockData) => {
-          const blockConfig = field.blocks.find((b) => b.slug === blockData.blockType);
-          if (!blockConfig)
-            return blockData;
-          return this.populate({
-            data: blockData,
-            fields: blockConfig.fields,
-            currentDepth,
-            maxDepth
-          });
-        }));
+        populatedDoc[field.name] = await Promise.all(
+          value.map(async (blockData) => {
+            const blockConfig = field.blocks.find((b) => b.slug === blockData.blockType);
+            if (!blockConfig) return blockData;
+            return this.populate({
+              data: blockData,
+              fields: blockConfig.fields,
+              currentDepth,
+              maxDepth
+            });
+          })
+        );
       }
     }
     return populatedDoc;
@@ -306,8 +297,7 @@ var PopulationService = class {
    * Helper to populate a PaginatedResult
    */
   async populateResult(result, fields, maxDepth) {
-    if (maxDepth <= 0)
-      return result;
+    if (maxDepth <= 0) return result;
     const populatedDocs = await this.populate({
       data: result.docs,
       fields,
@@ -321,7 +311,7 @@ var PopulationService = class {
   }
 };
 
-// src/services/audit.service.js
+// src/services/audit.service.ts
 var AuditService = class {
   /**
    * Writes a single entry to the __audit collection.
@@ -349,7 +339,7 @@ var AuditService = class {
   }
 };
 
-// src/auth/password.js
+// src/auth/password.ts
 var import_node_util = require("util");
 var import_node_crypto = require("crypto");
 var scryptAsync = (0, import_node_util.promisify)(import_node_crypto.scrypt);
@@ -362,16 +352,14 @@ async function hashPassword(plain) {
 }
 async function verifyPassword(plain, stored) {
   const [salt, storedHash] = stored.split(":");
-  if (!salt || !storedHash)
-    return false;
+  if (!salt || !storedHash) return false;
   const derivedKey = await scryptAsync(plain, salt, KEY_LEN);
   const storedBuffer = Buffer.from(storedHash, "hex");
-  if (derivedKey.length !== storedBuffer.length)
-    return false;
+  if (derivedKey.length !== storedBuffer.length) return false;
   return (0, import_node_crypto.timingSafeEqual)(derivedKey, storedBuffer);
 }
 
-// src/utils/hooks.js
+// src/utils/hooks.ts
 async function runCollectionHooks(hooks, args, options = {}) {
   if (!hooks || hooks.length === 0) {
     return args.data ?? args.doc ?? void 0;
@@ -398,12 +386,10 @@ async function runCollectionHooks(hooks, args, options = {}) {
   return currentPayload;
 }
 async function executeFieldBeforeChange(fields, data, originalDoc, user, db) {
-  if (!data || typeof data !== "object")
-    return data;
+  if (!data || typeof data !== "object") return data;
   const result = { ...data };
   for (const field of fields) {
-    if (!field.name)
-      continue;
+    if (!field.name) continue;
     const value = result[field.name];
     const origValue = originalDoc?.[field.name];
     let updatedValue = value;
@@ -423,13 +409,21 @@ async function executeFieldBeforeChange(fields, data, originalDoc, user, db) {
     }
     if (updatedValue !== void 0 && updatedValue !== null) {
       if (field.type === "object" && field.fields) {
-        result[field.name] = await executeFieldBeforeChange(field.fields, updatedValue, origValue, user, db);
+        result[field.name] = await executeFieldBeforeChange(
+          field.fields,
+          updatedValue,
+          origValue,
+          user,
+          db
+        );
       } else if (field.type === "array" && field.fields && Array.isArray(updatedValue)) {
         const arrayResult = [];
         for (let i = 0; i < updatedValue.length; i++) {
           const item = updatedValue[i];
           const origItem = Array.isArray(origValue) ? origValue[i] : null;
-          arrayResult.push(await executeFieldBeforeChange(field.fields, item, origItem, user, db));
+          arrayResult.push(
+            await executeFieldBeforeChange(field.fields, item, origItem, user, db)
+          );
         }
         result[field.name] = arrayResult;
       } else if (field.type === "blocks" && field.blocks && Array.isArray(updatedValue)) {
@@ -437,9 +431,19 @@ async function executeFieldBeforeChange(fields, data, originalDoc, user, db) {
         for (let i = 0; i < updatedValue.length; i++) {
           const blockData = updatedValue[i];
           const origBlock = Array.isArray(origValue) ? origValue[i] : null;
-          const blockConfig = field.blocks.find((b) => b.slug === blockData.blockType);
+          const blockConfig = field.blocks.find(
+            (b) => b.slug === blockData.blockType
+          );
           if (blockConfig) {
-            blocksResult.push(await executeFieldBeforeChange(blockConfig.fields, blockData, origBlock, user, db));
+            blocksResult.push(
+              await executeFieldBeforeChange(
+                blockConfig.fields,
+                blockData,
+                origBlock,
+                user,
+                db
+              )
+            );
           } else {
             blocksResult.push(blockData);
           }
@@ -451,12 +455,10 @@ async function executeFieldBeforeChange(fields, data, originalDoc, user, db) {
   return result;
 }
 async function executeFieldAfterRead(fields, doc, user, db) {
-  if (!doc || typeof doc !== "object")
-    return doc;
+  if (!doc || typeof doc !== "object") return doc;
   const result = { ...doc };
   for (const field of fields) {
-    if (!field.name)
-      continue;
+    if (!field.name) continue;
     const value = result[field.name];
     let updatedValue = value;
     if (field.hooks?.afterRead) {
@@ -474,20 +476,41 @@ async function executeFieldAfterRead(fields, doc, user, db) {
     }
     if (updatedValue !== void 0 && updatedValue !== null) {
       if (field.type === "object" && field.fields) {
-        result[field.name] = await executeFieldAfterRead(field.fields, updatedValue, user, db);
+        result[field.name] = await executeFieldAfterRead(
+          field.fields,
+          updatedValue,
+          user,
+          db
+        );
       } else if (field.type === "array" && field.fields && Array.isArray(updatedValue)) {
         const arrayResult = [];
         for (const item of updatedValue) {
-          arrayResult.push(await executeFieldAfterRead(field.fields, item, user, db));
+          arrayResult.push(
+            await executeFieldAfterRead(
+              field.fields,
+              item,
+              user,
+              db
+            )
+          );
         }
         result[field.name] = arrayResult;
       } else if (field.type === "blocks" && field.blocks && Array.isArray(updatedValue)) {
         const blocksResult = [];
         for (const blockData of updatedValue) {
           const typedBlock = blockData;
-          const blockConfig = field.blocks.find((b) => b.slug === typedBlock.blockType);
+          const blockConfig = field.blocks.find(
+            (b) => b.slug === typedBlock.blockType
+          );
           if (blockConfig) {
-            blocksResult.push(await executeFieldAfterRead(blockConfig.fields, typedBlock, user, db));
+            blocksResult.push(
+              await executeFieldAfterRead(
+                blockConfig.fields,
+                typedBlock,
+                user,
+                db
+              )
+            );
           } else {
             blocksResult.push(blockData);
           }
@@ -499,14 +522,16 @@ async function executeFieldAfterRead(fields, doc, user, db) {
   return result;
 }
 
-// src/utils/readonly-db.js
+// src/utils/readonly-db.ts
 var WRITE_METHODS = ["create", "update", "delete", "updateGlobal", "execute"];
 function createReadonlyDb(db) {
   return new Proxy(db, {
     get(target, prop) {
       if (WRITE_METHODS.includes(prop)) {
         return () => {
-          throw new Error(`[dyrected] Write operation "${String(prop)}" is not allowed in this hook phase. Use afterChange/afterDelete hooks for write operations.`);
+          throw new Error(
+            `[dyrected] Write operation "${String(prop)}" is not allowed in this hook phase. Use afterChange/afterDelete hooks for write operations.`
+          );
         };
       }
       return Reflect.get(target, prop);
@@ -514,13 +539,11 @@ function createReadonlyDb(db) {
   });
 }
 
-// src/auth/jexl.js
+// src/auth/jexl.ts
 var import_jexl = __toESM(require("jexl"), 1);
 async function evaluateAccess(expression, context) {
-  if (expression === void 0 || expression === null)
-    return false;
-  if (typeof expression === "boolean")
-    return expression;
+  if (expression === void 0 || expression === null) return false;
+  if (typeof expression === "boolean") return expression;
   try {
     const result = await import_jexl.default.eval(expression, context);
     return !!result;
@@ -530,7 +553,35 @@ async function evaluateAccess(expression, context) {
   }
 }
 
-// src/workflows.js
+// src/utils/admin-auth.ts
+function getAdminAuthCollection(config) {
+  const requestedSlug = config.adminAuth?.collectionSlug;
+  if (requestedSlug) {
+    return config.collections.find((collection) => collection.slug === requestedSlug) ?? null;
+  }
+  return config.collections.find((collection) => collection.slug === "__admins") ?? config.collections.find((collection) => collection.auth) ?? null;
+}
+function getPublicAdminAuthConfig(adminAuth) {
+  const providers = (adminAuth?.providers ?? []).map((provider) => ({
+    id: provider.id,
+    type: provider.type,
+    displayName: provider.displayName || humanizeProviderName(provider.id, provider.type),
+    autoRedirect: provider.autoRedirect
+  }));
+  return {
+    mode: adminAuth?.mode ?? "local",
+    collectionSlug: adminAuth?.collectionSlug,
+    provisioningMode: adminAuth?.provisioningMode,
+    providers
+  };
+}
+function humanizeProviderName(id, type) {
+  const cleaned = id.replace(/[-_]+/g, " ").trim();
+  if (!cleaned) return type.toUpperCase();
+  return cleaned.replace(/\b\w/g, (char) => char.toUpperCase());
+}
+
+// src/workflows.ts
 var WORKFLOW_HISTORY_COLLECTION = "__workflow_history";
 var LIFECYCLE_EVENTS_COLLECTION = "__lifecycle_events";
 function publicMetadata(meta) {
@@ -541,18 +592,17 @@ function workflowCapabilities(workflow, user) {
   const capabilities = new Set(Array.isArray(user?.capabilities) ? user.capabilities : []);
   const roles = Array.isArray(user?.roles) ? user.roles : [];
   for (const mapping of workflow.roles ?? []) {
-    if (roles.includes(mapping.role))
-      mapping.capabilities.forEach((capability) => capabilities.add(capability));
+    if (roles.includes(mapping.role)) mapping.capabilities.forEach((capability) => capabilities.add(capability));
   }
   return capabilities;
 }
 function canViewWorkflowDraft(workflow, user) {
-  if (!user)
-    return false;
+  if (!user) return false;
   const capabilities = workflowCapabilities(workflow, user);
-  if (capabilities.has("entry.edit"))
-    return true;
-  return workflow.transitions.some((transition) => (transition.requiredCapabilities ?? []).some((capability) => capabilities.has(capability)));
+  if (capabilities.has("entry.edit")) return true;
+  return workflow.transitions.some(
+    (transition) => (transition.requiredCapabilities ?? []).some((capability) => capabilities.has(capability))
+  );
 }
 function availableWorkflowTransitions(workflow, state, user) {
   const capabilities = workflowCapabilities(workflow, user);
@@ -569,12 +619,10 @@ function initializeWorkflowDocument(data, workflow) {
 }
 function materializeWorkflowDocument(doc, workflow, user) {
   const meta = doc.__workflow;
-  if (!meta)
-    return doc;
+  if (!meta) return doc;
   const { __published, __workflow, ...working } = doc;
   if (!canViewWorkflowDraft(workflow, user)) {
-    if (!__published || typeof __published !== "object")
-      return null;
+    if (!__published || typeof __published !== "object") return null;
     return { id: doc.id, ...__published, _workflow: publicMetadata(meta) };
   }
   return {
@@ -606,15 +654,13 @@ async function persistEvent(db, event) {
 }
 async function dispatchLifecycleEvent(config, event) {
   const db = config.db;
-  if (!db || !config.events?.handlers.length)
-    return;
+  if (!db || !config.events?.handlers.length) return;
   const maxAttempts = config.events.maxAttempts ?? 8;
   const retryDelayMs = config.events.retryDelayMs ?? 1e3;
   const attempts = event.attempts + 1;
   try {
     await db.update({ collection: LIFECYCLE_EVENTS_COLLECTION, id: event.id, data: { status: "processing", attempts } });
-    for (const handler of config.events.handlers)
-      await handler({ ...event, status: "processing", attempts });
+    for (const handler of config.events.handlers) await handler({ ...event, status: "processing", attempts });
     await db.update({
       collection: LIFECYCLE_EVENTS_COLLECTION,
       id: event.id,
@@ -638,8 +684,7 @@ async function saveWorkflowDraft(args) {
   const { config, collection, id, originalDoc, data, user } = args;
   const db = config.db;
   const workflow = collection.workflow;
-  if (!db.transaction)
-    throw new Error(`The configured database adapter does not support workflow transactions.`);
+  if (!db.transaction) throw new Error(`The configured database adapter does not support workflow transactions.`);
   const previous = originalDoc.__workflow;
   const event = createLifecycleEvent({
     name: "revision.created",
@@ -664,8 +709,7 @@ async function saveWorkflowDraft(args) {
 async function createWorkflowDocument(args) {
   const { config, collection, data, user } = args;
   const db = config.db;
-  if (!db.transaction)
-    throw new Error(`The configured database adapter does not support workflow transactions.`);
+  if (!db.transaction) throw new Error(`The configured database adapter does not support workflow transactions.`);
   let event;
   const doc = await db.transaction(async (tx) => {
     const created = await tx.create({ collection: collection.slug, data });
@@ -686,14 +730,11 @@ async function transitionWorkflow(args) {
   const { config, collection, id, transitionName, expectedRevision, comment, user, req } = args;
   const db = config.db;
   const workflow = collection.workflow;
-  if (!db.transaction)
-    throw new Error(`The configured database adapter does not support workflow transactions.`);
+  if (!db.transaction) throw new Error(`The configured database adapter does not support workflow transactions.`);
   const original = await db.findOne({ collection: collection.slug, id });
-  if (!original)
-    throw Object.assign(new Error("Not Found"), { statusCode: 404 });
+  if (!original) throw Object.assign(new Error("Not Found"), { statusCode: 404 });
   const meta = original.__workflow;
-  if (!meta)
-    throw Object.assign(new Error("Entry has no workflow metadata"), { statusCode: 409 });
+  if (!meta) throw Object.assign(new Error("Entry has no workflow metadata"), { statusCode: 409 });
   if (expectedRevision !== void 0 && expectedRevision !== meta.revision) {
     throw Object.assign(new Error("This entry changed since it was loaded. Refresh before transitioning it."), { statusCode: 409 });
   }
@@ -709,8 +750,7 @@ async function transitionWorkflow(args) {
     throw Object.assign(new Error(`A comment is required for "${transition.label}".`), { statusCode: 400 });
   }
   const hookContext = { transition, from: meta.state, to: transition.to, doc: original, user, comment, req, db };
-  for (const hook of workflow.hooks?.beforeTransition ?? [])
-    await hook(hookContext);
+  for (const hook of workflow.hooks?.beforeTransition ?? []) await hook(hookContext);
   const events = [createLifecycleEvent({
     name: "workflow.transitioned",
     collection: collection.slug,
@@ -726,8 +766,7 @@ async function transitionWorkflow(args) {
   }
   const updated = await db.transaction(async (tx) => {
     const locked = await tx.findOne({ collection: collection.slug, id });
-    if (!locked)
-      throw Object.assign(new Error("Not Found"), { statusCode: 404 });
+    if (!locked) throw Object.assign(new Error("Not Found"), { statusCode: 404 });
     const lockedMeta = locked.__workflow;
     if (lockedMeta.revision !== meta.revision || lockedMeta.state !== meta.state || expectedRevision !== void 0 && lockedMeta.revision !== expectedRevision) {
       throw Object.assign(new Error("This entry changed since it was loaded. Refresh before transitioning it."), { statusCode: 409 });
@@ -741,24 +780,20 @@ async function transitionWorkflow(args) {
       ...transition.unpublish ? { publishedRevision: void 0, publishedAt: void 0, publishedBy: void 0 } : {}
     };
     const data = { __workflow: nextMeta };
-    if (targetState.published)
-      data.__published = working;
-    if (transition.unpublish)
-      data.__published = null;
+    if (targetState.published) data.__published = working;
+    if (transition.unpublish) data.__published = null;
     const next = await tx.update({ collection: collection.slug, id, data });
     await tx.create({
       collection: WORKFLOW_HISTORY_COLLECTION,
       data: { collection: collection.slug, documentId: id, transition: transition.name, from: lockedMeta.state, to: transition.to, revision: lockedMeta.revision, comment: comment ?? null, actorId: user?.sub ?? null, createdAt: now }
     });
-    for (const event of events)
-      await persistEvent(tx, event);
+    for (const event of events) await persistEvent(tx, event);
     if (collection.audit) {
       await tx.create({ collection: "__audit", data: { collection: collection.slug, documentId: id, operation: "workflow.transition", user: user?.sub ?? null, timestamp: now, changes: JSON.stringify({ transition: transition.name, from: lockedMeta.state, to: transition.to, revision: lockedMeta.revision }) } });
     }
     return next;
   });
-  for (const event of events)
-    void dispatchLifecycleEvent(config, event);
+  for (const event of events) void dispatchLifecycleEvent(config, event);
   for (const hook of workflow.hooks?.afterTransition ?? []) {
     try {
       await hook({ ...hookContext, doc: updated, event: events[0] });
@@ -769,7 +804,7 @@ async function transitionWorkflow(args) {
   return updated;
 }
 
-// src/controllers/collection.controller.js
+// src/controllers/collection.controller.ts
 var CollectionController = class {
   collection;
   constructor(collection) {
@@ -777,8 +812,8 @@ var CollectionController = class {
   }
   getDelegatedProvider(c) {
     const config = c.get("config");
-    const authCollectionSlug = config.adminAuth?.collectionSlug || "__admins";
-    if (this.collection.slug !== authCollectionSlug) {
+    const authCollection = getAdminAuthCollection(config);
+    if (!authCollection || this.collection.slug !== authCollection.slug) {
       return null;
     }
     return config.adminAuth?.providers?.find((p) => p.members) || null;
@@ -786,8 +821,7 @@ var CollectionController = class {
   async find(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const provider = this.getDelegatedProvider(c);
     if (provider && provider.members?.list) {
       const limit2 = Number(c.req.query("limit")) || 10;
@@ -905,13 +939,11 @@ var CollectionController = class {
   async findOne(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const provider = this.getDelegatedProvider(c);
     if (provider && (provider.members?.get || provider.members?.list)) {
       const id2 = c.req.param("id");
-      if (!id2)
-        return c.json({ message: "Missing ID" }, 400);
+      if (!id2) return c.json({ message: "Missing ID" }, 400);
       const localDoc = await db.findOne({ collection: this.collection.slug, id: id2 });
       const externalSubject = localDoc?.externalSubject || id2;
       let member = null;
@@ -921,8 +953,7 @@ var CollectionController = class {
         const listResult = await provider.members.list({ req: c.req });
         member = listResult.docs.find((m) => m.id === externalSubject) || null;
       }
-      if (!member)
-        return c.json({ message: "Not Found" }, 404);
+      if (!member) return c.json({ message: "Not Found" }, 404);
       return c.json({
         ...member,
         id: localDoc ? localDoc.id : member.id,
@@ -933,15 +964,12 @@ var CollectionController = class {
     const id = c.req.param("id");
     const depth = c.req.query("depth") !== void 0 ? Number(c.req.query("depth")) : 10;
     const user = c.get("user");
-    if (!id)
-      return c.json({ message: "Missing ID" }, 400);
+    if (!id) return c.json({ message: "Missing ID" }, 400);
     let doc = await db.findOne({ collection: this.collection.slug, id });
-    if (!doc)
-      return c.json({ message: "Not Found" }, 404);
+    if (!doc) return c.json({ message: "Not Found" }, 404);
     if (this.collection.workflow) {
       doc = materializeWorkflowDocument(doc, this.collection.workflow, user);
-      if (!doc)
-        return c.json({ message: "Not Found" }, 404);
+      if (!doc) return c.json({ message: "Not Found" }, 404);
     }
     const docWithDefaults = DefaultsService.apply(this.collection.fields, doc);
     const docWithCollectionHooks = await runCollectionHooks(this.collection.hooks?.afterRead, {
@@ -966,8 +994,7 @@ var CollectionController = class {
   async create(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const provider = this.getDelegatedProvider(c);
     if (provider && provider.members?.create) {
       const contentType2 = c.req.header("Content-Type") || "";
@@ -1042,16 +1069,13 @@ var CollectionController = class {
   async upload(c) {
     const config = c.get("config");
     const storage = config.storage;
-    if (!storage)
-      return c.json({ message: "Storage not configured" }, 500);
+    if (!storage) return c.json({ message: "Storage not configured" }, 500);
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const readonlyDb = createReadonlyDb(db);
     const formData = await c.req.formData();
     const file = formData.get("file");
-    if (!file)
-      return c.json({ message: "No file uploaded" }, 400);
+    if (!file) return c.json({ message: "No file uploaded" }, 400);
     const buffer = new Uint8Array(await file.arrayBuffer());
     const siteId = c.get("siteId");
     const workspaceId = c.get("workspaceId");
@@ -1110,13 +1134,11 @@ var CollectionController = class {
   async update(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const provider = this.getDelegatedProvider(c);
     if (provider && provider.members?.update) {
       const id2 = c.req.param("id");
-      if (!id2)
-        return c.json({ message: "Missing ID" }, 400);
+      if (!id2) return c.json({ message: "Missing ID" }, 400);
       const body2 = await c.req.json();
       const localDoc = await db.findOne({ collection: this.collection.slug, id: id2 });
       const externalSubject = localDoc?.externalSubject || id2;
@@ -1129,8 +1151,7 @@ var CollectionController = class {
     }
     const readonlyDb = createReadonlyDb(db);
     const id = c.req.param("id");
-    if (!id)
-      return c.json({ message: "Missing ID" }, 400);
+    if (!id) return c.json({ message: "Missing ID" }, 400);
     const body = await c.req.json();
     const user = c.get("user");
     let data = { ...body };
@@ -1144,8 +1165,7 @@ var CollectionController = class {
       updatedBy: user?.sub ?? null
     });
     const originalDoc = await db.findOne({ collection: this.collection.slug, id });
-    if (!originalDoc)
-      return c.json({ message: "Not Found" }, 404);
+    if (!originalDoc) return c.json({ message: "Not Found" }, 404);
     let before = null;
     if (this.collection.audit) {
       before = originalDoc;
@@ -1189,10 +1209,8 @@ var CollectionController = class {
   }
   async transition(c) {
     const config = c.get("config");
-    if (!config.db)
-      return c.json({ message: "Database not configured" }, 500);
-    if (!this.collection.workflow)
-      return c.json({ message: "Workflows are not enabled for this collection" }, 404);
+    if (!config.db) return c.json({ message: "Database not configured" }, 500);
+    if (!this.collection.workflow) return c.json({ message: "Workflows are not enabled for this collection" }, 404);
     const id = c.req.param("id");
     const transitionName = c.req.param("transition");
     const body = await c.req.json().catch(() => ({}));
@@ -1215,16 +1233,12 @@ var CollectionController = class {
   }
   async workflowHistory(c) {
     const config = c.get("config");
-    if (!config.db)
-      return c.json({ message: "Database not configured" }, 500);
-    if (!this.collection.workflow)
-      return c.json({ message: "Workflows are not enabled for this collection" }, 404);
+    if (!config.db) return c.json({ message: "Database not configured" }, 500);
+    if (!this.collection.workflow) return c.json({ message: "Workflows are not enabled for this collection" }, 404);
     const documentId = c.req.param("id");
-    if (!documentId)
-      return c.json({ message: "Missing ID" }, 400);
+    if (!documentId) return c.json({ message: "Missing ID" }, 400);
     const document = await config.db.findOne({ collection: this.collection.slug, id: documentId });
-    if (!document)
-      return c.json({ message: "Not Found" }, 404);
+    if (!document) return c.json({ message: "Not Found" }, 404);
     const readAccess = this.collection.access?.read;
     if (readAccess !== void 0 && readAccess !== null) {
       const args = { user: c.get("user"), req: c.req, doc: document };
@@ -1238,8 +1252,7 @@ var CollectionController = class {
         });
         allowed = match.total > 0;
       }
-      if (!allowed)
-        return c.json({ error: true, message: `Access denied: read on ${this.collection.slug}` }, 403);
+      if (!allowed) return c.json({ error: true, message: `Access denied: read on ${this.collection.slug}` }, 403);
     }
     const result = await config.db.find({
       collection: WORKFLOW_HISTORY_COLLECTION,
@@ -1263,17 +1276,14 @@ var CollectionController = class {
   async changePassword(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     if (!this.collection.auth) {
       return c.json({ message: "This collection does not support authentication" }, 400);
     }
     const id = c.req.param("id");
-    if (!id)
-      return c.json({ message: "Missing ID" }, 400);
+    if (!id) return c.json({ message: "Missing ID" }, 400);
     const user = c.get("user");
-    if (!user)
-      return c.json({ message: "Authentication required" }, 401);
+    if (!user) return c.json({ message: "Authentication required" }, 401);
     const body = await c.req.json().catch(() => null);
     const { oldPassword, newPassword, confirmPassword } = body ?? {};
     if (!newPassword) {
@@ -1295,8 +1305,7 @@ var CollectionController = class {
         return c.json({ message: "Current password is required" }, 400);
       }
       const existing = await db.findOne({ collection: this.collection.slug, id });
-      if (!existing)
-        return c.json({ message: "User not found" }, 404);
+      if (!existing) return c.json({ message: "User not found" }, 404);
       const valid = await verifyPassword(oldPassword, existing.password);
       if (!valid) {
         return c.json({ message: "Invalid current password" }, 400);
@@ -1327,13 +1336,11 @@ var CollectionController = class {
   async delete(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const provider = this.getDelegatedProvider(c);
     if (provider && provider.members?.delete) {
       const id2 = c.req.param("id");
-      if (!id2)
-        return c.json({ message: "Missing ID" }, 400);
+      if (!id2) return c.json({ message: "Missing ID" }, 400);
       const localDoc = await db.findOne({ collection: this.collection.slug, id: id2 });
       const externalSubject = localDoc?.externalSubject || id2;
       await provider.members.delete({ externalSubject, req: c.req });
@@ -1341,12 +1348,10 @@ var CollectionController = class {
     }
     const readonlyDb = createReadonlyDb(db);
     const id = c.req.param("id");
-    if (!id)
-      return c.json({ message: "Missing ID" }, 400);
+    if (!id) return c.json({ message: "Missing ID" }, 400);
     const user = c.get("user");
     const doc = await db.findOne({ collection: this.collection.slug, id });
-    if (!doc)
-      return c.json({ message: "Not Found" }, 404);
+    if (!doc) return c.json({ message: "Not Found" }, 404);
     let before = null;
     if (this.collection.audit) {
       before = doc;
@@ -1381,8 +1386,7 @@ var CollectionController = class {
   async deleteMany(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const readonlyDb = createReadonlyDb(db);
     const user = c.get("user");
     let ids = [];
@@ -1397,8 +1401,7 @@ var CollectionController = class {
       const raw = c.req.queries("ids") ?? c.req.queries("ids[]") ?? [];
       ids = raw.filter(Boolean);
     }
-    if (!ids.length)
-      return c.json({ message: "No IDs provided" }, 400);
+    if (!ids.length) return c.json({ message: "No IDs provided" }, 400);
     const deleted = [];
     const failed = [];
     for (const id of ids) {
@@ -1451,8 +1454,7 @@ var CollectionController = class {
   async seed(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const body = await c.req.json();
     const initialData = body.data;
     if (!initialData || !Array.isArray(initialData)) {
@@ -1472,7 +1474,7 @@ var CollectionController = class {
   }
 };
 
-// src/controllers/global.controller.js
+// src/controllers/global.controller.ts
 var GlobalController = class {
   global;
   constructor(global) {
@@ -1481,8 +1483,7 @@ var GlobalController = class {
   async get(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const readonlyDb = createReadonlyDb(db);
     const depth = c.req.query("depth") !== void 0 ? Number(c.req.query("depth")) : 10;
     const user = c.get("user");
@@ -1526,8 +1527,7 @@ var GlobalController = class {
   async update(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const readonlyDb = createReadonlyDb(db);
     const body = await c.req.json();
     const user = c.get("user");
@@ -1562,8 +1562,7 @@ var GlobalController = class {
   async seed(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const body = await c.req.json();
     const initialData = body.data;
     if (!initialData) {
@@ -1579,23 +1578,20 @@ var GlobalController = class {
   }
 };
 function isFunctionallyEmpty(obj) {
-  if (obj === null || obj === void 0 || obj === "")
-    return true;
+  if (obj === null || obj === void 0 || obj === "") return true;
   if (Array.isArray(obj)) {
-    if (obj.length === 0)
-      return true;
+    if (obj.length === 0) return true;
     return obj.every(isFunctionallyEmpty);
   }
   if (typeof obj === "object") {
     const keys = Object.keys(obj);
-    if (keys.length === 0)
-      return true;
+    if (keys.length === 0) return true;
     return keys.every((key) => isFunctionallyEmpty(obj[key]));
   }
   return false;
 }
 
-// src/controllers/media.controller.js
+// src/controllers/media.controller.ts
 var MediaController = class {
   collection;
   constructor(collection = "media") {
@@ -1675,8 +1671,7 @@ var MediaController = class {
       }
     }
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const doc = await db.create({
       collection: this.collection,
       data: finalFileData
@@ -1685,8 +1680,7 @@ var MediaController = class {
   }
   async find(c) {
     const db = c.get("config").db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const limit = Number(c.req.query("limit")) || 10;
     const page = Number(c.req.query("page")) || 1;
     const result = await db.find({
@@ -1700,14 +1694,11 @@ var MediaController = class {
     const config = c.get("config");
     const storage = config.storage;
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const id = c.req.param("id");
-    if (!id)
-      return c.json({ message: "Missing ID" }, 400);
+    if (!id) return c.json({ message: "Missing ID" }, 400);
     const doc = await db.findOne({ collection: this.collection, id });
-    if (!doc)
-      return c.json({ message: "Not Found" }, 404);
+    if (!doc) return c.json({ message: "Not Found" }, 404);
     if (storage) {
       await storage.delete({ filename: doc.filename });
       if (doc.sizes) {
@@ -1728,26 +1719,26 @@ var MediaController = class {
       return c.json({ message: "Storage not configured for serving" }, 404);
     }
     const filename = c.req.param("filename");
-    if (!filename)
-      return c.json({ message: "Missing filename" }, 400);
+    if (!filename) return c.json({ message: "Missing filename" }, 400);
     let res = await storage.resolve({ filename });
     if (!res && !filename.includes("/")) {
       res = await storage.resolve({ filename: `default/${filename}` });
     }
-    if (!res)
-      return c.json({ message: "Not Found" }, 404);
+    if (!res) return c.json({ message: "Not Found" }, 404);
     c.header("Content-Type", res.mimeType);
     return c.body(res.buffer);
   }
 };
 
-// src/auth/token.js
+// src/auth/token.ts
 var import_jose = require("jose");
 var import_node_util2 = require("util");
 function getSecret() {
   const secret = process.env.DYRECTED_JWT_SECRET || process.env.JWT_SECRET;
   if (!secret) {
-    throw new Error("[dyrected/core] DYRECTED_JWT_SECRET is not set. Add it to your environment variables to enable auth collections.");
+    throw new Error(
+      "[dyrected/core] DYRECTED_JWT_SECRET is not set. Add it to your environment variables to enable auth collections."
+    );
   }
   return new import_node_util2.TextEncoder().encode(secret);
 }
@@ -1760,7 +1751,7 @@ async function verifyCollectionToken(token) {
   return payload;
 }
 
-// src/services/email-template.js
+// src/services/email-template.ts
 var emailTokens = {
   colors: {
     canvas: "#f6f7f2",
@@ -1824,9 +1815,11 @@ function detailBox(content, monospace = false) {
 }
 function ctaButton(label, href) {
   const safeHref = safeHttpUrl(href);
-  if (!safeHref)
-    return "";
-  return table(row(`<a href="${safeHref}" style="display:inline-block;padding:13px 22px;border-radius:${emailTokens.radius.control};background:${emailTokens.colors.accent};font-family:${emailTokens.font};font-size:14px;line-height:1.2;font-weight:700;color:${emailTokens.colors.text};text-decoration:none">${escapeHtml(label)}</a>`, "padding:8px 0 24px"), "width:auto");
+  if (!safeHref) return "";
+  return table(row(
+    `<a href="${safeHref}" style="display:inline-block;padding:13px 22px;border-radius:${emailTokens.radius.control};background:${emailTokens.colors.accent};font-family:${emailTokens.font};font-size:14px;line-height:1.2;font-weight:700;color:${emailTokens.colors.text};text-decoration:none">${escapeHtml(label)}</a>`,
+    "padding:8px 0 24px"
+  ), "width:auto");
 }
 function alertBox(content) {
   return table(row(escapeHtml(content), `padding:13px 16px;font-family:${emailTokens.font};font-size:13px;line-height:1.5;color:${emailTokens.colors.dangerText}`), `width:100%;background:${emailTokens.colors.dangerSurface};border:1px solid ${emailTokens.colors.dangerBorder};border-radius:${emailTokens.radius.control}`);
@@ -1837,19 +1830,23 @@ function layout({ preheader, title, content, footer }) {
   <head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"></head>
   <body style="margin:0;padding:0;background:${emailTokens.colors.canvas}">
     <div style="display:none;max-height:0;overflow:hidden;opacity:0;color:transparent">${escapeHtml(preheader)}</div>
-    ${table(row(table(row("&nbsp;", `height:5px;background:${emailTokens.colors.accent};font-size:0;line-height:0`) + row(`${sectionLabel("Dyrected")}${heading(title)}`, "padding:30px 32px 24px") + row(content, "padding:0 32px 32px") + row(`${divider()}${paragraph(footer, "20px 0 6px")}${paragraph("Privacy: this message contains account-related information; please avoid forwarding it.", "0")}`, "padding:0 32px 28px"), `width:100%;max-width:${emailTokens.width};background:${emailTokens.colors.surface};border:1px solid ${emailTokens.colors.border};border-radius:${emailTokens.radius.card};overflow:hidden`), "padding:32px 12px"), `width:100%;background:${emailTokens.colors.canvas}`)}
+    ${table(row(
+    table(
+      row("&nbsp;", `height:5px;background:${emailTokens.colors.accent};font-size:0;line-height:0`) + row(`${sectionLabel("Dyrected")}${heading(title)}`, "padding:30px 32px 24px") + row(content, "padding:0 32px 32px") + row(`${divider()}${paragraph(footer, "20px 0 6px")}${paragraph("Privacy: this message contains account-related information; please avoid forwarding it.", "0")}`, "padding:0 32px 28px"),
+      `width:100%;max-width:${emailTokens.width};background:${emailTokens.colors.surface};border:1px solid ${emailTokens.colors.border};border-radius:${emailTokens.radius.card};overflow:hidden`
+    ),
+    "padding:32px 12px"
+  ), `width:100%;background:${emailTokens.colors.canvas}`)}
   </body>
 </html>`;
 }
 
-// src/services/email.service.js
+// src/services/email.service.ts
 var _devSend = null;
 var _devSendPromise = null;
 async function getDevSend() {
-  if (_devSend)
-    return _devSend;
-  if (_devSendPromise)
-    return _devSendPromise;
+  if (_devSend) return _devSend;
+  if (_devSendPromise) return _devSendPromise;
   _devSendPromise = (async () => {
     try {
       const nodemailer = await import("nodemailer");
@@ -1933,7 +1930,7 @@ function buildPasswordChangedEmail(config, args) {
   };
 }
 
-// src/controllers/auth.controller.js
+// src/controllers/auth.controller.ts
 var AuthController = class {
   collection;
   constructor(collection) {
@@ -1945,8 +1942,7 @@ var AuthController = class {
   // ---------------------------------------------------------------------------
   async init(c) {
     const db = c.get("config").db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const result = await db.find({
       collection: this.collection.slug,
       limit: 1
@@ -1962,8 +1958,7 @@ var AuthController = class {
   async registerFirstUser(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const check = await db.find({
       collection: this.collection.slug,
       limit: 1
@@ -1991,7 +1986,9 @@ var AuthController = class {
       collection: this.collection.slug
     });
     const { subject, html } = buildWelcomeEmail(config, { email: body.email });
-    sendEmail(config, { to: body.email, subject, html }).catch((err) => console.error("[dyrected/core] Failed to send welcome email:", err));
+    sendEmail(config, { to: body.email, subject, html }).catch(
+      (err) => console.error("[dyrected/core] Failed to send welcome email:", err)
+    );
     const { password: _, ...safeUser } = user;
     return c.json({ token, user: safeUser });
   }
@@ -2000,8 +1997,7 @@ var AuthController = class {
   // ---------------------------------------------------------------------------
   async login(c) {
     const db = c.get("config").db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const body = await c.req.json().catch(() => null);
     if (!body?.email || !body?.password) {
       return c.json({ error: true, message: "email and password are required." }, 400);
@@ -2040,8 +2036,7 @@ var AuthController = class {
   // ---------------------------------------------------------------------------
   async me(c) {
     const db = c.get("config").db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const requestUser = c.get("user");
     if (!requestUser) {
       return c.json({ error: true, message: "Authentication required." }, 401);
@@ -2076,8 +2071,7 @@ var AuthController = class {
   async forgotPassword(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const body = await c.req.json().catch(() => null);
     if (!body?.email) {
       return c.json({ error: true, message: "email is required." }, 400);
@@ -2089,7 +2083,10 @@ var AuthController = class {
     });
     const user = result.docs[0];
     if (user) {
-      const resetToken = await signCollectionToken({ sub: user.id, email: user.email, collection: this.collection.slug, purpose: "reset" }, "1h");
+      const resetToken = await signCollectionToken(
+        { sub: user.id, email: user.email, collection: this.collection.slug, purpose: "reset" },
+        "1h"
+      );
       const resetUrl = body?.resetUrl;
       const url = resetUrl ? `${resetUrl}${resetUrl.includes("?") ? "&" : "?"}token=${encodeURIComponent(resetToken)}` : void 0;
       try {
@@ -2112,8 +2109,7 @@ var AuthController = class {
   async resetPassword(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const body = await c.req.json().catch(() => null);
     if (!body?.token || !body?.password) {
       return c.json({ error: true, message: "token and password are required." }, 400);
@@ -2134,7 +2130,9 @@ var AuthController = class {
       data: { password: hashedPassword }
     });
     const { subject, html } = buildPasswordChangedEmail(config, { email: payload.email });
-    sendEmail(config, { to: payload.email, subject, html }).catch((err) => console.error("[dyrected/core] Failed to send password-changed email:", err));
+    sendEmail(config, { to: payload.email, subject, html }).catch(
+      (err) => console.error("[dyrected/core] Failed to send password-changed email:", err)
+    );
     return c.json({ success: true, message: "Password has been reset. You can now log in." });
   }
   // ---------------------------------------------------------------------------
@@ -2144,8 +2142,7 @@ var AuthController = class {
   async invite(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const requestUser = c.get("user");
     if (!requestUser) {
       return c.json({ error: true, message: "Authentication required." }, 401);
@@ -2162,7 +2159,10 @@ var AuthController = class {
     if (existing.total > 0) {
       return c.json({ error: true, message: "An account with that email already exists." }, 409);
     }
-    const inviteToken = await signCollectionToken({ sub: body.email, email: body.email, collection: this.collection.slug, purpose: "invite" }, "7d");
+    const inviteToken = await signCollectionToken(
+      { sub: body.email, email: body.email, collection: this.collection.slug, purpose: "invite" },
+      "7d"
+    );
     try {
       const { subject, html } = buildInviteEmail(config, {
         token: inviteToken,
@@ -2182,8 +2182,7 @@ var AuthController = class {
   async acceptInvite(c) {
     const config = c.get("config");
     const db = config.db;
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
     const body = await c.req.json().catch(() => null);
     if (!body?.token || !body?.password) {
       return c.json({ error: true, message: "token and password are required." }, 400);
@@ -2218,52 +2217,23 @@ var AuthController = class {
       collection: this.collection.slug
     });
     const { subject, html } = buildWelcomeEmail(config, { email: inviteeEmail });
-    sendEmail(config, { to: inviteeEmail, subject, html }).catch((err) => console.error("[dyrected/core] Failed to send welcome email:", err));
+    sendEmail(config, { to: inviteeEmail, subject, html }).catch(
+      (err) => console.error("[dyrected/core] Failed to send welcome email:", err)
+    );
     const { password: _, ...safeUser } = user;
     return c.json({ token: sessionToken, user: safeUser }, 201);
   }
 };
 
-// src/controllers/admin-auth.controller.js
+// src/controllers/admin-auth.controller.ts
 var import_node_crypto2 = require("crypto");
 var import_node_util3 = require("util");
 var import_jose2 = require("jose");
-
-// src/utils/admin-auth.js
-function getAdminAuthCollection(config) {
-  const requestedSlug = config.adminAuth?.collectionSlug;
-  if (requestedSlug) {
-    return config.collections.find((collection) => collection.slug === requestedSlug) ?? null;
-  }
-  return config.collections.find((collection) => collection.slug === "__admins") ?? config.collections.find((collection) => collection.auth) ?? null;
-}
-function getPublicAdminAuthConfig(adminAuth) {
-  const providers = (adminAuth?.providers ?? []).map((provider) => ({
-    id: provider.id,
-    type: provider.type,
-    displayName: provider.displayName || humanizeProviderName(provider.id, provider.type),
-    autoRedirect: provider.autoRedirect
-  }));
-  return {
-    mode: adminAuth?.mode ?? "local",
-    collectionSlug: adminAuth?.collectionSlug,
-    provisioningMode: adminAuth?.provisioningMode,
-    providers
-  };
-}
-function humanizeProviderName(id, type) {
-  const cleaned = id.replace(/[-_]+/g, " ").trim();
-  if (!cleaned)
-    return type.toUpperCase();
-  return cleaned.replace(/\b\w/g, (char) => char.toUpperCase());
-}
-
-// src/controllers/admin-auth.controller.js
 var AdminAuthController = class {
-  config;
   constructor(config) {
     this.config = config;
   }
+  config;
   providers(c) {
     return c.json(getPublicAdminAuthConfig(this.config.adminAuth));
   }
@@ -2276,7 +2246,12 @@ var AdminAuthController = class {
     const siteId = this.getSiteId(c);
     const returnTo = this.normalizeReturnTo(c.req.query("returnTo"), c);
     if (provider.type === "oidc") {
-      const redirectUrl = await this.buildOidcStartUrl(provider, returnTo, siteId, new URL(c.req.url).origin);
+      const redirectUrl = await this.buildOidcStartUrl(
+        provider,
+        returnTo,
+        siteId,
+        new URL(c.req.url).origin
+      );
       return c.redirect(redirectUrl, 302);
     }
     if (!provider.startUrl) {
@@ -2284,14 +2259,16 @@ var AdminAuthController = class {
     }
     const url = this.buildCustomProviderStartUrl(provider.startUrl, new URL(c.req.url).origin);
     if (!url) {
-      return c.json({
-        error: true,
-        message: `Admin auth provider "${provider.id}" has an invalid start URL.`
-      }, 500);
+      return c.json(
+        {
+          error: true,
+          message: `Admin auth provider "${provider.id}" has an invalid start URL.`
+        },
+        500
+      );
     }
     url.searchParams.set("returnTo", returnTo);
-    if (siteId)
-      url.searchParams.set("siteId", siteId);
+    if (siteId) url.searchParams.set("siteId", siteId);
     url.searchParams.set("provider", provider.id);
     return c.redirect(url.toString(), 302);
   }
@@ -2338,8 +2315,7 @@ var AdminAuthController = class {
     return c.json({ success: true, message: "Logged out. Discard your token." });
   }
   getProvider(config, id) {
-    if (config.adminAuth?.mode !== "external")
-      return void 0;
+    if (config.adminAuth?.mode !== "external") return void 0;
     return config.adminAuth.providers.find((provider) => provider.id === id);
   }
   async completeProviderAuth(requestConfig, provider, c) {
@@ -2351,8 +2327,7 @@ var AdminAuthController = class {
       throw new Error("Admin auth collection is not configured.");
     }
     const db = c.get("config").db;
-    if (!db)
-      throw new Error("Database not configured.");
+    if (!db) throw new Error("Database not configured.");
     let user = await this.findUserByExternalIdentity(db, adminCollection.slug, provider.id, identity.sub) ?? (identity.email ? (await db.find({
       collection: adminCollection.slug,
       where: { email: identity.email },
@@ -2412,8 +2387,7 @@ var AdminAuthController = class {
       },
       user
     });
-    if (resolved)
-      return resolved;
+    if (resolved) return resolved;
     return { allowed: true, roles: identity.roles, data: {} };
   }
   async buildUserData(identity, providerId, roles, extraData) {
@@ -2444,8 +2418,7 @@ var AdminAuthController = class {
   }
   async getRequestConfig(c) {
     const siteId = this.getSiteId(c);
-    if (!siteId || !this.config.onSchemaFetch)
-      return this.config;
+    if (!siteId || !this.config.onSchemaFetch) return this.config;
     const dynamic = await this.config.onSchemaFetch(siteId);
     return {
       ...this.config,
@@ -2476,8 +2449,7 @@ var AdminAuthController = class {
   async resolveOidcIdentity(provider, c) {
     const code = c.req.query("code");
     const state = c.req.query("state");
-    if (!code || !state)
-      throw new Error("Missing OIDC callback parameters.");
+    if (!code || !state) throw new Error("Missing OIDC callback parameters.");
     const parsedState = await this.verifyState(state, provider.id);
     const discovery = await this.getOidcDiscovery(provider);
     const redirectUri = provider.redirectUri || this.defaultCallbackPath(provider.id, new URL(c.req.url).origin);
@@ -2512,8 +2484,7 @@ var AdminAuthController = class {
       const userInfo = await fetch(provider.userInfoEndpoint || discovery.userinfo_endpoint, {
         headers: { Authorization: `Bearer ${tokenBody.access_token}` }
       });
-      if (!userInfo.ok)
-        throw new Error("OIDC userinfo request failed.");
+      if (!userInfo.ok) throw new Error("OIDC userinfo request failed.");
       claims = await userInfo.json();
     } else {
       throw new Error("OIDC provider did not return usable identity claims.");
@@ -2553,13 +2524,15 @@ var AdminAuthController = class {
       if (provider.audience) {
         const aud = claims.aud;
         const matches = Array.isArray(aud) ? aud.includes(provider.audience) : aud === provider.audience;
-        if (!matches)
-          throw new Error("External auth audience mismatch.");
+        if (!matches) throw new Error("External auth audience mismatch.");
       }
     }
     return {
       identity: this.mapClaims(claims, provider.claimMapping),
-      returnTo: this.normalizeReturnTo(body?.returnTo || c.req.query("returnTo"), c)
+      returnTo: this.normalizeReturnTo(
+        body?.returnTo || c.req.query("returnTo"),
+        c
+      )
     };
   }
   mapClaims(claims, mapping) {
@@ -2589,20 +2562,19 @@ var AdminAuthController = class {
     return typeof value === "string" ? value : void 0;
   }
   readStringArrayClaim(value) {
-    if (!value)
-      return void 0;
+    if (!value) return void 0;
     if (Array.isArray(value)) {
       return value.filter((entry) => typeof entry === "string");
     }
-    if (typeof value === "string")
-      return [value];
+    if (typeof value === "string") return [value];
     return void 0;
   }
   async getOidcDiscovery(provider) {
-    const discoveryUrl = new URL(provider.issuer.replace(/\/$/, "") + "/.well-known/openid-configuration");
+    const discoveryUrl = new URL(
+      provider.issuer.replace(/\/$/, "") + "/.well-known/openid-configuration"
+    );
     const response = await fetch(discoveryUrl.toString());
-    if (!response.ok)
-      throw new Error("Failed to load OIDC discovery document.");
+    if (!response.ok) throw new Error("Failed to load OIDC discovery document.");
     return response.json();
   }
   defaultCallbackPath(providerId, origin = "") {
@@ -2610,12 +2582,10 @@ var AdminAuthController = class {
   }
   buildCustomProviderStartUrl(startUrl, origin) {
     const value = startUrl.trim();
-    if (!value || /^(undefined|null)(\/|$)/i.test(value))
-      return null;
+    if (!value || /^(undefined|null)(\/|$)/i.test(value)) return null;
     try {
       const url = new URL(value, origin);
-      if (url.protocol !== "http:" && url.protocol !== "https:")
-        return null;
+      if (url.protocol !== "http:" && url.protocol !== "https:") return null;
       return url;
     } catch {
       return null;
@@ -2640,14 +2610,13 @@ var AdminAuthController = class {
     return new import_node_util3.TextEncoder().encode(secret);
   }
   normalizeReturnTo(returnTo, c) {
-    if (returnTo)
-      return returnTo;
+    if (returnTo) return returnTo;
     const url = new URL(c.req.url);
     return `${url.origin}/admin`;
   }
 };
 
-// src/controllers/preview.controller.js
+// src/controllers/preview.controller.ts
 var import_jose3 = require("jose");
 var import_node_util4 = require("util");
 var PreviewController = class {
@@ -2690,7 +2659,7 @@ var PreviewController = class {
   }
 };
 
-// src/middleware/auth.js
+// src/middleware/auth.ts
 function requireAuth() {
   return async (c, next) => {
     const authHeader = c.req.header("Authorization");
@@ -2722,7 +2691,7 @@ function optionalAuth() {
   };
 }
 
-// src/utils/openapi.js
+// src/utils/openapi.ts
 function generateOpenApi(config) {
   const spec = {
     openapi: "3.0.0",
@@ -3431,8 +3400,7 @@ function fieldsToProperties(fields) {
       required.push(...nested.required);
       continue;
     }
-    if (!field.name)
-      continue;
+    if (!field.name) continue;
     props[field.name] = fieldToSchema(field);
     if (field.required) {
       required.push(field.name);
@@ -3544,12 +3512,11 @@ function fieldToSchema(field) {
     default:
       schema = { type: "string" };
   }
-  if (field.label)
-    schema.description = field.label;
+  if (field.label) schema.description = field.label;
   return schema;
 }
 
-// src/utils/swagger.js
+// src/utils/swagger.ts
 function getSwaggerHtml(specUrl = "/api/openapi.json") {
   return `
 <!DOCTYPE html>
@@ -3598,7 +3565,7 @@ function getSwaggerHtml(specUrl = "/api/openapi.json") {
   `;
 }
 
-// src/router.js
+// src/router.ts
 function accessGate(target, action) {
   return async (c, next) => {
     const user = c.get("user");
@@ -3615,8 +3582,7 @@ function accessGate(target, action) {
   };
 }
 async function checkAccess(access, accessArgs) {
-  if (access === void 0 || access === null)
-    return true;
+  if (access === void 0 || access === null) return true;
   if (typeof access === "function") {
     try {
       const result = await access(accessArgs);
@@ -3632,8 +3598,7 @@ async function checkAccess(access, accessArgs) {
   return true;
 }
 function serializeFieldForApi(f) {
-  if (!f)
-    return f;
+  if (!f) return f;
   const serialized = { ...f };
   if (serialized.admin?.hooks) {
     const hooks = { ...serialized.admin.hooks };
@@ -3666,10 +3631,8 @@ function registerRoutes(app, config) {
     let globals = [...config.globals];
     if (siteId && config.onSchemaFetch) {
       const dynamic = await config.onSchemaFetch(siteId);
-      if (dynamic.collections)
-        collections = [...collections, ...dynamic.collections];
-      if (dynamic.globals)
-        globals = [...globals, ...dynamic.globals];
+      if (dynamic.collections) collections = [...collections, ...dynamic.collections];
+      if (dynamic.globals) globals = [...globals, ...dynamic.globals];
       if (dynamic.admin) {
         config.admin = { ...config.admin, ...dynamic.admin };
       }
@@ -3680,10 +3643,8 @@ function registerRoutes(app, config) {
     const user = c.get("user");
     const accessArgs = { user, req: c.req, doc: null };
     const serializeAccess = async (access) => {
-      if (typeof access === "string")
-        return access;
-      if (typeof access === "boolean")
-        return access;
+      if (typeof access === "string") return access;
+      if (typeof access === "boolean") return access;
       return checkAccess(access, accessArgs);
     };
     const filteredCollections = await Promise.all(collections.filter((col) => !siteId || col.shared || !col.siteId || col.siteId === siteId).map(async (col) => ({
@@ -3776,8 +3737,7 @@ function registerRoutes(app, config) {
     let collections = [...config.collections];
     if (siteId && config.onSchemaFetch) {
       const dynamic = await config.onSchemaFetch(siteId);
-      if (dynamic.collections)
-        collections = [...collections, ...dynamic.collections];
+      if (dynamic.collections) collections = [...collections, ...dynamic.collections];
     }
     const user = c.get("user");
     let collection = collections.find((col) => col.slug === colSlug);
@@ -3796,8 +3756,7 @@ function registerRoutes(app, config) {
       let globals = [...config.globals];
       if (siteId && config.onSchemaFetch) {
         const dynamic = await config.onSchemaFetch(siteId);
-        if (dynamic.globals)
-          globals = [...globals, ...dynamic.globals];
+        if (dynamic.globals) globals = [...globals, ...dynamic.globals];
       }
       const glb = globals.find((g) => g.slug === colSlug);
       if (!glb) {
@@ -3855,12 +3814,9 @@ function registerRoutes(app, config) {
     const user = c.get("user");
     const key = c.req.param("key");
     const scope = c.req.query("scope");
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
-    if (!user?.collection || !user.sub)
-      return c.json({ error: true, message: "Authentication required." }, 401);
-    if (!key)
-      return c.json({ error: true, message: "Preference key is required." }, 400);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
+    if (!user?.collection || !user.sub) return c.json({ error: true, message: "Authentication required." }, 401);
+    if (!key) return c.json({ error: true, message: "Preference key is required." }, 400);
     const getGlobalPreference = async () => {
       const globalDoc = await db.findOne({ collection: "__global_preferences", id: key });
       return globalDoc ? globalDoc.value : null;
@@ -3870,8 +3826,7 @@ function registerRoutes(app, config) {
       return c.json({ key, value: globalValue2 });
     }
     const doc = await db.findOne({ collection: user.collection, id: user.sub });
-    if (!doc)
-      return c.json({ error: true, message: "User not found." }, 404);
+    if (!doc) return c.json({ error: true, message: "User not found." }, 404);
     const preferences = typeof doc.__preferences === "object" && doc.__preferences !== null ? doc.__preferences : {};
     if (key in preferences) {
       return c.json({ key, value: preferences[key] ?? null });
@@ -3884,12 +3839,9 @@ function registerRoutes(app, config) {
     const user = c.get("user");
     const key = c.req.param("key");
     const scope = c.req.query("scope");
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
-    if (!user?.collection || !user.sub)
-      return c.json({ error: true, message: "Authentication required." }, 401);
-    if (!key)
-      return c.json({ error: true, message: "Preference key is required." }, 400);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
+    if (!user?.collection || !user.sub) return c.json({ error: true, message: "Authentication required." }, 401);
+    if (!key) return c.json({ error: true, message: "Preference key is required." }, 400);
     const body = await c.req.json().catch(() => ({}));
     if (scope === "global") {
       const isAdminUser = Array.isArray(user?.roles) && user.roles.includes("admin");
@@ -3912,8 +3864,7 @@ function registerRoutes(app, config) {
       return c.json({ key, value: body.value });
     }
     const doc = await db.findOne({ collection: user.collection, id: user.sub });
-    if (!doc)
-      return c.json({ error: true, message: "User not found." }, 404);
+    if (!doc) return c.json({ error: true, message: "User not found." }, 404);
     const preferences = typeof doc.__preferences === "object" && doc.__preferences !== null ? doc.__preferences : {};
     const nextPreferences = { ...preferences, [key]: body.value };
     await db.update({
@@ -3928,12 +3879,9 @@ function registerRoutes(app, config) {
     const user = c.get("user");
     const key = c.req.param("key");
     const scope = c.req.query("scope");
-    if (!db)
-      return c.json({ message: "Database not configured" }, 500);
-    if (!user?.collection || !user.sub)
-      return c.json({ error: true, message: "Authentication required." }, 401);
-    if (!key)
-      return c.json({ error: true, message: "Preference key is required." }, 400);
+    if (!db) return c.json({ message: "Database not configured" }, 500);
+    if (!user?.collection || !user.sub) return c.json({ error: true, message: "Authentication required." }, 401);
+    if (!key) return c.json({ error: true, message: "Preference key is required." }, 400);
     if (scope === "global") {
       const isAdminUser = Array.isArray(user?.roles) && user.roles.includes("admin");
       if (!isAdminUser) {
@@ -3943,8 +3891,7 @@ function registerRoutes(app, config) {
       return c.json({ success: true });
     }
     const doc = await db.findOne({ collection: user.collection, id: user.sub });
-    if (!doc)
-      return c.json({ error: true, message: "User not found." }, 404);
+    if (!doc) return c.json({ error: true, message: "User not found." }, 404);
     const preferences = typeof doc.__preferences === "object" && doc.__preferences !== null ? { ...doc.__preferences } : {};
     delete preferences[key];
     await db.update({
@@ -3980,8 +3927,7 @@ function registerRoutes(app, config) {
   app.post("/api/admin/auth/:provider/exchange", (c) => adminAuthController.exchange(c));
   app.post("/api/admin/logout", (c) => adminAuthController.logout(c));
   for (const collection of config.collections) {
-    if (!collection.auth)
-      continue;
+    if (!collection.auth) continue;
     const path = `/api/collections/${collection.slug}`;
     const authController = new AuthController(collection);
     app.post(`${path}/login`, (c) => authController.login(c));
@@ -4083,39 +4029,25 @@ function registerRoutes(app, config) {
         if (collection.auth && id) {
           const authController = new AuthController(collection);
           const method2 = c.req.method;
-          if (method2 === "POST" && id === "login")
-            return authController.login(c);
-          if (method2 === "POST" && id === "logout")
-            return authController.logout(c);
-          if (method2 === "GET" && id === "me")
-            return authController.me(c);
-          if (method2 === "POST" && id === "refresh-token")
-            return authController.refreshToken(c);
-          if (method2 === "POST" && id === "forgot-password")
-            return authController.forgotPassword(c);
-          if (method2 === "POST" && id === "reset-password")
-            return authController.resetPassword(c);
+          if (method2 === "POST" && id === "login") return authController.login(c);
+          if (method2 === "POST" && id === "logout") return authController.logout(c);
+          if (method2 === "GET" && id === "me") return authController.me(c);
+          if (method2 === "POST" && id === "refresh-token") return authController.refreshToken(c);
+          if (method2 === "POST" && id === "forgot-password") return authController.forgotPassword(c);
+          if (method2 === "POST" && id === "reset-password") return authController.resetPassword(c);
         }
         const controller = new CollectionController(collection);
         const method = c.req.method;
         if (id) {
-          if (method === "GET")
-            return controller.findOne(c);
-          if (method === "PATCH")
-            return controller.update(c);
-          if (method === "DELETE" && id === "delete-many")
-            return controller.deleteMany(c);
-          if (method === "DELETE")
-            return controller.delete(c);
-          if (method === "POST" && id === "media")
-            return controller.create(c);
-          if (method === "POST" && id === "seed")
-            return controller.seed(c);
+          if (method === "GET") return controller.findOne(c);
+          if (method === "PATCH") return controller.update(c);
+          if (method === "DELETE" && id === "delete-many") return controller.deleteMany(c);
+          if (method === "DELETE") return controller.delete(c);
+          if (method === "POST" && id === "media") return controller.create(c);
+          if (method === "POST" && id === "seed") return controller.seed(c);
         } else {
-          if (method === "GET")
-            return controller.find(c);
-          if (method === "POST")
-            return controller.create(c);
+          if (method === "GET") return controller.find(c);
+          if (method === "POST") return controller.create(c);
         }
       }
     }
@@ -4136,13 +4068,10 @@ function registerRoutes(app, config) {
         const controller = new GlobalController(global);
         const method = c.req.method;
         if (id) {
-          if (method === "POST" && id === "seed")
-            return controller.seed(c);
+          if (method === "POST" && id === "seed") return controller.seed(c);
         } else {
-          if (method === "GET")
-            return controller.get(c);
-          if (method === "PATCH")
-            return controller.update(c);
+          if (method === "GET") return controller.get(c);
+          if (method === "PATCH") return controller.update(c);
         }
       }
     }
@@ -4150,7 +4079,7 @@ function registerRoutes(app, config) {
   });
 }
 
-// src/utils/config.js
+// src/utils/config.ts
 var AUDIT_COLLECTION_SLUG = "__audit";
 var SYSTEM_FIELDS = [
   {
@@ -4364,8 +4293,7 @@ function normalizeConfig(config) {
   });
   const hasAuditCollection = normalizedCollections.some((col) => col.slug === AUDIT_COLLECTION_SLUG);
   const systemCollections = [];
-  if (needsAudit && !hasAuditCollection)
-    systemCollections.push(AUDIT_COLLECTION);
+  if (needsAudit && !hasAuditCollection) systemCollections.push(AUDIT_COLLECTION);
   if (needsWorkflow && !normalizedCollections.some((col) => col.slug === WORKFLOW_HISTORY_COLLECTION)) {
     systemCollections.push(WORKFLOW_HISTORY_COLLECTION_CONFIG);
   }
@@ -4379,7 +4307,7 @@ function normalizeConfig(config) {
   };
 }
 
-// src/app.js
+// src/app.ts
 async function createDyrectedApp(rawConfig) {
   const config = normalizeConfig(rawConfig);
   const app = new import_hono.Hono();