@gzl10/nexus-backend 0.17.0 → 0.19.0

package/dist/index.js

@@ -14,7 +14,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@gzl10/nexus-backend",
-      version: "0.17.0",
+      version: "0.19.0",
       description: "Backend as a Service (BaaS) with Express 5, Knex and CASL",
       type: "module",
       main: "./dist/index.js",
@@ -26,6 +26,14 @@ var init_package = __esm({
         ".": {
           import: "./dist/index.js",
           types: "./dist/index.d.ts"
+        },
+        "./testing": {
+          import: "./dist/testing/index.js",
+          types: "./dist/testing/index.d.ts"
+        },
+        "./migrations": {
+          import: "./dist/migration-helpers/index.js",
+          types: "./dist/migration-helpers/index.d.ts"
         }
       },
       files: [
@@ -70,7 +78,7 @@ var init_package = __esm({
         "jwt"
       ],
       scripts: {
-        dev: "tsx watch src/main.ts",
+        dev: "node --watch-path=./src --import tsx/esm src/main.ts",
         build: "tsup",
         start: "node dist/main.js",
         nexus: "tsx src/cli.ts",
@@ -126,39 +134,34 @@ var init_package = __esm({
         zod: "^3.24.0"
       },
       devDependencies: {
-        "@gzl10/nexus-plugin-ai": "workspace:^",
-        "@gzl10/nexus-plugin-auth-providers": "workspace:^",
-        "@gzl10/nexus-plugin-charts": "workspace:^",
-        "@gzl10/nexus-plugin-cms": "workspace:^",
-        "@gzl10/nexus-plugin-compliance": "workspace:^",
-        "@gzl10/nexus-plugin-docker": "workspace:^",
-        "@gzl10/nexus-plugin-feeds": "workspace:^",
-        "@gzl10/nexus-plugin-importer": "workspace:^",
-        "@gzl10/nexus-plugin-links": "workspace:*",
-        "@gzl10/nexus-plugin-notifications": "workspace:*",
-        "@gzl10/nexus-plugin-oidc-server": "workspace:^",
-        "@gzl10/nexus-plugin-plane": "workspace:^",
-        "@gzl10/nexus-plugin-prisma": "workspace:^",
-        "@gzl10/nexus-plugin-remote": "workspace:*",
-        "@gzl10/nexus-plugin-schedules": "workspace:*",
-        "@gzl10/nexus-plugin-scim": "workspace:^",
-        "@gzl10/nexus-plugin-scraper": "workspace:^",
-        "@gzl10/nexus-plugin-secrets": "workspace:^",
-        "@gzl10/nexus-plugin-tags": "workspace:*",
-        "@gzl10/nexus-plugin-webhooks": "workspace:*",
         "@types/bcryptjs": "^2.4.0",
         "@types/compression": "^1.8.1",
         "@types/cookie-parser": "^1.4.10",
         "@types/cors": "^2.8.19",
         "@types/express": "^5.0.6",
+        "@types/express-serve-static-core": "^5.1.1",
         "@types/jsonwebtoken": "^9.0.10",
         "@types/multer": "^2.1.0",
         "@types/nodemailer": "^7.0.11",
+        "@types/qs": "^6.15.0",
         "@types/supertest": "^6.0.3",
         "pino-pretty": "^13.1.3",
         "socket.io-client": "^4.8.3",
         supertest: "^7.2.2",
-        tsx: "^4.21.0"
+        tsx: "^4.21.0",
+        vite: "^8.0.3"
+      },
+      peerDependencies: {
+        vite: ">=6.0.0",
+        vitest: ">=3.0.0"
+      },
+      peerDependenciesMeta: {
+        vite: {
+          optional: true
+        },
+        vitest: {
+          optional: true
+        }
       },
       publishConfig: {
         access: "public",
@@ -1059,6 +1062,14 @@ async function isWorkspacePackage(name) {
   }
 }
 async function installPlugin(name, opts) {
+  const projectPath2 = opts?.projectPath ?? process.cwd();
+  const pkgPath = join2(projectPath2, "package.json");
+  if (existsSync2(pkgPath)) {
+    const pkg3 = JSON.parse(readFileSync(pkgPath, "utf-8"));
+    if (pkg3.name === "@gzl10/nexus-backend") {
+      throw new Error("Cannot install plugins inside @gzl10/nexus-backend. Run this command from a Nexus project directory.");
+    }
+  }
   const isWorkspace = await isWorkspacePackage(name);
   let pkg2;
   if (opts?.version) {
@@ -1075,11 +1086,28 @@ async function installPlugin(name, opts) {
   plugins[name] = { enabled: true };
   writePluginsFile(plugins, filePath);
 }
+function isPackageInstalled(name, projectPath2) {
+  const base = projectPath2 || process.cwd();
+  const pkgPath = join2(base, "package.json");
+  try {
+    const pkg2 = JSON.parse(readFileSync(pkgPath, "utf-8"));
+    return !!(pkg2.dependencies?.[name] || pkg2.devDependencies?.[name]);
+  } catch {
+    return false;
+  }
+}
 async function uninstallPlugin(name, projectPath2) {
-  await execAsync(`pnpm remove ${name}`);
   const filePath = getPluginsFilePath(projectPath2);
   const plugins = readPluginsFile(filePath);
-  if (name in plugins) {
+  const isRegistered = name in plugins;
+  const isInstalled = isPackageInstalled(name, projectPath2);
+  if (!isRegistered && !isInstalled) {
+    throw new Error(`Plugin ${shortPluginName(name)} is not installed`);
+  }
+  if (isInstalled) {
+    await execAsync(`pnpm remove ${name}`);
+  }
+  if (isRegistered) {
     delete plugins[name];
     writePluginsFile(plugins, filePath);
   }
@@ -1160,7 +1188,7 @@ var init_table_prefix = __esm({
   }
 });
 
-// src/engine/store.ts
+// src/engine/module-store.ts
 function resetStore() {
   moduleStore.modules.length = 0;
   moduleStore.plugins.clear();
@@ -1171,8 +1199,8 @@ function resetStore() {
   moduleStore.tableToSubject.clear();
 }
 var moduleStore;
-var init_store = __esm({
-  "src/engine/store.ts"() {
+var init_module_store = __esm({
+  "src/engine/module-store.ts"() {
     "use strict";
     moduleStore = {
       /** Registered modules with source metadata */
@@ -1225,7 +1253,7 @@ var init_id = __esm({
   }
 });
 
-// src/engine/extractors.ts
+// src/engine/definition-extractors.ts
 function getTableAndSubject(def) {
   const caslSubject = def.casl?.subject;
   if (!TYPES_WITH_TABLE.has(def.type)) {
@@ -1293,8 +1321,8 @@ function validateModuleDependencies(modules) {
   }
 }
 var TYPES_WITH_TABLE;
-var init_extractors = __esm({
-  "src/engine/extractors.ts"() {
+var init_definition_extractors = __esm({
+  "src/engine/definition-extractors.ts"() {
     "use strict";
     TYPES_WITH_TABLE = /* @__PURE__ */ new Set(["collection", "reference", "event", "config", "temp", "view", void 0]);
   }
@@ -1414,9 +1442,9 @@ var init_registry = __esm({
     "use strict";
     init_plugin_ops();
     init_table_prefix();
-    init_store();
+    init_module_store();
     init_id();
-    init_extractors();
+    init_definition_extractors();
   }
 });
 
@@ -1479,7 +1507,28 @@ var init_paths = __esm({
   }
 });
 
-// src/engine/queries.ts
+// src/engine/module-queries.ts
+var module_queries_exports = {};
+__export(module_queries_exports, {
+  getCoreManifest: () => getCoreManifest,
+  getCoreModules: () => getCoreModules,
+  getModule: () => getModule,
+  getModules: () => getModules,
+  getOrderedModules: () => getOrderedModules,
+  getOrderedModulesInternal: () => getOrderedModulesInternal,
+  getPlugin: () => getPlugin,
+  getPluginByCode: () => getPluginByCode,
+  getPlugins: () => getPlugins,
+  getRegisteredSubjects: () => getRegisteredSubjects,
+  getSubjectForTable: () => getSubjectForTable,
+  getUserManifest: () => getUserManifest,
+  getUserModules: () => getUserModules,
+  hasModule: () => hasModule,
+  hasPlugin: () => hasPlugin,
+  hasPluginByCode: () => hasPluginByCode,
+  hasUserApp: () => hasUserApp,
+  isValidSubject: () => isValidSubject
+});
 import { join as join4 } from "path";
 import { readFileSync as readFileSync3 } from "fs";
 function readPackageJson(dir) {
@@ -1575,10 +1624,10 @@ function getPluginByCode(code) {
 function hasPluginByCode(code) {
   return moduleStore.pluginsByCode.has(code);
 }
-var init_queries = __esm({
-  "src/engine/queries.ts"() {
+var init_module_queries = __esm({
+  "src/engine/module-queries.ts"() {
     "use strict";
-    init_store();
+    init_module_store();
     init_paths();
   }
 });
@@ -2058,17 +2107,22 @@ var init_definitions = __esm({
     };
     mastersEntity = {
       table: "masters",
+      seedable: true,
       routePrefix: "/",
       label: { en: "Master", es: "Maestro" },
       labelPlural: { en: "Masters", es: "Maestros" },
       labelField: "label",
       timestamps: true,
+      availableDisplayModes: ["board"],
+      groupBy: "type",
+      groupableFields: ["type"],
+      //columnDragFields: ['is_active'],
       fields: {
         id: useTextField2({
           label: { en: "ID", es: "ID" },
           required: true,
           size: 100,
-          hint: { en: "Format: type:code (e.g. countries:ES)", es: "Formato: type:code (ej. countries:ES)" },
+          hidden: true,
           meta: { sortable: true }
         }),
         type: useTextField2({
@@ -2085,13 +2139,31 @@ var init_definitions = __esm({
           meta: { sortable: true, searchable: true }
         }),
         label: useLocalizedField({ label: { en: "Name", es: "Nombre" } }),
-        order: orderField,
+        order: { ...orderField, meta: { ...orderField.meta, showInDisplay: false } },
         is_active: isActiveField,
         metadata: useJsonField({
           label: { en: "Metadata", es: "Metadatos" },
-          hint: { en: "Type-specific fields (symbol, flag, etc.)", es: "Campos espec\xEDficos del tipo" }
+          hint: {
+            en: "Type-specific fields (symbol, flag, etc.)",
+            es: "Campos espec\xEDficos del tipo"
+          },
+          meta: { showInDisplay: false }
         })
       },
+      hooks: () => ({
+        beforeCreate: async (data) => {
+          if (data["type"] && data["code"] && !data["id"]) {
+            data["id"] = `${data["type"]}:${data["code"]}`;
+          }
+          return data;
+        },
+        beforeUpdate: async (_id, data) => {
+          if ("type" in data || "code" in data) {
+            throw new Error("Cannot update type or code of a master record. Delete and recreate instead.");
+          }
+          return data;
+        }
+      }),
       defaultSort: { field: "order", order: "asc" },
       indexes: [{ columns: ["type", "code"], unique: true }],
       casl: { subject: "Master", permissions: masterCaslPermissions }
@@ -2100,6 +2172,10 @@ var init_definitions = __esm({
 });
 
 // src/modules/masters/registry.ts
+var registry_exports = {};
+__export(registry_exports, {
+  createMasterRegistry: () => createMasterRegistry
+});
 function createMasterRegistry() {
   const registrations = [];
   return {
@@ -2137,7 +2213,7 @@ function createMasterRegistry() {
             await ctx.db.knex("masters").insert(row).onConflict(["type", "code"]).merge();
           }
         } else {
-          await ctx.db.knex("masters").insert(rows);
+          await ctx.db.knex("masters").insert(rows).onConflict(["type", "code"]).ignore();
         }
       }
     },
@@ -8570,15 +8646,12 @@ var init_document_types = __esm({
   }
 });
 
-// src/modules/masters/index.ts
-var PREDEFINED_MASTERS, mastersModule;
-var init_masters = __esm({
-  "src/modules/masters/index.ts"() {
+// src/modules/masters/constants.ts
+var DEFAULT_MASTER_TYPES, PREDEFINED_MASTERS;
+var init_constants = __esm({
+  "src/modules/masters/constants.ts"() {
     "use strict";
-    init_definitions();
-    init_registry2();
-    init_definitions();
-    init_registry2();
+    DEFAULT_MASTER_TYPES = ["languages", "timezones"];
     PREDEFINED_MASTERS = {
       currencies: () => Promise.resolve().then(() => (init_currencies(), currencies_exports)).then((m2) => m2.default),
       languages: () => Promise.resolve().then(() => (init_languages(), languages_exports)).then((m2) => m2.default),
@@ -8595,15 +8668,137 @@ var init_masters = __esm({
       "phone-prefixes": () => Promise.resolve().then(() => (init_phone_prefixes(), phone_prefixes_exports)).then((m2) => m2.default),
       "document-types": () => Promise.resolve().then(() => (init_document_types(), document_types_exports)).then((m2) => m2.default)
     };
+  }
+});
+
+// src/modules/masters/actions/install-type.ts
+import { useSelectField as useSelectField2 } from "@gzl10/nexus-sdk/fields";
+var installTypeAction;
+var init_install_type = __esm({
+  "src/modules/masters/actions/install-type.ts"() {
+    "use strict";
+    init_constants();
+    installTypeAction = {
+      key: "install-type",
+      scope: "module",
+      label: { en: "Install Master Type", es: "Instalar Tipo de Maestro" },
+      icon: "mdi:database-plus",
+      variant: "primary",
+      output: {},
+      input: {
+        type: useSelectField2({
+          label: { en: "Master Type", es: "Tipo de Maestro" },
+          required: true,
+          options: Object.keys(PREDEFINED_MASTERS).filter((t) => !DEFAULT_MASTER_TYPES.includes(t)).map((t) => ({
+            value: t,
+            label: t.replace(/[-_]/g, " ").replace(/\b\w/g, (c) => c.toUpperCase())
+          }))
+        })
+      },
+      handler: async (ctx, input) => {
+        if (process.env["NODE_ENV"] === "production") {
+          throw new ctx.core.errors.ForbiddenError("Master type management is only available in development");
+        }
+        const { type: type2 } = input;
+        const loader = PREDEFINED_MASTERS[type2];
+        if (!loader) {
+          throw new ctx.core.errors.AppError(`Unknown predefined master type: ${type2}`, 400);
+        }
+        const existing = await ctx.db.knex("masters").where({ type: type2 }).first();
+        if (existing) {
+          throw new ctx.core.errors.ConflictError(`Master type "${type2}" is already installed`);
+        }
+        const entries = await loader();
+        const rows = entries.map((entry, i) => ({
+          id: `${type2}:${entry.code}`,
+          type: type2,
+          code: entry.code,
+          label: JSON.stringify(typeof entry.label === "string" ? { en: entry.label } : entry.label),
+          order: entry.order ?? i,
+          is_active: entry.is_active ?? true,
+          metadata: entry.metadata ? JSON.stringify(entry.metadata) : null
+        }));
+        await ctx.db.knex("masters").insert(rows).onConflict(["type", "code"]).ignore();
+        return { installed: type2, count: rows.length };
+      }
+    };
+  }
+});
+
+// src/modules/masters/actions/uninstall-type.ts
+import { useTextField as useTextField3 } from "@gzl10/nexus-sdk/fields";
+var uninstallTypeAction;
+var init_uninstall_type = __esm({
+  "src/modules/masters/actions/uninstall-type.ts"() {
+    "use strict";
+    init_constants();
+    uninstallTypeAction = {
+      key: "uninstall-type",
+      scope: "module",
+      label: { en: "Uninstall Master Type", es: "Desinstalar Tipo de Maestro" },
+      icon: "mdi:database-minus",
+      variant: "danger",
+      output: {},
+      confirm: {
+        type: "simple",
+        title: { en: "Uninstall Master Type", es: "Desinstalar Tipo de Maestro" },
+        message: {
+          en: "This will delete ALL records of the selected type. This action cannot be undone.",
+          es: "Esto eliminar\xE1 TODOS los registros del tipo seleccionado. Esta acci\xF3n no se puede deshacer."
+        }
+      },
+      input: {
+        type: useTextField3({
+          label: { en: "Type slug to uninstall", es: "Slug del tipo a desinstalar" },
+          required: true,
+          hint: {
+            en: 'Enter the master type slug (e.g., "currencies", "countries")',
+            es: 'Introduce el slug del tipo (ej: "currencies", "countries")'
+          }
+        })
+      },
+      handler: async (ctx, input) => {
+        if (process.env["NODE_ENV"] === "production") {
+          throw new ctx.core.errors.ForbiddenError("Master type management is only available in development");
+        }
+        const { type: type2 } = input;
+        if (DEFAULT_MASTER_TYPES.includes(type2)) {
+          throw new ctx.core.errors.AppError(`Cannot uninstall default master type "${type2}" (required by core)`, 400);
+        }
+        const existing = await ctx.db.knex("masters").where({ type: type2 }).first();
+        if (!existing) {
+          throw new ctx.core.errors.NotFoundError(`Master type "${type2}" is not installed`);
+        }
+        const deleted = await ctx.db.knex("masters").where({ type: type2 }).del();
+        return { uninstalled: type2, count: deleted };
+      }
+    };
+  }
+});
+
+// src/modules/masters/index.ts
+var mastersModule;
+var init_masters = __esm({
+  "src/modules/masters/index.ts"() {
+    "use strict";
+    init_definitions();
+    init_registry2();
+    init_constants();
+    init_install_type();
+    init_uninstall_type();
+    init_definitions();
+    init_registry2();
+    init_constants();
     mastersModule = {
       name: "masters",
       type: "core",
-      label: { en: "Master Data", es: "Datos maestros" },
+      label: { en: "Masters", es: "Maestros" },
       icon: "mdi:database-outline",
       description: { en: "Reference data catalogs", es: "Cat\xE1logos de datos de referencia" },
-      category: "data",
+      category: "settings",
       routePrefix: "/masters",
       definitions: [mastersEntity],
+      actions: [installTypeAction, uninstallTypeAction],
       init: (ctx) => {
         if (!ctx.services.has("masters")) {
           ctx.services.register("masters", createMasterRegistry());
@@ -8614,13 +8809,14 @@ var init_masters = __esm({
           ctx.services.register("masters", createMasterRegistry());
         }
         const registry2 = ctx.services.get("masters");
-        const configMasters = ctx.config.resolved["masters"];
-        const typesToSeed = !configMasters || configMasters === "*" ? Object.keys(PREDEFINED_MASTERS) : configMasters.filter((t) => t in PREDEFINED_MASTERS);
-        for (const type2 of typesToSeed) {
-          const loader = PREDEFINED_MASTERS[type2];
-          if (!loader) continue;
-          const entries = await loader();
-          registry2.register(type2, entries, { seed: "if-empty" });
+        const existing = await ctx.db.knex("masters").first();
+        if (!existing) {
+          for (const type2 of DEFAULT_MASTER_TYPES) {
+            const loader = PREDEFINED_MASTERS[type2];
+            if (!loader) continue;
+            const entries = await loader();
+            registry2.register(type2, entries, { seed: "if-empty" });
+          }
         }
         await registry2.seed(ctx);
       }
@@ -8778,15 +8974,18 @@ function toEntityDefinitionDTO(def, _engine, moduleName) {
     const meta = field["meta"];
     return meta?.["sortable"] === true && !field["hidden"];
   });
+  const explicitGroupable = def["groupableFields"];
   const groupableInputTypes = ["select", "switch", "checkbox", "radio", "tags"];
-  const groupableFields = fieldEntries.filter(([, f]) => {
+  const autoGroupableFields = fieldEntries.filter(([, f]) => {
     const field = f;
     const inputType = field["input"];
     return groupableInputTypes.includes(inputType ?? "") && !field["hidden"];
   });
+  const resolvedGroupableFields = explicitGroupable ?? (autoGroupableFields.length > 0 ? autoGroupableFields.map(([name]) => name) : void 0);
   const entityType = def["type"] ?? "collection";
   const explicitDisplayMode = def["displayMode"];
-  const defaultDisplayMode = explicitDisplayMode ?? (["tree", "dag"].includes(entityType) ? "tree" : "table");
+  const explicitAvailableModes = def["availableDisplayModes"];
+  const defaultDisplayMode = explicitDisplayMode ?? (explicitAvailableModes?.length === 1 ? explicitAvailableModes[0] : void 0) ?? (["tree", "dag"].includes(entityType) ? "tree" : "table");
   const entityIdent = def["table"] ?? def["key"];
   return {
     id: def._id,
@@ -8806,9 +9005,11 @@ function toEntityDefinitionDTO(def, _engine, moduleName) {
     displayMode: explicitDisplayMode,
     defaultDisplayMode,
     availableDisplayModes: (() => {
+      const explicit = def["availableDisplayModes"];
+      if (explicit?.length) return explicit;
       const modes = ["table", "list", "masonry"];
       if (["tree", "dag"].includes(entityType)) modes.push("tree");
-      if (groupableFields.length > 0) modes.push("board");
+      if ((resolvedGroupableFields?.length ?? 0) > 0) modes.push("board");
       if (def["calendarFrom"]) modes.push("calendar");
       return modes;
     })(),
@@ -8818,10 +9019,8 @@ function toEntityDefinitionDTO(def, _engine, moduleName) {
       value: name,
       label: f["label"]
     })),
-    groupableFields: groupableFields.length > 0 ? groupableFields.map(([name, f]) => ({
-      value: name,
-      label: f["label"]
-    })) : void 0,
+    groupableFields: resolvedGroupableFields,
+    columnDragFields: def["columnDragFields"],
     groupBy: def["groupBy"],
     subgroupBy: def["subgroupBy"],
     calendarFrom: def["calendarFrom"],
@@ -8861,21 +9060,6 @@ function toModuleDTO(mod, ctx) {
     hasInit: !!mod.init
   };
 }
-function getOrderedModulesViaContext(ctx) {
-  return ctx.engine.getModules();
-}
-async function runModuleSeedViaContext(mod, ctx) {
-  if (!mod.seed) {
-    return false;
-  }
-  try {
-    await mod.seed(ctx);
-    return true;
-  } catch (err) {
-    ctx.core.logger.error({ module: mod.name, err }, "Seed failed");
-    return false;
-  }
-}
 var init_system_helpers = __esm({
   "src/modules/system/system.helpers.ts"() {
     "use strict";
@@ -8896,6 +9080,7 @@ function toPageDTO(page) {
     dataSource: page.dataSource,
     widgets: page.widgets,
     component: page.component,
+    contentEndpoint: page.contentEndpoint,
     meta: page.meta,
     layout: page.layout
   };
@@ -9110,7 +9295,8 @@ function createSystemController(ctx) {
       const plugins = engine.getPlugins();
       const body = {
         version: manifest.version,
-        plugins: plugins.map((p) => p.code)
+        plugins: plugins.map((p) => p.code),
+        locales: ctx.locales
       };
       res.json(body);
     }
@@ -9158,7 +9344,7 @@ var init_system_routes = __esm({
 
 // src/modules/system/system.entity.ts
 import * as os from "os";
-import { useIconField, useTextField as useTextField3, useSelectField as useSelectField2, useNumberField as useNumberField2, useCheckboxField, useTagsField, useNameField, useDescriptionField } from "@gzl10/nexus-sdk/fields";
+import { useIconField, useTextField as useTextField4, useSelectField as useSelectField3, useNumberField as useNumberField2, useCheckboxField, useTagsField, useNameField, useDescriptionField } from "@gzl10/nexus-sdk/fields";
 var moduleEntity, osEntity;
 var init_system_entity = __esm({
   "src/modules/system/system.entity.ts"() {
@@ -9176,7 +9362,7 @@ var init_system_entity = __esm({
         name: useNameField({
           size: 50
         }),
-        label: useTextField3({
+        label: useTextField4({
           label: { en: "Label", es: "Etiqueta" },
           size: 100,
           nullable: false,
@@ -9184,7 +9370,7 @@ var init_system_entity = __esm({
         }),
         icon: useIconField({ label: { en: "Icon", es: "Icono" }, size: 50 }),
         type: {
-          ...useSelectField2({
+          ...useSelectField3({
             label: { en: "Type", es: "Tipo" },
             options: [
               { value: "core", label: { en: "Core", es: "Core" } },
@@ -9200,7 +9386,7 @@ var init_system_entity = __esm({
         description: useDescriptionField({
           mode: "text"
         }),
-        routePrefix: useTextField3({
+        routePrefix: useTextField4({
           label: { en: "Route", es: "Ruta" },
           size: 50,
           nullable: true
@@ -9258,14 +9444,14 @@ var init_system_entity = __esm({
       order: 1,
       refreshInterval: 5e3,
       fields: {
-        hostname: useTextField3({
+        hostname: useTextField4({
           label: { en: "Hostname", es: "Nombre de servidor" },
           size: 100,
           nullable: false,
           inputProps: { order: 1 }
         }),
         platform: {
-          ...useSelectField2({
+          ...useSelectField3({
             label: { en: "Platform", es: "Plataforma" },
             options: [
               { value: "darwin", label: { en: "macOS", es: "macOS" } },
@@ -9279,7 +9465,7 @@ var init_system_entity = __esm({
           inputProps: { order: 2 }
         },
         arch: {
-          ...useSelectField2({
+          ...useSelectField3({
             label: { en: "Architecture", es: "Arquitectura" },
             options: [
               { value: "x64", label: { en: "x64", es: "x64" } },
@@ -9292,7 +9478,7 @@ var init_system_entity = __esm({
           inputProps: { order: 3 }
         },
         type: {
-          ...useTextField3({
+          ...useTextField4({
             label: { en: "Type", es: "Tipo" },
             size: 30,
             nullable: false
@@ -9300,7 +9486,7 @@ var init_system_entity = __esm({
           inputProps: { order: 4 }
         },
         release: {
-          ...useTextField3({
+          ...useTextField4({
             label: { en: "Release", es: "Versi\xF3n" },
             size: 50,
             nullable: false
@@ -9323,7 +9509,7 @@ var init_system_entity = __esm({
           inputProps: { order: 7, format: "duration" }
         },
         cpuModel: {
-          ...useTextField3({
+          ...useTextField4({
             label: { en: "CPU Model", es: "Modelo de CPU" },
             size: 100,
             nullable: false
@@ -9389,7 +9575,7 @@ var init_system_entity = __esm({
 });
 
 // src/modules/system/migration-history.entity.ts
-import { useIdField as useIdField2, useTextField as useTextField4, useNumberField as useNumberField3, useSelectField as useSelectField3, useDatetimeField as useDatetimeField2, useTextareaField as useTextareaField2 } from "@gzl10/nexus-sdk/fields";
+import { useIdField as useIdField2, useTextField as useTextField5, useNumberField as useNumberField3, useSelectField as useSelectField4, useDatetimeField as useDatetimeField2, useTextareaField as useTextareaField2 } from "@gzl10/nexus-sdk/fields";
 var migrationHistoryEntity;
 var init_migration_history_entity = __esm({
   "src/modules/system/migration-history.entity.ts"() {
@@ -9406,9 +9592,9 @@ var init_migration_history_entity = __esm({
       calendarFrom: "executed_at",
       fields: {
         id: useIdField2(),
-        name: useTextField4({ label: { en: "Migration Name", es: "Nombre de la Migraci\xF3n" }, required: true, size: 255, unique: true, meta: { sortable: true, searchable: true } }),
+        name: useTextField5({ label: { en: "Migration Name", es: "Nombre de la Migraci\xF3n" }, required: true, size: 255, unique: true, meta: { sortable: true, searchable: true } }),
         batch: useNumberField3({ label: { en: "Batch", es: "Lote" }, required: true, meta: { sortable: true } }),
-        status: useSelectField3({
+        status: useSelectField4({
           label: { en: "Status", es: "Estado" },
           options: [
             { value: "running", label: { en: "Running", es: "Ejecutando" } },
@@ -9440,7 +9626,7 @@ var init_migration_history_entity = __esm({
 });
 
 // src/modules/system/env-config.entity.ts
-import { useTextField as useTextField5, useSelectField as useSelectField4, useCheckboxField as useCheckboxField2 } from "@gzl10/nexus-sdk/fields";
+import { useTextField as useTextField6, useSelectField as useSelectField5, useCheckboxField as useCheckboxField2 } from "@gzl10/nexus-sdk/fields";
 function maskValue(value, sensitive) {
   if (!sensitive) return value;
   try {
@@ -9465,14 +9651,14 @@ var init_env_config_entity = __esm({
       routePrefix: "/env-config",
       defaultSort: { field: "category", order: "asc" },
       fields: {
-        name: useTextField5({
+        name: useTextField6({
           label: { en: "Variable", es: "Variable" },
           size: 100,
           nullable: false,
           meta: { sortable: true, searchable: true }
         }),
         category: {
-          ...useSelectField4({
+          ...useSelectField5({
             label: { en: "Category", es: "Categor\xEDa" },
             options: [
               { value: "server", label: { en: "Server", es: "Servidor" } },
@@ -9487,18 +9673,18 @@ var init_env_config_entity = __esm({
             meta: { sortable: true }
           })
         },
-        source: useTextField5({
+        source: useTextField6({
           label: { en: "Source", es: "Origen" },
           size: 50,
           nullable: false,
           meta: { sortable: true }
         }),
-        value: useTextField5({
+        value: useTextField6({
           label: { en: "Value", es: "Valor" },
           size: 255,
           nullable: true
         }),
-        default: useTextField5({
+        default: useTextField6({
           label: { en: "Default", es: "Por defecto" },
           size: 100,
           nullable: true
@@ -9997,7 +10183,6 @@ var SYSTEM_TABLES, factoryResetAction;
 var init_factory_reset_action = __esm({
   "src/modules/system/actions/factory-reset.action.ts"() {
     "use strict";
-    init_system_helpers();
     SYSTEM_TABLES = /* @__PURE__ */ new Set([
       "_nexus_migrations",
       "_nexus_migration_lock",
@@ -10040,8 +10225,8 @@ var init_factory_reset_action = __esm({
           source: "core:system",
           action: "factory_reset",
           actorId: authReq.user?.id,
-          ip: req.ip,
-          userAgent: req.headers["user-agent"]
+          ip: req?.ip,
+          userAgent: req?.headers["user-agent"]
         });
         await new Promise((resolve2) => setImmediate(resolve2));
         const allTables = await getAllTables(knex3);
@@ -10079,11 +10264,11 @@ var init_factory_reset_action = __esm({
         } catch {
         }
         ctx.core.logger.info({ tables: dataTables.length }, "All data tables cleared");
-        const modules = getOrderedModulesViaContext(ctx);
+        const modules = ctx.engine.getModules();
         let modulesSeeded = 0;
         for (const mod of modules) {
           try {
-            const seeded = await runModuleSeedViaContext(mod, ctx);
+            const seeded = await ctx.db.seedModule(mod);
             if (seeded) modulesSeeded++;
           } catch (err) {
             ctx.core.logger.error({ module: mod.name, err }, "Seed failed during factory reset");
@@ -10137,8 +10322,8 @@ var init_restart_server_action = __esm({
           source: "core:system",
           action: "server_restart",
           actorId: authReq.user?.id,
-          ip: req.ip,
-          userAgent: req.headers["user-agent"]
+          ip: req?.ip,
+          userAgent: req?.headers["user-agent"]
         });
         setTimeout(() => process.exit(0), 500);
         return { success: true, message: "Server is restarting..." };
@@ -10205,7 +10390,7 @@ var init_system = __esm({
 });
 
 // src/modules/ui-settings/ui-branding.entity.ts
-import { useTextField as useTextField6, useImageField } from "@gzl10/nexus-sdk/fields";
+import { useTextField as useTextField7, useImageField } from "@gzl10/nexus-sdk/fields";
 var uiBrandingEntity;
 var init_ui_branding_entity = __esm({
   "src/modules/ui-settings/ui-branding.entity.ts"() {
@@ -10225,7 +10410,7 @@ var init_ui_branding_entity = __esm({
         favicon: null
       },
       fields: {
-        appName: useTextField6({
+        appName: useTextField7({
           label: { en: "App Name", es: "Nombre de la App" },
           hint: { en: "Displayed in the header, browser tab and emails", es: "Se muestra en el header, pesta\xF1a del navegador y emails" },
           size: 100,
@@ -10266,7 +10451,7 @@ var init_ui_branding_entity = __esm({
 });
 
 // src/modules/ui-settings/ui-theme.entity.ts
-import { useSelectField as useSelectField5, useColorField } from "@gzl10/nexus-sdk/fields";
+import { useSelectField as useSelectField6, useColorField } from "@gzl10/nexus-sdk/fields";
 var uiThemeEntity;
 var init_ui_theme_entity = __esm({
   "src/modules/ui-settings/ui-theme.entity.ts"() {
@@ -10291,7 +10476,7 @@ var init_ui_theme_entity = __esm({
       },
       fields: {
         // === Typography ===
-        font: useSelectField5({
+        font: useSelectField6({
           label: { en: "Font", es: "Fuente" },
           hint: { en: "Primary font for headings and UI elements", es: "Fuente principal para t\xEDtulos y elementos de interfaz" },
           options: [
@@ -10304,7 +10489,7 @@ var init_ui_theme_entity = __esm({
           ]
         }),
         // === Theme & Colors ===
-        theme: useSelectField5({
+        theme: useSelectField6({
           label: { en: "Theme", es: "Tema" },
           hint: { en: "System follows your device preferences", es: "Sistema sigue las preferencias de tu dispositivo" },
           options: [
@@ -10313,7 +10498,7 @@ var init_ui_theme_entity = __esm({
             { value: "system", label: { en: "System", es: "Sistema" } }
           ]
         }),
-        dopamineTheme: useSelectField5({
+        dopamineTheme: useSelectField6({
           label: { en: "Dopamine Theme", es: "Tema Dopamina" },
           hint: { en: "Vibrant color presets optimized for light and dark modes (2025/2026 trends)", es: "Presets de colores vibrantes optimizados para modo claro y oscuro (tendencias 2025/2026)" },
           options: [
@@ -10331,7 +10516,7 @@ var init_ui_theme_entity = __esm({
           ]
         }),
         // === Login Layout ===
-        loginLayout: useSelectField5({
+        loginLayout: useSelectField6({
           label: { en: "Login Layout", es: "Dise\xF1o de Login" },
           hint: { en: "Visual layout for authentication pages", es: "Dise\xF1o visual para p\xE1ginas de autenticaci\xF3n" },
           options: [
@@ -10362,7 +10547,7 @@ var init_ui_theme_entity = __esm({
 });
 
 // src/modules/ui-settings/ui-effects.entity.ts
-import { useSelectField as useSelectField6, useSwitchField as useSwitchField2 } from "@gzl10/nexus-sdk/fields";
+import { useSelectField as useSelectField7, useSwitchField as useSwitchField2 } from "@gzl10/nexus-sdk/fields";
 var uiEffectsEntity;
 var init_ui_effects_entity = __esm({
   "src/modules/ui-settings/ui-effects.entity.ts"() {
@@ -10382,7 +10567,7 @@ var init_ui_effects_entity = __esm({
         enableOrganicShapes: false
       },
       fields: {
-        glassIntensity: useSelectField6({
+        glassIntensity: useSelectField7({
           label: { en: "Glass Intensity", es: "Intensidad Glass" },
           hint: { en: "Glassmorphism blur effect on cards and modals", es: "Efecto de desenfoque glassmorphism en cards y modales" },
           options: [
@@ -10392,7 +10577,7 @@ var init_ui_effects_entity = __esm({
             { value: "high", label: { en: "High", es: "Alta" } }
           ]
         }),
-        borderStyle: useSelectField6({
+        borderStyle: useSelectField7({
           label: { en: "Border Style", es: "Estilo de Bordes" },
           hint: { en: "Corner radius for buttons, cards and inputs", es: "Radio de esquinas para botones, cards e inputs" },
           options: [
@@ -10426,7 +10611,7 @@ var init_ui_effects_entity = __esm({
 });
 
 // src/modules/ui-settings/ui-accessibility.entity.ts
-import { useSelectField as useSelectField7, useSwitchField as useSwitchField3 } from "@gzl10/nexus-sdk/fields";
+import { useSelectField as useSelectField8, useSwitchField as useSwitchField3 } from "@gzl10/nexus-sdk/fields";
 var uiAccessibilityEntity;
 var init_ui_accessibility_entity = __esm({
   "src/modules/ui-settings/ui-accessibility.entity.ts"() {
@@ -10445,7 +10630,7 @@ var init_ui_accessibility_entity = __esm({
         highContrast: false
       },
       fields: {
-        typographyScale: useSelectField7({
+        typographyScale: useSelectField8({
           label: { en: "Typography Scale", es: "Escala Tipogr\xE1fica" },
           hint: { en: "Adjusts font sizes for better readability (WCAG 1.4.4)", es: "Ajusta tama\xF1os de fuente para mejor legibilidad (WCAG 1.4.4)" },
           options: [
@@ -11436,7 +11621,7 @@ var init_storage_service = __esm({
 });
 
 // src/modules/storage/storage.entity.ts
-import { useIdField as useIdField3, useTextField as useTextField7, useSelectField as useSelectField8, useUrlField, useNumberField as useNumberField4, useCheckboxField as useCheckboxField3, useJsonField as useJsonField2, useMetadataField, usePublicField } from "@gzl10/nexus-sdk/fields";
+import { useIdField as useIdField3, useTextField as useTextField8, useSelectField as useSelectField9, useUrlField, useNumberField as useNumberField4, useCheckboxField as useCheckboxField3, useJsonField as useJsonField2, useMetadataField, usePublicField } from "@gzl10/nexus-sdk/fields";
 var DEFAULT_MAX_SIZE2, storageConfigEntity, storageFilesEntity;
 var init_storage_entity = __esm({
   "src/modules/storage/storage.entity.ts"() {
@@ -11462,7 +11647,7 @@ var init_storage_entity = __esm({
       },
       fields: {
         id: useIdField3(),
-        scope: useTextField7({
+        scope: useTextField8({
           label: { en: "Scope", es: "\xC1mbito" },
           disabled: true,
           size: 100,
@@ -11471,7 +11656,7 @@ var init_storage_entity = __esm({
           hint: { en: "Unique identifier (e.g. default_filesystem, default_s3)", es: "Identificador \xFAnico (ej: default_filesystem, default_s3)" }
         }),
         driver: {
-          ...useSelectField8({
+          ...useSelectField9({
             label: { en: "Driver", es: "Controlador" },
             required: true,
             hint: { en: "Storage backend", es: "Backend de almacenamiento" },
@@ -11494,7 +11679,7 @@ var init_storage_entity = __esm({
           nullable: false,
           displayProps: { format: "bytes" }
         }),
-        allowed_mime_types: useTextField7({
+        allowed_mime_types: useTextField8({
           label: { en: "Allowed MIME Types", es: "Tipos MIME permitidos" },
           hint: { en: "Allowed types separated by comma (e.g. image/*,application/pdf)", es: "Tipos permitidos separados por coma (ej: image/*,application/pdf)" },
           size: 1e3,
@@ -11659,21 +11844,21 @@ var init_storage_entity = __esm({
       ],
       fields: {
         id: useIdField3(),
-        filename: useTextField7({
+        filename: useTextField8({
           label: { en: "Original Filename", es: "Nombre original" },
           required: true,
           size: 255,
           nullable: false,
           meta: { sortable: true, searchable: true }
         }),
-        disk_filename: useTextField7({
+        disk_filename: useTextField8({
           label: { en: "Disk Filename", es: "Nombre en disco" },
           required: true,
           hidden: true,
           size: 255,
           nullable: false
         }),
-        mimetype: useTextField7({
+        mimetype: useTextField8({
           label: { en: "MIME Type", es: "Tipo MIME" },
           required: true,
           size: 100,
@@ -11689,14 +11874,14 @@ var init_storage_entity = __esm({
           meta: { sortable: true },
           displayProps: { format: "bytes" }
         }),
-        folder: useTextField7({
+        folder: useTextField8({
           label: { en: "Folder", es: "Carpeta" },
           size: 100,
           nullable: true,
           index: true,
           meta: { searchable: true }
         }),
-        scope: useTextField7({
+        scope: useTextField8({
           label: { en: "Storage Scope", es: "\xC1mbito de almacenamiento" },
           hidden: true,
           size: 50,
@@ -11707,7 +11892,7 @@ var init_storage_entity = __esm({
             es: "\xC1mbito de configuraci\xF3n de almacenamiento usado para este archivo"
           }
         }),
-        path: useTextField7({
+        path: useTextField8({
           label: { en: "Full Path", es: "Ruta completa" },
           required: true,
           hidden: true,
@@ -11720,13 +11905,13 @@ var init_storage_entity = __esm({
           nullable: true,
           meta: { exportable: true, showInDisplay: false }
         }),
-        thumbnail_path: useTextField7({
+        thumbnail_path: useTextField8({
           label: { en: "Thumbnail Path", es: "Ruta de miniatura" },
           size: 500,
           nullable: true,
           meta: { showInDisplay: false }
         }),
-        hash: useTextField7({
+        hash: useTextField8({
           label: { en: "SHA256 Hash", es: "Hash SHA256" },
           hidden: true,
           size: 64,
@@ -11760,7 +11945,7 @@ function createUploadMiddleware(ctx, options) {
   const rateLimit2 = ctx.core.middleware.rateLimit({
     windowMs: 60 * 1e3,
     max: 20,
-    message: "Demasiados uploads, intenta en 1 minuto"
+    message: "Too many uploads, try again in 1 minute"
   });
   const upload = multer({
     storage: multer.memoryStorage(),
@@ -12007,7 +12192,7 @@ function createStorageRoutes(ctx) {
     }
     res.status(201).json(results);
   };
-  const uploadRateLimit = ctx.core.middleware.rateLimit({ windowMs: 60 * 1e3, max: 20, message: "Demasiados uploads, intenta en 1 minuto" });
+  const uploadRateLimit = ctx.core.middleware.rateLimit({ windowMs: 60 * 1e3, max: 20, message: "Too many uploads, try again in 1 minute" });
   if (auth) {
     router.post("/upload/multiple", uploadRateLimit, auth, upload.array("files", 10), uploadMultiple);
   } else {
@@ -12223,7 +12408,7 @@ var init_storage = __esm({
 });
 
 // src/modules/users/users.entity.ts
-import { useIdField as useIdField4, useSelectField as useSelectField9, useEmailField, usePasswordField, useTextField as useTextField8, useDatetimeField as useDatetimeField3, useCheckboxField as useCheckboxField4, useImageField as useImageField2, useNameField as useNameField2, useMetadataField as useMetadataField2, useDescriptionField as useDescriptionField2 } from "@gzl10/nexus-sdk/fields";
+import { useIdField as useIdField4, useSelectField as useSelectField10, useEmailField, usePasswordField, useTextField as useTextField9, useDatetimeField as useDatetimeField3, useCheckboxField as useCheckboxField4, useImageField as useImageField2, useNameField as useNameField2, useMetadataField as useMetadataField2, useDescriptionField as useDescriptionField2 } from "@gzl10/nexus-sdk/fields";
 import { z as z2 } from "zod";
 var userEntity, roleEntity, userRoleEntity;
 var init_users_entity = __esm({
@@ -12286,7 +12471,7 @@ var init_users_entity = __esm({
           nullable: true,
           meta: { exportable: true, showInForm: false, showInDisplay: false }
         }),
-        consent_version: useTextField8({
+        consent_version: useTextField9({
           label: { en: "Consent Version", es: "Versi\xF3n de consentimiento" },
           hidden: true,
           size: 20,
@@ -12297,7 +12482,7 @@ var init_users_entity = __esm({
           label: { en: "Marketing Opt-in", es: "Aceptar marketing" },
           meta: { exportable: true, showInForm: false, showInDisplay: false }
         }),
-        locale: useSelectField9({
+        locale: useSelectField10({
           label: { en: "Language", es: "Idioma" },
           options: [
             { value: "es", label: { en: "Spanish", es: "Espa\xF1ol" } },
@@ -12305,15 +12490,15 @@ var init_users_entity = __esm({
           ],
           nullable: true,
           meta: { sortable: true },
-          defaultValue: "es"
+          defaultValue: "en"
         }),
-        timezone: useSelectField9({
+        timezone: useSelectField10({
           label: { en: "Timezone", es: "Zona horaria" },
           master: "timezones",
           meta: { sortable: true },
           defaultValue: "timezones:Europe/Madrid"
         }),
-        type: useSelectField9({
+        type: useSelectField10({
           label: { en: "Type", es: "Tipo" },
           defaultValue: "human",
           options: [
@@ -12383,7 +12568,7 @@ var init_users_entity = __esm({
           middleware: (ctx) => ctx.core.middleware.rateLimit({
             windowMs: 15 * 60 * 1e3,
             max: 5,
-            message: "Demasiados intentos, intenta en 15 minutos"
+            message: "Too many attempts, try again in 15 minutes"
           }),
           handler: async (ctx, input) => {
             const {
@@ -12482,7 +12667,7 @@ var init_users_entity = __esm({
       expose: false,
       fields: {
         id: useIdField4(),
-        user_id: useSelectField9({
+        user_id: useSelectField10({
           label: { en: "User", es: "Usuario" },
           required: true,
           table: "users",
@@ -12493,7 +12678,7 @@ var init_users_entity = __esm({
           labelField: "name",
           meta: { searchable: true }
         }),
-        role_id: useSelectField9({
+        role_id: useSelectField10({
           label: { en: "Role", es: "Rol" },
           required: true,
           table: "roles",
@@ -13437,7 +13622,7 @@ var init_users = __esm({
 });
 
 // src/modules/auth/auth.entity.ts
-import { useIdField as useIdField5, useTextField as useTextField9, useSelectField as useSelectField10, useDatetimeField as useDatetimeField4, useEmailField as useEmailField2, useMetadataField as useMetadataField3, useExpiresAtField } from "@gzl10/nexus-sdk/fields";
+import { useIdField as useIdField5, useTextField as useTextField10, useSelectField as useSelectField11, useDatetimeField as useDatetimeField4, useEmailField as useEmailField2, useMetadataField as useMetadataField3, useExpiresAtField } from "@gzl10/nexus-sdk/fields";
 var refreshTokenEntity, authIdentitiesEntity;
 var init_auth_entity = __esm({
   "src/modules/auth/auth.entity.ts"() {
@@ -13452,7 +13637,7 @@ var init_auth_entity = __esm({
       expose: false,
       fields: {
         id: useIdField5(),
-        token: useTextField9({
+        token: useTextField10({
           label: { en: "Token", es: "Token" },
           hidden: true,
           size: 255,
@@ -13479,14 +13664,14 @@ var init_auth_entity = __esm({
           nullable: true,
           meta: { sortable: true }
         }),
-        device_id: useTextField9({
+        device_id: useTextField10({
           label: { en: "Device ID", es: "ID de dispositivo" },
           size: 64,
           index: true,
           nullable: true,
           meta: { searchable: true }
         }),
-        device_name: useTextField9({
+        device_name: useTextField10({
           label: { en: "Device", es: "Dispositivo" },
           size: 100,
           nullable: true,
@@ -13518,7 +13703,7 @@ var init_auth_entity = __esm({
       order: 5,
       fields: {
         id: useIdField5(),
-        user_id: useSelectField10({
+        user_id: useSelectField11({
           label: { en: "User", es: "Usuario" },
           table: "users",
           column: "id",
@@ -13530,7 +13715,7 @@ var init_auth_entity = __esm({
           labelField: "name",
           meta: { searchable: true }
         }),
-        provider: useTextField9({
+        provider: useTextField10({
           label: { en: "Provider", es: "Proveedor" },
           required: true,
           size: 50,
@@ -13539,7 +13724,7 @@ var init_auth_entity = __esm({
           hint: { en: "e.g. pocketid, google, microsoft", es: "ej. pocketid, google, microsoft" },
           meta: { sortable: true, searchable: true }
         }),
-        provider_user_id: useTextField9({
+        provider_user_id: useTextField10({
           label: { en: "Provider User ID", es: "ID de usuario del proveedor" },
           required: true,
           size: 255,
@@ -13834,7 +14019,7 @@ var init_auth_middleware = __esm({
 });
 
 // src/modules/auth/auth.pat.entity.ts
-import { useIdField as useIdField6, useTextField as useTextField10, useSelectField as useSelectField11, useDatetimeField as useDatetimeField5, useExpiresAtField as useExpiresAtField2 } from "@gzl10/nexus-sdk/fields";
+import { useIdField as useIdField6, useTextField as useTextField11, useSelectField as useSelectField12, useDatetimeField as useDatetimeField5, useExpiresAtField as useExpiresAtField2 } from "@gzl10/nexus-sdk/fields";
 var personalTokenEntity;
 var init_auth_pat_entity = __esm({
   "src/modules/auth/auth.pat.entity.ts"() {
@@ -13851,7 +14036,7 @@ var init_auth_pat_entity = __esm({
       routePrefix: "/personal-tokens",
       fields: {
         id: useIdField6(),
-        user_id: useSelectField11({
+        user_id: useSelectField12({
           label: { en: "User", es: "Usuario" },
           table: "users",
           column: "id",
@@ -13863,7 +14048,7 @@ var init_auth_pat_entity = __esm({
           labelField: "name",
           meta: { searchable: true }
         }),
-        name: useTextField10({
+        name: useTextField11({
           label: { en: "Name", es: "Nombre" },
           required: true,
           size: 100,
@@ -13871,14 +14056,14 @@ var init_auth_pat_entity = __esm({
           hint: { en: "Descriptive name for this token", es: "Nombre descriptivo para este token" },
           meta: { searchable: true }
         }),
-        token_prefix: useTextField10({
+        token_prefix: useTextField11({
           label: { en: "Token", es: "Token" },
           size: 20,
           disabled: true,
           nullable: false,
           hint: { en: "Partial token for identification", es: "Token parcial para identificaci\xF3n" }
         }),
-        token_hash: useTextField10({
+        token_hash: useTextField11({
           label: { en: "Token Hash", es: "Hash del token" },
           size: 64,
           hidden: true,
@@ -13886,7 +14071,7 @@ var init_auth_pat_entity = __esm({
           unique: true,
           meta: { exportable: false }
         }),
-        scope: useSelectField11({
+        scope: useSelectField12({
           label: { en: "Permission", es: "Permiso" },
           required: true,
           options: [
@@ -15642,7 +15827,7 @@ var init_mail_service = __esm({
 });
 
 // src/modules/mail/mail.entity.ts
-import { useIdField as useIdField7, useTextField as useTextField11, useSelectField as useSelectField12, useNumberField as useNumberField5, useSwitchField as useSwitchField4, useEmailField as useEmailField3, usePasswordField as usePasswordField2, useTextareaField as useTextareaField3, useTagsField as useTagsField2, useDatetimeField as useDatetimeField6 } from "@gzl10/nexus-sdk/fields";
+import { useIdField as useIdField7, useTextField as useTextField12, useSelectField as useSelectField13, useNumberField as useNumberField5, useSwitchField as useSwitchField4, useEmailField as useEmailField3, usePasswordField as usePasswordField2, useTextareaField as useTextareaField3, useTagsField as useTagsField2, useDatetimeField as useDatetimeField6 } from "@gzl10/nexus-sdk/fields";
 import nodemailer2 from "nodemailer";
 async function getMailConfigFromDB(ctx) {
   const configService = ctx.services["config"];
@@ -15705,7 +15890,7 @@ var init_mail_entity = __esm({
       },
       fields: {
         id: useIdField7(),
-        host: useTextField11({
+        host: useTextField12({
           label: { en: "SMTP Host", es: "Host SMTP" },
           size: 255,
           nullable: false,
@@ -15725,7 +15910,7 @@ var init_mail_entity = __esm({
           nullable: false,
           hint: { en: "Default: SMTP_FROM env var", es: "Por defecto: variable SMTP_FROM" }
         }),
-        auth_user: useTextField11({
+        auth_user: useTextField12({
           label: { en: "Auth User", es: "Usuario de autenticaci\xF3n" },
           size: 255,
           nullable: true,
@@ -15757,12 +15942,12 @@ var init_mail_entity = __esm({
           required: true,
           validation: { format: "email" }
         }),
-        subject: useTextField11({
+        subject: useTextField12({
           label: { en: "Subject", es: "Asunto" },
           required: true,
           validation: { min: 1, max: 255 }
         }),
-        title: useTextField11({
+        title: useTextField12({
           label: { en: "Title", es: "T\xEDtulo" },
           hint: { en: "Large title in email header", es: "T\xEDtulo grande en la cabecera del correo" }
         }),
@@ -15906,20 +16091,20 @@ var init_mail_entity = __esm({
           nullable: false,
           meta: { sortable: true }
         }),
-        to: useTextField11({
+        to: useTextField12({
           label: { en: "Recipient(s)", es: "Destinatario(s)" },
           size: 1e3,
           nullable: false,
           meta: { searchable: true }
         }),
-        subject: useTextField11({
+        subject: useTextField12({
           label: { en: "Subject", es: "Asunto" },
           size: 255,
           nullable: false,
           meta: { searchable: true, sortable: true }
         }),
         status: {
-          ...useSelectField12({
+          ...useSelectField13({
             label: { en: "Status", es: "Estado" },
             options: [
               { value: "pending", label: { en: "Pending", es: "Pendiente" } },
@@ -15933,7 +16118,7 @@ var init_mail_entity = __esm({
           }),
           validation: { enum: ["pending", "sent", "failed", "bounced"] }
         },
-        message_id: useTextField11({
+        message_id: useTextField12({
           label: { en: "Message ID", es: "ID de mensaje" },
           hidden: true,
           size: 255,
@@ -15943,7 +16128,7 @@ var init_mail_entity = __esm({
           label: { en: "Error", es: "Error" },
           nullable: true
         }),
-        sent_by: useSelectField12({
+        sent_by: useSelectField13({
           label: { en: "Sent by", es: "Enviado por" },
           table: "users",
           column: "id",
@@ -16578,7 +16763,7 @@ var init_toggle_plugin_action = __esm({
 });
 
 // src/modules/plugins/plugins.entity.ts
-import { useTextField as useTextField12, useSelectField as useSelectField13, useCheckboxField as useCheckboxField5 } from "@gzl10/nexus-sdk/fields";
+import { useTextField as useTextField13, useSelectField as useSelectField14, useCheckboxField as useCheckboxField5 } from "@gzl10/nexus-sdk/fields";
 import { OFFICIAL_PLUGINS } from "@gzl10/nexus-sdk";
 var allowPluginManagement, pluginsEntity;
 var init_plugins_entity = __esm({
@@ -16594,33 +16779,33 @@ var init_plugins_entity = __esm({
       label: "Plugins",
       icon: "mdi:puzzle",
       labelField: "code",
-      routePrefix: "/plugins",
+      routePrefix: "/",
       defaultSort: { field: "name", order: "asc" },
       fields: {
-        name: useTextField12({
+        name: useTextField13({
           label: { en: "Name", es: "Nombre" },
           size: 50,
           nullable: false,
           meta: { sortable: true, searchable: true }
         }),
-        code: useTextField12({
+        code: useTextField13({
           label: { en: "Code", es: "C\xF3digo" },
           size: 10,
           nullable: false,
           meta: { sortable: true }
         }),
-        label: useTextField12({
+        label: useTextField13({
           label: { en: "Label", es: "Etiqueta" },
           size: 100,
           nullable: false,
           meta: { sortable: true }
         }),
-        version: useTextField12({
+        version: useTextField13({
           label: { en: "Version", es: "Versi\xF3n" },
           size: 20,
           nullable: false
         }),
-        category: useSelectField13({
+        category: useSelectField14({
           label: { en: "Category", es: "Categor\xEDa" },
           options: [
             { value: "content", label: { en: "Content", es: "Contenido" } },
@@ -16761,8 +16946,8 @@ var init_plugins = __esm({
 // src/modules/audit/audit.entity.ts
 import {
   useIdField as useIdField8,
-  useTextField as useTextField13,
-  useSelectField as useSelectField14,
+  useTextField as useTextField14,
+  useSelectField as useSelectField15,
   useTextareaField as useTextareaField4,
   useJsonField as useJsonField3,
   useDatetimeField as useDatetimeField7,
@@ -16785,7 +16970,7 @@ var init_audit_entity = __esm({
       fields: {
         id: useIdField8(),
         source: {
-          ...useTextField13({
+          ...useTextField14({
             label: { en: "Source", es: "Origen" },
             size: 100,
             nullable: false,
@@ -16795,7 +16980,7 @@ var init_audit_entity = __esm({
           validation: { min: 1, max: 100 }
         },
         action: {
-          ...useTextField13({
+          ...useTextField14({
             label: { en: "Action", es: "Acci\xF3n" },
             size: 100,
             nullable: false,
@@ -16804,7 +16989,7 @@ var init_audit_entity = __esm({
           }),
           validation: { min: 1, max: 100 }
         },
-        actor_id: useSelectField14({
+        actor_id: useSelectField15({
           label: { en: "Actor", es: "Actor" },
           table: "users",
           column: "id",
@@ -16821,20 +17006,20 @@ var init_audit_entity = __esm({
           nullable: true,
           meta: { searchable: true }
         }),
-        resource_type: useTextField13({
+        resource_type: useTextField14({
           label: { en: "Resource Type", es: "Tipo de recurso" },
           size: 100,
           nullable: true,
           index: true,
           meta: { searchable: true }
         }),
-        resource_id: useTextField13({
+        resource_id: useTextField14({
           label: { en: "Resource ID", es: "ID del recurso" },
           size: 100,
           nullable: true,
           meta: { searchable: true }
         }),
-        ip_address: useTextField13({
+        ip_address: useTextField14({
           label: { en: "IP Address", es: "Direcci\xF3n IP" },
           size: 45,
           nullable: true,
@@ -17007,12 +17192,12 @@ var init_loader = __esm({
   "src/engine/loader.ts"() {
     "use strict";
     init_registry();
-    init_extractors();
+    init_definition_extractors();
     init_modules();
   }
 });
 
-// src/engine/subjectExtractor.ts
+// src/engine/subject-extractor.ts
 function getModuleSubjects(mod) {
   const subjects = /* @__PURE__ */ new Set();
   for (const def of mod.definitions ?? []) {
@@ -17021,10 +17206,10 @@ function getModuleSubjects(mod) {
   }
   return [...subjects];
 }
-var init_subjectExtractor = __esm({
-  "src/engine/subjectExtractor.ts"() {
+var init_subject_extractor = __esm({
+  "src/engine/subject-extractor.ts"() {
     "use strict";
-    init_extractors();
+    init_definition_extractors();
   }
 });
 
@@ -17102,7 +17287,7 @@ function initSocketIO(httpServer, options) {
     maxHttpBufferSize: 1e6
     // 1MB - match Express json body limit
   });
-  logger.info({ maxHttpBufferSize: 1e6, cors: corsOrigin }, "Socket.IO initialized");
+  logger.info({ cors: corsOrigin }, "Socket.IO initialized");
   io.use((socket, next) => {
     const token = socket.handshake.auth?.["token"] || socket.handshake.query?.["token"];
     if (token && typeof token === "string" && jwtSecret) {
@@ -17125,7 +17310,6 @@ function initSocketIO(httpServer, options) {
     logger.warn({ code: err.code, message: err.message }, "Socket.IO connection error");
   });
   io.on("connection", handleConnection);
-  logger.info("Socket.IO initialized");
   nexusEvents.emitEvent("socket.initialized");
   return io;
 }
@@ -17602,6 +17786,7 @@ var init_error_codes = __esm({
       DB_CONSTRAINT_UNIQUE: "DB_CONSTRAINT_UNIQUE",
       DB_CONSTRAINT_FK: "DB_CONSTRAINT_FK",
       DB_CONNECTION_ERROR: "DB_CONNECTION_ERROR",
+      DATABASE_NOT_READY: "DATABASE_NOT_READY",
       // System
       SYSTEM_INTERNAL_ERROR: "SYSTEM_INTERNAL_ERROR"
     };
@@ -17720,6 +17905,12 @@ var init_app_error = __esm({
 
 // src/core/abilities/ability.factory.ts
 import { AbilityBuilder, createMongoAbility } from "@casl/ability";
+function setSeedPermissions(perms) {
+  seedPermissions = perms;
+}
+function clearSeedPermissions() {
+  seedPermissions = null;
+}
 function setCustomCaslRules(fn) {
   customCaslRules = fn;
 }
@@ -17777,6 +17968,17 @@ async function defineAbilityFor(user, roleNames) {
   if (customCaslRules) {
     await customCaslRules(user, { can, cannot });
   }
+  if (seedPermissions && !isSuperuser) {
+    for (const roleName of roleNames) {
+      const rolePerms = seedPermissions.get(roleName);
+      if (!rolePerms) continue;
+      for (const [subject2, actions] of rolePerms) {
+        for (const action of actions) {
+          can(action, subject2);
+        }
+      }
+    }
+  }
   return build();
 }
 function packRules(ability) {
@@ -17785,11 +17987,12 @@ function packRules(ability) {
 function unpackRules(rules) {
   return createMongoAbility(rules);
 }
-var customCaslRules, entityDefinitionsRegistry, SUPERUSER_ROLES;
+var customCaslRules, seedPermissions, entityDefinitionsRegistry, SUPERUSER_ROLES;
 var init_ability_factory = __esm({
   "src/core/abilities/ability.factory.ts"() {
     "use strict";
     init_logger();
+    seedPermissions = null;
     entityDefinitionsRegistry = null;
     SUPERUSER_ROLES = ["ADMIN", "OWNER"];
   }
@@ -17907,7 +18110,7 @@ var init_env = __esm({
     envSchema = z8.object({
       NODE_ENV: z8.enum(["development", "production", "test"]).default("development"),
       PORT: z8.coerce.number().default(3e3),
-      CORS_ORIGIN: z8.string().default("http://localhost:3001"),
+      CORS_ORIGIN: z8.string().default("*"),
       BACKEND_URL: z8.string().optional(),
       DATABASE_URL: z8.string().default("file:./dev.db"),
       REDIS_URL: z8.string().url().optional(),
@@ -18355,7 +18558,7 @@ var init_sequence = __esm({
   }
 });
 
-// src/core/utils/error-handler.ts
+// src/core/utils/safe-json.ts
 function safeJsonParse(logger2, jsonString, fallback, context) {
   try {
     return JSON.parse(jsonString);
@@ -18364,8 +18567,8 @@ function safeJsonParse(logger2, jsonString, fallback, context) {
     return fallback;
   }
 }
-var init_error_handler = __esm({
-  "src/core/utils/error-handler.ts"() {
+var init_safe_json = __esm({
+  "src/core/utils/safe-json.ts"() {
     "use strict";
   }
 });
@@ -18374,14 +18577,15 @@ var init_error_handler = __esm({
 import express from "express";
 import { resolve, join as join9 } from "path";
 import { existsSync as existsSync9, readFileSync as readFileSync5 } from "fs";
-function createServeSPA(app) {
-  return (endpoint, distPath, options = {}) => {
+function createServeSPA(app, httpServer) {
+  return async (endpoint, distPath, options = {}) => {
     const {
       maxAge = "1d",
       etag = true,
       immutable = false,
       index = "index.html",
-      absolute = false
+      absolute = false,
+      viteSrc
     } = options;
     if (endpoint === "/api" || endpoint.startsWith("/api/")) {
       logger.error(`Cannot mount SPA on ${endpoint} - reserved for API routes`);
@@ -18392,58 +18596,117 @@ function createServeSPA(app) {
       return;
     }
     registeredEndpoints.add(endpoint);
-    let resolvedPath;
-    if (absolute) {
-      resolvedPath = distPath;
-    } else {
-      const projectPath2 = resolve(getProjectPath(), distPath);
-      if (existsSync9(projectPath2)) {
-        resolvedPath = projectPath2;
+    if (env.NODE_ENV === "development" && viteSrc) {
+      const srcPath = resolve(getProjectPath(), viteSrc);
+      if (!existsSync9(srcPath)) {
+        logger.warn({ endpoint, viteSrc, resolved: srcPath }, "Vite source not found \u2014 falling back to static");
       } else {
-        resolvedPath = resolve(getLibPath(), distPath);
+        const mounted = await mountViteDevMiddleware(app, endpoint, srcPath, httpServer);
+        if (mounted) return;
       }
     }
-    if (!existsSync9(resolvedPath)) {
-      logger.warn({ endpoint, distPath, hint: "Build the frontend first" }, `SPA directory not found: ${resolvedPath}`);
-      return;
+    mountStaticSPA(app, endpoint, distPath, { maxAge, etag, immutable, index, absolute });
+  };
+}
+async function mountViteDevMiddleware(app, endpoint, srcPath, httpServer) {
+  try {
+    const vite = await import("vite");
+    const apiUrl = env.BACKEND_URL ? `${env.BACKEND_URL}/api/v1` : "/api/v1";
+    const server2 = await vite.createServer({
+      root: srcPath,
+      server: {
+        middlewareMode: true,
+        allowedHosts: true,
+        hmr: httpServer ? { server: httpServer } : true
+      },
+      plugins: [{
+        name: "nexus-config-inject",
+        transformIndexHtml(html) {
+          const config3 = JSON.stringify({ apiUrl });
+          return html.replace("</head>", `<script>window.__NEXUS__=${config3}</script>
+</head>`);
+        }
+      }],
+      appType: "spa",
+      clearScreen: false
+    });
+    viteServers.push(server2);
+    if (endpoint === "/") {
+      app.use(server2.middlewares);
+    } else {
+      app.use(endpoint, server2.middlewares);
     }
-    const indexPath = join9(resolvedPath, index);
-    if (!existsSync9(indexPath)) {
-      logger.warn({ endpoint, index }, `Index file not found: ${indexPath}`);
-    }
-    app.use(endpoint, express.static(resolvedPath, { maxAge, etag, immutable }));
-    let injectedHtml = "";
-    if (existsSync9(indexPath)) {
-      const rawHtml = readFileSync5(indexPath, "utf-8");
-      const apiUrl = env.BACKEND_URL ? `${env.BACKEND_URL}/api/v1` : "/api/v1";
-      const nexusConfig = JSON.stringify({ apiUrl });
-      injectedHtml = rawHtml.replace(
-        "</head>",
-        `<script>window.__NEXUS__=${nexusConfig}</script>
-</head>`
-      );
+    logger.info({ path: srcPath }, `Vite dev server mounted at ${endpoint} (HMR enabled)`);
+    return true;
+  } catch (err) {
+    if (err.code === "ERR_MODULE_NOT_FOUND" || err.code === "MODULE_NOT_FOUND") {
+      logger.warn(`vite not installed \u2014 falling back to static serving for ${endpoint}`);
+      return false;
     }
-    const fallbackHandler = (_req, res) => {
-      if (!injectedHtml) {
-        res.status(404).send("index.html not found");
-        return;
-      }
-      res.set("Cache-Control", "no-cache, no-store, must-revalidate");
-      res.type("html").send(injectedHtml);
-    };
-    if (endpoint === "/") {
-      app.get("{*splat}", fallbackHandler);
+    logger.error({ err }, `Failed to mount Vite dev server at ${endpoint}`);
+    return false;
+  }
+}
+function mountStaticSPA(app, endpoint, distPath, options) {
+  const { maxAge, etag, immutable, index, absolute } = options;
+  let resolvedPath;
+  if (absolute) {
+    resolvedPath = distPath;
+  } else {
+    const projectPath2 = resolve(getProjectPath(), distPath);
+    if (existsSync9(projectPath2)) {
+      resolvedPath = projectPath2;
     } else {
-      app.get(endpoint, fallbackHandler);
-      app.get(`${endpoint}/{*splat}`, fallbackHandler);
+      resolvedPath = resolve(getLibPath(), distPath);
     }
-    logger.info({ path: resolvedPath }, `SPA mounted at ${endpoint}`);
+  }
+  if (!existsSync9(resolvedPath)) {
+    logger.warn({ endpoint, distPath, hint: "Build the frontend first" }, `SPA directory not found: ${resolvedPath}`);
+    return;
+  }
+  const indexPath = join9(resolvedPath, index);
+  if (!existsSync9(indexPath)) {
+    logger.warn({ endpoint, index }, `Index file not found: ${indexPath}`);
+  }
+  app.use(endpoint, express.static(resolvedPath, { maxAge, etag, immutable }));
+  let injectedHtml = "";
+  if (existsSync9(indexPath)) {
+    const rawHtml = readFileSync5(indexPath, "utf-8");
+    const apiUrl = env.BACKEND_URL ? `${env.BACKEND_URL}/api/v1` : "/api/v1";
+    const nexusConfig = JSON.stringify({ apiUrl });
+    injectedHtml = rawHtml.replace(
+      "</head>",
+      `<script>window.__NEXUS__=${nexusConfig}</script>
+</head>`
+    );
+  }
+  const fallbackHandler = (_req, res) => {
+    if (!injectedHtml) {
+      res.status(404).send("index.html not found");
+      return;
+    }
+    res.set("Cache-Control", "no-cache, no-store, must-revalidate");
+    res.type("html").send(injectedHtml);
   };
+  if (endpoint === "/") {
+    app.get("{*splat}", fallbackHandler);
+  } else {
+    app.get(endpoint, fallbackHandler);
+    app.get(`${endpoint}/{*splat}`, fallbackHandler);
+  }
+  logger.info({ path: resolvedPath }, `SPA mounted at ${endpoint}`);
 }
-function resetServeSPAEndpoints() {
+async function resetServeSPA() {
+  for (const server2 of viteServers) {
+    try {
+      await server2.close();
+    } catch {
+    }
+  }
+  viteServers.length = 0;
   registeredEndpoints.clear();
 }
-var registeredEndpoints;
+var registeredEndpoints, viteServers;
 var init_spa_handler = __esm({
   "src/core/spa-handler.ts"() {
     "use strict";
@@ -18451,6 +18714,7 @@ var init_spa_handler = __esm({
     init_logger();
     init_env();
     registeredEndpoints = /* @__PURE__ */ new Set();
+    viteServers = [];
   }
 });
 
@@ -19021,7 +19285,7 @@ var init_core = __esm({
     init_id();
     init_sequence();
     init_paths();
-    init_error_handler();
+    init_safe_json();
     init_spa_handler();
     init_cache();
     init_jwt();
@@ -19736,7 +20000,9 @@ var init_base_service = __esm({
         const countResult = await qb.clone().count("* as count").first();
         const total = Number(countResult?.count ?? 0);
         qb = this.applySortingWithDefaults(qb, query);
-        qb = qb.limit(limit).offset(offset);
+        if (limit > 0) {
+          qb = qb.limit(limit).offset(offset);
+        }
         const rawItems = await qb;
         const items = this.parseJsonFieldsFromArray(rawItems);
         const processedItems = await this.afterFindAll(items);
@@ -19821,7 +20087,7 @@ var init_base_service = __esm({
           });
         }
         const total = result.length;
-        const paginatedItems = result.slice(offset, offset + limit);
+        const paginatedItems = limit === 0 ? result : result.slice(offset, offset + limit);
         return this.buildPaginatedResult(paginatedItems, total, page, limit);
       }
       /**
@@ -20076,14 +20342,14 @@ var init_base_service = __esm({
        * Build paginated result from items and count
        */
       buildPaginatedResult(items, total, page, limit) {
-        const totalPages = Math.ceil(total / limit);
+        const totalPages = limit === 0 ? 1 : Math.ceil(total / limit);
         return {
           items,
           total,
-          page,
-          limit,
+          page: limit === 0 ? 1 : page,
+          limit: limit === 0 ? total : limit,
           totalPages,
-          hasNext: page < totalPages
+          hasNext: limit === 0 ? false : page < totalPages
         };
       }
       /**
@@ -20092,8 +20358,8 @@ var init_base_service = __esm({
       getPagination(query) {
         const maxLimit = query?.maxLimit ?? 100;
         const page = Math.max(1, query?.page ?? 1);
-        const limit = Math.min(maxLimit, Math.max(1, query?.limit ?? 20));
-        const offset = (page - 1) * limit;
+        const limit = query?.limit === 0 ? 0 : Math.min(maxLimit, Math.max(1, query?.limit ?? 20));
+        const offset = limit === 0 ? 0 : (page - 1) * limit;
         return { page, limit, offset };
       }
       /**
@@ -20113,10 +20379,31 @@ var init_base_service = __esm({
        * Override in subclasses for entity-specific search
        */
       applySearch(qb, search) {
+        const searchTerm = `%${search}%`;
+        const searchableFields = [];
+        const fields = "fields" in this.definition ? this.definition.fields : {};
+        for (const [name, field] of Object.entries(fields)) {
+          if (field.meta?.searchable) {
+            searchableFields.push(name);
+          }
+        }
         if ("labelField" in this.definition && this.definition.labelField) {
-          const labelField = this.definition.labelField;
-          qb.where(labelField, "like", `%${search}%`);
+          const lf = this.definition.labelField;
+          if (!searchableFields.includes(lf)) {
+            searchableFields.unshift(lf);
+          }
         }
+        if (searchableFields.length === 0) return qb;
+        qb.where(function() {
+          for (const fieldName of searchableFields) {
+            const field = fields[fieldName];
+            if (field?.db?.type === "json") {
+              this.orWhereRaw(`CAST(?? AS TEXT) LIKE ?`, [fieldName, searchTerm]);
+            } else {
+              this.orWhere(fieldName, "like", searchTerm);
+            }
+          }
+        });
         return qb;
       }
       /**
@@ -21740,7 +22027,8 @@ function createEntityController(service, definition, ctx) {
     async list(req, res) {
       checkPermission(req, "read");
       const page = Math.max(1, parseInt(req.query["page"]) || 1);
-      const limit = Math.min(100, Math.max(1, parseInt(req.query["limit"]) || 20));
+      const rawLimit = parseInt(req.query["limit"]);
+      const limit = rawLimit === 0 ? 0 : Math.min(100, Math.max(1, rawLimit || 20));
       let filters;
       if (req.query["filters"]) {
         filters = parseFilters(req.query["filters"], ctx.core.errors);
@@ -23221,17 +23509,18 @@ async function createModuleRouters(ctx, definitions, modulePrefix) {
     const runtime = await createEntityRuntimeAsync(ctx, definition);
     const route = inferEntityRoutePath(definition);
     const entityLabel = resolveLocalized7(definition.label, "en");
-    if (modulePrefix && route === modulePrefix) {
+    const isExposed = !("expose" in definition && definition.expose === false);
+    if (isExposed && modulePrefix && route === modulePrefix) {
       ctx.core.logger.warn(
         `Entity "${entityLabel}" inferred route "${route}" duplicates module prefix \u2014 add routePrefix to the entity definition to fix`
       );
     }
-    if (routeMap.has(route)) {
+    if (isExposed && routeMap.has(route)) {
       ctx.core.logger.warn(
         `Entity "${entityLabel}" route "${route}" collides with "${routeMap.get(route)}" in the same module`
       );
     }
-    routeMap.set(route, entityLabel);
+    if (isExposed) routeMap.set(route, entityLabel);
     router.use(route, runtime.router);
     const key = getServiceKey(definition);
     if (ctx.services.has(key)) {
@@ -23447,7 +23736,7 @@ var init_runtime = __esm({
   }
 });
 
-// src/db/module-runner.ts
+// src/db/seed-runner.ts
 import { existsSync as existsSync10 } from "fs";
 import { join as join10 } from "path";
 import { pathToFileURL } from "url";
@@ -23515,8 +23804,8 @@ function hasSeedData(seed5) {
   if (!Array.isArray(seed5) && "source" in seed5 && seed5.source === "url") return true;
   return Array.isArray(seed5) && seed5.length > 0;
 }
-var init_module_runner = __esm({
-  "src/db/module-runner.ts"() {
+var init_seed_runner = __esm({
+  "src/db/seed-runner.ts"() {
     "use strict";
     init_runtime();
     init_paths();
@@ -23588,15 +23877,6 @@ var init_ensure_system_tables = __esm({
   }
 });
 
-// src/cli/shared.ts
-import { consola } from "consola";
-var init_shared = __esm({
-  "src/cli/shared.ts"() {
-    "use strict";
-    init_logger();
-  }
-});
-
 // src/db/migration-sources.ts
 function buildMigrationSources() {
   const sources = [
@@ -23616,10 +23896,8 @@ function buildMigrationSources() {
 var init_migration_sources = __esm({
   "src/db/migration-sources.ts"() {
     "use strict";
-    init_shared();
     init_paths();
-    init_plugin_ops();
-    init_store();
+    init_module_store();
   }
 });
 
@@ -23952,7 +24230,7 @@ async function runMigrations(knexInstance, sources) {
     const executedMigrations = await knex3("_nexus_migrations").where({ status: "completed" }).select("name").then((rows) => new Set(rows.map((r) => r.name)));
     const pendingMigrations = migrationFiles.filter((m2) => !executedMigrations.has(m2.name));
     if (pendingMigrations.length === 0) {
-      logger.info("No pending migrations");
+      logger.debug("No pending migrations");
       return;
     }
     const batch = await getNextBatch(knex3);
@@ -24352,6 +24630,27 @@ var init_migration_helpers = __esm({
 import path2 from "path";
 import fs2 from "fs/promises";
 import { readFileSync as readFileSync6, mkdirSync as mkdirSync5, realpathSync } from "fs";
+function getColumnIndexBytes(field) {
+  if (!field?.db) return 255 * MYSQL_BYTES_PER_CHAR;
+  const size = field.db.size ?? 255;
+  if (field.db.type === "text") return 0;
+  if (field.db.type === "string") return size * MYSQL_BYTES_PER_CHAR;
+  if (field.db.type === "integer") return 4;
+  if (field.db.type === "boolean") return 1;
+  if (field.db.type === "datetime" || field.db.type === "date") return 8;
+  if (field.db.type === "uuid") return 16;
+  return size * MYSQL_BYTES_PER_CHAR;
+}
+function warnIfIndexExceedsMySQLLimit(table, columns, unique, fields) {
+  if (!fields) return;
+  const totalBytes = columns.reduce((sum, col) => sum + getColumnIndexBytes(fields[col]), 0);
+  if (totalBytes > MYSQL_MAX_INDEX_BYTES) {
+    const indexType = unique ? "UNIQUE" : "INDEX";
+    logger.warn(
+      `${indexType} on ${table}(${columns.join(", ")}) requires ${totalBytes} bytes \u2014 exceeds MySQL utf8mb4 limit of ${MYSQL_MAX_INDEX_BYTES} bytes. Reduce column sizes or restructure the index for MySQL compatibility.`
+    );
+  }
+}
 async function detectSchemaDrift(knexInstance) {
   const knex3 = knexInstance ?? getDb();
   const entities = getAllPersistentEntities();
@@ -24459,6 +24758,7 @@ function computeSchemaDiff(entities, currentSchema, options) {
     for (const idx of entityIndexes) {
       const key = normalizeKey(idx.columns, !!idx.unique);
       if (!currentKeys.has(key)) {
+        warnIfIndexExceedsMySQLLimit(tableName, idx.columns, !!idx.unique, entity.fields);
         diff.newIndexes.push({ columns: idx.columns, unique: !!idx.unique });
       }
     }
@@ -24630,7 +24930,7 @@ function formatDriftMessage(drift) {
   lines.push('Run "pnpm migrate:dev" to generate and apply migrations.');
   return lines.join("\n");
 }
-var PERSISTENT_TYPES;
+var MYSQL_MAX_INDEX_BYTES, MYSQL_BYTES_PER_CHAR, PERSISTENT_TYPES;
 var init_migration_generator = __esm({
   "src/db/migration-generator.ts"() {
     "use strict";
@@ -24639,9 +24939,11 @@ var init_migration_generator = __esm({
     init_paths();
     init_schema_reader();
     init_engine();
-    init_queries();
+    init_module_queries();
     init_migration_helpers();
-    init_store();
+    init_module_store();
+    MYSQL_MAX_INDEX_BYTES = 3072;
+    MYSQL_BYTES_PER_CHAR = 4;
     PERSISTENT_TYPES = /* @__PURE__ */ new Set([
       "collection",
       "tree",
@@ -24872,6 +25174,10 @@ function handleDbError(err) {
       { path: "foreignKey", message: "Foreign key constraint violation" }
     ]);
   }
+  if (code === "42P01" || code === "ER_NO_SUCH_TABLE" || dbErr.errno === 1146 || msg.includes("no such table")) {
+    logger.error({ err }, "Database table not found \u2014 database may need migration or was wiped");
+    throw new AppError({ code: ErrorCodes.DATABASE_NOT_READY, message: "Database not ready" }, 503);
+  }
   logger.error({ err }, "Unexpected database error");
   throw new AppError({ code: ErrorCodes.SYSTEM_INTERNAL_ERROR, message: "Internal database error" }, 500);
 }
@@ -26215,7 +26521,7 @@ var init_db = __esm({
     init_schema_helpers();
     init_sql_utils();
     init_sqlite_compat();
-    init_module_runner();
+    init_seed_runner();
     init_ensure_system_tables();
     init_migration_sources();
     init_migration_runner();
@@ -26479,8 +26785,11 @@ var init_events_api = __esm({
 
 // src/engine/context.ts
 import { ForbiddenError as CASLForbiddenError3, subject } from "@casl/ability";
-import { DEFAULT_TENANT_ID as DEFAULT_TENANT_ID2 } from "@gzl10/nexus-sdk";
+import { DEFAULT_TENANT_ID as DEFAULT_TENANT_ID2, DEFAULT_LOCALES } from "@gzl10/nexus-sdk";
 import { Redis as Redis2 } from "ioredis";
+function setLocales(locales) {
+  platformLocales = locales;
+}
 function getSharedCacheManager() {
   if (!sharedCacheManager) {
     const redisUrl = env.REDIS_URL;
@@ -26556,7 +26865,7 @@ function createModuleContext() {
   const defaultAdapter = createKnexAdapter(knex3);
   const defaultSchemaAdapter = createKnexSchemaAdapter(knex3);
   adaptersRegistry["temp"] = { data: getSharedTempAdapter() };
-  logger.debug(env.REDIS_URL ? "Temp adapter: Redis (shared)" : "Temp adapter: InMemory (shared)");
+  logger.trace(env.REDIS_URL ? "Temp adapter: Redis (shared)" : "Temp adapter: InMemory (shared)");
   const middleware = {
     validate,
     rateLimit: createRateLimit,
@@ -26664,7 +26973,9 @@ function createModuleContext() {
         throw new Error(`Knex connection for adapter "${adapter}" not found. Available: ${Object.keys(knexConnections).join(", ")}`);
       }
       return conn;
-    }
+    },
+    // Placeholder — bound after ctx construction (needs full ModuleContext)
+    seedModule: null
   };
   const configContext = {
     env,
@@ -26757,7 +27068,8 @@ function createModuleContext() {
     adapters: adaptersContext,
     // Root-level shortcuts for frequently used utilities
     events: createEventsApi(nexusEvents, logger),
-    createRouter: () => createRouter()
+    createRouter: () => createRouter(),
+    locales: platformLocales
   };
   servicesRegistry["cacheManager"] = getSharedCacheManager();
   ctx.runtime = {
@@ -26766,9 +27078,10 @@ function createModuleContext() {
     createEntityController: (service, def) => createEntityController(service, def, ctx),
     createEntityRouter: (controller, def) => createEntityRouter(controller, def, ctx)
   };
+  ctx.db.seedModule = (mod) => runModuleSeed(mod, ctx);
   return ctx;
 }
-var sharedCacheManager, sharedTempAdapter;
+var platformLocales, sharedCacheManager, sharedTempAdapter;
 var init_context = __esm({
   "src/engine/context.ts"() {
     "use strict";
@@ -26781,7 +27094,9 @@ var init_context = __esm({
     init_plugin_ops();
     init_load_config();
     init_events_api();
+    init_seed_runner();
     init_cache_manager();
+    platformLocales = DEFAULT_LOCALES;
     sharedCacheManager = null;
     sharedTempAdapter = null;
   }
@@ -26792,11 +27107,11 @@ var init_engine = __esm({
   "src/engine/index.ts"() {
     "use strict";
     init_registry();
-    init_queries();
+    init_module_queries();
     init_loader();
-    init_store();
-    init_subjectExtractor();
-    init_extractors();
+    init_module_store();
+    init_subject_extractor();
+    init_definition_extractors();
     init_context();
   }
 });
@@ -27145,6 +27460,33 @@ async function setupModuleRoutes(app) {
     }
   }
   const caslRegistry = /* @__PURE__ */ new Map();
+  function mergeActionPermissions(existing, incoming) {
+    const merged = { ...existing };
+    for (const [role, perm] of Object.entries(incoming)) {
+      if (!merged[role]) {
+        merged[role] = perm;
+      } else {
+        const existingArr = Array.isArray(merged[role]) ? merged[role] : [merged[role]];
+        const incomingArr = Array.isArray(perm) ? perm : [perm];
+        merged[role] = [...existingArr, ...incomingArr];
+      }
+    }
+    return merged;
+  }
+  function registerActionCasl(action) {
+    const casl = action.casl;
+    if (!casl || !("subject" in casl) || !casl.subject || !("permissions" in casl) || !casl.permissions) return;
+    const subject2 = casl.subject;
+    const existing = caslRegistry.get(subject2);
+    if (existing) {
+      existing.permissions = mergeActionPermissions(existing.permissions, casl.permissions);
+    } else {
+      caslRegistry.set(subject2, {
+        subject: subject2,
+        permissions: casl.permissions ?? {}
+      });
+    }
+  }
   for (const mod of modules) {
     for (const def of mod.definitions ?? []) {
       const casl = def.casl;
@@ -27154,6 +27496,12 @@ async function setupModuleRoutes(app) {
         subject: casl.subject,
         permissions: casl.permissions ?? {}
       });
+      for (const action of def.actions ?? []) {
+        registerActionCasl(action);
+      }
+    }
+    for (const action of mod.actions ?? []) {
+      registerActionCasl(action);
     }
   }
   setEntityDefinitions(caslRegistry);
@@ -27338,7 +27686,7 @@ async function createApp(options = {}) {
     // Only accept arrays and objects
   }));
   app.use(cookieParser());
-  const serveSPA = createServeSPA(app);
+  const serveSPA = createServeSPA(app, options.httpServer);
   if (options.beforeRoutes) {
     const result = options.beforeRoutes(app, serveSPA);
     if (result instanceof Promise) {
@@ -27432,11 +27780,11 @@ async function createApp(options = {}) {
   });
   const sortedSpas = [...servedSpas].sort((a, b) => b.endpoint.length - a.endpoint.length);
   for (const spa of sortedSpas) {
-    serveSPA(spa.endpoint, spa.path, spa);
+    await serveSPA(spa.endpoint, spa.path, { ...spa, viteSrc: spa.viteSrc });
   }
   const { ui } = getConfig();
   if (ui.enabled) {
-    serveSPA(ui.base, ui.path);
+    await serveSPA(ui.base, ui.path, { viteSrc: "../ui" });
   }
   app.use(errorMiddleware);
   return app;
@@ -27462,58 +27810,32 @@ var init_app = __esm({
   }
 });
 
-// src/core/utils/net.ts
+// src/core/utils/port-check.ts
 import net from "net";
 import { execSync } from "child_process";
 function findProcessOnPort(port) {
   try {
     const output = execSync(`lsof -ti :${port} 2>/dev/null`, { encoding: "utf-8" });
     const pid = parseInt(output.trim().split("\n")[0] ?? "", 10);
-    return isNaN(pid) ? null : pid;
+    if (isNaN(pid)) return null;
+    let name = "unknown";
+    try {
+      name = execSync(`ps -o comm= -p ${pid} 2>/dev/null`, { encoding: "utf-8" }).trim();
+    } catch {
+    }
+    return { pid, name };
   } catch {
     return null;
   }
 }
-function isSameProcessGroup(pid) {
-  if (pid === process.pid || pid === process.ppid) return true;
-  try {
-    const ourPgid = execSync(`ps -o pgid= -p ${process.pid} 2>/dev/null`, { encoding: "utf-8" }).trim();
-    const targetPgid = execSync(`ps -o pgid= -p ${pid} 2>/dev/null`, { encoding: "utf-8" }).trim();
-    return ourPgid === targetPgid;
-  } catch {
-    return false;
-  }
-}
-function killProcessOnPort(port) {
-  const pid = findProcessOnPort(port);
-  if (!pid) return false;
-  if (isSameProcessGroup(pid)) {
-    logger.warn({ port, pid }, `Skipping same process group (PID ${pid}) on port ${port}`);
-    return false;
-  }
-  try {
-    process.kill(pid, "SIGTERM");
-    logger.warn({ port, pid }, `Killed process ${pid} on port ${port}`);
-    return true;
-  } catch {
-    return false;
-  }
-}
 async function checkPortAvailable(port, host = "0.0.0.0") {
   return new Promise((resolve2, reject) => {
     const server2 = net.createServer();
     server2.once("error", (err) => {
       if (err.code === "EADDRINUSE") {
-        if (process.env["NODE_ENV"] !== "production") {
-          if (killProcessOnPort(port)) {
-            setTimeout(() => {
-              checkPortAvailable(port, host).then(resolve2).catch(reject);
-            }, 500);
-            return;
-          }
-        }
-        logger.error({ port }, `Port ${port} is already in use`);
-        reject(new Error(`Port ${port} is already in use`));
+        const proc = findProcessOnPort(port);
+        const msg = proc ? `Port ${port} is already in use by "${proc.name}" (PID ${proc.pid}). Stop that process first.` : `Port ${port} is already in use`;
+        reject(new Error(msg));
       } else {
         reject(err);
       }
@@ -27524,10 +27846,9 @@ async function checkPortAvailable(port, host = "0.0.0.0") {
     server2.listen(port, host);
   });
 }
-var init_net = __esm({
-  "src/core/utils/net.ts"() {
+var init_port_check = __esm({
+  "src/core/utils/port-check.ts"() {
     "use strict";
-    init_logger();
   }
 });
 
@@ -27565,7 +27886,7 @@ function isFrpcInstalled() {
     return false;
   }
 }
-function startTunnel(config3) {
+async function startTunnel(config3) {
   if (tunnelProcess) return true;
   if (!isFrpcInstalled()) {
     logger.warn("frpc binary not found \u2014 tunnel disabled. Install with: brew install frp");
@@ -27577,24 +27898,49 @@ function startTunnel(config3) {
   tunnelProcess = spawn("frpc", ["-c", tmpConfigPath], {
     stdio: ["ignore", "pipe", "pipe"]
   });
-  tunnelProcess.stdout?.on("data", (data) => {
-    const msg = data.toString().trim();
-    if (msg) logger.debug({ component: "tunnel" }, msg);
-  });
-  tunnelProcess.stderr?.on("data", (data) => {
-    const msg = data.toString().trim();
-    if (msg) logger.warn({ component: "tunnel" }, msg);
-  });
-  tunnelProcess.on("exit", (code) => {
-    if (code !== 0 && code !== null) {
-      logger.warn({ code, component: "tunnel" }, "frpc exited unexpectedly");
-    }
-    tunnelProcess = null;
-    cleanupConfig();
+  outputBuffer = "";
+  const stripAnsi = (s) => s.replace(/\x1b\[[0-9;]*m/g, "");
+  return new Promise((resolve2) => {
+    let settled = false;
+    const collectOutput = (data) => {
+      const msg = stripAnsi(data.toString()).trim();
+      if (!msg) return;
+      outputBuffer += msg + "\n";
+      logger.debug({ component: "tunnel" }, msg);
+      if (!settled && msg.includes("start proxy success")) {
+        settled = true;
+        const url = getTunnelUrl(config3.subdomain, config3.server);
+        logger.info({ url, component: "tunnel" }, `Tunnel active \u2192 ${url}`);
+        resolve2(true);
+      }
+    };
+    tunnelProcess.stdout?.on("data", collectOutput);
+    tunnelProcess.stderr?.on("data", collectOutput);
+    tunnelProcess.on("exit", (code) => {
+      if (code !== 0 && code !== null) {
+        const output = outputBuffer.trim();
+        const hint = output.includes("authorization failed") || output.includes("auth failed") || output.includes("invalid token") ? " \u2014 check FRPC_TOKEN is correct" : output.includes("login to the server failed") ? ` \u2014 ${output.split("\n").pop()}` : "";
+        logger.error(
+          { code, reason: output || void 0, component: "tunnel" },
+          `frpc failed to start${hint}`
+        );
+      }
+      tunnelProcess = null;
+      outputBuffer = "";
+      cleanupConfig();
+      if (!settled) {
+        settled = true;
+        resolve2(false);
+      }
+    });
+    setTimeout(() => {
+      if (!settled) {
+        settled = true;
+        logger.warn({ component: "tunnel" }, "frpc connection timeout (5s) \u2014 tunnel may not be active");
+        resolve2(false);
+      }
+    }, 5e3);
   });
-  const url = getTunnelUrl(config3.subdomain, config3.server);
-  logger.info({ url, component: "tunnel" }, `Tunnel enabled \u2192 ${url}`);
-  return true;
 }
 function stopTunnel() {
   if (tunnelProcess) {
@@ -27612,13 +27958,388 @@ function cleanupConfig() {
     tmpConfigPath = null;
   }
 }
-var tunnelProcess, tmpConfigPath;
+var tunnelProcess, tmpConfigPath, outputBuffer;
 var init_tunnel = __esm({
   "src/core/tunnel.ts"() {
     "use strict";
     init_core();
     tunnelProcess = null;
     tmpConfigPath = null;
+    outputBuffer = "";
+  }
+});
+
+// src/cli/shared.ts
+import { consola } from "consola";
+function initCli() {
+  const config3 = getLoggerConfig();
+  initLoggerService({ ...config3, level: "error", sentry: void 0 });
+  setLoggerInstance(getPinoLogger());
+}
+var init_shared = __esm({
+  "src/cli/shared.ts"() {
+    "use strict";
+    init_logger();
+  }
+});
+
+// src/cli/migrate-commands.ts
+import { readFileSync as readFileSync8, existsSync as existsSync12 } from "fs";
+import { join as join14 } from "path";
+import { pathToFileURL as pathToFileURL3 } from "url";
+import Table from "cli-table3";
+import { consola as consola2 } from "consola";
+async function loadSelfPlugin() {
+  const projectPath2 = getProjectPath();
+  const pkgPath = join14(projectPath2, "package.json");
+  if (!existsSync12(pkgPath)) return;
+  try {
+    const pkg2 = JSON.parse(readFileSync8(pkgPath, "utf-8"));
+    const pkgName = pkg2?.name;
+    if (!pkgName || !/nexus-plugin-/.test(pkgName)) return;
+    const srcEntry = join14(projectPath2, "src", "index.ts");
+    const distEntry = join14(projectPath2, "dist", "index.js");
+    if (existsSync12(srcEntry)) {
+      try {
+        const { tsImport } = await import("tsx/esm/api");
+        const mod = await tsImport(
+          pathToFileURL3(srcEntry).href,
+          import.meta.url
+        );
+        const manifest = extractPluginManifest(mod);
+        if (manifest) {
+          if (!manifest.migrationsDir) {
+            manifest.migrationsDir = join14(projectPath2, "migrations");
+          }
+          registerPlugin(manifest);
+          return;
+        }
+      } catch (err) {
+        console.error(`  \u26A0 Failed to load plugin src/index.ts: ${err.message}`);
+      }
+    }
+    if (existsSync12(distEntry)) {
+      try {
+        const mod = await import(pathToFileURL3(distEntry).href);
+        const manifest = extractPluginManifest(mod);
+        if (manifest) {
+          if (!manifest.migrationsDir) {
+            manifest.migrationsDir = join14(projectPath2, "migrations");
+          }
+          registerPlugin(manifest);
+          return;
+        }
+      } catch (err) {
+        console.error(`  \u26A0 Failed to load plugin dist/index.js: ${err.message}`);
+      }
+    }
+  } catch {
+  }
+}
+async function loadModulesForMigration() {
+  loadCoreModules();
+  await loadSelfPlugin();
+  const config3 = await loadNexusConfig();
+  if (config3.plugins?.length) {
+    const sorted = topologicalSortPlugins(config3.plugins);
+    for (const plugin of sorted) {
+      registerPlugin(plugin);
+    }
+  }
+  const coreNames = new Set(getOrderedModules().map((m2) => m2.name));
+  for (const mod of config3.modules ?? []) {
+    if (!coreNames.has(mod.name)) {
+      registerModule(mod, { source: "standalone" });
+    }
+  }
+}
+var init_migrate_commands = __esm({
+  "src/cli/migrate-commands.ts"() {
+    "use strict";
+    init_database();
+    init_engine();
+    init_load_config();
+    init_shared();
+    init_paths();
+    init_connection();
+    init_ensure_system_tables();
+    init_migration_generator();
+    init_migration_runner();
+  }
+});
+
+// src/cli/seed-commands.ts
+var seed_commands_exports = {};
+__export(seed_commands_exports, {
+  handleSeedExport: () => handleSeedExport,
+  importSeedFiles: () => importSeedFiles
+});
+import { existsSync as existsSync13, mkdirSync as mkdirSync6, writeFileSync as writeFileSync3, readdirSync as readdirSync2, readFileSync as readFileSync9 } from "fs";
+import { join as join15, basename as basename4 } from "path";
+import { consola as consola3 } from "consola";
+function deserializeJsonFields(record, fields) {
+  const result = { ...record };
+  for (const [name, field] of Object.entries(fields)) {
+    if (field.db?.type === "json" && typeof result[name] === "string") {
+      try {
+        result[name] = JSON.parse(result[name]);
+      } catch {
+      }
+    }
+  }
+  return result;
+}
+function serializeJsonFields(record, fields) {
+  const result = { ...record };
+  for (const [name, field] of Object.entries(fields)) {
+    if (field.db?.type === "json" && typeof result[name] === "object" && result[name] !== null) {
+      result[name] = JSON.stringify(result[name]);
+    }
+  }
+  return result;
+}
+async function handleSeedExport(entity) {
+  initCli();
+  await loadModulesForMigration();
+  const db2 = getDb();
+  try {
+    const modules = getOrderedModules();
+    const seedDir = join15(getProjectPath(), "data", "seeds");
+    const seedableEntities = [];
+    for (const mod of modules) {
+      for (const def of mod.definitions ?? []) {
+        if (!("seedable" in def) || !def.seedable) continue;
+        if (entity && def.table !== entity) continue;
+        seedableEntities.push({
+          module: mod.name,
+          table: def.table,
+          fields: def.fields
+        });
+      }
+    }
+    if (seedableEntities.length === 0) {
+      if (entity) {
+        consola3.warn(`No seedable entity found with table "${entity}"`);
+      } else {
+        consola3.warn("No seedable entities found");
+      }
+      return;
+    }
+    if (!existsSync13(seedDir)) {
+      mkdirSync6(seedDir, { recursive: true });
+    }
+    for (const { module: modName, table, fields } of seedableEntities) {
+      const rows = await db2(table).orderBy("id");
+      if (rows.length === 0) {
+        consola3.info(`${table}: no records, skipping`);
+        continue;
+      }
+      const exported = rows.map(
+        (row) => deserializeJsonFields(row, fields)
+      );
+      const filePath = join15(seedDir, `${table}.json`);
+      writeFileSync3(filePath, JSON.stringify(exported, null, 2) + "\n", "utf-8");
+      consola3.success(`${table}: exported ${rows.length} records to data/seeds/${table}.json (module: ${modName})`);
+    }
+  } catch (err) {
+    consola3.error("Seed export failed:", err);
+  } finally {
+    await db2.destroy();
+    process.exit(0);
+  }
+}
+async function importSeedFiles(db2, modules, logger2) {
+  const seedDir = join15(getProjectPath(), "data", "seeds");
+  if (!existsSync13(seedDir)) return;
+  const files = readdirSync2(seedDir).filter((f) => f.endsWith(".json"));
+  if (files.length === 0) return;
+  const seedableDefs = /* @__PURE__ */ new Map();
+  for (const mod of modules) {
+    for (const rawDef of mod.definitions ?? []) {
+      const def = rawDef;
+      if (!def["seedable"] || !def["table"] || !def["fields"]) continue;
+      seedableDefs.set(
+        def["table"],
+        { fields: def["fields"], module: mod.name }
+      );
+    }
+  }
+  for (const file of files) {
+    const table = basename4(file, ".json");
+    const defInfo = seedableDefs.get(table);
+    if (!defInfo) {
+      logger2.debug(`data/seeds/${file}: skipped (entity "${table}" is not seedable)`);
+      continue;
+    }
+    const filePath = join15(seedDir, file);
+    const raw = readFileSync9(filePath, "utf-8");
+    let records;
+    try {
+      records = JSON.parse(raw);
+    } catch {
+      logger2.info(`data/seeds/${file}: skipped (invalid JSON)`);
+      continue;
+    }
+    if (!Array.isArray(records) || records.length === 0) continue;
+    const rows = records.map((r) => serializeJsonFields(r, defInfo.fields));
+    for (const row of rows) {
+      await db2(table).insert(row).onConflict("id").merge();
+    }
+    logger2.info(`Seeded ${rows.length} records into ${table} from data/seeds/${file}`);
+  }
+}
+var init_seed_commands = __esm({
+  "src/cli/seed-commands.ts"() {
+    "use strict";
+    init_engine();
+    init_paths();
+    init_connection();
+    init_shared();
+    init_migrate_commands();
+  }
+});
+
+// src/db/seed-context.ts
+var seed_context_exports = {};
+__export(seed_context_exports, {
+  createSeedContext: () => createSeedContext
+});
+function createSeedContext(deps) {
+  const { knex: db2, generateId: generateId4, hashPassword: hashPassword2, pluginPrefixes, logger: logger2 } = deps;
+  const permissionsMap = /* @__PURE__ */ new Map();
+  const seedContext = {
+    masters: {
+      register(type2, entries, options) {
+        deps.masterRegistry.register(type2, entries, options);
+      }
+    },
+    roles: {
+      async add(role) {
+        const hasTable = await db2.schema.hasTable("roles");
+        if (!hasTable) return;
+        const existing = await db2("roles").where({ name: role.name }).first();
+        if (!existing) {
+          const description = role.description ? JSON.stringify(typeof role.description === "string" ? { en: role.description } : role.description) : null;
+          await db2("roles").insert({
+            id: generateId4(),
+            name: role.name,
+            description,
+            is_system: role.is_system ?? false
+          });
+          logger2.info({ role: role.name }, "Seeded role");
+        }
+        if (role.permissions) {
+          let rolePerms = permissionsMap.get(role.name);
+          if (!rolePerms) {
+            rolePerms = /* @__PURE__ */ new Map();
+            permissionsMap.set(role.name, rolePerms);
+          }
+          for (const [subject2, actions] of Object.entries(role.permissions)) {
+            const normalized = subject2.charAt(0).toUpperCase() + subject2.slice(1);
+            rolePerms.set(normalized, actions);
+          }
+        }
+      }
+    },
+    users: {
+      async add(user) {
+        const hasTable = await db2.schema.hasTable("users");
+        if (!hasTable) return;
+        const existing = await db2("users").where({ email: user.email }).first();
+        if (existing) return;
+        const userId = generateId4();
+        await db2("users").insert({
+          id: userId,
+          type: user.type ?? "human",
+          email: user.email,
+          password: await hashPassword2(user.password),
+          name: user.name ?? user.email
+        });
+        if (user.roles?.length) {
+          for (const roleName of user.roles) {
+            const role = await db2("roles").where({ name: roleName }).first();
+            if (role) {
+              await db2("user_roles").insert({
+                id: generateId4(),
+                user_id: userId,
+                role_id: role.id
+              });
+            } else {
+              logger2.warn({ role: roleName, user: user.email }, "Role not found, skipping assignment");
+            }
+          }
+        }
+        logger2.info({ email: user.email, roles: user.roles }, "Seeded user");
+      }
+    },
+    plugin(pluginName) {
+      return {
+        entity(entityName) {
+          return {
+            async upsert(data, options) {
+              let prefix = pluginPrefixes.get(pluginName) ?? "";
+              if (!prefix) {
+                for (const [key2, pfx] of pluginPrefixes) {
+                  if (pluginName === key2 || pluginName.endsWith(`-${key2}`)) {
+                    prefix = pfx;
+                    break;
+                  }
+                }
+              }
+              const fullTable = `${prefix}${entityName}`;
+              const hasTable = await db2.schema.hasTable(fullTable);
+              if (!hasTable) {
+                logger2.warn({ table: fullTable, plugin: pluginName }, "Table not found for plugin entity seed");
+                return 0;
+              }
+              const key = options?.key ?? "id";
+              let seeded = 0;
+              for (const row of data) {
+                const keyValue = row[key];
+                if (keyValue != null) {
+                  const existing = await db2(fullTable).where({ [key]: keyValue }).first();
+                  if (existing) continue;
+                }
+                const insertData = { ...row };
+                if (key === "id" && !insertData["id"]) {
+                  insertData["id"] = generateId4();
+                }
+                await db2(fullTable).insert(insertData);
+                seeded++;
+              }
+              if (seeded > 0) {
+                logger2.info({ table: fullTable, seeded }, "Seeded plugin entity data");
+              }
+              return seeded;
+            }
+          };
+        }
+      };
+    },
+    async raw(table, data) {
+      logger2.warn({ table }, "Using seed.raw() \u2014 prefer typed helpers when available");
+      const hasTable = await db2.schema.hasTable(table);
+      if (!hasTable) {
+        logger2.warn({ table }, "Table not found for raw seed");
+        return 0;
+      }
+      const rows = Array.isArray(data) ? data : [data];
+      await db2(table).insert(rows);
+      return rows.length;
+    }
+  };
+  return {
+    ctx: seedContext,
+    flushPermissions: () => {
+      if (permissionsMap.size > 0 && deps.onPermissionsCollected) {
+        deps.onPermissionsCollected(permissionsMap);
+      }
+    }
+  };
+}
+var init_seed_context = __esm({
+  "src/db/seed-context.ts"() {
+    "use strict";
   }
 });
 
@@ -27686,7 +28407,9 @@ var init_instrumentation = __esm({
 });
 
 // src/core/server.ts
+import http from "http";
 import { entityRoom as entityRoom6 } from "@gzl10/nexus-sdk";
+import { DEFAULT_LOCALES as DEFAULT_LOCALES2 } from "@gzl10/nexus-sdk";
 async function runMigrationsAndSeeds(config3) {
   initLoggerService(getLoggerConfig());
   setLoggerInstance(getPinoLogger());
@@ -27739,7 +28462,7 @@ async function runMigrationsAndSeeds(config3) {
     const sources = buildMigrationSources();
     const migrationFiles = await loadAllMigrationFiles(sources);
     if (migrationFiles.length > 0) {
-      logger.info({ count: migrationFiles.length }, "Deploying pending migrations...");
+      logger.info({ sources: sources.length, files: migrationFiles.length }, "Running migration deploy...");
       try {
         await runMigrations(void 0, sources);
       } catch (err) {
@@ -27748,7 +28471,7 @@ async function runMigrationsAndSeeds(config3) {
         throw err;
       }
     }
-    logger.info("Checking schema drift...");
+    logger.debug("Checking schema drift...");
     const drift = await detectSchemaDrift();
     if (drift && (drift.newTables.length > 0 || drift.alteredTables.length > 0)) {
       const message = formatDriftMessage(drift);
@@ -27795,7 +28518,16 @@ ${dirs}`);
   }
   const allDefinitions = modules.flatMap((m2) => m2.definitions ?? []);
   await createMemoryTables(allDefinitions);
-  logger.info("Running seeds...");
+  try {
+    const { importSeedFiles: importSeedFiles2 } = await Promise.resolve().then(() => (init_seed_commands(), seed_commands_exports));
+    await importSeedFiles2(ctx.db.knex, modules, {
+      info: (msg) => logger.info(msg),
+      debug: (msg) => logger.debug(msg)
+    });
+  } catch (err) {
+    logger.debug({ err }, "Seed file import skipped (no data/seeds/ or error)");
+  }
+  logger.debug("Running seeds...");
   for (const mod of modules) {
     try {
       await runModuleSeed(mod, ctx);
@@ -27803,14 +28535,41 @@ ${dirs}`);
       logger.error({ module: mod.name, err }, "Seed failed - continuing with next module");
     }
   }
+  if (config3?.onSeed) {
+    const { getPlugins: getPlugins2 } = await Promise.resolve().then(() => (init_module_queries(), module_queries_exports));
+    const { createMasterRegistry: createMasterRegistry2 } = await Promise.resolve().then(() => (init_registry2(), registry_exports));
+    const masterRegistry = ctx.services.has("masters") ? ctx.services.get("masters") : createMasterRegistry2();
+    const pluginPrefixes = /* @__PURE__ */ new Map();
+    for (const plugin of getPlugins2()) {
+      pluginPrefixes.set(plugin.code, `${plugin.code}_`);
+      const shortName = plugin.name.replace(/^@[^/]+\/nexus-plugin-/, "");
+      if (shortName !== plugin.code) {
+        pluginPrefixes.set(shortName, `${plugin.code}_`);
+      }
+    }
+    const { createSeedContext: createSeedContext2 } = await Promise.resolve().then(() => (init_seed_context(), seed_context_exports));
+    const { ctx: seedCtx, flushPermissions } = createSeedContext2({
+      knex: ctx.db.knex,
+      generateId: ctx.core.generateId,
+      hashPassword: ctx.core.crypto.hashPassword,
+      masterRegistry,
+      pluginPrefixes,
+      logger: ctx.core.logger,
+      onPermissionsCollected: (perms) => setSeedPermissions(perms)
+    });
+    await config3.onSeed(seedCtx);
+    await masterRegistry.seed(ctx);
+    flushPermissions();
+  }
 }
 async function start(config3) {
   if (server) {
     throw new Error("Server already running. Call stop() first.");
   }
   currentConfig = config3;
-  if (env.NODE_ENV === "development" && env.FRPC_SERVER && env.FRPC_SUBDOMAIN && !env.BACKEND_URL) {
-    process.env["BACKEND_URL"] = getTunnelUrl(env.FRPC_SUBDOMAIN, env.FRPC_SERVER);
+  setLocales(config3?.locales ?? DEFAULT_LOCALES2);
+  if (env.NODE_ENV === "development" && env.FRPC_SERVER && !env.TRUST_PROXY) {
+    process.env["TRUST_PROXY"] = "true";
   }
   const resolved = resolveConfig();
   if (resolved.port > 0) {
@@ -27833,13 +28592,17 @@ async function start(config3) {
   await initTelemetry2();
   await runMigrationsAndSeeds(config3);
   const effectiveCorsOrigins = buildEffectiveCorsOrigins(env.CORS_ORIGIN, config3?.spas);
+  const httpServer = http.createServer();
   const app = await createApp({
     beforeRoutes: config3?.beforeRoutes,
     afterRoutes: config3?.afterRoutes,
-    spas: config3?.spas
+    spas: config3?.spas,
+    httpServer
   });
+  httpServer.on("request", app);
   return new Promise((resolve2) => {
-    server = app.listen(resolved.port, resolved.host, async () => {
+    server = httpServer;
+    httpServer.listen(resolved.port, resolved.host, async () => {
       const timeoutMs = parseInt(process.env["REQUEST_TIMEOUT_MS"] || "30000", 10);
       if (timeoutMs > 0) {
         server.setTimeout(timeoutMs);
@@ -27865,22 +28628,24 @@ async function start(config3) {
       eventBridge.init();
       const addr = server.address();
       const actualPort = typeof addr === "object" && addr ? addr.port : resolved.port;
+      let tunnelActive = false;
       if (env.NODE_ENV === "development" && env.FRPC_SERVER && env.FRPC_SUBDOMAIN) {
-        startTunnel({
+        tunnelActive = await startTunnel({
           server: env.FRPC_SERVER,
           serverPort: env.FRPC_SERVER_PORT,
           token: env.FRPC_TOKEN,
           subdomain: env.FRPC_SUBDOMAIN,
           localPort: actualPort
         });
+        if (tunnelActive && !env.BACKEND_URL) {
+          process.env["BACKEND_URL"] = getTunnelUrl(env.FRPC_SUBDOMAIN, env.FRPC_SERVER);
+        }
       }
       const baseUrl = env.BACKEND_URL || `http://localhost:${actualPort}`;
-      logger.info({ libPath: getLibPath(), projectPath: getProjectPath() }, "Paths");
-      logger.info(`API: ${baseUrl}/api/v1`);
-      if (resolved.ui.enabled) {
-        logger.info(`UI: ${baseUrl}`);
-      }
-      logger.info({ port: actualPort, mode: resolved.nodeEnv }, "Server started");
+      logger.debug({ libPath: getLibPath(), projectPath: getProjectPath() }, "Paths");
+      const urls = { api: `${baseUrl}/api/v1` };
+      if (resolved.ui.enabled) urls["ui"] = baseUrl;
+      logger.info({ port: actualPort, mode: resolved.nodeEnv, ...urls }, "Server started");
       nexusEvents.emitEvent("server.started", { port: actualPort, host: resolved.host });
       if (config3?.onReady) {
         try {
@@ -27906,7 +28671,8 @@ async function stop() {
     await resetSharedAdapters();
     resetConfigCache();
     clearCustomCaslRules();
-    resetServeSPAEndpoints();
+    clearSeedPermissions();
+    await resetServeSPA();
     return;
   }
   if (currentConfig?.beforeClose) {
@@ -27940,7 +28706,8 @@ async function stop() {
   await resetSharedAdapters();
   resetConfigCache();
   clearCustomCaslRules();
-  resetServeSPAEndpoints();
+  clearSeedPermissions();
+  await resetServeSPA();
   currentConfig = void 0;
   server = null;
   nexusEvents.emitEvent("server.stopped");
@@ -28000,7 +28767,7 @@ var init_server = __esm({
     init_cors();
     init_logger();
     init_error_middleware();
-    init_net();
+    init_port_check();
     init_engine();
     init_context();
     init_db();