@gzl10/nexus-backend 0.18.0 → 0.19.0

package/dist/index.js

@@ -14,7 +14,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@gzl10/nexus-backend",
-      version: "0.18.0",
+      version: "0.19.0",
       description: "Backend as a Service (BaaS) with Express 5, Knex and CASL",
       type: "module",
       main: "./dist/index.js",
@@ -26,6 +26,14 @@ var init_package = __esm({
         ".": {
           import: "./dist/index.js",
           types: "./dist/index.d.ts"
+        },
+        "./testing": {
+          import: "./dist/testing/index.js",
+          types: "./dist/testing/index.d.ts"
+        },
+        "./migrations": {
+          import: "./dist/migration-helpers/index.js",
+          types: "./dist/migration-helpers/index.d.ts"
         }
       },
       files: [
@@ -131,9 +139,11 @@ var init_package = __esm({
         "@types/cookie-parser": "^1.4.10",
         "@types/cors": "^2.8.19",
         "@types/express": "^5.0.6",
+        "@types/express-serve-static-core": "^5.1.1",
         "@types/jsonwebtoken": "^9.0.10",
         "@types/multer": "^2.1.0",
         "@types/nodemailer": "^7.0.11",
+        "@types/qs": "^6.15.0",
         "@types/supertest": "^6.0.3",
         "pino-pretty": "^13.1.3",
         "socket.io-client": "^4.8.3",
@@ -142,11 +152,15 @@ var init_package = __esm({
         vite: "^8.0.3"
       },
       peerDependencies: {
-        vite: ">=6.0.0"
+        vite: ">=6.0.0",
+        vitest: ">=3.0.0"
       },
       peerDependenciesMeta: {
         vite: {
           optional: true
+        },
+        vitest: {
+          optional: true
         }
       },
       publishConfig: {
@@ -1048,6 +1062,14 @@ async function isWorkspacePackage(name) {
   }
 }
 async function installPlugin(name, opts) {
+  const projectPath2 = opts?.projectPath ?? process.cwd();
+  const pkgPath = join2(projectPath2, "package.json");
+  if (existsSync2(pkgPath)) {
+    const pkg3 = JSON.parse(readFileSync(pkgPath, "utf-8"));
+    if (pkg3.name === "@gzl10/nexus-backend") {
+      throw new Error("Cannot install plugins inside @gzl10/nexus-backend. Run this command from a Nexus project directory.");
+    }
+  }
   const isWorkspace = await isWorkspacePackage(name);
   let pkg2;
   if (opts?.version) {
@@ -1064,11 +1086,28 @@ async function installPlugin(name, opts) {
   plugins[name] = { enabled: true };
   writePluginsFile(plugins, filePath);
 }
+function isPackageInstalled(name, projectPath2) {
+  const base = projectPath2 || process.cwd();
+  const pkgPath = join2(base, "package.json");
+  try {
+    const pkg2 = JSON.parse(readFileSync(pkgPath, "utf-8"));
+    return !!(pkg2.dependencies?.[name] || pkg2.devDependencies?.[name]);
+  } catch {
+    return false;
+  }
+}
 async function uninstallPlugin(name, projectPath2) {
-  await execAsync(`pnpm remove ${name}`);
   const filePath = getPluginsFilePath(projectPath2);
   const plugins = readPluginsFile(filePath);
-  if (name in plugins) {
+  const isRegistered = name in plugins;
+  const isInstalled = isPackageInstalled(name, projectPath2);
+  if (!isRegistered && !isInstalled) {
+    throw new Error(`Plugin ${shortPluginName(name)} is not installed`);
+  }
+  if (isInstalled) {
+    await execAsync(`pnpm remove ${name}`);
+  }
+  if (isRegistered) {
     delete plugins[name];
     writePluginsFile(plugins, filePath);
   }
@@ -2068,6 +2107,7 @@ var init_definitions = __esm({
     };
     mastersEntity = {
       table: "masters",
+      seedable: true,
       routePrefix: "/",
       label: { en: "Master", es: "Maestro" },
       labelPlural: { en: "Masters", es: "Maestros" },
@@ -2099,14 +2139,15 @@ var init_definitions = __esm({
           meta: { sortable: true, searchable: true }
         }),
         label: useLocalizedField({ label: { en: "Name", es: "Nombre" } }),
-        order: orderField,
+        order: { ...orderField, meta: { ...orderField.meta, showInDisplay: false } },
         is_active: isActiveField,
         metadata: useJsonField({
           label: { en: "Metadata", es: "Metadatos" },
           hint: {
             en: "Type-specific fields (symbol, flag, etc.)",
             es: "Campos espec\xEDficos del tipo"
-          }
+          },
+          meta: { showInDisplay: false }
         })
       },
       hooks: () => ({
@@ -2115,6 +2156,12 @@ var init_definitions = __esm({
             data["id"] = `${data["type"]}:${data["code"]}`;
           }
           return data;
+        },
+        beforeUpdate: async (_id, data) => {
+          if ("type" in data || "code" in data) {
+            throw new Error("Cannot update type or code of a master record. Delete and recreate instead.");
+          }
+          return data;
         }
       }),
       defaultSort: { field: "order", order: "asc" },
@@ -2166,7 +2213,7 @@ function createMasterRegistry() {
             await ctx.db.knex("masters").insert(row).onConflict(["type", "code"]).merge();
           }
         } else {
-          await ctx.db.knex("masters").insert(rows);
+          await ctx.db.knex("masters").insert(rows).onConflict(["type", "code"]).ignore();
         }
       }
     },
@@ -8599,15 +8646,12 @@ var init_document_types = __esm({
   }
 });
 
-// src/modules/masters/index.ts
-var PREDEFINED_MASTERS, mastersModule;
-var init_masters = __esm({
-  "src/modules/masters/index.ts"() {
+// src/modules/masters/constants.ts
+var DEFAULT_MASTER_TYPES, PREDEFINED_MASTERS;
+var init_constants = __esm({
+  "src/modules/masters/constants.ts"() {
     "use strict";
-    init_definitions();
-    init_registry2();
-    init_definitions();
-    init_registry2();
+    DEFAULT_MASTER_TYPES = ["languages", "timezones"];
     PREDEFINED_MASTERS = {
       currencies: () => Promise.resolve().then(() => (init_currencies(), currencies_exports)).then((m2) => m2.default),
       languages: () => Promise.resolve().then(() => (init_languages(), languages_exports)).then((m2) => m2.default),
@@ -8624,15 +8668,137 @@ var init_masters = __esm({
       "phone-prefixes": () => Promise.resolve().then(() => (init_phone_prefixes(), phone_prefixes_exports)).then((m2) => m2.default),
       "document-types": () => Promise.resolve().then(() => (init_document_types(), document_types_exports)).then((m2) => m2.default)
     };
+  }
+});
+
+// src/modules/masters/actions/install-type.ts
+import { useSelectField as useSelectField2 } from "@gzl10/nexus-sdk/fields";
+var installTypeAction;
+var init_install_type = __esm({
+  "src/modules/masters/actions/install-type.ts"() {
+    "use strict";
+    init_constants();
+    installTypeAction = {
+      key: "install-type",
+      scope: "module",
+      label: { en: "Install Master Type", es: "Instalar Tipo de Maestro" },
+      icon: "mdi:database-plus",
+      variant: "primary",
+      output: {},
+      input: {
+        type: useSelectField2({
+          label: { en: "Master Type", es: "Tipo de Maestro" },
+          required: true,
+          options: Object.keys(PREDEFINED_MASTERS).filter((t) => !DEFAULT_MASTER_TYPES.includes(t)).map((t) => ({
+            value: t,
+            label: t.replace(/[-_]/g, " ").replace(/\b\w/g, (c) => c.toUpperCase())
+          }))
+        })
+      },
+      handler: async (ctx, input) => {
+        if (process.env["NODE_ENV"] === "production") {
+          throw new ctx.core.errors.ForbiddenError("Master type management is only available in development");
+        }
+        const { type: type2 } = input;
+        const loader = PREDEFINED_MASTERS[type2];
+        if (!loader) {
+          throw new ctx.core.errors.AppError(`Unknown predefined master type: ${type2}`, 400);
+        }
+        const existing = await ctx.db.knex("masters").where({ type: type2 }).first();
+        if (existing) {
+          throw new ctx.core.errors.ConflictError(`Master type "${type2}" is already installed`);
+        }
+        const entries = await loader();
+        const rows = entries.map((entry, i) => ({
+          id: `${type2}:${entry.code}`,
+          type: type2,
+          code: entry.code,
+          label: JSON.stringify(typeof entry.label === "string" ? { en: entry.label } : entry.label),
+          order: entry.order ?? i,
+          is_active: entry.is_active ?? true,
+          metadata: entry.metadata ? JSON.stringify(entry.metadata) : null
+        }));
+        await ctx.db.knex("masters").insert(rows).onConflict(["type", "code"]).ignore();
+        return { installed: type2, count: rows.length };
+      }
+    };
+  }
+});
+
+// src/modules/masters/actions/uninstall-type.ts
+import { useTextField as useTextField3 } from "@gzl10/nexus-sdk/fields";
+var uninstallTypeAction;
+var init_uninstall_type = __esm({
+  "src/modules/masters/actions/uninstall-type.ts"() {
+    "use strict";
+    init_constants();
+    uninstallTypeAction = {
+      key: "uninstall-type",
+      scope: "module",
+      label: { en: "Uninstall Master Type", es: "Desinstalar Tipo de Maestro" },
+      icon: "mdi:database-minus",
+      variant: "danger",
+      output: {},
+      confirm: {
+        type: "simple",
+        title: { en: "Uninstall Master Type", es: "Desinstalar Tipo de Maestro" },
+        message: {
+          en: "This will delete ALL records of the selected type. This action cannot be undone.",
+          es: "Esto eliminar\xE1 TODOS los registros del tipo seleccionado. Esta acci\xF3n no se puede deshacer."
+        }
+      },
+      input: {
+        type: useTextField3({
+          label: { en: "Type slug to uninstall", es: "Slug del tipo a desinstalar" },
+          required: true,
+          hint: {
+            en: 'Enter the master type slug (e.g., "currencies", "countries")',
+            es: 'Introduce el slug del tipo (ej: "currencies", "countries")'
+          }
+        })
+      },
+      handler: async (ctx, input) => {
+        if (process.env["NODE_ENV"] === "production") {
+          throw new ctx.core.errors.ForbiddenError("Master type management is only available in development");
+        }
+        const { type: type2 } = input;
+        if (DEFAULT_MASTER_TYPES.includes(type2)) {
+          throw new ctx.core.errors.AppError(`Cannot uninstall default master type "${type2}" (required by core)`, 400);
+        }
+        const existing = await ctx.db.knex("masters").where({ type: type2 }).first();
+        if (!existing) {
+          throw new ctx.core.errors.NotFoundError(`Master type "${type2}" is not installed`);
+        }
+        const deleted = await ctx.db.knex("masters").where({ type: type2 }).del();
+        return { uninstalled: type2, count: deleted };
+      }
+    };
+  }
+});
+
+// src/modules/masters/index.ts
+var mastersModule;
+var init_masters = __esm({
+  "src/modules/masters/index.ts"() {
+    "use strict";
+    init_definitions();
+    init_registry2();
+    init_constants();
+    init_install_type();
+    init_uninstall_type();
+    init_definitions();
+    init_registry2();
+    init_constants();
     mastersModule = {
       name: "masters",
       type: "core",
-      label: { en: "Master Data", es: "Datos maestros" },
+      label: { en: "Masters", es: "Maestros" },
       icon: "mdi:database-outline",
       description: { en: "Reference data catalogs", es: "Cat\xE1logos de datos de referencia" },
-      category: "data",
+      category: "settings",
       routePrefix: "/masters",
       definitions: [mastersEntity],
+      actions: [installTypeAction, uninstallTypeAction],
       init: (ctx) => {
         if (!ctx.services.has("masters")) {
           ctx.services.register("masters", createMasterRegistry());
@@ -8643,13 +8809,14 @@ var init_masters = __esm({
           ctx.services.register("masters", createMasterRegistry());
         }
         const registry2 = ctx.services.get("masters");
-        const configMasters = ctx.config.resolved["masters"];
-        const typesToSeed = !configMasters || configMasters === "*" ? Object.keys(PREDEFINED_MASTERS) : configMasters.filter((t) => t in PREDEFINED_MASTERS);
-        for (const type2 of typesToSeed) {
-          const loader = PREDEFINED_MASTERS[type2];
-          if (!loader) continue;
-          const entries = await loader();
-          registry2.register(type2, entries, { seed: "if-empty" });
+        const existing = await ctx.db.knex("masters").first();
+        if (!existing) {
+          for (const type2 of DEFAULT_MASTER_TYPES) {
+            const loader = PREDEFINED_MASTERS[type2];
+            if (!loader) continue;
+            const entries = await loader();
+            registry2.register(type2, entries, { seed: "if-empty" });
+          }
         }
         await registry2.seed(ctx);
       }
@@ -8913,6 +9080,7 @@ function toPageDTO(page) {
     dataSource: page.dataSource,
     widgets: page.widgets,
     component: page.component,
+    contentEndpoint: page.contentEndpoint,
     meta: page.meta,
     layout: page.layout
   };
@@ -9176,7 +9344,7 @@ var init_system_routes = __esm({
 
 // src/modules/system/system.entity.ts
 import * as os from "os";
-import { useIconField, useTextField as useTextField3, useSelectField as useSelectField2, useNumberField as useNumberField2, useCheckboxField, useTagsField, useNameField, useDescriptionField } from "@gzl10/nexus-sdk/fields";
+import { useIconField, useTextField as useTextField4, useSelectField as useSelectField3, useNumberField as useNumberField2, useCheckboxField, useTagsField, useNameField, useDescriptionField } from "@gzl10/nexus-sdk/fields";
 var moduleEntity, osEntity;
 var init_system_entity = __esm({
   "src/modules/system/system.entity.ts"() {
@@ -9194,7 +9362,7 @@ var init_system_entity = __esm({
         name: useNameField({
           size: 50
         }),
-        label: useTextField3({
+        label: useTextField4({
           label: { en: "Label", es: "Etiqueta" },
           size: 100,
           nullable: false,
@@ -9202,7 +9370,7 @@ var init_system_entity = __esm({
         }),
         icon: useIconField({ label: { en: "Icon", es: "Icono" }, size: 50 }),
         type: {
-          ...useSelectField2({
+          ...useSelectField3({
             label: { en: "Type", es: "Tipo" },
             options: [
               { value: "core", label: { en: "Core", es: "Core" } },
@@ -9218,7 +9386,7 @@ var init_system_entity = __esm({
         description: useDescriptionField({
           mode: "text"
         }),
-        routePrefix: useTextField3({
+        routePrefix: useTextField4({
           label: { en: "Route", es: "Ruta" },
           size: 50,
           nullable: true
@@ -9276,14 +9444,14 @@ var init_system_entity = __esm({
       order: 1,
       refreshInterval: 5e3,
       fields: {
-        hostname: useTextField3({
+        hostname: useTextField4({
           label: { en: "Hostname", es: "Nombre de servidor" },
           size: 100,
           nullable: false,
           inputProps: { order: 1 }
         }),
         platform: {
-          ...useSelectField2({
+          ...useSelectField3({
             label: { en: "Platform", es: "Plataforma" },
             options: [
               { value: "darwin", label: { en: "macOS", es: "macOS" } },
@@ -9297,7 +9465,7 @@ var init_system_entity = __esm({
           inputProps: { order: 2 }
         },
         arch: {
-          ...useSelectField2({
+          ...useSelectField3({
             label: { en: "Architecture", es: "Arquitectura" },
             options: [
               { value: "x64", label: { en: "x64", es: "x64" } },
@@ -9310,7 +9478,7 @@ var init_system_entity = __esm({
           inputProps: { order: 3 }
         },
         type: {
-          ...useTextField3({
+          ...useTextField4({
             label: { en: "Type", es: "Tipo" },
             size: 30,
             nullable: false
@@ -9318,7 +9486,7 @@ var init_system_entity = __esm({
           inputProps: { order: 4 }
         },
         release: {
-          ...useTextField3({
+          ...useTextField4({
             label: { en: "Release", es: "Versi\xF3n" },
             size: 50,
             nullable: false
@@ -9341,7 +9509,7 @@ var init_system_entity = __esm({
           inputProps: { order: 7, format: "duration" }
         },
         cpuModel: {
-          ...useTextField3({
+          ...useTextField4({
             label: { en: "CPU Model", es: "Modelo de CPU" },
             size: 100,
             nullable: false
@@ -9407,7 +9575,7 @@ var init_system_entity = __esm({
 });
 
 // src/modules/system/migration-history.entity.ts
-import { useIdField as useIdField2, useTextField as useTextField4, useNumberField as useNumberField3, useSelectField as useSelectField3, useDatetimeField as useDatetimeField2, useTextareaField as useTextareaField2 } from "@gzl10/nexus-sdk/fields";
+import { useIdField as useIdField2, useTextField as useTextField5, useNumberField as useNumberField3, useSelectField as useSelectField4, useDatetimeField as useDatetimeField2, useTextareaField as useTextareaField2 } from "@gzl10/nexus-sdk/fields";
 var migrationHistoryEntity;
 var init_migration_history_entity = __esm({
   "src/modules/system/migration-history.entity.ts"() {
@@ -9424,9 +9592,9 @@ var init_migration_history_entity = __esm({
       calendarFrom: "executed_at",
       fields: {
         id: useIdField2(),
-        name: useTextField4({ label: { en: "Migration Name", es: "Nombre de la Migraci\xF3n" }, required: true, size: 255, unique: true, meta: { sortable: true, searchable: true } }),
+        name: useTextField5({ label: { en: "Migration Name", es: "Nombre de la Migraci\xF3n" }, required: true, size: 255, unique: true, meta: { sortable: true, searchable: true } }),
         batch: useNumberField3({ label: { en: "Batch", es: "Lote" }, required: true, meta: { sortable: true } }),
-        status: useSelectField3({
+        status: useSelectField4({
           label: { en: "Status", es: "Estado" },
           options: [
             { value: "running", label: { en: "Running", es: "Ejecutando" } },
@@ -9458,7 +9626,7 @@ var init_migration_history_entity = __esm({
 });
 
 // src/modules/system/env-config.entity.ts
-import { useTextField as useTextField5, useSelectField as useSelectField4, useCheckboxField as useCheckboxField2 } from "@gzl10/nexus-sdk/fields";
+import { useTextField as useTextField6, useSelectField as useSelectField5, useCheckboxField as useCheckboxField2 } from "@gzl10/nexus-sdk/fields";
 function maskValue(value, sensitive) {
   if (!sensitive) return value;
   try {
@@ -9483,14 +9651,14 @@ var init_env_config_entity = __esm({
       routePrefix: "/env-config",
       defaultSort: { field: "category", order: "asc" },
       fields: {
-        name: useTextField5({
+        name: useTextField6({
           label: { en: "Variable", es: "Variable" },
           size: 100,
           nullable: false,
           meta: { sortable: true, searchable: true }
         }),
         category: {
-          ...useSelectField4({
+          ...useSelectField5({
             label: { en: "Category", es: "Categor\xEDa" },
             options: [
               { value: "server", label: { en: "Server", es: "Servidor" } },
@@ -9505,18 +9673,18 @@ var init_env_config_entity = __esm({
             meta: { sortable: true }
           })
         },
-        source: useTextField5({
+        source: useTextField6({
           label: { en: "Source", es: "Origen" },
           size: 50,
           nullable: false,
           meta: { sortable: true }
         }),
-        value: useTextField5({
+        value: useTextField6({
           label: { en: "Value", es: "Valor" },
           size: 255,
           nullable: true
         }),
-        default: useTextField5({
+        default: useTextField6({
           label: { en: "Default", es: "Por defecto" },
           size: 100,
           nullable: true
@@ -10222,7 +10390,7 @@ var init_system = __esm({
 });
 
 // src/modules/ui-settings/ui-branding.entity.ts
-import { useTextField as useTextField6, useImageField } from "@gzl10/nexus-sdk/fields";
+import { useTextField as useTextField7, useImageField } from "@gzl10/nexus-sdk/fields";
 var uiBrandingEntity;
 var init_ui_branding_entity = __esm({
   "src/modules/ui-settings/ui-branding.entity.ts"() {
@@ -10242,7 +10410,7 @@ var init_ui_branding_entity = __esm({
         favicon: null
       },
       fields: {
-        appName: useTextField6({
+        appName: useTextField7({
           label: { en: "App Name", es: "Nombre de la App" },
           hint: { en: "Displayed in the header, browser tab and emails", es: "Se muestra en el header, pesta\xF1a del navegador y emails" },
           size: 100,
@@ -10283,7 +10451,7 @@ var init_ui_branding_entity = __esm({
 });
 
 // src/modules/ui-settings/ui-theme.entity.ts
-import { useSelectField as useSelectField5, useColorField } from "@gzl10/nexus-sdk/fields";
+import { useSelectField as useSelectField6, useColorField } from "@gzl10/nexus-sdk/fields";
 var uiThemeEntity;
 var init_ui_theme_entity = __esm({
   "src/modules/ui-settings/ui-theme.entity.ts"() {
@@ -10308,7 +10476,7 @@ var init_ui_theme_entity = __esm({
       },
       fields: {
         // === Typography ===
-        font: useSelectField5({
+        font: useSelectField6({
           label: { en: "Font", es: "Fuente" },
           hint: { en: "Primary font for headings and UI elements", es: "Fuente principal para t\xEDtulos y elementos de interfaz" },
           options: [
@@ -10321,7 +10489,7 @@ var init_ui_theme_entity = __esm({
           ]
         }),
         // === Theme & Colors ===
-        theme: useSelectField5({
+        theme: useSelectField6({
           label: { en: "Theme", es: "Tema" },
           hint: { en: "System follows your device preferences", es: "Sistema sigue las preferencias de tu dispositivo" },
           options: [
@@ -10330,7 +10498,7 @@ var init_ui_theme_entity = __esm({
             { value: "system", label: { en: "System", es: "Sistema" } }
           ]
         }),
-        dopamineTheme: useSelectField5({
+        dopamineTheme: useSelectField6({
           label: { en: "Dopamine Theme", es: "Tema Dopamina" },
           hint: { en: "Vibrant color presets optimized for light and dark modes (2025/2026 trends)", es: "Presets de colores vibrantes optimizados para modo claro y oscuro (tendencias 2025/2026)" },
           options: [
@@ -10348,7 +10516,7 @@ var init_ui_theme_entity = __esm({
           ]
         }),
         // === Login Layout ===
-        loginLayout: useSelectField5({
+        loginLayout: useSelectField6({
           label: { en: "Login Layout", es: "Dise\xF1o de Login" },
           hint: { en: "Visual layout for authentication pages", es: "Dise\xF1o visual para p\xE1ginas de autenticaci\xF3n" },
           options: [
@@ -10379,7 +10547,7 @@ var init_ui_theme_entity = __esm({
 });
 
 // src/modules/ui-settings/ui-effects.entity.ts
-import { useSelectField as useSelectField6, useSwitchField as useSwitchField2 } from "@gzl10/nexus-sdk/fields";
+import { useSelectField as useSelectField7, useSwitchField as useSwitchField2 } from "@gzl10/nexus-sdk/fields";
 var uiEffectsEntity;
 var init_ui_effects_entity = __esm({
   "src/modules/ui-settings/ui-effects.entity.ts"() {
@@ -10399,7 +10567,7 @@ var init_ui_effects_entity = __esm({
         enableOrganicShapes: false
       },
       fields: {
-        glassIntensity: useSelectField6({
+        glassIntensity: useSelectField7({
           label: { en: "Glass Intensity", es: "Intensidad Glass" },
           hint: { en: "Glassmorphism blur effect on cards and modals", es: "Efecto de desenfoque glassmorphism en cards y modales" },
           options: [
@@ -10409,7 +10577,7 @@ var init_ui_effects_entity = __esm({
             { value: "high", label: { en: "High", es: "Alta" } }
           ]
         }),
-        borderStyle: useSelectField6({
+        borderStyle: useSelectField7({
           label: { en: "Border Style", es: "Estilo de Bordes" },
           hint: { en: "Corner radius for buttons, cards and inputs", es: "Radio de esquinas para botones, cards e inputs" },
           options: [
@@ -10443,7 +10611,7 @@ var init_ui_effects_entity = __esm({
 });
 
 // src/modules/ui-settings/ui-accessibility.entity.ts
-import { useSelectField as useSelectField7, useSwitchField as useSwitchField3 } from "@gzl10/nexus-sdk/fields";
+import { useSelectField as useSelectField8, useSwitchField as useSwitchField3 } from "@gzl10/nexus-sdk/fields";
 var uiAccessibilityEntity;
 var init_ui_accessibility_entity = __esm({
   "src/modules/ui-settings/ui-accessibility.entity.ts"() {
@@ -10462,7 +10630,7 @@ var init_ui_accessibility_entity = __esm({
         highContrast: false
       },
       fields: {
-        typographyScale: useSelectField7({
+        typographyScale: useSelectField8({
           label: { en: "Typography Scale", es: "Escala Tipogr\xE1fica" },
           hint: { en: "Adjusts font sizes for better readability (WCAG 1.4.4)", es: "Ajusta tama\xF1os de fuente para mejor legibilidad (WCAG 1.4.4)" },
           options: [
@@ -11453,7 +11621,7 @@ var init_storage_service = __esm({
 });
 
 // src/modules/storage/storage.entity.ts
-import { useIdField as useIdField3, useTextField as useTextField7, useSelectField as useSelectField8, useUrlField, useNumberField as useNumberField4, useCheckboxField as useCheckboxField3, useJsonField as useJsonField2, useMetadataField, usePublicField } from "@gzl10/nexus-sdk/fields";
+import { useIdField as useIdField3, useTextField as useTextField8, useSelectField as useSelectField9, useUrlField, useNumberField as useNumberField4, useCheckboxField as useCheckboxField3, useJsonField as useJsonField2, useMetadataField, usePublicField } from "@gzl10/nexus-sdk/fields";
 var DEFAULT_MAX_SIZE2, storageConfigEntity, storageFilesEntity;
 var init_storage_entity = __esm({
   "src/modules/storage/storage.entity.ts"() {
@@ -11479,7 +11647,7 @@ var init_storage_entity = __esm({
       },
       fields: {
         id: useIdField3(),
-        scope: useTextField7({
+        scope: useTextField8({
           label: { en: "Scope", es: "\xC1mbito" },
           disabled: true,
           size: 100,
@@ -11488,7 +11656,7 @@ var init_storage_entity = __esm({
           hint: { en: "Unique identifier (e.g. default_filesystem, default_s3)", es: "Identificador \xFAnico (ej: default_filesystem, default_s3)" }
         }),
         driver: {
-          ...useSelectField8({
+          ...useSelectField9({
             label: { en: "Driver", es: "Controlador" },
             required: true,
             hint: { en: "Storage backend", es: "Backend de almacenamiento" },
@@ -11511,7 +11679,7 @@ var init_storage_entity = __esm({
           nullable: false,
           displayProps: { format: "bytes" }
         }),
-        allowed_mime_types: useTextField7({
+        allowed_mime_types: useTextField8({
           label: { en: "Allowed MIME Types", es: "Tipos MIME permitidos" },
           hint: { en: "Allowed types separated by comma (e.g. image/*,application/pdf)", es: "Tipos permitidos separados por coma (ej: image/*,application/pdf)" },
           size: 1e3,
@@ -11676,21 +11844,21 @@ var init_storage_entity = __esm({
       ],
       fields: {
         id: useIdField3(),
-        filename: useTextField7({
+        filename: useTextField8({
           label: { en: "Original Filename", es: "Nombre original" },
           required: true,
           size: 255,
           nullable: false,
           meta: { sortable: true, searchable: true }
         }),
-        disk_filename: useTextField7({
+        disk_filename: useTextField8({
           label: { en: "Disk Filename", es: "Nombre en disco" },
           required: true,
           hidden: true,
           size: 255,
           nullable: false
         }),
-        mimetype: useTextField7({
+        mimetype: useTextField8({
           label: { en: "MIME Type", es: "Tipo MIME" },
           required: true,
           size: 100,
@@ -11706,14 +11874,14 @@ var init_storage_entity = __esm({
           meta: { sortable: true },
           displayProps: { format: "bytes" }
         }),
-        folder: useTextField7({
+        folder: useTextField8({
           label: { en: "Folder", es: "Carpeta" },
           size: 100,
           nullable: true,
           index: true,
           meta: { searchable: true }
         }),
-        scope: useTextField7({
+        scope: useTextField8({
           label: { en: "Storage Scope", es: "\xC1mbito de almacenamiento" },
           hidden: true,
           size: 50,
@@ -11724,7 +11892,7 @@ var init_storage_entity = __esm({
             es: "\xC1mbito de configuraci\xF3n de almacenamiento usado para este archivo"
           }
         }),
-        path: useTextField7({
+        path: useTextField8({
           label: { en: "Full Path", es: "Ruta completa" },
           required: true,
           hidden: true,
@@ -11737,13 +11905,13 @@ var init_storage_entity = __esm({
           nullable: true,
           meta: { exportable: true, showInDisplay: false }
         }),
-        thumbnail_path: useTextField7({
+        thumbnail_path: useTextField8({
           label: { en: "Thumbnail Path", es: "Ruta de miniatura" },
           size: 500,
           nullable: true,
           meta: { showInDisplay: false }
         }),
-        hash: useTextField7({
+        hash: useTextField8({
           label: { en: "SHA256 Hash", es: "Hash SHA256" },
           hidden: true,
           size: 64,
@@ -12240,7 +12408,7 @@ var init_storage = __esm({
 });
 
 // src/modules/users/users.entity.ts
-import { useIdField as useIdField4, useSelectField as useSelectField9, useEmailField, usePasswordField, useTextField as useTextField8, useDatetimeField as useDatetimeField3, useCheckboxField as useCheckboxField4, useImageField as useImageField2, useNameField as useNameField2, useMetadataField as useMetadataField2, useDescriptionField as useDescriptionField2 } from "@gzl10/nexus-sdk/fields";
+import { useIdField as useIdField4, useSelectField as useSelectField10, useEmailField, usePasswordField, useTextField as useTextField9, useDatetimeField as useDatetimeField3, useCheckboxField as useCheckboxField4, useImageField as useImageField2, useNameField as useNameField2, useMetadataField as useMetadataField2, useDescriptionField as useDescriptionField2 } from "@gzl10/nexus-sdk/fields";
 import { z as z2 } from "zod";
 var userEntity, roleEntity, userRoleEntity;
 var init_users_entity = __esm({
@@ -12303,7 +12471,7 @@ var init_users_entity = __esm({
           nullable: true,
           meta: { exportable: true, showInForm: false, showInDisplay: false }
         }),
-        consent_version: useTextField8({
+        consent_version: useTextField9({
           label: { en: "Consent Version", es: "Versi\xF3n de consentimiento" },
           hidden: true,
           size: 20,
@@ -12314,7 +12482,7 @@ var init_users_entity = __esm({
           label: { en: "Marketing Opt-in", es: "Aceptar marketing" },
           meta: { exportable: true, showInForm: false, showInDisplay: false }
         }),
-        locale: useSelectField9({
+        locale: useSelectField10({
           label: { en: "Language", es: "Idioma" },
           options: [
             { value: "es", label: { en: "Spanish", es: "Espa\xF1ol" } },
@@ -12324,13 +12492,13 @@ var init_users_entity = __esm({
           meta: { sortable: true },
           defaultValue: "en"
         }),
-        timezone: useSelectField9({
+        timezone: useSelectField10({
           label: { en: "Timezone", es: "Zona horaria" },
           master: "timezones",
           meta: { sortable: true },
           defaultValue: "timezones:Europe/Madrid"
         }),
-        type: useSelectField9({
+        type: useSelectField10({
           label: { en: "Type", es: "Tipo" },
           defaultValue: "human",
           options: [
@@ -12499,7 +12667,7 @@ var init_users_entity = __esm({
       expose: false,
       fields: {
         id: useIdField4(),
-        user_id: useSelectField9({
+        user_id: useSelectField10({
           label: { en: "User", es: "Usuario" },
           required: true,
           table: "users",
@@ -12510,7 +12678,7 @@ var init_users_entity = __esm({
           labelField: "name",
           meta: { searchable: true }
         }),
-        role_id: useSelectField9({
+        role_id: useSelectField10({
           label: { en: "Role", es: "Rol" },
           required: true,
           table: "roles",
@@ -13454,7 +13622,7 @@ var init_users = __esm({
 });
 
 // src/modules/auth/auth.entity.ts
-import { useIdField as useIdField5, useTextField as useTextField9, useSelectField as useSelectField10, useDatetimeField as useDatetimeField4, useEmailField as useEmailField2, useMetadataField as useMetadataField3, useExpiresAtField } from "@gzl10/nexus-sdk/fields";
+import { useIdField as useIdField5, useTextField as useTextField10, useSelectField as useSelectField11, useDatetimeField as useDatetimeField4, useEmailField as useEmailField2, useMetadataField as useMetadataField3, useExpiresAtField } from "@gzl10/nexus-sdk/fields";
 var refreshTokenEntity, authIdentitiesEntity;
 var init_auth_entity = __esm({
   "src/modules/auth/auth.entity.ts"() {
@@ -13469,7 +13637,7 @@ var init_auth_entity = __esm({
       expose: false,
       fields: {
         id: useIdField5(),
-        token: useTextField9({
+        token: useTextField10({
           label: { en: "Token", es: "Token" },
           hidden: true,
           size: 255,
@@ -13496,14 +13664,14 @@ var init_auth_entity = __esm({
           nullable: true,
           meta: { sortable: true }
         }),
-        device_id: useTextField9({
+        device_id: useTextField10({
           label: { en: "Device ID", es: "ID de dispositivo" },
           size: 64,
           index: true,
           nullable: true,
           meta: { searchable: true }
         }),
-        device_name: useTextField9({
+        device_name: useTextField10({
           label: { en: "Device", es: "Dispositivo" },
           size: 100,
           nullable: true,
@@ -13535,7 +13703,7 @@ var init_auth_entity = __esm({
       order: 5,
       fields: {
         id: useIdField5(),
-        user_id: useSelectField10({
+        user_id: useSelectField11({
           label: { en: "User", es: "Usuario" },
           table: "users",
           column: "id",
@@ -13547,7 +13715,7 @@ var init_auth_entity = __esm({
           labelField: "name",
           meta: { searchable: true }
         }),
-        provider: useTextField9({
+        provider: useTextField10({
           label: { en: "Provider", es: "Proveedor" },
           required: true,
           size: 50,
@@ -13556,7 +13724,7 @@ var init_auth_entity = __esm({
           hint: { en: "e.g. pocketid, google, microsoft", es: "ej. pocketid, google, microsoft" },
           meta: { sortable: true, searchable: true }
         }),
-        provider_user_id: useTextField9({
+        provider_user_id: useTextField10({
           label: { en: "Provider User ID", es: "ID de usuario del proveedor" },
           required: true,
           size: 255,
@@ -13851,7 +14019,7 @@ var init_auth_middleware = __esm({
 });
 
 // src/modules/auth/auth.pat.entity.ts
-import { useIdField as useIdField6, useTextField as useTextField10, useSelectField as useSelectField11, useDatetimeField as useDatetimeField5, useExpiresAtField as useExpiresAtField2 } from "@gzl10/nexus-sdk/fields";
+import { useIdField as useIdField6, useTextField as useTextField11, useSelectField as useSelectField12, useDatetimeField as useDatetimeField5, useExpiresAtField as useExpiresAtField2 } from "@gzl10/nexus-sdk/fields";
 var personalTokenEntity;
 var init_auth_pat_entity = __esm({
   "src/modules/auth/auth.pat.entity.ts"() {
@@ -13868,7 +14036,7 @@ var init_auth_pat_entity = __esm({
       routePrefix: "/personal-tokens",
       fields: {
         id: useIdField6(),
-        user_id: useSelectField11({
+        user_id: useSelectField12({
           label: { en: "User", es: "Usuario" },
           table: "users",
           column: "id",
@@ -13880,7 +14048,7 @@ var init_auth_pat_entity = __esm({
           labelField: "name",
           meta: { searchable: true }
         }),
-        name: useTextField10({
+        name: useTextField11({
           label: { en: "Name", es: "Nombre" },
           required: true,
           size: 100,
@@ -13888,14 +14056,14 @@ var init_auth_pat_entity = __esm({
           hint: { en: "Descriptive name for this token", es: "Nombre descriptivo para este token" },
           meta: { searchable: true }
         }),
-        token_prefix: useTextField10({
+        token_prefix: useTextField11({
           label: { en: "Token", es: "Token" },
           size: 20,
           disabled: true,
           nullable: false,
           hint: { en: "Partial token for identification", es: "Token parcial para identificaci\xF3n" }
         }),
-        token_hash: useTextField10({
+        token_hash: useTextField11({
           label: { en: "Token Hash", es: "Hash del token" },
           size: 64,
           hidden: true,
@@ -13903,7 +14071,7 @@ var init_auth_pat_entity = __esm({
           unique: true,
           meta: { exportable: false }
         }),
-        scope: useSelectField11({
+        scope: useSelectField12({
           label: { en: "Permission", es: "Permiso" },
           required: true,
           options: [
@@ -15659,7 +15827,7 @@ var init_mail_service = __esm({
 });
 
 // src/modules/mail/mail.entity.ts
-import { useIdField as useIdField7, useTextField as useTextField11, useSelectField as useSelectField12, useNumberField as useNumberField5, useSwitchField as useSwitchField4, useEmailField as useEmailField3, usePasswordField as usePasswordField2, useTextareaField as useTextareaField3, useTagsField as useTagsField2, useDatetimeField as useDatetimeField6 } from "@gzl10/nexus-sdk/fields";
+import { useIdField as useIdField7, useTextField as useTextField12, useSelectField as useSelectField13, useNumberField as useNumberField5, useSwitchField as useSwitchField4, useEmailField as useEmailField3, usePasswordField as usePasswordField2, useTextareaField as useTextareaField3, useTagsField as useTagsField2, useDatetimeField as useDatetimeField6 } from "@gzl10/nexus-sdk/fields";
 import nodemailer2 from "nodemailer";
 async function getMailConfigFromDB(ctx) {
   const configService = ctx.services["config"];
@@ -15722,7 +15890,7 @@ var init_mail_entity = __esm({
       },
       fields: {
         id: useIdField7(),
-        host: useTextField11({
+        host: useTextField12({
           label: { en: "SMTP Host", es: "Host SMTP" },
           size: 255,
           nullable: false,
@@ -15742,7 +15910,7 @@ var init_mail_entity = __esm({
           nullable: false,
           hint: { en: "Default: SMTP_FROM env var", es: "Por defecto: variable SMTP_FROM" }
         }),
-        auth_user: useTextField11({
+        auth_user: useTextField12({
           label: { en: "Auth User", es: "Usuario de autenticaci\xF3n" },
           size: 255,
           nullable: true,
@@ -15774,12 +15942,12 @@ var init_mail_entity = __esm({
           required: true,
           validation: { format: "email" }
         }),
-        subject: useTextField11({
+        subject: useTextField12({
           label: { en: "Subject", es: "Asunto" },
           required: true,
           validation: { min: 1, max: 255 }
         }),
-        title: useTextField11({
+        title: useTextField12({
           label: { en: "Title", es: "T\xEDtulo" },
           hint: { en: "Large title in email header", es: "T\xEDtulo grande en la cabecera del correo" }
         }),
@@ -15923,20 +16091,20 @@ var init_mail_entity = __esm({
           nullable: false,
           meta: { sortable: true }
         }),
-        to: useTextField11({
+        to: useTextField12({
           label: { en: "Recipient(s)", es: "Destinatario(s)" },
           size: 1e3,
           nullable: false,
           meta: { searchable: true }
         }),
-        subject: useTextField11({
+        subject: useTextField12({
           label: { en: "Subject", es: "Asunto" },
           size: 255,
           nullable: false,
           meta: { searchable: true, sortable: true }
         }),
         status: {
-          ...useSelectField12({
+          ...useSelectField13({
             label: { en: "Status", es: "Estado" },
             options: [
               { value: "pending", label: { en: "Pending", es: "Pendiente" } },
@@ -15950,7 +16118,7 @@ var init_mail_entity = __esm({
           }),
           validation: { enum: ["pending", "sent", "failed", "bounced"] }
         },
-        message_id: useTextField11({
+        message_id: useTextField12({
           label: { en: "Message ID", es: "ID de mensaje" },
           hidden: true,
           size: 255,
@@ -15960,7 +16128,7 @@ var init_mail_entity = __esm({
           label: { en: "Error", es: "Error" },
           nullable: true
         }),
-        sent_by: useSelectField12({
+        sent_by: useSelectField13({
           label: { en: "Sent by", es: "Enviado por" },
           table: "users",
           column: "id",
@@ -16595,7 +16763,7 @@ var init_toggle_plugin_action = __esm({
 });
 
 // src/modules/plugins/plugins.entity.ts
-import { useTextField as useTextField12, useSelectField as useSelectField13, useCheckboxField as useCheckboxField5 } from "@gzl10/nexus-sdk/fields";
+import { useTextField as useTextField13, useSelectField as useSelectField14, useCheckboxField as useCheckboxField5 } from "@gzl10/nexus-sdk/fields";
 import { OFFICIAL_PLUGINS } from "@gzl10/nexus-sdk";
 var allowPluginManagement, pluginsEntity;
 var init_plugins_entity = __esm({
@@ -16614,30 +16782,30 @@ var init_plugins_entity = __esm({
       routePrefix: "/",
       defaultSort: { field: "name", order: "asc" },
       fields: {
-        name: useTextField12({
+        name: useTextField13({
           label: { en: "Name", es: "Nombre" },
           size: 50,
           nullable: false,
           meta: { sortable: true, searchable: true }
         }),
-        code: useTextField12({
+        code: useTextField13({
           label: { en: "Code", es: "C\xF3digo" },
           size: 10,
           nullable: false,
           meta: { sortable: true }
         }),
-        label: useTextField12({
+        label: useTextField13({
           label: { en: "Label", es: "Etiqueta" },
           size: 100,
           nullable: false,
           meta: { sortable: true }
         }),
-        version: useTextField12({
+        version: useTextField13({
           label: { en: "Version", es: "Versi\xF3n" },
           size: 20,
           nullable: false
         }),
-        category: useSelectField13({
+        category: useSelectField14({
           label: { en: "Category", es: "Categor\xEDa" },
           options: [
             { value: "content", label: { en: "Content", es: "Contenido" } },
@@ -16778,8 +16946,8 @@ var init_plugins = __esm({
 // src/modules/audit/audit.entity.ts
 import {
   useIdField as useIdField8,
-  useTextField as useTextField13,
-  useSelectField as useSelectField14,
+  useTextField as useTextField14,
+  useSelectField as useSelectField15,
   useTextareaField as useTextareaField4,
   useJsonField as useJsonField3,
   useDatetimeField as useDatetimeField7,
@@ -16802,7 +16970,7 @@ var init_audit_entity = __esm({
       fields: {
         id: useIdField8(),
         source: {
-          ...useTextField13({
+          ...useTextField14({
             label: { en: "Source", es: "Origen" },
             size: 100,
             nullable: false,
@@ -16812,7 +16980,7 @@ var init_audit_entity = __esm({
           validation: { min: 1, max: 100 }
         },
         action: {
-          ...useTextField13({
+          ...useTextField14({
             label: { en: "Action", es: "Acci\xF3n" },
             size: 100,
             nullable: false,
@@ -16821,7 +16989,7 @@ var init_audit_entity = __esm({
           }),
           validation: { min: 1, max: 100 }
         },
-        actor_id: useSelectField14({
+        actor_id: useSelectField15({
           label: { en: "Actor", es: "Actor" },
           table: "users",
           column: "id",
@@ -16838,20 +17006,20 @@ var init_audit_entity = __esm({
           nullable: true,
           meta: { searchable: true }
         }),
-        resource_type: useTextField13({
+        resource_type: useTextField14({
           label: { en: "Resource Type", es: "Tipo de recurso" },
           size: 100,
           nullable: true,
           index: true,
           meta: { searchable: true }
         }),
-        resource_id: useTextField13({
+        resource_id: useTextField14({
           label: { en: "Resource ID", es: "ID del recurso" },
           size: 100,
           nullable: true,
           meta: { searchable: true }
         }),
-        ip_address: useTextField13({
+        ip_address: useTextField14({
           label: { en: "IP Address", es: "Direcci\xF3n IP" },
           size: 45,
           nullable: true,
@@ -17618,6 +17786,7 @@ var init_error_codes = __esm({
       DB_CONSTRAINT_UNIQUE: "DB_CONSTRAINT_UNIQUE",
       DB_CONSTRAINT_FK: "DB_CONSTRAINT_FK",
       DB_CONNECTION_ERROR: "DB_CONNECTION_ERROR",
+      DATABASE_NOT_READY: "DATABASE_NOT_READY",
       // System
       SYSTEM_INTERNAL_ERROR: "SYSTEM_INTERNAL_ERROR"
     };
@@ -17941,7 +18110,7 @@ var init_env = __esm({
     envSchema = z8.object({
       NODE_ENV: z8.enum(["development", "production", "test"]).default("development"),
       PORT: z8.coerce.number().default(3e3),
-      CORS_ORIGIN: z8.string().default("http://localhost:3001"),
+      CORS_ORIGIN: z8.string().default("*"),
       BACKEND_URL: z8.string().optional(),
       DATABASE_URL: z8.string().default("file:./dev.db"),
       REDIS_URL: z8.string().url().optional(),
@@ -20210,10 +20379,31 @@ var init_base_service = __esm({
        * Override in subclasses for entity-specific search
        */
       applySearch(qb, search) {
+        const searchTerm = `%${search}%`;
+        const searchableFields = [];
+        const fields = "fields" in this.definition ? this.definition.fields : {};
+        for (const [name, field] of Object.entries(fields)) {
+          if (field.meta?.searchable) {
+            searchableFields.push(name);
+          }
+        }
         if ("labelField" in this.definition && this.definition.labelField) {
-          const labelField = this.definition.labelField;
-          qb.where(labelField, "like", `%${search}%`);
+          const lf = this.definition.labelField;
+          if (!searchableFields.includes(lf)) {
+            searchableFields.unshift(lf);
+          }
         }
+        if (searchableFields.length === 0) return qb;
+        qb.where(function() {
+          for (const fieldName of searchableFields) {
+            const field = fields[fieldName];
+            if (field?.db?.type === "json") {
+              this.orWhereRaw(`CAST(?? AS TEXT) LIKE ?`, [fieldName, searchTerm]);
+            } else {
+              this.orWhere(fieldName, "like", searchTerm);
+            }
+          }
+        });
         return qb;
       }
       /**
@@ -23687,15 +23877,6 @@ var init_ensure_system_tables = __esm({
   }
 });
 
-// src/cli/shared.ts
-import { consola } from "consola";
-var init_shared = __esm({
-  "src/cli/shared.ts"() {
-    "use strict";
-    init_logger();
-  }
-});
-
 // src/db/migration-sources.ts
 function buildMigrationSources() {
   const sources = [
@@ -23715,9 +23896,7 @@ function buildMigrationSources() {
 var init_migration_sources = __esm({
   "src/db/migration-sources.ts"() {
     "use strict";
-    init_shared();
     init_paths();
-    init_plugin_ops();
     init_module_store();
   }
 });
@@ -24995,6 +25174,10 @@ function handleDbError(err) {
       { path: "foreignKey", message: "Foreign key constraint violation" }
     ]);
   }
+  if (code === "42P01" || code === "ER_NO_SUCH_TABLE" || dbErr.errno === 1146 || msg.includes("no such table")) {
+    logger.error({ err }, "Database table not found \u2014 database may need migration or was wiped");
+    throw new AppError({ code: ErrorCodes.DATABASE_NOT_READY, message: "Database not ready" }, 503);
+  }
   logger.error({ err }, "Unexpected database error");
   throw new AppError({ code: ErrorCodes.SYSTEM_INTERNAL_ERROR, message: "Internal database error" }, 500);
 }
@@ -27277,6 +27460,33 @@ async function setupModuleRoutes(app) {
     }
   }
   const caslRegistry = /* @__PURE__ */ new Map();
+  function mergeActionPermissions(existing, incoming) {
+    const merged = { ...existing };
+    for (const [role, perm] of Object.entries(incoming)) {
+      if (!merged[role]) {
+        merged[role] = perm;
+      } else {
+        const existingArr = Array.isArray(merged[role]) ? merged[role] : [merged[role]];
+        const incomingArr = Array.isArray(perm) ? perm : [perm];
+        merged[role] = [...existingArr, ...incomingArr];
+      }
+    }
+    return merged;
+  }
+  function registerActionCasl(action) {
+    const casl = action.casl;
+    if (!casl || !("subject" in casl) || !casl.subject || !("permissions" in casl) || !casl.permissions) return;
+    const subject2 = casl.subject;
+    const existing = caslRegistry.get(subject2);
+    if (existing) {
+      existing.permissions = mergeActionPermissions(existing.permissions, casl.permissions);
+    } else {
+      caslRegistry.set(subject2, {
+        subject: subject2,
+        permissions: casl.permissions ?? {}
+      });
+    }
+  }
   for (const mod of modules) {
     for (const def of mod.definitions ?? []) {
       const casl = def.casl;
@@ -27286,6 +27496,12 @@ async function setupModuleRoutes(app) {
         subject: casl.subject,
         permissions: casl.permissions ?? {}
       });
+      for (const action of def.actions ?? []) {
+        registerActionCasl(action);
+      }
+    }
+    for (const action of mod.actions ?? []) {
+      registerActionCasl(action);
     }
   }
   setEntityDefinitions(caslRegistry);
@@ -27670,7 +27886,7 @@ function isFrpcInstalled() {
     return false;
   }
 }
-function startTunnel(config3) {
+async function startTunnel(config3) {
   if (tunnelProcess) return true;
   if (!isFrpcInstalled()) {
     logger.warn("frpc binary not found \u2014 tunnel disabled. Install with: brew install frp");
@@ -27682,24 +27898,49 @@ function startTunnel(config3) {
   tunnelProcess = spawn("frpc", ["-c", tmpConfigPath], {
     stdio: ["ignore", "pipe", "pipe"]
   });
-  tunnelProcess.stdout?.on("data", (data) => {
-    const msg = data.toString().trim();
-    if (msg) logger.debug({ component: "tunnel" }, msg);
-  });
-  tunnelProcess.stderr?.on("data", (data) => {
-    const msg = data.toString().trim();
-    if (msg) logger.warn({ component: "tunnel" }, msg);
-  });
-  tunnelProcess.on("exit", (code) => {
-    if (code !== 0 && code !== null) {
-      logger.warn({ code, component: "tunnel" }, "frpc exited unexpectedly");
-    }
-    tunnelProcess = null;
-    cleanupConfig();
+  outputBuffer = "";
+  const stripAnsi = (s) => s.replace(/\x1b\[[0-9;]*m/g, "");
+  return new Promise((resolve2) => {
+    let settled = false;
+    const collectOutput = (data) => {
+      const msg = stripAnsi(data.toString()).trim();
+      if (!msg) return;
+      outputBuffer += msg + "\n";
+      logger.debug({ component: "tunnel" }, msg);
+      if (!settled && msg.includes("start proxy success")) {
+        settled = true;
+        const url = getTunnelUrl(config3.subdomain, config3.server);
+        logger.info({ url, component: "tunnel" }, `Tunnel active \u2192 ${url}`);
+        resolve2(true);
+      }
+    };
+    tunnelProcess.stdout?.on("data", collectOutput);
+    tunnelProcess.stderr?.on("data", collectOutput);
+    tunnelProcess.on("exit", (code) => {
+      if (code !== 0 && code !== null) {
+        const output = outputBuffer.trim();
+        const hint = output.includes("authorization failed") || output.includes("auth failed") || output.includes("invalid token") ? " \u2014 check FRPC_TOKEN is correct" : output.includes("login to the server failed") ? ` \u2014 ${output.split("\n").pop()}` : "";
+        logger.error(
+          { code, reason: output || void 0, component: "tunnel" },
+          `frpc failed to start${hint}`
+        );
+      }
+      tunnelProcess = null;
+      outputBuffer = "";
+      cleanupConfig();
+      if (!settled) {
+        settled = true;
+        resolve2(false);
+      }
+    });
+    setTimeout(() => {
+      if (!settled) {
+        settled = true;
+        logger.warn({ component: "tunnel" }, "frpc connection timeout (5s) \u2014 tunnel may not be active");
+        resolve2(false);
+      }
+    }, 5e3);
   });
-  const url = getTunnelUrl(config3.subdomain, config3.server);
-  logger.info({ url, component: "tunnel" }, `Tunnel enabled \u2192 ${url}`);
-  return true;
 }
 function stopTunnel() {
   if (tunnelProcess) {
@@ -27717,13 +27958,244 @@ function cleanupConfig() {
     tmpConfigPath = null;
   }
 }
-var tunnelProcess, tmpConfigPath;
+var tunnelProcess, tmpConfigPath, outputBuffer;
 var init_tunnel = __esm({
   "src/core/tunnel.ts"() {
     "use strict";
     init_core();
     tunnelProcess = null;
     tmpConfigPath = null;
+    outputBuffer = "";
+  }
+});
+
+// src/cli/shared.ts
+import { consola } from "consola";
+function initCli() {
+  const config3 = getLoggerConfig();
+  initLoggerService({ ...config3, level: "error", sentry: void 0 });
+  setLoggerInstance(getPinoLogger());
+}
+var init_shared = __esm({
+  "src/cli/shared.ts"() {
+    "use strict";
+    init_logger();
+  }
+});
+
+// src/cli/migrate-commands.ts
+import { readFileSync as readFileSync8, existsSync as existsSync12 } from "fs";
+import { join as join14 } from "path";
+import { pathToFileURL as pathToFileURL3 } from "url";
+import Table from "cli-table3";
+import { consola as consola2 } from "consola";
+async function loadSelfPlugin() {
+  const projectPath2 = getProjectPath();
+  const pkgPath = join14(projectPath2, "package.json");
+  if (!existsSync12(pkgPath)) return;
+  try {
+    const pkg2 = JSON.parse(readFileSync8(pkgPath, "utf-8"));
+    const pkgName = pkg2?.name;
+    if (!pkgName || !/nexus-plugin-/.test(pkgName)) return;
+    const srcEntry = join14(projectPath2, "src", "index.ts");
+    const distEntry = join14(projectPath2, "dist", "index.js");
+    if (existsSync12(srcEntry)) {
+      try {
+        const { tsImport } = await import("tsx/esm/api");
+        const mod = await tsImport(
+          pathToFileURL3(srcEntry).href,
+          import.meta.url
+        );
+        const manifest = extractPluginManifest(mod);
+        if (manifest) {
+          if (!manifest.migrationsDir) {
+            manifest.migrationsDir = join14(projectPath2, "migrations");
+          }
+          registerPlugin(manifest);
+          return;
+        }
+      } catch (err) {
+        console.error(`  \u26A0 Failed to load plugin src/index.ts: ${err.message}`);
+      }
+    }
+    if (existsSync12(distEntry)) {
+      try {
+        const mod = await import(pathToFileURL3(distEntry).href);
+        const manifest = extractPluginManifest(mod);
+        if (manifest) {
+          if (!manifest.migrationsDir) {
+            manifest.migrationsDir = join14(projectPath2, "migrations");
+          }
+          registerPlugin(manifest);
+          return;
+        }
+      } catch (err) {
+        console.error(`  \u26A0 Failed to load plugin dist/index.js: ${err.message}`);
+      }
+    }
+  } catch {
+  }
+}
+async function loadModulesForMigration() {
+  loadCoreModules();
+  await loadSelfPlugin();
+  const config3 = await loadNexusConfig();
+  if (config3.plugins?.length) {
+    const sorted = topologicalSortPlugins(config3.plugins);
+    for (const plugin of sorted) {
+      registerPlugin(plugin);
+    }
+  }
+  const coreNames = new Set(getOrderedModules().map((m2) => m2.name));
+  for (const mod of config3.modules ?? []) {
+    if (!coreNames.has(mod.name)) {
+      registerModule(mod, { source: "standalone" });
+    }
+  }
+}
+var init_migrate_commands = __esm({
+  "src/cli/migrate-commands.ts"() {
+    "use strict";
+    init_database();
+    init_engine();
+    init_load_config();
+    init_shared();
+    init_paths();
+    init_connection();
+    init_ensure_system_tables();
+    init_migration_generator();
+    init_migration_runner();
+  }
+});
+
+// src/cli/seed-commands.ts
+var seed_commands_exports = {};
+__export(seed_commands_exports, {
+  handleSeedExport: () => handleSeedExport,
+  importSeedFiles: () => importSeedFiles
+});
+import { existsSync as existsSync13, mkdirSync as mkdirSync6, writeFileSync as writeFileSync3, readdirSync as readdirSync2, readFileSync as readFileSync9 } from "fs";
+import { join as join15, basename as basename4 } from "path";
+import { consola as consola3 } from "consola";
+function deserializeJsonFields(record, fields) {
+  const result = { ...record };
+  for (const [name, field] of Object.entries(fields)) {
+    if (field.db?.type === "json" && typeof result[name] === "string") {
+      try {
+        result[name] = JSON.parse(result[name]);
+      } catch {
+      }
+    }
+  }
+  return result;
+}
+function serializeJsonFields(record, fields) {
+  const result = { ...record };
+  for (const [name, field] of Object.entries(fields)) {
+    if (field.db?.type === "json" && typeof result[name] === "object" && result[name] !== null) {
+      result[name] = JSON.stringify(result[name]);
+    }
+  }
+  return result;
+}
+async function handleSeedExport(entity) {
+  initCli();
+  await loadModulesForMigration();
+  const db2 = getDb();
+  try {
+    const modules = getOrderedModules();
+    const seedDir = join15(getProjectPath(), "data", "seeds");
+    const seedableEntities = [];
+    for (const mod of modules) {
+      for (const def of mod.definitions ?? []) {
+        if (!("seedable" in def) || !def.seedable) continue;
+        if (entity && def.table !== entity) continue;
+        seedableEntities.push({
+          module: mod.name,
+          table: def.table,
+          fields: def.fields
+        });
+      }
+    }
+    if (seedableEntities.length === 0) {
+      if (entity) {
+        consola3.warn(`No seedable entity found with table "${entity}"`);
+      } else {
+        consola3.warn("No seedable entities found");
+      }
+      return;
+    }
+    if (!existsSync13(seedDir)) {
+      mkdirSync6(seedDir, { recursive: true });
+    }
+    for (const { module: modName, table, fields } of seedableEntities) {
+      const rows = await db2(table).orderBy("id");
+      if (rows.length === 0) {
+        consola3.info(`${table}: no records, skipping`);
+        continue;
+      }
+      const exported = rows.map(
+        (row) => deserializeJsonFields(row, fields)
+      );
+      const filePath = join15(seedDir, `${table}.json`);
+      writeFileSync3(filePath, JSON.stringify(exported, null, 2) + "\n", "utf-8");
+      consola3.success(`${table}: exported ${rows.length} records to data/seeds/${table}.json (module: ${modName})`);
+    }
+  } catch (err) {
+    consola3.error("Seed export failed:", err);
+  } finally {
+    await db2.destroy();
+    process.exit(0);
+  }
+}
+async function importSeedFiles(db2, modules, logger2) {
+  const seedDir = join15(getProjectPath(), "data", "seeds");
+  if (!existsSync13(seedDir)) return;
+  const files = readdirSync2(seedDir).filter((f) => f.endsWith(".json"));
+  if (files.length === 0) return;
+  const seedableDefs = /* @__PURE__ */ new Map();
+  for (const mod of modules) {
+    for (const rawDef of mod.definitions ?? []) {
+      const def = rawDef;
+      if (!def["seedable"] || !def["table"] || !def["fields"]) continue;
+      seedableDefs.set(
+        def["table"],
+        { fields: def["fields"], module: mod.name }
+      );
+    }
+  }
+  for (const file of files) {
+    const table = basename4(file, ".json");
+    const defInfo = seedableDefs.get(table);
+    if (!defInfo) {
+      logger2.debug(`data/seeds/${file}: skipped (entity "${table}" is not seedable)`);
+      continue;
+    }
+    const filePath = join15(seedDir, file);
+    const raw = readFileSync9(filePath, "utf-8");
+    let records;
+    try {
+      records = JSON.parse(raw);
+    } catch {
+      logger2.info(`data/seeds/${file}: skipped (invalid JSON)`);
+      continue;
+    }
+    if (!Array.isArray(records) || records.length === 0) continue;
+    const rows = records.map((r) => serializeJsonFields(r, defInfo.fields));
+    for (const row of rows) {
+      await db2(table).insert(row).onConflict("id").merge();
+    }
+    logger2.info(`Seeded ${rows.length} records into ${table} from data/seeds/${file}`);
+  }
+}
+var init_seed_commands = __esm({
+  "src/cli/seed-commands.ts"() {
+    "use strict";
+    init_engine();
+    init_paths();
+    init_connection();
+    init_shared();
+    init_migrate_commands();
   }
 });
 
@@ -28046,6 +28518,15 @@ ${dirs}`);
   }
   const allDefinitions = modules.flatMap((m2) => m2.definitions ?? []);
   await createMemoryTables(allDefinitions);
+  try {
+    const { importSeedFiles: importSeedFiles2 } = await Promise.resolve().then(() => (init_seed_commands(), seed_commands_exports));
+    await importSeedFiles2(ctx.db.knex, modules, {
+      info: (msg) => logger.info(msg),
+      debug: (msg) => logger.debug(msg)
+    });
+  } catch (err) {
+    logger.debug({ err }, "Seed file import skipped (no data/seeds/ or error)");
+  }
   logger.debug("Running seeds...");
   for (const mod of modules) {
     try {
@@ -28087,8 +28568,8 @@ async function start(config3) {
   }
   currentConfig = config3;
   setLocales(config3?.locales ?? DEFAULT_LOCALES2);
-  if (env.NODE_ENV === "development" && env.FRPC_SERVER && env.FRPC_SUBDOMAIN && !env.BACKEND_URL) {
-    process.env["BACKEND_URL"] = getTunnelUrl(env.FRPC_SUBDOMAIN, env.FRPC_SERVER);
+  if (env.NODE_ENV === "development" && env.FRPC_SERVER && !env.TRUST_PROXY) {
+    process.env["TRUST_PROXY"] = "true";
   }
   const resolved = resolveConfig();
   if (resolved.port > 0) {
@@ -28147,14 +28628,18 @@ async function start(config3) {
       eventBridge.init();
       const addr = server.address();
       const actualPort = typeof addr === "object" && addr ? addr.port : resolved.port;
+      let tunnelActive = false;
       if (env.NODE_ENV === "development" && env.FRPC_SERVER && env.FRPC_SUBDOMAIN) {
-        startTunnel({
+        tunnelActive = await startTunnel({
           server: env.FRPC_SERVER,
           serverPort: env.FRPC_SERVER_PORT,
           token: env.FRPC_TOKEN,
           subdomain: env.FRPC_SUBDOMAIN,
           localPort: actualPort
         });
+        if (tunnelActive && !env.BACKEND_URL) {
+          process.env["BACKEND_URL"] = getTunnelUrl(env.FRPC_SUBDOMAIN, env.FRPC_SERVER);
+        }
       }
       const baseUrl = env.BACKEND_URL || `http://localhost:${actualPort}`;
       logger.debug({ libPath: getLibPath(), projectPath: getProjectPath() }, "Paths");