@infuro/cms-core 1.0.9 → 1.0.11

package/dist/auth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/auth/helpers.ts","../src/auth/middleware.ts","../src/auth/nextauth-options.ts"],"sourcesContent":["export interface SessionUser {\n  id?: string;\n  email?: string | null;\n  name?: string | null;\n  groupId?: number;\n  permissions?: string[];\n}\n\nexport type GetSession = () => Promise<{ user?: SessionUser } | null>;\n\nexport const OPEN_ENDPOINTS: Array<Record<string, string[]>> = [\n  { '/api/contacts': ['POST'] },\n  { '/api/form-submissions': ['POST'] },\n  { '/api/blogs': ['GET'] },\n];\n\nexport const PERMISSION_REQUIRED_ENDPOINTS: Record<string, string[]> = {};\n\nexport function isOpenEndpoint(pathname: string): boolean {\n  return OPEN_ENDPOINTS.some((endpoint) => pathname.startsWith(Object.keys(endpoint)[0]));\n}\n\nexport function getRequiredPermission(pathname: string): string[] | null {\n  return null;\n}\n\nexport function isPublicMethod(pathname: string, method: string): boolean {\n  for (const endpoint of OPEN_ENDPOINTS) {\n    const key = Object.keys(endpoint)[0];\n    if (pathname.startsWith(key) && endpoint[key].includes(method)) return true;\n  }\n  return false;\n}\n\nexport interface AuthHelpers {\n  requireAuth(req: Request): Promise<Response | null>;\n  requirePermission(req: Request, permission: string): Promise<Response | null>;\n  getAuthenticatedUser(): Promise<SessionUser | null>;\n}\n\nexport function createAuthHelpers(getSession: GetSession, NextResponse: { json: (body: unknown, init?: { status?: number }) => Response }): AuthHelpers {\n  return {\n    async requireAuth() {\n      const session = await getSession();\n      if (!session?.user?.email) {\n        return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });\n      }\n      return null;\n    },\n    async requirePermission() {\n      const session = await getSession();\n      if (!session?.user?.email) {\n        return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });\n      }\n      return null;\n    },\n    async getAuthenticatedUser() {\n      const session = await getSession();\n      return session?.user ?? null;\n    },\n  };\n}\n","export interface CmsMiddlewareConfig {\n  publicAdminPaths?: string[];\n  publicApiPaths?: string[];\n  /** path -> allowed methods */\n  publicApiMethods?: Record<string, string[]>;\n  signInPath?: string;\n  getSessionToken?: (request: { cookies: { get: (name: string) => { value?: string } | undefined } }) => string | undefined;\n}\n\n/** Default public API paths (no auth). Sites should extend this with their own routes. */\nexport const defaultPublicApiMethods: Record<string, string[]> = {\n  '/api/contacts': ['POST'],\n  '/api/form-submissions': ['POST'],\n  '/api/blogs': ['GET'],\n  '/api/forms': ['GET'],\n  '/api/auth': ['GET', 'POST'],\n  '/api/health': ['GET'],\n  '/api/users/forgot-password': ['POST'],\n  '/api/users/set-password': ['POST'],\n  '/api/users/invite': ['POST'],\n};\n\nfunction defaultGetSessionToken(request: { cookies: { get: (name: string) => { value?: string } | undefined } }): string | undefined {\n  return (\n    request.cookies.get('__Secure-next-auth.session-token')?.value ??\n    request.cookies.get('next-auth.session-token')?.value\n  );\n}\n\nfunction isPublicMethod(pathname: string, method: string, publicApiMethods: Record<string, string[]>): boolean {\n  for (const [endpoint, methods] of Object.entries(publicApiMethods)) {\n    if (pathname.startsWith(endpoint) && methods.includes(method)) return true;\n  }\n  return false;\n}\n\n/**\n * Returns middleware logic. Use from Next.js middleware:\n *   import { createCmsMiddleware } from '@infuro/cms-core';\n *   export const middleware = createCmsMiddleware({ ... });\n *   export const config = { matcher: ['/admin/:path*', '/api/:path*'] };\n */\nexport function createCmsMiddleware(config: CmsMiddlewareConfig = {}) {\n  const {\n    publicAdminPaths = ['/admin/signin', '/admin/forgot-password', '/admin/reset-password', '/admin/invite'],\n    publicApiMethods = defaultPublicApiMethods,\n    signInPath = '/admin/signin',\n    getSessionToken = defaultGetSessionToken,\n  } = config;\n\n  return function cmsMiddleware(request: {\n    nextUrl: { pathname: string };\n    url: string;\n    method: string;\n    cookies: { get: (name: string) => { value?: string } | undefined };\n  }): { type: 'next' } | { type: 'redirect'; url: string } | { type: 'json'; status: number; body: unknown } {\n    const pathname = request.nextUrl.pathname;\n    const method = request.method;\n\n    if (publicAdminPaths.some((p) => pathname === p || pathname.startsWith(p + '/'))) {\n      return { type: 'next' };\n    }\n\n    if (pathname.startsWith('/admin')) {\n      const token = getSessionToken(request);\n      if (!token) {\n        return { type: 'redirect', url: new URL(signInPath, request.url).toString() };\n      }\n    }\n\n    if (pathname.startsWith('/api')) {\n      if (isPublicMethod(pathname, method, publicApiMethods)) {\n        return { type: 'next' };\n      }\n      const token = getSessionToken(request);\n      if (!token) {\n        return { type: 'json', status: 401, body: { error: 'Unauthorized' } };\n      }\n    }\n\n    return { type: 'next' };\n  };\n}\n","/**\n * Build NextAuth options for credentials auth. App can extend/override via extend().\n */\nimport type { NextAuthOptions } from 'next-auth';\nimport _CredentialsProvider from 'next-auth/providers/credentials';\nconst CredentialsProvider = (_CredentialsProvider as unknown as { default: typeof _CredentialsProvider }).default ?? _CredentialsProvider;\n\nexport interface NextAuthUser {\n  id: number;\n  email: string;\n  name: string | null;\n  password: string | null;\n  blocked?: boolean;\n  deleted?: boolean;\n  groupId?: number | null;\n  group?: { permissions?: unknown[] };\n}\n\nexport interface NextAuthOptionsConfig {\n  /** Resolve user by email (e.g. from TypeORM). Return null if not found. */\n  getUserByEmail: (email: string) => Promise<NextAuthUser | null>;\n  comparePassword: (plain: string, hash: string) => Promise<boolean>;\n  signInPage?: string;\n  secret?: string;\n  extend?: (options: NextAuthOptions) => NextAuthOptions;\n}\n\nexport function getNextAuthOptions(config: NextAuthOptionsConfig): NextAuthOptions {\n  const { getUserByEmail, comparePassword, signInPage = '/admin/signin', secret, extend } = config;\n\n  const options: NextAuthOptions = {\n    secret: secret ?? process.env.NEXTAUTH_SECRET,\n    providers: [\n      CredentialsProvider({\n        name: 'credentials',\n        credentials: {\n          email: { label: 'Email', type: 'email' },\n          password: { label: 'Password', type: 'password' },\n        },\n        async authorize(credentials) {\n          if (!credentials?.email || !credentials?.password) return null;\n          try {\n            const user = await getUserByEmail(credentials.email);\n            if (!user || user.blocked || (user as { deleted?: boolean }).deleted || !user.password) return null;\n            const valid = await comparePassword(credentials.password, user.password);\n            if (!valid) return null;\n            return {\n              id: user.id.toString(),\n              email: user.email,\n              name: user.name,\n              groupId: user.groupId ?? undefined,\n              permissions: ['admin'],\n            };\n          } catch {\n            return null;\n          }\n        },\n      }),\n    ],\n    session: { strategy: 'jwt' },\n    pages: { signIn: signInPage },\n    cookies: {\n      sessionToken: {\n        name: process.env.NEXTAUTH_URL?.startsWith('https')\n          ? '__Secure-next-auth.session-token'\n          : 'next-auth.session-token',\n        options: {\n          httpOnly: true,\n          sameSite: 'lax',\n          path: '/',\n          secure: process.env.NEXTAUTH_URL?.startsWith('https') ?? false,\n        },\n      },\n    },\n    callbacks: {\n      async jwt({ token, user }) {\n        if (user) {\n          (token as Record<string, unknown>).id = user.id;\n          (token as Record<string, unknown>).groupId = (user as { groupId?: number }).groupId;\n          (token as Record<string, unknown>).permissions = (user as { permissions?: string[] }).permissions;\n        }\n        return token;\n      },\n      async session({ session, token }) {\n        if (session.user) {\n          (session.user as Record<string, unknown>).id = (token as Record<string, unknown>).id;\n          (session.user as Record<string, unknown>).groupId = (token as Record<string, unknown>).groupId;\n          (session.user as Record<string, unknown>).permissions = (token as Record<string, unknown>).permissions;\n        }\n        return session;\n      },\n    },\n  };\n\n  return extend ? extend(options) : options;\n}\n"],"mappings":";AAUO,IAAM,iBAAkD;AAAA,EAC7D,EAAE,iBAAiB,CAAC,MAAM,EAAE;AAAA,EAC5B,EAAE,yBAAyB,CAAC,MAAM,EAAE;AAAA,EACpC,EAAE,cAAc,CAAC,KAAK,EAAE;AAC1B;AAEO,IAAM,gCAA0D,CAAC;AAEjE,SAAS,eAAe,UAA2B;AACxD,SAAO,eAAe,KAAK,CAAC,aAAa,SAAS,WAAW,OAAO,KAAK,QAAQ,EAAE,CAAC,CAAC,CAAC;AACxF;AAEO,SAAS,sBAAsB,UAAmC;AACvE,SAAO;AACT;AAEO,SAAS,eAAe,UAAkB,QAAyB;AACxE,aAAW,YAAY,gBAAgB;AACrC,UAAM,MAAM,OAAO,KAAK,QAAQ,EAAE,CAAC;AACnC,QAAI,SAAS,WAAW,GAAG,KAAK,SAAS,GAAG,EAAE,SAAS,MAAM,EAAG,QAAO;AAAA,EACzE;AACA,SAAO;AACT;AAQO,SAAS,kBAAkB,YAAwB,cAA8F;AACtJ,SAAO;AAAA,IACL,MAAM,cAAc;AAClB,YAAM,UAAU,MAAM,WAAW;AACjC,UAAI,CAAC,SAAS,MAAM,OAAO;AACzB,eAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACrE;AACA,aAAO;AAAA,IACT;AAAA,IACA,MAAM,oBAAoB;AACxB,YAAM,UAAU,MAAM,WAAW;AACjC,UAAI,CAAC,SAAS,MAAM,OAAO;AACzB,eAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACrE;AACA,aAAO;AAAA,IACT;AAAA,IACA,MAAM,uBAAuB;AAC3B,YAAM,UAAU,MAAM,WAAW;AACjC,aAAO,SAAS,QAAQ;AAAA,IAC1B;AAAA,EACF;AACF;;;ACnDO,IAAM,0BAAoD;AAAA,EAC/D,iBAAiB,CAAC,MAAM;AAAA,EACxB,yBAAyB,CAAC,MAAM;AAAA,EAChC,cAAc,CAAC,KAAK;AAAA,EACpB,cAAc,CAAC,KAAK;AAAA,EACpB,aAAa,CAAC,OAAO,MAAM;AAAA,EAC3B,eAAe,CAAC,KAAK;AAAA,EACrB,8BAA8B,CAAC,MAAM;AAAA,EACrC,2BAA2B,CAAC,MAAM;AAAA,EAClC,qBAAqB,CAAC,MAAM;AAC9B;AAEA,SAAS,uBAAuB,SAAqG;AACnI,SACE,QAAQ,QAAQ,IAAI,kCAAkC,GAAG,SACzD,QAAQ,QAAQ,IAAI,yBAAyB,GAAG;AAEpD;AAEA,SAASA,gBAAe,UAAkB,QAAgB,kBAAqD;AAC7G,aAAW,CAAC,UAAU,OAAO,KAAK,OAAO,QAAQ,gBAAgB,GAAG;AAClE,QAAI,SAAS,WAAW,QAAQ,KAAK,QAAQ,SAAS,MAAM,EAAG,QAAO;AAAA,EACxE;AACA,SAAO;AACT;AAQO,SAAS,oBAAoB,SAA8B,CAAC,GAAG;AACpE,QAAM;AAAA,IACJ,mBAAmB,CAAC,iBAAiB,0BAA0B,yBAAyB,eAAe;AAAA,IACvG,mBAAmB;AAAA,IACnB,aAAa;AAAA,IACb,kBAAkB;AAAA,EACpB,IAAI;AAEJ,SAAO,SAAS,cAAc,SAK6E;AACzG,UAAM,WAAW,QAAQ,QAAQ;AACjC,UAAM,SAAS,QAAQ;AAEvB,QAAI,iBAAiB,KAAK,CAAC,MAAM,aAAa,KAAK,SAAS,WAAW,IAAI,GAAG,CAAC,GAAG;AAChF,aAAO,EAAE,MAAM,OAAO;AAAA,IACxB;AAEA,QAAI,SAAS,WAAW,QAAQ,GAAG;AACjC,YAAM,QAAQ,gBAAgB,OAAO;AACrC,UAAI,CAAC,OAAO;AACV,eAAO,EAAE,MAAM,YAAY,KAAK,IAAI,IAAI,YAAY,QAAQ,GAAG,EAAE,SAAS,EAAE;AAAA,MAC9E;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,MAAM,GAAG;AAC/B,UAAIA,gBAAe,UAAU,QAAQ,gBAAgB,GAAG;AACtD,eAAO,EAAE,MAAM,OAAO;AAAA,MACxB;AACA,YAAM,QAAQ,gBAAgB,OAAO;AACrC,UAAI,CAAC,OAAO;AACV,eAAO,EAAE,MAAM,QAAQ,QAAQ,KAAK,MAAM,EAAE,OAAO,eAAe,EAAE;AAAA,MACtE;AAAA,IACF;AAEA,WAAO,EAAE,MAAM,OAAO;AAAA,EACxB;AACF;;;AC9EA,OAAO,0BAA0B;AACjC,IAAM,sBAAuB,qBAA6E,WAAW;AAsB9G,SAAS,mBAAmB,QAAgD;AACjF,QAAM,EAAE,gBAAgB,iBAAiB,aAAa,iBAAiB,QAAQ,OAAO,IAAI;AAE1F,QAAM,UAA2B;AAAA,IAC/B,QAAQ,UAAU,QAAQ,IAAI;AAAA,IAC9B,WAAW;AAAA,MACT,oBAAoB;AAAA,QAClB,MAAM;AAAA,QACN,aAAa;AAAA,UACX,OAAO,EAAE,OAAO,SAAS,MAAM,QAAQ;AAAA,UACvC,UAAU,EAAE,OAAO,YAAY,MAAM,WAAW;AAAA,QAClD;AAAA,QACA,MAAM,UAAU,aAAa;AAC3B,cAAI,CAAC,aAAa,SAAS,CAAC,aAAa,SAAU,QAAO;AAC1D,cAAI;AACF,kBAAM,OAAO,MAAM,eAAe,YAAY,KAAK;AACnD,gBAAI,CAAC,QAAQ,KAAK,WAAY,KAA+B,WAAW,CAAC,KAAK,SAAU,QAAO;AAC/F,kBAAM,QAAQ,MAAM,gBAAgB,YAAY,UAAU,KAAK,QAAQ;AACvE,gBAAI,CAAC,MAAO,QAAO;AACnB,mBAAO;AAAA,cACL,IAAI,KAAK,GAAG,SAAS;AAAA,cACrB,OAAO,KAAK;AAAA,cACZ,MAAM,KAAK;AAAA,cACX,SAAS,KAAK,WAAW;AAAA,cACzB,aAAa,CAAC,OAAO;AAAA,YACvB;AAAA,UACF,QAAQ;AACN,mBAAO;AAAA,UACT;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IACA,SAAS,EAAE,UAAU,MAAM;AAAA,IAC3B,OAAO,EAAE,QAAQ,WAAW;AAAA,IAC5B,SAAS;AAAA,MACP,cAAc;AAAA,QACZ,MAAM,QAAQ,IAAI,cAAc,WAAW,OAAO,IAC9C,qCACA;AAAA,QACJ,SAAS;AAAA,UACP,UAAU;AAAA,UACV,UAAU;AAAA,UACV,MAAM;AAAA,UACN,QAAQ,QAAQ,IAAI,cAAc,WAAW,OAAO,KAAK;AAAA,QAC3D;AAAA,MACF;AAAA,IACF;AAAA,IACA,WAAW;AAAA,MACT,MAAM,IAAI,EAAE,OAAO,KAAK,GAAG;AACzB,YAAI,MAAM;AACR,UAAC,MAAkC,KAAK,KAAK;AAC7C,UAAC,MAAkC,UAAW,KAA8B;AAC5E,UAAC,MAAkC,cAAe,KAAoC;AAAA,QACxF;AACA,eAAO;AAAA,MACT;AAAA,MACA,MAAM,QAAQ,EAAE,SAAS,MAAM,GAAG;AAChC,YAAI,QAAQ,MAAM;AAChB,UAAC,QAAQ,KAAiC,KAAM,MAAkC;AAClF,UAAC,QAAQ,KAAiC,UAAW,MAAkC;AACvF,UAAC,QAAQ,KAAiC,cAAe,MAAkC;AAAA,QAC7F;AACA,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAEA,SAAO,SAAS,OAAO,OAAO,IAAI;AACpC;","names":["isPublicMethod"]}
+{"version":3,"sources":["../src/auth/permission-entities.ts","../src/auth/helpers.ts","../src/auth/seed-permissions.ts","../src/auth/middleware.ts","../src/auth/nextauth-options.ts"],"sourcesContent":["/** API resource keys excluded from the permission matrix (internal / not admin-CRUD). */\nexport const PERMISSION_ENTITY_INTERNAL_EXCLUDE = new Set([\n  'users',\n  'password_reset_tokens',\n  'user_groups',\n  'permissions',\n  'comments',\n  'form_fields',\n  'configs',\n  'knowledge_base_chunks',\n  'carts',\n  'cart_items',\n  'wishlists',\n  'wishlist_items',\n]);\n\n/** Non-CRUD admin surfaces mapped to entity keys for RBAC. */\nexport const PERMISSION_LOGICAL_ENTITIES = [\n  'users',\n  'forms',\n  'form_submissions',\n  'dashboard',\n  'upload',\n  'settings',\n  'analytics',\n  'chat',\n] as const;\n\n/** Canonical name for new installs / migrations */\nexport const ADMIN_GROUP_NAME = 'Administrator';\n\n/** System administrator group (roles UI + users / user_groups / permissions bypass). */\nexport function isSuperAdminGroupName(name: string | null | undefined): boolean {\n  return name === ADMIN_GROUP_NAME;\n}\n\nexport type EntityCrudAction = 'create' | 'read' | 'update' | 'delete';\n\nexport type EntityPermissionFlags = { c: boolean; r: boolean; u: boolean; d: boolean };\n\nexport function getPermissionableEntityKeys(entityMap: Record<string, unknown>): string[] {\n  const fromMap = Object.keys(entityMap).filter((k) => !PERMISSION_ENTITY_INTERNAL_EXCLUDE.has(k));\n  const logical = PERMISSION_LOGICAL_ENTITIES.filter((k) => !fromMap.includes(k));\n  return [...fromMap.sort(), ...logical].filter((k, i, a) => a.indexOf(k) === i);\n}\n\nexport function permissionRowsToRecord(\n  rows: Array<{ entity: string; canCreate: boolean; canRead: boolean; canUpdate: boolean; canDelete: boolean }> | undefined\n): Record<string, EntityPermissionFlags> {\n  const out: Record<string, EntityPermissionFlags> = {};\n  if (!rows?.length) return out;\n  for (const p of rows) {\n    out[p.entity] = {\n      c: !!p.canCreate,\n      r: !!p.canRead,\n      u: !!p.canUpdate,\n      d: !!p.canDelete,\n    };\n  }\n  return out;\n}\n\nexport function hasEntityPermission(\n  record: Record<string, EntityPermissionFlags> | undefined,\n  entity: string,\n  action: EntityCrudAction\n): boolean {\n  const p = record?.[entity];\n  if (!p) return false;\n  if (action === 'create') return p.c;\n  if (action === 'read') return p.r;\n  if (action === 'update') return p.u;\n  return p.d;\n}\n","import type { EntityCrudAction, EntityPermissionFlags } from './permission-entities';\nimport { hasEntityPermission } from './permission-entities';\n\n/** isRBACAdmin bypasses entity checks only for these (users / roles plumbing). */\nexport const RBAC_ADMIN_ONLY_ENTITIES = new Set(['users', 'user_groups', 'permissions']);\n\nexport interface SessionUser {\n  id?: string;\n  email?: string | null;\n  name?: string | null;\n  groupId?: number;\n  /** @deprecated use entityPerms / isRBACAdmin */\n  permissions?: string[];\n  /** Administrator group: full access only for users, user_groups, permissions */\n  isRBACAdmin?: boolean;\n  entityPerms?: Record<string, EntityPermissionFlags>;\n  /** When false and not isRBACAdmin, admin API/UI is denied. */\n  adminAccess?: boolean;\n}\n\nexport function sessionHasEntityAccess(\n  user: SessionUser | null | undefined,\n  entity: string,\n  action: EntityCrudAction\n): boolean {\n  if (!user?.email) return false;\n  if (user.isRBACAdmin && RBAC_ADMIN_ONLY_ENTITIES.has(entity)) return true;\n  return hasEntityPermission(user.entityPerms, entity, action);\n}\n\nexport function canManageRoles(user: SessionUser | null | undefined): boolean {\n  return !!(user?.email && user.isRBACAdmin);\n}\n\nexport type GetSession = () => Promise<{ user?: SessionUser } | null>;\n\nexport const OPEN_ENDPOINTS: Array<Record<string, string[]>> = [\n  { '/api/contacts': ['POST'] },\n  { '/api/form-submissions': ['POST'] },\n  { '/api/blogs': ['GET'] },\n];\n\nexport const PERMISSION_REQUIRED_ENDPOINTS: Record<string, string[]> = {};\n\nexport function isOpenEndpoint(pathname: string): boolean {\n  return OPEN_ENDPOINTS.some((endpoint) => pathname.startsWith(Object.keys(endpoint)[0]));\n}\n\nexport function getRequiredPermission(pathname: string): string[] | null {\n  return null;\n}\n\nexport function isPublicMethod(pathname: string, method: string): boolean {\n  for (const endpoint of OPEN_ENDPOINTS) {\n    const key = Object.keys(endpoint)[0];\n    if (pathname.startsWith(key) && endpoint[key].includes(method)) return true;\n  }\n  return false;\n}\n\nexport interface AuthHelpers {\n  requireAuth(req: Request): Promise<Response | null>;\n  requirePermission(req: Request, permission: string): Promise<Response | null>;\n  requireEntityPermission(req: Request, entity: string, action: EntityCrudAction): Promise<Response | null>;\n  requireAdminAccess(req: Request): Promise<Response | null>;\n  getAuthenticatedUser(): Promise<SessionUser | null>;\n}\n\nexport function createAuthHelpers(getSession: GetSession, NextResponse: { json: (body: unknown, init?: { status?: number }) => Response }): AuthHelpers {\n  return {\n    async requireAuth() {\n      const session = await getSession();\n      if (!session?.user?.email) {\n        return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });\n      }\n      return null;\n    },\n    async requirePermission() {\n      const session = await getSession();\n      if (!session?.user?.email) {\n        return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });\n      }\n      return null;\n    },\n    async requireEntityPermission(_req: Request, entity: string, action: EntityCrudAction) {\n      const session = await getSession();\n      if (!session?.user?.email) {\n        return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });\n      }\n      const u = session.user as SessionUser;\n      if (sessionHasEntityAccess(u, entity, action)) return null;\n      return NextResponse.json({ error: 'Forbidden', entity, action }, { status: 403 });\n    },\n    async requireAdminAccess() {\n      const session = await getSession();\n      if (!session?.user?.email) {\n        return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });\n      }\n      const u = session.user as SessionUser;\n      if (u.isRBACAdmin) return null;\n      if (u.adminAccess === false) return NextResponse.json({ error: 'Forbidden', reason: 'admin_access' }, { status: 403 });\n      return null;\n    },\n    async getAuthenticatedUser() {\n      const session = await getSession();\n      return (session?.user as SessionUser) ?? null;\n    },\n  };\n}\n","import type { DataSource } from 'typeorm';\nimport type { EntityTarget } from 'typeorm';\nimport type { ObjectLiteral } from 'typeorm';\nimport { getPermissionableEntityKeys, ADMIN_GROUP_NAME } from './permission-entities';\n\n/**\n * Ensures the Administrator group has full CRUD on every permissionable entity\n * for the given entity map. Idempotent: upserts per entity.\n */\nexport async function seedAdministratorPermissions(\n  dataSource: DataSource,\n  entityMap: Record<string, unknown>\n): Promise<void> {\n  const entities = getPermissionableEntityKeys(entityMap);\n  const groupRepo = dataSource.getRepository(entityMap.user_groups as EntityTarget<ObjectLiteral>);\n  const permRepo = dataSource.getRepository(entityMap.permissions as EntityTarget<ObjectLiteral>);\n\n  const adminGroup = await groupRepo.findOne({ where: { name: ADMIN_GROUP_NAME, deleted: false } });\n  if (!adminGroup) return;\n\n  const fullCrud = { canCreate: true, canRead: true, canUpdate: true, canDelete: true };\n\n  for (const entity of entities) {\n    const existing = await permRepo.findOne({\n      where: { groupId: adminGroup.id, entity },\n    });\n    if (existing) {\n      existing.canCreate = true;\n      existing.canRead = true;\n      existing.canUpdate = true;\n      existing.canDelete = true;\n      await permRepo.save(existing);\n    } else {\n      await permRepo.save(\n        permRepo.create({\n          groupId: adminGroup.id,\n          entity,\n          ...fullCrud,\n        })\n      );\n    }\n  }\n}\n","export interface CmsMiddlewareConfig {\n  publicAdminPaths?: string[];\n  publicApiPaths?: string[];\n  /** path -> allowed methods */\n  publicApiMethods?: Record<string, string[]>;\n  signInPath?: string;\n  getSessionToken?: (request: { cookies: { get: (name: string) => { value?: string } | undefined } }) => string | undefined;\n}\n\n/** Default public API paths (no auth). Sites should extend this with their own routes. */\nexport const defaultPublicApiMethods: Record<string, string[]> = {\n  '/api/contacts': ['POST'],\n  '/api/form-submissions': ['POST'],\n  '/api/blogs': ['GET'],\n  '/api/forms': ['GET'],\n  '/api/auth': ['GET', 'POST'],\n  '/api/health': ['GET'],\n  '/api/users/forgot-password': ['POST'],\n  '/api/users/set-password': ['POST'],\n  '/api/users/invite': ['POST'],\n};\n\nfunction defaultGetSessionToken(request: { cookies: { get: (name: string) => { value?: string } | undefined } }): string | undefined {\n  return (\n    request.cookies.get('__Secure-next-auth.session-token')?.value ??\n    request.cookies.get('next-auth.session-token')?.value\n  );\n}\n\nfunction isPublicMethod(pathname: string, method: string, publicApiMethods: Record<string, string[]>): boolean {\n  for (const [endpoint, methods] of Object.entries(publicApiMethods)) {\n    if (pathname.startsWith(endpoint) && methods.includes(method)) return true;\n  }\n  return false;\n}\n\n/**\n * Returns middleware logic. Use from Next.js middleware:\n *   import { createCmsMiddleware } from '@infuro/cms-core';\n *   export const middleware = createCmsMiddleware({ ... });\n *   export const config = { matcher: ['/admin/:path*', '/api/:path*'] };\n */\nexport function createCmsMiddleware(config: CmsMiddlewareConfig = {}) {\n  const {\n    publicAdminPaths = ['/admin/signin', '/admin/forgot-password', '/admin/reset-password', '/admin/invite'],\n    publicApiMethods = defaultPublicApiMethods,\n    signInPath = '/admin/signin',\n    getSessionToken = defaultGetSessionToken,\n  } = config;\n\n  return function cmsMiddleware(request: {\n    nextUrl: { pathname: string };\n    url: string;\n    method: string;\n    cookies: { get: (name: string) => { value?: string } | undefined };\n  }): { type: 'next' } | { type: 'redirect'; url: string } | { type: 'json'; status: number; body: unknown } {\n    const pathname = request.nextUrl.pathname;\n    const method = request.method;\n\n    if (publicAdminPaths.some((p) => pathname === p || pathname.startsWith(p + '/'))) {\n      return { type: 'next' };\n    }\n\n    if (pathname.startsWith('/admin')) {\n      const token = getSessionToken(request);\n      if (!token) {\n        return { type: 'redirect', url: new URL(signInPath, request.url).toString() };\n      }\n    }\n\n    if (pathname.startsWith('/api')) {\n      if (isPublicMethod(pathname, method, publicApiMethods)) {\n        return { type: 'next' };\n      }\n      const token = getSessionToken(request);\n      if (!token) {\n        return { type: 'json', status: 401, body: { error: 'Unauthorized' } };\n      }\n    }\n\n    return { type: 'next' };\n  };\n}\n","/**\n * Build NextAuth options for credentials auth. App can extend/override via extend().\n */\nimport type { NextAuthOptions } from 'next-auth';\nimport _CredentialsProvider from 'next-auth/providers/credentials';\nconst CredentialsProvider = (_CredentialsProvider as unknown as { default: typeof _CredentialsProvider }).default ?? _CredentialsProvider;\nimport { isSuperAdminGroupName, permissionRowsToRecord } from './permission-entities';\n\nexport interface NextAuthUser {\n  id: number;\n  email: string;\n  name: string | null;\n  password: string | null;\n  blocked?: boolean;\n  deleted?: boolean;\n  groupId?: number | null;\n  adminAccess?: boolean;\n  group?: {\n    name?: string;\n    permissions?: Array<{\n      entity: string;\n      canCreate: boolean;\n      canRead: boolean;\n      canUpdate: boolean;\n      canDelete: boolean;\n    }>;\n  };\n}\n\nexport interface NextAuthOptionsConfig {\n  /** Resolve user by email (e.g. from TypeORM). Return null if not found. */\n  getUserByEmail: (email: string) => Promise<NextAuthUser | null>;\n  comparePassword: (plain: string, hash: string) => Promise<boolean>;\n  signInPage?: string;\n  secret?: string;\n  extend?: (options: NextAuthOptions) => NextAuthOptions;\n}\n\nexport function getNextAuthOptions(config: NextAuthOptionsConfig): NextAuthOptions {\n  const { getUserByEmail, comparePassword, signInPage = '/admin/signin', secret, extend } = config;\n\n  const options: NextAuthOptions = {\n    secret: secret ?? process.env.NEXTAUTH_SECRET,\n    providers: [\n      CredentialsProvider({\n        name: 'credentials',\n        credentials: {\n          email: { label: 'Email', type: 'email' },\n          password: { label: 'Password', type: 'password' },\n        },\n        async authorize(credentials) {\n          if (!credentials?.email || !credentials?.password) return null;\n          try {\n            const user = await getUserByEmail(credentials.email);\n            if (!user || user.blocked || (user as { deleted?: boolean }).deleted || !user.password) return null;\n            const valid = await comparePassword(credentials.password, user.password);\n            if (!valid) return null;\n            const g = user.group;\n            const isRBACAdmin = isSuperAdminGroupName(g?.name);\n            const entityPerms = permissionRowsToRecord(g?.permissions);\n            const adminAccess = (user as NextAuthUser & { adminAccess?: boolean }).adminAccess === true;\n            return {\n              id: user.id.toString(),\n              email: user.email,\n              name: user.name,\n              groupId: user.groupId ?? undefined,\n              isRBACAdmin,\n              entityPerms,\n              adminAccess,\n            };\n          } catch {\n            return null;\n          }\n        },\n      }),\n    ],\n    session: { strategy: 'jwt' },\n    pages: { signIn: signInPage },\n    cookies: {\n      sessionToken: {\n        name: process.env.NEXTAUTH_URL?.startsWith('https')\n          ? '__Secure-next-auth.session-token'\n          : 'next-auth.session-token',\n        options: {\n          httpOnly: true,\n          sameSite: 'lax',\n          path: '/',\n          secure: process.env.NEXTAUTH_URL?.startsWith('https') ?? false,\n        },\n      },\n    },\n    callbacks: {\n      async jwt({ token, user }) {\n        if (user) {\n          const u = user as unknown as Record<string, unknown>;\n          (token as Record<string, unknown>).id = u.id;\n          (token as Record<string, unknown>).groupId = u.groupId;\n          (token as Record<string, unknown>).isRBACAdmin = u.isRBACAdmin;\n          (token as Record<string, unknown>).entityPerms = u.entityPerms;\n          (token as Record<string, unknown>).adminAccess = u.adminAccess;\n        }\n        return token;\n      },\n      async session({ session, token }) {\n        if (session.user) {\n          const t = token as Record<string, unknown>;\n          (session.user as Record<string, unknown>).id = t.id;\n          (session.user as Record<string, unknown>).groupId = t.groupId;\n          (session.user as Record<string, unknown>).isRBACAdmin = t.isRBACAdmin;\n          (session.user as Record<string, unknown>).entityPerms = t.entityPerms;\n          (session.user as Record<string, unknown>).adminAccess = t.adminAccess;\n        }\n        return session;\n      },\n    },\n  };\n\n  return extend ? extend(options) : options;\n}\n"],"mappings":";AACO,IAAM,qCAAqC,oBAAI,IAAI;AAAA,EACxD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGM,IAAM,8BAA8B;AAAA,EACzC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGO,IAAM,mBAAmB;AAGzB,SAAS,sBAAsB,MAA0C;AAC9E,SAAO,SAAS;AAClB;AAMO,SAAS,4BAA4B,WAA8C;AACxF,QAAM,UAAU,OAAO,KAAK,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,mCAAmC,IAAI,CAAC,CAAC;AAC/F,QAAM,UAAU,4BAA4B,OAAO,CAAC,MAAM,CAAC,QAAQ,SAAS,CAAC,CAAC;AAC9E,SAAO,CAAC,GAAG,QAAQ,KAAK,GAAG,GAAG,OAAO,EAAE,OAAO,CAAC,GAAG,GAAG,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;AAC/E;AAEO,SAAS,uBACd,MACuC;AACvC,QAAM,MAA6C,CAAC;AACpD,MAAI,CAAC,MAAM,OAAQ,QAAO;AAC1B,aAAW,KAAK,MAAM;AACpB,QAAI,EAAE,MAAM,IAAI;AAAA,MACd,GAAG,CAAC,CAAC,EAAE;AAAA,MACP,GAAG,CAAC,CAAC,EAAE;AAAA,MACP,GAAG,CAAC,CAAC,EAAE;AAAA,MACP,GAAG,CAAC,CAAC,EAAE;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,oBACd,QACA,QACA,QACS;AACT,QAAM,IAAI,SAAS,MAAM;AACzB,MAAI,CAAC,EAAG,QAAO;AACf,MAAI,WAAW,SAAU,QAAO,EAAE;AAClC,MAAI,WAAW,OAAQ,QAAO,EAAE;AAChC,MAAI,WAAW,SAAU,QAAO,EAAE;AAClC,SAAO,EAAE;AACX;;;ACrEO,IAAM,2BAA2B,oBAAI,IAAI,CAAC,SAAS,eAAe,aAAa,CAAC;AAgBhF,SAAS,uBACd,MACA,QACA,QACS;AACT,MAAI,CAAC,MAAM,MAAO,QAAO;AACzB,MAAI,KAAK,eAAe,yBAAyB,IAAI,MAAM,EAAG,QAAO;AACrE,SAAO,oBAAoB,KAAK,aAAa,QAAQ,MAAM;AAC7D;AAEO,SAAS,eAAe,MAA+C;AAC5E,SAAO,CAAC,EAAE,MAAM,SAAS,KAAK;AAChC;AAIO,IAAM,iBAAkD;AAAA,EAC7D,EAAE,iBAAiB,CAAC,MAAM,EAAE;AAAA,EAC5B,EAAE,yBAAyB,CAAC,MAAM,EAAE;AAAA,EACpC,EAAE,cAAc,CAAC,KAAK,EAAE;AAC1B;AAEO,IAAM,gCAA0D,CAAC;AAEjE,SAAS,eAAe,UAA2B;AACxD,SAAO,eAAe,KAAK,CAAC,aAAa,SAAS,WAAW,OAAO,KAAK,QAAQ,EAAE,CAAC,CAAC,CAAC;AACxF;AAEO,SAAS,sBAAsB,UAAmC;AACvE,SAAO;AACT;AAEO,SAAS,eAAe,UAAkB,QAAyB;AACxE,aAAW,YAAY,gBAAgB;AACrC,UAAM,MAAM,OAAO,KAAK,QAAQ,EAAE,CAAC;AACnC,QAAI,SAAS,WAAW,GAAG,KAAK,SAAS,GAAG,EAAE,SAAS,MAAM,EAAG,QAAO;AAAA,EACzE;AACA,SAAO;AACT;AAUO,SAAS,kBAAkB,YAAwB,cAA8F;AACtJ,SAAO;AAAA,IACL,MAAM,cAAc;AAClB,YAAM,UAAU,MAAM,WAAW;AACjC,UAAI,CAAC,SAAS,MAAM,OAAO;AACzB,eAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACrE;AACA,aAAO;AAAA,IACT;AAAA,IACA,MAAM,oBAAoB;AACxB,YAAM,UAAU,MAAM,WAAW;AACjC,UAAI,CAAC,SAAS,MAAM,OAAO;AACzB,eAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACrE;AACA,aAAO;AAAA,IACT;AAAA,IACA,MAAM,wBAAwB,MAAe,QAAgB,QAA0B;AACrF,YAAM,UAAU,MAAM,WAAW;AACjC,UAAI,CAAC,SAAS,MAAM,OAAO;AACzB,eAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACrE;AACA,YAAM,IAAI,QAAQ;AAClB,UAAI,uBAAuB,GAAG,QAAQ,MAAM,EAAG,QAAO;AACtD,aAAO,aAAa,KAAK,EAAE,OAAO,aAAa,QAAQ,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClF;AAAA,IACA,MAAM,qBAAqB;AACzB,YAAM,UAAU,MAAM,WAAW;AACjC,UAAI,CAAC,SAAS,MAAM,OAAO;AACzB,eAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACrE;AACA,YAAM,IAAI,QAAQ;AAClB,UAAI,EAAE,YAAa,QAAO;AAC1B,UAAI,EAAE,gBAAgB,MAAO,QAAO,aAAa,KAAK,EAAE,OAAO,aAAa,QAAQ,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AACrH,aAAO;AAAA,IACT;AAAA,IACA,MAAM,uBAAuB;AAC3B,YAAM,UAAU,MAAM,WAAW;AACjC,aAAQ,SAAS,QAAwB;AAAA,IAC3C;AAAA,EACF;AACF;;;ACnGA,eAAsB,6BACpB,YACA,WACe;AACf,QAAM,WAAW,4BAA4B,SAAS;AACtD,QAAM,YAAY,WAAW,cAAc,UAAU,WAA0C;AAC/F,QAAM,WAAW,WAAW,cAAc,UAAU,WAA0C;AAE9F,QAAM,aAAa,MAAM,UAAU,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,SAAS,MAAM,EAAE,CAAC;AAChG,MAAI,CAAC,WAAY;AAEjB,QAAM,WAAW,EAAE,WAAW,MAAM,SAAS,MAAM,WAAW,MAAM,WAAW,KAAK;AAEpF,aAAW,UAAU,UAAU;AAC7B,UAAM,WAAW,MAAM,SAAS,QAAQ;AAAA,MACtC,OAAO,EAAE,SAAS,WAAW,IAAI,OAAO;AAAA,IAC1C,CAAC;AACD,QAAI,UAAU;AACZ,eAAS,YAAY;AACrB,eAAS,UAAU;AACnB,eAAS,YAAY;AACrB,eAAS,YAAY;AACrB,YAAM,SAAS,KAAK,QAAQ;AAAA,IAC9B,OAAO;AACL,YAAM,SAAS;AAAA,QACb,SAAS,OAAO;AAAA,UACd,SAAS,WAAW;AAAA,UACpB;AAAA,UACA,GAAG;AAAA,QACL,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AACF;;;AChCO,IAAM,0BAAoD;AAAA,EAC/D,iBAAiB,CAAC,MAAM;AAAA,EACxB,yBAAyB,CAAC,MAAM;AAAA,EAChC,cAAc,CAAC,KAAK;AAAA,EACpB,cAAc,CAAC,KAAK;AAAA,EACpB,aAAa,CAAC,OAAO,MAAM;AAAA,EAC3B,eAAe,CAAC,KAAK;AAAA,EACrB,8BAA8B,CAAC,MAAM;AAAA,EACrC,2BAA2B,CAAC,MAAM;AAAA,EAClC,qBAAqB,CAAC,MAAM;AAC9B;AAEA,SAAS,uBAAuB,SAAqG;AACnI,SACE,QAAQ,QAAQ,IAAI,kCAAkC,GAAG,SACzD,QAAQ,QAAQ,IAAI,yBAAyB,GAAG;AAEpD;AAEA,SAASA,gBAAe,UAAkB,QAAgB,kBAAqD;AAC7G,aAAW,CAAC,UAAU,OAAO,KAAK,OAAO,QAAQ,gBAAgB,GAAG;AAClE,QAAI,SAAS,WAAW,QAAQ,KAAK,QAAQ,SAAS,MAAM,EAAG,QAAO;AAAA,EACxE;AACA,SAAO;AACT;AAQO,SAAS,oBAAoB,SAA8B,CAAC,GAAG;AACpE,QAAM;AAAA,IACJ,mBAAmB,CAAC,iBAAiB,0BAA0B,yBAAyB,eAAe;AAAA,IACvG,mBAAmB;AAAA,IACnB,aAAa;AAAA,IACb,kBAAkB;AAAA,EACpB,IAAI;AAEJ,SAAO,SAAS,cAAc,SAK6E;AACzG,UAAM,WAAW,QAAQ,QAAQ;AACjC,UAAM,SAAS,QAAQ;AAEvB,QAAI,iBAAiB,KAAK,CAAC,MAAM,aAAa,KAAK,SAAS,WAAW,IAAI,GAAG,CAAC,GAAG;AAChF,aAAO,EAAE,MAAM,OAAO;AAAA,IACxB;AAEA,QAAI,SAAS,WAAW,QAAQ,GAAG;AACjC,YAAM,QAAQ,gBAAgB,OAAO;AACrC,UAAI,CAAC,OAAO;AACV,eAAO,EAAE,MAAM,YAAY,KAAK,IAAI,IAAI,YAAY,QAAQ,GAAG,EAAE,SAAS,EAAE;AAAA,MAC9E;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,MAAM,GAAG;AAC/B,UAAIA,gBAAe,UAAU,QAAQ,gBAAgB,GAAG;AACtD,eAAO,EAAE,MAAM,OAAO;AAAA,MACxB;AACA,YAAM,QAAQ,gBAAgB,OAAO;AACrC,UAAI,CAAC,OAAO;AACV,eAAO,EAAE,MAAM,QAAQ,QAAQ,KAAK,MAAM,EAAE,OAAO,eAAe,EAAE;AAAA,MACtE;AAAA,IACF;AAEA,WAAO,EAAE,MAAM,OAAO;AAAA,EACxB;AACF;;;AC9EA,OAAO,0BAA0B;AACjC,IAAM,sBAAuB,qBAA6E,WAAW;AAiC9G,SAAS,mBAAmB,QAAgD;AACjF,QAAM,EAAE,gBAAgB,iBAAiB,aAAa,iBAAiB,QAAQ,OAAO,IAAI;AAE1F,QAAM,UAA2B;AAAA,IAC/B,QAAQ,UAAU,QAAQ,IAAI;AAAA,IAC9B,WAAW;AAAA,MACT,oBAAoB;AAAA,QAClB,MAAM;AAAA,QACN,aAAa;AAAA,UACX,OAAO,EAAE,OAAO,SAAS,MAAM,QAAQ;AAAA,UACvC,UAAU,EAAE,OAAO,YAAY,MAAM,WAAW;AAAA,QAClD;AAAA,QACA,MAAM,UAAU,aAAa;AAC3B,cAAI,CAAC,aAAa,SAAS,CAAC,aAAa,SAAU,QAAO;AAC1D,cAAI;AACF,kBAAM,OAAO,MAAM,eAAe,YAAY,KAAK;AACnD,gBAAI,CAAC,QAAQ,KAAK,WAAY,KAA+B,WAAW,CAAC,KAAK,SAAU,QAAO;AAC/F,kBAAM,QAAQ,MAAM,gBAAgB,YAAY,UAAU,KAAK,QAAQ;AACvE,gBAAI,CAAC,MAAO,QAAO;AACnB,kBAAM,IAAI,KAAK;AACf,kBAAM,cAAc,sBAAsB,GAAG,IAAI;AACjD,kBAAM,cAAc,uBAAuB,GAAG,WAAW;AACzD,kBAAM,cAAe,KAAkD,gBAAgB;AACvF,mBAAO;AAAA,cACL,IAAI,KAAK,GAAG,SAAS;AAAA,cACrB,OAAO,KAAK;AAAA,cACZ,MAAM,KAAK;AAAA,cACX,SAAS,KAAK,WAAW;AAAA,cACzB;AAAA,cACA;AAAA,cACA;AAAA,YACF;AAAA,UACF,QAAQ;AACN,mBAAO;AAAA,UACT;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IACA,SAAS,EAAE,UAAU,MAAM;AAAA,IAC3B,OAAO,EAAE,QAAQ,WAAW;AAAA,IAC5B,SAAS;AAAA,MACP,cAAc;AAAA,QACZ,MAAM,QAAQ,IAAI,cAAc,WAAW,OAAO,IAC9C,qCACA;AAAA,QACJ,SAAS;AAAA,UACP,UAAU;AAAA,UACV,UAAU;AAAA,UACV,MAAM;AAAA,UACN,QAAQ,QAAQ,IAAI,cAAc,WAAW,OAAO,KAAK;AAAA,QAC3D;AAAA,MACF;AAAA,IACF;AAAA,IACA,WAAW;AAAA,MACT,MAAM,IAAI,EAAE,OAAO,KAAK,GAAG;AACzB,YAAI,MAAM;AACR,gBAAM,IAAI;AACV,UAAC,MAAkC,KAAK,EAAE;AAC1C,UAAC,MAAkC,UAAU,EAAE;AAC/C,UAAC,MAAkC,cAAc,EAAE;AACnD,UAAC,MAAkC,cAAc,EAAE;AACnD,UAAC,MAAkC,cAAc,EAAE;AAAA,QACrD;AACA,eAAO;AAAA,MACT;AAAA,MACA,MAAM,QAAQ,EAAE,SAAS,MAAM,GAAG;AAChC,YAAI,QAAQ,MAAM;AAChB,gBAAM,IAAI;AACV,UAAC,QAAQ,KAAiC,KAAK,EAAE;AACjD,UAAC,QAAQ,KAAiC,UAAU,EAAE;AACtD,UAAC,QAAQ,KAAiC,cAAc,EAAE;AAC1D,UAAC,QAAQ,KAAiC,cAAc,EAAE;AAC1D,UAAC,QAAQ,KAAiC,cAAc,EAAE;AAAA,QAC5D;AACA,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAEA,SAAO,SAAS,OAAO,OAAO,IAAI;AACpC;","names":["isPublicMethod"]}

package/dist/cli.cjs

@@ -204,7 +204,7 @@ async function getOptions() {
       return userRepo.findOne({
         where: { email },
         relations: ['group', 'group.permissions'],
-        select: ['id', 'email', 'name', 'password', 'blocked', 'deleted', 'groupId'],
+        select: ['id', 'email', 'name', 'password', 'blocked', 'deleted', 'groupId', 'adminAccess'],
       }) as any;
     },
     comparePassword: (plain, hash) => Promise.resolve(bcrypt.compareSync(plain, hash)),

package/dist/cli.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/cli.ts"],"sourcesContent":["#!/usr/bin/env node\n/**\n * @infuro/cms-core init CLI\n * Usage: npx @infuro/cms-core init [--force] [--dry-run] [--no-deps] [--no-patch-config]\n */\nimport fs from 'fs';\nimport path from 'path';\n\nconst TEMPLATES = {\n  'src/lib/data-source.ts': `import 'reflect-metadata';\nimport path from 'path';\nimport { createRequire } from 'module';\nimport { DataSource } from 'typeorm';\nimport { CMS_ENTITY_MAP } from '@infuro/cms-core';\n\nconst require = createRequire(import.meta.url);\nconst coreDir = path.dirname(require.resolve('@infuro/cms-core'));\n\nlet dataSource: DataSource | null = null;\n\nexport function getDataSource(): DataSource {\n  if (!dataSource) {\n    dataSource = new DataSource({\n      type: 'postgres',\n      url: process.env.DATABASE_URL,\n      entities: Object.values(CMS_ENTITY_MAP),\n      synchronize: false,\n      ...(process.env.TYPEORM_CLI && {\n        migrations: [\n          path.join(coreDir, 'migrations', '*.ts'),\n          path.join(process.cwd(), 'src', 'migrations', '*.ts'),\n        ],\n      }),\n    });\n  }\n  return dataSource;\n}\n\nexport async function getDataSourceInitialized(): Promise<DataSource> {\n  const ds = getDataSource();\n  if (!ds.isInitialized) await ds.initialize();\n  return ds;\n}\n\nexport default getDataSource;\n`,\n\n  'src/lib/auth-helpers.ts': `import { getServerSession } from 'next-auth';\nimport { NextResponse } from 'next/server';\nimport { createAuthHelpers } from '@infuro/cms-core/auth';\n\nconst helpers = createAuthHelpers(\n  async () => {\n    const s = await getServerSession();\n    return s ? { user: s.user } : null;\n  },\n  NextResponse\n);\n\nexport const requireAuth = helpers.requireAuth;\nexport const requirePermission = helpers.requirePermission;\nexport const getAuthenticatedUser = helpers.getAuthenticatedUser;\n`,\n\n  'src/lib/cms.ts': `import {\n  createCmsApp,\n  localStoragePlugin,\n  type CmsApp,\n} from '@infuro/cms-core';\nimport { getDataSourceInitialized } from './data-source';\n\nlet cmsPromise: Promise<CmsApp> | null = null;\n\nexport async function getCms(): Promise<CmsApp> {\n  if (cmsPromise) return cmsPromise;\n  const dataSource = await getDataSourceInitialized();\n  cmsPromise = createCmsApp({\n    dataSource,\n    config: process.env as unknown as Record<string, string>,\n    plugins: [\n      localStoragePlugin({ dir: 'public/uploads' }),\n    ],\n  });\n  return cmsPromise;\n}\n`,\n\n  'src/app/api/[[...path]]/route.ts': `import { NextResponse } from 'next/server';\nimport { getServerSession } from 'next-auth';\nimport { createCmsApiHandler } from '@infuro/cms-core/api';\nimport { CMS_ENTITY_MAP } from '@infuro/cms-core';\nimport { getDataSourceInitialized } from '@/lib/data-source';\nimport { requireAuth } from '@/lib/auth-helpers';\nimport { getCms } from '@/lib/cms';\nimport bcrypt from 'bcryptjs';\n\nconst baseUrl = process.env.NEXTAUTH_URL || 'http://localhost:3000';\n\nlet handlerPromise: Promise<ReturnType<typeof createCmsApiHandler>> | null = null;\n\nasync function getHandler() {\n  if (!handlerPromise) {\n    const dataSource = await getDataSourceInitialized();\n    handlerPromise = Promise.resolve(\n      createCmsApiHandler({\n        dataSource,\n        entityMap: CMS_ENTITY_MAP,\n        requireAuth,\n        json: NextResponse.json.bind(NextResponse),\n        getCms,\n        userAuth: {\n          dataSource,\n          entityMap: CMS_ENTITY_MAP,\n          json: NextResponse.json.bind(NextResponse),\n          baseUrl,\n          hashPassword: (p) => Promise.resolve(bcrypt.hashSync(p, 12)),\n          comparePassword: (p, h) => Promise.resolve(bcrypt.compareSync(p, h)),\n          resetExpiryHours: 1,\n          getSession: () =>\n            getServerSession().then((s) => (s ? { user: s.user } : null)),\n        },\n        dashboard: {\n          dataSource,\n          entityMap: CMS_ENTITY_MAP,\n          json: NextResponse.json.bind(NextResponse),\n          requireAuth,\n          requirePermission: requireAuth,\n        },\n        upload: {\n          json: NextResponse.json.bind(NextResponse),\n          requireAuth,\n          storage: () => getCms().then((cms) => cms.getPlugin('storage')),\n          localUploadDir: 'public/uploads',\n        },\n        blogBySlug: {\n          dataSource,\n          entityMap: CMS_ENTITY_MAP,\n          json: NextResponse.json.bind(NextResponse),\n          requireAuth: async () => null,\n        },\n        formBySlug: {\n          dataSource,\n          entityMap: CMS_ENTITY_MAP,\n          json: NextResponse.json.bind(NextResponse),\n          requireAuth: async () => null,\n        },\n        usersApi: {\n          dataSource,\n          entityMap: CMS_ENTITY_MAP,\n          json: NextResponse.json.bind(NextResponse),\n          requireAuth,\n          baseUrl,\n        },\n      })\n    );\n  }\n  return handlerPromise;\n}\n\nasync function handle(method: string, req: Request, context: { params: Promise<{ path?: string[] }> }) {\n  try {\n    const handler = await getHandler();\n    const { path: pathSegments = [] } = await context.params;\n    return handler.handle(method, pathSegments, req);\n  } catch {\n    return NextResponse.json({ error: 'Server Error' }, { status: 500 });\n  }\n}\n\nexport async function GET(req: Request, ctx: { params: Promise<{ path?: string[] }> }) { return handle('GET', req, ctx); }\nexport async function POST(req: Request, ctx: { params: Promise<{ path?: string[] }> }) { return handle('POST', req, ctx); }\nexport async function PUT(req: Request, ctx: { params: Promise<{ path?: string[] }> }) { return handle('PUT', req, ctx); }\nexport async function PATCH(req: Request, ctx: { params: Promise<{ path?: string[] }> }) { return handle('PATCH', req, ctx); }\nexport async function DELETE(req: Request, ctx: { params: Promise<{ path?: string[] }> }) { return handle('DELETE', req, ctx); }\n`,\n\n  'src/app/api/auth/[...nextauth]/route.ts': `import NextAuth from 'next-auth';\nimport { getNextAuthOptions } from '@infuro/cms-core/auth';\nimport { getDataSourceInitialized } from '@/lib/data-source';\nimport { CMS_ENTITY_MAP } from '@infuro/cms-core';\nimport bcrypt from 'bcryptjs';\n\nasync function getOptions() {\n  const dataSource = await getDataSourceInitialized();\n  const userRepo = dataSource.getRepository(CMS_ENTITY_MAP.users);\n  return getNextAuthOptions({\n    getUserByEmail: async (email: string) => {\n      return userRepo.findOne({\n        where: { email },\n        relations: ['group', 'group.permissions'],\n        select: ['id', 'email', 'name', 'password', 'blocked', 'deleted', 'groupId'],\n      }) as any;\n    },\n    comparePassword: (plain, hash) => Promise.resolve(bcrypt.compareSync(plain, hash)),\n    signInPage: '/admin/signin',\n  });\n}\n\nlet handler: ReturnType<typeof NextAuth> | null = null;\n\nasync function getHandler() {\n  if (!handler) handler = NextAuth(await getOptions());\n  return handler;\n}\n\ntype NextAuthContext = { params: Promise<{ nextauth?: string[] }> };\n\nexport async function GET(req: Request, context: NextAuthContext) {\n  return (await getHandler())(req, context);\n}\nexport async function POST(req: Request, context: NextAuthContext) {\n  return (await getHandler())(req, context);\n}\n`,\n\n  'src/app/admin/layout.tsx': `'use client';\n\nimport '@infuro/cms-core/admin.css';\nimport AdminLayout from '@infuro/cms-core/admin';\n\nexport default function AdminLayoutWrapper({ children }: { children: React.ReactNode }) {\n  return (\n    <AdminLayout\n      customNavItems={[]}\n      customNavSections={[]}\n      customCrudConfigs={{}}\n    >\n      {children}\n    </AdminLayout>\n  );\n}\n`,\n\n  'src/app/admin/[[...slug]]/page.tsx': `import { AdminPageResolver } from '@infuro/cms-core/admin';\n\nexport default async function AdminPage({ params }: { params: Promise<{ slug?: string[] }> }) {\n  const { slug } = await params;\n  return <AdminPageResolver slug={slug} />;\n}\n`,\n\n  'src/middleware.ts': `import { NextResponse } from 'next/server';\nimport type { NextRequest } from 'next/server';\nimport { createCmsMiddleware } from '@infuro/cms-core/auth';\n\nconst cmsMiddleware = createCmsMiddleware({\n  publicApiMethods: {\n    '/api/contacts': ['POST'],\n    '/api/form-submissions': ['POST'],\n    '/api/blogs': ['GET'],\n    '/api/forms': ['GET'],\n    '/api/auth': ['GET', 'POST'],\n    '/api/users/forgot-password': ['POST'],\n    '/api/users/set-password': ['POST'],\n    '/api/users/invite': ['POST'],\n  },\n});\n\nexport function middleware(request: NextRequest) {\n  const result = cmsMiddleware({\n    nextUrl: request.nextUrl,\n    url: request.url,\n    method: request.method,\n    cookies: request.cookies,\n  });\n\n  if (result.type === 'next') return NextResponse.next();\n  if (result.type === 'redirect') return NextResponse.redirect(result.url);\n  if (result.type === 'json') return NextResponse.json(result.body, { status: result.status });\n  return NextResponse.next();\n}\n\nexport const config = {\n  matcher: ['/admin/:path*', '/api/:path*'],\n};\n`,\n\n  'src/app/providers.tsx': `\"use client\";\n\nimport { ThemeProvider } from \"next-themes\";\nimport { SessionProvider } from \"next-auth/react\";\nimport { Toaster } from \"sonner\";\n\nexport function Providers({ children }: { children: React.ReactNode }) {\n  return (\n    <SessionProvider>\n      <ThemeProvider attribute=\"class\" defaultTheme=\"system\" enableSystem>\n        {children}\n        <Toaster position=\"top-right\" />\n      </ThemeProvider>\n    </SessionProvider>\n  );\n}\n`,\n\n  '.env.example': `DATABASE_URL=postgres://user:password@localhost:5432/mydb\nNEXTAUTH_SECRET=your-random-secret\nNEXTAUTH_URL=http://localhost:3000\n\n# Admin user (for npm run seed)\nADMIN_EMAIL=admin@example.com\nADMIN_PASSWORD=changeme\n`,\n\n  'src/lib/seed.ts': `try { require('dotenv/config'); } catch {}\nimport 'reflect-metadata';\nimport { getDataSourceInitialized } from './data-source';\nimport { CMS_ENTITY_MAP } from '@infuro/cms-core';\nimport bcrypt from 'bcryptjs';\n\nasync function main() {\n  const ds = await getDataSourceInitialized();\n  const userRepo = ds.getRepository(CMS_ENTITY_MAP.users);\n\n  const email = process.env.ADMIN_EMAIL || 'admin@example.com';\n  const password = process.env.ADMIN_PASSWORD || 'changeme';\n\n  const existing = await userRepo.findOne({ where: { email } });\n  if (!existing) {\n    const hashedPassword = await bcrypt.hash(password, 10);\n    await userRepo.save(userRepo.create({ name: 'Admin', email, password: hashedPassword }));\n    console.log('Default admin user created');\n  } else {\n    console.log('Default admin user already exists');\n  }\n\n  await ds.destroy();\n}\n\nmain().catch((e) => {\n  console.error(e);\n  process.exit(1);\n});\n`,\n\n  'scripts/migration-datasource.cjs': `/**\n * Data source for TypeORM CLI (migration:generate). Resolves @infuro/cms-core from project root (works with npm link).\n */\nrequire('reflect-metadata');\nrequire('dotenv/config');\nconst path = require('path');\nconst { DataSource } = require('typeorm');\nconst coreEntry = path.resolve(__dirname, '..', 'node_modules', '@infuro', 'cms-core', 'dist', 'index.cjs');\nconst { CMS_ENTITY_MAP } = require(coreEntry);\n\nmodule.exports = new DataSource({\n  type: 'postgres',\n  url: process.env.DATABASE_URL,\n  entities: Object.values(CMS_ENTITY_MAP),\n  synchronize: false,\n  migrations: ['src/migrations/*.ts'],\n});\n`,\n\n  'scripts/run-migrations.ts': `/**\n * Run TypeORM migrations. Loads .env so DATABASE_URL is set.\n * Usage: npm run migration:run\n */\ntry { require('dotenv/config'); } catch {}\nimport 'reflect-metadata';\n\nasync function main() {\n  process.env.TYPEORM_CLI = '1';\n  const { getDataSourceInitialized } = await import('../src/lib/data-source');\n  const ds = await getDataSourceInitialized();\n  const run = await ds.runMigrations();\n  console.log(run.length ? \\`Ran \\${run.length} migration(s).\\` : 'No pending migrations.');\n  await ds.destroy();\n}\n\nmain().catch((e) => {\n  console.error(e);\n  process.exit(1);\n});\n`,\n\n  'src/migrations/README.md': `# TypeORM migrations\n\nGenerate a new migration (after changing entities):\n\n\\`\\`\\`bash\nnpm run migration:generate -- MyMigrationName\n\\`\\`\\`\n\nRun pending migrations:\n\n\\`\\`\\`bash\nnpm run migration:run\n\\`\\`\\`\n`,\n\n  'src/themes/default/index.ts': `import { createTheme } from '@infuro/cms-core/theme';\n\nimport { Container, meta as containerMeta } from './components/Container';\nimport { TextBlock, meta as textBlockMeta } from './components/TextBlock';\n\nimport { Navbar } from './layout/Navbar';\nimport { Footer, footerFields, footerDefaults } from './layout/Footer';\n\nexport default createTheme({\n  name: 'default',\n  label: 'Default Theme',\n  components: [\n    { component: Container, meta: containerMeta },\n    { component: TextBlock, meta: textBlockMeta },\n  ],\n  layout: {\n    navbar: { component: Navbar },\n    footer: { component: Footer, fields: footerFields, defaults: footerDefaults },\n  },\n});\n`,\n\n  'src/themes/default/layout/Navbar.tsx': `import type { NavbarConfig, NavItem } from '@infuro/cms-core/theme';\n\nfunction NavLink({ item }: { item: NavItem }) {\n  return (\n    <li className=\"list-none\">\n      <a\n        href={item.url}\n        target={item.openInNewTab ? '_blank' : undefined}\n        rel={item.openInNewTab ? 'noopener noreferrer' : undefined}\n        className=\"text-sm font-medium text-gray-700 hover:text-gray-900 px-3 py-2 inline-block\"\n      >\n        {item.label}\n      </a>\n    </li>\n  );\n}\n\nexport function Navbar({ logo, items, ctaLabel, ctaUrl }: NavbarConfig) {\n  return (\n    <nav className=\"bg-white sticky top-0 z-40 border-b\">\n      <div className=\"max-w-7xl mx-auto px-4 sm:px-6 lg:px-8\">\n        <div className=\"flex items-center justify-between h-16\">\n          <a href=\"/\" className=\"flex-shrink-0\">\n            {logo ? (\n              <img src={logo} alt=\"Logo\" className=\"h-8\" />\n            ) : (\n              <span className=\"text-xl font-bold text-gray-900\">Logo</span>\n            )}\n          </a>\n          <ul className=\"flex items-center gap-1 list-none m-0 p-0\">\n            {items.map((item) => (\n              <NavLink key={item.id} item={item} />\n            ))}\n          </ul>\n          {ctaLabel && (\n            <a href={ctaUrl || '#'} className=\"text-sm font-medium text-gray-900 hover:underline\">\n              {ctaLabel}\n            </a>\n          )}\n        </div>\n      </div>\n    </nav>\n  );\n}\n`,\n\n  'src/themes/default/layout/Footer.tsx': `import type { FooterConfig, PropDefinition } from '@infuro/cms-core/theme';\n\nexport const footerFields: PropDefinition[] = [\n  { name: 'copyright', label: 'Copyright Text', type: 'text' },\n];\n\nexport const footerDefaults: Record<string, any> = {\n  copyright: '© 2025 Your Site. All rights reserved.',\n  columns: [],\n  socialLinks: [],\n};\n\nexport function Footer({ copyright, columns = [], socialLinks = [] }: FooterConfig) {\n  return (\n    <footer className=\"bg-gray-900 text-gray-400 py-8 px-8\">\n      <div className=\"max-w-7xl mx-auto\">\n        {columns.length > 0 && (\n          <div className=\"grid grid-cols-2 md:grid-cols-4 gap-8 mb-6\">\n            {columns.map((col, i) => (\n              <div key={i}>\n                <h4 className=\"text-white font-semibold mb-3 text-sm\">{col.title}</h4>\n                <ul className=\"space-y-2\">\n                  {col.links.map((link, j) => (\n                    <li key={j}>\n                      <a href={link.url} className=\"text-sm hover:text-white transition-colors\">\n                        {link.label}\n                      </a>\n                    </li>\n                  ))}\n                </ul>\n              </div>\n            ))}\n          </div>\n        )}\n        <div className=\"border-t border-gray-800 pt-6\">\n          <p className=\"text-sm\">{copyright}</p>\n        </div>\n      </div>\n    </footer>\n  );\n}\n`,\n\n  'src/themes/default/components/Container.tsx': `import type { ComponentMeta } from '@infuro/cms-core/theme';\n\nexport const meta: ComponentMeta = {\n  name: 'Container',\n  label: 'Container',\n  category: 'layout',\n  icon: 'LayoutDashboard',\n  description: 'A layout container that holds other components',\n  defaultProps: { background: '#ffffff' },\n  props: [{ name: 'background', label: 'Background', type: 'color' }],\n  canContainChildren: true,\n};\n\nexport function Container({\n  background = '#ffffff',\n  children,\n}: {\n  background?: string;\n  children?: React.ReactNode;\n}) {\n  return (\n    <div style={{ backgroundColor: background, minHeight: '48px', padding: '1rem' }}>\n      {children}\n    </div>\n  );\n}\n`,\n\n  'src/themes/default/components/TextBlock.tsx': `import type { ComponentMeta } from '@infuro/cms-core/theme';\n\nexport const meta: ComponentMeta = {\n  name: 'TextBlock',\n  label: 'Text Block',\n  category: 'content',\n  icon: 'Type',\n  description: 'Rich text content block',\n  defaultProps: { content: '<p>Enter your text here...</p>' },\n  props: [{ name: 'content', label: 'Content', type: 'richtext' }],\n};\n\nexport function TextBlock({ content }: { content?: string }) {\n  return (\n    <div\n      className=\"prose prose-gray max-w-none py-4 px-2\"\n      dangerouslySetInnerHTML={{ __html: content || '' }}\n    />\n  );\n}\n`,\n\n  'src/lib/theme-registry.ts': `import defaultTheme from '@/themes/default';\nimport type { ThemeConfig } from '@infuro/cms-core/theme';\n\nexport const defaultThemeConfig = defaultTheme;\n\nexport interface ThemeRegistryItem {\n  id: string;\n  label: string;\n  config: ThemeConfig;\n  description?: string;\n}\n\nexport const THEME_REGISTRY: ThemeRegistryItem[] = [\n  {\n    id: 'default',\n    label: 'Default',\n    config: defaultTheme,\n    description: 'Default theme with standard layout and components.',\n  },\n];\n\nexport function getThemeById(id: string | undefined): ThemeConfig {\n  const theme = THEME_REGISTRY.find((t) => t.id === (id || '')) ?? THEME_REGISTRY[0];\n  return theme?.config ?? defaultTheme;\n}\n`,\n\n  'src/app/page.tsx': `export default function HomePage() {\n  return (\n    <main className=\"min-h-screen flex flex-col items-center justify-center p-8\">\n      <h1 className=\"text-3xl font-bold text-gray-900 mb-4\">Welcome</h1>\n      <p className=\"text-gray-600 mb-6\">Your CMS is set up. Manage content at the admin panel.</p>\n      <a\n        href=\"/admin\"\n        className=\"text-white bg-gray-900 hover:bg-gray-800 px-4 py-2 rounded-lg font-medium transition-colors\"\n      >\n        Open Admin\n      </a>\n    </main>\n  );\n}\n`,\n\n  'src/app/contact/page.tsx': `export default function ContactPage() {\n  return (\n    <main className=\"min-h-screen p-8 max-w-2xl mx-auto\">\n      <h1 className=\"text-3xl font-bold text-gray-900 mb-4\">Contact</h1>\n      <p className=\"text-gray-600\">\n        Add a contact form or wire this page to your CMS form. Use the admin panel to manage forms and submissions.\n      </p>\n    </main>\n  );\n}\n`,\n};\n\nfunction findRoot(cwd: string): string | null {\n  let dir = path.resolve(cwd);\n  for (let i = 0; i < 20; i++) {\n    const pkgPath = path.join(dir, 'package.json');\n    if (fs.existsSync(pkgPath)) {\n      try {\n        const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));\n        if (pkg.dependencies?.next || pkg.devDependencies?.next) return dir;\n      } catch {\n        // ignore\n      }\n    }\n    const parent = path.dirname(dir);\n    if (parent === dir) break;\n    dir = parent;\n  }\n  return null;\n}\n\nfunction writeFile(\n  root: string,\n  filePath: string,\n  content: string,\n  force: boolean,\n  dryRun: boolean,\n  log: (msg: string) => void\n): boolean {\n  const full = path.join(root, filePath);\n  if (fs.existsSync(full) && !force) {\n    log(`  skip (exists): ${filePath}`);\n    return false;\n  }\n  if (dryRun) {\n    log(`  would create: ${filePath}`);\n    return true;\n  }\n  const dir = path.dirname(full);\n  fs.mkdirSync(dir, { recursive: true });\n  fs.writeFileSync(full, content, 'utf8');\n  log(`  created: ${filePath}`);\n  return true;\n}\n\nfunction patchNextConfig(root: string, dryRun: boolean, log: (msg: string) => void): boolean {\n  const candidates = ['next.config.js', 'next.config.mjs', 'next.config.cjs'];\n  let configPath: string | null = null;\n  for (const name of candidates) {\n    const p = path.join(root, name);\n    if (fs.existsSync(p)) {\n      configPath = p;\n      break;\n    }\n  }\n  if (!configPath) {\n    log('  skip next.config: not found');\n    return false;\n  }\n  let content = fs.readFileSync(configPath, 'utf8');\n  if (content.includes(\"'@infuro/cms-core'\") || content.includes('\"@infuro/cms-core\"')) {\n    log(`  skip (already has core): ${path.basename(configPath)}`);\n    return false;\n  }\n  if (content.includes('serverExternalPackages')) {\n    content = content.replace(\n      /(serverExternalPackages:\\s*\\[)/,\n      \"$1'@infuro/cms-core', 'typeorm', \"\n    );\n  } else {\n    content = content.replace(\n      /(const nextConfig\\s*=\\s*\\{|module\\.exports\\s*=\\s*\\{)/,\n      \"$1\\n  serverExternalPackages: ['@infuro/cms-core', 'typeorm'],\"\n    );\n  }\n  if (dryRun) {\n    log(`  would patch: ${path.basename(configPath)}`);\n    return true;\n  }\n  fs.writeFileSync(configPath, content, 'utf8');\n  log(`  patched: ${path.basename(configPath)}`);\n  return true;\n}\n\nfunction patchTailwind(root: string, dryRun: boolean, log: (msg: string) => void): boolean {\n  const candidates = ['tailwind.config.js', 'tailwind.config.mjs', 'tailwind.config.ts'];\n  let configPath: string | null = null;\n  for (const name of candidates) {\n    const p = path.join(root, name);\n    if (fs.existsSync(p)) {\n      configPath = p;\n      break;\n    }\n  }\n  if (!configPath) {\n    log('  skip tailwind: config not found');\n    return false;\n  }\n  let content = fs.readFileSync(configPath, 'utf8');\n  const coreContent = \"./node_modules/@infuro/cms-core/dist/**/*.{js,cjs}\";\n  if (content.includes('@infuro/cms-core')) {\n    log(`  skip (already has core): ${path.basename(configPath)}`);\n    return false;\n  }\n  if (content.includes('content:')) {\n    content = content.replace(\n      /(content:\\s*\\[)/,\n      `$1\\n    \"${coreContent}\",`\n    );\n  }\n  if (dryRun) {\n    log(`  would patch: ${path.basename(configPath)}`);\n    return true;\n  }\n  fs.writeFileSync(configPath, content, 'utf8');\n  log(`  patched: ${path.basename(configPath)}`);\n  return true;\n}\n\nfunction patchLayout(root: string, dryRun: boolean, log: (msg: string) => void): boolean {\n  const layoutPath = path.join(root, 'src/app/layout.tsx');\n  if (!fs.existsSync(layoutPath)) {\n    log('  skip layout: src/app/layout.tsx not found');\n    return false;\n  }\n  let content = fs.readFileSync(layoutPath, 'utf8');\n  if (content.includes('<Providers>')) {\n    log('  skip layout: already uses Providers');\n    return false;\n  }\n  const bodyMatch = content.match(/<body([^>]*)>\\s*(\\{children\\})\\s*<\\/body>/s);\n  if (!bodyMatch) {\n    log('  skip layout: unexpected structure (add <Providers> manually)');\n    return false;\n  }\n  if (dryRun) {\n    log('  would patch: src/app/layout.tsx');\n    return true;\n  }\n  const [, bodyAttrs, children] = bodyMatch;\n  const newBody = `<body${bodyAttrs}>\\n        <Providers>${children}</Providers>\\n      </body>`;\n  content = content.replace(/<body[^>]*>\\s*\\{children\\}\\s*<\\/body>/s, newBody);\n  if (!content.includes(\"from './providers'\") && !content.includes('from \"./providers\"')) {\n    const firstImport = content.match(/^import .+ from .+;\\n/m);\n    content = firstImport\n      ? content.replace(firstImport[0], firstImport[0] + \"import { Providers } from './providers';\\n\")\n      : \"import { Providers } from './providers';\\n\" + content;\n  }\n  if (content.includes('<html') && !content.includes('suppressHydrationWarning')) {\n    content = content.replace(/<html(\\s)/, '<html suppressHydrationWarning$1');\n  }\n  fs.writeFileSync(layoutPath, content, 'utf8');\n  log('  patched: src/app/layout.tsx');\n  return true;\n}\n\nfunction patchPackageJson(root: string, dryRun: boolean, log: (msg: string) => void): boolean {\n  const pkgPath = path.join(root, 'package.json');\n  if (!fs.existsSync(pkgPath)) return false;\n  const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));\n  const scripts = pkg.scripts || {};\n  let changed = false;\n  if (!scripts.seed) {\n    scripts.seed = 'tsx src/lib/seed.ts';\n    changed = true;\n  }\n  if (!scripts['migration:run']) {\n    scripts['migration:run'] = 'tsx scripts/run-migrations.ts';\n    changed = true;\n  }\n  const dev = pkg.devDependencies || {};\n  const deps = pkg.dependencies || {};\n  if (!deps['@infuro/cms-core']) {\n    deps['@infuro/cms-core'] = '^1.0.6';\n    changed = true;\n  }\n  if (!dev.tsx) {\n    dev.tsx = '^4.0.0';\n    changed = true;\n  }\n  if (!dev.dotenv) {\n    dev.dotenv = '^16.0.0';\n    changed = true;\n  }\n  if (!changed) {\n    log('  skip package.json: scripts/devDeps already present');\n    return false;\n  }\n  pkg.scripts = scripts;\n  pkg.dependencies = { ...pkg.dependencies, ...deps };\n  pkg.devDependencies = { ...pkg.devDependencies, ...dev };\n  if (dryRun) {\n    log('  would patch: package.json (scripts + devDependencies)');\n    return true;\n  }\n  fs.writeFileSync(pkgPath, JSON.stringify(pkg, null, 2), 'utf8');\n  log('  patched: package.json');\n  return true;\n}\n\nasync function runNpmInstall(root: string, log: (msg: string) => void): Promise<void> {\n  const { spawnSync } = await import('child_process');\n  log('  running: npm install (deps)...');\n  spawnSync('npm', ['install', '@infuro/cms-core', 'typeorm', 'reflect-metadata', 'bcryptjs', 'next-auth', 'next-themes', 'sonner'], {\n    cwd: root,\n    stdio: 'inherit',\n    shell: true,\n  });\n  log('  running: npm install -D tsx dotenv @types/node...');\n  spawnSync('npm', ['install', '-D', 'tsx', 'dotenv', '@types/node'], {\n    cwd: root,\n    stdio: 'inherit',\n    shell: true,\n  });\n}\n\nasync function runInit(opts: {\n  force: boolean;\n  dryRun: boolean;\n  noDeps: boolean;\n  noPatchConfig: boolean;\n}) {\n  const log = (msg: string) => console.log(msg);\n  const cwd = process.cwd();\n  const root = findRoot(cwd);\n  if (!root) {\n    console.error('Not a Next.js project (no package.json with next dependency found from ' + cwd + ')');\n    process.exit(1);\n  }\n  const appDir = path.join(root, 'src/app');\n  if (!fs.existsSync(appDir)) {\n    console.error('Expected src/app directory not found. Use a Next.js app with src directory (e.g. create-next-app --src-dir).');\n    process.exit(1);\n  }\n\n  log('Infuro CMS init @ ' + root);\n  if (opts.dryRun) log('(dry run)');\n\n  for (const [filePath, content] of Object.entries(TEMPLATES)) {\n    writeFile(root, filePath, content, opts.force, opts.dryRun, log);\n  }\n\n  if (!opts.noPatchConfig) {\n    log('Config patches:');\n    patchNextConfig(root, opts.dryRun, log);\n    patchTailwind(root, opts.dryRun, log);\n    patchLayout(root, opts.dryRun, log);\n    patchPackageJson(root, opts.dryRun, log);\n  }\n\n  if (!opts.noDeps && !opts.dryRun) {\n    log('Dependencies:');\n    await runNpmInstall(root, log);\n  } else if (!opts.noDeps && opts.dryRun) {\n    log('  would run: npm install @infuro/cms-core typeorm reflect-metadata bcryptjs next-auth next-themes sonner');\n    log('  would run: npm install -D tsx dotenv @types/node');\n  }\n\n  log('');\n  log('Done. Next steps:');\n  log('  1. Copy .env.example to .env and set DATABASE_URL, NEXTAUTH_SECRET, NEXTAUTH_URL, ADMIN_EMAIL, ADMIN_PASSWORD');\n  log('  2. Run npm run migration:run then npm run seed (creates admin from ADMIN_EMAIL/ADMIN_PASSWORD)');\n  log('  3. npm run dev');\n}\n\nconst args = process.argv.slice(2);\nconst force = args.includes('--force');\nconst dryRun = args.includes('--dry-run');\nconst noDeps = args.includes('--no-deps');\nconst noPatchConfig = args.includes('--no-patch-config');\n\nif (args[0] === 'init' || args.includes('--init') || (args.length === 0 && !args.some((a) => a.startsWith('--')))) {\n  runInit({ force, dryRun, noDeps, noPatchConfig }).catch((e) => {\n    console.error(e);\n    process.exit(1);\n  });\n} else {\n  console.log('Usage: npx @infuro/cms-core init [--force] [--dry-run] [--no-deps] [--no-patch-config]');\n  process.exit(args[0] === '--help' || args[0] === '-h' ? 0 : 1);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAKA,gBAAe;AACf,kBAAiB;AAEjB,IAAM,YAAY;AAAA,EAChB,0BAA0B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAsC1B,2BAA2B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiB3B,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAuBlB,oCAAoC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAyFpC,2CAA2C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAuC3C,4BAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkB5B,sCAAsC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQtC,qBAAqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAoCrB,yBAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkBzB,gBAAgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAShB,mBAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA+BnB,oCAAoC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAmBpC,6BAA6B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAsB7B,4BAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAe5B,+BAA+B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAsB/B,wCAAwC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA8CxC,wCAAwC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA2CxC,+CAA+C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA4B/C,+CAA+C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAsB/C,6BAA6B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA2B7B,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBpB,4BAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAW9B;AAEA,SAAS,SAAS,KAA4B;AAC5C,MAAI,MAAM,YAAAA,QAAK,QAAQ,GAAG;AAC1B,WAAS,IAAI,GAAG,IAAI,IAAI,KAAK;AAC3B,UAAM,UAAU,YAAAA,QAAK,KAAK,KAAK,cAAc;AAC7C,QAAI,UAAAC,QAAG,WAAW,OAAO,GAAG;AAC1B,UAAI;AACF,cAAM,MAAM,KAAK,MAAM,UAAAA,QAAG,aAAa,SAAS,MAAM,CAAC;AACvD,YAAI,IAAI,cAAc,QAAQ,IAAI,iBAAiB,KAAM,QAAO;AAAA,MAClE,QAAQ;AAAA,MAER;AAAA,IACF;AACA,UAAM,SAAS,YAAAD,QAAK,QAAQ,GAAG;AAC/B,QAAI,WAAW,IAAK;AACpB,UAAM;AAAA,EACR;AACA,SAAO;AACT;AAEA,SAAS,UACP,MACA,UACA,SACAE,QACAC,SACA,KACS;AACT,QAAM,OAAO,YAAAH,QAAK,KAAK,MAAM,QAAQ;AACrC,MAAI,UAAAC,QAAG,WAAW,IAAI,KAAK,CAACC,QAAO;AACjC,QAAI,oBAAoB,QAAQ,EAAE;AAClC,WAAO;AAAA,EACT;AACA,MAAIC,SAAQ;AACV,QAAI,mBAAmB,QAAQ,EAAE;AACjC,WAAO;AAAA,EACT;AACA,QAAM,MAAM,YAAAH,QAAK,QAAQ,IAAI;AAC7B,YAAAC,QAAG,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AACrC,YAAAA,QAAG,cAAc,MAAM,SAAS,MAAM;AACtC,MAAI,cAAc,QAAQ,EAAE;AAC5B,SAAO;AACT;AAEA,SAAS,gBAAgB,MAAcE,SAAiB,KAAqC;AAC3F,QAAM,aAAa,CAAC,kBAAkB,mBAAmB,iBAAiB;AAC1E,MAAI,aAA4B;AAChC,aAAW,QAAQ,YAAY;AAC7B,UAAM,IAAI,YAAAH,QAAK,KAAK,MAAM,IAAI;AAC9B,QAAI,UAAAC,QAAG,WAAW,CAAC,GAAG;AACpB,mBAAa;AACb;AAAA,IACF;AAAA,EACF;AACA,MAAI,CAAC,YAAY;AACf,QAAI,+BAA+B;AACnC,WAAO;AAAA,EACT;AACA,MAAI,UAAU,UAAAA,QAAG,aAAa,YAAY,MAAM;AAChD,MAAI,QAAQ,SAAS,oBAAoB,KAAK,QAAQ,SAAS,oBAAoB,GAAG;AACpF,QAAI,8BAA8B,YAAAD,QAAK,SAAS,UAAU,CAAC,EAAE;AAC7D,WAAO;AAAA,EACT;AACA,MAAI,QAAQ,SAAS,wBAAwB,GAAG;AAC9C,cAAU,QAAQ;AAAA,MAChB;AAAA,MACA;AAAA,IACF;AAAA,EACF,OAAO;AACL,cAAU,QAAQ;AAAA,MAChB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,MAAIG,SAAQ;AACV,QAAI,kBAAkB,YAAAH,QAAK,SAAS,UAAU,CAAC,EAAE;AACjD,WAAO;AAAA,EACT;AACA,YAAAC,QAAG,cAAc,YAAY,SAAS,MAAM;AAC5C,MAAI,cAAc,YAAAD,QAAK,SAAS,UAAU,CAAC,EAAE;AAC7C,SAAO;AACT;AAEA,SAAS,cAAc,MAAcG,SAAiB,KAAqC;AACzF,QAAM,aAAa,CAAC,sBAAsB,uBAAuB,oBAAoB;AACrF,MAAI,aAA4B;AAChC,aAAW,QAAQ,YAAY;AAC7B,UAAM,IAAI,YAAAH,QAAK,KAAK,MAAM,IAAI;AAC9B,QAAI,UAAAC,QAAG,WAAW,CAAC,GAAG;AACpB,mBAAa;AACb;AAAA,IACF;AAAA,EACF;AACA,MAAI,CAAC,YAAY;AACf,QAAI,mCAAmC;AACvC,WAAO;AAAA,EACT;AACA,MAAI,UAAU,UAAAA,QAAG,aAAa,YAAY,MAAM;AAChD,QAAM,cAAc;AACpB,MAAI,QAAQ,SAAS,kBAAkB,GAAG;AACxC,QAAI,8BAA8B,YAAAD,QAAK,SAAS,UAAU,CAAC,EAAE;AAC7D,WAAO;AAAA,EACT;AACA,MAAI,QAAQ,SAAS,UAAU,GAAG;AAChC,cAAU,QAAQ;AAAA,MAChB;AAAA,MACA;AAAA,OAAY,WAAW;AAAA,IACzB;AAAA,EACF;AACA,MAAIG,SAAQ;AACV,QAAI,kBAAkB,YAAAH,QAAK,SAAS,UAAU,CAAC,EAAE;AACjD,WAAO;AAAA,EACT;AACA,YAAAC,QAAG,cAAc,YAAY,SAAS,MAAM;AAC5C,MAAI,cAAc,YAAAD,QAAK,SAAS,UAAU,CAAC,EAAE;AAC7C,SAAO;AACT;AAEA,SAAS,YAAY,MAAcG,SAAiB,KAAqC;AACvF,QAAM,aAAa,YAAAH,QAAK,KAAK,MAAM,oBAAoB;AACvD,MAAI,CAAC,UAAAC,QAAG,WAAW,UAAU,GAAG;AAC9B,QAAI,6CAA6C;AACjD,WAAO;AAAA,EACT;AACA,MAAI,UAAU,UAAAA,QAAG,aAAa,YAAY,MAAM;AAChD,MAAI,QAAQ,SAAS,aAAa,GAAG;AACnC,QAAI,uCAAuC;AAC3C,WAAO;AAAA,EACT;AACA,QAAM,YAAY,QAAQ,MAAM,4CAA4C;AAC5E,MAAI,CAAC,WAAW;AACd,QAAI,gEAAgE;AACpE,WAAO;AAAA,EACT;AACA,MAAIE,SAAQ;AACV,QAAI,mCAAmC;AACvC,WAAO;AAAA,EACT;AACA,QAAM,CAAC,EAAE,WAAW,QAAQ,IAAI;AAChC,QAAM,UAAU,QAAQ,SAAS;AAAA,qBAAyB,QAAQ;AAAA;AAClE,YAAU,QAAQ,QAAQ,0CAA0C,OAAO;AAC3E,MAAI,CAAC,QAAQ,SAAS,oBAAoB,KAAK,CAAC,QAAQ,SAAS,oBAAoB,GAAG;AACtF,UAAM,cAAc,QAAQ,MAAM,wBAAwB;AAC1D,cAAU,cACN,QAAQ,QAAQ,YAAY,CAAC,GAAG,YAAY,CAAC,IAAI,4CAA4C,IAC7F,+CAA+C;AAAA,EACrD;AACA,MAAI,QAAQ,SAAS,OAAO,KAAK,CAAC,QAAQ,SAAS,0BAA0B,GAAG;AAC9E,cAAU,QAAQ,QAAQ,aAAa,kCAAkC;AAAA,EAC3E;AACA,YAAAF,QAAG,cAAc,YAAY,SAAS,MAAM;AAC5C,MAAI,+BAA+B;AACnC,SAAO;AACT;AAEA,SAAS,iBAAiB,MAAcE,SAAiB,KAAqC;AAC5F,QAAM,UAAU,YAAAH,QAAK,KAAK,MAAM,cAAc;AAC9C,MAAI,CAAC,UAAAC,QAAG,WAAW,OAAO,EAAG,QAAO;AACpC,QAAM,MAAM,KAAK,MAAM,UAAAA,QAAG,aAAa,SAAS,MAAM,CAAC;AACvD,QAAM,UAAU,IAAI,WAAW,CAAC;AAChC,MAAI,UAAU;AACd,MAAI,CAAC,QAAQ,MAAM;AACjB,YAAQ,OAAO;AACf,cAAU;AAAA,EACZ;AACA,MAAI,CAAC,QAAQ,eAAe,GAAG;AAC7B,YAAQ,eAAe,IAAI;AAC3B,cAAU;AAAA,EACZ;AACA,QAAM,MAAM,IAAI,mBAAmB,CAAC;AACpC,QAAM,OAAO,IAAI,gBAAgB,CAAC;AAClC,MAAI,CAAC,KAAK,kBAAkB,GAAG;AAC7B,SAAK,kBAAkB,IAAI;AAC3B,cAAU;AAAA,EACZ;AACA,MAAI,CAAC,IAAI,KAAK;AACZ,QAAI,MAAM;AACV,cAAU;AAAA,EACZ;AACA,MAAI,CAAC,IAAI,QAAQ;AACf,QAAI,SAAS;AACb,cAAU;AAAA,EACZ;AACA,MAAI,CAAC,SAAS;AACZ,QAAI,sDAAsD;AAC1D,WAAO;AAAA,EACT;AACA,MAAI,UAAU;AACd,MAAI,eAAe,EAAE,GAAG,IAAI,cAAc,GAAG,KAAK;AAClD,MAAI,kBAAkB,EAAE,GAAG,IAAI,iBAAiB,GAAG,IAAI;AACvD,MAAIE,SAAQ;AACV,QAAI,yDAAyD;AAC7D,WAAO;AAAA,EACT;AACA,YAAAF,QAAG,cAAc,SAAS,KAAK,UAAU,KAAK,MAAM,CAAC,GAAG,MAAM;AAC9D,MAAI,yBAAyB;AAC7B,SAAO;AACT;AAEA,eAAe,cAAc,MAAc,KAA2C;AACpF,QAAM,EAAE,UAAU,IAAI,MAAM,OAAO,eAAe;AAClD,MAAI,kCAAkC;AACtC,YAAU,OAAO,CAAC,WAAW,oBAAoB,WAAW,oBAAoB,YAAY,aAAa,eAAe,QAAQ,GAAG;AAAA,IACjI,KAAK;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,EACT,CAAC;AACD,MAAI,qDAAqD;AACzD,YAAU,OAAO,CAAC,WAAW,MAAM,OAAO,UAAU,aAAa,GAAG;AAAA,IAClE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,EACT,CAAC;AACH;AAEA,eAAe,QAAQ,MAKpB;AACD,QAAM,MAAM,CAAC,QAAgB,QAAQ,IAAI,GAAG;AAC5C,QAAM,MAAM,QAAQ,IAAI;AACxB,QAAM,OAAO,SAAS,GAAG;AACzB,MAAI,CAAC,MAAM;AACT,YAAQ,MAAM,4EAA4E,MAAM,GAAG;AACnG,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,QAAM,SAAS,YAAAD,QAAK,KAAK,MAAM,SAAS;AACxC,MAAI,CAAC,UAAAC,QAAG,WAAW,MAAM,GAAG;AAC1B,YAAQ,MAAM,8GAA8G;AAC5H,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,MAAI,uBAAuB,IAAI;AAC/B,MAAI,KAAK,OAAQ,KAAI,WAAW;AAEhC,aAAW,CAAC,UAAU,OAAO,KAAK,OAAO,QAAQ,SAAS,GAAG;AAC3D,cAAU,MAAM,UAAU,SAAS,KAAK,OAAO,KAAK,QAAQ,GAAG;AAAA,EACjE;AAEA,MAAI,CAAC,KAAK,eAAe;AACvB,QAAI,iBAAiB;AACrB,oBAAgB,MAAM,KAAK,QAAQ,GAAG;AACtC,kBAAc,MAAM,KAAK,QAAQ,GAAG;AACpC,gBAAY,MAAM,KAAK,QAAQ,GAAG;AAClC,qBAAiB,MAAM,KAAK,QAAQ,GAAG;AAAA,EACzC;AAEA,MAAI,CAAC,KAAK,UAAU,CAAC,KAAK,QAAQ;AAChC,QAAI,eAAe;AACnB,UAAM,cAAc,MAAM,GAAG;AAAA,EAC/B,WAAW,CAAC,KAAK,UAAU,KAAK,QAAQ;AACtC,QAAI,0GAA0G;AAC9G,QAAI,oDAAoD;AAAA,EAC1D;AAEA,MAAI,EAAE;AACN,MAAI,mBAAmB;AACvB,MAAI,iHAAiH;AACrH,MAAI,kGAAkG;AACtG,MAAI,kBAAkB;AACxB;AAEA,IAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;AACjC,IAAM,QAAQ,KAAK,SAAS,SAAS;AACrC,IAAM,SAAS,KAAK,SAAS,WAAW;AACxC,IAAM,SAAS,KAAK,SAAS,WAAW;AACxC,IAAM,gBAAgB,KAAK,SAAS,mBAAmB;AAEvD,IAAI,KAAK,CAAC,MAAM,UAAU,KAAK,SAAS,QAAQ,KAAM,KAAK,WAAW,KAAK,CAAC,KAAK,KAAK,CAAC,MAAM,EAAE,WAAW,IAAI,CAAC,GAAI;AACjH,UAAQ,EAAE,OAAO,QAAQ,QAAQ,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM;AAC7D,YAAQ,MAAM,CAAC;AACf,YAAQ,KAAK,CAAC;AAAA,EAChB,CAAC;AACH,OAAO;AACL,UAAQ,IAAI,wFAAwF;AACpG,UAAQ,KAAK,KAAK,CAAC,MAAM,YAAY,KAAK,CAAC,MAAM,OAAO,IAAI,CAAC;AAC/D;","names":["path","fs","force","dryRun"]}
+{"version":3,"sources":["../src/cli.ts"],"sourcesContent":["#!/usr/bin/env node\n/**\n * @infuro/cms-core init CLI\n * Usage: npx @infuro/cms-core init [--force] [--dry-run] [--no-deps] [--no-patch-config]\n */\nimport fs from 'fs';\nimport path from 'path';\n\nconst TEMPLATES = {\n  'src/lib/data-source.ts': `import 'reflect-metadata';\nimport path from 'path';\nimport { createRequire } from 'module';\nimport { DataSource } from 'typeorm';\nimport { CMS_ENTITY_MAP } from '@infuro/cms-core';\n\nconst require = createRequire(import.meta.url);\nconst coreDir = path.dirname(require.resolve('@infuro/cms-core'));\n\nlet dataSource: DataSource | null = null;\n\nexport function getDataSource(): DataSource {\n  if (!dataSource) {\n    dataSource = new DataSource({\n      type: 'postgres',\n      url: process.env.DATABASE_URL,\n      entities: Object.values(CMS_ENTITY_MAP),\n      synchronize: false,\n      ...(process.env.TYPEORM_CLI && {\n        migrations: [\n          path.join(coreDir, 'migrations', '*.ts'),\n          path.join(process.cwd(), 'src', 'migrations', '*.ts'),\n        ],\n      }),\n    });\n  }\n  return dataSource;\n}\n\nexport async function getDataSourceInitialized(): Promise<DataSource> {\n  const ds = getDataSource();\n  if (!ds.isInitialized) await ds.initialize();\n  return ds;\n}\n\nexport default getDataSource;\n`,\n\n  'src/lib/auth-helpers.ts': `import { getServerSession } from 'next-auth';\nimport { NextResponse } from 'next/server';\nimport { createAuthHelpers } from '@infuro/cms-core/auth';\n\nconst helpers = createAuthHelpers(\n  async () => {\n    const s = await getServerSession();\n    return s ? { user: s.user } : null;\n  },\n  NextResponse\n);\n\nexport const requireAuth = helpers.requireAuth;\nexport const requirePermission = helpers.requirePermission;\nexport const getAuthenticatedUser = helpers.getAuthenticatedUser;\n`,\n\n  'src/lib/cms.ts': `import {\n  createCmsApp,\n  localStoragePlugin,\n  type CmsApp,\n} from '@infuro/cms-core';\nimport { getDataSourceInitialized } from './data-source';\n\nlet cmsPromise: Promise<CmsApp> | null = null;\n\nexport async function getCms(): Promise<CmsApp> {\n  if (cmsPromise) return cmsPromise;\n  const dataSource = await getDataSourceInitialized();\n  cmsPromise = createCmsApp({\n    dataSource,\n    config: process.env as unknown as Record<string, string>,\n    plugins: [\n      localStoragePlugin({ dir: 'public/uploads' }),\n    ],\n  });\n  return cmsPromise;\n}\n`,\n\n  'src/app/api/[[...path]]/route.ts': `import { NextResponse } from 'next/server';\nimport { getServerSession } from 'next-auth';\nimport { createCmsApiHandler } from '@infuro/cms-core/api';\nimport { CMS_ENTITY_MAP } from '@infuro/cms-core';\nimport { getDataSourceInitialized } from '@/lib/data-source';\nimport { requireAuth } from '@/lib/auth-helpers';\nimport { getCms } from '@/lib/cms';\nimport bcrypt from 'bcryptjs';\n\nconst baseUrl = process.env.NEXTAUTH_URL || 'http://localhost:3000';\n\nlet handlerPromise: Promise<ReturnType<typeof createCmsApiHandler>> | null = null;\n\nasync function getHandler() {\n  if (!handlerPromise) {\n    const dataSource = await getDataSourceInitialized();\n    handlerPromise = Promise.resolve(\n      createCmsApiHandler({\n        dataSource,\n        entityMap: CMS_ENTITY_MAP,\n        requireAuth,\n        json: NextResponse.json.bind(NextResponse),\n        getCms,\n        userAuth: {\n          dataSource,\n          entityMap: CMS_ENTITY_MAP,\n          json: NextResponse.json.bind(NextResponse),\n          baseUrl,\n          hashPassword: (p) => Promise.resolve(bcrypt.hashSync(p, 12)),\n          comparePassword: (p, h) => Promise.resolve(bcrypt.compareSync(p, h)),\n          resetExpiryHours: 1,\n          getSession: () =>\n            getServerSession().then((s) => (s ? { user: s.user } : null)),\n        },\n        dashboard: {\n          dataSource,\n          entityMap: CMS_ENTITY_MAP,\n          json: NextResponse.json.bind(NextResponse),\n          requireAuth,\n          requirePermission: requireAuth,\n        },\n        upload: {\n          json: NextResponse.json.bind(NextResponse),\n          requireAuth,\n          storage: () => getCms().then((cms) => cms.getPlugin('storage')),\n          localUploadDir: 'public/uploads',\n        },\n        blogBySlug: {\n          dataSource,\n          entityMap: CMS_ENTITY_MAP,\n          json: NextResponse.json.bind(NextResponse),\n          requireAuth: async () => null,\n        },\n        formBySlug: {\n          dataSource,\n          entityMap: CMS_ENTITY_MAP,\n          json: NextResponse.json.bind(NextResponse),\n          requireAuth: async () => null,\n        },\n        usersApi: {\n          dataSource,\n          entityMap: CMS_ENTITY_MAP,\n          json: NextResponse.json.bind(NextResponse),\n          requireAuth,\n          baseUrl,\n        },\n      })\n    );\n  }\n  return handlerPromise;\n}\n\nasync function handle(method: string, req: Request, context: { params: Promise<{ path?: string[] }> }) {\n  try {\n    const handler = await getHandler();\n    const { path: pathSegments = [] } = await context.params;\n    return handler.handle(method, pathSegments, req);\n  } catch {\n    return NextResponse.json({ error: 'Server Error' }, { status: 500 });\n  }\n}\n\nexport async function GET(req: Request, ctx: { params: Promise<{ path?: string[] }> }) { return handle('GET', req, ctx); }\nexport async function POST(req: Request, ctx: { params: Promise<{ path?: string[] }> }) { return handle('POST', req, ctx); }\nexport async function PUT(req: Request, ctx: { params: Promise<{ path?: string[] }> }) { return handle('PUT', req, ctx); }\nexport async function PATCH(req: Request, ctx: { params: Promise<{ path?: string[] }> }) { return handle('PATCH', req, ctx); }\nexport async function DELETE(req: Request, ctx: { params: Promise<{ path?: string[] }> }) { return handle('DELETE', req, ctx); }\n`,\n\n  'src/app/api/auth/[...nextauth]/route.ts': `import NextAuth from 'next-auth';\nimport { getNextAuthOptions } from '@infuro/cms-core/auth';\nimport { getDataSourceInitialized } from '@/lib/data-source';\nimport { CMS_ENTITY_MAP } from '@infuro/cms-core';\nimport bcrypt from 'bcryptjs';\n\nasync function getOptions() {\n  const dataSource = await getDataSourceInitialized();\n  const userRepo = dataSource.getRepository(CMS_ENTITY_MAP.users);\n  return getNextAuthOptions({\n    getUserByEmail: async (email: string) => {\n      return userRepo.findOne({\n        where: { email },\n        relations: ['group', 'group.permissions'],\n        select: ['id', 'email', 'name', 'password', 'blocked', 'deleted', 'groupId', 'adminAccess'],\n      }) as any;\n    },\n    comparePassword: (plain, hash) => Promise.resolve(bcrypt.compareSync(plain, hash)),\n    signInPage: '/admin/signin',\n  });\n}\n\nlet handler: ReturnType<typeof NextAuth> | null = null;\n\nasync function getHandler() {\n  if (!handler) handler = NextAuth(await getOptions());\n  return handler;\n}\n\ntype NextAuthContext = { params: Promise<{ nextauth?: string[] }> };\n\nexport async function GET(req: Request, context: NextAuthContext) {\n  return (await getHandler())(req, context);\n}\nexport async function POST(req: Request, context: NextAuthContext) {\n  return (await getHandler())(req, context);\n}\n`,\n\n  'src/app/admin/layout.tsx': `'use client';\n\nimport '@infuro/cms-core/admin.css';\nimport AdminLayout from '@infuro/cms-core/admin';\n\nexport default function AdminLayoutWrapper({ children }: { children: React.ReactNode }) {\n  return (\n    <AdminLayout\n      customNavItems={[]}\n      customNavSections={[]}\n      customCrudConfigs={{}}\n    >\n      {children}\n    </AdminLayout>\n  );\n}\n`,\n\n  'src/app/admin/[[...slug]]/page.tsx': `import { AdminPageResolver } from '@infuro/cms-core/admin';\n\nexport default async function AdminPage({ params }: { params: Promise<{ slug?: string[] }> }) {\n  const { slug } = await params;\n  return <AdminPageResolver slug={slug} />;\n}\n`,\n\n  'src/middleware.ts': `import { NextResponse } from 'next/server';\nimport type { NextRequest } from 'next/server';\nimport { createCmsMiddleware } from '@infuro/cms-core/auth';\n\nconst cmsMiddleware = createCmsMiddleware({\n  publicApiMethods: {\n    '/api/contacts': ['POST'],\n    '/api/form-submissions': ['POST'],\n    '/api/blogs': ['GET'],\n    '/api/forms': ['GET'],\n    '/api/auth': ['GET', 'POST'],\n    '/api/users/forgot-password': ['POST'],\n    '/api/users/set-password': ['POST'],\n    '/api/users/invite': ['POST'],\n  },\n});\n\nexport function middleware(request: NextRequest) {\n  const result = cmsMiddleware({\n    nextUrl: request.nextUrl,\n    url: request.url,\n    method: request.method,\n    cookies: request.cookies,\n  });\n\n  if (result.type === 'next') return NextResponse.next();\n  if (result.type === 'redirect') return NextResponse.redirect(result.url);\n  if (result.type === 'json') return NextResponse.json(result.body, { status: result.status });\n  return NextResponse.next();\n}\n\nexport const config = {\n  matcher: ['/admin/:path*', '/api/:path*'],\n};\n`,\n\n  'src/app/providers.tsx': `\"use client\";\n\nimport { ThemeProvider } from \"next-themes\";\nimport { SessionProvider } from \"next-auth/react\";\nimport { Toaster } from \"sonner\";\n\nexport function Providers({ children }: { children: React.ReactNode }) {\n  return (\n    <SessionProvider>\n      <ThemeProvider attribute=\"class\" defaultTheme=\"system\" enableSystem>\n        {children}\n        <Toaster position=\"top-right\" />\n      </ThemeProvider>\n    </SessionProvider>\n  );\n}\n`,\n\n  '.env.example': `DATABASE_URL=postgres://user:password@localhost:5432/mydb\nNEXTAUTH_SECRET=your-random-secret\nNEXTAUTH_URL=http://localhost:3000\n\n# Admin user (for npm run seed)\nADMIN_EMAIL=admin@example.com\nADMIN_PASSWORD=changeme\n`,\n\n  'src/lib/seed.ts': `try { require('dotenv/config'); } catch {}\nimport 'reflect-metadata';\nimport { getDataSourceInitialized } from './data-source';\nimport { CMS_ENTITY_MAP } from '@infuro/cms-core';\nimport bcrypt from 'bcryptjs';\n\nasync function main() {\n  const ds = await getDataSourceInitialized();\n  const userRepo = ds.getRepository(CMS_ENTITY_MAP.users);\n\n  const email = process.env.ADMIN_EMAIL || 'admin@example.com';\n  const password = process.env.ADMIN_PASSWORD || 'changeme';\n\n  const existing = await userRepo.findOne({ where: { email } });\n  if (!existing) {\n    const hashedPassword = await bcrypt.hash(password, 10);\n    await userRepo.save(userRepo.create({ name: 'Admin', email, password: hashedPassword }));\n    console.log('Default admin user created');\n  } else {\n    console.log('Default admin user already exists');\n  }\n\n  await ds.destroy();\n}\n\nmain().catch((e) => {\n  console.error(e);\n  process.exit(1);\n});\n`,\n\n  'scripts/migration-datasource.cjs': `/**\n * Data source for TypeORM CLI (migration:generate). Resolves @infuro/cms-core from project root (works with npm link).\n */\nrequire('reflect-metadata');\nrequire('dotenv/config');\nconst path = require('path');\nconst { DataSource } = require('typeorm');\nconst coreEntry = path.resolve(__dirname, '..', 'node_modules', '@infuro', 'cms-core', 'dist', 'index.cjs');\nconst { CMS_ENTITY_MAP } = require(coreEntry);\n\nmodule.exports = new DataSource({\n  type: 'postgres',\n  url: process.env.DATABASE_URL,\n  entities: Object.values(CMS_ENTITY_MAP),\n  synchronize: false,\n  migrations: ['src/migrations/*.ts'],\n});\n`,\n\n  'scripts/run-migrations.ts': `/**\n * Run TypeORM migrations. Loads .env so DATABASE_URL is set.\n * Usage: npm run migration:run\n */\ntry { require('dotenv/config'); } catch {}\nimport 'reflect-metadata';\n\nasync function main() {\n  process.env.TYPEORM_CLI = '1';\n  const { getDataSourceInitialized } = await import('../src/lib/data-source');\n  const ds = await getDataSourceInitialized();\n  const run = await ds.runMigrations();\n  console.log(run.length ? \\`Ran \\${run.length} migration(s).\\` : 'No pending migrations.');\n  await ds.destroy();\n}\n\nmain().catch((e) => {\n  console.error(e);\n  process.exit(1);\n});\n`,\n\n  'src/migrations/README.md': `# TypeORM migrations\n\nGenerate a new migration (after changing entities):\n\n\\`\\`\\`bash\nnpm run migration:generate -- MyMigrationName\n\\`\\`\\`\n\nRun pending migrations:\n\n\\`\\`\\`bash\nnpm run migration:run\n\\`\\`\\`\n`,\n\n  'src/themes/default/index.ts': `import { createTheme } from '@infuro/cms-core/theme';\n\nimport { Container, meta as containerMeta } from './components/Container';\nimport { TextBlock, meta as textBlockMeta } from './components/TextBlock';\n\nimport { Navbar } from './layout/Navbar';\nimport { Footer, footerFields, footerDefaults } from './layout/Footer';\n\nexport default createTheme({\n  name: 'default',\n  label: 'Default Theme',\n  components: [\n    { component: Container, meta: containerMeta },\n    { component: TextBlock, meta: textBlockMeta },\n  ],\n  layout: {\n    navbar: { component: Navbar },\n    footer: { component: Footer, fields: footerFields, defaults: footerDefaults },\n  },\n});\n`,\n\n  'src/themes/default/layout/Navbar.tsx': `import type { NavbarConfig, NavItem } from '@infuro/cms-core/theme';\n\nfunction NavLink({ item }: { item: NavItem }) {\n  return (\n    <li className=\"list-none\">\n      <a\n        href={item.url}\n        target={item.openInNewTab ? '_blank' : undefined}\n        rel={item.openInNewTab ? 'noopener noreferrer' : undefined}\n        className=\"text-sm font-medium text-gray-700 hover:text-gray-900 px-3 py-2 inline-block\"\n      >\n        {item.label}\n      </a>\n    </li>\n  );\n}\n\nexport function Navbar({ logo, items, ctaLabel, ctaUrl }: NavbarConfig) {\n  return (\n    <nav className=\"bg-white sticky top-0 z-40 border-b\">\n      <div className=\"max-w-7xl mx-auto px-4 sm:px-6 lg:px-8\">\n        <div className=\"flex items-center justify-between h-16\">\n          <a href=\"/\" className=\"flex-shrink-0\">\n            {logo ? (\n              <img src={logo} alt=\"Logo\" className=\"h-8\" />\n            ) : (\n              <span className=\"text-xl font-bold text-gray-900\">Logo</span>\n            )}\n          </a>\n          <ul className=\"flex items-center gap-1 list-none m-0 p-0\">\n            {items.map((item) => (\n              <NavLink key={item.id} item={item} />\n            ))}\n          </ul>\n          {ctaLabel && (\n            <a href={ctaUrl || '#'} className=\"text-sm font-medium text-gray-900 hover:underline\">\n              {ctaLabel}\n            </a>\n          )}\n        </div>\n      </div>\n    </nav>\n  );\n}\n`,\n\n  'src/themes/default/layout/Footer.tsx': `import type { FooterConfig, PropDefinition } from '@infuro/cms-core/theme';\n\nexport const footerFields: PropDefinition[] = [\n  { name: 'copyright', label: 'Copyright Text', type: 'text' },\n];\n\nexport const footerDefaults: Record<string, any> = {\n  copyright: '© 2025 Your Site. All rights reserved.',\n  columns: [],\n  socialLinks: [],\n};\n\nexport function Footer({ copyright, columns = [], socialLinks = [] }: FooterConfig) {\n  return (\n    <footer className=\"bg-gray-900 text-gray-400 py-8 px-8\">\n      <div className=\"max-w-7xl mx-auto\">\n        {columns.length > 0 && (\n          <div className=\"grid grid-cols-2 md:grid-cols-4 gap-8 mb-6\">\n            {columns.map((col, i) => (\n              <div key={i}>\n                <h4 className=\"text-white font-semibold mb-3 text-sm\">{col.title}</h4>\n                <ul className=\"space-y-2\">\n                  {col.links.map((link, j) => (\n                    <li key={j}>\n                      <a href={link.url} className=\"text-sm hover:text-white transition-colors\">\n                        {link.label}\n                      </a>\n                    </li>\n                  ))}\n                </ul>\n              </div>\n            ))}\n          </div>\n        )}\n        <div className=\"border-t border-gray-800 pt-6\">\n          <p className=\"text-sm\">{copyright}</p>\n        </div>\n      </div>\n    </footer>\n  );\n}\n`,\n\n  'src/themes/default/components/Container.tsx': `import type { ComponentMeta } from '@infuro/cms-core/theme';\n\nexport const meta: ComponentMeta = {\n  name: 'Container',\n  label: 'Container',\n  category: 'layout',\n  icon: 'LayoutDashboard',\n  description: 'A layout container that holds other components',\n  defaultProps: { background: '#ffffff' },\n  props: [{ name: 'background', label: 'Background', type: 'color' }],\n  canContainChildren: true,\n};\n\nexport function Container({\n  background = '#ffffff',\n  children,\n}: {\n  background?: string;\n  children?: React.ReactNode;\n}) {\n  return (\n    <div style={{ backgroundColor: background, minHeight: '48px', padding: '1rem' }}>\n      {children}\n    </div>\n  );\n}\n`,\n\n  'src/themes/default/components/TextBlock.tsx': `import type { ComponentMeta } from '@infuro/cms-core/theme';\n\nexport const meta: ComponentMeta = {\n  name: 'TextBlock',\n  label: 'Text Block',\n  category: 'content',\n  icon: 'Type',\n  description: 'Rich text content block',\n  defaultProps: { content: '<p>Enter your text here...</p>' },\n  props: [{ name: 'content', label: 'Content', type: 'richtext' }],\n};\n\nexport function TextBlock({ content }: { content?: string }) {\n  return (\n    <div\n      className=\"prose prose-gray max-w-none py-4 px-2\"\n      dangerouslySetInnerHTML={{ __html: content || '' }}\n    />\n  );\n}\n`,\n\n  'src/lib/theme-registry.ts': `import defaultTheme from '@/themes/default';\nimport type { ThemeConfig } from '@infuro/cms-core/theme';\n\nexport const defaultThemeConfig = defaultTheme;\n\nexport interface ThemeRegistryItem {\n  id: string;\n  label: string;\n  config: ThemeConfig;\n  description?: string;\n}\n\nexport const THEME_REGISTRY: ThemeRegistryItem[] = [\n  {\n    id: 'default',\n    label: 'Default',\n    config: defaultTheme,\n    description: 'Default theme with standard layout and components.',\n  },\n];\n\nexport function getThemeById(id: string | undefined): ThemeConfig {\n  const theme = THEME_REGISTRY.find((t) => t.id === (id || '')) ?? THEME_REGISTRY[0];\n  return theme?.config ?? defaultTheme;\n}\n`,\n\n  'src/app/page.tsx': `export default function HomePage() {\n  return (\n    <main className=\"min-h-screen flex flex-col items-center justify-center p-8\">\n      <h1 className=\"text-3xl font-bold text-gray-900 mb-4\">Welcome</h1>\n      <p className=\"text-gray-600 mb-6\">Your CMS is set up. Manage content at the admin panel.</p>\n      <a\n        href=\"/admin\"\n        className=\"text-white bg-gray-900 hover:bg-gray-800 px-4 py-2 rounded-lg font-medium transition-colors\"\n      >\n        Open Admin\n      </a>\n    </main>\n  );\n}\n`,\n\n  'src/app/contact/page.tsx': `export default function ContactPage() {\n  return (\n    <main className=\"min-h-screen p-8 max-w-2xl mx-auto\">\n      <h1 className=\"text-3xl font-bold text-gray-900 mb-4\">Contact</h1>\n      <p className=\"text-gray-600\">\n        Add a contact form or wire this page to your CMS form. Use the admin panel to manage forms and submissions.\n      </p>\n    </main>\n  );\n}\n`,\n};\n\nfunction findRoot(cwd: string): string | null {\n  let dir = path.resolve(cwd);\n  for (let i = 0; i < 20; i++) {\n    const pkgPath = path.join(dir, 'package.json');\n    if (fs.existsSync(pkgPath)) {\n      try {\n        const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));\n        if (pkg.dependencies?.next || pkg.devDependencies?.next) return dir;\n      } catch {\n        // ignore\n      }\n    }\n    const parent = path.dirname(dir);\n    if (parent === dir) break;\n    dir = parent;\n  }\n  return null;\n}\n\nfunction writeFile(\n  root: string,\n  filePath: string,\n  content: string,\n  force: boolean,\n  dryRun: boolean,\n  log: (msg: string) => void\n): boolean {\n  const full = path.join(root, filePath);\n  if (fs.existsSync(full) && !force) {\n    log(`  skip (exists): ${filePath}`);\n    return false;\n  }\n  if (dryRun) {\n    log(`  would create: ${filePath}`);\n    return true;\n  }\n  const dir = path.dirname(full);\n  fs.mkdirSync(dir, { recursive: true });\n  fs.writeFileSync(full, content, 'utf8');\n  log(`  created: ${filePath}`);\n  return true;\n}\n\nfunction patchNextConfig(root: string, dryRun: boolean, log: (msg: string) => void): boolean {\n  const candidates = ['next.config.js', 'next.config.mjs', 'next.config.cjs'];\n  let configPath: string | null = null;\n  for (const name of candidates) {\n    const p = path.join(root, name);\n    if (fs.existsSync(p)) {\n      configPath = p;\n      break;\n    }\n  }\n  if (!configPath) {\n    log('  skip next.config: not found');\n    return false;\n  }\n  let content = fs.readFileSync(configPath, 'utf8');\n  if (content.includes(\"'@infuro/cms-core'\") || content.includes('\"@infuro/cms-core\"')) {\n    log(`  skip (already has core): ${path.basename(configPath)}`);\n    return false;\n  }\n  if (content.includes('serverExternalPackages')) {\n    content = content.replace(\n      /(serverExternalPackages:\\s*\\[)/,\n      \"$1'@infuro/cms-core', 'typeorm', \"\n    );\n  } else {\n    content = content.replace(\n      /(const nextConfig\\s*=\\s*\\{|module\\.exports\\s*=\\s*\\{)/,\n      \"$1\\n  serverExternalPackages: ['@infuro/cms-core', 'typeorm'],\"\n    );\n  }\n  if (dryRun) {\n    log(`  would patch: ${path.basename(configPath)}`);\n    return true;\n  }\n  fs.writeFileSync(configPath, content, 'utf8');\n  log(`  patched: ${path.basename(configPath)}`);\n  return true;\n}\n\nfunction patchTailwind(root: string, dryRun: boolean, log: (msg: string) => void): boolean {\n  const candidates = ['tailwind.config.js', 'tailwind.config.mjs', 'tailwind.config.ts'];\n  let configPath: string | null = null;\n  for (const name of candidates) {\n    const p = path.join(root, name);\n    if (fs.existsSync(p)) {\n      configPath = p;\n      break;\n    }\n  }\n  if (!configPath) {\n    log('  skip tailwind: config not found');\n    return false;\n  }\n  let content = fs.readFileSync(configPath, 'utf8');\n  const coreContent = \"./node_modules/@infuro/cms-core/dist/**/*.{js,cjs}\";\n  if (content.includes('@infuro/cms-core')) {\n    log(`  skip (already has core): ${path.basename(configPath)}`);\n    return false;\n  }\n  if (content.includes('content:')) {\n    content = content.replace(\n      /(content:\\s*\\[)/,\n      `$1\\n    \"${coreContent}\",`\n    );\n  }\n  if (dryRun) {\n    log(`  would patch: ${path.basename(configPath)}`);\n    return true;\n  }\n  fs.writeFileSync(configPath, content, 'utf8');\n  log(`  patched: ${path.basename(configPath)}`);\n  return true;\n}\n\nfunction patchLayout(root: string, dryRun: boolean, log: (msg: string) => void): boolean {\n  const layoutPath = path.join(root, 'src/app/layout.tsx');\n  if (!fs.existsSync(layoutPath)) {\n    log('  skip layout: src/app/layout.tsx not found');\n    return false;\n  }\n  let content = fs.readFileSync(layoutPath, 'utf8');\n  if (content.includes('<Providers>')) {\n    log('  skip layout: already uses Providers');\n    return false;\n  }\n  const bodyMatch = content.match(/<body([^>]*)>\\s*(\\{children\\})\\s*<\\/body>/s);\n  if (!bodyMatch) {\n    log('  skip layout: unexpected structure (add <Providers> manually)');\n    return false;\n  }\n  if (dryRun) {\n    log('  would patch: src/app/layout.tsx');\n    return true;\n  }\n  const [, bodyAttrs, children] = bodyMatch;\n  const newBody = `<body${bodyAttrs}>\\n        <Providers>${children}</Providers>\\n      </body>`;\n  content = content.replace(/<body[^>]*>\\s*\\{children\\}\\s*<\\/body>/s, newBody);\n  if (!content.includes(\"from './providers'\") && !content.includes('from \"./providers\"')) {\n    const firstImport = content.match(/^import .+ from .+;\\n/m);\n    content = firstImport\n      ? content.replace(firstImport[0], firstImport[0] + \"import { Providers } from './providers';\\n\")\n      : \"import { Providers } from './providers';\\n\" + content;\n  }\n  if (content.includes('<html') && !content.includes('suppressHydrationWarning')) {\n    content = content.replace(/<html(\\s)/, '<html suppressHydrationWarning$1');\n  }\n  fs.writeFileSync(layoutPath, content, 'utf8');\n  log('  patched: src/app/layout.tsx');\n  return true;\n}\n\nfunction patchPackageJson(root: string, dryRun: boolean, log: (msg: string) => void): boolean {\n  const pkgPath = path.join(root, 'package.json');\n  if (!fs.existsSync(pkgPath)) return false;\n  const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));\n  const scripts = pkg.scripts || {};\n  let changed = false;\n  if (!scripts.seed) {\n    scripts.seed = 'tsx src/lib/seed.ts';\n    changed = true;\n  }\n  if (!scripts['migration:run']) {\n    scripts['migration:run'] = 'tsx scripts/run-migrations.ts';\n    changed = true;\n  }\n  const dev = pkg.devDependencies || {};\n  const deps = pkg.dependencies || {};\n  if (!deps['@infuro/cms-core']) {\n    deps['@infuro/cms-core'] = '^1.0.6';\n    changed = true;\n  }\n  if (!dev.tsx) {\n    dev.tsx = '^4.0.0';\n    changed = true;\n  }\n  if (!dev.dotenv) {\n    dev.dotenv = '^16.0.0';\n    changed = true;\n  }\n  if (!changed) {\n    log('  skip package.json: scripts/devDeps already present');\n    return false;\n  }\n  pkg.scripts = scripts;\n  pkg.dependencies = { ...pkg.dependencies, ...deps };\n  pkg.devDependencies = { ...pkg.devDependencies, ...dev };\n  if (dryRun) {\n    log('  would patch: package.json (scripts + devDependencies)');\n    return true;\n  }\n  fs.writeFileSync(pkgPath, JSON.stringify(pkg, null, 2), 'utf8');\n  log('  patched: package.json');\n  return true;\n}\n\nasync function runNpmInstall(root: string, log: (msg: string) => void): Promise<void> {\n  const { spawnSync } = await import('child_process');\n  log('  running: npm install (deps)...');\n  spawnSync('npm', ['install', '@infuro/cms-core', 'typeorm', 'reflect-metadata', 'bcryptjs', 'next-auth', 'next-themes', 'sonner'], {\n    cwd: root,\n    stdio: 'inherit',\n    shell: true,\n  });\n  log('  running: npm install -D tsx dotenv @types/node...');\n  spawnSync('npm', ['install', '-D', 'tsx', 'dotenv', '@types/node'], {\n    cwd: root,\n    stdio: 'inherit',\n    shell: true,\n  });\n}\n\nasync function runInit(opts: {\n  force: boolean;\n  dryRun: boolean;\n  noDeps: boolean;\n  noPatchConfig: boolean;\n}) {\n  const log = (msg: string) => console.log(msg);\n  const cwd = process.cwd();\n  const root = findRoot(cwd);\n  if (!root) {\n    console.error('Not a Next.js project (no package.json with next dependency found from ' + cwd + ')');\n    process.exit(1);\n  }\n  const appDir = path.join(root, 'src/app');\n  if (!fs.existsSync(appDir)) {\n    console.error('Expected src/app directory not found. Use a Next.js app with src directory (e.g. create-next-app --src-dir).');\n    process.exit(1);\n  }\n\n  log('Infuro CMS init @ ' + root);\n  if (opts.dryRun) log('(dry run)');\n\n  for (const [filePath, content] of Object.entries(TEMPLATES)) {\n    writeFile(root, filePath, content, opts.force, opts.dryRun, log);\n  }\n\n  if (!opts.noPatchConfig) {\n    log('Config patches:');\n    patchNextConfig(root, opts.dryRun, log);\n    patchTailwind(root, opts.dryRun, log);\n    patchLayout(root, opts.dryRun, log);\n    patchPackageJson(root, opts.dryRun, log);\n  }\n\n  if (!opts.noDeps && !opts.dryRun) {\n    log('Dependencies:');\n    await runNpmInstall(root, log);\n  } else if (!opts.noDeps && opts.dryRun) {\n    log('  would run: npm install @infuro/cms-core typeorm reflect-metadata bcryptjs next-auth next-themes sonner');\n    log('  would run: npm install -D tsx dotenv @types/node');\n  }\n\n  log('');\n  log('Done. Next steps:');\n  log('  1. Copy .env.example to .env and set DATABASE_URL, NEXTAUTH_SECRET, NEXTAUTH_URL, ADMIN_EMAIL, ADMIN_PASSWORD');\n  log('  2. Run npm run migration:run then npm run seed (creates admin from ADMIN_EMAIL/ADMIN_PASSWORD)');\n  log('  3. npm run dev');\n}\n\nconst args = process.argv.slice(2);\nconst force = args.includes('--force');\nconst dryRun = args.includes('--dry-run');\nconst noDeps = args.includes('--no-deps');\nconst noPatchConfig = args.includes('--no-patch-config');\n\nif (args[0] === 'init' || args.includes('--init') || (args.length === 0 && !args.some((a) => a.startsWith('--')))) {\n  runInit({ force, dryRun, noDeps, noPatchConfig }).catch((e) => {\n    console.error(e);\n    process.exit(1);\n  });\n} else {\n  console.log('Usage: npx @infuro/cms-core init [--force] [--dry-run] [--no-deps] [--no-patch-config]');\n  process.exit(args[0] === '--help' || args[0] === '-h' ? 0 : 1);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAKA,gBAAe;AACf,kBAAiB;AAEjB,IAAM,YAAY;AAAA,EAChB,0BAA0B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAsC1B,2BAA2B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiB3B,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAuBlB,oCAAoC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAyFpC,2CAA2C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAuC3C,4BAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkB5B,sCAAsC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQtC,qBAAqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAoCrB,yBAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkBzB,gBAAgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAShB,mBAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA+BnB,oCAAoC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAmBpC,6BAA6B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAsB7B,4BAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAe5B,+BAA+B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAsB/B,wCAAwC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA8CxC,wCAAwC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA2CxC,+CAA+C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA4B/C,+CAA+C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAsB/C,6BAA6B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA2B7B,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBpB,4BAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAW9B;AAEA,SAAS,SAAS,KAA4B;AAC5C,MAAI,MAAM,YAAAA,QAAK,QAAQ,GAAG;AAC1B,WAAS,IAAI,GAAG,IAAI,IAAI,KAAK;AAC3B,UAAM,UAAU,YAAAA,QAAK,KAAK,KAAK,cAAc;AAC7C,QAAI,UAAAC,QAAG,WAAW,OAAO,GAAG;AAC1B,UAAI;AACF,cAAM,MAAM,KAAK,MAAM,UAAAA,QAAG,aAAa,SAAS,MAAM,CAAC;AACvD,YAAI,IAAI,cAAc,QAAQ,IAAI,iBAAiB,KAAM,QAAO;AAAA,MAClE,QAAQ;AAAA,MAER;AAAA,IACF;AACA,UAAM,SAAS,YAAAD,QAAK,QAAQ,GAAG;AAC/B,QAAI,WAAW,IAAK;AACpB,UAAM;AAAA,EACR;AACA,SAAO;AACT;AAEA,SAAS,UACP,MACA,UACA,SACAE,QACAC,SACA,KACS;AACT,QAAM,OAAO,YAAAH,QAAK,KAAK,MAAM,QAAQ;AACrC,MAAI,UAAAC,QAAG,WAAW,IAAI,KAAK,CAACC,QAAO;AACjC,QAAI,oBAAoB,QAAQ,EAAE;AAClC,WAAO;AAAA,EACT;AACA,MAAIC,SAAQ;AACV,QAAI,mBAAmB,QAAQ,EAAE;AACjC,WAAO;AAAA,EACT;AACA,QAAM,MAAM,YAAAH,QAAK,QAAQ,IAAI;AAC7B,YAAAC,QAAG,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AACrC,YAAAA,QAAG,cAAc,MAAM,SAAS,MAAM;AACtC,MAAI,cAAc,QAAQ,EAAE;AAC5B,SAAO;AACT;AAEA,SAAS,gBAAgB,MAAcE,SAAiB,KAAqC;AAC3F,QAAM,aAAa,CAAC,kBAAkB,mBAAmB,iBAAiB;AAC1E,MAAI,aAA4B;AAChC,aAAW,QAAQ,YAAY;AAC7B,UAAM,IAAI,YAAAH,QAAK,KAAK,MAAM,IAAI;AAC9B,QAAI,UAAAC,QAAG,WAAW,CAAC,GAAG;AACpB,mBAAa;AACb;AAAA,IACF;AAAA,EACF;AACA,MAAI,CAAC,YAAY;AACf,QAAI,+BAA+B;AACnC,WAAO;AAAA,EACT;AACA,MAAI,UAAU,UAAAA,QAAG,aAAa,YAAY,MAAM;AAChD,MAAI,QAAQ,SAAS,oBAAoB,KAAK,QAAQ,SAAS,oBAAoB,GAAG;AACpF,QAAI,8BAA8B,YAAAD,QAAK,SAAS,UAAU,CAAC,EAAE;AAC7D,WAAO;AAAA,EACT;AACA,MAAI,QAAQ,SAAS,wBAAwB,GAAG;AAC9C,cAAU,QAAQ;AAAA,MAChB;AAAA,MACA;AAAA,IACF;AAAA,EACF,OAAO;AACL,cAAU,QAAQ;AAAA,MAChB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,MAAIG,SAAQ;AACV,QAAI,kBAAkB,YAAAH,QAAK,SAAS,UAAU,CAAC,EAAE;AACjD,WAAO;AAAA,EACT;AACA,YAAAC,QAAG,cAAc,YAAY,SAAS,MAAM;AAC5C,MAAI,cAAc,YAAAD,QAAK,SAAS,UAAU,CAAC,EAAE;AAC7C,SAAO;AACT;AAEA,SAAS,cAAc,MAAcG,SAAiB,KAAqC;AACzF,QAAM,aAAa,CAAC,sBAAsB,uBAAuB,oBAAoB;AACrF,MAAI,aAA4B;AAChC,aAAW,QAAQ,YAAY;AAC7B,UAAM,IAAI,YAAAH,QAAK,KAAK,MAAM,IAAI;AAC9B,QAAI,UAAAC,QAAG,WAAW,CAAC,GAAG;AACpB,mBAAa;AACb;AAAA,IACF;AAAA,EACF;AACA,MAAI,CAAC,YAAY;AACf,QAAI,mCAAmC;AACvC,WAAO;AAAA,EACT;AACA,MAAI,UAAU,UAAAA,QAAG,aAAa,YAAY,MAAM;AAChD,QAAM,cAAc;AACpB,MAAI,QAAQ,SAAS,kBAAkB,GAAG;AACxC,QAAI,8BAA8B,YAAAD,QAAK,SAAS,UAAU,CAAC,EAAE;AAC7D,WAAO;AAAA,EACT;AACA,MAAI,QAAQ,SAAS,UAAU,GAAG;AAChC,cAAU,QAAQ;AAAA,MAChB;AAAA,MACA;AAAA,OAAY,WAAW;AAAA,IACzB;AAAA,EACF;AACA,MAAIG,SAAQ;AACV,QAAI,kBAAkB,YAAAH,QAAK,SAAS,UAAU,CAAC,EAAE;AACjD,WAAO;AAAA,EACT;AACA,YAAAC,QAAG,cAAc,YAAY,SAAS,MAAM;AAC5C,MAAI,cAAc,YAAAD,QAAK,SAAS,UAAU,CAAC,EAAE;AAC7C,SAAO;AACT;AAEA,SAAS,YAAY,MAAcG,SAAiB,KAAqC;AACvF,QAAM,aAAa,YAAAH,QAAK,KAAK,MAAM,oBAAoB;AACvD,MAAI,CAAC,UAAAC,QAAG,WAAW,UAAU,GAAG;AAC9B,QAAI,6CAA6C;AACjD,WAAO;AAAA,EACT;AACA,MAAI,UAAU,UAAAA,QAAG,aAAa,YAAY,MAAM;AAChD,MAAI,QAAQ,SAAS,aAAa,GAAG;AACnC,QAAI,uCAAuC;AAC3C,WAAO;AAAA,EACT;AACA,QAAM,YAAY,QAAQ,MAAM,4CAA4C;AAC5E,MAAI,CAAC,WAAW;AACd,QAAI,gEAAgE;AACpE,WAAO;AAAA,EACT;AACA,MAAIE,SAAQ;AACV,QAAI,mCAAmC;AACvC,WAAO;AAAA,EACT;AACA,QAAM,CAAC,EAAE,WAAW,QAAQ,IAAI;AAChC,QAAM,UAAU,QAAQ,SAAS;AAAA,qBAAyB,QAAQ;AAAA;AAClE,YAAU,QAAQ,QAAQ,0CAA0C,OAAO;AAC3E,MAAI,CAAC,QAAQ,SAAS,oBAAoB,KAAK,CAAC,QAAQ,SAAS,oBAAoB,GAAG;AACtF,UAAM,cAAc,QAAQ,MAAM,wBAAwB;AAC1D,cAAU,cACN,QAAQ,QAAQ,YAAY,CAAC,GAAG,YAAY,CAAC,IAAI,4CAA4C,IAC7F,+CAA+C;AAAA,EACrD;AACA,MAAI,QAAQ,SAAS,OAAO,KAAK,CAAC,QAAQ,SAAS,0BAA0B,GAAG;AAC9E,cAAU,QAAQ,QAAQ,aAAa,kCAAkC;AAAA,EAC3E;AACA,YAAAF,QAAG,cAAc,YAAY,SAAS,MAAM;AAC5C,MAAI,+BAA+B;AACnC,SAAO;AACT;AAEA,SAAS,iBAAiB,MAAcE,SAAiB,KAAqC;AAC5F,QAAM,UAAU,YAAAH,QAAK,KAAK,MAAM,cAAc;AAC9C,MAAI,CAAC,UAAAC,QAAG,WAAW,OAAO,EAAG,QAAO;AACpC,QAAM,MAAM,KAAK,MAAM,UAAAA,QAAG,aAAa,SAAS,MAAM,CAAC;AACvD,QAAM,UAAU,IAAI,WAAW,CAAC;AAChC,MAAI,UAAU;AACd,MAAI,CAAC,QAAQ,MAAM;AACjB,YAAQ,OAAO;AACf,cAAU;AAAA,EACZ;AACA,MAAI,CAAC,QAAQ,eAAe,GAAG;AAC7B,YAAQ,eAAe,IAAI;AAC3B,cAAU;AAAA,EACZ;AACA,QAAM,MAAM,IAAI,mBAAmB,CAAC;AACpC,QAAM,OAAO,IAAI,gBAAgB,CAAC;AAClC,MAAI,CAAC,KAAK,kBAAkB,GAAG;AAC7B,SAAK,kBAAkB,IAAI;AAC3B,cAAU;AAAA,EACZ;AACA,MAAI,CAAC,IAAI,KAAK;AACZ,QAAI,MAAM;AACV,cAAU;AAAA,EACZ;AACA,MAAI,CAAC,IAAI,QAAQ;AACf,QAAI,SAAS;AACb,cAAU;AAAA,EACZ;AACA,MAAI,CAAC,SAAS;AACZ,QAAI,sDAAsD;AAC1D,WAAO;AAAA,EACT;AACA,MAAI,UAAU;AACd,MAAI,eAAe,EAAE,GAAG,IAAI,cAAc,GAAG,KAAK;AAClD,MAAI,kBAAkB,EAAE,GAAG,IAAI,iBAAiB,GAAG,IAAI;AACvD,MAAIE,SAAQ;AACV,QAAI,yDAAyD;AAC7D,WAAO;AAAA,EACT;AACA,YAAAF,QAAG,cAAc,SAAS,KAAK,UAAU,KAAK,MAAM,CAAC,GAAG,MAAM;AAC9D,MAAI,yBAAyB;AAC7B,SAAO;AACT;AAEA,eAAe,cAAc,MAAc,KAA2C;AACpF,QAAM,EAAE,UAAU,IAAI,MAAM,OAAO,eAAe;AAClD,MAAI,kCAAkC;AACtC,YAAU,OAAO,CAAC,WAAW,oBAAoB,WAAW,oBAAoB,YAAY,aAAa,eAAe,QAAQ,GAAG;AAAA,IACjI,KAAK;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,EACT,CAAC;AACD,MAAI,qDAAqD;AACzD,YAAU,OAAO,CAAC,WAAW,MAAM,OAAO,UAAU,aAAa,GAAG;AAAA,IAClE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,EACT,CAAC;AACH;AAEA,eAAe,QAAQ,MAKpB;AACD,QAAM,MAAM,CAAC,QAAgB,QAAQ,IAAI,GAAG;AAC5C,QAAM,MAAM,QAAQ,IAAI;AACxB,QAAM,OAAO,SAAS,GAAG;AACzB,MAAI,CAAC,MAAM;AACT,YAAQ,MAAM,4EAA4E,MAAM,GAAG;AACnG,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,QAAM,SAAS,YAAAD,QAAK,KAAK,MAAM,SAAS;AACxC,MAAI,CAAC,UAAAC,QAAG,WAAW,MAAM,GAAG;AAC1B,YAAQ,MAAM,8GAA8G;AAC5H,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,MAAI,uBAAuB,IAAI;AAC/B,MAAI,KAAK,OAAQ,KAAI,WAAW;AAEhC,aAAW,CAAC,UAAU,OAAO,KAAK,OAAO,QAAQ,SAAS,GAAG;AAC3D,cAAU,MAAM,UAAU,SAAS,KAAK,OAAO,KAAK,QAAQ,GAAG;AAAA,EACjE;AAEA,MAAI,CAAC,KAAK,eAAe;AACvB,QAAI,iBAAiB;AACrB,oBAAgB,MAAM,KAAK,QAAQ,GAAG;AACtC,kBAAc,MAAM,KAAK,QAAQ,GAAG;AACpC,gBAAY,MAAM,KAAK,QAAQ,GAAG;AAClC,qBAAiB,MAAM,KAAK,QAAQ,GAAG;AAAA,EACzC;AAEA,MAAI,CAAC,KAAK,UAAU,CAAC,KAAK,QAAQ;AAChC,QAAI,eAAe;AACnB,UAAM,cAAc,MAAM,GAAG;AAAA,EAC/B,WAAW,CAAC,KAAK,UAAU,KAAK,QAAQ;AACtC,QAAI,0GAA0G;AAC9G,QAAI,oDAAoD;AAAA,EAC1D;AAEA,MAAI,EAAE;AACN,MAAI,mBAAmB;AACvB,MAAI,iHAAiH;AACrH,MAAI,kGAAkG;AACtG,MAAI,kBAAkB;AACxB;AAEA,IAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;AACjC,IAAM,QAAQ,KAAK,SAAS,SAAS;AACrC,IAAM,SAAS,KAAK,SAAS,WAAW;AACxC,IAAM,SAAS,KAAK,SAAS,WAAW;AACxC,IAAM,gBAAgB,KAAK,SAAS,mBAAmB;AAEvD,IAAI,KAAK,CAAC,MAAM,UAAU,KAAK,SAAS,QAAQ,KAAM,KAAK,WAAW,KAAK,CAAC,KAAK,KAAK,CAAC,MAAM,EAAE,WAAW,IAAI,CAAC,GAAI;AACjH,UAAQ,EAAE,OAAO,QAAQ,QAAQ,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM;AAC7D,YAAQ,MAAM,CAAC;AACf,YAAQ,KAAK,CAAC;AAAA,EAChB,CAAC;AACH,OAAO;AACL,UAAQ,IAAI,wFAAwF;AACpG,UAAQ,KAAK,KAAK,CAAC,MAAM,YAAY,KAAK,CAAC,MAAM,OAAO,IAAI,CAAC;AAC/D;","names":["path","fs","force","dryRun"]}

package/dist/cli.js

@@ -181,7 +181,7 @@ async function getOptions() {
       return userRepo.findOne({
         where: { email },
         relations: ['group', 'group.permissions'],
-        select: ['id', 'email', 'name', 'password', 'blocked', 'deleted', 'groupId'],
+        select: ['id', 'email', 'name', 'password', 'blocked', 'deleted', 'groupId', 'adminAccess'],
       }) as any;
     },
     comparePassword: (plain, hash) => Promise.resolve(bcrypt.compareSync(plain, hash)),

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/cli.ts"],"sourcesContent":["#!/usr/bin/env node\n/**\n * @infuro/cms-core init CLI\n * Usage: npx @infuro/cms-core init [--force] [--dry-run] [--no-deps] [--no-patch-config]\n */\nimport fs from 'fs';\nimport path from 'path';\n\nconst TEMPLATES = {\n  'src/lib/data-source.ts': `import 'reflect-metadata';\nimport path from 'path';\nimport { createRequire } from 'module';\nimport { DataSource } from 'typeorm';\nimport { CMS_ENTITY_MAP } from '@infuro/cms-core';\n\nconst require = createRequire(import.meta.url);\nconst coreDir = path.dirname(require.resolve('@infuro/cms-core'));\n\nlet dataSource: DataSource | null = null;\n\nexport function getDataSource(): DataSource {\n  if (!dataSource) {\n    dataSource = new DataSource({\n      type: 'postgres',\n      url: process.env.DATABASE_URL,\n      entities: Object.values(CMS_ENTITY_MAP),\n      synchronize: false,\n      ...(process.env.TYPEORM_CLI && {\n        migrations: [\n          path.join(coreDir, 'migrations', '*.ts'),\n          path.join(process.cwd(), 'src', 'migrations', '*.ts'),\n        ],\n      }),\n    });\n  }\n  return dataSource;\n}\n\nexport async function getDataSourceInitialized(): Promise<DataSource> {\n  const ds = getDataSource();\n  if (!ds.isInitialized) await ds.initialize();\n  return ds;\n}\n\nexport default getDataSource;\n`,\n\n  'src/lib/auth-helpers.ts': `import { getServerSession } from 'next-auth';\nimport { NextResponse } from 'next/server';\nimport { createAuthHelpers } from '@infuro/cms-core/auth';\n\nconst helpers = createAuthHelpers(\n  async () => {\n    const s = await getServerSession();\n    return s ? { user: s.user } : null;\n  },\n  NextResponse\n);\n\nexport const requireAuth = helpers.requireAuth;\nexport const requirePermission = helpers.requirePermission;\nexport const getAuthenticatedUser = helpers.getAuthenticatedUser;\n`,\n\n  'src/lib/cms.ts': `import {\n  createCmsApp,\n  localStoragePlugin,\n  type CmsApp,\n} from '@infuro/cms-core';\nimport { getDataSourceInitialized } from './data-source';\n\nlet cmsPromise: Promise<CmsApp> | null = null;\n\nexport async function getCms(): Promise<CmsApp> {\n  if (cmsPromise) return cmsPromise;\n  const dataSource = await getDataSourceInitialized();\n  cmsPromise = createCmsApp({\n    dataSource,\n    config: process.env as unknown as Record<string, string>,\n    plugins: [\n      localStoragePlugin({ dir: 'public/uploads' }),\n    ],\n  });\n  return cmsPromise;\n}\n`,\n\n  'src/app/api/[[...path]]/route.ts': `import { NextResponse } from 'next/server';\nimport { getServerSession } from 'next-auth';\nimport { createCmsApiHandler } from '@infuro/cms-core/api';\nimport { CMS_ENTITY_MAP } from '@infuro/cms-core';\nimport { getDataSourceInitialized } from '@/lib/data-source';\nimport { requireAuth } from '@/lib/auth-helpers';\nimport { getCms } from '@/lib/cms';\nimport bcrypt from 'bcryptjs';\n\nconst baseUrl = process.env.NEXTAUTH_URL || 'http://localhost:3000';\n\nlet handlerPromise: Promise<ReturnType<typeof createCmsApiHandler>> | null = null;\n\nasync function getHandler() {\n  if (!handlerPromise) {\n    const dataSource = await getDataSourceInitialized();\n    handlerPromise = Promise.resolve(\n      createCmsApiHandler({\n        dataSource,\n        entityMap: CMS_ENTITY_MAP,\n        requireAuth,\n        json: NextResponse.json.bind(NextResponse),\n        getCms,\n        userAuth: {\n          dataSource,\n          entityMap: CMS_ENTITY_MAP,\n          json: NextResponse.json.bind(NextResponse),\n          baseUrl,\n          hashPassword: (p) => Promise.resolve(bcrypt.hashSync(p, 12)),\n          comparePassword: (p, h) => Promise.resolve(bcrypt.compareSync(p, h)),\n          resetExpiryHours: 1,\n          getSession: () =>\n            getServerSession().then((s) => (s ? { user: s.user } : null)),\n        },\n        dashboard: {\n          dataSource,\n          entityMap: CMS_ENTITY_MAP,\n          json: NextResponse.json.bind(NextResponse),\n          requireAuth,\n          requirePermission: requireAuth,\n        },\n        upload: {\n          json: NextResponse.json.bind(NextResponse),\n          requireAuth,\n          storage: () => getCms().then((cms) => cms.getPlugin('storage')),\n          localUploadDir: 'public/uploads',\n        },\n        blogBySlug: {\n          dataSource,\n          entityMap: CMS_ENTITY_MAP,\n          json: NextResponse.json.bind(NextResponse),\n          requireAuth: async () => null,\n        },\n        formBySlug: {\n          dataSource,\n          entityMap: CMS_ENTITY_MAP,\n          json: NextResponse.json.bind(NextResponse),\n          requireAuth: async () => null,\n        },\n        usersApi: {\n          dataSource,\n          entityMap: CMS_ENTITY_MAP,\n          json: NextResponse.json.bind(NextResponse),\n          requireAuth,\n          baseUrl,\n        },\n      })\n    );\n  }\n  return handlerPromise;\n}\n\nasync function handle(method: string, req: Request, context: { params: Promise<{ path?: string[] }> }) {\n  try {\n    const handler = await getHandler();\n    const { path: pathSegments = [] } = await context.params;\n    return handler.handle(method, pathSegments, req);\n  } catch {\n    return NextResponse.json({ error: 'Server Error' }, { status: 500 });\n  }\n}\n\nexport async function GET(req: Request, ctx: { params: Promise<{ path?: string[] }> }) { return handle('GET', req, ctx); }\nexport async function POST(req: Request, ctx: { params: Promise<{ path?: string[] }> }) { return handle('POST', req, ctx); }\nexport async function PUT(req: Request, ctx: { params: Promise<{ path?: string[] }> }) { return handle('PUT', req, ctx); }\nexport async function PATCH(req: Request, ctx: { params: Promise<{ path?: string[] }> }) { return handle('PATCH', req, ctx); }\nexport async function DELETE(req: Request, ctx: { params: Promise<{ path?: string[] }> }) { return handle('DELETE', req, ctx); }\n`,\n\n  'src/app/api/auth/[...nextauth]/route.ts': `import NextAuth from 'next-auth';\nimport { getNextAuthOptions } from '@infuro/cms-core/auth';\nimport { getDataSourceInitialized } from '@/lib/data-source';\nimport { CMS_ENTITY_MAP } from '@infuro/cms-core';\nimport bcrypt from 'bcryptjs';\n\nasync function getOptions() {\n  const dataSource = await getDataSourceInitialized();\n  const userRepo = dataSource.getRepository(CMS_ENTITY_MAP.users);\n  return getNextAuthOptions({\n    getUserByEmail: async (email: string) => {\n      return userRepo.findOne({\n        where: { email },\n        relations: ['group', 'group.permissions'],\n        select: ['id', 'email', 'name', 'password', 'blocked', 'deleted', 'groupId'],\n      }) as any;\n    },\n    comparePassword: (plain, hash) => Promise.resolve(bcrypt.compareSync(plain, hash)),\n    signInPage: '/admin/signin',\n  });\n}\n\nlet handler: ReturnType<typeof NextAuth> | null = null;\n\nasync function getHandler() {\n  if (!handler) handler = NextAuth(await getOptions());\n  return handler;\n}\n\ntype NextAuthContext = { params: Promise<{ nextauth?: string[] }> };\n\nexport async function GET(req: Request, context: NextAuthContext) {\n  return (await getHandler())(req, context);\n}\nexport async function POST(req: Request, context: NextAuthContext) {\n  return (await getHandler())(req, context);\n}\n`,\n\n  'src/app/admin/layout.tsx': `'use client';\n\nimport '@infuro/cms-core/admin.css';\nimport AdminLayout from '@infuro/cms-core/admin';\n\nexport default function AdminLayoutWrapper({ children }: { children: React.ReactNode }) {\n  return (\n    <AdminLayout\n      customNavItems={[]}\n      customNavSections={[]}\n      customCrudConfigs={{}}\n    >\n      {children}\n    </AdminLayout>\n  );\n}\n`,\n\n  'src/app/admin/[[...slug]]/page.tsx': `import { AdminPageResolver } from '@infuro/cms-core/admin';\n\nexport default async function AdminPage({ params }: { params: Promise<{ slug?: string[] }> }) {\n  const { slug } = await params;\n  return <AdminPageResolver slug={slug} />;\n}\n`,\n\n  'src/middleware.ts': `import { NextResponse } from 'next/server';\nimport type { NextRequest } from 'next/server';\nimport { createCmsMiddleware } from '@infuro/cms-core/auth';\n\nconst cmsMiddleware = createCmsMiddleware({\n  publicApiMethods: {\n    '/api/contacts': ['POST'],\n    '/api/form-submissions': ['POST'],\n    '/api/blogs': ['GET'],\n    '/api/forms': ['GET'],\n    '/api/auth': ['GET', 'POST'],\n    '/api/users/forgot-password': ['POST'],\n    '/api/users/set-password': ['POST'],\n    '/api/users/invite': ['POST'],\n  },\n});\n\nexport function middleware(request: NextRequest) {\n  const result = cmsMiddleware({\n    nextUrl: request.nextUrl,\n    url: request.url,\n    method: request.method,\n    cookies: request.cookies,\n  });\n\n  if (result.type === 'next') return NextResponse.next();\n  if (result.type === 'redirect') return NextResponse.redirect(result.url);\n  if (result.type === 'json') return NextResponse.json(result.body, { status: result.status });\n  return NextResponse.next();\n}\n\nexport const config = {\n  matcher: ['/admin/:path*', '/api/:path*'],\n};\n`,\n\n  'src/app/providers.tsx': `\"use client\";\n\nimport { ThemeProvider } from \"next-themes\";\nimport { SessionProvider } from \"next-auth/react\";\nimport { Toaster } from \"sonner\";\n\nexport function Providers({ children }: { children: React.ReactNode }) {\n  return (\n    <SessionProvider>\n      <ThemeProvider attribute=\"class\" defaultTheme=\"system\" enableSystem>\n        {children}\n        <Toaster position=\"top-right\" />\n      </ThemeProvider>\n    </SessionProvider>\n  );\n}\n`,\n\n  '.env.example': `DATABASE_URL=postgres://user:password@localhost:5432/mydb\nNEXTAUTH_SECRET=your-random-secret\nNEXTAUTH_URL=http://localhost:3000\n\n# Admin user (for npm run seed)\nADMIN_EMAIL=admin@example.com\nADMIN_PASSWORD=changeme\n`,\n\n  'src/lib/seed.ts': `try { require('dotenv/config'); } catch {}\nimport 'reflect-metadata';\nimport { getDataSourceInitialized } from './data-source';\nimport { CMS_ENTITY_MAP } from '@infuro/cms-core';\nimport bcrypt from 'bcryptjs';\n\nasync function main() {\n  const ds = await getDataSourceInitialized();\n  const userRepo = ds.getRepository(CMS_ENTITY_MAP.users);\n\n  const email = process.env.ADMIN_EMAIL || 'admin@example.com';\n  const password = process.env.ADMIN_PASSWORD || 'changeme';\n\n  const existing = await userRepo.findOne({ where: { email } });\n  if (!existing) {\n    const hashedPassword = await bcrypt.hash(password, 10);\n    await userRepo.save(userRepo.create({ name: 'Admin', email, password: hashedPassword }));\n    console.log('Default admin user created');\n  } else {\n    console.log('Default admin user already exists');\n  }\n\n  await ds.destroy();\n}\n\nmain().catch((e) => {\n  console.error(e);\n  process.exit(1);\n});\n`,\n\n  'scripts/migration-datasource.cjs': `/**\n * Data source for TypeORM CLI (migration:generate). Resolves @infuro/cms-core from project root (works with npm link).\n */\nrequire('reflect-metadata');\nrequire('dotenv/config');\nconst path = require('path');\nconst { DataSource } = require('typeorm');\nconst coreEntry = path.resolve(__dirname, '..', 'node_modules', '@infuro', 'cms-core', 'dist', 'index.cjs');\nconst { CMS_ENTITY_MAP } = require(coreEntry);\n\nmodule.exports = new DataSource({\n  type: 'postgres',\n  url: process.env.DATABASE_URL,\n  entities: Object.values(CMS_ENTITY_MAP),\n  synchronize: false,\n  migrations: ['src/migrations/*.ts'],\n});\n`,\n\n  'scripts/run-migrations.ts': `/**\n * Run TypeORM migrations. Loads .env so DATABASE_URL is set.\n * Usage: npm run migration:run\n */\ntry { require('dotenv/config'); } catch {}\nimport 'reflect-metadata';\n\nasync function main() {\n  process.env.TYPEORM_CLI = '1';\n  const { getDataSourceInitialized } = await import('../src/lib/data-source');\n  const ds = await getDataSourceInitialized();\n  const run = await ds.runMigrations();\n  console.log(run.length ? \\`Ran \\${run.length} migration(s).\\` : 'No pending migrations.');\n  await ds.destroy();\n}\n\nmain().catch((e) => {\n  console.error(e);\n  process.exit(1);\n});\n`,\n\n  'src/migrations/README.md': `# TypeORM migrations\n\nGenerate a new migration (after changing entities):\n\n\\`\\`\\`bash\nnpm run migration:generate -- MyMigrationName\n\\`\\`\\`\n\nRun pending migrations:\n\n\\`\\`\\`bash\nnpm run migration:run\n\\`\\`\\`\n`,\n\n  'src/themes/default/index.ts': `import { createTheme } from '@infuro/cms-core/theme';\n\nimport { Container, meta as containerMeta } from './components/Container';\nimport { TextBlock, meta as textBlockMeta } from './components/TextBlock';\n\nimport { Navbar } from './layout/Navbar';\nimport { Footer, footerFields, footerDefaults } from './layout/Footer';\n\nexport default createTheme({\n  name: 'default',\n  label: 'Default Theme',\n  components: [\n    { component: Container, meta: containerMeta },\n    { component: TextBlock, meta: textBlockMeta },\n  ],\n  layout: {\n    navbar: { component: Navbar },\n    footer: { component: Footer, fields: footerFields, defaults: footerDefaults },\n  },\n});\n`,\n\n  'src/themes/default/layout/Navbar.tsx': `import type { NavbarConfig, NavItem } from '@infuro/cms-core/theme';\n\nfunction NavLink({ item }: { item: NavItem }) {\n  return (\n    <li className=\"list-none\">\n      <a\n        href={item.url}\n        target={item.openInNewTab ? '_blank' : undefined}\n        rel={item.openInNewTab ? 'noopener noreferrer' : undefined}\n        className=\"text-sm font-medium text-gray-700 hover:text-gray-900 px-3 py-2 inline-block\"\n      >\n        {item.label}\n      </a>\n    </li>\n  );\n}\n\nexport function Navbar({ logo, items, ctaLabel, ctaUrl }: NavbarConfig) {\n  return (\n    <nav className=\"bg-white sticky top-0 z-40 border-b\">\n      <div className=\"max-w-7xl mx-auto px-4 sm:px-6 lg:px-8\">\n        <div className=\"flex items-center justify-between h-16\">\n          <a href=\"/\" className=\"flex-shrink-0\">\n            {logo ? (\n              <img src={logo} alt=\"Logo\" className=\"h-8\" />\n            ) : (\n              <span className=\"text-xl font-bold text-gray-900\">Logo</span>\n            )}\n          </a>\n          <ul className=\"flex items-center gap-1 list-none m-0 p-0\">\n            {items.map((item) => (\n              <NavLink key={item.id} item={item} />\n            ))}\n          </ul>\n          {ctaLabel && (\n            <a href={ctaUrl || '#'} className=\"text-sm font-medium text-gray-900 hover:underline\">\n              {ctaLabel}\n            </a>\n          )}\n        </div>\n      </div>\n    </nav>\n  );\n}\n`,\n\n  'src/themes/default/layout/Footer.tsx': `import type { FooterConfig, PropDefinition } from '@infuro/cms-core/theme';\n\nexport const footerFields: PropDefinition[] = [\n  { name: 'copyright', label: 'Copyright Text', type: 'text' },\n];\n\nexport const footerDefaults: Record<string, any> = {\n  copyright: '© 2025 Your Site. All rights reserved.',\n  columns: [],\n  socialLinks: [],\n};\n\nexport function Footer({ copyright, columns = [], socialLinks = [] }: FooterConfig) {\n  return (\n    <footer className=\"bg-gray-900 text-gray-400 py-8 px-8\">\n      <div className=\"max-w-7xl mx-auto\">\n        {columns.length > 0 && (\n          <div className=\"grid grid-cols-2 md:grid-cols-4 gap-8 mb-6\">\n            {columns.map((col, i) => (\n              <div key={i}>\n                <h4 className=\"text-white font-semibold mb-3 text-sm\">{col.title}</h4>\n                <ul className=\"space-y-2\">\n                  {col.links.map((link, j) => (\n                    <li key={j}>\n                      <a href={link.url} className=\"text-sm hover:text-white transition-colors\">\n                        {link.label}\n                      </a>\n                    </li>\n                  ))}\n                </ul>\n              </div>\n            ))}\n          </div>\n        )}\n        <div className=\"border-t border-gray-800 pt-6\">\n          <p className=\"text-sm\">{copyright}</p>\n        </div>\n      </div>\n    </footer>\n  );\n}\n`,\n\n  'src/themes/default/components/Container.tsx': `import type { ComponentMeta } from '@infuro/cms-core/theme';\n\nexport const meta: ComponentMeta = {\n  name: 'Container',\n  label: 'Container',\n  category: 'layout',\n  icon: 'LayoutDashboard',\n  description: 'A layout container that holds other components',\n  defaultProps: { background: '#ffffff' },\n  props: [{ name: 'background', label: 'Background', type: 'color' }],\n  canContainChildren: true,\n};\n\nexport function Container({\n  background = '#ffffff',\n  children,\n}: {\n  background?: string;\n  children?: React.ReactNode;\n}) {\n  return (\n    <div style={{ backgroundColor: background, minHeight: '48px', padding: '1rem' }}>\n      {children}\n    </div>\n  );\n}\n`,\n\n  'src/themes/default/components/TextBlock.tsx': `import type { ComponentMeta } from '@infuro/cms-core/theme';\n\nexport const meta: ComponentMeta = {\n  name: 'TextBlock',\n  label: 'Text Block',\n  category: 'content',\n  icon: 'Type',\n  description: 'Rich text content block',\n  defaultProps: { content: '<p>Enter your text here...</p>' },\n  props: [{ name: 'content', label: 'Content', type: 'richtext' }],\n};\n\nexport function TextBlock({ content }: { content?: string }) {\n  return (\n    <div\n      className=\"prose prose-gray max-w-none py-4 px-2\"\n      dangerouslySetInnerHTML={{ __html: content || '' }}\n    />\n  );\n}\n`,\n\n  'src/lib/theme-registry.ts': `import defaultTheme from '@/themes/default';\nimport type { ThemeConfig } from '@infuro/cms-core/theme';\n\nexport const defaultThemeConfig = defaultTheme;\n\nexport interface ThemeRegistryItem {\n  id: string;\n  label: string;\n  config: ThemeConfig;\n  description?: string;\n}\n\nexport const THEME_REGISTRY: ThemeRegistryItem[] = [\n  {\n    id: 'default',\n    label: 'Default',\n    config: defaultTheme,\n    description: 'Default theme with standard layout and components.',\n  },\n];\n\nexport function getThemeById(id: string | undefined): ThemeConfig {\n  const theme = THEME_REGISTRY.find((t) => t.id === (id || '')) ?? THEME_REGISTRY[0];\n  return theme?.config ?? defaultTheme;\n}\n`,\n\n  'src/app/page.tsx': `export default function HomePage() {\n  return (\n    <main className=\"min-h-screen flex flex-col items-center justify-center p-8\">\n      <h1 className=\"text-3xl font-bold text-gray-900 mb-4\">Welcome</h1>\n      <p className=\"text-gray-600 mb-6\">Your CMS is set up. Manage content at the admin panel.</p>\n      <a\n        href=\"/admin\"\n        className=\"text-white bg-gray-900 hover:bg-gray-800 px-4 py-2 rounded-lg font-medium transition-colors\"\n      >\n        Open Admin\n      </a>\n    </main>\n  );\n}\n`,\n\n  'src/app/contact/page.tsx': `export default function ContactPage() {\n  return (\n    <main className=\"min-h-screen p-8 max-w-2xl mx-auto\">\n      <h1 className=\"text-3xl font-bold text-gray-900 mb-4\">Contact</h1>\n      <p className=\"text-gray-600\">\n        Add a contact form or wire this page to your CMS form. Use the admin panel to manage forms and submissions.\n      </p>\n    </main>\n  );\n}\n`,\n};\n\nfunction findRoot(cwd: string): string | null {\n  let dir = path.resolve(cwd);\n  for (let i = 0; i < 20; i++) {\n    const pkgPath = path.join(dir, 'package.json');\n    if (fs.existsSync(pkgPath)) {\n      try {\n        const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));\n        if (pkg.dependencies?.next || pkg.devDependencies?.next) return dir;\n      } catch {\n        // ignore\n      }\n    }\n    const parent = path.dirname(dir);\n    if (parent === dir) break;\n    dir = parent;\n  }\n  return null;\n}\n\nfunction writeFile(\n  root: string,\n  filePath: string,\n  content: string,\n  force: boolean,\n  dryRun: boolean,\n  log: (msg: string) => void\n): boolean {\n  const full = path.join(root, filePath);\n  if (fs.existsSync(full) && !force) {\n    log(`  skip (exists): ${filePath}`);\n    return false;\n  }\n  if (dryRun) {\n    log(`  would create: ${filePath}`);\n    return true;\n  }\n  const dir = path.dirname(full);\n  fs.mkdirSync(dir, { recursive: true });\n  fs.writeFileSync(full, content, 'utf8');\n  log(`  created: ${filePath}`);\n  return true;\n}\n\nfunction patchNextConfig(root: string, dryRun: boolean, log: (msg: string) => void): boolean {\n  const candidates = ['next.config.js', 'next.config.mjs', 'next.config.cjs'];\n  let configPath: string | null = null;\n  for (const name of candidates) {\n    const p = path.join(root, name);\n    if (fs.existsSync(p)) {\n      configPath = p;\n      break;\n    }\n  }\n  if (!configPath) {\n    log('  skip next.config: not found');\n    return false;\n  }\n  let content = fs.readFileSync(configPath, 'utf8');\n  if (content.includes(\"'@infuro/cms-core'\") || content.includes('\"@infuro/cms-core\"')) {\n    log(`  skip (already has core): ${path.basename(configPath)}`);\n    return false;\n  }\n  if (content.includes('serverExternalPackages')) {\n    content = content.replace(\n      /(serverExternalPackages:\\s*\\[)/,\n      \"$1'@infuro/cms-core', 'typeorm', \"\n    );\n  } else {\n    content = content.replace(\n      /(const nextConfig\\s*=\\s*\\{|module\\.exports\\s*=\\s*\\{)/,\n      \"$1\\n  serverExternalPackages: ['@infuro/cms-core', 'typeorm'],\"\n    );\n  }\n  if (dryRun) {\n    log(`  would patch: ${path.basename(configPath)}`);\n    return true;\n  }\n  fs.writeFileSync(configPath, content, 'utf8');\n  log(`  patched: ${path.basename(configPath)}`);\n  return true;\n}\n\nfunction patchTailwind(root: string, dryRun: boolean, log: (msg: string) => void): boolean {\n  const candidates = ['tailwind.config.js', 'tailwind.config.mjs', 'tailwind.config.ts'];\n  let configPath: string | null = null;\n  for (const name of candidates) {\n    const p = path.join(root, name);\n    if (fs.existsSync(p)) {\n      configPath = p;\n      break;\n    }\n  }\n  if (!configPath) {\n    log('  skip tailwind: config not found');\n    return false;\n  }\n  let content = fs.readFileSync(configPath, 'utf8');\n  const coreContent = \"./node_modules/@infuro/cms-core/dist/**/*.{js,cjs}\";\n  if (content.includes('@infuro/cms-core')) {\n    log(`  skip (already has core): ${path.basename(configPath)}`);\n    return false;\n  }\n  if (content.includes('content:')) {\n    content = content.replace(\n      /(content:\\s*\\[)/,\n      `$1\\n    \"${coreContent}\",`\n    );\n  }\n  if (dryRun) {\n    log(`  would patch: ${path.basename(configPath)}`);\n    return true;\n  }\n  fs.writeFileSync(configPath, content, 'utf8');\n  log(`  patched: ${path.basename(configPath)}`);\n  return true;\n}\n\nfunction patchLayout(root: string, dryRun: boolean, log: (msg: string) => void): boolean {\n  const layoutPath = path.join(root, 'src/app/layout.tsx');\n  if (!fs.existsSync(layoutPath)) {\n    log('  skip layout: src/app/layout.tsx not found');\n    return false;\n  }\n  let content = fs.readFileSync(layoutPath, 'utf8');\n  if (content.includes('<Providers>')) {\n    log('  skip layout: already uses Providers');\n    return false;\n  }\n  const bodyMatch = content.match(/<body([^>]*)>\\s*(\\{children\\})\\s*<\\/body>/s);\n  if (!bodyMatch) {\n    log('  skip layout: unexpected structure (add <Providers> manually)');\n    return false;\n  }\n  if (dryRun) {\n    log('  would patch: src/app/layout.tsx');\n    return true;\n  }\n  const [, bodyAttrs, children] = bodyMatch;\n  const newBody = `<body${bodyAttrs}>\\n        <Providers>${children}</Providers>\\n      </body>`;\n  content = content.replace(/<body[^>]*>\\s*\\{children\\}\\s*<\\/body>/s, newBody);\n  if (!content.includes(\"from './providers'\") && !content.includes('from \"./providers\"')) {\n    const firstImport = content.match(/^import .+ from .+;\\n/m);\n    content = firstImport\n      ? content.replace(firstImport[0], firstImport[0] + \"import { Providers } from './providers';\\n\")\n      : \"import { Providers } from './providers';\\n\" + content;\n  }\n  if (content.includes('<html') && !content.includes('suppressHydrationWarning')) {\n    content = content.replace(/<html(\\s)/, '<html suppressHydrationWarning$1');\n  }\n  fs.writeFileSync(layoutPath, content, 'utf8');\n  log('  patched: src/app/layout.tsx');\n  return true;\n}\n\nfunction patchPackageJson(root: string, dryRun: boolean, log: (msg: string) => void): boolean {\n  const pkgPath = path.join(root, 'package.json');\n  if (!fs.existsSync(pkgPath)) return false;\n  const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));\n  const scripts = pkg.scripts || {};\n  let changed = false;\n  if (!scripts.seed) {\n    scripts.seed = 'tsx src/lib/seed.ts';\n    changed = true;\n  }\n  if (!scripts['migration:run']) {\n    scripts['migration:run'] = 'tsx scripts/run-migrations.ts';\n    changed = true;\n  }\n  const dev = pkg.devDependencies || {};\n  const deps = pkg.dependencies || {};\n  if (!deps['@infuro/cms-core']) {\n    deps['@infuro/cms-core'] = '^1.0.6';\n    changed = true;\n  }\n  if (!dev.tsx) {\n    dev.tsx = '^4.0.0';\n    changed = true;\n  }\n  if (!dev.dotenv) {\n    dev.dotenv = '^16.0.0';\n    changed = true;\n  }\n  if (!changed) {\n    log('  skip package.json: scripts/devDeps already present');\n    return false;\n  }\n  pkg.scripts = scripts;\n  pkg.dependencies = { ...pkg.dependencies, ...deps };\n  pkg.devDependencies = { ...pkg.devDependencies, ...dev };\n  if (dryRun) {\n    log('  would patch: package.json (scripts + devDependencies)');\n    return true;\n  }\n  fs.writeFileSync(pkgPath, JSON.stringify(pkg, null, 2), 'utf8');\n  log('  patched: package.json');\n  return true;\n}\n\nasync function runNpmInstall(root: string, log: (msg: string) => void): Promise<void> {\n  const { spawnSync } = await import('child_process');\n  log('  running: npm install (deps)...');\n  spawnSync('npm', ['install', '@infuro/cms-core', 'typeorm', 'reflect-metadata', 'bcryptjs', 'next-auth', 'next-themes', 'sonner'], {\n    cwd: root,\n    stdio: 'inherit',\n    shell: true,\n  });\n  log('  running: npm install -D tsx dotenv @types/node...');\n  spawnSync('npm', ['install', '-D', 'tsx', 'dotenv', '@types/node'], {\n    cwd: root,\n    stdio: 'inherit',\n    shell: true,\n  });\n}\n\nasync function runInit(opts: {\n  force: boolean;\n  dryRun: boolean;\n  noDeps: boolean;\n  noPatchConfig: boolean;\n}) {\n  const log = (msg: string) => console.log(msg);\n  const cwd = process.cwd();\n  const root = findRoot(cwd);\n  if (!root) {\n    console.error('Not a Next.js project (no package.json with next dependency found from ' + cwd + ')');\n    process.exit(1);\n  }\n  const appDir = path.join(root, 'src/app');\n  if (!fs.existsSync(appDir)) {\n    console.error('Expected src/app directory not found. Use a Next.js app with src directory (e.g. create-next-app --src-dir).');\n    process.exit(1);\n  }\n\n  log('Infuro CMS init @ ' + root);\n  if (opts.dryRun) log('(dry run)');\n\n  for (const [filePath, content] of Object.entries(TEMPLATES)) {\n    writeFile(root, filePath, content, opts.force, opts.dryRun, log);\n  }\n\n  if (!opts.noPatchConfig) {\n    log('Config patches:');\n    patchNextConfig(root, opts.dryRun, log);\n    patchTailwind(root, opts.dryRun, log);\n    patchLayout(root, opts.dryRun, log);\n    patchPackageJson(root, opts.dryRun, log);\n  }\n\n  if (!opts.noDeps && !opts.dryRun) {\n    log('Dependencies:');\n    await runNpmInstall(root, log);\n  } else if (!opts.noDeps && opts.dryRun) {\n    log('  would run: npm install @infuro/cms-core typeorm reflect-metadata bcryptjs next-auth next-themes sonner');\n    log('  would run: npm install -D tsx dotenv @types/node');\n  }\n\n  log('');\n  log('Done. Next steps:');\n  log('  1. Copy .env.example to .env and set DATABASE_URL, NEXTAUTH_SECRET, NEXTAUTH_URL, ADMIN_EMAIL, ADMIN_PASSWORD');\n  log('  2. Run npm run migration:run then npm run seed (creates admin from ADMIN_EMAIL/ADMIN_PASSWORD)');\n  log('  3. npm run dev');\n}\n\nconst args = process.argv.slice(2);\nconst force = args.includes('--force');\nconst dryRun = args.includes('--dry-run');\nconst noDeps = args.includes('--no-deps');\nconst noPatchConfig = args.includes('--no-patch-config');\n\nif (args[0] === 'init' || args.includes('--init') || (args.length === 0 && !args.some((a) => a.startsWith('--')))) {\n  runInit({ force, dryRun, noDeps, noPatchConfig }).catch((e) => {\n    console.error(e);\n    process.exit(1);\n  });\n} else {\n  console.log('Usage: npx @infuro/cms-core init [--force] [--dry-run] [--no-deps] [--no-patch-config]');\n  process.exit(args[0] === '--help' || args[0] === '-h' ? 0 : 1);\n}\n"],"mappings":";;;AAKA,OAAO,QAAQ;AACf,OAAO,UAAU;AAEjB,IAAM,YAAY;AAAA,EAChB,0BAA0B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAsC1B,2BAA2B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiB3B,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAuBlB,oCAAoC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAyFpC,2CAA2C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAuC3C,4BAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkB5B,sCAAsC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQtC,qBAAqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAoCrB,yBAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkBzB,gBAAgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAShB,mBAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA+BnB,oCAAoC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAmBpC,6BAA6B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAsB7B,4BAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAe5B,+BAA+B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAsB/B,wCAAwC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA8CxC,wCAAwC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA2CxC,+CAA+C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA4B/C,+CAA+C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAsB/C,6BAA6B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA2B7B,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBpB,4BAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAW9B;AAEA,SAAS,SAAS,KAA4B;AAC5C,MAAI,MAAM,KAAK,QAAQ,GAAG;AAC1B,WAAS,IAAI,GAAG,IAAI,IAAI,KAAK;AAC3B,UAAM,UAAU,KAAK,KAAK,KAAK,cAAc;AAC7C,QAAI,GAAG,WAAW,OAAO,GAAG;AAC1B,UAAI;AACF,cAAM,MAAM,KAAK,MAAM,GAAG,aAAa,SAAS,MAAM,CAAC;AACvD,YAAI,IAAI,cAAc,QAAQ,IAAI,iBAAiB,KAAM,QAAO;AAAA,MAClE,QAAQ;AAAA,MAER;AAAA,IACF;AACA,UAAM,SAAS,KAAK,QAAQ,GAAG;AAC/B,QAAI,WAAW,IAAK;AACpB,UAAM;AAAA,EACR;AACA,SAAO;AACT;AAEA,SAAS,UACP,MACA,UACA,SACAA,QACAC,SACA,KACS;AACT,QAAM,OAAO,KAAK,KAAK,MAAM,QAAQ;AACrC,MAAI,GAAG,WAAW,IAAI,KAAK,CAACD,QAAO;AACjC,QAAI,oBAAoB,QAAQ,EAAE;AAClC,WAAO;AAAA,EACT;AACA,MAAIC,SAAQ;AACV,QAAI,mBAAmB,QAAQ,EAAE;AACjC,WAAO;AAAA,EACT;AACA,QAAM,MAAM,KAAK,QAAQ,IAAI;AAC7B,KAAG,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AACrC,KAAG,cAAc,MAAM,SAAS,MAAM;AACtC,MAAI,cAAc,QAAQ,EAAE;AAC5B,SAAO;AACT;AAEA,SAAS,gBAAgB,MAAcA,SAAiB,KAAqC;AAC3F,QAAM,aAAa,CAAC,kBAAkB,mBAAmB,iBAAiB;AAC1E,MAAI,aAA4B;AAChC,aAAW,QAAQ,YAAY;AAC7B,UAAM,IAAI,KAAK,KAAK,MAAM,IAAI;AAC9B,QAAI,GAAG,WAAW,CAAC,GAAG;AACpB,mBAAa;AACb;AAAA,IACF;AAAA,EACF;AACA,MAAI,CAAC,YAAY;AACf,QAAI,+BAA+B;AACnC,WAAO;AAAA,EACT;AACA,MAAI,UAAU,GAAG,aAAa,YAAY,MAAM;AAChD,MAAI,QAAQ,SAAS,oBAAoB,KAAK,QAAQ,SAAS,oBAAoB,GAAG;AACpF,QAAI,8BAA8B,KAAK,SAAS,UAAU,CAAC,EAAE;AAC7D,WAAO;AAAA,EACT;AACA,MAAI,QAAQ,SAAS,wBAAwB,GAAG;AAC9C,cAAU,QAAQ;AAAA,MAChB;AAAA,MACA;AAAA,IACF;AAAA,EACF,OAAO;AACL,cAAU,QAAQ;AAAA,MAChB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,MAAIA,SAAQ;AACV,QAAI,kBAAkB,KAAK,SAAS,UAAU,CAAC,EAAE;AACjD,WAAO;AAAA,EACT;AACA,KAAG,cAAc,YAAY,SAAS,MAAM;AAC5C,MAAI,cAAc,KAAK,SAAS,UAAU,CAAC,EAAE;AAC7C,SAAO;AACT;AAEA,SAAS,cAAc,MAAcA,SAAiB,KAAqC;AACzF,QAAM,aAAa,CAAC,sBAAsB,uBAAuB,oBAAoB;AACrF,MAAI,aAA4B;AAChC,aAAW,QAAQ,YAAY;AAC7B,UAAM,IAAI,KAAK,KAAK,MAAM,IAAI;AAC9B,QAAI,GAAG,WAAW,CAAC,GAAG;AACpB,mBAAa;AACb;AAAA,IACF;AAAA,EACF;AACA,MAAI,CAAC,YAAY;AACf,QAAI,mCAAmC;AACvC,WAAO;AAAA,EACT;AACA,MAAI,UAAU,GAAG,aAAa,YAAY,MAAM;AAChD,QAAM,cAAc;AACpB,MAAI,QAAQ,SAAS,kBAAkB,GAAG;AACxC,QAAI,8BAA8B,KAAK,SAAS,UAAU,CAAC,EAAE;AAC7D,WAAO;AAAA,EACT;AACA,MAAI,QAAQ,SAAS,UAAU,GAAG;AAChC,cAAU,QAAQ;AAAA,MAChB;AAAA,MACA;AAAA,OAAY,WAAW;AAAA,IACzB;AAAA,EACF;AACA,MAAIA,SAAQ;AACV,QAAI,kBAAkB,KAAK,SAAS,UAAU,CAAC,EAAE;AACjD,WAAO;AAAA,EACT;AACA,KAAG,cAAc,YAAY,SAAS,MAAM;AAC5C,MAAI,cAAc,KAAK,SAAS,UAAU,CAAC,EAAE;AAC7C,SAAO;AACT;AAEA,SAAS,YAAY,MAAcA,SAAiB,KAAqC;AACvF,QAAM,aAAa,KAAK,KAAK,MAAM,oBAAoB;AACvD,MAAI,CAAC,GAAG,WAAW,UAAU,GAAG;AAC9B,QAAI,6CAA6C;AACjD,WAAO;AAAA,EACT;AACA,MAAI,UAAU,GAAG,aAAa,YAAY,MAAM;AAChD,MAAI,QAAQ,SAAS,aAAa,GAAG;AACnC,QAAI,uCAAuC;AAC3C,WAAO;AAAA,EACT;AACA,QAAM,YAAY,QAAQ,MAAM,4CAA4C;AAC5E,MAAI,CAAC,WAAW;AACd,QAAI,gEAAgE;AACpE,WAAO;AAAA,EACT;AACA,MAAIA,SAAQ;AACV,QAAI,mCAAmC;AACvC,WAAO;AAAA,EACT;AACA,QAAM,CAAC,EAAE,WAAW,QAAQ,IAAI;AAChC,QAAM,UAAU,QAAQ,SAAS;AAAA,qBAAyB,QAAQ;AAAA;AAClE,YAAU,QAAQ,QAAQ,0CAA0C,OAAO;AAC3E,MAAI,CAAC,QAAQ,SAAS,oBAAoB,KAAK,CAAC,QAAQ,SAAS,oBAAoB,GAAG;AACtF,UAAM,cAAc,QAAQ,MAAM,wBAAwB;AAC1D,cAAU,cACN,QAAQ,QAAQ,YAAY,CAAC,GAAG,YAAY,CAAC,IAAI,4CAA4C,IAC7F,+CAA+C;AAAA,EACrD;AACA,MAAI,QAAQ,SAAS,OAAO,KAAK,CAAC,QAAQ,SAAS,0BAA0B,GAAG;AAC9E,cAAU,QAAQ,QAAQ,aAAa,kCAAkC;AAAA,EAC3E;AACA,KAAG,cAAc,YAAY,SAAS,MAAM;AAC5C,MAAI,+BAA+B;AACnC,SAAO;AACT;AAEA,SAAS,iBAAiB,MAAcA,SAAiB,KAAqC;AAC5F,QAAM,UAAU,KAAK,KAAK,MAAM,cAAc;AAC9C,MAAI,CAAC,GAAG,WAAW,OAAO,EAAG,QAAO;AACpC,QAAM,MAAM,KAAK,MAAM,GAAG,aAAa,SAAS,MAAM,CAAC;AACvD,QAAM,UAAU,IAAI,WAAW,CAAC;AAChC,MAAI,UAAU;AACd,MAAI,CAAC,QAAQ,MAAM;AACjB,YAAQ,OAAO;AACf,cAAU;AAAA,EACZ;AACA,MAAI,CAAC,QAAQ,eAAe,GAAG;AAC7B,YAAQ,eAAe,IAAI;AAC3B,cAAU;AAAA,EACZ;AACA,QAAM,MAAM,IAAI,mBAAmB,CAAC;AACpC,QAAM,OAAO,IAAI,gBAAgB,CAAC;AAClC,MAAI,CAAC,KAAK,kBAAkB,GAAG;AAC7B,SAAK,kBAAkB,IAAI;AAC3B,cAAU;AAAA,EACZ;AACA,MAAI,CAAC,IAAI,KAAK;AACZ,QAAI,MAAM;AACV,cAAU;AAAA,EACZ;AACA,MAAI,CAAC,IAAI,QAAQ;AACf,QAAI,SAAS;AACb,cAAU;AAAA,EACZ;AACA,MAAI,CAAC,SAAS;AACZ,QAAI,sDAAsD;AAC1D,WAAO;AAAA,EACT;AACA,MAAI,UAAU;AACd,MAAI,eAAe,EAAE,GAAG,IAAI,cAAc,GAAG,KAAK;AAClD,MAAI,kBAAkB,EAAE,GAAG,IAAI,iBAAiB,GAAG,IAAI;AACvD,MAAIA,SAAQ;AACV,QAAI,yDAAyD;AAC7D,WAAO;AAAA,EACT;AACA,KAAG,cAAc,SAAS,KAAK,UAAU,KAAK,MAAM,CAAC,GAAG,MAAM;AAC9D,MAAI,yBAAyB;AAC7B,SAAO;AACT;AAEA,eAAe,cAAc,MAAc,KAA2C;AACpF,QAAM,EAAE,UAAU,IAAI,MAAM,OAAO,eAAe;AAClD,MAAI,kCAAkC;AACtC,YAAU,OAAO,CAAC,WAAW,oBAAoB,WAAW,oBAAoB,YAAY,aAAa,eAAe,QAAQ,GAAG;AAAA,IACjI,KAAK;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,EACT,CAAC;AACD,MAAI,qDAAqD;AACzD,YAAU,OAAO,CAAC,WAAW,MAAM,OAAO,UAAU,aAAa,GAAG;AAAA,IAClE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,EACT,CAAC;AACH;AAEA,eAAe,QAAQ,MAKpB;AACD,QAAM,MAAM,CAAC,QAAgB,QAAQ,IAAI,GAAG;AAC5C,QAAM,MAAM,QAAQ,IAAI;AACxB,QAAM,OAAO,SAAS,GAAG;AACzB,MAAI,CAAC,MAAM;AACT,YAAQ,MAAM,4EAA4E,MAAM,GAAG;AACnG,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,QAAM,SAAS,KAAK,KAAK,MAAM,SAAS;AACxC,MAAI,CAAC,GAAG,WAAW,MAAM,GAAG;AAC1B,YAAQ,MAAM,8GAA8G;AAC5H,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,MAAI,uBAAuB,IAAI;AAC/B,MAAI,KAAK,OAAQ,KAAI,WAAW;AAEhC,aAAW,CAAC,UAAU,OAAO,KAAK,OAAO,QAAQ,SAAS,GAAG;AAC3D,cAAU,MAAM,UAAU,SAAS,KAAK,OAAO,KAAK,QAAQ,GAAG;AAAA,EACjE;AAEA,MAAI,CAAC,KAAK,eAAe;AACvB,QAAI,iBAAiB;AACrB,oBAAgB,MAAM,KAAK,QAAQ,GAAG;AACtC,kBAAc,MAAM,KAAK,QAAQ,GAAG;AACpC,gBAAY,MAAM,KAAK,QAAQ,GAAG;AAClC,qBAAiB,MAAM,KAAK,QAAQ,GAAG;AAAA,EACzC;AAEA,MAAI,CAAC,KAAK,UAAU,CAAC,KAAK,QAAQ;AAChC,QAAI,eAAe;AACnB,UAAM,cAAc,MAAM,GAAG;AAAA,EAC/B,WAAW,CAAC,KAAK,UAAU,KAAK,QAAQ;AACtC,QAAI,0GAA0G;AAC9G,QAAI,oDAAoD;AAAA,EAC1D;AAEA,MAAI,EAAE;AACN,MAAI,mBAAmB;AACvB,MAAI,iHAAiH;AACrH,MAAI,kGAAkG;AACtG,MAAI,kBAAkB;AACxB;AAEA,IAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;AACjC,IAAM,QAAQ,KAAK,SAAS,SAAS;AACrC,IAAM,SAAS,KAAK,SAAS,WAAW;AACxC,IAAM,SAAS,KAAK,SAAS,WAAW;AACxC,IAAM,gBAAgB,KAAK,SAAS,mBAAmB;AAEvD,IAAI,KAAK,CAAC,MAAM,UAAU,KAAK,SAAS,QAAQ,KAAM,KAAK,WAAW,KAAK,CAAC,KAAK,KAAK,CAAC,MAAM,EAAE,WAAW,IAAI,CAAC,GAAI;AACjH,UAAQ,EAAE,OAAO,QAAQ,QAAQ,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM;AAC7D,YAAQ,MAAM,CAAC;AACf,YAAQ,KAAK,CAAC;AAAA,EAChB,CAAC;AACH,OAAO;AACL,UAAQ,IAAI,wFAAwF;AACpG,UAAQ,KAAK,KAAK,CAAC,MAAM,YAAY,KAAK,CAAC,MAAM,OAAO,IAAI,CAAC;AAC/D;","names":["force","dryRun"]}
+{"version":3,"sources":["../src/cli.ts"],"sourcesContent":["#!/usr/bin/env node\n/**\n * @infuro/cms-core init CLI\n * Usage: npx @infuro/cms-core init [--force] [--dry-run] [--no-deps] [--no-patch-config]\n */\nimport fs from 'fs';\nimport path from 'path';\n\nconst TEMPLATES = {\n  'src/lib/data-source.ts': `import 'reflect-metadata';\nimport path from 'path';\nimport { createRequire } from 'module';\nimport { DataSource } from 'typeorm';\nimport { CMS_ENTITY_MAP } from '@infuro/cms-core';\n\nconst require = createRequire(import.meta.url);\nconst coreDir = path.dirname(require.resolve('@infuro/cms-core'));\n\nlet dataSource: DataSource | null = null;\n\nexport function getDataSource(): DataSource {\n  if (!dataSource) {\n    dataSource = new DataSource({\n      type: 'postgres',\n      url: process.env.DATABASE_URL,\n      entities: Object.values(CMS_ENTITY_MAP),\n      synchronize: false,\n      ...(process.env.TYPEORM_CLI && {\n        migrations: [\n          path.join(coreDir, 'migrations', '*.ts'),\n          path.join(process.cwd(), 'src', 'migrations', '*.ts'),\n        ],\n      }),\n    });\n  }\n  return dataSource;\n}\n\nexport async function getDataSourceInitialized(): Promise<DataSource> {\n  const ds = getDataSource();\n  if (!ds.isInitialized) await ds.initialize();\n  return ds;\n}\n\nexport default getDataSource;\n`,\n\n  'src/lib/auth-helpers.ts': `import { getServerSession } from 'next-auth';\nimport { NextResponse } from 'next/server';\nimport { createAuthHelpers } from '@infuro/cms-core/auth';\n\nconst helpers = createAuthHelpers(\n  async () => {\n    const s = await getServerSession();\n    return s ? { user: s.user } : null;\n  },\n  NextResponse\n);\n\nexport const requireAuth = helpers.requireAuth;\nexport const requirePermission = helpers.requirePermission;\nexport const getAuthenticatedUser = helpers.getAuthenticatedUser;\n`,\n\n  'src/lib/cms.ts': `import {\n  createCmsApp,\n  localStoragePlugin,\n  type CmsApp,\n} from '@infuro/cms-core';\nimport { getDataSourceInitialized } from './data-source';\n\nlet cmsPromise: Promise<CmsApp> | null = null;\n\nexport async function getCms(): Promise<CmsApp> {\n  if (cmsPromise) return cmsPromise;\n  const dataSource = await getDataSourceInitialized();\n  cmsPromise = createCmsApp({\n    dataSource,\n    config: process.env as unknown as Record<string, string>,\n    plugins: [\n      localStoragePlugin({ dir: 'public/uploads' }),\n    ],\n  });\n  return cmsPromise;\n}\n`,\n\n  'src/app/api/[[...path]]/route.ts': `import { NextResponse } from 'next/server';\nimport { getServerSession } from 'next-auth';\nimport { createCmsApiHandler } from '@infuro/cms-core/api';\nimport { CMS_ENTITY_MAP } from '@infuro/cms-core';\nimport { getDataSourceInitialized } from '@/lib/data-source';\nimport { requireAuth } from '@/lib/auth-helpers';\nimport { getCms } from '@/lib/cms';\nimport bcrypt from 'bcryptjs';\n\nconst baseUrl = process.env.NEXTAUTH_URL || 'http://localhost:3000';\n\nlet handlerPromise: Promise<ReturnType<typeof createCmsApiHandler>> | null = null;\n\nasync function getHandler() {\n  if (!handlerPromise) {\n    const dataSource = await getDataSourceInitialized();\n    handlerPromise = Promise.resolve(\n      createCmsApiHandler({\n        dataSource,\n        entityMap: CMS_ENTITY_MAP,\n        requireAuth,\n        json: NextResponse.json.bind(NextResponse),\n        getCms,\n        userAuth: {\n          dataSource,\n          entityMap: CMS_ENTITY_MAP,\n          json: NextResponse.json.bind(NextResponse),\n          baseUrl,\n          hashPassword: (p) => Promise.resolve(bcrypt.hashSync(p, 12)),\n          comparePassword: (p, h) => Promise.resolve(bcrypt.compareSync(p, h)),\n          resetExpiryHours: 1,\n          getSession: () =>\n            getServerSession().then((s) => (s ? { user: s.user } : null)),\n        },\n        dashboard: {\n          dataSource,\n          entityMap: CMS_ENTITY_MAP,\n          json: NextResponse.json.bind(NextResponse),\n          requireAuth,\n          requirePermission: requireAuth,\n        },\n        upload: {\n          json: NextResponse.json.bind(NextResponse),\n          requireAuth,\n          storage: () => getCms().then((cms) => cms.getPlugin('storage')),\n          localUploadDir: 'public/uploads',\n        },\n        blogBySlug: {\n          dataSource,\n          entityMap: CMS_ENTITY_MAP,\n          json: NextResponse.json.bind(NextResponse),\n          requireAuth: async () => null,\n        },\n        formBySlug: {\n          dataSource,\n          entityMap: CMS_ENTITY_MAP,\n          json: NextResponse.json.bind(NextResponse),\n          requireAuth: async () => null,\n        },\n        usersApi: {\n          dataSource,\n          entityMap: CMS_ENTITY_MAP,\n          json: NextResponse.json.bind(NextResponse),\n          requireAuth,\n          baseUrl,\n        },\n      })\n    );\n  }\n  return handlerPromise;\n}\n\nasync function handle(method: string, req: Request, context: { params: Promise<{ path?: string[] }> }) {\n  try {\n    const handler = await getHandler();\n    const { path: pathSegments = [] } = await context.params;\n    return handler.handle(method, pathSegments, req);\n  } catch {\n    return NextResponse.json({ error: 'Server Error' }, { status: 500 });\n  }\n}\n\nexport async function GET(req: Request, ctx: { params: Promise<{ path?: string[] }> }) { return handle('GET', req, ctx); }\nexport async function POST(req: Request, ctx: { params: Promise<{ path?: string[] }> }) { return handle('POST', req, ctx); }\nexport async function PUT(req: Request, ctx: { params: Promise<{ path?: string[] }> }) { return handle('PUT', req, ctx); }\nexport async function PATCH(req: Request, ctx: { params: Promise<{ path?: string[] }> }) { return handle('PATCH', req, ctx); }\nexport async function DELETE(req: Request, ctx: { params: Promise<{ path?: string[] }> }) { return handle('DELETE', req, ctx); }\n`,\n\n  'src/app/api/auth/[...nextauth]/route.ts': `import NextAuth from 'next-auth';\nimport { getNextAuthOptions } from '@infuro/cms-core/auth';\nimport { getDataSourceInitialized } from '@/lib/data-source';\nimport { CMS_ENTITY_MAP } from '@infuro/cms-core';\nimport bcrypt from 'bcryptjs';\n\nasync function getOptions() {\n  const dataSource = await getDataSourceInitialized();\n  const userRepo = dataSource.getRepository(CMS_ENTITY_MAP.users);\n  return getNextAuthOptions({\n    getUserByEmail: async (email: string) => {\n      return userRepo.findOne({\n        where: { email },\n        relations: ['group', 'group.permissions'],\n        select: ['id', 'email', 'name', 'password', 'blocked', 'deleted', 'groupId', 'adminAccess'],\n      }) as any;\n    },\n    comparePassword: (plain, hash) => Promise.resolve(bcrypt.compareSync(plain, hash)),\n    signInPage: '/admin/signin',\n  });\n}\n\nlet handler: ReturnType<typeof NextAuth> | null = null;\n\nasync function getHandler() {\n  if (!handler) handler = NextAuth(await getOptions());\n  return handler;\n}\n\ntype NextAuthContext = { params: Promise<{ nextauth?: string[] }> };\n\nexport async function GET(req: Request, context: NextAuthContext) {\n  return (await getHandler())(req, context);\n}\nexport async function POST(req: Request, context: NextAuthContext) {\n  return (await getHandler())(req, context);\n}\n`,\n\n  'src/app/admin/layout.tsx': `'use client';\n\nimport '@infuro/cms-core/admin.css';\nimport AdminLayout from '@infuro/cms-core/admin';\n\nexport default function AdminLayoutWrapper({ children }: { children: React.ReactNode }) {\n  return (\n    <AdminLayout\n      customNavItems={[]}\n      customNavSections={[]}\n      customCrudConfigs={{}}\n    >\n      {children}\n    </AdminLayout>\n  );\n}\n`,\n\n  'src/app/admin/[[...slug]]/page.tsx': `import { AdminPageResolver } from '@infuro/cms-core/admin';\n\nexport default async function AdminPage({ params }: { params: Promise<{ slug?: string[] }> }) {\n  const { slug } = await params;\n  return <AdminPageResolver slug={slug} />;\n}\n`,\n\n  'src/middleware.ts': `import { NextResponse } from 'next/server';\nimport type { NextRequest } from 'next/server';\nimport { createCmsMiddleware } from '@infuro/cms-core/auth';\n\nconst cmsMiddleware = createCmsMiddleware({\n  publicApiMethods: {\n    '/api/contacts': ['POST'],\n    '/api/form-submissions': ['POST'],\n    '/api/blogs': ['GET'],\n    '/api/forms': ['GET'],\n    '/api/auth': ['GET', 'POST'],\n    '/api/users/forgot-password': ['POST'],\n    '/api/users/set-password': ['POST'],\n    '/api/users/invite': ['POST'],\n  },\n});\n\nexport function middleware(request: NextRequest) {\n  const result = cmsMiddleware({\n    nextUrl: request.nextUrl,\n    url: request.url,\n    method: request.method,\n    cookies: request.cookies,\n  });\n\n  if (result.type === 'next') return NextResponse.next();\n  if (result.type === 'redirect') return NextResponse.redirect(result.url);\n  if (result.type === 'json') return NextResponse.json(result.body, { status: result.status });\n  return NextResponse.next();\n}\n\nexport const config = {\n  matcher: ['/admin/:path*', '/api/:path*'],\n};\n`,\n\n  'src/app/providers.tsx': `\"use client\";\n\nimport { ThemeProvider } from \"next-themes\";\nimport { SessionProvider } from \"next-auth/react\";\nimport { Toaster } from \"sonner\";\n\nexport function Providers({ children }: { children: React.ReactNode }) {\n  return (\n    <SessionProvider>\n      <ThemeProvider attribute=\"class\" defaultTheme=\"system\" enableSystem>\n        {children}\n        <Toaster position=\"top-right\" />\n      </ThemeProvider>\n    </SessionProvider>\n  );\n}\n`,\n\n  '.env.example': `DATABASE_URL=postgres://user:password@localhost:5432/mydb\nNEXTAUTH_SECRET=your-random-secret\nNEXTAUTH_URL=http://localhost:3000\n\n# Admin user (for npm run seed)\nADMIN_EMAIL=admin@example.com\nADMIN_PASSWORD=changeme\n`,\n\n  'src/lib/seed.ts': `try { require('dotenv/config'); } catch {}\nimport 'reflect-metadata';\nimport { getDataSourceInitialized } from './data-source';\nimport { CMS_ENTITY_MAP } from '@infuro/cms-core';\nimport bcrypt from 'bcryptjs';\n\nasync function main() {\n  const ds = await getDataSourceInitialized();\n  const userRepo = ds.getRepository(CMS_ENTITY_MAP.users);\n\n  const email = process.env.ADMIN_EMAIL || 'admin@example.com';\n  const password = process.env.ADMIN_PASSWORD || 'changeme';\n\n  const existing = await userRepo.findOne({ where: { email } });\n  if (!existing) {\n    const hashedPassword = await bcrypt.hash(password, 10);\n    await userRepo.save(userRepo.create({ name: 'Admin', email, password: hashedPassword }));\n    console.log('Default admin user created');\n  } else {\n    console.log('Default admin user already exists');\n  }\n\n  await ds.destroy();\n}\n\nmain().catch((e) => {\n  console.error(e);\n  process.exit(1);\n});\n`,\n\n  'scripts/migration-datasource.cjs': `/**\n * Data source for TypeORM CLI (migration:generate). Resolves @infuro/cms-core from project root (works with npm link).\n */\nrequire('reflect-metadata');\nrequire('dotenv/config');\nconst path = require('path');\nconst { DataSource } = require('typeorm');\nconst coreEntry = path.resolve(__dirname, '..', 'node_modules', '@infuro', 'cms-core', 'dist', 'index.cjs');\nconst { CMS_ENTITY_MAP } = require(coreEntry);\n\nmodule.exports = new DataSource({\n  type: 'postgres',\n  url: process.env.DATABASE_URL,\n  entities: Object.values(CMS_ENTITY_MAP),\n  synchronize: false,\n  migrations: ['src/migrations/*.ts'],\n});\n`,\n\n  'scripts/run-migrations.ts': `/**\n * Run TypeORM migrations. Loads .env so DATABASE_URL is set.\n * Usage: npm run migration:run\n */\ntry { require('dotenv/config'); } catch {}\nimport 'reflect-metadata';\n\nasync function main() {\n  process.env.TYPEORM_CLI = '1';\n  const { getDataSourceInitialized } = await import('../src/lib/data-source');\n  const ds = await getDataSourceInitialized();\n  const run = await ds.runMigrations();\n  console.log(run.length ? \\`Ran \\${run.length} migration(s).\\` : 'No pending migrations.');\n  await ds.destroy();\n}\n\nmain().catch((e) => {\n  console.error(e);\n  process.exit(1);\n});\n`,\n\n  'src/migrations/README.md': `# TypeORM migrations\n\nGenerate a new migration (after changing entities):\n\n\\`\\`\\`bash\nnpm run migration:generate -- MyMigrationName\n\\`\\`\\`\n\nRun pending migrations:\n\n\\`\\`\\`bash\nnpm run migration:run\n\\`\\`\\`\n`,\n\n  'src/themes/default/index.ts': `import { createTheme } from '@infuro/cms-core/theme';\n\nimport { Container, meta as containerMeta } from './components/Container';\nimport { TextBlock, meta as textBlockMeta } from './components/TextBlock';\n\nimport { Navbar } from './layout/Navbar';\nimport { Footer, footerFields, footerDefaults } from './layout/Footer';\n\nexport default createTheme({\n  name: 'default',\n  label: 'Default Theme',\n  components: [\n    { component: Container, meta: containerMeta },\n    { component: TextBlock, meta: textBlockMeta },\n  ],\n  layout: {\n    navbar: { component: Navbar },\n    footer: { component: Footer, fields: footerFields, defaults: footerDefaults },\n  },\n});\n`,\n\n  'src/themes/default/layout/Navbar.tsx': `import type { NavbarConfig, NavItem } from '@infuro/cms-core/theme';\n\nfunction NavLink({ item }: { item: NavItem }) {\n  return (\n    <li className=\"list-none\">\n      <a\n        href={item.url}\n        target={item.openInNewTab ? '_blank' : undefined}\n        rel={item.openInNewTab ? 'noopener noreferrer' : undefined}\n        className=\"text-sm font-medium text-gray-700 hover:text-gray-900 px-3 py-2 inline-block\"\n      >\n        {item.label}\n      </a>\n    </li>\n  );\n}\n\nexport function Navbar({ logo, items, ctaLabel, ctaUrl }: NavbarConfig) {\n  return (\n    <nav className=\"bg-white sticky top-0 z-40 border-b\">\n      <div className=\"max-w-7xl mx-auto px-4 sm:px-6 lg:px-8\">\n        <div className=\"flex items-center justify-between h-16\">\n          <a href=\"/\" className=\"flex-shrink-0\">\n            {logo ? (\n              <img src={logo} alt=\"Logo\" className=\"h-8\" />\n            ) : (\n              <span className=\"text-xl font-bold text-gray-900\">Logo</span>\n            )}\n          </a>\n          <ul className=\"flex items-center gap-1 list-none m-0 p-0\">\n            {items.map((item) => (\n              <NavLink key={item.id} item={item} />\n            ))}\n          </ul>\n          {ctaLabel && (\n            <a href={ctaUrl || '#'} className=\"text-sm font-medium text-gray-900 hover:underline\">\n              {ctaLabel}\n            </a>\n          )}\n        </div>\n      </div>\n    </nav>\n  );\n}\n`,\n\n  'src/themes/default/layout/Footer.tsx': `import type { FooterConfig, PropDefinition } from '@infuro/cms-core/theme';\n\nexport const footerFields: PropDefinition[] = [\n  { name: 'copyright', label: 'Copyright Text', type: 'text' },\n];\n\nexport const footerDefaults: Record<string, any> = {\n  copyright: '© 2025 Your Site. All rights reserved.',\n  columns: [],\n  socialLinks: [],\n};\n\nexport function Footer({ copyright, columns = [], socialLinks = [] }: FooterConfig) {\n  return (\n    <footer className=\"bg-gray-900 text-gray-400 py-8 px-8\">\n      <div className=\"max-w-7xl mx-auto\">\n        {columns.length > 0 && (\n          <div className=\"grid grid-cols-2 md:grid-cols-4 gap-8 mb-6\">\n            {columns.map((col, i) => (\n              <div key={i}>\n                <h4 className=\"text-white font-semibold mb-3 text-sm\">{col.title}</h4>\n                <ul className=\"space-y-2\">\n                  {col.links.map((link, j) => (\n                    <li key={j}>\n                      <a href={link.url} className=\"text-sm hover:text-white transition-colors\">\n                        {link.label}\n                      </a>\n                    </li>\n                  ))}\n                </ul>\n              </div>\n            ))}\n          </div>\n        )}\n        <div className=\"border-t border-gray-800 pt-6\">\n          <p className=\"text-sm\">{copyright}</p>\n        </div>\n      </div>\n    </footer>\n  );\n}\n`,\n\n  'src/themes/default/components/Container.tsx': `import type { ComponentMeta } from '@infuro/cms-core/theme';\n\nexport const meta: ComponentMeta = {\n  name: 'Container',\n  label: 'Container',\n  category: 'layout',\n  icon: 'LayoutDashboard',\n  description: 'A layout container that holds other components',\n  defaultProps: { background: '#ffffff' },\n  props: [{ name: 'background', label: 'Background', type: 'color' }],\n  canContainChildren: true,\n};\n\nexport function Container({\n  background = '#ffffff',\n  children,\n}: {\n  background?: string;\n  children?: React.ReactNode;\n}) {\n  return (\n    <div style={{ backgroundColor: background, minHeight: '48px', padding: '1rem' }}>\n      {children}\n    </div>\n  );\n}\n`,\n\n  'src/themes/default/components/TextBlock.tsx': `import type { ComponentMeta } from '@infuro/cms-core/theme';\n\nexport const meta: ComponentMeta = {\n  name: 'TextBlock',\n  label: 'Text Block',\n  category: 'content',\n  icon: 'Type',\n  description: 'Rich text content block',\n  defaultProps: { content: '<p>Enter your text here...</p>' },\n  props: [{ name: 'content', label: 'Content', type: 'richtext' }],\n};\n\nexport function TextBlock({ content }: { content?: string }) {\n  return (\n    <div\n      className=\"prose prose-gray max-w-none py-4 px-2\"\n      dangerouslySetInnerHTML={{ __html: content || '' }}\n    />\n  );\n}\n`,\n\n  'src/lib/theme-registry.ts': `import defaultTheme from '@/themes/default';\nimport type { ThemeConfig } from '@infuro/cms-core/theme';\n\nexport const defaultThemeConfig = defaultTheme;\n\nexport interface ThemeRegistryItem {\n  id: string;\n  label: string;\n  config: ThemeConfig;\n  description?: string;\n}\n\nexport const THEME_REGISTRY: ThemeRegistryItem[] = [\n  {\n    id: 'default',\n    label: 'Default',\n    config: defaultTheme,\n    description: 'Default theme with standard layout and components.',\n  },\n];\n\nexport function getThemeById(id: string | undefined): ThemeConfig {\n  const theme = THEME_REGISTRY.find((t) => t.id === (id || '')) ?? THEME_REGISTRY[0];\n  return theme?.config ?? defaultTheme;\n}\n`,\n\n  'src/app/page.tsx': `export default function HomePage() {\n  return (\n    <main className=\"min-h-screen flex flex-col items-center justify-center p-8\">\n      <h1 className=\"text-3xl font-bold text-gray-900 mb-4\">Welcome</h1>\n      <p className=\"text-gray-600 mb-6\">Your CMS is set up. Manage content at the admin panel.</p>\n      <a\n        href=\"/admin\"\n        className=\"text-white bg-gray-900 hover:bg-gray-800 px-4 py-2 rounded-lg font-medium transition-colors\"\n      >\n        Open Admin\n      </a>\n    </main>\n  );\n}\n`,\n\n  'src/app/contact/page.tsx': `export default function ContactPage() {\n  return (\n    <main className=\"min-h-screen p-8 max-w-2xl mx-auto\">\n      <h1 className=\"text-3xl font-bold text-gray-900 mb-4\">Contact</h1>\n      <p className=\"text-gray-600\">\n        Add a contact form or wire this page to your CMS form. Use the admin panel to manage forms and submissions.\n      </p>\n    </main>\n  );\n}\n`,\n};\n\nfunction findRoot(cwd: string): string | null {\n  let dir = path.resolve(cwd);\n  for (let i = 0; i < 20; i++) {\n    const pkgPath = path.join(dir, 'package.json');\n    if (fs.existsSync(pkgPath)) {\n      try {\n        const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));\n        if (pkg.dependencies?.next || pkg.devDependencies?.next) return dir;\n      } catch {\n        // ignore\n      }\n    }\n    const parent = path.dirname(dir);\n    if (parent === dir) break;\n    dir = parent;\n  }\n  return null;\n}\n\nfunction writeFile(\n  root: string,\n  filePath: string,\n  content: string,\n  force: boolean,\n  dryRun: boolean,\n  log: (msg: string) => void\n): boolean {\n  const full = path.join(root, filePath);\n  if (fs.existsSync(full) && !force) {\n    log(`  skip (exists): ${filePath}`);\n    return false;\n  }\n  if (dryRun) {\n    log(`  would create: ${filePath}`);\n    return true;\n  }\n  const dir = path.dirname(full);\n  fs.mkdirSync(dir, { recursive: true });\n  fs.writeFileSync(full, content, 'utf8');\n  log(`  created: ${filePath}`);\n  return true;\n}\n\nfunction patchNextConfig(root: string, dryRun: boolean, log: (msg: string) => void): boolean {\n  const candidates = ['next.config.js', 'next.config.mjs', 'next.config.cjs'];\n  let configPath: string | null = null;\n  for (const name of candidates) {\n    const p = path.join(root, name);\n    if (fs.existsSync(p)) {\n      configPath = p;\n      break;\n    }\n  }\n  if (!configPath) {\n    log('  skip next.config: not found');\n    return false;\n  }\n  let content = fs.readFileSync(configPath, 'utf8');\n  if (content.includes(\"'@infuro/cms-core'\") || content.includes('\"@infuro/cms-core\"')) {\n    log(`  skip (already has core): ${path.basename(configPath)}`);\n    return false;\n  }\n  if (content.includes('serverExternalPackages')) {\n    content = content.replace(\n      /(serverExternalPackages:\\s*\\[)/,\n      \"$1'@infuro/cms-core', 'typeorm', \"\n    );\n  } else {\n    content = content.replace(\n      /(const nextConfig\\s*=\\s*\\{|module\\.exports\\s*=\\s*\\{)/,\n      \"$1\\n  serverExternalPackages: ['@infuro/cms-core', 'typeorm'],\"\n    );\n  }\n  if (dryRun) {\n    log(`  would patch: ${path.basename(configPath)}`);\n    return true;\n  }\n  fs.writeFileSync(configPath, content, 'utf8');\n  log(`  patched: ${path.basename(configPath)}`);\n  return true;\n}\n\nfunction patchTailwind(root: string, dryRun: boolean, log: (msg: string) => void): boolean {\n  const candidates = ['tailwind.config.js', 'tailwind.config.mjs', 'tailwind.config.ts'];\n  let configPath: string | null = null;\n  for (const name of candidates) {\n    const p = path.join(root, name);\n    if (fs.existsSync(p)) {\n      configPath = p;\n      break;\n    }\n  }\n  if (!configPath) {\n    log('  skip tailwind: config not found');\n    return false;\n  }\n  let content = fs.readFileSync(configPath, 'utf8');\n  const coreContent = \"./node_modules/@infuro/cms-core/dist/**/*.{js,cjs}\";\n  if (content.includes('@infuro/cms-core')) {\n    log(`  skip (already has core): ${path.basename(configPath)}`);\n    return false;\n  }\n  if (content.includes('content:')) {\n    content = content.replace(\n      /(content:\\s*\\[)/,\n      `$1\\n    \"${coreContent}\",`\n    );\n  }\n  if (dryRun) {\n    log(`  would patch: ${path.basename(configPath)}`);\n    return true;\n  }\n  fs.writeFileSync(configPath, content, 'utf8');\n  log(`  patched: ${path.basename(configPath)}`);\n  return true;\n}\n\nfunction patchLayout(root: string, dryRun: boolean, log: (msg: string) => void): boolean {\n  const layoutPath = path.join(root, 'src/app/layout.tsx');\n  if (!fs.existsSync(layoutPath)) {\n    log('  skip layout: src/app/layout.tsx not found');\n    return false;\n  }\n  let content = fs.readFileSync(layoutPath, 'utf8');\n  if (content.includes('<Providers>')) {\n    log('  skip layout: already uses Providers');\n    return false;\n  }\n  const bodyMatch = content.match(/<body([^>]*)>\\s*(\\{children\\})\\s*<\\/body>/s);\n  if (!bodyMatch) {\n    log('  skip layout: unexpected structure (add <Providers> manually)');\n    return false;\n  }\n  if (dryRun) {\n    log('  would patch: src/app/layout.tsx');\n    return true;\n  }\n  const [, bodyAttrs, children] = bodyMatch;\n  const newBody = `<body${bodyAttrs}>\\n        <Providers>${children}</Providers>\\n      </body>`;\n  content = content.replace(/<body[^>]*>\\s*\\{children\\}\\s*<\\/body>/s, newBody);\n  if (!content.includes(\"from './providers'\") && !content.includes('from \"./providers\"')) {\n    const firstImport = content.match(/^import .+ from .+;\\n/m);\n    content = firstImport\n      ? content.replace(firstImport[0], firstImport[0] + \"import { Providers } from './providers';\\n\")\n      : \"import { Providers } from './providers';\\n\" + content;\n  }\n  if (content.includes('<html') && !content.includes('suppressHydrationWarning')) {\n    content = content.replace(/<html(\\s)/, '<html suppressHydrationWarning$1');\n  }\n  fs.writeFileSync(layoutPath, content, 'utf8');\n  log('  patched: src/app/layout.tsx');\n  return true;\n}\n\nfunction patchPackageJson(root: string, dryRun: boolean, log: (msg: string) => void): boolean {\n  const pkgPath = path.join(root, 'package.json');\n  if (!fs.existsSync(pkgPath)) return false;\n  const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));\n  const scripts = pkg.scripts || {};\n  let changed = false;\n  if (!scripts.seed) {\n    scripts.seed = 'tsx src/lib/seed.ts';\n    changed = true;\n  }\n  if (!scripts['migration:run']) {\n    scripts['migration:run'] = 'tsx scripts/run-migrations.ts';\n    changed = true;\n  }\n  const dev = pkg.devDependencies || {};\n  const deps = pkg.dependencies || {};\n  if (!deps['@infuro/cms-core']) {\n    deps['@infuro/cms-core'] = '^1.0.6';\n    changed = true;\n  }\n  if (!dev.tsx) {\n    dev.tsx = '^4.0.0';\n    changed = true;\n  }\n  if (!dev.dotenv) {\n    dev.dotenv = '^16.0.0';\n    changed = true;\n  }\n  if (!changed) {\n    log('  skip package.json: scripts/devDeps already present');\n    return false;\n  }\n  pkg.scripts = scripts;\n  pkg.dependencies = { ...pkg.dependencies, ...deps };\n  pkg.devDependencies = { ...pkg.devDependencies, ...dev };\n  if (dryRun) {\n    log('  would patch: package.json (scripts + devDependencies)');\n    return true;\n  }\n  fs.writeFileSync(pkgPath, JSON.stringify(pkg, null, 2), 'utf8');\n  log('  patched: package.json');\n  return true;\n}\n\nasync function runNpmInstall(root: string, log: (msg: string) => void): Promise<void> {\n  const { spawnSync } = await import('child_process');\n  log('  running: npm install (deps)...');\n  spawnSync('npm', ['install', '@infuro/cms-core', 'typeorm', 'reflect-metadata', 'bcryptjs', 'next-auth', 'next-themes', 'sonner'], {\n    cwd: root,\n    stdio: 'inherit',\n    shell: true,\n  });\n  log('  running: npm install -D tsx dotenv @types/node...');\n  spawnSync('npm', ['install', '-D', 'tsx', 'dotenv', '@types/node'], {\n    cwd: root,\n    stdio: 'inherit',\n    shell: true,\n  });\n}\n\nasync function runInit(opts: {\n  force: boolean;\n  dryRun: boolean;\n  noDeps: boolean;\n  noPatchConfig: boolean;\n}) {\n  const log = (msg: string) => console.log(msg);\n  const cwd = process.cwd();\n  const root = findRoot(cwd);\n  if (!root) {\n    console.error('Not a Next.js project (no package.json with next dependency found from ' + cwd + ')');\n    process.exit(1);\n  }\n  const appDir = path.join(root, 'src/app');\n  if (!fs.existsSync(appDir)) {\n    console.error('Expected src/app directory not found. Use a Next.js app with src directory (e.g. create-next-app --src-dir).');\n    process.exit(1);\n  }\n\n  log('Infuro CMS init @ ' + root);\n  if (opts.dryRun) log('(dry run)');\n\n  for (const [filePath, content] of Object.entries(TEMPLATES)) {\n    writeFile(root, filePath, content, opts.force, opts.dryRun, log);\n  }\n\n  if (!opts.noPatchConfig) {\n    log('Config patches:');\n    patchNextConfig(root, opts.dryRun, log);\n    patchTailwind(root, opts.dryRun, log);\n    patchLayout(root, opts.dryRun, log);\n    patchPackageJson(root, opts.dryRun, log);\n  }\n\n  if (!opts.noDeps && !opts.dryRun) {\n    log('Dependencies:');\n    await runNpmInstall(root, log);\n  } else if (!opts.noDeps && opts.dryRun) {\n    log('  would run: npm install @infuro/cms-core typeorm reflect-metadata bcryptjs next-auth next-themes sonner');\n    log('  would run: npm install -D tsx dotenv @types/node');\n  }\n\n  log('');\n  log('Done. Next steps:');\n  log('  1. Copy .env.example to .env and set DATABASE_URL, NEXTAUTH_SECRET, NEXTAUTH_URL, ADMIN_EMAIL, ADMIN_PASSWORD');\n  log('  2. Run npm run migration:run then npm run seed (creates admin from ADMIN_EMAIL/ADMIN_PASSWORD)');\n  log('  3. npm run dev');\n}\n\nconst args = process.argv.slice(2);\nconst force = args.includes('--force');\nconst dryRun = args.includes('--dry-run');\nconst noDeps = args.includes('--no-deps');\nconst noPatchConfig = args.includes('--no-patch-config');\n\nif (args[0] === 'init' || args.includes('--init') || (args.length === 0 && !args.some((a) => a.startsWith('--')))) {\n  runInit({ force, dryRun, noDeps, noPatchConfig }).catch((e) => {\n    console.error(e);\n    process.exit(1);\n  });\n} else {\n  console.log('Usage: npx @infuro/cms-core init [--force] [--dry-run] [--no-deps] [--no-patch-config]');\n  process.exit(args[0] === '--help' || args[0] === '-h' ? 0 : 1);\n}\n"],"mappings":";;;AAKA,OAAO,QAAQ;AACf,OAAO,UAAU;AAEjB,IAAM,YAAY;AAAA,EAChB,0BAA0B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAsC1B,2BAA2B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiB3B,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAuBlB,oCAAoC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAyFpC,2CAA2C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAuC3C,4BAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkB5B,sCAAsC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQtC,qBAAqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAoCrB,yBAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkBzB,gBAAgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAShB,mBAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA+BnB,oCAAoC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAmBpC,6BAA6B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAsB7B,4BAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAe5B,+BAA+B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAsB/B,wCAAwC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA8CxC,wCAAwC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA2CxC,+CAA+C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA4B/C,+CAA+C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAsB/C,6BAA6B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA2B7B,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBpB,4BAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAW9B;AAEA,SAAS,SAAS,KAA4B;AAC5C,MAAI,MAAM,KAAK,QAAQ,GAAG;AAC1B,WAAS,IAAI,GAAG,IAAI,IAAI,KAAK;AAC3B,UAAM,UAAU,KAAK,KAAK,KAAK,cAAc;AAC7C,QAAI,GAAG,WAAW,OAAO,GAAG;AAC1B,UAAI;AACF,cAAM,MAAM,KAAK,MAAM,GAAG,aAAa,SAAS,MAAM,CAAC;AACvD,YAAI,IAAI,cAAc,QAAQ,IAAI,iBAAiB,KAAM,QAAO;AAAA,MAClE,QAAQ;AAAA,MAER;AAAA,IACF;AACA,UAAM,SAAS,KAAK,QAAQ,GAAG;AAC/B,QAAI,WAAW,IAAK;AACpB,UAAM;AAAA,EACR;AACA,SAAO;AACT;AAEA,SAAS,UACP,MACA,UACA,SACAA,QACAC,SACA,KACS;AACT,QAAM,OAAO,KAAK,KAAK,MAAM,QAAQ;AACrC,MAAI,GAAG,WAAW,IAAI,KAAK,CAACD,QAAO;AACjC,QAAI,oBAAoB,QAAQ,EAAE;AAClC,WAAO;AAAA,EACT;AACA,MAAIC,SAAQ;AACV,QAAI,mBAAmB,QAAQ,EAAE;AACjC,WAAO;AAAA,EACT;AACA,QAAM,MAAM,KAAK,QAAQ,IAAI;AAC7B,KAAG,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AACrC,KAAG,cAAc,MAAM,SAAS,MAAM;AACtC,MAAI,cAAc,QAAQ,EAAE;AAC5B,SAAO;AACT;AAEA,SAAS,gBAAgB,MAAcA,SAAiB,KAAqC;AAC3F,QAAM,aAAa,CAAC,kBAAkB,mBAAmB,iBAAiB;AAC1E,MAAI,aAA4B;AAChC,aAAW,QAAQ,YAAY;AAC7B,UAAM,IAAI,KAAK,KAAK,MAAM,IAAI;AAC9B,QAAI,GAAG,WAAW,CAAC,GAAG;AACpB,mBAAa;AACb;AAAA,IACF;AAAA,EACF;AACA,MAAI,CAAC,YAAY;AACf,QAAI,+BAA+B;AACnC,WAAO;AAAA,EACT;AACA,MAAI,UAAU,GAAG,aAAa,YAAY,MAAM;AAChD,MAAI,QAAQ,SAAS,oBAAoB,KAAK,QAAQ,SAAS,oBAAoB,GAAG;AACpF,QAAI,8BAA8B,KAAK,SAAS,UAAU,CAAC,EAAE;AAC7D,WAAO;AAAA,EACT;AACA,MAAI,QAAQ,SAAS,wBAAwB,GAAG;AAC9C,cAAU,QAAQ;AAAA,MAChB;AAAA,MACA;AAAA,IACF;AAAA,EACF,OAAO;AACL,cAAU,QAAQ;AAAA,MAChB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,MAAIA,SAAQ;AACV,QAAI,kBAAkB,KAAK,SAAS,UAAU,CAAC,EAAE;AACjD,WAAO;AAAA,EACT;AACA,KAAG,cAAc,YAAY,SAAS,MAAM;AAC5C,MAAI,cAAc,KAAK,SAAS,UAAU,CAAC,EAAE;AAC7C,SAAO;AACT;AAEA,SAAS,cAAc,MAAcA,SAAiB,KAAqC;AACzF,QAAM,aAAa,CAAC,sBAAsB,uBAAuB,oBAAoB;AACrF,MAAI,aAA4B;AAChC,aAAW,QAAQ,YAAY;AAC7B,UAAM,IAAI,KAAK,KAAK,MAAM,IAAI;AAC9B,QAAI,GAAG,WAAW,CAAC,GAAG;AACpB,mBAAa;AACb;AAAA,IACF;AAAA,EACF;AACA,MAAI,CAAC,YAAY;AACf,QAAI,mCAAmC;AACvC,WAAO;AAAA,EACT;AACA,MAAI,UAAU,GAAG,aAAa,YAAY,MAAM;AAChD,QAAM,cAAc;AACpB,MAAI,QAAQ,SAAS,kBAAkB,GAAG;AACxC,QAAI,8BAA8B,KAAK,SAAS,UAAU,CAAC,EAAE;AAC7D,WAAO;AAAA,EACT;AACA,MAAI,QAAQ,SAAS,UAAU,GAAG;AAChC,cAAU,QAAQ;AAAA,MAChB;AAAA,MACA;AAAA,OAAY,WAAW;AAAA,IACzB;AAAA,EACF;AACA,MAAIA,SAAQ;AACV,QAAI,kBAAkB,KAAK,SAAS,UAAU,CAAC,EAAE;AACjD,WAAO;AAAA,EACT;AACA,KAAG,cAAc,YAAY,SAAS,MAAM;AAC5C,MAAI,cAAc,KAAK,SAAS,UAAU,CAAC,EAAE;AAC7C,SAAO;AACT;AAEA,SAAS,YAAY,MAAcA,SAAiB,KAAqC;AACvF,QAAM,aAAa,KAAK,KAAK,MAAM,oBAAoB;AACvD,MAAI,CAAC,GAAG,WAAW,UAAU,GAAG;AAC9B,QAAI,6CAA6C;AACjD,WAAO;AAAA,EACT;AACA,MAAI,UAAU,GAAG,aAAa,YAAY,MAAM;AAChD,MAAI,QAAQ,SAAS,aAAa,GAAG;AACnC,QAAI,uCAAuC;AAC3C,WAAO;AAAA,EACT;AACA,QAAM,YAAY,QAAQ,MAAM,4CAA4C;AAC5E,MAAI,CAAC,WAAW;AACd,QAAI,gEAAgE;AACpE,WAAO;AAAA,EACT;AACA,MAAIA,SAAQ;AACV,QAAI,mCAAmC;AACvC,WAAO;AAAA,EACT;AACA,QAAM,CAAC,EAAE,WAAW,QAAQ,IAAI;AAChC,QAAM,UAAU,QAAQ,SAAS;AAAA,qBAAyB,QAAQ;AAAA;AAClE,YAAU,QAAQ,QAAQ,0CAA0C,OAAO;AAC3E,MAAI,CAAC,QAAQ,SAAS,oBAAoB,KAAK,CAAC,QAAQ,SAAS,oBAAoB,GAAG;AACtF,UAAM,cAAc,QAAQ,MAAM,wBAAwB;AAC1D,cAAU,cACN,QAAQ,QAAQ,YAAY,CAAC,GAAG,YAAY,CAAC,IAAI,4CAA4C,IAC7F,+CAA+C;AAAA,EACrD;AACA,MAAI,QAAQ,SAAS,OAAO,KAAK,CAAC,QAAQ,SAAS,0BAA0B,GAAG;AAC9E,cAAU,QAAQ,QAAQ,aAAa,kCAAkC;AAAA,EAC3E;AACA,KAAG,cAAc,YAAY,SAAS,MAAM;AAC5C,MAAI,+BAA+B;AACnC,SAAO;AACT;AAEA,SAAS,iBAAiB,MAAcA,SAAiB,KAAqC;AAC5F,QAAM,UAAU,KAAK,KAAK,MAAM,cAAc;AAC9C,MAAI,CAAC,GAAG,WAAW,OAAO,EAAG,QAAO;AACpC,QAAM,MAAM,KAAK,MAAM,GAAG,aAAa,SAAS,MAAM,CAAC;AACvD,QAAM,UAAU,IAAI,WAAW,CAAC;AAChC,MAAI,UAAU;AACd,MAAI,CAAC,QAAQ,MAAM;AACjB,YAAQ,OAAO;AACf,cAAU;AAAA,EACZ;AACA,MAAI,CAAC,QAAQ,eAAe,GAAG;AAC7B,YAAQ,eAAe,IAAI;AAC3B,cAAU;AAAA,EACZ;AACA,QAAM,MAAM,IAAI,mBAAmB,CAAC;AACpC,QAAM,OAAO,IAAI,gBAAgB,CAAC;AAClC,MAAI,CAAC,KAAK,kBAAkB,GAAG;AAC7B,SAAK,kBAAkB,IAAI;AAC3B,cAAU;AAAA,EACZ;AACA,MAAI,CAAC,IAAI,KAAK;AACZ,QAAI,MAAM;AACV,cAAU;AAAA,EACZ;AACA,MAAI,CAAC,IAAI,QAAQ;AACf,QAAI,SAAS;AACb,cAAU;AAAA,EACZ;AACA,MAAI,CAAC,SAAS;AACZ,QAAI,sDAAsD;AAC1D,WAAO;AAAA,EACT;AACA,MAAI,UAAU;AACd,MAAI,eAAe,EAAE,GAAG,IAAI,cAAc,GAAG,KAAK;AAClD,MAAI,kBAAkB,EAAE,GAAG,IAAI,iBAAiB,GAAG,IAAI;AACvD,MAAIA,SAAQ;AACV,QAAI,yDAAyD;AAC7D,WAAO;AAAA,EACT;AACA,KAAG,cAAc,SAAS,KAAK,UAAU,KAAK,MAAM,CAAC,GAAG,MAAM;AAC9D,MAAI,yBAAyB;AAC7B,SAAO;AACT;AAEA,eAAe,cAAc,MAAc,KAA2C;AACpF,QAAM,EAAE,UAAU,IAAI,MAAM,OAAO,eAAe;AAClD,MAAI,kCAAkC;AACtC,YAAU,OAAO,CAAC,WAAW,oBAAoB,WAAW,oBAAoB,YAAY,aAAa,eAAe,QAAQ,GAAG;AAAA,IACjI,KAAK;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,EACT,CAAC;AACD,MAAI,qDAAqD;AACzD,YAAU,OAAO,CAAC,WAAW,MAAM,OAAO,UAAU,aAAa,GAAG;AAAA,IAClE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,EACT,CAAC;AACH;AAEA,eAAe,QAAQ,MAKpB;AACD,QAAM,MAAM,CAAC,QAAgB,QAAQ,IAAI,GAAG;AAC5C,QAAM,MAAM,QAAQ,IAAI;AACxB,QAAM,OAAO,SAAS,GAAG;AACzB,MAAI,CAAC,MAAM;AACT,YAAQ,MAAM,4EAA4E,MAAM,GAAG;AACnG,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,QAAM,SAAS,KAAK,KAAK,MAAM,SAAS;AACxC,MAAI,CAAC,GAAG,WAAW,MAAM,GAAG;AAC1B,YAAQ,MAAM,8GAA8G;AAC5H,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,MAAI,uBAAuB,IAAI;AAC/B,MAAI,KAAK,OAAQ,KAAI,WAAW;AAEhC,aAAW,CAAC,UAAU,OAAO,KAAK,OAAO,QAAQ,SAAS,GAAG;AAC3D,cAAU,MAAM,UAAU,SAAS,KAAK,OAAO,KAAK,QAAQ,GAAG;AAAA,EACjE;AAEA,MAAI,CAAC,KAAK,eAAe;AACvB,QAAI,iBAAiB;AACrB,oBAAgB,MAAM,KAAK,QAAQ,GAAG;AACtC,kBAAc,MAAM,KAAK,QAAQ,GAAG;AACpC,gBAAY,MAAM,KAAK,QAAQ,GAAG;AAClC,qBAAiB,MAAM,KAAK,QAAQ,GAAG;AAAA,EACzC;AAEA,MAAI,CAAC,KAAK,UAAU,CAAC,KAAK,QAAQ;AAChC,QAAI,eAAe;AACnB,UAAM,cAAc,MAAM,GAAG;AAAA,EAC/B,WAAW,CAAC,KAAK,UAAU,KAAK,QAAQ;AACtC,QAAI,0GAA0G;AAC9G,QAAI,oDAAoD;AAAA,EAC1D;AAEA,MAAI,EAAE;AACN,MAAI,mBAAmB;AACvB,MAAI,iHAAiH;AACrH,MAAI,kGAAkG;AACtG,MAAI,kBAAkB;AACxB;AAEA,IAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;AACjC,IAAM,QAAQ,KAAK,SAAS,SAAS;AACrC,IAAM,SAAS,KAAK,SAAS,WAAW;AACxC,IAAM,SAAS,KAAK,SAAS,WAAW;AACxC,IAAM,gBAAgB,KAAK,SAAS,mBAAmB;AAEvD,IAAI,KAAK,CAAC,MAAM,UAAU,KAAK,SAAS,QAAQ,KAAM,KAAK,WAAW,KAAK,CAAC,KAAK,KAAK,CAAC,MAAM,EAAE,WAAW,IAAI,CAAC,GAAI;AACjH,UAAQ,EAAE,OAAO,QAAQ,QAAQ,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM;AAC7D,YAAQ,MAAM,CAAC;AACf,YAAQ,KAAK,CAAC;AAAA,EAChB,CAAC;AACH,OAAO;AACL,UAAQ,IAAI,wFAAwF;AACpG,UAAQ,KAAK,KAAK,CAAC,MAAM,YAAY,KAAK,CAAC,MAAM,OAAO,IAAI,CAAC;AAC/D;","names":["force","dryRun"]}

package/dist/helpers-dlrF_49e.d.cts

@@ -0,0 +1,60 @@
+/** Canonical name for new installs / migrations */
+declare const ADMIN_GROUP_NAME = "Administrator";
+/** System administrator group (roles UI + users / user_groups / permissions bypass). */
+declare function isSuperAdminGroupName(name: string | null | undefined): boolean;
+type EntityCrudAction = 'create' | 'read' | 'update' | 'delete';
+type EntityPermissionFlags = {
+    c: boolean;
+    r: boolean;
+    u: boolean;
+    d: boolean;
+};
+declare function getPermissionableEntityKeys(entityMap: Record<string, unknown>): string[];
+declare function permissionRowsToRecord(rows: Array<{
+    entity: string;
+    canCreate: boolean;
+    canRead: boolean;
+    canUpdate: boolean;
+    canDelete: boolean;
+}> | undefined): Record<string, EntityPermissionFlags>;
+declare function hasEntityPermission(record: Record<string, EntityPermissionFlags> | undefined, entity: string, action: EntityCrudAction): boolean;
+
+/** isRBACAdmin bypasses entity checks only for these (users / roles plumbing). */
+declare const RBAC_ADMIN_ONLY_ENTITIES: Set<string>;
+interface SessionUser {
+    id?: string;
+    email?: string | null;
+    name?: string | null;
+    groupId?: number;
+    /** @deprecated use entityPerms / isRBACAdmin */
+    permissions?: string[];
+    /** Administrator group: full access only for users, user_groups, permissions */
+    isRBACAdmin?: boolean;
+    entityPerms?: Record<string, EntityPermissionFlags>;
+    /** When false and not isRBACAdmin, admin API/UI is denied. */
+    adminAccess?: boolean;
+}
+declare function sessionHasEntityAccess(user: SessionUser | null | undefined, entity: string, action: EntityCrudAction): boolean;
+declare function canManageRoles(user: SessionUser | null | undefined): boolean;
+type GetSession = () => Promise<{
+    user?: SessionUser;
+} | null>;
+declare const OPEN_ENDPOINTS: Array<Record<string, string[]>>;
+declare const PERMISSION_REQUIRED_ENDPOINTS: Record<string, string[]>;
+declare function isOpenEndpoint(pathname: string): boolean;
+declare function getRequiredPermission(pathname: string): string[] | null;
+declare function isPublicMethod(pathname: string, method: string): boolean;
+interface AuthHelpers {
+    requireAuth(req: Request): Promise<Response | null>;
+    requirePermission(req: Request, permission: string): Promise<Response | null>;
+    requireEntityPermission(req: Request, entity: string, action: EntityCrudAction): Promise<Response | null>;
+    requireAdminAccess(req: Request): Promise<Response | null>;
+    getAuthenticatedUser(): Promise<SessionUser | null>;
+}
+declare function createAuthHelpers(getSession: GetSession, NextResponse: {
+    json: (body: unknown, init?: {
+        status?: number;
+    }) => Response;
+}): AuthHelpers;
+
+export { ADMIN_GROUP_NAME as A, type EntityCrudAction as E, type GetSession as G, OPEN_ENDPOINTS as O, PERMISSION_REQUIRED_ENDPOINTS as P, RBAC_ADMIN_ONLY_ENTITIES as R, type SessionUser as S, type AuthHelpers as a, type EntityPermissionFlags as b, canManageRoles as c, createAuthHelpers as d, getRequiredPermission as e, isPublicMethod as f, getPermissionableEntityKeys as g, hasEntityPermission as h, isOpenEndpoint as i, isSuperAdminGroupName as j, permissionRowsToRecord as p, sessionHasEntityAccess as s };