@kyro-cms/core 0.10.11 → 0.10.12

package/dist/api-handler-graphql.cjs

@@ -1 +1 @@
-'use strict';var chunkJAOX6WGD_cjs=require('./chunk-JAOX6WGD.cjs');require('./chunk-6OXKGEY7.cjs'),require('./chunk-UJNSOOYZ.cjs'),require('./chunk-65G73T7Z.cjs'),require('./chunk-CVVW4LXZ.cjs'),require('./chunk-CIE3XMLH.cjs'),require('./chunk-3HVN4CBK.cjs'),require('./chunk-AJAZ7D3W.cjs'),require('./chunk-WIZ6C5QZ.cjs'),require('./chunk-GFU7AOI3.cjs'),require('./chunk-ET6NN2V2.cjs'),require('./chunk-HVXO3OFB.cjs'),require('./chunk-ISWMETHJ.cjs'),require('./chunk-NY47CFVP.cjs'),require('./chunk-F7SR5IDT.cjs'),require('./chunk-4ORJMSJU.cjs'),require('./chunk-6CLRVJPP.cjs'),require('./chunk-GYQMNXXW.cjs'),require('./chunk-MIOMMB23.cjs'),require('./chunk-UBHFUFD4.cjs'),require('./chunk-UDSJGML2.cjs'),require('./chunk-ATLSIYRH.cjs'),require('./chunk-DV4LFLPL.cjs'),require('./chunk-Q3Q7BJVQ.cjs'),require('./chunk-AHSFSERC.cjs');function n(e){return new Response(e.body,e)}var p={graphqlEnabled:false,trpcEnabled:false,wsEnabled:false,requireAuth:false};function r(){return new Response(JSON.stringify({error:"GraphQL is disabled"}),{status:503,headers:{"Content-Type":"application/json"}})}async function o(){try{return (await chunkJAOX6WGD_cjs.a.db.findOne({collection:"_globals_access-settings",where:{},draft:!0}))?.apiAccess?.graphqlEnabled??p.graphqlEnabled}catch{return  true}}var l=async e=>{if(await chunkJAOX6WGD_cjs.b(),!await o())return r();let t=await chunkJAOX6WGD_cjs.a.getGraphQL().fetch(e.request,e.locals);return n(t)},u=async e=>{if(await chunkJAOX6WGD_cjs.b(),!await o())return r();let t=await chunkJAOX6WGD_cjs.a.getGraphQL().fetch(e.request,e.locals);return n(t)};exports.GET=u;exports.POST=l;
+'use strict';var chunkJ6CGNUWO_cjs=require('./chunk-J6CGNUWO.cjs');require('./chunk-ZWT5MX7S.cjs'),require('./chunk-UJNSOOYZ.cjs'),require('./chunk-65G73T7Z.cjs'),require('./chunk-CVVW4LXZ.cjs'),require('./chunk-CIE3XMLH.cjs'),require('./chunk-DAW5ZMWQ.cjs'),require('./chunk-AJAZ7D3W.cjs'),require('./chunk-WIZ6C5QZ.cjs'),require('./chunk-GFU7AOI3.cjs'),require('./chunk-ET6NN2V2.cjs'),require('./chunk-HVXO3OFB.cjs'),require('./chunk-ISWMETHJ.cjs'),require('./chunk-NY47CFVP.cjs'),require('./chunk-F7SR5IDT.cjs'),require('./chunk-4ORJMSJU.cjs'),require('./chunk-6CLRVJPP.cjs'),require('./chunk-GYQMNXXW.cjs'),require('./chunk-MIOMMB23.cjs'),require('./chunk-UBHFUFD4.cjs'),require('./chunk-UDSJGML2.cjs'),require('./chunk-ATLSIYRH.cjs'),require('./chunk-DV4LFLPL.cjs'),require('./chunk-Q3Q7BJVQ.cjs'),require('./chunk-AHSFSERC.cjs');function n(e){return new Response(e.body,e)}var p={graphqlEnabled:false,trpcEnabled:false,wsEnabled:false,requireAuth:false};function r(){return new Response(JSON.stringify({error:"GraphQL is disabled"}),{status:503,headers:{"Content-Type":"application/json"}})}async function o(){try{return (await chunkJ6CGNUWO_cjs.a.db.findOne({collection:"_globals_access-settings",where:{},draft:!0}))?.apiAccess?.graphqlEnabled??p.graphqlEnabled}catch{return  true}}var l=async e=>{if(await chunkJ6CGNUWO_cjs.b(),!await o())return r();let t=await chunkJ6CGNUWO_cjs.a.getGraphQL().fetch(e.request,e.locals);return n(t)},u=async e=>{if(await chunkJ6CGNUWO_cjs.b(),!await o())return r();let t=await chunkJ6CGNUWO_cjs.a.getGraphQL().fetch(e.request,e.locals);return n(t)};exports.GET=u;exports.POST=l;

package/dist/api-handler-graphql.js

@@ -1 +1 @@
-import {b,a}from'./chunk-TQW43BLR.js';import'./chunk-KSWGDCZE.js';import'./chunk-FO3HLBC7.js';import'./chunk-NZ35PV5R.js';import'./chunk-7N6NKCRT.js';import'./chunk-R6UUTH3T.js';import'./chunk-SW7WHMNI.js';import'./chunk-7WOX27LK.js';import'./chunk-K6WUOU6P.js';import'./chunk-AE6GXUT7.js';import'./chunk-2W4FK6CJ.js';import'./chunk-NRLIGDYF.js';import'./chunk-UVTS2IWM.js';import'./chunk-HLSB2MCK.js';import'./chunk-SL3LZQCF.js';import'./chunk-PP5S2UBV.js';import'./chunk-VKXQUYYV.js';import'./chunk-RHCWCG3O.js';import'./chunk-OG7CNQGU.js';import'./chunk-QRXDCV6K.js';import'./chunk-G6A7OSIG.js';import'./chunk-P7CESLDJ.js';import'./chunk-ZAQOSRP6.js';import'./chunk-KDNYHLD2.js';import'./chunk-5J6HXUF6.js';function n(e){return new Response(e.body,e)}var p={graphqlEnabled:false,trpcEnabled:false,wsEnabled:false,requireAuth:false};function r(){return new Response(JSON.stringify({error:"GraphQL is disabled"}),{status:503,headers:{"Content-Type":"application/json"}})}async function o(){try{return (await a.db.findOne({collection:"_globals_access-settings",where:{},draft:!0}))?.apiAccess?.graphqlEnabled??p.graphqlEnabled}catch{return  true}}var l=async e=>{if(await b(),!await o())return r();let t=await a.getGraphQL().fetch(e.request,e.locals);return n(t)},u=async e=>{if(await b(),!await o())return r();let t=await a.getGraphQL().fetch(e.request,e.locals);return n(t)};export{u as GET,l as POST};
+import {b,a}from'./chunk-3SIWD5MY.js';import'./chunk-QMMMQQNI.js';import'./chunk-FO3HLBC7.js';import'./chunk-NZ35PV5R.js';import'./chunk-7N6NKCRT.js';import'./chunk-R6UUTH3T.js';import'./chunk-JPH44WC3.js';import'./chunk-7WOX27LK.js';import'./chunk-K6WUOU6P.js';import'./chunk-AE6GXUT7.js';import'./chunk-2W4FK6CJ.js';import'./chunk-NRLIGDYF.js';import'./chunk-UVTS2IWM.js';import'./chunk-HLSB2MCK.js';import'./chunk-SL3LZQCF.js';import'./chunk-PP5S2UBV.js';import'./chunk-VKXQUYYV.js';import'./chunk-RHCWCG3O.js';import'./chunk-OG7CNQGU.js';import'./chunk-QRXDCV6K.js';import'./chunk-G6A7OSIG.js';import'./chunk-P7CESLDJ.js';import'./chunk-ZAQOSRP6.js';import'./chunk-KDNYHLD2.js';import'./chunk-5J6HXUF6.js';function n(e){return new Response(e.body,e)}var p={graphqlEnabled:false,trpcEnabled:false,wsEnabled:false,requireAuth:false};function r(){return new Response(JSON.stringify({error:"GraphQL is disabled"}),{status:503,headers:{"Content-Type":"application/json"}})}async function o(){try{return (await a.db.findOne({collection:"_globals_access-settings",where:{},draft:!0}))?.apiAccess?.graphqlEnabled??p.graphqlEnabled}catch{return  true}}var l=async e=>{if(await b(),!await o())return r();let t=await a.getGraphQL().fetch(e.request,e.locals);return n(t)},u=async e=>{if(await b(),!await o())return r();let t=await a.getGraphQL().fetch(e.request,e.locals);return n(t)};export{u as GET,l as POST};

package/dist/api-handler-trpc.cjs

@@ -1 +1 @@
-'use strict';var chunkJAOX6WGD_cjs=require('./chunk-JAOX6WGD.cjs');require('./chunk-6OXKGEY7.cjs'),require('./chunk-UJNSOOYZ.cjs'),require('./chunk-65G73T7Z.cjs'),require('./chunk-CVVW4LXZ.cjs'),require('./chunk-CIE3XMLH.cjs'),require('./chunk-3HVN4CBK.cjs'),require('./chunk-AJAZ7D3W.cjs'),require('./chunk-WIZ6C5QZ.cjs'),require('./chunk-GFU7AOI3.cjs'),require('./chunk-ET6NN2V2.cjs'),require('./chunk-HVXO3OFB.cjs'),require('./chunk-ISWMETHJ.cjs'),require('./chunk-NY47CFVP.cjs'),require('./chunk-F7SR5IDT.cjs'),require('./chunk-4ORJMSJU.cjs'),require('./chunk-6CLRVJPP.cjs'),require('./chunk-GYQMNXXW.cjs'),require('./chunk-MIOMMB23.cjs'),require('./chunk-UBHFUFD4.cjs'),require('./chunk-UDSJGML2.cjs'),require('./chunk-ATLSIYRH.cjs'),require('./chunk-DV4LFLPL.cjs'),require('./chunk-Q3Q7BJVQ.cjs'),require('./chunk-AHSFSERC.cjs');function n(){return new Response(JSON.stringify({error:"tRPC is disabled"}),{status:503,headers:{"Content-Type":"application/json"}})}var r={graphqlEnabled:false,trpcEnabled:false,wsEnabled:false,requireAuth:false};async function s(){try{return (await chunkJAOX6WGD_cjs.a.db.findOne({collection:"_globals_access-settings",where:{},draft:!0}))?.apiAccess?.trpcEnabled??r.trpcEnabled}catch{return  true}}var i=async e=>(await chunkJAOX6WGD_cjs.b(),await s()?chunkJAOX6WGD_cjs.a.getTRPC().fetch(e.request,e.locals):n());exports.ALL=i;
+'use strict';var chunkJ6CGNUWO_cjs=require('./chunk-J6CGNUWO.cjs');require('./chunk-ZWT5MX7S.cjs'),require('./chunk-UJNSOOYZ.cjs'),require('./chunk-65G73T7Z.cjs'),require('./chunk-CVVW4LXZ.cjs'),require('./chunk-CIE3XMLH.cjs'),require('./chunk-DAW5ZMWQ.cjs'),require('./chunk-AJAZ7D3W.cjs'),require('./chunk-WIZ6C5QZ.cjs'),require('./chunk-GFU7AOI3.cjs'),require('./chunk-ET6NN2V2.cjs'),require('./chunk-HVXO3OFB.cjs'),require('./chunk-ISWMETHJ.cjs'),require('./chunk-NY47CFVP.cjs'),require('./chunk-F7SR5IDT.cjs'),require('./chunk-4ORJMSJU.cjs'),require('./chunk-6CLRVJPP.cjs'),require('./chunk-GYQMNXXW.cjs'),require('./chunk-MIOMMB23.cjs'),require('./chunk-UBHFUFD4.cjs'),require('./chunk-UDSJGML2.cjs'),require('./chunk-ATLSIYRH.cjs'),require('./chunk-DV4LFLPL.cjs'),require('./chunk-Q3Q7BJVQ.cjs'),require('./chunk-AHSFSERC.cjs');function n(){return new Response(JSON.stringify({error:"tRPC is disabled"}),{status:503,headers:{"Content-Type":"application/json"}})}var r={graphqlEnabled:false,trpcEnabled:false,wsEnabled:false,requireAuth:false};async function s(){try{return (await chunkJ6CGNUWO_cjs.a.db.findOne({collection:"_globals_access-settings",where:{},draft:!0}))?.apiAccess?.trpcEnabled??r.trpcEnabled}catch{return  true}}var i=async e=>(await chunkJ6CGNUWO_cjs.b(),await s()?chunkJ6CGNUWO_cjs.a.getTRPC().fetch(e.request,e.locals):n());exports.ALL=i;

package/dist/api-handler-trpc.js

@@ -1 +1 @@
-import {b,a}from'./chunk-TQW43BLR.js';import'./chunk-KSWGDCZE.js';import'./chunk-FO3HLBC7.js';import'./chunk-NZ35PV5R.js';import'./chunk-7N6NKCRT.js';import'./chunk-R6UUTH3T.js';import'./chunk-SW7WHMNI.js';import'./chunk-7WOX27LK.js';import'./chunk-K6WUOU6P.js';import'./chunk-AE6GXUT7.js';import'./chunk-2W4FK6CJ.js';import'./chunk-NRLIGDYF.js';import'./chunk-UVTS2IWM.js';import'./chunk-HLSB2MCK.js';import'./chunk-SL3LZQCF.js';import'./chunk-PP5S2UBV.js';import'./chunk-VKXQUYYV.js';import'./chunk-RHCWCG3O.js';import'./chunk-OG7CNQGU.js';import'./chunk-QRXDCV6K.js';import'./chunk-G6A7OSIG.js';import'./chunk-P7CESLDJ.js';import'./chunk-ZAQOSRP6.js';import'./chunk-KDNYHLD2.js';import'./chunk-5J6HXUF6.js';function n(){return new Response(JSON.stringify({error:"tRPC is disabled"}),{status:503,headers:{"Content-Type":"application/json"}})}var r={graphqlEnabled:false,trpcEnabled:false,wsEnabled:false,requireAuth:false};async function s(){try{return (await a.db.findOne({collection:"_globals_access-settings",where:{},draft:!0}))?.apiAccess?.trpcEnabled??r.trpcEnabled}catch{return  true}}var i=async e=>(await b(),await s()?a.getTRPC().fetch(e.request,e.locals):n());export{i as ALL};
+import {b,a}from'./chunk-3SIWD5MY.js';import'./chunk-QMMMQQNI.js';import'./chunk-FO3HLBC7.js';import'./chunk-NZ35PV5R.js';import'./chunk-7N6NKCRT.js';import'./chunk-R6UUTH3T.js';import'./chunk-JPH44WC3.js';import'./chunk-7WOX27LK.js';import'./chunk-K6WUOU6P.js';import'./chunk-AE6GXUT7.js';import'./chunk-2W4FK6CJ.js';import'./chunk-NRLIGDYF.js';import'./chunk-UVTS2IWM.js';import'./chunk-HLSB2MCK.js';import'./chunk-SL3LZQCF.js';import'./chunk-PP5S2UBV.js';import'./chunk-VKXQUYYV.js';import'./chunk-RHCWCG3O.js';import'./chunk-OG7CNQGU.js';import'./chunk-QRXDCV6K.js';import'./chunk-G6A7OSIG.js';import'./chunk-P7CESLDJ.js';import'./chunk-ZAQOSRP6.js';import'./chunk-KDNYHLD2.js';import'./chunk-5J6HXUF6.js';function n(){return new Response(JSON.stringify({error:"tRPC is disabled"}),{status:503,headers:{"Content-Type":"application/json"}})}var r={graphqlEnabled:false,trpcEnabled:false,wsEnabled:false,requireAuth:false};async function s(){try{return (await a.db.findOne({collection:"_globals_access-settings",where:{},draft:!0}))?.apiAccess?.trpcEnabled??r.trpcEnabled}catch{return  true}}var i=async e=>(await b(),await s()?a.getTRPC().fetch(e.request,e.locals):n());export{i as ALL};

package/dist/api-handler.cjs

@@ -1 +1 @@
-'use strict';var chunkJAOX6WGD_cjs=require('./chunk-JAOX6WGD.cjs');require('./chunk-6OXKGEY7.cjs'),require('./chunk-UJNSOOYZ.cjs'),require('./chunk-65G73T7Z.cjs'),require('./chunk-CVVW4LXZ.cjs'),require('./chunk-CIE3XMLH.cjs'),require('./chunk-3HVN4CBK.cjs'),require('./chunk-AJAZ7D3W.cjs'),require('./chunk-WIZ6C5QZ.cjs'),require('./chunk-GFU7AOI3.cjs'),require('./chunk-ET6NN2V2.cjs'),require('./chunk-HVXO3OFB.cjs'),require('./chunk-ISWMETHJ.cjs'),require('./chunk-NY47CFVP.cjs'),require('./chunk-F7SR5IDT.cjs'),require('./chunk-4ORJMSJU.cjs'),require('./chunk-6CLRVJPP.cjs'),require('./chunk-GYQMNXXW.cjs'),require('./chunk-MIOMMB23.cjs'),require('./chunk-UBHFUFD4.cjs'),require('./chunk-UDSJGML2.cjs'),require('./chunk-ATLSIYRH.cjs'),require('./chunk-DV4LFLPL.cjs'),require('./chunk-Q3Q7BJVQ.cjs'),require('./chunk-AHSFSERC.cjs');Object.defineProperty(exports,"ALL",{enumerable:true,get:function(){return chunkJAOX6WGD_cjs.c}});Object.defineProperty(exports,"kyroInstance",{enumerable:true,get:function(){return chunkJAOX6WGD_cjs.a}});Object.defineProperty(exports,"warmKyroInstance",{enumerable:true,get:function(){return chunkJAOX6WGD_cjs.b}});
+'use strict';var chunkJ6CGNUWO_cjs=require('./chunk-J6CGNUWO.cjs');require('./chunk-ZWT5MX7S.cjs'),require('./chunk-UJNSOOYZ.cjs'),require('./chunk-65G73T7Z.cjs'),require('./chunk-CVVW4LXZ.cjs'),require('./chunk-CIE3XMLH.cjs'),require('./chunk-DAW5ZMWQ.cjs'),require('./chunk-AJAZ7D3W.cjs'),require('./chunk-WIZ6C5QZ.cjs'),require('./chunk-GFU7AOI3.cjs'),require('./chunk-ET6NN2V2.cjs'),require('./chunk-HVXO3OFB.cjs'),require('./chunk-ISWMETHJ.cjs'),require('./chunk-NY47CFVP.cjs'),require('./chunk-F7SR5IDT.cjs'),require('./chunk-4ORJMSJU.cjs'),require('./chunk-6CLRVJPP.cjs'),require('./chunk-GYQMNXXW.cjs'),require('./chunk-MIOMMB23.cjs'),require('./chunk-UBHFUFD4.cjs'),require('./chunk-UDSJGML2.cjs'),require('./chunk-ATLSIYRH.cjs'),require('./chunk-DV4LFLPL.cjs'),require('./chunk-Q3Q7BJVQ.cjs'),require('./chunk-AHSFSERC.cjs');Object.defineProperty(exports,"ALL",{enumerable:true,get:function(){return chunkJ6CGNUWO_cjs.c}});Object.defineProperty(exports,"kyroInstance",{enumerable:true,get:function(){return chunkJ6CGNUWO_cjs.a}});Object.defineProperty(exports,"warmKyroInstance",{enumerable:true,get:function(){return chunkJ6CGNUWO_cjs.b}});

package/dist/api-handler.js

@@ -1 +1 @@
-export{c as ALL,a as kyroInstance,b as warmKyroInstance}from'./chunk-TQW43BLR.js';import'./chunk-KSWGDCZE.js';import'./chunk-FO3HLBC7.js';import'./chunk-NZ35PV5R.js';import'./chunk-7N6NKCRT.js';import'./chunk-R6UUTH3T.js';import'./chunk-SW7WHMNI.js';import'./chunk-7WOX27LK.js';import'./chunk-K6WUOU6P.js';import'./chunk-AE6GXUT7.js';import'./chunk-2W4FK6CJ.js';import'./chunk-NRLIGDYF.js';import'./chunk-UVTS2IWM.js';import'./chunk-HLSB2MCK.js';import'./chunk-SL3LZQCF.js';import'./chunk-PP5S2UBV.js';import'./chunk-VKXQUYYV.js';import'./chunk-RHCWCG3O.js';import'./chunk-OG7CNQGU.js';import'./chunk-QRXDCV6K.js';import'./chunk-G6A7OSIG.js';import'./chunk-P7CESLDJ.js';import'./chunk-ZAQOSRP6.js';import'./chunk-KDNYHLD2.js';import'./chunk-5J6HXUF6.js';
+export{c as ALL,a as kyroInstance,b as warmKyroInstance}from'./chunk-3SIWD5MY.js';import'./chunk-QMMMQQNI.js';import'./chunk-FO3HLBC7.js';import'./chunk-NZ35PV5R.js';import'./chunk-7N6NKCRT.js';import'./chunk-R6UUTH3T.js';import'./chunk-JPH44WC3.js';import'./chunk-7WOX27LK.js';import'./chunk-K6WUOU6P.js';import'./chunk-AE6GXUT7.js';import'./chunk-2W4FK6CJ.js';import'./chunk-NRLIGDYF.js';import'./chunk-UVTS2IWM.js';import'./chunk-HLSB2MCK.js';import'./chunk-SL3LZQCF.js';import'./chunk-PP5S2UBV.js';import'./chunk-VKXQUYYV.js';import'./chunk-RHCWCG3O.js';import'./chunk-OG7CNQGU.js';import'./chunk-QRXDCV6K.js';import'./chunk-G6A7OSIG.js';import'./chunk-P7CESLDJ.js';import'./chunk-ZAQOSRP6.js';import'./chunk-KDNYHLD2.js';import'./chunk-5J6HXUF6.js';

package/dist/{chunk-TQW43BLR.js → chunk-3SIWD5MY.js}

@@ -1 +1 @@
-import {q as q$1,r}from'./chunk-KSWGDCZE.js';import {d}from'./chunk-FO3HLBC7.js';import {a as a$1}from'./chunk-2W4FK6CJ.js';import {c}from'./chunk-VKXQUYYV.js';import {a}from'./chunk-RHCWCG3O.js';import {a as a$2}from'./chunk-G6A7OSIG.js';import {a as a$3}from'./chunk-P7CESLDJ.js';import A from'kyro:config';var t=null,n=null;async function g(){if(!t)try{let e=A.default||A;t=q$1(e),await t.init(),await t.loadSettings();let a$4=t.db,r$1;if(a$4 instanceof c){if(a$4.dialect==="postgres")r$1=new a({db:a$4.client});else if(a$4.dialect==="sqlite"){let s=process.env.KYRO_AUTH_DB_PATH||"./data/auth.db";r$1=new a$1({path:s});}}else if(a$4 instanceof r){let s=process.env.KYRO_AUTH_DB_PATH||"./data/auth.db";r$1=new a$1({path:s});}else a$4 instanceof a$2&&(r$1=new a$3({db:a$4.db}));r$1?.connect&&await r$1.connect(),(await d(r$1))?.success,typeof t.startWebSocket=="function"&&t.startWebSocket().catch(s=>{console.error("[Kyro] WebSocket auto-start failed:",s);}),globalThis.__KYRO_INSTANCE__=t;}catch(e){throw t=null,n=null,console.error("[Kyro API] Init failed, will retry:",e),e}}async function q(){n||(n=g()),await n;}var w={graphqlEnabled:false,trpcEnabled:false,wsEnabled:false,requireAuth:false};async function b(e){try{return (await t.db.findOne({collection:"_globals_access-settings",where:{},draft:!0}))?.apiAccess?.[e]??w[e]??!0}catch{return  true}}var v=async e=>{if(!t){n||(n=g());try{await Promise.race([n,new Promise((l,o)=>setTimeout(()=>o(new Error("Initialization timeout")),3e4))]);}catch{return new Response(JSON.stringify({error:"Service Unavailable",message:"Kyro CMS is still starting up. Please try again in a moment."}),{status:503,headers:{"Content-Type":"application/json","Retry-After":"5"}})}}let r=new URL(e.request.url).pathname,i=__KYRO_API_PATH__;if(r===`${i}/graphql`&&typeof t.getGraphQL=="function"){if(!await b("graphqlEnabled"))return new Response(JSON.stringify({error:"GraphQL is disabled"}),{status:503,headers:{"Content-Type":"application/json"}});let o=await t.getGraphQL().fetch(e.request,e.locals);return new Response(o.body,o)}if(r.startsWith(`${i}/trpc/`)&&typeof t.getTRPC=="function"){if(!await b("trpcEnabled"))return new Response(JSON.stringify({error:"tRPC is disabled"}),{status:503,headers:{"Content-Type":"application/json"}});let o=await t.getTRPC().fetch(e.request,e.locals);return new Response(o.body,o)}return t.getREST().fetch(e.request,e.locals)};export{t as a,q as b,v as c};
+import {q as q$1,r}from'./chunk-QMMMQQNI.js';import {d}from'./chunk-FO3HLBC7.js';import {a as a$1}from'./chunk-2W4FK6CJ.js';import {c}from'./chunk-VKXQUYYV.js';import {a}from'./chunk-RHCWCG3O.js';import {a as a$2}from'./chunk-G6A7OSIG.js';import {a as a$3}from'./chunk-P7CESLDJ.js';import A from'kyro:config';var t=null,n=null;async function g(){if(!t)try{let e=A.default||A;t=q$1(e),await t.init(),await t.loadSettings();let a$4=t.db,r$1;if(a$4 instanceof c){if(a$4.dialect==="postgres")r$1=new a({db:a$4.client});else if(a$4.dialect==="sqlite"){let s=process.env.KYRO_AUTH_DB_PATH||"./data/auth.db";r$1=new a$1({path:s});}}else if(a$4 instanceof r){let s=process.env.KYRO_AUTH_DB_PATH||"./data/auth.db";r$1=new a$1({path:s});}else a$4 instanceof a$2&&(r$1=new a$3({db:a$4.db}));r$1?.connect&&await r$1.connect(),(await d(r$1))?.success,typeof t.startWebSocket=="function"&&t.startWebSocket().catch(s=>{console.error("[Kyro] WebSocket auto-start failed:",s);}),globalThis.__KYRO_INSTANCE__=t;}catch(e){throw t=null,n=null,console.error("[Kyro API] Init failed, will retry:",e),e}}async function q(){n||(n=g()),await n;}var w={graphqlEnabled:false,trpcEnabled:false,wsEnabled:false,requireAuth:false};async function b(e){try{return (await t.db.findOne({collection:"_globals_access-settings",where:{},draft:!0}))?.apiAccess?.[e]??w[e]??!0}catch{return  true}}var v=async e=>{if(!t){n||(n=g());try{await Promise.race([n,new Promise((l,o)=>setTimeout(()=>o(new Error("Initialization timeout")),3e4))]);}catch{return new Response(JSON.stringify({error:"Service Unavailable",message:"Kyro CMS is still starting up. Please try again in a moment."}),{status:503,headers:{"Content-Type":"application/json","Retry-After":"5"}})}}let r=new URL(e.request.url).pathname,i=__KYRO_API_PATH__;if(r===`${i}/graphql`&&typeof t.getGraphQL=="function"){if(!await b("graphqlEnabled"))return new Response(JSON.stringify({error:"GraphQL is disabled"}),{status:503,headers:{"Content-Type":"application/json"}});let o=await t.getGraphQL().fetch(e.request,e.locals);return new Response(o.body,o)}if(r.startsWith(`${i}/trpc/`)&&typeof t.getTRPC=="function"){if(!await b("trpcEnabled"))return new Response(JSON.stringify({error:"tRPC is disabled"}),{status:503,headers:{"Content-Type":"application/json"}});let o=await t.getTRPC().fetch(e.request,e.locals);return new Response(o.body,o)}return t.getREST().fetch(e.request,e.locals)};export{t as a,q as b,v as c};

package/dist/{chunk-3HVN4CBK.cjs → chunk-DAW5ZMWQ.cjs}

@@ -1,4 +1,4 @@
-'use strict';var chunkAJAZ7D3W_cjs=require('./chunk-AJAZ7D3W.cjs'),chunkGFU7AOI3_cjs=require('./chunk-GFU7AOI3.cjs'),chunkET6NN2V2_cjs=require('./chunk-ET6NN2V2.cjs'),chunkHVXO3OFB_cjs=require('./chunk-HVXO3OFB.cjs'),chunkISWMETHJ_cjs=require('./chunk-ISWMETHJ.cjs'),chunkNY47CFVP_cjs=require('./chunk-NY47CFVP.cjs'),chunk6CLRVJPP_cjs=require('./chunk-6CLRVJPP.cjs'),chunkGYQMNXXW_cjs=require('./chunk-GYQMNXXW.cjs'),chunkUDSJGML2_cjs=require('./chunk-UDSJGML2.cjs'),chunkATLSIYRH_cjs=require('./chunk-ATLSIYRH.cjs'),chunkQ3Q7BJVQ_cjs=require('./chunk-Q3Q7BJVQ.cjs'),chunkAHSFSERC_cjs=require('./chunk-AHSFSERC.cjs'),sr=require('crypto'),unstorage=require('unstorage'),or=require('unstorage/drivers/fs'),hono=require('hono'),Ce=require('path'),fs=require('fs'),ct=require('sharp'),promises=require('fs/promises'),Ir=require('process'),clientS3=require('@aws-sdk/client-s3'),nodeHttpHandler=require('@smithy/node-http-handler'),stream=require('stream'),basicFtp=require('basic-ftp'),zodToJsonSchema=require('zod-to-json-schema');function _interopDefault(e){return e&&e.__esModule?e:{default:e}}var sr__default=/*#__PURE__*/_interopDefault(sr);var or__default=/*#__PURE__*/_interopDefault(or);var Ce__default=/*#__PURE__*/_interopDefault(Ce);var ct__default=/*#__PURE__*/_interopDefault(ct);var Ir__default=/*#__PURE__*/_interopDefault(Ir);function Kr(d){We=d;}async function Tt(){if(We)try{let d=await We.findOne({collection:"_globals_system",where:{}});if(d){te={appSecret:d.appSecret||null,encryptionKey:d.encryptionKey||null,sessionConfig:d.sessionMaxAge||d.maxSessionsPerUser?{maxAge:(d.sessionMaxAge||7)*24*60*60*1e3,maxSessionsPerUser:d.maxSessionsPerUser||3}:null};return}}catch{}te={appSecret:process.env.APP_SECRET||"development-secret-key",encryptionKey:null,sessionConfig:null};}function ar(){return te?.appSecret?te.appSecret:process.env.APP_SECRET||"development-secret-key"}function zr(){if(te?.encryptionKey)return te.encryptionKey;let d=ar();return sr__default.default.createHash("sha256").update(d).digest("hex")}function Pt(){return te?.sessionConfig?te.sessionConfig:{maxAge:10080*60*1e3,maxSessionsPerUser:3}}var We,te,Ve=chunkAHSFSERC_cjs.a(()=>{We=null,te=null;});var kt={};chunkAHSFSERC_cjs.b(kt,{SESSION_CONFIG:()=>ee,clearSessionCookie:()=>Ye,createSession:()=>Ze,deleteSession:()=>he,getClientIp:()=>Xe,getCurrentUser:()=>V,getSession:()=>ue,getSessionIdFromRequest:()=>G,getUserSessions:()=>ye,invalidateAllUserSessions:()=>cr,refreshSession:()=>Pe,setSessionCookie:()=>Ge,updateSessionName:()=>Qe,validateSession:()=>Te});async function re(){return De||(De=unstorage.createStorage({driver:or__default.default({base:".astro/sessions"})}),De)}function lr(){return sr__default.default.randomUUID()}function jt(d){let e="Unknown",t="Unknown",a="Unknown";return d.includes("Firefox")?e="Firefox":d.includes("Edg/")?e="Edge":d.includes("Chrome")?e="Chrome":d.includes("Safari")&&!d.includes("Chrome")&&(e="Safari"),d.includes("iPhone")?(t="iPhone",a="iOS"):d.includes("iPad")?(t="iPad",a="iOS"):d.includes("Mac")?(t="MacBook",a="macOS"):d.includes("Windows")?(t="Windows PC",a="Windows"):d.includes("Linux")?(t="Linux PC",a="Linux"):d.includes("Android")&&(t="Android Phone",a="Android"),{browser:e,device:t,platform:a}}function dr(d){if(!d?.userAgent)return "Session";let{browser:e,device:t}=jt(d.userAgent);return `${t} - ${e}`}function G(d){let e=d.headers.get("Cookie");return e&&Object.fromEntries(e.split("; ").map(a=>a.split("=")))[He]||null}function Xe(d){let e=d.headers.get("x-forwarded-for");return e?e.split(",")[0].trim():d.headers.get("x-real-ip")||"unknown"}function Ge(d,e){let t=new Headers(d.headers);return t.append("Set-Cookie",`${He}=${e}; HttpOnly; Path=/; Max-Age=${ee.absoluteMaxAge/1e3}; SameSite=Strict`),new Response(d.body,{status:d.status,statusText:d.statusText,headers:t})}function Ye(d){let e=new Headers(d.headers);return e.append("Set-Cookie",`${He}=; HttpOnly; Path=/; Max-Age=0; SameSite=Strict`),new Response(d.body,{status:d.status,statusText:d.statusText,headers:e})}async function Re(d){return await(await re()).getItem(`user:${d}`)||[]}async function Je(d,e){let t=await re();e.length>0?await t.setItem(`user:${d}`,e):await t.removeItem(`user:${d}`);}async function Ze(d,e){let t=await re(),a=await Re(d.id);for(;a.length>=ee.maxSessionsPerUser;){let A=a.shift();A&&await t.removeItem(`session:${A}`);}let i=lr(),c=Date.now(),l=e?.headers.get("user-agent"),u=e?Xe(e):"unknown",g=l?{userAgent:l,ip:u,...jt(l)}:{ip:u},f={id:i,userId:d.id,email:d.email,role:d.role,tenantId:d.tenantId,permissions:d.permissions,createdAt:c,expiresAt:c+ee.absoluteMaxAge,lastActivityAt:c,deviceInfo:g,sessionName:dr(g)};return await t.setItem(`session:${i}`,f,{ttl:Math.floor(ee.absoluteMaxAge/1e3)}),a.push(i),await Je(d.id,a),i}async function ue(d){return await(await re()).getItem(`session:${d}`)||null}async function Te(d){let e=await ue(d);return e?e.expiresAt<Date.now()?(await he(d),{valid:false,reason:"Session expired"}):{valid:true}:{valid:false,reason:"Session not found"}}async function Pe(d,e){let t=await re(),a=await ue(d);if(!a)return null;let i=Date.now(),c=a.expiresAt-i,l=a.deviceInfo;if(e){let f=Xe(e);f!==a.deviceInfo?.ip&&(l={...a.deviceInfo,ip:f});}let u={...a,lastActivityAt:i,expiresAt:c<ee.refreshThreshold?i+ee.absoluteMaxAge:a.expiresAt,deviceInfo:l},g=c<ee.refreshThreshold?ee.absoluteMaxAge:void 0;return await t.setItem(`session:${d}`,u,g?{ttl:Math.floor(g/1e3)}:void 0),u}async function he(d){let e=await re(),t=await ue(d);if(t){let i=(await Re(t.userId)).filter(c=>c!==d);await Je(t.userId,i);}await e.removeItem(`session:${d}`),await e.removeItem(`activity:${d}`);}async function cr(d){let e=await Re(d),t=await re();for(let a of e)await t.removeItem(`session:${a}`),await t.removeItem(`activity:${a}`);await Je(d,[]);}async function ye(d,e){let t=await Re(d),a=[];for(let i of t){let c=await ue(i);c&&a.push({id:c.id,sessionName:c.sessionName||"Session",deviceInfo:c.deviceInfo,createdAt:c.createdAt,lastActivityAt:c.lastActivityAt,currentSession:c.id===e});}return a.sort((i,c)=>c.lastActivityAt-i.lastActivityAt),a}async function Qe(d,e){let t=await ue(d);return t?(await(await re()).setItem(`session:${d}`,{...t,sessionName:e}),true):false}async function V(d){let e=G(d);if(!e||!(await Te(e)).valid)return null;let a=await ue(e);return a?(await Pe(e,d),a):null}var Ut,ee,He,De,Ue=chunkAHSFSERC_cjs.a(()=>{Ve();Ut=Pt(),ee={absoluteMaxAge:Ut.maxAge,maxSessionsPerUser:Ut.maxSessionsPerUser,refreshThreshold:300*1e3,activityDebounce:30*1e3,pollInterval:30*1e3},He="kyro-session",De=null;});Ue();function Et(d){let{db:t,userLookup:a}=d;return async function(c){let l=chunkNY47CFVP_cjs.f(c);if(l&&t){let g=await chunkNY47CFVP_cjs.e(l,t,a);if(g.valid&&g.user)return {user:g.user,tenantContext:qt(g.user),apiKeyContext:chunkNY47CFVP_cjs.g(g),status:200,authType:"apikey"};if(g.error)return {status:401,error:g.error}}let u=G(c);if(u)try{let g=await Te(u);if(!g.valid)return {status:401,error:g.reason||"Session invalid"};let f=await V(c);if(f){let A=a?await a(f.userId):null;if(A)return {user:A,tenantContext:qt(A),status:200,authType:"session"}}}catch(g){console.error("Session validation error:",g);}return {status:401,error:"Authentication required"}}}function qt(d){return {tenantId:d.tenantId||"default",userId:d.id||"anonymous",role:d.role||"guest",roles:[d.role||"guest"],permissions:[],isSuperAdmin:d.role==="super_admin"}}Ve();var je=class{storage=new Map;userStorage=new Map;limits;userLimits;constructor(e,t){this.limits={...ur,...e},this.userLimits=t||{"user:api":{window:6e4,max:500},"user:write":{window:36e5,max:100}};}getKey(e,t){return `${e}:${t}`}getUserKey(e,t,a){return `user:${e}:${t}:${a}`}cleanupOldEntries(e,t){let i=Date.now()-t;for(;e.length>0&&e[0].timestamp<i;)e.shift();}async check(e,t){let a=this.limits[e]||this.limits["api:general"],i=this.getKey(e,t),c=this.storage.get(i);c||(c=[],this.storage.set(i,c)),this.cleanupOldEntries(c,a.window);let l=Date.now(),u=c.reduce((g,f)=>g+f.count,0);if(c.push({timestamp:l,count:1}),u>=a.max){let f=c.reduce((A,w)=>A.timestamp<w.timestamp?A:w,c[0]).timestamp+a.window;return {allowed:false,remaining:0,resetAt:f,retryAfter:Math.ceil((f-l)/1e3)}}return {allowed:true,remaining:a.max-u-1,resetAt:l+a.window}}async checkUser(e,t,a){let i=this.userLimits[e]||this.userLimits["user:api"],c=this.userStorage.get(t),l=[];c?l=c.get(this.getKey(e,a))||[]:(this.userStorage.has(t)||this.userStorage.set(t,new Map),this.userStorage.get(t).set(this.getKey(e,a),l)),this.cleanupOldEntries(l,i.window);let u=Date.now(),g=l.reduce((f,A)=>f+A.count,0);if(l.push({timestamp:u,count:1}),g>=i.max){let A=l.reduce((w,U)=>w.timestamp<U.timestamp?w:U,l[0]).timestamp+i.window;return {allowed:false,remaining:0,resetAt:A,retryAfter:Math.ceil((A-u)/1e3)}}return {allowed:true,remaining:i.max-g-1,resetAt:u+i.window}}async reset(e,t){let a=this.getKey(e,t);this.storage.delete(a);}async resetUser(e,t,a){let i=this.userStorage.get(t);if(i){let c=this.getKey(e,a);i.delete(c);}}async getStatus(e,t){let a=this.limits[e]||this.limits["api:general"],i=this.getKey(e,t),c=this.storage.get(i);c||(c=[],this.storage.set(i,c)),this.cleanupOldEntries(c,a.window);let l=Date.now(),u=c.reduce((g,f)=>g+f.count,0);return {count:u,limit:a.max,remaining:Math.max(0,a.max-u),resetAt:l+a.window}}setLimit(e,t){this.limits[e]=t;}setUserLimit(e,t){this.userLimits[e]=t;}},ur={"auth:login":{window:9e5,max:5},"auth:register":{window:36e5,max:3},"auth:forgot":{window:36e5,max:3},"auth:reset":{window:36e5,max:5},"auth:verify":{window:36e5,max:5},"api:general":{window:6e4,max:100},"api:authenticated":{window:6e4,max:200}};var et={retentionDays:30};var Ct=class{redis;prefix;retentionDays;constructor(e,t=30,a="kyro:audit:"){this.redis=e,this.prefix=a,this.retentionDays=t;}async log(e){let t=sr.randomBytes(16).toString("hex"),a=new Date,i={...e,id:t,timestamp:a},c=this.getKeyForDate(a),l=`${this.prefix}log:${t}`;await this.redis.hset(l,this.serializeLog(i)),await this.redis.expire(l,this.retentionDays*24*60*60+3600),await this.redis.zadd(c,a.getTime(),t),await this.redis.expire(c,this.retentionDays*24*60*60+3600);let u=e.userId?`${this.prefix}user:${e.userId}`:null;return u&&(await this.redis.zadd(u,a.getTime(),t),await this.redis.expire(u,this.retentionDays*24*60*60+3600)),t}async get(e){let t=`${this.prefix}log:${e}`,a=await this.redis.hgetall(t);return !a||Object.keys(a).length===0?null:this.deserializeLog(a)}async query(e={}){let{limit:t=50,offset:a=0}=e,i=[];if(e.userId)i.push(`${this.prefix}user:${e.userId}`);else if(e.startDate||e.endDate)i=this.getKeysForDateRange(e.startDate,e.endDate);else {let g=new Date;i=this.getKeysForDateRange(new Date(g.getTime()-this.retentionDays*24*60*60*1e3),g);}let c=[];for(let g of i){let f=await this.redis.zrange(g,0,-1,"WITHSCORES");for(let A=0;A<f.length;A+=2)c.push([f[A],parseInt(f[A+1],10)]);}c.sort((g,f)=>f[1]-g[1]);let l=c.length;c=c.slice(a,a+t);let u=[];for(let[g]of c){let f=await this.get(g);f&&this.matchesFilter(f,e)&&u.push(f);}return {logs:u,total:l}}async getRecent(e=50){let t=[],a=new Date,i=this.getKeysForDateRange(new Date(a.getTime()-10080*60*1e3),a),c=[];for(let l of i){let u=await this.redis.zrange(l,0,-1,"WITHSCORES");for(let g=0;g<u.length;g+=2)c.push([u[g],parseInt(u[g+1],10)]);}c.sort((l,u)=>u[1]-l[1]);for(let[l]of c.slice(0,e)){let u=await this.get(l);u&&t.push(u);}return t}async getUserActivity(e,t=50){let a=`${this.prefix}user:${e}`,i=await this.redis.zrange(a,0,t-1),c=[];for(let l of i){let u=await this.get(l);u&&c.push(u);}return c}async getStats(e,t){let a=this.getKeysForDateRange(e||new Date(Date.now()-2592e6),t||new Date),i={},c=0,l=0,u=0,g=new Set;for(let f of a){let A=await this.redis.zrange(f,0,-1);for(let w of A){let U=await this.get(w);U&&(c++,i[U.action]=(i[U.action]||0)+1,U.success&&u++,U.action==="login_failed"&&l++,U.userId&&g.add(U.userId));}}return {totalEvents:c,byAction:i,successRate:c>0?u/c:1,failedLogins:l,uniqueUsers:g}}async cleanup(){let e=Date.now()-this.retentionDays*24*60*60*1e3,t=await this.redis.keys(`${this.prefix}date:*`),a=0;for(let i of t){let c=await this.redis.zrangebyscore(i,0,e);for(let l of c)await this.redis.del(`${this.prefix}log:${l}`),a++;await this.redis.zremrangebyscore(i,0,e);}return a}getKeyForDate(e){let t=e.getFullYear(),a=String(e.getMonth()+1).padStart(2,"0"),i=String(e.getDate()).padStart(2,"0");return `${this.prefix}date:${t}-${a}-${i}`}getKeysForDateRange(e,t){let a=[],i=e||new Date(Date.now()-this.retentionDays*24*60*60*1e3),c=t||new Date,l=new Date(i);for(;l<=c;)a.push(this.getKeyForDate(l)),l.setDate(l.getDate()+1);return a}matchesFilter(e,t){return !(t.action&&!(Array.isArray(t.action)?t.action:[t.action]).includes(e.action)||t.resource&&e.resource!==t.resource||t.resourceId&&e.resourceId!==t.resourceId||t.success!==void 0&&e.success!==t.success)}serializeLog(e){let t={id:e.id,timestamp:new Date(e.timestamp).toISOString(),action:e.action,resource:e.resource,success:e.success?"1":"0"};return e.userId&&(t.userId=e.userId),e.userEmail&&(t.userEmail=e.userEmail),e.role&&(t.role=e.role),e.resourceId&&(t.resourceId=e.resourceId),e.ipAddress&&(t.ipAddress=e.ipAddress),e.userAgent&&(t.userAgent=e.userAgent),e.error&&(t.error=e.error),e.changes&&(t.changes=JSON.stringify(e.changes)),e.metadata&&(t.metadata=JSON.stringify(e.metadata)),t}deserializeLog(e){return {id:e.id,timestamp:new Date(e.timestamp),action:e.action,userId:e.userId,userEmail:e.userEmail,role:e.role,resource:e.resource,resourceId:e.resourceId,ipAddress:e.ipAddress,userAgent:e.userAgent,success:e.success==="1",error:e.error,changes:e.changes?JSON.parse(e.changes):void 0,metadata:e.metadata?JSON.parse(e.metadata):void 0}}};function as(d){return {ipAddress:d.headers.get("x-forwarded-for")?.split(",")[0]?.trim()||d.headers.get("x-real-ip")||"unknown",userAgent:d.headers.get("user-agent")||"unknown"}}var $t=class{logs=[];retentionDays;constructor(e=et.retentionDays){this.retentionDays=e;}async log(e){let t=sr.randomBytes(16).toString("hex"),i={...e,id:t,timestamp:new Date};return this.logs.push(i),this.cleanupOldLogs(),t}async get(e){return this.logs.find(t=>t.id===e)||null}async query(e={}){let{limit:t=50,offset:a=0}=e,i=[...this.logs];if(e.userId&&(i=i.filter(f=>f.userId===e.userId)),e.action){let f=Array.isArray(e.action)?e.action:[e.action];i=i.filter(A=>f.includes(A.action));}e.resource&&(i=i.filter(f=>f.resource===e.resource)),e.resourceId&&(i=i.filter(f=>f.resourceId===e.resourceId)),e.success!==void 0&&(i=i.filter(f=>f.success===e.success));let c=e.startDate,l=e.endDate;c!==void 0&&(i=i.filter(f=>f.timestamp>=c)),l!==void 0&&(i=i.filter(f=>f.timestamp<=l)),i.sort((f,A)=>A.timestamp.getTime()-f.timestamp.getTime());let u=i.length;return {logs:i.slice(a,a+t),total:u}}async getRecent(e=50){let t=new Date(Date.now()-6048e5);return this.logs.filter(i=>i.timestamp>=t).sort((i,c)=>c.timestamp.getTime()-i.timestamp.getTime()).slice(0,e)}async getUserActivity(e,t=50){return this.logs.filter(i=>i.userId===e).sort((i,c)=>c.timestamp.getTime()-i.timestamp.getTime()).slice(0,t)}async getStats(e,t){let a=e||new Date(Date.now()-2592e6),i=t||new Date,c=this.logs.filter(w=>w.timestamp>=a&&w.timestamp<=i),l={},u=0,g=0,f=0,A=new Set;for(let w of c){u++;let U=w.action;l[U]=(l[U]||0)+1,w.success&&f++,w.action==="login_failed"&&g++,w.userId&&A.add(w.userId);}return {totalEvents:u,byAction:l,successRate:u>0?f/u:1,failedLogins:g,uniqueUsers:A}}async cleanup(){let e=new Date(Date.now()-this.retentionDays*24*60*60*1e3),t=this.logs.length;return this.logs=this.logs.filter(a=>a.timestamp>=e),t-this.logs.length}cleanupOldLogs(){let e=new Date(Date.now()-this.retentionDays*24*60*60*1e3);this.logs.length;this.logs=this.logs.filter(a=>a.timestamp>=e);}};Ue();var ke=class{authAdapter;email;passwordPolicy;lockout;rateLimiter;auditLogger;baseUrl;emailVerificationRequired;constructor(e){this.authAdapter=e.redis,this.email=e.email,this.passwordPolicy=e.passwordPolicy||new chunkAJAZ7D3W_cjs.c,this.lockout=e.lockout,this.rateLimiter=e.rateLimiter,this.auditLogger=e.auditLogger,this.baseUrl=e.baseUrl||"http://localhost:3000",this.emailVerificationRequired=e.emailVerificationRequired??true;}async register(e){let{ipAddress:t,userAgent:a}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let i=await this.rateLimiter.check("auth:register",t);if(!i.allowed)return this.rateLimitResponse(i)}try{let i=await e.json();if(!i.email||!i.password)return this.errorResponse("Email and password are required",400);if(i.password!==i.confirmPassword)return this.errorResponse("Passwords do not match",400);let c=this.passwordPolicy.validate(i.password);if(!c.valid)return this.errorResponse(c.errors.join(". "),400);if(await this.authAdapter.findUserByEmail(i.email))return this.errorResponse("Email already registered",400);let u=await this.authAdapter.createUser({email:i.email,password:i.password,role:i.role||"customer",tenantId:i.tenantId});if(this.emailVerificationRequired&&this.email){let g=sr.randomBytes(32).toString("hex"),f=`${this.baseUrl}/api/auth/verify?token=${g}`;await this.authAdapter.createSession(u.id,{ipAddress:t,userAgent:a});let A=this.email.getTemplates().verifyEmail(f,i.email);await this.email.send({to:i.email,...A});}return this.auditLogger&&await this.auditLogger.log({action:"register",userId:u.id,userEmail:u.email,resource:"auth",ipAddress:t,userAgent:a,success:!0}),this.jsonResponse({success:!0,message:"Registration successful",user:this.sanitizeUser(u),requiresVerification:this.emailVerificationRequired&&!!this.email},201)}catch(i){return console.error("[AuthRoutes.register] Registration error:",i),this.errorResponse("Registration failed",500)}}async login(e){let{ipAddress:t,userAgent:a}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let i=await this.rateLimiter.check("auth:login",t);if(!i.allowed)return this.rateLimitResponse(i)}try{let i=await e.json();if(!i.email||!i.password)return this.errorResponse("Email and password are required",400);let c=await this.authAdapter.findUserByEmail(i.email);if(!c)return await this.recordFailedLogin(t,a),this.errorResponse("Invalid credentials",401);if(c.locked)return this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:c.id,userEmail:c.email,resource:"auth",ipAddress:t,userAgent:a,success:!1,error:"Account locked"}),this.errorResponse("Account locked. Contact an administrator.",403);if(this.lockout){let A=await this.lockout.checkLockout(c.id);if(A.locked)return this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:c.id,userEmail:c.email,resource:"auth",ipAddress:t,userAgent:a,success:!1,error:"Account locked"}),this.errorResponse(`Account locked. Try again in ${Math.ceil((A.lockedUntil.getTime()-Date.now())/6e4)} minutes`,423)}if(!await this.authAdapter.verifyPassword(i.email,i.password))return await this.recordFailedLogin(t,a,c.id,c.email),this.errorResponse("Invalid credentials",401);this.lockout&&await this.lockout.resetAttempts(c.id),this.auditLogger&&await this.auditLogger.log({action:"login",userId:c.id,userEmail:c.email,role:c.role,resource:"auth",ipAddress:t,userAgent:a,success:!0}),await this.authAdapter.updateUser(c.id,{lastLogin:new Date().toISOString()});let u=await Ze({id:c.id,email:c.email,role:c.role,tenantId:c.tenantId}),g={success:!0,user:this.sanitizeUser(c)},f=this.jsonResponse(g);return Ge(f,u)}catch(i){return console.error("[Auth] Login error:",i),this.errorResponse("Login failed",500)}}async logout(e){let t=G(e);if(!t)return this.errorResponse("No session to logout",401);let{ipAddress:a,userAgent:i}=chunkHVXO3OFB_cjs.a(e);try{let c=await V(e);c&&(await he(t),this.auditLogger&&await this.auditLogger.log({action:"logout",userId:c.userId,userEmail:c.email,resource:"auth",ipAddress:a,userAgent:i,success:!0}));let l=this.jsonResponse({success:!0,message:"Logged out successfully"});return Ye(l)}catch{return this.errorResponse("Logout failed",500)}}async refresh(e){try{let t=G(e);if(!t)return this.errorResponse("Not authenticated",401);let a=await Pe(t,e);return a?this.jsonResponse({success:!0,expiresAt:a.expiresAt}):this.errorResponse("Session not found",404)}catch(t){return console.error("[Auth] Session refresh error:",t),this.errorResponse("Session refresh failed",500)}}async me(e){let t=await V(e);return t?this.jsonResponse({success:true,user:{id:t.userId,email:t.email,role:t.role,tenantId:t.tenantId}}):this.errorResponse("Not authenticated",401)}async changePassword(e){let t=await V(e);if(!t)return this.errorResponse("Not authenticated",401);let{ipAddress:a,userAgent:i}=chunkHVXO3OFB_cjs.a(e);try{let c=await e.json(),{currentPassword:l,newPassword:u,confirmPassword:g}=c;if(!l||!u)return this.errorResponse("Current and new password required",400);if(u!==g)return this.errorResponse("Passwords do not match",400);let f=this.passwordPolicy.validate(u);if(!f.valid)return this.errorResponse(f.errors.join(". "),400);let A=await this.authAdapter.findUserById(t.userId);if(!A)return this.errorResponse("User not found",404);if(!(A.passwordHash?await this.authAdapter.verifyPassword(l,A.passwordHash):!1))return this.errorResponse("Current password is incorrect",401);let U=await this.authAdapter.getPasswordHistory?.(A.id,5);if(await this.authAdapter.isPasswordInHistory?.(u,A.id,5))return this.errorResponse("Password was recently used. Please choose a different password",400);let k=await this.authAdapter.hashPassword(u);if(A.passwordHash&&await this.authAdapter.addPasswordToHistory?.(A.id,A.passwordHash),await this.authAdapter.updateUser(A.id,{passwordHash:k}),await this.authAdapter.deleteUserSessions(A.id),this.email&&this.email.getTemplates){let N=this.email.getTemplates().passwordChanged(A.email);await this.email.send({to:A.email,...N});}return this.auditLogger&&await this.auditLogger.log({action:"password_change",userId:A.id,userEmail:A.email,resource:"auth",ipAddress:a,userAgent:i,success:!0}),this.jsonResponse({success:!0,message:"Password changed successfully"})}catch{return this.errorResponse("Password change failed",500)}}async forgotPassword(e){let{ipAddress:t,userAgent:a}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let i=await this.rateLimiter.check("auth:forgot",t);if(!i.allowed)return this.rateLimitResponse(i)}try{let i=await e.json(),{email:c}=i;if(!c)return this.errorResponse("Email required",400);let l=await this.authAdapter.findUserByEmail(c);if(!l)return this.jsonResponse({success:!0,message:"If the email exists, a reset link has been sent"});if(this.email){let u=sr.randomBytes(32).toString("hex"),g=`${this.baseUrl}/api/auth/reset-password?token=${u}`,f=this.email.getTemplates().resetPassword(g,l.email);await this.email.send({to:l.email,...f});}return this.auditLogger&&await this.auditLogger.log({action:"password_reset",userId:l.id,userEmail:l.email,resource:"auth",ipAddress:t,userAgent:a,success:!0}),this.jsonResponse({success:!0,message:"If the email exists, a reset link has been sent"})}catch{return this.errorResponse("Password reset request failed",500)}}async verifyEmail(e){if(!new URL(e.url).searchParams.get("token"))return this.errorResponse("Verification token required",400);try{return this.jsonResponse({success:!0,message:"Email verified"})}catch{return this.errorResponse("Email verification failed",500)}}async recordFailedLogin(e,t,a,i){this.lockout&&await this.lockout.recordFailedAttempt(a||e),this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:a,userEmail:i,resource:"auth",ipAddress:e,userAgent:t,success:false,error:"Invalid credentials"});}sanitizeUser(e){let{passwordHash:t,...a}=e;return a}jsonResponse(e,t=200){return new Response(JSON.stringify(e),{status:t,headers:{"Content-Type":"application/json"}})}async listSessions(e){let t=await V(e);if(!t)return this.errorResponse("Not authenticated",401);try{let a=await ye(t.userId,G(e)??void 0);return this.jsonResponse({sessions:a})}catch(a){return console.error("[AuthRoutes.listSessions] Error:",a),this.errorResponse("Failed to list sessions",500)}}async revokeSession(e,t){let a=await V(e);if(!a)return this.errorResponse("Not authenticated",401);try{let c=(await ye(a.userId)).find(l=>l.id===t);return c?c.currentSession?this.errorResponse("Cannot revoke current session",400):(await he(t),this.jsonResponse({success:!0,message:"Session revoked"})):this.errorResponse("Session not found",404)}catch(i){return console.error("[AuthRoutes.revokeSession] Error:",i),this.errorResponse("Failed to revoke session",500)}}async revokeOtherSessions(e){let t=await V(e);if(!t)return this.errorResponse("Not authenticated",401);try{let a=await ye(t.userId),i=G(e);for(let c of a)c.currentSession||await he(c.id);return this.jsonResponse({success:!0,message:"Other sessions revoked"})}catch(a){return console.error("[AuthRoutes.revokeOtherSessions] Error:",a),this.errorResponse("Failed to revoke sessions",500)}}async renameSession(e,t){let a=await V(e);if(!a)return this.errorResponse("Not authenticated",401);try{if(!(await ye(a.userId)).find(g=>g.id===t))return this.errorResponse("Session not found",404);let l=await e.json(),{name:u}=l;return !u||typeof u!="string"||u.trim().length===0?this.errorResponse("Invalid session name",400):(await Qe(t,u.trim()),this.jsonResponse({success:!0,message:"Session renamed"}))}catch(i){return console.error("[AuthRoutes.renameSession] Error:",i),this.errorResponse("Failed to rename session",500)}}async refreshSession(e){let t=G(e);if(!t)return this.errorResponse("No session",401);try{let a=await(Ue(),chunkAHSFSERC_cjs.c(kt)).refreshSession(t,e);return a?this.jsonResponse({success:!0,expiresAt:a.expiresAt}):this.errorResponse("Session not found",404)}catch(a){return console.error("[AuthRoutes.refreshSession] Error:",a),this.errorResponse("Failed to refresh session",500)}}errorResponse(e,t){return new Response(JSON.stringify({success:false,error:e}),{status:t,headers:{"Content-Type":"application/json"}})}async rateLimitResponse(e){return new Response(JSON.stringify({success:false,error:"Too many requests",retryAfter:e.retryAfter}),{status:429,headers:{"Content-Type":"application/json","Retry-After":String(e.retryAfter||60)}})}};function pe(d){let{uploadDir:e=Ce.join(Ir__default.default.cwd(),"public","uploads"),baseUrl:t="/uploads"}=d;async function a(l){fs.existsSync(l)||await promises.mkdir(l,{recursive:true});}function i(l){let u=Ce.extname(l).toLowerCase();return {".jpg":"image/jpeg",".jpeg":"image/jpeg",".png":"image/png",".gif":"image/gif",".webp":"image/webp",".avif":"image/avif",".svg":"image/svg+xml",".mp4":"video/mp4",".webm":"video/webm",".mov":"video/quicktime",".avi":"video/x-msvideo",".mp3":"audio/mpeg",".wav":"audio/wav",".ogg":"audio/ogg",".pdf":"application/pdf",".doc":"application/msword",".docx":"application/vnd.openxmlformats-officedocument.wordprocessingml.document",".xls":"application/vnd.ms-excel",".xlsx":"application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",".zip":"application/zip",".tar":"application/x-tar",".gz":"application/gzip",".rar":"application/vnd.rar",".7z":"application/x-7z-compressed"}[u]||"application/octet-stream"}async function c(l){try{let u=l.toString("hex",0,8);if(u.startsWith("89504e47")){let g=l.readUInt32BE(16),f=l.readUInt32BE(20);return {width:g,height:f}}if(u.startsWith("ffd8")){let g=2;for(;g<l.length&&l[g]===255;){let f=l[g+1];if(f===192||f===194){let A=l.readUInt16BE(g+5);return {width:l.readUInt16BE(g+7),height:A}}g+=2+l.readUInt16BE(g+2);}}}catch{}return {}}return se({name:"local",displayName:"Local Storage",supportsDynamicResize:true,async upload(l,u){await a(e);let g=Buffer.from(await l.arrayBuffer()),f=sr.createHash("md5").update(g).digest("hex"),A=Ce.extname(l.name),w=u?.filename||`${f}${A}`,U=u?.folder||"",T=U?Ce.join(e,U):e;await a(T);let k=Ce.join(T,w);await promises.writeFile(k,g);let N=l.type.startsWith("image/")?await c(g):{},M=t||"/uploads",ae=U?`/${U}/${w}`:`/${w}`,C=M+ae;return {id:f,filename:w,originalName:l.name,mimeType:l.type||i(l.name),size:g.length,url:C,thumbnailUrl:l.type.startsWith("image/")?C:void 0,folder:U||void 0,provider:"local",metadata:{...N,...u?.metadata},createdAt:new Date().toISOString()}},async uploadFromUrl(l,u){let g=await fetch(l);if(!g.ok)throw new Error(`Failed to fetch file: ${g.statusText}`);let f=await g.blob(),A=g.headers.get("content-disposition"),w=u?.filename;if(!w&&A){let T=A.match(/filename[^;=\n]*=((['"]).*?\2|[^;\n]*)/);T&&(w=T[1].replace(/['"]/g,""));}w||(w=Ce.basename(new URL(l).pathname));let U=new File([f],w,{type:f.type||i(w)});return this.upload(U,u)},async delete(l){let u=Ce.join(e,l.replace(t+"/",""));try{await promises.unlink(u);}catch{}},async rename(l,u){let g=Ce.join(e,l.replace(t+"/","")),f=Ce.join(e,u);return await promises.rename(g,f),`${t}/${u}`},async list(l){let u=l?Ce.join(e,l):e;if(!fs.existsSync(u))return [];let g=[],f=await promises.readdir(u,{withFileTypes:true});for(let A of f)if(A.isFile()){let w=Ce.join(u,A.name),U=await promises.stat(w),T=`${t}${l?`/${l}`:""}/${A.name}`;g.push({id:sr.createHash("md5").update(A.name).digest("hex"),filename:A.name,originalName:A.name,mimeType:i(A.name),size:U.size,url:T,provider:"local",createdAt:U.birthtime.toISOString()});}return g},async exists(l){let u=Ce.join(e,l.replace(t+"/",""));return fs.existsSync(u)},async createFolder(l){let u=Ce.join(e,l);await promises.mkdir(u,{recursive:true});},async deleteFolder(l){let u=Ce.join(e,l);if(fs.existsSync(u)){let{rm:g}=await import('fs/promises');await g(u,{recursive:true,force:true});}}})}function tt(d){let e=(t,a)=>{if(!d.signKey)return t;let i=sr.createHmac("sha256",d.signKey).update(t+a.toString()).digest("hex");return a.set("s",i),t};return {name:"imgix",displayName:"Imgix",supportsDynamicResize:true,async upload(t,a){throw new Error("Imgix is a transformation service. Use another provider for uploads.")},async uploadFromUrl(t,a){let i=a?.filename||t.split("/").pop()||"file",c=await fetch(t);if(!c.ok)throw new Error(`Failed to fetch: ${c.statusText}`);let l=await c.blob();new File([l],i,{type:l.type});return {id:Buffer.from(t).toString("base64").slice(0,20),filename:i,originalName:i,mimeType:l.type,size:l.size,url:this.getImageUrl(t),thumbnailUrl:this.getImageUrl(t,{width:200,height:200,fit:"crop"}),provider:"imgix",createdAt:new Date().toISOString()}},async delete(t){},async rename(t,a){return `https://${d.domain}/${a}`},getImageUrl(t,a){let i=new URL(t),c=new URLSearchParams(i.search);d.defaultParameters&&Object.entries(d.defaultParameters).forEach(([u,g])=>{c.has(u)||c.set(u,g);}),a&&(a.width&&c.set("w",String(a.width)),a.height&&c.set("h",String(a.height)),a.quality&&c.set("q",String(a.quality)),a.format&&c.set("fm",a.format),a.fit&&c.set("fit",a.fit),a.blur&&c.set("blur",String(a.blur)),a.sharpen&&c.set("sharp",String(a.sharpen))),c.set("auto","compress,format");i.pathname+"?"+c.toString();return d.signKey&&(e(i.pathname+c.toString(),c)),`https://${d.domain}${i.pathname}${c.toString()?"?"+c.toString():""}`},async generateThumbnail(t){return this.getImageUrl(t.url,{width:200,height:200,fit:"crop"})},async list(){return []},async exists(t){try{return (await fetch(t,{method:"HEAD"})).ok}catch{return  false}},async createFolder(){},async deleteFolder(){}}}function Ee(d,e){return e.cdnUrl?`${e.cdnUrl.replace(/\/$/,"")}/${d}`:`https://${e.storageZone}.b-cdn.net/${d}`}function rt(d){return d.cdnUrl?d.cdnUrl.replace(/\/$/,"")+"/":`https://${d.storageZone}.b-cdn.net/`}function st(d){let e=`https://storage.bunnycdn.com/${d.storageZone}`,t=a=>`${d.prefix?`${d.prefix}/`:""}${a}`.replace(/\/+/g,"/");return se({name:"bunny",displayName:"Bunny.net Storage",supportsDynamicResize:true,async upload(a,i){let c=t(`${i?.folder?`${i.folder}/`:""}${i?.filename||a.name}`),l=Buffer.from(await a.arrayBuffer()),u=await fetch(`${e}/${c}`,{method:"PUT",headers:{AccessKey:d.apiKey,"Content-Type":a.type},body:l});if(!u.ok){let g=await u.text();throw new Error(`Bunny.net upload failed: ${u.status} ${g}`)}return {id:Buffer.from(c).toString("base64url"),filename:i?.filename||a.name,originalName:a.name,mimeType:a.type,size:l.length,url:Ee(c,d),thumbnailUrl:a.type.startsWith("image/")?Ee(c,d):void 0,folder:i?.folder,provider:"bunny",metadata:i?.metadata,createdAt:new Date().toISOString()}},async delete(a){let i=a.replace(rt(d),""),c=await fetch(`${e}/${i}`,{method:"DELETE",headers:{AccessKey:d.apiKey}});if(!c.ok&&c.status!==404){let l=await c.text();throw new Error(`Bunny.net delete failed: ${c.status} ${l}`)}},async rename(a,i){let c=a.replace(rt(d),""),l=d.prefix?`${d.prefix}/${i}`:i,u=await fetch(`${e}/${c}`,{method:"GET",headers:{AccessKey:d.apiKey}});if(!u.ok)throw new Error("Bunny.net rename failed: could not read old file");let g=await u.arrayBuffer();return await fetch(`${e}/${l}`,{method:"PUT",headers:{AccessKey:d.apiKey,"Content-Type":u.headers.get("Content-Type")||"application/octet-stream"},body:g}),await this.delete(a),Ee(l,d)},async list(a){let i=t(a||""),c=await fetch(`${e}/${i}`,{method:"GET",headers:{AccessKey:d.apiKey}});if(!c.ok){let u=await c.text();throw new Error(`Bunny.net list failed: ${c.status} ${u}`)}return (await c.json()).map(u=>({id:Buffer.from(u.ObjectName||"").toString("base64url"),filename:u.ObjectName?.split("/").pop()||"",originalName:u.ObjectName?.split("/").pop()||"",mimeType:"application/octet-stream",size:u.Length||0,url:Ee(u.ObjectName||"",d),provider:"bunny",createdAt:u.LastChanged||new Date().toISOString()}))},async exists(a){let i=a.replace(rt(d),"");return (await fetch(`${e}/${i}`,{method:"HEAD",headers:{AccessKey:d.apiKey}})).ok},async createFolder(a){let i=t(`${a}/`);await fetch(`${e}/${i}`,{method:"PUT",headers:{AccessKey:d.apiKey,"Content-Length":"0"},body:""});},async deleteFolder(a){let i=t(`${a}/`);await fetch(`${e}/${i}`,{method:"DELETE",headers:{AccessKey:d.apiKey}});}})}var nt=class{providers=new Map;providerToPlugin=new Map;disabledPlugins=new Set;constructor(){this.registerLocal(),this.registerImgix(),this.registerBunny();}registerLocal(){this.register({type:"local",displayName:"Local Server",configKey:"local",configFields:[{name:"uploadDir",type:"text",label:"Upload Directory",defaultValue:"./public/uploads"},{name:"baseUrl",type:"text",label:"Base URL",defaultValue:"/uploads"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>{let t=e?.local||e,a=(t?.uploadDir||"").trim(),i;a?Ce__default.default.isAbsolute(a)?i=a:a.includes("/")||a.includes("\\")?i=Ce__default.default.resolve(process.cwd(),a):i=Ce__default.default.join(process.cwd(),"public",a):i=Ce__default.default.join(process.cwd(),"public","uploads");let c=(t?.baseUrl||"").trim(),l;return c?l=c.startsWith("/")?c:`/${c}`:l="/uploads",{uploadDir:i,baseUrl:l}},factory:e=>pe(e)});}registerImgix(){this.register({type:"imgix",displayName:"Imgix",configKey:"imgix",configFields:[{name:"domain",type:"text",label:"Domain",required:true},{name:"signKey",type:"password",label:"Sign Key"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>e?.imgix||e,factory:e=>tt(e)});}registerBunny(){this.register({type:"bunny",displayName:"Bunny.net",configKey:"bunny",configFields:[{name:"storageZone",type:"text",label:"Storage Zone",required:true},{name:"apiKey",type:"password",label:"API Key",required:true},{name:"cdnUrl",type:"text",label:"CDN URL"},{name:"prefix",type:"text",label:"Path Prefix"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>e?.bunny||e,factory:e=>st(e)});}register(e){if(this.providers.has(e.type)){console.warn(`[StorageRegistry] Provider "${e.type}" already registered, skipping`);return}e.pluginName&&this.providerToPlugin.set(e.type,e.pluginName),this.providers.set(e.type,e);}unregister(e){this.providers.delete(e),this.providerToPlugin.delete(e);}get(e){return this.providers.get(e)}getAll(){return Array.from(this.providers.values())}getAllAvailable(e){let t=this.getAll();return e?t.filter(a=>a.pluginName?e(a.pluginName):true):t}has(e){return this.providers.has(e)}async resolve(e,t){let a=this.providers.get(e);if(!a)throw new Error(`Unknown storage provider type: "${e}". Is the plugin that provides it enabled?`);if(a.pluginName&&this.disabledPlugins.has(a.pluginName))throw new Error(`Storage provider "${e}" is not available (plugin "${a.pluginName}" is disabled)`);let i=a.configKey||e,c=a.extractConfig(t,i);return a.factory(c)}async resolveWithConfig(e,t){let a=this.providers.get(e);if(!a)throw new Error(`Unknown storage provider type: "${e}". Is the plugin that provides it enabled?`);if(a.pluginName&&this.disabledPlugins.has(a.pluginName))throw new Error(`Storage provider "${e}" is not available (plugin "${a.pluginName}" is disabled)`);let i=a.extractRawConfig(t);return a.factory(i)}getProviderPluginName(e){return this.providerToPlugin.get(e)}getAllPluginNames(){return Array.from(new Set(this.providerToPlugin.values()))}setPluginEnabled(e,t){t?this.disabledPlugins.delete(e):this.disabledPlugins.add(e);}isPluginEnabled(e){return !this.disabledPlugins.has(e)}},at=null;function it(){return at||(at=new nt),at}function Kt(d){if(!d)return "";if(d.startsWith("pub-"))return d;let e=d.match(/pub-[a-zA-Z0-9]+/i);return e?e[0]:""}function Rr(d,e){let t=d.startsWith("/")?d.slice(1):d;if(e.cdnUrl)return `${e.cdnUrl.replace(/\/$/,"")}/${t}`;switch(e.provider){case "r2":{let a=Kt(e.publicDevUrl);return a?`https://${a}.r2.dev/${t}`:`https://${e.bucket}.${e.accountId}.r2.cloudflarestorage.com/${t}`}case "gcs":return `https://storage.googleapis.com/${e.bucket}/${t}`;case "digitalocean":return `https://${e.bucket}.${e.region}.cdn.digitaloceanspaces.com/${t}`;case "backblaze":return `https://${e.bucket}.s3.backblazeb2.com/${t}`;case "wasabi":return `https://${e.bucket}.s3.wasabisys.com/${t}`;default:return `https://${e.bucket}.s3.${e.region}.amazonaws.com/${t}`}}function lt(d){if(d.cdnUrl)return d.cdnUrl.replace(/\/$/,"")+"/";switch(d.provider){case "r2":{let e=Kt(d.publicDevUrl);return e?`https://${e}.r2.dev/`:`https://${d.bucket}.${d.accountId}.r2.cloudflarestorage.com/`}case "gcs":return `https://storage.googleapis.com/${d.bucket}/`;case "digitalocean":return `https://${d.bucket}.${d.region}.cdn.digitaloceanspaces.com/`;case "backblaze":return `https://${d.bucket}.s3.backblazeb2.com/`;case "wasabi":return `https://${d.bucket}.s3.wasabisys.com/`;default:return `https://${d.bucket}.s3.${d.region}.amazonaws.com/`}}function Tr(d){switch(d){case "r2":return "Cloudflare R2";case "gcs":return "Google Cloud Storage";case "digitalocean":return "DigitalOcean Spaces";case "backblaze":return "Backblaze B2";case "wasabi":return "Wasabi";default:return "AWS S3"}}function Pr(d){let e=new clientS3.S3Client({region:d.region||"auto",endpoint:d.endpoint,credentials:{accessKeyId:d.accessKeyId,secretAccessKey:d.secretAccessKey},forcePathStyle:true,tls:true,...d.provider==="r2"&&{requestHandler:new nodeHttpHandler.NodeHttpHandler({connectionTimeout:1e4,socketTimeout:1e4})}}),t=i=>`${d.prefix?`${d.prefix}/`:""}${i}`.replace(/\/+/g,"/"),a=i=>Rr(i,d);return se({name:d.provider,displayName:Tr(d.provider),supportsDynamicResize:true,async upload(i,c){let l=t(`${c?.folder?`${c.folder}/`:""}${c?.filename||i.name}`),u=Buffer.from(await i.arrayBuffer());await e.send(new clientS3.PutObjectCommand({Bucket:d.bucket,Key:l,Body:u,ContentType:i.type,Metadata:c?.metadata}));let g=await e.send(new clientS3.HeadObjectCommand({Bucket:d.bucket,Key:l}));return {id:Buffer.from(l).toString("base64url"),filename:c?.filename||i.name,originalName:i.name,mimeType:i.type,size:u.length,url:a(l),thumbnailUrl:i.type.startsWith("image/")?a(l):void 0,folder:c?.folder,provider:d.provider,metadata:{...c?.metadata,etag:g.ETag},createdAt:new Date().toISOString()}},async delete(i){let c=i.replace(lt(d),"");await e.send(new clientS3.DeleteObjectCommand({Bucket:d.bucket,Key:c}));},async rename(i,c){let l=i.replace(lt(d),""),u=d.prefix?`${d.prefix}/${c}`:c;return await e.send(new clientS3.CopyObjectCommand({Bucket:d.bucket,CopySource:`${d.bucket}/${l}`,Key:u})),await e.send(new clientS3.DeleteObjectCommand({Bucket:d.bucket,Key:l})),a(u)},async list(i){let c=t(i||"");return ((await e.send(new clientS3.ListObjectsV2Command({Bucket:d.bucket,Prefix:c}))).Contents||[]).map(u=>({id:Buffer.from(u.Key||"").toString("base64url"),filename:u.Key?.split("/").pop()||"",originalName:u.Key?.split("/").pop()||"",mimeType:"application/octet-stream",size:u.Size||0,url:a(u.Key||""),provider:d.provider,createdAt:u.LastModified?.toISOString()||new Date().toISOString()}))},async exists(i){try{let c=i.replace(lt(d),"");return await e.send(new clientS3.HeadObjectCommand({Bucket:d.bucket,Key:c})),!0}catch{return  false}},async createFolder(i){let c=t(`${i}/`);await e.send(new clientS3.PutObjectCommand({Bucket:d.bucket,Key:c,Body:""}));},async deleteFolder(i){let c=t(`${i}/`),l;do{let u=await e.send(new clientS3.ListObjectsV2Command({Bucket:d.bucket,Prefix:c,ContinuationToken:l}));if(u.Contents?.length){let g=u.Contents.map(f=>({Key:f.Key}));await e.send(new clientS3.DeleteObjectsCommand({Bucket:d.bucket,Delete:{Objects:g}}));}l=u.IsTruncated?u.NextContinuationToken:void 0;}while(l);await e.send(new clientS3.DeleteObjectCommand({Bucket:d.bucket,Key:c}));}})}function Ur(d){let e=()=>`https://api.cloudinary.com/v1_1/${d.cloudName}/upload`,t=async a=>{let i=await import('crypto'),c=Object.keys(a).sort().map(l=>`${l}=${a[l]}`).join("&");return i.createHash("sha256").update(c+d.apiSecret).digest("hex")};return {name:"cloudinary",displayName:"Cloudinary",supportsDynamicResize:true,async upload(a,i){let c=new FormData;if(c.append("file",a),d.uploadPreset)c.append("upload_preset",d.uploadPreset);else {let g=Math.round(Date.now()/1e3),f={timestamp:String(g)};(i?.folder||d.folder)&&(f.folder=i?.folder||d.folder||"");let A=await t(f);c.append("timestamp",String(g)),c.append("signature",A),c.append("api_key",d.apiKey);}(i?.folder||d.folder)&&c.append("folder",i?.folder||d.folder||"");let l=await fetch(e(),{method:"POST",body:c});if(!l.ok){let g=await l.json();throw new Error(`Cloudinary upload failed: ${g.error?.message||l.statusText}`)}let u=await l.json();return {id:u.public_id,filename:`${u.public_id}.${u.format}`,originalName:u.original_filename||a.name,mimeType:a.type||`image/${u.format}`,size:u.bytes,url:u.secure_url,thumbnailUrl:this.getImageUrl(u.secure_url,{width:200,height:200,fit:"crop"}),width:u.width,height:u.height,folder:i?.folder||d.folder,provider:"cloudinary",createdAt:new Date().toISOString()}},async uploadFromUrl(a,i){let c=new FormData;c.append("file",a),c.append("upload_preset","ml_default"),(i?.folder||d.folder)&&c.append("folder",i?.folder||d.folder||"");let l=await fetch(e(),{method:"POST",body:c});if(!l.ok)throw new Error("Cloudinary upload failed");let u=await l.json();return {id:u.public_id,filename:`${u.public_id}.${u.format}`,originalName:u.original_filename||a.split("/").pop()||"file",mimeType:`image/${u.format}`,size:u.bytes,url:u.secure_url,thumbnailUrl:this.getImageUrl(u.secure_url,{width:200,height:200,fit:"crop"}),width:u.width,height:u.height,provider:"cloudinary",createdAt:new Date().toISOString()}},async delete(a){try{let i=a.split("/image/upload/");if(i.length!==2){console.warn("[Cloudinary delete] Could not parse URL:",a);return}let c=i[1].replace(/^v\d+\//,"").replace(/\.[^.]+$/,""),l=Math.round(Date.now()/1e3),u={timestamp:String(l),public_id:c},g=Object.keys(u).sort().map(k=>`${k}=${u[k]}`).join("&"),A=(await import('crypto')).createHash("sha256").update(g+d.apiSecret).digest("hex"),w=`https://api.cloudinary.com/v1_1/${d.cloudName}/image/destroy`,U=new FormData;U.append("public_id",c),U.append("timestamp",String(l)),U.append("signature",A),U.append("api_key",d.apiKey);let T=await fetch(w,{method:"POST",body:U});if(!T.ok){let k=await T.json();console.warn("[Cloudinary delete] Failed:",k);}}catch(i){console.warn("[Cloudinary delete] Error:",i.message);}},async rename(a,i){let c="",l=i.replace(/\.[^.]+$/,""),u="";try{let g=a.split("/image/upload/");if(g.length!==2)return console.warn("[Cloudinary rename] Could not parse old URL:",a),a;let f=g[1],A=f.match(/^(v\d+)\//);c=A?A[1]:"";let w=f.replace(/^v\d+\//,"").replace(/\.[^.]+$/,""),U=w.split("/");u=U.length>1?U.slice(0,-1).join("/"):"";let T=i.replace(/\.[^.]+$/,"");l=u?`${u}/${T}`:T;let k=Math.round(Date.now()/1e3),N={from_public_id:w,to_public_id:l,timestamp:String(k)},M=Object.keys(N).sort().map(D=>`${D}=${N[D]}`).join("&"),C=(await import('crypto')).createHash("sha256").update(M+d.apiSecret).digest("hex"),X=new FormData;X.append("from_public_id",w),X.append("to_public_id",l),X.append("timestamp",String(k)),X.append("signature",C),X.append("api_key",d.apiKey);let J=await fetch(`https://api.cloudinary.com/v1_1/${d.cloudName}/image/rename`,{method:"POST",body:X});if(J.ok)return (await J.json()).secure_url;{let D=await J.json();console.warn("[Cloudinary rename] Failed:",D);let Z=c?`/${c}/`:"/";return `https://res.cloudinary.com/${d.cloudName}/image/upload${Z}${l}.${i.split(".").pop()}`}}catch(g){console.warn("[Cloudinary rename] Error:",g.message);let f=c?`/${c}/`:"/";return `https://res.cloudinary.com/${d.cloudName}/image/upload${f}${l}.${i.split(".").pop()}`}},getImageUrl(a,i){if(!i)return a;let c=a.split("/upload/");if(c.length!==2)return a;let l=[];if(i.width&&l.push(`w_${i.width}`),i.height&&l.push(`h_${i.height}`),i.fit){let g={crop:"c_fill",clip:"c_fit",scale:"c_scale",fill:"c_fill"};l.push(g[i.fit]||"c_limit");}i.quality&&l.push(`q_${i.quality}`),i.format&&l.push(`f_${i.format}`);let u=l.join(",");return `${c[0]}/upload/${u}/${c[1]}`},async generateThumbnail(a){return this.getImageUrl(a.url,{width:200,height:200,fit:"crop"})},async list(){return []},async exists(a){return (await fetch(a,{method:"HEAD"})).ok},async createFolder(){},async deleteFolder(){}}}function qr(d){let e=null;async function t(){return e||(e=new basicFtp.Client(6e4,{allowSeparateTransferHost:true}),e.ftp.verbose=false,await e.access({host:d.host,port:d.port||21,user:d.user,password:d.password,secure:d.secure,secureOptions:{}})),e}let a=l=>`${d.prefix?`${d.prefix}/`:""}${l}`.replace(/\/+/g,"/"),i=l=>`${d.baseUrl.replace(/\/$/,"")}/${l}`,c=()=>d.baseUrl.replace(/\/$/,"")+"/";return se({name:d.type,displayName:d.type==="sftp"?"SFTP Storage":"FTP Storage",supportsDynamicResize:false,async upload(l,u){let g=await t(),f=a(`${u?.folder?`${u.folder}/`:""}${u?.filename||l.name}`),A=Buffer.from(await l.arrayBuffer()),w=f.split("/").slice(0,-1),U="";for(let k of w){U=U?`${U}/${k}`:k;try{await g.ensureDir(U);}catch{}}let T=stream.Readable.from(A);return await g.uploadFrom(T,f),{id:Buffer.from(f).toString("base64url"),filename:u?.filename||l.name,originalName:l.name,mimeType:l.type,size:A.length,url:i(f),thumbnailUrl:l.type.startsWith("image/")?i(f):void 0,folder:u?.folder,provider:d.type,metadata:u?.metadata,createdAt:new Date().toISOString()}},async delete(l){let u=await t(),g=l.replace(c(),"");await u.remove(g);},async rename(l,u){let g=await t(),f=l.replace(c(),""),A=d.prefix?`${d.prefix}/${u}`:u;return await g.rename(f,A),i(A)},async list(l){let u=await t(),g=a(l||""),f;try{f=await u.list(g);}catch{return []}return f.filter(A=>A.type===0).map(A=>({id:Buffer.from(`${g}/${A.name}`).toString("base64url"),filename:A.name,originalName:A.name,mimeType:"application/octet-stream",size:Number(A.size)||0,url:i(`${g}/${A.name}`.replace(/\/+/g,"/")),provider:d.type,createdAt:A.modifiedAt?A.modifiedAt.toISOString():new Date().toISOString()}))},async exists(l){let u=await t(),g=l.replace(c(),"");try{return await u.size(g),!0}catch{return  false}},async createFolder(l){let u=await t(),g=a(l);await u.ensureDir(g);},async deleteFolder(l){let u=await t(),g=a(l);await u.removeDir(g);}})}async function zt(d){let e=d.getStorageConfig(),t=it();try{return await t.resolve(e.type,e)}catch(a){return console.warn(`[resolveProvider] ${a.message} \u2014 falling back to local storage`),pe({uploadDir:Ce__default.default.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"})}}function se(d){return {async uploadFromUrl(e,t){let a=await fetch(e);if(!a.ok)throw new Error(`Failed to fetch: ${a.statusText}`);let i=await a.blob(),c=e.split("/").pop()||"file",l=new File([i],c,{type:i.type});return this.upload(l,t)},getImageUrl(e,t){if(!t||Object.keys(t).length===0)return e;let a=new URLSearchParams({url:e});return t.width&&a.set("w",String(t.width)),t.height&&a.set("h",String(t.height)),t.quality&&a.set("q",String(t.quality)),t.format&&a.set("f",t.format),`/api/media/resize?${a.toString()}`},async generateThumbnail(e){return this.getImageUrl(e.url,{width:400,height:400})},...d}}async function Wt(d){if(!d)return console.warn("[resolveProviderWithConfig] No config, using local"),pe({uploadDir:Ce__default.default.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"});let e=d.type||"local",t=it();try{return await t.resolveWithConfig(e,d)}catch(a){return console.warn(`[resolveProviderWithConfig] ${a.message} \u2014 falling back to local storage`),pe({uploadDir:Ce__default.default.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"})}}async function Vt(d){let e=await ct__default.default(d).metadata(),t=ct__default.default(d).webp({quality:85}),a=ct__default.default(d).resize({width:500,withoutEnlargement:true}).webp({quality:80});return {buffer:await t.toBuffer(),thumbnailBuffer:await a.toBuffer(),width:e.width,height:e.height,format:"webp"}}var Ht=false,$e=class d{db;storage;dialect;genId;mediaTable="media";foldersTable="media_folders";constructor(e,t,a){this.db=e,this.storage=t,this.dialect=a?.dialect||"sqlite",this.genId=a?.genId||chunk6CLRVJPP_cjs.e;}static async init(e,t){let a;if(t?.storageConfig)a=await Wt(t.storageConfig);else {let c=new chunkAJAZ7D3W_cjs.a(e);await c.load(),a=await zt(c);}let i=new d(e,a,t);return await i.ensureTables(),i}async ensureTables(){if(this.dialect==="sqlite")this.db.exec(`
+'use strict';var chunkAJAZ7D3W_cjs=require('./chunk-AJAZ7D3W.cjs'),chunkGFU7AOI3_cjs=require('./chunk-GFU7AOI3.cjs'),chunkET6NN2V2_cjs=require('./chunk-ET6NN2V2.cjs'),chunkHVXO3OFB_cjs=require('./chunk-HVXO3OFB.cjs'),chunkISWMETHJ_cjs=require('./chunk-ISWMETHJ.cjs'),chunkNY47CFVP_cjs=require('./chunk-NY47CFVP.cjs'),chunk6CLRVJPP_cjs=require('./chunk-6CLRVJPP.cjs'),chunkGYQMNXXW_cjs=require('./chunk-GYQMNXXW.cjs'),chunkUDSJGML2_cjs=require('./chunk-UDSJGML2.cjs'),chunkATLSIYRH_cjs=require('./chunk-ATLSIYRH.cjs'),chunkQ3Q7BJVQ_cjs=require('./chunk-Q3Q7BJVQ.cjs'),chunkAHSFSERC_cjs=require('./chunk-AHSFSERC.cjs'),sr=require('crypto'),unstorage=require('unstorage'),or=require('unstorage/drivers/fs'),hono=require('hono'),Ce=require('path'),fs=require('fs'),ct=require('sharp'),promises=require('fs/promises'),Ir=require('process'),clientS3=require('@aws-sdk/client-s3'),nodeHttpHandler=require('@smithy/node-http-handler'),stream=require('stream'),basicFtp=require('basic-ftp'),zodToJsonSchema=require('zod-to-json-schema');function _interopDefault(e){return e&&e.__esModule?e:{default:e}}var sr__default=/*#__PURE__*/_interopDefault(sr);var or__default=/*#__PURE__*/_interopDefault(or);var Ce__default=/*#__PURE__*/_interopDefault(Ce);var ct__default=/*#__PURE__*/_interopDefault(ct);var Ir__default=/*#__PURE__*/_interopDefault(Ir);function Kr(d){We=d;}async function Tt(){if(We)try{let d=await We.findOne({collection:"_globals_system",where:{}});if(d){te={appSecret:d.appSecret||null,encryptionKey:d.encryptionKey||null,sessionConfig:d.sessionMaxAge||d.maxSessionsPerUser?{maxAge:(d.sessionMaxAge||7)*24*60*60*1e3,maxSessionsPerUser:d.maxSessionsPerUser||3}:null};return}}catch{}te={appSecret:process.env.APP_SECRET||"development-secret-key",encryptionKey:null,sessionConfig:null};}function ar(){return te?.appSecret?te.appSecret:process.env.APP_SECRET||"development-secret-key"}function zr(){if(te?.encryptionKey)return te.encryptionKey;let d=ar();return sr__default.default.createHash("sha256").update(d).digest("hex")}function Pt(){return te?.sessionConfig?te.sessionConfig:{maxAge:10080*60*1e3,maxSessionsPerUser:3}}var We,te,Ve=chunkAHSFSERC_cjs.a(()=>{We=null,te=null;});var kt={};chunkAHSFSERC_cjs.b(kt,{SESSION_CONFIG:()=>ee,clearSessionCookie:()=>Ye,createSession:()=>Ze,deleteSession:()=>he,getClientIp:()=>Xe,getCurrentUser:()=>V,getSession:()=>ue,getSessionIdFromRequest:()=>G,getUserSessions:()=>ye,invalidateAllUserSessions:()=>cr,refreshSession:()=>Pe,setSessionCookie:()=>Ge,updateSessionName:()=>Qe,validateSession:()=>Te});async function re(){return De||(De=unstorage.createStorage({driver:or__default.default({base:".astro/sessions"})}),De)}function lr(){return sr__default.default.randomUUID()}function jt(d){let e="Unknown",t="Unknown",a="Unknown";return d.includes("Firefox")?e="Firefox":d.includes("Edg/")?e="Edge":d.includes("Chrome")?e="Chrome":d.includes("Safari")&&!d.includes("Chrome")&&(e="Safari"),d.includes("iPhone")?(t="iPhone",a="iOS"):d.includes("iPad")?(t="iPad",a="iOS"):d.includes("Mac")?(t="MacBook",a="macOS"):d.includes("Windows")?(t="Windows PC",a="Windows"):d.includes("Linux")?(t="Linux PC",a="Linux"):d.includes("Android")&&(t="Android Phone",a="Android"),{browser:e,device:t,platform:a}}function dr(d){if(!d?.userAgent)return "Session";let{browser:e,device:t}=jt(d.userAgent);return `${t} - ${e}`}function G(d){let e=d.headers.get("Cookie");return e&&Object.fromEntries(e.split("; ").map(a=>a.split("=")))[He]||null}function Xe(d){let e=d.headers.get("x-forwarded-for");return e?e.split(",")[0].trim():d.headers.get("x-real-ip")||"unknown"}function Ge(d,e){let a=process.env.NODE_ENV==="production"?"Secure; ":"",i=new Headers(d.headers);return i.append("Set-Cookie",`${He}=${e}; HttpOnly; Path=/; Max-Age=${ee.absoluteMaxAge/1e3}; SameSite=Strict; ${a}`),new Response(d.body,{status:d.status,statusText:d.statusText,headers:i})}function Ye(d){let t=process.env.NODE_ENV==="production"?"Secure; ":"",a=new Headers(d.headers);return a.append("Set-Cookie",`${He}=; HttpOnly; Path=/; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=Strict; ${t}`),new Response(d.body,{status:d.status,statusText:d.statusText,headers:a})}async function Re(d){return await(await re()).getItem(`user:${d}`)||[]}async function Je(d,e){let t=await re();e.length>0?await t.setItem(`user:${d}`,e):await t.removeItem(`user:${d}`);}async function Ze(d,e){let t=await re(),a=await Re(d.id);for(;a.length>=ee.maxSessionsPerUser;){let A=a.shift();A&&await t.removeItem(`session:${A}`);}let i=lr(),c=Date.now(),l=e?.headers.get("user-agent"),u=e?Xe(e):"unknown",g=l?{userAgent:l,ip:u,...jt(l)}:{ip:u},f={id:i,userId:d.id,email:d.email,role:d.role,tenantId:d.tenantId,permissions:d.permissions,createdAt:c,expiresAt:c+ee.absoluteMaxAge,lastActivityAt:c,deviceInfo:g,sessionName:dr(g)};return await t.setItem(`session:${i}`,f,{ttl:Math.floor(ee.absoluteMaxAge/1e3)}),a.push(i),await Je(d.id,a),i}async function ue(d){return await(await re()).getItem(`session:${d}`)||null}async function Te(d){let e=await ue(d);return e?e.expiresAt<Date.now()?(await he(d),{valid:false,reason:"Session expired"}):{valid:true}:{valid:false,reason:"Session not found"}}async function Pe(d,e){let t=await re(),a=await ue(d);if(!a)return null;let i=Date.now(),c=a.expiresAt-i,l=a.deviceInfo;if(e){let f=Xe(e);f!==a.deviceInfo?.ip&&(l={...a.deviceInfo,ip:f});}let u={...a,lastActivityAt:i,expiresAt:c<ee.refreshThreshold?i+ee.absoluteMaxAge:a.expiresAt,deviceInfo:l},g=c<ee.refreshThreshold?ee.absoluteMaxAge:void 0;return await t.setItem(`session:${d}`,u,g?{ttl:Math.floor(g/1e3)}:void 0),u}async function he(d){let e=await re(),t=await ue(d);if(t){let i=(await Re(t.userId)).filter(c=>c!==d);await Je(t.userId,i);}await e.removeItem(`session:${d}`),await e.removeItem(`activity:${d}`);}async function cr(d){let e=await Re(d),t=await re();for(let a of e)await t.removeItem(`session:${a}`),await t.removeItem(`activity:${a}`);await Je(d,[]);}async function ye(d,e){let t=await Re(d),a=[];for(let i of t){let c=await ue(i);c&&a.push({id:c.id,sessionName:c.sessionName||"Session",deviceInfo:c.deviceInfo,createdAt:c.createdAt,lastActivityAt:c.lastActivityAt,currentSession:c.id===e});}return a.sort((i,c)=>c.lastActivityAt-i.lastActivityAt),a}async function Qe(d,e){let t=await ue(d);return t?(await(await re()).setItem(`session:${d}`,{...t,sessionName:e}),true):false}async function V(d){let e=G(d);if(!e||!(await Te(e)).valid)return null;let a=await ue(e);return a?(await Pe(e,d),a):null}var Ut,ee,He,De,Ue=chunkAHSFSERC_cjs.a(()=>{Ve();Ut=Pt(),ee={absoluteMaxAge:Ut.maxAge,maxSessionsPerUser:Ut.maxSessionsPerUser,refreshThreshold:300*1e3,activityDebounce:30*1e3,pollInterval:30*1e3},He="kyro-session",De=null;});Ue();function Et(d){let{db:t,userLookup:a}=d;return async function(c){let l=chunkNY47CFVP_cjs.f(c);if(l&&t){let g=await chunkNY47CFVP_cjs.e(l,t,a);if(g.valid&&g.user)return {user:g.user,tenantContext:qt(g.user),apiKeyContext:chunkNY47CFVP_cjs.g(g),status:200,authType:"apikey"};if(g.error)return {status:401,error:g.error}}let u=G(c);if(u)try{let g=await Te(u);if(!g.valid)return {status:401,error:g.reason||"Session invalid"};let f=await V(c);if(f){let A=a?await a(f.userId):null;if(A)return {user:A,tenantContext:qt(A),status:200,authType:"session"}}}catch(g){console.error("Session validation error:",g);}return {status:401,error:"Authentication required"}}}function qt(d){return {tenantId:d.tenantId||"default",userId:d.id||"anonymous",role:d.role||"guest",roles:[d.role||"guest"],permissions:[],isSuperAdmin:d.role==="super_admin"}}Ve();var je=class{storage=new Map;userStorage=new Map;limits;userLimits;constructor(e,t){this.limits={...ur,...e},this.userLimits=t||{"user:api":{window:6e4,max:500},"user:write":{window:36e5,max:100}};}getKey(e,t){return `${e}:${t}`}getUserKey(e,t,a){return `user:${e}:${t}:${a}`}cleanupOldEntries(e,t){let i=Date.now()-t;for(;e.length>0&&e[0].timestamp<i;)e.shift();}async check(e,t){let a=this.limits[e]||this.limits["api:general"],i=this.getKey(e,t),c=this.storage.get(i);c||(c=[],this.storage.set(i,c)),this.cleanupOldEntries(c,a.window);let l=Date.now(),u=c.reduce((g,f)=>g+f.count,0);if(c.push({timestamp:l,count:1}),u>=a.max){let f=c.reduce((A,w)=>A.timestamp<w.timestamp?A:w,c[0]).timestamp+a.window;return {allowed:false,remaining:0,resetAt:f,retryAfter:Math.ceil((f-l)/1e3)}}return {allowed:true,remaining:a.max-u-1,resetAt:l+a.window}}async checkUser(e,t,a){let i=this.userLimits[e]||this.userLimits["user:api"],c=this.userStorage.get(t),l=[];c?l=c.get(this.getKey(e,a))||[]:(this.userStorage.has(t)||this.userStorage.set(t,new Map),this.userStorage.get(t).set(this.getKey(e,a),l)),this.cleanupOldEntries(l,i.window);let u=Date.now(),g=l.reduce((f,A)=>f+A.count,0);if(l.push({timestamp:u,count:1}),g>=i.max){let A=l.reduce((w,U)=>w.timestamp<U.timestamp?w:U,l[0]).timestamp+i.window;return {allowed:false,remaining:0,resetAt:A,retryAfter:Math.ceil((A-u)/1e3)}}return {allowed:true,remaining:i.max-g-1,resetAt:u+i.window}}async reset(e,t){let a=this.getKey(e,t);this.storage.delete(a);}async resetUser(e,t,a){let i=this.userStorage.get(t);if(i){let c=this.getKey(e,a);i.delete(c);}}async getStatus(e,t){let a=this.limits[e]||this.limits["api:general"],i=this.getKey(e,t),c=this.storage.get(i);c||(c=[],this.storage.set(i,c)),this.cleanupOldEntries(c,a.window);let l=Date.now(),u=c.reduce((g,f)=>g+f.count,0);return {count:u,limit:a.max,remaining:Math.max(0,a.max-u),resetAt:l+a.window}}setLimit(e,t){this.limits[e]=t;}setUserLimit(e,t){this.userLimits[e]=t;}},ur={"auth:login":{window:9e5,max:5},"auth:register":{window:36e5,max:3},"auth:forgot":{window:36e5,max:3},"auth:reset":{window:36e5,max:5},"auth:verify":{window:36e5,max:5},"api:general":{window:6e4,max:100},"api:authenticated":{window:6e4,max:200}};var et={retentionDays:30};var Ct=class{redis;prefix;retentionDays;constructor(e,t=30,a="kyro:audit:"){this.redis=e,this.prefix=a,this.retentionDays=t;}async log(e){let t=sr.randomBytes(16).toString("hex"),a=new Date,i={...e,id:t,timestamp:a},c=this.getKeyForDate(a),l=`${this.prefix}log:${t}`;await this.redis.hset(l,this.serializeLog(i)),await this.redis.expire(l,this.retentionDays*24*60*60+3600),await this.redis.zadd(c,a.getTime(),t),await this.redis.expire(c,this.retentionDays*24*60*60+3600);let u=e.userId?`${this.prefix}user:${e.userId}`:null;return u&&(await this.redis.zadd(u,a.getTime(),t),await this.redis.expire(u,this.retentionDays*24*60*60+3600)),t}async get(e){let t=`${this.prefix}log:${e}`,a=await this.redis.hgetall(t);return !a||Object.keys(a).length===0?null:this.deserializeLog(a)}async query(e={}){let{limit:t=50,offset:a=0}=e,i=[];if(e.userId)i.push(`${this.prefix}user:${e.userId}`);else if(e.startDate||e.endDate)i=this.getKeysForDateRange(e.startDate,e.endDate);else {let g=new Date;i=this.getKeysForDateRange(new Date(g.getTime()-this.retentionDays*24*60*60*1e3),g);}let c=[];for(let g of i){let f=await this.redis.zrange(g,0,-1,"WITHSCORES");for(let A=0;A<f.length;A+=2)c.push([f[A],parseInt(f[A+1],10)]);}c.sort((g,f)=>f[1]-g[1]);let l=c.length;c=c.slice(a,a+t);let u=[];for(let[g]of c){let f=await this.get(g);f&&this.matchesFilter(f,e)&&u.push(f);}return {logs:u,total:l}}async getRecent(e=50){let t=[],a=new Date,i=this.getKeysForDateRange(new Date(a.getTime()-10080*60*1e3),a),c=[];for(let l of i){let u=await this.redis.zrange(l,0,-1,"WITHSCORES");for(let g=0;g<u.length;g+=2)c.push([u[g],parseInt(u[g+1],10)]);}c.sort((l,u)=>u[1]-l[1]);for(let[l]of c.slice(0,e)){let u=await this.get(l);u&&t.push(u);}return t}async getUserActivity(e,t=50){let a=`${this.prefix}user:${e}`,i=await this.redis.zrange(a,0,t-1),c=[];for(let l of i){let u=await this.get(l);u&&c.push(u);}return c}async getStats(e,t){let a=this.getKeysForDateRange(e||new Date(Date.now()-2592e6),t||new Date),i={},c=0,l=0,u=0,g=new Set;for(let f of a){let A=await this.redis.zrange(f,0,-1);for(let w of A){let U=await this.get(w);U&&(c++,i[U.action]=(i[U.action]||0)+1,U.success&&u++,U.action==="login_failed"&&l++,U.userId&&g.add(U.userId));}}return {totalEvents:c,byAction:i,successRate:c>0?u/c:1,failedLogins:l,uniqueUsers:g}}async cleanup(){let e=Date.now()-this.retentionDays*24*60*60*1e3,t=await this.redis.keys(`${this.prefix}date:*`),a=0;for(let i of t){let c=await this.redis.zrangebyscore(i,0,e);for(let l of c)await this.redis.del(`${this.prefix}log:${l}`),a++;await this.redis.zremrangebyscore(i,0,e);}return a}getKeyForDate(e){let t=e.getFullYear(),a=String(e.getMonth()+1).padStart(2,"0"),i=String(e.getDate()).padStart(2,"0");return `${this.prefix}date:${t}-${a}-${i}`}getKeysForDateRange(e,t){let a=[],i=e||new Date(Date.now()-this.retentionDays*24*60*60*1e3),c=t||new Date,l=new Date(i);for(;l<=c;)a.push(this.getKeyForDate(l)),l.setDate(l.getDate()+1);return a}matchesFilter(e,t){return !(t.action&&!(Array.isArray(t.action)?t.action:[t.action]).includes(e.action)||t.resource&&e.resource!==t.resource||t.resourceId&&e.resourceId!==t.resourceId||t.success!==void 0&&e.success!==t.success)}serializeLog(e){let t={id:e.id,timestamp:new Date(e.timestamp).toISOString(),action:e.action,resource:e.resource,success:e.success?"1":"0"};return e.userId&&(t.userId=e.userId),e.userEmail&&(t.userEmail=e.userEmail),e.role&&(t.role=e.role),e.resourceId&&(t.resourceId=e.resourceId),e.ipAddress&&(t.ipAddress=e.ipAddress),e.userAgent&&(t.userAgent=e.userAgent),e.error&&(t.error=e.error),e.changes&&(t.changes=JSON.stringify(e.changes)),e.metadata&&(t.metadata=JSON.stringify(e.metadata)),t}deserializeLog(e){return {id:e.id,timestamp:new Date(e.timestamp),action:e.action,userId:e.userId,userEmail:e.userEmail,role:e.role,resource:e.resource,resourceId:e.resourceId,ipAddress:e.ipAddress,userAgent:e.userAgent,success:e.success==="1",error:e.error,changes:e.changes?JSON.parse(e.changes):void 0,metadata:e.metadata?JSON.parse(e.metadata):void 0}}};function as(d){return {ipAddress:d.headers.get("x-forwarded-for")?.split(",")[0]?.trim()||d.headers.get("x-real-ip")||"unknown",userAgent:d.headers.get("user-agent")||"unknown"}}var $t=class{logs=[];retentionDays;constructor(e=et.retentionDays){this.retentionDays=e;}async log(e){let t=sr.randomBytes(16).toString("hex"),i={...e,id:t,timestamp:new Date};return this.logs.push(i),this.cleanupOldLogs(),t}async get(e){return this.logs.find(t=>t.id===e)||null}async query(e={}){let{limit:t=50,offset:a=0}=e,i=[...this.logs];if(e.userId&&(i=i.filter(f=>f.userId===e.userId)),e.action){let f=Array.isArray(e.action)?e.action:[e.action];i=i.filter(A=>f.includes(A.action));}e.resource&&(i=i.filter(f=>f.resource===e.resource)),e.resourceId&&(i=i.filter(f=>f.resourceId===e.resourceId)),e.success!==void 0&&(i=i.filter(f=>f.success===e.success));let c=e.startDate,l=e.endDate;c!==void 0&&(i=i.filter(f=>f.timestamp>=c)),l!==void 0&&(i=i.filter(f=>f.timestamp<=l)),i.sort((f,A)=>A.timestamp.getTime()-f.timestamp.getTime());let u=i.length;return {logs:i.slice(a,a+t),total:u}}async getRecent(e=50){let t=new Date(Date.now()-6048e5);return this.logs.filter(i=>i.timestamp>=t).sort((i,c)=>c.timestamp.getTime()-i.timestamp.getTime()).slice(0,e)}async getUserActivity(e,t=50){return this.logs.filter(i=>i.userId===e).sort((i,c)=>c.timestamp.getTime()-i.timestamp.getTime()).slice(0,t)}async getStats(e,t){let a=e||new Date(Date.now()-2592e6),i=t||new Date,c=this.logs.filter(w=>w.timestamp>=a&&w.timestamp<=i),l={},u=0,g=0,f=0,A=new Set;for(let w of c){u++;let U=w.action;l[U]=(l[U]||0)+1,w.success&&f++,w.action==="login_failed"&&g++,w.userId&&A.add(w.userId);}return {totalEvents:u,byAction:l,successRate:u>0?f/u:1,failedLogins:g,uniqueUsers:A}}async cleanup(){let e=new Date(Date.now()-this.retentionDays*24*60*60*1e3),t=this.logs.length;return this.logs=this.logs.filter(a=>a.timestamp>=e),t-this.logs.length}cleanupOldLogs(){let e=new Date(Date.now()-this.retentionDays*24*60*60*1e3);this.logs.length;this.logs=this.logs.filter(a=>a.timestamp>=e);}};Ue();var ke=class{authAdapter;email;passwordPolicy;lockout;rateLimiter;auditLogger;baseUrl;emailVerificationRequired;constructor(e){this.authAdapter=e.redis,this.email=e.email,this.passwordPolicy=e.passwordPolicy||new chunkAJAZ7D3W_cjs.c,this.lockout=e.lockout,this.rateLimiter=e.rateLimiter,this.auditLogger=e.auditLogger,this.baseUrl=e.baseUrl||"http://localhost:3000",this.emailVerificationRequired=e.emailVerificationRequired??true;}async register(e){let{ipAddress:t,userAgent:a}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let i=await this.rateLimiter.check("auth:register",t);if(!i.allowed)return this.rateLimitResponse(i)}try{let i=await e.json();if(!i.email||!i.password)return this.errorResponse("Email and password are required",400);if(i.password!==i.confirmPassword)return this.errorResponse("Passwords do not match",400);let c=this.passwordPolicy.validate(i.password);if(!c.valid)return this.errorResponse(c.errors.join(". "),400);if(await this.authAdapter.findUserByEmail(i.email))return this.errorResponse("Email already registered",400);let u=await this.authAdapter.createUser({email:i.email,password:i.password,role:i.role||"customer",tenantId:i.tenantId});if(this.emailVerificationRequired&&this.email){let g=sr.randomBytes(32).toString("hex"),f=`${this.baseUrl}/api/auth/verify?token=${g}`;await this.authAdapter.createSession(u.id,{ipAddress:t,userAgent:a});let A=this.email.getTemplates().verifyEmail(f,i.email);await this.email.send({to:i.email,...A});}return this.auditLogger&&await this.auditLogger.log({action:"register",userId:u.id,userEmail:u.email,resource:"auth",ipAddress:t,userAgent:a,success:!0}),this.jsonResponse({success:!0,message:"Registration successful",user:this.sanitizeUser(u),requiresVerification:this.emailVerificationRequired&&!!this.email},201)}catch(i){return console.error("[AuthRoutes.register] Registration error:",i),this.errorResponse("Registration failed",500)}}async login(e){let{ipAddress:t,userAgent:a}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let i=await this.rateLimiter.check("auth:login",t);if(!i.allowed)return this.rateLimitResponse(i)}try{let i=await e.json();if(!i.email||!i.password)return this.errorResponse("Email and password are required",400);let c=await this.authAdapter.findUserByEmail(i.email);if(!c)return await this.recordFailedLogin(t,a),this.errorResponse("Invalid credentials",401);if(c.locked)return this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:c.id,userEmail:c.email,resource:"auth",ipAddress:t,userAgent:a,success:!1,error:"Account locked"}),this.errorResponse("Account locked. Contact an administrator.",403);if(this.lockout){let A=await this.lockout.checkLockout(c.id);if(A.locked)return this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:c.id,userEmail:c.email,resource:"auth",ipAddress:t,userAgent:a,success:!1,error:"Account locked"}),this.errorResponse(`Account locked. Try again in ${Math.ceil((A.lockedUntil.getTime()-Date.now())/6e4)} minutes`,423)}if(!await this.authAdapter.verifyPassword(i.email,i.password))return await this.recordFailedLogin(t,a,c.id,c.email),this.errorResponse("Invalid credentials",401);this.lockout&&await this.lockout.resetAttempts(c.id),this.auditLogger&&await this.auditLogger.log({action:"login",userId:c.id,userEmail:c.email,role:c.role,resource:"auth",ipAddress:t,userAgent:a,success:!0}),await this.authAdapter.updateUser(c.id,{lastLogin:new Date().toISOString()});let u=await Ze({id:c.id,email:c.email,role:c.role,tenantId:c.tenantId}),g={success:!0,user:this.sanitizeUser(c)},f=this.jsonResponse(g);return Ge(f,u)}catch(i){return console.error("[Auth] Login error:",i),this.errorResponse("Login failed",500)}}async logout(e){let t=G(e);if(!t)return this.errorResponse("No session to logout",401);let{ipAddress:a,userAgent:i}=chunkHVXO3OFB_cjs.a(e);try{let c=await V(e);c&&(await he(t),this.auditLogger&&await this.auditLogger.log({action:"logout",userId:c.userId,userEmail:c.email,resource:"auth",ipAddress:a,userAgent:i,success:!0}));let l=this.jsonResponse({success:!0,message:"Logged out successfully"});return Ye(l)}catch{return this.errorResponse("Logout failed",500)}}async refresh(e){try{let t=G(e);if(!t)return this.errorResponse("Not authenticated",401);let a=await Pe(t,e);return a?this.jsonResponse({success:!0,expiresAt:a.expiresAt}):this.errorResponse("Session not found",404)}catch(t){return console.error("[Auth] Session refresh error:",t),this.errorResponse("Session refresh failed",500)}}async me(e){let t=await V(e);return t?this.jsonResponse({success:true,user:{id:t.userId,email:t.email,role:t.role,tenantId:t.tenantId}}):this.errorResponse("Not authenticated",401)}async changePassword(e){let t=await V(e);if(!t)return this.errorResponse("Not authenticated",401);let{ipAddress:a,userAgent:i}=chunkHVXO3OFB_cjs.a(e);try{let c=await e.json(),{currentPassword:l,newPassword:u,confirmPassword:g}=c;if(!l||!u)return this.errorResponse("Current and new password required",400);if(u!==g)return this.errorResponse("Passwords do not match",400);let f=this.passwordPolicy.validate(u);if(!f.valid)return this.errorResponse(f.errors.join(". "),400);let A=await this.authAdapter.findUserById(t.userId);if(!A)return this.errorResponse("User not found",404);if(!(A.passwordHash?await this.authAdapter.verifyPassword(l,A.passwordHash):!1))return this.errorResponse("Current password is incorrect",401);let U=await this.authAdapter.getPasswordHistory?.(A.id,5);if(await this.authAdapter.isPasswordInHistory?.(u,A.id,5))return this.errorResponse("Password was recently used. Please choose a different password",400);let k=await this.authAdapter.hashPassword(u);if(A.passwordHash&&await this.authAdapter.addPasswordToHistory?.(A.id,A.passwordHash),await this.authAdapter.updateUser(A.id,{passwordHash:k}),await this.authAdapter.deleteUserSessions(A.id),this.email&&this.email.getTemplates){let N=this.email.getTemplates().passwordChanged(A.email);await this.email.send({to:A.email,...N});}return this.auditLogger&&await this.auditLogger.log({action:"password_change",userId:A.id,userEmail:A.email,resource:"auth",ipAddress:a,userAgent:i,success:!0}),this.jsonResponse({success:!0,message:"Password changed successfully"})}catch{return this.errorResponse("Password change failed",500)}}async forgotPassword(e){let{ipAddress:t,userAgent:a}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let i=await this.rateLimiter.check("auth:forgot",t);if(!i.allowed)return this.rateLimitResponse(i)}try{let i=await e.json(),{email:c}=i;if(!c)return this.errorResponse("Email required",400);let l=await this.authAdapter.findUserByEmail(c);if(!l)return this.jsonResponse({success:!0,message:"If the email exists, a reset link has been sent"});if(this.email){let u=sr.randomBytes(32).toString("hex"),g=`${this.baseUrl}/api/auth/reset-password?token=${u}`,f=this.email.getTemplates().resetPassword(g,l.email);await this.email.send({to:l.email,...f});}return this.auditLogger&&await this.auditLogger.log({action:"password_reset",userId:l.id,userEmail:l.email,resource:"auth",ipAddress:t,userAgent:a,success:!0}),this.jsonResponse({success:!0,message:"If the email exists, a reset link has been sent"})}catch{return this.errorResponse("Password reset request failed",500)}}async verifyEmail(e){if(!new URL(e.url).searchParams.get("token"))return this.errorResponse("Verification token required",400);try{return this.jsonResponse({success:!0,message:"Email verified"})}catch{return this.errorResponse("Email verification failed",500)}}async recordFailedLogin(e,t,a,i){this.lockout&&await this.lockout.recordFailedAttempt(a||e),this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:a,userEmail:i,resource:"auth",ipAddress:e,userAgent:t,success:false,error:"Invalid credentials"});}sanitizeUser(e){let{passwordHash:t,...a}=e;return a}jsonResponse(e,t=200){return new Response(JSON.stringify(e),{status:t,headers:{"Content-Type":"application/json","Cache-Control":"no-store, no-cache, must-revalidate, max-age=0"}})}async listSessions(e){let t=await V(e);if(!t)return this.errorResponse("Not authenticated",401);try{let a=await ye(t.userId,G(e)??void 0);return this.jsonResponse({sessions:a})}catch(a){return console.error("[AuthRoutes.listSessions] Error:",a),this.errorResponse("Failed to list sessions",500)}}async revokeSession(e,t){let a=await V(e);if(!a)return this.errorResponse("Not authenticated",401);try{let c=(await ye(a.userId)).find(l=>l.id===t);return c?c.currentSession?this.errorResponse("Cannot revoke current session",400):(await he(t),this.jsonResponse({success:!0,message:"Session revoked"})):this.errorResponse("Session not found",404)}catch(i){return console.error("[AuthRoutes.revokeSession] Error:",i),this.errorResponse("Failed to revoke session",500)}}async revokeOtherSessions(e){let t=await V(e);if(!t)return this.errorResponse("Not authenticated",401);try{let a=await ye(t.userId),i=G(e);for(let c of a)c.currentSession||await he(c.id);return this.jsonResponse({success:!0,message:"Other sessions revoked"})}catch(a){return console.error("[AuthRoutes.revokeOtherSessions] Error:",a),this.errorResponse("Failed to revoke sessions",500)}}async renameSession(e,t){let a=await V(e);if(!a)return this.errorResponse("Not authenticated",401);try{if(!(await ye(a.userId)).find(g=>g.id===t))return this.errorResponse("Session not found",404);let l=await e.json(),{name:u}=l;return !u||typeof u!="string"||u.trim().length===0?this.errorResponse("Invalid session name",400):(await Qe(t,u.trim()),this.jsonResponse({success:!0,message:"Session renamed"}))}catch(i){return console.error("[AuthRoutes.renameSession] Error:",i),this.errorResponse("Failed to rename session",500)}}async refreshSession(e){let t=G(e);if(!t)return this.errorResponse("No session",401);try{let a=await(Ue(),chunkAHSFSERC_cjs.c(kt)).refreshSession(t,e);return a?this.jsonResponse({success:!0,expiresAt:a.expiresAt}):this.errorResponse("Session not found",404)}catch(a){return console.error("[AuthRoutes.refreshSession] Error:",a),this.errorResponse("Failed to refresh session",500)}}errorResponse(e,t){return new Response(JSON.stringify({success:false,error:e}),{status:t,headers:{"Content-Type":"application/json"}})}async rateLimitResponse(e){return new Response(JSON.stringify({success:false,error:"Too many requests",retryAfter:e.retryAfter}),{status:429,headers:{"Content-Type":"application/json","Retry-After":String(e.retryAfter||60)}})}};function pe(d){let{uploadDir:e=Ce.join(Ir__default.default.cwd(),"public","uploads"),baseUrl:t="/uploads"}=d;async function a(l){fs.existsSync(l)||await promises.mkdir(l,{recursive:true});}function i(l){let u=Ce.extname(l).toLowerCase();return {".jpg":"image/jpeg",".jpeg":"image/jpeg",".png":"image/png",".gif":"image/gif",".webp":"image/webp",".avif":"image/avif",".svg":"image/svg+xml",".mp4":"video/mp4",".webm":"video/webm",".mov":"video/quicktime",".avi":"video/x-msvideo",".mp3":"audio/mpeg",".wav":"audio/wav",".ogg":"audio/ogg",".pdf":"application/pdf",".doc":"application/msword",".docx":"application/vnd.openxmlformats-officedocument.wordprocessingml.document",".xls":"application/vnd.ms-excel",".xlsx":"application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",".zip":"application/zip",".tar":"application/x-tar",".gz":"application/gzip",".rar":"application/vnd.rar",".7z":"application/x-7z-compressed"}[u]||"application/octet-stream"}async function c(l){try{let u=l.toString("hex",0,8);if(u.startsWith("89504e47")){let g=l.readUInt32BE(16),f=l.readUInt32BE(20);return {width:g,height:f}}if(u.startsWith("ffd8")){let g=2;for(;g<l.length&&l[g]===255;){let f=l[g+1];if(f===192||f===194){let A=l.readUInt16BE(g+5);return {width:l.readUInt16BE(g+7),height:A}}g+=2+l.readUInt16BE(g+2);}}}catch{}return {}}return se({name:"local",displayName:"Local Storage",supportsDynamicResize:true,async upload(l,u){await a(e);let g=Buffer.from(await l.arrayBuffer()),f=sr.createHash("md5").update(g).digest("hex"),A=Ce.extname(l.name),w=u?.filename||`${f}${A}`,U=u?.folder||"",T=U?Ce.join(e,U):e;await a(T);let k=Ce.join(T,w);await promises.writeFile(k,g);let N=l.type.startsWith("image/")?await c(g):{},M=t||"/uploads",ae=U?`/${U}/${w}`:`/${w}`,C=M+ae;return {id:f,filename:w,originalName:l.name,mimeType:l.type||i(l.name),size:g.length,url:C,thumbnailUrl:l.type.startsWith("image/")?C:void 0,folder:U||void 0,provider:"local",metadata:{...N,...u?.metadata},createdAt:new Date().toISOString()}},async uploadFromUrl(l,u){let g=await fetch(l);if(!g.ok)throw new Error(`Failed to fetch file: ${g.statusText}`);let f=await g.blob(),A=g.headers.get("content-disposition"),w=u?.filename;if(!w&&A){let T=A.match(/filename[^;=\n]*=((['"]).*?\2|[^;\n]*)/);T&&(w=T[1].replace(/['"]/g,""));}w||(w=Ce.basename(new URL(l).pathname));let U=new File([f],w,{type:f.type||i(w)});return this.upload(U,u)},async delete(l){let u=Ce.join(e,l.replace(t+"/",""));try{await promises.unlink(u);}catch{}},async rename(l,u){let g=Ce.join(e,l.replace(t+"/","")),f=Ce.join(e,u);return await promises.rename(g,f),`${t}/${u}`},async list(l){let u=l?Ce.join(e,l):e;if(!fs.existsSync(u))return [];let g=[],f=await promises.readdir(u,{withFileTypes:true});for(let A of f)if(A.isFile()){let w=Ce.join(u,A.name),U=await promises.stat(w),T=`${t}${l?`/${l}`:""}/${A.name}`;g.push({id:sr.createHash("md5").update(A.name).digest("hex"),filename:A.name,originalName:A.name,mimeType:i(A.name),size:U.size,url:T,provider:"local",createdAt:U.birthtime.toISOString()});}return g},async exists(l){let u=Ce.join(e,l.replace(t+"/",""));return fs.existsSync(u)},async createFolder(l){let u=Ce.join(e,l);await promises.mkdir(u,{recursive:true});},async deleteFolder(l){let u=Ce.join(e,l);if(fs.existsSync(u)){let{rm:g}=await import('fs/promises');await g(u,{recursive:true,force:true});}}})}function tt(d){let e=(t,a)=>{if(!d.signKey)return t;let i=sr.createHmac("sha256",d.signKey).update(t+a.toString()).digest("hex");return a.set("s",i),t};return {name:"imgix",displayName:"Imgix",supportsDynamicResize:true,async upload(t,a){throw new Error("Imgix is a transformation service. Use another provider for uploads.")},async uploadFromUrl(t,a){let i=a?.filename||t.split("/").pop()||"file",c=await fetch(t);if(!c.ok)throw new Error(`Failed to fetch: ${c.statusText}`);let l=await c.blob();new File([l],i,{type:l.type});return {id:Buffer.from(t).toString("base64").slice(0,20),filename:i,originalName:i,mimeType:l.type,size:l.size,url:this.getImageUrl(t),thumbnailUrl:this.getImageUrl(t,{width:200,height:200,fit:"crop"}),provider:"imgix",createdAt:new Date().toISOString()}},async delete(t){},async rename(t,a){return `https://${d.domain}/${a}`},getImageUrl(t,a){let i=new URL(t),c=new URLSearchParams(i.search);d.defaultParameters&&Object.entries(d.defaultParameters).forEach(([u,g])=>{c.has(u)||c.set(u,g);}),a&&(a.width&&c.set("w",String(a.width)),a.height&&c.set("h",String(a.height)),a.quality&&c.set("q",String(a.quality)),a.format&&c.set("fm",a.format),a.fit&&c.set("fit",a.fit),a.blur&&c.set("blur",String(a.blur)),a.sharpen&&c.set("sharp",String(a.sharpen))),c.set("auto","compress,format");i.pathname+"?"+c.toString();return d.signKey&&(e(i.pathname+c.toString(),c)),`https://${d.domain}${i.pathname}${c.toString()?"?"+c.toString():""}`},async generateThumbnail(t){return this.getImageUrl(t.url,{width:200,height:200,fit:"crop"})},async list(){return []},async exists(t){try{return (await fetch(t,{method:"HEAD"})).ok}catch{return  false}},async createFolder(){},async deleteFolder(){}}}function Ee(d,e){return e.cdnUrl?`${e.cdnUrl.replace(/\/$/,"")}/${d}`:`https://${e.storageZone}.b-cdn.net/${d}`}function rt(d){return d.cdnUrl?d.cdnUrl.replace(/\/$/,"")+"/":`https://${d.storageZone}.b-cdn.net/`}function st(d){let e=`https://storage.bunnycdn.com/${d.storageZone}`,t=a=>`${d.prefix?`${d.prefix}/`:""}${a}`.replace(/\/+/g,"/");return se({name:"bunny",displayName:"Bunny.net Storage",supportsDynamicResize:true,async upload(a,i){let c=t(`${i?.folder?`${i.folder}/`:""}${i?.filename||a.name}`),l=Buffer.from(await a.arrayBuffer()),u=await fetch(`${e}/${c}`,{method:"PUT",headers:{AccessKey:d.apiKey,"Content-Type":a.type},body:l});if(!u.ok){let g=await u.text();throw new Error(`Bunny.net upload failed: ${u.status} ${g}`)}return {id:Buffer.from(c).toString("base64url"),filename:i?.filename||a.name,originalName:a.name,mimeType:a.type,size:l.length,url:Ee(c,d),thumbnailUrl:a.type.startsWith("image/")?Ee(c,d):void 0,folder:i?.folder,provider:"bunny",metadata:i?.metadata,createdAt:new Date().toISOString()}},async delete(a){let i=a.replace(rt(d),""),c=await fetch(`${e}/${i}`,{method:"DELETE",headers:{AccessKey:d.apiKey}});if(!c.ok&&c.status!==404){let l=await c.text();throw new Error(`Bunny.net delete failed: ${c.status} ${l}`)}},async rename(a,i){let c=a.replace(rt(d),""),l=d.prefix?`${d.prefix}/${i}`:i,u=await fetch(`${e}/${c}`,{method:"GET",headers:{AccessKey:d.apiKey}});if(!u.ok)throw new Error("Bunny.net rename failed: could not read old file");let g=await u.arrayBuffer();return await fetch(`${e}/${l}`,{method:"PUT",headers:{AccessKey:d.apiKey,"Content-Type":u.headers.get("Content-Type")||"application/octet-stream"},body:g}),await this.delete(a),Ee(l,d)},async list(a){let i=t(a||""),c=await fetch(`${e}/${i}`,{method:"GET",headers:{AccessKey:d.apiKey}});if(!c.ok){let u=await c.text();throw new Error(`Bunny.net list failed: ${c.status} ${u}`)}return (await c.json()).map(u=>({id:Buffer.from(u.ObjectName||"").toString("base64url"),filename:u.ObjectName?.split("/").pop()||"",originalName:u.ObjectName?.split("/").pop()||"",mimeType:"application/octet-stream",size:u.Length||0,url:Ee(u.ObjectName||"",d),provider:"bunny",createdAt:u.LastChanged||new Date().toISOString()}))},async exists(a){let i=a.replace(rt(d),"");return (await fetch(`${e}/${i}`,{method:"HEAD",headers:{AccessKey:d.apiKey}})).ok},async createFolder(a){let i=t(`${a}/`);await fetch(`${e}/${i}`,{method:"PUT",headers:{AccessKey:d.apiKey,"Content-Length":"0"},body:""});},async deleteFolder(a){let i=t(`${a}/`);await fetch(`${e}/${i}`,{method:"DELETE",headers:{AccessKey:d.apiKey}});}})}var nt=class{providers=new Map;providerToPlugin=new Map;disabledPlugins=new Set;constructor(){this.registerLocal(),this.registerImgix(),this.registerBunny();}registerLocal(){this.register({type:"local",displayName:"Local Server",configKey:"local",configFields:[{name:"uploadDir",type:"text",label:"Upload Directory",defaultValue:"./public/uploads"},{name:"baseUrl",type:"text",label:"Base URL",defaultValue:"/uploads"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>{let t=e?.local||e,a=(t?.uploadDir||"").trim(),i;a?Ce__default.default.isAbsolute(a)?i=a:a.includes("/")||a.includes("\\")?i=Ce__default.default.resolve(process.cwd(),a):i=Ce__default.default.join(process.cwd(),"public",a):i=Ce__default.default.join(process.cwd(),"public","uploads");let c=(t?.baseUrl||"").trim(),l;return c?l=c.startsWith("/")?c:`/${c}`:l="/uploads",{uploadDir:i,baseUrl:l}},factory:e=>pe(e)});}registerImgix(){this.register({type:"imgix",displayName:"Imgix",configKey:"imgix",configFields:[{name:"domain",type:"text",label:"Domain",required:true},{name:"signKey",type:"password",label:"Sign Key"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>e?.imgix||e,factory:e=>tt(e)});}registerBunny(){this.register({type:"bunny",displayName:"Bunny.net",configKey:"bunny",configFields:[{name:"storageZone",type:"text",label:"Storage Zone",required:true},{name:"apiKey",type:"password",label:"API Key",required:true},{name:"cdnUrl",type:"text",label:"CDN URL"},{name:"prefix",type:"text",label:"Path Prefix"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>e?.bunny||e,factory:e=>st(e)});}register(e){if(this.providers.has(e.type)){console.warn(`[StorageRegistry] Provider "${e.type}" already registered, skipping`);return}e.pluginName&&this.providerToPlugin.set(e.type,e.pluginName),this.providers.set(e.type,e);}unregister(e){this.providers.delete(e),this.providerToPlugin.delete(e);}get(e){return this.providers.get(e)}getAll(){return Array.from(this.providers.values())}getAllAvailable(e){let t=this.getAll();return e?t.filter(a=>a.pluginName?e(a.pluginName):true):t}has(e){return this.providers.has(e)}async resolve(e,t){let a=this.providers.get(e);if(!a)throw new Error(`Unknown storage provider type: "${e}". Is the plugin that provides it enabled?`);if(a.pluginName&&this.disabledPlugins.has(a.pluginName))throw new Error(`Storage provider "${e}" is not available (plugin "${a.pluginName}" is disabled)`);let i=a.configKey||e,c=a.extractConfig(t,i);return a.factory(c)}async resolveWithConfig(e,t){let a=this.providers.get(e);if(!a)throw new Error(`Unknown storage provider type: "${e}". Is the plugin that provides it enabled?`);if(a.pluginName&&this.disabledPlugins.has(a.pluginName))throw new Error(`Storage provider "${e}" is not available (plugin "${a.pluginName}" is disabled)`);let i=a.extractRawConfig(t);return a.factory(i)}getProviderPluginName(e){return this.providerToPlugin.get(e)}getAllPluginNames(){return Array.from(new Set(this.providerToPlugin.values()))}setPluginEnabled(e,t){t?this.disabledPlugins.delete(e):this.disabledPlugins.add(e);}isPluginEnabled(e){return !this.disabledPlugins.has(e)}},at=null;function it(){return at||(at=new nt),at}function Kt(d){if(!d)return "";if(d.startsWith("pub-"))return d;let e=d.match(/pub-[a-zA-Z0-9]+/i);return e?e[0]:""}function Rr(d,e){let t=d.startsWith("/")?d.slice(1):d;if(e.cdnUrl)return `${e.cdnUrl.replace(/\/$/,"")}/${t}`;switch(e.provider){case "r2":{let a=Kt(e.publicDevUrl);return a?`https://${a}.r2.dev/${t}`:`https://${e.bucket}.${e.accountId}.r2.cloudflarestorage.com/${t}`}case "gcs":return `https://storage.googleapis.com/${e.bucket}/${t}`;case "digitalocean":return `https://${e.bucket}.${e.region}.cdn.digitaloceanspaces.com/${t}`;case "backblaze":return `https://${e.bucket}.s3.backblazeb2.com/${t}`;case "wasabi":return `https://${e.bucket}.s3.wasabisys.com/${t}`;default:return `https://${e.bucket}.s3.${e.region}.amazonaws.com/${t}`}}function lt(d){if(d.cdnUrl)return d.cdnUrl.replace(/\/$/,"")+"/";switch(d.provider){case "r2":{let e=Kt(d.publicDevUrl);return e?`https://${e}.r2.dev/`:`https://${d.bucket}.${d.accountId}.r2.cloudflarestorage.com/`}case "gcs":return `https://storage.googleapis.com/${d.bucket}/`;case "digitalocean":return `https://${d.bucket}.${d.region}.cdn.digitaloceanspaces.com/`;case "backblaze":return `https://${d.bucket}.s3.backblazeb2.com/`;case "wasabi":return `https://${d.bucket}.s3.wasabisys.com/`;default:return `https://${d.bucket}.s3.${d.region}.amazonaws.com/`}}function Tr(d){switch(d){case "r2":return "Cloudflare R2";case "gcs":return "Google Cloud Storage";case "digitalocean":return "DigitalOcean Spaces";case "backblaze":return "Backblaze B2";case "wasabi":return "Wasabi";default:return "AWS S3"}}function Pr(d){let e=new clientS3.S3Client({region:d.region||"auto",endpoint:d.endpoint,credentials:{accessKeyId:d.accessKeyId,secretAccessKey:d.secretAccessKey},forcePathStyle:true,tls:true,...d.provider==="r2"&&{requestHandler:new nodeHttpHandler.NodeHttpHandler({connectionTimeout:1e4,socketTimeout:1e4})}}),t=i=>`${d.prefix?`${d.prefix}/`:""}${i}`.replace(/\/+/g,"/"),a=i=>Rr(i,d);return se({name:d.provider,displayName:Tr(d.provider),supportsDynamicResize:true,async upload(i,c){let l=t(`${c?.folder?`${c.folder}/`:""}${c?.filename||i.name}`),u=Buffer.from(await i.arrayBuffer());await e.send(new clientS3.PutObjectCommand({Bucket:d.bucket,Key:l,Body:u,ContentType:i.type,Metadata:c?.metadata}));let g=await e.send(new clientS3.HeadObjectCommand({Bucket:d.bucket,Key:l}));return {id:Buffer.from(l).toString("base64url"),filename:c?.filename||i.name,originalName:i.name,mimeType:i.type,size:u.length,url:a(l),thumbnailUrl:i.type.startsWith("image/")?a(l):void 0,folder:c?.folder,provider:d.provider,metadata:{...c?.metadata,etag:g.ETag},createdAt:new Date().toISOString()}},async delete(i){let c=i.replace(lt(d),"");await e.send(new clientS3.DeleteObjectCommand({Bucket:d.bucket,Key:c}));},async rename(i,c){let l=i.replace(lt(d),""),u=d.prefix?`${d.prefix}/${c}`:c;return await e.send(new clientS3.CopyObjectCommand({Bucket:d.bucket,CopySource:`${d.bucket}/${l}`,Key:u})),await e.send(new clientS3.DeleteObjectCommand({Bucket:d.bucket,Key:l})),a(u)},async list(i){let c=t(i||"");return ((await e.send(new clientS3.ListObjectsV2Command({Bucket:d.bucket,Prefix:c}))).Contents||[]).map(u=>({id:Buffer.from(u.Key||"").toString("base64url"),filename:u.Key?.split("/").pop()||"",originalName:u.Key?.split("/").pop()||"",mimeType:"application/octet-stream",size:u.Size||0,url:a(u.Key||""),provider:d.provider,createdAt:u.LastModified?.toISOString()||new Date().toISOString()}))},async exists(i){try{let c=i.replace(lt(d),"");return await e.send(new clientS3.HeadObjectCommand({Bucket:d.bucket,Key:c})),!0}catch{return  false}},async createFolder(i){let c=t(`${i}/`);await e.send(new clientS3.PutObjectCommand({Bucket:d.bucket,Key:c,Body:""}));},async deleteFolder(i){let c=t(`${i}/`),l;do{let u=await e.send(new clientS3.ListObjectsV2Command({Bucket:d.bucket,Prefix:c,ContinuationToken:l}));if(u.Contents?.length){let g=u.Contents.map(f=>({Key:f.Key}));await e.send(new clientS3.DeleteObjectsCommand({Bucket:d.bucket,Delete:{Objects:g}}));}l=u.IsTruncated?u.NextContinuationToken:void 0;}while(l);await e.send(new clientS3.DeleteObjectCommand({Bucket:d.bucket,Key:c}));}})}function Ur(d){let e=()=>`https://api.cloudinary.com/v1_1/${d.cloudName}/upload`,t=async a=>{let i=await import('crypto'),c=Object.keys(a).sort().map(l=>`${l}=${a[l]}`).join("&");return i.createHash("sha256").update(c+d.apiSecret).digest("hex")};return {name:"cloudinary",displayName:"Cloudinary",supportsDynamicResize:true,async upload(a,i){let c=new FormData;if(c.append("file",a),d.uploadPreset)c.append("upload_preset",d.uploadPreset);else {let g=Math.round(Date.now()/1e3),f={timestamp:String(g)};(i?.folder||d.folder)&&(f.folder=i?.folder||d.folder||"");let A=await t(f);c.append("timestamp",String(g)),c.append("signature",A),c.append("api_key",d.apiKey);}(i?.folder||d.folder)&&c.append("folder",i?.folder||d.folder||"");let l=await fetch(e(),{method:"POST",body:c});if(!l.ok){let g=await l.json();throw new Error(`Cloudinary upload failed: ${g.error?.message||l.statusText}`)}let u=await l.json();return {id:u.public_id,filename:`${u.public_id}.${u.format}`,originalName:u.original_filename||a.name,mimeType:a.type||`image/${u.format}`,size:u.bytes,url:u.secure_url,thumbnailUrl:this.getImageUrl(u.secure_url,{width:200,height:200,fit:"crop"}),width:u.width,height:u.height,folder:i?.folder||d.folder,provider:"cloudinary",createdAt:new Date().toISOString()}},async uploadFromUrl(a,i){let c=new FormData;c.append("file",a),c.append("upload_preset","ml_default"),(i?.folder||d.folder)&&c.append("folder",i?.folder||d.folder||"");let l=await fetch(e(),{method:"POST",body:c});if(!l.ok)throw new Error("Cloudinary upload failed");let u=await l.json();return {id:u.public_id,filename:`${u.public_id}.${u.format}`,originalName:u.original_filename||a.split("/").pop()||"file",mimeType:`image/${u.format}`,size:u.bytes,url:u.secure_url,thumbnailUrl:this.getImageUrl(u.secure_url,{width:200,height:200,fit:"crop"}),width:u.width,height:u.height,provider:"cloudinary",createdAt:new Date().toISOString()}},async delete(a){try{let i=a.split("/image/upload/");if(i.length!==2){console.warn("[Cloudinary delete] Could not parse URL:",a);return}let c=i[1].replace(/^v\d+\//,"").replace(/\.[^.]+$/,""),l=Math.round(Date.now()/1e3),u={timestamp:String(l),public_id:c},g=Object.keys(u).sort().map(k=>`${k}=${u[k]}`).join("&"),A=(await import('crypto')).createHash("sha256").update(g+d.apiSecret).digest("hex"),w=`https://api.cloudinary.com/v1_1/${d.cloudName}/image/destroy`,U=new FormData;U.append("public_id",c),U.append("timestamp",String(l)),U.append("signature",A),U.append("api_key",d.apiKey);let T=await fetch(w,{method:"POST",body:U});if(!T.ok){let k=await T.json();console.warn("[Cloudinary delete] Failed:",k);}}catch(i){console.warn("[Cloudinary delete] Error:",i.message);}},async rename(a,i){let c="",l=i.replace(/\.[^.]+$/,""),u="";try{let g=a.split("/image/upload/");if(g.length!==2)return console.warn("[Cloudinary rename] Could not parse old URL:",a),a;let f=g[1],A=f.match(/^(v\d+)\//);c=A?A[1]:"";let w=f.replace(/^v\d+\//,"").replace(/\.[^.]+$/,""),U=w.split("/");u=U.length>1?U.slice(0,-1).join("/"):"";let T=i.replace(/\.[^.]+$/,"");l=u?`${u}/${T}`:T;let k=Math.round(Date.now()/1e3),N={from_public_id:w,to_public_id:l,timestamp:String(k)},M=Object.keys(N).sort().map(D=>`${D}=${N[D]}`).join("&"),C=(await import('crypto')).createHash("sha256").update(M+d.apiSecret).digest("hex"),X=new FormData;X.append("from_public_id",w),X.append("to_public_id",l),X.append("timestamp",String(k)),X.append("signature",C),X.append("api_key",d.apiKey);let J=await fetch(`https://api.cloudinary.com/v1_1/${d.cloudName}/image/rename`,{method:"POST",body:X});if(J.ok)return (await J.json()).secure_url;{let D=await J.json();console.warn("[Cloudinary rename] Failed:",D);let Z=c?`/${c}/`:"/";return `https://res.cloudinary.com/${d.cloudName}/image/upload${Z}${l}.${i.split(".").pop()}`}}catch(g){console.warn("[Cloudinary rename] Error:",g.message);let f=c?`/${c}/`:"/";return `https://res.cloudinary.com/${d.cloudName}/image/upload${f}${l}.${i.split(".").pop()}`}},getImageUrl(a,i){if(!i)return a;let c=a.split("/upload/");if(c.length!==2)return a;let l=[];if(i.width&&l.push(`w_${i.width}`),i.height&&l.push(`h_${i.height}`),i.fit){let g={crop:"c_fill",clip:"c_fit",scale:"c_scale",fill:"c_fill"};l.push(g[i.fit]||"c_limit");}i.quality&&l.push(`q_${i.quality}`),i.format&&l.push(`f_${i.format}`);let u=l.join(",");return `${c[0]}/upload/${u}/${c[1]}`},async generateThumbnail(a){return this.getImageUrl(a.url,{width:200,height:200,fit:"crop"})},async list(){return []},async exists(a){return (await fetch(a,{method:"HEAD"})).ok},async createFolder(){},async deleteFolder(){}}}function qr(d){let e=null;async function t(){return e||(e=new basicFtp.Client(6e4,{allowSeparateTransferHost:true}),e.ftp.verbose=false,await e.access({host:d.host,port:d.port||21,user:d.user,password:d.password,secure:d.secure,secureOptions:{}})),e}let a=l=>`${d.prefix?`${d.prefix}/`:""}${l}`.replace(/\/+/g,"/"),i=l=>`${d.baseUrl.replace(/\/$/,"")}/${l}`,c=()=>d.baseUrl.replace(/\/$/,"")+"/";return se({name:d.type,displayName:d.type==="sftp"?"SFTP Storage":"FTP Storage",supportsDynamicResize:false,async upload(l,u){let g=await t(),f=a(`${u?.folder?`${u.folder}/`:""}${u?.filename||l.name}`),A=Buffer.from(await l.arrayBuffer()),w=f.split("/").slice(0,-1),U="";for(let k of w){U=U?`${U}/${k}`:k;try{await g.ensureDir(U);}catch{}}let T=stream.Readable.from(A);return await g.uploadFrom(T,f),{id:Buffer.from(f).toString("base64url"),filename:u?.filename||l.name,originalName:l.name,mimeType:l.type,size:A.length,url:i(f),thumbnailUrl:l.type.startsWith("image/")?i(f):void 0,folder:u?.folder,provider:d.type,metadata:u?.metadata,createdAt:new Date().toISOString()}},async delete(l){let u=await t(),g=l.replace(c(),"");await u.remove(g);},async rename(l,u){let g=await t(),f=l.replace(c(),""),A=d.prefix?`${d.prefix}/${u}`:u;return await g.rename(f,A),i(A)},async list(l){let u=await t(),g=a(l||""),f;try{f=await u.list(g);}catch{return []}return f.filter(A=>A.type===0).map(A=>({id:Buffer.from(`${g}/${A.name}`).toString("base64url"),filename:A.name,originalName:A.name,mimeType:"application/octet-stream",size:Number(A.size)||0,url:i(`${g}/${A.name}`.replace(/\/+/g,"/")),provider:d.type,createdAt:A.modifiedAt?A.modifiedAt.toISOString():new Date().toISOString()}))},async exists(l){let u=await t(),g=l.replace(c(),"");try{return await u.size(g),!0}catch{return  false}},async createFolder(l){let u=await t(),g=a(l);await u.ensureDir(g);},async deleteFolder(l){let u=await t(),g=a(l);await u.removeDir(g);}})}async function zt(d){let e=d.getStorageConfig(),t=it();try{return await t.resolve(e.type,e)}catch(a){return console.warn(`[resolveProvider] ${a.message} \u2014 falling back to local storage`),pe({uploadDir:Ce__default.default.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"})}}function se(d){return {async uploadFromUrl(e,t){let a=await fetch(e);if(!a.ok)throw new Error(`Failed to fetch: ${a.statusText}`);let i=await a.blob(),c=e.split("/").pop()||"file",l=new File([i],c,{type:i.type});return this.upload(l,t)},getImageUrl(e,t){if(!t||Object.keys(t).length===0)return e;let a=new URLSearchParams({url:e});return t.width&&a.set("w",String(t.width)),t.height&&a.set("h",String(t.height)),t.quality&&a.set("q",String(t.quality)),t.format&&a.set("f",t.format),`/api/media/resize?${a.toString()}`},async generateThumbnail(e){return this.getImageUrl(e.url,{width:400,height:400})},...d}}async function Wt(d){if(!d)return console.warn("[resolveProviderWithConfig] No config, using local"),pe({uploadDir:Ce__default.default.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"});let e=d.type||"local",t=it();try{return await t.resolveWithConfig(e,d)}catch(a){return console.warn(`[resolveProviderWithConfig] ${a.message} \u2014 falling back to local storage`),pe({uploadDir:Ce__default.default.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"})}}async function Vt(d){let e=await ct__default.default(d).metadata(),t=ct__default.default(d).webp({quality:85}),a=ct__default.default(d).resize({width:500,withoutEnlargement:true}).webp({quality:80});return {buffer:await t.toBuffer(),thumbnailBuffer:await a.toBuffer(),width:e.width,height:e.height,format:"webp"}}var Ht=false,$e=class d{db;storage;dialect;genId;mediaTable="media";foldersTable="media_folders";constructor(e,t,a){this.db=e,this.storage=t,this.dialect=a?.dialect||"sqlite",this.genId=a?.genId||chunk6CLRVJPP_cjs.e;}static async init(e,t){let a;if(t?.storageConfig)a=await Wt(t.storageConfig);else {let c=new chunkAJAZ7D3W_cjs.a(e);await c.load(),a=await zt(c);}let i=new d(e,a,t);return await i.ensureTables(),i}async ensureTables(){if(this.dialect==="sqlite")this.db.exec(`
         CREATE TABLE IF NOT EXISTS media (
           id TEXT PRIMARY KEY,
           filename TEXT NOT NULL UNIQUE,

package/dist/{chunk-JAOX6WGD.cjs → chunk-J6CGNUWO.cjs}

@@ -1 +1 @@
-'use strict';var chunk6OXKGEY7_cjs=require('./chunk-6OXKGEY7.cjs'),chunkUJNSOOYZ_cjs=require('./chunk-UJNSOOYZ.cjs'),chunkET6NN2V2_cjs=require('./chunk-ET6NN2V2.cjs'),chunk6CLRVJPP_cjs=require('./chunk-6CLRVJPP.cjs'),chunkGYQMNXXW_cjs=require('./chunk-GYQMNXXW.cjs'),chunkUDSJGML2_cjs=require('./chunk-UDSJGML2.cjs'),chunkATLSIYRH_cjs=require('./chunk-ATLSIYRH.cjs'),A=require('kyro:config');function _interopDefault(e){return e&&e.__esModule?e:{default:e}}var A__default=/*#__PURE__*/_interopDefault(A);exports.a=null;var n=null;async function g(){if(!exports.a)try{let e=A__default.default.default||A__default.default;exports.a=chunk6OXKGEY7_cjs.q(e),await exports.a.init(),await exports.a.loadSettings();let a=exports.a.db,r;if(a instanceof chunk6CLRVJPP_cjs.c){if(a.dialect==="postgres")r=new chunkGYQMNXXW_cjs.a({db:a.client});else if(a.dialect==="sqlite"){let s=process.env.KYRO_AUTH_DB_PATH||"./data/auth.db";r=new chunkET6NN2V2_cjs.a({path:s});}}else if(a instanceof chunk6OXKGEY7_cjs.r){let s=process.env.KYRO_AUTH_DB_PATH||"./data/auth.db";r=new chunkET6NN2V2_cjs.a({path:s});}else a instanceof chunkUDSJGML2_cjs.a&&(r=new chunkATLSIYRH_cjs.a({db:a.db}));r?.connect&&await r.connect(),(await chunkUJNSOOYZ_cjs.d(r))?.success,typeof exports.a.startWebSocket=="function"&&exports.a.startWebSocket().catch(s=>{console.error("[Kyro] WebSocket auto-start failed:",s);}),globalThis.__KYRO_INSTANCE__=exports.a;}catch(e){throw exports.a=null,n=null,console.error("[Kyro API] Init failed, will retry:",e),e}}async function q(){n||(n=g()),await n;}var w={graphqlEnabled:false,trpcEnabled:false,wsEnabled:false,requireAuth:false};async function b(e){try{return (await exports.a.db.findOne({collection:"_globals_access-settings",where:{},draft:!0}))?.apiAccess?.[e]??w[e]??!0}catch{return  true}}var v=async e=>{if(!exports.a){n||(n=g());try{await Promise.race([n,new Promise((l,o)=>setTimeout(()=>o(new Error("Initialization timeout")),3e4))]);}catch{return new Response(JSON.stringify({error:"Service Unavailable",message:"Kyro CMS is still starting up. Please try again in a moment."}),{status:503,headers:{"Content-Type":"application/json","Retry-After":"5"}})}}let r=new URL(e.request.url).pathname,i=__KYRO_API_PATH__;if(r===`${i}/graphql`&&typeof exports.a.getGraphQL=="function"){if(!await b("graphqlEnabled"))return new Response(JSON.stringify({error:"GraphQL is disabled"}),{status:503,headers:{"Content-Type":"application/json"}});let o=await exports.a.getGraphQL().fetch(e.request,e.locals);return new Response(o.body,o)}if(r.startsWith(`${i}/trpc/`)&&typeof exports.a.getTRPC=="function"){if(!await b("trpcEnabled"))return new Response(JSON.stringify({error:"tRPC is disabled"}),{status:503,headers:{"Content-Type":"application/json"}});let o=await exports.a.getTRPC().fetch(e.request,e.locals);return new Response(o.body,o)}return exports.a.getREST().fetch(e.request,e.locals)};exports.b=q;exports.c=v;
+'use strict';var chunkZWT5MX7S_cjs=require('./chunk-ZWT5MX7S.cjs'),chunkUJNSOOYZ_cjs=require('./chunk-UJNSOOYZ.cjs'),chunkET6NN2V2_cjs=require('./chunk-ET6NN2V2.cjs'),chunk6CLRVJPP_cjs=require('./chunk-6CLRVJPP.cjs'),chunkGYQMNXXW_cjs=require('./chunk-GYQMNXXW.cjs'),chunkUDSJGML2_cjs=require('./chunk-UDSJGML2.cjs'),chunkATLSIYRH_cjs=require('./chunk-ATLSIYRH.cjs'),A=require('kyro:config');function _interopDefault(e){return e&&e.__esModule?e:{default:e}}var A__default=/*#__PURE__*/_interopDefault(A);exports.a=null;var n=null;async function g(){if(!exports.a)try{let e=A__default.default.default||A__default.default;exports.a=chunkZWT5MX7S_cjs.q(e),await exports.a.init(),await exports.a.loadSettings();let a=exports.a.db,r;if(a instanceof chunk6CLRVJPP_cjs.c){if(a.dialect==="postgres")r=new chunkGYQMNXXW_cjs.a({db:a.client});else if(a.dialect==="sqlite"){let s=process.env.KYRO_AUTH_DB_PATH||"./data/auth.db";r=new chunkET6NN2V2_cjs.a({path:s});}}else if(a instanceof chunkZWT5MX7S_cjs.r){let s=process.env.KYRO_AUTH_DB_PATH||"./data/auth.db";r=new chunkET6NN2V2_cjs.a({path:s});}else a instanceof chunkUDSJGML2_cjs.a&&(r=new chunkATLSIYRH_cjs.a({db:a.db}));r?.connect&&await r.connect(),(await chunkUJNSOOYZ_cjs.d(r))?.success,typeof exports.a.startWebSocket=="function"&&exports.a.startWebSocket().catch(s=>{console.error("[Kyro] WebSocket auto-start failed:",s);}),globalThis.__KYRO_INSTANCE__=exports.a;}catch(e){throw exports.a=null,n=null,console.error("[Kyro API] Init failed, will retry:",e),e}}async function q(){n||(n=g()),await n;}var w={graphqlEnabled:false,trpcEnabled:false,wsEnabled:false,requireAuth:false};async function b(e){try{return (await exports.a.db.findOne({collection:"_globals_access-settings",where:{},draft:!0}))?.apiAccess?.[e]??w[e]??!0}catch{return  true}}var v=async e=>{if(!exports.a){n||(n=g());try{await Promise.race([n,new Promise((l,o)=>setTimeout(()=>o(new Error("Initialization timeout")),3e4))]);}catch{return new Response(JSON.stringify({error:"Service Unavailable",message:"Kyro CMS is still starting up. Please try again in a moment."}),{status:503,headers:{"Content-Type":"application/json","Retry-After":"5"}})}}let r=new URL(e.request.url).pathname,i=__KYRO_API_PATH__;if(r===`${i}/graphql`&&typeof exports.a.getGraphQL=="function"){if(!await b("graphqlEnabled"))return new Response(JSON.stringify({error:"GraphQL is disabled"}),{status:503,headers:{"Content-Type":"application/json"}});let o=await exports.a.getGraphQL().fetch(e.request,e.locals);return new Response(o.body,o)}if(r.startsWith(`${i}/trpc/`)&&typeof exports.a.getTRPC=="function"){if(!await b("trpcEnabled"))return new Response(JSON.stringify({error:"tRPC is disabled"}),{status:503,headers:{"Content-Type":"application/json"}});let o=await exports.a.getTRPC().fetch(e.request,e.locals);return new Response(o.body,o)}return exports.a.getREST().fetch(e.request,e.locals)};exports.b=q;exports.c=v;