@kyro-cms/core 0.10.11 → 0.10.13

package/dist/chunk-PDSHJVCT.cjs

@@ -0,0 +1,86 @@
+'use strict';var chunkAJAZ7D3W_cjs=require('./chunk-AJAZ7D3W.cjs'),chunkGFU7AOI3_cjs=require('./chunk-GFU7AOI3.cjs'),chunkET6NN2V2_cjs=require('./chunk-ET6NN2V2.cjs'),chunkHVXO3OFB_cjs=require('./chunk-HVXO3OFB.cjs'),chunkISWMETHJ_cjs=require('./chunk-ISWMETHJ.cjs'),chunkNY47CFVP_cjs=require('./chunk-NY47CFVP.cjs'),chunk6CLRVJPP_cjs=require('./chunk-6CLRVJPP.cjs'),chunkGYQMNXXW_cjs=require('./chunk-GYQMNXXW.cjs'),chunkUDSJGML2_cjs=require('./chunk-UDSJGML2.cjs'),chunkATLSIYRH_cjs=require('./chunk-ATLSIYRH.cjs'),chunkQ3Q7BJVQ_cjs=require('./chunk-Q3Q7BJVQ.cjs'),chunkAHSFSERC_cjs=require('./chunk-AHSFSERC.cjs'),ar=require('crypto'),unstorage=require('unstorage'),lr=require('unstorage/drivers/fs'),hono=require('hono'),Le=require('path'),fs=require('fs'),ut=require('sharp'),promises=require('fs/promises'),Ir=require('process'),clientS3=require('@aws-sdk/client-s3'),nodeHttpHandler=require('@smithy/node-http-handler'),stream=require('stream'),basicFtp=require('basic-ftp'),zodToJsonSchema=require('zod-to-json-schema');function _interopDefault(e){return e&&e.__esModule?e:{default:e}}var ar__default=/*#__PURE__*/_interopDefault(ar);var lr__default=/*#__PURE__*/_interopDefault(lr);var Le__default=/*#__PURE__*/_interopDefault(Le);var ut__default=/*#__PURE__*/_interopDefault(ut);var Ir__default=/*#__PURE__*/_interopDefault(Ir);function zr(c){Ve=c;}async function Pt(){if(Ve)try{let c=await Ve.findOne({collection:"_globals_system",where:{}});if(c){te={appSecret:c.appSecret||null,encryptionKey:c.encryptionKey||null,sessionConfig:c.sessionMaxAge||c.maxSessionsPerUser?{maxAge:(c.sessionMaxAge||7)*24*60*60*1e3,maxSessionsPerUser:c.maxSessionsPerUser||3}:null};return}}catch{}te={appSecret:process.env.APP_SECRET||"development-secret-key",encryptionKey:null,sessionConfig:null};}function nr(){return te?.appSecret?te.appSecret:process.env.APP_SECRET||"development-secret-key"}function Wr(){if(te?.encryptionKey)return te.encryptionKey;let c=nr();return ar__default.default.createHash("sha256").update(c).digest("hex")}function Ut(){return te?.sessionConfig?te.sessionConfig:{maxAge:10080*60*1e3,maxSessionsPerUser:3}}var Ve,te,He=chunkAHSFSERC_cjs.a(()=>{Ve=null,te=null;});var qt={};chunkAHSFSERC_cjs.b(qt,{SESSION_CONFIG:()=>ee,clearSessionCookie:()=>Je,createSession:()=>Qe,deleteSession:()=>fe,getClientIp:()=>Ge,getCurrentUser:()=>W,getSession:()=>de,getSessionIdFromRequest:()=>G,getUserSessions:()=>he,invalidateAllUserSessions:()=>ur,refreshSession:()=>ke,setSessionCookie:()=>Ye,updateSessionName:()=>et,validateSession:()=>Ue});async function re(){return Te||(Te=unstorage.createStorage({driver:lr__default.default({base:".astro/sessions"})}),Te)}function cr(){return ar__default.default.randomUUID()}function jt(c){let e="Unknown",t="Unknown",a="Unknown";return c.includes("Firefox")?e="Firefox":c.includes("Edg/")?e="Edge":c.includes("Chrome")?e="Chrome":c.includes("Safari")&&!c.includes("Chrome")&&(e="Safari"),c.includes("iPhone")?(t="iPhone",a="iOS"):c.includes("iPad")?(t="iPad",a="iOS"):c.includes("Mac")?(t="MacBook",a="macOS"):c.includes("Windows")?(t="Windows PC",a="Windows"):c.includes("Linux")?(t="Linux PC",a="Linux"):c.includes("Android")&&(t="Android Phone",a="Android"),{browser:e,device:t,platform:a}}function dr(c){if(!c?.userAgent)return "Session";let{browser:e,device:t}=jt(c.userAgent);return `${t} - ${e}`}function G(c){let e=c.headers.get("Cookie");return e&&Object.fromEntries(e.split("; ").map(a=>a.split("=")))[Xe]||null}function Ge(c){let e=c.headers.get("x-forwarded-for");return e?e.split(",")[0].trim():c.headers.get("x-real-ip")||"unknown"}function Ye(c,e){let a=process.env.NODE_ENV==="production"?"Secure; ":"",o=new Headers(c.headers);return o.append("Set-Cookie",`${Xe}=${e}; HttpOnly; Path=/; Max-Age=${ee.absoluteMaxAge/1e3}; SameSite=Strict; ${a}`),new Response(c.body,{status:c.status,statusText:c.statusText,headers:o})}function Je(c){let t=process.env.NODE_ENV==="production"?"Secure; ":"",a=new Headers(c.headers);return a.append("Set-Cookie",`${Xe}=; HttpOnly; Path=/; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=Strict; ${t}`),new Response(c.body,{status:c.status,statusText:c.statusText,headers:a})}async function Pe(c){return await(await re()).getItem(`user:${c}`)||[]}async function Ze(c,e){let t=await re();e.length>0?await t.setItem(`user:${c}`,e):await t.removeItem(`user:${c}`);}async function Qe(c,e){let t=await re(),a=await Pe(c.id);for(;a.length>=ee.maxSessionsPerUser;){let I=a.shift();I&&await t.removeItem(`session:${I}`);}let o=cr(),d=Date.now(),l=e?.headers.get("user-agent"),u=e?Ge(e):"unknown",h=l?{userAgent:l,ip:u,...jt(l)}:{ip:u},y={id:o,userId:c.id,email:c.email,role:c.role,tenantId:c.tenantId,permissions:c.permissions,createdAt:d,expiresAt:d+ee.absoluteMaxAge,lastActivityAt:d,deviceInfo:h,sessionName:dr(h)};return await t.setItem(`session:${o}`,y,{ttl:Math.floor(ee.absoluteMaxAge/1e3)}),a.push(o),await Ze(c.id,a),o}async function de(c){return await(await re()).getItem(`session:${c}`)||null}async function Ue(c){let e=await de(c);return e?e.expiresAt<Date.now()?(await fe(c),{valid:false,reason:"Session expired"}):{valid:true}:{valid:false,reason:"Session not found"}}async function ke(c,e){let t=await re(),a=await de(c);if(!a)return null;let o=Date.now(),d=a.expiresAt-o,l=a.deviceInfo;if(e){let y=Ge(e);y!==a.deviceInfo?.ip&&(l={...a.deviceInfo,ip:y});}let u={...a,lastActivityAt:o,expiresAt:d<ee.refreshThreshold?o+ee.absoluteMaxAge:a.expiresAt,deviceInfo:l},h=d<ee.refreshThreshold?ee.absoluteMaxAge:void 0;return await t.setItem(`session:${c}`,u,h?{ttl:Math.floor(h/1e3)}:void 0),u}async function fe(c){let e=await re(),t=await de(c);if(t){let o=(await Pe(t.userId)).filter(d=>d!==c);await Ze(t.userId,o);}await e.removeItem(`session:${c}`),await e.removeItem(`activity:${c}`);}async function ur(c){let e=await Pe(c),t=await re();for(let a of e)await t.removeItem(`session:${a}`),await t.removeItem(`activity:${a}`);await Ze(c,[]);}async function he(c,e){let t=await Pe(c),a=[];for(let o of t){let d=await de(o);d&&a.push({id:d.id,sessionName:d.sessionName||"Session",deviceInfo:d.deviceInfo,createdAt:d.createdAt,lastActivityAt:d.lastActivityAt,currentSession:d.id===e});}return a.sort((o,d)=>d.lastActivityAt-o.lastActivityAt),a}async function et(c,e){let t=await de(c);return t?(await(await re()).setItem(`session:${c}`,{...t,sessionName:e}),true):false}async function W(c){let e=G(c);if(!e||!(await Ue(e)).valid)return null;let a=await de(e);return a?(await ke(e,c),a):null}var kt,ee,Xe,Te,je=chunkAHSFSERC_cjs.a(()=>{He();kt=Ut(),ee={absoluteMaxAge:kt.maxAge,maxSessionsPerUser:kt.maxSessionsPerUser,refreshThreshold:300*1e3,activityDebounce:30*1e3,pollInterval:30*1e3},Xe="kyro-session",Te=null;});je();function Ct(c){let{db:t,userLookup:a}=c;return async function(d){let l=chunkNY47CFVP_cjs.f(d);if(l&&t){let h=await chunkNY47CFVP_cjs.e(l,t,a);if(h.valid&&h.user)return {user:h.user,tenantContext:Et(h.user),apiKeyContext:chunkNY47CFVP_cjs.g(h),status:200,authType:"apikey"};if(h.error)return {status:401,error:h.error}}let u=G(d);if(u)try{let h=await Ue(u);if(!h.valid)return {status:401,error:h.reason||"Session invalid"};let y=await W(d);if(y){let I=a?await a(y.userId):null;if(I)return {user:I,tenantContext:Et(I),status:200,authType:"session"}}}catch(h){console.error("Session validation error:",h);}return {status:401,error:"Authentication required"}}}function Et(c){return {tenantId:c.tenantId||"default",userId:c.id||"anonymous",role:c.role||"guest",roles:[c.role||"guest"],permissions:[],isSuperAdmin:c.role==="super_admin"}}He();var qe=class{storage=new Map;userStorage=new Map;limits;userLimits;constructor(e,t){this.limits={...pr,...e},this.userLimits=t||{"user:api":{window:6e4,max:500},"user:write":{window:36e5,max:100}};}getKey(e,t){return `${e}:${t}`}getUserKey(e,t,a){return `user:${e}:${t}:${a}`}cleanupOldEntries(e,t){let o=Date.now()-t;for(;e.length>0&&e[0].timestamp<o;)e.shift();}async check(e,t){let a=this.limits[e]||this.limits["api:general"],o=this.getKey(e,t),d=this.storage.get(o);d||(d=[],this.storage.set(o,d)),this.cleanupOldEntries(d,a.window);let l=Date.now(),u=d.reduce((h,y)=>h+y.count,0);if(d.push({timestamp:l,count:1}),u>=a.max){let y=d.reduce((I,b)=>I.timestamp<b.timestamp?I:b,d[0]).timestamp+a.window;return {allowed:false,remaining:0,resetAt:y,retryAfter:Math.ceil((y-l)/1e3)}}return {allowed:true,remaining:a.max-u-1,resetAt:l+a.window}}async checkUser(e,t,a){let o=this.userLimits[e]||this.userLimits["user:api"],d=this.userStorage.get(t),l=[];d?l=d.get(this.getKey(e,a))||[]:(this.userStorage.has(t)||this.userStorage.set(t,new Map),this.userStorage.get(t).set(this.getKey(e,a),l)),this.cleanupOldEntries(l,o.window);let u=Date.now(),h=l.reduce((y,I)=>y+I.count,0);if(l.push({timestamp:u,count:1}),h>=o.max){let I=l.reduce((b,U)=>b.timestamp<U.timestamp?b:U,l[0]).timestamp+o.window;return {allowed:false,remaining:0,resetAt:I,retryAfter:Math.ceil((I-u)/1e3)}}return {allowed:true,remaining:o.max-h-1,resetAt:u+o.window}}async reset(e,t){let a=this.getKey(e,t);this.storage.delete(a);}async resetUser(e,t,a){let o=this.userStorage.get(t);if(o){let d=this.getKey(e,a);o.delete(d);}}async getStatus(e,t){let a=this.limits[e]||this.limits["api:general"],o=this.getKey(e,t),d=this.storage.get(o);d||(d=[],this.storage.set(o,d)),this.cleanupOldEntries(d,a.window);let l=Date.now(),u=d.reduce((h,y)=>h+y.count,0);return {count:u,limit:a.max,remaining:Math.max(0,a.max-u),resetAt:l+a.window}}setLimit(e,t){this.limits[e]=t;}setUserLimit(e,t){this.userLimits[e]=t;}},pr={"auth:login":{window:9e5,max:5},"auth:register":{window:36e5,max:3},"auth:forgot":{window:36e5,max:3},"auth:reset":{window:36e5,max:5},"auth:verify":{window:36e5,max:5},"api:general":{window:6e4,max:100},"api:authenticated":{window:6e4,max:200}};var tt={retentionDays:30};var $t=class{redis;prefix;retentionDays;constructor(e,t=30,a="kyro:audit:"){this.redis=e,this.prefix=a,this.retentionDays=t;}async log(e){let t=ar.randomBytes(16).toString("hex"),a=new Date,o={...e,id:t,timestamp:a},d=this.getKeyForDate(a),l=`${this.prefix}log:${t}`;await this.redis.hset(l,this.serializeLog(o)),await this.redis.expire(l,this.retentionDays*24*60*60+3600),await this.redis.zadd(d,a.getTime(),t),await this.redis.expire(d,this.retentionDays*24*60*60+3600);let u=e.userId?`${this.prefix}user:${e.userId}`:null;return u&&(await this.redis.zadd(u,a.getTime(),t),await this.redis.expire(u,this.retentionDays*24*60*60+3600)),t}async get(e){let t=`${this.prefix}log:${e}`,a=await this.redis.hgetall(t);return !a||Object.keys(a).length===0?null:this.deserializeLog(a)}async query(e={}){let{limit:t=50,offset:a=0}=e,o=[];if(e.userId)o.push(`${this.prefix}user:${e.userId}`);else if(e.startDate||e.endDate)o=this.getKeysForDateRange(e.startDate,e.endDate);else {let h=new Date;o=this.getKeysForDateRange(new Date(h.getTime()-this.retentionDays*24*60*60*1e3),h);}let d=[];for(let h of o){let y=await this.redis.zrange(h,0,-1,"WITHSCORES");for(let I=0;I<y.length;I+=2)d.push([y[I],parseInt(y[I+1],10)]);}d.sort((h,y)=>y[1]-h[1]);let l=d.length;d=d.slice(a,a+t);let u=[];for(let[h]of d){let y=await this.get(h);y&&this.matchesFilter(y,e)&&u.push(y);}return {logs:u,total:l}}async getRecent(e=50){let t=[],a=new Date,o=this.getKeysForDateRange(new Date(a.getTime()-10080*60*1e3),a),d=[];for(let l of o){let u=await this.redis.zrange(l,0,-1,"WITHSCORES");for(let h=0;h<u.length;h+=2)d.push([u[h],parseInt(u[h+1],10)]);}d.sort((l,u)=>u[1]-l[1]);for(let[l]of d.slice(0,e)){let u=await this.get(l);u&&t.push(u);}return t}async getUserActivity(e,t=50){let a=`${this.prefix}user:${e}`,o=await this.redis.zrange(a,0,t-1),d=[];for(let l of o){let u=await this.get(l);u&&d.push(u);}return d}async getStats(e,t){let a=this.getKeysForDateRange(e||new Date(Date.now()-2592e6),t||new Date),o={},d=0,l=0,u=0,h=new Set;for(let y of a){let I=await this.redis.zrange(y,0,-1);for(let b of I){let U=await this.get(b);U&&(d++,o[U.action]=(o[U.action]||0)+1,U.success&&u++,U.action==="login_failed"&&l++,U.userId&&h.add(U.userId));}}return {totalEvents:d,byAction:o,successRate:d>0?u/d:1,failedLogins:l,uniqueUsers:h}}async cleanup(){let e=Date.now()-this.retentionDays*24*60*60*1e3,t=await this.redis.keys(`${this.prefix}date:*`),a=0;for(let o of t){let d=await this.redis.zrangebyscore(o,0,e);for(let l of d)await this.redis.del(`${this.prefix}log:${l}`),a++;await this.redis.zremrangebyscore(o,0,e);}return a}getKeyForDate(e){let t=e.getFullYear(),a=String(e.getMonth()+1).padStart(2,"0"),o=String(e.getDate()).padStart(2,"0");return `${this.prefix}date:${t}-${a}-${o}`}getKeysForDateRange(e,t){let a=[],o=e||new Date(Date.now()-this.retentionDays*24*60*60*1e3),d=t||new Date,l=new Date(o);for(;l<=d;)a.push(this.getKeyForDate(l)),l.setDate(l.getDate()+1);return a}matchesFilter(e,t){return !(t.action&&!(Array.isArray(t.action)?t.action:[t.action]).includes(e.action)||t.resource&&e.resource!==t.resource||t.resourceId&&e.resourceId!==t.resourceId||t.success!==void 0&&e.success!==t.success)}serializeLog(e){let t={id:e.id,timestamp:new Date(e.timestamp).toISOString(),action:e.action,resource:e.resource,success:e.success?"1":"0"};return e.userId&&(t.userId=e.userId),e.userEmail&&(t.userEmail=e.userEmail),e.role&&(t.role=e.role),e.resourceId&&(t.resourceId=e.resourceId),e.ipAddress&&(t.ipAddress=e.ipAddress),e.userAgent&&(t.userAgent=e.userAgent),e.error&&(t.error=e.error),e.changes&&(t.changes=JSON.stringify(e.changes)),e.metadata&&(t.metadata=JSON.stringify(e.metadata)),t}deserializeLog(e){return {id:e.id,timestamp:new Date(e.timestamp),action:e.action,userId:e.userId,userEmail:e.userEmail,role:e.role,resource:e.resource,resourceId:e.resourceId,ipAddress:e.ipAddress,userAgent:e.userAgent,success:e.success==="1",error:e.error,changes:e.changes?JSON.parse(e.changes):void 0,metadata:e.metadata?JSON.parse(e.metadata):void 0}}};function ns(c){return {ipAddress:c.headers.get("x-forwarded-for")?.split(",")[0]?.trim()||c.headers.get("x-real-ip")||"unknown",userAgent:c.headers.get("user-agent")||"unknown"}}var Lt=class{logs=[];retentionDays;constructor(e=tt.retentionDays){this.retentionDays=e;}async log(e){let t=ar.randomBytes(16).toString("hex"),o={...e,id:t,timestamp:new Date};return this.logs.push(o),this.cleanupOldLogs(),t}async get(e){return this.logs.find(t=>t.id===e)||null}async query(e={}){let{limit:t=50,offset:a=0}=e,o=[...this.logs];if(e.userId&&(o=o.filter(y=>y.userId===e.userId)),e.action){let y=Array.isArray(e.action)?e.action:[e.action];o=o.filter(I=>y.includes(I.action));}e.resource&&(o=o.filter(y=>y.resource===e.resource)),e.resourceId&&(o=o.filter(y=>y.resourceId===e.resourceId)),e.success!==void 0&&(o=o.filter(y=>y.success===e.success));let d=e.startDate,l=e.endDate;d!==void 0&&(o=o.filter(y=>y.timestamp>=d)),l!==void 0&&(o=o.filter(y=>y.timestamp<=l)),o.sort((y,I)=>I.timestamp.getTime()-y.timestamp.getTime());let u=o.length;return {logs:o.slice(a,a+t),total:u}}async getRecent(e=50){let t=new Date(Date.now()-6048e5);return this.logs.filter(o=>o.timestamp>=t).sort((o,d)=>d.timestamp.getTime()-o.timestamp.getTime()).slice(0,e)}async getUserActivity(e,t=50){return this.logs.filter(o=>o.userId===e).sort((o,d)=>d.timestamp.getTime()-o.timestamp.getTime()).slice(0,t)}async getStats(e,t){let a=e||new Date(Date.now()-2592e6),o=t||new Date,d=this.logs.filter(b=>b.timestamp>=a&&b.timestamp<=o),l={},u=0,h=0,y=0,I=new Set;for(let b of d){u++;let U=b.action;l[U]=(l[U]||0)+1,b.success&&y++,b.action==="login_failed"&&h++,b.userId&&I.add(b.userId);}return {totalEvents:u,byAction:l,successRate:u>0?y/u:1,failedLogins:h,uniqueUsers:I}}async cleanup(){let e=new Date(Date.now()-this.retentionDays*24*60*60*1e3),t=this.logs.length;return this.logs=this.logs.filter(a=>a.timestamp>=e),t-this.logs.length}cleanupOldLogs(){let e=new Date(Date.now()-this.retentionDays*24*60*60*1e3);this.logs.length;this.logs=this.logs.filter(a=>a.timestamp>=e);}};je();var Ee=class{authAdapter;email;passwordPolicy;lockout;rateLimiter;auditLogger;baseUrl;emailVerificationRequired;constructor(e){this.authAdapter=e.redis,this.email=e.email,this.passwordPolicy=e.passwordPolicy||new chunkAJAZ7D3W_cjs.c,this.lockout=e.lockout,this.rateLimiter=e.rateLimiter,this.auditLogger=e.auditLogger,this.baseUrl=e.baseUrl||"http://localhost:3000",this.emailVerificationRequired=e.emailVerificationRequired??true;}async register(e){let{ipAddress:t,userAgent:a}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let o=await this.rateLimiter.check("auth:register",t);if(!o.allowed)return this.rateLimitResponse(o)}try{let o=await e.json();if(!o.email||!o.password)return this.errorResponse("Email and password are required",400);if(o.password!==o.confirmPassword)return this.errorResponse("Passwords do not match",400);let d=this.passwordPolicy.validate(o.password);if(!d.valid)return this.errorResponse(d.errors.join(". "),400);if(await this.authAdapter.findUserByEmail(o.email))return this.errorResponse("Email already registered",400);let u=await this.authAdapter.createUser({email:o.email,password:o.password,role:o.role||"customer",tenantId:o.tenantId});if(this.emailVerificationRequired&&this.email){let h=ar.randomBytes(32).toString("hex"),y=`${this.baseUrl}/api/auth/verify?token=${h}`;await this.authAdapter.createSession(u.id,{ipAddress:t,userAgent:a});let I=this.email.getTemplates().verifyEmail(y,o.email);await this.email.send({to:o.email,...I});}return this.auditLogger&&await this.auditLogger.log({action:"register",userId:u.id,userEmail:u.email,resource:"auth",ipAddress:t,userAgent:a,success:!0}),this.jsonResponse({success:!0,message:"Registration successful",user:this.sanitizeUser(u),requiresVerification:this.emailVerificationRequired&&!!this.email},201)}catch(o){return console.error("[AuthRoutes.register] Registration error:",o),this.errorResponse("Registration failed",500)}}async login(e){let{ipAddress:t,userAgent:a}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let o=await this.rateLimiter.check("auth:login",t);if(!o.allowed)return this.rateLimitResponse(o)}try{let o=await e.json();if(!o.email||!o.password)return this.errorResponse("Email and password are required",400);let d=await this.authAdapter.findUserByEmail(o.email);if(!d)return await this.recordFailedLogin(t,a),this.errorResponse("Invalid credentials",401);if(d.locked)return this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:d.id,userEmail:d.email,resource:"auth",ipAddress:t,userAgent:a,success:!1,error:"Account locked"}),this.errorResponse("Account locked. Contact an administrator.",403);if(this.lockout){let I=await this.lockout.checkLockout(d.id);if(I.locked)return this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:d.id,userEmail:d.email,resource:"auth",ipAddress:t,userAgent:a,success:!1,error:"Account locked"}),this.errorResponse(`Account locked. Try again in ${Math.ceil((I.lockedUntil.getTime()-Date.now())/6e4)} minutes`,423)}if(!await this.authAdapter.verifyPassword(o.email,o.password))return await this.recordFailedLogin(t,a,d.id,d.email),this.errorResponse("Invalid credentials",401);this.lockout&&await this.lockout.resetAttempts(d.id),this.auditLogger&&await this.auditLogger.log({action:"login",userId:d.id,userEmail:d.email,role:d.role,resource:"auth",ipAddress:t,userAgent:a,success:!0}),await this.authAdapter.updateUser(d.id,{lastLogin:new Date().toISOString()});let u=await Qe({id:d.id,email:d.email,role:d.role,tenantId:d.tenantId}),h={success:!0,user:this.sanitizeUser(d)},y=this.jsonResponse(h);return Ye(y,u)}catch(o){return console.error("[Auth] Login error:",o),this.errorResponse("Login failed",500)}}async logout(e){let t=G(e);if(!t)return this.errorResponse("No session to logout",401);let{ipAddress:a,userAgent:o}=chunkHVXO3OFB_cjs.a(e);try{let d=await W(e);d&&(await fe(t),this.auditLogger&&await this.auditLogger.log({action:"logout",userId:d.userId,userEmail:d.email,resource:"auth",ipAddress:a,userAgent:o,success:!0}));let l=this.jsonResponse({success:!0,message:"Logged out successfully"});return Je(l)}catch{return this.errorResponse("Logout failed",500)}}async refresh(e){try{let t=G(e);if(!t)return this.errorResponse("Not authenticated",401);let a=await ke(t,e);return a?this.jsonResponse({success:!0,expiresAt:a.expiresAt}):this.errorResponse("Session not found",404)}catch(t){return console.error("[Auth] Session refresh error:",t),this.errorResponse("Session refresh failed",500)}}async me(e){let t=await W(e);return t?this.jsonResponse({success:true,user:{id:t.userId,email:t.email,role:t.role,tenantId:t.tenantId}}):this.errorResponse("Not authenticated",401)}async changePassword(e){let t=await W(e);if(!t)return this.errorResponse("Not authenticated",401);let{ipAddress:a,userAgent:o}=chunkHVXO3OFB_cjs.a(e);try{let d=await e.json(),{currentPassword:l,newPassword:u,confirmPassword:h}=d;if(!l||!u)return this.errorResponse("Current and new password required",400);if(u!==h)return this.errorResponse("Passwords do not match",400);let y=this.passwordPolicy.validate(u);if(!y.valid)return this.errorResponse(y.errors.join(". "),400);let I=await this.authAdapter.findUserById(t.userId);if(!I)return this.errorResponse("User not found",404);if(!(I.passwordHash?await this.authAdapter.verifyPassword(l,I.passwordHash):!1))return this.errorResponse("Current password is incorrect",401);let U=await this.authAdapter.getPasswordHistory?.(I.id,5);if(await this.authAdapter.isPasswordInHistory?.(u,I.id,5))return this.errorResponse("Password was recently used. Please choose a different password",400);let k=await this.authAdapter.hashPassword(u);if(I.passwordHash&&await this.authAdapter.addPasswordToHistory?.(I.id,I.passwordHash),await this.authAdapter.updateUser(I.id,{passwordHash:k}),await this.authAdapter.deleteUserSessions(I.id),this.email&&this.email.getTemplates){let _=this.email.getTemplates().passwordChanged(I.email);await this.email.send({to:I.email,..._});}return this.auditLogger&&await this.auditLogger.log({action:"password_change",userId:I.id,userEmail:I.email,resource:"auth",ipAddress:a,userAgent:o,success:!0}),this.jsonResponse({success:!0,message:"Password changed successfully"})}catch{return this.errorResponse("Password change failed",500)}}async forgotPassword(e){let{ipAddress:t,userAgent:a}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let o=await this.rateLimiter.check("auth:forgot",t);if(!o.allowed)return this.rateLimitResponse(o)}try{let o=await e.json(),{email:d}=o;if(!d)return this.errorResponse("Email required",400);let l=await this.authAdapter.findUserByEmail(d);if(!l)return this.jsonResponse({success:!0,message:"If the email exists, a reset link has been sent"});if(this.email){let u=ar.randomBytes(32).toString("hex"),h=`${this.baseUrl}/api/auth/reset-password?token=${u}`,y=this.email.getTemplates().resetPassword(h,l.email);await this.email.send({to:l.email,...y});}return this.auditLogger&&await this.auditLogger.log({action:"password_reset",userId:l.id,userEmail:l.email,resource:"auth",ipAddress:t,userAgent:a,success:!0}),this.jsonResponse({success:!0,message:"If the email exists, a reset link has been sent"})}catch{return this.errorResponse("Password reset request failed",500)}}async verifyEmail(e){if(!new URL(e.url).searchParams.get("token"))return this.errorResponse("Verification token required",400);try{return this.jsonResponse({success:!0,message:"Email verified"})}catch{return this.errorResponse("Email verification failed",500)}}async recordFailedLogin(e,t,a,o){this.lockout&&await this.lockout.recordFailedAttempt(a||e),this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:a,userEmail:o,resource:"auth",ipAddress:e,userAgent:t,success:false,error:"Invalid credentials"});}sanitizeUser(e){let{passwordHash:t,...a}=e;return a}jsonResponse(e,t=200){return new Response(JSON.stringify(e),{status:t,headers:{"Content-Type":"application/json","Cache-Control":"no-store, no-cache, must-revalidate, max-age=0"}})}async listSessions(e){let t=await W(e);if(!t)return this.errorResponse("Not authenticated",401);try{let a=await he(t.userId,G(e)??void 0);return this.jsonResponse({sessions:a})}catch(a){return console.error("[AuthRoutes.listSessions] Error:",a),this.errorResponse("Failed to list sessions",500)}}async revokeSession(e,t){let a=await W(e);if(!a)return this.errorResponse("Not authenticated",401);try{let d=(await he(a.userId)).find(l=>l.id===t);return d?d.currentSession?this.errorResponse("Cannot revoke current session",400):(await fe(t),this.jsonResponse({success:!0,message:"Session revoked"})):this.errorResponse("Session not found",404)}catch(o){return console.error("[AuthRoutes.revokeSession] Error:",o),this.errorResponse("Failed to revoke session",500)}}async revokeOtherSessions(e){let t=await W(e);if(!t)return this.errorResponse("Not authenticated",401);try{let a=await he(t.userId),o=G(e);for(let d of a)d.currentSession||await fe(d.id);return this.jsonResponse({success:!0,message:"Other sessions revoked"})}catch(a){return console.error("[AuthRoutes.revokeOtherSessions] Error:",a),this.errorResponse("Failed to revoke sessions",500)}}async renameSession(e,t){let a=await W(e);if(!a)return this.errorResponse("Not authenticated",401);try{if(!(await he(a.userId)).find(h=>h.id===t))return this.errorResponse("Session not found",404);let l=await e.json(),{name:u}=l;return !u||typeof u!="string"||u.trim().length===0?this.errorResponse("Invalid session name",400):(await et(t,u.trim()),this.jsonResponse({success:!0,message:"Session renamed"}))}catch(o){return console.error("[AuthRoutes.renameSession] Error:",o),this.errorResponse("Failed to rename session",500)}}async refreshSession(e){let t=G(e);if(!t)return this.errorResponse("No session",401);try{let a=await(je(),chunkAHSFSERC_cjs.c(qt)).refreshSession(t,e);return a?this.jsonResponse({success:!0,expiresAt:a.expiresAt}):this.errorResponse("Session not found",404)}catch(a){return console.error("[AuthRoutes.refreshSession] Error:",a),this.errorResponse("Failed to refresh session",500)}}errorResponse(e,t){return new Response(JSON.stringify({success:false,error:e}),{status:t,headers:{"Content-Type":"application/json"}})}async rateLimitResponse(e){return new Response(JSON.stringify({success:false,error:"Too many requests",retryAfter:e.retryAfter}),{status:429,headers:{"Content-Type":"application/json","Retry-After":String(e.retryAfter||60)}})}};function ue(c){let{uploadDir:e=Le.join(Ir__default.default.cwd(),"public","uploads"),baseUrl:t="/uploads"}=c;async function a(l){fs.existsSync(l)||await promises.mkdir(l,{recursive:true});}function o(l){let u=Le.extname(l).toLowerCase();return {".jpg":"image/jpeg",".jpeg":"image/jpeg",".png":"image/png",".gif":"image/gif",".webp":"image/webp",".avif":"image/avif",".svg":"image/svg+xml",".mp4":"video/mp4",".webm":"video/webm",".mov":"video/quicktime",".avi":"video/x-msvideo",".mp3":"audio/mpeg",".wav":"audio/wav",".ogg":"audio/ogg",".pdf":"application/pdf",".doc":"application/msword",".docx":"application/vnd.openxmlformats-officedocument.wordprocessingml.document",".xls":"application/vnd.ms-excel",".xlsx":"application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",".zip":"application/zip",".tar":"application/x-tar",".gz":"application/gzip",".rar":"application/vnd.rar",".7z":"application/x-7z-compressed"}[u]||"application/octet-stream"}async function d(l){try{let u=l.toString("hex",0,8);if(u.startsWith("89504e47")){let h=l.readUInt32BE(16),y=l.readUInt32BE(20);return {width:h,height:y}}if(u.startsWith("ffd8")){let h=2;for(;h<l.length&&l[h]===255;){let y=l[h+1];if(y===192||y===194){let I=l.readUInt16BE(h+5);return {width:l.readUInt16BE(h+7),height:I}}h+=2+l.readUInt16BE(h+2);}}}catch{}return {}}return se({name:"local",displayName:"Local Storage",supportsDynamicResize:true,async upload(l,u){await a(e);let h=Buffer.from(await l.arrayBuffer()),y=ar.createHash("md5").update(h).digest("hex"),I=Le.extname(l.name),b=u?.filename||`${y}${I}`,U=u?.folder||"",R=U?Le.join(e,U):e;await a(R);let k=Le.join(R,b);await promises.writeFile(k,h);let _=l.type.startsWith("image/")?await d(h):{},F=t||"/uploads",ae=U?`/${U}/${b}`:`/${b}`,E=F+ae;return {id:y,filename:b,originalName:l.name,mimeType:l.type||o(l.name),size:h.length,url:E,thumbnailUrl:l.type.startsWith("image/")?E:void 0,folder:U||void 0,provider:"local",metadata:{..._,...u?.metadata},createdAt:new Date().toISOString()}},async uploadFromUrl(l,u){let h=await fetch(l);if(!h.ok)throw new Error(`Failed to fetch file: ${h.statusText}`);let y=await h.blob(),I=h.headers.get("content-disposition"),b=u?.filename;if(!b&&I){let R=I.match(/filename[^;=\n]*=((['"]).*?\2|[^;\n]*)/);R&&(b=R[1].replace(/['"]/g,""));}b||(b=Le.basename(new URL(l).pathname));let U=new File([y],b,{type:y.type||o(b)});return this.upload(U,u)},async delete(l){let u=Le.join(e,l.replace(t+"/",""));try{await promises.unlink(u);}catch{}},async rename(l,u){let h=Le.join(e,l.replace(t+"/","")),y=Le.join(e,u);return await promises.rename(h,y),`${t}/${u}`},async list(l){let u=l?Le.join(e,l):e;if(!fs.existsSync(u))return [];let h=[],y=await promises.readdir(u,{withFileTypes:true});for(let I of y)if(I.isFile()){let b=Le.join(u,I.name),U=await promises.stat(b),R=`${t}${l?`/${l}`:""}/${I.name}`;h.push({id:ar.createHash("md5").update(I.name).digest("hex"),filename:I.name,originalName:I.name,mimeType:o(I.name),size:U.size,url:R,provider:"local",createdAt:U.birthtime.toISOString()});}return h},async exists(l){let u=Le.join(e,l.replace(t+"/",""));return fs.existsSync(u)},async createFolder(l){let u=Le.join(e,l);await promises.mkdir(u,{recursive:true});},async deleteFolder(l){let u=Le.join(e,l);if(fs.existsSync(u)){let{rm:h}=await import('fs/promises');await h(u,{recursive:true,force:true});}}})}function rt(c){let e=(t,a)=>{if(!c.signKey)return t;let o=ar.createHmac("sha256",c.signKey).update(t+a.toString()).digest("hex");return a.set("s",o),t};return {name:"imgix",displayName:"Imgix",supportsDynamicResize:true,async upload(t,a){throw new Error("Imgix is a transformation service. Use another provider for uploads.")},async uploadFromUrl(t,a){let o=a?.filename||t.split("/").pop()||"file",d=await fetch(t);if(!d.ok)throw new Error(`Failed to fetch: ${d.statusText}`);let l=await d.blob();new File([l],o,{type:l.type});return {id:Buffer.from(t).toString("base64").slice(0,20),filename:o,originalName:o,mimeType:l.type,size:l.size,url:this.getImageUrl(t),thumbnailUrl:this.getImageUrl(t,{width:200,height:200,fit:"crop"}),provider:"imgix",createdAt:new Date().toISOString()}},async delete(t){},async rename(t,a){return `https://${c.domain}/${a}`},getImageUrl(t,a){let o=new URL(t),d=new URLSearchParams(o.search);c.defaultParameters&&Object.entries(c.defaultParameters).forEach(([u,h])=>{d.has(u)||d.set(u,h);}),a&&(a.width&&d.set("w",String(a.width)),a.height&&d.set("h",String(a.height)),a.quality&&d.set("q",String(a.quality)),a.format&&d.set("fm",a.format),a.fit&&d.set("fit",a.fit),a.blur&&d.set("blur",String(a.blur)),a.sharpen&&d.set("sharp",String(a.sharpen))),d.set("auto","compress,format");o.pathname+"?"+d.toString();return c.signKey&&(e(o.pathname+d.toString(),d)),`https://${c.domain}${o.pathname}${d.toString()?"?"+d.toString():""}`},async generateThumbnail(t){return this.getImageUrl(t.url,{width:200,height:200,fit:"crop"})},async list(){return []},async exists(t){try{return (await fetch(t,{method:"HEAD"})).ok}catch{return  false}},async createFolder(){},async deleteFolder(){}}}function $e(c,e){return e.cdnUrl?`${e.cdnUrl.replace(/\/$/,"")}/${c}`:`https://${e.storageZone}.b-cdn.net/${c}`}function st(c){return c.cdnUrl?c.cdnUrl.replace(/\/$/,"")+"/":`https://${c.storageZone}.b-cdn.net/`}function at(c){let e=`https://storage.bunnycdn.com/${c.storageZone}`,t=a=>`${c.prefix?`${c.prefix}/`:""}${a}`.replace(/\/+/g,"/");return se({name:"bunny",displayName:"Bunny.net Storage",supportsDynamicResize:true,async upload(a,o){let d=t(`${o?.folder?`${o.folder}/`:""}${o?.filename||a.name}`),l=Buffer.from(await a.arrayBuffer()),u=await fetch(`${e}/${d}`,{method:"PUT",headers:{AccessKey:c.apiKey,"Content-Type":a.type},body:l});if(!u.ok){let h=await u.text();throw new Error(`Bunny.net upload failed: ${u.status} ${h}`)}return {id:Buffer.from(d).toString("base64url"),filename:o?.filename||a.name,originalName:a.name,mimeType:a.type,size:l.length,url:$e(d,c),thumbnailUrl:a.type.startsWith("image/")?$e(d,c):void 0,folder:o?.folder,provider:"bunny",metadata:o?.metadata,createdAt:new Date().toISOString()}},async delete(a){let o=a.replace(st(c),""),d=await fetch(`${e}/${o}`,{method:"DELETE",headers:{AccessKey:c.apiKey}});if(!d.ok&&d.status!==404){let l=await d.text();throw new Error(`Bunny.net delete failed: ${d.status} ${l}`)}},async rename(a,o){let d=a.replace(st(c),""),l=c.prefix?`${c.prefix}/${o}`:o,u=await fetch(`${e}/${d}`,{method:"GET",headers:{AccessKey:c.apiKey}});if(!u.ok)throw new Error("Bunny.net rename failed: could not read old file");let h=await u.arrayBuffer();return await fetch(`${e}/${l}`,{method:"PUT",headers:{AccessKey:c.apiKey,"Content-Type":u.headers.get("Content-Type")||"application/octet-stream"},body:h}),await this.delete(a),$e(l,c)},async list(a){let o=t(a||""),d=await fetch(`${e}/${o}`,{method:"GET",headers:{AccessKey:c.apiKey}});if(!d.ok){let u=await d.text();throw new Error(`Bunny.net list failed: ${d.status} ${u}`)}return (await d.json()).map(u=>({id:Buffer.from(u.ObjectName||"").toString("base64url"),filename:u.ObjectName?.split("/").pop()||"",originalName:u.ObjectName?.split("/").pop()||"",mimeType:"application/octet-stream",size:u.Length||0,url:$e(u.ObjectName||"",c),provider:"bunny",createdAt:u.LastChanged||new Date().toISOString()}))},async exists(a){let o=a.replace(st(c),"");return (await fetch(`${e}/${o}`,{method:"HEAD",headers:{AccessKey:c.apiKey}})).ok},async createFolder(a){let o=t(`${a}/`);await fetch(`${e}/${o}`,{method:"PUT",headers:{AccessKey:c.apiKey,"Content-Length":"0"},body:""});},async deleteFolder(a){let o=t(`${a}/`);await fetch(`${e}/${o}`,{method:"DELETE",headers:{AccessKey:c.apiKey}});}})}var it=class{providers=new Map;providerToPlugin=new Map;disabledPlugins=new Set;constructor(){this.registerLocal(),this.registerImgix(),this.registerBunny();}registerLocal(){this.register({type:"local",displayName:"Local Server",configKey:"local",configFields:[{name:"uploadDir",type:"text",label:"Upload Directory",defaultValue:"./public/uploads"},{name:"baseUrl",type:"text",label:"Base URL",defaultValue:"/uploads"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>{let t=e?.local||e,a=(t?.uploadDir||"").trim(),o;a?Le__default.default.isAbsolute(a)?o=a:a.includes("/")||a.includes("\\")?o=Le__default.default.resolve(process.cwd(),a):o=Le__default.default.join(process.cwd(),"public",a):o=Le__default.default.join(process.cwd(),"public","uploads");let d=(t?.baseUrl||"").trim(),l;return d?l=d.startsWith("/")?d:`/${d}`:l="/uploads",{uploadDir:o,baseUrl:l}},factory:e=>ue(e)});}registerImgix(){this.register({type:"imgix",displayName:"Imgix",configKey:"imgix",configFields:[{name:"domain",type:"text",label:"Domain",required:true},{name:"signKey",type:"password",label:"Sign Key"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>e?.imgix||e,factory:e=>rt(e)});}registerBunny(){this.register({type:"bunny",displayName:"Bunny.net",configKey:"bunny",configFields:[{name:"storageZone",type:"text",label:"Storage Zone",required:true},{name:"apiKey",type:"password",label:"API Key",required:true},{name:"cdnUrl",type:"text",label:"CDN URL"},{name:"prefix",type:"text",label:"Path Prefix"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>e?.bunny||e,factory:e=>at(e)});}register(e){if(this.providers.has(e.type)){console.warn(`[StorageRegistry] Provider "${e.type}" already registered, skipping`);return}e.pluginName&&this.providerToPlugin.set(e.type,e.pluginName),this.providers.set(e.type,e);}unregister(e){this.providers.delete(e),this.providerToPlugin.delete(e);}get(e){return this.providers.get(e)}getAll(){return Array.from(this.providers.values())}getAllAvailable(e){let t=this.getAll();return e?t.filter(a=>a.pluginName?e(a.pluginName):true):t}has(e){return this.providers.has(e)}async resolve(e,t){let a=this.providers.get(e);if(!a)throw new Error(`Unknown storage provider type: "${e}". Is the plugin that provides it enabled?`);if(a.pluginName&&this.disabledPlugins.has(a.pluginName))throw new Error(`Storage provider "${e}" is not available (plugin "${a.pluginName}" is disabled)`);let o=a.configKey||e,d=a.extractConfig(t,o);return a.factory(d)}async resolveWithConfig(e,t){let a=this.providers.get(e);if(!a)throw new Error(`Unknown storage provider type: "${e}". Is the plugin that provides it enabled?`);if(a.pluginName&&this.disabledPlugins.has(a.pluginName))throw new Error(`Storage provider "${e}" is not available (plugin "${a.pluginName}" is disabled)`);let o=a.extractRawConfig(t);return a.factory(o)}getProviderPluginName(e){return this.providerToPlugin.get(e)}getAllPluginNames(){return Array.from(new Set(this.providerToPlugin.values()))}setPluginEnabled(e,t){t?this.disabledPlugins.delete(e):this.disabledPlugins.add(e);}isPluginEnabled(e){return !this.disabledPlugins.has(e)}},nt=null;function ot(){return nt||(nt=new it),nt}function zt(c){if(!c)return "";if(c.startsWith("pub-"))return c;let e=c.match(/pub-[a-zA-Z0-9]+/i);return e?e[0]:""}function Tr(c,e){let t=c.startsWith("/")?c.slice(1):c;if(e.cdnUrl)return `${e.cdnUrl.replace(/\/$/,"")}/${t}`;switch(e.provider){case "r2":{let a=zt(e.publicDevUrl);return a?`https://${a}.r2.dev/${t}`:`https://${e.bucket}.${e.accountId}.r2.cloudflarestorage.com/${t}`}case "gcs":return `https://storage.googleapis.com/${e.bucket}/${t}`;case "digitalocean":return `https://${e.bucket}.${e.region}.cdn.digitaloceanspaces.com/${t}`;case "backblaze":return `https://${e.bucket}.s3.backblazeb2.com/${t}`;case "wasabi":return `https://${e.bucket}.s3.wasabisys.com/${t}`;default:return `https://${e.bucket}.s3.${e.region}.amazonaws.com/${t}`}}function ct(c){if(c.cdnUrl)return c.cdnUrl.replace(/\/$/,"")+"/";switch(c.provider){case "r2":{let e=zt(c.publicDevUrl);return e?`https://${e}.r2.dev/`:`https://${c.bucket}.${c.accountId}.r2.cloudflarestorage.com/`}case "gcs":return `https://storage.googleapis.com/${c.bucket}/`;case "digitalocean":return `https://${c.bucket}.${c.region}.cdn.digitaloceanspaces.com/`;case "backblaze":return `https://${c.bucket}.s3.backblazeb2.com/`;case "wasabi":return `https://${c.bucket}.s3.wasabisys.com/`;default:return `https://${c.bucket}.s3.${c.region}.amazonaws.com/`}}function Pr(c){switch(c){case "r2":return "Cloudflare R2";case "gcs":return "Google Cloud Storage";case "digitalocean":return "DigitalOcean Spaces";case "backblaze":return "Backblaze B2";case "wasabi":return "Wasabi";default:return "AWS S3"}}function Ur(c){let e=new clientS3.S3Client({region:c.region||"auto",endpoint:c.endpoint,credentials:{accessKeyId:c.accessKeyId,secretAccessKey:c.secretAccessKey},forcePathStyle:true,tls:true,...c.provider==="r2"&&{requestHandler:new nodeHttpHandler.NodeHttpHandler({connectionTimeout:1e4,socketTimeout:1e4})}}),t=o=>`${c.prefix?`${c.prefix}/`:""}${o}`.replace(/\/+/g,"/"),a=o=>Tr(o,c);return se({name:c.provider,displayName:Pr(c.provider),supportsDynamicResize:true,async upload(o,d){let l=t(`${d?.folder?`${d.folder}/`:""}${d?.filename||o.name}`),u=Buffer.from(await o.arrayBuffer());await e.send(new clientS3.PutObjectCommand({Bucket:c.bucket,Key:l,Body:u,ContentType:o.type,Metadata:d?.metadata}));let h=await e.send(new clientS3.HeadObjectCommand({Bucket:c.bucket,Key:l}));return {id:Buffer.from(l).toString("base64url"),filename:d?.filename||o.name,originalName:o.name,mimeType:o.type,size:u.length,url:a(l),thumbnailUrl:o.type.startsWith("image/")?a(l):void 0,folder:d?.folder,provider:c.provider,metadata:{...d?.metadata,etag:h.ETag},createdAt:new Date().toISOString()}},async delete(o){let d=o.replace(ct(c),"");await e.send(new clientS3.DeleteObjectCommand({Bucket:c.bucket,Key:d}));},async rename(o,d){let l=o.replace(ct(c),""),u=c.prefix?`${c.prefix}/${d}`:d;return await e.send(new clientS3.CopyObjectCommand({Bucket:c.bucket,CopySource:`${c.bucket}/${l}`,Key:u})),await e.send(new clientS3.DeleteObjectCommand({Bucket:c.bucket,Key:l})),a(u)},async list(o){let d=t(o||"");return ((await e.send(new clientS3.ListObjectsV2Command({Bucket:c.bucket,Prefix:d}))).Contents||[]).map(u=>({id:Buffer.from(u.Key||"").toString("base64url"),filename:u.Key?.split("/").pop()||"",originalName:u.Key?.split("/").pop()||"",mimeType:"application/octet-stream",size:u.Size||0,url:a(u.Key||""),provider:c.provider,createdAt:u.LastModified?.toISOString()||new Date().toISOString()}))},async exists(o){try{let d=o.replace(ct(c),"");return await e.send(new clientS3.HeadObjectCommand({Bucket:c.bucket,Key:d})),!0}catch{return  false}},async createFolder(o){let d=t(`${o}/`);await e.send(new clientS3.PutObjectCommand({Bucket:c.bucket,Key:d,Body:""}));},async deleteFolder(o){let d=t(`${o}/`),l;do{let u=await e.send(new clientS3.ListObjectsV2Command({Bucket:c.bucket,Prefix:d,ContinuationToken:l}));if(u.Contents?.length){let h=u.Contents.map(y=>({Key:y.Key}));await e.send(new clientS3.DeleteObjectsCommand({Bucket:c.bucket,Delete:{Objects:h}}));}l=u.IsTruncated?u.NextContinuationToken:void 0;}while(l);await e.send(new clientS3.DeleteObjectCommand({Bucket:c.bucket,Key:d}));}})}function kr(c){let e=()=>`https://api.cloudinary.com/v1_1/${c.cloudName}/upload`,t=async a=>{let o=await import('crypto'),d=Object.keys(a).sort().map(l=>`${l}=${a[l]}`).join("&");return o.createHash("sha256").update(d+c.apiSecret).digest("hex")};return {name:"cloudinary",displayName:"Cloudinary",supportsDynamicResize:true,async upload(a,o){let d=new FormData;if(d.append("file",a),c.uploadPreset)d.append("upload_preset",c.uploadPreset);else {let h=Math.round(Date.now()/1e3),y={timestamp:String(h)};(o?.folder||c.folder)&&(y.folder=o?.folder||c.folder||"");let I=await t(y);d.append("timestamp",String(h)),d.append("signature",I),d.append("api_key",c.apiKey);}(o?.folder||c.folder)&&d.append("folder",o?.folder||c.folder||"");let l=await fetch(e(),{method:"POST",body:d});if(!l.ok){let h=await l.json();throw new Error(`Cloudinary upload failed: ${h.error?.message||l.statusText}`)}let u=await l.json();return {id:u.public_id,filename:`${u.public_id}.${u.format}`,originalName:u.original_filename||a.name,mimeType:a.type||`image/${u.format}`,size:u.bytes,url:u.secure_url,thumbnailUrl:this.getImageUrl(u.secure_url,{width:200,height:200,fit:"crop"}),width:u.width,height:u.height,folder:o?.folder||c.folder,provider:"cloudinary",createdAt:new Date().toISOString()}},async uploadFromUrl(a,o){let d=new FormData;d.append("file",a),d.append("upload_preset","ml_default"),(o?.folder||c.folder)&&d.append("folder",o?.folder||c.folder||"");let l=await fetch(e(),{method:"POST",body:d});if(!l.ok)throw new Error("Cloudinary upload failed");let u=await l.json();return {id:u.public_id,filename:`${u.public_id}.${u.format}`,originalName:u.original_filename||a.split("/").pop()||"file",mimeType:`image/${u.format}`,size:u.bytes,url:u.secure_url,thumbnailUrl:this.getImageUrl(u.secure_url,{width:200,height:200,fit:"crop"}),width:u.width,height:u.height,provider:"cloudinary",createdAt:new Date().toISOString()}},async delete(a){try{let o=a.split("/image/upload/");if(o.length!==2){console.warn("[Cloudinary delete] Could not parse URL:",a);return}let d=o[1].replace(/^v\d+\//,"").replace(/\.[^.]+$/,""),l=Math.round(Date.now()/1e3),u={timestamp:String(l),public_id:d},h=Object.keys(u).sort().map(k=>`${k}=${u[k]}`).join("&"),I=(await import('crypto')).createHash("sha256").update(h+c.apiSecret).digest("hex"),b=`https://api.cloudinary.com/v1_1/${c.cloudName}/image/destroy`,U=new FormData;U.append("public_id",d),U.append("timestamp",String(l)),U.append("signature",I),U.append("api_key",c.apiKey);let R=await fetch(b,{method:"POST",body:U});if(!R.ok){let k=await R.json();console.warn("[Cloudinary delete] Failed:",k);}}catch(o){console.warn("[Cloudinary delete] Error:",o.message);}},async rename(a,o){let d="",l=o.replace(/\.[^.]+$/,""),u="";try{let h=a.split("/image/upload/");if(h.length!==2)return console.warn("[Cloudinary rename] Could not parse old URL:",a),a;let y=h[1],I=y.match(/^(v\d+)\//);d=I?I[1]:"";let b=y.replace(/^v\d+\//,"").replace(/\.[^.]+$/,""),U=b.split("/");u=U.length>1?U.slice(0,-1).join("/"):"";let R=o.replace(/\.[^.]+$/,"");l=u?`${u}/${R}`:R;let k=Math.round(Date.now()/1e3),_={from_public_id:b,to_public_id:l,timestamp:String(k)},F=Object.keys(_).sort().map(D=>`${D}=${_[D]}`).join("&"),E=(await import('crypto')).createHash("sha256").update(F+c.apiSecret).digest("hex"),H=new FormData;H.append("from_public_id",b),H.append("to_public_id",l),H.append("timestamp",String(k)),H.append("signature",E),H.append("api_key",c.apiKey);let J=await fetch(`https://api.cloudinary.com/v1_1/${c.cloudName}/image/rename`,{method:"POST",body:H});if(J.ok)return (await J.json()).secure_url;{let D=await J.json();console.warn("[Cloudinary rename] Failed:",D);let Z=d?`/${d}/`:"/";return `https://res.cloudinary.com/${c.cloudName}/image/upload${Z}${l}.${o.split(".").pop()}`}}catch(h){console.warn("[Cloudinary rename] Error:",h.message);let y=d?`/${d}/`:"/";return `https://res.cloudinary.com/${c.cloudName}/image/upload${y}${l}.${o.split(".").pop()}`}},getImageUrl(a,o){if(!o)return a;let d=a.split("/upload/");if(d.length!==2)return a;let l=[];if(o.width&&l.push(`w_${o.width}`),o.height&&l.push(`h_${o.height}`),o.fit){let h={crop:"c_fill",clip:"c_fit",scale:"c_scale",fill:"c_fill"};l.push(h[o.fit]||"c_limit");}o.quality&&l.push(`q_${o.quality}`),o.format&&l.push(`f_${o.format}`);let u=l.join(",");return `${d[0]}/upload/${u}/${d[1]}`},async generateThumbnail(a){return this.getImageUrl(a.url,{width:200,height:200,fit:"crop"})},async list(){return []},async exists(a){return (await fetch(a,{method:"HEAD"})).ok},async createFolder(){},async deleteFolder(){}}}function Er(c){let e=null;async function t(){return e||(e=new basicFtp.Client(6e4,{allowSeparateTransferHost:true}),e.ftp.verbose=false,await e.access({host:c.host,port:c.port||21,user:c.user,password:c.password,secure:c.secure,secureOptions:{}})),e}let a=l=>`${c.prefix?`${c.prefix}/`:""}${l}`.replace(/\/+/g,"/"),o=l=>`${c.baseUrl.replace(/\/$/,"")}/${l}`,d=()=>c.baseUrl.replace(/\/$/,"")+"/";return se({name:c.type,displayName:c.type==="sftp"?"SFTP Storage":"FTP Storage",supportsDynamicResize:false,async upload(l,u){let h=await t(),y=a(`${u?.folder?`${u.folder}/`:""}${u?.filename||l.name}`),I=Buffer.from(await l.arrayBuffer()),b=y.split("/").slice(0,-1),U="";for(let k of b){U=U?`${U}/${k}`:k;try{await h.ensureDir(U);}catch{}}let R=stream.Readable.from(I);return await h.uploadFrom(R,y),{id:Buffer.from(y).toString("base64url"),filename:u?.filename||l.name,originalName:l.name,mimeType:l.type,size:I.length,url:o(y),thumbnailUrl:l.type.startsWith("image/")?o(y):void 0,folder:u?.folder,provider:c.type,metadata:u?.metadata,createdAt:new Date().toISOString()}},async delete(l){let u=await t(),h=l.replace(d(),"");await u.remove(h);},async rename(l,u){let h=await t(),y=l.replace(d(),""),I=c.prefix?`${c.prefix}/${u}`:u;return await h.rename(y,I),o(I)},async list(l){let u=await t(),h=a(l||""),y;try{y=await u.list(h);}catch{return []}return y.filter(I=>I.type===0).map(I=>({id:Buffer.from(`${h}/${I.name}`).toString("base64url"),filename:I.name,originalName:I.name,mimeType:"application/octet-stream",size:Number(I.size)||0,url:o(`${h}/${I.name}`.replace(/\/+/g,"/")),provider:c.type,createdAt:I.modifiedAt?I.modifiedAt.toISOString():new Date().toISOString()}))},async exists(l){let u=await t(),h=l.replace(d(),"");try{return await u.size(h),!0}catch{return  false}},async createFolder(l){let u=await t(),h=a(l);await u.ensureDir(h);},async deleteFolder(l){let u=await t(),h=a(l);await u.removeDir(h);}})}async function Wt(c){let e=c.getStorageConfig(),t=ot();try{return await t.resolve(e.type,e)}catch(a){return console.warn(`[resolveProvider] ${a.message} \u2014 falling back to local storage`),ue({uploadDir:Le__default.default.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"})}}function se(c){return {async uploadFromUrl(e,t){let a=await fetch(e);if(!a.ok)throw new Error(`Failed to fetch: ${a.statusText}`);let o=await a.blob(),d=e.split("/").pop()||"file",l=new File([o],d,{type:o.type});return this.upload(l,t)},getImageUrl(e,t){if(!t||Object.keys(t).length===0)return e;let a=new URLSearchParams({url:e});return t.width&&a.set("w",String(t.width)),t.height&&a.set("h",String(t.height)),t.quality&&a.set("q",String(t.quality)),t.format&&a.set("f",t.format),`/api/media/resize?${a.toString()}`},async generateThumbnail(e){return this.getImageUrl(e.url,{width:400,height:400})},...c}}async function Vt(c){if(!c)return console.warn("[resolveProviderWithConfig] No config, using local"),ue({uploadDir:Le__default.default.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"});let e=c.type||"local",t=ot();try{return await t.resolveWithConfig(e,c)}catch(a){return console.warn(`[resolveProviderWithConfig] ${a.message} \u2014 falling back to local storage`),ue({uploadDir:Le__default.default.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"})}}async function Ht(c){let e=await ut__default.default(c).metadata(),t=ut__default.default(c).webp({quality:85}),a=ut__default.default(c).resize({width:500,withoutEnlargement:true}).webp({quality:80});return {buffer:await t.toBuffer(),thumbnailBuffer:await a.toBuffer(),width:e.width,height:e.height,format:"webp"}}var Xt=false,_e=class c{db;storage;dialect;genId;mediaTable="media";foldersTable="media_folders";constructor(e,t,a){this.db=e,this.storage=t,this.dialect=a?.dialect||"sqlite",this.genId=a?.genId||chunk6CLRVJPP_cjs.e;}static async init(e,t){let a;if(t?.storageConfig)a=await Vt(t.storageConfig);else {let d=new chunkAJAZ7D3W_cjs.a(e);await d.load(),a=await Wt(d);}let o=new c(e,a,t);return await o.ensureTables(),o}async ensureTables(){if(this.dialect==="sqlite")this.db.exec(`
+        CREATE TABLE IF NOT EXISTS media (
+          id TEXT PRIMARY KEY,
+          filename TEXT NOT NULL UNIQUE,
+          title TEXT,
+          original_name TEXT NOT NULL,
+          mime_type TEXT NOT NULL,
+          file_size INTEGER NOT NULL,
+          width INTEGER,
+          height INTEGER,
+          url TEXT NOT NULL UNIQUE,
+          thumbnail_url TEXT,
+          folder TEXT,
+          provider TEXT NOT NULL,
+          alt TEXT,
+          caption TEXT,
+          metadata TEXT,
+          created_at TEXT NOT NULL,
+          updated_at TEXT NOT NULL
+        );
+        CREATE INDEX IF NOT EXISTS idx_media_folder ON media(folder);
+        CREATE INDEX IF NOT EXISTS idx_media_provider ON media(provider);
+        CREATE INDEX IF NOT EXISTS idx_media_filename ON media(filename);
+      `),this.db.exec(`
+        CREATE TABLE IF NOT EXISTS media_folders (
+          id TEXT PRIMARY KEY,
+          name TEXT NOT NULL,
+          path TEXT NOT NULL,
+          parent_path TEXT,
+          created_at TEXT
+        );
+        CREATE INDEX IF NOT EXISTS idx_media_folders_path ON media_folders(path);
+      `);else if(this.dialect==="postgres"){if(Xt)return;let{sql:e}=await import('drizzle-orm');await this.db.execute(e`
+        CREATE TABLE IF NOT EXISTS "media" (
+          "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+          "filename" VARCHAR(255) NOT NULL UNIQUE,
+          "title" VARCHAR(255),
+          "original_name" VARCHAR(255) NOT NULL,
+          "mime_type" VARCHAR(100),
+          "file_size" INTEGER,
+          "width" INTEGER,
+          "height" INTEGER,
+          "url" TEXT NOT NULL UNIQUE,
+          "thumbnail_url" TEXT,
+          "folder" VARCHAR(255),
+          "provider" VARCHAR(50) NOT NULL,
+          "alt" TEXT,
+          "caption" TEXT,
+          "metadata" JSONB,
+          "created_at" TIMESTAMP NOT NULL DEFAULT NOW(),
+          "updated_at" TIMESTAMP NOT NULL DEFAULT NOW()
+        )
+      `),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_folder" ON "media" ("folder")`),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_provider" ON "media" ("provider")`),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_filename" ON "media" ("filename")`),await this.db.execute(e`
+        CREATE TABLE IF NOT EXISTS "media_folders" (
+          "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+          "name" VARCHAR(255) NOT NULL,
+          "path" TEXT NOT NULL,
+          "parent_path" TEXT,
+          "created_at" TIMESTAMP NOT NULL DEFAULT NOW()
+        )
+      `),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_folders_path" ON "media_folders" ("path")`),Xt=true;}}now(){return new Date().toISOString()}buildFindConditions(e){let t=[],a=[],o=e.sortBy==="name"?"title":e.sortBy==="createdAt"?"created_at":e.sortBy==="updatedAt"?"updated_at":e.sortBy||"created_at",d=e.sortDir==="asc"?"ASC":"DESC";if(e.search){t.push("(title LIKE ? OR filename LIKE ? OR original_name LIKE ? OR alt LIKE ?)");let u=`%${e.search}%`;a.push(u,u,u,u);}return e.type&&e.type!=="all"&&(t.push("mime_type LIKE ?"),a.push(`${e.type}/%`)),e.folder&&(t.push("(folder = ? OR folder LIKE ?)"),a.push(e.folder,`${e.folder}/%`)),{where:t.length>0?`WHERE ${t.join(" AND ")}`:"",params:a,orderBy:d,sortCol:o}}rowToMedia(e,t){return {id:e.id,filename:e.filename,title:e.title??null,originalName:e.original_name??e.originalName,mimeType:e.mime_type??e.mimeType,fileSize:e.file_size??e.fileSize,width:e.width??null,height:e.height??null,url:c.resolveMediaUrl(e.url,t),thumbnailUrl:c.resolveMediaUrl(e.thumbnail_url??e.thumbnailUrl??null,t),folder:e.folder??null,provider:e.provider,alt:e.alt??null,caption:e.caption??null,metadata:e.metadata??null,createdAt:e.created_at??e.createdAt,updatedAt:e.updated_at??e.updatedAt}}static resolveMediaUrl(e,t){return e?e.startsWith("http://")||e.startsWith("https://")||e.startsWith("blob:")||e.startsWith("data:")?e:`${(process.env.KYRO_BASE_URL||t||"http://localhost:4321").replace(/\/+$/,"")}${e.startsWith("/")?"":"/"}${e}`:null}async sqliteRun(e,t=[]){let a=this.db.prepare(e),o=e.trim().toLowerCase();return o.startsWith("insert")||o.startsWith("update")||o.startsWith("delete")?a.run(...t):a.all(...t)}sqliteGet(e,t=[]){return this.db.prepare(e).get(...t)}async upload(e,t=""){let a=e.type.startsWith("image/"),o,d=e,l=e.name,u=null,h=null;if(a&&!e.type.includes("svg")){let R=Buffer.from(await e.arrayBuffer());o=await Ht(R),l=`${e.name.replace(/\.[^/.]+$/,"").toLowerCase().replace(/[^a-z0-9]/g,"-").replace(/-+/g,"-").substring(0,50)}.webp`,u=o.width??null,h=o.height??null,d=new File([o.buffer],l,{type:"image/webp"});}let y=await this.storage.upload(d,{folder:t,filename:l}),I=await this.storage.generateThumbnail({...y,id:"",provider:this.storage.name,createdAt:this.now()},{width:400,height:400}),b=this.genId(),U=this.now();if(this.dialect==="sqlite")await this.sqliteRun(`INSERT INTO ${this.mediaTable}
+          (id, filename, title, original_name, mime_type, file_size, width, height, url, thumbnail_url, folder, provider, alt, caption, metadata, created_at, updated_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,[b,y.filename,e.name.replace(/\.[^/.]+$/,""),e.name,y.mimeType,y.size,u,h,y.url,I,t||null,this.storage.name,null,null,null,U,U]);else {let{media:R}=await import('./media-OUBQTIQP.cjs'),k=y.mimeType,_=k.startsWith("image/")?"image":k.startsWith("video/")?"video":k.startsWith("audio/")?"audio":k.startsWith("application/pdf")?"document":["application/zip","application/x-zip","application/x-tar","application/gzip","application/x-7z"].includes(k)?"archive":"other";await this.db.insert(R).values({id:b,filename:y.filename,title:e.name.replace(/\.[^/.]+$/,""),originalName:e.name,mimeType:k,fileSize:y.size,width:u,height:h,url:y.url,thumbnailUrl:I,folder:t||"",provider:this.storage.name,type:_,status:"active",alt:null,caption:null,createdAt:new Date,updatedAt:new Date}).returning();}return {id:b,filename:y.filename,title:e.name.replace(/\.[^/.]+$/,""),originalName:e.name,mimeType:y.mimeType,fileSize:y.size,width:u,height:h,url:y.url,thumbnailUrl:I,folder:t||null,provider:this.storage.name,alt:null,caption:null,metadata:null,createdAt:U,updatedAt:U}}async uploadFromUrl(e,t=""){let a=await fetch(e);if(!a.ok)throw new Error(`Failed to fetch URL: ${a.status}`);let o=await a.blob(),d=e.split("/").pop()||"url-image",l=a.headers.get("content-type")||o.type||"application/octet-stream",u=new File([o],d,{type:l});return this.upload(u,t)}async delete(e,t){let a=await this.findById(e,t);if(a){if(await this.deleteFile(a.url),a.thumbnailUrl&&a.thumbnailUrl!==a.url&&a.thumbnailUrl!==a.url+"?thumb")try{await this.deleteFile(a.thumbnailUrl);}catch{}if(this.dialect==="sqlite")await this.sqliteRun(`DELETE FROM ${this.mediaTable} WHERE id = ?`,[e]);else {let{media:o}=await import('./media-OUBQTIQP.cjs'),{eq:d}=await import('drizzle-orm');await this.db.delete(o).where(d(o.id,e));}}}async deleteFile(e){await this.storage.delete(e);}async rename(e,t,a){let o=await this.findById(e,a);if(!o)return null;let d=await this.storage.rename(o.url,t),l;if(o.thumbnailUrl||this.storage.name==="cloudinary"){let I=d.match(/\/upload\/(v\d+)\//),b=I?I[1]+"/":"",U=d.match(/(.+?)\/upload\//);l=`${U?U[1]:"https://res.cloudinary.com/"+this.storage.config?.cloudName||"unknown"}/upload/w_200,h_200,c_fill/${b}${t}`;}let u=o.filename.split(".").pop(),h=t.includes(".")?t:`${t}.${u}`,y={url:d,filename:h,thumbnailUrl:l};if(this.dialect==="sqlite"){let I={...y};"thumbnailUrl"in I&&(I.thumbnail_url=I.thumbnailUrl,delete I.thumbnailUrl);let b=Object.keys(I).map(R=>`${R} = ?`).join(", "),U=Object.values(I);await this.sqliteRun(`UPDATE ${this.mediaTable} SET ${b}, updated_at = ? WHERE id = ?`,[...U,this.now(),e]);}else {let{media:I}=await import('./media-OUBQTIQP.cjs'),{eq:b}=await import('drizzle-orm');await this.db.update(I).set({...y,updatedAt:this.now()}).where(b(I.id,e));}return {...o,...y,updatedAt:this.now(),thumbnailUrl:y.thumbnailUrl??null}}async findById(e,t){if(this.dialect==="sqlite"){let l=this.sqliteGet(`SELECT * FROM ${this.mediaTable} WHERE id = ?`,[e]);return l?this.rowToMedia(l,t):null}let{media:a}=await import('./media-OUBQTIQP.cjs'),{eq:o}=await import('drizzle-orm'),[d]=await this.db.select().from(a).where(o(a.id,e));return d?this.rowToMedia(d,t):null}async find(e={},t){let{page:a=1,limit:o=30,search:d="",type:l="",folder:u="",sortBy:h="createdAt",sortDir:y="desc"}=e,{where:I,params:b,orderBy:U,sortCol:R}=this.buildFindConditions({page:a,limit:o,search:d,type:l,folder:u,sortBy:h,sortDir:y}),k=(a-1)*o;if(this.dialect==="sqlite"){let le=this.sqliteGet(`SELECT COUNT(*) as cnt FROM ${this.mediaTable} ${I}`,b)?.cnt??0;return {docs:(await this.sqliteRun(`SELECT * FROM ${this.mediaTable} ${I} ORDER BY ${R} ${U} LIMIT ? OFFSET ?`,[...b,o,k])).map(ve=>this.rowToMedia(ve,t)),totalDocs:le,page:a,limit:o,totalPages:Math.ceil(le/o)}}let{media:_}=await import('./media-OUBQTIQP.cjs'),{like:F,or:ae,and:E,asc:H,desc:J,eq:D,sql:Z}=await import('drizzle-orm'),ne=[];d&&ne.push(ae(F(_.title,`%${d}%`),F(_.filename,`%${d}%`),F(_.originalName,`%${d}%`),F(_.alt,`%${d}%`))),l&&l!=="all"&&ne.push(F(_.mimeType,`${l}/%`)),u&&ne.push(ae(D(_.folder,u),F(_.folder,`${u}/%`)));let ye=ne.length>0?E(...ne):void 0,Me=_[{created_at:"createdAt",updated_at:"updatedAt",title:"title",filename:"filename",file_size:"fileSize",mime_type:"mimeType",original_name:"originalName"}[R]||"createdAt"],be=y==="asc"?H(Me):J(Me),ge=await this.db.select().from(_).where(ye).orderBy(be).limit(o).offset(k),[{count:M}]=await this.db.select({count:Z`count(*)`}).from(_).where(ye),ie=Number(M);return {docs:ge.map(oe=>this.rowToMedia(oe,t)),totalDocs:ie,page:a,limit:o,totalPages:Math.ceil(ie/o)}}async update(e,t,a){let o=this.now();if(this.dialect==="sqlite"){let h=["updated_at = ?"],y=[o];t.title!==void 0&&(h.push("title = ?"),y.push(t.title)),t.alt!==void 0&&(h.push("alt = ?"),y.push(t.alt)),t.caption!==void 0&&(h.push("caption = ?"),y.push(t.caption)),t.folder!==void 0&&(h.push("folder = ?"),y.push(t.folder)),y.push(e),await this.sqliteRun(`UPDATE ${this.mediaTable} SET ${h.join(", ")} WHERE id = ?`,y);let I=this.sqliteGet(`SELECT * FROM ${this.mediaTable} WHERE id = ?`,[e]);return I?this.rowToMedia(I,a):null}let{media:d}=await import('./media-OUBQTIQP.cjs'),{eq:l}=await import('drizzle-orm'),[u]=await this.db.update(d).set({...t,updatedAt:new Date}).where(l(d.id,e)).returning();return u?this.rowToMedia(u,a):null}async updateMany(e,t){let a=this.now();if(this.dialect==="sqlite")for(let o of e){let d=["updated_at = ?"],l=[a];t.folder!==void 0&&(d.push("folder = ?"),l.push(t.folder||null)),l.push(o),await this.sqliteRun(`UPDATE ${this.mediaTable} SET ${d.join(", ")} WHERE id = ?`,l);}else {let{media:o}=await import('./media-OUBQTIQP.cjs'),{eq:d}=await import('drizzle-orm');for(let l of e)await this.db.update(o).set({...t,updatedAt:new Date}).where(d(o.id,l));}}async listFolders(){if(this.dialect==="sqlite")return (await this.sqliteRun(`SELECT path FROM ${this.foldersTable} UNION
+         SELECT folder as path FROM ${this.mediaTable} WHERE folder IS NOT NULL AND folder != ''`)).map(y=>y.path).filter(y=>y&&y!=="").sort();let{media:e,mediaFolders:t}=await import('./media-OUBQTIQP.cjs'),{eq:a,sql:o}=await import('drizzle-orm'),d=await this.db.select({folder:e.folder}).from(e).groupBy(e.folder),l=await this.db.select({path:t.path}).from(t),u=new Set([...d.map(h=>h.folder),...l.map(h=>h.path)]);return Array.from(u).filter(h=>h&&h!=="").sort()}async createFolder(e,t=""){let a=t?`${t}/${e}`:e;await this.storage.createFolder?.(a);let o=this.now();if(this.dialect==="sqlite")await this.sqliteRun(`INSERT OR IGNORE INTO ${this.foldersTable} (path, name, parent_path, created_at) VALUES (?, ?, ?, ?)`,[a,e,t||null,o]);else {let{mediaFolders:d}=await import('./media-OUBQTIQP.cjs');await this.db.insert(d).values({path:a,name:e,parentPath:t||null,createdAt:new Date}).onConflictDoNothing();}}async deleteFolder(e){let t=await this.find({folder:e,limit:1e4});for(let a of t.docs)await this.delete(a.id);if(await this.storage.deleteFolder?.(e),this.dialect==="sqlite")await this.sqliteRun(`DELETE FROM ${this.foldersTable} WHERE path = ? OR path LIKE ?`,[e,`${e}/%`]);else {let{mediaFolders:a}=await import('./media-OUBQTIQP.cjs'),{like:o,or:d,eq:l}=await import('drizzle-orm');await this.db.delete(a).where(d(l(a.path,e),o(a.path,`${e}/%`)));}}};function Ne(c){return c.map(e=>`${e.path.join(".")}: ${e.message}`).join(", ")}function pe(c,e){if(!(!c||typeof c!="object"))for(let t of e){if(!t.name||!(t.name in c))continue;if(c[t.name]===""&&(t.type==="text"||t.type==="textarea"||t.type==="code"||t.type==="markdown"||t.type==="email"||t.type==="password"||t.type==="color"||(c[t.name]=null)),t.type==="tabs"&&t.name&&Array.isArray(t.tabs)&&c[t.name]&&typeof c[t.name]=="object")for(let o of t.tabs)Array.isArray(o.fields)&&pe(c[t.name],o.fields);else if((t.type==="group"||t.type==="collapsible")&&t.name&&Array.isArray(t.fields)&&c[t.name]&&typeof c[t.name]=="object")pe(c[t.name],t.fields);else if(t.type==="array"&&t.name&&Array.isArray(t.fields)&&Array.isArray(c[t.name]))for(let o of c[t.name])o&&typeof o=="object"&&pe(o,t.fields);else if(t.type==="blocks"&&t.name&&Array.isArray(t.blocks)&&Array.isArray(c[t.name]))for(let o of c[t.name]){if(!o||typeof o!="object")continue;let d=o.type||o.blockType;if(!d)continue;let l=t.blocks.find(h=>h.slug===d);if(!l||!Array.isArray(l.fields))continue;let u=o.data&&typeof o.data=="object"?o.data:o;pe(u,l.fields);}}}function me(c,e){if(!(!e||typeof e!="object"))for(let t of c){if(t.type==="richtext"&&t.name){let a=e[t.name];typeof a=="string"?e[t.name]=[{type:"paragraph",children:[{text:a}]}]:a&&typeof a=="object"&&!Array.isArray(a)&&a.type==="doc"&&Array.isArray(a.content)&&(e[t.name]=a.content);}if(t.type==="tabs"&&t.name&&Array.isArray(t.tabs)&&e[t.name]&&typeof e[t.name]=="object")for(let a of t.tabs)Array.isArray(a.fields)&&me(a.fields,e[t.name]);else if((t.type==="group"||t.type==="collapsible")&&t.name&&Array.isArray(t.fields)&&e[t.name]&&typeof e[t.name]=="object")me(t.fields,e[t.name]);else if(t.type==="array"&&t.name&&Array.isArray(t.fields)&&Array.isArray(e[t.name]))for(let a of e[t.name])a&&typeof a=="object"&&me(t.fields,a);else if(t.type==="blocks"&&t.name&&Array.isArray(t.blocks)&&Array.isArray(e[t.name]))for(let a of e[t.name]){if(!a||typeof a!="object")continue;let o=a.type||a.blockType;if(!o)continue;let d=t.blocks.find(u=>u.slug===o);if(!d||!Array.isArray(d.fields))continue;let l=a.data&&typeof a.data=="object"?a.data:a;me(d.fields,l);}}}var Or={_media:{create:chunkISWMETHJ_cjs.c.MEDIA_UPLOAD,update:chunkISWMETHJ_cjs.c.MEDIA_UPLOAD,delete:chunkISWMETHJ_cjs.c.MEDIA_DELETE}};function Se(c,e){let t=Or[c];return t?t[e]:`collection.${e}`}function Nr(c){let e=c.headers.get("x-forwarded-for");return e?e.split(",")[0].trim():c.headers.get("x-real-ip")||"unknown"}function Fe(c,e,t,a,o){e?.apiKeyId&&c&&c.createAuditLog({action:"api_request",userId:e.userId||"",resource:"api_key",resourceId:e.apiKeyId,success:true,metadata:{endpoint:t,method:a,ip:Nr(o)}});}function pt(c){return c.baseUpdatedAt??c._baseUpdatedAt}function mt(c){let{baseUpdatedAt:e,_baseUpdatedAt:t,...a}=c;return a}function Jt(c,e){return {error:"Document has changed since you started editing",code:"REVISION_CONFLICT",conflict:{expectedUpdatedAt:c??null,actualUpdatedAt:e.updatedAt??null,current:e}}}async function $(c,e,t,a,o,d,l=true,u="none"){return await chunkISWMETHJ_cjs.a(c,e,{user:a,req:t,tenantID:o,apiKey:d},{enablePublicAccess:l,defaultAccess:u})}async function Y(c,e,t,a,o,d=true){return await chunkISWMETHJ_cjs.b(c,e,{user:a,req:t,tenantID:o},{enablePublicAccess:d})}async function P(c,e,t,a){if(t)return {user:t,tenantID:a,apiKeyContext:void 0,authType:"static"};if(e){let o=await e(c);if(o.status===200&&o.user)return {user:o.user,tenantID:o.tenantContext?.tenantId,apiKeyContext:o.apiKeyContext,authType:o.authType}}return {user:void 0,tenantID:void 0,apiKeyContext:void 0,authType:void 0}}function Fr(c,e){if(c instanceof chunk6CLRVJPP_cjs.c&&c.dialect==="postgres")return new chunkGYQMNXXW_cjs.a({db:c.client});if(c instanceof chunkUDSJGML2_cjs.a)return new chunkATLSIYRH_cjs.a({db:c.db});let t=Le.resolve(e,"data","kyro.db");return new chunkET6NN2V2_cjs.a({path:process.env.KYRO_AUTH_DB_PATH||t})}function Qt(c){let {registry:e,db:t,authSecret:a,authAdapter:o,checkSession:d,user:l,tenantID:u,cors:h,webhookService:y,settings:I}=c,b=new hono.Hono,U=I?.access?.apiAccess,R=I?.access?.enablePublicAccess??false,k=I?.access?.defaultCollectionAccess??"none";U?.requireAuth;let F=process.cwd(),ae=F.endsWith("admin")?Le.resolve(F,".."):F,E=o||Fr(t,ae),D=a?Ct({db:t,userLookup:async r=>await E.findUserById(r)||null}):null,Z=U?.cors?.allowedOrigins,ne=h?.origins,ye=Array.isArray(Z)?Z:typeof Z=="string"&&Z?Z.split(`
+`).map(r=>r.trim()).filter(Boolean):[],we=ye.length>0?ye:ne||[];(we.length>0||h)&&b.use("*",async(r,i)=>{let g=r.req.header("Origin")||"*";if(we.length>0&&!we.includes(g))return r.json({error:"Origin not allowed"},403);let m=we.length>0?g:"*";if(r.header("Access-Control-Allow-Origin",m),r.header("Access-Control-Allow-Methods","GET, POST, PATCH, DELETE, OPTIONS"),r.header("Access-Control-Allow-Headers","Content-Type, Authorization, X-API-Key"),h?.credentials&&r.header("Access-Control-Allow-Credentials","true"),r.req.method==="OPTIONS")return r.text("");await i();});let be=I?.access?.rateLimiting,ge;if(be?.enabled){let r=be.maxRequests||100,i=be.windowMs||6e4;ge=new qe({"api:general":{window:i,max:r}}),b.use("/api/*",async(g,m)=>{if(!ge)return m();let n=g.req.header("CF-Connecting-IP")||g.req.header("X-Forwarded-For")?.split(",")[0]?.trim()||g.req.header("X-Real-IP")||"unknown",s=await ge.check("api:general",n);if(g.header("X-RateLimit-Limit",String(r)),g.header("X-RateLimit-Remaining",String(s.remaining)),g.header("X-RateLimit-Reset",String(s.resetAt)),!s.allowed)return g.json({error:"Too many requests",retryAfter:s.retryAfter},429);await m();});}let M=new Ee({redis:E,jwtSecret:a||"change-me",baseUrl:process.env.KYRO_BASE_URL||"http://localhost:4321",rateLimiter:ge});chunkAJAZ7D3W_cjs.b.fromConfig(t).then(r=>{r&&(M.email=r);}).catch(r=>{console.error("[Email] Failed to initialize transport from config:",r);}),b.post("/api/auth/login",async r=>M.login(r.req.raw)),b.post("/api/auth/register",async r=>M.register(r.req.raw)),b.post("/api/auth/logout",async r=>M.logout(r.req.raw)),b.post("/api/auth/refresh",async r=>M.refresh(r.req.raw)),b.get("/api/auth/me",async r=>M.me(r.req.raw)),b.get("/api/auth/sessions",async r=>M.listSessions(r.req.raw)),b.post("/api/auth/sessions/refresh",async r=>M.refreshSession(r.req.raw)),b.delete("/api/auth/sessions",async r=>M.revokeOtherSessions(r.req.raw)),b.delete("/api/auth/sessions/:id",async r=>M.revokeSession(r.req.raw,r.req.param("id"))),b.put("/api/auth/sessions/:id/name",async r=>M.renameSession(r.req.raw,r.req.param("id"))),b.get("/api/auth/access",async r=>{try{let{user:i,tenantID:g}=await P(r.req.raw,D,l,u);if(!i)return r.json({error:"Not authenticated"},401);let m={},n={};for(let s of e.getCollections()){let p={read:(await $(s,"read",r.req.raw,i,g,void 0,R,k)).allowed,create:(await $(s,"create",r.req.raw,i,g,void 0,R,k)).allowed,update:(await $(s,"update",r.req.raw,i,g,void 0,R,k)).allowed,delete:(await $(s,"delete",r.req.raw,i,g,void 0,R,k)).allowed};m[s.slug]=p;}for(let s of e.getGlobals()){let p={read:(await Y(s,"read",r.req.raw,i,g,R)).allowed,update:(await Y(s,"update",r.req.raw,i,g,R)).allowed};n[s.slug]=p;}return r.json({collections:m,globals:n})}catch(i){return r.json({error:i.message},500)}});let ie=typeof e.hasCollection=="function"&&e.hasCollection("users")?e.getCollection("users"):(()=>{try{return e.getCollection("users")}catch{return chunkGFU7AOI3_cjs.a}})();b.get("/api/users",async r=>{try{let{user:i,tenantID:g}=await P(r.req.raw,D,l,u),m=await $(ie,"read",r.req.raw,i,g,void 0,R,k);if(!m.allowed)return r.json({error:m.error},m.status||403);let n=parseInt(r.req.query("page")||"1"),s=Math.min(parseInt(r.req.query("limit")||"10"),100),p=r.req.query("search")||void 0,w=await E.findUsers({page:n,limit:s,search:p});return r.json({docs:w.users,totalDocs:w.total,limit:s,totalPages:Math.ceil(w.total/s),page:n,pagingCounter:(n-1)*s+1,hasPrevPage:n>1,hasNextPage:n<Math.ceil(w.total/s),prevPage:n>1?n-1:null,nextPage:n<Math.ceil(w.total/s)?n+1:null})}catch(i){return console.error("[API] Error listing users:",i),r.json({error:i.message},500)}}),b.get("/api/users/:id",async r=>{try{let{user:i,tenantID:g}=await P(r.req.raw,D,l,u),m=r.req.param("id"),n=await E.findUserById(m);return n?r.json({data:n}):r.json({error:"User not found"},404)}catch(i){return r.json({error:i.message},500)}}),b.post("/api/users",async r=>{try{let{user:i,tenantID:g}=await P(r.req.raw,D,l,u),m=await $(ie,"create",r.req.raw,i,g,void 0,R,k);if(!m.allowed)return r.json({error:m.error},m.status||403);let n=await r.req.json();if(!n.email||!n.password)return r.json({error:"Email and password are required"},400);if(await E.findUserByEmail(n.email))return r.json({error:"Email already in use"},400);let p=await E.createUser({email:n.email,password:n.password,name:n.name,role:n.role||"customer",avatar:n.avatar,tenantId:n.tenantId});return i&&E?.createAuditLog({action:"user_create",userId:i.id,resource:"users",resourceId:p.id,success:!0}),r.json({data:p,message:"User created successfully"},201)}catch(i){return r.json({error:i.message},500)}}),b.patch("/api/users/:id",async r=>{try{let{user:i,tenantID:g}=await P(r.req.raw,D,l,u),m=await $(ie,"update",r.req.raw,i,g,void 0,R,k);if(!m.allowed)return r.json({error:m.error},m.status||403);let n=r.req.param("id"),s=await r.req.json(),p=await E.findUserById(n);if(!p)return r.json({error:"User not found"},404);let w={};s.name!==void 0&&(w.name=s.name),s.email!==void 0&&(w.email=s.email),s.role!==void 0&&(w.role=s.role),s.avatar!==void 0&&(w.avatar=typeof s.avatar=="object"&&s.avatar!==null?s.avatar.id||String(s.avatar):s.avatar),s.tenantId!==void 0&&(w.tenantId=s.tenantId),s.emailVerified!==void 0&&(w.emailVerified=s.emailVerified),s.locked!==void 0&&(w.locked=s.locked),s.failedLoginAttempts!==void 0&&(w.failedLoginAttempts=s.failedLoginAttempts),s.lastLogin!==void 0&&(w.lastLogin=s.lastLogin);let f=await E.updateUser(n,w);return f?(i&&(E?.createAuditLog({action:"user_update",userId:i.id,resource:"users",resourceId:n,success:!0}),s.role&&p.role!==s.role&&E?.createAuditLog({action:"role_change",userId:i.id,resource:"users",resourceId:n,success:!0,metadata:{oldRole:p.role,newRole:s.role}})),r.json({data:f,message:"User updated successfully"})):r.json({error:"User update failed"},500)}catch(i){return r.json({error:i.message},500)}}),b.delete("/api/users/:id",async r=>{try{let{user:i,tenantID:g}=await P(r.req.raw,D,l,u),m=await $(ie,"delete",r.req.raw,i,g,void 0,R,k);if(!m.allowed)return r.json({error:m.error},m.status||403);let n=r.req.param("id");if(i&&i.id===n)return r.json({error:"You cannot delete your own account"},403);let s=await E.findUserById(n);return s?await E.deleteUser(n)?(i&&E?.createAuditLog({action:"user_delete",userId:i.id,resource:"users",resourceId:n,success:!0}),r.json({data:s,message:"User deleted successfully"})):r.json({error:"User deletion failed"},500):r.json({error:"User not found"},404)}catch(i){return r.json({error:i.message},500)}}),b.get("/api/auth/audit-logs",async r=>{try{let{user:i,tenantID:g}=await P(r.req.raw,D,l,u),m=e.getCollection("audit_logs");if(m){let S=await $(m,"read",r.req.raw,i,g,void 0,R,k);if(!S.allowed)return r.json({error:S.error},S.status||403)}else if(!i)return r.json({error:"Authentication required"},401);let n=parseInt(r.req.query("page")||"1"),s=Math.min(parseInt(r.req.query("limit")||"50"),100),p=r.req.query("action")||void 0,w=r.req.query("userId")||void 0,f=r.req.query("resource")||void 0,A=await E.findAuditLogs({action:p,userId:w,resource:f,limit:s,offset:(n-1)*s});return r.json({docs:A.logs,totalDocs:A.total,limit:s,totalPages:Math.ceil(A.total/s),page:n,pagingCounter:(n-1)*s+1,hasPrevPage:n>1,hasNextPage:n<Math.ceil(A.total/s),prevPage:n>1?n-1:null,nextPage:n<Math.ceil(A.total/s)?n+1:null})}catch(i){return console.error("[API] Error listing audit logs:",i),r.json({error:i.message},500)}});let oe=null,le=null,z=async()=>{if(le)throw le;if(!oe)try{let r=t instanceof chunk6CLRVJPP_cjs.c?t.dialect:"sqlite",i=r==="postgres"&&t instanceof chunk6CLRVJPP_cjs.c?t.client:t;oe=await _e.init(i,{dialect:r});}catch(r){throw console.error("[getMedia] Init error:",r),le=r,r}return oe};b.get("/api/media",async r=>{try{let{user:i}=await P(r.req.raw,D,l,u);if(!i)return r.json({error:"Authentication required"},401);let g=await z(),m=new URL(r.req.url).origin,n=parseInt(r.req.query("page")||"1"),s=parseInt(r.req.query("limit")||"30"),p=r.req.query("search")||"",w=r.req.query("type")||"",f=r.req.query("folder")||"",A=await g.find({page:n,limit:s,search:p,type:w,folder:f},m);return r.json(A)}catch(i){return console.error("[Media] find error:",i),r.json({error:i.message},500)}}),b.post("/api/media/upload",async r=>{try{let{user:i}=await P(r.req.raw,D,l,u);if(!i)return r.json({error:"Authentication required"},401);let g=await z();if((r.req.header("content-type")||"").includes("multipart/form-data")){let p=await r.req.formData(),w=p.get("file"),f=p.get("folder")||"";if(!w)return r.json({error:"No file uploaded"},400);let A=await g.upload(w,f);return r.json(A)}let{url:n}=await r.req.json();if(!n)return r.json({error:"No URL provided"},400);let s=await g.uploadFromUrl(n);return r.json(s)}catch(i){return console.error("[Media] upload error:",i),r.json({error:i.message},500)}}),b.get("/api/media/folders",async r=>{try{let{user:i}=await P(r.req.raw,D,l,u);if(!i)return r.json({error:"Authentication required"},401);let m=await(await z()).listFolders();return r.json(m)}catch(i){return console.error("[Media] folders error:",i),r.json({error:i.message},500)}}),b.post("/api/media/folders",async r=>{try{let{user:i}=await P(r.req.raw,D,l,u);if(!i)return r.json({error:"Authentication required"},401);let g=await z(),m=await r.req.json(),{name:n,parentPath:s}=m;return n?(await g.createFolder(n,s||""),r.json({message:"Folder created",path:s?`${s}/${n}`:n})):r.json({error:"Folder name is required"},400)}catch(i){return console.error("[Media] create folder error:",i),r.json({error:i.message},500)}}),b.delete("/api/media/folders",async r=>{try{let{user:i}=await P(r.req.raw,D,l,u);if(!i)return r.json({error:"Authentication required"},401);let g=await z(),m=r.req.query("path");return m?(await g.deleteFolder(m),r.json({message:"Folder deleted"})):r.json({error:"Path is required"},400)}catch(i){return console.error("[Media] delete folder error:",i),r.json({error:i.message},500)}}),b.delete("/api/media/:id",async r=>{try{let{user:i}=await P(r.req.raw,D,l,u);if(!i)return r.json({error:"Authentication required"},401);let g=await z(),m=r.req.param("id"),n=new URL(r.req.url).origin;return await g.delete(m,n),r.json({success:!0})}catch(i){return console.error("[Media] delete error:",i),r.json({error:i.message},500)}}),b.get("/api/media/resize",async r=>{try{let{user:i}=await P(r.req.raw,D,l,u);if(!i)return r.json({error:"Authentication required"},401);let g=r.req.query("url"),m=parseInt(r.req.query("w")||"0"),n=parseInt(r.req.query("h")||"0"),s=r.req.query("fit")||"cover";if(!g)return r.json({error:"URL is required"},400);let w=(await z()).storage;if(w.name!=="local")return r.redirect(g);let f=w.config?.uploadDir||Le.join(process.cwd(),"public","uploads"),A=w.config?.baseUrl||"/uploads";if(!g.startsWith(A))return r.redirect(g);let S=g.replace(A,""),v=Le.join(f,S);if(!fs.existsSync(v))return r.json({error:"File not found"},404);let x=fs.readFileSync(v),T=ut__default.default(x);(m>0||n>0)&&(T=T.resize({width:m>0?m:void 0,height:n>0?n:void 0,fit:s}));let j=await T.toBuffer(),q=await ut__default.default(x).metadata();return r.header("Content-Type",`image/${q.format||"webp"}`),r.header("Cache-Control","public, max-age=31536000, immutable"),r.body(j)}catch(i){return console.error("[Media] resize error:",i),r.json({error:i.message},500)}}),b.get("/api/media/:id",async r=>{try{let{user:i}=await P(r.req.raw,D,l,u);if(!i)return r.json({error:"Authentication required"},401);let g=await z(),m=r.req.param("id"),n=new URL(r.req.url).origin,s=await g.findById(m,n);return s?r.json(s):r.json({error:"Media not found"},404)}catch(i){return console.error("[Media] get error:",i),r.json({error:i.message},500)}}),b.patch("/api/media/:id",async r=>{try{let{user:i}=await P(r.req.raw,D,l,u);if(!i)return r.json({error:"Authentication required"},401);let g=await z(),m=r.req.param("id"),n=await r.req.json(),s=new URL(r.req.url).origin;if(n.folder!==void 0){let p=await g.update(m,{folder:n.folder},s);return r.json({doc:p})}return r.json({error:"No valid fields to update"},400)}catch(i){return console.error("[Media] update error:",i),r.json({error:i.message},500)}}),b.get("/api/media/test",async r=>{try{let{user:i}=await P(r.req.raw,D,l,u);if(!i)return r.json({error:"Authentication required"},401);let g=await z();return r.json({status:g?"initialized":"failed",serviceType:g?.constructor?.name})}catch(i){return console.error("[test] Error:",i),r.json({error:i.message,type:i.constructor?.name,stack:i.stack},500)}}),b.get("/api/storage-status",async r=>{try{let{user:i}=await P(r.req.raw,D,l,u);if(!i)return r.json({error:"Authentication required"},401);let g=!1,m="local";if(t)try{let n=t.prepare('SELECT provider FROM "_globals_storage-settings" LIMIT 1').get();n&&n.provider&&(g=!0,m=n.provider==="aws"?"s3":n.provider);}catch{try{let n=await t.findOne({collection:"_globals_storage-settings",where:{},draft:!0});n&&n.provider&&(g=!0,m=n.provider==="aws"?"s3":n.provider);}catch{}}return r.json({provider:m,configured:g,usage:0,limit:"unlimited"})}catch(i){return console.error("[Storage] status error:",i),r.json({error:i.message},500)}}),b.get("/api/plugins",async r=>{try{let{user:i}=await P(r.req.raw,D,l,u);if(!i)return r.json({error:"Authentication required"},401);let g=e.getPlugins(),m=e.storageProviders,n=await Promise.all(g.map(async s=>{let p=!0,w=s.name,f={};try{let A=await t.findOne({collection:"_globals_plugin-settings",where:{},draft:!0});A&&A.states&&(f=A.states);}catch{}return f[w]!==void 0&&(p=f[w]),m.setPluginEnabled(w,p),{id:w,name:w,version:s.version||"1.0.0",description:s.description||"",enabled:p,status:p?"active":"disabled"}}));return r.json(n)}catch(i){return console.error("[Plugins] list error:",i),r.json({error:i.message},500)}}),b.put("/api/plugins/:name/toggle",async r=>{try{let{user:i}=await P(r.req.raw,D,l,u);if(!i)return r.json({error:"Authentication required"},401);let g=r.req.param("name"),m=e.storageProviders,s=!m.isPluginEnabled(g),p=[];if(!s)for(let f of m.getAll())f.pluginName===g&&p.push(f.type);if(!(r.req.query("force")==="1")&&!s&&p.length>0){let f="local";try{let A=t?.prepare?.('SELECT provider FROM "_globals_storage-settings" LIMIT 1')?.get();A?.provider&&(f=A.provider);}catch{try{let A=await t?.findOne?.({collection:"_globals_storage-settings",where:{},draft:!0});A?.provider&&(f=A.provider);}catch{}}if(p.includes(f))return r.json({error:`Cannot disable "${g}" \u2014 storage provider "${f}" is currently active. Switch to Local storage first.`,requiresAction:!0,activeProvider:f},409)}try{let f={},A="global",S=await t.findOne({collection:"_globals_plugin-settings",where:{},draft:!0});S&&(f=S.states||{},A=S.id),f[g]=s,S?await t.update({collection:"_globals_plugin-settings",id:A,data:{states:f}}):await t.create({collection:"_globals_plugin-settings",data:{states:f,id:"global"}});}catch(f){console.warn(`[Plugins] Could not persist state for "${g}":`,f);}return m.setPluginEnabled(g,s),r.json({name:g,enabled:s})}catch(i){return console.error("[Plugins] toggle error:",i),r.json({error:i.message},500)}}),b.get("/api/health",r=>r.json({status:"ok",version:"0.1.0",collections:e.getCollectionSlugs(),timestamp:new Date().toISOString()})),b.get("/api/kyro/schema",async r=>{let{user:i}=await P(r.req.raw,D,l,u);if(!i)return r.json({error:"Authentication required"},401);let g=n=>n.map(s=>{let p={name:s.name,type:s.type,label:s.label,required:s.required??false,unique:s.unique??false,indexed:s.indexed??false,defaultValue:s.defaultValue,admin:s.admin?{...s.admin}:void 0};return s.minLength!==void 0&&(p.minLength=s.minLength),s.maxLength!==void 0&&(p.maxLength=s.maxLength),s.pattern!==void 0&&(p.pattern=s.pattern),s.variant!==void 0&&(p.variant=s.variant),s.hasMany!==void 0&&(p.hasMany=s.hasMany),s.min!==void 0&&(p.min=s.min),s.max!==void 0&&(p.max=s.max),s.step!==void 0&&(p.step=s.step),s.integer!==void 0&&(p.integer=s.integer),s.options&&(p.options=s.options),s.relationTo&&(p.relationTo=s.relationTo),s.maxDepth!==void 0&&(p.maxDepth=s.maxDepth),s.minRows!==void 0&&(p.minRows=s.minRows),s.maxRows!==void 0&&(p.maxRows=s.maxRows),s.localized!==void 0&&(p.localized=s.localized),s.language&&(p.language=s.language),s.format&&(p.format=s.format),s.allowedTypes&&(p.allowedTypes=s.allowedTypes),s.maxSize&&(p.maxSize=s.maxSize),(s.type==="group"||s.type==="row"||s.type==="collapsible"&&s.fields)&&(p.fields=g(s.fields)),s.type==="array"&&s.fields&&(p.fields=g(s.fields)),s.type==="blocks"&&s.blocks&&(p.blocks=s.blocks.map(w=>({slug:w.slug,label:w.label,fields:g(w.fields)}))),s.type==="tabs"&&s.tabs&&(p.tabs=s.tabs.map(w=>({label:w.label,name:w.name,fields:g(w.fields)}))),p}),m={collections:{},globals:{}};for(let n of e.getCollections()){let s=n.slug;try{m.collections[s]={slug:s,label:n.label||s,fields:g(n.fields),jsonSchema:zodToJsonSchema.zodToJsonSchema(e.getZodSchema(s),{target:"openApi3"}),createSchema:zodToJsonSchema.zodToJsonSchema(e.getCreateZodSchema(s),{target:"openApi3"}),updateSchema:zodToJsonSchema.zodToJsonSchema(e.getUpdateZodSchema(s),{target:"openApi3"}),procedures:{find:{collection:s,where:"Record<string,any>",sort:"string",limit:"number",page:"number",depth:"number",select:"string[]",draft:"boolean"},findByID:{collection:s,id:"string",depth:"number",select:"string[]",draft:"boolean"},create:{collection:s,data:"Record<string,any>",depth:"number",select:"string[]"},update:{collection:s,id:"string",data:"Record<string,any>",depth:"number",select:"string[]",baseUpdatedAt:"string"},delete:{collection:s,id:"string"},count:{collection:s,where:"Record<string,any>"}}};}catch{}}for(let n of e.getGlobals()){let s=n.slug,p=n.fields;if(s==="storage-settings"){let w=e.storageProviders,f=w.getAll(),A=new Set(w.getAllAvailable(v=>w.isPluginEnabled(v)).map(v=>v.type));A.add("local");let S=new Set(f.map(v=>v.type));p=p.filter(v=>v.type==="group"&&v.name&&S.has(v.name)?A.has(v.name):true).map(v=>v.name==="provider"&&v.type==="select"?{...v,options:v.options.filter(x=>A.has(x.value))}:v);}try{m.globals[s]={slug:s,label:n.label||s,fields:g(p),jsonSchema:zodToJsonSchema.zodToJsonSchema(e.getZodSchema(s),{target:"openApi3"}),procedures:{get:{},update:{data:"Record<string,any>"}}};}catch{}}return r.json(m)}),b.get("/api/collections",async r=>{let{user:i}=await P(r.req.raw,D,l,u);if(!i)return r.json({error:"Authentication required"},401);let g=e.getCollections().map(m=>({slug:m.slug,label:m.label||m.slug,fields:m.fields.filter(n=>n.name).map(n=>({name:n.name,type:n.type,required:n.required,label:n.label}))}));return r.json(g)});function ve(r,i,g){if(g in i)return i[g];for(let m of r)if(m.name){if(m.type==="tabs"&&m.tabs){let n=i[m.name];if(n&&typeof n=="object"&&g in n)return n[g]}if((m.type==="group"||m.type==="collapsible")&&m.fields){let n=i[m.name];if(n&&typeof n=="object"){if(g in n)return n[g];let s=ve(m.fields,n,g);if(s!==void 0)return s}}}}function er(r){if(!r)return [];if(typeof r=="string")return [r];if(Array.isArray(r))return r.map(i=>typeof i=="object"?i.value??i.id??i:i);if(typeof r=="object"){let i=r.value??r.id??r;return typeof i=="string"?[i]:Array.isArray(i)?i:[]}return []}function Ae(r,i,g){if(!(!r||typeof r!="object")){for(let m of i)if(!(!m.name&&m.type!=="row"&&m.type!=="collapsible"&&m.type!=="tabs")){if(m.type==="relationship"||m.type==="upload"){let n=r[m.name];if(!n)continue;let s=Array.isArray(m.relationTo)?m.relationTo:[m.relationTo],p=er(n);for(let w of p)if(w)for(let f of s)g.has(f)||g.set(f,new Set),g.get(f).add(w);}else if(m.type==="group"||m.type==="collapsible"||m.type==="row"){let n=m.name?r[m.name]:r;Ae(n,m.fields||[],g);}else if(m.type==="tabs"&&m.tabs){let n=m.name?r[m.name]:r;for(let s of m.tabs)Ae(n,s.fields||[],g);}else if(m.type==="array"&&m.name&&Array.isArray(r[m.name]))for(let n of r[m.name])Ae(n,m.fields||[],g);else if(m.type==="blocks"&&m.name&&Array.isArray(r[m.name]))for(let n of r[m.name]){if(!n||typeof n!="object")continue;let s=n.type||n.blockType;if(!s)continue;let p=m.blocks?.find(w=>w.slug===s);if(p&&Array.isArray(p.fields)){let w=n.data&&typeof n.data=="object"?n.data:n;Ae(w,p.fields,g);}}}}}function Ie(r,i,g){if(!(!r||typeof r!="object")){for(let m of i)if(!(!m.name&&m.type!=="row"&&m.type!=="collapsible"&&m.type!=="tabs")){if(m.type==="relationship"||m.type==="upload"){let n=r[m.name];if(!n)continue;let s=Array.isArray(m.relationTo)?m.relationTo:[m.relationTo],p=f=>{r[m.name]=f;},w=f=>{for(let A of s){let S=g.get(A);if(S&&S.has(f))return S.get(f)}return null};if(typeof n=="string"){let f=w(n);p(f||{id:n});}else if(Array.isArray(n))p(n.map(f=>{let A=typeof f=="object"?f.value??f.id:f,S=w(A);return S||{id:A}}));else if(typeof n=="object"){let f=n.value??n.id,A=w(f);p(A||{id:f});}}else if(m.type==="group"||m.type==="collapsible"||m.type==="row"){let n=m.name?r[m.name]:r;Ie(n,m.fields||[],g);}else if(m.type==="tabs"&&m.tabs){let n=m.name?r[m.name]:r;for(let s of m.tabs)Ie(n,s.fields||[],g);}else if(m.type==="array"&&m.name&&Array.isArray(r[m.name]))for(let n of r[m.name])Ie(n,m.fields||[],g);else if(m.type==="blocks"&&m.name&&Array.isArray(r[m.name]))for(let n of r[m.name]){if(!n||typeof n!="object")continue;let s=n.type||n.blockType;if(!s)continue;let p=m.blocks?.find(w=>w.slug===s);if(p&&Array.isArray(p.fields)){let w=n.data&&typeof n.data=="object"?n.data:n;Ie(w,p.fields,g);}}}}}async function Be(r,i,g,m){if(!r||r.length===0)return;let n=new Map;for(let p of r)Ae(p,i.fields,n);if(n.size===0)return;let s=new Map;for(let[p,w]of n.entries()){if(w.size===0||!m.getCollection(p))continue;let A=new Map,S=Array.from(w);for(let v of S)try{let x=await g.findByID({collection:p,id:v,draft:!0});x&&A.set(v,x);}catch{}s.set(p,A);}for(let p of r)Ie(p,i.fields,s);}b.get("/api/search",async r=>{try{let i=r.req.query("q")||"",g=r.req.query("collections")||"",m=Math.min(parseInt(r.req.query("limit")||"10"),50);if(!i||i.length<2)return r.json({results:[],message:"Query too short"});let{user:n,tenantID:s}=await P(r.req.raw,D,l,u),p=g?g.split(",").filter(Boolean):e.getCollectionSlugs(),w=[],f=new RegExp(i.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),"i");for(let A of e.getCollections()){if(!p.includes(A.slug)||!(await $(A,"read",r.req.raw,n,s,void 0,R,k)).allowed)continue;let v=A.fields.filter(x=>x.name&&x.name!=="id"&&(x.type==="text"||x.type==="email"||x.type==="textarea"||x.type==="richtext"||x.indexed)&&!x.admin?.hidden).map(x=>x.name);if(v.length!==0)try{let x=v.map(j=>{let q={};return q[j]={like:`%${i}%`},q}),T=await t.find({collection:A.slug,where:{OR:x},limit:m,tenantID:s});await Be(T.docs,A,t,e);for(let j of T.docs){let q=A.admin?.useAsTitle||v.find(L=>L==="title"||L==="name"||L==="heading"||L==="slug"),C=q?ve(A.fields,j,q)??j.id:j.id;w.push({collection:A.slug,label:A.label||A.slug,id:j.id,title:String(C||"Untitled"),doc:j});}}catch(x){console.error(`Search error for ${A.slug}:`,x);}}return w.sort((A,S)=>A.label.localeCompare(S.label)),r.json({results:w})}catch(i){return r.json({error:i.message,results:[]},500)}}),b.get("/api/keys",async r=>{try{let{user:i,tenantID:g}=await P(r.req.raw,D,l,u);if(!i||!chunkQ3Q7BJVQ_cjs.a(i,"users:read"))return r.json({error:"Forbidden"},403);let m=parseInt(r.req.query("page")||"1"),n=Math.min(parseInt(r.req.query("limit")||"50"),100),s=await t.find({collection:chunkNY47CFVP_cjs.d,where:{},page:m,limit:n,tenantID:g}),p=(s.docs||[]).map(w=>({id:w.id,name:w.name,keyPrefix:w.keyPrefix,permissions:w.permissions||[],lastUsed:w.lastUsedAt,createdAt:w.createdAt}));return r.json({docs:p,totalDocs:s.totalDocs||p.length,totalPages:s.totalPages||1})}catch(i){return console.error("[ApiKeys] GET error:",i),r.json({error:i.message},500)}}),b.post("/api/keys",async r=>{try{let{user:i}=await P(r.req.raw,D,l,u);if(!i||!chunkQ3Q7BJVQ_cjs.a(i,"users:admin"))return r.json({error:"Forbidden"},403);let g=await r.req.json();if(!g.name||typeof g.name!="string")return r.json({error:"name is required"},400);let m=chunkNY47CFVP_cjs.i(),n=await t.create({collection:chunkNY47CFVP_cjs.d,data:{userId:i.id,name:g.name,key:m,keyPrefix:chunkNY47CFVP_cjs.j(m),permissions:Array.isArray(g.permissions)?g.permissions:["*"],expiresAt:g.expiresAt||null,createdAt:new Date().toISOString()}});return await E?.createAuditLog({action:"api_key_create",userId:i.id,resource:"api_key",resourceId:n.id,success:!0,metadata:{keyName:g.name}}),r.json({...n,key:m,permissions:Array.isArray(g.permissions)?g.permissions:["*"]},201)}catch(i){return console.error("[ApiKeys] POST error:",i),r.json({error:i.message},500)}}),b.delete("/api/keys/:id",async r=>{try{let{user:i}=await P(r.req.raw,D,l,u);if(!i||!chunkQ3Q7BJVQ_cjs.a(i,"users:admin"))return r.json({error:"Forbidden"},403);let g=r.req.param("id"),m=await t.findByID({collection:chunkNY47CFVP_cjs.d,id:g});return m?(await t.delete({collection:chunkNY47CFVP_cjs.d,id:g}),await E?.createAuditLog({action:"api_key_delete",userId:i.id,resource:"api_key",resourceId:g,success:!0,metadata:{keyName:m.name}}),r.json({message:"API key deleted"})):r.json({error:"API key not found"},404)}catch(i){return console.error("[ApiKeys] DELETE error:",i),r.json({error:i.message},500)}}),b.patch("/api/keys/:id",async r=>{try{let{user:i}=await P(r.req.raw,D,l,u);if(!i||!chunkQ3Q7BJVQ_cjs.a(i,"users:admin"))return r.json({error:"Forbidden"},403);let g=r.req.param("id"),m=await r.req.json(),n=await t.findByID({collection:chunkNY47CFVP_cjs.d,id:g});if(!n)return r.json({error:"API key not found"},404);let s={};if(typeof m.name=="string"&&m.name.trim()&&(s.name=m.name.trim()),Array.isArray(m.permissions)&&(s.permissions=m.permissions),m.expiresAt!==void 0&&(s.expiresAt=m.expiresAt||null),Object.keys(s).length===0)return r.json({error:"Nothing to update"},400);let p=await t.update({collection:chunkNY47CFVP_cjs.d,id:g,data:s});return r.json({...p,keyPrefix:n.keyPrefix})}catch(i){return console.error("[ApiKeys] PATCH error:",i),r.json({error:i.message},500)}}),b.post("/api/keys/:id/rotate",async r=>{try{let{user:i}=await P(r.req.raw,D,l,u);if(!i||!chunkQ3Q7BJVQ_cjs.a(i,"users:admin"))return r.json({error:"Forbidden"},403);let g=r.req.param("id"),m=await t.findByID({collection:chunkNY47CFVP_cjs.d,id:g});if(!m)return r.json({error:"API key not found"},404);let n=chunkNY47CFVP_cjs.i(),s=await t.update({collection:chunkNY47CFVP_cjs.d,id:g,data:{key:n,keyPrefix:chunkNY47CFVP_cjs.j(n),lastUsedAt:null}});return await E?.createAuditLog({action:"api_key_rotate",userId:i.id,resource:"api_key",resourceId:g,success:!0,metadata:{keyName:m.name}}),r.json({...s,key:n,permissions:m.permissions,expiresAt:m.expiresAt})}catch(i){return console.error("[ApiKeys] rotate error:",i),r.json({error:i.message},500)}}),b.get("/api/webhooks",async r=>{try{let{user:i}=await P(r.req.raw,D,l,u);if(!i||!chunkQ3Q7BJVQ_cjs.a(i,"users:read"))return r.json({error:"Forbidden"},403);if(!y)return r.json({error:"Webhook service not available"},503);let g=await y.getWebhooks();return r.json({docs:g})}catch(i){return console.error("[Webhooks] GET error:",i),r.json({error:i.message},500)}}),b.post("/api/webhooks",async r=>{try{let{user:i}=await P(r.req.raw,D,l,u);if(!i||!chunkQ3Q7BJVQ_cjs.a(i,"users:admin"))return r.json({error:"Forbidden"},403);if(!y)return r.json({error:"Webhook service not available"},503);let g=await r.req.json(),m=await y.createWebhook(g);return await E?.createAuditLog({action:"webhook_create",userId:i.id,resource:"webhook",resourceId:m.id,success:!0,metadata:{name:m.name,url:m.url}}),r.json(m,201)}catch(i){return console.error("[Webhooks] POST error:",i),r.json({error:i.message},500)}}),b.get("/api/webhooks/:id",async r=>{try{let{user:i}=await P(r.req.raw,D,l,u);if(!i||!chunkQ3Q7BJVQ_cjs.a(i,"users:read"))return r.json({error:"Forbidden"},403);if(!y)return r.json({error:"Webhook service not available"},503);let g=r.req.param("id"),m=await y.getWebhookById(g);return m?r.json(m):r.json({error:"Webhook not found"},404)}catch(i){return console.error("[Webhooks] GET :id error:",i),r.json({error:i.message},500)}}),b.patch("/api/webhooks/:id",async r=>{try{let{user:i}=await P(r.req.raw,D,l,u);if(!i||!chunkQ3Q7BJVQ_cjs.a(i,"users:admin"))return r.json({error:"Forbidden"},403);if(!y)return r.json({error:"Webhook service not available"},503);let g=r.req.param("id"),m=await r.req.json(),n=await y.updateWebhook(g,m);return n?(await E?.createAuditLog({action:"webhook_update",userId:i.id,resource:"webhook",resourceId:g,success:!0,metadata:{name:n.name}}),r.json(n)):r.json({error:"Webhook not found"},404)}catch(i){return console.error("[Webhooks] PATCH error:",i),r.json({error:i.message},500)}}),b.delete("/api/webhooks/:id",async r=>{try{let{user:i}=await P(r.req.raw,D,l,u);if(!i||!chunkQ3Q7BJVQ_cjs.a(i,"users:admin"))return r.json({error:"Forbidden"},403);if(!y)return r.json({error:"Webhook service not available"},503);let g=r.req.param("id"),m=await y.getWebhookById(g);return m?(await y.deleteWebhook(g),await E?.createAuditLog({action:"webhook_delete",userId:i.id,resource:"webhook",resourceId:g,success:!0,metadata:{name:m.name}}),r.json({message:"Webhook deleted"})):r.json({error:"Webhook not found"},404)}catch(i){return console.error("[Webhooks] DELETE error:",i),r.json({error:i.message},500)}}),b.post("/api/webhooks/:id/test",async r=>{try{let{user:i}=await P(r.req.raw,D,l,u);if(!i||!chunkQ3Q7BJVQ_cjs.a(i,"users:admin"))return r.json({error:"Forbidden"},403);if(!y)return r.json({error:"Webhook service not available"},503);let g=r.req.param("id"),m=await y.testWebhook(g);return m?r.json(m):r.json({error:"Webhook not found"},404)}catch(i){return console.error("[Webhooks] test error:",i),r.json({error:i.message},500)}}),b.get("/api/webhooks/:id/history",async r=>{try{let{user:i}=await P(r.req.raw,D,l,u);if(!i||!chunkQ3Q7BJVQ_cjs.a(i,"users:read"))return r.json({error:"Forbidden"},403);if(!y)return r.json({error:"Webhook service not available"},503);let g=r.req.param("id"),m=Math.min(parseInt(r.req.query("limit")||"50"),100),n=await y.getDeliveryHistory(g,m);return r.json({docs:n})}catch(i){return console.error("[Webhooks] history error:",i),r.json({error:i.message},500)}});function Ke(r){let i={},g=["name","type","required","hasMany","relationTo","options","min","max","minLength","maxLength","defaultValue","label","localized","admin","unique","index","hidden","readOnly","deprecated"];for(let m of g)m in r&&(i[m]=r[m]);return r.fields&&(i.fields=r.fields.map(Ke)),r.tabs&&(i.tabs=r.tabs.map(m=>({label:m.label,name:m.name,fields:m.fields.map(Ke)}))),i}b.get("/api/__schema",async r=>{try{let{user:i,apiKeyContext:g}=await P(r.req.raw,D,l,u);if(!i&&!g)return r.json({error:"Unauthorized"},401);let n=e.getCollections().filter(s=>s.slug!=="users"&&s.slug!=="audit_logs").map(s=>({slug:s.slug,label:s.label,labelPlural:s.labelPlural,singularLabel:s.singularLabel,timestamps:s.timestamps,auth:!!s.auth,tenantScoped:!!s.tenantScoped,upload:s.upload?{staticDir:s.upload.staticDir,imageSizes:s.upload.imageSizes,mimeTypes:s.upload.mimeTypes}:void 0,fields:s.fields.map(Ke)}));return r.json(n)}catch(i){return console.error("[Schema] error:",i),r.json({error:i.message},500)}});let tr=e.getCollections();for(let r of tr){let m=function(n,s){let p=[],w=new Set([...Object.keys(n),...Object.keys(s)]);for(let f of w)f==="id"||f==="createdAt"||f==="updatedAt"||JSON.stringify(n[f])!==JSON.stringify(s[f])&&p.push({field:f,oldValue:f in n?n[f]:void 0,newValue:f in s?s[f]:void 0});return p};let i=r.slug;if(i==="users"||i==="audit_logs")continue;let g=`/api/${i}`;b.get(g,async n=>{try{let{user:s,tenantID:p,apiKeyContext:w}=await P(n.req.raw,D,l,u),f=await $(r,"read",n.req.raw,s,p,w,R,k);if(!f.allowed)return n.json({error:f.error},f.status||403);p&&t.setTenantContext({tenantId:p,userId:s?.id??"",role:s?.role,isSuperAdmin:s?.role==="super_admin"});let A=new URL(n.req.url),S=parseInt(A.searchParams.get("page")||"1"),v=Math.min(parseInt(A.searchParams.get("limit")||"10"),100),x=A.searchParams.get("sort")||void 0,T=parseInt(A.searchParams.get("depth")||"0"),j=A.searchParams.get("select")?.split(",")||void 0,q=A.searchParams.get("draft"),C=q==="true"?!0:q==="false"?!1:!!s,L={},X=A.searchParams.get("where");if(X)try{L=JSON.parse(X);}catch{return n.json({error:"Invalid JSON in where parameter"},400)}let N=await t.find({collection:i,where:L,sort:x,limit:v,page:S,depth:T,tenantID:p,select:j,draft:C});return await Be(N.docs,r,t,e),n.json(N)}catch(s){return console.error("[API] list error:",s),n.json({error:s.message},500)}}),b.get(`${g}/:id/versions`,async n=>{try{let{user:s,tenantID:p,apiKeyContext:w}=await P(n.req.raw,D,l,u),f=await $(r,"read",n.req.raw,s,p,w,R,k);if(!f.allowed)return n.json({error:f.error},f.status||403);let A=n.req.param("id");if(!A)return n.json({error:"Missing document ID"},400);let S=new URL(n.req.url),v=S.searchParams.get("compareA"),x=S.searchParams.get("compareB");if(Fe(E,w,`${g}/${A}/versions`,"GET",n.req.raw),v&&x){let[C,L]=await Promise.all([t.findVersionByID({collection:i,versionId:v,tenantID:p}),t.findVersionByID({collection:i,versionId:x,tenantID:p})]);if(!C||!L)return n.json({error:"Version not found"},404);let X=m(C.data,L.data);return n.json({diffs:X})}let T=parseInt(S.searchParams.get("page")||"1"),j=Math.min(parseInt(S.searchParams.get("limit")||"10"),100),q=await t.findVersions({collection:i,documentId:A,page:T,limit:j,tenantID:p});return n.json(q)}catch(s){return console.error("[API] versions error:",s),n.json({error:s.message},500)}}),b.put(`${g}/:id/draft`,async n=>{try{let{user:s,tenantID:p,apiKeyContext:w}=await P(n.req.raw,D,l,u),f=await $(r,"update",n.req.raw,s,p,w,R,k);if(!f.allowed)return n.json({error:f.error},f.status||403);let A=n.req.param("id"),S=await n.req.json(),v=pt(S),x=await t.findByID({collection:i,id:A,tenantID:p,draft:!0});if(!x)return n.json({error:"Document not found"},404);let T;S.delta?T={...x,...S.delta}:T=S.data??mt(S);let j=await t.updateLatestVersion({collection:i,documentId:A,data:T,status:"draft",tenantID:p});return s&&E?.createAuditLog({action:"document_update",userId:s.id,resource:i,resourceId:A,success:!0,metadata:{type:"draft_save"}}),n.json({data:j,message:"Draft saved successfully"})}catch(s){return n.json({error:s.message},500)}}),b.delete(`${g}/:id/draft`,async n=>{try{let{user:s,tenantID:p,apiKeyContext:w}=await P(n.req.raw,D,l,u),f=await $(r,"update",n.req.raw,s,p,w,R,k);return f.allowed?(s&&E?.createAuditLog({action:"document_update",userId:s.id,resource:i,resourceId:n.req.param("id"),success:!0,metadata:{type:"draft_discard"}}),n.json({message:"Draft discarded successfully"})):n.json({error:f.error},f.status||403)}catch(s){return n.json({error:s.message},500)}}),b.get(`${g}/:id`,async n=>{try{let{user:s,tenantID:p,apiKeyContext:w}=await P(n.req.raw,D,l,u),f=await $(r,"read",n.req.raw,s,p,w,R,k);if(!f.allowed)return n.json({error:f.error},f.status||403);let A=n.req.param("id"),S=new URL(n.req.url),v=parseInt(S.searchParams.get("depth")||"0"),x=S.searchParams.get("select")?.split(",")||void 0,T=S.searchParams.get("draft"),j=T==="true"?!0:T==="false"?!1:!!s,q=await t.findByID({collection:i,id:A,depth:v,tenantID:p,select:x,draft:j});return !q&&r.fields.some(C=>C.name==="slug")&&(q=await t.findOne({collection:i,where:{slug:A},tenantID:p,draft:j})),q?(await Be([q],r,t,e),n.json({data:q})):n.json({error:"Document not found"},404)}catch(s){return n.json({error:s.message},500)}}),b.post(g,async n=>{try{let{user:s,tenantID:p,apiKeyContext:w}=await P(n.req.raw,D,l,u),f=await $(r,"create",n.req.raw,s,p,w,R,k);if(!f.allowed)return n.json({error:f.error},f.status||403);p&&t.setTenantContext({tenantId:p,userId:s?.id??"",role:s?.role,isSuperAdmin:s?.role==="super_admin"}),Fe(E,w,g,"POST",n.req.raw);let S=await n.req.json();pe(S,r.fields),me(r.fields,S);let v=n.req.raw;if(r.hooks?.beforeValidate)for(let q of r.hooks.beforeValidate){let C=await q({collection:i,data:S,req:v,user:s,tenantID:p,operation:"create"});C&&Object.assign(S,C);}let x=e.getCreateZodSchema(i);try{S=x.parse(S);}catch(q){return n.json({error:`Validation failed: ${Ne(q.errors)}`,details:q.errors},400)}r.tenantScoped&&p&&(S.tenantID=p);let T=r.versions?.drafts===!0;if(S.status=T?"draft":"published",r.hooks?.beforeChange)for(let q of r.hooks.beforeChange){let C=await q({collection:i,data:S,req:v,user:s,tenantID:p,operation:"create"});C&&Object.assign(S,C);}let j=await t.create({collection:i,data:S,tenantID:p});if(T&&await t.createVersion({collection:i,documentId:j.id,data:S,status:"draft",createdBy:s?.id,changeDescription:"Created",tenantID:p}),r.hooks?.afterChange)for(let q of r.hooks.afterChange)await q({collection:i,doc:j,data:S,req:v,user:s,tenantID:p,operation:"create"});return y&&y.trigger(Se(i,"create"),{collection:i,operation:"create",data:j,user:s?{id:s.id,email:s.email,role:s.role}:void 0,tenantId:p}).catch(q=>console.error("[Webhook] Failed to trigger:",q)),s&&E?.createAuditLog({action:"document_create",userId:s.id,resource:i,resourceId:j.id,success:!0}),n.json({data:j,message:"Created successfully"},201)}catch(s){return s.name==="ZodError"?n.json({error:`Validation failed: ${Ne(s.errors)}`,details:s.errors},400):n.json({error:s.message},500)}}),b.patch(`${g}/:id`,async n=>{try{let{user:s,tenantID:p,apiKeyContext:w}=await P(n.req.raw,D,l,u),f=await $(r,"update",n.req.raw,s,p,w,R,k);if(!f.allowed)return n.json({error:f.error},f.status||403);let A=n.req.param("id"),S=await n.req.json(),v=pt(S),x=await t.findByID({collection:i,id:A,tenantID:p,draft:!0});if(!x)return n.json({error:"Document not found"},404);if(v&&x.updatedAt&&v!==x.updatedAt)return n.json(Jt(v,x),409);let T=Object.fromEntries(Object.entries(mt(S)).filter(([O,K])=>K!=="null"&&K!==void 0));pe(T,r.fields),me(r.fields,T);let j=n.req.raw;if(r.hooks?.beforeValidate)for(let O of r.hooks.beforeValidate){let K=await O({collection:i,data:T,originalDoc:x,req:j,user:s,tenantID:p,operation:"update"});K&&Object.assign(T,K);}if(T=e.getUpdateZodSchema(i).parse(T),r.hooks?.beforeChange)for(let O of r.hooks.beforeChange){let K=await O({collection:i,data:T,originalDoc:x,req:j,user:s,tenantID:p,operation:"update"});K&&Object.assign(T,K);}let C=n.req.header("X-Draft")==="true",L=r.versions?.drafts===!0,X=n.req.query("autosave")==="true",N;if(L&&C?await t.createVersion({collection:i,documentId:A,data:T,status:"draft",autosave:X,createdBy:s?.id,changeDescription:X?"Autosave":"Draft saved",tenantID:p}):L?(await t.update({collection:i,id:A,data:{...T,status:"published"},tenantID:p}),await t.createVersion({collection:i,documentId:A,data:T,status:"published",createdBy:s?.id,changeDescription:"Published",tenantID:p})):await t.update({collection:i,id:A,data:T,tenantID:p}),N=await t.findByID({collection:i,id:A,tenantID:p,draft:!0}),r.hooks?.afterChange)for(let O of r.hooks.afterChange)await O({collection:i,doc:N,data:T,originalDoc:x,req:j,user:s,tenantID:p,operation:"update"});return y&&y.trigger(Se(i,"update"),{collection:i,operation:"update",data:N,previousData:x,user:s?{id:s.id,email:s.email,role:s.role}:void 0,tenantId:p}).catch(O=>console.error("[Webhook] Failed to trigger:",O)),Fe(E,w,`${g}/${A}`,"PATCH",n.req.raw),s&&E?.createAuditLog({action:"document_update",userId:s.id,resource:i,resourceId:A,success:!0}),n.json({data:N,message:L?"Draft saved":"Updated successfully"})}catch(s){return s.name==="ZodError"?(console.error(`[PATCH ${g}/:id] Validation failed:`,s.errors),n.json({error:`Validation failed: ${Ne(s.errors)}`,details:s.errors},400)):(console.error(`[PATCH ${g}/:id] ERROR:`,s.message,"CAUSE:",s.cause?.message||s.cause,"QUERY:",s.query),n.json({error:s.message},500))}}),b.delete(`${g}/:id`,async n=>{try{let{user:s,tenantID:p,apiKeyContext:w}=await P(n.req.raw,D,l,u),f=await $(r,"delete",n.req.raw,s,p,w,R,k);if(!f.allowed)return n.json({error:f.error},f.status||403);p&&t.setTenantContext({tenantId:p,userId:s?.id??"",role:s?.role,isSuperAdmin:s?.role==="super_admin"});let A=n.req.param("id"),S=n.req.raw,v=await t.findByID({collection:i,id:A,tenantID:p,draft:!0});if(!v)return n.json({error:"Document not found"},404);if(r.hooks?.beforeDelete)for(let T of r.hooks.beforeDelete)await T({collection:i,doc:v,req:S,user:s,tenantID:p,operation:"delete"});let x=await t.delete({collection:i,id:A,tenantID:p});if(r.hooks?.afterDelete)for(let T of r.hooks.afterDelete)await T({collection:i,doc:x,originalDoc:v,req:S,user:s,tenantID:p,operation:"delete"});return y&&y.trigger(Se(i,"delete"),{collection:i,operation:"delete",data:x,previousData:v,user:s?{id:s.id,email:s.email,role:s.role}:void 0,tenantId:p}).catch(T=>console.error("[Webhook] Failed to trigger:",T)),Fe(E,w,`${g}/${A}`,"DELETE",n.req.raw),s&&E?.createAuditLog({action:"document_delete",userId:s.id,resource:i,resourceId:A,success:!0}),n.json({data:x,message:"Deleted successfully"})}catch(s){return console.error(`[DELETE] Error deleting ${i}:`,s),n.json({error:s.message||String(s)},500)}}),b.post(`${g}/:id/duplicate`,async n=>{try{let{user:s,tenantID:p,apiKeyContext:w}=await P(n.req.raw,D,l,u),f=await $(r,"create",n.req.raw,s,p,w,R,k);if(!f.allowed)return n.json({error:f.error},f.status||403);let A=n.req.param("id"),S=await t.findByID({collection:i,id:A,tenantID:p,draft:!0});if(!S)return n.json({error:"Document not found"},404);let{id:v,createdAt:x,updatedAt:T,...j}=S,q=Date.now().toString(36),C=`${S.slug||"document"}-copy-${q}`,L=await t.create({collection:i,data:{...j,slug:C,status:"draft"},tenantID:p});return n.json({data:L,message:"Document duplicated successfully"})}catch(s){return console.error("[Duplicate] Error:",s),n.json({error:s.message||String(s)},500)}}),b.post(`${g}/:id/versions/:versionId/restore`,async n=>{try{let{user:s,tenantID:p,apiKeyContext:w}=await P(n.req.raw,D,l,u),f=await $(r,"update",n.req.raw,s,p,w,R,k);if(!f.allowed)return n.json({error:f.error},f.status||403);let A=n.req.param("id"),S=n.req.param("versionId"),v=await t.findVersionByID({collection:i,versionId:S,tenantID:p});if(!v)return n.json({error:"Version not found"},404);let x=await t.update({collection:i,id:A,data:{...v.data,status:"draft"},tenantID:p});return n.json({data:x,message:"Version restored successfully"})}catch(s){return n.json({error:s.message},500)}}),b.post(`${g}/:id/versions`,async n=>{try{let{user:s,tenantID:p,apiKeyContext:w}=await P(n.req.raw,D,l,u),f=await $(r,"update",n.req.raw,s,p,w,R,k);if(!f.allowed)return n.json({error:f.error},f.status||403);let A=await n.req.json(),{versionId:S,action:v}=A;if(v==="restore"&&S){let x=await t.findVersionByID({collection:i,versionId:S,tenantID:p});if(!x)return n.json({error:"Version not found"},404);let T=await t.update({collection:i,id:n.req.param("id"),data:{...x.data,status:"draft"},tenantID:p});return n.json({data:T,message:"Version restored successfully"})}return n.json({error:"Invalid action"},400)}catch(s){return n.json({error:s.message},500)}}),b.post(`${g}/:id/publish`,async n=>{try{let{user:s,tenantID:p,apiKeyContext:w}=await P(n.req.raw,D,l,u),f=await $(r,"update",n.req.raw,s,p,w,R,k);if(!f.allowed)return n.json({error:f.error},f.status||403);p&&t.setTenantContext({tenantId:p,userId:s?.id??"",role:s?.role,isSuperAdmin:s?.role==="super_admin"});let A=n.req.param("id"),S=await n.req.json().catch(()=>({})),v=pt(S),x=await t.findByID({collection:i,id:A,tenantID:p,draft:!0});if(!x)return n.json({error:"Document not found"},404);if(v&&x.updatedAt&&v!==x.updatedAt)return n.json(Jt(v,x),409);let T={status:"published"},j=x;if(r.versions?.drafts){let C=await t.findVersions({collection:i,documentId:A,limit:1,sort:"-createdAt",tenantID:p});if(C.docs.length>0){let L=C.docs[0];j={...x,...L.data},T={...L.data,...T};}}let q=await t.update({collection:i,id:A,data:T,tenantID:p});return r.versions?.drafts&&await t.createVersion({collection:i,documentId:A,data:{...j,status:"published"},status:"published",createdBy:s?.id,changeDescription:"Published",tenantID:p}),y&&y.trigger(Se(i,"update"),{collection:i,operation:"update",data:q,user:s?{id:s.id,email:s.email,role:s.role}:void 0,tenantId:p}).catch(C=>console.error("[Webhook] Failed to trigger:",C)),n.json({data:q,message:"Published successfully"})}catch(s){return n.json({error:s.message},500)}}),b.post(`${g}/:id/unpublish`,async n=>{try{let{user:s,tenantID:p,apiKeyContext:w}=await P(n.req.raw,D,l,u),f=await $(r,"update",n.req.raw,s,p,w,R,k);if(!f.allowed)return n.json({error:f.error},f.status||403);let A=n.req.param("id");if(!await t.findByID({collection:i,id:A,tenantID:p,draft:!0}))return n.json({error:"Document not found"},404);let v=await t.update({collection:i,id:A,data:{status:"draft"},tenantID:p});return y&&y.trigger(Se(i,"update"),{collection:i,operation:"update",data:v,user:s?{id:s.id,email:s.email,role:s.role}:void 0,tenantId:p}).catch(x=>console.error("[Webhook] Failed to trigger:",x)),n.json({data:v,message:"Unpublished successfully"})}catch(s){return n.json({error:s.message},500)}});}for(let r of e.getGlobals()){let i=r.slug,g=`/api/globals/${i}`;b.get(g,async n=>{try{let{user:s,tenantID:p}=await P(n.req.raw,D,l,u),w=await Y(r,"read",n.req.raw,s,p,R);if(!w.allowed)return n.json({error:w.error},w.status||403);let f=!!s,A=await t.findOne({collection:`_globals_${i}`,where:{},tenantID:p,draft:f});if(i==="system"){let S=ar__default.default.randomBytes(32).toString("hex");A?A.appSecret||(await t.update({collection:`_globals_${i}`,id:i,data:{appSecret:S},tenantID:p}),A.appSecret=S):A=await t.create({collection:`_globals_${i}`,data:{id:i,appSecret:S},tenantID:p});}return n.json({data:A||{}})}catch(s){return n.json({error:s.message},500)}});let m=async n=>{try{let{user:s,tenantID:p}=await P(n.req.raw,D,l,u),w=await Y(r,"update",n.req.raw,s,p,R);if(!w.allowed)return n.json({error:w.error},w.status||403);let f=mt(await n.req.json()),A=Object.fromEntries(Object.entries(f).filter(([O,K])=>K!==null&&K!=="null"&&K!==void 0));pe(A,r.fields),me(r.fields,A);let S=e.getUpdateZodSchema(i),v;try{v=S.parse(A);}catch(O){return n.json({error:`Validation failed: ${Ne(O.errors)}`,details:O.errors},400)}let x=new Set(["id","createdAt","updatedAt","status","baseUpdatedAt","_baseUpdatedAt"]),T=Object.fromEntries(Object.entries(v).filter(([O])=>!x.has(O))),j=`_globals_${i}`,q=await t.findOne({collection:j,where:{},tenantID:p,draft:!0}),C=n.req.header("X-Draft")==="true",L=r.versions?.drafts===!0,X=n.req.query("autosave")==="true",N;if(L&&C)await t.createVersion({collection:j,documentId:i,data:T,status:"draft",autosave:X,createdBy:s?.id,changeDescription:X?"Autosave":"Manual save",tenantID:p}),q?N=q:N=await t.create({collection:j,data:{...T,id:i,status:"draft"},tenantID:p});else if(L&&!C){let O="published";q?N=await t.update({collection:j,id:i,data:{...T,status:O},tenantID:p}):N=await t.create({collection:j,data:{...T,id:i,status:O},tenantID:p}),await t.createVersion({collection:j,documentId:i,data:T,status:O,autosave:!1,createdBy:s?.id,changeDescription:"Published",tenantID:p});}else q?N=await t.update({collection:j,id:i,data:T,tenantID:p}):N=await t.create({collection:j,data:{...T,id:i},tenantID:p});if(i==="storage-settings"&&(oe=null,le=null),i==="email-settings"){let O=await chunkAJAZ7D3W_cjs.b.fromConfig(t);M.email=O||void 0;}return i==="system"&&await Pt(),s&&E?.createAuditLog({action:"settings_change",userId:s.id,resource:`global:${i}`,resourceId:i,success:!0}),n.json({data:N,message:"Updated successfully"})}catch(s){return console.error(`[API] Save global "${i}" failed:`,s),n.json({error:s.message||"Save failed",stack:process.env.NODE_ENV==="development"?s.stack:void 0},500)}};b.post(g,m),b.patch(g,m),b.post(`${g}/publish`,async n=>{try{let{user:s,tenantID:p}=await P(n.req.raw,D,l,u),w=await Y(r,"update",n.req.raw,s,p,R);if(!w.allowed)return n.json({error:w.error},403);let f=`_globals_${i}`,A=await t.findOne({collection:f,where:{},tenantID:p,draft:!0});if(!A)return n.json({error:"Global not found"},404);let S={status:"published"},v=A;if(r.versions?.drafts){let T=await t.findVersions({collection:f,documentId:i,limit:1,sort:"-createdAt",tenantID:p});T.docs.length>0&&(v={...A,...T.docs[0].data},S={...T.docs[0].data,...S});}let x=await t.update({collection:f,id:i,data:S,tenantID:p});return r.versions?.drafts&&await t.createVersion({collection:f,documentId:i,data:{...v,status:"published"},status:"published",createdBy:s?.id,changeDescription:"Published",tenantID:p}),n.json({data:x,message:"Published successfully"})}catch(s){return n.json({error:s.message},500)}}),b.post(`${g}/unpublish`,async n=>{try{let{user:s,tenantID:p}=await P(n.req.raw,D,l,u),w=await Y(r,"update",n.req.raw,s,p,R);if(!w.allowed)return n.json({error:w.error},403);let f=await t.update({collection:`_globals_${i}`,id:i,data:{status:"draft"},tenantID:p});return n.json({data:f,message:"Unpublished successfully"})}catch(s){return n.json({error:s.message},500)}}),b.get(`${g}/versions`,async n=>{try{let{user:s,tenantID:p}=await P(n.req.raw,D,l,u),w=await Y(r,"read",n.req.raw,s,p,R);if(!w.allowed)return n.json({error:w.error},403);let f=parseInt(n.req.query("limit")||"10"),A=parseInt(n.req.query("page")||"1"),S=await t.findVersions({collection:`_globals_${i}`,documentId:i,limit:f,page:A,tenantID:p});return n.json(S)}catch(s){return n.json({error:s.message},500)}}),b.get(`${g}/versions/:versionId`,async n=>{try{let s=n.req.param("versionId"),{user:p,tenantID:w}=await P(n.req.raw,D,l,u),f=await Y(r,"read",n.req.raw,p,w,R);if(!f.allowed)return n.json({error:f.error},403);let A=await t.findVersionByID({collection:`_globals_${i}`,versionId:s,tenantID:w});return A?n.json({data:A}):n.json({error:"Version not found"},404)}catch(s){return n.json({error:s.message},500)}}),b.post(`${g}/versions/:versionId/restore`,async n=>{try{let s=n.req.param("versionId"),{user:p,tenantID:w}=await P(n.req.raw,D,l,u),f=await Y(r,"update",n.req.raw,p,w,R);if(!f.allowed)return n.json({error:f.error},403);let A=`_globals_${i}`,S=await t.findVersionByID({collection:A,versionId:s,tenantID:w});if(!S)return n.json({error:"Version not found"},404);let v=await t.update({collection:A,id:i,data:{...S.data,status:"draft"},tenantID:w});return n.json({data:v,message:"Version restored successfully"})}catch(s){return n.json({error:s.message},500)}}),i==="email-settings"&&b.post(`${g}/test`,async n=>{try{let{user:s,tenantID:p}=await P(n.req.raw,D,l,u),w=await Y(r,"update",n.req.raw,s,p,R);if(!w.allowed)return n.json({error:w.error},w.status||403);let f=await n.req.json(),A={provider:f.provider,from:f.fromEmail||f.from,fromName:f.fromName,replyTo:f.replyTo,smtp:f.smtp?{host:f.smtp.host,port:f.smtp.port,secure:f.smtp.secure,auth:{user:f.smtp.username||f.smtp.user,pass:f.smtp.password||f.smtp.pass}}:void 0,resend:f.resend,sendgrid:f.sendgrid,mailgun:f.mailgun,ses:f.ses},S=new chunkAJAZ7D3W_cjs.b(A),v=f.testEmail||f.testEmailSection&&f.testEmailSection.testEmail;return v?(await S.send({to:v,subject:"Kyro CMS - Test Email",html:`
+              <div style="font-family: sans-serif; max-width: 600px; margin: 0 auto; padding: 20px; border: 1px solid #e2e8f0; border-radius: 8px;">
+                <h1 style="color: #0b1222; margin-bottom: 16px;">Success! \u{1F680}</h1>
+                <p style="font-size: 16px; color: #334155; line-height: 1.6;">
+                  Your email settings in <b>Kyro CMS</b> are working correctly.
+                </p>
+                <div style="background: #f8fafc; padding: 16px; border-radius: 6px; margin: 24px 0;">
+                  <p style="margin: 0; font-size: 14px; color: #64748b;">
+                    <b>Provider:</b> ${f.provider.toUpperCase()}
+                  </p>
+                  <p style="margin: 8px 0 0; font-size: 14px; color: #64748b;">
+                    <b>Sent at:</b> ${new Date().toLocaleString()}
+                  </p>
+                </div>
+                <p style="font-size: 12px; color: #94a3b8; margin-top: 32px; border-top: 1px solid #f1f5f9; padding-top: 16px;">
+                  This is a test email sent from the Kyro CMS Admin Panel.
+                </p>
+              </div>
+            `,text:`Success! Your email settings in Kyro CMS are working correctly.
+
+Provider: ${f.provider}
+Sent at: ${new Date().toLocaleString()}`}),n.json({message:"Test email sent successfully!"})):n.json({error:"No test recipient email provided"},400)}catch(s){return console.error("[Email Test] Failed:",s),n.json({error:s.message||"Failed to send test email"},500)}});}return b.onError((r,i)=>(console.error(`[API Error] ${i.req.method} ${i.req.path}:`,r),i.json({error:r.message||"Internal server error",code:"INTERNAL_ERROR"},500))),b}function Mr(c,e,t){return Qt({registry:c,db:e,authSecret:t?.authSecret,user:t?.user,req:t?.req,tenantID:t?.tenantID,cors:t?.cors,webhookService:t?.webhookService})}exports.a=Ur;exports.b=kr;exports.c=Er;exports.d=Wt;exports.e=ue;exports.f=ot;exports.g=zr;exports.h=Pt;exports.i=nr;exports.j=Wr;exports.k=Ut;exports.l=He;exports.m=qe;exports.n=$t;exports.o=ns;exports.p=Lt;exports.q=Ee;exports.r=_e;exports.s=Qt;exports.t=Mr;

package/dist/{chunk-KSWGDCZE.js → chunk-SB33D472.js}

@@ -1,4 +1,4 @@
-import {a}from'./chunk-NZ35PV5R.js';import {a as a$2,i}from'./chunk-7N6NKCRT.js';import {c as c$1,a as a$1}from'./chunk-R6UUTH3T.js';import {f,s,a as a$4,b as b$3,c as c$3}from'./chunk-SW7WHMNI.js';import {n,e,f as f$1}from'./chunk-UVTS2IWM.js';import {d,f as f$2,e as e$1,g as g$1}from'./chunk-HLSB2MCK.js';import {b as b$1,d as d$1}from'./chunk-SL3LZQCF.js';import {c}from'./chunk-VKXQUYYV.js';import {g}from'./chunk-OG7CNQGU.js';import {a as a$3,c as c$2,b as b$2,d as d$2}from'./chunk-ZAQOSRP6.js';import {z as z$1}from'zod';import {createYoga}from'graphql-yoga';import {createRequire}from'module';import {randomBytes}from'crypto';function O(n,e){for(let t of n){if(t.name===e)return  true;if("tabs"in t&&t.tabs){for(let s of t.tabs)if(O(s.fields,e))return  true}if("fields"in t&&t.fields&&O(t.fields,e))return  true}return  false}var K=class extends Error{errors;constructor(e){super(`Configuration validation failed:
+import {a}from'./chunk-NZ35PV5R.js';import {a as a$2,i}from'./chunk-7N6NKCRT.js';import {c as c$1,a as a$1}from'./chunk-R6UUTH3T.js';import {f,s,a as a$4,b as b$3,c as c$3}from'./chunk-G3DZDZIP.js';import {n,e,f as f$1}from'./chunk-UVTS2IWM.js';import {d,f as f$2,e as e$1,g as g$1}from'./chunk-HLSB2MCK.js';import {b as b$1,d as d$1}from'./chunk-SL3LZQCF.js';import {c}from'./chunk-VKXQUYYV.js';import {g}from'./chunk-OG7CNQGU.js';import {a as a$3,c as c$2,b as b$2,d as d$2}from'./chunk-ZAQOSRP6.js';import {z as z$1}from'zod';import {createYoga}from'graphql-yoga';import {createRequire}from'module';import {randomBytes}from'crypto';function O(n,e){for(let t of n){if(t.name===e)return  true;if("tabs"in t&&t.tabs){for(let s of t.tabs)if(O(s.fields,e))return  true}if("fields"in t&&t.fields&&O(t.fields,e))return  true}return  false}var K=class extends Error{errors;constructor(e){super(`Configuration validation failed:
 ${e.join(`
 `)}`),this.name="ConfigValidationError",this.errors=e;}};function V(n){let e=[];if(n.slug?/^[a-z][a-z0-9_-]*$/.test(n.slug)||e.push(`Collection slug "${n.slug}" must be lowercase alphanumeric with dashes`):e.push('Collection is missing a "slug" property'),!n.fields||n.fields.length===0)e.push(`Collection "${n.slug}" has no fields defined`);else {let t=x(n.fields,n.slug);e.push(...t);}if(n.access)for(let[t,s]of Object.entries(n.access))typeof s!="boolean"&&typeof s!="function"&&e.push(`Collection "${n.slug}" has invalid access.${t} (must be boolean or function)`);if(n.admin?.useAsTitle&&(O(n.fields,n.admin.useAsTitle)||e.push(`Collection "${n.slug}" admin.useAsTitle references unknown field "${n.admin.useAsTitle}"`)),n.admin?.defaultColumns)for(let t of n.admin.defaultColumns)O(n.fields,t)||e.push(`Collection "${n.slug}" admin.defaultColumns references unknown field "${t}"`);if(n.upload&&n.upload.fileSize&&n.upload.fileSize<=0&&e.push(`Collection "${n.slug}" upload.fileSize must be positive`),n.versions&&n.versions.maxPerDoc&&n.versions.maxPerDoc<=0&&e.push(`Collection "${n.slug}" versions.maxPerDoc must be positive`),n.auth){let t=n.fields.some(a=>a.name==="email"),s=n.fields.some(a=>a.name==="password");t||e.push(`Collection "${n.slug}" with auth enabled requires an "email" field`),s||e.push(`Collection "${n.slug}" with auth enabled requires a "password" field`);}return e}function B(n){let e=[];if(n.slug?/^[a-z][a-z0-9_-]*$/.test(n.slug)||e.push(`Global slug "${n.slug}" must be lowercase alphanumeric with dashes`):e.push('Global is missing a "slug" property'),!n.fields||n.fields.length===0)e.push(`Global "${n.slug}" has no fields defined`);else {let t=x(n.fields,`global:${n.slug}`);e.push(...t);}return e}function x(n,e){let t=[],s=new Set;for(let a=0;a<n.length;a++){let o=n[a];if(o.type==="row"||o.type==="collapsible"||o.type==="tabs"){if("fields"in o&&o.fields){let r=x(o.fields,e);t.push(...r);}else if("tabs"in o)for(let r of o.tabs){let c=x(r.fields,e);t.push(...c);}continue}let i=o.name;if(!i){t.push(`${e}: Field at index ${a} is missing a "name" property`);continue}if(s.has(i)&&t.push(`${e}: Duplicate field name "${i}"`),s.add(i),/^[a-zA-Z][a-zA-Z0-9_]*$/.test(i)||t.push(`${e}: Field name "${i}" must be alphanumeric with underscores`),!o.type){t.push(`${e}: Field "${i}" is missing a "type" property`);continue}switch(o.type){case "relationship":o.relationTo||t.push(`${e}: Relationship field "${i}" is missing "relationTo"`);break;case "array":if(!o.fields||o.fields.length===0)t.push(`${e}: Array field "${i}" has no fields defined`);else {let r=x(o.fields,`${e}.${i}`);t.push(...r);}break;case "group":if(!o.fields||o.fields.length===0)t.push(`${e}: Group field "${i}" has no fields defined`);else {let r=x(o.fields,`${e}.${i}`);t.push(...r);}break;case "blocks":if(!o.blocks||o.blocks.length===0)t.push(`${e}: Blocks field "${i}" has no blocks defined`);else {let r=ve(o.blocks,`${e}.${i}`);t.push(...r);}break;case "select":case "radio":if((!o.options||o.options.length===0)&&!o.dynamicOptions)t.push(`${e}: ${o.type} field "${i}" has no options defined`);else if(o.options){let r=o.options.map(d=>d.value),c=new Set(r);r.length!==c.size&&t.push(`${e}: ${o.type} field "${i}" has duplicate option values`);}break;case "upload":o.relationTo||t.push(`${e}: Upload field "${i}" is missing "relationTo"`);break}"min"in o&&"max"in o&&o.min>o.max&&t.push(`${e}: Field "${i}" has min greater than max`),"minLength"in o&&"maxLength"in o&&o.minLength>o.maxLength&&t.push(`${e}: Field "${i}" has minLength greater than maxLength`),"minRows"in o&&"maxRows"in o&&o.minRows>o.maxRows&&t.push(`${e}: Field "${i}" has minRows greater than maxRows`);}return t}function ve(n,e){let t=[],s=new Set;for(let a of n){if(!a.slug){t.push(`${e}: Block is missing a "slug" property`);continue}if(s.has(a.slug)&&t.push(`${e}: Duplicate block slug "${a.slug}"`),s.add(a.slug),a.label||t.push(`${e}: Block "${a.slug}" is missing a "label" property`),!a.fields||a.fields.length===0)t.push(`${e}: Block "${a.slug}" has no fields defined`);else {let o=x(a.fields,`${e}.${a.slug}`);t.push(...o);}}return t}function pe(n,e=[]){let t=[],s=new Set;for(let a of n)s.has(a.slug)&&t.push(`Duplicate collection slug "${a.slug}"`),s.add(a.slug);for(let a of e)s.has(a.slug)&&t.push(`Duplicate global slug "${a.slug}"`),s.add(a.slug);for(let a of n){let o=V(a);t.push(...o);}for(let a of e){let o=B(a);t.push(...o);}for(let a of n){let o=$(a.fields,n);t.push(...o);}if(t.length>0)throw new K(t)}function $(n,e){let t=[],s=new Set(e.map(a=>a.slug));for(let a of n){if(a.type==="relationship"){let o=Array.isArray(a.relationTo)?a.relationTo:[a.relationTo];for(let i of o)s.has(i)||console.warn(`[Kyro Config Warning]: Relationship field "${a.name}" references unknown collection "${i}". Select options will not be available until this collection is registered.`);}if(a.type==="upload"){let o=Array.isArray(a.relationTo)?a.relationTo:[a.relationTo];for(let i of o)s.has(i)||t.push(`Upload field "${a.name}" references unknown collection "${i}"`);}if("fields"in a&&a.fields){let o=$(a.fields,e);t.push(...o);}if("tabs"in a)for(let o of a.tabs){let i=$(o.fields,e);t.push(...i);}if("blocks"in a)for(let o of a.blocks){let i=$(o.fields,e);t.push(...i);}}return t}function C(n){switch(n.type){case "text":return De(n);case "number":return we(n);case "checkbox":return Fe(n);case "date":return Ie(n);case "email":return $e(n);case "password":return Oe(n);case "textarea":return Pe(n);case "select":return Le(n);case "radio":return ke(n);case "color":return _e(n);case "richtext":return je(n);case "json":return Ze(n);case "code":return qe(n);case "upload":return fe(n);case "image":return fe(n);case "markdown":return Ue(n);case "relationship":return ye(n);case "relationship-block":return ye(n);case "array":return Ge(n);case "list":return Ke(n);case "group":return Ve(n);case "blocks":return Be(n);case "row":return Me(n);case "collapsible":return ze(n);case "tabs":return We(n);default:return z$1.any()}}function De(n){let e=z$1.string();return n.minLength&&(e=e.min(n.minLength)),n.maxLength&&(e=e.max(n.maxLength)),n.pattern&&(e=e.regex(new RegExp(n.pattern))),n.variant==="email"&&(e=e.email()),n.variant==="url"&&(e=e.url()),n.hasMany&&(e=z$1.array(e)),n.required||(e=e.optional().nullable()),n.validate&&(e=b(e,n.validate)),e}function we(n){let e=n.integer?z$1.coerce.number().int():z$1.coerce.number();return n.min!==void 0&&(e=e.min(n.min)),n.max!==void 0&&(e=e.max(n.max)),n.step&&(e=e.refine(t=>Number.isInteger(t/n.step),`Value must be divisible by ${n.step}`)),n.hasMany&&(e=z$1.array(e)),n.required||(e=e.optional().nullable()),n.validate&&(e=b(e,n.validate)),e}function Fe(n){let e=z$1.boolean();return n.required||(e=e.optional().nullable()),n.validate&&(e=b(e,n.validate)),e}function Ie(n){let e=z$1.string().refine(t=>!isNaN(Date.parse(t)),"Invalid date format");return n.minDate&&(e=e.refine(t=>new Date(t)>=new Date(n.minDate),`Date must be after ${n.minDate}`)),n.maxDate&&(e=e.refine(t=>new Date(t)<=new Date(n.maxDate),`Date must be before ${n.maxDate}`)),n.required||(e=e.optional().nullable()),n.validate&&(e=b(e,n.validate)),e}function $e(n){let e=z$1.string().email("Invalid email");return n.required||(e=e.optional().nullable()),n.validate&&(e=b(e,n.validate)),e}function Oe(n){let e=z$1.string().min(6,"Password must be at least 6 characters");return n.required||(e=e.optional().nullable()),n.validate&&(e=b(e,n.validate)),e}function Pe(n){let e=z$1.string();return n.minLength&&(e=e.min(n.minLength)),n.maxLength&&(e=e.max(n.maxLength)),n.required||(e=e.optional().nullable()),n.validate&&(e=b(e,n.validate)),e}function Le(n){let e;if(n.options&&n.options.length>0){let t=n.options.map(s=>s.value);n.hasMany?e=z$1.array(z$1.enum(t)):e=z$1.enum(t);}else e=n.hasMany?z$1.array(z$1.string()):z$1.string();return n.required||(e=e.optional().nullable()),n.validate&&(e=b(e,n.validate)),e}function ke(n){let e=n.options.map(s=>s.value),t=z$1.enum(e);return n.required||(t=t.optional().nullable()),n.validate&&(t=b(t,n.validate)),t}function _e(n){let e=z$1.string();return n.format==="hex"&&(e=e.regex(/^#[0-9A-Fa-f]{6}$/)),n.format==="rgb"&&(e=e.regex(/^rgb\(\s*\d{1,3}\s*,\s*\d{1,3}\s*,\s*\d{1,3}\s*\)$/)),n.format==="hsl"&&(e=e.regex(/^hsl\(\s*\d{1,3}\s*,\s*\d{1,3}%\s*,\s*\d{1,3}%\s*\)$/)),n.required||(e=e.optional().nullable()),n.validate&&(e=b(e,n.validate)),e}function je(n){let e=z$1.array(z$1.record(z$1.any()));return n.required||(e=e.optional().nullable()),n.validate&&(e=b(e,n.validate)),e}function Ze(n){let e=z$1.union([z$1.record(z$1.any()),z$1.array(z$1.any())]);return n.required||(e=e.optional().nullable()),n.validate&&(e=b(e,n.validate)),e}function qe(n){let e=z$1.string();return n.required||(e=e.optional().nullable()),n.validate&&(e=b(e,n.validate)),e}function fe(n){let e;if(n.relationTo){let t=z$1.object({id:z$1.string(),url:z$1.string().optional(),filename:z$1.string().optional(),mimeType:z$1.string().optional()});e=z$1.union([z$1.string(),t]);}else e=z$1.string();return n.hasMany&&(e=z$1.array(e)),n.required||(e=e.optional().nullable()),n.validate&&(e=b(e,n.validate)),e}function Ue(n){let e=z$1.string();return n.required||(e=e.optional().nullable()),n.validate&&(e=b(e,n.validate)),e}function ye(n){let e;return Array.isArray(n.relationTo)?e=z$1.object({relationTo:z$1.enum(n.relationTo),value:z$1.string()}):e=z$1.union([z$1.string(),z$1.object({relationTo:z$1.string(),value:z$1.string()})]),n.hasMany&&(e=z$1.array(e)),n.required||(e=e.optional().nullable()),n.validate&&(e=b(e,n.validate)),e}function Ge(n){let e=z$1.object(Object.fromEntries(n.fields.filter(s=>s.name).map(s=>[s.name,C(s)]))),t=z$1.array(e);return n.minRows&&(t=t.min(n.minRows)),n.maxRows&&(t=t.max(n.maxRows)),n.required||(t=t.optional().nullable()),n.validate&&(t=b(t,n.validate)),t}function Ke(n){let e=z$1.array(z$1.string());return n.required||(e=e.optional().nullable()),e}function Ve(n){let e=z$1.object(Object.fromEntries(n.fields.filter(t=>t.name).map(t=>[t.name,C(t)])));return n.required?e:e.optional().nullable()}function Be(n){let e=n.blocks||[];e.map(o=>z$1.object({blockType:z$1.literal(o.slug),...Object.fromEntries(o.fields.filter(i=>i.name).map(i=>[i.name,C(i)]))}));let s=e.map(o=>o.slug),a;if(s.length>0){let o=z$1.object({blockType:z$1.enum(s)}).catchall(z$1.any()),i=z$1.object({blockType:z$1.string()}).catchall(z$1.any());a=z$1.array(z$1.union([o,i,z$1.record(z$1.any())]));}else a=z$1.array(z$1.union([z$1.object({blockType:z$1.string()}).catchall(z$1.any()),z$1.record(z$1.any())]));return n.minRows&&(a=a.min(n.minRows)),n.maxRows&&(a=a.max(n.maxRows)),n.required||(a=a.optional().nullable()),n.validate&&(a=b(a,n.validate)),a}function Me(n){return z$1.object(Object.fromEntries(n.fields.filter(t=>t.name).map(t=>[t.name,C(t)])))}function ze(n){return z$1.object(Object.fromEntries(n.fields.filter(t=>t.name).map(t=>[t.name,C(t)])))}function We(n){let e={};for(let t of n.tabs)for(let s of t.fields)s.name&&(e[s.name]=C(s));return z$1.object(e).passthrough().optional()}function b(n,e){return n.refine(async t=>await e(t,{required:false})===true,{message:"Custom validation failed"})}function R(n){let e={};for(let t of n)if(t.name)if(t.type==="tabs"&&"tabs"in t){let s={};for(let a of t.tabs){let o=R(a.fields);Object.assign(s,o);}e[t.name]=z$1.object(s).passthrough().optional();}else if(t.type==="row"&&"fields"in t){let s=R(t.fields);Object.assign(e,s);}else t.type==="collapsible"&&"fields"in t?e[t.name]=z$1.object(R(t.fields)).passthrough().optional():e[t.name]=C(t);return e}function E(n){let e={};for(let t of n)if(t.name)if(t.type==="tabs"&&"tabs"in t){let s={};for(let a of t.tabs){let o=E(a.fields);Object.assign(s,o);}e[t.name]=z$1.object(s).passthrough().optional().nullable();}else if(t.type==="row"&&"fields"in t){let s=E(t.fields);Object.assign(e,s);}else t.type==="collapsible"&&"fields"in t?e[t.name]=z$1.object(E(t.fields)).passthrough().optional().nullable():t.type==="group"&&"fields"in t?e[t.name]=z$1.object(E(t.fields)).passthrough().optional().nullable():e[t.name]=C(t).optional().nullable();return e}function he(n){let e=R(n.fields);return n.timestamps&&(e.createdAt=z$1.string().optional(),e.updatedAt=z$1.string().optional()),n.tenantScoped&&(e.tenantID=z$1.string().optional()),e.id=z$1.string().optional(),z$1.object(e).passthrough()}function ge(n){let e=R(n.fields);return z$1.object(e).passthrough()}function me(n){let e={};for(let t of n.fields)if(t.name)if(t.type==="tabs"&&"tabs"in t){let s={};for(let a of t.tabs)for(let o of a.fields)o.name&&(s[o.name]=C(o).optional().nullable());e[t.name]=z$1.object(s).optional().nullable();}else if(t.type==="row"&&"fields"in t){let s={};for(let a of t.fields)a.name&&(s[a.name]=C(a).optional().nullable());Object.assign(e,s);}else t.type==="collapsible"&&"fields"in t?e[t.name]=z$1.object(E(t.fields)).optional().nullable():t.type==="group"&&"fields"in t?e[t.name]=z$1.object(E(t.fields)).optional().nullable():e[t.name]=C(t).optional().nullable();return z$1.object(e).passthrough()}function be(n){let e={};for(let t of n.fields)t.name&&(e[t.name]=z$1.object({equals:z$1.any().optional(),not_equals:z$1.any().optional(),in:z$1.array(z$1.any()).optional(),not_in:z$1.array(z$1.any()).optional(),greater_than:z$1.number().optional(),greater_than_equal:z$1.number().optional(),less_than:z$1.number().optional(),less_than_equal:z$1.number().optional(),like:z$1.string().optional(),not_like:z$1.string().optional(),contains:z$1.string().optional(),exists:z$1.boolean().optional()}).optional());return e.AND=z$1.array(z$1.lazy(()=>z$1.object(e))).optional(),e.OR=z$1.array(z$1.lazy(()=>z$1.object(e))).optional(),z$1.object(e).optional()}function Te(n){let e=R(n.fields);return e.id=z$1.string().optional(),z$1.object(e).passthrough()}function Ce(n){let e={};for(let t of n.fields)if(t.name)if(t.type==="tabs"&&"tabs"in t){let s={};for(let a of t.tabs)for(let o of a.fields)o.name&&(s[o.name]=C(o).optional().nullable());e[t.name]=z$1.object(s).optional().nullable();}else t.type==="collapsible"&&"fields"in t?e[t.name]=z$1.object(E(t.fields)).optional().nullable():t.type==="group"&&"fields"in t?e[t.name]=z$1.object(E(t.fields)).optional().nullable():e[t.name]=C(t).optional().nullable();return z$1.object(e).passthrough()}var w=class{storageProviders=f();collections=new Map;globals=new Map;plugins=[];schemaCache=new Map;initialized=false;addCollection(e){if(this.initialized)throw new Error("Cannot add collections after Registry has been initialized");if(this.collections.has(e.slug)){console.warn(`[Registry] Duplicate collection slug "${e.slug}" \u2014 skipping`);return}let t={...e};for(let a of this.plugins)a.extendCollection&&(t=a.extendCollection(t.slug,t));t.fields=this.applyFieldDefaults(t);let s=V(t);if(s.length>0)throw new Error(`Invalid collection config: ${s.join(", ")}`);this.collections.set(t.slug,t),this.clearSchemaCache(t.slug);}addCollections(e){for(let t of e)this.addCollection(t);}getCollection(e){return this.collections.get(e)}getCollections(){return Array.from(this.collections.values())}getCollectionSlugs(){return Array.from(this.collections.keys())}hasCollection(e){return this.collections.has(e)}removeCollection(e){if(this.initialized)throw new Error("Cannot remove collections after Registry has been initialized");return this.clearSchemaCache(e),this.collections.delete(e)}addGlobal(e){if(this.initialized)throw new Error("Cannot add globals after Registry has been initialized");this._addGlobalUnsafe(e);}addGlobalPostInit(e){this.globals.has(e.slug)&&this.globals.delete(e.slug),this._addGlobalUnsafe(e);}_addGlobalUnsafe(e){if(this.globals.has(e.slug)){console.warn(`[Registry] Duplicate global slug "${e.slug}" \u2014 skipping`);return}let t=B(e);if(t.length>0)throw new Error(`Invalid global config: ${t.join(", ")}`);let s={...e};for(let a of this.plugins)a.extendGlobal&&(s=a.extendGlobal(s.slug,s));this.globals.set(s.slug,s),this.clearSchemaCache(`global:${s.slug}`);}addGlobals(e){for(let t of e)this.addGlobal(t);}getGlobal(e){return this.globals.get(e)}getGlobals(){return Array.from(this.globals.values())}getGlobalSlugs(){return Array.from(this.globals.keys())}hasGlobal(e){return this.globals.has(e)}removeGlobal(e){if(this.initialized)throw new Error("Cannot remove globals after Registry has been initialized");return this.clearSchemaCache(`global:${e}`),this.globals.delete(e)}addPlugin(e){if(this.initialized)throw new Error("Cannot add plugins after Registry has been initialized");this.plugins.push(e);}getPlugins(){return [...this.plugins]}getZodSchema(e){let t=this.schemaCache.get(e);if(t)return t;let s=this.collections.get(e);if(s){let o=he(s);return this.schemaCache.set(e,o),o}let a=this.globals.get(e);if(a){let o=Te(a);return this.schemaCache.set(`global:${e}`,o),o}throw new Error(`No collection or global found with slug "${e}"`)}getCreateZodSchema(e){let t=`${e}:create`,s=this.schemaCache.get(t);if(s)return s;let a=this.collections.get(e);if(a){let o=ge(a);return this.schemaCache.set(t,o),o}throw new Error(`No collection found with slug "${e}"`)}getUpdateZodSchema(e){let t=`${e}:update`,s=this.schemaCache.get(t);if(s)return s;let a=this.collections.get(e);if(a){let i=me(a);return this.schemaCache.set(t,i),i}let o=this.globals.get(e);if(o){let i=Ce(o);return this.schemaCache.set(`global:${e}:update`,i),i}throw new Error(`No collection or global found with slug "${e}"`)}getWhereZodSchema(e){let t=`${e}:where`,s=this.schemaCache.get(t);if(s)return s;let a=this.collections.get(e);if(a){let o=be(a);return this.schemaCache.set(t,o),o}throw new Error(`No collection found with slug "${e}"`)}getFieldZodSchema(e){return C(e)}clearSchemaCache(e){this.schemaCache.delete(e),this.schemaCache.delete(`${e}:create`),this.schemaCache.delete(`${e}:update`),this.schemaCache.delete(`${e}:where`);}applyFieldDefaults(e){let t=[...e.fields];return t.some(s=>s.name==="id")||t.unshift({name:"id",type:"text",admin:{readOnly:true,hidden:true}}),e.tenantScoped&&!t.some(s=>s.name==="tenantID")&&t.push({name:"tenantID",type:"text",required:true,admin:{readOnly:true,hidden:true}}),e.timestamps&&!t.some(s=>s.name==="createdAt")&&(t.push({name:"createdAt",type:"date",admin:{readOnly:true,hidden:true}}),t.push({name:"updatedAt",type:"date",admin:{readOnly:true,hidden:true}})),e.versions?.drafts&&!t.some(s=>s.name==="status")&&t.push({name:"status",type:"select",options:[{value:"draft",label:"Draft"},{value:"published",label:"Published"}],admin:{readOnly:true,hidden:true}}),e.auth&&!t.some(s=>s.name==="password")&&t.push({name:"password",type:"password",required:true,admin:{hidden:true}}),t}getFields(e){let t=this.collections.get(e);if(t)return t.fields;let s=this.globals.get(e);if(s)return s.fields;throw new Error(`No collection or global found with slug "${e}"`)}getFieldMap(e){let t=this.getFields(e),s=new Map,a=o=>{for(let i of o){if(i.name&&s.set(i.name,i),"fields"in i&&i.fields&&a(i.fields),"tabs"in i)for(let r of i.tabs)a(r.fields);if("blocks"in i)for(let r of i.blocks)a(r.fields);}};return a(t),s}getVisibleFields(e){return this.getFields(e).filter(s=>!s.admin?.hidden)}validate(){let e=this.getCollections(),t=this.getGlobals();pe(e,t);}async init(e){this.validate();for(let t of this.plugins)t.init&&await t.init(e||this);this.initialized=true;}isInitialized(){return this.initialized}getPaginationDefaults(e){let t=this.collections.get(e);return {defaultLimit:t?.admin?.pagination?.defaultLimit||10,limits:t?.admin?.pagination?.limits||[10,25,50,100]}}getDefaultSort(e){let s=this.collections.get(e)?.admin?.useAsTitle;return s||"createdAt"}getDefaultColumns(e){let t=this.collections.get(e);return t?.admin?.defaultColumns?t.admin.defaultColumns:this.getVisibleFields(e).slice(0,4).map(a=>a.name)}getAdminTitle(e){let t=this.collections.get(e);return t?.label||t?.admin?.description||e}getAdminLabel(e){let t=this.collections.get(e);return t?.singularLabel||t?.label||e}getAdminGroup(e){return this.collections.get(e)?.admin?.group}getStats(){let e=0;for(let t of this.collections.values())e+=t.fields.length;for(let t of this.globals.values())e+=t.fields.length;return {collections:this.collections.size,globals:this.globals.size,plugins:this.plugins.length,fields:e}}toJSON(){return {collections:this.getCollections(),globals:this.getGlobals()}}},v=null;function Xe(){return v||(v=new w),v}function Je(){v=null;}function M(){return v=new w,v}var He={aws:{type:"aws",configKey:"s3",displayName:"S3 Compatible (AWS, Backblaze, Wasabi, etc.)",configFields:[{name:"bucket",type:"text",label:"Bucket Name",required:true},{name:"region",type:"text",label:"Region",defaultValue:"us-east-1",admin:{placeholder:"us-east-1"}},{name:"accessKeyId",type:"text",label:"Access Key ID",required:true},{name:"secretAccessKey",type:"password",label:"Secret Access Key",required:true},{name:"endpoint",type:"text",label:"Endpoint URL",admin:{placeholder:"https://s3.custom.com"}},{name:"cdnUrl",type:"text",label:"CDN URL",admin:{placeholder:"https://cdn.example.com"}},{name:"prefix",type:"text",label:"Path Prefix",admin:{placeholder:"uploads"}}]},r2:{type:"r2",configKey:"r2",displayName:"Cloudflare R2",configFields:[{name:"accountId",type:"text",label:"Account ID",required:true,admin:{placeholder:"Your Cloudflare Account ID"}},{name:"accessKeyId",type:"text",label:"Access Key ID",required:true},{name:"secretAccessKey",type:"password",label:"Secret Access Key",required:true},{name:"bucket",type:"text",label:"Bucket Name",required:true},{name:"publicDevUrl",type:"text",label:"Public Dev URL ID",admin:{placeholder:"pub-xxxxxxxxxxxxxxxx",description:"Enter ONLY the ID (e.g., pub-b8d8c4cc8bcf4d868ddd95efc1b305aa). Do NOT include https:// or the full URL. Found in R2 Dashboard \u2192 Public Dev URL."}},{name:"cdnUrl",type:"text",label:"Custom CDN URL",admin:{placeholder:"https://assets.example.com (optional)"}},{name:"prefix",type:"text",label:"Path Prefix",admin:{placeholder:"uploads (optional)",description:"Optional prefix for all object keys. Do not use '/' as prefix."}}]},gcs:{type:"gcs",configKey:"gcs",displayName:"Google Cloud Storage",configFields:[{name:"bucket",type:"text",label:"Bucket Name",required:true},{name:"projectId",type:"text",label:"Project ID"},{name:"clientEmail",type:"text",label:"Client Email"},{name:"privateKey",type:"password",label:"Private Key"},{name:"cdnUrl",type:"text",label:"CDN URL"},{name:"prefix",type:"text",label:"Path Prefix"}]},digitalocean:{type:"digitalocean",configKey:"digitalocean",displayName:"DigitalOcean Spaces",configFields:[{name:"bucket",type:"text",label:"Bucket Name",required:true},{name:"region",type:"text",label:"Region",defaultValue:"nyc3"},{name:"accessKeyId",type:"text",label:"Access Key ID",required:true},{name:"secretAccessKey",type:"password",label:"Secret Access Key",required:true},{name:"cdnUrl",type:"text",label:"CDN URL"},{name:"prefix",type:"text",label:"Path Prefix"}]},backblaze:{type:"backblaze",configKey:"backblaze",displayName:"Backblaze B2",configFields:[{name:"bucket",type:"text",label:"Bucket Name",required:true},{name:"accountId",type:"text",label:"Account ID"},{name:"applicationKeyId",type:"text",label:"Application Key ID",required:true},{name:"applicationKey",type:"password",label:"Application Key",required:true},{name:"cdnUrl",type:"text",label:"CDN URL"},{name:"prefix",type:"text",label:"Path Prefix"}]},wasabi:{type:"wasabi",configKey:"wasabi",displayName:"Wasabi",configFields:[{name:"bucket",type:"text",label:"Bucket Name",required:true},{name:"region",type:"text",label:"Region",defaultValue:"us-east-1"},{name:"accessKeyId",type:"text",label:"Access Key ID",required:true},{name:"secretAccessKey",type:"password",label:"Secret Access Key",required:true},{name:"cdnUrl",type:"text",label:"CDN URL"},{name:"prefix",type:"text",label:"Path Prefix"}]}};function Ye(n,e){switch(n){case "r2":return e?.endpoint||`https://${e?.accountId||""}.r2.cloudflarestorage.com`;case "digitalocean":return e?.endpoint||`https://${e?.region||"nyc3"}.digitaloceanspaces.com`;case "backblaze":return e?.endpoint||"https://s3.backblazeb2.com";case "wasabi":return e?.endpoint||`https://s3.${e?.region||"us-east-1"}.wasabisys.com`;default:return e?.endpoint}}function Ae(n,e){return {provider:n,bucket:e?.bucket||"",region:e?.region||"us-east-1",accessKeyId:e?.accessKeyId||e?.clientEmail||e?.applicationKeyId||"",secretAccessKey:e?.secretAccessKey||e?.privateKey||e?.applicationKey||"",endpoint:Ye(n,e),cdnUrl:e?.cdnUrl,prefix:e?.prefix,accountId:e?.accountId,publicDevUrl:e?.publicDevUrl}}function Qe(n,e,t){let s=t[e.configKey]||{};return Ae(n,s)}function et(n,e,t){let s=t?.[e.configKey]||t;return Ae(n,s)}var Se={name:"@kyro-cms/storage-s3",version:"1.0.0",description:"S3-compatible storage (AWS R2 GCS DigitalOcean Backblaze Wasabi)",init:n=>{let e=n.registry?.storageProviders;if(!e)return;let t="@kyro-cms/storage-s3";for(let s of Object.values(He))e.register({type:s.type,displayName:s.displayName,pluginName:t,configKey:s.configKey,configFields:s.configFields,extractConfig:a=>Qe(s.type,s,a),extractRawConfig:a=>et(s.type,s,a),factory:a=>a$4(a)});}};var Ee={name:"@kyro-cms/storage-cloudinary",version:"1.0.0",description:"Cloudinary image and video storage",init:n=>{let e=n.registry?.storageProviders;e&&e.register({type:"cloudinary",displayName:"Cloudinary",pluginName:"@kyro-cms/storage-cloudinary",configKey:"cloudinary",configFields:[{name:"cloudName",type:"text",label:"Cloud Name",required:true},{name:"apiKey",type:"text",label:"API Key",required:true},{name:"apiSecret",type:"password",label:"API Secret",required:true},{name:"folder",type:"text",label:"Folder",admin:{placeholder:"Optional folder path"}},{name:"uploadPreset",type:"text",label:"Upload Preset (optional)",admin:{placeholder:"Leave empty for signed uploads",description:"If not set, uploads will be signed with API Secret"}}],extractConfig:t=>({cloudName:t.cloudinary?.cloudName||"",apiKey:t.cloudinary?.apiKey||"",apiSecret:t.cloudinary?.apiSecret||"",folder:t.cloudinary?.folder,uploadPreset:t.cloudinary?.uploadPreset}),extractRawConfig:t=>{let s=t?.cloudinary||t;return {cloudName:s?.cloudName||"",apiKey:s?.apiKey||"",apiSecret:s?.apiSecret||"",folder:s?.folder,uploadPreset:s?.uploadPreset}},factory:t=>b$3(t)});}};var xe={name:"@kyro-cms/storage-ftp",version:"1.0.0",description:"FTP/SFTP storage provider",init:n=>{let e=n.registry?.storageProviders;e&&e.register({type:"ftp",displayName:"FTP",pluginName:"@kyro-cms/storage-ftp",configKey:"ftp",configFields:[{name:"host",type:"text",label:"Host",required:true,admin:{placeholder:"ftp.example.com"}},{name:"port",type:"number",label:"Port",defaultValue:21,admin:{placeholder:"21 for FTP"}},{name:"user",type:"text",label:"Username",required:true},{name:"password",type:"password",label:"Password",required:true},{name:"secure",type:"checkbox",label:"Use TLS/SSL",defaultValue:false,admin:{description:"Enable TLS/SSL for secure connections (FTP only)"}},{name:"baseUrl",type:"text",label:"Base URL",required:true,admin:{placeholder:"https://files.example.com"}},{name:"prefix",type:"text",label:"Path Prefix",admin:{placeholder:"uploads"}}],extractConfig:t=>({host:t.ftp?.host||"",port:t.ftp?.port||21,user:t.ftp?.user||"",password:t.ftp?.password||"",secure:t.ftp?.secure||false,baseUrl:t.ftp?.baseUrl||"",prefix:t.ftp?.prefix,type:"ftp"}),extractRawConfig:t=>{let s=t?.ftp||t;return {host:s?.host||"",port:s?.port||21,user:s?.user||"",password:s?.password||"",secure:s?.secure||false,baseUrl:s?.baseUrl||"",prefix:s?.prefix,type:"ftp"}},factory:t=>c$3(t)});}};var nt=[Se,Ee,xe];function z(n,e,t){let s=e.split(".");if(s.length===0)return  false;let a=s[0],o=s.slice(1).join(".");for(let i of n)if(i.name===a)return o?i.fields&&Array.isArray(i.fields)||i.type==="array"&&i.fields&&Array.isArray(i.fields)?z(i.fields,o,t):false:(Object.assign(i,t),true);return  false}function st(n,e){if(e)for(let t of n){let s=e[t.slug];if(s){let{fields:a,...o}=s;if(t.admin={...t.admin,...o},a&&t.fields&&Array.isArray(t.fields))for(let[i,r]of Object.entries(a))z(t.fields,i,r);}}}var W=class{registry;db;pubsub;webhookService;settings;wsServer;config;constructor(e){this.config=e,this.registry=M(),this.db=e.adapter,this.pubsub=new b$1(this.registry),this.webhookService=n(this.db);for(let t of nt)this.registry.addPlugin(t);if(e.plugins)for(let t of e.plugins)this.registry.addPlugin(t);e.collections&&e.admin?.collectionOverrides&&st(e.collections,e.admin.collectionOverrides),e.collections&&this.registry.addCollections(e.collections),e.globals&&this.registry.addGlobals(e.globals);}async init(){await this.registry.init(this),this.registry.addGlobalPostInit(a);let e$1={slug:"plugin-settings",admin:{hidden:true},fields:[{name:"states",type:"json"}]};if(this.registry.addGlobalPostInit(e$1),!this.db)throw new Error("Database adapter is null \u2014 failed to load at startup. Check the server console for the exact error.");let t={slug:d,fields:[{name:"userId",type:"text",required:true},{name:"name",type:"text",required:true},{name:"key",type:"text",required:true},{name:"keyPrefix",type:"text",required:true},{name:"permissions",type:"json"},{name:"lastUsedAt",type:"date"},{name:"expiresAt",type:"date"}]},s={slug:e,fields:[{name:"name",type:"text",required:true},{name:"url",type:"text",required:true},{name:"events",type:"json",required:true},{name:"status",type:"text",required:true},{name:"secret",type:"text"},{name:"headers",type:"json"},{name:"lastTriggered",type:"date"},{name:"lastError",type:"text"}]},a$1={slug:f$1,fields:[{name:"webhookId",type:"text",required:true},{name:"event",type:"text",required:true},{name:"payload",type:"json",required:true},{name:"attempt",type:"number",required:true},{name:"status",type:"text",required:true},{name:"responseStatus",type:"number"},{name:"responseBody",type:"text"},{name:"error",type:"text"},{name:"duration",type:"number"},{name:"deliveredAt",type:"date"},{name:"nextRetryAt",type:"date"}]},o=this.registry.getGlobals();if(this.db instanceof c&&this.db.dialect==="postgres"){let i=this.db,r=d.replace(/-/g,"_");i.schema[r]||(i.schema[r]=g);}await this.db.init([...this.registry.getCollections(),t,s,a$1],o),await this.loadPluginState(),this.pubsub.autoRegisterHooks();}async loadSettings(){if(this.settings)return this.settings;try{let e=await this.db.findOne({collection:"_globals_access-settings",where:{},draft:!0});e&&(this.settings={access:e});}catch{}return this.settings||{}}async loadPluginState(){let e=this.registry.storageProviders,t=e.getAllPluginNames(),s={};try{let a=await this.db.findOne({collection:"_globals_plugin-settings",where:{},draft:!0});a&&a.states&&(s=a.states);}catch{}for(let a of t)s[a]!==void 0&&e.setPluginEnabled(a,s[a]);}getREST(e){let t=typeof this.config.auth=="object"?this.config.auth:null,s$1=t?.secret,a=t?.checkSession!==false;return s({registry:this.registry,db:this.db,authSecret:s$1,authAdapter:this.config.authAdapter,checkSession:a,...e,cors:this.config.cors,webhookService:this.webhookService,settings:this.settings})}getGraphQL(e){let t=c$1({registry:this.registry,db:this.db,settings:this.settings});return {fetch:createYoga({schema:t,context:async({request:a})=>{let o=f$2(a),i,r;if(o&&this.db){let d=await e$1(o,this.db);d.user&&(i=d.user,r=g$1(d));}let c=e?.tenantID;return {db:this.db,registry:this.registry,user:i,req:a,tenantID:c,apiKey:r,relationLoader:new a$1({db:this.db,tenantID:c,user:i})}},graphiql:this.config.graphQL?.disablePlayground!==true,plugins:[]}).fetch,schema:t}}getTRPC(e){return {fetch:async(t,s)=>{let o=new URL(t.url).pathname.replace(/^\/api\/trpc\//,""),[i$1,...r]=o.split("."),c=r.join(".");if(c=c.replace(/\.(query|mutate|subscribe)$/,""),!i$1||!c)return new Response(JSON.stringify({error:{message:"Invalid tRPC path",code:-32600,data:{code:"BAD_REQUEST",httpStatus:400}}}),{status:400,headers:{"Content-Type":"application/json"}});let d=await a$2({db:this.db,registry:this.registry,req:t,user:e?.user,tenantID:e?.tenantID,settings:this.settings}),h=i(d)[i$1];if(!h)return new Response(JSON.stringify({error:{message:`Collection '${i$1}' not found`,code:-32601,data:{code:"NOT_FOUND",httpStatus:404}}}),{status:404,headers:{"Content-Type":"application/json"}});let g=h[c];if(typeof g!="function")return new Response(JSON.stringify({error:{message:`Procedure '${c}' not found`,code:-32601,data:{code:"NOT_FOUND",httpStatus:404}}}),{status:404,headers:{"Content-Type":"application/json"}});try{let p={};if(t.method==="POST"||t.method==="PATCH")p=await t.json().catch(()=>({}));else {let S=new URL(t.url).searchParams.get("input");if(S)try{p=JSON.parse(decodeURIComponent(S));}catch{}}let f=p?.["0"]??p,m=await g({...f,collection:i$1});return new Response(JSON.stringify({result:{data:m}}),{status:200,headers:{"Content-Type":"application/json"}})}catch(p){let f=p.message||"Internal error",m=f.includes("not found")?404:f.includes("denied")||f.includes("authentication required")?403:f.includes("conflict")?409:500,S=m===404?-32601:m===403?-32001:m===409?-32002:-32603;return new Response(JSON.stringify({error:{message:f,code:S,data:{code:"INTERNAL_SERVER_ERROR",httpStatus:m}}}),{status:m,headers:{"Content-Type":"application/json"}})}},router:null}}getWS(){return this.wsServer}async startWebSocket(e){let t=this.settings?.access?.apiAccess;if(t?.wsEnabled===false)return null;let s=async a=>{let o=await e$1(a,this.db);if(!o.valid)throw new Error(o.error||"Invalid API key");if(!o.user)throw new Error("API key has no associated user");return o.user};return this.wsServer=d$1({pubsub:this.pubsub,port:e?.port||8080,requireAuth:e?.requireAuth??t?.requireAuth,verifyToken:e?.verifyToken||s}),this.wsServer}async shutdown(){this.wsServer&&await this.wsServer.close(),await this.db.disconnect();}};function Mt(n){return new W(n)}var it=createRequire(import.meta.url),ot="node:sqlite",{DatabaseSync:rt}=it(ot);function N(n){let e=[];for(let t of n)if(t.type==="tabs"&&"tabs"in t)for(let s of t.tabs)e.push(...N(s.fields));else t.type==="row"&&"fields"in t?e.push(...N(t.fields)):t.type==="collapsible"&&"fields"in t?e.push(...N(t.fields)):e.push(t);return e}function ct(n,e){let t=e,s=n[t.name];if(t.type==="json"||t.type==="richtext"||t.type==="array"||t.type==="group"||t.type==="blocks"||t.type==="list"||t.type==="relationship-block")try{s=s?JSON.parse(s):null;}catch{s=null;}if(t.type==="checkbox"&&(s=!!s),t.type==="date"&&s)try{let a=new Date(s);isNaN(a.getTime())?s=null:s=a.toISOString();}catch{s=null;}if((t.type==="upload"||t.type==="image")&&s)try{let a=JSON.parse(s);Array.isArray(a)?s=a.map(o=>typeof o=="object"&&o!==null?o:{id:o}):s=typeof a=="object"?a:{id:a};}catch{s={id:s};}if(t.type==="relationship"&&s)try{let a=JSON.parse(s);Array.isArray(a),s=a;}catch{s={relationTo:Array.isArray(t.relationTo)?t.relationTo[0]:t.relationTo,value:s};}if(t.type==="list"&&s)try{let a=JSON.parse(s);s=Array.isArray(a)?a:[];}catch{s=[];}if(t.type==="relationship-block"&&s)try{let a=JSON.parse(s);s=Array.isArray(a)?a:[];}catch{s=[];}return s}function X(n,e){try{return n.prepare(`PRAGMA table_info(${e})`).all().map(s=>s.name)}catch{return []}}var J=class extends a$3{db;path;migrations=new Map;versionsTableName="kyro_versions";constructor(e){super(),this.path=e.path,e.db?this.db=e.db:this.db=null;}async connect(){if(this.db||(this.db=new rt(this.path||":memory:")),this.db&&typeof this.db.prepare=="function"&&!this.db.prepare.__wrapped){let e=this.db.prepare.bind(this.db),t=s=>{let a=e(s),o=i=>typeof i=="boolean"?i?1:0:i===void 0?null:i;return new Proxy(a,{get(i,r,c){if(r==="all")return (...u)=>i.all(...u.map(o));if(r==="get")return (...u)=>i.get(...u.map(o));if(r==="run")return (...u)=>i.run(...u.map(o));let d=Reflect.get(i,r,c);return typeof d=="function"?d.bind(i):d}})};t.__wrapped=true,this.db.prepare=t;}this.db.exec("PRAGMA journal_mode = WAL"),this.db.exec("PRAGMA foreign_keys = ON"),this.connected=true;}async disconnect(){this.db&&this.db.close(),this.connected=false;}ensureTable(e,t){let s=t||this.getTableNameFor(e.slug),a=["id TEXT PRIMARY KEY"];for(let i of N(e.fields)){if(!i.name||i.name==="id")continue;let r=this.fieldToSQL(i);r&&a.push(r);}a.push(`${this.col("createdAt")} TEXT DEFAULT (datetime('now'))`),a.push(`${this.col("updatedAt")} TEXT DEFAULT (datetime('now'))`),a.push("status TEXT DEFAULT 'draft'"),a.push("hasDraft INTEGER DEFAULT 0"),e.tenantScoped&&a.push("tenant_id TEXT NOT NULL");let o=X(this.db,s);if(o.length===0){let i=`CREATE TABLE IF NOT EXISTS ${s} (${a.join(", ")})`;this.db.exec(i),this.db.exec(`CREATE INDEX IF NOT EXISTS idx_${s}_status ON ${s}(status)`);for(let r of N(e.fields))r.name&&r.indexed&&this.db.exec(`CREATE INDEX IF NOT EXISTS idx_${s}_${r.name} ON ${s}(${this.col(r.name)})`),r.name&&r.unique&&this.db.exec(`CREATE UNIQUE INDEX IF NOT EXISTS idx_${s}_${r.name}_unique ON ${s}(${this.col(r.name)})`);}else {let i=new Set(o);for(let r of a){let c=r.split(" ")[0].replace(/^"/,"").replace(/"$/,"");if(!i.has(c)&&c!=="id")try{c==="status"?this.db.exec(`ALTER TABLE ${s} ADD COLUMN ${this.col(c)} TEXT DEFAULT 'published'`):c==="hasDraft"?this.db.exec(`ALTER TABLE ${s} ADD COLUMN ${this.col(c)} INTEGER DEFAULT 0`):this.db.exec(`ALTER TABLE ${s} ADD COLUMN ${this.col(c)} TEXT`);}catch{}}}this.migrations.set(s,true);}ensureVersionsTable(){this.db.exec(`
       CREATE TABLE IF NOT EXISTS ${this.versionsTableName} (