@kyro-cms/core 0.10.12 → 0.10.13

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,3 +0,0 @@
1
- import {a as a$1}from'./chunk-NZ35PV5R.js';import {b as b$1}from'./chunk-AE6GXUT7.js';var S={};var h={};var v={},oe=[];var T={},ie=[];var B={};var H={slug:"media",label:"Media Library",admin:{useAsTitle:"title",defaultColumns:["thumbnailUrl","title","type","fileSize","createdAt"],group:"content"},access:{read:()=>true,create:()=>true,update:()=>true,delete:()=>true},fields:[{name:"title",type:"text",label:"Title",required:true,admin:{description:"Descriptive title for the file"}},{name:"filename",type:"text",label:"Filename",required:true,admin:{readOnly:true,description:"System filename (auto-generated)"}},{name:"originalName",type:"text",label:"Original Name",admin:{readOnly:true}},{name:"alt",type:"text",label:"Alt Text",admin:{description:"Alternative text for images (accessibility)"}},{name:"caption",type:"richtext",label:"Caption",admin:{description:"Optional caption or description"}},{name:"type",type:"select",label:"File Type",required:true,defaultValue:"document",options:[{label:"Image",value:"image"},{label:"Video",value:"video"},{label:"Audio",value:"audio"},{label:"Document",value:"document"},{label:"Archive",value:"archive"},{label:"Other",value:"other"}],admin:{readOnly:true}},{name:"mimeType",type:"text",label:"MIME Type",admin:{readOnly:true}},{name:"url",type:"text",label:"URL",required:true,admin:{readOnly:true,description:"Public URL of the file"}},{name:"thumbnailUrl",type:"text",label:"Thumbnail URL",admin:{readOnly:true}},{name:"width",type:"number",label:"Width",admin:{readOnly:true,description:"Width in pixels (for images/videos)"}},{name:"height",type:"number",label:"Height",admin:{readOnly:true,description:"Height in pixels (for images/videos)"}},{name:"fileSize",type:"number",label:"File Size",admin:{readOnly:true,description:"Size in bytes"}},{name:"folder",type:"text",label:"Folder",admin:{description:"Folder path for organization (e.g., /products, /blog)"}},{name:"tags",type:"array",label:"Tags",fields:[{name:"tag",type:"text",label:"Tag"}]},{name:"focalPoint",type:"group",label:"Focal Point",admin:{description:"Point of interest for cropping"},fields:[{name:"x",type:"number",label:"X",defaultValue:50},{name:"y",type:"number",label:"Y",defaultValue:50}]},{name:"metadata",type:"json",label:"Metadata",admin:{readOnly:true,description:"Additional file metadata (EXIF, etc.)"}},{name:"provider",type:"select",label:"Storage Provider",defaultValue:"local",options:[{label:"Local",value:"local"},{label:"AWS S3",value:"s3"},{label:"Cloudinary",value:"cloudinary"},{label:"Imgix",value:"imgix"}],admin:{readOnly:true}},{name:"status",type:"select",label:"Status",defaultValue:"active",options:[{label:"Active",value:"active"},{label:"Archived",value:"archived"}]},{name:"createdAt",type:"date",label:"Created",admin:{readOnly:true}},{name:"updatedAt",type:"date",label:"Last Modified",admin:{readOnly:true}}]},k=[H];var _={slug:"menu",label:"Menu",singularLabel:"Menu Item",admin:{useAsTitle:"title",defaultColumns:["title","menu_location"]},fields:[{name:"title",type:"text",label:"Title",required:true},{name:"menu_location",type:"select",label:"Menu Location",options:[{label:"Header",value:"header"},{label:"Footer",value:"footer"},{label:"Sidebar",value:"sidebar"},{label:"Primary",value:"primary"},{label:"Secondary",value:"secondary"}],required:true,admin:{position:"sidebar"}},{name:"order",type:"number",label:"Order",admin:{position:"sidebar"}},{name:"menu",type:"group",fields:[{name:"menu_item",label:"Menu Item",type:"array",fields:[{name:"link_type",type:"select",label:"Link Type",options:[{label:"Internal",value:"internal"},{label:"External",value:"external"}]},{name:"internal_target",type:"relationship",label:"Internal Target",relationTo:["pages","posts"],admin:{condition:{field:"link_type",equals:"internal"}}},{name:"external_url",type:"text",label:"External URL",admin:{condition:{field:"link_type",equals:"external"}}}]}]}]},V={menu:_};var K={slug:"posts",label:"Posts",labelPlural:"Posts",singularLabel:"Post",admin:{useAsTitle:"title",defaultColumns:["title","slug","status","createdAt","updatedAt"],description:"Blog posts and articles"},fields:[{name:"mainTabs",type:"tabs",tabs:[{label:"Content",fields:[{name:"title",type:"text",required:true,label:"Title",admin:{description:"The main title of the post as it will appear publicly."}},{name:"content",type:"richtext",label:"Content"}]},{label:"Meta",fields:[{name:"category",type:"relationship",label:"Category",relationTo:"categories",admin:{description:"Select the primary category this post belongs to."}},{name:"relatedPosts",type:"array",label:"Related Posts",fields:[{name:"post",type:"relationship",relationTo:"posts",label:"Post"}],admin:{description:"Select posts related to this one."}}]},{label:"SEO",fields:[{name:"metaTitle",type:"text",label:"Meta Title",admin:{autoGenerate:"title",description:"The title used for SEO and social sharing (recommended < 60 chars)."}},{name:"metaDescription",type:"textarea",label:"Meta Description",admin:{autoGenerate:"content",description:"A brief summary for search engines (recommended < 160 chars)."}},{name:"ogImage",type:"upload",label:"OG Image",relationTo:"media",admin:{description:"The image shown when the post is shared on social media."}}]}]},{name:"slug",type:"text",required:true,label:"Slug",admin:{description:"The URL-friendly identifier for the post.",position:"sidebar",autoGenerate:"title"}},{name:"tags",type:"list",label:"Tags",admin:{description:"Add keywords to help categorize your post.",position:"sidebar"}},{name:"authors",type:"array",label:"Authors",fields:[{name:"user",type:"relationship",label:"User",relationTo:"users"}],admin:{description:"Select one or more authors for this post.",position:"sidebar"}},{name:"featuredImage",type:"upload",label:"Featured Image",relationTo:"media",admin:{description:"The primary visual used to represent this post.",position:"sidebar"}}],timestamps:true,versions:{drafts:true,maxPerDoc:10}},F={posts:K};function a(e){return {...e,fields:[...e.fields,...ye]}}var ne=[{name:"text",type:"text",label:"Button Label"},{name:"url",type:"text",label:"Button Redirection URL"}],c={name:"buttons",type:"array",label:"Action Buttons",fields:ne},re={slug:"heading-element",label:"Heading",admin:{group:"Basic Content Elements",description:"Section heading"},fields:[{name:"content",type:"text",label:"Content"}]},se={slug:"text-element",label:"Text",admin:{group:"Basic Content Elements",description:"Plain text paragraph"},fields:[{name:"content",type:"textarea",label:"Content"}]},me={slug:"image-element",label:"Image",admin:{group:"Basic Content Elements",description:"Single image"},fields:[{name:"image",type:"upload",label:"Image",relationTo:"media"}]},pe={slug:"richtext-element",label:"Rich Text",admin:{group:"Basic Content Elements",description:"Formatted rich text content"},fields:[{name:"content",type:"richtext",label:"Content"}]},de={slug:"button-element",label:"Button",admin:{group:"Basic Content Elements",description:"Call-to-action button"},fields:[{name:"buttonData",type:"group",label:"Button",admin:{inline:true},fields:[{name:"text",type:"text",label:"Label"},{name:"url",type:"text",label:"URL"}]}]},ue={slug:"video-element",label:"Video",admin:{group:"Basic Content Elements",description:"Embedded video player"},fields:[{name:"url",type:"text",label:"Video URL"},{name:"file",type:"upload",label:"Video File",relationTo:"media"},{name:"caption",type:"text",label:"Caption"}]},ce={slug:"list-element",label:"List",admin:{group:"Basic Content Elements",description:"Bulleted or numbered list"},fields:[{name:"items",type:"array",label:"Items",fields:[{name:"text",type:"text",label:"Item Text"}]}]},be=[re,se,me,pe,de,ue,ce],ge={name:"elements",type:"blocks",label:"Extra Content Elements",blocks:be,admin:{pickerMode:"dropdown"}},ye=[ge],fe=a({slug:"hero",admin:{group:"Structural Sections",description:"Primary landing section with heading, text, media & CTA"},label:"Hero Section",fields:[{name:"isMultiScreen",type:"checkbox",label:"Enable Multi-Screen Slides (Carousel)",defaultValue:false},{name:"multiSlides",type:"group",label:"Multi Slides",admin:{condition:{field:"isMultiScreen",equals:true}},fields:[{name:"multiSlides",type:"array",label:"Hero Slides",fields:[{name:"heading",type:"text",label:"Slide Heading"},{name:"subheading",type:"textarea",label:"Slide Subheading"},{name:"backgroundImage",type:"upload",label:"Slide Background Image",relationTo:"media"},c]}]},{name:"singleSlide",type:"group",label:"Single Slide",admin:{condition:{field:"isMultiScreen",equals:false}},fields:[{name:"heading",type:"text",label:"Heading"},{name:"subheading",type:"textarea",label:"Subheading"},{name:"backgroundImage",type:"upload",label:"Background Image",relationTo:"media"},c]}]}),xe=a({slug:"card",admin:{group:"Structural Sections",description:"Modular card block featuring title, text, and optional media"},label:"Card Block",fields:[{name:"isMultiCard",type:"checkbox",label:"Enable Multicard Layout",defaultValue:false},{name:"multiCards",type:"group",label:"Multi Cards",admin:{condition:{field:"isMultiCard",equals:true}},fields:[{name:"cards",type:"array",label:"Cards List",fields:[{name:"title",type:"text",label:"Card Title"},{name:"description",type:"textarea",label:"Card Description"},{name:"image",type:"upload",label:"Card Image",relationTo:"media"},{name:"icon",type:"text",label:"Card Icon (Emoji or Name)"},{name:"linkText",type:"text",label:"Link Label Text"},{name:"link",type:"text",label:"Link Redirection URL"}]}]},{name:"singleCard",type:"group",label:"Single Card",admin:{condition:{field:"isMultiCard",equals:false}},fields:[{name:"title",type:"text",label:"Title"},{name:"description",type:"textarea",label:"Description"},{name:"image",type:"upload",label:"Image",relationTo:"media"},{name:"icon",type:"text",label:"Icon (Emoji or Name)"},{name:"linkText",type:"text",label:"Link Label Text"},{name:"link",type:"text",label:"Link Redirection URL"}]}]});a({slug:"text",admin:{group:"Basic Content Elements",description:"Rich text content"},label:"Text Block",fields:[{name:"content",type:"richtext",label:"Content"}]});a({slug:"image",admin:{group:"Basic Content Elements",description:"Image upload container"},label:"Image",fields:[{name:"image",type:"upload",label:"Image",relationTo:"media"},{name:"caption",type:"text",label:"Caption"},{name:"alt",type:"text",label:"Alt Text"},{name:"aspectRatio",type:"select",label:"Aspect Ratio",defaultValue:"original",options:[{label:"Original",value:"original"},{label:"16:9 Landscape",value:"16-9"},{label:"4:3 Classic",value:"4-3"},{label:"1:1 Square",value:"1-1"},{label:"2:3 Portrait",value:"2-3"}]},{name:"enableLightbox",type:"checkbox",label:"Enable Zoom / Lightbox",defaultValue:false}]});var Ce=a({slug:"feature-split",admin:{group:"Structural Sections",description:"Side-by-side text and media layout"},label:"Feature Split (Text & Media)",fields:[{name:"title",type:"text",label:"Title"},{name:"description",type:"richtext",label:"Description"},{name:"checkpoints",type:"array",label:"Value Checkpoints",fields:[{name:"title",type:"text",label:"Checkpoint Title"},{name:"description",type:"textarea",label:"Checkpoint Description"},{name:"icon",type:"text",label:"Icon Name"},{name:"image",type:"upload",label:"Image",relationTo:"media"},{name:"itemUrl",type:"text",label:"Link URL"}]},{name:"images",type:"array",label:"Images",fields:[{name:"image",type:"upload",label:"Image",relationTo:"media"}]},c]}),Se=a({slug:"feature-grid",admin:{group:"Marketing Grids",description:"Multi-column grid showcasing features or services"},label:"Feature Grid",fields:[{name:"sectionTitle",type:"text",label:"Section Heading"},{name:"sectionSubtitle",type:"textarea",label:"Section Subtitle"},{name:"features",type:"array",label:"Features List",fields:[{name:"title",type:"text",label:"Title"},{name:"description",type:"textarea",label:"Description"},{name:"icon",type:"text",label:"Icon Name"},{name:"image",type:"upload",label:"Feature Image",relationTo:"media"},{name:"itemUrl",type:"text",label:"Card Redirection URL"}]}]}),he=a({slug:"cta-banner",admin:{group:"Structural Sections",description:"High-impact call-to-action banner"},label:"CTA Banner",fields:[{name:"headline",type:"text",label:"Headline"},{name:"subheading",type:"textarea",label:"Subheading"},{name:"backgroundImage",type:"upload",label:"Background Image",relationTo:"media"},c]}),ve=a({slug:"testimonials",admin:{group:"Marketing Grids",description:"Customer reviews and quotes carousel"},label:"Testimonials",fields:[{name:"sectionTitle",type:"text",label:"Section Heading"},{name:"items",type:"array",label:"Testimonials",fields:[{name:"quote",type:"textarea",label:"Quote"},{name:"rating",type:"select",label:"Star Rating",defaultValue:"5",options:[{label:"5 Stars",value:"5"},{label:"4 Stars",value:"4"},{label:"3 Stars",value:"3"},{label:"2 Stars",value:"2"},{label:"1 Star",value:"1"}]},{name:"authorName",type:"text",label:"Author Name"},{name:"authorRole",type:"text",label:"Author Role"},{name:"avatar",type:"upload",label:"Avatar",relationTo:"media"},{name:"companyLogo",type:"upload",label:"Company Logo",relationTo:"media"}]}]}),Te=a({slug:"faq",admin:{group:"Lead Capture & Interactive",description:"Expandable list of frequently asked questions"},label:"FAQ Section",fields:[{name:"sectionTitle",type:"text",label:"Section Heading"},{name:"items",type:"array",label:"Questions List",fields:[{name:"tag",type:"text",label:"Category Tag (e.g. billing, account)"},{name:"question",type:"text",label:"Question"},{name:"answer",type:"richtext",label:"Answer"}]},{name:"footerHeading",type:"text",label:"Footer Heading (e.g. Still have questions?)"},{name:"footerCtaUrl",type:"text",label:"Footer CTA Redirection URL"}]}),ke=a({slug:"stats",admin:{group:"Marketing Grids",description:"Grid displaying key numerical metrics and stats"},label:"Stats / Metrics",fields:[{name:"sectionTitle",type:"text",label:"Section Heading"},{name:"items",type:"array",label:"Stats List",fields:[{name:"prefix",type:"text",label:"Value Prefix (e.g. + or $)"},{name:"value",type:"text",label:"Value (e.g. 99.9 or 5M)"},{name:"suffix",type:"text",label:"Value Suffix (e.g. % or users)"},{name:"label",type:"text",label:"Label (e.g. Uptime)"},{name:"description",type:"textarea",label:"Context Description"}]}]}),Pe=a({slug:"logo-cloud",admin:{group:"Structural Sections",description:"Showcase for partner and client company logos"},label:"Logo Cloud / Partners",fields:[{name:"sectionTitle",type:"text",label:"Section Heading"},{name:"logos",type:"array",label:"Logos List",fields:[{name:"name",type:"text",label:"Company Name"},{name:"logo",type:"upload",label:"Logo Image",relationTo:"media"},{name:"url",type:"text",label:"Website URL"}]}]}),Ae=a({slug:"pricing",admin:{group:"Marketing Grids",description:"Tiered pricing plans with feature comparisons"},label:"Pricing Plans",fields:[{name:"sectionTitle",type:"text",label:"Section Heading"},{name:"sectionSubtitle",type:"textarea",label:"Section Subtitle"},{name:"annualDiscount",type:"text",label:"Annual Promo Tag (e.g. Save 20%)"},{name:"plans",type:"array",label:"Pricing Plans",fields:[{name:"popularBadgeText",type:"text",label:"Plan Badge (e.g. MOST POPULAR)"},{name:"name",type:"text",label:"Plan Name"},{name:"description",type:"textarea",label:"Plan Description"},{name:"currency",type:"text",label:"Plan Currency (e.g. $)",defaultValue:"$"},{name:"price",type:"text",label:"Price (e.g. 29)"},{name:"billingPeriod",type:"text",label:"Billing Period (e.g. /mo)"},{name:"features",type:"list",label:"Features Checklist"},c,{name:"footnote",type:"text",label:"Footnote note (e.g. *cancel anytime)"},{name:"isFeatured",type:"checkbox",label:"Highlight Plan (Featured)",defaultValue:false}]}]}),Ge=a({slug:"team",admin:{group:"Marketing Grids",description:"Showcase of team members with photos and roles"},label:"Team Showcase",fields:[{name:"sectionTitle",type:"text",label:"Section Heading"},{name:"sectionSubtitle",type:"textarea",label:"Section Subtitle"},{name:"members",type:"array",label:"Team Members",fields:[{name:"name",type:"text",label:"Member Name"},{name:"role",type:"text",label:"Role / Position"},{name:"department",type:"text",label:"Department / Team tag (e.g. engineering, design)"},{name:"avatar",type:"upload",label:"Avatar Image",relationTo:"media"},{name:"bio",type:"textarea",label:"Brief Bio"},{name:"twitterUrl",type:"text",label:"Twitter URL"},{name:"linkedinUrl",type:"text",label:"LinkedIn URL"},{name:"githubUrl",type:"text",label:"GitHub URL"},{name:"websiteUrl",type:"text",label:"Website URL"}]}]}),Le=a({slug:"recent-feed",admin:{group:"Dynamic Content",description:"Dynamic feed of recent blog posts or articles"},label:"Recent Posts Feed",fields:[{name:"sectionTitle",type:"text",label:"Section Heading"},{name:"sectionSubtitle",type:"textarea",label:"Section Subtitle"},{name:"collectionType",type:"select",label:"Feed Source Collection",dynamicOptions:"collections"},{name:"categoryFilter",type:"text",label:"Filter results by category slug / tag"},{name:"limit",type:"number",label:"Max Items to Show",defaultValue:3},c]}),Ee=a({slug:"process-steps",admin:{group:"Lead Capture & Interactive",description:"Numbered sequence illustrating a process or workflow"},label:"Process Steps / Timeline",fields:[{name:"sectionTitle",type:"text",label:"Section Heading"},{name:"sectionSubtitle",type:"textarea",label:"Section Subtitle"},{name:"steps",type:"array",label:"Steps",fields:[{name:"stepNumber",type:"text",label:"Step Number (e.g. 01)"},{name:"icon",type:"upload",label:"Step Icon / Image",relationTo:"media"},{name:"title",type:"text",label:"Step Title"},{name:"description",type:"textarea",label:"Description"}]}]}),Me=a({slug:"form-embed",admin:{group:"Lead Capture & Interactive",description:"Embeddable interactive forms for lead capture"},label:"Form Embed",fields:[{name:"title",type:"text",label:"Form Title"},{name:"subtitle",type:"textarea",label:"Form Subtitle"},{name:"form",type:"relationship",relationTo:"forms",label:"Form",required:true}]}),Ie=a({slug:"video-showcase",admin:{group:"Structural Sections",description:"Cinematic video player with custom thumbnail"},label:"Cinematic Video Showcase",fields:[{name:"sectionTitle",type:"text",label:"Section Heading"},{name:"sectionSubtitle",type:"textarea",label:"Section Subtitle"},{name:"coverImage",type:"upload",label:"Cinematic Cover Image (Thumbnail)",relationTo:"media"},{name:"videoUrl",type:"text",label:"Video Embed URL (YouTube / Vimeo / MP4)"},{name:"videoTitle",type:"text",label:"Video Title (for accessibility & hover text)"},{name:"durationBadge",type:"text",label:"Duration Badge (e.g. '\u25B6 2:34')"},{name:"isLightbox",type:"checkbox",label:"Open in Cinematic Lightbox Modal",defaultValue:true},{name:"autoplay",type:"checkbox",label:"Autoplay Video (muted)",defaultValue:false}]}),z=[fe,xe,Ce,Se,he,ve,Te,ke,Pe,Ae,Ge,Le,Ee,Me,Ie];var W={slug:"pages",label:"Pages",labelPlural:"Pages",singularLabel:"Page",admin:{useAsTitle:"title",defaultColumns:["title","slug","status","updatedAt"],description:"Static pages"},fields:[{name:"mainTabs",type:"tabs",tabs:[{label:"Content",fields:[{name:"title",type:"text",required:true,label:"Title",admin:{description:"The main title of the page as it will appear publicly."}},{name:"content",type:"blocks",label:"Content",blocks:z}]},{label:"Meta",fields:[]},{label:"SEO",fields:[{name:"metaTitle",type:"text",label:"Meta Title",admin:{autoGenerate:"title"}},{name:"metaDescription",type:"textarea",label:"Meta Description",admin:{autoGenerate:"content"}},{name:"ogImage",type:"upload",label:"OG Image",relationTo:"media"}]}]},{name:"slug",type:"text",required:true,label:"Slug",admin:{position:"sidebar",autoGenerate:"title"}},{name:"featuredImage",type:"upload",label:"Featured Image",relationTo:"media",admin:{position:"sidebar"}}],timestamps:true,versions:{drafts:true,maxPerDoc:10}},w={pages:W};var Y={slug:"categories",label:"Categories",labelPlural:"Categories",singularLabel:"Category",admin:{useAsTitle:"name",defaultColumns:["name","slug"],description:"Post categories",layout:"split"},fields:[{name:"name",type:"text",required:true,label:"Name"},{name:"description",type:"textarea",label:"Description"},{name:"slug",type:"text",required:true,label:"Slug",admin:{position:"sidebar",autoGenerate:"name"}},{name:"icon",type:"upload",label:"Icon",relationTo:"media",admin:{position:"sidebar"}},{name:"parent",type:"relationship",label:"Parent Category",relationTo:"categories",admin:{position:"sidebar"}},{name:"order",type:"number",label:"Order",defaultValue:0,admin:{position:"sidebar"}}],timestamps:true,versions:{drafts:true,maxPerDoc:5}},O={categories:Y},X={slug:"product-categories",label:"Product Categories",labelPlural:"Product Categories",singularLabel:"Product Category",admin:{useAsTitle:"name",defaultColumns:["name","slug"],description:"Product categories for organizing your catalog"},fields:[{name:"name",type:"text",required:true,label:"Name"},{name:"slug",type:"text",required:true,label:"Slug",admin:{position:"sidebar",autoGenerate:"name"}},{name:"description",type:"textarea",label:"Description"},{name:"image",type:"text",label:"Image URL"},{name:"parent",type:"relationship",label:"Parent Category",relationTo:"product-categories",admin:{position:"sidebar"}}],timestamps:true,versions:{drafts:true,maxPerDoc:5}},P={"product-categories":X};var J={slug:"products",label:"Products",labelPlural:"Products",singularLabel:"Product",admin:{useAsTitle:"title",defaultColumns:["title","slug","price","status","inventory","updatedAt"],description:"Product catalog"},fields:[{name:"title",type:"text",required:true,label:"Title"},{name:"slug",type:"text",required:true,label:"Slug",admin:{position:"sidebar",autoGenerate:"title"}},{name:"description",type:"richtext",label:"Description"},{name:"price",type:"number",required:true,label:"Price"},{name:"compareAtPrice",type:"number",label:"Compare at Price",admin:{description:"Original price for sale display"}},{name:"costPrice",type:"number",label:"Cost Price",admin:{description:"For profit calculation"}},{name:"sku",type:"text",required:true,label:"SKU"},{name:"barcode",type:"text",label:"Barcode"},{name:"images",type:"array",label:"Images",fields:[{name:"url",type:"text",label:"URL"},{name:"alt",type:"text",label:"Alt Text"}]},{name:"category",type:"relationship",label:"Category",relationTo:"product-categories"},{name:"inventory",type:"number",label:"Inventory",defaultValue:0}],timestamps:true,versions:{drafts:true,maxPerDoc:10}},A={products:J};var Q={slug:"customers",label:"Customers",labelPlural:"Customers",singularLabel:"Customer",admin:{useAsTitle:"email",defaultColumns:["email","firstName","lastName","createdAt","updatedAt"],description:"Customer accounts"},fields:[{name:"email",type:"email",required:true,label:"Email"},{name:"firstName",type:"text",label:"First Name"},{name:"lastName",type:"text",label:"Last Name"},{name:"phone",type:"text",label:"Phone"},{name:"addresses",type:"array",label:"Addresses",fields:[{name:"type",type:"text",label:"Type"},{name:"line1",type:"text",label:"Address Line 1"},{name:"line2",type:"text",label:"Address Line 2"},{name:"city",type:"text",label:"City"},{name:"state",type:"text",label:"State"},{name:"postalCode",type:"text",label:"Postal Code"},{name:"country",type:"text",label:"Country"}]},{name:"slug",type:"text",required:true,label:"Slug",admin:{position:"sidebar",autoGenerate:"email"}}],timestamps:true,versions:{drafts:true,maxPerDoc:5}},G={customers:Q};var $={slug:"orders",label:"Orders",labelPlural:"Orders",singularLabel:"Order",admin:{useAsTitle:"orderNumber",defaultColumns:["orderNumber","customer","status","total","createdAt","updatedAt"],description:"Customer orders"},fields:[{name:"orderNumber",type:"text",required:true,label:"Order Number"},{name:"customer",type:"relationship",required:true,label:"Customer",relationTo:"customers"},{name:"paymentStatus",type:"select",label:"Payment Status",options:[{label:"Pending",value:"pending"},{label:"Paid",value:"paid"},{label:"Failed",value:"failed"},{label:"Refunded",value:"refunded"}],defaultValue:"pending"},{name:"items",type:"array",label:"Items",fields:[{name:"product",type:"text",label:"Product"},{name:"quantity",type:"number",label:"Quantity"},{name:"unitPrice",type:"number",label:"Unit Price"},{name:"total",type:"number",label:"Total"}]},{name:"subtotal",type:"number",required:true,label:"Subtotal"},{name:"tax",type:"number",label:"Tax"},{name:"shipping",type:"number",label:"Shipping"},{name:"discount",type:"number",label:"Discount"},{name:"total",type:"number",required:true,label:"Total"},{name:"notes",type:"richtext",label:"Notes"},{name:"slug",type:"text",required:true,label:"Slug",admin:{position:"sidebar",autoGenerate:"orderNumber"}}],timestamps:true,versions:{drafts:true,maxPerDoc:10}},L={orders:$};var Z={slug:"coupons",label:"Coupons",labelPlural:"Coupons",singularLabel:"Coupon",admin:{useAsTitle:"code",defaultColumns:["code","type","value","active","expiresAt"],description:"Discount codes and promotions"},fields:[{name:"code",type:"text",required:true,label:"Code"},{name:"type",type:"select",required:true,label:"Type",options:[{label:"Percentage",value:"percentage"},{label:"Fixed Amount",value:"fixed"},{label:"Free Shipping",value:"freeShipping"}]},{name:"value",type:"number",label:"Value"},{name:"minPurchase",type:"number",label:"Minimum Purchase"},{name:"maxDiscount",type:"number",label:"Max Discount"},{name:"usageLimit",type:"number",label:"Usage Limit"},{name:"usedCount",type:"number",defaultValue:0,label:"Used Count"},{name:"startsAt",type:"date",label:"Starts At"},{name:"expiresAt",type:"date",label:"Expires At"},{name:"active",type:"checkbox",defaultValue:true,label:"Active"}],timestamps:true,versions:{drafts:true,maxPerDoc:5}},E={coupons:Z};var ee={slug:"forms",label:"Forms",labelPlural:"Forms",singularLabel:"Form",admin:{useAsTitle:"name",defaultColumns:["name","slug","updatedAt"],description:"Reusable form definitions"},fields:[{name:"name",type:"text",required:true,label:"Name"},{name:"subtitle",type:"textarea",label:"Subtitle"},{name:"slug",type:"text",required:true,label:"Slug",admin:{position:"sidebar",autoGenerate:"name"}},{name:"submitButtonText",type:"text",label:"Submit Button Text",defaultValue:"Submit",admin:{position:"sidebar"}},{name:"consentCheckboxText",type:"text",label:"Consent Agreement label (e.g. I agree to terms)",admin:{position:"sidebar"}},{name:"redirectUrl",type:"text",label:"Success Redirect URL",admin:{position:"sidebar"}},{name:"fields",type:"array",label:"Form Fields",fields:[{name:"fieldName",type:"text",label:"Field API Name (e.g. company)"},{name:"inputType",type:"select",label:"Input Type",defaultValue:"text",options:[{label:"Text input",value:"text"},{label:"Email input",value:"email"},{label:"Phone number input",value:"tel"},{label:"Multi-line textarea",value:"textarea"},{label:"Checkbox selector",value:"checkbox"}]},{name:"placeholder",type:"text",label:"Input Placeholder Text"},{name:"isRequired",type:"checkbox",label:"Make this field required",defaultValue:false}]},{name:"entries",type:"relationship",relationTo:"form-entries",hasMany:true,label:"Entries",admin:{description:"Form submissions linked to this form."}}],timestamps:true,versions:{drafts:true,maxPerDoc:5}},D={forms:ee};var te={slug:"form-entries",label:"Form Entries",labelPlural:"Form Entries",singularLabel:"Form Entry",admin:{useAsTitle:"id",defaultColumns:["id","form","createdAt","ipAddress"],description:"Form submission entries"},fields:[{name:"form",type:"relationship",relationTo:"forms",required:true,label:"Form",admin:{position:"sidebar",readOnly:true,description:"The form this entry belongs to."}},{name:"data",type:"json",label:"Submitted Data",admin:{readOnly:true,description:"All field values submitted with this entry."}},{name:"ipAddress",type:"text",label:"IP Address",admin:{position:"sidebar",readOnly:true,description:"The IP address of the submitter."}}],timestamps:true},q={"form-entries":te};var o={slug:"site-settings",label:"Site Settings",admin:{group:"settings"},access:{read:()=>true,update:()=>true},fields:[{name:"siteName",type:"text",label:"Site Name",required:true,admin:{}},{name:"siteDescription",type:"textarea",label:"Site Description",admin:{placeholder:"Enter a brief description of your site for SEO and search results."}},{name:"siteLogo",type:"upload",label:"Site Logo",relationTo:"media"},{name:"siteFavicon",type:"upload",label:"Favicon",relationTo:"media"},{name:"siteOgImage",type:"upload",label:"Default OG Image",relationTo:"media"},{name:"siteUrl",type:"text",label:"Site URL",admin:{}},{name:"maintenanceEnabled",type:"checkbox",label:"Enable Maintenance Mode",defaultValue:false,admin:{description:"When enabled, the public site will show a maintenance page."}},{name:"maintenance",type:"group",label:"Maintenance Configuration",admin:{condition:e=>e.maintenanceEnabled===true},fields:[{name:"message",type:"textarea",label:"Maintenance Message",admin:{placeholder:"We'll be back soon! We're performing scheduled maintenance."}},{name:"bypassToken",type:"text",label:"Bypass Token",admin:{description:"Append ?bypass=YOUR_TOKEN to URL to view the site while in maintenance mode."}}]},{name:"enableI18n",type:"checkbox",label:"Enable Internationalization (i18n)",defaultValue:false,admin:{description:"Enable support for multiple languages."}},{name:"i18n",type:"group",label:"Localization",admin:{condition:e=>e.enableI18n===true},fields:[{name:"language",type:"select",label:"Default Language",defaultValue:"en",options:[{label:"English",value:"en"},{label:"Spanish",value:"es"},{label:"French",value:"fr"},{label:"German",value:"de"},{label:"Portuguese",value:"pt"},{label:"Italian",value:"it"},{label:"Dutch",value:"nl"},{label:"Russian",value:"ru"},{label:"Japanese",value:"ja"},{label:"Chinese",value:"zh"},{label:"Korean",value:"ko"},{label:"Arabic",value:"ar"}]},{name:"timezone",type:"text",label:"Timezone",defaultValue:"UTC"}]},{name:"logo",type:"group",label:"Logo Display Settings",fields:[{name:"width",type:"number",label:"Max Width (px)"},{name:"height",type:"number",label:"Max Height (px)"},{name:"altText",type:"text",label:"Alt Text"}]},{name:"analyticsEnabled",type:"checkbox",label:"Enable Analytics & Tracking",defaultValue:false},{name:"analytics",type:"group",label:"Tracking Configurations",admin:{condition:e=>e.analyticsEnabled===true},fields:[{name:"googleAnalyticsId",type:"text",label:"Google Analytics ID"},{name:"googleTagManagerId",type:"text",label:"Google Tag Manager ID"},{name:"plausibleDomain",type:"text",label:"Plausible Domain"},{name:"mixpanelToken",type:"password",label:"Mixpanel Token"}]}]};var i={slug:"seo-settings",label:"SEO Settings",admin:{group:"settings"},access:{read:()=>true,update:()=>true},fields:[{name:"seoMode",type:"select",label:"Visibility Mode",defaultValue:"simple",options:[{label:"Simple (Basic Meta)",value:"simple"},{label:"Advanced (Full Technical SEO)",value:"advanced"}],admin:{description:"Switch to advanced mode to control robots.txt, canonical URLs, and deep metadata."}},{name:"defaultTitle",type:"text",label:"Default Title",admin:{}},{name:"defaultDescription",type:"textarea",label:"Default Description",admin:{}},{name:"titleTemplate",type:"text",label:"Title Template",defaultValue:"{{title}} | {{siteName}}",admin:{}},{name:"siteNameInTitle",type:"checkbox",label:"Include Site Name in Title",defaultValue:true},{name:"separator",type:"text",label:"Title Separator",defaultValue:" | ",admin:{}},{name:"meta",type:"group",label:"Technical Meta Settings",admin:{condition:e=>e.seoMode==="advanced"},fields:[{name:"robots",type:"text",label:"Robots Meta",defaultValue:"index, follow"},{name:"canonicalUrl",type:"text",label:"Canonical URL"},{name:"ogType",type:"select",label:"Default OG Type",defaultValue:"website",options:[{label:"Website",value:"website"},{label:"Article",value:"article"},{label:"Product",value:"product"},{label:"Book",value:"book"},{label:"Music",value:"music"},{label:"Video",value:"video"}]}]},{name:"enableSitemap",type:"checkbox",label:"Enable XML Sitemap",defaultValue:true},{name:"sitemap",type:"group",label:"Sitemap Configuration",admin:{condition:e=>e.enableSitemap===true&&e.seoMode==="advanced"},fields:[{name:"sitemapUrls",type:"number",label:"Sitemap URL Limit",defaultValue:5e4}]},{name:"robotsTxt",type:"textarea",label:"Custom robots.txt",admin:{condition:e=>e.seoMode==="advanced"}},{name:"social",type:"group",label:"Social Media",fields:[{name:"twitterHandle",type:"text",label:"Twitter/X Handle",admin:{}},{name:"twitterCardType",type:"select",label:"Twitter Card Type",defaultValue:"summary_large_image",options:[{label:"Summary",value:"summary"},{label:"Summary with Large Image",value:"summary_large_image"},{label:"App",value:"app"},{label:"Player",value:"player"}]},{name:"fbAppId",type:"text",label:"Facebook App ID"}]},{name:"advanced",type:"group",label:"Advanced",fields:[{name:"jsonLdEnabled",type:"checkbox",label:"Enable JSON-LD",defaultValue:true,admin:{}},{name:"breadcrumbsEnabled",type:"checkbox",label:"Enable Breadcrumbs",defaultValue:true},{name:"paginationSize",type:"number",label:"Default Pagination Size",defaultValue:10}]}]};var r={slug:"social-settings",label:"Social Media",admin:{group:"settings"},access:{read:()=>true,update:()=>true},fields:[{name:"showAll",type:"checkbox",label:"Show All Platforms",defaultValue:false,admin:{description:"Toggle to show niche or secondary social platforms."}},{name:"facebook",type:"text",label:"Facebook"},{name:"twitter",type:"text",label:"Twitter/X"},{name:"instagram",type:"text",label:"Instagram"},{name:"linkedin",type:"text",label:"LinkedIn"},{name:"youtube",type:"text",label:"YouTube"},{name:"tiktok",type:"text",label:"TikTok",admin:{condition:e=>e.showAll===true}},{name:"pinterest",type:"text",label:"Pinterest",admin:{condition:e=>e.showAll===true}},{name:"discord",type:"text",label:"Discord",admin:{condition:e=>e.showAll===true}},{name:"twitch",type:"text",label:"Twitch",admin:{condition:e=>e.showAll===true}},{name:"github",type:"text",label:"GitHub",admin:{condition:e=>e.showAll===true}},{name:"mastodon",type:"text",label:"Mastodon",admin:{condition:e=>e.showAll===true}}]};var s={slug:"email-settings",label:"Email Settings",admin:{group:"settings"},access:{read:()=>true,update:()=>true},fields:[{name:"fromName",type:"text",label:"From Name",admin:{}},{name:"fromEmail",type:"email",label:"From Email",required:true,admin:{}},{name:"replyTo",type:"email",label:"Reply-To Email",admin:{}},{name:"provider",type:"select",label:"Email Provider",defaultValue:"smtp",options:[{label:"SMTP (Standard)",value:"smtp"},{label:"Resend",value:"resend"},{label:"SendGrid",value:"sendgrid"},{label:"Mailgun",value:"mailgun"},{label:"AWS SES",value:"ses"}]},{name:"smtp",type:"group",label:"SMTP Settings",admin:{condition:e=>e.provider==="smtp"},fields:[{name:"smtpService",type:"select",label:"SMTP Service",defaultValue:"custom",options:[{label:"Custom SMTP",value:"custom"},{label:"Gmail",value:"gmail"},{label:"Outlook / Office 365",value:"outlook"},{label:"Brevo (Sendinblue)",value:"brevo"},{label:"Mailgun (SMTP)",value:"mailgun-smtp"},{label:"SendGrid (SMTP)",value:"sendgrid-smtp"},{label:"Mandrill / Mailchimp",value:"mandrill"}],admin:{description:"Selecting a known service will pre-configure host and port settings."}},{name:"host",type:"text",label:"Host",admin:{condition:(e,t)=>t.smtpService==="custom",placeholder:"smtp.example.com"}},{name:"port",type:"number",label:"Port",defaultValue:587,admin:{condition:(e,t)=>t.smtpService==="custom"}},{name:"username",type:"text",label:"Username"},{name:"password",type:"password",label:"Password"},{name:"secure",type:"checkbox",label:"Use TLS/SSL",defaultValue:true}]},{name:"resend",type:"group",label:"Resend Settings",admin:{condition:e=>e.provider==="resend"},fields:[{name:"apiKey",type:"password",label:"API Key",required:true}]},{name:"sendgrid",type:"group",label:"SendGrid Settings",admin:{condition:e=>e.provider==="sendgrid"},fields:[{name:"apiKey",type:"password",label:"API Key",required:true}]},{name:"mailgun",type:"group",label:"Mailgun Settings",admin:{condition:e=>e.provider==="mailgun"},fields:[{name:"apiKey",type:"password",label:"API Key",required:true},{name:"domain",type:"text",label:"Domain",required:true},{name:"region",type:"select",label:"Region",defaultValue:"us",options:[{label:"US (United States)",value:"us"},{label:"EU (Europe)",value:"eu"}]}]},{name:"ses",type:"group",label:"AWS SES Settings",admin:{condition:e=>e.provider==="ses"},fields:[{name:"accessKeyId",type:"text",label:"Access Key ID",required:true},{name:"secretAccessKey",type:"password",label:"Secret Access Key",required:true},{name:"region",type:"text",label:"Region",defaultValue:"us-east-1",admin:{placeholder:"us-east-1"}}]},{name:"testEmailSection",type:"row",label:"Test Email",admin:{description:"Enter an email address to send a test email."},fields:[{name:"testEmail",type:"email",label:"Email",admin:{width:"300px"}},{name:"sendTestEmail",type:"action",label:"Send Test Email",admin:{action:"/api/globals/email-settings/test",method:"POST"}}]}]};var m={slug:"access-settings",label:"Access Control",admin:{group:"settings"},access:{read:()=>true,update:()=>true},fields:[{name:"enablePublicAccess",type:"checkbox",label:"Enable Public Access",defaultValue:true,admin:{}},{name:"defaultCollectionAccess",type:"select",label:"Default Collection Access",defaultValue:"read",options:[{label:"Read Only",value:"read"},{label:"Read & Create",value:"create"},{label:"Read & Create & Update",value:"update"},{label:"Full Access",value:"admin"},{label:"No Access",value:"none"}],admin:{}},{name:"apiAccess",type:"group",label:"API Access",fields:[{name:"graphqlEnabled",type:"checkbox",label:"Enable GraphQL",defaultValue:false},{name:"trpcEnabled",type:"checkbox",label:"Enable tRPC",defaultValue:false},{name:"wsEnabled",type:"checkbox",label:"Enable WebSocket",defaultValue:false},{name:"requireAuth",type:"checkbox",label:"Require Authentication",defaultValue:false},{name:"cors",type:"group",label:"CORS Settings",admin:{condition:e=>e.apiAccess?.graphqlEnabled===true},fields:[{name:"allowedOrigins",type:"textarea",label:"Allowed Origins (one per line)",admin:{placeholder:`https://example.com
2
- https://app.example.com`}}]}]},{name:"rateLimiting",type:"group",label:"Rate Limiting Configuration",admin:{condition:e=>e.rateLimiting?.enabled===true},fields:[{name:"enabled",type:"checkbox",label:"Enable Global Rate Limiting",defaultValue:true},{name:"maxRequests",type:"number",label:"Max Requests",defaultValue:100,admin:{condition:(e,t)=>t.enabled===true}},{name:"windowMs",type:"number",label:"Window (ms)",defaultValue:6e4,admin:{condition:(e,t)=>t.enabled===true}}]}]};var Re=[{label:"United States",value:"US"},{label:"United Kingdom",value:"GB"},{label:"Canada",value:"CA"},{label:"Australia",value:"AU"},{label:"Germany",value:"DE"},{label:"France",value:"FR"},{label:"Netherlands",value:"NL"},{label:"Belgium",value:"BE"},{label:"Spain",value:"ES"},{label:"Italy",value:"IT"},{label:"Portugal",value:"PT"},{label:"Sweden",value:"SE"},{label:"Norway",value:"NO"},{label:"Denmark",value:"DK"},{label:"Finland",value:"FI"},{label:"Austria",value:"AT"},{label:"Switzerland",value:"CH"},{label:"Japan",value:"JP"},{label:"South Korea",value:"KR"},{label:"China",value:"CN"},{label:"India",value:"IN"},{label:"Brazil",value:"BR"},{label:"Mexico",value:"MX"}],b={slug:"store-settings",label:"Store Settings",admin:{group:"settings"},access:{read:()=>true,update:()=>true},fields:[{name:"storeName",type:"text",label:"Store Name",required:true},{name:"storeEmail",type:"email",label:"Contact Email",required:true},{name:"storePhone",type:"text",label:"Phone Number"},{name:"address",type:"group",label:"Store Address",fields:[{name:"street",type:"text",label:"Street Address"},{name:"city",type:"text",label:"City"},{name:"state",type:"text",label:"State/Province"},{name:"postalCode",type:"text",label:"Postal Code"},{name:"country",type:"select",label:"Country",options:Re}]},{name:"currency",type:"group",label:"Currency",fields:[{name:"code",type:"select",label:"Currency Code",defaultValue:"USD",options:[{label:"USD - US Dollar",value:"USD"},{label:"EUR - Euro",value:"EUR"},{label:"GBP - British Pound",value:"GBP"},{label:"CAD - Canadian Dollar",value:"CAD"},{label:"AUD - Australian Dollar",value:"AUD"},{label:"JPY - Japanese Yen",value:"JPY"},{label:"CNY - Chinese Yuan",value:"CNY"},{label:"INR - Indian Rupee",value:"INR"},{label:"BRL - Brazilian Real",value:"BRL"},{label:"MXN - Mexican Peso",value:"MXN"}]},{name:"symbol",type:"text",label:"Symbol",defaultValue:"$"},{name:"position",type:"select",label:"Symbol Position",defaultValue:"before",options:[{label:"Before amount",value:"before"},{label:"After amount",value:"after"}]},{name:"decimals",type:"number",label:"Decimal Places",defaultValue:2}]},{name:"tax",type:"group",label:"Tax Logistics",admin:{condition:e=>e.tax?.enabled===true},fields:[{name:"enabled",type:"checkbox",label:"Enable Tax",defaultValue:true},{name:"rate",type:"number",label:"Tax Rate (%)",admin:{placeholder:"10",condition:(e,t)=>t.enabled===true}},{name:"includedInPrice",type:"checkbox",label:"Tax Included in Prices",admin:{condition:(e,t)=>t.enabled===true}},{name:"taxId",type:"text",label:"Tax ID / VAT Number",admin:{condition:(e,t)=>t.enabled===true}}]},{name:"shipping",type:"group",label:"Shipping Logic",admin:{condition:e=>e.shipping?.enableLocalPickup===true||e.shipping?.flatRate>0},fields:[{name:"enableLocalPickup",type:"checkbox",label:"Enable Local Pickup",defaultValue:true},{name:"flatRate",type:"number",label:"Flat Rate Shipping Fee",admin:{}},{name:"freeShippingThreshold",type:"number",label:"Free Shipping Minimum",admin:{condition:(e,t)=>t.flatRate>0}}]},{name:"orders",type:"group",label:"Orders",fields:[{name:"orderNumberPrefix",type:"text",label:"Order Number Prefix",defaultValue:"ORD",admin:{}},{name:"allowGuestCheckout",type:"checkbox",label:"Allow Guest Checkout",defaultValue:true},{name:"requirePhone",type:"checkbox",label:"Require Phone Number",defaultValue:true}]}]};var g={slug:"payment-settings",label:"Payment Settings",admin:{group:"settings"},access:{read:()=>true,update:()=>true},fields:[{name:"testMode",type:"checkbox",label:"Test Mode",defaultValue:true,admin:{}},{name:"provider",type:"select",label:"Primary Payment Provider",defaultValue:"stripe",options:[{label:"Stripe",value:"stripe"},{label:"PayPal",value:"paypal"},{label:"Square",value:"square"},{label:"Manual Methods Only",value:"manual"}]},{name:"stripe",type:"group",label:"Stripe",admin:{condition:e=>e.provider==="stripe"},fields:[{name:"enabled",type:"checkbox",label:"Enable Stripe",defaultValue:false},{name:"publishableKey",type:"text",label:"Publishable Key",admin:{placeholder:"pk_live_..."}},{name:"secretKey",type:"password",label:"Secret Key"},{name:"webhookSecret",type:"password",label:"Webhook Secret",admin:{}}]},{name:"paypal",type:"group",label:"PayPal",admin:{condition:e=>e.provider==="paypal"},fields:[{name:"enabled",type:"checkbox",label:"Enable PayPal",defaultValue:false},{name:"clientId",type:"text",label:"Client ID"},{name:"clientSecret",type:"password",label:"Client Secret"},{name:"mode",type:"select",label:"Mode",defaultValue:"sandbox",options:[{label:"Sandbox (Test)",value:"sandbox"},{label:"Live",value:"live"}]}]},{name:"square",type:"group",label:"Square",admin:{condition:e=>e.provider==="square"},fields:[{name:"enabled",type:"checkbox",label:"Enable Square",defaultValue:false},{name:"applicationId",type:"text",label:"Application ID"},{name:"accessToken",type:"password",label:"Access Token"},{name:"locationId",type:"text",label:"Location ID"}]},{name:"methods",type:"group",label:"Manual Payment Methods",fields:[{name:"cod",type:"checkbox",label:"Cash on Delivery",defaultValue:true},{name:"bankTransfer",type:"checkbox",label:"Bank Transfer",defaultValue:true},{name:"cash",type:"checkbox",label:"Cash (Local Pickup)",defaultValue:true},{name:"check",type:"checkbox",label:"Check",defaultValue:false}]},{name:"bankTransfer",type:"group",label:"Bank Transfer Details",admin:{},fields:[{name:"bankName",type:"text",label:"Bank Name"},{name:"accountName",type:"text",label:"Account Name"},{name:"accountNumber",type:"text",label:"Account Number"},{name:"routingNumber",type:"text",label:"Routing/Sort Code"},{name:"iban",type:"text",label:"IBAN"},{name:"swift",type:"text",label:"SWIFT/BIC"}]}]};var p={slug:"system",label:"System",admin:{group:"settings",description:"Core system configuration and secrets"},access:{read:()=>true,update:()=>true},fields:[{name:"appSecret",type:"secret",label:"App Secret",required:false,admin:{description:"Auto-generated master secret used for encryption and auth. Auto-created if empty on load.",readOnly:true}},{name:"encryptionKey",type:"text",label:"Encryption Key",required:false,admin:{description:"Auto-generated key for data encryption at rest.",readOnly:true}},{name:"sessionMaxAge",type:"number",label:"Session Max Age (days)",required:false,defaultValue:7,admin:{description:"Maximum session duration in days"}},{name:"maxSessionsPerUser",type:"number",label:"Max Sessions Per User",required:false,defaultValue:3,admin:{description:"Maximum concurrent sessions allowed per user"}}]};var d={slug:"header-settings",label:"Header Settings",admin:{group:"Header Configuration",description:"Manage global header settings like the logo and navigation."},access:{read:()=>true,update:()=>true},fields:[{name:"site_logo",type:"upload",relationTo:"media",label:"Site Logo"},{name:"site_menu",type:"relationship",relationTo:"menu",label:"Site Menu"},{name:"header_text",type:"richtext",label:"Header Text"},{name:"header_buttons",type:"array",label:"Header Buttons",fields:[{name:"button",type:"group",label:"Button",fields:[{name:"text",type:"text",label:"Button Text"},{name:"url",type:"text",label:"Button URL"}]}]}]};var u={slug:"footer-settings",label:"Footer Settings",admin:{group:"Footer Configuration",description:"Manage global footer settings like the logo, text, and links."},access:{read:()=>true,update:()=>true},fields:[{name:"footer_logo",type:"upload",relationTo:"media",label:"Footer Logo"},{name:"footer_text",type:"richtext",label:"Footer Text"},{name:"footer_address",type:"text",label:"Footer Address"},{name:"footer_phone",type:"text",label:"Footer Phone"},{name:"footer_email",type:"text",label:"Footer Email"},{name:"footer_hours",type:"array",label:"Footer Hours",fields:[{name:"hour",type:"text",label:"Hour"}]},{name:"footer_menu",type:"array",label:"Footer Menu",fields:[{name:"menu",type:"relationship",relationTo:"menu"}]},{name:"footer_buttons",type:"array",label:"Footer Buttons",fields:[{name:"button",type:"group",label:"Button",fields:[{name:"text",type:"text",label:"Button Text"},{name:"url",type:"text",label:"Button URL"}]}]},{name:"footer_form",type:"relationship",relationTo:"forms",label:"Footer Form"}]};var M=[o,i,r,s,a$1,m,b,g,p,d,u],y=[o,i,r,s,a$1,m,p,d,u],U={[o.slug]:o,[i.slug]:i,[r.slug]:r,[s.slug]:s,[a$1.slug]:a$1,[m.slug]:m,[b.slug]:b,[g.slug]:g,[p.slug]:p,[d.slug]:d,[u.slug]:u};function N(e){switch(e){case "minimal":return [o,i];case "starter":case "blog":return y;case "ecommerce":case "kitchen-sink":return M;default:return y}}function f(e){let t=new Map;for(let l of e)t.has(l.slug)||t.set(l.slug,l);return Array.from(t.values())}var ae=[...Object.values(F),...Object.values(w),...Object.values(O),...Object.values(D),...Object.values(q)],I=[...ae,...k,...Object.values(b$1),...Object.values(V)],ma={minimal:f([...Object.values(S),...ae]),starter:f([...Object.values(h),...I]),blog:f([...Object.values(v),...I]),ecommerce:f([...Object.values(T),...Object.values(A),...Object.values(G),...Object.values(L),...Object.values(E),...Object.values(P),...I]),"kitchen-sink":f([...Object.values(S),...Object.values(h),...Object.values(v),...Object.values(T),...Object.values(B),...Object.values(A),...Object.values(G),...Object.values(L),...Object.values(E),...Object.values(P),...I])};function da(e){let t=e.collections?[...e.collections]:[],l=e.globals?[...e.globals]:[];e.includeMedia!==false&&t.push(...k);let le=e.template?N(e.template):y;if(e.includeSettings){if(e.includeSettings==="all")l.push(...M);else if(e.includeSettings==="core")l.push(...y);else if(Array.isArray(e.includeSettings))for(let x of e.includeSettings){let C=U[x];C&&l.push(C);}}else (!e.globals||e.globals.length===0)&&l.push(...le);if(e.excludeSettings&&e.excludeSettings.length>0){let x=new Set(e.excludeSettings),C=l.filter(j=>!x.has(j.slug)&&!x.has(j.label?.toLowerCase().replace(/\s+/g,"-")||""));l.length=0,l.push(...C);}return {collections:t.length>0?t:void 0,globals:l.length>0?l:void 0}}
3
- export{E as A,ee as B,D as C,te as D,q as E,o as F,i as G,r as H,s as I,m as J,b as K,g as L,p as M,d as N,u as O,M as P,y as Q,U as R,N as S,ma as T,da as U,S as a,h as b,v as c,oe as d,T as e,ie as f,B as g,H as h,k as i,_ as j,V as k,K as l,F as m,W as n,w as o,Y as p,O as q,X as r,P as s,J as t,A as u,Q as v,G as w,$ as x,L as y,Z as z};
@@ -1,86 +0,0 @@
1
- import {c as c$1,a as a$2,b as b$1}from'./chunk-7WOX27LK.js';import {a as a$3}from'./chunk-AE6GXUT7.js';import {a as a$8}from'./chunk-2W4FK6CJ.js';import {a as a$1}from'./chunk-NRLIGDYF.js';import {c,a as a$9,b as b$2}from'./chunk-UVTS2IWM.js';import {d,i,j,f,e as e$1,g}from'./chunk-HLSB2MCK.js';import {e,c as c$3}from'./chunk-VKXQUYYV.js';import {a as a$5}from'./chunk-RHCWCG3O.js';import {a as a$6}from'./chunk-G6A7OSIG.js';import {a as a$7}from'./chunk-P7CESLDJ.js';import {a as a$4}from'./chunk-KDNYHLD2.js';import {a,b,c as c$2}from'./chunk-5J6HXUF6.js';import sr,{randomBytes,createHash,createHmac}from'crypto';import {createStorage}from'unstorage';import or from'unstorage/drivers/fs';import {Hono}from'hono';import Ce,{join,resolve,basename,extname}from'path';import {existsSync,readFileSync}from'fs';import ct from'sharp';import {mkdir,readdir,stat,rename,unlink,writeFile}from'fs/promises';import Ir from'process';import {S3Client,ListObjectsV2Command,DeleteObjectsCommand,DeleteObjectCommand,PutObjectCommand,HeadObjectCommand,CopyObjectCommand}from'@aws-sdk/client-s3';import {NodeHttpHandler}from'@smithy/node-http-handler';import {Readable}from'stream';import {Client}from'basic-ftp';import {zodToJsonSchema}from'zod-to-json-schema';function Kr(d){We=d;}async function Tt(){if(We)try{let d=await We.findOne({collection:"_globals_system",where:{}});if(d){te={appSecret:d.appSecret||null,encryptionKey:d.encryptionKey||null,sessionConfig:d.sessionMaxAge||d.maxSessionsPerUser?{maxAge:(d.sessionMaxAge||7)*24*60*60*1e3,maxSessionsPerUser:d.maxSessionsPerUser||3}:null};return}}catch{}te={appSecret:process.env.APP_SECRET||"development-secret-key",encryptionKey:null,sessionConfig:null};}function ar(){return te?.appSecret?te.appSecret:process.env.APP_SECRET||"development-secret-key"}function zr(){if(te?.encryptionKey)return te.encryptionKey;let d=ar();return sr.createHash("sha256").update(d).digest("hex")}function Pt(){return te?.sessionConfig?te.sessionConfig:{maxAge:10080*60*1e3,maxSessionsPerUser:3}}var We,te,Ve=a(()=>{We=null,te=null;});var kt={};b(kt,{SESSION_CONFIG:()=>ee,clearSessionCookie:()=>Ye,createSession:()=>Ze,deleteSession:()=>he,getClientIp:()=>Xe,getCurrentUser:()=>V,getSession:()=>ue,getSessionIdFromRequest:()=>G,getUserSessions:()=>ye,invalidateAllUserSessions:()=>cr,refreshSession:()=>Pe,setSessionCookie:()=>Ge,updateSessionName:()=>Qe,validateSession:()=>Te});async function re(){return De||(De=createStorage({driver:or({base:".astro/sessions"})}),De)}function lr(){return sr.randomUUID()}function jt(d){let e="Unknown",t="Unknown",a="Unknown";return d.includes("Firefox")?e="Firefox":d.includes("Edg/")?e="Edge":d.includes("Chrome")?e="Chrome":d.includes("Safari")&&!d.includes("Chrome")&&(e="Safari"),d.includes("iPhone")?(t="iPhone",a="iOS"):d.includes("iPad")?(t="iPad",a="iOS"):d.includes("Mac")?(t="MacBook",a="macOS"):d.includes("Windows")?(t="Windows PC",a="Windows"):d.includes("Linux")?(t="Linux PC",a="Linux"):d.includes("Android")&&(t="Android Phone",a="Android"),{browser:e,device:t,platform:a}}function dr(d){if(!d?.userAgent)return "Session";let{browser:e,device:t}=jt(d.userAgent);return `${t} - ${e}`}function G(d){let e=d.headers.get("Cookie");return e&&Object.fromEntries(e.split("; ").map(a=>a.split("=")))[He]||null}function Xe(d){let e=d.headers.get("x-forwarded-for");return e?e.split(",")[0].trim():d.headers.get("x-real-ip")||"unknown"}function Ge(d,e){let a=process.env.NODE_ENV==="production"?"Secure; ":"",i=new Headers(d.headers);return i.append("Set-Cookie",`${He}=${e}; HttpOnly; Path=/; Max-Age=${ee.absoluteMaxAge/1e3}; SameSite=Strict; ${a}`),new Response(d.body,{status:d.status,statusText:d.statusText,headers:i})}function Ye(d){let t=process.env.NODE_ENV==="production"?"Secure; ":"",a=new Headers(d.headers);return a.append("Set-Cookie",`${He}=; HttpOnly; Path=/; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=Strict; ${t}`),new Response(d.body,{status:d.status,statusText:d.statusText,headers:a})}async function Re(d){return await(await re()).getItem(`user:${d}`)||[]}async function Je(d,e){let t=await re();e.length>0?await t.setItem(`user:${d}`,e):await t.removeItem(`user:${d}`);}async function Ze(d,e){let t=await re(),a=await Re(d.id);for(;a.length>=ee.maxSessionsPerUser;){let A=a.shift();A&&await t.removeItem(`session:${A}`);}let i=lr(),c=Date.now(),l=e?.headers.get("user-agent"),u=e?Xe(e):"unknown",g=l?{userAgent:l,ip:u,...jt(l)}:{ip:u},f={id:i,userId:d.id,email:d.email,role:d.role,tenantId:d.tenantId,permissions:d.permissions,createdAt:c,expiresAt:c+ee.absoluteMaxAge,lastActivityAt:c,deviceInfo:g,sessionName:dr(g)};return await t.setItem(`session:${i}`,f,{ttl:Math.floor(ee.absoluteMaxAge/1e3)}),a.push(i),await Je(d.id,a),i}async function ue(d){return await(await re()).getItem(`session:${d}`)||null}async function Te(d){let e=await ue(d);return e?e.expiresAt<Date.now()?(await he(d),{valid:false,reason:"Session expired"}):{valid:true}:{valid:false,reason:"Session not found"}}async function Pe(d,e){let t=await re(),a=await ue(d);if(!a)return null;let i=Date.now(),c=a.expiresAt-i,l=a.deviceInfo;if(e){let f=Xe(e);f!==a.deviceInfo?.ip&&(l={...a.deviceInfo,ip:f});}let u={...a,lastActivityAt:i,expiresAt:c<ee.refreshThreshold?i+ee.absoluteMaxAge:a.expiresAt,deviceInfo:l},g=c<ee.refreshThreshold?ee.absoluteMaxAge:void 0;return await t.setItem(`session:${d}`,u,g?{ttl:Math.floor(g/1e3)}:void 0),u}async function he(d){let e=await re(),t=await ue(d);if(t){let i=(await Re(t.userId)).filter(c=>c!==d);await Je(t.userId,i);}await e.removeItem(`session:${d}`),await e.removeItem(`activity:${d}`);}async function cr(d){let e=await Re(d),t=await re();for(let a of e)await t.removeItem(`session:${a}`),await t.removeItem(`activity:${a}`);await Je(d,[]);}async function ye(d,e){let t=await Re(d),a=[];for(let i of t){let c=await ue(i);c&&a.push({id:c.id,sessionName:c.sessionName||"Session",deviceInfo:c.deviceInfo,createdAt:c.createdAt,lastActivityAt:c.lastActivityAt,currentSession:c.id===e});}return a.sort((i,c)=>c.lastActivityAt-i.lastActivityAt),a}async function Qe(d,e){let t=await ue(d);return t?(await(await re()).setItem(`session:${d}`,{...t,sessionName:e}),true):false}async function V(d){let e=G(d);if(!e||!(await Te(e)).valid)return null;let a=await ue(e);return a?(await Pe(e,d),a):null}var Ut,ee,He,De,Ue=a(()=>{Ve();Ut=Pt(),ee={absoluteMaxAge:Ut.maxAge,maxSessionsPerUser:Ut.maxSessionsPerUser,refreshThreshold:300*1e3,activityDebounce:30*1e3,pollInterval:30*1e3},He="kyro-session",De=null;});Ue();function Et(d){let{db:t,userLookup:a}=d;return async function(c){let l=f(c);if(l&&t){let g$1=await e$1(l,t,a);if(g$1.valid&&g$1.user)return {user:g$1.user,tenantContext:qt(g$1.user),apiKeyContext:g(g$1),status:200,authType:"apikey"};if(g$1.error)return {status:401,error:g$1.error}}let u=G(c);if(u)try{let g=await Te(u);if(!g.valid)return {status:401,error:g.reason||"Session invalid"};let f=await V(c);if(f){let A=a?await a(f.userId):null;if(A)return {user:A,tenantContext:qt(A),status:200,authType:"session"}}}catch(g){console.error("Session validation error:",g);}return {status:401,error:"Authentication required"}}}function qt(d){return {tenantId:d.tenantId||"default",userId:d.id||"anonymous",role:d.role||"guest",roles:[d.role||"guest"],permissions:[],isSuperAdmin:d.role==="super_admin"}}Ve();var je=class{storage=new Map;userStorage=new Map;limits;userLimits;constructor(e,t){this.limits={...ur,...e},this.userLimits=t||{"user:api":{window:6e4,max:500},"user:write":{window:36e5,max:100}};}getKey(e,t){return `${e}:${t}`}getUserKey(e,t,a){return `user:${e}:${t}:${a}`}cleanupOldEntries(e,t){let i=Date.now()-t;for(;e.length>0&&e[0].timestamp<i;)e.shift();}async check(e,t){let a=this.limits[e]||this.limits["api:general"],i=this.getKey(e,t),c=this.storage.get(i);c||(c=[],this.storage.set(i,c)),this.cleanupOldEntries(c,a.window);let l=Date.now(),u=c.reduce((g,f)=>g+f.count,0);if(c.push({timestamp:l,count:1}),u>=a.max){let f=c.reduce((A,w)=>A.timestamp<w.timestamp?A:w,c[0]).timestamp+a.window;return {allowed:false,remaining:0,resetAt:f,retryAfter:Math.ceil((f-l)/1e3)}}return {allowed:true,remaining:a.max-u-1,resetAt:l+a.window}}async checkUser(e,t,a){let i=this.userLimits[e]||this.userLimits["user:api"],c=this.userStorage.get(t),l=[];c?l=c.get(this.getKey(e,a))||[]:(this.userStorage.has(t)||this.userStorage.set(t,new Map),this.userStorage.get(t).set(this.getKey(e,a),l)),this.cleanupOldEntries(l,i.window);let u=Date.now(),g=l.reduce((f,A)=>f+A.count,0);if(l.push({timestamp:u,count:1}),g>=i.max){let A=l.reduce((w,U)=>w.timestamp<U.timestamp?w:U,l[0]).timestamp+i.window;return {allowed:false,remaining:0,resetAt:A,retryAfter:Math.ceil((A-u)/1e3)}}return {allowed:true,remaining:i.max-g-1,resetAt:u+i.window}}async reset(e,t){let a=this.getKey(e,t);this.storage.delete(a);}async resetUser(e,t,a){let i=this.userStorage.get(t);if(i){let c=this.getKey(e,a);i.delete(c);}}async getStatus(e,t){let a=this.limits[e]||this.limits["api:general"],i=this.getKey(e,t),c=this.storage.get(i);c||(c=[],this.storage.set(i,c)),this.cleanupOldEntries(c,a.window);let l=Date.now(),u=c.reduce((g,f)=>g+f.count,0);return {count:u,limit:a.max,remaining:Math.max(0,a.max-u),resetAt:l+a.window}}setLimit(e,t){this.limits[e]=t;}setUserLimit(e,t){this.userLimits[e]=t;}},ur={"auth:login":{window:9e5,max:5},"auth:register":{window:36e5,max:3},"auth:forgot":{window:36e5,max:3},"auth:reset":{window:36e5,max:5},"auth:verify":{window:36e5,max:5},"api:general":{window:6e4,max:100},"api:authenticated":{window:6e4,max:200}};var et={retentionDays:30};var Ct=class{redis;prefix;retentionDays;constructor(e,t=30,a="kyro:audit:"){this.redis=e,this.prefix=a,this.retentionDays=t;}async log(e){let t=randomBytes(16).toString("hex"),a=new Date,i={...e,id:t,timestamp:a},c=this.getKeyForDate(a),l=`${this.prefix}log:${t}`;await this.redis.hset(l,this.serializeLog(i)),await this.redis.expire(l,this.retentionDays*24*60*60+3600),await this.redis.zadd(c,a.getTime(),t),await this.redis.expire(c,this.retentionDays*24*60*60+3600);let u=e.userId?`${this.prefix}user:${e.userId}`:null;return u&&(await this.redis.zadd(u,a.getTime(),t),await this.redis.expire(u,this.retentionDays*24*60*60+3600)),t}async get(e){let t=`${this.prefix}log:${e}`,a=await this.redis.hgetall(t);return !a||Object.keys(a).length===0?null:this.deserializeLog(a)}async query(e={}){let{limit:t=50,offset:a=0}=e,i=[];if(e.userId)i.push(`${this.prefix}user:${e.userId}`);else if(e.startDate||e.endDate)i=this.getKeysForDateRange(e.startDate,e.endDate);else {let g=new Date;i=this.getKeysForDateRange(new Date(g.getTime()-this.retentionDays*24*60*60*1e3),g);}let c=[];for(let g of i){let f=await this.redis.zrange(g,0,-1,"WITHSCORES");for(let A=0;A<f.length;A+=2)c.push([f[A],parseInt(f[A+1],10)]);}c.sort((g,f)=>f[1]-g[1]);let l=c.length;c=c.slice(a,a+t);let u=[];for(let[g]of c){let f=await this.get(g);f&&this.matchesFilter(f,e)&&u.push(f);}return {logs:u,total:l}}async getRecent(e=50){let t=[],a=new Date,i=this.getKeysForDateRange(new Date(a.getTime()-10080*60*1e3),a),c=[];for(let l of i){let u=await this.redis.zrange(l,0,-1,"WITHSCORES");for(let g=0;g<u.length;g+=2)c.push([u[g],parseInt(u[g+1],10)]);}c.sort((l,u)=>u[1]-l[1]);for(let[l]of c.slice(0,e)){let u=await this.get(l);u&&t.push(u);}return t}async getUserActivity(e,t=50){let a=`${this.prefix}user:${e}`,i=await this.redis.zrange(a,0,t-1),c=[];for(let l of i){let u=await this.get(l);u&&c.push(u);}return c}async getStats(e,t){let a=this.getKeysForDateRange(e||new Date(Date.now()-2592e6),t||new Date),i={},c=0,l=0,u=0,g=new Set;for(let f of a){let A=await this.redis.zrange(f,0,-1);for(let w of A){let U=await this.get(w);U&&(c++,i[U.action]=(i[U.action]||0)+1,U.success&&u++,U.action==="login_failed"&&l++,U.userId&&g.add(U.userId));}}return {totalEvents:c,byAction:i,successRate:c>0?u/c:1,failedLogins:l,uniqueUsers:g}}async cleanup(){let e=Date.now()-this.retentionDays*24*60*60*1e3,t=await this.redis.keys(`${this.prefix}date:*`),a=0;for(let i of t){let c=await this.redis.zrangebyscore(i,0,e);for(let l of c)await this.redis.del(`${this.prefix}log:${l}`),a++;await this.redis.zremrangebyscore(i,0,e);}return a}getKeyForDate(e){let t=e.getFullYear(),a=String(e.getMonth()+1).padStart(2,"0"),i=String(e.getDate()).padStart(2,"0");return `${this.prefix}date:${t}-${a}-${i}`}getKeysForDateRange(e,t){let a=[],i=e||new Date(Date.now()-this.retentionDays*24*60*60*1e3),c=t||new Date,l=new Date(i);for(;l<=c;)a.push(this.getKeyForDate(l)),l.setDate(l.getDate()+1);return a}matchesFilter(e,t){return !(t.action&&!(Array.isArray(t.action)?t.action:[t.action]).includes(e.action)||t.resource&&e.resource!==t.resource||t.resourceId&&e.resourceId!==t.resourceId||t.success!==void 0&&e.success!==t.success)}serializeLog(e){let t={id:e.id,timestamp:new Date(e.timestamp).toISOString(),action:e.action,resource:e.resource,success:e.success?"1":"0"};return e.userId&&(t.userId=e.userId),e.userEmail&&(t.userEmail=e.userEmail),e.role&&(t.role=e.role),e.resourceId&&(t.resourceId=e.resourceId),e.ipAddress&&(t.ipAddress=e.ipAddress),e.userAgent&&(t.userAgent=e.userAgent),e.error&&(t.error=e.error),e.changes&&(t.changes=JSON.stringify(e.changes)),e.metadata&&(t.metadata=JSON.stringify(e.metadata)),t}deserializeLog(e){return {id:e.id,timestamp:new Date(e.timestamp),action:e.action,userId:e.userId,userEmail:e.userEmail,role:e.role,resource:e.resource,resourceId:e.resourceId,ipAddress:e.ipAddress,userAgent:e.userAgent,success:e.success==="1",error:e.error,changes:e.changes?JSON.parse(e.changes):void 0,metadata:e.metadata?JSON.parse(e.metadata):void 0}}};function as(d){return {ipAddress:d.headers.get("x-forwarded-for")?.split(",")[0]?.trim()||d.headers.get("x-real-ip")||"unknown",userAgent:d.headers.get("user-agent")||"unknown"}}var $t=class{logs=[];retentionDays;constructor(e=et.retentionDays){this.retentionDays=e;}async log(e){let t=randomBytes(16).toString("hex"),i={...e,id:t,timestamp:new Date};return this.logs.push(i),this.cleanupOldLogs(),t}async get(e){return this.logs.find(t=>t.id===e)||null}async query(e={}){let{limit:t=50,offset:a=0}=e,i=[...this.logs];if(e.userId&&(i=i.filter(f=>f.userId===e.userId)),e.action){let f=Array.isArray(e.action)?e.action:[e.action];i=i.filter(A=>f.includes(A.action));}e.resource&&(i=i.filter(f=>f.resource===e.resource)),e.resourceId&&(i=i.filter(f=>f.resourceId===e.resourceId)),e.success!==void 0&&(i=i.filter(f=>f.success===e.success));let c=e.startDate,l=e.endDate;c!==void 0&&(i=i.filter(f=>f.timestamp>=c)),l!==void 0&&(i=i.filter(f=>f.timestamp<=l)),i.sort((f,A)=>A.timestamp.getTime()-f.timestamp.getTime());let u=i.length;return {logs:i.slice(a,a+t),total:u}}async getRecent(e=50){let t=new Date(Date.now()-6048e5);return this.logs.filter(i=>i.timestamp>=t).sort((i,c)=>c.timestamp.getTime()-i.timestamp.getTime()).slice(0,e)}async getUserActivity(e,t=50){return this.logs.filter(i=>i.userId===e).sort((i,c)=>c.timestamp.getTime()-i.timestamp.getTime()).slice(0,t)}async getStats(e,t){let a=e||new Date(Date.now()-2592e6),i=t||new Date,c=this.logs.filter(w=>w.timestamp>=a&&w.timestamp<=i),l={},u=0,g=0,f=0,A=new Set;for(let w of c){u++;let U=w.action;l[U]=(l[U]||0)+1,w.success&&f++,w.action==="login_failed"&&g++,w.userId&&A.add(w.userId);}return {totalEvents:u,byAction:l,successRate:u>0?f/u:1,failedLogins:g,uniqueUsers:A}}async cleanup(){let e=new Date(Date.now()-this.retentionDays*24*60*60*1e3),t=this.logs.length;return this.logs=this.logs.filter(a=>a.timestamp>=e),t-this.logs.length}cleanupOldLogs(){let e=new Date(Date.now()-this.retentionDays*24*60*60*1e3);this.logs.length;this.logs=this.logs.filter(a=>a.timestamp>=e);}};Ue();var ke=class{authAdapter;email;passwordPolicy;lockout;rateLimiter;auditLogger;baseUrl;emailVerificationRequired;constructor(e){this.authAdapter=e.redis,this.email=e.email,this.passwordPolicy=e.passwordPolicy||new c$1,this.lockout=e.lockout,this.rateLimiter=e.rateLimiter,this.auditLogger=e.auditLogger,this.baseUrl=e.baseUrl||"http://localhost:3000",this.emailVerificationRequired=e.emailVerificationRequired??true;}async register(e){let{ipAddress:t,userAgent:a}=a$1(e);if(this.rateLimiter){let i=await this.rateLimiter.check("auth:register",t);if(!i.allowed)return this.rateLimitResponse(i)}try{let i=await e.json();if(!i.email||!i.password)return this.errorResponse("Email and password are required",400);if(i.password!==i.confirmPassword)return this.errorResponse("Passwords do not match",400);let c=this.passwordPolicy.validate(i.password);if(!c.valid)return this.errorResponse(c.errors.join(". "),400);if(await this.authAdapter.findUserByEmail(i.email))return this.errorResponse("Email already registered",400);let u=await this.authAdapter.createUser({email:i.email,password:i.password,role:i.role||"customer",tenantId:i.tenantId});if(this.emailVerificationRequired&&this.email){let g=randomBytes(32).toString("hex"),f=`${this.baseUrl}/api/auth/verify?token=${g}`;await this.authAdapter.createSession(u.id,{ipAddress:t,userAgent:a});let A=this.email.getTemplates().verifyEmail(f,i.email);await this.email.send({to:i.email,...A});}return this.auditLogger&&await this.auditLogger.log({action:"register",userId:u.id,userEmail:u.email,resource:"auth",ipAddress:t,userAgent:a,success:!0}),this.jsonResponse({success:!0,message:"Registration successful",user:this.sanitizeUser(u),requiresVerification:this.emailVerificationRequired&&!!this.email},201)}catch(i){return console.error("[AuthRoutes.register] Registration error:",i),this.errorResponse("Registration failed",500)}}async login(e){let{ipAddress:t,userAgent:a}=a$1(e);if(this.rateLimiter){let i=await this.rateLimiter.check("auth:login",t);if(!i.allowed)return this.rateLimitResponse(i)}try{let i=await e.json();if(!i.email||!i.password)return this.errorResponse("Email and password are required",400);let c=await this.authAdapter.findUserByEmail(i.email);if(!c)return await this.recordFailedLogin(t,a),this.errorResponse("Invalid credentials",401);if(c.locked)return this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:c.id,userEmail:c.email,resource:"auth",ipAddress:t,userAgent:a,success:!1,error:"Account locked"}),this.errorResponse("Account locked. Contact an administrator.",403);if(this.lockout){let A=await this.lockout.checkLockout(c.id);if(A.locked)return this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:c.id,userEmail:c.email,resource:"auth",ipAddress:t,userAgent:a,success:!1,error:"Account locked"}),this.errorResponse(`Account locked. Try again in ${Math.ceil((A.lockedUntil.getTime()-Date.now())/6e4)} minutes`,423)}if(!await this.authAdapter.verifyPassword(i.email,i.password))return await this.recordFailedLogin(t,a,c.id,c.email),this.errorResponse("Invalid credentials",401);this.lockout&&await this.lockout.resetAttempts(c.id),this.auditLogger&&await this.auditLogger.log({action:"login",userId:c.id,userEmail:c.email,role:c.role,resource:"auth",ipAddress:t,userAgent:a,success:!0}),await this.authAdapter.updateUser(c.id,{lastLogin:new Date().toISOString()});let u=await Ze({id:c.id,email:c.email,role:c.role,tenantId:c.tenantId}),g={success:!0,user:this.sanitizeUser(c)},f=this.jsonResponse(g);return Ge(f,u)}catch(i){return console.error("[Auth] Login error:",i),this.errorResponse("Login failed",500)}}async logout(e){let t=G(e);if(!t)return this.errorResponse("No session to logout",401);let{ipAddress:a,userAgent:i}=a$1(e);try{let c=await V(e);c&&(await he(t),this.auditLogger&&await this.auditLogger.log({action:"logout",userId:c.userId,userEmail:c.email,resource:"auth",ipAddress:a,userAgent:i,success:!0}));let l=this.jsonResponse({success:!0,message:"Logged out successfully"});return Ye(l)}catch{return this.errorResponse("Logout failed",500)}}async refresh(e){try{let t=G(e);if(!t)return this.errorResponse("Not authenticated",401);let a=await Pe(t,e);return a?this.jsonResponse({success:!0,expiresAt:a.expiresAt}):this.errorResponse("Session not found",404)}catch(t){return console.error("[Auth] Session refresh error:",t),this.errorResponse("Session refresh failed",500)}}async me(e){let t=await V(e);return t?this.jsonResponse({success:true,user:{id:t.userId,email:t.email,role:t.role,tenantId:t.tenantId}}):this.errorResponse("Not authenticated",401)}async changePassword(e){let t=await V(e);if(!t)return this.errorResponse("Not authenticated",401);let{ipAddress:a,userAgent:i}=a$1(e);try{let c=await e.json(),{currentPassword:l,newPassword:u,confirmPassword:g}=c;if(!l||!u)return this.errorResponse("Current and new password required",400);if(u!==g)return this.errorResponse("Passwords do not match",400);let f=this.passwordPolicy.validate(u);if(!f.valid)return this.errorResponse(f.errors.join(". "),400);let A=await this.authAdapter.findUserById(t.userId);if(!A)return this.errorResponse("User not found",404);if(!(A.passwordHash?await this.authAdapter.verifyPassword(l,A.passwordHash):!1))return this.errorResponse("Current password is incorrect",401);let U=await this.authAdapter.getPasswordHistory?.(A.id,5);if(await this.authAdapter.isPasswordInHistory?.(u,A.id,5))return this.errorResponse("Password was recently used. Please choose a different password",400);let k=await this.authAdapter.hashPassword(u);if(A.passwordHash&&await this.authAdapter.addPasswordToHistory?.(A.id,A.passwordHash),await this.authAdapter.updateUser(A.id,{passwordHash:k}),await this.authAdapter.deleteUserSessions(A.id),this.email&&this.email.getTemplates){let N=this.email.getTemplates().passwordChanged(A.email);await this.email.send({to:A.email,...N});}return this.auditLogger&&await this.auditLogger.log({action:"password_change",userId:A.id,userEmail:A.email,resource:"auth",ipAddress:a,userAgent:i,success:!0}),this.jsonResponse({success:!0,message:"Password changed successfully"})}catch{return this.errorResponse("Password change failed",500)}}async forgotPassword(e){let{ipAddress:t,userAgent:a}=a$1(e);if(this.rateLimiter){let i=await this.rateLimiter.check("auth:forgot",t);if(!i.allowed)return this.rateLimitResponse(i)}try{let i=await e.json(),{email:c}=i;if(!c)return this.errorResponse("Email required",400);let l=await this.authAdapter.findUserByEmail(c);if(!l)return this.jsonResponse({success:!0,message:"If the email exists, a reset link has been sent"});if(this.email){let u=randomBytes(32).toString("hex"),g=`${this.baseUrl}/api/auth/reset-password?token=${u}`,f=this.email.getTemplates().resetPassword(g,l.email);await this.email.send({to:l.email,...f});}return this.auditLogger&&await this.auditLogger.log({action:"password_reset",userId:l.id,userEmail:l.email,resource:"auth",ipAddress:t,userAgent:a,success:!0}),this.jsonResponse({success:!0,message:"If the email exists, a reset link has been sent"})}catch{return this.errorResponse("Password reset request failed",500)}}async verifyEmail(e){if(!new URL(e.url).searchParams.get("token"))return this.errorResponse("Verification token required",400);try{return this.jsonResponse({success:!0,message:"Email verified"})}catch{return this.errorResponse("Email verification failed",500)}}async recordFailedLogin(e,t,a,i){this.lockout&&await this.lockout.recordFailedAttempt(a||e),this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:a,userEmail:i,resource:"auth",ipAddress:e,userAgent:t,success:false,error:"Invalid credentials"});}sanitizeUser(e){let{passwordHash:t,...a}=e;return a}jsonResponse(e,t=200){return new Response(JSON.stringify(e),{status:t,headers:{"Content-Type":"application/json","Cache-Control":"no-store, no-cache, must-revalidate, max-age=0"}})}async listSessions(e){let t=await V(e);if(!t)return this.errorResponse("Not authenticated",401);try{let a=await ye(t.userId,G(e)??void 0);return this.jsonResponse({sessions:a})}catch(a){return console.error("[AuthRoutes.listSessions] Error:",a),this.errorResponse("Failed to list sessions",500)}}async revokeSession(e,t){let a=await V(e);if(!a)return this.errorResponse("Not authenticated",401);try{let c=(await ye(a.userId)).find(l=>l.id===t);return c?c.currentSession?this.errorResponse("Cannot revoke current session",400):(await he(t),this.jsonResponse({success:!0,message:"Session revoked"})):this.errorResponse("Session not found",404)}catch(i){return console.error("[AuthRoutes.revokeSession] Error:",i),this.errorResponse("Failed to revoke session",500)}}async revokeOtherSessions(e){let t=await V(e);if(!t)return this.errorResponse("Not authenticated",401);try{let a=await ye(t.userId),i=G(e);for(let c of a)c.currentSession||await he(c.id);return this.jsonResponse({success:!0,message:"Other sessions revoked"})}catch(a){return console.error("[AuthRoutes.revokeOtherSessions] Error:",a),this.errorResponse("Failed to revoke sessions",500)}}async renameSession(e,t){let a=await V(e);if(!a)return this.errorResponse("Not authenticated",401);try{if(!(await ye(a.userId)).find(g=>g.id===t))return this.errorResponse("Session not found",404);let l=await e.json(),{name:u}=l;return !u||typeof u!="string"||u.trim().length===0?this.errorResponse("Invalid session name",400):(await Qe(t,u.trim()),this.jsonResponse({success:!0,message:"Session renamed"}))}catch(i){return console.error("[AuthRoutes.renameSession] Error:",i),this.errorResponse("Failed to rename session",500)}}async refreshSession(e){let t=G(e);if(!t)return this.errorResponse("No session",401);try{let a=await(Ue(),c$2(kt)).refreshSession(t,e);return a?this.jsonResponse({success:!0,expiresAt:a.expiresAt}):this.errorResponse("Session not found",404)}catch(a){return console.error("[AuthRoutes.refreshSession] Error:",a),this.errorResponse("Failed to refresh session",500)}}errorResponse(e,t){return new Response(JSON.stringify({success:false,error:e}),{status:t,headers:{"Content-Type":"application/json"}})}async rateLimitResponse(e){return new Response(JSON.stringify({success:false,error:"Too many requests",retryAfter:e.retryAfter}),{status:429,headers:{"Content-Type":"application/json","Retry-After":String(e.retryAfter||60)}})}};function pe(d){let{uploadDir:e=join(Ir.cwd(),"public","uploads"),baseUrl:t="/uploads"}=d;async function a(l){existsSync(l)||await mkdir(l,{recursive:true});}function i(l){let u=extname(l).toLowerCase();return {".jpg":"image/jpeg",".jpeg":"image/jpeg",".png":"image/png",".gif":"image/gif",".webp":"image/webp",".avif":"image/avif",".svg":"image/svg+xml",".mp4":"video/mp4",".webm":"video/webm",".mov":"video/quicktime",".avi":"video/x-msvideo",".mp3":"audio/mpeg",".wav":"audio/wav",".ogg":"audio/ogg",".pdf":"application/pdf",".doc":"application/msword",".docx":"application/vnd.openxmlformats-officedocument.wordprocessingml.document",".xls":"application/vnd.ms-excel",".xlsx":"application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",".zip":"application/zip",".tar":"application/x-tar",".gz":"application/gzip",".rar":"application/vnd.rar",".7z":"application/x-7z-compressed"}[u]||"application/octet-stream"}async function c(l){try{let u=l.toString("hex",0,8);if(u.startsWith("89504e47")){let g=l.readUInt32BE(16),f=l.readUInt32BE(20);return {width:g,height:f}}if(u.startsWith("ffd8")){let g=2;for(;g<l.length&&l[g]===255;){let f=l[g+1];if(f===192||f===194){let A=l.readUInt16BE(g+5);return {width:l.readUInt16BE(g+7),height:A}}g+=2+l.readUInt16BE(g+2);}}}catch{}return {}}return se({name:"local",displayName:"Local Storage",supportsDynamicResize:true,async upload(l,u){await a(e);let g=Buffer.from(await l.arrayBuffer()),f=createHash("md5").update(g).digest("hex"),A=extname(l.name),w=u?.filename||`${f}${A}`,U=u?.folder||"",T=U?join(e,U):e;await a(T);let k=join(T,w);await writeFile(k,g);let N=l.type.startsWith("image/")?await c(g):{},M=t||"/uploads",ae=U?`/${U}/${w}`:`/${w}`,C=M+ae;return {id:f,filename:w,originalName:l.name,mimeType:l.type||i(l.name),size:g.length,url:C,thumbnailUrl:l.type.startsWith("image/")?C:void 0,folder:U||void 0,provider:"local",metadata:{...N,...u?.metadata},createdAt:new Date().toISOString()}},async uploadFromUrl(l,u){let g=await fetch(l);if(!g.ok)throw new Error(`Failed to fetch file: ${g.statusText}`);let f=await g.blob(),A=g.headers.get("content-disposition"),w=u?.filename;if(!w&&A){let T=A.match(/filename[^;=\n]*=((['"]).*?\2|[^;\n]*)/);T&&(w=T[1].replace(/['"]/g,""));}w||(w=basename(new URL(l).pathname));let U=new File([f],w,{type:f.type||i(w)});return this.upload(U,u)},async delete(l){let u=join(e,l.replace(t+"/",""));try{await unlink(u);}catch{}},async rename(l,u){let g=join(e,l.replace(t+"/","")),f=join(e,u);return await rename(g,f),`${t}/${u}`},async list(l){let u=l?join(e,l):e;if(!existsSync(u))return [];let g=[],f=await readdir(u,{withFileTypes:true});for(let A of f)if(A.isFile()){let w=join(u,A.name),U=await stat(w),T=`${t}${l?`/${l}`:""}/${A.name}`;g.push({id:createHash("md5").update(A.name).digest("hex"),filename:A.name,originalName:A.name,mimeType:i(A.name),size:U.size,url:T,provider:"local",createdAt:U.birthtime.toISOString()});}return g},async exists(l){let u=join(e,l.replace(t+"/",""));return existsSync(u)},async createFolder(l){let u=join(e,l);await mkdir(u,{recursive:true});},async deleteFolder(l){let u=join(e,l);if(existsSync(u)){let{rm:g}=await import('fs/promises');await g(u,{recursive:true,force:true});}}})}function tt(d){let e=(t,a)=>{if(!d.signKey)return t;let i=createHmac("sha256",d.signKey).update(t+a.toString()).digest("hex");return a.set("s",i),t};return {name:"imgix",displayName:"Imgix",supportsDynamicResize:true,async upload(t,a){throw new Error("Imgix is a transformation service. Use another provider for uploads.")},async uploadFromUrl(t,a){let i=a?.filename||t.split("/").pop()||"file",c=await fetch(t);if(!c.ok)throw new Error(`Failed to fetch: ${c.statusText}`);let l=await c.blob();new File([l],i,{type:l.type});return {id:Buffer.from(t).toString("base64").slice(0,20),filename:i,originalName:i,mimeType:l.type,size:l.size,url:this.getImageUrl(t),thumbnailUrl:this.getImageUrl(t,{width:200,height:200,fit:"crop"}),provider:"imgix",createdAt:new Date().toISOString()}},async delete(t){},async rename(t,a){return `https://${d.domain}/${a}`},getImageUrl(t,a){let i=new URL(t),c=new URLSearchParams(i.search);d.defaultParameters&&Object.entries(d.defaultParameters).forEach(([u,g])=>{c.has(u)||c.set(u,g);}),a&&(a.width&&c.set("w",String(a.width)),a.height&&c.set("h",String(a.height)),a.quality&&c.set("q",String(a.quality)),a.format&&c.set("fm",a.format),a.fit&&c.set("fit",a.fit),a.blur&&c.set("blur",String(a.blur)),a.sharpen&&c.set("sharp",String(a.sharpen))),c.set("auto","compress,format");i.pathname+"?"+c.toString();return d.signKey&&(e(i.pathname+c.toString(),c)),`https://${d.domain}${i.pathname}${c.toString()?"?"+c.toString():""}`},async generateThumbnail(t){return this.getImageUrl(t.url,{width:200,height:200,fit:"crop"})},async list(){return []},async exists(t){try{return (await fetch(t,{method:"HEAD"})).ok}catch{return false}},async createFolder(){},async deleteFolder(){}}}function Ee(d,e){return e.cdnUrl?`${e.cdnUrl.replace(/\/$/,"")}/${d}`:`https://${e.storageZone}.b-cdn.net/${d}`}function rt(d){return d.cdnUrl?d.cdnUrl.replace(/\/$/,"")+"/":`https://${d.storageZone}.b-cdn.net/`}function st(d){let e=`https://storage.bunnycdn.com/${d.storageZone}`,t=a=>`${d.prefix?`${d.prefix}/`:""}${a}`.replace(/\/+/g,"/");return se({name:"bunny",displayName:"Bunny.net Storage",supportsDynamicResize:true,async upload(a,i){let c=t(`${i?.folder?`${i.folder}/`:""}${i?.filename||a.name}`),l=Buffer.from(await a.arrayBuffer()),u=await fetch(`${e}/${c}`,{method:"PUT",headers:{AccessKey:d.apiKey,"Content-Type":a.type},body:l});if(!u.ok){let g=await u.text();throw new Error(`Bunny.net upload failed: ${u.status} ${g}`)}return {id:Buffer.from(c).toString("base64url"),filename:i?.filename||a.name,originalName:a.name,mimeType:a.type,size:l.length,url:Ee(c,d),thumbnailUrl:a.type.startsWith("image/")?Ee(c,d):void 0,folder:i?.folder,provider:"bunny",metadata:i?.metadata,createdAt:new Date().toISOString()}},async delete(a){let i=a.replace(rt(d),""),c=await fetch(`${e}/${i}`,{method:"DELETE",headers:{AccessKey:d.apiKey}});if(!c.ok&&c.status!==404){let l=await c.text();throw new Error(`Bunny.net delete failed: ${c.status} ${l}`)}},async rename(a,i){let c=a.replace(rt(d),""),l=d.prefix?`${d.prefix}/${i}`:i,u=await fetch(`${e}/${c}`,{method:"GET",headers:{AccessKey:d.apiKey}});if(!u.ok)throw new Error("Bunny.net rename failed: could not read old file");let g=await u.arrayBuffer();return await fetch(`${e}/${l}`,{method:"PUT",headers:{AccessKey:d.apiKey,"Content-Type":u.headers.get("Content-Type")||"application/octet-stream"},body:g}),await this.delete(a),Ee(l,d)},async list(a){let i=t(a||""),c=await fetch(`${e}/${i}`,{method:"GET",headers:{AccessKey:d.apiKey}});if(!c.ok){let u=await c.text();throw new Error(`Bunny.net list failed: ${c.status} ${u}`)}return (await c.json()).map(u=>({id:Buffer.from(u.ObjectName||"").toString("base64url"),filename:u.ObjectName?.split("/").pop()||"",originalName:u.ObjectName?.split("/").pop()||"",mimeType:"application/octet-stream",size:u.Length||0,url:Ee(u.ObjectName||"",d),provider:"bunny",createdAt:u.LastChanged||new Date().toISOString()}))},async exists(a){let i=a.replace(rt(d),"");return (await fetch(`${e}/${i}`,{method:"HEAD",headers:{AccessKey:d.apiKey}})).ok},async createFolder(a){let i=t(`${a}/`);await fetch(`${e}/${i}`,{method:"PUT",headers:{AccessKey:d.apiKey,"Content-Length":"0"},body:""});},async deleteFolder(a){let i=t(`${a}/`);await fetch(`${e}/${i}`,{method:"DELETE",headers:{AccessKey:d.apiKey}});}})}var nt=class{providers=new Map;providerToPlugin=new Map;disabledPlugins=new Set;constructor(){this.registerLocal(),this.registerImgix(),this.registerBunny();}registerLocal(){this.register({type:"local",displayName:"Local Server",configKey:"local",configFields:[{name:"uploadDir",type:"text",label:"Upload Directory",defaultValue:"./public/uploads"},{name:"baseUrl",type:"text",label:"Base URL",defaultValue:"/uploads"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>{let t=e?.local||e,a=(t?.uploadDir||"").trim(),i;a?Ce.isAbsolute(a)?i=a:a.includes("/")||a.includes("\\")?i=Ce.resolve(process.cwd(),a):i=Ce.join(process.cwd(),"public",a):i=Ce.join(process.cwd(),"public","uploads");let c=(t?.baseUrl||"").trim(),l;return c?l=c.startsWith("/")?c:`/${c}`:l="/uploads",{uploadDir:i,baseUrl:l}},factory:e=>pe(e)});}registerImgix(){this.register({type:"imgix",displayName:"Imgix",configKey:"imgix",configFields:[{name:"domain",type:"text",label:"Domain",required:true},{name:"signKey",type:"password",label:"Sign Key"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>e?.imgix||e,factory:e=>tt(e)});}registerBunny(){this.register({type:"bunny",displayName:"Bunny.net",configKey:"bunny",configFields:[{name:"storageZone",type:"text",label:"Storage Zone",required:true},{name:"apiKey",type:"password",label:"API Key",required:true},{name:"cdnUrl",type:"text",label:"CDN URL"},{name:"prefix",type:"text",label:"Path Prefix"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>e?.bunny||e,factory:e=>st(e)});}register(e){if(this.providers.has(e.type)){console.warn(`[StorageRegistry] Provider "${e.type}" already registered, skipping`);return}e.pluginName&&this.providerToPlugin.set(e.type,e.pluginName),this.providers.set(e.type,e);}unregister(e){this.providers.delete(e),this.providerToPlugin.delete(e);}get(e){return this.providers.get(e)}getAll(){return Array.from(this.providers.values())}getAllAvailable(e){let t=this.getAll();return e?t.filter(a=>a.pluginName?e(a.pluginName):true):t}has(e){return this.providers.has(e)}async resolve(e,t){let a=this.providers.get(e);if(!a)throw new Error(`Unknown storage provider type: "${e}". Is the plugin that provides it enabled?`);if(a.pluginName&&this.disabledPlugins.has(a.pluginName))throw new Error(`Storage provider "${e}" is not available (plugin "${a.pluginName}" is disabled)`);let i=a.configKey||e,c=a.extractConfig(t,i);return a.factory(c)}async resolveWithConfig(e,t){let a=this.providers.get(e);if(!a)throw new Error(`Unknown storage provider type: "${e}". Is the plugin that provides it enabled?`);if(a.pluginName&&this.disabledPlugins.has(a.pluginName))throw new Error(`Storage provider "${e}" is not available (plugin "${a.pluginName}" is disabled)`);let i=a.extractRawConfig(t);return a.factory(i)}getProviderPluginName(e){return this.providerToPlugin.get(e)}getAllPluginNames(){return Array.from(new Set(this.providerToPlugin.values()))}setPluginEnabled(e,t){t?this.disabledPlugins.delete(e):this.disabledPlugins.add(e);}isPluginEnabled(e){return !this.disabledPlugins.has(e)}},at=null;function it(){return at||(at=new nt),at}function Kt(d){if(!d)return "";if(d.startsWith("pub-"))return d;let e=d.match(/pub-[a-zA-Z0-9]+/i);return e?e[0]:""}function Rr(d,e){let t=d.startsWith("/")?d.slice(1):d;if(e.cdnUrl)return `${e.cdnUrl.replace(/\/$/,"")}/${t}`;switch(e.provider){case "r2":{let a=Kt(e.publicDevUrl);return a?`https://${a}.r2.dev/${t}`:`https://${e.bucket}.${e.accountId}.r2.cloudflarestorage.com/${t}`}case "gcs":return `https://storage.googleapis.com/${e.bucket}/${t}`;case "digitalocean":return `https://${e.bucket}.${e.region}.cdn.digitaloceanspaces.com/${t}`;case "backblaze":return `https://${e.bucket}.s3.backblazeb2.com/${t}`;case "wasabi":return `https://${e.bucket}.s3.wasabisys.com/${t}`;default:return `https://${e.bucket}.s3.${e.region}.amazonaws.com/${t}`}}function lt(d){if(d.cdnUrl)return d.cdnUrl.replace(/\/$/,"")+"/";switch(d.provider){case "r2":{let e=Kt(d.publicDevUrl);return e?`https://${e}.r2.dev/`:`https://${d.bucket}.${d.accountId}.r2.cloudflarestorage.com/`}case "gcs":return `https://storage.googleapis.com/${d.bucket}/`;case "digitalocean":return `https://${d.bucket}.${d.region}.cdn.digitaloceanspaces.com/`;case "backblaze":return `https://${d.bucket}.s3.backblazeb2.com/`;case "wasabi":return `https://${d.bucket}.s3.wasabisys.com/`;default:return `https://${d.bucket}.s3.${d.region}.amazonaws.com/`}}function Tr(d){switch(d){case "r2":return "Cloudflare R2";case "gcs":return "Google Cloud Storage";case "digitalocean":return "DigitalOcean Spaces";case "backblaze":return "Backblaze B2";case "wasabi":return "Wasabi";default:return "AWS S3"}}function Pr(d){let e=new S3Client({region:d.region||"auto",endpoint:d.endpoint,credentials:{accessKeyId:d.accessKeyId,secretAccessKey:d.secretAccessKey},forcePathStyle:true,tls:true,...d.provider==="r2"&&{requestHandler:new NodeHttpHandler({connectionTimeout:1e4,socketTimeout:1e4})}}),t=i=>`${d.prefix?`${d.prefix}/`:""}${i}`.replace(/\/+/g,"/"),a=i=>Rr(i,d);return se({name:d.provider,displayName:Tr(d.provider),supportsDynamicResize:true,async upload(i,c){let l=t(`${c?.folder?`${c.folder}/`:""}${c?.filename||i.name}`),u=Buffer.from(await i.arrayBuffer());await e.send(new PutObjectCommand({Bucket:d.bucket,Key:l,Body:u,ContentType:i.type,Metadata:c?.metadata}));let g=await e.send(new HeadObjectCommand({Bucket:d.bucket,Key:l}));return {id:Buffer.from(l).toString("base64url"),filename:c?.filename||i.name,originalName:i.name,mimeType:i.type,size:u.length,url:a(l),thumbnailUrl:i.type.startsWith("image/")?a(l):void 0,folder:c?.folder,provider:d.provider,metadata:{...c?.metadata,etag:g.ETag},createdAt:new Date().toISOString()}},async delete(i){let c=i.replace(lt(d),"");await e.send(new DeleteObjectCommand({Bucket:d.bucket,Key:c}));},async rename(i,c){let l=i.replace(lt(d),""),u=d.prefix?`${d.prefix}/${c}`:c;return await e.send(new CopyObjectCommand({Bucket:d.bucket,CopySource:`${d.bucket}/${l}`,Key:u})),await e.send(new DeleteObjectCommand({Bucket:d.bucket,Key:l})),a(u)},async list(i){let c=t(i||"");return ((await e.send(new ListObjectsV2Command({Bucket:d.bucket,Prefix:c}))).Contents||[]).map(u=>({id:Buffer.from(u.Key||"").toString("base64url"),filename:u.Key?.split("/").pop()||"",originalName:u.Key?.split("/").pop()||"",mimeType:"application/octet-stream",size:u.Size||0,url:a(u.Key||""),provider:d.provider,createdAt:u.LastModified?.toISOString()||new Date().toISOString()}))},async exists(i){try{let c=i.replace(lt(d),"");return await e.send(new HeadObjectCommand({Bucket:d.bucket,Key:c})),!0}catch{return false}},async createFolder(i){let c=t(`${i}/`);await e.send(new PutObjectCommand({Bucket:d.bucket,Key:c,Body:""}));},async deleteFolder(i){let c=t(`${i}/`),l;do{let u=await e.send(new ListObjectsV2Command({Bucket:d.bucket,Prefix:c,ContinuationToken:l}));if(u.Contents?.length){let g=u.Contents.map(f=>({Key:f.Key}));await e.send(new DeleteObjectsCommand({Bucket:d.bucket,Delete:{Objects:g}}));}l=u.IsTruncated?u.NextContinuationToken:void 0;}while(l);await e.send(new DeleteObjectCommand({Bucket:d.bucket,Key:c}));}})}function Ur(d){let e=()=>`https://api.cloudinary.com/v1_1/${d.cloudName}/upload`,t=async a=>{let i=await import('crypto'),c=Object.keys(a).sort().map(l=>`${l}=${a[l]}`).join("&");return i.createHash("sha256").update(c+d.apiSecret).digest("hex")};return {name:"cloudinary",displayName:"Cloudinary",supportsDynamicResize:true,async upload(a,i){let c=new FormData;if(c.append("file",a),d.uploadPreset)c.append("upload_preset",d.uploadPreset);else {let g=Math.round(Date.now()/1e3),f={timestamp:String(g)};(i?.folder||d.folder)&&(f.folder=i?.folder||d.folder||"");let A=await t(f);c.append("timestamp",String(g)),c.append("signature",A),c.append("api_key",d.apiKey);}(i?.folder||d.folder)&&c.append("folder",i?.folder||d.folder||"");let l=await fetch(e(),{method:"POST",body:c});if(!l.ok){let g=await l.json();throw new Error(`Cloudinary upload failed: ${g.error?.message||l.statusText}`)}let u=await l.json();return {id:u.public_id,filename:`${u.public_id}.${u.format}`,originalName:u.original_filename||a.name,mimeType:a.type||`image/${u.format}`,size:u.bytes,url:u.secure_url,thumbnailUrl:this.getImageUrl(u.secure_url,{width:200,height:200,fit:"crop"}),width:u.width,height:u.height,folder:i?.folder||d.folder,provider:"cloudinary",createdAt:new Date().toISOString()}},async uploadFromUrl(a,i){let c=new FormData;c.append("file",a),c.append("upload_preset","ml_default"),(i?.folder||d.folder)&&c.append("folder",i?.folder||d.folder||"");let l=await fetch(e(),{method:"POST",body:c});if(!l.ok)throw new Error("Cloudinary upload failed");let u=await l.json();return {id:u.public_id,filename:`${u.public_id}.${u.format}`,originalName:u.original_filename||a.split("/").pop()||"file",mimeType:`image/${u.format}`,size:u.bytes,url:u.secure_url,thumbnailUrl:this.getImageUrl(u.secure_url,{width:200,height:200,fit:"crop"}),width:u.width,height:u.height,provider:"cloudinary",createdAt:new Date().toISOString()}},async delete(a){try{let i=a.split("/image/upload/");if(i.length!==2){console.warn("[Cloudinary delete] Could not parse URL:",a);return}let c=i[1].replace(/^v\d+\//,"").replace(/\.[^.]+$/,""),l=Math.round(Date.now()/1e3),u={timestamp:String(l),public_id:c},g=Object.keys(u).sort().map(k=>`${k}=${u[k]}`).join("&"),A=(await import('crypto')).createHash("sha256").update(g+d.apiSecret).digest("hex"),w=`https://api.cloudinary.com/v1_1/${d.cloudName}/image/destroy`,U=new FormData;U.append("public_id",c),U.append("timestamp",String(l)),U.append("signature",A),U.append("api_key",d.apiKey);let T=await fetch(w,{method:"POST",body:U});if(!T.ok){let k=await T.json();console.warn("[Cloudinary delete] Failed:",k);}}catch(i){console.warn("[Cloudinary delete] Error:",i.message);}},async rename(a,i){let c="",l=i.replace(/\.[^.]+$/,""),u="";try{let g=a.split("/image/upload/");if(g.length!==2)return console.warn("[Cloudinary rename] Could not parse old URL:",a),a;let f=g[1],A=f.match(/^(v\d+)\//);c=A?A[1]:"";let w=f.replace(/^v\d+\//,"").replace(/\.[^.]+$/,""),U=w.split("/");u=U.length>1?U.slice(0,-1).join("/"):"";let T=i.replace(/\.[^.]+$/,"");l=u?`${u}/${T}`:T;let k=Math.round(Date.now()/1e3),N={from_public_id:w,to_public_id:l,timestamp:String(k)},M=Object.keys(N).sort().map(D=>`${D}=${N[D]}`).join("&"),C=(await import('crypto')).createHash("sha256").update(M+d.apiSecret).digest("hex"),X=new FormData;X.append("from_public_id",w),X.append("to_public_id",l),X.append("timestamp",String(k)),X.append("signature",C),X.append("api_key",d.apiKey);let J=await fetch(`https://api.cloudinary.com/v1_1/${d.cloudName}/image/rename`,{method:"POST",body:X});if(J.ok)return (await J.json()).secure_url;{let D=await J.json();console.warn("[Cloudinary rename] Failed:",D);let Z=c?`/${c}/`:"/";return `https://res.cloudinary.com/${d.cloudName}/image/upload${Z}${l}.${i.split(".").pop()}`}}catch(g){console.warn("[Cloudinary rename] Error:",g.message);let f=c?`/${c}/`:"/";return `https://res.cloudinary.com/${d.cloudName}/image/upload${f}${l}.${i.split(".").pop()}`}},getImageUrl(a,i){if(!i)return a;let c=a.split("/upload/");if(c.length!==2)return a;let l=[];if(i.width&&l.push(`w_${i.width}`),i.height&&l.push(`h_${i.height}`),i.fit){let g={crop:"c_fill",clip:"c_fit",scale:"c_scale",fill:"c_fill"};l.push(g[i.fit]||"c_limit");}i.quality&&l.push(`q_${i.quality}`),i.format&&l.push(`f_${i.format}`);let u=l.join(",");return `${c[0]}/upload/${u}/${c[1]}`},async generateThumbnail(a){return this.getImageUrl(a.url,{width:200,height:200,fit:"crop"})},async list(){return []},async exists(a){return (await fetch(a,{method:"HEAD"})).ok},async createFolder(){},async deleteFolder(){}}}function qr(d){let e=null;async function t(){return e||(e=new Client(6e4,{allowSeparateTransferHost:true}),e.ftp.verbose=false,await e.access({host:d.host,port:d.port||21,user:d.user,password:d.password,secure:d.secure,secureOptions:{}})),e}let a=l=>`${d.prefix?`${d.prefix}/`:""}${l}`.replace(/\/+/g,"/"),i=l=>`${d.baseUrl.replace(/\/$/,"")}/${l}`,c=()=>d.baseUrl.replace(/\/$/,"")+"/";return se({name:d.type,displayName:d.type==="sftp"?"SFTP Storage":"FTP Storage",supportsDynamicResize:false,async upload(l,u){let g=await t(),f=a(`${u?.folder?`${u.folder}/`:""}${u?.filename||l.name}`),A=Buffer.from(await l.arrayBuffer()),w=f.split("/").slice(0,-1),U="";for(let k of w){U=U?`${U}/${k}`:k;try{await g.ensureDir(U);}catch{}}let T=Readable.from(A);return await g.uploadFrom(T,f),{id:Buffer.from(f).toString("base64url"),filename:u?.filename||l.name,originalName:l.name,mimeType:l.type,size:A.length,url:i(f),thumbnailUrl:l.type.startsWith("image/")?i(f):void 0,folder:u?.folder,provider:d.type,metadata:u?.metadata,createdAt:new Date().toISOString()}},async delete(l){let u=await t(),g=l.replace(c(),"");await u.remove(g);},async rename(l,u){let g=await t(),f=l.replace(c(),""),A=d.prefix?`${d.prefix}/${u}`:u;return await g.rename(f,A),i(A)},async list(l){let u=await t(),g=a(l||""),f;try{f=await u.list(g);}catch{return []}return f.filter(A=>A.type===0).map(A=>({id:Buffer.from(`${g}/${A.name}`).toString("base64url"),filename:A.name,originalName:A.name,mimeType:"application/octet-stream",size:Number(A.size)||0,url:i(`${g}/${A.name}`.replace(/\/+/g,"/")),provider:d.type,createdAt:A.modifiedAt?A.modifiedAt.toISOString():new Date().toISOString()}))},async exists(l){let u=await t(),g=l.replace(c(),"");try{return await u.size(g),!0}catch{return false}},async createFolder(l){let u=await t(),g=a(l);await u.ensureDir(g);},async deleteFolder(l){let u=await t(),g=a(l);await u.removeDir(g);}})}async function zt(d){let e=d.getStorageConfig(),t=it();try{return await t.resolve(e.type,e)}catch(a){return console.warn(`[resolveProvider] ${a.message} \u2014 falling back to local storage`),pe({uploadDir:Ce.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"})}}function se(d){return {async uploadFromUrl(e,t){let a=await fetch(e);if(!a.ok)throw new Error(`Failed to fetch: ${a.statusText}`);let i=await a.blob(),c=e.split("/").pop()||"file",l=new File([i],c,{type:i.type});return this.upload(l,t)},getImageUrl(e,t){if(!t||Object.keys(t).length===0)return e;let a=new URLSearchParams({url:e});return t.width&&a.set("w",String(t.width)),t.height&&a.set("h",String(t.height)),t.quality&&a.set("q",String(t.quality)),t.format&&a.set("f",t.format),`/api/media/resize?${a.toString()}`},async generateThumbnail(e){return this.getImageUrl(e.url,{width:400,height:400})},...d}}async function Wt(d){if(!d)return console.warn("[resolveProviderWithConfig] No config, using local"),pe({uploadDir:Ce.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"});let e=d.type||"local",t=it();try{return await t.resolveWithConfig(e,d)}catch(a){return console.warn(`[resolveProviderWithConfig] ${a.message} \u2014 falling back to local storage`),pe({uploadDir:Ce.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"})}}async function Vt(d){let e=await ct(d).metadata(),t=ct(d).webp({quality:85}),a=ct(d).resize({width:500,withoutEnlargement:true}).webp({quality:80});return {buffer:await t.toBuffer(),thumbnailBuffer:await a.toBuffer(),width:e.width,height:e.height,format:"webp"}}var Ht=false,$e=class d{db;storage;dialect;genId;mediaTable="media";foldersTable="media_folders";constructor(e$1,t,a){this.db=e$1,this.storage=t,this.dialect=a?.dialect||"sqlite",this.genId=a?.genId||e;}static async init(e,t){let a;if(t?.storageConfig)a=await Wt(t.storageConfig);else {let c=new a$2(e);await c.load(),a=await zt(c);}let i=new d(e,a,t);return await i.ensureTables(),i}async ensureTables(){if(this.dialect==="sqlite")this.db.exec(`
2
- CREATE TABLE IF NOT EXISTS media (
3
- id TEXT PRIMARY KEY,
4
- filename TEXT NOT NULL UNIQUE,
5
- title TEXT,
6
- original_name TEXT NOT NULL,
7
- mime_type TEXT NOT NULL,
8
- file_size INTEGER NOT NULL,
9
- width INTEGER,
10
- height INTEGER,
11
- url TEXT NOT NULL UNIQUE,
12
- thumbnail_url TEXT,
13
- folder TEXT,
14
- provider TEXT NOT NULL,
15
- alt TEXT,
16
- caption TEXT,
17
- metadata TEXT,
18
- created_at TEXT NOT NULL,
19
- updated_at TEXT NOT NULL
20
- );
21
- CREATE INDEX IF NOT EXISTS idx_media_folder ON media(folder);
22
- CREATE INDEX IF NOT EXISTS idx_media_provider ON media(provider);
23
- CREATE INDEX IF NOT EXISTS idx_media_filename ON media(filename);
24
- `),this.db.exec(`
25
- CREATE TABLE IF NOT EXISTS media_folders (
26
- id TEXT PRIMARY KEY,
27
- name TEXT NOT NULL,
28
- path TEXT NOT NULL,
29
- parent_path TEXT,
30
- created_at TEXT
31
- );
32
- CREATE INDEX IF NOT EXISTS idx_media_folders_path ON media_folders(path);
33
- `);else if(this.dialect==="postgres"){if(Ht)return;let{sql:e}=await import('drizzle-orm');await this.db.execute(e`
34
- CREATE TABLE IF NOT EXISTS "media" (
35
- "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
36
- "filename" VARCHAR(255) NOT NULL UNIQUE,
37
- "title" VARCHAR(255),
38
- "original_name" VARCHAR(255) NOT NULL,
39
- "mime_type" VARCHAR(100),
40
- "file_size" INTEGER,
41
- "width" INTEGER,
42
- "height" INTEGER,
43
- "url" TEXT NOT NULL UNIQUE,
44
- "thumbnail_url" TEXT,
45
- "folder" VARCHAR(255),
46
- "provider" VARCHAR(50) NOT NULL,
47
- "alt" TEXT,
48
- "caption" TEXT,
49
- "metadata" JSONB,
50
- "created_at" TIMESTAMP NOT NULL DEFAULT NOW(),
51
- "updated_at" TIMESTAMP NOT NULL DEFAULT NOW()
52
- )
53
- `),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_folder" ON "media" ("folder")`),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_provider" ON "media" ("provider")`),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_filename" ON "media" ("filename")`),await this.db.execute(e`
54
- CREATE TABLE IF NOT EXISTS "media_folders" (
55
- "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
56
- "name" VARCHAR(255) NOT NULL,
57
- "path" TEXT NOT NULL,
58
- "parent_path" TEXT,
59
- "created_at" TIMESTAMP NOT NULL DEFAULT NOW()
60
- )
61
- `),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_folders_path" ON "media_folders" ("path")`),Ht=true;}}now(){return new Date().toISOString()}buildFindConditions(e){let t=[],a=[],i=e.sortBy==="name"?"title":e.sortBy==="createdAt"?"created_at":e.sortBy==="updatedAt"?"updated_at":e.sortBy||"created_at",c=e.sortDir==="asc"?"ASC":"DESC";if(e.search){t.push("(title LIKE ? OR filename LIKE ? OR original_name LIKE ? OR alt LIKE ?)");let u=`%${e.search}%`;a.push(u,u,u,u);}return e.type&&e.type!=="all"&&(t.push("mime_type LIKE ?"),a.push(`${e.type}/%`)),e.folder&&(t.push("(folder = ? OR folder LIKE ?)"),a.push(e.folder,`${e.folder}/%`)),{where:t.length>0?`WHERE ${t.join(" AND ")}`:"",params:a,orderBy:c,sortCol:i}}rowToMedia(e,t){return {id:e.id,filename:e.filename,title:e.title??null,originalName:e.original_name??e.originalName,mimeType:e.mime_type??e.mimeType,fileSize:e.file_size??e.fileSize,width:e.width??null,height:e.height??null,url:d.resolveMediaUrl(e.url,t),thumbnailUrl:d.resolveMediaUrl(e.thumbnail_url??e.thumbnailUrl??null,t),folder:e.folder??null,provider:e.provider,alt:e.alt??null,caption:e.caption??null,metadata:e.metadata??null,createdAt:e.created_at??e.createdAt,updatedAt:e.updated_at??e.updatedAt}}static resolveMediaUrl(e,t){return e?e.startsWith("http://")||e.startsWith("https://")||e.startsWith("blob:")||e.startsWith("data:")?e:`${(process.env.KYRO_BASE_URL||t||"http://localhost:4321").replace(/\/+$/,"")}${e.startsWith("/")?"":"/"}${e}`:null}async sqliteRun(e,t=[]){let a=this.db.prepare(e),i=e.trim().toLowerCase();return i.startsWith("insert")||i.startsWith("update")||i.startsWith("delete")?a.run(...t):a.all(...t)}sqliteGet(e,t=[]){return this.db.prepare(e).get(...t)}async upload(e,t=""){let a=e.type.startsWith("image/"),i,c=e,l=e.name,u=null,g=null;if(a&&!e.type.includes("svg")){let T=Buffer.from(await e.arrayBuffer());i=await Vt(T),l=`${e.name.replace(/\.[^/.]+$/,"").toLowerCase().replace(/[^a-z0-9]/g,"-").replace(/-+/g,"-").substring(0,50)}.webp`,u=i.width??null,g=i.height??null,c=new File([i.buffer],l,{type:"image/webp"});}let f=await this.storage.upload(c,{folder:t,filename:l}),A=await this.storage.generateThumbnail({...f,id:"",provider:this.storage.name,createdAt:this.now()},{width:400,height:400}),w=this.genId(),U=this.now();if(this.dialect==="sqlite")await this.sqliteRun(`INSERT INTO ${this.mediaTable}
62
- (id, filename, title, original_name, mime_type, file_size, width, height, url, thumbnail_url, folder, provider, alt, caption, metadata, created_at, updated_at)
63
- VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,[w,f.filename,e.name.replace(/\.[^/.]+$/,""),e.name,f.mimeType,f.size,u,g,f.url,A,t||null,this.storage.name,null,null,null,U,U]);else {let{media:T}=await import('./media-L5XDD47D.js'),k=f.mimeType,N=k.startsWith("image/")?"image":k.startsWith("video/")?"video":k.startsWith("audio/")?"audio":k.startsWith("application/pdf")?"document":["application/zip","application/x-zip","application/x-tar","application/gzip","application/x-7z"].includes(k)?"archive":"other";await this.db.insert(T).values({id:w,filename:f.filename,title:e.name.replace(/\.[^/.]+$/,""),originalName:e.name,mimeType:k,fileSize:f.size,width:u,height:g,url:f.url,thumbnailUrl:A,folder:t||"",provider:this.storage.name,type:N,status:"active",alt:null,caption:null,createdAt:new Date,updatedAt:new Date}).returning();}return {id:w,filename:f.filename,title:e.name.replace(/\.[^/.]+$/,""),originalName:e.name,mimeType:f.mimeType,fileSize:f.size,width:u,height:g,url:f.url,thumbnailUrl:A,folder:t||null,provider:this.storage.name,alt:null,caption:null,metadata:null,createdAt:U,updatedAt:U}}async uploadFromUrl(e,t=""){let a=await fetch(e);if(!a.ok)throw new Error(`Failed to fetch URL: ${a.status}`);let i=await a.blob(),c=e.split("/").pop()||"url-image",l=a.headers.get("content-type")||i.type||"application/octet-stream",u=new File([i],c,{type:l});return this.upload(u,t)}async delete(e,t){let a=await this.findById(e,t);if(a){if(await this.deleteFile(a.url),a.thumbnailUrl&&a.thumbnailUrl!==a.url&&a.thumbnailUrl!==a.url+"?thumb")try{await this.deleteFile(a.thumbnailUrl);}catch{}if(this.dialect==="sqlite")await this.sqliteRun(`DELETE FROM ${this.mediaTable} WHERE id = ?`,[e]);else {let{media:i}=await import('./media-L5XDD47D.js'),{eq:c}=await import('drizzle-orm');await this.db.delete(i).where(c(i.id,e));}}}async deleteFile(e){await this.storage.delete(e);}async rename(e,t,a){let i=await this.findById(e,a);if(!i)return null;let c=await this.storage.rename(i.url,t),l;if(i.thumbnailUrl||this.storage.name==="cloudinary"){let A=c.match(/\/upload\/(v\d+)\//),w=A?A[1]+"/":"",U=c.match(/(.+?)\/upload\//);l=`${U?U[1]:"https://res.cloudinary.com/"+this.storage.config?.cloudName||"unknown"}/upload/w_200,h_200,c_fill/${w}${t}`;}let u=i.filename.split(".").pop(),g=t.includes(".")?t:`${t}.${u}`,f={url:c,filename:g,thumbnailUrl:l};if(this.dialect==="sqlite"){let A={...f};"thumbnailUrl"in A&&(A.thumbnail_url=A.thumbnailUrl,delete A.thumbnailUrl);let w=Object.keys(A).map(T=>`${T} = ?`).join(", "),U=Object.values(A);await this.sqliteRun(`UPDATE ${this.mediaTable} SET ${w}, updated_at = ? WHERE id = ?`,[...U,this.now(),e]);}else {let{media:A}=await import('./media-L5XDD47D.js'),{eq:w}=await import('drizzle-orm');await this.db.update(A).set({...f,updatedAt:this.now()}).where(w(A.id,e));}return {...i,...f,updatedAt:this.now(),thumbnailUrl:f.thumbnailUrl??null}}async findById(e,t){if(this.dialect==="sqlite"){let l=this.sqliteGet(`SELECT * FROM ${this.mediaTable} WHERE id = ?`,[e]);return l?this.rowToMedia(l,t):null}let{media:a}=await import('./media-L5XDD47D.js'),{eq:i}=await import('drizzle-orm'),[c]=await this.db.select().from(a).where(i(a.id,e));return c?this.rowToMedia(c,t):null}async find(e={},t){let{page:a=1,limit:i=30,search:c="",type:l="",folder:u="",sortBy:g="createdAt",sortDir:f="desc"}=e,{where:A,params:w,orderBy:U,sortCol:T}=this.buildFindConditions({page:a,limit:i,search:c,type:l,folder:u,sortBy:g,sortDir:f}),k=(a-1)*i;if(this.dialect==="sqlite"){let le=this.sqliteGet(`SELECT COUNT(*) as cnt FROM ${this.mediaTable} ${A}`,w)?.cnt??0;return {docs:(await this.sqliteRun(`SELECT * FROM ${this.mediaTable} ${A} ORDER BY ${T} ${U} LIMIT ? OFFSET ?`,[...w,i,k])).map(de=>this.rowToMedia(de,t)),totalDocs:le,page:a,limit:i,totalPages:Math.ceil(le/i)}}let{media:N}=await import('./media-L5XDD47D.js'),{like:M,or:ae,and:C,asc:X,desc:J,eq:D,sql:Z}=await import('drizzle-orm'),ne=[];c&&ne.push(ae(M(N.title,`%${c}%`),M(N.filename,`%${c}%`),M(N.originalName,`%${c}%`),M(N.alt,`%${c}%`))),l&&l!=="all"&&ne.push(M(N.mimeType,`${l}/%`)),u&&ne.push(ae(D(N.folder,u),M(N.folder,`${u}/%`)));let we=ne.length>0?C(...ne):void 0,Oe=N[{created_at:"createdAt",updated_at:"updatedAt",title:"title",filename:"filename",file_size:"fileSize",mime_type:"mimeType",original_name:"originalName"}[T]||"createdAt"],Ie=f==="asc"?X(Oe):J(Oe),fe=await this.db.select().from(N).where(we).orderBy(Ie).limit(i).offset(k),[{count:K}]=await this.db.select({count:Z`count(*)`}).from(N).where(we),ie=Number(K);return {docs:fe.map(oe=>this.rowToMedia(oe,t)),totalDocs:ie,page:a,limit:i,totalPages:Math.ceil(ie/i)}}async update(e,t,a){let i=this.now();if(this.dialect==="sqlite"){let g=["updated_at = ?"],f=[i];t.title!==void 0&&(g.push("title = ?"),f.push(t.title)),t.alt!==void 0&&(g.push("alt = ?"),f.push(t.alt)),t.caption!==void 0&&(g.push("caption = ?"),f.push(t.caption)),t.folder!==void 0&&(g.push("folder = ?"),f.push(t.folder)),f.push(e),await this.sqliteRun(`UPDATE ${this.mediaTable} SET ${g.join(", ")} WHERE id = ?`,f);let A=this.sqliteGet(`SELECT * FROM ${this.mediaTable} WHERE id = ?`,[e]);return A?this.rowToMedia(A,a):null}let{media:c}=await import('./media-L5XDD47D.js'),{eq:l}=await import('drizzle-orm'),[u]=await this.db.update(c).set({...t,updatedAt:new Date}).where(l(c.id,e)).returning();return u?this.rowToMedia(u,a):null}async updateMany(e,t){let a=this.now();if(this.dialect==="sqlite")for(let i of e){let c=["updated_at = ?"],l=[a];t.folder!==void 0&&(c.push("folder = ?"),l.push(t.folder||null)),l.push(i),await this.sqliteRun(`UPDATE ${this.mediaTable} SET ${c.join(", ")} WHERE id = ?`,l);}else {let{media:i}=await import('./media-L5XDD47D.js'),{eq:c}=await import('drizzle-orm');for(let l of e)await this.db.update(i).set({...t,updatedAt:new Date}).where(c(i.id,l));}}async listFolders(){if(this.dialect==="sqlite")return (await this.sqliteRun(`SELECT path FROM ${this.foldersTable} UNION
64
- SELECT folder as path FROM ${this.mediaTable} WHERE folder IS NOT NULL AND folder != ''`)).map(f=>f.path).filter(f=>f&&f!=="").sort();let{media:e,mediaFolders:t}=await import('./media-L5XDD47D.js'),{eq:a,sql:i}=await import('drizzle-orm'),c=await this.db.select({folder:e.folder}).from(e).groupBy(e.folder),l=await this.db.select({path:t.path}).from(t),u=new Set([...c.map(g=>g.folder),...l.map(g=>g.path)]);return Array.from(u).filter(g=>g&&g!=="").sort()}async createFolder(e,t=""){let a=t?`${t}/${e}`:e;await this.storage.createFolder?.(a);let i=this.now();if(this.dialect==="sqlite")await this.sqliteRun(`INSERT OR IGNORE INTO ${this.foldersTable} (path, name, parent_path, created_at) VALUES (?, ?, ?, ?)`,[a,e,t||null,i]);else {let{mediaFolders:c}=await import('./media-L5XDD47D.js');await this.db.insert(c).values({path:a,name:e,parentPath:t||null,createdAt:new Date}).onConflictDoNothing();}}async deleteFolder(e){let t=await this.find({folder:e,limit:1e4});for(let a of t.docs)await this.delete(a.id);if(await this.storage.deleteFolder?.(e),this.dialect==="sqlite")await this.sqliteRun(`DELETE FROM ${this.foldersTable} WHERE path = ? OR path LIKE ?`,[e,`${e}/%`]);else {let{mediaFolders:a}=await import('./media-L5XDD47D.js'),{like:i,or:c,eq:l}=await import('drizzle-orm');await this.db.delete(a).where(c(l(a.path,e),i(a.path,`${e}/%`)));}}};function _e(d){return d.map(e=>`${e.path.join(".")}: ${e.message}`).join(", ")}function me(d,e){if(!(!d||typeof d!="object"))for(let t of e){if(!t.name||!(t.name in d))continue;if(d[t.name]===""&&(t.type==="text"||t.type==="textarea"||t.type==="code"||t.type==="markdown"||t.type==="email"||t.type==="password"||t.type==="color"||(d[t.name]=null)),t.type==="tabs"&&t.name&&Array.isArray(t.tabs)&&d[t.name]&&typeof d[t.name]=="object")for(let i of t.tabs)Array.isArray(i.fields)&&me(d[t.name],i.fields);else if((t.type==="group"||t.type==="collapsible")&&t.name&&Array.isArray(t.fields)&&d[t.name]&&typeof d[t.name]=="object")me(d[t.name],t.fields);else if(t.type==="array"&&t.name&&Array.isArray(t.fields)&&Array.isArray(d[t.name]))for(let i of d[t.name])i&&typeof i=="object"&&me(i,t.fields);else if(t.type==="blocks"&&t.name&&Array.isArray(t.blocks)&&Array.isArray(d[t.name]))for(let i of d[t.name]){if(!i||typeof i!="object")continue;let c=i.type||i.blockType;if(!c)continue;let l=t.blocks.find(g=>g.slug===c);if(!l||!Array.isArray(l.fields))continue;let u=i.data&&typeof i.data=="object"?i.data:i;me(u,l.fields);}}}function ge(d,e){if(!(!e||typeof e!="object"))for(let t of d){if(t.type==="richtext"&&t.name){let a=e[t.name];typeof a=="string"?e[t.name]=[{type:"paragraph",children:[{text:a}]}]:a&&typeof a=="object"&&!Array.isArray(a)&&a.type==="doc"&&Array.isArray(a.content)&&(e[t.name]=a.content);}if(t.type==="tabs"&&t.name&&Array.isArray(t.tabs)&&e[t.name]&&typeof e[t.name]=="object")for(let a of t.tabs)Array.isArray(a.fields)&&ge(a.fields,e[t.name]);else if((t.type==="group"||t.type==="collapsible")&&t.name&&Array.isArray(t.fields)&&e[t.name]&&typeof e[t.name]=="object")ge(t.fields,e[t.name]);else if(t.type==="array"&&t.name&&Array.isArray(t.fields)&&Array.isArray(e[t.name]))for(let a of e[t.name])a&&typeof a=="object"&&ge(t.fields,a);else if(t.type==="blocks"&&t.name&&Array.isArray(t.blocks)&&Array.isArray(e[t.name]))for(let a of e[t.name]){if(!a||typeof a!="object")continue;let i=a.type||a.blockType;if(!i)continue;let c=t.blocks.find(u=>u.slug===i);if(!c||!Array.isArray(c.fields))continue;let l=a.data&&typeof a.data=="object"?a.data:a;ge(c.fields,l);}}}var _r={_media:{create:c.MEDIA_UPLOAD,update:c.MEDIA_UPLOAD,delete:c.MEDIA_DELETE}};function Ae(d,e){let t=_r[d];return t?t[e]:`collection.${e}`}function Fr(d){let e=d.headers.get("x-forwarded-for");return e?e.split(",")[0].trim():d.headers.get("x-real-ip")||"unknown"}function Fe(d,e,t,a,i){e?.apiKeyId&&d&&d.createAuditLog({action:"api_request",userId:e.userId||"",resource:"api_key",resourceId:e.apiKeyId,success:true,metadata:{endpoint:t,method:a,ip:Fr(i)}});}function ut(d){return d.baseUpdatedAt??d._baseUpdatedAt}function pt(d){let{baseUpdatedAt:e,_baseUpdatedAt:t,...a}=d;return a}function Yt(d,e){return {error:"Document has changed since you started editing",code:"REVISION_CONFLICT",conflict:{expectedUpdatedAt:d??null,actualUpdatedAt:e.updatedAt??null,current:e}}}async function _(d,e,t,a,i,c,l=true,u="none"){return await a$9(d,e,{user:a,req:t,tenantID:i,apiKey:c},{enablePublicAccess:l,defaultAccess:u})}async function Y(d,e,t,a,i,c=true){return await b$2(d,e,{user:a,req:t,tenantID:i},{enablePublicAccess:c})}async function P(d,e,t,a){if(t)return {user:t,tenantID:a,apiKeyContext:void 0,authType:"static"};if(e){let i=await e(d);if(i.status===200&&i.user)return {user:i.user,tenantID:i.tenantContext?.tenantId,apiKeyContext:i.apiKeyContext,authType:i.authType}}return {user:void 0,tenantID:void 0,apiKeyContext:void 0,authType:void 0}}function Or(d,e){if(d instanceof c$3&&d.dialect==="postgres")return new a$5({db:d.client});if(d instanceof a$6)return new a$7({db:d.db});let t=resolve(e,"data","kyro.db");return new a$8({path:process.env.KYRO_AUTH_DB_PATH||t})}function Zt(d$1){let {registry:e,db:t,authSecret:a,authAdapter:i$1,checkSession:c,user:l,tenantID:u,cors:g,webhookService:f,settings:A}=d$1,w=new Hono,U=A?.access?.apiAccess,T=A?.access?.enablePublicAccess??false,k=A?.access?.defaultCollectionAccess??"none";U?.requireAuth;let M=process.cwd(),ae=M.endsWith("admin")?resolve(M,".."):M,C=i$1||Or(t,ae),D=a?Et({db:t,userLookup:async r=>await C.findUserById(r)||null}):null,Z=U?.cors?.allowedOrigins,ne=g?.origins,we=Array.isArray(Z)?Z:typeof Z=="string"&&Z?Z.split(`
65
- `).map(r=>r.trim()).filter(Boolean):[],be=we.length>0?we:ne||[];(be.length>0||g)&&w.use("*",async(r,n)=>{let m=r.req.header("Origin")||"*";if(be.length>0&&!be.includes(m))return r.json({error:"Origin not allowed"},403);let y=be.length>0?m:"*";if(r.header("Access-Control-Allow-Origin",y),r.header("Access-Control-Allow-Methods","GET, POST, PATCH, DELETE, OPTIONS"),r.header("Access-Control-Allow-Headers","Content-Type, Authorization, X-API-Key"),g?.credentials&&r.header("Access-Control-Allow-Credentials","true"),r.req.method==="OPTIONS")return r.text("");await n();});let Ie=A?.access?.rateLimiting,fe;if(Ie?.enabled){let r=Ie.maxRequests||100,n=Ie.windowMs||6e4;fe=new je({"api:general":{window:n,max:r}}),w.use("/api/*",async(m,y)=>{if(!fe)return y();let o=m.req.header("CF-Connecting-IP")||m.req.header("X-Forwarded-For")?.split(",")[0]?.trim()||m.req.header("X-Real-IP")||"unknown",s=await fe.check("api:general",o);if(m.header("X-RateLimit-Limit",String(r)),m.header("X-RateLimit-Remaining",String(s.remaining)),m.header("X-RateLimit-Reset",String(s.resetAt)),!s.allowed)return m.json({error:"Too many requests",retryAfter:s.retryAfter},429);await y();});}let K=new ke({redis:C,jwtSecret:a||"change-me",baseUrl:process.env.KYRO_BASE_URL||"http://localhost:4321",rateLimiter:fe});b$1.fromConfig(t).then(r=>{r&&(K.email=r);}).catch(r=>{console.error("[Email] Failed to initialize transport from config:",r);}),w.post("/api/auth/login",async r=>K.login(r.req.raw)),w.post("/api/auth/register",async r=>K.register(r.req.raw)),w.post("/api/auth/logout",async r=>K.logout(r.req.raw)),w.post("/api/auth/refresh",async r=>K.refresh(r.req.raw)),w.get("/api/auth/me",async r=>K.me(r.req.raw)),w.get("/api/auth/sessions",async r=>K.listSessions(r.req.raw)),w.post("/api/auth/sessions/refresh",async r=>K.refreshSession(r.req.raw)),w.delete("/api/auth/sessions",async r=>K.revokeOtherSessions(r.req.raw)),w.delete("/api/auth/sessions/:id",async r=>K.revokeSession(r.req.raw,r.req.param("id"))),w.put("/api/auth/sessions/:id/name",async r=>K.renameSession(r.req.raw,r.req.param("id"))),w.get("/api/auth/access",async r=>{try{let{user:n,tenantID:m}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Not authenticated"},401);let y={},o={};for(let s of e.getCollections()){let p={read:(await _(s,"read",r.req.raw,n,m,void 0,T,k)).allowed,create:(await _(s,"create",r.req.raw,n,m,void 0,T,k)).allowed,update:(await _(s,"update",r.req.raw,n,m,void 0,T,k)).allowed,delete:(await _(s,"delete",r.req.raw,n,m,void 0,T,k)).allowed};y[s.slug]=p;}for(let s of e.getGlobals()){let p={read:(await Y(s,"read",r.req.raw,n,m,T)).allowed,update:(await Y(s,"update",r.req.raw,n,m,T)).allowed};o[s.slug]=p;}return r.json({collections:y,globals:o})}catch(n){return r.json({error:n.message},500)}});let ie=typeof e.hasCollection=="function"&&e.hasCollection("users")?e.getCollection("users"):(()=>{try{return e.getCollection("users")}catch{return a$3}})();w.get("/api/users",async r=>{try{let{user:n,tenantID:m}=await P(r.req.raw,D,l,u),y=await _(ie,"read",r.req.raw,n,m,void 0,T,k);if(!y.allowed)return r.json({error:y.error},y.status||403);let o=parseInt(r.req.query("page")||"1"),s=Math.min(parseInt(r.req.query("limit")||"10"),100),p=r.req.query("search")||void 0,b=await C.findUsers({page:o,limit:s,search:p});return r.json({docs:b.users,totalDocs:b.total,limit:s,totalPages:Math.ceil(b.total/s),page:o,pagingCounter:(o-1)*s+1,hasPrevPage:o>1,hasNextPage:o<Math.ceil(b.total/s),prevPage:o>1?o-1:null,nextPage:o<Math.ceil(b.total/s)?o+1:null})}catch(n){return console.error("[API] Error listing users:",n),r.json({error:n.message},500)}}),w.get("/api/users/:id",async r=>{try{let{user:n,tenantID:m}=await P(r.req.raw,D,l,u),y=r.req.param("id"),o=await C.findUserById(y);return o?r.json({data:o}):r.json({error:"User not found"},404)}catch(n){return r.json({error:n.message},500)}}),w.post("/api/users",async r=>{try{let{user:n,tenantID:m}=await P(r.req.raw,D,l,u),y=await _(ie,"create",r.req.raw,n,m,void 0,T,k);if(!y.allowed)return r.json({error:y.error},y.status||403);let o=await r.req.json();if(!o.email||!o.password)return r.json({error:"Email and password are required"},400);if(await C.findUserByEmail(o.email))return r.json({error:"Email already in use"},400);let p=await C.createUser({email:o.email,password:o.password,name:o.name,role:o.role||"customer",avatar:o.avatar,tenantId:o.tenantId});return n&&C?.createAuditLog({action:"user_create",userId:n.id,resource:"users",resourceId:p.id,success:!0}),r.json({data:p,message:"User created successfully"},201)}catch(n){return r.json({error:n.message},500)}}),w.patch("/api/users/:id",async r=>{try{let{user:n,tenantID:m}=await P(r.req.raw,D,l,u),y=await _(ie,"update",r.req.raw,n,m,void 0,T,k);if(!y.allowed)return r.json({error:y.error},y.status||403);let o=r.req.param("id"),s=await r.req.json(),p=await C.findUserById(o);if(!p)return r.json({error:"User not found"},404);let b={};s.name!==void 0&&(b.name=s.name),s.email!==void 0&&(b.email=s.email),s.role!==void 0&&(b.role=s.role),s.avatar!==void 0&&(b.avatar=typeof s.avatar=="object"&&s.avatar!==null?s.avatar.id||String(s.avatar):s.avatar),s.tenantId!==void 0&&(b.tenantId=s.tenantId),s.emailVerified!==void 0&&(b.emailVerified=s.emailVerified),s.locked!==void 0&&(b.locked=s.locked),s.failedLoginAttempts!==void 0&&(b.failedLoginAttempts=s.failedLoginAttempts),s.lastLogin!==void 0&&(b.lastLogin=s.lastLogin);let h=await C.updateUser(o,b);return h?(n&&(C?.createAuditLog({action:"user_update",userId:n.id,resource:"users",resourceId:o,success:!0}),s.role&&p.role!==s.role&&C?.createAuditLog({action:"role_change",userId:n.id,resource:"users",resourceId:o,success:!0,metadata:{oldRole:p.role,newRole:s.role}})),r.json({data:h,message:"User updated successfully"})):r.json({error:"User update failed"},500)}catch(n){return r.json({error:n.message},500)}}),w.delete("/api/users/:id",async r=>{try{let{user:n,tenantID:m}=await P(r.req.raw,D,l,u),y=await _(ie,"delete",r.req.raw,n,m,void 0,T,k);if(!y.allowed)return r.json({error:y.error},y.status||403);let o=r.req.param("id");if(n&&n.id===o)return r.json({error:"You cannot delete your own account"},403);let s=await C.findUserById(o);return s?await C.deleteUser(o)?(n&&C?.createAuditLog({action:"user_delete",userId:n.id,resource:"users",resourceId:o,success:!0}),r.json({data:s,message:"User deleted successfully"})):r.json({error:"User deletion failed"},500):r.json({error:"User not found"},404)}catch(n){return r.json({error:n.message},500)}}),w.get("/api/auth/audit-logs",async r=>{try{let{user:n,tenantID:m}=await P(r.req.raw,D,l,u),y=e.getCollection("audit_logs");if(y){let S=await _(y,"read",r.req.raw,n,m,void 0,T,k);if(!S.allowed)return r.json({error:S.error},S.status||403)}else if(!n)return r.json({error:"Authentication required"},401);let o=parseInt(r.req.query("page")||"1"),s=Math.min(parseInt(r.req.query("limit")||"50"),100),p=r.req.query("action")||void 0,b=r.req.query("userId")||void 0,h=r.req.query("resource")||void 0,I=await C.findAuditLogs({action:p,userId:b,resource:h,limit:s,offset:(o-1)*s});return r.json({docs:I.logs,totalDocs:I.total,limit:s,totalPages:Math.ceil(I.total/s),page:o,pagingCounter:(o-1)*s+1,hasPrevPage:o>1,hasNextPage:o<Math.ceil(I.total/s),prevPage:o>1?o-1:null,nextPage:o<Math.ceil(I.total/s)?o+1:null})}catch(n){return console.error("[API] Error listing audit logs:",n),r.json({error:n.message},500)}});let oe=null,le=null,W=async()=>{if(le)throw le;if(!oe)try{let r=t instanceof c$3?t.dialect:"sqlite",n=r==="postgres"&&t instanceof c$3?t.client:t;oe=await $e.init(n,{dialect:r});}catch(r){throw console.error("[getMedia] Init error:",r),le=r,r}return oe};w.get("/api/media",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Authentication required"},401);let m=await W(),y=new URL(r.req.url).origin,o=parseInt(r.req.query("page")||"1"),s=parseInt(r.req.query("limit")||"30"),p=r.req.query("search")||"",b=r.req.query("type")||"",h=r.req.query("folder")||"",I=await m.find({page:o,limit:s,search:p,type:b,folder:h},y);return r.json(I)}catch(n){return console.error("[Media] find error:",n),r.json({error:n.message},500)}}),w.post("/api/media/upload",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Authentication required"},401);let m=await W();if((r.req.header("content-type")||"").includes("multipart/form-data")){let p=await r.req.formData(),b=p.get("file"),h=p.get("folder")||"";if(!b)return r.json({error:"No file uploaded"},400);let I=await m.upload(b,h);return r.json(I)}let{url:o}=await r.req.json();if(!o)return r.json({error:"No URL provided"},400);let s=await m.uploadFromUrl(o);return r.json(s)}catch(n){return console.error("[Media] upload error:",n),r.json({error:n.message},500)}}),w.get("/api/media/folders",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Authentication required"},401);let y=await(await W()).listFolders();return r.json(y)}catch(n){return console.error("[Media] folders error:",n),r.json({error:n.message},500)}}),w.post("/api/media/folders",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Authentication required"},401);let m=await W(),y=await r.req.json(),{name:o,parentPath:s}=y;return o?(await m.createFolder(o,s||""),r.json({message:"Folder created",path:s?`${s}/${o}`:o})):r.json({error:"Folder name is required"},400)}catch(n){return console.error("[Media] create folder error:",n),r.json({error:n.message},500)}}),w.delete("/api/media/folders",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Authentication required"},401);let m=await W(),y=r.req.query("path");return y?(await m.deleteFolder(y),r.json({message:"Folder deleted"})):r.json({error:"Path is required"},400)}catch(n){return console.error("[Media] delete folder error:",n),r.json({error:n.message},500)}}),w.delete("/api/media/:id",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Authentication required"},401);let m=await W(),y=r.req.param("id"),o=new URL(r.req.url).origin;return await m.delete(y,o),r.json({success:!0})}catch(n){return console.error("[Media] delete error:",n),r.json({error:n.message},500)}}),w.get("/api/media/resize",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Authentication required"},401);let m=r.req.query("url"),y=parseInt(r.req.query("w")||"0"),o=parseInt(r.req.query("h")||"0"),s=r.req.query("fit")||"cover";if(!m)return r.json({error:"URL is required"},400);let b=(await W()).storage;if(b.name!=="local")return r.redirect(m);let h=b.config?.uploadDir||join(process.cwd(),"public","uploads"),I=b.config?.baseUrl||"/uploads";if(!m.startsWith(I))return r.redirect(m);let S=m.replace(I,""),v=join(h,S);if(!existsSync(v))return r.json({error:"File not found"},404);let x=readFileSync(v),R=ct(x);(y>0||o>0)&&(R=R.resize({width:y>0?y:void 0,height:o>0?o:void 0,fit:s}));let q=await R.toBuffer(),j=await ct(x).metadata();return r.header("Content-Type",`image/${j.format||"webp"}`),r.header("Cache-Control","public, max-age=31536000, immutable"),r.body(q)}catch(n){return console.error("[Media] resize error:",n),r.json({error:n.message},500)}}),w.get("/api/media/:id",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Authentication required"},401);let m=await W(),y=r.req.param("id"),o=new URL(r.req.url).origin,s=await m.findById(y,o);return s?r.json(s):r.json({error:"Media not found"},404)}catch(n){return console.error("[Media] get error:",n),r.json({error:n.message},500)}}),w.patch("/api/media/:id",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Authentication required"},401);let m=await W(),y=r.req.param("id"),o=await r.req.json(),s=new URL(r.req.url).origin;if(o.folder!==void 0){let p=await m.update(y,{folder:o.folder},s);return r.json({doc:p})}return r.json({error:"No valid fields to update"},400)}catch(n){return console.error("[Media] update error:",n),r.json({error:n.message},500)}}),w.get("/api/media/test",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Authentication required"},401);let m=await W();return r.json({status:m?"initialized":"failed",serviceType:m?.constructor?.name})}catch(n){return console.error("[test] Error:",n),r.json({error:n.message,type:n.constructor?.name,stack:n.stack},500)}}),w.get("/api/storage-status",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Authentication required"},401);let m=!1,y="local";if(t)try{let o=t.prepare('SELECT provider FROM "_globals_storage-settings" LIMIT 1').get();o&&o.provider&&(m=!0,y=o.provider==="aws"?"s3":o.provider);}catch{try{let o=await t.findOne({collection:"_globals_storage-settings",where:{},draft:!0});o&&o.provider&&(m=!0,y=o.provider==="aws"?"s3":o.provider);}catch{}}return r.json({provider:y,configured:m,usage:0,limit:"unlimited"})}catch(n){return console.error("[Storage] status error:",n),r.json({error:n.message},500)}}),w.get("/api/plugins",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Authentication required"},401);let m=e.getPlugins(),y=e.storageProviders,o=await Promise.all(m.map(async s=>{let p=!0,b=s.name,h={};try{let I=await t.findOne({collection:"_globals_plugin-settings",where:{},draft:!0});I&&I.states&&(h=I.states);}catch{}return h[b]!==void 0&&(p=h[b]),y.setPluginEnabled(b,p),{id:b,name:b,version:s.version||"1.0.0",description:s.description||"",enabled:p,status:p?"active":"disabled"}}));return r.json(o)}catch(n){return console.error("[Plugins] list error:",n),r.json({error:n.message},500)}}),w.put("/api/plugins/:name/toggle",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Authentication required"},401);let m=r.req.param("name"),y=e.storageProviders,s=!y.isPluginEnabled(m),p=[];if(!s)for(let h of y.getAll())h.pluginName===m&&p.push(h.type);if(!(r.req.query("force")==="1")&&!s&&p.length>0){let h="local";try{let I=t?.prepare?.('SELECT provider FROM "_globals_storage-settings" LIMIT 1')?.get();I?.provider&&(h=I.provider);}catch{try{let I=await t?.findOne?.({collection:"_globals_storage-settings",where:{},draft:!0});I?.provider&&(h=I.provider);}catch{}}if(p.includes(h))return r.json({error:`Cannot disable "${m}" \u2014 storage provider "${h}" is currently active. Switch to Local storage first.`,requiresAction:!0,activeProvider:h},409)}try{let h={},I="global",S=await t.findOne({collection:"_globals_plugin-settings",where:{},draft:!0});S&&(h=S.states||{},I=S.id),h[m]=s,S?await t.update({collection:"_globals_plugin-settings",id:I,data:{states:h}}):await t.create({collection:"_globals_plugin-settings",data:{states:h,id:"global"}});}catch(h){console.warn(`[Plugins] Could not persist state for "${m}":`,h);}return y.setPluginEnabled(m,s),r.json({name:m,enabled:s})}catch(n){return console.error("[Plugins] toggle error:",n),r.json({error:n.message},500)}}),w.get("/api/health",r=>r.json({status:"ok",version:"0.1.0",collections:e.getCollectionSlugs(),timestamp:new Date().toISOString()})),w.get("/api/kyro/schema",async r=>{let{user:n}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Authentication required"},401);let m=o=>o.map(s=>{let p={name:s.name,type:s.type,label:s.label,required:s.required??false,unique:s.unique??false,indexed:s.indexed??false,defaultValue:s.defaultValue,admin:s.admin?{...s.admin}:void 0};return s.minLength!==void 0&&(p.minLength=s.minLength),s.maxLength!==void 0&&(p.maxLength=s.maxLength),s.pattern!==void 0&&(p.pattern=s.pattern),s.variant!==void 0&&(p.variant=s.variant),s.hasMany!==void 0&&(p.hasMany=s.hasMany),s.min!==void 0&&(p.min=s.min),s.max!==void 0&&(p.max=s.max),s.step!==void 0&&(p.step=s.step),s.integer!==void 0&&(p.integer=s.integer),s.options&&(p.options=s.options),s.relationTo&&(p.relationTo=s.relationTo),s.maxDepth!==void 0&&(p.maxDepth=s.maxDepth),s.minRows!==void 0&&(p.minRows=s.minRows),s.maxRows!==void 0&&(p.maxRows=s.maxRows),s.localized!==void 0&&(p.localized=s.localized),s.language&&(p.language=s.language),s.format&&(p.format=s.format),s.allowedTypes&&(p.allowedTypes=s.allowedTypes),s.maxSize&&(p.maxSize=s.maxSize),(s.type==="group"||s.type==="row"||s.type==="collapsible"&&s.fields)&&(p.fields=m(s.fields)),s.type==="array"&&s.fields&&(p.fields=m(s.fields)),s.type==="blocks"&&s.blocks&&(p.blocks=s.blocks.map(b=>({slug:b.slug,label:b.label,fields:m(b.fields)}))),s.type==="tabs"&&s.tabs&&(p.tabs=s.tabs.map(b=>({label:b.label,name:b.name,fields:m(b.fields)}))),p}),y={collections:{},globals:{}};for(let o of e.getCollections()){let s=o.slug;try{y.collections[s]={slug:s,label:o.label||s,fields:m(o.fields),jsonSchema:zodToJsonSchema(e.getZodSchema(s),{target:"openApi3"}),createSchema:zodToJsonSchema(e.getCreateZodSchema(s),{target:"openApi3"}),updateSchema:zodToJsonSchema(e.getUpdateZodSchema(s),{target:"openApi3"}),procedures:{find:{collection:s,where:"Record<string,any>",sort:"string",limit:"number",page:"number",depth:"number",select:"string[]",draft:"boolean"},findByID:{collection:s,id:"string",depth:"number",select:"string[]",draft:"boolean"},create:{collection:s,data:"Record<string,any>",depth:"number",select:"string[]"},update:{collection:s,id:"string",data:"Record<string,any>",depth:"number",select:"string[]",baseUpdatedAt:"string"},delete:{collection:s,id:"string"},count:{collection:s,where:"Record<string,any>"}}};}catch{}}for(let o of e.getGlobals()){let s=o.slug,p=o.fields;if(s==="storage-settings"){let b=e.storageProviders,h=b.getAll(),I=new Set(b.getAllAvailable(v=>b.isPluginEnabled(v)).map(v=>v.type));I.add("local");let S=new Set(h.map(v=>v.type));p=p.filter(v=>v.type==="group"&&v.name&&S.has(v.name)?I.has(v.name):true).map(v=>v.name==="provider"&&v.type==="select"?{...v,options:v.options.filter(x=>I.has(x.value))}:v);}try{y.globals[s]={slug:s,label:o.label||s,fields:m(p),jsonSchema:zodToJsonSchema(e.getZodSchema(s),{target:"openApi3"}),procedures:{get:{},update:{data:"Record<string,any>"}}};}catch{}}return r.json(y)}),w.get("/api/collections",async r=>{let{user:n}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Authentication required"},401);let m=e.getCollections().map(y=>({slug:y.slug,label:y.label||y.slug,fields:y.fields.filter(o=>o.name).map(o=>({name:o.name,type:o.type,required:o.required,label:o.label}))}));return r.json(m)});function de(r,n,m){if(m in n)return n[m];for(let y of r)if(y.name){if(y.type==="tabs"&&y.tabs){let o=n[y.name];if(o&&typeof o=="object"&&m in o)return o[m]}if((y.type==="group"||y.type==="collapsible")&&y.fields){let o=n[y.name];if(o&&typeof o=="object"){if(m in o)return o[m];let s=de(y.fields,o,m);if(s!==void 0)return s}}}}function Ne(r){let n=[];for(let m of r)if(m.type==="relationship")n.push(m);else if(m.type==="tabs"&&m.tabs)for(let y of m.tabs)n.push(...Ne(y.fields||[]));else (m.type==="group"||m.type==="collapsible")&&m.fields&&n.push(...Ne(m.fields||[]));return n}function Qt(r){if(!r)return [];if(typeof r=="string")return [r];if(Array.isArray(r))return r.map(n=>typeof n=="object"?n.value??n:n);if(typeof r=="object"){let n=r.value??r;return typeof n=="string"?[n]:Array.isArray(n)?n:[]}return []}async function Be(r,n,m,y){if(r.length===0)return;let o=Ne(n.fields);if(o.length!==0)for(let s of o){let p=Array.isArray(s.relationTo)?s.relationTo:[s.relationTo],b={};for(let h of p)b[h]=new Set;for(let h of r){let I=de(n.fields,h,s.name),S=Qt(I);for(let v of S)if(v)if(p.length===1)b[p[0]].add(v);else for(let x of p)b[x].add(v);}for(let[h,I]of Object.entries(b)){if(I.size===0)continue;let S=y.getCollection(h);if(!S)continue;let v=S.admin?.useAsTitle||"title",x=Array.from(I),R=[];for(let j of x)try{let E=await m.findByID({collection:h,id:j,draft:!0});if(E){let $=de(S.fields,E,v)??j;R.push({id:j,title:String($)});}}catch{R.push({id:j,title:j});}let q=new Map(R.map(j=>[j.id,j.title]));for(let j of r){let E=de(n.fields,j,s.name);if(!E)continue;let $=F=>{if(s.name in j)j[s.name]=F;else for(let L of n.fields)if(L.type==="tabs"&&L.tabs){for(let O of L.tabs)if(O.fields?.some(B=>B.name===s.name)){let B=j[L.name];B&&typeof B=="object"&&(B[s.name]=F);}}};if(typeof E=="string")$({id:E,title:q.get(E)||E});else if(Array.isArray(E))$(E.map(F=>{let L=typeof F=="object"?F.value??F.id:F;return {id:L,title:q.get(L)||L}}));else if(typeof E=="object"){let F=E.value??E.id;$({id:F,title:q.get(F)||F});}}}}}w.get("/api/search",async r=>{try{let n=r.req.query("q")||"",m=r.req.query("collections")||"",y=Math.min(parseInt(r.req.query("limit")||"10"),50);if(!n||n.length<2)return r.json({results:[],message:"Query too short"});let{user:o,tenantID:s}=await P(r.req.raw,D,l,u),p=m?m.split(",").filter(Boolean):e.getCollectionSlugs(),b=[],h=new RegExp(n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),"i");for(let I of e.getCollections()){if(!p.includes(I.slug)||!(await _(I,"read",r.req.raw,o,s,void 0,T,k)).allowed)continue;let v=I.fields.filter(x=>x.name&&x.name!=="id"&&(x.type==="text"||x.type==="email"||x.type==="textarea"||x.type==="richtext"||x.indexed)&&!x.admin?.hidden).map(x=>x.name);if(v.length!==0)try{let x=v.map(q=>{let j={};return j[q]={like:`%${n}%`},j}),R=await t.find({collection:I.slug,where:{OR:x},limit:y,tenantID:s});await Be(R.docs,I,t,e);for(let q of R.docs){let j=I.admin?.useAsTitle||v.find($=>$==="title"||$==="name"||$==="heading"||$==="slug"),E=j?de(I.fields,q,j)??q.id:q.id;b.push({collection:I.slug,label:I.label||I.slug,id:q.id,title:String(E||"Untitled"),doc:q});}}catch(x){console.error(`Search error for ${I.slug}:`,x);}}return b.sort((I,S)=>I.label.localeCompare(S.label)),r.json({results:b})}catch(n){return r.json({error:n.message,results:[]},500)}}),w.get("/api/keys",async r=>{try{let{user:n,tenantID:m}=await P(r.req.raw,D,l,u);if(!n||!a$4(n,"users:read"))return r.json({error:"Forbidden"},403);let y=parseInt(r.req.query("page")||"1"),o=Math.min(parseInt(r.req.query("limit")||"50"),100),s=await t.find({collection:d,where:{},page:y,limit:o,tenantID:m}),p=(s.docs||[]).map(b=>({id:b.id,name:b.name,keyPrefix:b.keyPrefix,permissions:b.permissions||[],lastUsed:b.lastUsedAt,createdAt:b.createdAt}));return r.json({docs:p,totalDocs:s.totalDocs||p.length,totalPages:s.totalPages||1})}catch(n){return console.error("[ApiKeys] GET error:",n),r.json({error:n.message},500)}}),w.post("/api/keys",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n||!a$4(n,"users:admin"))return r.json({error:"Forbidden"},403);let m=await r.req.json();if(!m.name||typeof m.name!="string")return r.json({error:"name is required"},400);let y=i(),o=await t.create({collection:d,data:{userId:n.id,name:m.name,key:y,keyPrefix:j(y),permissions:Array.isArray(m.permissions)?m.permissions:["*"],expiresAt:m.expiresAt||null,createdAt:new Date().toISOString()}});return await C?.createAuditLog({action:"api_key_create",userId:n.id,resource:"api_key",resourceId:o.id,success:!0,metadata:{keyName:m.name}}),r.json({...o,key:y,permissions:Array.isArray(m.permissions)?m.permissions:["*"]},201)}catch(n){return console.error("[ApiKeys] POST error:",n),r.json({error:n.message},500)}}),w.delete("/api/keys/:id",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n||!a$4(n,"users:admin"))return r.json({error:"Forbidden"},403);let m=r.req.param("id"),y=await t.findByID({collection:d,id:m});return y?(await t.delete({collection:d,id:m}),await C?.createAuditLog({action:"api_key_delete",userId:n.id,resource:"api_key",resourceId:m,success:!0,metadata:{keyName:y.name}}),r.json({message:"API key deleted"})):r.json({error:"API key not found"},404)}catch(n){return console.error("[ApiKeys] DELETE error:",n),r.json({error:n.message},500)}}),w.patch("/api/keys/:id",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n||!a$4(n,"users:admin"))return r.json({error:"Forbidden"},403);let m=r.req.param("id"),y=await r.req.json(),o=await t.findByID({collection:d,id:m});if(!o)return r.json({error:"API key not found"},404);let s={};if(typeof y.name=="string"&&y.name.trim()&&(s.name=y.name.trim()),Array.isArray(y.permissions)&&(s.permissions=y.permissions),y.expiresAt!==void 0&&(s.expiresAt=y.expiresAt||null),Object.keys(s).length===0)return r.json({error:"Nothing to update"},400);let p=await t.update({collection:d,id:m,data:s});return r.json({...p,keyPrefix:o.keyPrefix})}catch(n){return console.error("[ApiKeys] PATCH error:",n),r.json({error:n.message},500)}}),w.post("/api/keys/:id/rotate",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n||!a$4(n,"users:admin"))return r.json({error:"Forbidden"},403);let m=r.req.param("id"),y=await t.findByID({collection:d,id:m});if(!y)return r.json({error:"API key not found"},404);let o=i(),s=await t.update({collection:d,id:m,data:{key:o,keyPrefix:j(o),lastUsedAt:null}});return await C?.createAuditLog({action:"api_key_rotate",userId:n.id,resource:"api_key",resourceId:m,success:!0,metadata:{keyName:y.name}}),r.json({...s,key:o,permissions:y.permissions,expiresAt:y.expiresAt})}catch(n){return console.error("[ApiKeys] rotate error:",n),r.json({error:n.message},500)}}),w.get("/api/webhooks",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n||!a$4(n,"users:read"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=await f.getWebhooks();return r.json({docs:m})}catch(n){return console.error("[Webhooks] GET error:",n),r.json({error:n.message},500)}}),w.post("/api/webhooks",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n||!a$4(n,"users:admin"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=await r.req.json(),y=await f.createWebhook(m);return await C?.createAuditLog({action:"webhook_create",userId:n.id,resource:"webhook",resourceId:y.id,success:!0,metadata:{name:y.name,url:y.url}}),r.json(y,201)}catch(n){return console.error("[Webhooks] POST error:",n),r.json({error:n.message},500)}}),w.get("/api/webhooks/:id",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n||!a$4(n,"users:read"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=await f.getWebhookById(m);return y?r.json(y):r.json({error:"Webhook not found"},404)}catch(n){return console.error("[Webhooks] GET :id error:",n),r.json({error:n.message},500)}}),w.patch("/api/webhooks/:id",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n||!a$4(n,"users:admin"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=await r.req.json(),o=await f.updateWebhook(m,y);return o?(await C?.createAuditLog({action:"webhook_update",userId:n.id,resource:"webhook",resourceId:m,success:!0,metadata:{name:o.name}}),r.json(o)):r.json({error:"Webhook not found"},404)}catch(n){return console.error("[Webhooks] PATCH error:",n),r.json({error:n.message},500)}}),w.delete("/api/webhooks/:id",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n||!a$4(n,"users:admin"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=await f.getWebhookById(m);return y?(await f.deleteWebhook(m),await C?.createAuditLog({action:"webhook_delete",userId:n.id,resource:"webhook",resourceId:m,success:!0,metadata:{name:y.name}}),r.json({message:"Webhook deleted"})):r.json({error:"Webhook not found"},404)}catch(n){return console.error("[Webhooks] DELETE error:",n),r.json({error:n.message},500)}}),w.post("/api/webhooks/:id/test",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n||!a$4(n,"users:admin"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=await f.testWebhook(m);return y?r.json(y):r.json({error:"Webhook not found"},404)}catch(n){return console.error("[Webhooks] test error:",n),r.json({error:n.message},500)}}),w.get("/api/webhooks/:id/history",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n||!a$4(n,"users:read"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=Math.min(parseInt(r.req.query("limit")||"50"),100),o=await f.getDeliveryHistory(m,y);return r.json({docs:o})}catch(n){return console.error("[Webhooks] history error:",n),r.json({error:n.message},500)}});function Me(r){let n={},m=["name","type","required","hasMany","relationTo","options","min","max","minLength","maxLength","defaultValue","label","localized","admin","unique","index","hidden","readOnly","deprecated"];for(let y of m)y in r&&(n[y]=r[y]);return r.fields&&(n.fields=r.fields.map(Me)),r.tabs&&(n.tabs=r.tabs.map(y=>({label:y.label,name:y.name,fields:y.fields.map(Me)}))),n}w.get("/api/__schema",async r=>{try{let{user:n,apiKeyContext:m}=await P(r.req.raw,D,l,u);if(!n&&!m)return r.json({error:"Unauthorized"},401);let o=e.getCollections().filter(s=>s.slug!=="users"&&s.slug!=="audit_logs").map(s=>({slug:s.slug,label:s.label,labelPlural:s.labelPlural,singularLabel:s.singularLabel,timestamps:s.timestamps,auth:!!s.auth,tenantScoped:!!s.tenantScoped,upload:s.upload?{staticDir:s.upload.staticDir,imageSizes:s.upload.imageSizes,mimeTypes:s.upload.mimeTypes}:void 0,fields:s.fields.map(Me)}));return r.json(o)}catch(n){return console.error("[Schema] error:",n),r.json({error:n.message},500)}});let er=e.getCollections();for(let r of er){let y=function(o,s){let p=[],b=new Set([...Object.keys(o),...Object.keys(s)]);for(let h of b)h==="id"||h==="createdAt"||h==="updatedAt"||JSON.stringify(o[h])!==JSON.stringify(s[h])&&p.push({field:h,oldValue:h in o?o[h]:void 0,newValue:h in s?s[h]:void 0});return p};let n=r.slug;if(n==="users"||n==="audit_logs")continue;let m=`/api/${n}`;w.get(m,async o=>{try{let{user:s,tenantID:p,apiKeyContext:b}=await P(o.req.raw,D,l,u),h=await _(r,"read",o.req.raw,s,p,b,T,k);if(!h.allowed)return o.json({error:h.error},h.status||403);p&&t.setTenantContext({tenantId:p,userId:s?.id??"",role:s?.role,isSuperAdmin:s?.role==="super_admin"});let I=new URL(o.req.url),S=parseInt(I.searchParams.get("page")||"1"),v=Math.min(parseInt(I.searchParams.get("limit")||"10"),100),x=I.searchParams.get("sort")||void 0,R=parseInt(I.searchParams.get("depth")||"0"),q=I.searchParams.get("select")?.split(",")||void 0,j=I.searchParams.get("draft"),E=j==="true"?!0:j==="false"?!1:!!s,$={},F=I.searchParams.get("where");if(F)try{$=JSON.parse(F);}catch{return o.json({error:"Invalid JSON in where parameter"},400)}let L=await t.find({collection:n,where:$,sort:x,limit:v,page:S,depth:R,tenantID:p,select:q,draft:E});return await Be(L.docs,r,t,e),o.json(L)}catch(s){return console.error("[API] list error:",s),o.json({error:s.message},500)}}),w.get(`${m}/:id/versions`,async o=>{try{let{user:s,tenantID:p,apiKeyContext:b}=await P(o.req.raw,D,l,u),h=await _(r,"read",o.req.raw,s,p,b,T,k);if(!h.allowed)return o.json({error:h.error},h.status||403);let I=o.req.param("id");if(!I)return o.json({error:"Missing document ID"},400);let S=new URL(o.req.url),v=S.searchParams.get("compareA"),x=S.searchParams.get("compareB");if(Fe(C,b,`${m}/${I}/versions`,"GET",o.req.raw),v&&x){let[E,$]=await Promise.all([t.findVersionByID({collection:n,versionId:v,tenantID:p}),t.findVersionByID({collection:n,versionId:x,tenantID:p})]);if(!E||!$)return o.json({error:"Version not found"},404);let F=y(E.data,$.data);return o.json({diffs:F})}let R=parseInt(S.searchParams.get("page")||"1"),q=Math.min(parseInt(S.searchParams.get("limit")||"10"),100),j=await t.findVersions({collection:n,documentId:I,page:R,limit:q,tenantID:p});return o.json(j)}catch(s){return console.error("[API] versions error:",s),o.json({error:s.message},500)}}),w.put(`${m}/:id/draft`,async o=>{try{let{user:s,tenantID:p,apiKeyContext:b}=await P(o.req.raw,D,l,u),h=await _(r,"update",o.req.raw,s,p,b,T,k);if(!h.allowed)return o.json({error:h.error},h.status||403);let I=o.req.param("id"),S=await o.req.json(),v=ut(S),x=await t.findByID({collection:n,id:I,tenantID:p,draft:!0});if(!x)return o.json({error:"Document not found"},404);let R;S.delta?R={...x,...S.delta}:R=S.data??pt(S);let q=await t.updateLatestVersion({collection:n,documentId:I,data:R,status:"draft",tenantID:p});return s&&C?.createAuditLog({action:"document_update",userId:s.id,resource:n,resourceId:I,success:!0,metadata:{type:"draft_save"}}),o.json({data:q,message:"Draft saved successfully"})}catch(s){return o.json({error:s.message},500)}}),w.delete(`${m}/:id/draft`,async o=>{try{let{user:s,tenantID:p,apiKeyContext:b}=await P(o.req.raw,D,l,u),h=await _(r,"update",o.req.raw,s,p,b,T,k);return h.allowed?(s&&C?.createAuditLog({action:"document_update",userId:s.id,resource:n,resourceId:o.req.param("id"),success:!0,metadata:{type:"draft_discard"}}),o.json({message:"Draft discarded successfully"})):o.json({error:h.error},h.status||403)}catch(s){return o.json({error:s.message},500)}}),w.get(`${m}/:id`,async o=>{try{let{user:s,tenantID:p,apiKeyContext:b}=await P(o.req.raw,D,l,u),h=await _(r,"read",o.req.raw,s,p,b,T,k);if(!h.allowed)return o.json({error:h.error},h.status||403);let I=o.req.param("id"),S=new URL(o.req.url),v=parseInt(S.searchParams.get("depth")||"0"),x=S.searchParams.get("select")?.split(",")||void 0,R=S.searchParams.get("draft"),q=R==="true"?!0:R==="false"?!1:!!s,j=await t.findByID({collection:n,id:I,depth:v,tenantID:p,select:x,draft:q});return !j&&r.fields.some(E=>E.name==="slug")&&(j=await t.findOne({collection:n,where:{slug:I},tenantID:p,draft:q})),j?(await Be([j],r,t,e),o.json({data:j})):o.json({error:"Document not found"},404)}catch(s){return o.json({error:s.message},500)}}),w.post(m,async o=>{try{let{user:s,tenantID:p,apiKeyContext:b}=await P(o.req.raw,D,l,u),h=await _(r,"create",o.req.raw,s,p,b,T,k);if(!h.allowed)return o.json({error:h.error},h.status||403);p&&t.setTenantContext({tenantId:p,userId:s?.id??"",role:s?.role,isSuperAdmin:s?.role==="super_admin"}),Fe(C,b,m,"POST",o.req.raw);let S=await o.req.json();me(S,r.fields),ge(r.fields,S);let v=o.req.raw;if(r.hooks?.beforeValidate)for(let j of r.hooks.beforeValidate){let E=await j({collection:n,data:S,req:v,user:s,tenantID:p,operation:"create"});E&&Object.assign(S,E);}let x=e.getCreateZodSchema(n);try{S=x.parse(S);}catch(j){return o.json({error:`Validation failed: ${_e(j.errors)}`,details:j.errors},400)}r.tenantScoped&&p&&(S.tenantID=p);let R=r.versions?.drafts===!0;if(S.status=R?"draft":"published",r.hooks?.beforeChange)for(let j of r.hooks.beforeChange){let E=await j({collection:n,data:S,req:v,user:s,tenantID:p,operation:"create"});E&&Object.assign(S,E);}let q=await t.create({collection:n,data:S,tenantID:p});if(R&&await t.createVersion({collection:n,documentId:q.id,data:S,status:"draft",createdBy:s?.id,changeDescription:"Created",tenantID:p}),r.hooks?.afterChange)for(let j of r.hooks.afterChange)await j({collection:n,doc:q,data:S,req:v,user:s,tenantID:p,operation:"create"});return f&&f.trigger(Ae(n,"create"),{collection:n,operation:"create",data:q,user:s?{id:s.id,email:s.email,role:s.role}:void 0,tenantId:p}).catch(j=>console.error("[Webhook] Failed to trigger:",j)),s&&C?.createAuditLog({action:"document_create",userId:s.id,resource:n,resourceId:q.id,success:!0}),o.json({data:q,message:"Created successfully"},201)}catch(s){return s.name==="ZodError"?o.json({error:`Validation failed: ${_e(s.errors)}`,details:s.errors},400):o.json({error:s.message},500)}}),w.patch(`${m}/:id`,async o=>{try{let{user:s,tenantID:p,apiKeyContext:b}=await P(o.req.raw,D,l,u),h=await _(r,"update",o.req.raw,s,p,b,T,k);if(!h.allowed)return o.json({error:h.error},h.status||403);let I=o.req.param("id"),S=await o.req.json(),v=ut(S),x=await t.findByID({collection:n,id:I,tenantID:p,draft:!0});if(!x)return o.json({error:"Document not found"},404);if(v&&x.updatedAt&&v!==x.updatedAt)return o.json(Yt(v,x),409);let R=Object.fromEntries(Object.entries(pt(S)).filter(([O,B])=>B!=="null"&&B!==void 0));me(R,r.fields),ge(r.fields,R);let q=o.req.raw;if(r.hooks?.beforeValidate)for(let O of r.hooks.beforeValidate){let B=await O({collection:n,data:R,originalDoc:x,req:q,user:s,tenantID:p,operation:"update"});B&&Object.assign(R,B);}if(R=e.getUpdateZodSchema(n).parse(R),r.hooks?.beforeChange)for(let O of r.hooks.beforeChange){let B=await O({collection:n,data:R,originalDoc:x,req:q,user:s,tenantID:p,operation:"update"});B&&Object.assign(R,B);}let E=o.req.header("X-Draft")==="true",$=r.versions?.drafts===!0,F=o.req.query("autosave")==="true",L;if($&&E?await t.createVersion({collection:n,documentId:I,data:R,status:"draft",autosave:F,createdBy:s?.id,changeDescription:F?"Autosave":"Draft saved",tenantID:p}):$?(await t.update({collection:n,id:I,data:{...R,status:"published"},tenantID:p}),await t.createVersion({collection:n,documentId:I,data:R,status:"published",createdBy:s?.id,changeDescription:"Published",tenantID:p})):await t.update({collection:n,id:I,data:R,tenantID:p}),L=await t.findByID({collection:n,id:I,tenantID:p,draft:!0}),r.hooks?.afterChange)for(let O of r.hooks.afterChange)await O({collection:n,doc:L,data:R,originalDoc:x,req:q,user:s,tenantID:p,operation:"update"});return f&&f.trigger(Ae(n,"update"),{collection:n,operation:"update",data:L,previousData:x,user:s?{id:s.id,email:s.email,role:s.role}:void 0,tenantId:p}).catch(O=>console.error("[Webhook] Failed to trigger:",O)),Fe(C,b,`${m}/${I}`,"PATCH",o.req.raw),s&&C?.createAuditLog({action:"document_update",userId:s.id,resource:n,resourceId:I,success:!0}),o.json({data:L,message:$?"Draft saved":"Updated successfully"})}catch(s){return s.name==="ZodError"?(console.error(`[PATCH ${m}/:id] Validation failed:`,s.errors),o.json({error:`Validation failed: ${_e(s.errors)}`,details:s.errors},400)):(console.error(`[PATCH ${m}/:id] ERROR:`,s.message,"CAUSE:",s.cause?.message||s.cause,"QUERY:",s.query),o.json({error:s.message},500))}}),w.delete(`${m}/:id`,async o=>{try{let{user:s,tenantID:p,apiKeyContext:b}=await P(o.req.raw,D,l,u),h=await _(r,"delete",o.req.raw,s,p,b,T,k);if(!h.allowed)return o.json({error:h.error},h.status||403);p&&t.setTenantContext({tenantId:p,userId:s?.id??"",role:s?.role,isSuperAdmin:s?.role==="super_admin"});let I=o.req.param("id"),S=o.req.raw,v=await t.findByID({collection:n,id:I,tenantID:p,draft:!0});if(!v)return o.json({error:"Document not found"},404);if(r.hooks?.beforeDelete)for(let R of r.hooks.beforeDelete)await R({collection:n,doc:v,req:S,user:s,tenantID:p,operation:"delete"});let x=await t.delete({collection:n,id:I,tenantID:p});if(r.hooks?.afterDelete)for(let R of r.hooks.afterDelete)await R({collection:n,doc:x,originalDoc:v,req:S,user:s,tenantID:p,operation:"delete"});return f&&f.trigger(Ae(n,"delete"),{collection:n,operation:"delete",data:x,previousData:v,user:s?{id:s.id,email:s.email,role:s.role}:void 0,tenantId:p}).catch(R=>console.error("[Webhook] Failed to trigger:",R)),Fe(C,b,`${m}/${I}`,"DELETE",o.req.raw),s&&C?.createAuditLog({action:"document_delete",userId:s.id,resource:n,resourceId:I,success:!0}),o.json({data:x,message:"Deleted successfully"})}catch(s){return console.error(`[DELETE] Error deleting ${n}:`,s),o.json({error:s.message||String(s)},500)}}),w.post(`${m}/:id/duplicate`,async o=>{try{let{user:s,tenantID:p,apiKeyContext:b}=await P(o.req.raw,D,l,u),h=await _(r,"create",o.req.raw,s,p,b,T,k);if(!h.allowed)return o.json({error:h.error},h.status||403);let I=o.req.param("id"),S=await t.findByID({collection:n,id:I,tenantID:p,draft:!0});if(!S)return o.json({error:"Document not found"},404);let{id:v,createdAt:x,updatedAt:R,...q}=S,j=Date.now().toString(36),E=`${S.slug||"document"}-copy-${j}`,$=await t.create({collection:n,data:{...q,slug:E,status:"draft"},tenantID:p});return o.json({data:$,message:"Document duplicated successfully"})}catch(s){return console.error("[Duplicate] Error:",s),o.json({error:s.message||String(s)},500)}}),w.post(`${m}/:id/versions/:versionId/restore`,async o=>{try{let{user:s,tenantID:p,apiKeyContext:b}=await P(o.req.raw,D,l,u),h=await _(r,"update",o.req.raw,s,p,b,T,k);if(!h.allowed)return o.json({error:h.error},h.status||403);let I=o.req.param("id"),S=o.req.param("versionId"),v=await t.findVersionByID({collection:n,versionId:S,tenantID:p});if(!v)return o.json({error:"Version not found"},404);let x=await t.update({collection:n,id:I,data:{...v.data,status:"draft"},tenantID:p});return o.json({data:x,message:"Version restored successfully"})}catch(s){return o.json({error:s.message},500)}}),w.post(`${m}/:id/versions`,async o=>{try{let{user:s,tenantID:p,apiKeyContext:b}=await P(o.req.raw,D,l,u),h=await _(r,"update",o.req.raw,s,p,b,T,k);if(!h.allowed)return o.json({error:h.error},h.status||403);let I=await o.req.json(),{versionId:S,action:v}=I;if(v==="restore"&&S){let x=await t.findVersionByID({collection:n,versionId:S,tenantID:p});if(!x)return o.json({error:"Version not found"},404);let R=await t.update({collection:n,id:o.req.param("id"),data:{...x.data,status:"draft"},tenantID:p});return o.json({data:R,message:"Version restored successfully"})}return o.json({error:"Invalid action"},400)}catch(s){return o.json({error:s.message},500)}}),w.post(`${m}/:id/publish`,async o=>{try{let{user:s,tenantID:p,apiKeyContext:b}=await P(o.req.raw,D,l,u),h=await _(r,"update",o.req.raw,s,p,b,T,k);if(!h.allowed)return o.json({error:h.error},h.status||403);p&&t.setTenantContext({tenantId:p,userId:s?.id??"",role:s?.role,isSuperAdmin:s?.role==="super_admin"});let I=o.req.param("id"),S=await o.req.json().catch(()=>({})),v=ut(S),x=await t.findByID({collection:n,id:I,tenantID:p,draft:!0});if(!x)return o.json({error:"Document not found"},404);if(v&&x.updatedAt&&v!==x.updatedAt)return o.json(Yt(v,x),409);let R={status:"published"},q=x;if(r.versions?.drafts){let E=await t.findVersions({collection:n,documentId:I,limit:1,sort:"-createdAt",tenantID:p});if(E.docs.length>0){let $=E.docs[0];q={...x,...$.data},R={...$.data,...R};}}let j=await t.update({collection:n,id:I,data:R,tenantID:p});return r.versions?.drafts&&await t.createVersion({collection:n,documentId:I,data:{...q,status:"published"},status:"published",createdBy:s?.id,changeDescription:"Published",tenantID:p}),f&&f.trigger(Ae(n,"update"),{collection:n,operation:"update",data:j,user:s?{id:s.id,email:s.email,role:s.role}:void 0,tenantId:p}).catch(E=>console.error("[Webhook] Failed to trigger:",E)),o.json({data:j,message:"Published successfully"})}catch(s){return o.json({error:s.message},500)}}),w.post(`${m}/:id/unpublish`,async o=>{try{let{user:s,tenantID:p,apiKeyContext:b}=await P(o.req.raw,D,l,u),h=await _(r,"update",o.req.raw,s,p,b,T,k);if(!h.allowed)return o.json({error:h.error},h.status||403);let I=o.req.param("id");if(!await t.findByID({collection:n,id:I,tenantID:p,draft:!0}))return o.json({error:"Document not found"},404);let v=await t.update({collection:n,id:I,data:{status:"draft"},tenantID:p});return f&&f.trigger(Ae(n,"update"),{collection:n,operation:"update",data:v,user:s?{id:s.id,email:s.email,role:s.role}:void 0,tenantId:p}).catch(x=>console.error("[Webhook] Failed to trigger:",x)),o.json({data:v,message:"Unpublished successfully"})}catch(s){return o.json({error:s.message},500)}});}for(let r of e.getGlobals()){let n=r.slug,m=`/api/globals/${n}`;w.get(m,async o=>{try{let{user:s,tenantID:p}=await P(o.req.raw,D,l,u),b=await Y(r,"read",o.req.raw,s,p,T);if(!b.allowed)return o.json({error:b.error},b.status||403);let h=!!s,I=await t.findOne({collection:`_globals_${n}`,where:{},tenantID:p,draft:h});if(n==="system"){let S=sr.randomBytes(32).toString("hex");I?I.appSecret||(await t.update({collection:`_globals_${n}`,id:n,data:{appSecret:S},tenantID:p}),I.appSecret=S):I=await t.create({collection:`_globals_${n}`,data:{id:n,appSecret:S},tenantID:p});}return o.json({data:I||{}})}catch(s){return o.json({error:s.message},500)}});let y=async o=>{try{let{user:s,tenantID:p}=await P(o.req.raw,D,l,u),b=await Y(r,"update",o.req.raw,s,p,T);if(!b.allowed)return o.json({error:b.error},b.status||403);let h=pt(await o.req.json()),I=Object.fromEntries(Object.entries(h).filter(([O,B])=>B!==null&&B!=="null"&&B!==void 0));me(I,r.fields),ge(r.fields,I);let S=e.getUpdateZodSchema(n),v;try{v=S.parse(I);}catch(O){return o.json({error:`Validation failed: ${_e(O.errors)}`,details:O.errors},400)}let x=new Set(["id","createdAt","updatedAt","status","baseUpdatedAt","_baseUpdatedAt"]),R=Object.fromEntries(Object.entries(v).filter(([O])=>!x.has(O))),q=`_globals_${n}`,j=await t.findOne({collection:q,where:{},tenantID:p,draft:!0}),E=o.req.header("X-Draft")==="true",$=r.versions?.drafts===!0,F=o.req.query("autosave")==="true",L;if($&&E)await t.createVersion({collection:q,documentId:n,data:R,status:"draft",autosave:F,createdBy:s?.id,changeDescription:F?"Autosave":"Manual save",tenantID:p}),j?L=j:L=await t.create({collection:q,data:{...R,id:n,status:"draft"},tenantID:p});else if($&&!E){let O="published";j?L=await t.update({collection:q,id:n,data:{...R,status:O},tenantID:p}):L=await t.create({collection:q,data:{...R,id:n,status:O},tenantID:p}),await t.createVersion({collection:q,documentId:n,data:R,status:O,autosave:!1,createdBy:s?.id,changeDescription:"Published",tenantID:p});}else j?L=await t.update({collection:q,id:n,data:R,tenantID:p}):L=await t.create({collection:q,data:{...R,id:n},tenantID:p});if(n==="storage-settings"&&(oe=null,le=null),n==="email-settings"){let O=await b$1.fromConfig(t);K.email=O||void 0;}return n==="system"&&await Tt(),s&&C?.createAuditLog({action:"settings_change",userId:s.id,resource:`global:${n}`,resourceId:n,success:!0}),o.json({data:L,message:"Updated successfully"})}catch(s){return console.error(`[API] Save global "${n}" failed:`,s),o.json({error:s.message||"Save failed",stack:process.env.NODE_ENV==="development"?s.stack:void 0},500)}};w.post(m,y),w.patch(m,y),w.post(`${m}/publish`,async o=>{try{let{user:s,tenantID:p}=await P(o.req.raw,D,l,u),b=await Y(r,"update",o.req.raw,s,p,T);if(!b.allowed)return o.json({error:b.error},403);let h=`_globals_${n}`,I=await t.findOne({collection:h,where:{},tenantID:p,draft:!0});if(!I)return o.json({error:"Global not found"},404);let S={status:"published"},v=I;if(r.versions?.drafts){let R=await t.findVersions({collection:h,documentId:n,limit:1,sort:"-createdAt",tenantID:p});R.docs.length>0&&(v={...I,...R.docs[0].data},S={...R.docs[0].data,...S});}let x=await t.update({collection:h,id:n,data:S,tenantID:p});return r.versions?.drafts&&await t.createVersion({collection:h,documentId:n,data:{...v,status:"published"},status:"published",createdBy:s?.id,changeDescription:"Published",tenantID:p}),o.json({data:x,message:"Published successfully"})}catch(s){return o.json({error:s.message},500)}}),w.post(`${m}/unpublish`,async o=>{try{let{user:s,tenantID:p}=await P(o.req.raw,D,l,u),b=await Y(r,"update",o.req.raw,s,p,T);if(!b.allowed)return o.json({error:b.error},403);let h=await t.update({collection:`_globals_${n}`,id:n,data:{status:"draft"},tenantID:p});return o.json({data:h,message:"Unpublished successfully"})}catch(s){return o.json({error:s.message},500)}}),w.get(`${m}/versions`,async o=>{try{let{user:s,tenantID:p}=await P(o.req.raw,D,l,u),b=await Y(r,"read",o.req.raw,s,p,T);if(!b.allowed)return o.json({error:b.error},403);let h=parseInt(o.req.query("limit")||"10"),I=parseInt(o.req.query("page")||"1"),S=await t.findVersions({collection:`_globals_${n}`,documentId:n,limit:h,page:I,tenantID:p});return o.json(S)}catch(s){return o.json({error:s.message},500)}}),w.get(`${m}/versions/:versionId`,async o=>{try{let s=o.req.param("versionId"),{user:p,tenantID:b}=await P(o.req.raw,D,l,u),h=await Y(r,"read",o.req.raw,p,b,T);if(!h.allowed)return o.json({error:h.error},403);let I=await t.findVersionByID({collection:`_globals_${n}`,versionId:s,tenantID:b});return I?o.json({data:I}):o.json({error:"Version not found"},404)}catch(s){return o.json({error:s.message},500)}}),w.post(`${m}/versions/:versionId/restore`,async o=>{try{let s=o.req.param("versionId"),{user:p,tenantID:b}=await P(o.req.raw,D,l,u),h=await Y(r,"update",o.req.raw,p,b,T);if(!h.allowed)return o.json({error:h.error},403);let I=`_globals_${n}`,S=await t.findVersionByID({collection:I,versionId:s,tenantID:b});if(!S)return o.json({error:"Version not found"},404);let v=await t.update({collection:I,id:n,data:{...S.data,status:"draft"},tenantID:b});return o.json({data:v,message:"Version restored successfully"})}catch(s){return o.json({error:s.message},500)}}),n==="email-settings"&&w.post(`${m}/test`,async o=>{try{let{user:s,tenantID:p}=await P(o.req.raw,D,l,u),b=await Y(r,"update",o.req.raw,s,p,T);if(!b.allowed)return o.json({error:b.error},b.status||403);let h=await o.req.json(),I={provider:h.provider,from:h.fromEmail||h.from,fromName:h.fromName,replyTo:h.replyTo,smtp:h.smtp?{host:h.smtp.host,port:h.smtp.port,secure:h.smtp.secure,auth:{user:h.smtp.username||h.smtp.user,pass:h.smtp.password||h.smtp.pass}}:void 0,resend:h.resend,sendgrid:h.sendgrid,mailgun:h.mailgun,ses:h.ses},S=new b$1(I),v=h.testEmail||h.testEmailSection&&h.testEmailSection.testEmail;return v?(await S.send({to:v,subject:"Kyro CMS - Test Email",html:`
66
- <div style="font-family: sans-serif; max-width: 600px; margin: 0 auto; padding: 20px; border: 1px solid #e2e8f0; border-radius: 8px;">
67
- <h1 style="color: #0b1222; margin-bottom: 16px;">Success! \u{1F680}</h1>
68
- <p style="font-size: 16px; color: #334155; line-height: 1.6;">
69
- Your email settings in <b>Kyro CMS</b> are working correctly.
70
- </p>
71
- <div style="background: #f8fafc; padding: 16px; border-radius: 6px; margin: 24px 0;">
72
- <p style="margin: 0; font-size: 14px; color: #64748b;">
73
- <b>Provider:</b> ${h.provider.toUpperCase()}
74
- </p>
75
- <p style="margin: 8px 0 0; font-size: 14px; color: #64748b;">
76
- <b>Sent at:</b> ${new Date().toLocaleString()}
77
- </p>
78
- </div>
79
- <p style="font-size: 12px; color: #94a3b8; margin-top: 32px; border-top: 1px solid #f1f5f9; padding-top: 16px;">
80
- This is a test email sent from the Kyro CMS Admin Panel.
81
- </p>
82
- </div>
83
- `,text:`Success! Your email settings in Kyro CMS are working correctly.
84
-
85
- Provider: ${h.provider}
86
- Sent at: ${new Date().toLocaleString()}`}),o.json({message:"Test email sent successfully!"})):o.json({error:"No test recipient email provided"},400)}catch(s){return console.error("[Email Test] Failed:",s),o.json({error:s.message||"Failed to send test email"},500)}});}return w.onError((r,n)=>(console.error(`[API Error] ${n.req.method} ${n.req.path}:`,r),n.json({error:r.message||"Internal server error",code:"INTERNAL_ERROR"},500))),w}function Nr(d,e,t){return Zt({registry:d,db:e,authSecret:t?.authSecret,user:t?.user,req:t?.req,tenantID:t?.tenantID,cors:t?.cors,webhookService:t?.webhookService})}export{Pr as a,Ur as b,qr as c,zt as d,pe as e,it as f,Kr as g,Tt as h,ar as i,zr as j,Pt as k,Ve as l,je as m,Ct as n,as as o,$t as p,ke as q,$e as r,Zt as s,Nr as t};