@kyro-cms/core 0.10.3 → 0.10.5

package/dist/chunk-ET6NN2V2.cjs

@@ -0,0 +1,122 @@
+'use strict';var c=require('bcryptjs'),crypto=require('crypto'),fs=require('fs'),path=require('path'),module$1=require('module');var _documentCurrentScript=typeof document!=='undefined'?document.currentScript:null;function _interopDefault(e){return e&&e.__esModule?e:{default:e}}var c__default=/*#__PURE__*/_interopDefault(c);var m=module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-ET6NN2V2.cjs', document.baseURI).href))),h="node:sqlite",{DatabaseSync:_}=m(h),g=5e3,S=1e3,k=-64e3,A=268435456,E=class{db=null;path;saltRounds;externalDb;busyTimeout;walAutoCheckpoint;cacheSize;mmapSize;preparedStatements=new Map;constructor(e={}){this.path=e.path||"./data/auth.db",this.saltRounds=e.saltRounds||12,this.externalDb=!!e.db,this.busyTimeout=e.busyTimeout??g,this.walAutoCheckpoint=e.walAutoCheckpoint??S,this.cacheSize=e.cacheSize??k,this.mmapSize=e.mmapSize??A,e.db&&(this.db=e.db);}async connect(){if(this.db)return;let e=path.dirname(this.path);e&&e!=="."&&fs.mkdirSync(e,{recursive:true}),this.db=new _(this.path),this.db.exec(`PRAGMA busy_timeout = ${this.busyTimeout}`),this.db.exec("PRAGMA journal_mode = WAL"),this.db.exec("PRAGMA synchronous = NORMAL"),this.db.exec("PRAGMA cache_size = "+this.cacheSize),this.db.exec("PRAGMA mmap_size = "+this.mmapSize),this.db.exec("PRAGMA wal_autocheckpoint = "+this.walAutoCheckpoint),this.db.exec("PRAGMA foreign_keys = ON"),this.db.exec("PRAGMA temp_store = MEMORY"),this.ensureTables(),this.prepareStatements();}async disconnect(){this.db&&!this.externalDb&&(this.db.exec("PRAGMA wal_checkpoint(TRUNCATE)"),this.db.close(),this.db=null,this.preparedStatements.clear());}async ensureConnected(){if(this.db||await this.connect(),!this.db)throw new Error("Failed to connect to SQLite database");return this.db}ensureTables(){if(this.db){this.db.exec(`
+      CREATE TABLE IF NOT EXISTS kyro_users (
+        id TEXT PRIMARY KEY,
+        name TEXT,
+        email TEXT UNIQUE NOT NULL,
+        password_hash TEXT NOT NULL,
+        role TEXT NOT NULL DEFAULT 'customer',
+        tenant_id TEXT,
+        email_verified INTEGER DEFAULT 0,
+        locked INTEGER DEFAULT 0,
+        last_login TEXT,
+        failed_login_attempts INTEGER DEFAULT 0,
+        locked_until TEXT,
+        avatar TEXT,
+        created_at TEXT NOT NULL,
+        updated_at TEXT NOT NULL
+      );
+
+      CREATE TABLE IF NOT EXISTS kyro_sessions (
+        id TEXT PRIMARY KEY,
+        user_id TEXT NOT NULL,
+        token TEXT NOT NULL,
+        refresh_token TEXT,
+        expires_at TEXT NOT NULL,
+        created_at TEXT NOT NULL,
+        ip_address TEXT,
+        user_agent TEXT,
+        FOREIGN KEY (user_id) REFERENCES kyro_users(id) ON DELETE CASCADE
+      );
+
+      CREATE TABLE IF NOT EXISTS kyro_password_history (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        user_id TEXT NOT NULL,
+        password_hash TEXT NOT NULL,
+        created_at TEXT NOT NULL,
+        FOREIGN KEY (user_id) REFERENCES kyro_users(id) ON DELETE CASCADE
+      );
+
+      CREATE TABLE IF NOT EXISTS kyro_rate_limits (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        key TEXT NOT NULL,
+        window_start INTEGER NOT NULL,
+        count INTEGER NOT NULL DEFAULT 1,
+        UNIQUE(key, window_start)
+      );
+
+      CREATE TABLE IF NOT EXISTS kyro_lockouts (
+        user_id TEXT PRIMARY KEY,
+        attempts INTEGER NOT NULL DEFAULT 0,
+        last_attempt INTEGER,
+        locked_at INTEGER,
+        locked_until INTEGER
+      );
+
+      CREATE TABLE IF NOT EXISTS kyro_audit_logs (
+        id TEXT PRIMARY KEY,
+        timestamp TEXT NOT NULL,
+        action TEXT NOT NULL,
+        user_id TEXT,
+        user_email TEXT,
+        role TEXT,
+        resource TEXT NOT NULL,
+        resource_id TEXT,
+        ip_address TEXT,
+        user_agent TEXT,
+        success INTEGER NOT NULL,
+        error TEXT,
+        metadata TEXT,
+        created_at TEXT NOT NULL DEFAULT (datetime('now'))
+      );
+
+      CREATE INDEX IF NOT EXISTS idx_kyro_users_email ON kyro_users(email);
+      CREATE INDEX IF NOT EXISTS idx_kyro_sessions_user_id ON kyro_sessions(user_id);
+      CREATE INDEX IF NOT EXISTS idx_kyro_sessions_token ON kyro_sessions(token);
+      CREATE INDEX IF NOT EXISTS idx_kyro_sessions_refresh_token ON kyro_sessions(refresh_token);
+      CREATE INDEX IF NOT EXISTS idx_kyro_sessions_expires ON kyro_sessions(expires_at);
+      CREATE INDEX IF NOT EXISTS idx_kyro_password_history_user_id ON kyro_password_history(user_id);
+      CREATE INDEX IF NOT EXISTS idx_kyro_rate_limits_key ON kyro_rate_limits(key);
+      CREATE INDEX IF NOT EXISTS idx_kyro_rate_limits_window ON kyro_rate_limits(window_start);
+      CREATE INDEX IF NOT EXISTS idx_kyro_lockouts_locked_until ON kyro_lockouts(locked_until);
+      CREATE INDEX IF NOT EXISTS idx_kyro_audit_logs_timestamp ON kyro_audit_logs(timestamp);
+      CREATE INDEX IF NOT EXISTS idx_kyro_audit_logs_action ON kyro_audit_logs(action);
+      CREATE INDEX IF NOT EXISTS idx_kyro_audit_logs_user_id ON kyro_audit_logs(user_id);
+      CREATE INDEX IF NOT EXISTS idx_kyro_audit_logs_resource ON kyro_audit_logs(resource);
+
+      CREATE TABLE IF NOT EXISTS kyro_email_verifications (
+        id TEXT PRIMARY KEY,
+        user_id TEXT NOT NULL,
+        token TEXT UNIQUE NOT NULL,
+        expires_at TEXT NOT NULL,
+        created_at TEXT NOT NULL DEFAULT (datetime('now')),
+        FOREIGN KEY (user_id) REFERENCES kyro_users(id) ON DELETE CASCADE
+      );
+
+      CREATE TABLE IF NOT EXISTS kyro_password_resets (
+        id TEXT PRIMARY KEY,
+        user_id TEXT NOT NULL,
+        token TEXT UNIQUE NOT NULL,
+        expires_at TEXT NOT NULL,
+        used_at TEXT,
+        created_at TEXT NOT NULL DEFAULT (datetime('now')),
+        FOREIGN KEY (user_id) REFERENCES kyro_users(id) ON DELETE CASCADE
+      );
+
+      CREATE INDEX IF NOT EXISTS idx_kyro_email_verifications_token ON kyro_email_verifications(token);
+      CREATE INDEX IF NOT EXISTS idx_kyro_password_resets_token ON kyro_password_resets(token);
+    `);try{this.db.exec("ALTER TABLE kyro_users ADD COLUMN name TEXT");}catch{}}}prepareStatements(){this.db&&(this.preparedStatements.set("findUserByEmail",this.db.prepare("SELECT * FROM kyro_users WHERE email = ?")),this.preparedStatements.set("findUserById",this.db.prepare("SELECT * FROM kyro_users WHERE id = ?")),this.preparedStatements.set("findSessionByToken",this.db.prepare("SELECT * FROM kyro_sessions WHERE token = ?")),this.preparedStatements.set("findSessionByRefreshToken",this.db.prepare("SELECT * FROM kyro_sessions WHERE refresh_token = ?")),this.preparedStatements.set("deleteSession",this.db.prepare("DELETE FROM kyro_sessions WHERE id = ? OR token = ?")),this.preparedStatements.set("deleteUserSessions",this.db.prepare("DELETE FROM kyro_sessions WHERE user_id = ?")),this.preparedStatements.set("countUsers",this.db.prepare("SELECT COUNT(*) as count FROM kyro_users")),this.preparedStatements.set("deleteUser",this.db.prepare("DELETE FROM kyro_users WHERE id = ?")),this.preparedStatements.set("findUsersPaginated",this.db.prepare("SELECT * FROM kyro_users ORDER BY created_at DESC LIMIT ? OFFSET ?")),this.preparedStatements.set("findUsersWithSearch",this.db.prepare("SELECT * FROM kyro_users WHERE email LIKE ? ORDER BY created_at DESC LIMIT ? OFFSET ?")),this.preparedStatements.set("countUsersWithSearch",this.db.prepare("SELECT COUNT(*) as count FROM kyro_users WHERE email LIKE ?")),this.preparedStatements.set("getPasswordHistory",this.db.prepare("SELECT password_hash FROM kyro_password_history WHERE user_id = ? ORDER BY created_at DESC LIMIT ?")),this.preparedStatements.set("addPasswordHistory",this.db.prepare("INSERT INTO kyro_password_history (user_id, password_hash, created_at) VALUES (?, ?, ?)")),this.preparedStatements.set("trimPasswordHistory",this.db.prepare(`DELETE FROM kyro_password_history WHERE id IN (
+          SELECT id FROM kyro_password_history WHERE user_id = ? ORDER BY created_at DESC LIMIT -1 OFFSET 5
+        )`)),this.preparedStatements.set("deleteExpiredSessions",this.db.prepare("DELETE FROM kyro_sessions WHERE expires_at < ?")),this.preparedStatements.set("cleanupOldAuditLogs",this.db.prepare("DELETE FROM kyro_audit_logs WHERE timestamp < ?")),this.preparedStatements.set("cleanupExpiredLockouts",this.db.prepare("UPDATE kyro_lockouts SET attempts = 0, locked_at = NULL, locked_until = NULL WHERE locked_until < ?")),this.preparedStatements.set("getLockout",this.db.prepare("SELECT * FROM kyro_lockouts WHERE user_id = ?")),this.preparedStatements.set("upsertLockout",this.db.prepare(`
+        INSERT INTO kyro_lockouts (user_id, attempts, last_attempt, locked_at, locked_until)
+        VALUES (?, ?, ?, ?, ?)
+        ON CONFLICT(user_id) DO UPDATE SET
+          attempts = excluded.attempts,
+          last_attempt = excluded.last_attempt,
+          locked_at = excluded.locked_at,
+          locked_until = excluded.locked_until
+      `)),this.preparedStatements.set("resetLockout",this.db.prepare("UPDATE kyro_lockouts SET attempts = 0, locked_at = NULL, locked_until = NULL WHERE user_id = ?")));}stmt(e){let s=this.preparedStatements.get(e);if(!s)throw new Error(`Prepared statement not found: ${e}`);return s}async cleanupExpiredSessions(){return await this.ensureConnected(),this.stmt("deleteExpiredSessions").run(new Date().toISOString()).changes}async cleanupOldAuditLogs(e=30){await this.ensureConnected();let s=new Date(Date.now()-e*24*60*60*1e3).toISOString();return this.stmt("cleanupOldAuditLogs").run(s).changes}async getStats(){await this.ensureConnected();let e=this.stmt("countUsers").get().count,s=this.db.prepare("SELECT COUNT(*) as count FROM kyro_sessions WHERE expires_at > ?").get(new Date().toISOString()).count,t=this.db.prepare("SELECT COUNT(*) as count FROM kyro_audit_logs").get().count;return {userCount:e,activeSessionCount:s,auditLogCount:t}}async createUser(e){await this.ensureConnected();let s=crypto.randomBytes(16).toString("hex"),t=new Date().toISOString(),r=await this.hashPassword(e.password),n={id:s,name:e.name,email:e.email.toLowerCase(),passwordHash:r,role:e.role||"customer",avatar:e.avatar,tenantId:e.tenantId,createdAt:t,updatedAt:t};return this.db.prepare(`INSERT INTO kyro_users (id, name, email, password_hash, role, avatar, tenant_id, created_at, updated_at)
+          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(s,n.name||null,n.email,n.passwordHash,n.role,n.avatar||null,n.tenantId||null,t,t),n}async findUserByEmail(e){await this.ensureConnected();let s=this.stmt("findUserByEmail").get(e.toLowerCase());return s?this.rowToUser(s):null}async findUserById(e){await this.ensureConnected();let s=this.stmt("findUserById").get(e);return s?this.rowToUser(s):null}async updateUser(e,s){if(await this.ensureConnected(),!await this.findUserById(e))return null;let r=[],n=[];return s.email!==void 0&&(r.push("email = ?"),n.push(s.email.toLowerCase())),s.name!==void 0&&(r.push("name = ?"),n.push(s.name)),s.passwordHash!==void 0&&(r.push("password_hash = ?"),n.push(s.passwordHash)),s.role!==void 0&&(r.push("role = ?"),n.push(s.role)),s.avatar!==void 0&&(r.push("avatar = ?"),n.push(s.avatar)),s.tenantId!==void 0&&(r.push("tenant_id = ?"),n.push(s.tenantId)),s.emailVerified!==void 0&&(r.push("email_verified = ?"),n.push(s.emailVerified?1:0)),s.locked!==void 0&&(r.push("locked = ?"),n.push(s.locked?1:0)),s.lastLogin!==void 0&&(r.push("last_login = ?"),n.push(s.lastLogin)),s.failedLoginAttempts!==void 0&&(r.push("failed_login_attempts = ?"),n.push(s.failedLoginAttempts)),r.push("updated_at = ?"),n.push(new Date().toISOString()),n.push(e),this.db.prepare(`UPDATE kyro_users SET ${r.join(", ")} WHERE id = ?`).run(...n),this.findUserById(e)}async deleteUser(e){return await this.ensureConnected(),this.stmt("deleteUser").run(e).changes>0}async hashPassword(e){return c__default.default.hash(e,this.saltRounds)}async verifyPassword(e,s){await this.ensureConnected();let t=await this.findUserByEmail(e);if(!t)return null;let r=this.db.prepare("SELECT password_hash FROM kyro_users WHERE id = ?").get(t.id);return r?.password_hash&&await c__default.default.compare(s,r.password_hash)?t:null}async createSession(e,s={}){await this.ensureConnected();let t=crypto.randomBytes(32).toString("hex"),r=crypto.randomBytes(32).toString("base64url"),n=crypto.randomBytes(32).toString("base64url"),d=new Date,u=new Date(d.getTime()+864e5).toISOString(),i={id:t,userId:e,token:r,refreshToken:n,expiresAt:u,createdAt:d.toISOString(),ipAddress:s.ipAddress,userAgent:s.userAgent};return this.db.prepare(`INSERT INTO kyro_sessions (id, user_id, token, refresh_token, expires_at, created_at, ip_address, user_agent)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?)`).run(i.id,i.userId,i.token,i.refreshToken??null,i.expiresAt,i.createdAt,i.ipAddress??null,i.userAgent??null),i}async findSessionByToken(e){await this.ensureConnected();let s=this.stmt("findSessionByToken").get(e);return s?this.rowToSession(s):null}async findSessionByRefreshToken(e){await this.ensureConnected();let s=this.stmt("findSessionByRefreshToken").get(e);return s?this.rowToSession(s):null}async deleteSession(e){return await this.ensureConnected(),this.stmt("deleteSession").run(e,e).changes>0}async deleteUserSessions(e){return await this.ensureConnected(),this.stmt("deleteUserSessions").run(e).changes}async hasAnyUsers(){return await this.ensureConnected(),this.stmt("countUsers").get().count>0}async findUsers(e={}){await this.ensureConnected();let s=e.page??1,t=e.limit??10,r=(s-1)*t,n=e.search,d,u;if(n){let i=`%${n}%`;d=this.stmt("countUsersWithSearch").get(i).count,u=this.stmt("findUsersWithSearch").all(i,t,r);}else d=this.stmt("countUsers").get().count,u=this.stmt("findUsersPaginated").all(t,r);return {users:u.map(i=>this.rowToUser(i)),total:d}}async addPasswordToHistory(e,s){await this.ensureConnected(),this.stmt("addPasswordHistory").run(e,s,new Date().toISOString()),this.stmt("trimPasswordHistory").run(e);}async getPasswordHistory(e,s=5){return await this.ensureConnected(),this.stmt("getPasswordHistory").all(e,s).map(r=>r.password_hash)}async isPasswordInHistory(e,s,t=5){let r=await this.getPasswordHistory(s,t);for(let n of r)if(await c__default.default.compare(e,n))return  true;return  false}async recordFailedAttempt(e){await this.ensureConnected();let s=Date.now(),t=this.stmt("getLockout").get(e),r=(t?.attempts||0)+1,n=r>=5?s+900*1e3:t?.locked_until||null;this.stmt("upsertLockout").run(e,r,s,n!==null?s:null,n);}async resetAttempts(e){await this.ensureConnected(),this.stmt("resetLockout").run(e);}async checkLockout(e){await this.ensureConnected(),this.stmt("cleanupExpiredLockouts").run(Date.now());let s=this.stmt("getLockout").get(e);return s?s.locked_until!==null&&s.locked_until>Date.now()?{locked:true,attemptsRemaining:0,lockedUntil:new Date(s.locked_until),totalAttempts:s.attempts}:{locked:false,attemptsRemaining:Math.max(0,5-s.attempts),totalAttempts:s.attempts}:{locked:false,attemptsRemaining:5,totalAttempts:0}}async logAudit(e){await this.ensureConnected();let s=crypto.randomBytes(16).toString("hex"),t=new Date().toISOString();return this.db.prepare(`INSERT INTO kyro_audit_logs (
+          id, timestamp, action, user_id, user_email, role, resource, resource_id,
+          ip_address, user_agent, success, error, metadata, created_at
+        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(s,t,e.action,e.userId||null,e.userEmail||null,e.role||null,e.resource,e.resourceId||null,e.ipAddress||null,e.userAgent||null,e.success?1:0,e.error||null,e.metadata?JSON.stringify(e.metadata):null,new Date().toISOString()),s}async queryAuditLogs(e={}){await this.ensureConnected();let s=[],t=[];e.action&&(s.push("action = ?"),t.push(e.action)),e.userId&&(s.push("user_id = ?"),t.push(e.userId)),e.resource&&(s.push("resource = ?"),t.push(e.resource)),e.success!==void 0&&(s.push("success = ?"),t.push(e.success?1:0)),e.startDate&&(s.push("timestamp >= ?"),t.push(e.startDate.toISOString())),e.endDate&&(s.push("timestamp <= ?"),t.push(e.endDate.toISOString()));let r=s.length>0?"WHERE "+s.join(" AND "):"",n=e.limit||50,d=e.offset||0,u=this.db.prepare(`SELECT COUNT(*) as count FROM kyro_audit_logs ${r}`).get(...t),i=this.db.prepare(`SELECT * FROM kyro_audit_logs ${r} ORDER BY timestamp DESC LIMIT ? OFFSET ?`).all(...t,n,d);return {total:u.count,logs:i.map(a=>({id:a.id,timestamp:new Date(a.timestamp),action:a.action,userId:a.user_id||void 0,userEmail:a.user_email||void 0,resource:a.resource,resourceId:a.resource_id||void 0,ipAddress:a.ip_address||void 0,userAgent:a.user_agent||void 0,success:a.success===1,error:a.error||void 0,metadata:a.metadata?JSON.parse(a.metadata):void 0}))}}rowToUser(e){return {id:e.id,name:e.name||void 0,email:e.email,passwordHash:e.password_hash,role:e.role,tenantId:e.tenant_id,avatar:e.avatar,emailVerified:e.email_verified===1,locked:e.locked===1,lastLogin:e.last_login,failedLoginAttempts:e.failed_login_attempts||0,createdAt:e.created_at,updatedAt:e.updated_at}}rowToSession(e){return {id:e.id,userId:e.user_id,token:e.token,refreshToken:e.refresh_token,expiresAt:e.expires_at,createdAt:e.created_at,ipAddress:e.ip_address,userAgent:e.user_agent}}async findAuditLogs(e){let s=await this.queryAuditLogs({action:e.action,userId:e.userId,resource:e.resource,success:e.success,startDate:e.startDate,endDate:e.endDate,limit:e.limit,offset:e.offset});return {logs:s.logs.map(t=>({...t,action:t.action})),total:s.total}}async createAuditLog(e){let s=await this.logAudit({action:e.action,userId:e.userId,userEmail:e.userEmail,role:e.role,resource:e.resource,resourceId:e.resourceId,ipAddress:e.ipAddress,userAgent:e.userAgent,success:e.success,error:e.error,metadata:e.metadata}),t=this.db?.prepare("SELECT * FROM kyro_audit_logs WHERE id = ?").get(s);return {...e,id:s,timestamp:t?new Date(t.timestamp):new Date}}async createEmailVerificationToken(e){await this.ensureConnected();let s=crypto.randomBytes(16).toString("hex"),t=crypto.randomBytes(32).toString("hex"),r=new Date(Date.now()+1440*60*1e3);return this.db.prepare("INSERT INTO kyro_email_verifications (id, user_id, token, expires_at, created_at) VALUES (?, ?, ?, ?, ?)").run(s,e,t,r.toISOString(),new Date().toISOString()),{token:t,expiresAt:r}}async verifyEmailToken(e){await this.ensureConnected();let s=this.db.prepare("SELECT * FROM kyro_email_verifications WHERE token = ?").get(e);return s?new Date(s.expires_at)<new Date?{success:false,error:"Verification token has expired"}:(this.db.prepare("UPDATE kyro_users SET email_verified = 1 WHERE id = ?").run(s.user_id),this.db.prepare("DELETE FROM kyro_email_verifications WHERE id = ?").run(s.id),{success:true,userId:s.user_id}):{success:false,error:"Invalid verification token"}}async createPasswordResetToken(e){await this.ensureConnected();let s=await this.findUserByEmail(e);if(!s)return {token:"",expiresAt:new Date,error:"User not found"};let t=crypto.randomBytes(16).toString("hex"),r=crypto.randomBytes(32).toString("hex"),n=new Date(Date.now()+3600*1e3);return this.db.prepare("INSERT INTO kyro_password_resets (id, user_id, token, expires_at, created_at) VALUES (?, ?, ?, ?, ?)").run(t,s.id,r,n.toISOString(),new Date().toISOString()),{token:r,expiresAt:n}}async resetPasswordWithToken(e,s){await this.ensureConnected();let t=this.db.prepare("SELECT * FROM kyro_password_resets WHERE token = ?").get(e);if(!t)return {success:false,error:"Invalid reset token"};if(new Date(t.expires_at)<new Date)return {success:false,error:"Reset token has expired"};if(t.used_at)return {success:false,error:"Reset token has already been used"};let r=await this.hashPassword(s);return this.db.prepare("UPDATE kyro_users SET password_hash = ?, updated_at = ? WHERE id = ?").run(r,new Date().toISOString(),t.user_id),this.db.prepare("UPDATE kyro_password_resets SET used_at = ? WHERE id = ?").run(new Date().toISOString(),t.id),this.db.prepare("DELETE FROM kyro_sessions WHERE user_id = ?").run(t.user_id),{success:true}}};exports.a=E;

package/dist/chunk-F3Z67QWS.cjs

@@ -0,0 +1,86 @@
+'use strict';var chunkAJAZ7D3W_cjs=require('./chunk-AJAZ7D3W.cjs'),chunkGFU7AOI3_cjs=require('./chunk-GFU7AOI3.cjs'),chunkET6NN2V2_cjs=require('./chunk-ET6NN2V2.cjs'),chunkHVXO3OFB_cjs=require('./chunk-HVXO3OFB.cjs'),chunkISWMETHJ_cjs=require('./chunk-ISWMETHJ.cjs'),chunkNY47CFVP_cjs=require('./chunk-NY47CFVP.cjs'),chunk6CLRVJPP_cjs=require('./chunk-6CLRVJPP.cjs'),chunkGYQMNXXW_cjs=require('./chunk-GYQMNXXW.cjs'),chunkUDSJGML2_cjs=require('./chunk-UDSJGML2.cjs'),chunkATLSIYRH_cjs=require('./chunk-ATLSIYRH.cjs'),chunkQ3Q7BJVQ_cjs=require('./chunk-Q3Q7BJVQ.cjs'),chunkAHSFSERC_cjs=require('./chunk-AHSFSERC.cjs'),sr=require('crypto'),unstorage=require('unstorage'),or=require('unstorage/drivers/fs'),hono=require('hono'),Ce=require('path'),fs=require('fs'),ct=require('sharp'),promises=require('fs/promises'),Ir=require('process'),clientS3=require('@aws-sdk/client-s3'),nodeHttpHandler=require('@smithy/node-http-handler'),stream=require('stream'),basicFtp=require('basic-ftp'),zodToJsonSchema=require('zod-to-json-schema');function _interopDefault(e){return e&&e.__esModule?e:{default:e}}var sr__default=/*#__PURE__*/_interopDefault(sr);var or__default=/*#__PURE__*/_interopDefault(or);var Ce__default=/*#__PURE__*/_interopDefault(Ce);var ct__default=/*#__PURE__*/_interopDefault(ct);var Ir__default=/*#__PURE__*/_interopDefault(Ir);function Kr(d){We=d;}async function Tt(){if(We)try{let d=await We.findOne({collection:"_globals_system",where:{}});if(d){te={appSecret:d.appSecret||null,encryptionKey:d.encryptionKey||null,sessionConfig:d.sessionMaxAge||d.maxSessionsPerUser?{maxAge:(d.sessionMaxAge||7)*24*60*60*1e3,maxSessionsPerUser:d.maxSessionsPerUser||3}:null};return}}catch{}te={appSecret:process.env.APP_SECRET||"development-secret-key",encryptionKey:null,sessionConfig:null};}function ar(){return te?.appSecret?te.appSecret:process.env.APP_SECRET||"development-secret-key"}function zr(){if(te?.encryptionKey)return te.encryptionKey;let d=ar();return sr__default.default.createHash("sha256").update(d).digest("hex")}function Pt(){return te?.sessionConfig?te.sessionConfig:{maxAge:10080*60*1e3,maxSessionsPerUser:3}}var We,te,Ve=chunkAHSFSERC_cjs.a(()=>{We=null,te=null;});var kt={};chunkAHSFSERC_cjs.b(kt,{SESSION_CONFIG:()=>ee,clearSessionCookie:()=>Ye,createSession:()=>Ze,deleteSession:()=>he,getClientIp:()=>Xe,getCurrentUser:()=>V,getSession:()=>ue,getSessionIdFromRequest:()=>G,getUserSessions:()=>ye,invalidateAllUserSessions:()=>cr,refreshSession:()=>Pe,setSessionCookie:()=>Ge,updateSessionName:()=>Qe,validateSession:()=>Te});async function re(){return De||(De=unstorage.createStorage({driver:or__default.default({base:".astro/sessions"})}),De)}function lr(){return sr__default.default.randomUUID()}function jt(d){let e="Unknown",t="Unknown",a="Unknown";return d.includes("Firefox")?e="Firefox":d.includes("Edg/")?e="Edge":d.includes("Chrome")?e="Chrome":d.includes("Safari")&&!d.includes("Chrome")&&(e="Safari"),d.includes("iPhone")?(t="iPhone",a="iOS"):d.includes("iPad")?(t="iPad",a="iOS"):d.includes("Mac")?(t="MacBook",a="macOS"):d.includes("Windows")?(t="Windows PC",a="Windows"):d.includes("Linux")?(t="Linux PC",a="Linux"):d.includes("Android")&&(t="Android Phone",a="Android"),{browser:e,device:t,platform:a}}function dr(d){if(!d?.userAgent)return "Session";let{browser:e,device:t}=jt(d.userAgent);return `${t} - ${e}`}function G(d){let e=d.headers.get("Cookie");return e&&Object.fromEntries(e.split("; ").map(a=>a.split("=")))[He]||null}function Xe(d){let e=d.headers.get("x-forwarded-for");return e?e.split(",")[0].trim():d.headers.get("x-real-ip")||"unknown"}function Ge(d,e){let t=new Headers(d.headers);return t.append("Set-Cookie",`${He}=${e}; HttpOnly; Path=/; Max-Age=${ee.absoluteMaxAge/1e3}; SameSite=Strict`),new Response(d.body,{status:d.status,statusText:d.statusText,headers:t})}function Ye(d){let e=new Headers(d.headers);return e.append("Set-Cookie",`${He}=; HttpOnly; Path=/; Max-Age=0; SameSite=Strict`),new Response(d.body,{status:d.status,statusText:d.statusText,headers:e})}async function Re(d){return await(await re()).getItem(`user:${d}`)||[]}async function Je(d,e){let t=await re();e.length>0?await t.setItem(`user:${d}`,e):await t.removeItem(`user:${d}`);}async function Ze(d,e){let t=await re(),a=await Re(d.id);for(;a.length>=ee.maxSessionsPerUser;){let A=a.shift();A&&await t.removeItem(`session:${A}`);}let i=lr(),c=Date.now(),l=e?.headers.get("user-agent"),u=e?Xe(e):"unknown",g=l?{userAgent:l,ip:u,...jt(l)}:{ip:u},f={id:i,userId:d.id,email:d.email,role:d.role,tenantId:d.tenantId,permissions:d.permissions,createdAt:c,expiresAt:c+ee.absoluteMaxAge,lastActivityAt:c,deviceInfo:g,sessionName:dr(g)};return await t.setItem(`session:${i}`,f,{ttl:Math.floor(ee.absoluteMaxAge/1e3)}),a.push(i),await Je(d.id,a),i}async function ue(d){return await(await re()).getItem(`session:${d}`)||null}async function Te(d){let e=await ue(d);return e?e.expiresAt<Date.now()?(await he(d),{valid:false,reason:"Session expired"}):{valid:true}:{valid:false,reason:"Session not found"}}async function Pe(d,e){let t=await re(),a=await ue(d);if(!a)return null;let i=Date.now(),c=a.expiresAt-i,l=a.deviceInfo;if(e){let f=Xe(e);f!==a.deviceInfo?.ip&&(l={...a.deviceInfo,ip:f});}let u={...a,lastActivityAt:i,expiresAt:c<ee.refreshThreshold?i+ee.absoluteMaxAge:a.expiresAt,deviceInfo:l},g=c<ee.refreshThreshold?ee.absoluteMaxAge:void 0;return await t.setItem(`session:${d}`,u,g?{ttl:Math.floor(g/1e3)}:void 0),u}async function he(d){let e=await re(),t=await ue(d);if(t){let i=(await Re(t.userId)).filter(c=>c!==d);await Je(t.userId,i);}await e.removeItem(`session:${d}`),await e.removeItem(`activity:${d}`);}async function cr(d){let e=await Re(d),t=await re();for(let a of e)await t.removeItem(`session:${a}`),await t.removeItem(`activity:${a}`);await Je(d,[]);}async function ye(d,e){let t=await Re(d),a=[];for(let i of t){let c=await ue(i);c&&a.push({id:c.id,sessionName:c.sessionName||"Session",deviceInfo:c.deviceInfo,createdAt:c.createdAt,lastActivityAt:c.lastActivityAt,currentSession:c.id===e});}return a.sort((i,c)=>c.lastActivityAt-i.lastActivityAt),a}async function Qe(d,e){let t=await ue(d);return t?(await(await re()).setItem(`session:${d}`,{...t,sessionName:e}),true):false}async function V(d){let e=G(d);if(!e||!(await Te(e)).valid)return null;let a=await ue(e);return a?(await Pe(e,d),a):null}var Ut,ee,He,De,Ue=chunkAHSFSERC_cjs.a(()=>{Ve();Ut=Pt(),ee={absoluteMaxAge:Ut.maxAge,maxSessionsPerUser:Ut.maxSessionsPerUser,refreshThreshold:300*1e3,activityDebounce:30*1e3,pollInterval:30*1e3},He="kyro-session",De=null;});Ue();function Et(d){let{db:t,userLookup:a}=d;return async function(c){let l=chunkNY47CFVP_cjs.f(c);if(l&&t){let g=await chunkNY47CFVP_cjs.e(l,t,a);if(g.valid&&g.user)return {user:g.user,tenantContext:qt(g.user),apiKeyContext:chunkNY47CFVP_cjs.g(g),status:200,authType:"apikey"};if(g.error)return {status:401,error:g.error}}let u=G(c);if(u)try{let g=await Te(u);if(!g.valid)return {status:401,error:g.reason||"Session invalid"};let f=await V(c);if(f){let A=a?await a(f.userId):null;if(A)return {user:A,tenantContext:qt(A),status:200,authType:"session"}}}catch(g){console.error("Session validation error:",g);}return {status:401,error:"Authentication required"}}}function qt(d){return {tenantId:d.tenantId||"default",userId:d.id||"anonymous",role:d.role||"guest",roles:[d.role||"guest"],permissions:[],isSuperAdmin:d.role==="super_admin"}}Ve();var je=class{storage=new Map;userStorage=new Map;limits;userLimits;constructor(e,t){this.limits={...ur,...e},this.userLimits=t||{"user:api":{window:6e4,max:500},"user:write":{window:36e5,max:100}};}getKey(e,t){return `${e}:${t}`}getUserKey(e,t,a){return `user:${e}:${t}:${a}`}cleanupOldEntries(e,t){let i=Date.now()-t;for(;e.length>0&&e[0].timestamp<i;)e.shift();}async check(e,t){let a=this.limits[e]||this.limits["api:general"],i=this.getKey(e,t),c=this.storage.get(i);c||(c=[],this.storage.set(i,c)),this.cleanupOldEntries(c,a.window);let l=Date.now(),u=c.reduce((g,f)=>g+f.count,0);if(c.push({timestamp:l,count:1}),u>=a.max){let f=c.reduce((A,w)=>A.timestamp<w.timestamp?A:w,c[0]).timestamp+a.window;return {allowed:false,remaining:0,resetAt:f,retryAfter:Math.ceil((f-l)/1e3)}}return {allowed:true,remaining:a.max-u-1,resetAt:l+a.window}}async checkUser(e,t,a){let i=this.userLimits[e]||this.userLimits["user:api"],c=this.userStorage.get(t),l=[];c?l=c.get(this.getKey(e,a))||[]:(this.userStorage.has(t)||this.userStorage.set(t,new Map),this.userStorage.get(t).set(this.getKey(e,a),l)),this.cleanupOldEntries(l,i.window);let u=Date.now(),g=l.reduce((f,A)=>f+A.count,0);if(l.push({timestamp:u,count:1}),g>=i.max){let A=l.reduce((w,U)=>w.timestamp<U.timestamp?w:U,l[0]).timestamp+i.window;return {allowed:false,remaining:0,resetAt:A,retryAfter:Math.ceil((A-u)/1e3)}}return {allowed:true,remaining:i.max-g-1,resetAt:u+i.window}}async reset(e,t){let a=this.getKey(e,t);this.storage.delete(a);}async resetUser(e,t,a){let i=this.userStorage.get(t);if(i){let c=this.getKey(e,a);i.delete(c);}}async getStatus(e,t){let a=this.limits[e]||this.limits["api:general"],i=this.getKey(e,t),c=this.storage.get(i);c||(c=[],this.storage.set(i,c)),this.cleanupOldEntries(c,a.window);let l=Date.now(),u=c.reduce((g,f)=>g+f.count,0);return {count:u,limit:a.max,remaining:Math.max(0,a.max-u),resetAt:l+a.window}}setLimit(e,t){this.limits[e]=t;}setUserLimit(e,t){this.userLimits[e]=t;}},ur={"auth:login":{window:9e5,max:5},"auth:register":{window:36e5,max:3},"auth:forgot":{window:36e5,max:3},"auth:reset":{window:36e5,max:5},"auth:verify":{window:36e5,max:5},"api:general":{window:6e4,max:100},"api:authenticated":{window:6e4,max:200}};var et={retentionDays:30};var Ct=class{redis;prefix;retentionDays;constructor(e,t=30,a="kyro:audit:"){this.redis=e,this.prefix=a,this.retentionDays=t;}async log(e){let t=sr.randomBytes(16).toString("hex"),a=new Date,i={...e,id:t,timestamp:a},c=this.getKeyForDate(a),l=`${this.prefix}log:${t}`;await this.redis.hset(l,this.serializeLog(i)),await this.redis.expire(l,this.retentionDays*24*60*60+3600),await this.redis.zadd(c,a.getTime(),t),await this.redis.expire(c,this.retentionDays*24*60*60+3600);let u=e.userId?`${this.prefix}user:${e.userId}`:null;return u&&(await this.redis.zadd(u,a.getTime(),t),await this.redis.expire(u,this.retentionDays*24*60*60+3600)),t}async get(e){let t=`${this.prefix}log:${e}`,a=await this.redis.hgetall(t);return !a||Object.keys(a).length===0?null:this.deserializeLog(a)}async query(e={}){let{limit:t=50,offset:a=0}=e,i=[];if(e.userId)i.push(`${this.prefix}user:${e.userId}`);else if(e.startDate||e.endDate)i=this.getKeysForDateRange(e.startDate,e.endDate);else {let g=new Date;i=this.getKeysForDateRange(new Date(g.getTime()-this.retentionDays*24*60*60*1e3),g);}let c=[];for(let g of i){let f=await this.redis.zrange(g,0,-1,"WITHSCORES");for(let A=0;A<f.length;A+=2)c.push([f[A],parseInt(f[A+1],10)]);}c.sort((g,f)=>f[1]-g[1]);let l=c.length;c=c.slice(a,a+t);let u=[];for(let[g]of c){let f=await this.get(g);f&&this.matchesFilter(f,e)&&u.push(f);}return {logs:u,total:l}}async getRecent(e=50){let t=[],a=new Date,i=this.getKeysForDateRange(new Date(a.getTime()-10080*60*1e3),a),c=[];for(let l of i){let u=await this.redis.zrange(l,0,-1,"WITHSCORES");for(let g=0;g<u.length;g+=2)c.push([u[g],parseInt(u[g+1],10)]);}c.sort((l,u)=>u[1]-l[1]);for(let[l]of c.slice(0,e)){let u=await this.get(l);u&&t.push(u);}return t}async getUserActivity(e,t=50){let a=`${this.prefix}user:${e}`,i=await this.redis.zrange(a,0,t-1),c=[];for(let l of i){let u=await this.get(l);u&&c.push(u);}return c}async getStats(e,t){let a=this.getKeysForDateRange(e||new Date(Date.now()-2592e6),t||new Date),i={},c=0,l=0,u=0,g=new Set;for(let f of a){let A=await this.redis.zrange(f,0,-1);for(let w of A){let U=await this.get(w);U&&(c++,i[U.action]=(i[U.action]||0)+1,U.success&&u++,U.action==="login_failed"&&l++,U.userId&&g.add(U.userId));}}return {totalEvents:c,byAction:i,successRate:c>0?u/c:1,failedLogins:l,uniqueUsers:g}}async cleanup(){let e=Date.now()-this.retentionDays*24*60*60*1e3,t=await this.redis.keys(`${this.prefix}date:*`),a=0;for(let i of t){let c=await this.redis.zrangebyscore(i,0,e);for(let l of c)await this.redis.del(`${this.prefix}log:${l}`),a++;await this.redis.zremrangebyscore(i,0,e);}return a}getKeyForDate(e){let t=e.getFullYear(),a=String(e.getMonth()+1).padStart(2,"0"),i=String(e.getDate()).padStart(2,"0");return `${this.prefix}date:${t}-${a}-${i}`}getKeysForDateRange(e,t){let a=[],i=e||new Date(Date.now()-this.retentionDays*24*60*60*1e3),c=t||new Date,l=new Date(i);for(;l<=c;)a.push(this.getKeyForDate(l)),l.setDate(l.getDate()+1);return a}matchesFilter(e,t){return !(t.action&&!(Array.isArray(t.action)?t.action:[t.action]).includes(e.action)||t.resource&&e.resource!==t.resource||t.resourceId&&e.resourceId!==t.resourceId||t.success!==void 0&&e.success!==t.success)}serializeLog(e){let t={id:e.id,timestamp:new Date(e.timestamp).toISOString(),action:e.action,resource:e.resource,success:e.success?"1":"0"};return e.userId&&(t.userId=e.userId),e.userEmail&&(t.userEmail=e.userEmail),e.role&&(t.role=e.role),e.resourceId&&(t.resourceId=e.resourceId),e.ipAddress&&(t.ipAddress=e.ipAddress),e.userAgent&&(t.userAgent=e.userAgent),e.error&&(t.error=e.error),e.changes&&(t.changes=JSON.stringify(e.changes)),e.metadata&&(t.metadata=JSON.stringify(e.metadata)),t}deserializeLog(e){return {id:e.id,timestamp:new Date(e.timestamp),action:e.action,userId:e.userId,userEmail:e.userEmail,role:e.role,resource:e.resource,resourceId:e.resourceId,ipAddress:e.ipAddress,userAgent:e.userAgent,success:e.success==="1",error:e.error,changes:e.changes?JSON.parse(e.changes):void 0,metadata:e.metadata?JSON.parse(e.metadata):void 0}}};function as(d){return {ipAddress:d.headers.get("x-forwarded-for")?.split(",")[0]?.trim()||d.headers.get("x-real-ip")||"unknown",userAgent:d.headers.get("user-agent")||"unknown"}}var $t=class{logs=[];retentionDays;constructor(e=et.retentionDays){this.retentionDays=e;}async log(e){let t=sr.randomBytes(16).toString("hex"),i={...e,id:t,timestamp:new Date};return this.logs.push(i),this.cleanupOldLogs(),t}async get(e){return this.logs.find(t=>t.id===e)||null}async query(e={}){let{limit:t=50,offset:a=0}=e,i=[...this.logs];if(e.userId&&(i=i.filter(f=>f.userId===e.userId)),e.action){let f=Array.isArray(e.action)?e.action:[e.action];i=i.filter(A=>f.includes(A.action));}e.resource&&(i=i.filter(f=>f.resource===e.resource)),e.resourceId&&(i=i.filter(f=>f.resourceId===e.resourceId)),e.success!==void 0&&(i=i.filter(f=>f.success===e.success));let c=e.startDate,l=e.endDate;c!==void 0&&(i=i.filter(f=>f.timestamp>=c)),l!==void 0&&(i=i.filter(f=>f.timestamp<=l)),i.sort((f,A)=>A.timestamp.getTime()-f.timestamp.getTime());let u=i.length;return {logs:i.slice(a,a+t),total:u}}async getRecent(e=50){let t=new Date(Date.now()-6048e5);return this.logs.filter(i=>i.timestamp>=t).sort((i,c)=>c.timestamp.getTime()-i.timestamp.getTime()).slice(0,e)}async getUserActivity(e,t=50){return this.logs.filter(i=>i.userId===e).sort((i,c)=>c.timestamp.getTime()-i.timestamp.getTime()).slice(0,t)}async getStats(e,t){let a=e||new Date(Date.now()-2592e6),i=t||new Date,c=this.logs.filter(w=>w.timestamp>=a&&w.timestamp<=i),l={},u=0,g=0,f=0,A=new Set;for(let w of c){u++;let U=w.action;l[U]=(l[U]||0)+1,w.success&&f++,w.action==="login_failed"&&g++,w.userId&&A.add(w.userId);}return {totalEvents:u,byAction:l,successRate:u>0?f/u:1,failedLogins:g,uniqueUsers:A}}async cleanup(){let e=new Date(Date.now()-this.retentionDays*24*60*60*1e3),t=this.logs.length;return this.logs=this.logs.filter(a=>a.timestamp>=e),t-this.logs.length}cleanupOldLogs(){let e=new Date(Date.now()-this.retentionDays*24*60*60*1e3);this.logs.length;this.logs=this.logs.filter(a=>a.timestamp>=e);}};Ue();var ke=class{authAdapter;email;passwordPolicy;lockout;rateLimiter;auditLogger;baseUrl;emailVerificationRequired;constructor(e){this.authAdapter=e.redis,this.email=e.email,this.passwordPolicy=e.passwordPolicy||new chunkAJAZ7D3W_cjs.c,this.lockout=e.lockout,this.rateLimiter=e.rateLimiter,this.auditLogger=e.auditLogger,this.baseUrl=e.baseUrl||"http://localhost:3000",this.emailVerificationRequired=e.emailVerificationRequired??true;}async register(e){let{ipAddress:t,userAgent:a}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let i=await this.rateLimiter.check("auth:register",t);if(!i.allowed)return this.rateLimitResponse(i)}try{let i=await e.json();if(!i.email||!i.password)return this.errorResponse("Email and password are required",400);if(i.password!==i.confirmPassword)return this.errorResponse("Passwords do not match",400);let c=this.passwordPolicy.validate(i.password);if(!c.valid)return this.errorResponse(c.errors.join(". "),400);if(await this.authAdapter.findUserByEmail(i.email))return this.errorResponse("Email already registered",400);let u=await this.authAdapter.createUser({email:i.email,password:i.password,role:i.role||"customer",tenantId:i.tenantId});if(this.emailVerificationRequired&&this.email){let g=sr.randomBytes(32).toString("hex"),f=`${this.baseUrl}/api/auth/verify?token=${g}`;await this.authAdapter.createSession(u.id,{ipAddress:t,userAgent:a});let A=this.email.getTemplates().verifyEmail(f,i.email);await this.email.send({to:i.email,...A});}return this.auditLogger&&await this.auditLogger.log({action:"register",userId:u.id,userEmail:u.email,resource:"auth",ipAddress:t,userAgent:a,success:!0}),this.jsonResponse({success:!0,message:"Registration successful",user:this.sanitizeUser(u),requiresVerification:this.emailVerificationRequired&&!!this.email},201)}catch(i){return console.error("[AuthRoutes.register] Registration error:",i),this.errorResponse("Registration failed",500)}}async login(e){let{ipAddress:t,userAgent:a}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let i=await this.rateLimiter.check("auth:login",t);if(!i.allowed)return this.rateLimitResponse(i)}try{let i=await e.json();if(!i.email||!i.password)return this.errorResponse("Email and password are required",400);let c=await this.authAdapter.findUserByEmail(i.email);if(!c)return await this.recordFailedLogin(t,a),this.errorResponse("Invalid credentials",401);if(c.locked)return this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:c.id,userEmail:c.email,resource:"auth",ipAddress:t,userAgent:a,success:!1,error:"Account locked"}),this.errorResponse("Account locked. Contact an administrator.",403);if(this.lockout){let A=await this.lockout.checkLockout(c.id);if(A.locked)return this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:c.id,userEmail:c.email,resource:"auth",ipAddress:t,userAgent:a,success:!1,error:"Account locked"}),this.errorResponse(`Account locked. Try again in ${Math.ceil((A.lockedUntil.getTime()-Date.now())/6e4)} minutes`,423)}if(!await this.authAdapter.verifyPassword(i.email,i.password))return await this.recordFailedLogin(t,a,c.id,c.email),this.errorResponse("Invalid credentials",401);this.lockout&&await this.lockout.resetAttempts(c.id),this.auditLogger&&await this.auditLogger.log({action:"login",userId:c.id,userEmail:c.email,role:c.role,resource:"auth",ipAddress:t,userAgent:a,success:!0}),await this.authAdapter.updateUser(c.id,{lastLogin:new Date().toISOString()});let u=await Ze({id:c.id,email:c.email,role:c.role,tenantId:c.tenantId}),g={success:!0,user:this.sanitizeUser(c)},f=this.jsonResponse(g);return Ge(f,u)}catch(i){return console.error("[Auth] Login error:",i),this.errorResponse("Login failed",500)}}async logout(e){let t=G(e);if(!t)return this.errorResponse("No session to logout",401);let{ipAddress:a,userAgent:i}=chunkHVXO3OFB_cjs.a(e);try{let c=await V(e);c&&(await he(t),this.auditLogger&&await this.auditLogger.log({action:"logout",userId:c.userId,userEmail:c.email,resource:"auth",ipAddress:a,userAgent:i,success:!0}));let l=this.jsonResponse({success:!0,message:"Logged out successfully"});return Ye(l)}catch{return this.errorResponse("Logout failed",500)}}async refresh(e){try{let t=G(e);if(!t)return this.errorResponse("Not authenticated",401);let a=await Pe(t,e);return a?this.jsonResponse({success:!0,expiresAt:a.expiresAt}):this.errorResponse("Session not found",404)}catch(t){return console.error("[Auth] Session refresh error:",t),this.errorResponse("Session refresh failed",500)}}async me(e){let t=await V(e);return t?this.jsonResponse({success:true,user:{id:t.userId,email:t.email,role:t.role,tenantId:t.tenantId}}):this.errorResponse("Not authenticated",401)}async changePassword(e){let t=await V(e);if(!t)return this.errorResponse("Not authenticated",401);let{ipAddress:a,userAgent:i}=chunkHVXO3OFB_cjs.a(e);try{let c=await e.json(),{currentPassword:l,newPassword:u,confirmPassword:g}=c;if(!l||!u)return this.errorResponse("Current and new password required",400);if(u!==g)return this.errorResponse("Passwords do not match",400);let f=this.passwordPolicy.validate(u);if(!f.valid)return this.errorResponse(f.errors.join(". "),400);let A=await this.authAdapter.findUserById(t.userId);if(!A)return this.errorResponse("User not found",404);if(!(A.passwordHash?await this.authAdapter.verifyPassword(l,A.passwordHash):!1))return this.errorResponse("Current password is incorrect",401);let U=await this.authAdapter.getPasswordHistory?.(A.id,5);if(await this.authAdapter.isPasswordInHistory?.(u,A.id,5))return this.errorResponse("Password was recently used. Please choose a different password",400);let k=await this.authAdapter.hashPassword(u);if(A.passwordHash&&await this.authAdapter.addPasswordToHistory?.(A.id,A.passwordHash),await this.authAdapter.updateUser(A.id,{passwordHash:k}),await this.authAdapter.deleteUserSessions(A.id),this.email&&this.email.getTemplates){let N=this.email.getTemplates().passwordChanged(A.email);await this.email.send({to:A.email,...N});}return this.auditLogger&&await this.auditLogger.log({action:"password_change",userId:A.id,userEmail:A.email,resource:"auth",ipAddress:a,userAgent:i,success:!0}),this.jsonResponse({success:!0,message:"Password changed successfully"})}catch{return this.errorResponse("Password change failed",500)}}async forgotPassword(e){let{ipAddress:t,userAgent:a}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let i=await this.rateLimiter.check("auth:forgot",t);if(!i.allowed)return this.rateLimitResponse(i)}try{let i=await e.json(),{email:c}=i;if(!c)return this.errorResponse("Email required",400);let l=await this.authAdapter.findUserByEmail(c);if(!l)return this.jsonResponse({success:!0,message:"If the email exists, a reset link has been sent"});if(this.email){let u=sr.randomBytes(32).toString("hex"),g=`${this.baseUrl}/api/auth/reset-password?token=${u}`,f=this.email.getTemplates().resetPassword(g,l.email);await this.email.send({to:l.email,...f});}return this.auditLogger&&await this.auditLogger.log({action:"password_reset",userId:l.id,userEmail:l.email,resource:"auth",ipAddress:t,userAgent:a,success:!0}),this.jsonResponse({success:!0,message:"If the email exists, a reset link has been sent"})}catch{return this.errorResponse("Password reset request failed",500)}}async verifyEmail(e){if(!new URL(e.url).searchParams.get("token"))return this.errorResponse("Verification token required",400);try{return this.jsonResponse({success:!0,message:"Email verified"})}catch{return this.errorResponse("Email verification failed",500)}}async recordFailedLogin(e,t,a,i){this.lockout&&await this.lockout.recordFailedAttempt(a||e),this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:a,userEmail:i,resource:"auth",ipAddress:e,userAgent:t,success:false,error:"Invalid credentials"});}sanitizeUser(e){let{passwordHash:t,...a}=e;return a}jsonResponse(e,t=200){return new Response(JSON.stringify(e),{status:t,headers:{"Content-Type":"application/json"}})}async listSessions(e){let t=await V(e);if(!t)return this.errorResponse("Not authenticated",401);try{let a=await ye(t.userId,G(e)??void 0);return this.jsonResponse({sessions:a})}catch(a){return console.error("[AuthRoutes.listSessions] Error:",a),this.errorResponse("Failed to list sessions",500)}}async revokeSession(e,t){let a=await V(e);if(!a)return this.errorResponse("Not authenticated",401);try{let c=(await ye(a.userId)).find(l=>l.id===t);return c?c.currentSession?this.errorResponse("Cannot revoke current session",400):(await he(t),this.jsonResponse({success:!0,message:"Session revoked"})):this.errorResponse("Session not found",404)}catch(i){return console.error("[AuthRoutes.revokeSession] Error:",i),this.errorResponse("Failed to revoke session",500)}}async revokeOtherSessions(e){let t=await V(e);if(!t)return this.errorResponse("Not authenticated",401);try{let a=await ye(t.userId),i=G(e);for(let c of a)c.currentSession||await he(c.id);return this.jsonResponse({success:!0,message:"Other sessions revoked"})}catch(a){return console.error("[AuthRoutes.revokeOtherSessions] Error:",a),this.errorResponse("Failed to revoke sessions",500)}}async renameSession(e,t){let a=await V(e);if(!a)return this.errorResponse("Not authenticated",401);try{if(!(await ye(a.userId)).find(g=>g.id===t))return this.errorResponse("Session not found",404);let l=await e.json(),{name:u}=l;return !u||typeof u!="string"||u.trim().length===0?this.errorResponse("Invalid session name",400):(await Qe(t,u.trim()),this.jsonResponse({success:!0,message:"Session renamed"}))}catch(i){return console.error("[AuthRoutes.renameSession] Error:",i),this.errorResponse("Failed to rename session",500)}}async refreshSession(e){let t=G(e);if(!t)return this.errorResponse("No session",401);try{let a=await(Ue(),chunkAHSFSERC_cjs.c(kt)).refreshSession(t,e);return a?this.jsonResponse({success:!0,expiresAt:a.expiresAt}):this.errorResponse("Session not found",404)}catch(a){return console.error("[AuthRoutes.refreshSession] Error:",a),this.errorResponse("Failed to refresh session",500)}}errorResponse(e,t){return new Response(JSON.stringify({success:false,error:e}),{status:t,headers:{"Content-Type":"application/json"}})}async rateLimitResponse(e){return new Response(JSON.stringify({success:false,error:"Too many requests",retryAfter:e.retryAfter}),{status:429,headers:{"Content-Type":"application/json","Retry-After":String(e.retryAfter||60)}})}};function pe(d){let{uploadDir:e=Ce.join(Ir__default.default.cwd(),"public","uploads"),baseUrl:t="/uploads"}=d;async function a(l){fs.existsSync(l)||await promises.mkdir(l,{recursive:true});}function i(l){let u=Ce.extname(l).toLowerCase();return {".jpg":"image/jpeg",".jpeg":"image/jpeg",".png":"image/png",".gif":"image/gif",".webp":"image/webp",".avif":"image/avif",".svg":"image/svg+xml",".mp4":"video/mp4",".webm":"video/webm",".mov":"video/quicktime",".avi":"video/x-msvideo",".mp3":"audio/mpeg",".wav":"audio/wav",".ogg":"audio/ogg",".pdf":"application/pdf",".doc":"application/msword",".docx":"application/vnd.openxmlformats-officedocument.wordprocessingml.document",".xls":"application/vnd.ms-excel",".xlsx":"application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",".zip":"application/zip",".tar":"application/x-tar",".gz":"application/gzip",".rar":"application/vnd.rar",".7z":"application/x-7z-compressed"}[u]||"application/octet-stream"}async function c(l){try{let u=l.toString("hex",0,8);if(u.startsWith("89504e47")){let g=l.readUInt32BE(16),f=l.readUInt32BE(20);return {width:g,height:f}}if(u.startsWith("ffd8")){let g=2;for(;g<l.length&&l[g]===255;){let f=l[g+1];if(f===192||f===194){let A=l.readUInt16BE(g+5);return {width:l.readUInt16BE(g+7),height:A}}g+=2+l.readUInt16BE(g+2);}}}catch{}return {}}return se({name:"local",displayName:"Local Storage",supportsDynamicResize:true,async upload(l,u){await a(e);let g=Buffer.from(await l.arrayBuffer()),f=sr.createHash("md5").update(g).digest("hex"),A=Ce.extname(l.name),w=u?.filename||`${f}${A}`,U=u?.folder||"",T=U?Ce.join(e,U):e;await a(T);let k=Ce.join(T,w);await promises.writeFile(k,g);let N=l.type.startsWith("image/")?await c(g):{},M=t||"/uploads",ae=U?`/${U}/${w}`:`/${w}`,C=M+ae;return {id:f,filename:w,originalName:l.name,mimeType:l.type||i(l.name),size:g.length,url:C,thumbnailUrl:l.type.startsWith("image/")?C:void 0,folder:U||void 0,provider:"local",metadata:{...N,...u?.metadata},createdAt:new Date().toISOString()}},async uploadFromUrl(l,u){let g=await fetch(l);if(!g.ok)throw new Error(`Failed to fetch file: ${g.statusText}`);let f=await g.blob(),A=g.headers.get("content-disposition"),w=u?.filename;if(!w&&A){let T=A.match(/filename[^;=\n]*=((['"]).*?\2|[^;\n]*)/);T&&(w=T[1].replace(/['"]/g,""));}w||(w=Ce.basename(new URL(l).pathname));let U=new File([f],w,{type:f.type||i(w)});return this.upload(U,u)},async delete(l){let u=Ce.join(e,l.replace(t+"/",""));try{await promises.unlink(u);}catch{}},async rename(l,u){let g=Ce.join(e,l.replace(t+"/","")),f=Ce.join(e,u);return await promises.rename(g,f),`${t}/${u}`},async list(l){let u=l?Ce.join(e,l):e;if(!fs.existsSync(u))return [];let g=[],f=await promises.readdir(u,{withFileTypes:true});for(let A of f)if(A.isFile()){let w=Ce.join(u,A.name),U=await promises.stat(w),T=`${t}${l?`/${l}`:""}/${A.name}`;g.push({id:sr.createHash("md5").update(A.name).digest("hex"),filename:A.name,originalName:A.name,mimeType:i(A.name),size:U.size,url:T,provider:"local",createdAt:U.birthtime.toISOString()});}return g},async exists(l){let u=Ce.join(e,l.replace(t+"/",""));return fs.existsSync(u)},async createFolder(l){let u=Ce.join(e,l);await promises.mkdir(u,{recursive:true});},async deleteFolder(l){let u=Ce.join(e,l);if(fs.existsSync(u)){let{rm:g}=await import('fs/promises');await g(u,{recursive:true,force:true});}}})}function tt(d){let e=(t,a)=>{if(!d.signKey)return t;let i=sr.createHmac("sha256",d.signKey).update(t+a.toString()).digest("hex");return a.set("s",i),t};return {name:"imgix",displayName:"Imgix",supportsDynamicResize:true,async upload(t,a){throw new Error("Imgix is a transformation service. Use another provider for uploads.")},async uploadFromUrl(t,a){let i=a?.filename||t.split("/").pop()||"file",c=await fetch(t);if(!c.ok)throw new Error(`Failed to fetch: ${c.statusText}`);let l=await c.blob();new File([l],i,{type:l.type});return {id:Buffer.from(t).toString("base64").slice(0,20),filename:i,originalName:i,mimeType:l.type,size:l.size,url:this.getImageUrl(t),thumbnailUrl:this.getImageUrl(t,{width:200,height:200,fit:"crop"}),provider:"imgix",createdAt:new Date().toISOString()}},async delete(t){},async rename(t,a){return `https://${d.domain}/${a}`},getImageUrl(t,a){let i=new URL(t),c=new URLSearchParams(i.search);d.defaultParameters&&Object.entries(d.defaultParameters).forEach(([u,g])=>{c.has(u)||c.set(u,g);}),a&&(a.width&&c.set("w",String(a.width)),a.height&&c.set("h",String(a.height)),a.quality&&c.set("q",String(a.quality)),a.format&&c.set("fm",a.format),a.fit&&c.set("fit",a.fit),a.blur&&c.set("blur",String(a.blur)),a.sharpen&&c.set("sharp",String(a.sharpen))),c.set("auto","compress,format");i.pathname+"?"+c.toString();return d.signKey&&(e(i.pathname+c.toString(),c)),`https://${d.domain}${i.pathname}${c.toString()?"?"+c.toString():""}`},async generateThumbnail(t){return this.getImageUrl(t.url,{width:200,height:200,fit:"crop"})},async list(){return []},async exists(t){try{return (await fetch(t,{method:"HEAD"})).ok}catch{return  false}},async createFolder(){},async deleteFolder(){}}}function Ee(d,e){return e.cdnUrl?`${e.cdnUrl.replace(/\/$/,"")}/${d}`:`https://${e.storageZone}.b-cdn.net/${d}`}function rt(d){return d.cdnUrl?d.cdnUrl.replace(/\/$/,"")+"/":`https://${d.storageZone}.b-cdn.net/`}function st(d){let e=`https://storage.bunnycdn.com/${d.storageZone}`,t=a=>`${d.prefix?`${d.prefix}/`:""}${a}`.replace(/\/+/g,"/");return se({name:"bunny",displayName:"Bunny.net Storage",supportsDynamicResize:true,async upload(a,i){let c=t(`${i?.folder?`${i.folder}/`:""}${i?.filename||a.name}`),l=Buffer.from(await a.arrayBuffer()),u=await fetch(`${e}/${c}`,{method:"PUT",headers:{AccessKey:d.apiKey,"Content-Type":a.type},body:l});if(!u.ok){let g=await u.text();throw new Error(`Bunny.net upload failed: ${u.status} ${g}`)}return {id:Buffer.from(c).toString("base64url"),filename:i?.filename||a.name,originalName:a.name,mimeType:a.type,size:l.length,url:Ee(c,d),thumbnailUrl:a.type.startsWith("image/")?Ee(c,d):void 0,folder:i?.folder,provider:"bunny",metadata:i?.metadata,createdAt:new Date().toISOString()}},async delete(a){let i=a.replace(rt(d),""),c=await fetch(`${e}/${i}`,{method:"DELETE",headers:{AccessKey:d.apiKey}});if(!c.ok&&c.status!==404){let l=await c.text();throw new Error(`Bunny.net delete failed: ${c.status} ${l}`)}},async rename(a,i){let c=a.replace(rt(d),""),l=d.prefix?`${d.prefix}/${i}`:i,u=await fetch(`${e}/${c}`,{method:"GET",headers:{AccessKey:d.apiKey}});if(!u.ok)throw new Error("Bunny.net rename failed: could not read old file");let g=await u.arrayBuffer();return await fetch(`${e}/${l}`,{method:"PUT",headers:{AccessKey:d.apiKey,"Content-Type":u.headers.get("Content-Type")||"application/octet-stream"},body:g}),await this.delete(a),Ee(l,d)},async list(a){let i=t(a||""),c=await fetch(`${e}/${i}`,{method:"GET",headers:{AccessKey:d.apiKey}});if(!c.ok){let u=await c.text();throw new Error(`Bunny.net list failed: ${c.status} ${u}`)}return (await c.json()).map(u=>({id:Buffer.from(u.ObjectName||"").toString("base64url"),filename:u.ObjectName?.split("/").pop()||"",originalName:u.ObjectName?.split("/").pop()||"",mimeType:"application/octet-stream",size:u.Length||0,url:Ee(u.ObjectName||"",d),provider:"bunny",createdAt:u.LastChanged||new Date().toISOString()}))},async exists(a){let i=a.replace(rt(d),"");return (await fetch(`${e}/${i}`,{method:"HEAD",headers:{AccessKey:d.apiKey}})).ok},async createFolder(a){let i=t(`${a}/`);await fetch(`${e}/${i}`,{method:"PUT",headers:{AccessKey:d.apiKey,"Content-Length":"0"},body:""});},async deleteFolder(a){let i=t(`${a}/`);await fetch(`${e}/${i}`,{method:"DELETE",headers:{AccessKey:d.apiKey}});}})}var nt=class{providers=new Map;providerToPlugin=new Map;disabledPlugins=new Set;constructor(){this.registerLocal(),this.registerImgix(),this.registerBunny();}registerLocal(){this.register({type:"local",displayName:"Local Server",configKey:"local",configFields:[{name:"uploadDir",type:"text",label:"Upload Directory",defaultValue:"./public/uploads"},{name:"baseUrl",type:"text",label:"Base URL",defaultValue:"/uploads"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>{let t=e?.local||e,a=(t?.uploadDir||"").trim(),i;a?Ce__default.default.isAbsolute(a)?i=a:a.includes("/")||a.includes("\\")?i=Ce__default.default.resolve(process.cwd(),a):i=Ce__default.default.join(process.cwd(),"public",a):i=Ce__default.default.join(process.cwd(),"public","uploads");let c=(t?.baseUrl||"").trim(),l;return c?l=c.startsWith("/")?c:`/${c}`:l="/uploads",{uploadDir:i,baseUrl:l}},factory:e=>pe(e)});}registerImgix(){this.register({type:"imgix",displayName:"Imgix",configKey:"imgix",configFields:[{name:"domain",type:"text",label:"Domain",required:true},{name:"signKey",type:"password",label:"Sign Key"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>e?.imgix||e,factory:e=>tt(e)});}registerBunny(){this.register({type:"bunny",displayName:"Bunny.net",configKey:"bunny",configFields:[{name:"storageZone",type:"text",label:"Storage Zone",required:true},{name:"apiKey",type:"password",label:"API Key",required:true},{name:"cdnUrl",type:"text",label:"CDN URL"},{name:"prefix",type:"text",label:"Path Prefix"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>e?.bunny||e,factory:e=>st(e)});}register(e){if(this.providers.has(e.type)){console.warn(`[StorageRegistry] Provider "${e.type}" already registered, skipping`);return}e.pluginName&&this.providerToPlugin.set(e.type,e.pluginName),this.providers.set(e.type,e);}unregister(e){this.providers.delete(e),this.providerToPlugin.delete(e);}get(e){return this.providers.get(e)}getAll(){return Array.from(this.providers.values())}getAllAvailable(e){let t=this.getAll();return e?t.filter(a=>a.pluginName?e(a.pluginName):true):t}has(e){return this.providers.has(e)}async resolve(e,t){let a=this.providers.get(e);if(!a)throw new Error(`Unknown storage provider type: "${e}". Is the plugin that provides it enabled?`);if(a.pluginName&&this.disabledPlugins.has(a.pluginName))throw new Error(`Storage provider "${e}" is not available (plugin "${a.pluginName}" is disabled)`);let i=a.configKey||e,c=a.extractConfig(t,i);return a.factory(c)}async resolveWithConfig(e,t){let a=this.providers.get(e);if(!a)throw new Error(`Unknown storage provider type: "${e}". Is the plugin that provides it enabled?`);if(a.pluginName&&this.disabledPlugins.has(a.pluginName))throw new Error(`Storage provider "${e}" is not available (plugin "${a.pluginName}" is disabled)`);let i=a.extractRawConfig(t);return a.factory(i)}getProviderPluginName(e){return this.providerToPlugin.get(e)}getAllPluginNames(){return Array.from(new Set(this.providerToPlugin.values()))}setPluginEnabled(e,t){t?this.disabledPlugins.delete(e):this.disabledPlugins.add(e);}isPluginEnabled(e){return !this.disabledPlugins.has(e)}},at=null;function it(){return at||(at=new nt),at}function Kt(d){if(!d)return "";if(d.startsWith("pub-"))return d;let e=d.match(/pub-[a-zA-Z0-9]+/i);return e?e[0]:""}function Rr(d,e){let t=d.startsWith("/")?d.slice(1):d;if(e.cdnUrl)return `${e.cdnUrl.replace(/\/$/,"")}/${t}`;switch(e.provider){case "r2":{let a=Kt(e.publicDevUrl);return a?`https://${a}.r2.dev/${t}`:`https://${e.bucket}.${e.accountId}.r2.cloudflarestorage.com/${t}`}case "gcs":return `https://storage.googleapis.com/${e.bucket}/${t}`;case "digitalocean":return `https://${e.bucket}.${e.region}.cdn.digitaloceanspaces.com/${t}`;case "backblaze":return `https://${e.bucket}.s3.backblazeb2.com/${t}`;case "wasabi":return `https://${e.bucket}.s3.wasabisys.com/${t}`;default:return `https://${e.bucket}.s3.${e.region}.amazonaws.com/${t}`}}function lt(d){if(d.cdnUrl)return d.cdnUrl.replace(/\/$/,"")+"/";switch(d.provider){case "r2":{let e=Kt(d.publicDevUrl);return e?`https://${e}.r2.dev/`:`https://${d.bucket}.${d.accountId}.r2.cloudflarestorage.com/`}case "gcs":return `https://storage.googleapis.com/${d.bucket}/`;case "digitalocean":return `https://${d.bucket}.${d.region}.cdn.digitaloceanspaces.com/`;case "backblaze":return `https://${d.bucket}.s3.backblazeb2.com/`;case "wasabi":return `https://${d.bucket}.s3.wasabisys.com/`;default:return `https://${d.bucket}.s3.${d.region}.amazonaws.com/`}}function Tr(d){switch(d){case "r2":return "Cloudflare R2";case "gcs":return "Google Cloud Storage";case "digitalocean":return "DigitalOcean Spaces";case "backblaze":return "Backblaze B2";case "wasabi":return "Wasabi";default:return "AWS S3"}}function Pr(d){let e=new clientS3.S3Client({region:d.region||"auto",endpoint:d.endpoint,credentials:{accessKeyId:d.accessKeyId,secretAccessKey:d.secretAccessKey},forcePathStyle:true,tls:true,...d.provider==="r2"&&{requestHandler:new nodeHttpHandler.NodeHttpHandler({connectionTimeout:1e4,socketTimeout:1e4})}}),t=i=>`${d.prefix?`${d.prefix}/`:""}${i}`.replace(/\/+/g,"/"),a=i=>Rr(i,d);return se({name:d.provider,displayName:Tr(d.provider),supportsDynamicResize:true,async upload(i,c){let l=t(`${c?.folder?`${c.folder}/`:""}${c?.filename||i.name}`),u=Buffer.from(await i.arrayBuffer());await e.send(new clientS3.PutObjectCommand({Bucket:d.bucket,Key:l,Body:u,ContentType:i.type,Metadata:c?.metadata}));let g=await e.send(new clientS3.HeadObjectCommand({Bucket:d.bucket,Key:l}));return {id:Buffer.from(l).toString("base64url"),filename:c?.filename||i.name,originalName:i.name,mimeType:i.type,size:u.length,url:a(l),thumbnailUrl:i.type.startsWith("image/")?a(l):void 0,folder:c?.folder,provider:d.provider,metadata:{...c?.metadata,etag:g.ETag},createdAt:new Date().toISOString()}},async delete(i){let c=i.replace(lt(d),"");await e.send(new clientS3.DeleteObjectCommand({Bucket:d.bucket,Key:c}));},async rename(i,c){let l=i.replace(lt(d),""),u=d.prefix?`${d.prefix}/${c}`:c;return await e.send(new clientS3.CopyObjectCommand({Bucket:d.bucket,CopySource:`${d.bucket}/${l}`,Key:u})),await e.send(new clientS3.DeleteObjectCommand({Bucket:d.bucket,Key:l})),a(u)},async list(i){let c=t(i||"");return ((await e.send(new clientS3.ListObjectsV2Command({Bucket:d.bucket,Prefix:c}))).Contents||[]).map(u=>({id:Buffer.from(u.Key||"").toString("base64url"),filename:u.Key?.split("/").pop()||"",originalName:u.Key?.split("/").pop()||"",mimeType:"application/octet-stream",size:u.Size||0,url:a(u.Key||""),provider:d.provider,createdAt:u.LastModified?.toISOString()||new Date().toISOString()}))},async exists(i){try{let c=i.replace(lt(d),"");return await e.send(new clientS3.HeadObjectCommand({Bucket:d.bucket,Key:c})),!0}catch{return  false}},async createFolder(i){let c=t(`${i}/`);await e.send(new clientS3.PutObjectCommand({Bucket:d.bucket,Key:c,Body:""}));},async deleteFolder(i){let c=t(`${i}/`),l;do{let u=await e.send(new clientS3.ListObjectsV2Command({Bucket:d.bucket,Prefix:c,ContinuationToken:l}));if(u.Contents?.length){let g=u.Contents.map(f=>({Key:f.Key}));await e.send(new clientS3.DeleteObjectsCommand({Bucket:d.bucket,Delete:{Objects:g}}));}l=u.IsTruncated?u.NextContinuationToken:void 0;}while(l);await e.send(new clientS3.DeleteObjectCommand({Bucket:d.bucket,Key:c}));}})}function Ur(d){let e=()=>`https://api.cloudinary.com/v1_1/${d.cloudName}/upload`,t=async a=>{let i=await import('crypto'),c=Object.keys(a).sort().map(l=>`${l}=${a[l]}`).join("&");return i.createHash("sha256").update(c+d.apiSecret).digest("hex")};return {name:"cloudinary",displayName:"Cloudinary",supportsDynamicResize:true,async upload(a,i){let c=new FormData;if(c.append("file",a),d.uploadPreset)c.append("upload_preset",d.uploadPreset);else {let g=Math.round(Date.now()/1e3),f={timestamp:String(g)};(i?.folder||d.folder)&&(f.folder=i?.folder||d.folder||"");let A=await t(f);c.append("timestamp",String(g)),c.append("signature",A),c.append("api_key",d.apiKey);}(i?.folder||d.folder)&&c.append("folder",i?.folder||d.folder||"");let l=await fetch(e(),{method:"POST",body:c});if(!l.ok){let g=await l.json();throw new Error(`Cloudinary upload failed: ${g.error?.message||l.statusText}`)}let u=await l.json();return {id:u.public_id,filename:`${u.public_id}.${u.format}`,originalName:u.original_filename||a.name,mimeType:a.type||`image/${u.format}`,size:u.bytes,url:u.secure_url,thumbnailUrl:this.getImageUrl(u.secure_url,{width:200,height:200,fit:"crop"}),width:u.width,height:u.height,folder:i?.folder||d.folder,provider:"cloudinary",createdAt:new Date().toISOString()}},async uploadFromUrl(a,i){let c=new FormData;c.append("file",a),c.append("upload_preset","ml_default"),(i?.folder||d.folder)&&c.append("folder",i?.folder||d.folder||"");let l=await fetch(e(),{method:"POST",body:c});if(!l.ok)throw new Error("Cloudinary upload failed");let u=await l.json();return {id:u.public_id,filename:`${u.public_id}.${u.format}`,originalName:u.original_filename||a.split("/").pop()||"file",mimeType:`image/${u.format}`,size:u.bytes,url:u.secure_url,thumbnailUrl:this.getImageUrl(u.secure_url,{width:200,height:200,fit:"crop"}),width:u.width,height:u.height,provider:"cloudinary",createdAt:new Date().toISOString()}},async delete(a){try{let i=a.split("/image/upload/");if(i.length!==2){console.warn("[Cloudinary delete] Could not parse URL:",a);return}let c=i[1].replace(/^v\d+\//,"").replace(/\.[^.]+$/,""),l=Math.round(Date.now()/1e3),u={timestamp:String(l),public_id:c},g=Object.keys(u).sort().map(k=>`${k}=${u[k]}`).join("&"),A=(await import('crypto')).createHash("sha256").update(g+d.apiSecret).digest("hex"),w=`https://api.cloudinary.com/v1_1/${d.cloudName}/image/destroy`,U=new FormData;U.append("public_id",c),U.append("timestamp",String(l)),U.append("signature",A),U.append("api_key",d.apiKey);let T=await fetch(w,{method:"POST",body:U});if(!T.ok){let k=await T.json();console.warn("[Cloudinary delete] Failed:",k);}}catch(i){console.warn("[Cloudinary delete] Error:",i.message);}},async rename(a,i){let c="",l=i.replace(/\.[^.]+$/,""),u="";try{let g=a.split("/image/upload/");if(g.length!==2)return console.warn("[Cloudinary rename] Could not parse old URL:",a),a;let f=g[1],A=f.match(/^(v\d+)\//);c=A?A[1]:"";let w=f.replace(/^v\d+\//,"").replace(/\.[^.]+$/,""),U=w.split("/");u=U.length>1?U.slice(0,-1).join("/"):"";let T=i.replace(/\.[^.]+$/,"");l=u?`${u}/${T}`:T;let k=Math.round(Date.now()/1e3),N={from_public_id:w,to_public_id:l,timestamp:String(k)},M=Object.keys(N).sort().map(D=>`${D}=${N[D]}`).join("&"),C=(await import('crypto')).createHash("sha256").update(M+d.apiSecret).digest("hex"),X=new FormData;X.append("from_public_id",w),X.append("to_public_id",l),X.append("timestamp",String(k)),X.append("signature",C),X.append("api_key",d.apiKey);let J=await fetch(`https://api.cloudinary.com/v1_1/${d.cloudName}/image/rename`,{method:"POST",body:X});if(J.ok)return (await J.json()).secure_url;{let D=await J.json();console.warn("[Cloudinary rename] Failed:",D);let Z=c?`/${c}/`:"/";return `https://res.cloudinary.com/${d.cloudName}/image/upload${Z}${l}.${i.split(".").pop()}`}}catch(g){console.warn("[Cloudinary rename] Error:",g.message);let f=c?`/${c}/`:"/";return `https://res.cloudinary.com/${d.cloudName}/image/upload${f}${l}.${i.split(".").pop()}`}},getImageUrl(a,i){if(!i)return a;let c=a.split("/upload/");if(c.length!==2)return a;let l=[];if(i.width&&l.push(`w_${i.width}`),i.height&&l.push(`h_${i.height}`),i.fit){let g={crop:"c_fill",clip:"c_fit",scale:"c_scale",fill:"c_fill"};l.push(g[i.fit]||"c_limit");}i.quality&&l.push(`q_${i.quality}`),i.format&&l.push(`f_${i.format}`);let u=l.join(",");return `${c[0]}/upload/${u}/${c[1]}`},async generateThumbnail(a){return this.getImageUrl(a.url,{width:200,height:200,fit:"crop"})},async list(){return []},async exists(a){return (await fetch(a,{method:"HEAD"})).ok},async createFolder(){},async deleteFolder(){}}}function qr(d){let e=null;async function t(){return e||(e=new basicFtp.Client(6e4,{allowSeparateTransferHost:true}),e.ftp.verbose=false,await e.access({host:d.host,port:d.port||21,user:d.user,password:d.password,secure:d.secure,secureOptions:{}})),e}let a=l=>`${d.prefix?`${d.prefix}/`:""}${l}`.replace(/\/+/g,"/"),i=l=>`${d.baseUrl.replace(/\/$/,"")}/${l}`,c=()=>d.baseUrl.replace(/\/$/,"")+"/";return se({name:d.type,displayName:d.type==="sftp"?"SFTP Storage":"FTP Storage",supportsDynamicResize:false,async upload(l,u){let g=await t(),f=a(`${u?.folder?`${u.folder}/`:""}${u?.filename||l.name}`),A=Buffer.from(await l.arrayBuffer()),w=f.split("/").slice(0,-1),U="";for(let k of w){U=U?`${U}/${k}`:k;try{await g.ensureDir(U);}catch{}}let T=stream.Readable.from(A);return await g.uploadFrom(T,f),{id:Buffer.from(f).toString("base64url"),filename:u?.filename||l.name,originalName:l.name,mimeType:l.type,size:A.length,url:i(f),thumbnailUrl:l.type.startsWith("image/")?i(f):void 0,folder:u?.folder,provider:d.type,metadata:u?.metadata,createdAt:new Date().toISOString()}},async delete(l){let u=await t(),g=l.replace(c(),"");await u.remove(g);},async rename(l,u){let g=await t(),f=l.replace(c(),""),A=d.prefix?`${d.prefix}/${u}`:u;return await g.rename(f,A),i(A)},async list(l){let u=await t(),g=a(l||""),f;try{f=await u.list(g);}catch{return []}return f.filter(A=>A.type===0).map(A=>({id:Buffer.from(`${g}/${A.name}`).toString("base64url"),filename:A.name,originalName:A.name,mimeType:"application/octet-stream",size:Number(A.size)||0,url:i(`${g}/${A.name}`.replace(/\/+/g,"/")),provider:d.type,createdAt:A.modifiedAt?A.modifiedAt.toISOString():new Date().toISOString()}))},async exists(l){let u=await t(),g=l.replace(c(),"");try{return await u.size(g),!0}catch{return  false}},async createFolder(l){let u=await t(),g=a(l);await u.ensureDir(g);},async deleteFolder(l){let u=await t(),g=a(l);await u.removeDir(g);}})}async function zt(d){let e=d.getStorageConfig(),t=it();try{return await t.resolve(e.type,e)}catch(a){return console.warn(`[resolveProvider] ${a.message} \u2014 falling back to local storage`),pe({uploadDir:Ce__default.default.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"})}}function se(d){return {async uploadFromUrl(e,t){let a=await fetch(e);if(!a.ok)throw new Error(`Failed to fetch: ${a.statusText}`);let i=await a.blob(),c=e.split("/").pop()||"file",l=new File([i],c,{type:i.type});return this.upload(l,t)},getImageUrl(e,t){if(!t||Object.keys(t).length===0)return e;let a=new URLSearchParams({url:e});return t.width&&a.set("w",String(t.width)),t.height&&a.set("h",String(t.height)),t.quality&&a.set("q",String(t.quality)),t.format&&a.set("f",t.format),`/api/media/resize?${a.toString()}`},async generateThumbnail(e){return this.getImageUrl(e.url,{width:400,height:400})},...d}}async function Wt(d){if(!d)return console.warn("[resolveProviderWithConfig] No config, using local"),pe({uploadDir:Ce__default.default.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"});let e=d.type||"local",t=it();try{return await t.resolveWithConfig(e,d)}catch(a){return console.warn(`[resolveProviderWithConfig] ${a.message} \u2014 falling back to local storage`),pe({uploadDir:Ce__default.default.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"})}}async function Vt(d){let e=await ct__default.default(d).metadata(),t=ct__default.default(d).webp({quality:85}),a=ct__default.default(d).resize({width:500,withoutEnlargement:true}).webp({quality:80});return {buffer:await t.toBuffer(),thumbnailBuffer:await a.toBuffer(),width:e.width,height:e.height,format:"webp"}}var Ht=false,$e=class d{db;storage;dialect;genId;mediaTable="media";foldersTable="media_folders";constructor(e,t,a){this.db=e,this.storage=t,this.dialect=a?.dialect||"sqlite",this.genId=a?.genId||chunk6CLRVJPP_cjs.e;}static async init(e,t){let a;if(t?.storageConfig)a=await Wt(t.storageConfig);else {let c=new chunkAJAZ7D3W_cjs.a(e);await c.load(),a=await zt(c);}let i=new d(e,a,t);return await i.ensureTables(),i}async ensureTables(){if(this.dialect==="sqlite")this.db.exec(`
+        CREATE TABLE IF NOT EXISTS media (
+          id TEXT PRIMARY KEY,
+          filename TEXT NOT NULL UNIQUE,
+          title TEXT,
+          original_name TEXT NOT NULL,
+          mime_type TEXT NOT NULL,
+          file_size INTEGER NOT NULL,
+          width INTEGER,
+          height INTEGER,
+          url TEXT NOT NULL UNIQUE,
+          thumbnail_url TEXT,
+          folder TEXT,
+          provider TEXT NOT NULL,
+          alt TEXT,
+          caption TEXT,
+          metadata TEXT,
+          created_at TEXT NOT NULL,
+          updated_at TEXT NOT NULL
+        );
+        CREATE INDEX IF NOT EXISTS idx_media_folder ON media(folder);
+        CREATE INDEX IF NOT EXISTS idx_media_provider ON media(provider);
+        CREATE INDEX IF NOT EXISTS idx_media_filename ON media(filename);
+      `),this.db.exec(`
+        CREATE TABLE IF NOT EXISTS media_folders (
+          id TEXT PRIMARY KEY,
+          name TEXT NOT NULL,
+          path TEXT NOT NULL,
+          parent_path TEXT,
+          created_at TEXT
+        );
+        CREATE INDEX IF NOT EXISTS idx_media_folders_path ON media_folders(path);
+      `);else if(this.dialect==="postgres"){if(Ht)return;let{sql:e}=await import('drizzle-orm');await this.db.execute(e`
+        CREATE TABLE IF NOT EXISTS "media" (
+          "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+          "filename" VARCHAR(255) NOT NULL UNIQUE,
+          "title" VARCHAR(255),
+          "original_name" VARCHAR(255) NOT NULL,
+          "mime_type" VARCHAR(100),
+          "file_size" INTEGER,
+          "width" INTEGER,
+          "height" INTEGER,
+          "url" TEXT NOT NULL UNIQUE,
+          "thumbnail_url" TEXT,
+          "folder" VARCHAR(255),
+          "provider" VARCHAR(50) NOT NULL,
+          "alt" TEXT,
+          "caption" TEXT,
+          "metadata" JSONB,
+          "created_at" TIMESTAMP NOT NULL DEFAULT NOW(),
+          "updated_at" TIMESTAMP NOT NULL DEFAULT NOW()
+        )
+      `),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_folder" ON "media" ("folder")`),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_provider" ON "media" ("provider")`),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_filename" ON "media" ("filename")`),await this.db.execute(e`
+        CREATE TABLE IF NOT EXISTS "media_folders" (
+          "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+          "name" VARCHAR(255) NOT NULL,
+          "path" TEXT NOT NULL,
+          "parent_path" TEXT,
+          "created_at" TIMESTAMP NOT NULL DEFAULT NOW()
+        )
+      `),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_folders_path" ON "media_folders" ("path")`),Ht=true;}}now(){return new Date().toISOString()}buildFindConditions(e){let t=[],a=[],i=e.sortBy==="name"?"title":e.sortBy==="createdAt"?"created_at":e.sortBy==="updatedAt"?"updated_at":e.sortBy||"created_at",c=e.sortDir==="asc"?"ASC":"DESC";if(e.search){t.push("(title LIKE ? OR filename LIKE ? OR original_name LIKE ? OR alt LIKE ?)");let u=`%${e.search}%`;a.push(u,u,u,u);}return e.type&&e.type!=="all"&&(t.push("mime_type LIKE ?"),a.push(`${e.type}/%`)),e.folder&&(t.push("(folder = ? OR folder LIKE ?)"),a.push(e.folder,`${e.folder}/%`)),{where:t.length>0?`WHERE ${t.join(" AND ")}`:"",params:a,orderBy:c,sortCol:i}}rowToMedia(e,t){return {id:e.id,filename:e.filename,title:e.title??null,originalName:e.original_name??e.originalName,mimeType:e.mime_type??e.mimeType,fileSize:e.file_size??e.fileSize,width:e.width??null,height:e.height??null,url:d.resolveMediaUrl(e.url,t),thumbnailUrl:d.resolveMediaUrl(e.thumbnail_url??e.thumbnailUrl??null,t),folder:e.folder??null,provider:e.provider,alt:e.alt??null,caption:e.caption??null,metadata:e.metadata??null,createdAt:e.created_at??e.createdAt,updatedAt:e.updated_at??e.updatedAt}}static resolveMediaUrl(e,t){return e?e.startsWith("http://")||e.startsWith("https://")||e.startsWith("blob:")||e.startsWith("data:")?e:`${(process.env.KYRO_BASE_URL||t||"http://localhost:4321").replace(/\/+$/,"")}${e.startsWith("/")?"":"/"}${e}`:null}async sqliteRun(e,t=[]){let a=this.db.prepare(e),i=e.trim().toLowerCase();return i.startsWith("insert")||i.startsWith("update")||i.startsWith("delete")?a.run(...t):a.all(...t)}sqliteGet(e,t=[]){return this.db.prepare(e).get(...t)}async upload(e,t=""){let a=e.type.startsWith("image/"),i,c=e,l=e.name,u=null,g=null;if(a&&!e.type.includes("svg")){let T=Buffer.from(await e.arrayBuffer());i=await Vt(T),l=`${e.name.replace(/\.[^/.]+$/,"").toLowerCase().replace(/[^a-z0-9]/g,"-").replace(/-+/g,"-").substring(0,50)}.webp`,u=i.width??null,g=i.height??null,c=new File([i.buffer],l,{type:"image/webp"});}let f=await this.storage.upload(c,{folder:t,filename:l}),A=await this.storage.generateThumbnail({...f,id:"",provider:this.storage.name,createdAt:this.now()},{width:400,height:400}),w=this.genId(),U=this.now();if(this.dialect==="sqlite")await this.sqliteRun(`INSERT INTO ${this.mediaTable}
+          (id, filename, title, original_name, mime_type, file_size, width, height, url, thumbnail_url, folder, provider, alt, caption, metadata, created_at, updated_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,[w,f.filename,e.name.replace(/\.[^/.]+$/,""),e.name,f.mimeType,f.size,u,g,f.url,A,t||null,this.storage.name,null,null,null,U,U]);else {let{media:T}=await import('./media-OUBQTIQP.cjs'),k=f.mimeType,N=k.startsWith("image/")?"image":k.startsWith("video/")?"video":k.startsWith("audio/")?"audio":k.startsWith("application/pdf")?"document":["application/zip","application/x-zip","application/x-tar","application/gzip","application/x-7z"].includes(k)?"archive":"other";await this.db.insert(T).values({id:w,filename:f.filename,title:e.name.replace(/\.[^/.]+$/,""),originalName:e.name,mimeType:k,fileSize:f.size,width:u,height:g,url:f.url,thumbnailUrl:A,folder:t||"",provider:this.storage.name,type:N,status:"active",alt:null,caption:null,createdAt:new Date,updatedAt:new Date}).returning();}return {id:w,filename:f.filename,title:e.name.replace(/\.[^/.]+$/,""),originalName:e.name,mimeType:f.mimeType,fileSize:f.size,width:u,height:g,url:f.url,thumbnailUrl:A,folder:t||null,provider:this.storage.name,alt:null,caption:null,metadata:null,createdAt:U,updatedAt:U}}async uploadFromUrl(e,t=""){let a=await fetch(e);if(!a.ok)throw new Error(`Failed to fetch URL: ${a.status}`);let i=await a.blob(),c=e.split("/").pop()||"url-image",l=a.headers.get("content-type")||i.type||"application/octet-stream",u=new File([i],c,{type:l});return this.upload(u,t)}async delete(e,t){let a=await this.findById(e,t);if(a){if(await this.deleteFile(a.url),a.thumbnailUrl&&a.thumbnailUrl!==a.url&&a.thumbnailUrl!==a.url+"?thumb")try{await this.deleteFile(a.thumbnailUrl);}catch{}if(this.dialect==="sqlite")await this.sqliteRun(`DELETE FROM ${this.mediaTable} WHERE id = ?`,[e]);else {let{media:i}=await import('./media-OUBQTIQP.cjs'),{eq:c}=await import('drizzle-orm');await this.db.delete(i).where(c(i.id,e));}}}async deleteFile(e){await this.storage.delete(e);}async rename(e,t,a){let i=await this.findById(e,a);if(!i)return null;let c=await this.storage.rename(i.url,t),l;if(i.thumbnailUrl||this.storage.name==="cloudinary"){let A=c.match(/\/upload\/(v\d+)\//),w=A?A[1]+"/":"",U=c.match(/(.+?)\/upload\//);l=`${U?U[1]:"https://res.cloudinary.com/"+this.storage.config?.cloudName||"unknown"}/upload/w_200,h_200,c_fill/${w}${t}`;}let u=i.filename.split(".").pop(),g=t.includes(".")?t:`${t}.${u}`,f={url:c,filename:g,thumbnailUrl:l};if(this.dialect==="sqlite"){let A={...f};"thumbnailUrl"in A&&(A.thumbnail_url=A.thumbnailUrl,delete A.thumbnailUrl);let w=Object.keys(A).map(T=>`${T} = ?`).join(", "),U=Object.values(A);await this.sqliteRun(`UPDATE ${this.mediaTable} SET ${w}, updated_at = ? WHERE id = ?`,[...U,this.now(),e]);}else {let{media:A}=await import('./media-OUBQTIQP.cjs'),{eq:w}=await import('drizzle-orm');await this.db.update(A).set({...f,updatedAt:this.now()}).where(w(A.id,e));}return {...i,...f,updatedAt:this.now(),thumbnailUrl:f.thumbnailUrl??null}}async findById(e,t){if(this.dialect==="sqlite"){let l=this.sqliteGet(`SELECT * FROM ${this.mediaTable} WHERE id = ?`,[e]);return l?this.rowToMedia(l,t):null}let{media:a}=await import('./media-OUBQTIQP.cjs'),{eq:i}=await import('drizzle-orm'),[c]=await this.db.select().from(a).where(i(a.id,e));return c?this.rowToMedia(c,t):null}async find(e={},t){let{page:a=1,limit:i=30,search:c="",type:l="",folder:u="",sortBy:g="createdAt",sortDir:f="desc"}=e,{where:A,params:w,orderBy:U,sortCol:T}=this.buildFindConditions({page:a,limit:i,search:c,type:l,folder:u,sortBy:g,sortDir:f}),k=(a-1)*i;if(this.dialect==="sqlite"){let le=this.sqliteGet(`SELECT COUNT(*) as cnt FROM ${this.mediaTable} ${A}`,w)?.cnt??0;return {docs:(await this.sqliteRun(`SELECT * FROM ${this.mediaTable} ${A} ORDER BY ${T} ${U} LIMIT ? OFFSET ?`,[...w,i,k])).map(de=>this.rowToMedia(de,t)),totalDocs:le,page:a,limit:i,totalPages:Math.ceil(le/i)}}let{media:N}=await import('./media-OUBQTIQP.cjs'),{like:M,or:ae,and:C,asc:X,desc:J,eq:D,sql:Z}=await import('drizzle-orm'),ne=[];c&&ne.push(ae(M(N.title,`%${c}%`),M(N.filename,`%${c}%`),M(N.originalName,`%${c}%`),M(N.alt,`%${c}%`))),l&&l!=="all"&&ne.push(M(N.mimeType,`${l}/%`)),u&&ne.push(ae(D(N.folder,u),M(N.folder,`${u}/%`)));let we=ne.length>0?C(...ne):void 0,Oe=N[{created_at:"createdAt",updated_at:"updatedAt",title:"title",filename:"filename",file_size:"fileSize",mime_type:"mimeType",original_name:"originalName"}[T]||"createdAt"],Ie=f==="asc"?X(Oe):J(Oe),fe=await this.db.select().from(N).where(we).orderBy(Ie).limit(i).offset(k),[{count:K}]=await this.db.select({count:Z`count(*)`}).from(N).where(we),ie=Number(K);return {docs:fe.map(oe=>this.rowToMedia(oe,t)),totalDocs:ie,page:a,limit:i,totalPages:Math.ceil(ie/i)}}async update(e,t,a){let i=this.now();if(this.dialect==="sqlite"){let g=["updated_at = ?"],f=[i];t.title!==void 0&&(g.push("title = ?"),f.push(t.title)),t.alt!==void 0&&(g.push("alt = ?"),f.push(t.alt)),t.caption!==void 0&&(g.push("caption = ?"),f.push(t.caption)),t.folder!==void 0&&(g.push("folder = ?"),f.push(t.folder)),f.push(e),await this.sqliteRun(`UPDATE ${this.mediaTable} SET ${g.join(", ")} WHERE id = ?`,f);let A=this.sqliteGet(`SELECT * FROM ${this.mediaTable} WHERE id = ?`,[e]);return A?this.rowToMedia(A,a):null}let{media:c}=await import('./media-OUBQTIQP.cjs'),{eq:l}=await import('drizzle-orm'),[u]=await this.db.update(c).set({...t,updatedAt:new Date}).where(l(c.id,e)).returning();return u?this.rowToMedia(u,a):null}async updateMany(e,t){let a=this.now();if(this.dialect==="sqlite")for(let i of e){let c=["updated_at = ?"],l=[a];t.folder!==void 0&&(c.push("folder = ?"),l.push(t.folder||null)),l.push(i),await this.sqliteRun(`UPDATE ${this.mediaTable} SET ${c.join(", ")} WHERE id = ?`,l);}else {let{media:i}=await import('./media-OUBQTIQP.cjs'),{eq:c}=await import('drizzle-orm');for(let l of e)await this.db.update(i).set({...t,updatedAt:new Date}).where(c(i.id,l));}}async listFolders(){if(this.dialect==="sqlite")return (await this.sqliteRun(`SELECT path FROM ${this.foldersTable} UNION
+         SELECT folder as path FROM ${this.mediaTable} WHERE folder IS NOT NULL AND folder != ''`)).map(f=>f.path).filter(f=>f&&f!=="").sort();let{media:e,mediaFolders:t}=await import('./media-OUBQTIQP.cjs'),{eq:a,sql:i}=await import('drizzle-orm'),c=await this.db.select({folder:e.folder}).from(e).groupBy(e.folder),l=await this.db.select({path:t.path}).from(t),u=new Set([...c.map(g=>g.folder),...l.map(g=>g.path)]);return Array.from(u).filter(g=>g&&g!=="").sort()}async createFolder(e,t=""){let a=t?`${t}/${e}`:e;await this.storage.createFolder?.(a);let i=this.now();if(this.dialect==="sqlite")await this.sqliteRun(`INSERT OR IGNORE INTO ${this.foldersTable} (path, name, parent_path, created_at) VALUES (?, ?, ?, ?)`,[a,e,t||null,i]);else {let{mediaFolders:c}=await import('./media-OUBQTIQP.cjs');await this.db.insert(c).values({path:a,name:e,parentPath:t||null,createdAt:new Date}).onConflictDoNothing();}}async deleteFolder(e){let t=await this.find({folder:e,limit:1e4});for(let a of t.docs)await this.delete(a.id);if(await this.storage.deleteFolder?.(e),this.dialect==="sqlite")await this.sqliteRun(`DELETE FROM ${this.foldersTable} WHERE path = ? OR path LIKE ?`,[e,`${e}/%`]);else {let{mediaFolders:a}=await import('./media-OUBQTIQP.cjs'),{like:i,or:c,eq:l}=await import('drizzle-orm');await this.db.delete(a).where(c(l(a.path,e),i(a.path,`${e}/%`)));}}};function _e(d){return d.map(e=>`${e.path.join(".")}: ${e.message}`).join(", ")}function me(d,e){if(!(!d||typeof d!="object"))for(let t of e){if(!t.name||!(t.name in d))continue;if(d[t.name]===""&&(t.type==="text"||t.type==="textarea"||t.type==="code"||t.type==="markdown"||t.type==="email"||t.type==="password"||t.type==="color"||(d[t.name]=null)),t.type==="tabs"&&t.name&&Array.isArray(t.tabs)&&d[t.name]&&typeof d[t.name]=="object")for(let i of t.tabs)Array.isArray(i.fields)&&me(d[t.name],i.fields);else if((t.type==="group"||t.type==="collapsible")&&t.name&&Array.isArray(t.fields)&&d[t.name]&&typeof d[t.name]=="object")me(d[t.name],t.fields);else if(t.type==="array"&&t.name&&Array.isArray(t.fields)&&Array.isArray(d[t.name]))for(let i of d[t.name])i&&typeof i=="object"&&me(i,t.fields);else if(t.type==="blocks"&&t.name&&Array.isArray(t.blocks)&&Array.isArray(d[t.name]))for(let i of d[t.name]){if(!i||typeof i!="object")continue;let c=i.type||i.blockType;if(!c)continue;let l=t.blocks.find(g=>g.slug===c);if(!l||!Array.isArray(l.fields))continue;let u=i.data&&typeof i.data=="object"?i.data:i;me(u,l.fields);}}}function ge(d,e){if(!(!e||typeof e!="object"))for(let t of d){if(t.type==="richtext"&&t.name){let a=e[t.name];typeof a=="string"?e[t.name]=[{type:"paragraph",children:[{text:a}]}]:a&&typeof a=="object"&&!Array.isArray(a)&&a.type==="doc"&&Array.isArray(a.content)&&(e[t.name]=a.content);}if(t.type==="tabs"&&t.name&&Array.isArray(t.tabs)&&e[t.name]&&typeof e[t.name]=="object")for(let a of t.tabs)Array.isArray(a.fields)&&ge(a.fields,e[t.name]);else if((t.type==="group"||t.type==="collapsible")&&t.name&&Array.isArray(t.fields)&&e[t.name]&&typeof e[t.name]=="object")ge(t.fields,e[t.name]);else if(t.type==="array"&&t.name&&Array.isArray(t.fields)&&Array.isArray(e[t.name]))for(let a of e[t.name])a&&typeof a=="object"&&ge(t.fields,a);else if(t.type==="blocks"&&t.name&&Array.isArray(t.blocks)&&Array.isArray(e[t.name]))for(let a of e[t.name]){if(!a||typeof a!="object")continue;let i=a.type||a.blockType;if(!i)continue;let c=t.blocks.find(u=>u.slug===i);if(!c||!Array.isArray(c.fields))continue;let l=a.data&&typeof a.data=="object"?a.data:a;ge(c.fields,l);}}}var _r={_media:{create:chunkISWMETHJ_cjs.c.MEDIA_UPLOAD,update:chunkISWMETHJ_cjs.c.MEDIA_UPLOAD,delete:chunkISWMETHJ_cjs.c.MEDIA_DELETE}};function Ae(d,e){let t=_r[d];return t?t[e]:`collection.${e}`}function Fr(d){let e=d.headers.get("x-forwarded-for");return e?e.split(",")[0].trim():d.headers.get("x-real-ip")||"unknown"}function Fe(d,e,t,a,i){e?.apiKeyId&&d&&d.createAuditLog({action:"api_request",userId:e.userId||"",resource:"api_key",resourceId:e.apiKeyId,success:true,metadata:{endpoint:t,method:a,ip:Fr(i)}});}function ut(d){return d.baseUpdatedAt??d._baseUpdatedAt}function pt(d){let{baseUpdatedAt:e,_baseUpdatedAt:t,...a}=d;return a}function Yt(d,e){return {error:"Document has changed since you started editing",code:"REVISION_CONFLICT",conflict:{expectedUpdatedAt:d??null,actualUpdatedAt:e.updatedAt??null,current:e}}}async function _(d,e,t,a,i,c,l=true,u="none"){return await chunkISWMETHJ_cjs.a(d,e,{user:a,req:t,tenantID:i,apiKey:c},{enablePublicAccess:l,defaultAccess:u})}async function Y(d,e,t,a,i,c=true){return await chunkISWMETHJ_cjs.b(d,e,{user:a,req:t,tenantID:i},{enablePublicAccess:c})}async function P(d,e,t,a){if(t)return {user:t,tenantID:a,apiKeyContext:void 0,authType:"static"};if(e){let i=await e(d);if(i.status===200&&i.user)return {user:i.user,tenantID:i.tenantContext?.tenantId,apiKeyContext:i.apiKeyContext,authType:i.authType}}return {user:void 0,tenantID:void 0,apiKeyContext:void 0,authType:void 0}}function Or(d,e){if(d instanceof chunk6CLRVJPP_cjs.c&&d.dialect==="postgres")return new chunkGYQMNXXW_cjs.a({db:d.client});if(d instanceof chunkUDSJGML2_cjs.a)return new chunkATLSIYRH_cjs.a({db:d.db});let t=Ce.resolve(e,"data","kyro.db");return new chunkET6NN2V2_cjs.a({path:process.env.KYRO_AUTH_DB_PATH||t})}function Zt(d){let{registry:e,db:t,authSecret:a,authAdapter:i,checkSession:c,user:l,tenantID:u,cors:g,webhookService:f,settings:A}=d,w=new hono.Hono,U=A?.access?.apiAccess;if(U?.restEnabled===false)return w.all("/api/*",r=>r.json({error:"REST API is disabled"},503)),w;let T=A?.access?.enablePublicAccess??false,k=A?.access?.defaultCollectionAccess??"none";U?.requireAuth;let M=process.cwd(),ae=M.endsWith("admin")?Ce.resolve(M,".."):M,C=i||Or(t,ae),D=a?Et({db:t,userLookup:async r=>await C.findUserById(r)||null}):null,Z=U?.cors?.allowedOrigins,ne=g?.origins,we=Array.isArray(Z)?Z:typeof Z=="string"&&Z?Z.split(`
+`).map(r=>r.trim()).filter(Boolean):[],be=we.length>0?we:ne||[];(be.length>0||g)&&w.use("*",async(r,n)=>{let m=r.req.header("Origin")||"*";if(be.length>0&&!be.includes(m))return r.json({error:"Origin not allowed"},403);let y=be.length>0?m:"*";if(r.header("Access-Control-Allow-Origin",y),r.header("Access-Control-Allow-Methods","GET, POST, PATCH, DELETE, OPTIONS"),r.header("Access-Control-Allow-Headers","Content-Type, Authorization, X-API-Key"),g?.credentials&&r.header("Access-Control-Allow-Credentials","true"),r.req.method==="OPTIONS")return r.text("");await n();});let Ie=A?.access?.rateLimiting,fe;if(Ie?.enabled){let r=Ie.maxRequests||100,n=Ie.windowMs||6e4;fe=new je({"api:general":{window:n,max:r}}),w.use("/api/*",async(m,y)=>{if(!fe)return y();let o=m.req.header("CF-Connecting-IP")||m.req.header("X-Forwarded-For")?.split(",")[0]?.trim()||m.req.header("X-Real-IP")||"unknown",s=await fe.check("api:general",o);if(m.header("X-RateLimit-Limit",String(r)),m.header("X-RateLimit-Remaining",String(s.remaining)),m.header("X-RateLimit-Reset",String(s.resetAt)),!s.allowed)return m.json({error:"Too many requests",retryAfter:s.retryAfter},429);await y();});}let K=new ke({redis:C,jwtSecret:a||"change-me",baseUrl:process.env.KYRO_BASE_URL||"http://localhost:4321",rateLimiter:fe});chunkAJAZ7D3W_cjs.b.fromConfig(t).then(r=>{r&&(K.email=r);}).catch(r=>{console.error("[Email] Failed to initialize transport from config:",r);}),w.post("/api/auth/login",async r=>K.login(r.req.raw)),w.post("/api/auth/register",async r=>K.register(r.req.raw)),w.post("/api/auth/logout",async r=>K.logout(r.req.raw)),w.post("/api/auth/refresh",async r=>K.refresh(r.req.raw)),w.get("/api/auth/me",async r=>K.me(r.req.raw)),w.get("/api/auth/sessions",async r=>K.listSessions(r.req.raw)),w.post("/api/auth/sessions/refresh",async r=>K.refreshSession(r.req.raw)),w.delete("/api/auth/sessions",async r=>K.revokeOtherSessions(r.req.raw)),w.delete("/api/auth/sessions/:id",async r=>K.revokeSession(r.req.raw,r.req.param("id"))),w.put("/api/auth/sessions/:id/name",async r=>K.renameSession(r.req.raw,r.req.param("id"))),w.get("/api/auth/access",async r=>{try{let{user:n,tenantID:m}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Not authenticated"},401);let y={},o={};for(let s of e.getCollections()){let p={read:(await _(s,"read",r.req.raw,n,m,void 0,T,k)).allowed,create:(await _(s,"create",r.req.raw,n,m,void 0,T,k)).allowed,update:(await _(s,"update",r.req.raw,n,m,void 0,T,k)).allowed,delete:(await _(s,"delete",r.req.raw,n,m,void 0,T,k)).allowed};y[s.slug]=p;}for(let s of e.getGlobals()){let p={read:(await Y(s,"read",r.req.raw,n,m,T)).allowed,update:(await Y(s,"update",r.req.raw,n,m,T)).allowed};o[s.slug]=p;}return r.json({collections:y,globals:o})}catch(n){return r.json({error:n.message},500)}});let ie=typeof e.hasCollection=="function"&&e.hasCollection("users")?e.getCollection("users"):(()=>{try{return e.getCollection("users")}catch{return chunkGFU7AOI3_cjs.a}})();w.get("/api/users",async r=>{try{let{user:n,tenantID:m}=await P(r.req.raw,D,l,u),y=await _(ie,"read",r.req.raw,n,m,void 0,T,k);if(!y.allowed)return r.json({error:y.error},y.status||403);let o=parseInt(r.req.query("page")||"1"),s=Math.min(parseInt(r.req.query("limit")||"10"),100),p=r.req.query("search")||void 0,b=await C.findUsers({page:o,limit:s,search:p});return r.json({docs:b.users,totalDocs:b.total,limit:s,totalPages:Math.ceil(b.total/s),page:o,pagingCounter:(o-1)*s+1,hasPrevPage:o>1,hasNextPage:o<Math.ceil(b.total/s),prevPage:o>1?o-1:null,nextPage:o<Math.ceil(b.total/s)?o+1:null})}catch(n){return console.error("[API] Error listing users:",n),r.json({error:n.message},500)}}),w.get("/api/users/:id",async r=>{try{let{user:n,tenantID:m}=await P(r.req.raw,D,l,u),y=r.req.param("id"),o=await C.findUserById(y);return o?r.json({data:o}):r.json({error:"User not found"},404)}catch(n){return r.json({error:n.message},500)}}),w.post("/api/users",async r=>{try{let{user:n,tenantID:m}=await P(r.req.raw,D,l,u),y=await _(ie,"create",r.req.raw,n,m,void 0,T,k);if(!y.allowed)return r.json({error:y.error},y.status||403);let o=await r.req.json();if(!o.email||!o.password)return r.json({error:"Email and password are required"},400);if(await C.findUserByEmail(o.email))return r.json({error:"Email already in use"},400);let p=await C.createUser({email:o.email,password:o.password,name:o.name,role:o.role||"customer",avatar:o.avatar,tenantId:o.tenantId});return n&&C?.createAuditLog({action:"user_create",userId:n.id,resource:"users",resourceId:p.id,success:!0}),r.json({data:p,message:"User created successfully"},201)}catch(n){return r.json({error:n.message},500)}}),w.patch("/api/users/:id",async r=>{try{let{user:n,tenantID:m}=await P(r.req.raw,D,l,u),y=await _(ie,"update",r.req.raw,n,m,void 0,T,k);if(!y.allowed)return r.json({error:y.error},y.status||403);let o=r.req.param("id"),s=await r.req.json(),p=await C.findUserById(o);if(!p)return r.json({error:"User not found"},404);let b={};s.name!==void 0&&(b.name=s.name),s.email!==void 0&&(b.email=s.email),s.role!==void 0&&(b.role=s.role),s.avatar!==void 0&&(b.avatar=typeof s.avatar=="object"&&s.avatar!==null?s.avatar.id||String(s.avatar):s.avatar),s.tenantId!==void 0&&(b.tenantId=s.tenantId),s.emailVerified!==void 0&&(b.emailVerified=s.emailVerified),s.locked!==void 0&&(b.locked=s.locked),s.failedLoginAttempts!==void 0&&(b.failedLoginAttempts=s.failedLoginAttempts),s.lastLogin!==void 0&&(b.lastLogin=s.lastLogin);let h=await C.updateUser(o,b);return h?(n&&(C?.createAuditLog({action:"user_update",userId:n.id,resource:"users",resourceId:o,success:!0}),s.role&&p.role!==s.role&&C?.createAuditLog({action:"role_change",userId:n.id,resource:"users",resourceId:o,success:!0,metadata:{oldRole:p.role,newRole:s.role}})),r.json({data:h,message:"User updated successfully"})):r.json({error:"User update failed"},500)}catch(n){return r.json({error:n.message},500)}}),w.delete("/api/users/:id",async r=>{try{let{user:n,tenantID:m}=await P(r.req.raw,D,l,u),y=await _(ie,"delete",r.req.raw,n,m,void 0,T,k);if(!y.allowed)return r.json({error:y.error},y.status||403);let o=r.req.param("id");if(n&&n.id===o)return r.json({error:"You cannot delete your own account"},403);let s=await C.findUserById(o);return s?await C.deleteUser(o)?(n&&C?.createAuditLog({action:"user_delete",userId:n.id,resource:"users",resourceId:o,success:!0}),r.json({data:s,message:"User deleted successfully"})):r.json({error:"User deletion failed"},500):r.json({error:"User not found"},404)}catch(n){return r.json({error:n.message},500)}}),w.get("/api/auth/audit-logs",async r=>{try{let{user:n,tenantID:m}=await P(r.req.raw,D,l,u),y=e.getCollection("audit_logs");if(y){let S=await _(y,"read",r.req.raw,n,m,void 0,T,k);if(!S.allowed)return r.json({error:S.error},S.status||403)}else if(!n)return r.json({error:"Authentication required"},401);let o=parseInt(r.req.query("page")||"1"),s=Math.min(parseInt(r.req.query("limit")||"50"),100),p=r.req.query("action")||void 0,b=r.req.query("userId")||void 0,h=r.req.query("resource")||void 0,I=await C.findAuditLogs({action:p,userId:b,resource:h,limit:s,offset:(o-1)*s});return r.json({docs:I.logs,totalDocs:I.total,limit:s,totalPages:Math.ceil(I.total/s),page:o,pagingCounter:(o-1)*s+1,hasPrevPage:o>1,hasNextPage:o<Math.ceil(I.total/s),prevPage:o>1?o-1:null,nextPage:o<Math.ceil(I.total/s)?o+1:null})}catch(n){return console.error("[API] Error listing audit logs:",n),r.json({error:n.message},500)}});let oe=null,le=null,W=async()=>{if(le)throw le;if(!oe)try{let r=t instanceof chunk6CLRVJPP_cjs.c?t.dialect:"sqlite",n=r==="postgres"&&t instanceof chunk6CLRVJPP_cjs.c?t.client:t;oe=await $e.init(n,{dialect:r});}catch(r){throw console.error("[getMedia] Init error:",r),le=r,r}return oe};w.get("/api/media",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Authentication required"},401);let m=await W(),y=new URL(r.req.url).origin,o=parseInt(r.req.query("page")||"1"),s=parseInt(r.req.query("limit")||"30"),p=r.req.query("search")||"",b=r.req.query("type")||"",h=r.req.query("folder")||"",I=await m.find({page:o,limit:s,search:p,type:b,folder:h},y);return r.json(I)}catch(n){return console.error("[Media] find error:",n),r.json({error:n.message},500)}}),w.post("/api/media/upload",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Authentication required"},401);let m=await W();if((r.req.header("content-type")||"").includes("multipart/form-data")){let p=await r.req.formData(),b=p.get("file"),h=p.get("folder")||"";if(!b)return r.json({error:"No file uploaded"},400);let I=await m.upload(b,h);return r.json(I)}let{url:o}=await r.req.json();if(!o)return r.json({error:"No URL provided"},400);let s=await m.uploadFromUrl(o);return r.json(s)}catch(n){return console.error("[Media] upload error:",n),r.json({error:n.message},500)}}),w.get("/api/media/folders",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Authentication required"},401);let y=await(await W()).listFolders();return r.json(y)}catch(n){return console.error("[Media] folders error:",n),r.json({error:n.message},500)}}),w.post("/api/media/folders",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Authentication required"},401);let m=await W(),y=await r.req.json(),{name:o,parentPath:s}=y;return o?(await m.createFolder(o,s||""),r.json({message:"Folder created",path:s?`${s}/${o}`:o})):r.json({error:"Folder name is required"},400)}catch(n){return console.error("[Media] create folder error:",n),r.json({error:n.message},500)}}),w.delete("/api/media/folders",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Authentication required"},401);let m=await W(),y=r.req.query("path");return y?(await m.deleteFolder(y),r.json({message:"Folder deleted"})):r.json({error:"Path is required"},400)}catch(n){return console.error("[Media] delete folder error:",n),r.json({error:n.message},500)}}),w.delete("/api/media/:id",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Authentication required"},401);let m=await W(),y=r.req.param("id"),o=new URL(r.req.url).origin;return await m.delete(y,o),r.json({success:!0})}catch(n){return console.error("[Media] delete error:",n),r.json({error:n.message},500)}}),w.get("/api/media/resize",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Authentication required"},401);let m=r.req.query("url"),y=parseInt(r.req.query("w")||"0"),o=parseInt(r.req.query("h")||"0"),s=r.req.query("fit")||"cover";if(!m)return r.json({error:"URL is required"},400);let b=(await W()).storage;if(b.name!=="local")return r.redirect(m);let h=b.config?.uploadDir||Ce.join(process.cwd(),"public","uploads"),I=b.config?.baseUrl||"/uploads";if(!m.startsWith(I))return r.redirect(m);let S=m.replace(I,""),v=Ce.join(h,S);if(!fs.existsSync(v))return r.json({error:"File not found"},404);let x=fs.readFileSync(v),R=ct__default.default(x);(y>0||o>0)&&(R=R.resize({width:y>0?y:void 0,height:o>0?o:void 0,fit:s}));let q=await R.toBuffer(),j=await ct__default.default(x).metadata();return r.header("Content-Type",`image/${j.format||"webp"}`),r.header("Cache-Control","public, max-age=31536000, immutable"),r.body(q)}catch(n){return console.error("[Media] resize error:",n),r.json({error:n.message},500)}}),w.get("/api/media/:id",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Authentication required"},401);let m=await W(),y=r.req.param("id"),o=new URL(r.req.url).origin,s=await m.findById(y,o);return s?r.json(s):r.json({error:"Media not found"},404)}catch(n){return console.error("[Media] get error:",n),r.json({error:n.message},500)}}),w.patch("/api/media/:id",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Authentication required"},401);let m=await W(),y=r.req.param("id"),o=await r.req.json(),s=new URL(r.req.url).origin;if(o.folder!==void 0){let p=await m.update(y,{folder:o.folder},s);return r.json({doc:p})}return r.json({error:"No valid fields to update"},400)}catch(n){return console.error("[Media] update error:",n),r.json({error:n.message},500)}}),w.get("/api/media/test",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Authentication required"},401);let m=await W();return r.json({status:m?"initialized":"failed",serviceType:m?.constructor?.name})}catch(n){return console.error("[test] Error:",n),r.json({error:n.message,type:n.constructor?.name,stack:n.stack},500)}}),w.get("/api/storage-status",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Authentication required"},401);let m=!1,y="local";if(t)try{let o=t.prepare('SELECT provider FROM "_globals_storage-settings" LIMIT 1').get();o&&o.provider&&(m=!0,y=o.provider==="aws"?"s3":o.provider);}catch{try{let o=await t.findOne({collection:"_globals_storage-settings",where:{},draft:!0});o&&o.provider&&(m=!0,y=o.provider==="aws"?"s3":o.provider);}catch{}}return r.json({provider:y,configured:m,usage:0,limit:"unlimited"})}catch(n){return console.error("[Storage] status error:",n),r.json({error:n.message},500)}}),w.get("/api/plugins",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Authentication required"},401);let m=e.getPlugins(),y=e.storageProviders,o=await Promise.all(m.map(async s=>{let p=!0,b=s.name,h={};try{let I=await t.findOne({collection:"_globals_plugin-settings",where:{},draft:!0});I&&I.states&&(h=I.states);}catch{}return h[b]!==void 0&&(p=h[b]),y.setPluginEnabled(b,p),{id:b,name:b,version:s.version||"1.0.0",description:s.description||"",enabled:p,status:p?"active":"disabled"}}));return r.json(o)}catch(n){return console.error("[Plugins] list error:",n),r.json({error:n.message},500)}}),w.put("/api/plugins/:name/toggle",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Authentication required"},401);let m=r.req.param("name"),y=e.storageProviders,s=!y.isPluginEnabled(m),p=[];if(!s)for(let h of y.getAll())h.pluginName===m&&p.push(h.type);if(!(r.req.query("force")==="1")&&!s&&p.length>0){let h="local";try{let I=t?.prepare?.('SELECT provider FROM "_globals_storage-settings" LIMIT 1')?.get();I?.provider&&(h=I.provider);}catch{try{let I=await t?.findOne?.({collection:"_globals_storage-settings",where:{},draft:!0});I?.provider&&(h=I.provider);}catch{}}if(p.includes(h))return r.json({error:`Cannot disable "${m}" \u2014 storage provider "${h}" is currently active. Switch to Local storage first.`,requiresAction:!0,activeProvider:h},409)}try{let h={},I="global",S=await t.findOne({collection:"_globals_plugin-settings",where:{},draft:!0});S&&(h=S.states||{},I=S.id),h[m]=s,S?await t.update({collection:"_globals_plugin-settings",id:I,data:{states:h}}):await t.create({collection:"_globals_plugin-settings",data:{states:h,id:"global"}});}catch(h){console.warn(`[Plugins] Could not persist state for "${m}":`,h);}return y.setPluginEnabled(m,s),r.json({name:m,enabled:s})}catch(n){return console.error("[Plugins] toggle error:",n),r.json({error:n.message},500)}}),w.get("/api/health",r=>r.json({status:"ok",version:"0.1.0",collections:e.getCollectionSlugs(),timestamp:new Date().toISOString()})),w.get("/api/kyro/schema",async r=>{let{user:n}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Authentication required"},401);let m=o=>o.map(s=>{let p={name:s.name,type:s.type,label:s.label,required:s.required??false,unique:s.unique??false,indexed:s.indexed??false,defaultValue:s.defaultValue,admin:s.admin?{...s.admin}:void 0};return s.minLength!==void 0&&(p.minLength=s.minLength),s.maxLength!==void 0&&(p.maxLength=s.maxLength),s.pattern!==void 0&&(p.pattern=s.pattern),s.variant!==void 0&&(p.variant=s.variant),s.hasMany!==void 0&&(p.hasMany=s.hasMany),s.min!==void 0&&(p.min=s.min),s.max!==void 0&&(p.max=s.max),s.step!==void 0&&(p.step=s.step),s.integer!==void 0&&(p.integer=s.integer),s.options&&(p.options=s.options),s.relationTo&&(p.relationTo=s.relationTo),s.maxDepth!==void 0&&(p.maxDepth=s.maxDepth),s.minRows!==void 0&&(p.minRows=s.minRows),s.maxRows!==void 0&&(p.maxRows=s.maxRows),s.localized!==void 0&&(p.localized=s.localized),s.language&&(p.language=s.language),s.format&&(p.format=s.format),s.allowedTypes&&(p.allowedTypes=s.allowedTypes),s.maxSize&&(p.maxSize=s.maxSize),(s.type==="group"||s.type==="row"||s.type==="collapsible"&&s.fields)&&(p.fields=m(s.fields)),s.type==="array"&&s.fields&&(p.fields=m(s.fields)),s.type==="blocks"&&s.blocks&&(p.blocks=s.blocks.map(b=>({slug:b.slug,label:b.label,fields:m(b.fields)}))),s.type==="tabs"&&s.tabs&&(p.tabs=s.tabs.map(b=>({label:b.label,name:b.name,fields:m(b.fields)}))),p}),y={collections:{},globals:{}};for(let o of e.getCollections()){let s=o.slug;try{y.collections[s]={slug:s,label:o.label||s,fields:m(o.fields),jsonSchema:zodToJsonSchema.zodToJsonSchema(e.getZodSchema(s),{target:"openApi3"}),createSchema:zodToJsonSchema.zodToJsonSchema(e.getCreateZodSchema(s),{target:"openApi3"}),updateSchema:zodToJsonSchema.zodToJsonSchema(e.getUpdateZodSchema(s),{target:"openApi3"}),procedures:{find:{collection:s,where:"Record<string,any>",sort:"string",limit:"number",page:"number",depth:"number",select:"string[]",draft:"boolean"},findByID:{collection:s,id:"string",depth:"number",select:"string[]",draft:"boolean"},create:{collection:s,data:"Record<string,any>",depth:"number",select:"string[]"},update:{collection:s,id:"string",data:"Record<string,any>",depth:"number",select:"string[]",baseUpdatedAt:"string"},delete:{collection:s,id:"string"},count:{collection:s,where:"Record<string,any>"}}};}catch{}}for(let o of e.getGlobals()){let s=o.slug,p=o.fields;if(s==="storage-settings"){let b=e.storageProviders,h=b.getAll(),I=new Set(b.getAllAvailable(v=>b.isPluginEnabled(v)).map(v=>v.type));I.add("local");let S=new Set(h.map(v=>v.type));p=p.filter(v=>v.type==="group"&&v.name&&S.has(v.name)?I.has(v.name):true).map(v=>v.name==="provider"&&v.type==="select"?{...v,options:v.options.filter(x=>I.has(x.value))}:v);}try{y.globals[s]={slug:s,label:o.label||s,fields:m(p),jsonSchema:zodToJsonSchema.zodToJsonSchema(e.getZodSchema(s),{target:"openApi3"}),procedures:{get:{},update:{data:"Record<string,any>"}}};}catch{}}return r.json(y)}),w.get("/api/collections",async r=>{let{user:n}=await P(r.req.raw,D,l,u);if(!n)return r.json({error:"Authentication required"},401);let m=e.getCollections().map(y=>({slug:y.slug,label:y.label||y.slug,fields:y.fields.filter(o=>o.name).map(o=>({name:o.name,type:o.type,required:o.required,label:o.label}))}));return r.json(m)});function de(r,n,m){if(m in n)return n[m];for(let y of r)if(y.name){if(y.type==="tabs"&&y.tabs){let o=n[y.name];if(o&&typeof o=="object"&&m in o)return o[m]}if((y.type==="group"||y.type==="collapsible")&&y.fields){let o=n[y.name];if(o&&typeof o=="object"){if(m in o)return o[m];let s=de(y.fields,o,m);if(s!==void 0)return s}}}}function Ne(r){let n=[];for(let m of r)if(m.type==="relationship")n.push(m);else if(m.type==="tabs"&&m.tabs)for(let y of m.tabs)n.push(...Ne(y.fields||[]));else (m.type==="group"||m.type==="collapsible")&&m.fields&&n.push(...Ne(m.fields||[]));return n}function Qt(r){if(!r)return [];if(typeof r=="string")return [r];if(Array.isArray(r))return r.map(n=>typeof n=="object"?n.value??n:n);if(typeof r=="object"){let n=r.value??r;return typeof n=="string"?[n]:Array.isArray(n)?n:[]}return []}async function Be(r,n,m,y){if(r.length===0)return;let o=Ne(n.fields);if(o.length!==0)for(let s of o){let p=Array.isArray(s.relationTo)?s.relationTo:[s.relationTo],b={};for(let h of p)b[h]=new Set;for(let h of r){let I=de(n.fields,h,s.name),S=Qt(I);for(let v of S)if(v)if(p.length===1)b[p[0]].add(v);else for(let x of p)b[x].add(v);}for(let[h,I]of Object.entries(b)){if(I.size===0)continue;let S=y.getCollection(h);if(!S)continue;let v=S.admin?.useAsTitle||"title",x=Array.from(I),R=[];for(let j of x)try{let E=await m.findByID({collection:h,id:j,draft:!0});if(E){let $=de(S.fields,E,v)??j;R.push({id:j,title:String($)});}}catch{R.push({id:j,title:j});}let q=new Map(R.map(j=>[j.id,j.title]));for(let j of r){let E=de(n.fields,j,s.name);if(!E)continue;let $=F=>{if(s.name in j)j[s.name]=F;else for(let L of n.fields)if(L.type==="tabs"&&L.tabs){for(let O of L.tabs)if(O.fields?.some(B=>B.name===s.name)){let B=j[L.name];B&&typeof B=="object"&&(B[s.name]=F);}}};if(typeof E=="string")$({id:E,title:q.get(E)||E});else if(Array.isArray(E))$(E.map(F=>{let L=typeof F=="object"?F.value??F.id:F;return {id:L,title:q.get(L)||L}}));else if(typeof E=="object"){let F=E.value??E.id;$({id:F,title:q.get(F)||F});}}}}}w.get("/api/search",async r=>{try{let n=r.req.query("q")||"",m=r.req.query("collections")||"",y=Math.min(parseInt(r.req.query("limit")||"10"),50);if(!n||n.length<2)return r.json({results:[],message:"Query too short"});let{user:o,tenantID:s}=await P(r.req.raw,D,l,u),p=m?m.split(",").filter(Boolean):e.getCollectionSlugs(),b=[],h=new RegExp(n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),"i");for(let I of e.getCollections()){if(!p.includes(I.slug)||!(await _(I,"read",r.req.raw,o,s,void 0,T,k)).allowed)continue;let v=I.fields.filter(x=>x.name&&x.name!=="id"&&(x.type==="text"||x.type==="email"||x.type==="textarea"||x.type==="richtext"||x.indexed)&&!x.admin?.hidden).map(x=>x.name);if(v.length!==0)try{let x=v.map(q=>{let j={};return j[q]={like:`%${n}%`},j}),R=await t.find({collection:I.slug,where:{OR:x},limit:y,tenantID:s});await Be(R.docs,I,t,e);for(let q of R.docs){let j=I.admin?.useAsTitle||v.find($=>$==="title"||$==="name"||$==="heading"||$==="slug"),E=j?de(I.fields,q,j)??q.id:q.id;b.push({collection:I.slug,label:I.label||I.slug,id:q.id,title:String(E||"Untitled"),doc:q});}}catch(x){console.error(`Search error for ${I.slug}:`,x);}}return b.sort((I,S)=>I.label.localeCompare(S.label)),r.json({results:b})}catch(n){return r.json({error:n.message,results:[]},500)}}),w.get("/api/keys",async r=>{try{let{user:n,tenantID:m}=await P(r.req.raw,D,l,u);if(!n||!chunkQ3Q7BJVQ_cjs.a(n,"users:read"))return r.json({error:"Forbidden"},403);let y=parseInt(r.req.query("page")||"1"),o=Math.min(parseInt(r.req.query("limit")||"50"),100),s=await t.find({collection:chunkNY47CFVP_cjs.d,where:{},page:y,limit:o,tenantID:m}),p=(s.docs||[]).map(b=>({id:b.id,name:b.name,keyPrefix:b.keyPrefix,permissions:b.permissions||[],lastUsed:b.lastUsedAt,createdAt:b.createdAt}));return r.json({docs:p,totalDocs:s.totalDocs||p.length,totalPages:s.totalPages||1})}catch(n){return console.error("[ApiKeys] GET error:",n),r.json({error:n.message},500)}}),w.post("/api/keys",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n||!chunkQ3Q7BJVQ_cjs.a(n,"users:admin"))return r.json({error:"Forbidden"},403);let m=await r.req.json();if(!m.name||typeof m.name!="string")return r.json({error:"name is required"},400);let y=chunkNY47CFVP_cjs.i(),o=await t.create({collection:chunkNY47CFVP_cjs.d,data:{userId:n.id,name:m.name,key:y,keyPrefix:chunkNY47CFVP_cjs.j(y),permissions:Array.isArray(m.permissions)?m.permissions:["*"],expiresAt:m.expiresAt||null,createdAt:new Date().toISOString()}});return await C?.createAuditLog({action:"api_key_create",userId:n.id,resource:"api_key",resourceId:o.id,success:!0,metadata:{keyName:m.name}}),r.json({...o,key:y,permissions:Array.isArray(m.permissions)?m.permissions:["*"]},201)}catch(n){return console.error("[ApiKeys] POST error:",n),r.json({error:n.message},500)}}),w.delete("/api/keys/:id",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n||!chunkQ3Q7BJVQ_cjs.a(n,"users:admin"))return r.json({error:"Forbidden"},403);let m=r.req.param("id"),y=await t.findByID({collection:chunkNY47CFVP_cjs.d,id:m});return y?(await t.delete({collection:chunkNY47CFVP_cjs.d,id:m}),await C?.createAuditLog({action:"api_key_delete",userId:n.id,resource:"api_key",resourceId:m,success:!0,metadata:{keyName:y.name}}),r.json({message:"API key deleted"})):r.json({error:"API key not found"},404)}catch(n){return console.error("[ApiKeys] DELETE error:",n),r.json({error:n.message},500)}}),w.patch("/api/keys/:id",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n||!chunkQ3Q7BJVQ_cjs.a(n,"users:admin"))return r.json({error:"Forbidden"},403);let m=r.req.param("id"),y=await r.req.json(),o=await t.findByID({collection:chunkNY47CFVP_cjs.d,id:m});if(!o)return r.json({error:"API key not found"},404);let s={};if(typeof y.name=="string"&&y.name.trim()&&(s.name=y.name.trim()),Array.isArray(y.permissions)&&(s.permissions=y.permissions),y.expiresAt!==void 0&&(s.expiresAt=y.expiresAt||null),Object.keys(s).length===0)return r.json({error:"Nothing to update"},400);let p=await t.update({collection:chunkNY47CFVP_cjs.d,id:m,data:s});return r.json({...p,keyPrefix:o.keyPrefix})}catch(n){return console.error("[ApiKeys] PATCH error:",n),r.json({error:n.message},500)}}),w.post("/api/keys/:id/rotate",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n||!chunkQ3Q7BJVQ_cjs.a(n,"users:admin"))return r.json({error:"Forbidden"},403);let m=r.req.param("id"),y=await t.findByID({collection:chunkNY47CFVP_cjs.d,id:m});if(!y)return r.json({error:"API key not found"},404);let o=chunkNY47CFVP_cjs.i(),s=await t.update({collection:chunkNY47CFVP_cjs.d,id:m,data:{key:o,keyPrefix:chunkNY47CFVP_cjs.j(o),lastUsedAt:null}});return await C?.createAuditLog({action:"api_key_rotate",userId:n.id,resource:"api_key",resourceId:m,success:!0,metadata:{keyName:y.name}}),r.json({...s,key:o,permissions:y.permissions,expiresAt:y.expiresAt})}catch(n){return console.error("[ApiKeys] rotate error:",n),r.json({error:n.message},500)}}),w.get("/api/webhooks",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n||!chunkQ3Q7BJVQ_cjs.a(n,"users:read"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=await f.getWebhooks();return r.json({docs:m})}catch(n){return console.error("[Webhooks] GET error:",n),r.json({error:n.message},500)}}),w.post("/api/webhooks",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n||!chunkQ3Q7BJVQ_cjs.a(n,"users:admin"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=await r.req.json(),y=await f.createWebhook(m);return await C?.createAuditLog({action:"webhook_create",userId:n.id,resource:"webhook",resourceId:y.id,success:!0,metadata:{name:y.name,url:y.url}}),r.json(y,201)}catch(n){return console.error("[Webhooks] POST error:",n),r.json({error:n.message},500)}}),w.get("/api/webhooks/:id",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n||!chunkQ3Q7BJVQ_cjs.a(n,"users:read"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=await f.getWebhookById(m);return y?r.json(y):r.json({error:"Webhook not found"},404)}catch(n){return console.error("[Webhooks] GET :id error:",n),r.json({error:n.message},500)}}),w.patch("/api/webhooks/:id",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n||!chunkQ3Q7BJVQ_cjs.a(n,"users:admin"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=await r.req.json(),o=await f.updateWebhook(m,y);return o?(await C?.createAuditLog({action:"webhook_update",userId:n.id,resource:"webhook",resourceId:m,success:!0,metadata:{name:o.name}}),r.json(o)):r.json({error:"Webhook not found"},404)}catch(n){return console.error("[Webhooks] PATCH error:",n),r.json({error:n.message},500)}}),w.delete("/api/webhooks/:id",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n||!chunkQ3Q7BJVQ_cjs.a(n,"users:admin"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=await f.getWebhookById(m);return y?(await f.deleteWebhook(m),await C?.createAuditLog({action:"webhook_delete",userId:n.id,resource:"webhook",resourceId:m,success:!0,metadata:{name:y.name}}),r.json({message:"Webhook deleted"})):r.json({error:"Webhook not found"},404)}catch(n){return console.error("[Webhooks] DELETE error:",n),r.json({error:n.message},500)}}),w.post("/api/webhooks/:id/test",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n||!chunkQ3Q7BJVQ_cjs.a(n,"users:admin"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=await f.testWebhook(m);return y?r.json(y):r.json({error:"Webhook not found"},404)}catch(n){return console.error("[Webhooks] test error:",n),r.json({error:n.message},500)}}),w.get("/api/webhooks/:id/history",async r=>{try{let{user:n}=await P(r.req.raw,D,l,u);if(!n||!chunkQ3Q7BJVQ_cjs.a(n,"users:read"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=Math.min(parseInt(r.req.query("limit")||"50"),100),o=await f.getDeliveryHistory(m,y);return r.json({docs:o})}catch(n){return console.error("[Webhooks] history error:",n),r.json({error:n.message},500)}});function Me(r){let n={},m=["name","type","required","hasMany","relationTo","options","min","max","minLength","maxLength","defaultValue","label","localized","admin","unique","index","hidden","readOnly","deprecated"];for(let y of m)y in r&&(n[y]=r[y]);return r.fields&&(n.fields=r.fields.map(Me)),r.tabs&&(n.tabs=r.tabs.map(y=>({label:y.label,name:y.name,fields:y.fields.map(Me)}))),n}w.get("/api/__schema",async r=>{try{let{user:n,apiKeyContext:m}=await P(r.req.raw,D,l,u);if(!n&&!m)return r.json({error:"Unauthorized"},401);let o=e.getCollections().filter(s=>s.slug!=="users"&&s.slug!=="audit_logs").map(s=>({slug:s.slug,label:s.label,labelPlural:s.labelPlural,singularLabel:s.singularLabel,timestamps:s.timestamps,auth:!!s.auth,tenantScoped:!!s.tenantScoped,upload:s.upload?{staticDir:s.upload.staticDir,imageSizes:s.upload.imageSizes,mimeTypes:s.upload.mimeTypes}:void 0,fields:s.fields.map(Me)}));return r.json(o)}catch(n){return console.error("[Schema] error:",n),r.json({error:n.message},500)}});let er=e.getCollections();for(let r of er){let y=function(o,s){let p=[],b=new Set([...Object.keys(o),...Object.keys(s)]);for(let h of b)h==="id"||h==="createdAt"||h==="updatedAt"||JSON.stringify(o[h])!==JSON.stringify(s[h])&&p.push({field:h,oldValue:h in o?o[h]:void 0,newValue:h in s?s[h]:void 0});return p};let n=r.slug;if(n==="users"||n==="audit_logs")continue;let m=`/api/${n}`;w.get(m,async o=>{try{let{user:s,tenantID:p,apiKeyContext:b}=await P(o.req.raw,D,l,u),h=await _(r,"read",o.req.raw,s,p,b,T,k);if(!h.allowed)return o.json({error:h.error},h.status||403);p&&t.setTenantContext({tenantId:p,userId:s?.id??"",role:s?.role,isSuperAdmin:s?.role==="super_admin"});let I=new URL(o.req.url),S=parseInt(I.searchParams.get("page")||"1"),v=Math.min(parseInt(I.searchParams.get("limit")||"10"),100),x=I.searchParams.get("sort")||void 0,R=parseInt(I.searchParams.get("depth")||"0"),q=I.searchParams.get("select")?.split(",")||void 0,j=I.searchParams.get("draft"),E=j==="true"?!0:j==="false"?!1:!!s,$={},F=I.searchParams.get("where");if(F)try{$=JSON.parse(F);}catch{return o.json({error:"Invalid JSON in where parameter"},400)}let L=await t.find({collection:n,where:$,sort:x,limit:v,page:S,depth:R,tenantID:p,select:q,draft:E});return await Be(L.docs,r,t,e),o.json(L)}catch(s){return console.error("[API] list error:",s),o.json({error:s.message},500)}}),w.get(`${m}/:id/versions`,async o=>{try{let{user:s,tenantID:p,apiKeyContext:b}=await P(o.req.raw,D,l,u),h=await _(r,"read",o.req.raw,s,p,b,T,k);if(!h.allowed)return o.json({error:h.error},h.status||403);let I=o.req.param("id");if(!I)return o.json({error:"Missing document ID"},400);let S=new URL(o.req.url),v=S.searchParams.get("compareA"),x=S.searchParams.get("compareB");if(Fe(C,b,`${m}/${I}/versions`,"GET",o.req.raw),v&&x){let[E,$]=await Promise.all([t.findVersionByID({collection:n,versionId:v,tenantID:p}),t.findVersionByID({collection:n,versionId:x,tenantID:p})]);if(!E||!$)return o.json({error:"Version not found"},404);let F=y(E.data,$.data);return o.json({diffs:F})}let R=parseInt(S.searchParams.get("page")||"1"),q=Math.min(parseInt(S.searchParams.get("limit")||"10"),100),j=await t.findVersions({collection:n,documentId:I,page:R,limit:q,tenantID:p});return o.json(j)}catch(s){return console.error("[API] versions error:",s),o.json({error:s.message},500)}}),w.put(`${m}/:id/draft`,async o=>{try{let{user:s,tenantID:p,apiKeyContext:b}=await P(o.req.raw,D,l,u),h=await _(r,"update",o.req.raw,s,p,b,T,k);if(!h.allowed)return o.json({error:h.error},h.status||403);let I=o.req.param("id"),S=await o.req.json(),v=ut(S),x=await t.findByID({collection:n,id:I,tenantID:p,draft:!0});if(!x)return o.json({error:"Document not found"},404);let R;S.delta?R={...x,...S.delta}:R=S.data??pt(S);let q=await t.updateLatestVersion({collection:n,documentId:I,data:R,status:"draft",tenantID:p});return s&&C?.createAuditLog({action:"document_update",userId:s.id,resource:n,resourceId:I,success:!0,metadata:{type:"draft_save"}}),o.json({data:q,message:"Draft saved successfully"})}catch(s){return o.json({error:s.message},500)}}),w.delete(`${m}/:id/draft`,async o=>{try{let{user:s,tenantID:p,apiKeyContext:b}=await P(o.req.raw,D,l,u),h=await _(r,"update",o.req.raw,s,p,b,T,k);return h.allowed?(s&&C?.createAuditLog({action:"document_update",userId:s.id,resource:n,resourceId:o.req.param("id"),success:!0,metadata:{type:"draft_discard"}}),o.json({message:"Draft discarded successfully"})):o.json({error:h.error},h.status||403)}catch(s){return o.json({error:s.message},500)}}),w.get(`${m}/:id`,async o=>{try{let{user:s,tenantID:p,apiKeyContext:b}=await P(o.req.raw,D,l,u),h=await _(r,"read",o.req.raw,s,p,b,T,k);if(!h.allowed)return o.json({error:h.error},h.status||403);let I=o.req.param("id"),S=new URL(o.req.url),v=parseInt(S.searchParams.get("depth")||"0"),x=S.searchParams.get("select")?.split(",")||void 0,R=S.searchParams.get("draft"),q=R==="true"?!0:R==="false"?!1:!!s,j=await t.findByID({collection:n,id:I,depth:v,tenantID:p,select:x,draft:q});return !j&&r.fields.some(E=>E.name==="slug")&&(j=await t.findOne({collection:n,where:{slug:I},tenantID:p,draft:q})),j?(await Be([j],r,t,e),o.json({data:j})):o.json({error:"Document not found"},404)}catch(s){return o.json({error:s.message},500)}}),w.post(m,async o=>{try{let{user:s,tenantID:p,apiKeyContext:b}=await P(o.req.raw,D,l,u),h=await _(r,"create",o.req.raw,s,p,b,T,k);if(!h.allowed)return o.json({error:h.error},h.status||403);p&&t.setTenantContext({tenantId:p,userId:s?.id??"",role:s?.role,isSuperAdmin:s?.role==="super_admin"}),Fe(C,b,m,"POST",o.req.raw);let S=await o.req.json();me(S,r.fields),ge(r.fields,S);let v=o.req.raw;if(r.hooks?.beforeValidate)for(let j of r.hooks.beforeValidate){let E=await j({collection:n,data:S,req:v,user:s,tenantID:p,operation:"create"});E&&Object.assign(S,E);}let x=e.getCreateZodSchema(n);try{S=x.parse(S);}catch(j){return o.json({error:`Validation failed: ${_e(j.errors)}`,details:j.errors},400)}r.tenantScoped&&p&&(S.tenantID=p);let R=r.versions?.drafts===!0;if(S.status=R?"draft":"published",r.hooks?.beforeChange)for(let j of r.hooks.beforeChange){let E=await j({collection:n,data:S,req:v,user:s,tenantID:p,operation:"create"});E&&Object.assign(S,E);}let q=await t.create({collection:n,data:S,tenantID:p});if(R&&await t.createVersion({collection:n,documentId:q.id,data:S,status:"draft",createdBy:s?.id,changeDescription:"Created",tenantID:p}),r.hooks?.afterChange)for(let j of r.hooks.afterChange)await j({collection:n,doc:q,data:S,req:v,user:s,tenantID:p,operation:"create"});return f&&f.trigger(Ae(n,"create"),{collection:n,operation:"create",data:q,user:s?{id:s.id,email:s.email,role:s.role}:void 0,tenantId:p}).catch(j=>console.error("[Webhook] Failed to trigger:",j)),s&&C?.createAuditLog({action:"document_create",userId:s.id,resource:n,resourceId:q.id,success:!0}),o.json({data:q,message:"Created successfully"},201)}catch(s){return s.name==="ZodError"?o.json({error:`Validation failed: ${_e(s.errors)}`,details:s.errors},400):o.json({error:s.message},500)}}),w.patch(`${m}/:id`,async o=>{try{let{user:s,tenantID:p,apiKeyContext:b}=await P(o.req.raw,D,l,u),h=await _(r,"update",o.req.raw,s,p,b,T,k);if(!h.allowed)return o.json({error:h.error},h.status||403);let I=o.req.param("id"),S=await o.req.json(),v=ut(S),x=await t.findByID({collection:n,id:I,tenantID:p,draft:!0});if(!x)return o.json({error:"Document not found"},404);if(v&&x.updatedAt&&v!==x.updatedAt)return o.json(Yt(v,x),409);let R=Object.fromEntries(Object.entries(pt(S)).filter(([O,B])=>B!=="null"&&B!==void 0));me(R,r.fields),ge(r.fields,R);let q=o.req.raw;if(r.hooks?.beforeValidate)for(let O of r.hooks.beforeValidate){let B=await O({collection:n,data:R,originalDoc:x,req:q,user:s,tenantID:p,operation:"update"});B&&Object.assign(R,B);}if(R=e.getUpdateZodSchema(n).parse(R),r.hooks?.beforeChange)for(let O of r.hooks.beforeChange){let B=await O({collection:n,data:R,originalDoc:x,req:q,user:s,tenantID:p,operation:"update"});B&&Object.assign(R,B);}let E=o.req.header("X-Draft")==="true",$=r.versions?.drafts===!0,F=o.req.query("autosave")==="true",L;if($&&E?await t.createVersion({collection:n,documentId:I,data:R,status:"draft",autosave:F,createdBy:s?.id,changeDescription:F?"Autosave":"Draft saved",tenantID:p}):$?(await t.update({collection:n,id:I,data:{...R,status:"published"},tenantID:p}),await t.createVersion({collection:n,documentId:I,data:R,status:"published",createdBy:s?.id,changeDescription:"Published",tenantID:p})):await t.update({collection:n,id:I,data:R,tenantID:p}),L=await t.findByID({collection:n,id:I,tenantID:p,draft:!0}),r.hooks?.afterChange)for(let O of r.hooks.afterChange)await O({collection:n,doc:L,data:R,originalDoc:x,req:q,user:s,tenantID:p,operation:"update"});return f&&f.trigger(Ae(n,"update"),{collection:n,operation:"update",data:L,previousData:x,user:s?{id:s.id,email:s.email,role:s.role}:void 0,tenantId:p}).catch(O=>console.error("[Webhook] Failed to trigger:",O)),Fe(C,b,`${m}/${I}`,"PATCH",o.req.raw),s&&C?.createAuditLog({action:"document_update",userId:s.id,resource:n,resourceId:I,success:!0}),o.json({data:L,message:$?"Draft saved":"Updated successfully"})}catch(s){return s.name==="ZodError"?(console.error(`[PATCH ${m}/:id] Validation failed:`,s.errors),o.json({error:`Validation failed: ${_e(s.errors)}`,details:s.errors},400)):(console.error(`[PATCH ${m}/:id] ERROR:`,s.message,"CAUSE:",s.cause?.message||s.cause,"QUERY:",s.query),o.json({error:s.message},500))}}),w.delete(`${m}/:id`,async o=>{try{let{user:s,tenantID:p,apiKeyContext:b}=await P(o.req.raw,D,l,u),h=await _(r,"delete",o.req.raw,s,p,b,T,k);if(!h.allowed)return o.json({error:h.error},h.status||403);p&&t.setTenantContext({tenantId:p,userId:s?.id??"",role:s?.role,isSuperAdmin:s?.role==="super_admin"});let I=o.req.param("id"),S=o.req.raw,v=await t.findByID({collection:n,id:I,tenantID:p,draft:!0});if(!v)return o.json({error:"Document not found"},404);if(r.hooks?.beforeDelete)for(let R of r.hooks.beforeDelete)await R({collection:n,doc:v,req:S,user:s,tenantID:p,operation:"delete"});let x=await t.delete({collection:n,id:I,tenantID:p});if(r.hooks?.afterDelete)for(let R of r.hooks.afterDelete)await R({collection:n,doc:x,originalDoc:v,req:S,user:s,tenantID:p,operation:"delete"});return f&&f.trigger(Ae(n,"delete"),{collection:n,operation:"delete",data:x,previousData:v,user:s?{id:s.id,email:s.email,role:s.role}:void 0,tenantId:p}).catch(R=>console.error("[Webhook] Failed to trigger:",R)),Fe(C,b,`${m}/${I}`,"DELETE",o.req.raw),s&&C?.createAuditLog({action:"document_delete",userId:s.id,resource:n,resourceId:I,success:!0}),o.json({data:x,message:"Deleted successfully"})}catch(s){return console.error(`[DELETE] Error deleting ${n}:`,s),o.json({error:s.message||String(s)},500)}}),w.post(`${m}/:id/duplicate`,async o=>{try{let{user:s,tenantID:p,apiKeyContext:b}=await P(o.req.raw,D,l,u),h=await _(r,"create",o.req.raw,s,p,b,T,k);if(!h.allowed)return o.json({error:h.error},h.status||403);let I=o.req.param("id"),S=await t.findByID({collection:n,id:I,tenantID:p,draft:!0});if(!S)return o.json({error:"Document not found"},404);let{id:v,createdAt:x,updatedAt:R,...q}=S,j=Date.now().toString(36),E=`${S.slug||"document"}-copy-${j}`,$=await t.create({collection:n,data:{...q,slug:E,status:"draft"},tenantID:p});return o.json({data:$,message:"Document duplicated successfully"})}catch(s){return console.error("[Duplicate] Error:",s),o.json({error:s.message||String(s)},500)}}),w.post(`${m}/:id/versions/:versionId/restore`,async o=>{try{let{user:s,tenantID:p,apiKeyContext:b}=await P(o.req.raw,D,l,u),h=await _(r,"update",o.req.raw,s,p,b,T,k);if(!h.allowed)return o.json({error:h.error},h.status||403);let I=o.req.param("id"),S=o.req.param("versionId"),v=await t.findVersionByID({collection:n,versionId:S,tenantID:p});if(!v)return o.json({error:"Version not found"},404);let x=await t.update({collection:n,id:I,data:{...v.data,status:"draft"},tenantID:p});return o.json({data:x,message:"Version restored successfully"})}catch(s){return o.json({error:s.message},500)}}),w.post(`${m}/:id/versions`,async o=>{try{let{user:s,tenantID:p,apiKeyContext:b}=await P(o.req.raw,D,l,u),h=await _(r,"update",o.req.raw,s,p,b,T,k);if(!h.allowed)return o.json({error:h.error},h.status||403);let I=await o.req.json(),{versionId:S,action:v}=I;if(v==="restore"&&S){let x=await t.findVersionByID({collection:n,versionId:S,tenantID:p});if(!x)return o.json({error:"Version not found"},404);let R=await t.update({collection:n,id:o.req.param("id"),data:{...x.data,status:"draft"},tenantID:p});return o.json({data:R,message:"Version restored successfully"})}return o.json({error:"Invalid action"},400)}catch(s){return o.json({error:s.message},500)}}),w.post(`${m}/:id/publish`,async o=>{try{let{user:s,tenantID:p,apiKeyContext:b}=await P(o.req.raw,D,l,u),h=await _(r,"update",o.req.raw,s,p,b,T,k);if(!h.allowed)return o.json({error:h.error},h.status||403);p&&t.setTenantContext({tenantId:p,userId:s?.id??"",role:s?.role,isSuperAdmin:s?.role==="super_admin"});let I=o.req.param("id"),S=await o.req.json().catch(()=>({})),v=ut(S),x=await t.findByID({collection:n,id:I,tenantID:p,draft:!0});if(!x)return o.json({error:"Document not found"},404);if(v&&x.updatedAt&&v!==x.updatedAt)return o.json(Yt(v,x),409);let R={status:"published"},q=x;if(r.versions?.drafts){let E=await t.findVersions({collection:n,documentId:I,limit:1,sort:"-createdAt",tenantID:p});if(E.docs.length>0){let $=E.docs[0];q={...x,...$.data},R={...$.data,...R};}}let j=await t.update({collection:n,id:I,data:R,tenantID:p});return r.versions?.drafts&&await t.createVersion({collection:n,documentId:I,data:{...q,status:"published"},status:"published",createdBy:s?.id,changeDescription:"Published",tenantID:p}),f&&f.trigger(Ae(n,"update"),{collection:n,operation:"update",data:j,user:s?{id:s.id,email:s.email,role:s.role}:void 0,tenantId:p}).catch(E=>console.error("[Webhook] Failed to trigger:",E)),o.json({data:j,message:"Published successfully"})}catch(s){return o.json({error:s.message},500)}}),w.post(`${m}/:id/unpublish`,async o=>{try{let{user:s,tenantID:p,apiKeyContext:b}=await P(o.req.raw,D,l,u),h=await _(r,"update",o.req.raw,s,p,b,T,k);if(!h.allowed)return o.json({error:h.error},h.status||403);let I=o.req.param("id");if(!await t.findByID({collection:n,id:I,tenantID:p,draft:!0}))return o.json({error:"Document not found"},404);let v=await t.update({collection:n,id:I,data:{status:"draft"},tenantID:p});return f&&f.trigger(Ae(n,"update"),{collection:n,operation:"update",data:v,user:s?{id:s.id,email:s.email,role:s.role}:void 0,tenantId:p}).catch(x=>console.error("[Webhook] Failed to trigger:",x)),o.json({data:v,message:"Unpublished successfully"})}catch(s){return o.json({error:s.message},500)}});}for(let r of e.getGlobals()){let n=r.slug,m=`/api/globals/${n}`;w.get(m,async o=>{try{let{user:s,tenantID:p}=await P(o.req.raw,D,l,u),b=await Y(r,"read",o.req.raw,s,p,T);if(!b.allowed)return o.json({error:b.error},b.status||403);let h=!!s,I=await t.findOne({collection:`_globals_${n}`,where:{},tenantID:p,draft:h});if(n==="system"){let S=sr__default.default.randomBytes(32).toString("hex");I?I.appSecret||(await t.update({collection:`_globals_${n}`,id:n,data:{appSecret:S},tenantID:p}),I.appSecret=S):I=await t.create({collection:`_globals_${n}`,data:{id:n,appSecret:S},tenantID:p});}return o.json({data:I||{}})}catch(s){return o.json({error:s.message},500)}});let y=async o=>{try{let{user:s,tenantID:p}=await P(o.req.raw,D,l,u),b=await Y(r,"update",o.req.raw,s,p,T);if(!b.allowed)return o.json({error:b.error},b.status||403);let h=pt(await o.req.json()),I=Object.fromEntries(Object.entries(h).filter(([O,B])=>B!==null&&B!=="null"&&B!==void 0));me(I,r.fields),ge(r.fields,I);let S=e.getUpdateZodSchema(n),v;try{v=S.parse(I);}catch(O){return o.json({error:`Validation failed: ${_e(O.errors)}`,details:O.errors},400)}let x=new Set(["id","createdAt","updatedAt","status","baseUpdatedAt","_baseUpdatedAt"]),R=Object.fromEntries(Object.entries(v).filter(([O])=>!x.has(O))),q=`_globals_${n}`,j=await t.findOne({collection:q,where:{},tenantID:p,draft:!0}),E=o.req.header("X-Draft")==="true",$=r.versions?.drafts===!0,F=o.req.query("autosave")==="true",L;if($&&E)await t.createVersion({collection:q,documentId:n,data:R,status:"draft",autosave:F,createdBy:s?.id,changeDescription:F?"Autosave":"Manual save",tenantID:p}),j?L=j:L=await t.create({collection:q,data:{...R,id:n,status:"draft"},tenantID:p});else if($&&!E){let O="published";j?L=await t.update({collection:q,id:n,data:{...R,status:O},tenantID:p}):L=await t.create({collection:q,data:{...R,id:n,status:O},tenantID:p}),await t.createVersion({collection:q,documentId:n,data:R,status:O,autosave:!1,createdBy:s?.id,changeDescription:"Published",tenantID:p});}else j?L=await t.update({collection:q,id:n,data:R,tenantID:p}):L=await t.create({collection:q,data:{...R,id:n},tenantID:p});if(n==="storage-settings"&&(oe=null,le=null),n==="email-settings"){let O=await chunkAJAZ7D3W_cjs.b.fromConfig(t);K.email=O||void 0;}return n==="system"&&await Tt(),s&&C?.createAuditLog({action:"settings_change",userId:s.id,resource:`global:${n}`,resourceId:n,success:!0}),o.json({data:L,message:"Updated successfully"})}catch(s){return console.error(`[API] Save global "${n}" failed:`,s),o.json({error:s.message||"Save failed",stack:process.env.NODE_ENV==="development"?s.stack:void 0},500)}};w.post(m,y),w.patch(m,y),w.post(`${m}/publish`,async o=>{try{let{user:s,tenantID:p}=await P(o.req.raw,D,l,u),b=await Y(r,"update",o.req.raw,s,p,T);if(!b.allowed)return o.json({error:b.error},403);let h=`_globals_${n}`,I=await t.findOne({collection:h,where:{},tenantID:p,draft:!0});if(!I)return o.json({error:"Global not found"},404);let S={status:"published"},v=I;if(r.versions?.drafts){let R=await t.findVersions({collection:h,documentId:n,limit:1,sort:"-createdAt",tenantID:p});R.docs.length>0&&(v={...I,...R.docs[0].data},S={...R.docs[0].data,...S});}let x=await t.update({collection:h,id:n,data:S,tenantID:p});return r.versions?.drafts&&await t.createVersion({collection:h,documentId:n,data:{...v,status:"published"},status:"published",createdBy:s?.id,changeDescription:"Published",tenantID:p}),o.json({data:x,message:"Published successfully"})}catch(s){return o.json({error:s.message},500)}}),w.post(`${m}/unpublish`,async o=>{try{let{user:s,tenantID:p}=await P(o.req.raw,D,l,u),b=await Y(r,"update",o.req.raw,s,p,T);if(!b.allowed)return o.json({error:b.error},403);let h=await t.update({collection:`_globals_${n}`,id:n,data:{status:"draft"},tenantID:p});return o.json({data:h,message:"Unpublished successfully"})}catch(s){return o.json({error:s.message},500)}}),w.get(`${m}/versions`,async o=>{try{let{user:s,tenantID:p}=await P(o.req.raw,D,l,u),b=await Y(r,"read",o.req.raw,s,p,T);if(!b.allowed)return o.json({error:b.error},403);let h=parseInt(o.req.query("limit")||"10"),I=parseInt(o.req.query("page")||"1"),S=await t.findVersions({collection:`_globals_${n}`,documentId:n,limit:h,page:I,tenantID:p});return o.json(S)}catch(s){return o.json({error:s.message},500)}}),w.get(`${m}/versions/:versionId`,async o=>{try{let s=o.req.param("versionId"),{user:p,tenantID:b}=await P(o.req.raw,D,l,u),h=await Y(r,"read",o.req.raw,p,b,T);if(!h.allowed)return o.json({error:h.error},403);let I=await t.findVersionByID({collection:`_globals_${n}`,versionId:s,tenantID:b});return I?o.json({data:I}):o.json({error:"Version not found"},404)}catch(s){return o.json({error:s.message},500)}}),w.post(`${m}/versions/:versionId/restore`,async o=>{try{let s=o.req.param("versionId"),{user:p,tenantID:b}=await P(o.req.raw,D,l,u),h=await Y(r,"update",o.req.raw,p,b,T);if(!h.allowed)return o.json({error:h.error},403);let I=`_globals_${n}`,S=await t.findVersionByID({collection:I,versionId:s,tenantID:b});if(!S)return o.json({error:"Version not found"},404);let v=await t.update({collection:I,id:n,data:{...S.data,status:"draft"},tenantID:b});return o.json({data:v,message:"Version restored successfully"})}catch(s){return o.json({error:s.message},500)}}),n==="email-settings"&&w.post(`${m}/test`,async o=>{try{let{user:s,tenantID:p}=await P(o.req.raw,D,l,u),b=await Y(r,"update",o.req.raw,s,p,T);if(!b.allowed)return o.json({error:b.error},b.status||403);let h=await o.req.json(),I={provider:h.provider,from:h.fromEmail||h.from,fromName:h.fromName,replyTo:h.replyTo,smtp:h.smtp?{host:h.smtp.host,port:h.smtp.port,secure:h.smtp.secure,auth:{user:h.smtp.username||h.smtp.user,pass:h.smtp.password||h.smtp.pass}}:void 0,resend:h.resend,sendgrid:h.sendgrid,mailgun:h.mailgun,ses:h.ses},S=new chunkAJAZ7D3W_cjs.b(I),v=h.testEmail||h.testEmailSection&&h.testEmailSection.testEmail;return v?(await S.send({to:v,subject:"Kyro CMS - Test Email",html:`
+              <div style="font-family: sans-serif; max-width: 600px; margin: 0 auto; padding: 20px; border: 1px solid #e2e8f0; border-radius: 8px;">
+                <h1 style="color: #0b1222; margin-bottom: 16px;">Success! \u{1F680}</h1>
+                <p style="font-size: 16px; color: #334155; line-height: 1.6;">
+                  Your email settings in <b>Kyro CMS</b> are working correctly.
+                </p>
+                <div style="background: #f8fafc; padding: 16px; border-radius: 6px; margin: 24px 0;">
+                  <p style="margin: 0; font-size: 14px; color: #64748b;">
+                    <b>Provider:</b> ${h.provider.toUpperCase()}
+                  </p>
+                  <p style="margin: 8px 0 0; font-size: 14px; color: #64748b;">
+                    <b>Sent at:</b> ${new Date().toLocaleString()}
+                  </p>
+                </div>
+                <p style="font-size: 12px; color: #94a3b8; margin-top: 32px; border-top: 1px solid #f1f5f9; padding-top: 16px;">
+                  This is a test email sent from the Kyro CMS Admin Panel.
+                </p>
+              </div>
+            `,text:`Success! Your email settings in Kyro CMS are working correctly.
+
+Provider: ${h.provider}
+Sent at: ${new Date().toLocaleString()}`}),o.json({message:"Test email sent successfully!"})):o.json({error:"No test recipient email provided"},400)}catch(s){return console.error("[Email Test] Failed:",s),o.json({error:s.message||"Failed to send test email"},500)}});}return w.onError((r,n)=>(console.error(`[API Error] ${n.req.method} ${n.req.path}:`,r),n.json({error:r.message||"Internal server error",code:"INTERNAL_ERROR"},500))),w}function Nr(d,e,t){return Zt({registry:d,db:e,authSecret:t?.authSecret,user:t?.user,req:t?.req,tenantID:t?.tenantID,cors:t?.cors,webhookService:t?.webhookService})}exports.a=Pr;exports.b=Ur;exports.c=qr;exports.d=zt;exports.e=pe;exports.f=it;exports.g=Kr;exports.h=Tt;exports.i=ar;exports.j=zr;exports.k=Pt;exports.l=Ve;exports.m=je;exports.n=Ct;exports.o=as;exports.p=$t;exports.q=ke;exports.r=$e;exports.s=Zt;exports.t=Nr;

package/dist/chunk-F7SR5IDT.cjs

@@ -0,0 +1 @@
+'use strict';var ws=require('ws');var o=class{channels=new Map;maxListeners;constructor(e=100){this.maxListeners=e;}subscribe(e,t){this.channels.has(e)||this.channels.set(e,new Set);let s=this.channels.get(e);if(s.size>=this.maxListeners)throw new Error(`Max listeners (${this.maxListeners}) reached for channel "${e}"`);return s.add(t),()=>{s.delete(t),s.size===0&&this.channels.delete(e);}}publish(e,t){let s=this.channels.get(e);if(s)for(let n of s)try{let i=n(t);i instanceof Promise&&i.catch(l=>{console.error(`[PubSub] Error in handler for channel "${e}":`,l);});}catch(i){console.error(`[PubSub] Error in handler for channel "${e}":`,i);}}hasSubscribers(e){return this.channels.has(e)&&this.channels.get(e).size>0}getSubscriberCount(e){return this.channels.get(e)?.size||0}getChannels(){return Array.from(this.channels.keys())}clear(){this.channels.clear();}},c=class extends o{registry;constructor(e,t=100){super(t),this.registry=e;}publishCollectionEvent(e,t){this.publish(`collection:${e}`,t),this.publish("events:collection",t),t.tenantID&&(this.publish(`tenant:${t.tenantID}:collection:${e}`,t),this.publish(`tenant:${t.tenantID}:events`,t)),this.publish(`collection:${e}:${t.type}`,t);}subscribeToCollection(e,t){return this.subscribe(`collection:${e}`,t)}subscribeToCollectionEvent(e,t,s){return this.subscribe(`collection:${e}:${t}`,s)}subscribeToTenant(e,t){return this.subscribe(`tenant:${e}:events`,t)}subscribeToTenantCollection(e,t,s){return this.subscribe(`tenant:${e}:collection:${t}`,s)}subscribeToAllCollections(e){return this.subscribe("events:collection",e)}createAfterChangeHook(e){return async t=>{this.publishCollectionEvent(e,{type:t.operation==="create"?"create":"update",collection:e,doc:t.doc,originalDoc:t.originalDoc,id:t.id||t.doc?.id,tenantID:t.tenantID,timestamp:new Date().toISOString(),user:t.user});}}createAfterDeleteHook(e){return async t=>{this.publishCollectionEvent(e,{type:"delete",collection:e,doc:t.doc,originalDoc:t.originalDoc,id:t.id||t.doc?.id,tenantID:t.tenantID,timestamp:new Date().toISOString(),user:t.user});}}autoRegisterHooks(){let e=this.registry.getCollections();for(let t of e){let s=this.registry.getCollection(t.slug);s&&(s.hooks||(s.hooks={}),s.hooks.afterChange||(s.hooks.afterChange=[]),s.hooks.afterDelete||(s.hooks.afterDelete=[]),s.hooks.afterChange.push(this.createAfterChangeHook(t.slug)),s.hooks.afterDelete.push(this.createAfterDeleteHook(t.slug)));}}};var a=class{wss;clients=new Map;pubsub;options;pingTimer;constructor(e){this.options=e,this.pubsub=e.pubsub,this.wss=new ws.WebSocketServer({port:e.port||8080}),this.setupServer(),this.startPingInterval();}setupServer(){this.wss.on("connection",(e,t)=>{let s=this.generateClientId();if(this.options.maxConnections&&this.clients.size>=this.options.maxConnections){e.close(1013,"Server at capacity");return}let n={id:s,ws:e,subscriptions:new Map,authenticated:false,connectedAt:new Date,lastActivity:new Date};this.clients.set(s,n),this.sendToClient(n,{type:"connected",clientId:s,timestamp:new Date().toISOString()}),e.on("message",i=>{this.handleMessage(n,i);}),e.on("error",i=>{console.error(`[WS] Client error ${s}:`,i);}),e.on("close",()=>{this.handleDisconnect(n);}),e.on("pong",()=>{n.lastActivity=new Date;});}),this.wss.on("error",e=>{console.error("[WS] Server error:",e);});}handleMessage(e,t){e.lastActivity=new Date;let s;try{s=JSON.parse(t.toString());}catch{this.sendToClient(e,{type:"error",error:"Invalid JSON"});return}switch(s.type){case "authenticate":this.handleAuthenticate(e,s);break;case "subscribe":this.handleSubscribe(e,s);break;case "unsubscribe":this.handleUnsubscribe(e,s);break;case "unsubscribeAll":this.handleUnsubscribeAll(e);break;case "list":this.handleList(e);break;case "ping":this.sendToClient(e,{type:"pong",timestamp:new Date().toISOString()});break;default:this.sendToClient(e,{type:"error",error:`Unknown message type: ${s.type}`});}}async handleAuthenticate(e,t){if(!this.options.requireAuth){e.authenticated=true,this.sendToClient(e,{type:"authenticated",success:true});return}if(!this.options.verifyToken){e.authenticated=true,this.sendToClient(e,{type:"authenticated",success:true});return}try{let s=await this.options.verifyToken(t.token);e.authenticated=!0,e.user=s,e.tenantID=s.tenantID,this.sendToClient(e,{type:"authenticated",success:!0,user:{id:s.id,email:s.email}});}catch(s){this.sendToClient(e,{type:"authenticated",success:false,error:s.message});}}handleSubscribe(e,t){if(this.options.requireAuth&&!e.authenticated){this.sendToClient(e,{type:"error",error:"Not authenticated"});return}let s=t.channel;if(!s){this.sendToClient(e,{type:"error",error:"Channel is required"});return}if(e.subscriptions.has(s)){this.sendToClient(e,{type:"subscribed",channel:s,success:true,message:"Already subscribed"});return}let n=this.pubsub.subscribe(s,i=>{this.sendToClient(e,{type:"event",channel:s,data:i,timestamp:new Date().toISOString()});});e.subscriptions.set(s,{channel:s,unsubscribe:n}),this.sendToClient(e,{type:"subscribed",channel:s,success:true});}handleUnsubscribe(e,t){let s=t.channel;if(!s){this.sendToClient(e,{type:"error",error:"Channel is required"});return}let n=e.subscriptions.get(s);n?(n.unsubscribe(),e.subscriptions.delete(s),this.sendToClient(e,{type:"unsubscribed",channel:s,success:true})):this.sendToClient(e,{type:"unsubscribed",channel:s,success:false,message:"Not subscribed"});}handleUnsubscribeAll(e){for(let[,t]of e.subscriptions)t.unsubscribe();e.subscriptions.clear(),this.sendToClient(e,{type:"unsubscribedAll",success:true});}handleList(e){let t=this.pubsub.getChannels();this.sendToClient(e,{type:"channels",channels:t,count:t.length});}handleDisconnect(e){for(let[,t]of e.subscriptions)t.unsubscribe();this.clients.delete(e.id);}sendToClient(e,t){e.ws.readyState===ws.WebSocket.OPEN&&e.ws.send(JSON.stringify(t));}generateClientId(){return `ws_${Date.now()}_${Math.random().toString(36).slice(2,9)}`}startPingInterval(){this.options.pingInterval&&(this.pingTimer=setInterval(()=>{for(let[e,t]of this.clients)if(t.ws.readyState===ws.WebSocket.OPEN){if(Date.now()-t.lastActivity.getTime()>this.options.pingInterval*3){t.ws.terminate(),this.handleDisconnect(t);continue}t.ws.ping();}},this.options.pingInterval));}broadcast(e,t){this.pubsub.publish(e,t);}getConnectedClients(){return Array.from(this.clients.values())}getClientCount(){return this.clients.size}getSubscriptionCount(){let e=0;for(let t of this.clients.values())e+=t.subscriptions.size;return e}async close(){this.pingTimer&&clearInterval(this.pingTimer);for(let e of this.clients.values())e.ws.close(1001,"Server shutting down");return new Promise(e=>{this.wss.close(()=>{e();});})}getServer(){return this.wss}};function p(r){return new a(r)}exports.a=o;exports.b=c;exports.c=a;exports.d=p;

package/dist/chunk-FO3HLBC7.js

@@ -0,0 +1 @@
+import {c,b}from'./chunk-7WOX27LK.js';import {a}from'./chunk-2W4FK6CJ.js';async function f(t){let{adminEmail:e,adminPassword:r,adminRole:o="super_admin",tenantId:n,emailConfig:s,sendWelcomeEmail:c$1=false}=t,a$1=t.authAdapter||new a({path:t.authDbPath||"./data/auth.db"});try{await a$1.connect?.();}catch{return {success:false,error:"Failed to connect to auth storage"}}let l=new c().validate(r);if(!l.valid)return await a$1.disconnect?.(),{success:false,error:`Invalid password: ${l.errors.join(", ")}`};if(await a$1.findUserByEmail(e))return await a$1.disconnect?.(),{success:false,error:"Admin user already exists"};try{let i=await a$1.createUser({email:e,password:r,role:o||"admin",tenantId:n});if(c$1&&s){let u=new b(s),A=u.getTemplates().welcome(e.split("@")[0]);await u.send({to:e,...A});}return await a$1.disconnect?.(),{success:!0,user:i}}catch(i){return await a$1.disconnect?.(),{success:false,error:i instanceof Error?i.message:"Failed to create admin user"}}}async function y(t,e){return !await t.findUserByEmail(e)}function w(){let t=process.env.KYRO_ADMIN_EMAIL,e=process.env.KYRO_ADMIN_PASSWORD;return !t||!e?null:{authDbPath:process.env.KYRO_AUTH_DB_PATH||"./data/auth.db",adminEmail:t,adminPassword:e,adminRole:process.env.KYRO_ADMIN_ROLE||"super_admin",tenantId:process.env.KYRO_ADMIN_TENANT_ID,emailConfig:process.env.SMTP_HOST?{provider:"smtp",smtp:{host:process.env.SMTP_HOST,port:parseInt(process.env.SMTP_PORT||"587",10),secure:process.env.SMTP_SECURE==="true",auth:{user:process.env.SMTP_USER||"",pass:process.env.SMTP_PASS||""}},from:process.env.SMTP_FROM||"noreply@example.com",fromName:process.env.SMTP_FROM_NAME}:void 0,sendWelcomeEmail:process.env.KYRO_ADMIN_SEND_WELCOME==="true"}}async function T(t){let e=w();if(!e)return null;t&&(e.authAdapter=t);try{if(await e.authAdapter?.connect?.(),await e.authAdapter?.findUserByEmail(e.adminEmail))return await e.authAdapter?.disconnect?.(),{success:!1,error:"Admin user already exists"}}catch{}let r=await f(e);return r.success||console.error(`Bootstrap failed: ${r.error}`),r}async function v(t,e=3,r=2e3){let o="";for(let n=0;n<e;n++){let s=await f(t);if(s.success||(o=s.error||"Unknown error",o.includes("already exists")))return s;n<e-1&&await new Promise(c=>setTimeout(c,r));}return {success:false,error:`Failed after ${e} retries: ${o}`}}export{f as a,y as b,w as c,T as d,v as e};

package/dist/chunk-G6A7OSIG.js

@@ -0,0 +1,2 @@
+import {a,c,b,d}from'./chunk-ZAQOSRP6.js';import {randomBytes}from'crypto';var _=class extends a{client;db;database;connectionString;constructor(i){if(super(),i.connectionString){this.connectionString=i.connectionString;try{let e=new URL(i.connectionString);this.database=e.pathname.replace(/^\//,"")||"kyro_cms";}catch{this.database="kyro_cms";}}else this.client=i.client,this.database=i.database;}async connect(){if(this.connectionString&&!this.client){let{MongoClient:i}=await import('mongodb');this.client=new i(this.connectionString),await this.client.connect();}this.db=this.client.db(this.database),this.connected=true;}async disconnect(){this.client&&(await this.client.close(),this.connected=false);}getMongoCollection(i){if(!this.db)throw new Error("MongoDB not connected");return this.db.collection(i)}async find(i){let{collection:e,where:n={},sort:s,limit:t=10,page:o=1,tenantID:r,select:a,draft:l}=i,c$1=this.getCollectionConfig(e),g=this.getMongoCollection(e),u={...n};this.tenantContext&&c$1.tenantScoped&&(u=c({where:u},e,this.tenantContext,b).where||{});let d$1=this.buildFilter(u,r);l||(d$1.status="published");let h=this.parseSort(s),p={[h.field]:h.direction==="asc"?1:-1},I=(o-1)*t,[R,b$1]=await Promise.all([g.find(d$1).sort(p).skip(I).limit(t).project(this.buildProjection(a)).toArray(),g.countDocuments(d$1)]),m=R.map(f=>this.processResult(f,c$1));return this.tenantContext&&!this.tenantContext.isSuperAdmin&&(m=m.filter(f=>d(f,e,this.tenantContext,b))),l&&(m=await Promise.all(m.map(async f=>{let D=await this.getMongoCollection(`${e}_versions`).findOne({document_id:f.id},{sort:{createdAt:-1}});if(D){let $=D.data||{};return {...f,...$,status:f.status}}return f}))),{docs:m,...this.calculatePagination(o,t,b$1)}}async findByID(i){let{collection:e,id:n,tenantID:s,draft:t}=i,o=this.getCollectionConfig(e),r=this.getMongoCollection(e);if(this.tenantContext&&o.tenantScoped){let g={_id:n,tenantId:this.tenantContext.tenantId};if(!d(g,e,this.tenantContext,b))return null}let a={_id:n};s&&(a.tenantId=s),t||(a.status="published");let l=await r.findOne(a);if(!l)return null;let c=this.processResult(l,o);if(t){let u=await this.getMongoCollection(`${e}_versions`).findOne({document_id:c.id},{sort:{createdAt:-1}});if(u){let d=u.data||{};c={...c,...d,status:c.status};}}return c}async create(i){let{collection:e,data:n,tenantID:s}=i,t=this.getCollectionConfig(e),o=this.getMongoCollection(e),r={...this.prepareData(n,t),_id:this.generateId()};return s&&(r.tenantId=s),await o.insertOne(r),this.processResult(r,t)}async update(i){let{collection:e,id:n,data:s,tenantID:t}=i,o=this.getCollectionConfig(e),r=this.getMongoCollection(e),a={_id:n};t&&(a.tenantId=t);let l=this.prepareData(s,o),c=await r.findOneAndUpdate(a,{$set:l},{returnDocument:"after"});if(!c)throw new Error(`Document not found: ${e}/${n}`);return this.processResult(c,o)}async delete(i){let{collection:e,id:n,tenantID:s}=i,t=this.getCollectionConfig(e),o=this.getMongoCollection(e),r={_id:n};s&&(r.tenantId=s);let a=await o.findOneAndDelete(r);if(!a)throw new Error(`Document not found: ${e}/${n}`);return this.processResult(a,t)}async count(i){let{collection:e,where:n={},tenantID:s}=i,t=this.getMongoCollection(e),o=this.buildFilter(n,s);return t.countDocuments(o)}async findOne(i){let{collection:e,where:n={},tenantID:s,draft:t}=i,o=this.getCollectionConfig(e),r=this.getMongoCollection(e),a=this.buildFilter(n,s);t||(a.status="published");let l=await r.findOne(a);if(!l)return null;let c=this.processResult(l,o);if(t){let u=await this.getMongoCollection(`${e}_versions`).findOne({document_id:c.id},{sort:{createdAt:-1}});if(u){let d=u.data||{};c={...c,...d,status:c.status};}}return c}async findVersions(i){let{collection:e,documentId:n,sort:s,limit:t=10,page:o=1,tenantID:r}=i,a=this.getMongoCollection(`${e}_versions`),l={document_id:n,autosave:{$ne:true}};r&&(l.tenant_id=r);let c=(o-1)*t,g=this.parseSort(s),u={[g.field]:g.direction==="asc"?1:-1},[d,h]=await Promise.all([a.find(l).sort(u).skip(c).limit(t).toArray(),a.countDocuments(l)]);return {docs:d.map(p=>this.processResult(p,{})),...this.calculatePagination(o,t,h)}}async findVersionByID(i){let{collection:e,versionId:n,tenantID:s}=i,t=this.getMongoCollection(`${e}_versions`),o={_id:n};s&&(o.tenant_id=s);let r=await t.findOne(o);return r?this.processResult(r,{}):null}async createVersion(i){let{collection:e,documentId:n,data:s,status:t,createdBy:o,changeDescription:r,tenantID:a,autosave:l}=i,c=this.getMongoCollection(`${e}_versions`);if(l){let d={document_id:n,collection_slug:e,autosave:true};a&&(d.tenant_id=a);let h=await c.findOne(d);if(h){let p=new Date().toISOString();return await c.updateOne({_id:h._id},{$set:{data:s,status:t,updatedAt:p}}),this.processResult({...h,data:s,status:t,updatedAt:p},{})}}let g=new Date().toISOString(),u={_id:this.generateId(),document_id:n,collection_slug:e,tenant_id:a,data:s,status:t,autosave:l===true,created_by:o,change_description:r,createdAt:g,updatedAt:g};if(await c.insertOne(u),!l){let d=this.getCollectionConfig(e);d.versions?.maxPerDoc&&await this.deleteVersions({collection:e,documentId:n,keepLatest:d.versions.maxPerDoc,tenantID:a});}return this.processResult(u,{})}async updateLatestVersion(i){return this.createVersion({...i,autosave:true})}async deleteVersions(i){let{collection:e,documentId:n,keepLatest:s,tenantID:t}=i,o=this.getMongoCollection(`${e}_versions`);if(s){let r={document_id:n,autosave:{$ne:true}};t&&(r.tenant_id=t);let l=(await o.find(r).sort({createdAt:-1}).limit(s).project({_id:1}).toArray()).map(c=>c._id);l.length>0&&await o.deleteMany({document_id:n,autosave:{$ne:true},_id:{$nin:l},...t?{tenant_id:t}:{}});}else {let r={document_id:n};t&&(r.tenant_id=t),await o.deleteMany(r);}}async migrate(){for(let i of this.collections.values()){let e=this.getMongoCollection(i.slug);await e.createIndex({_id:1}),i.tenantScoped&&await e.createIndex({tenantId:1}),i.timestamps&&await e.createIndex({createdAt:-1});for(let n of i.fields)n.unique&&n.name&&await e.createIndex({[n.name]:1},{unique:true}),n.indexed&&n.name&&await e.createIndex({[n.name]:1});}}getCollectionConfig(i){let e=this.collections.get(i);if(!e)throw new Error(`Collection "${i}" not found`);return e}buildFilter(i={},e){let n={};e&&(n.tenantId=e);for(let[s,t]of Object.entries(i))if(s==="AND"&&Array.isArray(t)){let o=t.map(r=>this.buildFilter(r));Object.assign(n,...o);}else if(s==="OR"&&Array.isArray(t))n.$or=t.map(o=>this.buildFilter(o));else if(typeof t=="object"&&t!==null&&!Array.isArray(t)){let o={};if(t.equals!==void 0){n[s==="id"?"_id":s]=t.equals;continue}t.not_equals!==void 0&&(o.$ne=t.not_equals),t.in!==void 0&&(o.$in=t.in),t.not_in!==void 0&&(o.$nin=t.not_in),t.greater_than!==void 0&&(o.$gt=t.greater_than),t.greater_than_equal!==void 0&&(o.$gte=t.greater_than_equal),t.less_than!==void 0&&(o.$lt=t.less_than),t.less_than_equal!==void 0&&(o.$lte=t.less_than_equal),t.like!==void 0&&(o.$regex=new RegExp(t.like.replace(/%/g,".*"),"i")),t.not_like!==void 0&&(o.$not=new RegExp(t.not_like.replace(/%/g,".*"),"i")),t.contains!==void 0&&(o.$regex=new RegExp(`.*${t.contains}.*`,"i")),t.exists!==void 0&&(o.$exists=t.exists),Object.keys(o).length>0&&(n[s==="id"?"_id":s]=o);}else n[s==="id"?"_id":s]=t;return n}buildProjection(i){if(!i||i.length===0)return;let e={_id:1};for(let n of i)e[n]=1;return e}processResult(i,e){if(!i)return null;let n={...i};return i._id&&(n.id=i._id,delete n._id),delete n.__v,n.createdAt&&(n.createdAt=new Date(n.createdAt).toISOString()),n.updatedAt&&(n.updatedAt=new Date(n.updatedAt).toISOString()),n}generateId(){let i=Date.now().toString(16).padStart(12,"0"),e=randomBytes(6).toString("hex");return i+e}};function M(w){return new _(w)}
+export{_ as a,M as b};

package/dist/chunk-GFU7AOI3.cjs

@@ -0,0 +1 @@
+'use strict';var e={slug:"users",label:"Users",fields:[{name:"name",type:"text",label:"Name"},{name:"email",type:"email",required:true},{name:"passwordHash",type:"text",label:"Password Hash",admin:{hidden:true}},{name:"role",type:"select",options:[{label:"Super Admin",value:"super_admin"},{label:"Admin",value:"admin"},{label:"Editor",value:"editor"},{label:"Author",value:"author"},{label:"Customer",value:"customer"},{label:"Guest",value:"guest"}],required:true},{name:"avatar",type:"upload",relationTo:"media",label:"Profile Picture"},{name:"tenantId",type:"text",label:"Tenant"},{name:"emailVerified",type:"checkbox",label:"Email Verified"},{name:"locked",type:"checkbox"},{name:"lastLogin",type:"date",time:true,label:"Last Login",admin:{readOnly:true}},{name:"failedLoginAttempts",type:"number",label:"Failed Login Attempts",admin:{readOnly:true}}],timestamps:true,admin:{useAsTitle:"email",defaultColumns:["email","role","tenantId","lastLogin"]}},t={slug:"audit_logs",label:"Audit Logs",fields:[{name:"action",type:"text",required:true},{name:"userId",type:"text",label:"User ID"},{name:"userEmail",type:"email",label:"User Email"},{name:"role",type:"text"},{name:"resource",type:"text",label:"Resource"},{name:"ipAddress",type:"text",label:"IP Address"},{name:"success",type:"checkbox"},{name:"timestamp",type:"date",time:true,required:true,admin:{readOnly:true}}],admin:{defaultColumns:["action","userEmail","resource","success","timestamp"]}},a={users:e,audit_logs:t};exports.a=e;exports.b=a;