@kyro-cms/core 0.11.2 → 0.11.4

package/dist/chunk-WQKF57FY.js

@@ -1,86 +0,0 @@
-import {c,a as a$2,b as b$1}from'./chunk-7WOX27LK.js';import {a as a$3}from'./chunk-AE6GXUT7.js';import {a as a$9}from'./chunk-2W4FK6CJ.js';import {a as a$1}from'./chunk-NRLIGDYF.js';import {d,a as a$4,b as b$2,c as c$3}from'./chunk-QIP7PY2U.js';import {d as d$1,i,j,f,e as e$1,g}from'./chunk-HLSB2MCK.js';import {e,c as c$2}from'./chunk-GDMLWVJO.js';import {a as a$6}from'./chunk-RHCWCG3O.js';import {a as a$7}from'./chunk-TYOVXKQP.js';import {a as a$8}from'./chunk-P7CESLDJ.js';import {a as a$5}from'./chunk-KDNYHLD2.js';import {a,b,c as c$1}from'./chunk-5J6HXUF6.js';import tr,{randomBytes,createHash,createHmac}from'crypto';import {createStorage}from'unstorage';import nr from'unstorage/drivers/fs';import {Hono}from'hono';import $e,{join,resolve,basename,extname}from'path';import {existsSync,readFileSync}from'fs';import lt from'sharp';import {mkdir,readdir,stat,rename,unlink,writeFile}from'fs/promises';import wr from'process';import {S3Client,ListObjectsV2Command,DeleteObjectsCommand,DeleteObjectCommand,PutObjectCommand,HeadObjectCommand,CopyObjectCommand}from'@aws-sdk/client-s3';import {NodeHttpHandler}from'@smithy/node-http-handler';import {Readable}from'stream';import {Client}from'basic-ftp';import {zodToJsonSchema}from'zod-to-json-schema';function Br(l){ze=l;}async function Rt(){if(ze)try{let l=await ze.findOne({collection:"_globals_system",where:{}});if(l){te={appSecret:l.appSecret||null,encryptionKey:l.encryptionKey||null,sessionConfig:l.sessionMaxAge||l.maxSessionsPerUser?{maxAge:(l.sessionMaxAge||7)*24*60*60*1e3,maxSessionsPerUser:l.maxSessionsPerUser||3}:null};return}}catch{}te={appSecret:process.env.APP_SECRET||"development-secret-key",encryptionKey:null,sessionConfig:null};}function rr(){return te?.appSecret?te.appSecret:process.env.APP_SECRET||"development-secret-key"}function Mr(){if(te?.encryptionKey)return te.encryptionKey;let l=rr();return tr.createHash("sha256").update(l).digest("hex")}function Tt(){return te?.sessionConfig?te.sessionConfig:{maxAge:10080*60*1e3,maxSessionsPerUser:3}}var ze,te,We=a(()=>{ze=null,te=null;});var kt={};b(kt,{SESSION_CONFIG:()=>ee,clearSessionCookie:()=>Ge,createSession:()=>Je,deleteSession:()=>fe,getClientIp:()=>He,getCurrentUser:()=>V,getSession:()=>ce,getSessionIdFromRequest:()=>G,getUserSessions:()=>he,invalidateAllUserSessions:()=>dr,refreshSession:()=>Ue,setSessionCookie:()=>Xe,updateSessionName:()=>Ze,validateSession:()=>Pe});async function re(){return Re||(Re=createStorage({driver:nr({base:".astro/sessions"})}),Re)}function ir(){return tr.randomUUID()}function Ut(l){let e="Unknown",t="Unknown",s="Unknown";return l.includes("Firefox")?e="Firefox":l.includes("Edg/")?e="Edge":l.includes("Chrome")?e="Chrome":l.includes("Safari")&&!l.includes("Chrome")&&(e="Safari"),l.includes("iPhone")?(t="iPhone",s="iOS"):l.includes("iPad")?(t="iPad",s="iOS"):l.includes("Mac")?(t="MacBook",s="macOS"):l.includes("Windows")?(t="Windows PC",s="Windows"):l.includes("Linux")?(t="Linux PC",s="Linux"):l.includes("Android")&&(t="Android Phone",s="Android"),{browser:e,device:t,platform:s}}function or(l){if(!l?.userAgent)return "Session";let{browser:e,device:t}=Ut(l.userAgent);return `${t} - ${e}`}function G(l){let e=l.headers.get("Cookie");return e&&Object.fromEntries(e.split("; ").map(s=>s.split("=")))[Ve]||null}function He(l){let e=l.headers.get("x-forwarded-for");return e?e.split(",")[0].trim():l.headers.get("x-real-ip")||"unknown"}function Xe(l,e){let s=process.env.NODE_ENV==="production"?"Secure; ":"",n=new Headers(l.headers);return n.append("Set-Cookie",`${Ve}=${e}; HttpOnly; Path=/; Max-Age=${ee.absoluteMaxAge/1e3}; SameSite=Strict; ${s}`),new Response(l.body,{status:l.status,statusText:l.statusText,headers:n})}function Ge(l){let t=process.env.NODE_ENV==="production"?"Secure; ":"",s=new Headers(l.headers);return s.append("Set-Cookie",`${Ve}=; HttpOnly; Path=/; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=Strict; ${t}`),new Response(l.body,{status:l.status,statusText:l.statusText,headers:s})}async function Te(l){return await(await re()).getItem(`user:${l}`)||[]}async function Ye(l,e){let t=await re();e.length>0?await t.setItem(`user:${l}`,e):await t.removeItem(`user:${l}`);}async function Je(l,e){let t=await re(),s=await Te(l.id);for(;s.length>=ee.maxSessionsPerUser;){let A=s.shift();A&&await t.removeItem(`session:${A}`);}let n=ir(),c=Date.now(),d=e?.headers.get("user-agent"),u=e?He(e):"unknown",g=d?{userAgent:d,ip:u,...Ut(d)}:{ip:u},f={id:n,userId:l.id,email:l.email,role:l.role,tenantId:l.tenantId,permissions:l.permissions,createdAt:c,expiresAt:c+ee.absoluteMaxAge,lastActivityAt:c,deviceInfo:g,sessionName:or(g)};return await t.setItem(`session:${n}`,f,{ttl:Math.floor(ee.absoluteMaxAge/1e3)}),s.push(n),await Ye(l.id,s),n}async function ce(l){return await(await re()).getItem(`session:${l}`)||null}async function Pe(l){let e=await ce(l);return e?e.expiresAt<Date.now()?(await fe(l),{valid:false,reason:"Session expired"}):{valid:true}:{valid:false,reason:"Session not found"}}async function Ue(l,e){let t=await re(),s=await ce(l);if(!s)return null;let n=Date.now(),c=s.expiresAt-n,d=s.deviceInfo;if(e){let f=He(e);f!==s.deviceInfo?.ip&&(d={...s.deviceInfo,ip:f});}let u={...s,lastActivityAt:n,expiresAt:c<ee.refreshThreshold?n+ee.absoluteMaxAge:s.expiresAt,deviceInfo:d},g=c<ee.refreshThreshold?ee.absoluteMaxAge:void 0;return await t.setItem(`session:${l}`,u,g?{ttl:Math.floor(g/1e3)}:void 0),u}async function fe(l){let e=await re(),t=await ce(l);if(t){let n=(await Te(t.userId)).filter(c=>c!==l);await Ye(t.userId,n);}await e.removeItem(`session:${l}`),await e.removeItem(`activity:${l}`);}async function dr(l){let e=await Te(l),t=await re();for(let s of e)await t.removeItem(`session:${s}`),await t.removeItem(`activity:${s}`);await Ye(l,[]);}async function he(l,e){let t=await Te(l),s=[];for(let n of t){let c=await ce(n);c&&s.push({id:c.id,sessionName:c.sessionName||"Session",deviceInfo:c.deviceInfo,createdAt:c.createdAt,lastActivityAt:c.lastActivityAt,currentSession:c.id===e});}return s.sort((n,c)=>c.lastActivityAt-n.lastActivityAt),s}async function Ze(l,e){let t=await ce(l);return t?(await(await re()).setItem(`session:${l}`,{...t,sessionName:e}),true):false}async function V(l){let e=G(l);if(!e||!(await Pe(e)).valid)return null;let s=await ce(e);return s?(await Ue(e,l),s):null}var Pt,ee,Ve,Re,ke=a(()=>{We();Pt=Tt(),ee={absoluteMaxAge:Pt.maxAge,maxSessionsPerUser:Pt.maxSessionsPerUser,refreshThreshold:300*1e3,activityDebounce:30*1e3,pollInterval:30*1e3},Ve="kyro-session",Re=null;});ke();function jt(l){let{db:t,userLookup:s}=l;return async function(c){let d=f(c);if(d&&t){let g$1=await e$1(d,t,s);if(g$1.valid&&g$1.user)return {user:g$1.user,tenantContext:qt(g$1.user),apiKeyContext:g(g$1),status:200,authType:"apikey"};if(g$1.error)return {status:401,error:g$1.error}}let u=G(c);if(u)try{let g=await Pe(u);if(!g.valid)return {status:401,error:g.reason||"Session invalid"};let f=await V(c);if(f){let A=s?await s(f.userId):null;if(A)return {user:A,tenantContext:qt(A),status:200,authType:"session"}}}catch(g){console.error("Session validation error:",g);}return {status:401,error:"Authentication required"}}}function qt(l){return {tenantId:l.tenantId||"default",userId:l.id||"anonymous",role:l.role||"guest",roles:[l.role||"guest"],permissions:[],isSuperAdmin:l.role==="super_admin"}}We();var qe=class{storage=new Map;userStorage=new Map;limits;userLimits;constructor(e,t){this.limits={...lr,...e},this.userLimits=t||{"user:api":{window:6e4,max:500},"user:write":{window:36e5,max:100}};}getKey(e,t){return `${e}:${t}`}getUserKey(e,t,s){return `user:${e}:${t}:${s}`}cleanupOldEntries(e,t){let n=Date.now()-t;for(;e.length>0&&e[0].timestamp<n;)e.shift();}async check(e,t){let s=this.limits[e]||this.limits["api:general"],n=this.getKey(e,t),c=this.storage.get(n);c||(c=[],this.storage.set(n,c)),this.cleanupOldEntries(c,s.window);let d=Date.now(),u=c.reduce((g,f)=>g+f.count,0);if(c.push({timestamp:d,count:1}),u>=s.max){let f=c.reduce((A,w)=>A.timestamp<w.timestamp?A:w,c[0]).timestamp+s.window;return {allowed:false,remaining:0,resetAt:f,retryAfter:Math.ceil((f-d)/1e3)}}return {allowed:true,remaining:s.max-u-1,resetAt:d+s.window}}async checkUser(e,t,s){let n=this.userLimits[e]||this.userLimits["user:api"],c=this.userStorage.get(t),d=[];c?d=c.get(this.getKey(e,s))||[]:(this.userStorage.has(t)||this.userStorage.set(t,new Map),this.userStorage.get(t).set(this.getKey(e,s),d)),this.cleanupOldEntries(d,n.window);let u=Date.now(),g=d.reduce((f,A)=>f+A.count,0);if(d.push({timestamp:u,count:1}),g>=n.max){let A=d.reduce((w,U)=>w.timestamp<U.timestamp?w:U,d[0]).timestamp+n.window;return {allowed:false,remaining:0,resetAt:A,retryAfter:Math.ceil((A-u)/1e3)}}return {allowed:true,remaining:n.max-g-1,resetAt:u+n.window}}async reset(e,t){let s=this.getKey(e,t);this.storage.delete(s);}async resetUser(e,t,s){let n=this.userStorage.get(t);if(n){let c=this.getKey(e,s);n.delete(c);}}async getStatus(e,t){let s=this.limits[e]||this.limits["api:general"],n=this.getKey(e,t),c=this.storage.get(n);c||(c=[],this.storage.set(n,c)),this.cleanupOldEntries(c,s.window);let d=Date.now(),u=c.reduce((g,f)=>g+f.count,0);return {count:u,limit:s.max,remaining:Math.max(0,s.max-u),resetAt:d+s.window}}setLimit(e,t){this.limits[e]=t;}setUserLimit(e,t){this.userLimits[e]=t;}},lr={"auth:login":{window:9e5,max:5},"auth:register":{window:36e5,max:3},"auth:forgot":{window:36e5,max:3},"auth:reset":{window:36e5,max:5},"auth:verify":{window:36e5,max:5},"api:general":{window:6e4,max:100},"api:authenticated":{window:6e4,max:200}};var Qe={retentionDays:30};var Et=class{redis;prefix;retentionDays;constructor(e,t=30,s="kyro:audit:"){this.redis=e,this.prefix=s,this.retentionDays=t;}async log(e){let t=randomBytes(16).toString("hex"),s=new Date,n={...e,id:t,timestamp:s},c=this.getKeyForDate(s),d=`${this.prefix}log:${t}`;await this.redis.hset(d,this.serializeLog(n)),await this.redis.expire(d,this.retentionDays*24*60*60+3600),await this.redis.zadd(c,s.getTime(),t),await this.redis.expire(c,this.retentionDays*24*60*60+3600);let u=e.userId?`${this.prefix}user:${e.userId}`:null;return u&&(await this.redis.zadd(u,s.getTime(),t),await this.redis.expire(u,this.retentionDays*24*60*60+3600)),t}async get(e){let t=`${this.prefix}log:${e}`,s=await this.redis.hgetall(t);return !s||Object.keys(s).length===0?null:this.deserializeLog(s)}async query(e={}){let{limit:t=50,offset:s=0}=e,n=[];if(e.userId)n.push(`${this.prefix}user:${e.userId}`);else if(e.startDate||e.endDate)n=this.getKeysForDateRange(e.startDate,e.endDate);else {let g=new Date;n=this.getKeysForDateRange(new Date(g.getTime()-this.retentionDays*24*60*60*1e3),g);}let c=[];for(let g of n){let f=await this.redis.zrange(g,0,-1,"WITHSCORES");for(let A=0;A<f.length;A+=2)c.push([f[A],parseInt(f[A+1],10)]);}c.sort((g,f)=>f[1]-g[1]);let d=c.length;c=c.slice(s,s+t);let u=[];for(let[g]of c){let f=await this.get(g);f&&this.matchesFilter(f,e)&&u.push(f);}return {logs:u,total:d}}async getRecent(e=50){let t=[],s=new Date,n=this.getKeysForDateRange(new Date(s.getTime()-10080*60*1e3),s),c=[];for(let d of n){let u=await this.redis.zrange(d,0,-1,"WITHSCORES");for(let g=0;g<u.length;g+=2)c.push([u[g],parseInt(u[g+1],10)]);}c.sort((d,u)=>u[1]-d[1]);for(let[d]of c.slice(0,e)){let u=await this.get(d);u&&t.push(u);}return t}async getUserActivity(e,t=50){let s=`${this.prefix}user:${e}`,n=await this.redis.zrange(s,0,t-1),c=[];for(let d of n){let u=await this.get(d);u&&c.push(u);}return c}async getStats(e,t){let s=this.getKeysForDateRange(e||new Date(Date.now()-2592e6),t||new Date),n={},c=0,d=0,u=0,g=new Set;for(let f of s){let A=await this.redis.zrange(f,0,-1);for(let w of A){let U=await this.get(w);U&&(c++,n[U.action]=(n[U.action]||0)+1,U.success&&u++,U.action==="login_failed"&&d++,U.userId&&g.add(U.userId));}}return {totalEvents:c,byAction:n,successRate:c>0?u/c:1,failedLogins:d,uniqueUsers:g}}async cleanup(){let e=Date.now()-this.retentionDays*24*60*60*1e3,t=await this.redis.keys(`${this.prefix}date:*`),s=0;for(let n of t){let c=await this.redis.zrangebyscore(n,0,e);for(let d of c)await this.redis.del(`${this.prefix}log:${d}`),s++;await this.redis.zremrangebyscore(n,0,e);}return s}getKeyForDate(e){let t=e.getFullYear(),s=String(e.getMonth()+1).padStart(2,"0"),n=String(e.getDate()).padStart(2,"0");return `${this.prefix}date:${t}-${s}-${n}`}getKeysForDateRange(e,t){let s=[],n=e||new Date(Date.now()-this.retentionDays*24*60*60*1e3),c=t||new Date,d=new Date(n);for(;d<=c;)s.push(this.getKeyForDate(d)),d.setDate(d.getDate()+1);return s}matchesFilter(e,t){return !(t.action&&!(Array.isArray(t.action)?t.action:[t.action]).includes(e.action)||t.resource&&e.resource!==t.resource||t.resourceId&&e.resourceId!==t.resourceId||t.success!==void 0&&e.success!==t.success)}serializeLog(e){let t={id:e.id,timestamp:new Date(e.timestamp).toISOString(),action:e.action,resource:e.resource,success:e.success?"1":"0"};return e.userId&&(t.userId=e.userId),e.userEmail&&(t.userEmail=e.userEmail),e.role&&(t.role=e.role),e.resourceId&&(t.resourceId=e.resourceId),e.ipAddress&&(t.ipAddress=e.ipAddress),e.userAgent&&(t.userAgent=e.userAgent),e.error&&(t.error=e.error),e.changes&&(t.changes=JSON.stringify(e.changes)),e.metadata&&(t.metadata=JSON.stringify(e.metadata)),t}deserializeLog(e){return {id:e.id,timestamp:new Date(e.timestamp),action:e.action,userId:e.userId,userEmail:e.userEmail,role:e.role,resource:e.resource,resourceId:e.resourceId,ipAddress:e.ipAddress,userAgent:e.userAgent,success:e.success==="1",error:e.error,changes:e.changes?JSON.parse(e.changes):void 0,metadata:e.metadata?JSON.parse(e.metadata):void 0}}};function rs(l){return {ipAddress:l.headers.get("x-forwarded-for")?.split(",")[0]?.trim()||l.headers.get("x-real-ip")||"unknown",userAgent:l.headers.get("user-agent")||"unknown"}}var Ct=class{logs=[];retentionDays;constructor(e=Qe.retentionDays){this.retentionDays=e;}async log(e){let t=randomBytes(16).toString("hex"),n={...e,id:t,timestamp:new Date};return this.logs.push(n),this.cleanupOldLogs(),t}async get(e){return this.logs.find(t=>t.id===e)||null}async query(e={}){let{limit:t=50,offset:s=0}=e,n=[...this.logs];if(e.userId&&(n=n.filter(f=>f.userId===e.userId)),e.action){let f=Array.isArray(e.action)?e.action:[e.action];n=n.filter(A=>f.includes(A.action));}e.resource&&(n=n.filter(f=>f.resource===e.resource)),e.resourceId&&(n=n.filter(f=>f.resourceId===e.resourceId)),e.success!==void 0&&(n=n.filter(f=>f.success===e.success));let c=e.startDate,d=e.endDate;c!==void 0&&(n=n.filter(f=>f.timestamp>=c)),d!==void 0&&(n=n.filter(f=>f.timestamp<=d)),n.sort((f,A)=>A.timestamp.getTime()-f.timestamp.getTime());let u=n.length;return {logs:n.slice(s,s+t),total:u}}async getRecent(e=50){let t=new Date(Date.now()-6048e5);return this.logs.filter(n=>n.timestamp>=t).sort((n,c)=>c.timestamp.getTime()-n.timestamp.getTime()).slice(0,e)}async getUserActivity(e,t=50){return this.logs.filter(n=>n.userId===e).sort((n,c)=>c.timestamp.getTime()-n.timestamp.getTime()).slice(0,t)}async getStats(e,t){let s=e||new Date(Date.now()-2592e6),n=t||new Date,c=this.logs.filter(w=>w.timestamp>=s&&w.timestamp<=n),d={},u=0,g=0,f=0,A=new Set;for(let w of c){u++;let U=w.action;d[U]=(d[U]||0)+1,w.success&&f++,w.action==="login_failed"&&g++,w.userId&&A.add(w.userId);}return {totalEvents:u,byAction:d,successRate:u>0?f/u:1,failedLogins:g,uniqueUsers:A}}async cleanup(){let e=new Date(Date.now()-this.retentionDays*24*60*60*1e3),t=this.logs.length;return this.logs=this.logs.filter(s=>s.timestamp>=e),t-this.logs.length}cleanupOldLogs(){let e=new Date(Date.now()-this.retentionDays*24*60*60*1e3);this.logs.length;this.logs=this.logs.filter(s=>s.timestamp>=e);}};ke();var je=class{authAdapter;email;passwordPolicy;lockout;rateLimiter;auditLogger;baseUrl;emailVerificationRequired;constructor(e){this.authAdapter=e.redis,this.email=e.email,this.passwordPolicy=e.passwordPolicy||new c,this.lockout=e.lockout,this.rateLimiter=e.rateLimiter,this.auditLogger=e.auditLogger,this.baseUrl=e.baseUrl||"http://localhost:3000",this.emailVerificationRequired=e.emailVerificationRequired??true;}async register(e){let{ipAddress:t,userAgent:s}=a$1(e);if(this.rateLimiter){let n=await this.rateLimiter.check("auth:register",t);if(!n.allowed)return this.rateLimitResponse(n)}try{let n=await e.json();if(!n.email||!n.password)return this.errorResponse("Email and password are required",400);if(n.password!==n.confirmPassword)return this.errorResponse("Passwords do not match",400);let c=this.passwordPolicy.validate(n.password);if(!c.valid)return this.errorResponse(c.errors.join(". "),400);if(await this.authAdapter.findUserByEmail(n.email))return this.errorResponse("Email already registered",400);let u=await this.authAdapter.createUser({email:n.email,password:n.password,role:n.role||"customer",tenantId:n.tenantId});if(this.emailVerificationRequired&&this.email){let g=randomBytes(32).toString("hex"),f=`${this.baseUrl}/api/auth/verify?token=${g}`;await this.authAdapter.createSession(u.id,{ipAddress:t,userAgent:s});let A=this.email.getTemplates().verifyEmail(f,n.email);await this.email.send({to:n.email,...A});}return this.auditLogger&&await this.auditLogger.log({action:"register",userId:u.id,userEmail:u.email,resource:"auth",ipAddress:t,userAgent:s,success:!0}),this.jsonResponse({success:!0,message:"Registration successful",user:this.sanitizeUser(u),requiresVerification:this.emailVerificationRequired&&!!this.email},201)}catch(n){return console.error("[AuthRoutes.register] Registration error:",n),this.errorResponse("Registration failed",500)}}async login(e){let{ipAddress:t,userAgent:s}=a$1(e);if(this.rateLimiter){let n=await this.rateLimiter.check("auth:login",t);if(!n.allowed)return this.rateLimitResponse(n)}try{let n=await e.json();if(!n.email||!n.password)return this.errorResponse("Email and password are required",400);let c=await this.authAdapter.findUserByEmail(n.email);if(!c)return await this.recordFailedLogin(t,s),this.errorResponse("Invalid credentials",401);if(c.locked)return this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:c.id,userEmail:c.email,resource:"auth",ipAddress:t,userAgent:s,success:!1,error:"Account locked"}),this.errorResponse("Account locked. Contact an administrator.",403);if(this.lockout){let A=await this.lockout.checkLockout(c.id);if(A.locked)return this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:c.id,userEmail:c.email,resource:"auth",ipAddress:t,userAgent:s,success:!1,error:"Account locked"}),this.errorResponse(`Account locked. Try again in ${Math.ceil((A.lockedUntil.getTime()-Date.now())/6e4)} minutes`,423)}if(!await this.authAdapter.verifyPassword(n.email,n.password))return await this.recordFailedLogin(t,s,c.id,c.email),this.errorResponse("Invalid credentials",401);this.lockout&&await this.lockout.resetAttempts(c.id),this.auditLogger&&await this.auditLogger.log({action:"login",userId:c.id,userEmail:c.email,role:c.role,resource:"auth",ipAddress:t,userAgent:s,success:!0}),await this.authAdapter.updateUser(c.id,{lastLogin:new Date().toISOString()});let u=await Je({id:c.id,email:c.email,role:c.role,tenantId:c.tenantId}),g={success:!0,user:this.sanitizeUser(c)},f=this.jsonResponse(g);return Xe(f,u)}catch(n){return console.error("[Auth] Login error:",n),this.errorResponse("Login failed",500)}}async logout(e){let t=G(e);if(!t)return this.errorResponse("No session to logout",401);let{ipAddress:s,userAgent:n}=a$1(e);try{let c=await V(e);c&&(await fe(t),this.auditLogger&&await this.auditLogger.log({action:"logout",userId:c.userId,userEmail:c.email,resource:"auth",ipAddress:s,userAgent:n,success:!0}));let d=this.jsonResponse({success:!0,message:"Logged out successfully"});return Ge(d)}catch{return this.errorResponse("Logout failed",500)}}async refresh(e){try{let t=G(e);if(!t)return this.errorResponse("Not authenticated",401);let s=await Ue(t,e);return s?this.jsonResponse({success:!0,expiresAt:s.expiresAt}):this.errorResponse("Session not found",404)}catch(t){return console.error("[Auth] Session refresh error:",t),this.errorResponse("Session refresh failed",500)}}async me(e){let t=await V(e);return t?this.jsonResponse({success:true,user:{id:t.userId,email:t.email,role:t.role,tenantId:t.tenantId}}):this.errorResponse("Not authenticated",401)}async changePassword(e){let t=await V(e);if(!t)return this.errorResponse("Not authenticated",401);let{ipAddress:s,userAgent:n}=a$1(e);try{let c=await e.json(),{currentPassword:d,newPassword:u,confirmPassword:g}=c;if(!d||!u)return this.errorResponse("Current and new password required",400);if(u!==g)return this.errorResponse("Passwords do not match",400);let f=this.passwordPolicy.validate(u);if(!f.valid)return this.errorResponse(f.errors.join(". "),400);let A=await this.authAdapter.findUserById(t.userId);if(!A)return this.errorResponse("User not found",404);if(!(A.passwordHash?await this.authAdapter.verifyPassword(d,A.passwordHash):!1))return this.errorResponse("Current password is incorrect",401);let U=await this.authAdapter.getPasswordHistory?.(A.id,5);if(await this.authAdapter.isPasswordInHistory?.(u,A.id,5))return this.errorResponse("Password was recently used. Please choose a different password",400);let k=await this.authAdapter.hashPassword(u);if(A.passwordHash&&await this.authAdapter.addPasswordToHistory?.(A.id,A.passwordHash),await this.authAdapter.updateUser(A.id,{passwordHash:k}),await this.authAdapter.deleteUserSessions(A.id),this.email&&this.email.getTemplates){let _=this.email.getTemplates().passwordChanged(A.email);await this.email.send({to:A.email,..._});}return this.auditLogger&&await this.auditLogger.log({action:"password_change",userId:A.id,userEmail:A.email,resource:"auth",ipAddress:s,userAgent:n,success:!0}),this.jsonResponse({success:!0,message:"Password changed successfully"})}catch{return this.errorResponse("Password change failed",500)}}async forgotPassword(e){let{ipAddress:t,userAgent:s}=a$1(e);if(this.rateLimiter){let n=await this.rateLimiter.check("auth:forgot",t);if(!n.allowed)return this.rateLimitResponse(n)}try{let n=await e.json(),{email:c}=n;if(!c)return this.errorResponse("Email required",400);let d=await this.authAdapter.findUserByEmail(c);if(!d)return this.jsonResponse({success:!0,message:"If the email exists, a reset link has been sent"});if(this.email){let u=randomBytes(32).toString("hex"),g=`${this.baseUrl}/api/auth/reset-password?token=${u}`,f=this.email.getTemplates().resetPassword(g,d.email);await this.email.send({to:d.email,...f});}return this.auditLogger&&await this.auditLogger.log({action:"password_reset",userId:d.id,userEmail:d.email,resource:"auth",ipAddress:t,userAgent:s,success:!0}),this.jsonResponse({success:!0,message:"If the email exists, a reset link has been sent"})}catch{return this.errorResponse("Password reset request failed",500)}}async verifyEmail(e){if(!new URL(e.url).searchParams.get("token"))return this.errorResponse("Verification token required",400);try{return this.jsonResponse({success:!0,message:"Email verified"})}catch{return this.errorResponse("Email verification failed",500)}}async recordFailedLogin(e,t,s,n){this.lockout&&await this.lockout.recordFailedAttempt(s||e),this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:s,userEmail:n,resource:"auth",ipAddress:e,userAgent:t,success:false,error:"Invalid credentials"});}sanitizeUser(e){let{passwordHash:t,...s}=e;return s}jsonResponse(e,t=200){return new Response(JSON.stringify(e),{status:t,headers:{"Content-Type":"application/json","Cache-Control":"no-store, no-cache, must-revalidate, max-age=0"}})}async listSessions(e){let t=await V(e);if(!t)return this.errorResponse("Not authenticated",401);try{let s=await he(t.userId,G(e)??void 0);return this.jsonResponse({sessions:s})}catch(s){return console.error("[AuthRoutes.listSessions] Error:",s),this.errorResponse("Failed to list sessions",500)}}async revokeSession(e,t){let s=await V(e);if(!s)return this.errorResponse("Not authenticated",401);try{let c=(await he(s.userId)).find(d=>d.id===t);return c?c.currentSession?this.errorResponse("Cannot revoke current session",400):(await fe(t),this.jsonResponse({success:!0,message:"Session revoked"})):this.errorResponse("Session not found",404)}catch(n){return console.error("[AuthRoutes.revokeSession] Error:",n),this.errorResponse("Failed to revoke session",500)}}async revokeOtherSessions(e){let t=await V(e);if(!t)return this.errorResponse("Not authenticated",401);try{let s=await he(t.userId),n=G(e);for(let c of s)c.currentSession||await fe(c.id);return this.jsonResponse({success:!0,message:"Other sessions revoked"})}catch(s){return console.error("[AuthRoutes.revokeOtherSessions] Error:",s),this.errorResponse("Failed to revoke sessions",500)}}async renameSession(e,t){let s=await V(e);if(!s)return this.errorResponse("Not authenticated",401);try{if(!(await he(s.userId)).find(g=>g.id===t))return this.errorResponse("Session not found",404);let d=await e.json(),{name:u}=d;return !u||typeof u!="string"||u.trim().length===0?this.errorResponse("Invalid session name",400):(await Ze(t,u.trim()),this.jsonResponse({success:!0,message:"Session renamed"}))}catch(n){return console.error("[AuthRoutes.renameSession] Error:",n),this.errorResponse("Failed to rename session",500)}}async refreshSession(e){let t=G(e);if(!t)return this.errorResponse("No session",401);try{let s=await(ke(),c$1(kt)).refreshSession(t,e);return s?this.jsonResponse({success:!0,expiresAt:s.expiresAt}):this.errorResponse("Session not found",404)}catch(s){return console.error("[AuthRoutes.refreshSession] Error:",s),this.errorResponse("Failed to refresh session",500)}}errorResponse(e,t){return new Response(JSON.stringify({success:false,error:e}),{status:t,headers:{"Content-Type":"application/json"}})}async rateLimitResponse(e){return new Response(JSON.stringify({success:false,error:"Too many requests",retryAfter:e.retryAfter}),{status:429,headers:{"Content-Type":"application/json","Retry-After":String(e.retryAfter||60)}})}};function ue(l){let{uploadDir:e=join(wr.cwd(),"public","uploads"),baseUrl:t="/uploads"}=l;async function s(d){existsSync(d)||await mkdir(d,{recursive:true});}function n(d){let u=extname(d).toLowerCase();return {".jpg":"image/jpeg",".jpeg":"image/jpeg",".png":"image/png",".gif":"image/gif",".webp":"image/webp",".avif":"image/avif",".svg":"image/svg+xml",".mp4":"video/mp4",".webm":"video/webm",".mov":"video/quicktime",".avi":"video/x-msvideo",".mp3":"audio/mpeg",".wav":"audio/wav",".ogg":"audio/ogg",".pdf":"application/pdf",".doc":"application/msword",".docx":"application/vnd.openxmlformats-officedocument.wordprocessingml.document",".xls":"application/vnd.ms-excel",".xlsx":"application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",".zip":"application/zip",".tar":"application/x-tar",".gz":"application/gzip",".rar":"application/vnd.rar",".7z":"application/x-7z-compressed"}[u]||"application/octet-stream"}async function c(d){try{let u=d.toString("hex",0,8);if(u.startsWith("89504e47")){let g=d.readUInt32BE(16),f=d.readUInt32BE(20);return {width:g,height:f}}if(u.startsWith("ffd8")){let g=2;for(;g<d.length&&d[g]===255;){let f=d[g+1];if(f===192||f===194){let A=d.readUInt16BE(g+5);return {width:d.readUInt16BE(g+7),height:A}}g+=2+d.readUInt16BE(g+2);}}}catch{}return {}}return se({name:"local",displayName:"Local Storage",supportsDynamicResize:true,async upload(d,u){await s(e);let g=Buffer.from(await d.arrayBuffer()),f=createHash("md5").update(g).digest("hex"),A=extname(d.name),w=u?.filename||`${f}${A}`,U=u?.folder||"",R=U?join(e,U):e;await s(R);let k=join(R,w);await writeFile(k,g);let _=d.type.startsWith("image/")?await c(g):{},B=t||"/uploads",ae=U?`/${U}/${w}`:`/${w}`,q=B+ae;return {id:f,filename:w,originalName:d.name,mimeType:d.type||n(d.name),size:g.length,url:q,thumbnailUrl:d.type.startsWith("image/")?q:void 0,folder:U||void 0,provider:"local",metadata:{..._,...u?.metadata},createdAt:new Date().toISOString()}},async uploadFromUrl(d,u){let g=await fetch(d);if(!g.ok)throw new Error(`Failed to fetch file: ${g.statusText}`);let f=await g.blob(),A=g.headers.get("content-disposition"),w=u?.filename;if(!w&&A){let R=A.match(/filename[^;=\n]*=((['"]).*?\2|[^;\n]*)/);R&&(w=R[1].replace(/['"]/g,""));}w||(w=basename(new URL(d).pathname));let U=new File([f],w,{type:f.type||n(w)});return this.upload(U,u)},async delete(d){let u=join(e,d.replace(t+"/",""));try{await unlink(u);}catch{}},async rename(d,u){let g=join(e,d.replace(t+"/","")),f=join(e,u);return await rename(g,f),`${t}/${u}`},async list(d){let u=d?join(e,d):e;if(!existsSync(u))return [];let g=[],f=await readdir(u,{withFileTypes:true});for(let A of f)if(A.isFile()){let w=join(u,A.name),U=await stat(w),R=`${t}${d?`/${d}`:""}/${A.name}`;g.push({id:createHash("md5").update(A.name).digest("hex"),filename:A.name,originalName:A.name,mimeType:n(A.name),size:U.size,url:R,provider:"local",createdAt:U.birthtime.toISOString()});}return g},async exists(d){let u=join(e,d.replace(t+"/",""));return existsSync(u)},async createFolder(d){let u=join(e,d);await mkdir(u,{recursive:true});},async deleteFolder(d){let u=join(e,d);if(existsSync(u)){let{rm:g}=await import('fs/promises');await g(u,{recursive:true,force:true});}}})}function et(l){let e=(t,s)=>{if(!l.signKey)return t;let n=createHmac("sha256",l.signKey).update(t+s.toString()).digest("hex");return s.set("s",n),t};return {name:"imgix",displayName:"Imgix",supportsDynamicResize:true,async upload(t,s){throw new Error("Imgix is a transformation service. Use another provider for uploads.")},async uploadFromUrl(t,s){let n=s?.filename||t.split("/").pop()||"file",c=await fetch(t);if(!c.ok)throw new Error(`Failed to fetch: ${c.statusText}`);let d=await c.blob();new File([d],n,{type:d.type});return {id:Buffer.from(t).toString("base64").slice(0,20),filename:n,originalName:n,mimeType:d.type,size:d.size,url:this.getImageUrl(t),thumbnailUrl:this.getImageUrl(t,{width:200,height:200,fit:"crop"}),provider:"imgix",createdAt:new Date().toISOString()}},async delete(t){},async rename(t,s){return `https://${l.domain}/${s}`},getImageUrl(t,s){let n=new URL(t),c=new URLSearchParams(n.search);l.defaultParameters&&Object.entries(l.defaultParameters).forEach(([u,g])=>{c.has(u)||c.set(u,g);}),s&&(s.width&&c.set("w",String(s.width)),s.height&&c.set("h",String(s.height)),s.quality&&c.set("q",String(s.quality)),s.format&&c.set("fm",s.format),s.fit&&c.set("fit",s.fit),s.blur&&c.set("blur",String(s.blur)),s.sharpen&&c.set("sharp",String(s.sharpen))),c.set("auto","compress,format");n.pathname+"?"+c.toString();return l.signKey&&(e(n.pathname+c.toString(),c)),`https://${l.domain}${n.pathname}${c.toString()?"?"+c.toString():""}`},async generateThumbnail(t){return this.getImageUrl(t.url,{width:200,height:200,fit:"crop"})},async list(){return []},async exists(t){try{return (await fetch(t,{method:"HEAD"})).ok}catch{return  false}},async createFolder(){},async deleteFolder(){}}}function Ce(l,e){return e.cdnUrl?`${e.cdnUrl.replace(/\/$/,"")}/${l}`:`https://${e.storageZone}.b-cdn.net/${l}`}function tt(l){return l.cdnUrl?l.cdnUrl.replace(/\/$/,"")+"/":`https://${l.storageZone}.b-cdn.net/`}function rt(l){let e=`https://storage.bunnycdn.com/${l.storageZone}`,t=s=>`${l.prefix?`${l.prefix}/`:""}${s}`.replace(/\/+/g,"/");return se({name:"bunny",displayName:"Bunny.net Storage",supportsDynamicResize:true,async upload(s,n){let c=t(`${n?.folder?`${n.folder}/`:""}${n?.filename||s.name}`),d=Buffer.from(await s.arrayBuffer()),u=await fetch(`${e}/${c}`,{method:"PUT",headers:{AccessKey:l.apiKey,"Content-Type":s.type},body:d});if(!u.ok){let g=await u.text();throw new Error(`Bunny.net upload failed: ${u.status} ${g}`)}return {id:Buffer.from(c).toString("base64url"),filename:n?.filename||s.name,originalName:s.name,mimeType:s.type,size:d.length,url:Ce(c,l),thumbnailUrl:s.type.startsWith("image/")?Ce(c,l):void 0,folder:n?.folder,provider:"bunny",metadata:n?.metadata,createdAt:new Date().toISOString()}},async delete(s){let n=s.replace(tt(l),""),c=await fetch(`${e}/${n}`,{method:"DELETE",headers:{AccessKey:l.apiKey}});if(!c.ok&&c.status!==404){let d=await c.text();throw new Error(`Bunny.net delete failed: ${c.status} ${d}`)}},async rename(s,n){let c=s.replace(tt(l),""),d=l.prefix?`${l.prefix}/${n}`:n,u=await fetch(`${e}/${c}`,{method:"GET",headers:{AccessKey:l.apiKey}});if(!u.ok)throw new Error("Bunny.net rename failed: could not read old file");let g=await u.arrayBuffer();return await fetch(`${e}/${d}`,{method:"PUT",headers:{AccessKey:l.apiKey,"Content-Type":u.headers.get("Content-Type")||"application/octet-stream"},body:g}),await this.delete(s),Ce(d,l)},async list(s){let n=t(s||""),c=await fetch(`${e}/${n}`,{method:"GET",headers:{AccessKey:l.apiKey}});if(!c.ok){let u=await c.text();throw new Error(`Bunny.net list failed: ${c.status} ${u}`)}return (await c.json()).map(u=>({id:Buffer.from(u.ObjectName||"").toString("base64url"),filename:u.ObjectName?.split("/").pop()||"",originalName:u.ObjectName?.split("/").pop()||"",mimeType:"application/octet-stream",size:u.Length||0,url:Ce(u.ObjectName||"",l),provider:"bunny",createdAt:u.LastChanged||new Date().toISOString()}))},async exists(s){let n=s.replace(tt(l),"");return (await fetch(`${e}/${n}`,{method:"HEAD",headers:{AccessKey:l.apiKey}})).ok},async createFolder(s){let n=t(`${s}/`);await fetch(`${e}/${n}`,{method:"PUT",headers:{AccessKey:l.apiKey,"Content-Length":"0"},body:""});},async deleteFolder(s){let n=t(`${s}/`);await fetch(`${e}/${n}`,{method:"DELETE",headers:{AccessKey:l.apiKey}});}})}var at=class{providers=new Map;providerToPlugin=new Map;disabledPlugins=new Set;constructor(){this.registerLocal(),this.registerImgix(),this.registerBunny();}registerLocal(){this.register({type:"local",displayName:"Local Server",configKey:"local",configFields:[{name:"uploadDir",type:"text",label:"Upload Directory",defaultValue:"./public/uploads"},{name:"baseUrl",type:"text",label:"Base URL",defaultValue:"/uploads"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>{let t=e?.local||e,s=(t?.uploadDir||"").trim(),n;s?$e.isAbsolute(s)?n=s:s.includes("/")||s.includes("\\")?n=$e.resolve(process.cwd(),s):n=$e.join(process.cwd(),"public",s):n=$e.join(process.cwd(),"public","uploads");let c=(t?.baseUrl||"").trim(),d;return c?d=c.startsWith("/")?c:`/${c}`:d="/uploads",{uploadDir:n,baseUrl:d}},factory:e=>ue(e)});}registerImgix(){this.register({type:"imgix",displayName:"Imgix",configKey:"imgix",configFields:[{name:"domain",type:"text",label:"Domain",required:true},{name:"signKey",type:"password",label:"Sign Key"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>e?.imgix||e,factory:e=>et(e)});}registerBunny(){this.register({type:"bunny",displayName:"Bunny.net",configKey:"bunny",configFields:[{name:"storageZone",type:"text",label:"Storage Zone",required:true},{name:"apiKey",type:"password",label:"API Key",required:true},{name:"cdnUrl",type:"text",label:"CDN URL"},{name:"prefix",type:"text",label:"Path Prefix"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>e?.bunny||e,factory:e=>rt(e)});}register(e){if(this.providers.has(e.type)){console.warn(`[StorageRegistry] Provider "${e.type}" already registered, skipping`);return}e.pluginName&&this.providerToPlugin.set(e.type,e.pluginName),this.providers.set(e.type,e);}unregister(e){this.providers.delete(e),this.providerToPlugin.delete(e);}get(e){return this.providers.get(e)}getAll(){return Array.from(this.providers.values())}getAllAvailable(e){let t=this.getAll();return e?t.filter(s=>s.pluginName?e(s.pluginName):true):t}has(e){return this.providers.has(e)}async resolve(e,t){let s=this.providers.get(e);if(!s)throw new Error(`Unknown storage provider type: "${e}". Is the plugin that provides it enabled?`);if(s.pluginName&&this.disabledPlugins.has(s.pluginName))throw new Error(`Storage provider "${e}" is not available (plugin "${s.pluginName}" is disabled)`);let n=s.configKey||e,c=s.extractConfig(t,n);return s.factory(c)}async resolveWithConfig(e,t){let s=this.providers.get(e);if(!s)throw new Error(`Unknown storage provider type: "${e}". Is the plugin that provides it enabled?`);if(s.pluginName&&this.disabledPlugins.has(s.pluginName))throw new Error(`Storage provider "${e}" is not available (plugin "${s.pluginName}" is disabled)`);let n=s.extractRawConfig(t);return s.factory(n)}getProviderPluginName(e){return this.providerToPlugin.get(e)}getAllPluginNames(){return Array.from(new Set(this.providerToPlugin.values()))}setPluginEnabled(e,t){t?this.disabledPlugins.delete(e):this.disabledPlugins.add(e);}isPluginEnabled(e){return !this.disabledPlugins.has(e)}},st=null;function nt(){return st||(st=new at),st}function Mt(l){if(!l)return "";if(l.startsWith("pub-"))return l;let e=l.match(/pub-[a-zA-Z0-9]+/i);return e?e[0]:""}function xr(l,e){let t=l.startsWith("/")?l.slice(1):l;if(e.cdnUrl)return `${e.cdnUrl.replace(/\/$/,"")}/${t}`;switch(e.provider){case "r2":{let s=Mt(e.publicDevUrl);return s?`https://${s}.r2.dev/${t}`:`https://${e.bucket}.${e.accountId}.r2.cloudflarestorage.com/${t}`}case "gcs":return `https://storage.googleapis.com/${e.bucket}/${t}`;case "digitalocean":return `https://${e.bucket}.${e.region}.cdn.digitaloceanspaces.com/${t}`;case "backblaze":return `https://${e.bucket}.s3.backblazeb2.com/${t}`;case "wasabi":return `https://${e.bucket}.s3.wasabisys.com/${t}`;default:return `https://${e.bucket}.s3.${e.region}.amazonaws.com/${t}`}}function ot(l){if(l.cdnUrl)return l.cdnUrl.replace(/\/$/,"")+"/";switch(l.provider){case "r2":{let e=Mt(l.publicDevUrl);return e?`https://${e}.r2.dev/`:`https://${l.bucket}.${l.accountId}.r2.cloudflarestorage.com/`}case "gcs":return `https://storage.googleapis.com/${l.bucket}/`;case "digitalocean":return `https://${l.bucket}.${l.region}.cdn.digitaloceanspaces.com/`;case "backblaze":return `https://${l.bucket}.s3.backblazeb2.com/`;case "wasabi":return `https://${l.bucket}.s3.wasabisys.com/`;default:return `https://${l.bucket}.s3.${l.region}.amazonaws.com/`}}function Dr(l){switch(l){case "r2":return "Cloudflare R2";case "gcs":return "Google Cloud Storage";case "digitalocean":return "DigitalOcean Spaces";case "backblaze":return "Backblaze B2";case "wasabi":return "Wasabi";default:return "AWS S3"}}function Rr(l){let e=new S3Client({region:l.region||"auto",endpoint:l.endpoint,credentials:{accessKeyId:l.accessKeyId,secretAccessKey:l.secretAccessKey},forcePathStyle:true,tls:true,...l.provider==="r2"&&{requestHandler:new NodeHttpHandler}}),t=n=>`${l.prefix?`${l.prefix}/`:""}${n}`.replace(/\/+/g,"/"),s=n=>xr(n,l);return se({name:l.provider,displayName:Dr(l.provider),supportsDynamicResize:true,async upload(n,c){let d=t(`${c?.folder?`${c.folder}/`:""}${c?.filename||n.name}`),u=Buffer.from(await n.arrayBuffer());await e.send(new PutObjectCommand({Bucket:l.bucket,Key:d,Body:u,ContentType:n.type,Metadata:c?.metadata}));let g=await e.send(new HeadObjectCommand({Bucket:l.bucket,Key:d}));return {id:Buffer.from(d).toString("base64url"),filename:c?.filename||n.name,originalName:n.name,mimeType:n.type,size:u.length,url:s(d),thumbnailUrl:n.type.startsWith("image/")?s(d):void 0,folder:c?.folder,provider:l.provider,metadata:{...c?.metadata,etag:g.ETag},createdAt:new Date().toISOString()}},async delete(n){let c=n.replace(ot(l),"");await e.send(new DeleteObjectCommand({Bucket:l.bucket,Key:c}));},async rename(n,c){let d=n.replace(ot(l),""),u=l.prefix?`${l.prefix}/${c}`:c;return await e.send(new CopyObjectCommand({Bucket:l.bucket,CopySource:`${l.bucket}/${d}`,Key:u})),await e.send(new DeleteObjectCommand({Bucket:l.bucket,Key:d})),s(u)},async list(n){let c=t(n||"");return ((await e.send(new ListObjectsV2Command({Bucket:l.bucket,Prefix:c}))).Contents||[]).map(u=>({id:Buffer.from(u.Key||"").toString("base64url"),filename:u.Key?.split("/").pop()||"",originalName:u.Key?.split("/").pop()||"",mimeType:"application/octet-stream",size:u.Size||0,url:s(u.Key||""),provider:l.provider,createdAt:u.LastModified?.toISOString()||new Date().toISOString()}))},async exists(n){try{let c=n.replace(ot(l),"");return await e.send(new HeadObjectCommand({Bucket:l.bucket,Key:c})),!0}catch{return  false}},async createFolder(n){let c=t(`${n}/`);await e.send(new PutObjectCommand({Bucket:l.bucket,Key:c,Body:""}));},async deleteFolder(n){let c=t(`${n}/`),d;do{let u=await e.send(new ListObjectsV2Command({Bucket:l.bucket,Prefix:c,ContinuationToken:d}));if(u.Contents?.length){let g=u.Contents.map(f=>({Key:f.Key}));await e.send(new DeleteObjectsCommand({Bucket:l.bucket,Delete:{Objects:g}}));}d=u.IsTruncated?u.NextContinuationToken:void 0;}while(d);await e.send(new DeleteObjectCommand({Bucket:l.bucket,Key:c}));}})}function Tr(l){let e=()=>`https://api.cloudinary.com/v1_1/${l.cloudName}/upload`,t=async s=>{let n=await import('crypto'),c=Object.keys(s).sort().map(d=>`${d}=${s[d]}`).join("&");return n.createHash("sha256").update(c+l.apiSecret).digest("hex")};return {name:"cloudinary",displayName:"Cloudinary",supportsDynamicResize:true,async upload(s,n){let c=new FormData;if(c.append("file",s),l.uploadPreset)c.append("upload_preset",l.uploadPreset);else {let g=Math.round(Date.now()/1e3),f={timestamp:String(g)};(n?.folder||l.folder)&&(f.folder=n?.folder||l.folder||"");let A=await t(f);c.append("timestamp",String(g)),c.append("signature",A),c.append("api_key",l.apiKey);}(n?.folder||l.folder)&&c.append("folder",n?.folder||l.folder||"");let d=await fetch(e(),{method:"POST",body:c});if(!d.ok){let g=await d.json();throw new Error(`Cloudinary upload failed: ${g.error?.message||d.statusText}`)}let u=await d.json();return {id:u.public_id,filename:`${u.public_id}.${u.format}`,originalName:u.original_filename||s.name,mimeType:s.type||`image/${u.format}`,size:u.bytes,url:u.secure_url,thumbnailUrl:this.getImageUrl(u.secure_url,{width:200,height:200,fit:"crop"}),width:u.width,height:u.height,folder:n?.folder||l.folder,provider:"cloudinary",createdAt:new Date().toISOString()}},async uploadFromUrl(s,n){let c=new FormData;c.append("file",s),c.append("upload_preset","ml_default"),(n?.folder||l.folder)&&c.append("folder",n?.folder||l.folder||"");let d=await fetch(e(),{method:"POST",body:c});if(!d.ok)throw new Error("Cloudinary upload failed");let u=await d.json();return {id:u.public_id,filename:`${u.public_id}.${u.format}`,originalName:u.original_filename||s.split("/").pop()||"file",mimeType:`image/${u.format}`,size:u.bytes,url:u.secure_url,thumbnailUrl:this.getImageUrl(u.secure_url,{width:200,height:200,fit:"crop"}),width:u.width,height:u.height,provider:"cloudinary",createdAt:new Date().toISOString()}},async delete(s){try{let n=s.split("/image/upload/");if(n.length!==2){console.warn("[Cloudinary delete] Could not parse URL:",s);return}let c=n[1].replace(/^v\d+\//,"").replace(/\.[^.]+$/,""),d=Math.round(Date.now()/1e3),u={timestamp:String(d),public_id:c},g=Object.keys(u).sort().map(k=>`${k}=${u[k]}`).join("&"),A=(await import('crypto')).createHash("sha256").update(g+l.apiSecret).digest("hex"),w=`https://api.cloudinary.com/v1_1/${l.cloudName}/image/destroy`,U=new FormData;U.append("public_id",c),U.append("timestamp",String(d)),U.append("signature",A),U.append("api_key",l.apiKey);let R=await fetch(w,{method:"POST",body:U});if(!R.ok){let k=await R.json();console.warn("[Cloudinary delete] Failed:",k);}}catch(n){console.warn("[Cloudinary delete] Error:",n.message);}},async rename(s,n){let c="",d=n.replace(/\.[^.]+$/,""),u="";try{let g=s.split("/image/upload/");if(g.length!==2)return console.warn("[Cloudinary rename] Could not parse old URL:",s),s;let f=g[1],A=f.match(/^(v\d+)\//);c=A?A[1]:"";let w=f.replace(/^v\d+\//,"").replace(/\.[^.]+$/,""),U=w.split("/");u=U.length>1?U.slice(0,-1).join("/"):"";let R=n.replace(/\.[^.]+$/,"");d=u?`${u}/${R}`:R;let k=Math.round(Date.now()/1e3),_={from_public_id:w,to_public_id:d,timestamp:String(k)},B=Object.keys(_).sort().map(x=>`${x}=${_[x]}`).join("&"),q=(await import('crypto')).createHash("sha256").update(B+l.apiSecret).digest("hex"),X=new FormData;X.append("from_public_id",w),X.append("to_public_id",d),X.append("timestamp",String(k)),X.append("signature",q),X.append("api_key",l.apiKey);let J=await fetch(`https://api.cloudinary.com/v1_1/${l.cloudName}/image/rename`,{method:"POST",body:X});if(J.ok)return (await J.json()).secure_url;{let x=await J.json();console.warn("[Cloudinary rename] Failed:",x);let Z=c?`/${c}/`:"/";return `https://res.cloudinary.com/${l.cloudName}/image/upload${Z}${d}.${n.split(".").pop()}`}}catch(g){console.warn("[Cloudinary rename] Error:",g.message);let f=c?`/${c}/`:"/";return `https://res.cloudinary.com/${l.cloudName}/image/upload${f}${d}.${n.split(".").pop()}`}},getImageUrl(s,n){if(!n)return s;let c=s.split("/upload/");if(c.length!==2)return s;let d=[];if(n.width&&d.push(`w_${n.width}`),n.height&&d.push(`h_${n.height}`),n.fit){let g={crop:"c_fill",clip:"c_fit",scale:"c_scale",fill:"c_fill"};d.push(g[n.fit]||"c_limit");}n.quality&&d.push(`q_${n.quality}`),n.format&&d.push(`f_${n.format}`);let u=d.join(",");return `${c[0]}/upload/${u}/${c[1]}`},async generateThumbnail(s){return this.getImageUrl(s.url,{width:200,height:200,fit:"crop"})},async list(){return []},async exists(s){return (await fetch(s,{method:"HEAD"})).ok},async createFolder(){},async deleteFolder(){}}}function kr(l){let e=null;async function t(){return e||(e=new Client(6e4,{allowSeparateTransferHost:true}),e.ftp.verbose=false,await e.access({host:l.host,port:l.port||21,user:l.user,password:l.password,secure:l.secure,secureOptions:{}})),e}let s=d=>`${l.prefix?`${l.prefix}/`:""}${d}`.replace(/\/+/g,"/"),n=d=>`${l.baseUrl.replace(/\/$/,"")}/${d}`,c=()=>l.baseUrl.replace(/\/$/,"")+"/";return se({name:l.type,displayName:l.type==="sftp"?"SFTP Storage":"FTP Storage",supportsDynamicResize:false,async upload(d,u){let g=await t(),f=s(`${u?.folder?`${u.folder}/`:""}${u?.filename||d.name}`),A=Buffer.from(await d.arrayBuffer()),w=f.split("/").slice(0,-1),U="";for(let k of w){U=U?`${U}/${k}`:k;try{await g.ensureDir(U);}catch{}}let R=Readable.from(A);return await g.uploadFrom(R,f),{id:Buffer.from(f).toString("base64url"),filename:u?.filename||d.name,originalName:d.name,mimeType:d.type,size:A.length,url:n(f),thumbnailUrl:d.type.startsWith("image/")?n(f):void 0,folder:u?.folder,provider:l.type,metadata:u?.metadata,createdAt:new Date().toISOString()}},async delete(d){let u=await t(),g=d.replace(c(),"");await u.remove(g);},async rename(d,u){let g=await t(),f=d.replace(c(),""),A=l.prefix?`${l.prefix}/${u}`:u;return await g.rename(f,A),n(A)},async list(d){let u=await t(),g=s(d||""),f;try{f=await u.list(g);}catch{return []}return f.filter(A=>A.type===0).map(A=>({id:Buffer.from(`${g}/${A.name}`).toString("base64url"),filename:A.name,originalName:A.name,mimeType:"application/octet-stream",size:Number(A.size)||0,url:n(`${g}/${A.name}`.replace(/\/+/g,"/")),provider:l.type,createdAt:A.modifiedAt?A.modifiedAt.toISOString():new Date().toISOString()}))},async exists(d){let u=await t(),g=d.replace(c(),"");try{return await u.size(g),!0}catch{return  false}},async createFolder(d){let u=await t(),g=s(d);await u.ensureDir(g);},async deleteFolder(d){let u=await t(),g=s(d);await u.removeDir(g);}})}async function Kt(l){let e=l.getStorageConfig(),t=nt();try{return await t.resolve(e.type,e)}catch(s){return console.warn(`[resolveProvider] ${s.message} \u2014 falling back to local storage`),ue({uploadDir:$e.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"})}}function se(l){return {async uploadFromUrl(e,t){let s=await fetch(e);if(!s.ok)throw new Error(`Failed to fetch: ${s.statusText}`);let n=await s.blob(),c=e.split("/").pop()||"file",d=new File([n],c,{type:n.type});return this.upload(d,t)},getImageUrl(e,t){if(!t||Object.keys(t).length===0)return e;let s=new URLSearchParams({url:e});return t.width&&s.set("w",String(t.width)),t.height&&s.set("h",String(t.height)),t.quality&&s.set("q",String(t.quality)),t.format&&s.set("f",t.format),`/api/media/resize?${s.toString()}`},async generateThumbnail(e){return this.getImageUrl(e.url,{width:400,height:400})},...l}}async function zt(l){if(!l)return console.warn("[resolveProviderWithConfig] No config, using local"),ue({uploadDir:$e.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"});let e=l.type||"local",t=nt();try{return await t.resolveWithConfig(e,l)}catch(s){return console.warn(`[resolveProviderWithConfig] ${s.message} \u2014 falling back to local storage`),ue({uploadDir:$e.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"})}}async function Wt(l){let e=await lt(l).metadata(),t=lt(l).webp({quality:85}),s=lt(l).resize({width:500,withoutEnlargement:true}).webp({quality:80});return {buffer:await t.toBuffer(),thumbnailBuffer:await s.toBuffer(),width:e.width,height:e.height,format:"webp"}}var Vt=false,Le=class l{db;storage;dialect;genId;mediaTable="media";foldersTable="media_folders";constructor(e$1,t,s){this.db=e$1,this.storage=t,this.dialect=s?.dialect||"sqlite",this.genId=s?.genId||e;}static async init(e,t){let s;if(t?.storageConfig)s=await zt(t.storageConfig);else {let c=new a$2(e);await c.load(),s=await Kt(c);}let n=new l(e,s,t);return await n.ensureTables(),n}async ensureTables(){if(this.dialect==="sqlite")this.db.exec(`
-        CREATE TABLE IF NOT EXISTS media (
-          id TEXT PRIMARY KEY,
-          filename TEXT NOT NULL UNIQUE,
-          title TEXT,
-          original_name TEXT NOT NULL,
-          mime_type TEXT NOT NULL,
-          file_size INTEGER NOT NULL,
-          width INTEGER,
-          height INTEGER,
-          url TEXT NOT NULL UNIQUE,
-          thumbnail_url TEXT,
-          folder TEXT,
-          provider TEXT NOT NULL,
-          alt TEXT,
-          caption TEXT,
-          metadata TEXT,
-          created_at TEXT NOT NULL,
-          updated_at TEXT NOT NULL
-        );
-        CREATE INDEX IF NOT EXISTS idx_media_folder ON media(folder);
-        CREATE INDEX IF NOT EXISTS idx_media_provider ON media(provider);
-        CREATE INDEX IF NOT EXISTS idx_media_filename ON media(filename);
-      `),this.db.exec(`
-        CREATE TABLE IF NOT EXISTS media_folders (
-          id TEXT PRIMARY KEY,
-          name TEXT NOT NULL,
-          path TEXT NOT NULL,
-          parent_path TEXT,
-          created_at TEXT
-        );
-        CREATE INDEX IF NOT EXISTS idx_media_folders_path ON media_folders(path);
-      `);else if(this.dialect==="postgres"){if(Vt)return;let{sql:e}=await import('drizzle-orm');await this.db.execute(e`
-        CREATE TABLE IF NOT EXISTS "media" (
-          "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-          "filename" VARCHAR(255) NOT NULL UNIQUE,
-          "title" VARCHAR(255),
-          "original_name" VARCHAR(255) NOT NULL,
-          "mime_type" VARCHAR(100),
-          "file_size" INTEGER,
-          "width" INTEGER,
-          "height" INTEGER,
-          "url" TEXT NOT NULL UNIQUE,
-          "thumbnail_url" TEXT,
-          "folder" VARCHAR(255),
-          "provider" VARCHAR(50) NOT NULL,
-          "alt" TEXT,
-          "caption" TEXT,
-          "metadata" JSONB,
-          "created_at" TIMESTAMP NOT NULL DEFAULT NOW(),
-          "updated_at" TIMESTAMP NOT NULL DEFAULT NOW()
-        )
-      `),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_folder" ON "media" ("folder")`),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_provider" ON "media" ("provider")`),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_filename" ON "media" ("filename")`),await this.db.execute(e`
-        CREATE TABLE IF NOT EXISTS "media_folders" (
-          "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-          "name" VARCHAR(255) NOT NULL,
-          "path" TEXT NOT NULL,
-          "parent_path" TEXT,
-          "created_at" TIMESTAMP NOT NULL DEFAULT NOW()
-        )
-      `),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_folders_path" ON "media_folders" ("path")`),Vt=true;}}now(){return new Date().toISOString()}buildFindConditions(e){let t=[],s=[],n=e.sortBy==="name"?"title":e.sortBy==="createdAt"?"created_at":e.sortBy==="updatedAt"?"updated_at":e.sortBy||"created_at",c=e.sortDir==="asc"?"ASC":"DESC";if(e.search){t.push("(title LIKE ? OR filename LIKE ? OR original_name LIKE ? OR alt LIKE ?)");let u=`%${e.search}%`;s.push(u,u,u,u);}return e.type&&e.type!=="all"&&(t.push("mime_type LIKE ?"),s.push(`${e.type}/%`)),e.folder&&(t.push("(folder = ? OR folder LIKE ?)"),s.push(e.folder,`${e.folder}/%`)),{where:t.length>0?`WHERE ${t.join(" AND ")}`:"",params:s,orderBy:c,sortCol:n}}rowToMedia(e,t){return {id:e.id,filename:e.filename,title:e.title??null,originalName:e.original_name??e.originalName,mimeType:e.mime_type??e.mimeType,fileSize:e.file_size??e.fileSize,width:e.width??null,height:e.height??null,url:l.resolveMediaUrl(e.url,t),thumbnailUrl:l.resolveMediaUrl(e.thumbnail_url??e.thumbnailUrl??null,t),folder:e.folder??null,provider:e.provider,alt:e.alt??null,caption:e.caption??null,metadata:e.metadata??null,createdAt:e.created_at??e.createdAt,updatedAt:e.updated_at??e.updatedAt}}static resolveMediaUrl(e,t){return e?e.startsWith("http://")||e.startsWith("https://")||e.startsWith("blob:")||e.startsWith("data:")?e:`${(process.env.KYRO_BASE_URL||t||"http://localhost:4321").replace(/\/+$/,"")}${e.startsWith("/")?"":"/"}${e}`:null}async sqliteRun(e,t=[]){let s=this.db.prepare(e),n=e.trim().toLowerCase();return n.startsWith("insert")||n.startsWith("update")||n.startsWith("delete")?s.run(...t):s.all(...t)}sqliteGet(e,t=[]){return this.db.prepare(e).get(...t)}async upload(e,t=""){let s=e.type.startsWith("image/"),n,c=e,d=e.name,u=null,g=null;if(s&&!e.type.includes("svg")){let R=Buffer.from(await e.arrayBuffer());n=await Wt(R),d=`${e.name.replace(/\.[^/.]+$/,"").toLowerCase().replace(/[^a-z0-9]/g,"-").replace(/-+/g,"-").substring(0,50)}.webp`,u=n.width??null,g=n.height??null,c=new File([n.buffer],d,{type:"image/webp"});}let f=await this.storage.upload(c,{folder:t,filename:d}),A=await this.storage.generateThumbnail({...f,id:"",provider:this.storage.name,createdAt:this.now()},{width:400,height:400}),w=this.genId(),U=this.now();if(this.dialect==="sqlite")await this.sqliteRun(`INSERT INTO ${this.mediaTable}
-          (id, filename, title, original_name, mime_type, file_size, width, height, url, thumbnail_url, folder, provider, alt, caption, metadata, created_at, updated_at)
-         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,[w,f.filename,e.name.replace(/\.[^/.]+$/,""),e.name,f.mimeType,f.size,u,g,f.url,A,t||null,this.storage.name,null,null,null,U,U]);else {let{media:R}=await import('./media-L5XDD47D.js'),k=f.mimeType,_=k.startsWith("image/")?"image":k.startsWith("video/")?"video":k.startsWith("audio/")?"audio":k.startsWith("application/pdf")?"document":["application/zip","application/x-zip","application/x-tar","application/gzip","application/x-7z"].includes(k)?"archive":"other";await this.db.insert(R).values({id:w,filename:f.filename,title:e.name.replace(/\.[^/.]+$/,""),originalName:e.name,mimeType:k,fileSize:f.size,width:u,height:g,url:f.url,thumbnailUrl:A,folder:t||"",provider:this.storage.name,type:_,status:"active",alt:null,caption:null,createdAt:new Date,updatedAt:new Date}).returning();}return {id:w,filename:f.filename,title:e.name.replace(/\.[^/.]+$/,""),originalName:e.name,mimeType:f.mimeType,fileSize:f.size,width:u,height:g,url:f.url,thumbnailUrl:A,folder:t||null,provider:this.storage.name,alt:null,caption:null,metadata:null,createdAt:U,updatedAt:U}}async uploadFromUrl(e,t=""){let s=await fetch(e);if(!s.ok)throw new Error(`Failed to fetch URL: ${s.status}`);let n=await s.blob(),c=e.split("/").pop()||"url-image",d=s.headers.get("content-type")||n.type||"application/octet-stream",u=new File([n],c,{type:d});return this.upload(u,t)}async delete(e,t){let s=await this.findById(e,t);if(s){if(await this.deleteFile(s.url),s.thumbnailUrl&&s.thumbnailUrl!==s.url&&s.thumbnailUrl!==s.url+"?thumb")try{await this.deleteFile(s.thumbnailUrl);}catch{}if(this.dialect==="sqlite")await this.sqliteRun(`DELETE FROM ${this.mediaTable} WHERE id = ?`,[e]);else {let{media:n}=await import('./media-L5XDD47D.js'),{eq:c}=await import('drizzle-orm');await this.db.delete(n).where(c(n.id,e));}}}async deleteFile(e){await this.storage.delete(e);}async rename(e,t,s){let n=await this.findById(e,s);if(!n)return null;let c=await this.storage.rename(n.url,t),d;if(n.thumbnailUrl||this.storage.name==="cloudinary"){let A=c.match(/\/upload\/(v\d+)\//),w=A?A[1]+"/":"",U=c.match(/(.+?)\/upload\//);d=`${U?U[1]:"https://res.cloudinary.com/"+this.storage.config?.cloudName||"unknown"}/upload/w_200,h_200,c_fill/${w}${t}`;}let u=n.filename.split(".").pop(),g=t.includes(".")?t:`${t}.${u}`,f={url:c,filename:g,thumbnailUrl:d};if(this.dialect==="sqlite"){let A={...f};"thumbnailUrl"in A&&(A.thumbnail_url=A.thumbnailUrl,delete A.thumbnailUrl);let w=Object.keys(A).map(R=>`${R} = ?`).join(", "),U=Object.values(A);await this.sqliteRun(`UPDATE ${this.mediaTable} SET ${w}, updated_at = ? WHERE id = ?`,[...U,this.now(),e]);}else {let{media:A}=await import('./media-L5XDD47D.js'),{eq:w}=await import('drizzle-orm');await this.db.update(A).set({...f,updatedAt:this.now()}).where(w(A.id,e));}return {...n,...f,updatedAt:this.now(),thumbnailUrl:f.thumbnailUrl??null}}async findById(e,t){if(this.dialect==="sqlite"){let d=this.sqliteGet(`SELECT * FROM ${this.mediaTable} WHERE id = ?`,[e]);return d?this.rowToMedia(d,t):null}let{media:s}=await import('./media-L5XDD47D.js'),{eq:n}=await import('drizzle-orm'),[c]=await this.db.select().from(s).where(n(s.id,e));return c?this.rowToMedia(c,t):null}async find(e={},t){let{page:s=1,limit:n=30,search:c="",type:d="",folder:u="",sortBy:g="createdAt",sortDir:f="desc"}=e,{where:A,params:w,orderBy:U,sortCol:R}=this.buildFindConditions({page:s,limit:n,search:c,type:d,folder:u,sortBy:g,sortDir:f}),k=(s-1)*n;if(this.dialect==="sqlite"){let de=this.sqliteGet(`SELECT COUNT(*) as cnt FROM ${this.mediaTable} ${A}`,w)?.cnt??0;return {docs:(await this.sqliteRun(`SELECT * FROM ${this.mediaTable} ${A} ORDER BY ${R} ${U} LIMIT ? OFFSET ?`,[...w,n,k])).map(Ae=>this.rowToMedia(Ae,t)),totalDocs:de,page:s,limit:n,totalPages:Math.ceil(de/n)}}let{media:_}=await import('./media-L5XDD47D.js'),{like:B,or:ae,and:q,asc:X,desc:J,eq:x,sql:Z}=await import('drizzle-orm'),ne=[];c&&ne.push(ae(B(_.title,`%${c}%`),B(_.filename,`%${c}%`),B(_.originalName,`%${c}%`),B(_.alt,`%${c}%`))),d&&d!=="all"&&ne.push(B(_.mimeType,`${d}/%`)),u&&ne.push(ae(x(_.folder,u),B(_.folder,`${u}/%`)));let ye=ne.length>0?q(...ne):void 0,Ne=_[{created_at:"createdAt",updated_at:"updatedAt",title:"title",filename:"filename",file_size:"fileSize",mime_type:"mimeType",original_name:"originalName"}[R]||"createdAt"],be=f==="asc"?X(Ne):J(Ne),ge=await this.db.select().from(_).where(ye).orderBy(be).limit(n).offset(k),[{count:M}]=await this.db.select({count:Z`count(*)`}).from(_).where(ye),ie=Number(M);return {docs:ge.map(oe=>this.rowToMedia(oe,t)),totalDocs:ie,page:s,limit:n,totalPages:Math.ceil(ie/n)}}async update(e,t,s){let n=this.now();if(this.dialect==="sqlite"){let g=["updated_at = ?"],f=[n];t.title!==void 0&&(g.push("title = ?"),f.push(t.title)),t.alt!==void 0&&(g.push("alt = ?"),f.push(t.alt)),t.caption!==void 0&&(g.push("caption = ?"),f.push(t.caption)),t.folder!==void 0&&(g.push("folder = ?"),f.push(t.folder)),f.push(e),await this.sqliteRun(`UPDATE ${this.mediaTable} SET ${g.join(", ")} WHERE id = ?`,f);let A=this.sqliteGet(`SELECT * FROM ${this.mediaTable} WHERE id = ?`,[e]);return A?this.rowToMedia(A,s):null}let{media:c}=await import('./media-L5XDD47D.js'),{eq:d}=await import('drizzle-orm'),[u]=await this.db.update(c).set({...t,updatedAt:new Date}).where(d(c.id,e)).returning();return u?this.rowToMedia(u,s):null}async updateMany(e,t){let s=this.now();if(this.dialect==="sqlite")for(let n of e){let c=["updated_at = ?"],d=[s];t.folder!==void 0&&(c.push("folder = ?"),d.push(t.folder||null)),d.push(n),await this.sqliteRun(`UPDATE ${this.mediaTable} SET ${c.join(", ")} WHERE id = ?`,d);}else {let{media:n}=await import('./media-L5XDD47D.js'),{eq:c}=await import('drizzle-orm');for(let d of e)await this.db.update(n).set({...t,updatedAt:new Date}).where(c(n.id,d));}}async listFolders(){if(this.dialect==="sqlite")return (await this.sqliteRun(`SELECT path FROM ${this.foldersTable} UNION
-         SELECT folder as path FROM ${this.mediaTable} WHERE folder IS NOT NULL AND folder != ''`)).map(f=>f.path).filter(f=>f&&f!=="").sort();let{media:e,mediaFolders:t}=await import('./media-L5XDD47D.js'),{eq:s,sql:n}=await import('drizzle-orm'),c=await this.db.select({folder:e.folder}).from(e).groupBy(e.folder),d=await this.db.select({path:t.path}).from(t),u=new Set([...c.map(g=>g.folder),...d.map(g=>g.path)]);return Array.from(u).filter(g=>g&&g!=="").sort()}async createFolder(e,t=""){let s=t?`${t}/${e}`:e;await this.storage.createFolder?.(s);let n=this.now();if(this.dialect==="sqlite")await this.sqliteRun(`INSERT OR IGNORE INTO ${this.foldersTable} (path, name, parent_path, created_at) VALUES (?, ?, ?, ?)`,[s,e,t||null,n]);else {let{mediaFolders:c}=await import('./media-L5XDD47D.js');await this.db.insert(c).values({path:s,name:e,parentPath:t||null,createdAt:new Date}).onConflictDoNothing();}}async deleteFolder(e){let t=await this.find({folder:e,limit:1e4});for(let s of t.docs)await this.delete(s.id);if(await this.storage.deleteFolder?.(e),this.dialect==="sqlite")await this.sqliteRun(`DELETE FROM ${this.foldersTable} WHERE path = ? OR path LIKE ?`,[e,`${e}/%`]);else {let{mediaFolders:s}=await import('./media-L5XDD47D.js'),{like:n,or:c,eq:d}=await import('drizzle-orm');await this.db.delete(s).where(c(d(s.path,e),n(s.path,`${e}/%`)));}}};function Oe(l){return l.map(e=>`${e.path.join(".")}: ${e.message}`).join(", ")}function pe(l,e){if(!(!l||typeof l!="object"))for(let t of e){if(!t.name||!(t.name in l))continue;if(l[t.name]===""&&(t.type==="text"||t.type==="textarea"||t.type==="code"||t.type==="markdown"||t.type==="email"||t.type==="password"||t.type==="color"||(l[t.name]=null)),t.type==="tabs"&&t.name&&Array.isArray(t.tabs)&&l[t.name]&&typeof l[t.name]=="object")for(let n of t.tabs)Array.isArray(n.fields)&&pe(l[t.name],n.fields);else if((t.type==="group"||t.type==="collapsible")&&t.name&&Array.isArray(t.fields)&&l[t.name]&&typeof l[t.name]=="object")pe(l[t.name],t.fields);else if(t.type==="array"&&t.name&&Array.isArray(t.fields)&&Array.isArray(l[t.name]))for(let n of l[t.name])n&&typeof n=="object"&&pe(n,t.fields);else if(t.type==="blocks"&&t.name&&Array.isArray(t.blocks)&&Array.isArray(l[t.name]))for(let n of l[t.name]){if(!n||typeof n!="object")continue;let c=n.type||n.blockType;if(!c)continue;let d=t.blocks.find(g=>g.slug===c);if(!d||!Array.isArray(d.fields))continue;let u=n.data&&typeof n.data=="object"?n.data:n;pe(u,d.fields);}}}function me(l,e){if(!(!e||typeof e!="object"))for(let t of l){if(t.type==="richtext"&&t.name){let s=e[t.name];typeof s=="string"?e[t.name]=[{type:"paragraph",children:[{text:s}]}]:s&&typeof s=="object"&&!Array.isArray(s)&&s.type==="doc"&&Array.isArray(s.content)&&(e[t.name]=s.content);}if(t.type==="tabs"&&t.name&&Array.isArray(t.tabs)&&e[t.name]&&typeof e[t.name]=="object")for(let s of t.tabs)Array.isArray(s.fields)&&me(s.fields,e[t.name]);else if((t.type==="group"||t.type==="collapsible")&&t.name&&Array.isArray(t.fields)&&e[t.name]&&typeof e[t.name]=="object")me(t.fields,e[t.name]);else if(t.type==="array"&&t.name&&Array.isArray(t.fields)&&Array.isArray(e[t.name]))for(let s of e[t.name])s&&typeof s=="object"&&me(t.fields,s);else if(t.type==="blocks"&&t.name&&Array.isArray(t.blocks)&&Array.isArray(e[t.name]))for(let s of e[t.name]){if(!s||typeof s!="object")continue;let n=s.type||s.blockType;if(!n)continue;let c=t.blocks.find(u=>u.slug===n);if(!c||!Array.isArray(c.fields))continue;let d=s.data&&typeof s.data=="object"?s.data:s;me(c.fields,d);}}}var $r={_media:{create:d.MEDIA_UPLOAD,update:d.MEDIA_UPLOAD,delete:d.MEDIA_DELETE}};function Ie(l,e){let t=$r[l];return t?t[e]:`collection.${e}`}function Lr(l){let e=l.headers.get("x-forwarded-for");return e?e.split(",")[0].trim():l.headers.get("x-real-ip")||"unknown"}function Fe(l,e,t,s,n){e?.apiKeyId&&l&&l.createAuditLog({action:"api_request",userId:e.userId||"",resource:"api_key",resourceId:e.apiKeyId,success:true,metadata:{endpoint:t,method:s,ip:Lr(n)}});}function ct(l){return l.baseUpdatedAt??l._baseUpdatedAt}function ut(l){let{baseUpdatedAt:e,_baseUpdatedAt:t,...s}=l;return s}function Gt(l,e){return {error:"Document has changed since you started editing",code:"REVISION_CONFLICT",conflict:{expectedUpdatedAt:l??null,actualUpdatedAt:e.updatedAt??null,current:e}}}async function L(l,e,t,s,n,c,d=true,u="none"){return await b$2(l,e,{user:s,req:t,tenantID:n,apiKey:c},{enablePublicAccess:d,defaultAccess:u})}async function Y(l,e,t,s,n,c=true){return await c$3(l,e,{user:s,req:t,tenantID:n},{enablePublicAccess:c})}async function P(l,e,t,s){if(t)return {user:t,tenantID:s,apiKeyContext:void 0,authType:"static"};if(e){let n=await e(l);if(n.status===200&&n.user)return {user:n.user,tenantID:n.tenantContext?.tenantId,apiKeyContext:n.apiKeyContext,authType:n.authType}}return {user:void 0,tenantID:void 0,apiKeyContext:void 0,authType:void 0}}function _r(l,e){if(l instanceof c$2&&l.dialect==="postgres")return new a$6({db:l.client});if(l instanceof a$7)return new a$8({db:l.db});let t=resolve(e,"data","kyro.db");return new a$9({path:process.env.KYRO_AUTH_DB_PATH||t})}function Jt(l){let {registry:e,db:t,authSecret:s,authAdapter:n,checkSession:c,user:d,tenantID:u,cors:g,webhookService:f,settings:A}=l,w=new Hono,U=A?.access?.apiAccess,R=A?.access?.enablePublicAccess??false,k=A?.access?.defaultCollectionAccess??"none";U?.requireAuth;let B=process.cwd(),ae=B.endsWith("admin")?resolve(B,".."):B,q=n||_r(t,ae),x=s?jt({db:t,userLookup:async r=>await q.findUserById(r)||null}):null,Z=U?.cors?.allowedOrigins,ne=g?.origins,ye=Array.isArray(Z)?Z:typeof Z=="string"&&Z?Z.split(`
-`).map(r=>r.trim()).filter(Boolean):[],we=ye.length>0?ye:ne||[];(we.length>0||g)&&w.use("*",async(r,o)=>{let m=r.req.header("Origin")||"*";if(we.length>0&&!we.includes(m))return r.json({error:"Origin not allowed"},403);let y=we.length>0?m:"*";if(r.header("Access-Control-Allow-Origin",y),r.header("Access-Control-Allow-Methods","GET, POST, PATCH, DELETE, OPTIONS"),r.header("Access-Control-Allow-Headers","Content-Type, Authorization, X-API-Key"),g?.credentials&&r.header("Access-Control-Allow-Credentials","true"),r.req.method==="OPTIONS")return r.text("");await o();});let be=A?.access?.rateLimiting,ge;if(be?.enabled){let r=be.maxRequests||100,o=be.windowMs||6e4;ge=new qe({"api:general":{window:o,max:r}}),w.use("/api/*",async(m,y)=>{if(!ge)return y();let i=m.req.header("CF-Connecting-IP")||m.req.header("X-Forwarded-For")?.split(",")[0]?.trim()||m.req.header("X-Real-IP")||"unknown",a=await ge.check("api:general",i);if(m.header("X-RateLimit-Limit",String(r)),m.header("X-RateLimit-Remaining",String(a.remaining)),m.header("X-RateLimit-Reset",String(a.resetAt)),!a.allowed)return m.json({error:"Too many requests",retryAfter:a.retryAfter},429);await y();});}let M=new je({redis:q,jwtSecret:s||"change-me",baseUrl:process.env.KYRO_BASE_URL||"http://localhost:4321",rateLimiter:ge});b$1.fromConfig(t).then(r=>{r&&(M.email=r);}).catch(r=>{console.error("[Email] Failed to initialize transport from config:",r);}),w.post("/api/auth/login",async r=>M.login(r.req.raw)),w.post("/api/auth/register",async r=>M.register(r.req.raw)),w.post("/api/auth/logout",async r=>M.logout(r.req.raw)),w.post("/api/auth/refresh",async r=>M.refresh(r.req.raw)),w.get("/api/auth/me",async r=>M.me(r.req.raw)),w.get("/api/auth/sessions",async r=>M.listSessions(r.req.raw)),w.post("/api/auth/sessions/refresh",async r=>M.refreshSession(r.req.raw)),w.delete("/api/auth/sessions",async r=>M.revokeOtherSessions(r.req.raw)),w.delete("/api/auth/sessions/:id",async r=>M.revokeSession(r.req.raw,r.req.param("id"))),w.put("/api/auth/sessions/:id/name",async r=>M.renameSession(r.req.raw,r.req.param("id"))),w.get("/api/auth/access",async r=>{try{let{user:o,tenantID:m}=await P(r.req.raw,x,d,u);if(!o)return r.json({error:"Not authenticated"},401);let y={},i={};for(let a of e.getCollections()){let p={read:(await L(a,"read",r.req.raw,o,m,void 0,R,k)).allowed,create:(await L(a,"create",r.req.raw,o,m,void 0,R,k)).allowed,update:(await L(a,"update",r.req.raw,o,m,void 0,R,k)).allowed,delete:(await L(a,"delete",r.req.raw,o,m,void 0,R,k)).allowed};y[a.slug]=p;}for(let a of e.getGlobals()){let p={read:(await Y(a,"read",r.req.raw,o,m,R)).allowed,update:(await Y(a,"update",r.req.raw,o,m,R)).allowed};i[a.slug]=p;}return r.json({collections:y,globals:i})}catch(o){return r.json({error:o.message},500)}});let ie=typeof e.hasCollection=="function"&&e.hasCollection("users")?e.getCollection("users"):(()=>{try{return e.getCollection("users")}catch{return a$3}})();w.get("/api/users",async r=>{try{let{user:o,tenantID:m}=await P(r.req.raw,x,d,u),y=await L(ie,"read",r.req.raw,o,m,void 0,R,k);if(!y.allowed)return r.json({error:y.error},y.status||403);let i=parseInt(r.req.query("page")||"1"),a=Math.min(parseInt(r.req.query("limit")||"10"),100),p=r.req.query("search")||void 0,b=await q.findUsers({page:i,limit:a,search:p});return r.json({docs:b.users,totalDocs:b.total,limit:a,totalPages:Math.ceil(b.total/a),page:i,pagingCounter:(i-1)*a+1,hasPrevPage:i>1,hasNextPage:i<Math.ceil(b.total/a),prevPage:i>1?i-1:null,nextPage:i<Math.ceil(b.total/a)?i+1:null})}catch(o){return console.error("[API] Error listing users:",o),r.json({error:o.message},500)}}),w.get("/api/users/:id",async r=>{try{let{user:o,tenantID:m}=await P(r.req.raw,x,d,u),y=r.req.param("id"),i=await q.findUserById(y);return i?r.json({data:i}):r.json({error:"User not found"},404)}catch(o){return r.json({error:o.message},500)}}),w.post("/api/users",async r=>{try{let{user:o,tenantID:m}=await P(r.req.raw,x,d,u),y=await L(ie,"create",r.req.raw,o,m,void 0,R,k);if(!y.allowed)return r.json({error:y.error},y.status||403);let i=await r.req.json();if(!i.email||!i.password)return r.json({error:"Email and password are required"},400);if(await q.findUserByEmail(i.email))return r.json({error:"Email already in use"},400);let p=await q.createUser({email:i.email,password:i.password,name:i.name,role:i.role||"customer",avatar:i.avatar,tenantId:i.tenantId});return o&&q?.createAuditLog({action:"user_create",userId:o.id,resource:"users",resourceId:p.id,success:!0}),r.json({data:p,message:"User created successfully"},201)}catch(o){return r.json({error:o.message},500)}}),w.patch("/api/users/:id",async r=>{try{let{user:o,tenantID:m}=await P(r.req.raw,x,d,u),y=await L(ie,"update",r.req.raw,o,m,void 0,R,k);if(!y.allowed)return r.json({error:y.error},y.status||403);let i=r.req.param("id"),a=await r.req.json(),p=await q.findUserById(i);if(!p)return r.json({error:"User not found"},404);let b={};a.name!==void 0&&(b.name=a.name),a.email!==void 0&&(b.email=a.email),a.role!==void 0&&(b.role=a.role),a.avatar!==void 0&&(b.avatar=typeof a.avatar=="object"&&a.avatar!==null?a.avatar.id||String(a.avatar):a.avatar),a.tenantId!==void 0&&(b.tenantId=a.tenantId),a.emailVerified!==void 0&&(b.emailVerified=a.emailVerified),a.locked!==void 0&&(b.locked=a.locked),a.failedLoginAttempts!==void 0&&(b.failedLoginAttempts=a.failedLoginAttempts),a.lastLogin!==void 0&&(b.lastLogin=a.lastLogin);let h=await q.updateUser(i,b);return h?(o&&(q?.createAuditLog({action:"user_update",userId:o.id,resource:"users",resourceId:i,success:!0}),a.role&&p.role!==a.role&&q?.createAuditLog({action:"role_change",userId:o.id,resource:"users",resourceId:i,success:!0,metadata:{oldRole:p.role,newRole:a.role}})),r.json({data:h,message:"User updated successfully"})):r.json({error:"User update failed"},500)}catch(o){return r.json({error:o.message},500)}}),w.delete("/api/users/:id",async r=>{try{let{user:o,tenantID:m}=await P(r.req.raw,x,d,u),y=await L(ie,"delete",r.req.raw,o,m,void 0,R,k);if(!y.allowed)return r.json({error:y.error},y.status||403);let i=r.req.param("id");if(o&&o.id===i)return r.json({error:"You cannot delete your own account"},403);let a=await q.findUserById(i);return a?await q.deleteUser(i)?(o&&q?.createAuditLog({action:"user_delete",userId:o.id,resource:"users",resourceId:i,success:!0}),r.json({data:a,message:"User deleted successfully"})):r.json({error:"User deletion failed"},500):r.json({error:"User not found"},404)}catch(o){return r.json({error:o.message},500)}}),w.get("/api/auth/audit-logs",async r=>{try{let{user:o,tenantID:m}=await P(r.req.raw,x,d,u),y=e.getCollection("audit_logs");if(y){let S=await L(y,"read",r.req.raw,o,m,void 0,R,k);if(!S.allowed)return r.json({error:S.error},S.status||403)}else if(!o)return r.json({error:"Authentication required"},401);let i=parseInt(r.req.query("page")||"1"),a=Math.min(parseInt(r.req.query("limit")||"50"),100),p=r.req.query("action")||void 0,b=r.req.query("userId")||void 0,h=r.req.query("resource")||void 0,I=await q.findAuditLogs({action:p,userId:b,resource:h,limit:a,offset:(i-1)*a});return r.json({docs:I.logs,totalDocs:I.total,limit:a,totalPages:Math.ceil(I.total/a),page:i,pagingCounter:(i-1)*a+1,hasPrevPage:i>1,hasNextPage:i<Math.ceil(I.total/a),prevPage:i>1?i-1:null,nextPage:i<Math.ceil(I.total/a)?i+1:null})}catch(o){return console.error("[API] Error listing audit logs:",o),r.json({error:o.message},500)}});let oe=null,de=null,W=async()=>{if(de)throw de;if(!oe)try{let r=t instanceof c$2?t.dialect:"sqlite",o=r==="postgres"&&t instanceof c$2?t.client:t;oe=await Le.init(o,{dialect:r});}catch(r){throw console.error("[getMedia] Init error:",r),de=r,r}return oe};w.get("/api/media",async r=>{try{let{user:o}=await P(r.req.raw,x,d,u);if(!o)return r.json({error:"Authentication required"},401);let m=await W(),y=new URL(r.req.url).origin,i=parseInt(r.req.query("page")||"1"),a=parseInt(r.req.query("limit")||"30"),p=r.req.query("search")||"",b=r.req.query("type")||"",h=r.req.query("folder")||"",I=await m.find({page:i,limit:a,search:p,type:b,folder:h},y);return r.json(I)}catch(o){return console.error("[Media] find error:",o),r.json({error:o.message},500)}}),w.post("/api/media/upload",async r=>{try{let{user:o}=await P(r.req.raw,x,d,u);if(!o)return r.json({error:"Authentication required"},401);let m=await W();if((r.req.header("content-type")||"").includes("multipart/form-data")){let p=await r.req.formData(),b=p.get("file"),h=p.get("folder")||"";if(!b)return r.json({error:"No file uploaded"},400);let I=await m.upload(b,h);return r.json(I)}let{url:i}=await r.req.json();if(!i)return r.json({error:"No URL provided"},400);let a=await m.uploadFromUrl(i);return r.json(a)}catch(o){return console.error("[Media] upload error:",o),r.json({error:o.message},500)}}),w.get("/api/media/folders",async r=>{try{let{user:o}=await P(r.req.raw,x,d,u);if(!o)return r.json({error:"Authentication required"},401);let y=await(await W()).listFolders();return r.json(y)}catch(o){return console.error("[Media] folders error:",o),r.json({error:o.message},500)}}),w.post("/api/media/folders",async r=>{try{let{user:o}=await P(r.req.raw,x,d,u);if(!o)return r.json({error:"Authentication required"},401);let m=await W(),y=await r.req.json(),{name:i,parentPath:a}=y;return i?(await m.createFolder(i,a||""),r.json({message:"Folder created",path:a?`${a}/${i}`:i})):r.json({error:"Folder name is required"},400)}catch(o){return console.error("[Media] create folder error:",o),r.json({error:o.message},500)}}),w.delete("/api/media/folders",async r=>{try{let{user:o}=await P(r.req.raw,x,d,u);if(!o)return r.json({error:"Authentication required"},401);let m=await W(),y=r.req.query("path");return y?(await m.deleteFolder(y),r.json({message:"Folder deleted"})):r.json({error:"Path is required"},400)}catch(o){return console.error("[Media] delete folder error:",o),r.json({error:o.message},500)}}),w.delete("/api/media/:id",async r=>{try{let{user:o}=await P(r.req.raw,x,d,u);if(!o)return r.json({error:"Authentication required"},401);let m=await W(),y=r.req.param("id"),i=new URL(r.req.url).origin;return await m.delete(y,i),r.json({success:!0})}catch(o){return console.error("[Media] delete error:",o),r.json({error:o.message},500)}}),w.get("/api/media/resize",async r=>{try{let{user:o}=await P(r.req.raw,x,d,u);if(!o)return r.json({error:"Authentication required"},401);let m=r.req.query("url"),y=parseInt(r.req.query("w")||"0"),i=parseInt(r.req.query("h")||"0"),a=r.req.query("fit")||"cover";if(!m)return r.json({error:"URL is required"},400);let b=(await W()).storage;if(b.name!=="local")return r.redirect(m);let h=b.config?.uploadDir||join(process.cwd(),"public","uploads"),I=b.config?.baseUrl||"/uploads";if(!m.startsWith(I))return r.redirect(m);let S=m.replace(I,""),v=join(h,S);if(!existsSync(v))return r.json({error:"File not found"},404);let D=readFileSync(v),T=lt(D);(y>0||i>0)&&(T=T.resize({width:y>0?y:void 0,height:i>0?i:void 0,fit:a}));let j=await T.toBuffer(),C=await lt(D).metadata();return r.header("Content-Type",`image/${C.format||"webp"}`),r.header("Cache-Control","public, max-age=31536000, immutable"),r.body(j)}catch(o){return console.error("[Media] resize error:",o),r.json({error:o.message},500)}}),w.get("/api/media/:id",async r=>{try{let{user:o}=await P(r.req.raw,x,d,u);if(!o)return r.json({error:"Authentication required"},401);let m=await W(),y=r.req.param("id"),i=new URL(r.req.url).origin,a=await m.findById(y,i);return a?r.json(a):r.json({error:"Media not found"},404)}catch(o){return console.error("[Media] get error:",o),r.json({error:o.message},500)}}),w.patch("/api/media/:id",async r=>{try{let{user:o}=await P(r.req.raw,x,d,u);if(!o)return r.json({error:"Authentication required"},401);let m=await W(),y=r.req.param("id"),i=await r.req.json(),a=new URL(r.req.url).origin;if(i.folder!==void 0){let p=await m.update(y,{folder:i.folder},a);return r.json({doc:p})}return r.json({error:"No valid fields to update"},400)}catch(o){return console.error("[Media] update error:",o),r.json({error:o.message},500)}}),w.get("/api/media/test",async r=>{try{let{user:o}=await P(r.req.raw,x,d,u);if(!o)return r.json({error:"Authentication required"},401);let m=await W();return r.json({status:m?"initialized":"failed",serviceType:m?.constructor?.name})}catch(o){return console.error("[test] Error:",o),r.json({error:o.message,type:o.constructor?.name,stack:o.stack},500)}}),w.get("/api/storage-status",async r=>{try{let{user:o}=await P(r.req.raw,x,d,u);if(!o)return r.json({error:"Authentication required"},401);let m=!1,y="local";if(t)try{let i=t.prepare('SELECT provider FROM "_globals_storage-settings" LIMIT 1').get();i&&i.provider&&(m=!0,y=i.provider==="aws"?"s3":i.provider);}catch{try{let i=await t.findOne({collection:"_globals_storage-settings",where:{},draft:!0});i&&i.provider&&(m=!0,y=i.provider==="aws"?"s3":i.provider);}catch{}}return r.json({provider:y,configured:m,usage:0,limit:"unlimited"})}catch(o){return console.error("[Storage] status error:",o),r.json({error:o.message},500)}}),w.get("/api/plugins",async r=>{try{let{user:o}=await P(r.req.raw,x,d,u);if(!o)return r.json({error:"Authentication required"},401);let m=e.getPlugins(),y=e.storageProviders,i=await Promise.all(m.map(async a=>{let p=!0,b=a.name,h={};try{let I=await t.findOne({collection:"_globals_plugin-settings",where:{},draft:!0});I&&I.states&&(h=I.states);}catch{}return h[b]!==void 0&&(p=h[b]),y.setPluginEnabled(b,p),{id:b,name:b,version:a.version||"1.0.0",description:a.description||"",enabled:p,status:p?"active":"disabled"}}));return r.json(i)}catch(o){return console.error("[Plugins] list error:",o),r.json({error:o.message},500)}}),w.put("/api/plugins/:name/toggle",async r=>{try{let{user:o}=await P(r.req.raw,x,d,u);if(!o)return r.json({error:"Authentication required"},401);let m=r.req.param("name"),y=e.storageProviders,a=!y.isPluginEnabled(m),p=[];if(!a)for(let h of y.getAll())h.pluginName===m&&p.push(h.type);if(!(r.req.query("force")==="1")&&!a&&p.length>0){let h="local";try{let I=t?.prepare?.('SELECT provider FROM "_globals_storage-settings" LIMIT 1')?.get();I?.provider&&(h=I.provider);}catch{try{let I=await t?.findOne?.({collection:"_globals_storage-settings",where:{},draft:!0});I?.provider&&(h=I.provider);}catch{}}if(p.includes(h))return r.json({error:`Cannot disable "${m}" \u2014 storage provider "${h}" is currently active. Switch to Local storage first.`,requiresAction:!0,activeProvider:h},409)}try{let h={},I="global",S=await t.findOne({collection:"_globals_plugin-settings",where:{},draft:!0});S&&(h=S.states||{},I=S.id),h[m]=a,S?await t.update({collection:"_globals_plugin-settings",id:I,data:{states:h}}):await t.create({collection:"_globals_plugin-settings",data:{states:h,id:"global"}});}catch(h){console.warn(`[Plugins] Could not persist state for "${m}":`,h);}return y.setPluginEnabled(m,a),r.json({name:m,enabled:a})}catch(o){return console.error("[Plugins] toggle error:",o),r.json({error:o.message},500)}}),w.get("/api/health",r=>r.json({status:"ok",version:"0.11.0",collections:e.getCollectionSlugs(),timestamp:new Date().toISOString()})),w.get("/api/kyro/schema",async r=>{let{user:o}=await P(r.req.raw,x,d,u);if(!o)return r.json({error:"Authentication required"},401);let m=i=>i.map(a=>{let p={name:a.name,type:a.type,label:a.label,required:a.required??false,unique:a.unique??false,indexed:a.indexed??false,defaultValue:a.defaultValue,admin:a.admin?{...a.admin}:void 0};return a.minLength!==void 0&&(p.minLength=a.minLength),a.maxLength!==void 0&&(p.maxLength=a.maxLength),a.pattern!==void 0&&(p.pattern=a.pattern),a.variant!==void 0&&(p.variant=a.variant),a.hasMany!==void 0&&(p.hasMany=a.hasMany),a.min!==void 0&&(p.min=a.min),a.max!==void 0&&(p.max=a.max),a.step!==void 0&&(p.step=a.step),a.integer!==void 0&&(p.integer=a.integer),a.options&&(p.options=a.options),a.relationTo&&(p.relationTo=a.relationTo),a.maxDepth!==void 0&&(p.maxDepth=a.maxDepth),a.minRows!==void 0&&(p.minRows=a.minRows),a.maxRows!==void 0&&(p.maxRows=a.maxRows),a.localized!==void 0&&(p.localized=a.localized),a.language&&(p.language=a.language),a.format&&(p.format=a.format),a.allowedTypes&&(p.allowedTypes=a.allowedTypes),a.maxSize&&(p.maxSize=a.maxSize),(a.type==="group"||a.type==="row"||a.type==="collapsible"&&a.fields)&&(p.fields=m(a.fields)),a.type==="array"&&a.fields&&(p.fields=m(a.fields)),a.type==="blocks"&&a.blocks&&(p.blocks=a.blocks.map(b=>({slug:b.slug,label:b.label,fields:m(b.fields)}))),a.type==="tabs"&&a.tabs&&(p.tabs=a.tabs.map(b=>({label:b.label,name:b.name,fields:m(b.fields)}))),p}),y={collections:{},globals:{}};for(let i of e.getCollections()){let a=i.slug;try{y.collections[a]={slug:a,label:i.label||a,fields:m(i.fields),jsonSchema:zodToJsonSchema(e.getZodSchema(a),{target:"openApi3"}),createSchema:zodToJsonSchema(e.getCreateZodSchema(a),{target:"openApi3"}),updateSchema:zodToJsonSchema(e.getUpdateZodSchema(a),{target:"openApi3"}),procedures:{find:{collection:a,where:"Record<string,any>",sort:"string",limit:"number",page:"number",depth:"number",select:"string[]",draft:"boolean"},findByID:{collection:a,id:"string",depth:"number",select:"string[]",draft:"boolean"},create:{collection:a,data:"Record<string,any>",depth:"number",select:"string[]"},update:{collection:a,id:"string",data:"Record<string,any>",depth:"number",select:"string[]",baseUpdatedAt:"string"},delete:{collection:a,id:"string"},count:{collection:a,where:"Record<string,any>"}}};}catch{}}for(let i of e.getGlobals()){let a=i.slug,p=i.fields;if(a==="storage-settings"){let b=e.storageProviders,h=b.getAll(),I=new Set(b.getAllAvailable(v=>b.isPluginEnabled(v)).map(v=>v.type));I.add("local");let S=new Set(h.map(v=>v.type));p=p.filter(v=>v.type==="group"&&v.name&&S.has(v.name)?I.has(v.name):true).map(v=>v.name==="provider"&&v.type==="select"?{...v,options:v.options.filter(D=>I.has(D.value))}:v);}try{y.globals[a]={slug:a,label:i.label||a,fields:m(p),jsonSchema:zodToJsonSchema(e.getZodSchema(a),{target:"openApi3"}),procedures:{get:{},update:{data:"Record<string,any>"}}};}catch{}}return r.json(y)}),w.get("/api/collections",async r=>{let{user:o}=await P(r.req.raw,x,d,u);if(!o)return r.json({error:"Authentication required"},401);let m=e.getCollections().map(y=>({slug:y.slug,label:y.label||y.slug,fields:y.fields.filter(i=>i.name).map(i=>({name:i.name,type:i.type,required:i.required,label:i.label}))}));return r.json(m)});function Ae(r,o,m){if(m in o)return o[m];for(let y of r)if(y.name){if(y.type==="tabs"&&y.tabs){let i=o[y.name];if(i&&typeof i=="object"&&m in i)return i[m]}if((y.type==="group"||y.type==="collapsible")&&y.fields){let i=o[y.name];if(i&&typeof i=="object"){if(m in i)return i[m];let a=Ae(y.fields,i,m);if(a!==void 0)return a}}}}w.get("/api/search",async r=>{try{let o=r.req.query("q")||"",m=r.req.query("collections")||"",y=Math.min(parseInt(r.req.query("limit")||"10"),50);if(!o||o.length<2)return r.json({results:[],message:"Query too short"});let{user:i,tenantID:a}=await P(r.req.raw,x,d,u),p=m?m.split(",").filter(Boolean):e.getCollectionSlugs(),b=[],h=new RegExp(o.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),"i");for(let I of e.getCollections()){if(!p.includes(I.slug)||!(await L(I,"read",r.req.raw,i,a,void 0,R,k)).allowed)continue;let v=I.fields.filter(D=>D.name&&D.name!=="id"&&(D.type==="text"||D.type==="email"||D.type==="textarea"||D.type==="richtext"||D.indexed)&&!D.admin?.hidden).map(D=>D.name);if(v.length!==0)try{let D=v.map(j=>{let C={};return C[j]={like:`%${o}%`},C}),T=await t.find({collection:I.slug,where:{OR:D},limit:y,tenantID:a});await a$4(T.docs,I.fields,t,e,1,0);for(let j of T.docs){let C=I.admin?.useAsTitle||v.find(E=>E==="title"||E==="name"||E==="heading"||E==="slug"),$=C?Ae(I.fields,j,C)??j.id:j.id;b.push({collection:I.slug,label:I.label||I.slug,id:j.id,title:String($||"Untitled"),doc:j});}}catch(D){console.error(`Search error for ${I.slug}:`,D);}}return b.sort((I,S)=>I.label.localeCompare(S.label)),r.json({results:b})}catch(o){return r.json({error:o.message,results:[]},500)}}),w.get("/api/keys",async r=>{try{let{user:o,tenantID:m}=await P(r.req.raw,x,d,u);if(!o||!a$5(o,"users:read"))return r.json({error:"Forbidden"},403);let y=parseInt(r.req.query("page")||"1"),i=Math.min(parseInt(r.req.query("limit")||"50"),100),a=await t.find({collection:d$1,where:{},page:y,limit:i,tenantID:m}),p=(a.docs||[]).map(b=>({id:b.id,name:b.name,keyPrefix:b.keyPrefix,permissions:b.permissions||[],lastUsed:b.lastUsedAt,createdAt:b.createdAt}));return r.json({docs:p,totalDocs:a.totalDocs||p.length,totalPages:a.totalPages||1})}catch(o){return console.error("[ApiKeys] GET error:",o),r.json({error:o.message},500)}}),w.post("/api/keys",async r=>{try{let{user:o}=await P(r.req.raw,x,d,u);if(!o||!a$5(o,"users:admin"))return r.json({error:"Forbidden"},403);let m=await r.req.json();if(!m.name||typeof m.name!="string")return r.json({error:"name is required"},400);let y=i(),i$1=await t.create({collection:d$1,data:{userId:o.id,name:m.name,key:y,keyPrefix:j(y),permissions:Array.isArray(m.permissions)?m.permissions:["*"],expiresAt:m.expiresAt||null,createdAt:new Date().toISOString()}});return await q?.createAuditLog({action:"api_key_create",userId:o.id,resource:"api_key",resourceId:i$1.id,success:!0,metadata:{keyName:m.name}}),r.json({...i$1,key:y,permissions:Array.isArray(m.permissions)?m.permissions:["*"]},201)}catch(o){return console.error("[ApiKeys] POST error:",o),r.json({error:o.message},500)}}),w.delete("/api/keys/:id",async r=>{try{let{user:o}=await P(r.req.raw,x,d,u);if(!o||!a$5(o,"users:admin"))return r.json({error:"Forbidden"},403);let m=r.req.param("id"),y=await t.findByID({collection:d$1,id:m});return y?(await t.delete({collection:d$1,id:m}),await q?.createAuditLog({action:"api_key_delete",userId:o.id,resource:"api_key",resourceId:m,success:!0,metadata:{keyName:y.name}}),r.json({message:"API key deleted"})):r.json({error:"API key not found"},404)}catch(o){return console.error("[ApiKeys] DELETE error:",o),r.json({error:o.message},500)}}),w.patch("/api/keys/:id",async r=>{try{let{user:o}=await P(r.req.raw,x,d,u);if(!o||!a$5(o,"users:admin"))return r.json({error:"Forbidden"},403);let m=r.req.param("id"),y=await r.req.json(),i=await t.findByID({collection:d$1,id:m});if(!i)return r.json({error:"API key not found"},404);let a={};if(typeof y.name=="string"&&y.name.trim()&&(a.name=y.name.trim()),Array.isArray(y.permissions)&&(a.permissions=y.permissions),y.expiresAt!==void 0&&(a.expiresAt=y.expiresAt||null),Object.keys(a).length===0)return r.json({error:"Nothing to update"},400);let p=await t.update({collection:d$1,id:m,data:a});return r.json({...p,keyPrefix:i.keyPrefix})}catch(o){return console.error("[ApiKeys] PATCH error:",o),r.json({error:o.message},500)}}),w.post("/api/keys/:id/rotate",async r=>{try{let{user:o}=await P(r.req.raw,x,d,u);if(!o||!a$5(o,"users:admin"))return r.json({error:"Forbidden"},403);let m=r.req.param("id"),y=await t.findByID({collection:d$1,id:m});if(!y)return r.json({error:"API key not found"},404);let i$1=i(),a=await t.update({collection:d$1,id:m,data:{key:i$1,keyPrefix:j(i$1),lastUsedAt:null}});return await q?.createAuditLog({action:"api_key_rotate",userId:o.id,resource:"api_key",resourceId:m,success:!0,metadata:{keyName:y.name}}),r.json({...a,key:i$1,permissions:y.permissions,expiresAt:y.expiresAt})}catch(o){return console.error("[ApiKeys] rotate error:",o),r.json({error:o.message},500)}}),w.get("/api/webhooks",async r=>{try{let{user:o}=await P(r.req.raw,x,d,u);if(!o||!a$5(o,"users:read"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=await f.getWebhooks();return r.json({docs:m})}catch(o){return console.error("[Webhooks] GET error:",o),r.json({error:o.message},500)}}),w.post("/api/webhooks",async r=>{try{let{user:o}=await P(r.req.raw,x,d,u);if(!o||!a$5(o,"users:admin"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=await r.req.json(),y=await f.createWebhook(m);return await q?.createAuditLog({action:"webhook_create",userId:o.id,resource:"webhook",resourceId:y.id,success:!0,metadata:{name:y.name,url:y.url}}),r.json(y,201)}catch(o){return console.error("[Webhooks] POST error:",o),r.json({error:o.message},500)}}),w.get("/api/webhooks/:id",async r=>{try{let{user:o}=await P(r.req.raw,x,d,u);if(!o||!a$5(o,"users:read"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=await f.getWebhookById(m);return y?r.json(y):r.json({error:"Webhook not found"},404)}catch(o){return console.error("[Webhooks] GET :id error:",o),r.json({error:o.message},500)}}),w.patch("/api/webhooks/:id",async r=>{try{let{user:o}=await P(r.req.raw,x,d,u);if(!o||!a$5(o,"users:admin"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=await r.req.json(),i=await f.updateWebhook(m,y);return i?(await q?.createAuditLog({action:"webhook_update",userId:o.id,resource:"webhook",resourceId:m,success:!0,metadata:{name:i.name}}),r.json(i)):r.json({error:"Webhook not found"},404)}catch(o){return console.error("[Webhooks] PATCH error:",o),r.json({error:o.message},500)}}),w.delete("/api/webhooks/:id",async r=>{try{let{user:o}=await P(r.req.raw,x,d,u);if(!o||!a$5(o,"users:admin"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=await f.getWebhookById(m);return y?(await f.deleteWebhook(m),await q?.createAuditLog({action:"webhook_delete",userId:o.id,resource:"webhook",resourceId:m,success:!0,metadata:{name:y.name}}),r.json({message:"Webhook deleted"})):r.json({error:"Webhook not found"},404)}catch(o){return console.error("[Webhooks] DELETE error:",o),r.json({error:o.message},500)}}),w.post("/api/webhooks/:id/test",async r=>{try{let{user:o}=await P(r.req.raw,x,d,u);if(!o||!a$5(o,"users:admin"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=await f.testWebhook(m);return y?r.json(y):r.json({error:"Webhook not found"},404)}catch(o){return console.error("[Webhooks] test error:",o),r.json({error:o.message},500)}}),w.get("/api/webhooks/:id/history",async r=>{try{let{user:o}=await P(r.req.raw,x,d,u);if(!o||!a$5(o,"users:read"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=Math.min(parseInt(r.req.query("limit")||"50"),100),i=await f.getDeliveryHistory(m,y);return r.json({docs:i})}catch(o){return console.error("[Webhooks] history error:",o),r.json({error:o.message},500)}});function Be(r){let o={},m=["name","type","required","hasMany","relationTo","options","min","max","minLength","maxLength","defaultValue","label","localized","admin","unique","index","hidden","readOnly","deprecated"];for(let y of m)y in r&&(o[y]=r[y]);return r.fields&&(o.fields=r.fields.map(Be)),r.tabs&&(o.tabs=r.tabs.map(y=>({label:y.label,name:y.name,fields:y.fields.map(Be)}))),o}w.get("/api/__schema",async r=>{try{let{user:o,apiKeyContext:m}=await P(r.req.raw,x,d,u);if(!o&&!m)return r.json({error:"Unauthorized"},401);let i=e.getCollections().filter(a=>a.slug!=="users"&&a.slug!=="audit_logs").map(a=>({slug:a.slug,label:a.label,labelPlural:a.labelPlural,singularLabel:a.singularLabel,timestamps:a.timestamps,auth:!!a.auth,tenantScoped:!!a.tenantScoped,upload:a.upload?{staticDir:a.upload.staticDir,imageSizes:a.upload.imageSizes,mimeTypes:a.upload.mimeTypes}:void 0,fields:a.fields.map(Be)}));return r.json(i)}catch(o){return console.error("[Schema] error:",o),r.json({error:o.message},500)}});let Zt=e.getCollections();for(let r of Zt){let y=function(i,a){let p=[],b=new Set([...Object.keys(i),...Object.keys(a)]);for(let h of b)h==="id"||h==="createdAt"||h==="updatedAt"||JSON.stringify(i[h])!==JSON.stringify(a[h])&&p.push({field:h,oldValue:h in i?i[h]:void 0,newValue:h in a?a[h]:void 0});return p};let o=r.slug;if(o==="users"||o==="audit_logs")continue;let m=`/api/${o}`;w.get(m,async i=>{try{let{user:a,tenantID:p,apiKeyContext:b}=await P(i.req.raw,x,d,u),h=await L(r,"read",i.req.raw,a,p,b,R,k);if(!h.allowed)return i.json({error:h.error},h.status||403);p&&t.setTenantContext({tenantId:p,userId:a?.id??"",role:a?.role,isSuperAdmin:a?.role==="super_admin"});let I=new URL(i.req.url),S=parseInt(I.searchParams.get("page")||"1"),v=Math.min(parseInt(I.searchParams.get("limit")||"10"),100),D=I.searchParams.get("sort")||void 0,T=parseInt(I.searchParams.get("depth")||"0"),j=I.searchParams.get("select")?.split(",")||void 0,C=I.searchParams.get("draft"),$=C==="true"?!0:C==="false"?!1:!!a,E={},F=I.searchParams.get("where");if(F)try{E=JSON.parse(F);}catch{return i.json({error:"Invalid JSON in where parameter"},400)}let N=await t.find({collection:o,where:E,sort:D,limit:v,page:S,depth:T,tenantID:p,select:j,draft:$});return await a$4(N.docs,r.fields,t,e,1,T),i.json(N)}catch(a){return console.error("[API] list error:",a),i.json({error:a.message},500)}}),w.get(`${m}/:id/versions`,async i=>{try{let{user:a,tenantID:p,apiKeyContext:b}=await P(i.req.raw,x,d,u),h=await L(r,"read",i.req.raw,a,p,b,R,k);if(!h.allowed)return i.json({error:h.error},h.status||403);let I=i.req.param("id");if(!I)return i.json({error:"Missing document ID"},400);let S=new URL(i.req.url),v=S.searchParams.get("compareA"),D=S.searchParams.get("compareB");if(Fe(q,b,`${m}/${I}/versions`,"GET",i.req.raw),v&&D){let[$,E]=await Promise.all([t.findVersionByID({collection:o,versionId:v,tenantID:p}),t.findVersionByID({collection:o,versionId:D,tenantID:p})]);if(!$||!E)return i.json({error:"Version not found"},404);let F=y($.data,E.data);return i.json({diffs:F})}let T=parseInt(S.searchParams.get("page")||"1"),j=Math.min(parseInt(S.searchParams.get("limit")||"10"),100),C=await t.findVersions({collection:o,documentId:I,page:T,limit:j,tenantID:p});return i.json(C)}catch(a){return console.error("[API] versions error:",a),i.json({error:a.message},500)}}),w.put(`${m}/:id/draft`,async i=>{try{let{user:a,tenantID:p,apiKeyContext:b}=await P(i.req.raw,x,d,u),h=await L(r,"update",i.req.raw,a,p,b,R,k);if(!h.allowed)return i.json({error:h.error},h.status||403);let I=i.req.param("id"),S=await i.req.json(),v=ct(S),D=await t.findByID({collection:o,id:I,tenantID:p,draft:!0});if(!D)return i.json({error:"Document not found"},404);let T;S.delta?T={...D,...S.delta}:T=S.data??ut(S);let j=await t.updateLatestVersion({collection:o,documentId:I,data:T,status:"draft",tenantID:p});return a&&q?.createAuditLog({action:"document_update",userId:a.id,resource:o,resourceId:I,success:!0,metadata:{type:"draft_save"}}),i.json({data:j,message:"Draft saved successfully"})}catch(a){return i.json({error:a.message},500)}}),w.delete(`${m}/:id/draft`,async i=>{try{let{user:a,tenantID:p,apiKeyContext:b}=await P(i.req.raw,x,d,u),h=await L(r,"update",i.req.raw,a,p,b,R,k);return h.allowed?(a&&q?.createAuditLog({action:"document_update",userId:a.id,resource:o,resourceId:i.req.param("id"),success:!0,metadata:{type:"draft_discard"}}),i.json({message:"Draft discarded successfully"})):i.json({error:h.error},h.status||403)}catch(a){return i.json({error:a.message},500)}}),w.get(`${m}/:id`,async i=>{try{let{user:a,tenantID:p,apiKeyContext:b}=await P(i.req.raw,x,d,u),h=await L(r,"read",i.req.raw,a,p,b,R,k);if(!h.allowed)return i.json({error:h.error},h.status||403);let I=i.req.param("id"),S=new URL(i.req.url),v=parseInt(S.searchParams.get("depth")||"0"),D=S.searchParams.get("select")?.split(",")||void 0,T=S.searchParams.get("draft"),j=T==="true"?!0:T==="false"?!1:!!a,C=await t.findByID({collection:o,id:I,depth:v,tenantID:p,select:D,draft:j});return !C&&r.fields.some($=>$.name==="slug")&&(C=await t.findOne({collection:o,where:{slug:I},tenantID:p,draft:j})),C?(await a$4([C],r.fields,t,e,1,v),i.json({data:C})):i.json({error:"Document not found"},404)}catch(a){return i.json({error:a.message},500)}}),w.post(m,async i=>{try{let{user:a,tenantID:p,apiKeyContext:b}=await P(i.req.raw,x,d,u),h=await L(r,"create",i.req.raw,a,p,b,R,k);if(!h.allowed)return i.json({error:h.error},h.status||403);p&&t.setTenantContext({tenantId:p,userId:a?.id??"",role:a?.role,isSuperAdmin:a?.role==="super_admin"}),Fe(q,b,m,"POST",i.req.raw);let S=await i.req.json();pe(S,r.fields),me(r.fields,S);let v=i.req.raw;if(r.hooks?.beforeValidate)for(let E of r.hooks.beforeValidate){let F=await E({collection:o,data:S,req:v,user:a,tenantID:p,operation:"create"});F&&Object.assign(S,F);}let D=e.getCreateZodSchema(o);try{S=D.parse(S);}catch(E){return i.json({error:`Validation failed: ${Oe(E.errors)}`,details:E.errors},400)}r.tenantScoped&&p&&(S.tenantID=p);let T=r.versions?.drafts===!0,j=r.fields.find(E=>E.name==="status"),C=j?.type==="select"&&j.options?.some(E=>E.value==="published");if(T?S.status="draft":C&&!S.status&&(S.status="published"),r.hooks?.beforeChange)for(let E of r.hooks.beforeChange){let F=await E({collection:o,data:S,req:v,user:a,tenantID:p,operation:"create"});F&&Object.assign(S,F);}let $=await t.create({collection:o,data:S,tenantID:p});if(T&&await t.createVersion({collection:o,documentId:$.id,data:S,status:"draft",createdBy:a?.id,changeDescription:"Created",tenantID:p}),r.hooks?.afterChange)for(let E of r.hooks.afterChange)await E({collection:o,doc:$,data:S,req:v,user:a,tenantID:p,operation:"create"});return f&&f.trigger(Ie(o,"create"),{collection:o,operation:"create",data:$,user:a?{id:a.id,email:a.email,role:a.role}:void 0,tenantId:p}).catch(E=>console.error("[Webhook] Failed to trigger:",E)),a&&q?.createAuditLog({action:"document_create",userId:a.id,resource:o,resourceId:$.id,success:!0}),i.json({data:$,message:"Created successfully"},201)}catch(a){return a.name==="ZodError"?i.json({error:`Validation failed: ${Oe(a.errors)}`,details:a.errors},400):i.json({error:a.message},500)}}),w.patch(`${m}/:id`,async i=>{try{let{user:a,tenantID:p,apiKeyContext:b}=await P(i.req.raw,x,d,u),h=await L(r,"update",i.req.raw,a,p,b,R,k);if(!h.allowed)return i.json({error:h.error},h.status||403);let I=i.req.param("id"),S=await i.req.json(),v=ct(S),D=await t.findByID({collection:o,id:I,tenantID:p,draft:!0});if(!D)return i.json({error:"Document not found"},404);if(v&&D.updatedAt&&v!==D.updatedAt)return i.json(Gt(v,D),409);let T=Object.fromEntries(Object.entries(ut(S)).filter(([O,z])=>z!=="null"&&z!==void 0));pe(T,r.fields),me(r.fields,T);let j=i.req.raw;if(r.hooks?.beforeValidate)for(let O of r.hooks.beforeValidate){let z=await O({collection:o,data:T,originalDoc:D,req:j,user:a,tenantID:p,operation:"update"});z&&Object.assign(T,z);}if(T=e.getUpdateZodSchema(o).parse(T),r.hooks?.beforeChange)for(let O of r.hooks.beforeChange){let z=await O({collection:o,data:T,originalDoc:D,req:j,user:a,tenantID:p,operation:"update"});z&&Object.assign(T,z);}let $=i.req.header("X-Draft")==="true",E=r.versions?.drafts===!0,F=i.req.query("autosave")==="true",N;if(E&&$?await t.createVersion({collection:o,documentId:I,data:T,status:"draft",autosave:F,createdBy:a?.id,changeDescription:F?"Autosave":"Draft saved",tenantID:p}):E?(await t.update({collection:o,id:I,data:{...T,status:"published"},tenantID:p}),await t.createVersion({collection:o,documentId:I,data:T,status:"published",createdBy:a?.id,changeDescription:"Published",tenantID:p})):await t.update({collection:o,id:I,data:T,tenantID:p}),N=await t.findByID({collection:o,id:I,tenantID:p,draft:!0}),r.hooks?.afterChange)for(let O of r.hooks.afterChange)await O({collection:o,doc:N,data:T,originalDoc:D,req:j,user:a,tenantID:p,operation:"update"});return f&&f.trigger(Ie(o,"update"),{collection:o,operation:"update",data:N,previousData:D,user:a?{id:a.id,email:a.email,role:a.role}:void 0,tenantId:p}).catch(O=>console.error("[Webhook] Failed to trigger:",O)),Fe(q,b,`${m}/${I}`,"PATCH",i.req.raw),a&&q?.createAuditLog({action:"document_update",userId:a.id,resource:o,resourceId:I,success:!0}),i.json({data:N,message:E?"Draft saved":"Updated successfully"})}catch(a){return a.name==="ZodError"?(console.error(`[PATCH ${m}/:id] Validation failed:`,a.errors),i.json({error:`Validation failed: ${Oe(a.errors)}`,details:a.errors},400)):(console.error(`[PATCH ${m}/:id] ERROR:`,a.message,"CAUSE:",a.cause?.message||a.cause,"QUERY:",a.query),i.json({error:a.message},500))}}),w.delete(`${m}/:id`,async i=>{try{let{user:a,tenantID:p,apiKeyContext:b}=await P(i.req.raw,x,d,u),h=await L(r,"delete",i.req.raw,a,p,b,R,k);if(!h.allowed)return i.json({error:h.error},h.status||403);p&&t.setTenantContext({tenantId:p,userId:a?.id??"",role:a?.role,isSuperAdmin:a?.role==="super_admin"});let I=i.req.param("id"),S=i.req.raw,v=await t.findByID({collection:o,id:I,tenantID:p,draft:!0});if(!v)return i.json({error:"Document not found"},404);if(r.hooks?.beforeDelete)for(let T of r.hooks.beforeDelete)await T({collection:o,doc:v,req:S,user:a,tenantID:p,operation:"delete"});let D=await t.delete({collection:o,id:I,tenantID:p});if(r.hooks?.afterDelete)for(let T of r.hooks.afterDelete)await T({collection:o,doc:D,originalDoc:v,req:S,user:a,tenantID:p,operation:"delete"});return f&&f.trigger(Ie(o,"delete"),{collection:o,operation:"delete",data:D,previousData:v,user:a?{id:a.id,email:a.email,role:a.role}:void 0,tenantId:p}).catch(T=>console.error("[Webhook] Failed to trigger:",T)),Fe(q,b,`${m}/${I}`,"DELETE",i.req.raw),a&&q?.createAuditLog({action:"document_delete",userId:a.id,resource:o,resourceId:I,success:!0}),i.json({data:D,message:"Deleted successfully"})}catch(a){return console.error(`[DELETE] Error deleting ${o}:`,a),i.json({error:a.message||String(a)},500)}}),w.post(`${m}/:id/duplicate`,async i=>{try{let{user:a,tenantID:p,apiKeyContext:b}=await P(i.req.raw,x,d,u),h=await L(r,"create",i.req.raw,a,p,b,R,k);if(!h.allowed)return i.json({error:h.error},h.status||403);let I=i.req.param("id"),S=await t.findByID({collection:o,id:I,tenantID:p,draft:!0});if(!S)return i.json({error:"Document not found"},404);let{id:v,createdAt:D,updatedAt:T,...j}=S,C=Date.now().toString(36),$=`${S.slug||"document"}-copy-${C}`,E=await t.create({collection:o,data:{...j,slug:$,status:"draft"},tenantID:p});return i.json({data:E,message:"Document duplicated successfully"})}catch(a){return console.error("[Duplicate] Error:",a),i.json({error:a.message||String(a)},500)}}),w.post(`${m}/:id/versions/:versionId/restore`,async i=>{try{let{user:a,tenantID:p,apiKeyContext:b}=await P(i.req.raw,x,d,u),h=await L(r,"update",i.req.raw,a,p,b,R,k);if(!h.allowed)return i.json({error:h.error},h.status||403);let I=i.req.param("id"),S=i.req.param("versionId"),v=await t.findVersionByID({collection:o,versionId:S,tenantID:p});if(!v)return i.json({error:"Version not found"},404);let D=await t.update({collection:o,id:I,data:{...v.data,status:"draft"},tenantID:p});return i.json({data:D,message:"Version restored successfully"})}catch(a){return i.json({error:a.message},500)}}),w.post(`${m}/:id/versions`,async i=>{try{let{user:a,tenantID:p,apiKeyContext:b}=await P(i.req.raw,x,d,u),h=await L(r,"update",i.req.raw,a,p,b,R,k);if(!h.allowed)return i.json({error:h.error},h.status||403);let I=await i.req.json(),{versionId:S,action:v}=I;if(v==="restore"&&S){let D=await t.findVersionByID({collection:o,versionId:S,tenantID:p});if(!D)return i.json({error:"Version not found"},404);let T=await t.update({collection:o,id:i.req.param("id"),data:{...D.data,status:"draft"},tenantID:p});return i.json({data:T,message:"Version restored successfully"})}return i.json({error:"Invalid action"},400)}catch(a){return i.json({error:a.message},500)}}),w.post(`${m}/:id/publish`,async i=>{try{let{user:a,tenantID:p,apiKeyContext:b}=await P(i.req.raw,x,d,u),h=await L(r,"update",i.req.raw,a,p,b,R,k);if(!h.allowed)return i.json({error:h.error},h.status||403);p&&t.setTenantContext({tenantId:p,userId:a?.id??"",role:a?.role,isSuperAdmin:a?.role==="super_admin"});let I=i.req.param("id"),S=await i.req.json().catch(()=>({})),v=ct(S),D=await t.findByID({collection:o,id:I,tenantID:p,draft:!0});if(!D)return i.json({error:"Document not found"},404);if(v&&D.updatedAt&&v!==D.updatedAt)return i.json(Gt(v,D),409);let T={status:"published"},j=D;if(r.versions?.drafts){let $=await t.findVersions({collection:o,documentId:I,limit:1,sort:"-createdAt",tenantID:p});if($.docs.length>0){let E=$.docs[0];j={...D,...E.data},T={...E.data,...T};}}let C=await t.update({collection:o,id:I,data:T,tenantID:p});return r.versions?.drafts&&await t.createVersion({collection:o,documentId:I,data:{...j,status:"published"},status:"published",createdBy:a?.id,changeDescription:"Published",tenantID:p}),f&&f.trigger(Ie(o,"update"),{collection:o,operation:"update",data:C,user:a?{id:a.id,email:a.email,role:a.role}:void 0,tenantId:p}).catch($=>console.error("[Webhook] Failed to trigger:",$)),i.json({data:C,message:"Published successfully"})}catch(a){return i.json({error:a.message},500)}}),w.post(`${m}/:id/unpublish`,async i=>{try{let{user:a,tenantID:p,apiKeyContext:b}=await P(i.req.raw,x,d,u),h=await L(r,"update",i.req.raw,a,p,b,R,k);if(!h.allowed)return i.json({error:h.error},h.status||403);let I=i.req.param("id");if(!await t.findByID({collection:o,id:I,tenantID:p,draft:!0}))return i.json({error:"Document not found"},404);let v=await t.update({collection:o,id:I,data:{status:"draft"},tenantID:p});return f&&f.trigger(Ie(o,"update"),{collection:o,operation:"update",data:v,user:a?{id:a.id,email:a.email,role:a.role}:void 0,tenantId:p}).catch(D=>console.error("[Webhook] Failed to trigger:",D)),i.json({data:v,message:"Unpublished successfully"})}catch(a){return i.json({error:a.message},500)}});}for(let r of e.getGlobals()){let o=r.slug,m=`/api/globals/${o}`;w.get(m,async i=>{try{let{user:a,tenantID:p}=await P(i.req.raw,x,d,u),b=await Y(r,"read",i.req.raw,a,p,R);if(!b.allowed)return i.json({error:b.error},b.status||403);let h=!!a,I=await t.findOne({collection:`_globals_${o}`,where:{},tenantID:p,draft:h});if(o==="system"){let S=tr.randomBytes(32).toString("hex");I?I.appSecret||(await t.update({collection:`_globals_${o}`,id:o,data:{appSecret:S},tenantID:p}),I.appSecret=S):I=await t.create({collection:`_globals_${o}`,data:{id:o,appSecret:S},tenantID:p});}return i.json({data:I||{}})}catch(a){return i.json({error:a.message},500)}});let y=async i=>{try{let{user:a,tenantID:p}=await P(i.req.raw,x,d,u),b=await Y(r,"update",i.req.raw,a,p,R);if(!b.allowed)return i.json({error:b.error},b.status||403);let h=ut(await i.req.json()),I=Object.fromEntries(Object.entries(h).filter(([O,z])=>z!==null&&z!=="null"&&z!==void 0));pe(I,r.fields),me(r.fields,I);let S=e.getUpdateZodSchema(o),v;try{v=S.parse(I);}catch(O){return i.json({error:`Validation failed: ${Oe(O.errors)}`,details:O.errors},400)}let D=new Set(["id","createdAt","updatedAt","status","baseUpdatedAt","_baseUpdatedAt"]),T=Object.fromEntries(Object.entries(v).filter(([O])=>!D.has(O))),j=`_globals_${o}`,C=await t.findOne({collection:j,where:{},tenantID:p,draft:!0}),$=i.req.header("X-Draft")==="true",E=r.versions?.drafts===!0,F=i.req.query("autosave")==="true",N;if(E&&$)await t.createVersion({collection:j,documentId:o,data:T,status:"draft",autosave:F,createdBy:a?.id,changeDescription:F?"Autosave":"Manual save",tenantID:p}),C?N=C:N=await t.create({collection:j,data:{...T,id:o,status:"draft"},tenantID:p});else if(E&&!$){let O="published";C?N=await t.update({collection:j,id:o,data:{...T,status:O},tenantID:p}):N=await t.create({collection:j,data:{...T,id:o,status:O},tenantID:p}),await t.createVersion({collection:j,documentId:o,data:T,status:O,autosave:!1,createdBy:a?.id,changeDescription:"Published",tenantID:p});}else C?N=await t.update({collection:j,id:o,data:T,tenantID:p}):N=await t.create({collection:j,data:{...T,id:o},tenantID:p});if(o==="storage-settings"&&(oe=null,de=null),o==="email-settings"){let O=await b$1.fromConfig(t);M.email=O||void 0;}return o==="system"&&await Rt(),a&&q?.createAuditLog({action:"settings_change",userId:a.id,resource:`global:${o}`,resourceId:o,success:!0}),i.json({data:N,message:"Updated successfully"})}catch(a){return console.error(`[API] Save global "${o}" failed:`,a),i.json({error:a.message||"Save failed",stack:process.env.NODE_ENV==="development"?a.stack:void 0},500)}};w.post(m,y),w.patch(m,y),w.post(`${m}/publish`,async i=>{try{let{user:a,tenantID:p}=await P(i.req.raw,x,d,u),b=await Y(r,"update",i.req.raw,a,p,R);if(!b.allowed)return i.json({error:b.error},403);let h=`_globals_${o}`,I=await t.findOne({collection:h,where:{},tenantID:p,draft:!0});if(!I)return i.json({error:"Global not found"},404);let S={status:"published"},v=I;if(r.versions?.drafts){let T=await t.findVersions({collection:h,documentId:o,limit:1,sort:"-createdAt",tenantID:p});T.docs.length>0&&(v={...I,...T.docs[0].data},S={...T.docs[0].data,...S});}let D=await t.update({collection:h,id:o,data:S,tenantID:p});return r.versions?.drafts&&await t.createVersion({collection:h,documentId:o,data:{...v,status:"published"},status:"published",createdBy:a?.id,changeDescription:"Published",tenantID:p}),i.json({data:D,message:"Published successfully"})}catch(a){return i.json({error:a.message},500)}}),w.post(`${m}/unpublish`,async i=>{try{let{user:a,tenantID:p}=await P(i.req.raw,x,d,u),b=await Y(r,"update",i.req.raw,a,p,R);if(!b.allowed)return i.json({error:b.error},403);let h=await t.update({collection:`_globals_${o}`,id:o,data:{status:"draft"},tenantID:p});return i.json({data:h,message:"Unpublished successfully"})}catch(a){return i.json({error:a.message},500)}}),w.get(`${m}/versions`,async i=>{try{let{user:a,tenantID:p}=await P(i.req.raw,x,d,u),b=await Y(r,"read",i.req.raw,a,p,R);if(!b.allowed)return i.json({error:b.error},403);let h=parseInt(i.req.query("limit")||"10"),I=parseInt(i.req.query("page")||"1"),S=await t.findVersions({collection:`_globals_${o}`,documentId:o,limit:h,page:I,tenantID:p});return i.json(S)}catch(a){return i.json({error:a.message},500)}}),w.get(`${m}/versions/:versionId`,async i=>{try{let a=i.req.param("versionId"),{user:p,tenantID:b}=await P(i.req.raw,x,d,u),h=await Y(r,"read",i.req.raw,p,b,R);if(!h.allowed)return i.json({error:h.error},403);let I=await t.findVersionByID({collection:`_globals_${o}`,versionId:a,tenantID:b});return I?i.json({data:I}):i.json({error:"Version not found"},404)}catch(a){return i.json({error:a.message},500)}}),w.post(`${m}/versions/:versionId/restore`,async i=>{try{let a=i.req.param("versionId"),{user:p,tenantID:b}=await P(i.req.raw,x,d,u),h=await Y(r,"update",i.req.raw,p,b,R);if(!h.allowed)return i.json({error:h.error},403);let I=`_globals_${o}`,S=await t.findVersionByID({collection:I,versionId:a,tenantID:b});if(!S)return i.json({error:"Version not found"},404);let v=await t.update({collection:I,id:o,data:{...S.data,status:"draft"},tenantID:b});return i.json({data:v,message:"Version restored successfully"})}catch(a){return i.json({error:a.message},500)}}),o==="email-settings"&&w.post(`${m}/test`,async i=>{try{let{user:a,tenantID:p}=await P(i.req.raw,x,d,u),b=await Y(r,"update",i.req.raw,a,p,R);if(!b.allowed)return i.json({error:b.error},b.status||403);let h=await i.req.json(),I={provider:h.provider,from:h.fromEmail||h.from,fromName:h.fromName,replyTo:h.replyTo,smtp:h.smtp?{host:h.smtp.host,port:h.smtp.port,secure:h.smtp.secure,auth:{user:h.smtp.username||h.smtp.user,pass:h.smtp.password||h.smtp.pass}}:void 0,resend:h.resend,sendgrid:h.sendgrid,mailgun:h.mailgun,ses:h.ses},S=new b$1(I),v=h.testEmail||h.testEmailSection&&h.testEmailSection.testEmail;return v?(await S.send({to:v,subject:"Kyro CMS - Test Email",html:`
-              <div style="font-family: sans-serif; max-width: 600px; margin: 0 auto; padding: 20px; border: 1px solid #e2e8f0; border-radius: 8px;">
-                <h1 style="color: #0b1222; margin-bottom: 16px;">Success! \u{1F680}</h1>
-                <p style="font-size: 16px; color: #334155; line-height: 1.6;">
-                  Your email settings in <b>Kyro CMS</b> are working correctly.
-                </p>
-                <div style="background: #f8fafc; padding: 16px; border-radius: 6px; margin: 24px 0;">
-                  <p style="margin: 0; font-size: 14px; color: #64748b;">
-                    <b>Provider:</b> ${h.provider.toUpperCase()}
-                  </p>
-                  <p style="margin: 8px 0 0; font-size: 14px; color: #64748b;">
-                    <b>Sent at:</b> ${new Date().toLocaleString()}
-                  </p>
-                </div>
-                <p style="font-size: 12px; color: #94a3b8; margin-top: 32px; border-top: 1px solid #f1f5f9; padding-top: 16px;">
-                  This is a test email sent from the Kyro CMS Admin Panel.
-                </p>
-              </div>
-            `,text:`Success! Your email settings in Kyro CMS are working correctly.
-
-Provider: ${h.provider}
-Sent at: ${new Date().toLocaleString()}`}),i.json({message:"Test email sent successfully!"})):i.json({error:"No test recipient email provided"},400)}catch(a){return console.error("[Email Test] Failed:",a),i.json({error:a.message||"Failed to send test email"},500)}});}return w.onError((r,o)=>(console.error(`[API Error] ${o.req.method} ${o.req.path}:`,r),o.json({error:r.message||"Internal server error",code:"INTERNAL_ERROR"},500))),w}function Or(l,e,t){return Jt({registry:l,db:e,authSecret:t?.authSecret,user:t?.user,req:t?.req,tenantID:t?.tenantID,cors:t?.cors,webhookService:t?.webhookService})}export{Rr as a,Tr as b,kr as c,Kt as d,ue as e,nt as f,Br as g,Rt as h,rr as i,Mr as j,Tt as k,We as l,qe as m,Et as n,rs as o,Ct as p,je as q,Le as r,Jt as s,Or as t};

package/dist/chunk-YLEVWUTV.js

@@ -1,2 +0,0 @@
-import {h,a}from'./chunk-HLSB2MCK.js';import {a as a$1}from'./chunk-KDNYHLD2.js';import {GraphQLScalarType,Kind,GraphQLObjectType,GraphQLString,GraphQLInputObjectType,GraphQLBoolean,GraphQLInt,GraphQLList,GraphQLNonNull,GraphQLSchema,GraphQLUnionType,GraphQLFloat}from'graphql';export{printSchema as e}from'graphql';var Z=class{db;tenantID;user;caches=new Map;pending=new Map;waiting=new Map;flushScheduled=false;constructor(r){this.db=r.db,this.tenantID=r.tenantID,this.user=r.user;}getCacheKey(r){return r}async load(r,e){let l=this.getCacheKey(r),y=this.caches.get(l);if(y||(y=new Map,this.caches.set(l,y)),y.has(e))return y.get(e);let a=this.pending.get(l);return a||(a=new Set,this.pending.set(l,a)),a.add(e),y.set(e,void 0),this.flushScheduled||(this.flushScheduled=true,queueMicrotask(()=>{this.flushScheduled=false,this.flushAll();})),new Promise(i=>{let o=this.waiting.get(`${l}:${e}`);o||(o=[],this.waiting.set(`${l}:${e}`,o)),o.push(i);})}async flushAll(){for(let[r,e]of this.pending){if(e.size===0)continue;let l=this.caches.get(r),y=await this.db.find({collection:r,where:{id:{in:Array.from(e)}},limit:e.size,tenantID:this.tenantID,draft:!!this.user});for(let a of y.docs||[])if(a&&a.id){l.set(a.id,a);let i=this.waiting.get(`${r}:${a.id}`);i&&(i.forEach(o=>o(a)),this.waiting.delete(`${r}:${a.id}`));}}for(let[r,e]of this.waiting)e.forEach(l=>l(void 0));this.waiting.clear(),this.pending.clear();}resolveOne(r,e){return this.caches.get(this.getCacheKey(r))?.get(e)}},q=new GraphQLScalarType({name:"JSON",description:"Arbitrary JSON value",serialize(n){return n},parseValue(n){return n},parseLiteral(n){switch(n.kind){case Kind.STRING:return n.value;case Kind.INT:case Kind.FLOAT:return parseFloat(n.value);case Kind.BOOLEAN:return n.value;case Kind.OBJECT:{let r={};for(let e of n.fields)r[e.name.value]=q.parseLiteral(e.value);return r}case Kind.LIST:return n.values.map(r=>q.parseLiteral(r));case Kind.NULL:return null;default:return null}}});function se(n){return r=>{let e=0;return {Field(){e++,e>n&&r.reportError(new Error(`Query exceeds max depth of ${n}`));},leaveField(){e--;}}}}function I(n){return n.split(/[-_]/).map(r=>r.charAt(0).toUpperCase()+r.slice(1)).join("")}function H(n){let r=I(n);return r.charAt(0).toLowerCase()+r.slice(1)}function v(n){return n.endsWith("s")&&n.length>1?n.slice(0,-1):n}async function E(n,r,e){let l=n.access?.[r];if(e.apiKey){if(e.apiKey.permissions?.length>0){let a=n.slug,o=`${a}:${r==="read"?"read":r==="create"?"create":"update"}`;return !h(e.apiKey.permissions,o)&&!h(e.apiKey.permissions,`${a}:admin`)?{allowed:false}:{allowed:true}}if(l){let a$1=await a(l,{req:e.req,user:e.user,tenantID:e.tenantID});return typeof a$1=="boolean"?{allowed:a$1}:{allowed:true,extraWhere:a$1}}return {allowed:true}}if(e.user){let a=n.slug,o=`${a}:${r==="read"?"read":r==="create"?"create":r==="update"?"update":"delete"}`;if(!a$1({id:e.user.id,email:e.user.email,role:e.user.role},o)&&!a$1({id:e.user.id,email:e.user.email,role:e.user.role},`${a}:admin`)&&!l)return {allowed:false}}if(!l)return e.user?{allowed:true}:{allowed:false};let y=await a(l,{req:e.req,user:e.user,tenantID:e.tenantID});return typeof y=="boolean"?{allowed:y}:{allowed:true,extraWhere:y}}async function X(n,r,e){let l=n.access?.[r];if(e.apiKey){if(e.apiKey.permissions?.length>0){let a=n.slug,i=`${a}:${r}`;return !h(e.apiKey.permissions,i)&&!h(e.apiKey.permissions,`${a}:admin`)&&!h(e.apiKey.permissions,`${a}:*`)?{allowed:false}:{allowed:true}}if(l){let a$1=await a(l,{req:e.req,user:e.user,tenantID:e.tenantID});return {allowed:typeof a$1=="boolean"?a$1:true}}return {allowed:true}}if(!l){if(!e.user)return {allowed:false};let a=e.user.role;return a==="super_admin"||a==="admin"?{allowed:true}:{allowed:false}}let y=await a(l,{req:e.req,user:e.user,tenantID:e.tenantID});return typeof y=="boolean"?{allowed:y}:{allowed:true}}function x(n,r){return n?n.startsWith("http://")||n.startsWith("https://")||n.startsWith("blob:")||n.startsWith("data:")?n:`${(process.env.KYRO_BASE_URL||r||"http://localhost:4321").replace(/\/+$/,"")}${n.startsWith("/")?"":"/"}${n}`:null}function K(n,r){return n&&(n.url&&(n.url=x(n.url,r)),n.thumbnailUrl&&(n.thumbnailUrl=x(n.thumbnailUrl,r)),n)}function k(n,r,e,l=false,y="Root",a=new Map){switch(n.type){case "text":case "email":case "password":case "textarea":case "color":case "code":case "markdown":case "date":case "select":case "radio":return n.hasMany?new GraphQLList(GraphQLString):GraphQLString;case "list":return new GraphQLList(GraphQLString);case "upload":{let i=n;if(l)return i.hasMany?new GraphQLList(GraphQLString):GraphQLString;if(i.relationTo&&e?.[i.relationTo]){let o=e[i.relationTo];return i.hasMany?new GraphQLList(o):o}return q}case "image":{if(l)return GraphQLString;let i=n;return i.relationTo&&e?.[i.relationTo]?e[i.relationTo]:q}case "number":{let i=n.integer?GraphQLInt:GraphQLFloat;return n.hasMany?new GraphQLList(i):i}case "checkbox":return GraphQLBoolean;case "json":case "richtext":return q;case "blocks":{if(l)return q;let i=n,o=(i.blocks||[]).map(b=>{let w=`Block_${I(b.slug)}`,u=a.get(w);return u||(u=new GraphQLObjectType({name:w,fields:()=>{let m=j(b.fields||[],r,e,w,a);return m.blockType={type:GraphQLString},m.name={type:GraphQLString},m}}),a.set(w,u)),u});if(o.length===0)return q;let p=`${y}_${I(i.name)}_Blocks`,D=a.get(p);return D||(D=new GraphQLUnionType({name:p,types:o,resolveType:b=>`Block_${I(b.blockType||b.type)}`}),a.set(p,D)),new GraphQLList(D)}case "tabs":{if(l)return q;let i=n,o=`${y}_${I(i.name)}_Tabs`,p=a.get(o);return p||(p=new GraphQLObjectType({name:o,fields:()=>j(i.tabs?.flatMap(D=>D.fields||[])||[],r,e,o,a)}),a.set(o,p)),p}case "relationship":{let i=n.relationTo;if((i==="*"||Array.isArray(i)&&i.includes("*"))&&(i=r.getCollections().map(o=>o.slug)),typeof i=="string"){if(l)return n.hasMany?new GraphQLList(GraphQLString):GraphQLString;if(e?.[i])return n.hasMany?new GraphQLList(e[i]):e[i];let o=r.getCollection(i);if(o)return new GraphQLObjectType({name:`${I(i)}Ref`,fields:()=>({id:{type:GraphQLString},...N(o,r,e,a)})})}else if(Array.isArray(i)){if(l)return n.hasMany?new GraphQLList(q):q;let o=i.map(u=>{if(e?.[u])return e[u];let m=r.getCollection(u);if(m){let c=a.get(`${I(u)}Ref`);return c||(c=new GraphQLObjectType({name:`${I(u)}Ref`,fields:()=>({id:{type:GraphQLString},...N(m,r,e,a)})}),a.set(`${I(u)}Ref`,c)),c}return null}).filter(Boolean);if(o.length===0)return q;let p=`${y}_${I(n.name||"Ref")}_PolyUnion`,D=a.get(p);D||(D=new GraphQLUnionType({name:p,types:o,resolveType:u=>{if(u.__collection&&u.__collection!=="*")return e?.[u.__collection]?e[u.__collection].name:`${I(u.__collection)}Ref`}}),a.set(p,D));let b=`${y}_${I(n.name||"Ref")}_PolyWrapper`,w=a.get(b);return w||(w=new GraphQLObjectType({name:b,fields:{relationTo:{type:GraphQLString},value:{type:D}}}),a.set(b,w)),n.hasMany?new GraphQLList(w):w}return q}case "array":{if(l)return new GraphQLList(q);let i=n,o=`${y}_${I(i.name)}_ArrayItem`,p=a.get(o);return p||(p=new GraphQLObjectType({name:o,fields:()=>{let D=j(i.fields||[],r,e,o,a);return D.id={type:GraphQLString},D}}),a.set(o,p)),new GraphQLList(p)}case "group":{if(l)return q;let i=n,o=`${y}_${I(i.name)}_Group`,p=a.get(o);return p||(p=new GraphQLObjectType({name:o,fields:()=>j(i.fields||[],r,e,o,a)}),a.set(o,p)),p}default:return GraphQLString}}function j(n,r,e,l,y=new Map){let a={};for(let i of n){if(i.type==="tabs"&&!i.name){for(let o of i.tabs||[]){let p=j(o.fields||[],r,e,l,y);Object.assign(a,p);}continue}if(i.type==="row"||i.type==="collapsible"){let o=j(i.fields||[],r,e,l,y);Object.assign(a,o);continue}if(i.name&&i.admin?.hidden!==true){let o=ie(i,r,e,l,y);o&&(a[i.name]=o);}}return a}function N(n,r,e,l=new Map){return j(n.fields,r,e,I(v(n.slug)),l)}function ie(n,r,e,l,y=new Map){if(!n.name)return null;let a=n.deprecated||void 0;if(n.type==="upload"){let o=k(n,r,e,false,l,y),p=n;return {type:n.required?new GraphQLNonNull(o):o,description:n.admin?.description||n.label,deprecationReason:a,resolve:async(D,b,w)=>{let u=w?.relationLoader,m=D?.[p.name],c=w?.req?.url?new URL(w.req.url).origin:void 0;if(!m)return null;if(p.hasMany){let L=Array.isArray(m)?m:[];return Promise.all(L.map(async f=>{let G=typeof f=="string"?f:f?.id;if(!G||typeof f=="object"&&f?.url)return K(f,c);if(u){let S=u.resolveOne(p.relationTo,G);if(S)return K(S,c);let t=await u.load(p.relationTo,G);return t?K(t,c):null}return {id:G}}))}let h=typeof m=="string"?m:m?.id;if(!h||typeof m=="object"&&m?.url)return K(m,c);if(u){let L=u.resolveOne(p.relationTo,h);if(L)return K(L,c);let f=await u.load(p.relationTo,h);return f?K(f,c):null}return {id:h}}}}if(n.type==="relationship"&&!n.hasMany){let o=k(n,r,e,false,l,y);return {type:n.required?new GraphQLNonNull(o):o,description:n.admin?.description||n.label,deprecationReason:a,resolve:async(p,D,b)=>{let w=b?.relationLoader,u=n,m=p?.[u.name];if(!m)return null;let c=Array.isArray(u.relationTo)||u.relationTo==="*",h=c?m?.relationTo:u.relationTo,L=c?m?.value:m;if(c&&typeof m=="string"&&(h=u.relationTo[0],L=m),c&&h==="*")return null;if(w&&typeof L=="string"&&typeof h=="string"&&h!=="*"){let f=w.resolveOne(h,L);if(f)return c?{relationTo:h,value:{...f,__collection:h}}:f;let G=await w.load(h,L);return G?c?{relationTo:h,value:{...G,__collection:h}}:G:null}return c?{relationTo:h,value:{id:L,__collection:h}}:{id:L}}}}if(n.type==="relationship"&&n.hasMany)return {type:k(n,r,e,false,l,y),description:n.admin?.description||n.label,deprecationReason:a,resolve:async(p,D,b)=>{let w=b?.relationLoader,u=n,m=p?.[u.name]||[];if(!m.length)return [];let c=Array.isArray(u.relationTo)||u.relationTo==="*";if(w){let h=[];for(let L of m){let f=c?L?.relationTo:u.relationTo,G=c?L?.value:L;if(c&&typeof L=="string"&&(f=u.relationTo[0],G=L),!(c&&f==="*")){if(typeof G=="string"&&typeof f=="string"&&f!=="*"){let S=w.resolveOne(f,G);if(S){h.push(c?{relationTo:f,value:{...S,__collection:f}}:S);continue}let t=await w.load(f,G);if(t){h.push(c?{relationTo:f,value:{...t,__collection:f}}:t);continue}continue}h.push(c?{relationTo:f,value:{id:G,__collection:f}}:{id:G});}}return h}return m.map(h=>{let L=c?h?.relationTo:u.relationTo,f=c?h?.value:h;return c&&typeof h=="string"&&(L=u.relationTo[0],f=h),c?{relationTo:L,value:{id:f}}:{id:f}})}};if(n.type==="blocks"){let o=k(n,r,e,false,l,y);return {type:n.required?new GraphQLNonNull(o):o,description:n.admin?.description||n.label,deprecationReason:a,resolve:p=>{let D=p?.[n.name];return Array.isArray(D)?D.map(b=>b&&b.data&&b.type?{...b.data,id:b.id,type:b.type,blockType:b.type,name:b.name}:b):D}}}let i=k(n,r,e,false,l,y);return {type:n.required?new GraphQLNonNull(i):i,description:n.admin?.description||n.label,deprecationReason:a}}function ee(n){let{registry:r,db:e,user:l,req:y,tenantID:a,apiKey:i,settings:o}=n;if(o?.access?.apiAccess?.graphqlEnabled===false)throw new Error("GraphQL API is disabled");let D=r.getCollections(),b=r.getGlobals(),w={},u={},m=new Map;for(let t of D){w[t.slug]=new GraphQLObjectType({name:I(v(t.slug)),fields:()=>({id:{type:GraphQLString},...N(t,r,w,m),...t.timestamps?{createdAt:{type:GraphQLString},updatedAt:{type:GraphQLString}}:{},...t.tenantScoped?{tenantID:{type:GraphQLString}}:{}})});let Q={};for(let _ of t.fields)_.name&&_.name!=="id"&&(Q[_.name]={type:k(_,r,w,true)});u[t.slug]=new GraphQLInputObjectType({name:`${I(v(t.slug))}Input`,fields:()=>Q});}let c={},h={};for(let t of b)c[t.slug]=new GraphQLObjectType({name:`${I(t.slug)}Global`,fields:()=>({id:{type:GraphQLString},...N({slug:t.slug,fields:t.fields},r,w)})}),h[t.slug]=new GraphQLInputObjectType({name:`${I(t.slug)}GlobalInput`,fields:()=>{let Q={};for(let _ of t.fields)_.name&&_.name!=="id"&&(Q[_.name]={type:k(_,r,w,true)});return Q}});let L={};for(let t of D){let Q=w[t.slug];Q&&(L[H(t.slug)]={type:new GraphQLObjectType({name:`${I(v(t.slug))}FindResult`,fields:{docs:{type:new GraphQLList(Q)},totalDocs:{type:GraphQLInt},page:{type:GraphQLInt},totalPages:{type:GraphQLInt},hasNextPage:{type:GraphQLBoolean},hasPrevPage:{type:GraphQLBoolean}}}),args:{where:{type:GraphQLString},sort:{type:GraphQLString},limit:{type:GraphQLInt},page:{type:GraphQLInt},draft:{type:GraphQLBoolean}},resolve:async(_,T,s)=>{let d=await E(t,"read",{user:s.user,req:s.req,tenantID:s.tenantID,apiKey:s.apiKey});if(!d.allowed)throw new Error("Access denied");s.tenantID&&e.setTenantContext({tenantId:s.tenantID,userId:s.user?.id??"",role:s.user?.role,isSuperAdmin:s.user?.role==="super_admin"});let A={};if(T.where)try{A=JSON.parse(T.where);}catch{}d.extraWhere&&(A={...A,...d.extraWhere});let O=T.draft??!!s.user;return e.find({collection:t.slug,where:A,sort:T.sort,limit:T.limit||10,page:T.page||1,tenantID:s.tenantID,draft:O})}},L[H(v(t.slug))]={type:Q,args:{id:{type:GraphQLString},slug:{type:GraphQLString},draft:{type:GraphQLBoolean}},resolve:async(_,T,s)=>{if(!T.id&&!T.slug)throw new Error("Either id or slug is required");if(!(await E(t,"read",{user:s.user,req:s.req,tenantID:s.tenantID,apiKey:s.apiKey})).allowed)throw new Error("Access denied");s.tenantID&&e.setTenantContext({tenantId:s.tenantID,userId:s.user?.id??"",role:s.user?.role,isSuperAdmin:s.user?.role==="super_admin"});let A=T.draft??!!s.user;return T.id?e.findByID({collection:t.slug,id:T.id,tenantID:s.tenantID,draft:A}):(await e.find({collection:t.slug,where:{slug:{equals:T.slug}},limit:1,page:1,tenantID:s.tenantID,draft:A})).docs?.[0]||null}},L[`count${I(t.slug)}`]={type:new GraphQLObjectType({name:`${I(v(t.slug))}Count`,fields:{totalDocs:{type:GraphQLInt}}}),args:{where:{type:GraphQLString}},resolve:async(_,T,s)=>{if(!(await E(t,"read",{user:s.user,req:s.req,tenantID:s.tenantID,apiKey:s.apiKey})).allowed)return {totalDocs:0};let A={};if(T.where)try{A=JSON.parse(T.where);}catch{}return {totalDocs:await e.count({collection:t.slug,where:A,tenantID:s.tenantID})}}});}for(let t of b){let Q=c[t.slug];Q&&(L[H(v(t.slug))]={type:Q,resolve:async(_,T,s)=>{if(!(await X(t,"read",{user:s.user,req:s.req,tenantID:s.tenantID,apiKey:s.apiKey})).allowed)throw new Error("Access denied: cannot read global");return s.tenantID&&e.setTenantContext({tenantId:s.tenantID,userId:s.user?.id??"",role:s.user?.role,isSuperAdmin:s.user?.role==="super_admin"}),e.findOne({collection:`_globals_${t.slug}`,where:{},tenantID:s.tenantID})}});}let f=new GraphQLObjectType({name:"Query",fields:L}),G={};for(let t of D){let Q=w[t.slug],_=u[t.slug];!Q||!_||(G[`create${I(v(t.slug))}`]={type:new GraphQLObjectType({name:`${I(v(t.slug))}CreateResult`,fields:{doc:{type:Q},message:{type:GraphQLString}}}),args:{data:{type:new GraphQLNonNull(_)}},resolve:async(T,s,d)=>{if(!(await E(t,"create",{user:d.user,req:d.req,tenantID:d.tenantID,apiKey:d.apiKey})).allowed)throw new Error("Access denied: cannot create");d.tenantID&&e.setTenantContext({tenantId:d.tenantID,userId:d.user?.id??"",role:d.user?.role,isSuperAdmin:d.user?.role==="super_admin"});let J=r.getCreateZodSchema(t.slug).parse(s.data);return {doc:await e.create({collection:t.slug,data:J,tenantID:d.tenantID}),message:"Created successfully"}}},G[`update${I(v(t.slug))}`]={type:new GraphQLObjectType({name:`${I(v(t.slug))}UpdateResult`,fields:{doc:{type:Q},message:{type:GraphQLString}}}),args:{id:{type:new GraphQLNonNull(GraphQLString)},data:{type:new GraphQLNonNull(_)},baseUpdatedAt:{type:GraphQLString}},resolve:async(T,s,d)=>{if(!(await E(t,"update",{user:d.user,req:d.req,tenantID:d.tenantID,apiKey:d.apiKey})).allowed)throw new Error("Access denied: cannot update");if(d.tenantID&&e.setTenantContext({tenantId:d.tenantID,userId:d.user?.id??"",role:d.user?.role,isSuperAdmin:d.user?.role==="super_admin"}),s.baseUpdatedAt){let W=await e.findByID({collection:t.slug,id:s.id,tenantID:d.tenantID,draft:true});if(W&&W.updatedAt&&s.baseUpdatedAt!==W.updatedAt)throw new Error(`Revision conflict: document has changed since ${s.baseUpdatedAt}. Current updatedAt: ${W.updatedAt}`)}let J=r.getUpdateZodSchema(t.slug).parse(s.data);return {doc:await e.update({collection:t.slug,id:s.id,data:J,tenantID:d.tenantID}),message:"Updated successfully"}}},G[`delete${I(v(t.slug))}`]={type:new GraphQLObjectType({name:`${I(v(t.slug))}DeleteResult`,fields:{doc:{type:Q},message:{type:GraphQLString}}}),args:{id:{type:new GraphQLNonNull(GraphQLString)}},resolve:async(T,s,d)=>{if(!(await E(t,"delete",{user:d.user,req:d.req,tenantID:d.tenantID,apiKey:d.apiKey})).allowed)throw new Error("Access denied: cannot delete");return d.tenantID&&e.setTenantContext({tenantId:d.tenantID,userId:d.user?.id??"",role:d.user?.role,isSuperAdmin:d.user?.role==="super_admin"}),{doc:await e.delete({collection:t.slug,id:s.id,tenantID:d.tenantID}),message:"Deleted successfully"}}});}for(let t of b){let Q=h[t.slug];Q&&(G[`update${I(t.slug)}`]={type:new GraphQLObjectType({name:`${I(t.slug)}UpdateResult`,fields:{doc:{type:c[t.slug]||GraphQLString},message:{type:GraphQLString}}}),args:{data:{type:new GraphQLNonNull(Q)}},resolve:async(_,T,s)=>{if(!(await X(t,"update",{user:s.user,req:s.req,tenantID:s.tenantID,apiKey:s.apiKey})).allowed)throw new Error("Access denied: cannot update global");s.tenantID&&e.setTenantContext({tenantId:s.tenantID,userId:s.user?.id??"",role:s.user?.role,isSuperAdmin:s.user?.role==="super_admin"});let A=await e.findOne({collection:`_globals_${t.slug}`,where:{},tenantID:s.tenantID}),O;return A?O=await e.update({collection:`_globals_${t.slug}`,id:A.id,data:T.data,tenantID:s.tenantID}):O=await e.create({collection:`_globals_${t.slug}`,data:T.data,tenantID:s.tenantID}),{doc:O,message:"Updated successfully"}}});}let S=new GraphQLObjectType({name:"Mutation",fields:G});return new GraphQLSchema({query:f,mutation:S})}function oe(n,r,e){return ee({registry:n,db:r,user:e?.user,req:e?.req,tenantID:e?.tenantID,apiKey:e?.apiKey})}
-export{Z as a,se as b,ee as c,oe as d};