@kyro-cms/core 0.11.3 → 0.11.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (71) hide show
  1. package/dist/{WebhookService-neHWRdFM.d.ts → WebhookService-BU7tpsju.d.ts} +1 -1
  2. package/dist/{WebhookService-DvP8e4Gb.d.cts → WebhookService-C-AiI-mY.d.cts} +1 -1
  3. package/dist/api-handler-graphql.cjs +1 -1
  4. package/dist/api-handler-graphql.js +1 -1
  5. package/dist/api-handler-trpc.cjs +1 -1
  6. package/dist/api-handler-trpc.js +1 -1
  7. package/dist/api-handler.cjs +1 -1
  8. package/dist/api-handler.js +1 -1
  9. package/dist/{base-CH7d01Yw.d.cts → base-Belr0_tE.d.cts} +2 -2
  10. package/dist/{base-DRK_7V46.d.ts → base-D5VkUbPm.d.ts} +2 -2
  11. package/dist/{chunk-Q4CSLXCO.cjs → chunk-5BOHALPJ.cjs} +2 -2
  12. package/dist/chunk-5KHTAW4H.cjs +86 -0
  13. package/dist/chunk-7ORSLR3S.js +2 -0
  14. package/dist/chunk-AYCQ3E7K.js +21 -0
  15. package/dist/chunk-CC7UIA4Y.cjs +21 -0
  16. package/dist/chunk-DNLO7PK6.cjs +2 -0
  17. package/dist/{chunk-62Y4NYMH.cjs → chunk-H6K44OUB.cjs} +1 -1
  18. package/dist/{chunk-GDMLWVJO.js → chunk-MTFJDAPX.js} +6 -6
  19. package/dist/{chunk-NGBJKZMT.js → chunk-NJS6FLXT.js} +2 -2
  20. package/dist/chunk-O6WZLSKJ.js +86 -0
  21. package/dist/chunk-O7FYIPJW.cjs +2 -0
  22. package/dist/{chunk-RLDAQ7IH.cjs → chunk-QAJS4EXW.cjs} +7 -7
  23. package/dist/chunk-XQPYBNIT.js +2 -0
  24. package/dist/{chunk-E33PFGHA.js → chunk-ZIFNNRVH.js} +1 -1
  25. package/dist/client.cjs +1 -1
  26. package/dist/client.d.cts +2 -2
  27. package/dist/client.d.ts +2 -2
  28. package/dist/client.js +1 -1
  29. package/dist/drizzle/index.cjs +1 -1
  30. package/dist/drizzle/index.d.cts +3 -3
  31. package/dist/drizzle/index.d.ts +3 -3
  32. package/dist/drizzle/index.js +1 -1
  33. package/dist/fields/index.cjs +1 -1
  34. package/dist/fields/index.d.cts +1 -1
  35. package/dist/fields/index.d.ts +1 -1
  36. package/dist/fields/index.js +1 -1
  37. package/dist/graphql/index.cjs +1 -1
  38. package/dist/graphql/index.d.cts +3 -3
  39. package/dist/graphql/index.d.ts +3 -3
  40. package/dist/graphql/index.js +1 -1
  41. package/dist/{index-BTFBhepB.d.ts → index-BitS8SsT.d.ts} +2 -2
  42. package/dist/{index-B52AAXcJ.d.cts → index-ChfSBo05.d.cts} +2 -2
  43. package/dist/index.cjs +2 -2
  44. package/dist/index.d.cts +9 -9
  45. package/dist/index.d.ts +9 -9
  46. package/dist/index.js +1 -1
  47. package/dist/mongodb/index.cjs +1 -1
  48. package/dist/mongodb/index.d.cts +3 -3
  49. package/dist/mongodb/index.d.ts +3 -3
  50. package/dist/mongodb/index.js +1 -1
  51. package/dist/rest/index.cjs +1 -1
  52. package/dist/rest/index.d.cts +4 -4
  53. package/dist/rest/index.d.ts +4 -4
  54. package/dist/rest/index.js +1 -1
  55. package/dist/templates/index.d.cts +2 -2
  56. package/dist/templates/index.d.ts +2 -2
  57. package/dist/trpc/index.d.cts +3 -3
  58. package/dist/trpc/index.d.ts +3 -3
  59. package/dist/{types-BH7tjlpR.d.ts → types-B7Zn7cy6.d.ts} +1 -1
  60. package/dist/{types-BMu-234T.d.cts → types-CM9P5IfD.d.cts} +1 -1
  61. package/dist/{types-C9izrwhZ.d.cts → types-d0sRWA-r.d.cts} +14 -2
  62. package/dist/{types-C9izrwhZ.d.ts → types-d0sRWA-r.d.ts} +14 -2
  63. package/package.json +1 -1
  64. package/dist/chunk-6JHNHMGB.cjs +0 -2
  65. package/dist/chunk-GT5P64DV.js +0 -21
  66. package/dist/chunk-PY45XUEJ.cjs +0 -21
  67. package/dist/chunk-RNY7W36D.cjs +0 -86
  68. package/dist/chunk-TYOVXKQP.js +0 -2
  69. package/dist/chunk-WMY7BDPK.cjs +0 -2
  70. package/dist/chunk-WQKF57FY.js +0 -86
  71. package/dist/chunk-YLEVWUTV.js +0 -2
@@ -1,4 +1,4 @@
1
- import { B as BaseAdapter } from './types-BH7tjlpR.js';
1
+ import { B as BaseAdapter } from './types-B7Zn7cy6.js';
2
2
 
3
3
  declare const WEBHOOK_EVENTS: {
4
4
  readonly COLLECTION_CREATE: "collection.create";
@@ -1,4 +1,4 @@
1
- import { B as BaseAdapter } from './types-BMu-234T.cjs';
1
+ import { B as BaseAdapter } from './types-CM9P5IfD.cjs';
2
2
 
3
3
  declare const WEBHOOK_EVENTS: {
4
4
  readonly COLLECTION_CREATE: "collection.create";
@@ -1 +1 @@
1
- 'use strict';var chunk62Y4NYMH_cjs=require('./chunk-62Y4NYMH.cjs');require('./chunk-PY45XUEJ.cjs'),require('./chunk-UJNSOOYZ.cjs'),require('./chunk-65G73T7Z.cjs'),require('./chunk-BDBN4RN6.cjs'),require('./chunk-6JHNHMGB.cjs'),require('./chunk-RNY7W36D.cjs'),require('./chunk-AJAZ7D3W.cjs'),require('./chunk-WIZ6C5QZ.cjs'),require('./chunk-GFU7AOI3.cjs'),require('./chunk-ET6NN2V2.cjs'),require('./chunk-HVXO3OFB.cjs'),require('./chunk-4FV3HQBI.cjs'),require('./chunk-NY47CFVP.cjs'),require('./chunk-F7SR5IDT.cjs'),require('./chunk-4ORJMSJU.cjs'),require('./chunk-RLDAQ7IH.cjs'),require('./chunk-GYQMNXXW.cjs'),require('./chunk-MIOMMB23.cjs'),require('./chunk-UBHFUFD4.cjs'),require('./chunk-WMY7BDPK.cjs'),require('./chunk-ATLSIYRH.cjs'),require('./chunk-W4ZDETHA.cjs'),require('./chunk-Q3Q7BJVQ.cjs'),require('./chunk-AHSFSERC.cjs');function n(e){return new Response(e.body,e)}var p={graphqlEnabled:false,trpcEnabled:false,wsEnabled:false,requireAuth:false};function r(){return new Response(JSON.stringify({error:"GraphQL is disabled"}),{status:503,headers:{"Content-Type":"application/json"}})}async function o(){try{return (await chunk62Y4NYMH_cjs.a.db.findOne({collection:"_globals_access-settings",where:{},draft:!0}))?.apiAccess?.graphqlEnabled??p.graphqlEnabled}catch{return true}}var l=async e=>{if(await chunk62Y4NYMH_cjs.b(),!await o())return r();let t=await chunk62Y4NYMH_cjs.a.getGraphQL().fetch(e.request,e.locals);return n(t)},u=async e=>{if(await chunk62Y4NYMH_cjs.b(),!await o())return r();let t=await chunk62Y4NYMH_cjs.a.getGraphQL().fetch(e.request,e.locals);return n(t)};exports.GET=u;exports.POST=l;
1
+ 'use strict';var chunkH6K44OUB_cjs=require('./chunk-H6K44OUB.cjs');require('./chunk-CC7UIA4Y.cjs'),require('./chunk-UJNSOOYZ.cjs'),require('./chunk-65G73T7Z.cjs'),require('./chunk-BDBN4RN6.cjs'),require('./chunk-O7FYIPJW.cjs'),require('./chunk-5KHTAW4H.cjs'),require('./chunk-AJAZ7D3W.cjs'),require('./chunk-WIZ6C5QZ.cjs'),require('./chunk-GFU7AOI3.cjs'),require('./chunk-ET6NN2V2.cjs'),require('./chunk-HVXO3OFB.cjs'),require('./chunk-4FV3HQBI.cjs'),require('./chunk-NY47CFVP.cjs'),require('./chunk-F7SR5IDT.cjs'),require('./chunk-4ORJMSJU.cjs'),require('./chunk-QAJS4EXW.cjs'),require('./chunk-GYQMNXXW.cjs'),require('./chunk-MIOMMB23.cjs'),require('./chunk-UBHFUFD4.cjs'),require('./chunk-DNLO7PK6.cjs'),require('./chunk-ATLSIYRH.cjs'),require('./chunk-W4ZDETHA.cjs'),require('./chunk-Q3Q7BJVQ.cjs'),require('./chunk-AHSFSERC.cjs');function n(e){return new Response(e.body,e)}var p={graphqlEnabled:false,trpcEnabled:false,wsEnabled:false,requireAuth:false};function r(){return new Response(JSON.stringify({error:"GraphQL is disabled"}),{status:503,headers:{"Content-Type":"application/json"}})}async function o(){try{return (await chunkH6K44OUB_cjs.a.db.findOne({collection:"_globals_access-settings",where:{},draft:!0}))?.apiAccess?.graphqlEnabled??p.graphqlEnabled}catch{return true}}var l=async e=>{if(await chunkH6K44OUB_cjs.b(),!await o())return r();let t=await chunkH6K44OUB_cjs.a.getGraphQL().fetch(e.request,e.locals);return n(t)},u=async e=>{if(await chunkH6K44OUB_cjs.b(),!await o())return r();let t=await chunkH6K44OUB_cjs.a.getGraphQL().fetch(e.request,e.locals);return n(t)};exports.GET=u;exports.POST=l;
@@ -1 +1 @@
1
- import {b,a}from'./chunk-E33PFGHA.js';import'./chunk-GT5P64DV.js';import'./chunk-FO3HLBC7.js';import'./chunk-NZ35PV5R.js';import'./chunk-GJQH6NV7.js';import'./chunk-YLEVWUTV.js';import'./chunk-WQKF57FY.js';import'./chunk-7WOX27LK.js';import'./chunk-K6WUOU6P.js';import'./chunk-AE6GXUT7.js';import'./chunk-2W4FK6CJ.js';import'./chunk-NRLIGDYF.js';import'./chunk-QIP7PY2U.js';import'./chunk-HLSB2MCK.js';import'./chunk-SL3LZQCF.js';import'./chunk-PP5S2UBV.js';import'./chunk-GDMLWVJO.js';import'./chunk-RHCWCG3O.js';import'./chunk-OG7CNQGU.js';import'./chunk-QRXDCV6K.js';import'./chunk-TYOVXKQP.js';import'./chunk-P7CESLDJ.js';import'./chunk-4YYBWCDJ.js';import'./chunk-KDNYHLD2.js';import'./chunk-5J6HXUF6.js';function n(e){return new Response(e.body,e)}var p={graphqlEnabled:false,trpcEnabled:false,wsEnabled:false,requireAuth:false};function r(){return new Response(JSON.stringify({error:"GraphQL is disabled"}),{status:503,headers:{"Content-Type":"application/json"}})}async function o(){try{return (await a.db.findOne({collection:"_globals_access-settings",where:{},draft:!0}))?.apiAccess?.graphqlEnabled??p.graphqlEnabled}catch{return true}}var l=async e=>{if(await b(),!await o())return r();let t=await a.getGraphQL().fetch(e.request,e.locals);return n(t)},u=async e=>{if(await b(),!await o())return r();let t=await a.getGraphQL().fetch(e.request,e.locals);return n(t)};export{u as GET,l as POST};
1
+ import {b,a}from'./chunk-ZIFNNRVH.js';import'./chunk-AYCQ3E7K.js';import'./chunk-FO3HLBC7.js';import'./chunk-NZ35PV5R.js';import'./chunk-GJQH6NV7.js';import'./chunk-XQPYBNIT.js';import'./chunk-O6WZLSKJ.js';import'./chunk-7WOX27LK.js';import'./chunk-K6WUOU6P.js';import'./chunk-AE6GXUT7.js';import'./chunk-2W4FK6CJ.js';import'./chunk-NRLIGDYF.js';import'./chunk-QIP7PY2U.js';import'./chunk-HLSB2MCK.js';import'./chunk-SL3LZQCF.js';import'./chunk-PP5S2UBV.js';import'./chunk-MTFJDAPX.js';import'./chunk-RHCWCG3O.js';import'./chunk-OG7CNQGU.js';import'./chunk-QRXDCV6K.js';import'./chunk-7ORSLR3S.js';import'./chunk-P7CESLDJ.js';import'./chunk-4YYBWCDJ.js';import'./chunk-KDNYHLD2.js';import'./chunk-5J6HXUF6.js';function n(e){return new Response(e.body,e)}var p={graphqlEnabled:false,trpcEnabled:false,wsEnabled:false,requireAuth:false};function r(){return new Response(JSON.stringify({error:"GraphQL is disabled"}),{status:503,headers:{"Content-Type":"application/json"}})}async function o(){try{return (await a.db.findOne({collection:"_globals_access-settings",where:{},draft:!0}))?.apiAccess?.graphqlEnabled??p.graphqlEnabled}catch{return true}}var l=async e=>{if(await b(),!await o())return r();let t=await a.getGraphQL().fetch(e.request,e.locals);return n(t)},u=async e=>{if(await b(),!await o())return r();let t=await a.getGraphQL().fetch(e.request,e.locals);return n(t)};export{u as GET,l as POST};
@@ -1 +1 @@
1
- 'use strict';var chunk62Y4NYMH_cjs=require('./chunk-62Y4NYMH.cjs');require('./chunk-PY45XUEJ.cjs'),require('./chunk-UJNSOOYZ.cjs'),require('./chunk-65G73T7Z.cjs'),require('./chunk-BDBN4RN6.cjs'),require('./chunk-6JHNHMGB.cjs'),require('./chunk-RNY7W36D.cjs'),require('./chunk-AJAZ7D3W.cjs'),require('./chunk-WIZ6C5QZ.cjs'),require('./chunk-GFU7AOI3.cjs'),require('./chunk-ET6NN2V2.cjs'),require('./chunk-HVXO3OFB.cjs'),require('./chunk-4FV3HQBI.cjs'),require('./chunk-NY47CFVP.cjs'),require('./chunk-F7SR5IDT.cjs'),require('./chunk-4ORJMSJU.cjs'),require('./chunk-RLDAQ7IH.cjs'),require('./chunk-GYQMNXXW.cjs'),require('./chunk-MIOMMB23.cjs'),require('./chunk-UBHFUFD4.cjs'),require('./chunk-WMY7BDPK.cjs'),require('./chunk-ATLSIYRH.cjs'),require('./chunk-W4ZDETHA.cjs'),require('./chunk-Q3Q7BJVQ.cjs'),require('./chunk-AHSFSERC.cjs');function n(){return new Response(JSON.stringify({error:"tRPC is disabled"}),{status:503,headers:{"Content-Type":"application/json"}})}var r={graphqlEnabled:false,trpcEnabled:false,wsEnabled:false,requireAuth:false};async function s(){try{return (await chunk62Y4NYMH_cjs.a.db.findOne({collection:"_globals_access-settings",where:{},draft:!0}))?.apiAccess?.trpcEnabled??r.trpcEnabled}catch{return true}}var i=async e=>(await chunk62Y4NYMH_cjs.b(),await s()?chunk62Y4NYMH_cjs.a.getTRPC().fetch(e.request,e.locals):n());exports.ALL=i;
1
+ 'use strict';var chunkH6K44OUB_cjs=require('./chunk-H6K44OUB.cjs');require('./chunk-CC7UIA4Y.cjs'),require('./chunk-UJNSOOYZ.cjs'),require('./chunk-65G73T7Z.cjs'),require('./chunk-BDBN4RN6.cjs'),require('./chunk-O7FYIPJW.cjs'),require('./chunk-5KHTAW4H.cjs'),require('./chunk-AJAZ7D3W.cjs'),require('./chunk-WIZ6C5QZ.cjs'),require('./chunk-GFU7AOI3.cjs'),require('./chunk-ET6NN2V2.cjs'),require('./chunk-HVXO3OFB.cjs'),require('./chunk-4FV3HQBI.cjs'),require('./chunk-NY47CFVP.cjs'),require('./chunk-F7SR5IDT.cjs'),require('./chunk-4ORJMSJU.cjs'),require('./chunk-QAJS4EXW.cjs'),require('./chunk-GYQMNXXW.cjs'),require('./chunk-MIOMMB23.cjs'),require('./chunk-UBHFUFD4.cjs'),require('./chunk-DNLO7PK6.cjs'),require('./chunk-ATLSIYRH.cjs'),require('./chunk-W4ZDETHA.cjs'),require('./chunk-Q3Q7BJVQ.cjs'),require('./chunk-AHSFSERC.cjs');function n(){return new Response(JSON.stringify({error:"tRPC is disabled"}),{status:503,headers:{"Content-Type":"application/json"}})}var r={graphqlEnabled:false,trpcEnabled:false,wsEnabled:false,requireAuth:false};async function s(){try{return (await chunkH6K44OUB_cjs.a.db.findOne({collection:"_globals_access-settings",where:{},draft:!0}))?.apiAccess?.trpcEnabled??r.trpcEnabled}catch{return true}}var i=async e=>(await chunkH6K44OUB_cjs.b(),await s()?chunkH6K44OUB_cjs.a.getTRPC().fetch(e.request,e.locals):n());exports.ALL=i;
@@ -1 +1 @@
1
- import {b,a}from'./chunk-E33PFGHA.js';import'./chunk-GT5P64DV.js';import'./chunk-FO3HLBC7.js';import'./chunk-NZ35PV5R.js';import'./chunk-GJQH6NV7.js';import'./chunk-YLEVWUTV.js';import'./chunk-WQKF57FY.js';import'./chunk-7WOX27LK.js';import'./chunk-K6WUOU6P.js';import'./chunk-AE6GXUT7.js';import'./chunk-2W4FK6CJ.js';import'./chunk-NRLIGDYF.js';import'./chunk-QIP7PY2U.js';import'./chunk-HLSB2MCK.js';import'./chunk-SL3LZQCF.js';import'./chunk-PP5S2UBV.js';import'./chunk-GDMLWVJO.js';import'./chunk-RHCWCG3O.js';import'./chunk-OG7CNQGU.js';import'./chunk-QRXDCV6K.js';import'./chunk-TYOVXKQP.js';import'./chunk-P7CESLDJ.js';import'./chunk-4YYBWCDJ.js';import'./chunk-KDNYHLD2.js';import'./chunk-5J6HXUF6.js';function n(){return new Response(JSON.stringify({error:"tRPC is disabled"}),{status:503,headers:{"Content-Type":"application/json"}})}var r={graphqlEnabled:false,trpcEnabled:false,wsEnabled:false,requireAuth:false};async function s(){try{return (await a.db.findOne({collection:"_globals_access-settings",where:{},draft:!0}))?.apiAccess?.trpcEnabled??r.trpcEnabled}catch{return true}}var i=async e=>(await b(),await s()?a.getTRPC().fetch(e.request,e.locals):n());export{i as ALL};
1
+ import {b,a}from'./chunk-ZIFNNRVH.js';import'./chunk-AYCQ3E7K.js';import'./chunk-FO3HLBC7.js';import'./chunk-NZ35PV5R.js';import'./chunk-GJQH6NV7.js';import'./chunk-XQPYBNIT.js';import'./chunk-O6WZLSKJ.js';import'./chunk-7WOX27LK.js';import'./chunk-K6WUOU6P.js';import'./chunk-AE6GXUT7.js';import'./chunk-2W4FK6CJ.js';import'./chunk-NRLIGDYF.js';import'./chunk-QIP7PY2U.js';import'./chunk-HLSB2MCK.js';import'./chunk-SL3LZQCF.js';import'./chunk-PP5S2UBV.js';import'./chunk-MTFJDAPX.js';import'./chunk-RHCWCG3O.js';import'./chunk-OG7CNQGU.js';import'./chunk-QRXDCV6K.js';import'./chunk-7ORSLR3S.js';import'./chunk-P7CESLDJ.js';import'./chunk-4YYBWCDJ.js';import'./chunk-KDNYHLD2.js';import'./chunk-5J6HXUF6.js';function n(){return new Response(JSON.stringify({error:"tRPC is disabled"}),{status:503,headers:{"Content-Type":"application/json"}})}var r={graphqlEnabled:false,trpcEnabled:false,wsEnabled:false,requireAuth:false};async function s(){try{return (await a.db.findOne({collection:"_globals_access-settings",where:{},draft:!0}))?.apiAccess?.trpcEnabled??r.trpcEnabled}catch{return true}}var i=async e=>(await b(),await s()?a.getTRPC().fetch(e.request,e.locals):n());export{i as ALL};
@@ -1 +1 @@
1
- 'use strict';var chunk62Y4NYMH_cjs=require('./chunk-62Y4NYMH.cjs');require('./chunk-PY45XUEJ.cjs'),require('./chunk-UJNSOOYZ.cjs'),require('./chunk-65G73T7Z.cjs'),require('./chunk-BDBN4RN6.cjs'),require('./chunk-6JHNHMGB.cjs'),require('./chunk-RNY7W36D.cjs'),require('./chunk-AJAZ7D3W.cjs'),require('./chunk-WIZ6C5QZ.cjs'),require('./chunk-GFU7AOI3.cjs'),require('./chunk-ET6NN2V2.cjs'),require('./chunk-HVXO3OFB.cjs'),require('./chunk-4FV3HQBI.cjs'),require('./chunk-NY47CFVP.cjs'),require('./chunk-F7SR5IDT.cjs'),require('./chunk-4ORJMSJU.cjs'),require('./chunk-RLDAQ7IH.cjs'),require('./chunk-GYQMNXXW.cjs'),require('./chunk-MIOMMB23.cjs'),require('./chunk-UBHFUFD4.cjs'),require('./chunk-WMY7BDPK.cjs'),require('./chunk-ATLSIYRH.cjs'),require('./chunk-W4ZDETHA.cjs'),require('./chunk-Q3Q7BJVQ.cjs'),require('./chunk-AHSFSERC.cjs');Object.defineProperty(exports,"ALL",{enumerable:true,get:function(){return chunk62Y4NYMH_cjs.c}});Object.defineProperty(exports,"kyroInstance",{enumerable:true,get:function(){return chunk62Y4NYMH_cjs.a}});Object.defineProperty(exports,"warmKyroInstance",{enumerable:true,get:function(){return chunk62Y4NYMH_cjs.b}});
1
+ 'use strict';var chunkH6K44OUB_cjs=require('./chunk-H6K44OUB.cjs');require('./chunk-CC7UIA4Y.cjs'),require('./chunk-UJNSOOYZ.cjs'),require('./chunk-65G73T7Z.cjs'),require('./chunk-BDBN4RN6.cjs'),require('./chunk-O7FYIPJW.cjs'),require('./chunk-5KHTAW4H.cjs'),require('./chunk-AJAZ7D3W.cjs'),require('./chunk-WIZ6C5QZ.cjs'),require('./chunk-GFU7AOI3.cjs'),require('./chunk-ET6NN2V2.cjs'),require('./chunk-HVXO3OFB.cjs'),require('./chunk-4FV3HQBI.cjs'),require('./chunk-NY47CFVP.cjs'),require('./chunk-F7SR5IDT.cjs'),require('./chunk-4ORJMSJU.cjs'),require('./chunk-QAJS4EXW.cjs'),require('./chunk-GYQMNXXW.cjs'),require('./chunk-MIOMMB23.cjs'),require('./chunk-UBHFUFD4.cjs'),require('./chunk-DNLO7PK6.cjs'),require('./chunk-ATLSIYRH.cjs'),require('./chunk-W4ZDETHA.cjs'),require('./chunk-Q3Q7BJVQ.cjs'),require('./chunk-AHSFSERC.cjs');Object.defineProperty(exports,"ALL",{enumerable:true,get:function(){return chunkH6K44OUB_cjs.c}});Object.defineProperty(exports,"kyroInstance",{enumerable:true,get:function(){return chunkH6K44OUB_cjs.a}});Object.defineProperty(exports,"warmKyroInstance",{enumerable:true,get:function(){return chunkH6K44OUB_cjs.b}});
@@ -1 +1 @@
1
- export{c as ALL,a as kyroInstance,b as warmKyroInstance}from'./chunk-E33PFGHA.js';import'./chunk-GT5P64DV.js';import'./chunk-FO3HLBC7.js';import'./chunk-NZ35PV5R.js';import'./chunk-GJQH6NV7.js';import'./chunk-YLEVWUTV.js';import'./chunk-WQKF57FY.js';import'./chunk-7WOX27LK.js';import'./chunk-K6WUOU6P.js';import'./chunk-AE6GXUT7.js';import'./chunk-2W4FK6CJ.js';import'./chunk-NRLIGDYF.js';import'./chunk-QIP7PY2U.js';import'./chunk-HLSB2MCK.js';import'./chunk-SL3LZQCF.js';import'./chunk-PP5S2UBV.js';import'./chunk-GDMLWVJO.js';import'./chunk-RHCWCG3O.js';import'./chunk-OG7CNQGU.js';import'./chunk-QRXDCV6K.js';import'./chunk-TYOVXKQP.js';import'./chunk-P7CESLDJ.js';import'./chunk-4YYBWCDJ.js';import'./chunk-KDNYHLD2.js';import'./chunk-5J6HXUF6.js';
1
+ export{c as ALL,a as kyroInstance,b as warmKyroInstance}from'./chunk-ZIFNNRVH.js';import'./chunk-AYCQ3E7K.js';import'./chunk-FO3HLBC7.js';import'./chunk-NZ35PV5R.js';import'./chunk-GJQH6NV7.js';import'./chunk-XQPYBNIT.js';import'./chunk-O6WZLSKJ.js';import'./chunk-7WOX27LK.js';import'./chunk-K6WUOU6P.js';import'./chunk-AE6GXUT7.js';import'./chunk-2W4FK6CJ.js';import'./chunk-NRLIGDYF.js';import'./chunk-QIP7PY2U.js';import'./chunk-HLSB2MCK.js';import'./chunk-SL3LZQCF.js';import'./chunk-PP5S2UBV.js';import'./chunk-MTFJDAPX.js';import'./chunk-RHCWCG3O.js';import'./chunk-OG7CNQGU.js';import'./chunk-QRXDCV6K.js';import'./chunk-7ORSLR3S.js';import'./chunk-P7CESLDJ.js';import'./chunk-4YYBWCDJ.js';import'./chunk-KDNYHLD2.js';import'./chunk-5J6HXUF6.js';
@@ -1,5 +1,5 @@
1
- import { B as BaseAdapter, C as CollectionConfig, G as GlobalConfig, T as TenantContext, F as FindArgs, b as FindResult, c as FindByIDArgs, d as CreateArgs, e as UpdateArgs, D as DeleteArgs, f as FindVersionsArgs, g as VersionRecord, h as CreateVersionArgs } from './types-BMu-234T.cjs';
2
- import { F as Field, k as RelationshipField, U as UploadField } from './types-C9izrwhZ.cjs';
1
+ import { B as BaseAdapter, C as CollectionConfig, G as GlobalConfig, T as TenantContext, F as FindArgs, b as FindResult, c as FindByIDArgs, d as CreateArgs, e as UpdateArgs, D as DeleteArgs, f as FindVersionsArgs, g as VersionRecord, h as CreateVersionArgs } from './types-CM9P5IfD.cjs';
2
+ import { F as Field, k as RelationshipField, U as UploadField } from './types-d0sRWA-r.cjs';
3
3
 
4
4
  declare abstract class AbstractBaseAdapter implements BaseAdapter {
5
5
  protected collections: Map<string, CollectionConfig>;
@@ -1,5 +1,5 @@
1
- import { B as BaseAdapter, C as CollectionConfig, G as GlobalConfig, T as TenantContext, F as FindArgs, b as FindResult, c as FindByIDArgs, d as CreateArgs, e as UpdateArgs, D as DeleteArgs, f as FindVersionsArgs, g as VersionRecord, h as CreateVersionArgs } from './types-BH7tjlpR.js';
2
- import { F as Field, k as RelationshipField, U as UploadField } from './types-C9izrwhZ.js';
1
+ import { B as BaseAdapter, C as CollectionConfig, G as GlobalConfig, T as TenantContext, F as FindArgs, b as FindResult, c as FindByIDArgs, d as CreateArgs, e as UpdateArgs, D as DeleteArgs, f as FindVersionsArgs, g as VersionRecord, h as CreateVersionArgs } from './types-B7Zn7cy6.js';
2
+ import { F as Field, k as RelationshipField, U as UploadField } from './types-d0sRWA-r.js';
3
3
 
4
4
  declare abstract class AbstractBaseAdapter implements BaseAdapter {
5
5
  protected collections: Map<string, CollectionConfig>;
@@ -1,4 +1,4 @@
1
- 'use strict';var html=require('@tiptap/html'),d=require('@tiptap/starter-kit'),s=require('@tiptap/extension-link'),p=require('@tiptap/extension-image'),c=require('@tiptap/extension-text-align'),x=require('@tiptap/extension-underline'),u=require('@tiptap/extension-highlight'),m=require('@tiptap/extension-task-list'),g=require('@tiptap/extension-task-item'),extensionTextStyle=require('@tiptap/extension-text-style'),y=require('@tiptap/extension-color');function _interopDefault(e){return e&&e.__esModule?e:{default:e}}var d__default=/*#__PURE__*/_interopDefault(d);var s__default=/*#__PURE__*/_interopDefault(s);var p__default=/*#__PURE__*/_interopDefault(p);var c__default=/*#__PURE__*/_interopDefault(c);var x__default=/*#__PURE__*/_interopDefault(x);var u__default=/*#__PURE__*/_interopDefault(u);var m__default=/*#__PURE__*/_interopDefault(m);var g__default=/*#__PURE__*/_interopDefault(g);var y__default=/*#__PURE__*/_interopDefault(y);function b(e){return e.type==="text"}function h(e){return e.type==="number"}function k(e){return e.type==="relationship"}function R(e){return e.type==="array"}function B(e){return e.type==="group"}function T(e){return e.type==="blocks"}function w(e){return e.type==="upload"}function L(e){return e.type==="image"}function I(e){return e.type==="richtext"}function V(e){return e.type==="select"}function A(e){return e.type==="row"||e.type==="collapsible"||e.type==="tabs"}var r=["text","number","checkbox","date","email","password","textarea","select","radio","color"],n=["richtext","json","code","upload","image","markdown"],o=["relationship","array","group","blocks"],a=["row","collapsible","tabs"],C=[...r,...n,...o,...a];function S(e,t,i){return {name:e,type:"relationship",relationTo:t,...i,required:i?.required??false}}var Y=`
1
+ 'use strict';var html=require('@tiptap/html'),s=require('@tiptap/starter-kit'),d=require('@tiptap/extension-link'),p=require('@tiptap/extension-image'),c=require('@tiptap/extension-text-align'),x=require('@tiptap/extension-underline'),g=require('@tiptap/extension-highlight'),u=require('@tiptap/extension-task-list'),m=require('@tiptap/extension-task-item'),extensionTextStyle=require('@tiptap/extension-text-style'),y=require('@tiptap/extension-color');function _interopDefault(e){return e&&e.__esModule?e:{default:e}}var s__default=/*#__PURE__*/_interopDefault(s);var d__default=/*#__PURE__*/_interopDefault(d);var p__default=/*#__PURE__*/_interopDefault(p);var c__default=/*#__PURE__*/_interopDefault(c);var x__default=/*#__PURE__*/_interopDefault(x);var g__default=/*#__PURE__*/_interopDefault(g);var u__default=/*#__PURE__*/_interopDefault(u);var m__default=/*#__PURE__*/_interopDefault(m);var y__default=/*#__PURE__*/_interopDefault(y);function b(e){return e.type==="text"}function h(e){return e.type==="number"}function k(e){return e.type==="relationship"}function R(e){return e.type==="array"}function B(e){return e.type==="group"}function T(e){return e.type==="blocks"}function w(e){return e.type==="upload"}function L(e){return e.type==="image"}function A(e){return e.type==="richtext"}function I(e){return e.type==="select"}function V(e){return e.type==="row"||e.type==="collapsible"||e.type==="tabs"}var r=["text","number","checkbox","date","email","password","textarea","select","radio","color"],n=["richtext","json","code","upload","image","markdown"],o=["relationship","array","group","blocks"],a=["row","collapsible","tabs"],C=[...r,...n,...o,...a];function D(e,t,i){return {name:e,type:"relationship",relationTo:t,...i,required:i?.required??false}}var Y=`
2
2
  .kyro-richtext {
3
3
  color: inherit;
4
4
  line-height: 1.7;
@@ -87,4 +87,4 @@
87
87
  border-radius: 0.25rem;
88
88
  padding: 0.125rem 0.25rem;
89
89
  }
90
- `.trim(),f=[d__default.default,s__default.default.configure({openOnClick:false}),p__default.default,c__default.default.configure({types:["heading","paragraph"]}),x__default.default,u__default.default.configure({multicolor:true}),m__default.default,g__default.default.configure({nested:true}),extensionTextStyle.TextStyle,y__default.default];function G(e){return typeof e=="object"&&e!==null?e:{}}function j(e){if(typeof e!="object"||e===null)return "";try{return `<div class="kyro-richtext">${html.generateHTML(e,f)}</div>`}catch(t){return console.error("Failed to render rich text:",t),""}}exports.a=b;exports.b=h;exports.c=k;exports.d=R;exports.e=B;exports.f=T;exports.g=w;exports.h=L;exports.i=I;exports.j=V;exports.k=A;exports.l=r;exports.m=n;exports.n=o;exports.o=a;exports.p=C;exports.q=S;exports.r=Y;exports.s=G;exports.t=j;
90
+ `.trim(),f=[s__default.default,d__default.default.configure({openOnClick:false}),p__default.default,c__default.default.configure({types:["heading","paragraph"]}),x__default.default,g__default.default.configure({multicolor:true}),u__default.default,m__default.default.configure({nested:true}),extensionTextStyle.TextStyle,y__default.default];function G(e){return typeof e=="object"&&e!==null?e:{}}function j(e){if(typeof e!="object"||e===null)return "";try{return `<div class="kyro-richtext">${html.generateHTML(e,f)}</div>`}catch(t){return console.error("Failed to render rich text:",t),""}}exports.a=b;exports.b=h;exports.c=k;exports.d=R;exports.e=B;exports.f=T;exports.g=w;exports.h=L;exports.i=A;exports.j=I;exports.k=V;exports.l=r;exports.m=n;exports.n=o;exports.o=a;exports.p=C;exports.q=D;exports.r=Y;exports.s=G;exports.t=j;
@@ -0,0 +1,86 @@
1
+ 'use strict';var chunkAJAZ7D3W_cjs=require('./chunk-AJAZ7D3W.cjs'),chunkGFU7AOI3_cjs=require('./chunk-GFU7AOI3.cjs'),chunkET6NN2V2_cjs=require('./chunk-ET6NN2V2.cjs'),chunkHVXO3OFB_cjs=require('./chunk-HVXO3OFB.cjs'),chunk4FV3HQBI_cjs=require('./chunk-4FV3HQBI.cjs'),chunkNY47CFVP_cjs=require('./chunk-NY47CFVP.cjs'),chunkQAJS4EXW_cjs=require('./chunk-QAJS4EXW.cjs'),chunkGYQMNXXW_cjs=require('./chunk-GYQMNXXW.cjs'),chunkDNLO7PK6_cjs=require('./chunk-DNLO7PK6.cjs'),chunkATLSIYRH_cjs=require('./chunk-ATLSIYRH.cjs'),chunkQ3Q7BJVQ_cjs=require('./chunk-Q3Q7BJVQ.cjs'),chunkAHSFSERC_cjs=require('./chunk-AHSFSERC.cjs'),rr=require('crypto'),unstorage=require('unstorage'),ir=require('unstorage/drivers/fs'),hono=require('hono'),Le=require('path'),fs=require('fs'),ct=require('sharp'),promises=require('fs/promises'),br=require('process'),clientS3=require('@aws-sdk/client-s3'),nodeHttpHandler=require('@smithy/node-http-handler'),stream=require('stream'),basicFtp=require('basic-ftp'),zodToJsonSchema=require('zod-to-json-schema');function _interopDefault(e){return e&&e.__esModule?e:{default:e}}var rr__default=/*#__PURE__*/_interopDefault(rr);var ir__default=/*#__PURE__*/_interopDefault(ir);var Le__default=/*#__PURE__*/_interopDefault(Le);var ct__default=/*#__PURE__*/_interopDefault(ct);var br__default=/*#__PURE__*/_interopDefault(br);function Kr(l){We=l;}async function Tt(){if(We)try{let l=await We.findOne({collection:"_globals_system",where:{}});if(l){te={appSecret:l.appSecret||null,encryptionKey:l.encryptionKey||null,sessionConfig:l.sessionMaxAge||l.maxSessionsPerUser?{maxAge:(l.sessionMaxAge||7)*24*60*60*1e3,maxSessionsPerUser:l.maxSessionsPerUser||3}:null};return}}catch{}te={appSecret:process.env.APP_SECRET||"development-secret-key",encryptionKey:null,sessionConfig:null};}function sr(){return te?.appSecret?te.appSecret:process.env.APP_SECRET||"development-secret-key"}function zr(){if(te?.encryptionKey)return te.encryptionKey;let l=sr();return rr__default.default.createHash("sha256").update(l).digest("hex")}function Pt(){return te?.sessionConfig?te.sessionConfig:{maxAge:10080*60*1e3,maxSessionsPerUser:3}}var We,te,Ve=chunkAHSFSERC_cjs.a(()=>{We=null,te=null;});var qt={};chunkAHSFSERC_cjs.b(qt,{SESSION_CONFIG:()=>ee,clearSessionCookie:()=>Ye,createSession:()=>Ze,deleteSession:()=>he,getClientIp:()=>Xe,getCurrentUser:()=>V,getSession:()=>ue,getSessionIdFromRequest:()=>Y,getUserSessions:()=>ye,invalidateAllUserSessions:()=>lr,refreshSession:()=>je,setSessionCookie:()=>Ge,updateSessionName:()=>Qe,validateSession:()=>Ue});async function re(){return Te||(Te=unstorage.createStorage({driver:ir__default.default({base:".astro/sessions"})}),Te)}function or(){return rr__default.default.randomUUID()}function jt(l){let e="Unknown",t="Unknown",s="Unknown";return l.includes("Firefox")?e="Firefox":l.includes("Edg/")?e="Edge":l.includes("Chrome")?e="Chrome":l.includes("Safari")&&!l.includes("Chrome")&&(e="Safari"),l.includes("iPhone")?(t="iPhone",s="iOS"):l.includes("iPad")?(t="iPad",s="iOS"):l.includes("Mac")?(t="MacBook",s="macOS"):l.includes("Windows")?(t="Windows PC",s="Windows"):l.includes("Linux")?(t="Linux PC",s="Linux"):l.includes("Android")&&(t="Android Phone",s="Android"),{browser:e,device:t,platform:s}}function dr(l){if(!l?.userAgent)return "Session";let{browser:e,device:t}=jt(l.userAgent);return `${t} - ${e}`}function Y(l){let e=l.headers.get("Cookie");return e&&Object.fromEntries(e.split("; ").map(s=>s.split("=")))[He]||null}function Xe(l){let e=l.headers.get("x-forwarded-for");return e?e.split(",")[0].trim():l.headers.get("x-real-ip")||"unknown"}function Ge(l,e){let s=process.env.NODE_ENV==="production"?"Secure; ":"",i=new Headers(l.headers);return i.append("Set-Cookie",`${He}=${e}; HttpOnly; Path=/; Max-Age=${ee.absoluteMaxAge/1e3}; SameSite=Strict; ${s}`),new Response(l.body,{status:l.status,statusText:l.statusText,headers:i})}function Ye(l){let t=process.env.NODE_ENV==="production"?"Secure; ":"",s=new Headers(l.headers);return s.append("Set-Cookie",`${He}=; HttpOnly; Path=/; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=Strict; ${t}`),new Response(l.body,{status:l.status,statusText:l.statusText,headers:s})}async function Pe(l){return await(await re()).getItem(`user:${l}`)||[]}async function Je(l,e){let t=await re();e.length>0?await t.setItem(`user:${l}`,e):await t.removeItem(`user:${l}`);}async function Ze(l,e){let t=await re(),s=await Pe(l.id);for(;s.length>=ee.maxSessionsPerUser;){let A=s.shift();A&&await t.removeItem(`session:${A}`);}let i=or(),u=Date.now(),d=e?.headers.get("user-agent"),c=e?Xe(e):"unknown",g=d?{userAgent:d,ip:c,...jt(d)}:{ip:c},f={id:i,userId:l.id,email:l.email,role:l.role,tenantId:l.tenantId,permissions:l.permissions,createdAt:u,expiresAt:u+ee.absoluteMaxAge,lastActivityAt:u,deviceInfo:g,sessionName:dr(g)};return await t.setItem(`session:${i}`,f,{ttl:Math.floor(ee.absoluteMaxAge/1e3)}),s.push(i),await Je(l.id,s),i}async function ue(l){return await(await re()).getItem(`session:${l}`)||null}async function Ue(l){let e=await ue(l);return e?e.expiresAt<Date.now()?(await he(l),{valid:false,reason:"Session expired"}):{valid:true}:{valid:false,reason:"Session not found"}}async function je(l,e){let t=await re(),s=await ue(l);if(!s)return null;let i=Date.now(),u=s.expiresAt-i,d=s.deviceInfo;if(e){let f=Xe(e);f!==s.deviceInfo?.ip&&(d={...s.deviceInfo,ip:f});}let c={...s,lastActivityAt:i,expiresAt:u<ee.refreshThreshold?i+ee.absoluteMaxAge:s.expiresAt,deviceInfo:d},g=u<ee.refreshThreshold?ee.absoluteMaxAge:void 0;return await t.setItem(`session:${l}`,c,g?{ttl:Math.floor(g/1e3)}:void 0),c}async function he(l){let e=await re(),t=await ue(l);if(t){let i=(await Pe(t.userId)).filter(u=>u!==l);await Je(t.userId,i);}await e.removeItem(`session:${l}`),await e.removeItem(`activity:${l}`);}async function lr(l){let e=await Pe(l),t=await re();for(let s of e)await t.removeItem(`session:${s}`),await t.removeItem(`activity:${s}`);await Je(l,[]);}async function ye(l,e){let t=await Pe(l),s=[];for(let i of t){let u=await ue(i);u&&s.push({id:u.id,sessionName:u.sessionName||"Session",deviceInfo:u.deviceInfo,createdAt:u.createdAt,lastActivityAt:u.lastActivityAt,currentSession:u.id===e});}return s.sort((i,u)=>u.lastActivityAt-i.lastActivityAt),s}async function Qe(l,e){let t=await ue(l);return t?(await(await re()).setItem(`session:${l}`,{...t,sessionName:e}),true):false}async function V(l){let e=Y(l);if(!e||!(await Ue(e)).valid)return null;let s=await ue(e);return s?(await je(e,l),s):null}var Ut,ee,He,Te,qe=chunkAHSFSERC_cjs.a(()=>{Ve();Ut=Pt(),ee={absoluteMaxAge:Ut.maxAge,maxSessionsPerUser:Ut.maxSessionsPerUser,refreshThreshold:300*1e3,activityDebounce:30*1e3,pollInterval:30*1e3},He="kyro-session",Te=null;});function ce(l,e){for(let t of l){if(t.name===e)return t;if(t.type==="group"||t.type==="array"){let s=ce(t.fields||[],e);if(s)return s}if(t.type==="blocks")for(let s of t.blocks||[]){let i=ce(s.fields||[],e);if(i)return i}if(t.type==="tabs")for(let s of t.tabs||[]){let i=ce(s.fields||[],e);if(i)return i}if(t.type==="collapsible"||t.type==="row"){let s=ce(t.fields||[],e);if(s)return s}}return null}qe();function Et(l){let{db:t,userLookup:s}=l;return async function(u){let d=chunkNY47CFVP_cjs.f(u);if(d&&t){let g=await chunkNY47CFVP_cjs.e(d,t,s);if(g.valid&&g.user)return {user:g.user,tenantContext:kt(g.user),apiKeyContext:chunkNY47CFVP_cjs.g(g),status:200,authType:"apikey"};if(g.error)return {status:401,error:g.error}}let c=Y(u);if(c)try{let g=await Ue(c);if(!g.valid)return {status:401,error:g.reason||"Session invalid"};let f=await V(u);if(f){let A=s?await s(f.userId):null;if(A)return {user:A,tenantContext:kt(A),status:200,authType:"session"}}}catch(g){console.error("Session validation error:",g);}return {status:401,error:"Authentication required"}}}function kt(l){return {tenantId:l.tenantId||"default",userId:l.id||"anonymous",role:l.role||"guest",roles:[l.role||"guest"],permissions:[],isSuperAdmin:l.role==="super_admin"}}Ve();var ke=class{storage=new Map;userStorage=new Map;limits;userLimits;constructor(e,t){this.limits={...cr,...e},this.userLimits=t||{"user:api":{window:6e4,max:500},"user:write":{window:36e5,max:100}};}getKey(e,t){return `${e}:${t}`}getUserKey(e,t,s){return `user:${e}:${t}:${s}`}cleanupOldEntries(e,t){let i=Date.now()-t;for(;e.length>0&&e[0].timestamp<i;)e.shift();}async check(e,t){let s=this.limits[e]||this.limits["api:general"],i=this.getKey(e,t),u=this.storage.get(i);u||(u=[],this.storage.set(i,u)),this.cleanupOldEntries(u,s.window);let d=Date.now(),c=u.reduce((g,f)=>g+f.count,0);if(u.push({timestamp:d,count:1}),c>=s.max){let f=u.reduce((A,w)=>A.timestamp<w.timestamp?A:w,u[0]).timestamp+s.window;return {allowed:false,remaining:0,resetAt:f,retryAfter:Math.ceil((f-d)/1e3)}}return {allowed:true,remaining:s.max-c-1,resetAt:d+s.window}}async checkUser(e,t,s){let i=this.userLimits[e]||this.userLimits["user:api"],u=this.userStorage.get(t),d=[];u?d=u.get(this.getKey(e,s))||[]:(this.userStorage.has(t)||this.userStorage.set(t,new Map),this.userStorage.get(t).set(this.getKey(e,s),d)),this.cleanupOldEntries(d,i.window);let c=Date.now(),g=d.reduce((f,A)=>f+A.count,0);if(d.push({timestamp:c,count:1}),g>=i.max){let A=d.reduce((w,U)=>w.timestamp<U.timestamp?w:U,d[0]).timestamp+i.window;return {allowed:false,remaining:0,resetAt:A,retryAfter:Math.ceil((A-c)/1e3)}}return {allowed:true,remaining:i.max-g-1,resetAt:c+i.window}}async reset(e,t){let s=this.getKey(e,t);this.storage.delete(s);}async resetUser(e,t,s){let i=this.userStorage.get(t);if(i){let u=this.getKey(e,s);i.delete(u);}}async getStatus(e,t){let s=this.limits[e]||this.limits["api:general"],i=this.getKey(e,t),u=this.storage.get(i);u||(u=[],this.storage.set(i,u)),this.cleanupOldEntries(u,s.window);let d=Date.now(),c=u.reduce((g,f)=>g+f.count,0);return {count:c,limit:s.max,remaining:Math.max(0,s.max-c),resetAt:d+s.window}}setLimit(e,t){this.limits[e]=t;}setUserLimit(e,t){this.userLimits[e]=t;}},cr={"auth:login":{window:9e5,max:5},"auth:register":{window:36e5,max:3},"auth:forgot":{window:36e5,max:3},"auth:reset":{window:36e5,max:5},"auth:verify":{window:36e5,max:5},"api:general":{window:6e4,max:100},"api:authenticated":{window:6e4,max:200}};var et={retentionDays:30};var Ct=class{redis;prefix;retentionDays;constructor(e,t=30,s="kyro:audit:"){this.redis=e,this.prefix=s,this.retentionDays=t;}async log(e){let t=rr.randomBytes(16).toString("hex"),s=new Date,i={...e,id:t,timestamp:s},u=this.getKeyForDate(s),d=`${this.prefix}log:${t}`;await this.redis.hset(d,this.serializeLog(i)),await this.redis.expire(d,this.retentionDays*24*60*60+3600),await this.redis.zadd(u,s.getTime(),t),await this.redis.expire(u,this.retentionDays*24*60*60+3600);let c=e.userId?`${this.prefix}user:${e.userId}`:null;return c&&(await this.redis.zadd(c,s.getTime(),t),await this.redis.expire(c,this.retentionDays*24*60*60+3600)),t}async get(e){let t=`${this.prefix}log:${e}`,s=await this.redis.hgetall(t);return !s||Object.keys(s).length===0?null:this.deserializeLog(s)}async query(e={}){let{limit:t=50,offset:s=0}=e,i=[];if(e.userId)i.push(`${this.prefix}user:${e.userId}`);else if(e.startDate||e.endDate)i=this.getKeysForDateRange(e.startDate,e.endDate);else {let g=new Date;i=this.getKeysForDateRange(new Date(g.getTime()-this.retentionDays*24*60*60*1e3),g);}let u=[];for(let g of i){let f=await this.redis.zrange(g,0,-1,"WITHSCORES");for(let A=0;A<f.length;A+=2)u.push([f[A],parseInt(f[A+1],10)]);}u.sort((g,f)=>f[1]-g[1]);let d=u.length;u=u.slice(s,s+t);let c=[];for(let[g]of u){let f=await this.get(g);f&&this.matchesFilter(f,e)&&c.push(f);}return {logs:c,total:d}}async getRecent(e=50){let t=[],s=new Date,i=this.getKeysForDateRange(new Date(s.getTime()-10080*60*1e3),s),u=[];for(let d of i){let c=await this.redis.zrange(d,0,-1,"WITHSCORES");for(let g=0;g<c.length;g+=2)u.push([c[g],parseInt(c[g+1],10)]);}u.sort((d,c)=>c[1]-d[1]);for(let[d]of u.slice(0,e)){let c=await this.get(d);c&&t.push(c);}return t}async getUserActivity(e,t=50){let s=`${this.prefix}user:${e}`,i=await this.redis.zrange(s,0,t-1),u=[];for(let d of i){let c=await this.get(d);c&&u.push(c);}return u}async getStats(e,t){let s=this.getKeysForDateRange(e||new Date(Date.now()-2592e6),t||new Date),i={},u=0,d=0,c=0,g=new Set;for(let f of s){let A=await this.redis.zrange(f,0,-1);for(let w of A){let U=await this.get(w);U&&(u++,i[U.action]=(i[U.action]||0)+1,U.success&&c++,U.action==="login_failed"&&d++,U.userId&&g.add(U.userId));}}return {totalEvents:u,byAction:i,successRate:u>0?c/u:1,failedLogins:d,uniqueUsers:g}}async cleanup(){let e=Date.now()-this.retentionDays*24*60*60*1e3,t=await this.redis.keys(`${this.prefix}date:*`),s=0;for(let i of t){let u=await this.redis.zrangebyscore(i,0,e);for(let d of u)await this.redis.del(`${this.prefix}log:${d}`),s++;await this.redis.zremrangebyscore(i,0,e);}return s}getKeyForDate(e){let t=e.getFullYear(),s=String(e.getMonth()+1).padStart(2,"0"),i=String(e.getDate()).padStart(2,"0");return `${this.prefix}date:${t}-${s}-${i}`}getKeysForDateRange(e,t){let s=[],i=e||new Date(Date.now()-this.retentionDays*24*60*60*1e3),u=t||new Date,d=new Date(i);for(;d<=u;)s.push(this.getKeyForDate(d)),d.setDate(d.getDate()+1);return s}matchesFilter(e,t){return !(t.action&&!(Array.isArray(t.action)?t.action:[t.action]).includes(e.action)||t.resource&&e.resource!==t.resource||t.resourceId&&e.resourceId!==t.resourceId||t.success!==void 0&&e.success!==t.success)}serializeLog(e){let t={id:e.id,timestamp:new Date(e.timestamp).toISOString(),action:e.action,resource:e.resource,success:e.success?"1":"0"};return e.userId&&(t.userId=e.userId),e.userEmail&&(t.userEmail=e.userEmail),e.role&&(t.role=e.role),e.resourceId&&(t.resourceId=e.resourceId),e.ipAddress&&(t.ipAddress=e.ipAddress),e.userAgent&&(t.userAgent=e.userAgent),e.error&&(t.error=e.error),e.changes&&(t.changes=JSON.stringify(e.changes)),e.metadata&&(t.metadata=JSON.stringify(e.metadata)),t}deserializeLog(e){return {id:e.id,timestamp:new Date(e.timestamp),action:e.action,userId:e.userId,userEmail:e.userEmail,role:e.role,resource:e.resource,resourceId:e.resourceId,ipAddress:e.ipAddress,userAgent:e.userAgent,success:e.success==="1",error:e.error,changes:e.changes?JSON.parse(e.changes):void 0,metadata:e.metadata?JSON.parse(e.metadata):void 0}}};function as(l){return {ipAddress:l.headers.get("x-forwarded-for")?.split(",")[0]?.trim()||l.headers.get("x-real-ip")||"unknown",userAgent:l.headers.get("user-agent")||"unknown"}}var $t=class{logs=[];retentionDays;constructor(e=et.retentionDays){this.retentionDays=e;}async log(e){let t=rr.randomBytes(16).toString("hex"),i={...e,id:t,timestamp:new Date};return this.logs.push(i),this.cleanupOldLogs(),t}async get(e){return this.logs.find(t=>t.id===e)||null}async query(e={}){let{limit:t=50,offset:s=0}=e,i=[...this.logs];if(e.userId&&(i=i.filter(f=>f.userId===e.userId)),e.action){let f=Array.isArray(e.action)?e.action:[e.action];i=i.filter(A=>f.includes(A.action));}e.resource&&(i=i.filter(f=>f.resource===e.resource)),e.resourceId&&(i=i.filter(f=>f.resourceId===e.resourceId)),e.success!==void 0&&(i=i.filter(f=>f.success===e.success));let u=e.startDate,d=e.endDate;u!==void 0&&(i=i.filter(f=>f.timestamp>=u)),d!==void 0&&(i=i.filter(f=>f.timestamp<=d)),i.sort((f,A)=>A.timestamp.getTime()-f.timestamp.getTime());let c=i.length;return {logs:i.slice(s,s+t),total:c}}async getRecent(e=50){let t=new Date(Date.now()-6048e5);return this.logs.filter(i=>i.timestamp>=t).sort((i,u)=>u.timestamp.getTime()-i.timestamp.getTime()).slice(0,e)}async getUserActivity(e,t=50){return this.logs.filter(i=>i.userId===e).sort((i,u)=>u.timestamp.getTime()-i.timestamp.getTime()).slice(0,t)}async getStats(e,t){let s=e||new Date(Date.now()-2592e6),i=t||new Date,u=this.logs.filter(w=>w.timestamp>=s&&w.timestamp<=i),d={},c=0,g=0,f=0,A=new Set;for(let w of u){c++;let U=w.action;d[U]=(d[U]||0)+1,w.success&&f++,w.action==="login_failed"&&g++,w.userId&&A.add(w.userId);}return {totalEvents:c,byAction:d,successRate:c>0?f/c:1,failedLogins:g,uniqueUsers:A}}async cleanup(){let e=new Date(Date.now()-this.retentionDays*24*60*60*1e3),t=this.logs.length;return this.logs=this.logs.filter(s=>s.timestamp>=e),t-this.logs.length}cleanupOldLogs(){let e=new Date(Date.now()-this.retentionDays*24*60*60*1e3);this.logs.length;this.logs=this.logs.filter(s=>s.timestamp>=e);}};qe();var Ee=class{authAdapter;email;passwordPolicy;lockout;rateLimiter;auditLogger;baseUrl;emailVerificationRequired;constructor(e){this.authAdapter=e.redis,this.email=e.email,this.passwordPolicy=e.passwordPolicy||new chunkAJAZ7D3W_cjs.c,this.lockout=e.lockout,this.rateLimiter=e.rateLimiter,this.auditLogger=e.auditLogger,this.baseUrl=e.baseUrl||"http://localhost:3000",this.emailVerificationRequired=e.emailVerificationRequired??true;}async register(e){let{ipAddress:t,userAgent:s}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let i=await this.rateLimiter.check("auth:register",t);if(!i.allowed)return this.rateLimitResponse(i)}try{let i=await e.json();if(!i.email||!i.password)return this.errorResponse("Email and password are required",400);if(i.password!==i.confirmPassword)return this.errorResponse("Passwords do not match",400);let u=this.passwordPolicy.validate(i.password);if(!u.valid)return this.errorResponse(u.errors.join(". "),400);if(await this.authAdapter.findUserByEmail(i.email))return this.errorResponse("Email already registered",400);let c=await this.authAdapter.createUser({email:i.email,password:i.password,role:i.role||"customer",tenantId:i.tenantId});if(this.emailVerificationRequired&&this.email){let g=rr.randomBytes(32).toString("hex"),f=`${this.baseUrl}/api/auth/verify?token=${g}`;await this.authAdapter.createSession(c.id,{ipAddress:t,userAgent:s});let A=this.email.getTemplates().verifyEmail(f,i.email);await this.email.send({to:i.email,...A});}return this.auditLogger&&await this.auditLogger.log({action:"register",userId:c.id,userEmail:c.email,resource:"auth",ipAddress:t,userAgent:s,success:!0}),this.jsonResponse({success:!0,message:"Registration successful",user:this.sanitizeUser(c),requiresVerification:this.emailVerificationRequired&&!!this.email},201)}catch(i){return console.error("[AuthRoutes.register] Registration error:",i),this.errorResponse("Registration failed",500)}}async login(e){let{ipAddress:t,userAgent:s}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let i=await this.rateLimiter.check("auth:login",t);if(!i.allowed)return this.rateLimitResponse(i)}try{let i=await e.json();if(!i.email||!i.password)return this.errorResponse("Email and password are required",400);let u=await this.authAdapter.findUserByEmail(i.email);if(!u)return await this.recordFailedLogin(t,s),this.errorResponse("Invalid credentials",401);if(u.locked)return this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:u.id,userEmail:u.email,resource:"auth",ipAddress:t,userAgent:s,success:!1,error:"Account locked"}),this.errorResponse("Account locked. Contact an administrator.",403);if(this.lockout){let A=await this.lockout.checkLockout(u.id);if(A.locked)return this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:u.id,userEmail:u.email,resource:"auth",ipAddress:t,userAgent:s,success:!1,error:"Account locked"}),this.errorResponse(`Account locked. Try again in ${Math.ceil((A.lockedUntil.getTime()-Date.now())/6e4)} minutes`,423)}if(!await this.authAdapter.verifyPassword(i.email,i.password))return await this.recordFailedLogin(t,s,u.id,u.email),this.errorResponse("Invalid credentials",401);this.lockout&&await this.lockout.resetAttempts(u.id),this.auditLogger&&await this.auditLogger.log({action:"login",userId:u.id,userEmail:u.email,role:u.role,resource:"auth",ipAddress:t,userAgent:s,success:!0}),await this.authAdapter.updateUser(u.id,{lastLogin:new Date().toISOString()});let c=await Ze({id:u.id,email:u.email,role:u.role,tenantId:u.tenantId}),g={success:!0,user:this.sanitizeUser(u)},f=this.jsonResponse(g);return Ge(f,c)}catch(i){return console.error("[Auth] Login error:",i),this.errorResponse("Login failed",500)}}async logout(e){let t=Y(e);if(!t)return this.errorResponse("No session to logout",401);let{ipAddress:s,userAgent:i}=chunkHVXO3OFB_cjs.a(e);try{let u=await V(e);u&&(await he(t),this.auditLogger&&await this.auditLogger.log({action:"logout",userId:u.userId,userEmail:u.email,resource:"auth",ipAddress:s,userAgent:i,success:!0}));let d=this.jsonResponse({success:!0,message:"Logged out successfully"});return Ye(d)}catch{return this.errorResponse("Logout failed",500)}}async refresh(e){try{let t=Y(e);if(!t)return this.errorResponse("Not authenticated",401);let s=await je(t,e);return s?this.jsonResponse({success:!0,expiresAt:s.expiresAt}):this.errorResponse("Session not found",404)}catch(t){return console.error("[Auth] Session refresh error:",t),this.errorResponse("Session refresh failed",500)}}async me(e){let t=await V(e);return t?this.jsonResponse({success:true,user:{id:t.userId,email:t.email,role:t.role,tenantId:t.tenantId}}):this.errorResponse("Not authenticated",401)}async changePassword(e){let t=await V(e);if(!t)return this.errorResponse("Not authenticated",401);let{ipAddress:s,userAgent:i}=chunkHVXO3OFB_cjs.a(e);try{let u=await e.json(),{currentPassword:d,newPassword:c,confirmPassword:g}=u;if(!d||!c)return this.errorResponse("Current and new password required",400);if(c!==g)return this.errorResponse("Passwords do not match",400);let f=this.passwordPolicy.validate(c);if(!f.valid)return this.errorResponse(f.errors.join(". "),400);let A=await this.authAdapter.findUserById(t.userId);if(!A)return this.errorResponse("User not found",404);if(!(A.passwordHash?await this.authAdapter.verifyPassword(d,A.passwordHash):!1))return this.errorResponse("Current password is incorrect",401);let U=await this.authAdapter.getPasswordHistory?.(A.id,5);if(await this.authAdapter.isPasswordInHistory?.(c,A.id,5))return this.errorResponse("Password was recently used. Please choose a different password",400);let j=await this.authAdapter.hashPassword(c);if(A.passwordHash&&await this.authAdapter.addPasswordToHistory?.(A.id,A.passwordHash),await this.authAdapter.updateUser(A.id,{passwordHash:j}),await this.authAdapter.deleteUserSessions(A.id),this.email&&this.email.getTemplates){let _=this.email.getTemplates().passwordChanged(A.email);await this.email.send({to:A.email,..._});}return this.auditLogger&&await this.auditLogger.log({action:"password_change",userId:A.id,userEmail:A.email,resource:"auth",ipAddress:s,userAgent:i,success:!0}),this.jsonResponse({success:!0,message:"Password changed successfully"})}catch{return this.errorResponse("Password change failed",500)}}async forgotPassword(e){let{ipAddress:t,userAgent:s}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let i=await this.rateLimiter.check("auth:forgot",t);if(!i.allowed)return this.rateLimitResponse(i)}try{let i=await e.json(),{email:u}=i;if(!u)return this.errorResponse("Email required",400);let d=await this.authAdapter.findUserByEmail(u);if(!d)return this.jsonResponse({success:!0,message:"If the email exists, a reset link has been sent"});if(this.email){let c=rr.randomBytes(32).toString("hex"),g=`${this.baseUrl}/api/auth/reset-password?token=${c}`,f=this.email.getTemplates().resetPassword(g,d.email);await this.email.send({to:d.email,...f});}return this.auditLogger&&await this.auditLogger.log({action:"password_reset",userId:d.id,userEmail:d.email,resource:"auth",ipAddress:t,userAgent:s,success:!0}),this.jsonResponse({success:!0,message:"If the email exists, a reset link has been sent"})}catch{return this.errorResponse("Password reset request failed",500)}}async verifyEmail(e){if(!new URL(e.url).searchParams.get("token"))return this.errorResponse("Verification token required",400);try{return this.jsonResponse({success:!0,message:"Email verified"})}catch{return this.errorResponse("Email verification failed",500)}}async recordFailedLogin(e,t,s,i){this.lockout&&await this.lockout.recordFailedAttempt(s||e),this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:s,userEmail:i,resource:"auth",ipAddress:e,userAgent:t,success:false,error:"Invalid credentials"});}sanitizeUser(e){let{passwordHash:t,...s}=e;return s}jsonResponse(e,t=200){return new Response(JSON.stringify(e),{status:t,headers:{"Content-Type":"application/json","Cache-Control":"no-store, no-cache, must-revalidate, max-age=0"}})}async listSessions(e){let t=await V(e);if(!t)return this.errorResponse("Not authenticated",401);try{let s=await ye(t.userId,Y(e)??void 0);return this.jsonResponse({sessions:s})}catch(s){return console.error("[AuthRoutes.listSessions] Error:",s),this.errorResponse("Failed to list sessions",500)}}async revokeSession(e,t){let s=await V(e);if(!s)return this.errorResponse("Not authenticated",401);try{let u=(await ye(s.userId)).find(d=>d.id===t);return u?u.currentSession?this.errorResponse("Cannot revoke current session",400):(await he(t),this.jsonResponse({success:!0,message:"Session revoked"})):this.errorResponse("Session not found",404)}catch(i){return console.error("[AuthRoutes.revokeSession] Error:",i),this.errorResponse("Failed to revoke session",500)}}async revokeOtherSessions(e){let t=await V(e);if(!t)return this.errorResponse("Not authenticated",401);try{let s=await ye(t.userId),i=Y(e);for(let u of s)u.currentSession||await he(u.id);return this.jsonResponse({success:!0,message:"Other sessions revoked"})}catch(s){return console.error("[AuthRoutes.revokeOtherSessions] Error:",s),this.errorResponse("Failed to revoke sessions",500)}}async renameSession(e,t){let s=await V(e);if(!s)return this.errorResponse("Not authenticated",401);try{if(!(await ye(s.userId)).find(g=>g.id===t))return this.errorResponse("Session not found",404);let d=await e.json(),{name:c}=d;return !c||typeof c!="string"||c.trim().length===0?this.errorResponse("Invalid session name",400):(await Qe(t,c.trim()),this.jsonResponse({success:!0,message:"Session renamed"}))}catch(i){return console.error("[AuthRoutes.renameSession] Error:",i),this.errorResponse("Failed to rename session",500)}}async refreshSession(e){let t=Y(e);if(!t)return this.errorResponse("No session",401);try{let s=await(qe(),chunkAHSFSERC_cjs.c(qt)).refreshSession(t,e);return s?this.jsonResponse({success:!0,expiresAt:s.expiresAt}):this.errorResponse("Session not found",404)}catch(s){return console.error("[AuthRoutes.refreshSession] Error:",s),this.errorResponse("Failed to refresh session",500)}}errorResponse(e,t){return new Response(JSON.stringify({success:false,error:e}),{status:t,headers:{"Content-Type":"application/json"}})}async rateLimitResponse(e){return new Response(JSON.stringify({success:false,error:"Too many requests",retryAfter:e.retryAfter}),{status:429,headers:{"Content-Type":"application/json","Retry-After":String(e.retryAfter||60)}})}};function pe(l){let{uploadDir:e=Le.join(br__default.default.cwd(),"public","uploads"),baseUrl:t="/uploads"}=l;async function s(d){fs.existsSync(d)||await promises.mkdir(d,{recursive:true});}function i(d){let c=Le.extname(d).toLowerCase();return {".jpg":"image/jpeg",".jpeg":"image/jpeg",".png":"image/png",".gif":"image/gif",".webp":"image/webp",".avif":"image/avif",".svg":"image/svg+xml",".mp4":"video/mp4",".webm":"video/webm",".mov":"video/quicktime",".avi":"video/x-msvideo",".mp3":"audio/mpeg",".wav":"audio/wav",".ogg":"audio/ogg",".pdf":"application/pdf",".doc":"application/msword",".docx":"application/vnd.openxmlformats-officedocument.wordprocessingml.document",".xls":"application/vnd.ms-excel",".xlsx":"application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",".zip":"application/zip",".tar":"application/x-tar",".gz":"application/gzip",".rar":"application/vnd.rar",".7z":"application/x-7z-compressed"}[c]||"application/octet-stream"}async function u(d){try{let c=d.toString("hex",0,8);if(c.startsWith("89504e47")){let g=d.readUInt32BE(16),f=d.readUInt32BE(20);return {width:g,height:f}}if(c.startsWith("ffd8")){let g=2;for(;g<d.length&&d[g]===255;){let f=d[g+1];if(f===192||f===194){let A=d.readUInt16BE(g+5);return {width:d.readUInt16BE(g+7),height:A}}g+=2+d.readUInt16BE(g+2);}}}catch{}return {}}return se({name:"local",displayName:"Local Storage",supportsDynamicResize:true,async upload(d,c){await s(e);let g=Buffer.from(await d.arrayBuffer()),f=rr.createHash("md5").update(g).digest("hex"),A=Le.extname(d.name),w=c?.filename||`${f}${A}`,U=c?.folder||"",T=U?Le.join(e,U):e;await s(T);let j=Le.join(T,w);await promises.writeFile(j,g);let _=d.type.startsWith("image/")?await u(g):{},B=t||"/uploads",ae=U?`/${U}/${w}`:`/${w}`,k=B+ae;return {id:f,filename:w,originalName:d.name,mimeType:d.type||i(d.name),size:g.length,url:k,thumbnailUrl:d.type.startsWith("image/")?k:void 0,folder:U||void 0,provider:"local",metadata:{..._,...c?.metadata},createdAt:new Date().toISOString()}},async uploadFromUrl(d,c){let g=await fetch(d);if(!g.ok)throw new Error(`Failed to fetch file: ${g.statusText}`);let f=await g.blob(),A=g.headers.get("content-disposition"),w=c?.filename;if(!w&&A){let T=A.match(/filename[^;=\n]*=((['"]).*?\2|[^;\n]*)/);T&&(w=T[1].replace(/['"]/g,""));}w||(w=Le.basename(new URL(d).pathname));let U=new File([f],w,{type:f.type||i(w)});return this.upload(U,c)},async delete(d){let c=Le.join(e,d.replace(t+"/",""));try{await promises.unlink(c);}catch{}},async rename(d,c){let g=Le.join(e,d.replace(t+"/","")),f=Le.join(e,c);return await promises.rename(g,f),`${t}/${c}`},async list(d){let c=d?Le.join(e,d):e;if(!fs.existsSync(c))return [];let g=[],f=await promises.readdir(c,{withFileTypes:true});for(let A of f)if(A.isFile()){let w=Le.join(c,A.name),U=await promises.stat(w),T=`${t}${d?`/${d}`:""}/${A.name}`;g.push({id:rr.createHash("md5").update(A.name).digest("hex"),filename:A.name,originalName:A.name,mimeType:i(A.name),size:U.size,url:T,provider:"local",createdAt:U.birthtime.toISOString()});}return g},async exists(d){let c=Le.join(e,d.replace(t+"/",""));return fs.existsSync(c)},async createFolder(d){let c=Le.join(e,d);await promises.mkdir(c,{recursive:true});},async deleteFolder(d){let c=Le.join(e,d);if(fs.existsSync(c)){let{rm:g}=await import('fs/promises');await g(c,{recursive:true,force:true});}}})}function tt(l){let e=(t,s)=>{if(!l.signKey)return t;let i=rr.createHmac("sha256",l.signKey).update(t+s.toString()).digest("hex");return s.set("s",i),t};return {name:"imgix",displayName:"Imgix",supportsDynamicResize:true,async upload(t,s){throw new Error("Imgix is a transformation service. Use another provider for uploads.")},async uploadFromUrl(t,s){let i=s?.filename||t.split("/").pop()||"file",u=await fetch(t);if(!u.ok)throw new Error(`Failed to fetch: ${u.statusText}`);let d=await u.blob();new File([d],i,{type:d.type});return {id:Buffer.from(t).toString("base64").slice(0,20),filename:i,originalName:i,mimeType:d.type,size:d.size,url:this.getImageUrl(t),thumbnailUrl:this.getImageUrl(t,{width:200,height:200,fit:"crop"}),provider:"imgix",createdAt:new Date().toISOString()}},async delete(t){},async rename(t,s){return `https://${l.domain}/${s}`},getImageUrl(t,s){let i=new URL(t),u=new URLSearchParams(i.search);l.defaultParameters&&Object.entries(l.defaultParameters).forEach(([c,g])=>{u.has(c)||u.set(c,g);}),s&&(s.width&&u.set("w",String(s.width)),s.height&&u.set("h",String(s.height)),s.quality&&u.set("q",String(s.quality)),s.format&&u.set("fm",s.format),s.fit&&u.set("fit",s.fit),s.blur&&u.set("blur",String(s.blur)),s.sharpen&&u.set("sharp",String(s.sharpen))),u.set("auto","compress,format");i.pathname+"?"+u.toString();return l.signKey&&(e(i.pathname+u.toString(),u)),`https://${l.domain}${i.pathname}${u.toString()?"?"+u.toString():""}`},async generateThumbnail(t){return this.getImageUrl(t.url,{width:200,height:200,fit:"crop"})},async list(){return []},async exists(t){try{return (await fetch(t,{method:"HEAD"})).ok}catch{return false}},async createFolder(){},async deleteFolder(){}}}function $e(l,e){return e.cdnUrl?`${e.cdnUrl.replace(/\/$/,"")}/${l}`:`https://${e.storageZone}.b-cdn.net/${l}`}function rt(l){return l.cdnUrl?l.cdnUrl.replace(/\/$/,"")+"/":`https://${l.storageZone}.b-cdn.net/`}function st(l){let e=`https://storage.bunnycdn.com/${l.storageZone}`,t=s=>`${l.prefix?`${l.prefix}/`:""}${s}`.replace(/\/+/g,"/");return se({name:"bunny",displayName:"Bunny.net Storage",supportsDynamicResize:true,async upload(s,i){let u=t(`${i?.folder?`${i.folder}/`:""}${i?.filename||s.name}`),d=Buffer.from(await s.arrayBuffer()),c=await fetch(`${e}/${u}`,{method:"PUT",headers:{AccessKey:l.apiKey,"Content-Type":s.type},body:d});if(!c.ok){let g=await c.text();throw new Error(`Bunny.net upload failed: ${c.status} ${g}`)}return {id:Buffer.from(u).toString("base64url"),filename:i?.filename||s.name,originalName:s.name,mimeType:s.type,size:d.length,url:$e(u,l),thumbnailUrl:s.type.startsWith("image/")?$e(u,l):void 0,folder:i?.folder,provider:"bunny",metadata:i?.metadata,createdAt:new Date().toISOString()}},async delete(s){let i=s.replace(rt(l),""),u=await fetch(`${e}/${i}`,{method:"DELETE",headers:{AccessKey:l.apiKey}});if(!u.ok&&u.status!==404){let d=await u.text();throw new Error(`Bunny.net delete failed: ${u.status} ${d}`)}},async rename(s,i){let u=s.replace(rt(l),""),d=l.prefix?`${l.prefix}/${i}`:i,c=await fetch(`${e}/${u}`,{method:"GET",headers:{AccessKey:l.apiKey}});if(!c.ok)throw new Error("Bunny.net rename failed: could not read old file");let g=await c.arrayBuffer();return await fetch(`${e}/${d}`,{method:"PUT",headers:{AccessKey:l.apiKey,"Content-Type":c.headers.get("Content-Type")||"application/octet-stream"},body:g}),await this.delete(s),$e(d,l)},async list(s){let i=t(s||""),u=await fetch(`${e}/${i}`,{method:"GET",headers:{AccessKey:l.apiKey}});if(!u.ok){let c=await u.text();throw new Error(`Bunny.net list failed: ${u.status} ${c}`)}return (await u.json()).map(c=>({id:Buffer.from(c.ObjectName||"").toString("base64url"),filename:c.ObjectName?.split("/").pop()||"",originalName:c.ObjectName?.split("/").pop()||"",mimeType:"application/octet-stream",size:c.Length||0,url:$e(c.ObjectName||"",l),provider:"bunny",createdAt:c.LastChanged||new Date().toISOString()}))},async exists(s){let i=s.replace(rt(l),"");return (await fetch(`${e}/${i}`,{method:"HEAD",headers:{AccessKey:l.apiKey}})).ok},async createFolder(s){let i=t(`${s}/`);await fetch(`${e}/${i}`,{method:"PUT",headers:{AccessKey:l.apiKey,"Content-Length":"0"},body:""});},async deleteFolder(s){let i=t(`${s}/`);await fetch(`${e}/${i}`,{method:"DELETE",headers:{AccessKey:l.apiKey}});}})}var nt=class{providers=new Map;providerToPlugin=new Map;disabledPlugins=new Set;constructor(){this.registerLocal(),this.registerImgix(),this.registerBunny();}registerLocal(){this.register({type:"local",displayName:"Local Server",configKey:"local",configFields:[{name:"uploadDir",type:"text",label:"Upload Directory",defaultValue:"./public/uploads"},{name:"baseUrl",type:"text",label:"Base URL",defaultValue:"/uploads"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>{let t=e?.local||e,s=(t?.uploadDir||"").trim(),i;s?Le__default.default.isAbsolute(s)?i=s:s.includes("/")||s.includes("\\")?i=Le__default.default.resolve(process.cwd(),s):i=Le__default.default.join(process.cwd(),"public",s):i=Le__default.default.join(process.cwd(),"public","uploads");let u=(t?.baseUrl||"").trim(),d;return u?d=u.startsWith("/")?u:`/${u}`:d="/uploads",{uploadDir:i,baseUrl:d}},factory:e=>pe(e)});}registerImgix(){this.register({type:"imgix",displayName:"Imgix",configKey:"imgix",configFields:[{name:"domain",type:"text",label:"Domain",required:true},{name:"signKey",type:"password",label:"Sign Key"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>e?.imgix||e,factory:e=>tt(e)});}registerBunny(){this.register({type:"bunny",displayName:"Bunny.net",configKey:"bunny",configFields:[{name:"storageZone",type:"text",label:"Storage Zone",required:true},{name:"apiKey",type:"password",label:"API Key",required:true},{name:"cdnUrl",type:"text",label:"CDN URL"},{name:"prefix",type:"text",label:"Path Prefix"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>e?.bunny||e,factory:e=>st(e)});}register(e){if(this.providers.has(e.type)){console.warn(`[StorageRegistry] Provider "${e.type}" already registered, skipping`);return}e.pluginName&&this.providerToPlugin.set(e.type,e.pluginName),this.providers.set(e.type,e);}unregister(e){this.providers.delete(e),this.providerToPlugin.delete(e);}get(e){return this.providers.get(e)}getAll(){return Array.from(this.providers.values())}getAllAvailable(e){let t=this.getAll();return e?t.filter(s=>s.pluginName?e(s.pluginName):true):t}has(e){return this.providers.has(e)}async resolve(e,t){let s=this.providers.get(e);if(!s)throw new Error(`Unknown storage provider type: "${e}". Is the plugin that provides it enabled?`);if(s.pluginName&&this.disabledPlugins.has(s.pluginName))throw new Error(`Storage provider "${e}" is not available (plugin "${s.pluginName}" is disabled)`);let i=s.configKey||e,u=s.extractConfig(t,i);return s.factory(u)}async resolveWithConfig(e,t){let s=this.providers.get(e);if(!s)throw new Error(`Unknown storage provider type: "${e}". Is the plugin that provides it enabled?`);if(s.pluginName&&this.disabledPlugins.has(s.pluginName))throw new Error(`Storage provider "${e}" is not available (plugin "${s.pluginName}" is disabled)`);let i=s.extractRawConfig(t);return s.factory(i)}getProviderPluginName(e){return this.providerToPlugin.get(e)}getAllPluginNames(){return Array.from(new Set(this.providerToPlugin.values()))}setPluginEnabled(e,t){t?this.disabledPlugins.delete(e):this.disabledPlugins.add(e);}isPluginEnabled(e){return !this.disabledPlugins.has(e)}},at=null;function it(){return at||(at=new nt),at}function Kt(l){if(!l)return "";if(l.startsWith("pub-"))return l;let e=l.match(/pub-[a-zA-Z0-9]+/i);return e?e[0]:""}function Dr(l,e){let t=l.startsWith("/")?l.slice(1):l;if(e.cdnUrl)return `${e.cdnUrl.replace(/\/$/,"")}/${t}`;switch(e.provider){case "r2":{let s=Kt(e.publicDevUrl);return s?`https://${s}.r2.dev/${t}`:`https://${e.bucket}.${e.accountId}.r2.cloudflarestorage.com/${t}`}case "gcs":return `https://storage.googleapis.com/${e.bucket}/${t}`;case "digitalocean":return `https://${e.bucket}.${e.region}.cdn.digitaloceanspaces.com/${t}`;case "backblaze":return `https://${e.bucket}.s3.backblazeb2.com/${t}`;case "wasabi":return `https://${e.bucket}.s3.wasabisys.com/${t}`;default:return `https://${e.bucket}.s3.${e.region}.amazonaws.com/${t}`}}function dt(l){if(l.cdnUrl)return l.cdnUrl.replace(/\/$/,"")+"/";switch(l.provider){case "r2":{let e=Kt(l.publicDevUrl);return e?`https://${e}.r2.dev/`:`https://${l.bucket}.${l.accountId}.r2.cloudflarestorage.com/`}case "gcs":return `https://storage.googleapis.com/${l.bucket}/`;case "digitalocean":return `https://${l.bucket}.${l.region}.cdn.digitaloceanspaces.com/`;case "backblaze":return `https://${l.bucket}.s3.backblazeb2.com/`;case "wasabi":return `https://${l.bucket}.s3.wasabisys.com/`;default:return `https://${l.bucket}.s3.${l.region}.amazonaws.com/`}}function Rr(l){switch(l){case "r2":return "Cloudflare R2";case "gcs":return "Google Cloud Storage";case "digitalocean":return "DigitalOcean Spaces";case "backblaze":return "Backblaze B2";case "wasabi":return "Wasabi";default:return "AWS S3"}}function Tr(l){let e=new clientS3.S3Client({region:l.region||"auto",endpoint:l.endpoint,credentials:{accessKeyId:l.accessKeyId,secretAccessKey:l.secretAccessKey},forcePathStyle:true,tls:true,...l.provider==="r2"&&{requestHandler:new nodeHttpHandler.NodeHttpHandler}}),t=i=>`${l.prefix?`${l.prefix}/`:""}${i}`.replace(/\/+/g,"/"),s=i=>Dr(i,l);return se({name:l.provider,displayName:Rr(l.provider),supportsDynamicResize:true,async upload(i,u){let d=t(`${u?.folder?`${u.folder}/`:""}${u?.filename||i.name}`),c=Buffer.from(await i.arrayBuffer());await e.send(new clientS3.PutObjectCommand({Bucket:l.bucket,Key:d,Body:c,ContentType:i.type,Metadata:u?.metadata}));let g=await e.send(new clientS3.HeadObjectCommand({Bucket:l.bucket,Key:d}));return {id:Buffer.from(d).toString("base64url"),filename:u?.filename||i.name,originalName:i.name,mimeType:i.type,size:c.length,url:s(d),thumbnailUrl:i.type.startsWith("image/")?s(d):void 0,folder:u?.folder,provider:l.provider,metadata:{...u?.metadata,etag:g.ETag},createdAt:new Date().toISOString()}},async delete(i){let u=i.replace(dt(l),"");await e.send(new clientS3.DeleteObjectCommand({Bucket:l.bucket,Key:u}));},async rename(i,u){let d=i.replace(dt(l),""),c=l.prefix?`${l.prefix}/${u}`:u;return await e.send(new clientS3.CopyObjectCommand({Bucket:l.bucket,CopySource:`${l.bucket}/${d}`,Key:c})),await e.send(new clientS3.DeleteObjectCommand({Bucket:l.bucket,Key:d})),s(c)},async list(i){let u=t(i||"");return ((await e.send(new clientS3.ListObjectsV2Command({Bucket:l.bucket,Prefix:u}))).Contents||[]).map(c=>({id:Buffer.from(c.Key||"").toString("base64url"),filename:c.Key?.split("/").pop()||"",originalName:c.Key?.split("/").pop()||"",mimeType:"application/octet-stream",size:c.Size||0,url:s(c.Key||""),provider:l.provider,createdAt:c.LastModified?.toISOString()||new Date().toISOString()}))},async exists(i){try{let u=i.replace(dt(l),"");return await e.send(new clientS3.HeadObjectCommand({Bucket:l.bucket,Key:u})),!0}catch{return false}},async createFolder(i){let u=t(`${i}/`);await e.send(new clientS3.PutObjectCommand({Bucket:l.bucket,Key:u,Body:""}));},async deleteFolder(i){let u=t(`${i}/`),d;do{let c=await e.send(new clientS3.ListObjectsV2Command({Bucket:l.bucket,Prefix:u,ContinuationToken:d}));if(c.Contents?.length){let g=c.Contents.map(f=>({Key:f.Key}));await e.send(new clientS3.DeleteObjectsCommand({Bucket:l.bucket,Delete:{Objects:g}}));}d=c.IsTruncated?c.NextContinuationToken:void 0;}while(d);await e.send(new clientS3.DeleteObjectCommand({Bucket:l.bucket,Key:u}));}})}function Pr(l){let e=()=>`https://api.cloudinary.com/v1_1/${l.cloudName}/upload`,t=async s=>{let i=await import('crypto'),u=Object.keys(s).sort().map(d=>`${d}=${s[d]}`).join("&");return i.createHash("sha256").update(u+l.apiSecret).digest("hex")};return {name:"cloudinary",displayName:"Cloudinary",supportsDynamicResize:true,async upload(s,i){let u=new FormData;if(u.append("file",s),l.uploadPreset)u.append("upload_preset",l.uploadPreset);else {let g=Math.round(Date.now()/1e3),f={timestamp:String(g)};(i?.folder||l.folder)&&(f.folder=i?.folder||l.folder||"");let A=await t(f);u.append("timestamp",String(g)),u.append("signature",A),u.append("api_key",l.apiKey);}(i?.folder||l.folder)&&u.append("folder",i?.folder||l.folder||"");let d=await fetch(e(),{method:"POST",body:u});if(!d.ok){let g=await d.json();throw new Error(`Cloudinary upload failed: ${g.error?.message||d.statusText}`)}let c=await d.json();return {id:c.public_id,filename:`${c.public_id}.${c.format}`,originalName:c.original_filename||s.name,mimeType:s.type||`image/${c.format}`,size:c.bytes,url:c.secure_url,thumbnailUrl:this.getImageUrl(c.secure_url,{width:200,height:200,fit:"crop"}),width:c.width,height:c.height,folder:i?.folder||l.folder,provider:"cloudinary",createdAt:new Date().toISOString()}},async uploadFromUrl(s,i){let u=new FormData;u.append("file",s),u.append("upload_preset","ml_default"),(i?.folder||l.folder)&&u.append("folder",i?.folder||l.folder||"");let d=await fetch(e(),{method:"POST",body:u});if(!d.ok)throw new Error("Cloudinary upload failed");let c=await d.json();return {id:c.public_id,filename:`${c.public_id}.${c.format}`,originalName:c.original_filename||s.split("/").pop()||"file",mimeType:`image/${c.format}`,size:c.bytes,url:c.secure_url,thumbnailUrl:this.getImageUrl(c.secure_url,{width:200,height:200,fit:"crop"}),width:c.width,height:c.height,provider:"cloudinary",createdAt:new Date().toISOString()}},async delete(s){try{let i=s.split("/image/upload/");if(i.length!==2){console.warn("[Cloudinary delete] Could not parse URL:",s);return}let u=i[1].replace(/^v\d+\//,"").replace(/\.[^.]+$/,""),d=Math.round(Date.now()/1e3),c={timestamp:String(d),public_id:u},g=Object.keys(c).sort().map(j=>`${j}=${c[j]}`).join("&"),A=(await import('crypto')).createHash("sha256").update(g+l.apiSecret).digest("hex"),w=`https://api.cloudinary.com/v1_1/${l.cloudName}/image/destroy`,U=new FormData;U.append("public_id",u),U.append("timestamp",String(d)),U.append("signature",A),U.append("api_key",l.apiKey);let T=await fetch(w,{method:"POST",body:U});if(!T.ok){let j=await T.json();console.warn("[Cloudinary delete] Failed:",j);}}catch(i){console.warn("[Cloudinary delete] Error:",i.message);}},async rename(s,i){let u="",d=i.replace(/\.[^.]+$/,""),c="";try{let g=s.split("/image/upload/");if(g.length!==2)return console.warn("[Cloudinary rename] Could not parse old URL:",s),s;let f=g[1],A=f.match(/^(v\d+)\//);u=A?A[1]:"";let w=f.replace(/^v\d+\//,"").replace(/\.[^.]+$/,""),U=w.split("/");c=U.length>1?U.slice(0,-1).join("/"):"";let T=i.replace(/\.[^.]+$/,"");d=c?`${c}/${T}`:T;let j=Math.round(Date.now()/1e3),_={from_public_id:w,to_public_id:d,timestamp:String(j)},B=Object.keys(_).sort().map(R=>`${R}=${_[R]}`).join("&"),k=(await import('crypto')).createHash("sha256").update(B+l.apiSecret).digest("hex"),G=new FormData;G.append("from_public_id",w),G.append("to_public_id",d),G.append("timestamp",String(j)),G.append("signature",k),G.append("api_key",l.apiKey);let J=await fetch(`https://api.cloudinary.com/v1_1/${l.cloudName}/image/rename`,{method:"POST",body:G});if(J.ok)return (await J.json()).secure_url;{let R=await J.json();console.warn("[Cloudinary rename] Failed:",R);let Z=u?`/${u}/`:"/";return `https://res.cloudinary.com/${l.cloudName}/image/upload${Z}${d}.${i.split(".").pop()}`}}catch(g){console.warn("[Cloudinary rename] Error:",g.message);let f=u?`/${u}/`:"/";return `https://res.cloudinary.com/${l.cloudName}/image/upload${f}${d}.${i.split(".").pop()}`}},getImageUrl(s,i){if(!i)return s;let u=s.split("/upload/");if(u.length!==2)return s;let d=[];if(i.width&&d.push(`w_${i.width}`),i.height&&d.push(`h_${i.height}`),i.fit){let g={crop:"c_fill",clip:"c_fit",scale:"c_scale",fill:"c_fill"};d.push(g[i.fit]||"c_limit");}i.quality&&d.push(`q_${i.quality}`),i.format&&d.push(`f_${i.format}`);let c=d.join(",");return `${u[0]}/upload/${c}/${u[1]}`},async generateThumbnail(s){return this.getImageUrl(s.url,{width:200,height:200,fit:"crop"})},async list(){return []},async exists(s){return (await fetch(s,{method:"HEAD"})).ok},async createFolder(){},async deleteFolder(){}}}function qr(l){let e=null;async function t(){return e||(e=new basicFtp.Client(6e4,{allowSeparateTransferHost:true}),e.ftp.verbose=false,await e.access({host:l.host,port:l.port||21,user:l.user,password:l.password,secure:l.secure,secureOptions:{}})),e}let s=d=>`${l.prefix?`${l.prefix}/`:""}${d}`.replace(/\/+/g,"/"),i=d=>`${l.baseUrl.replace(/\/$/,"")}/${d}`,u=()=>l.baseUrl.replace(/\/$/,"")+"/";return se({name:l.type,displayName:l.type==="sftp"?"SFTP Storage":"FTP Storage",supportsDynamicResize:false,async upload(d,c){let g=await t(),f=s(`${c?.folder?`${c.folder}/`:""}${c?.filename||d.name}`),A=Buffer.from(await d.arrayBuffer()),w=f.split("/").slice(0,-1),U="";for(let j of w){U=U?`${U}/${j}`:j;try{await g.ensureDir(U);}catch{}}let T=stream.Readable.from(A);return await g.uploadFrom(T,f),{id:Buffer.from(f).toString("base64url"),filename:c?.filename||d.name,originalName:d.name,mimeType:d.type,size:A.length,url:i(f),thumbnailUrl:d.type.startsWith("image/")?i(f):void 0,folder:c?.folder,provider:l.type,metadata:c?.metadata,createdAt:new Date().toISOString()}},async delete(d){let c=await t(),g=d.replace(u(),"");await c.remove(g);},async rename(d,c){let g=await t(),f=d.replace(u(),""),A=l.prefix?`${l.prefix}/${c}`:c;return await g.rename(f,A),i(A)},async list(d){let c=await t(),g=s(d||""),f;try{f=await c.list(g);}catch{return []}return f.filter(A=>A.type===0).map(A=>({id:Buffer.from(`${g}/${A.name}`).toString("base64url"),filename:A.name,originalName:A.name,mimeType:"application/octet-stream",size:Number(A.size)||0,url:i(`${g}/${A.name}`.replace(/\/+/g,"/")),provider:l.type,createdAt:A.modifiedAt?A.modifiedAt.toISOString():new Date().toISOString()}))},async exists(d){let c=await t(),g=d.replace(u(),"");try{return await c.size(g),!0}catch{return false}},async createFolder(d){let c=await t(),g=s(d);await c.ensureDir(g);},async deleteFolder(d){let c=await t(),g=s(d);await c.removeDir(g);}})}async function zt(l){let e=l.getStorageConfig(),t=it();try{return await t.resolve(e.type,e)}catch(s){return console.warn(`[resolveProvider] ${s.message} \u2014 falling back to local storage`),pe({uploadDir:Le__default.default.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"})}}function se(l){return {async uploadFromUrl(e,t){let s=await fetch(e);if(!s.ok)throw new Error(`Failed to fetch: ${s.statusText}`);let i=await s.blob(),u=e.split("/").pop()||"file",d=new File([i],u,{type:i.type});return this.upload(d,t)},getImageUrl(e,t){if(!t||Object.keys(t).length===0)return e;let s=new URLSearchParams({url:e});return t.width&&s.set("w",String(t.width)),t.height&&s.set("h",String(t.height)),t.quality&&s.set("q",String(t.quality)),t.format&&s.set("f",t.format),`/api/media/resize?${s.toString()}`},async generateThumbnail(e){return this.getImageUrl(e.url,{width:400,height:400})},...l}}async function Wt(l){if(!l)return console.warn("[resolveProviderWithConfig] No config, using local"),pe({uploadDir:Le__default.default.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"});let e=l.type||"local",t=it();try{return await t.resolveWithConfig(e,l)}catch(s){return console.warn(`[resolveProviderWithConfig] ${s.message} \u2014 falling back to local storage`),pe({uploadDir:Le__default.default.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"})}}async function Vt(l){let e=await ct__default.default(l).metadata(),t=ct__default.default(l).webp({quality:85}),s=ct__default.default(l).resize({width:500,withoutEnlargement:true}).webp({quality:80});return {buffer:await t.toBuffer(),thumbnailBuffer:await s.toBuffer(),width:e.width,height:e.height,format:"webp"}}var Ht=false,_e=class l{db;storage;dialect;genId;mediaTable="media";foldersTable="media_folders";constructor(e,t,s){this.db=e,this.storage=t,this.dialect=s?.dialect||"sqlite",this.genId=s?.genId||chunkQAJS4EXW_cjs.e;}static async init(e,t){let s;if(t?.storageConfig)s=await Wt(t.storageConfig);else {let u=new chunkAJAZ7D3W_cjs.a(e);await u.load(),s=await zt(u);}let i=new l(e,s,t);return await i.ensureTables(),i}async ensureTables(){if(this.dialect==="sqlite")this.db.exec(`
2
+ CREATE TABLE IF NOT EXISTS media (
3
+ id TEXT PRIMARY KEY,
4
+ filename TEXT NOT NULL UNIQUE,
5
+ title TEXT,
6
+ original_name TEXT NOT NULL,
7
+ mime_type TEXT NOT NULL,
8
+ file_size INTEGER NOT NULL,
9
+ width INTEGER,
10
+ height INTEGER,
11
+ url TEXT NOT NULL UNIQUE,
12
+ thumbnail_url TEXT,
13
+ folder TEXT,
14
+ provider TEXT NOT NULL,
15
+ alt TEXT,
16
+ caption TEXT,
17
+ metadata TEXT,
18
+ created_at TEXT NOT NULL,
19
+ updated_at TEXT NOT NULL
20
+ );
21
+ CREATE INDEX IF NOT EXISTS idx_media_folder ON media(folder);
22
+ CREATE INDEX IF NOT EXISTS idx_media_provider ON media(provider);
23
+ CREATE INDEX IF NOT EXISTS idx_media_filename ON media(filename);
24
+ `),this.db.exec(`
25
+ CREATE TABLE IF NOT EXISTS media_folders (
26
+ id TEXT PRIMARY KEY,
27
+ name TEXT NOT NULL,
28
+ path TEXT NOT NULL,
29
+ parent_path TEXT,
30
+ created_at TEXT
31
+ );
32
+ CREATE INDEX IF NOT EXISTS idx_media_folders_path ON media_folders(path);
33
+ `);else if(this.dialect==="postgres"){if(Ht)return;let{sql:e}=await import('drizzle-orm');await this.db.execute(e`
34
+ CREATE TABLE IF NOT EXISTS "media" (
35
+ "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
36
+ "filename" VARCHAR(255) NOT NULL UNIQUE,
37
+ "title" VARCHAR(255),
38
+ "original_name" VARCHAR(255) NOT NULL,
39
+ "mime_type" VARCHAR(100),
40
+ "file_size" INTEGER,
41
+ "width" INTEGER,
42
+ "height" INTEGER,
43
+ "url" TEXT NOT NULL UNIQUE,
44
+ "thumbnail_url" TEXT,
45
+ "folder" VARCHAR(255),
46
+ "provider" VARCHAR(50) NOT NULL,
47
+ "alt" TEXT,
48
+ "caption" TEXT,
49
+ "metadata" JSONB,
50
+ "created_at" TIMESTAMP NOT NULL DEFAULT NOW(),
51
+ "updated_at" TIMESTAMP NOT NULL DEFAULT NOW()
52
+ )
53
+ `),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_folder" ON "media" ("folder")`),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_provider" ON "media" ("provider")`),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_filename" ON "media" ("filename")`),await this.db.execute(e`
54
+ CREATE TABLE IF NOT EXISTS "media_folders" (
55
+ "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
56
+ "name" VARCHAR(255) NOT NULL,
57
+ "path" TEXT NOT NULL,
58
+ "parent_path" TEXT,
59
+ "created_at" TIMESTAMP NOT NULL DEFAULT NOW()
60
+ )
61
+ `),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_folders_path" ON "media_folders" ("path")`),Ht=true;}}now(){return new Date().toISOString()}buildFindConditions(e){let t=[],s=[],i=e.sortBy==="name"?"title":e.sortBy==="createdAt"?"created_at":e.sortBy==="updatedAt"?"updated_at":e.sortBy||"created_at",u=e.sortDir==="asc"?"ASC":"DESC";if(e.search){t.push("(title LIKE ? OR filename LIKE ? OR original_name LIKE ? OR alt LIKE ?)");let c=`%${e.search}%`;s.push(c,c,c,c);}return e.type&&e.type!=="all"&&(t.push("mime_type LIKE ?"),s.push(`${e.type}/%`)),e.folder&&(t.push("(folder = ? OR folder LIKE ?)"),s.push(e.folder,`${e.folder}/%`)),{where:t.length>0?`WHERE ${t.join(" AND ")}`:"",params:s,orderBy:u,sortCol:i}}rowToMedia(e,t){return {id:e.id,filename:e.filename,title:e.title??null,originalName:e.original_name??e.originalName,mimeType:e.mime_type??e.mimeType,fileSize:e.file_size??e.fileSize,width:e.width??null,height:e.height??null,url:l.resolveMediaUrl(e.url,t),thumbnailUrl:l.resolveMediaUrl(e.thumbnail_url??e.thumbnailUrl??null,t),folder:e.folder??null,provider:e.provider,alt:e.alt??null,caption:e.caption??null,metadata:e.metadata??null,createdAt:e.created_at??e.createdAt,updatedAt:e.updated_at??e.updatedAt}}static resolveMediaUrl(e,t){return e?e.startsWith("http://")||e.startsWith("https://")||e.startsWith("blob:")||e.startsWith("data:")?e:`${(process.env.KYRO_BASE_URL||t||"http://localhost:4321").replace(/\/+$/,"")}${e.startsWith("/")?"":"/"}${e}`:null}async sqliteRun(e,t=[]){let s=this.db.prepare(e),i=e.trim().toLowerCase();return i.startsWith("insert")||i.startsWith("update")||i.startsWith("delete")?s.run(...t):s.all(...t)}sqliteGet(e,t=[]){return this.db.prepare(e).get(...t)}async upload(e,t=""){let s=e.type.startsWith("image/"),i,u=e,d=e.name,c=null,g=null;if(s&&!e.type.includes("svg")){let T=Buffer.from(await e.arrayBuffer());i=await Vt(T),d=`${e.name.replace(/\.[^/.]+$/,"").toLowerCase().replace(/[^a-z0-9]/g,"-").replace(/-+/g,"-").substring(0,50)}.webp`,c=i.width??null,g=i.height??null,u=new File([i.buffer],d,{type:"image/webp"});}let f=await this.storage.upload(u,{folder:t,filename:d}),A=await this.storage.generateThumbnail({...f,id:"",provider:this.storage.name,createdAt:this.now()},{width:400,height:400}),w=this.genId(),U=this.now();if(this.dialect==="sqlite")await this.sqliteRun(`INSERT INTO ${this.mediaTable}
62
+ (id, filename, title, original_name, mime_type, file_size, width, height, url, thumbnail_url, folder, provider, alt, caption, metadata, created_at, updated_at)
63
+ VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,[w,f.filename,e.name.replace(/\.[^/.]+$/,""),e.name,f.mimeType,f.size,c,g,f.url,A,t||null,this.storage.name,null,null,null,U,U]);else {let{media:T}=await import('./media-OUBQTIQP.cjs'),j=f.mimeType,_=j.startsWith("image/")?"image":j.startsWith("video/")?"video":j.startsWith("audio/")?"audio":j.startsWith("application/pdf")?"document":["application/zip","application/x-zip","application/x-tar","application/gzip","application/x-7z"].includes(j)?"archive":"other";await this.db.insert(T).values({id:w,filename:f.filename,title:e.name.replace(/\.[^/.]+$/,""),originalName:e.name,mimeType:j,fileSize:f.size,width:c,height:g,url:f.url,thumbnailUrl:A,folder:t||"",provider:this.storage.name,type:_,status:"active",alt:null,caption:null,createdAt:new Date,updatedAt:new Date}).returning();}return {id:w,filename:f.filename,title:e.name.replace(/\.[^/.]+$/,""),originalName:e.name,mimeType:f.mimeType,fileSize:f.size,width:c,height:g,url:f.url,thumbnailUrl:A,folder:t||null,provider:this.storage.name,alt:null,caption:null,metadata:null,createdAt:U,updatedAt:U}}async uploadFromUrl(e,t=""){let s=await fetch(e);if(!s.ok)throw new Error(`Failed to fetch URL: ${s.status}`);let i=await s.blob(),u=e.split("/").pop()||"url-image",d=s.headers.get("content-type")||i.type||"application/octet-stream",c=new File([i],u,{type:d});return this.upload(c,t)}async delete(e,t){let s=await this.findById(e,t);if(s){if(await this.deleteFile(s.url),s.thumbnailUrl&&s.thumbnailUrl!==s.url&&s.thumbnailUrl!==s.url+"?thumb")try{await this.deleteFile(s.thumbnailUrl);}catch{}if(this.dialect==="sqlite")await this.sqliteRun(`DELETE FROM ${this.mediaTable} WHERE id = ?`,[e]);else {let{media:i}=await import('./media-OUBQTIQP.cjs'),{eq:u}=await import('drizzle-orm');await this.db.delete(i).where(u(i.id,e));}}}async deleteFile(e){await this.storage.delete(e);}async rename(e,t,s){let i=await this.findById(e,s);if(!i)return null;let u=await this.storage.rename(i.url,t),d;if(i.thumbnailUrl||this.storage.name==="cloudinary"){let A=u.match(/\/upload\/(v\d+)\//),w=A?A[1]+"/":"",U=u.match(/(.+?)\/upload\//);d=`${U?U[1]:"https://res.cloudinary.com/"+this.storage.config?.cloudName||"unknown"}/upload/w_200,h_200,c_fill/${w}${t}`;}let c=i.filename.split(".").pop(),g=t.includes(".")?t:`${t}.${c}`,f={url:u,filename:g,thumbnailUrl:d};if(this.dialect==="sqlite"){let A={...f};"thumbnailUrl"in A&&(A.thumbnail_url=A.thumbnailUrl,delete A.thumbnailUrl);let w=Object.keys(A).map(T=>`${T} = ?`).join(", "),U=Object.values(A);await this.sqliteRun(`UPDATE ${this.mediaTable} SET ${w}, updated_at = ? WHERE id = ?`,[...U,this.now(),e]);}else {let{media:A}=await import('./media-OUBQTIQP.cjs'),{eq:w}=await import('drizzle-orm');await this.db.update(A).set({...f,updatedAt:this.now()}).where(w(A.id,e));}return {...i,...f,updatedAt:this.now(),thumbnailUrl:f.thumbnailUrl??null}}async findById(e,t){if(this.dialect==="sqlite"){let d=this.sqliteGet(`SELECT * FROM ${this.mediaTable} WHERE id = ?`,[e]);return d?this.rowToMedia(d,t):null}let{media:s}=await import('./media-OUBQTIQP.cjs'),{eq:i}=await import('drizzle-orm'),[u]=await this.db.select().from(s).where(i(s.id,e));return u?this.rowToMedia(u,t):null}async find(e={},t){let{page:s=1,limit:i=30,search:u="",type:d="",folder:c="",sortBy:g="createdAt",sortDir:f="desc"}=e,{where:A,params:w,orderBy:U,sortCol:T}=this.buildFindConditions({page:s,limit:i,search:u,type:d,folder:c,sortBy:g,sortDir:f}),j=(s-1)*i;if(this.dialect==="sqlite"){let de=this.sqliteGet(`SELECT COUNT(*) as cnt FROM ${this.mediaTable} ${A}`,w)?.cnt??0;return {docs:(await this.sqliteRun(`SELECT * FROM ${this.mediaTable} ${A} ORDER BY ${T} ${U} LIMIT ? OFFSET ?`,[...w,i,j])).map(Se=>this.rowToMedia(Se,t)),totalDocs:de,page:s,limit:i,totalPages:Math.ceil(de/i)}}let{media:_}=await import('./media-OUBQTIQP.cjs'),{like:B,or:ae,and:k,asc:G,desc:J,eq:R,sql:Z}=await import('drizzle-orm'),ne=[];u&&ne.push(ae(B(_.title,`%${u}%`),B(_.filename,`%${u}%`),B(_.originalName,`%${u}%`),B(_.alt,`%${u}%`))),d&&d!=="all"&&ne.push(B(_.mimeType,`${d}/%`)),c&&ne.push(ae(R(_.folder,c),B(_.folder,`${c}/%`)));let we=ne.length>0?k(...ne):void 0,Be=_[{created_at:"createdAt",updated_at:"updatedAt",title:"title",filename:"filename",file_size:"fileSize",mime_type:"mimeType",original_name:"originalName"}[T]||"createdAt"],Ie=f==="asc"?G(Be):J(Be),fe=await this.db.select().from(_).where(we).orderBy(Ie).limit(i).offset(j),[{count:M}]=await this.db.select({count:Z`count(*)`}).from(_).where(we),ie=Number(M);return {docs:fe.map(oe=>this.rowToMedia(oe,t)),totalDocs:ie,page:s,limit:i,totalPages:Math.ceil(ie/i)}}async update(e,t,s){let i=this.now();if(this.dialect==="sqlite"){let g=["updated_at = ?"],f=[i];t.title!==void 0&&(g.push("title = ?"),f.push(t.title)),t.alt!==void 0&&(g.push("alt = ?"),f.push(t.alt)),t.caption!==void 0&&(g.push("caption = ?"),f.push(t.caption)),t.folder!==void 0&&(g.push("folder = ?"),f.push(t.folder)),f.push(e),await this.sqliteRun(`UPDATE ${this.mediaTable} SET ${g.join(", ")} WHERE id = ?`,f);let A=this.sqliteGet(`SELECT * FROM ${this.mediaTable} WHERE id = ?`,[e]);return A?this.rowToMedia(A,s):null}let{media:u}=await import('./media-OUBQTIQP.cjs'),{eq:d}=await import('drizzle-orm'),[c]=await this.db.update(u).set({...t,updatedAt:new Date}).where(d(u.id,e)).returning();return c?this.rowToMedia(c,s):null}async updateMany(e,t){let s=this.now();if(this.dialect==="sqlite")for(let i of e){let u=["updated_at = ?"],d=[s];t.folder!==void 0&&(u.push("folder = ?"),d.push(t.folder||null)),d.push(i),await this.sqliteRun(`UPDATE ${this.mediaTable} SET ${u.join(", ")} WHERE id = ?`,d);}else {let{media:i}=await import('./media-OUBQTIQP.cjs'),{eq:u}=await import('drizzle-orm');for(let d of e)await this.db.update(i).set({...t,updatedAt:new Date}).where(u(i.id,d));}}async listFolders(){if(this.dialect==="sqlite")return (await this.sqliteRun(`SELECT path FROM ${this.foldersTable} UNION
64
+ SELECT folder as path FROM ${this.mediaTable} WHERE folder IS NOT NULL AND folder != ''`)).map(f=>f.path).filter(f=>f&&f!=="").sort();let{media:e,mediaFolders:t}=await import('./media-OUBQTIQP.cjs'),{eq:s,sql:i}=await import('drizzle-orm'),u=await this.db.select({folder:e.folder}).from(e).groupBy(e.folder),d=await this.db.select({path:t.path}).from(t),c=new Set([...u.map(g=>g.folder),...d.map(g=>g.path)]);return Array.from(c).filter(g=>g&&g!=="").sort()}async createFolder(e,t=""){let s=t?`${t}/${e}`:e;await this.storage.createFolder?.(s);let i=this.now();if(this.dialect==="sqlite")await this.sqliteRun(`INSERT OR IGNORE INTO ${this.foldersTable} (path, name, parent_path, created_at) VALUES (?, ?, ?, ?)`,[s,e,t||null,i]);else {let{mediaFolders:u}=await import('./media-OUBQTIQP.cjs');await this.db.insert(u).values({path:s,name:e,parentPath:t||null,createdAt:new Date}).onConflictDoNothing();}}async deleteFolder(e){let t=await this.find({folder:e,limit:1e4});for(let s of t.docs)await this.delete(s.id);if(await this.storage.deleteFolder?.(e),this.dialect==="sqlite")await this.sqliteRun(`DELETE FROM ${this.foldersTable} WHERE path = ? OR path LIKE ?`,[e,`${e}/%`]);else {let{mediaFolders:s}=await import('./media-OUBQTIQP.cjs'),{like:i,or:u,eq:d}=await import('drizzle-orm');await this.db.delete(s).where(u(d(s.path,e),i(s.path,`${e}/%`)));}}};function Ne(l){return l.map(e=>`${e.path.join(".")}: ${e.message}`).join(", ")}function me(l,e){if(!(!l||typeof l!="object"))for(let t of e){if(!t.name||!(t.name in l))continue;if(l[t.name]===""&&(t.type==="text"||t.type==="textarea"||t.type==="code"||t.type==="markdown"||t.type==="email"||t.type==="password"||t.type==="color"||(l[t.name]=null)),t.type==="tabs"&&t.name&&Array.isArray(t.tabs)&&l[t.name]&&typeof l[t.name]=="object")for(let i of t.tabs)Array.isArray(i.fields)&&me(l[t.name],i.fields);else if((t.type==="group"||t.type==="collapsible")&&t.name&&Array.isArray(t.fields)&&l[t.name]&&typeof l[t.name]=="object")me(l[t.name],t.fields);else if(t.type==="array"&&t.name&&Array.isArray(t.fields)&&Array.isArray(l[t.name]))for(let i of l[t.name])i&&typeof i=="object"&&me(i,t.fields);else if(t.type==="blocks"&&t.name&&Array.isArray(t.blocks)&&Array.isArray(l[t.name]))for(let i of l[t.name]){if(!i||typeof i!="object")continue;let u=i.type||i.blockType;if(!u)continue;let d=t.blocks.find(g=>g.slug===u);if(!d||!Array.isArray(d.fields))continue;let c=i.data&&typeof i.data=="object"?i.data:i;me(c,d.fields);}}}function ge(l,e){if(!(!e||typeof e!="object"))for(let t of l){if(t.type==="richtext"&&t.name){let s=e[t.name];typeof s=="string"?e[t.name]=[{type:"paragraph",children:[{text:s}]}]:s&&typeof s=="object"&&!Array.isArray(s)&&s.type==="doc"&&Array.isArray(s.content)&&(e[t.name]=s.content);}if(t.type==="tabs"&&t.name&&Array.isArray(t.tabs)&&e[t.name]&&typeof e[t.name]=="object")for(let s of t.tabs)Array.isArray(s.fields)&&ge(s.fields,e[t.name]);else if((t.type==="group"||t.type==="collapsible")&&t.name&&Array.isArray(t.fields)&&e[t.name]&&typeof e[t.name]=="object")ge(t.fields,e[t.name]);else if(t.type==="array"&&t.name&&Array.isArray(t.fields)&&Array.isArray(e[t.name]))for(let s of e[t.name])s&&typeof s=="object"&&ge(t.fields,s);else if(t.type==="blocks"&&t.name&&Array.isArray(t.blocks)&&Array.isArray(e[t.name]))for(let s of e[t.name]){if(!s||typeof s!="object")continue;let i=s.type||s.blockType;if(!i)continue;let u=t.blocks.find(c=>c.slug===i);if(!u||!Array.isArray(u.fields))continue;let d=s.data&&typeof s.data=="object"?s.data:s;ge(u.fields,d);}}}var Lr={_media:{create:chunk4FV3HQBI_cjs.d.MEDIA_UPLOAD,update:chunk4FV3HQBI_cjs.d.MEDIA_UPLOAD,delete:chunk4FV3HQBI_cjs.d.MEDIA_DELETE}};function Ae(l,e){let t=Lr[l];return t?t[e]:`collection.${e}`}function _r(l){let e=l.headers.get("x-forwarded-for");return e?e.split(",")[0].trim():l.headers.get("x-real-ip")||"unknown"}function Oe(l,e,t,s,i){e?.apiKeyId&&l&&l.createAuditLog({action:"api_request",userId:e.userId||"",resource:"api_key",resourceId:e.apiKeyId,success:true,metadata:{endpoint:t,method:s,ip:_r(i)}});}function ut(l){return l.baseUpdatedAt??l._baseUpdatedAt}function pt(l){let{baseUpdatedAt:e,_baseUpdatedAt:t,...s}=l;return s}function Yt(l,e){return {error:"Document has changed since you started editing",code:"REVISION_CONFLICT",conflict:{expectedUpdatedAt:l??null,actualUpdatedAt:e.updatedAt??null,current:e}}}async function L(l,e,t,s,i,u,d=true,c="none"){return await chunk4FV3HQBI_cjs.b(l,e,{user:s,req:t,tenantID:i,apiKey:u},{enablePublicAccess:d,defaultAccess:c})}async function X(l,e,t,s,i,u=true){return await chunk4FV3HQBI_cjs.c(l,e,{user:s,req:t,tenantID:i},{enablePublicAccess:u})}async function P(l,e,t,s){if(t)return {user:t,tenantID:s,apiKeyContext:void 0,authType:"static"};if(e){let i=await e(l);if(i.status===200&&i.user)return {user:i.user,tenantID:i.tenantContext?.tenantId,apiKeyContext:i.apiKeyContext,authType:i.authType}}return {user:void 0,tenantID:void 0,apiKeyContext:void 0,authType:void 0}}function Fr(l,e){if(l instanceof chunkQAJS4EXW_cjs.c&&l.dialect==="postgres")return new chunkGYQMNXXW_cjs.a({db:l.client});if(l instanceof chunkDNLO7PK6_cjs.a)return new chunkATLSIYRH_cjs.a({db:l.db});let t=Le.resolve(e,"data","kyro.db");return new chunkET6NN2V2_cjs.a({path:process.env.KYRO_AUTH_DB_PATH||t})}function Zt(l){let {registry:e,db:t,authSecret:s,authAdapter:i,checkSession:u,user:d,tenantID:c,cors:g,webhookService:f,settings:A}=l,w=new hono.Hono,U=A?.access?.apiAccess,T=A?.access?.enablePublicAccess??false,j=A?.access?.defaultCollectionAccess??"none";U?.requireAuth;let B=process.cwd(),ae=B.endsWith("admin")?Le.resolve(B,".."):B,k=i||Fr(t,ae),R=s?Et({db:t,userLookup:async r=>await k.findUserById(r)||null}):null,Z=U?.cors?.allowedOrigins,ne=g?.origins,we=Array.isArray(Z)?Z:typeof Z=="string"&&Z?Z.split(`
65
+ `).map(r=>r.trim()).filter(Boolean):[],be=we.length>0?we:ne||[];(be.length>0||g)&&w.use("*",async(r,o)=>{let m=r.req.header("Origin")||"*";if(be.length>0&&!be.includes(m))return r.json({error:"Origin not allowed"},403);let y=be.length>0?m:"*";if(r.header("Access-Control-Allow-Origin",y),r.header("Access-Control-Allow-Methods","GET, POST, PATCH, DELETE, OPTIONS"),r.header("Access-Control-Allow-Headers","Content-Type, Authorization, X-API-Key"),g?.credentials&&r.header("Access-Control-Allow-Credentials","true"),r.req.method==="OPTIONS")return r.text("");await o();});let Ie=A?.access?.rateLimiting,fe;if(Ie?.enabled){let r=Ie.maxRequests||100,o=Ie.windowMs||6e4;fe=new ke({"api:general":{window:o,max:r}}),w.use("/api/*",async(m,y)=>{if(!fe)return y();let n=m.req.header("CF-Connecting-IP")||m.req.header("X-Forwarded-For")?.split(",")[0]?.trim()||m.req.header("X-Real-IP")||"unknown",a=await fe.check("api:general",n);if(m.header("X-RateLimit-Limit",String(r)),m.header("X-RateLimit-Remaining",String(a.remaining)),m.header("X-RateLimit-Reset",String(a.resetAt)),!a.allowed)return m.json({error:"Too many requests",retryAfter:a.retryAfter},429);await y();});}let M=new Ee({redis:k,jwtSecret:s||"change-me",baseUrl:process.env.KYRO_BASE_URL||"http://localhost:4321",rateLimiter:fe});chunkAJAZ7D3W_cjs.b.fromConfig(t).then(r=>{r&&(M.email=r);}).catch(r=>{console.error("[Email] Failed to initialize transport from config:",r);}),w.post("/api/auth/login",async r=>M.login(r.req.raw)),w.post("/api/auth/register",async r=>M.register(r.req.raw)),w.post("/api/auth/logout",async r=>M.logout(r.req.raw)),w.post("/api/auth/refresh",async r=>M.refresh(r.req.raw)),w.get("/api/auth/me",async r=>M.me(r.req.raw)),w.get("/api/auth/sessions",async r=>M.listSessions(r.req.raw)),w.post("/api/auth/sessions/refresh",async r=>M.refreshSession(r.req.raw)),w.delete("/api/auth/sessions",async r=>M.revokeOtherSessions(r.req.raw)),w.delete("/api/auth/sessions/:id",async r=>M.revokeSession(r.req.raw,r.req.param("id"))),w.put("/api/auth/sessions/:id/name",async r=>M.renameSession(r.req.raw,r.req.param("id"))),w.get("/api/auth/access",async r=>{try{let{user:o,tenantID:m}=await P(r.req.raw,R,d,c);if(!o)return r.json({error:"Not authenticated"},401);let y={},n={};for(let a of e.getCollections()){let p={read:(await L(a,"read",r.req.raw,o,m,void 0,T,j)).allowed,create:(await L(a,"create",r.req.raw,o,m,void 0,T,j)).allowed,update:(await L(a,"update",r.req.raw,o,m,void 0,T,j)).allowed,delete:(await L(a,"delete",r.req.raw,o,m,void 0,T,j)).allowed};y[a.slug]=p;}for(let a of e.getGlobals()){let p={read:(await X(a,"read",r.req.raw,o,m,T)).allowed,update:(await X(a,"update",r.req.raw,o,m,T)).allowed};n[a.slug]=p;}return r.json({collections:y,globals:n})}catch(o){return r.json({error:o.message},500)}});let ie=typeof e.hasCollection=="function"&&e.hasCollection("users")?e.getCollection("users"):(()=>{try{return e.getCollection("users")}catch{return chunkGFU7AOI3_cjs.a}})();w.get("/api/users",async r=>{try{let{user:o,tenantID:m}=await P(r.req.raw,R,d,c),y=await L(ie,"read",r.req.raw,o,m,void 0,T,j);if(!y.allowed)return r.json({error:y.error},y.status||403);let n=parseInt(r.req.query("page")||"1"),a=Math.min(parseInt(r.req.query("limit")||"10"),100),p=r.req.query("search")||void 0,b=await k.findUsers({page:n,limit:a,search:p});return r.json({docs:b.users,totalDocs:b.total,limit:a,totalPages:Math.ceil(b.total/a),page:n,pagingCounter:(n-1)*a+1,hasPrevPage:n>1,hasNextPage:n<Math.ceil(b.total/a),prevPage:n>1?n-1:null,nextPage:n<Math.ceil(b.total/a)?n+1:null})}catch(o){return console.error("[API] Error listing users:",o),r.json({error:o.message},500)}}),w.get("/api/users/:id",async r=>{try{let{user:o,tenantID:m}=await P(r.req.raw,R,d,c),y=r.req.param("id"),n=await k.findUserById(y);return n?r.json({data:n}):r.json({error:"User not found"},404)}catch(o){return r.json({error:o.message},500)}}),w.post("/api/users",async r=>{try{let{user:o,tenantID:m}=await P(r.req.raw,R,d,c),y=await L(ie,"create",r.req.raw,o,m,void 0,T,j);if(!y.allowed)return r.json({error:y.error},y.status||403);let n=await r.req.json();if(!n.email||!n.password)return r.json({error:"Email and password are required"},400);if(await k.findUserByEmail(n.email))return r.json({error:"Email already in use"},400);let p=await k.createUser({email:n.email,password:n.password,name:n.name,role:n.role||"customer",avatar:n.avatar,tenantId:n.tenantId});return o&&k?.createAuditLog({action:"user_create",userId:o.id,resource:"users",resourceId:p.id,success:!0}),r.json({data:p,message:"User created successfully"},201)}catch(o){return r.json({error:o.message},500)}}),w.patch("/api/users/:id",async r=>{try{let{user:o,tenantID:m}=await P(r.req.raw,R,d,c),y=await L(ie,"update",r.req.raw,o,m,void 0,T,j);if(!y.allowed)return r.json({error:y.error},y.status||403);let n=r.req.param("id"),a=await r.req.json(),p=await k.findUserById(n);if(!p)return r.json({error:"User not found"},404);let b={};a.name!==void 0&&(b.name=a.name),a.email!==void 0&&(b.email=a.email),a.role!==void 0&&(b.role=a.role),a.avatar!==void 0&&(b.avatar=typeof a.avatar=="object"&&a.avatar!==null?a.avatar.id||String(a.avatar):a.avatar),a.tenantId!==void 0&&(b.tenantId=a.tenantId),a.emailVerified!==void 0&&(b.emailVerified=a.emailVerified),a.locked!==void 0&&(b.locked=a.locked),a.failedLoginAttempts!==void 0&&(b.failedLoginAttempts=a.failedLoginAttempts),a.lastLogin!==void 0&&(b.lastLogin=a.lastLogin);let h=await k.updateUser(n,b);return h?(o&&(k?.createAuditLog({action:"user_update",userId:o.id,resource:"users",resourceId:n,success:!0}),a.role&&p.role!==a.role&&k?.createAuditLog({action:"role_change",userId:o.id,resource:"users",resourceId:n,success:!0,metadata:{oldRole:p.role,newRole:a.role}})),r.json({data:h,message:"User updated successfully"})):r.json({error:"User update failed"},500)}catch(o){return r.json({error:o.message},500)}}),w.delete("/api/users/:id",async r=>{try{let{user:o,tenantID:m}=await P(r.req.raw,R,d,c),y=await L(ie,"delete",r.req.raw,o,m,void 0,T,j);if(!y.allowed)return r.json({error:y.error},y.status||403);let n=r.req.param("id");if(o&&o.id===n)return r.json({error:"You cannot delete your own account"},403);let a=await k.findUserById(n);return a?await k.deleteUser(n)?(o&&k?.createAuditLog({action:"user_delete",userId:o.id,resource:"users",resourceId:n,success:!0}),r.json({data:a,message:"User deleted successfully"})):r.json({error:"User deletion failed"},500):r.json({error:"User not found"},404)}catch(o){return r.json({error:o.message},500)}}),w.get("/api/auth/audit-logs",async r=>{try{let{user:o,tenantID:m}=await P(r.req.raw,R,d,c),y=e.getCollection("audit_logs");if(y){let S=await L(y,"read",r.req.raw,o,m,void 0,T,j);if(!S.allowed)return r.json({error:S.error},S.status||403)}else if(!o)return r.json({error:"Authentication required"},401);let n=parseInt(r.req.query("page")||"1"),a=Math.min(parseInt(r.req.query("limit")||"50"),100),p=r.req.query("action")||void 0,b=r.req.query("userId")||void 0,h=r.req.query("resource")||void 0,I=await k.findAuditLogs({action:p,userId:b,resource:h,limit:a,offset:(n-1)*a});return r.json({docs:I.logs,totalDocs:I.total,limit:a,totalPages:Math.ceil(I.total/a),page:n,pagingCounter:(n-1)*a+1,hasPrevPage:n>1,hasNextPage:n<Math.ceil(I.total/a),prevPage:n>1?n-1:null,nextPage:n<Math.ceil(I.total/a)?n+1:null})}catch(o){return console.error("[API] Error listing audit logs:",o),r.json({error:o.message},500)}});let oe=null,de=null,W=async()=>{if(de)throw de;if(!oe)try{let r=t instanceof chunkQAJS4EXW_cjs.c?t.dialect:"sqlite",o=r==="postgres"&&t instanceof chunkQAJS4EXW_cjs.c?t.client:t;oe=await _e.init(o,{dialect:r});}catch(r){throw console.error("[getMedia] Init error:",r),de=r,r}return oe};w.get("/api/media",async r=>{try{let{user:o}=await P(r.req.raw,R,d,c);if(!o)return r.json({error:"Authentication required"},401);let m=await W(),y=new URL(r.req.url).origin,n=parseInt(r.req.query("page")||"1"),a=parseInt(r.req.query("limit")||"30"),p=r.req.query("search")||"",b=r.req.query("type")||"",h=r.req.query("folder")||"",I=await m.find({page:n,limit:a,search:p,type:b,folder:h},y);return r.json(I)}catch(o){return console.error("[Media] find error:",o),r.json({error:o.message},500)}}),w.post("/api/media/upload",async r=>{try{let{user:o}=await P(r.req.raw,R,d,c);if(!o)return r.json({error:"Authentication required"},401);let m=await W();if((r.req.header("content-type")||"").includes("multipart/form-data")){let p=await r.req.formData(),b=p.get("file"),h=p.get("folder")||"";if(!b)return r.json({error:"No file uploaded"},400);let I=await m.upload(b,h);return r.json(I)}let{url:n}=await r.req.json();if(!n)return r.json({error:"No URL provided"},400);let a=await m.uploadFromUrl(n);return r.json(a)}catch(o){return console.error("[Media] upload error:",o),r.json({error:o.message},500)}}),w.get("/api/media/folders",async r=>{try{let{user:o}=await P(r.req.raw,R,d,c);if(!o)return r.json({error:"Authentication required"},401);let y=await(await W()).listFolders();return r.json(y)}catch(o){return console.error("[Media] folders error:",o),r.json({error:o.message},500)}}),w.post("/api/media/folders",async r=>{try{let{user:o}=await P(r.req.raw,R,d,c);if(!o)return r.json({error:"Authentication required"},401);let m=await W(),y=await r.req.json(),{name:n,parentPath:a}=y;return n?(await m.createFolder(n,a||""),r.json({message:"Folder created",path:a?`${a}/${n}`:n})):r.json({error:"Folder name is required"},400)}catch(o){return console.error("[Media] create folder error:",o),r.json({error:o.message},500)}}),w.delete("/api/media/folders",async r=>{try{let{user:o}=await P(r.req.raw,R,d,c);if(!o)return r.json({error:"Authentication required"},401);let m=await W(),y=r.req.query("path");return y?(await m.deleteFolder(y),r.json({message:"Folder deleted"})):r.json({error:"Path is required"},400)}catch(o){return console.error("[Media] delete folder error:",o),r.json({error:o.message},500)}}),w.delete("/api/media/:id",async r=>{try{let{user:o}=await P(r.req.raw,R,d,c);if(!o)return r.json({error:"Authentication required"},401);let m=await W(),y=r.req.param("id"),n=new URL(r.req.url).origin;return await m.delete(y,n),r.json({success:!0})}catch(o){return console.error("[Media] delete error:",o),r.json({error:o.message},500)}}),w.get("/api/media/resize",async r=>{try{let{user:o}=await P(r.req.raw,R,d,c);if(!o)return r.json({error:"Authentication required"},401);let m=r.req.query("url"),y=parseInt(r.req.query("w")||"0"),n=parseInt(r.req.query("h")||"0"),a=r.req.query("fit")||"cover";if(!m)return r.json({error:"URL is required"},400);let b=(await W()).storage;if(b.name!=="local")return r.redirect(m);let h=b.config?.uploadDir||Le.join(process.cwd(),"public","uploads"),I=b.config?.baseUrl||"/uploads";if(!m.startsWith(I))return r.redirect(m);let S=m.replace(I,""),v=Le.join(h,S);if(!fs.existsSync(v))return r.json({error:"File not found"},404);let x=fs.readFileSync(v),D=ct__default.default(x);(y>0||n>0)&&(D=D.resize({width:y>0?y:void 0,height:n>0?n:void 0,fit:a}));let q=await D.toBuffer(),C=await ct__default.default(x).metadata();return r.header("Content-Type",`image/${C.format||"webp"}`),r.header("Cache-Control","public, max-age=31536000, immutable"),r.body(q)}catch(o){return console.error("[Media] resize error:",o),r.json({error:o.message},500)}}),w.get("/api/media/:id",async r=>{try{let{user:o}=await P(r.req.raw,R,d,c);if(!o)return r.json({error:"Authentication required"},401);let m=await W(),y=r.req.param("id"),n=new URL(r.req.url).origin,a=await m.findById(y,n);return a?r.json(a):r.json({error:"Media not found"},404)}catch(o){return console.error("[Media] get error:",o),r.json({error:o.message},500)}}),w.patch("/api/media/:id",async r=>{try{let{user:o}=await P(r.req.raw,R,d,c);if(!o)return r.json({error:"Authentication required"},401);let m=await W(),y=r.req.param("id"),n=await r.req.json(),a=new URL(r.req.url).origin;if(n.folder!==void 0){let p=await m.update(y,{folder:n.folder},a);return r.json({doc:p})}return r.json({error:"No valid fields to update"},400)}catch(o){return console.error("[Media] update error:",o),r.json({error:o.message},500)}}),w.get("/api/media/test",async r=>{try{let{user:o}=await P(r.req.raw,R,d,c);if(!o)return r.json({error:"Authentication required"},401);let m=await W();return r.json({status:m?"initialized":"failed",serviceType:m?.constructor?.name})}catch(o){return console.error("[test] Error:",o),r.json({error:o.message,type:o.constructor?.name,stack:o.stack},500)}}),w.get("/api/storage-status",async r=>{try{let{user:o}=await P(r.req.raw,R,d,c);if(!o)return r.json({error:"Authentication required"},401);let m=!1,y="local";if(t)try{let n=t.prepare('SELECT provider FROM "_globals_storage-settings" LIMIT 1').get();n&&n.provider&&(m=!0,y=n.provider==="aws"?"s3":n.provider);}catch{try{let n=await t.findOne({collection:"_globals_storage-settings",where:{},draft:!0});n&&n.provider&&(m=!0,y=n.provider==="aws"?"s3":n.provider);}catch{}}return r.json({provider:y,configured:m,usage:0,limit:"unlimited"})}catch(o){return console.error("[Storage] status error:",o),r.json({error:o.message},500)}}),w.get("/api/plugins",async r=>{try{let{user:o}=await P(r.req.raw,R,d,c);if(!o)return r.json({error:"Authentication required"},401);let m=e.getPlugins(),y=e.storageProviders,n=await Promise.all(m.map(async a=>{let p=!0,b=a.name,h={};try{let I=await t.findOne({collection:"_globals_plugin-settings",where:{},draft:!0});I&&I.states&&(h=I.states);}catch{}return h[b]!==void 0&&(p=h[b]),y.setPluginEnabled(b,p),{id:b,name:b,version:a.version||"1.0.0",description:a.description||"",enabled:p,status:p?"active":"disabled"}}));return r.json(n)}catch(o){return console.error("[Plugins] list error:",o),r.json({error:o.message},500)}}),w.put("/api/plugins/:name/toggle",async r=>{try{let{user:o}=await P(r.req.raw,R,d,c);if(!o)return r.json({error:"Authentication required"},401);let m=r.req.param("name"),y=e.storageProviders,a=!y.isPluginEnabled(m),p=[];if(!a)for(let h of y.getAll())h.pluginName===m&&p.push(h.type);if(!(r.req.query("force")==="1")&&!a&&p.length>0){let h="local";try{let I=t?.prepare?.('SELECT provider FROM "_globals_storage-settings" LIMIT 1')?.get();I?.provider&&(h=I.provider);}catch{try{let I=await t?.findOne?.({collection:"_globals_storage-settings",where:{},draft:!0});I?.provider&&(h=I.provider);}catch{}}if(p.includes(h))return r.json({error:`Cannot disable "${m}" \u2014 storage provider "${h}" is currently active. Switch to Local storage first.`,requiresAction:!0,activeProvider:h},409)}try{let h={},I="global",S=await t.findOne({collection:"_globals_plugin-settings",where:{},draft:!0});S&&(h=S.states||{},I=S.id),h[m]=a,S?await t.update({collection:"_globals_plugin-settings",id:I,data:{states:h}}):await t.create({collection:"_globals_plugin-settings",data:{states:h,id:"global"}});}catch(h){console.warn(`[Plugins] Could not persist state for "${m}":`,h);}return y.setPluginEnabled(m,a),r.json({name:m,enabled:a})}catch(o){return console.error("[Plugins] toggle error:",o),r.json({error:o.message},500)}}),w.get("/api/health",r=>r.json({status:"ok",version:"0.11.0",collections:e.getCollectionSlugs(),timestamp:new Date().toISOString()})),w.get("/api/kyro/schema",async r=>{let{user:o}=await P(r.req.raw,R,d,c);if(!o)return r.json({error:"Authentication required"},401);let m=n=>n.map(a=>{let p={name:a.name,type:a.type,label:a.label,required:a.required??false,unique:a.unique??false,indexed:a.indexed??false,defaultValue:a.defaultValue,admin:a.admin?{...a.admin}:void 0};return a.minLength!==void 0&&(p.minLength=a.minLength),a.maxLength!==void 0&&(p.maxLength=a.maxLength),a.pattern!==void 0&&(p.pattern=a.pattern),a.variant!==void 0&&(p.variant=a.variant),a.hasMany!==void 0&&(p.hasMany=a.hasMany),a.min!==void 0&&(p.min=a.min),a.max!==void 0&&(p.max=a.max),a.step!==void 0&&(p.step=a.step),a.integer!==void 0&&(p.integer=a.integer),a.options&&(p.options=a.options),a.relationTo&&(p.relationTo=a.relationTo),a.maxDepth!==void 0&&(p.maxDepth=a.maxDepth),a.minRows!==void 0&&(p.minRows=a.minRows),a.maxRows!==void 0&&(p.maxRows=a.maxRows),a.localized!==void 0&&(p.localized=a.localized),a.language&&(p.language=a.language),a.format&&(p.format=a.format),a.allowedTypes&&(p.allowedTypes=a.allowedTypes),a.maxSize&&(p.maxSize=a.maxSize),(a.type==="group"||a.type==="row"||a.type==="collapsible"&&a.fields)&&(p.fields=m(a.fields)),a.type==="array"&&a.fields&&(p.fields=m(a.fields)),a.type==="blocks"&&a.blocks&&(p.blocks=a.blocks.map(b=>({slug:b.slug,label:b.label,fields:m(b.fields)}))),a.type==="tabs"&&a.tabs&&(p.tabs=a.tabs.map(b=>({label:b.label,name:b.name,fields:m(b.fields)}))),p}),y={collections:{},globals:{}};for(let n of e.getCollections()){let a=n.slug;try{y.collections[a]={slug:a,label:n.label||a,fields:m(n.fields),jsonSchema:zodToJsonSchema.zodToJsonSchema(e.getZodSchema(a),{target:"openApi3"}),createSchema:zodToJsonSchema.zodToJsonSchema(e.getCreateZodSchema(a),{target:"openApi3"}),updateSchema:zodToJsonSchema.zodToJsonSchema(e.getUpdateZodSchema(a),{target:"openApi3"}),procedures:{find:{collection:a,where:"Record<string,any>",sort:"string",limit:"number",page:"number",depth:"number",select:"string[]",draft:"boolean"},findByID:{collection:a,id:"string",depth:"number",select:"string[]",draft:"boolean"},create:{collection:a,data:"Record<string,any>",depth:"number",select:"string[]"},update:{collection:a,id:"string",data:"Record<string,any>",depth:"number",select:"string[]",baseUpdatedAt:"string"},delete:{collection:a,id:"string"},count:{collection:a,where:"Record<string,any>"}}};}catch{}}for(let n of e.getGlobals()){let a=n.slug,p=n.fields;if(a==="storage-settings"){let b=e.storageProviders,h=b.getAll(),I=new Set(b.getAllAvailable(v=>b.isPluginEnabled(v)).map(v=>v.type));I.add("local");let S=new Set(h.map(v=>v.type));p=p.filter(v=>v.type==="group"&&v.name&&S.has(v.name)?I.has(v.name):true).map(v=>v.name==="provider"&&v.type==="select"?{...v,options:v.options.filter(x=>I.has(x.value))}:v);}try{y.globals[a]={slug:a,label:n.label||a,fields:m(p),jsonSchema:zodToJsonSchema.zodToJsonSchema(e.getZodSchema(a),{target:"openApi3"}),procedures:{get:{},update:{data:"Record<string,any>"}}};}catch{}}return r.json(y)}),w.get("/api/collections",async r=>{let{user:o}=await P(r.req.raw,R,d,c);if(!o)return r.json({error:"Authentication required"},401);let m=e.getCollections().map(y=>({slug:y.slug,label:y.label||y.slug,fields:y.fields.filter(n=>n.name).map(n=>({name:n.name,type:n.type,required:n.required,label:n.label}))}));return r.json(m)});function Se(r,o,m){if(m in o)return o[m];for(let y of r)if(y.name){if(y.type==="tabs"&&y.tabs){let n=o[y.name];if(n&&typeof n=="object"&&m in n)return n[m]}if((y.type==="group"||y.type==="collapsible")&&y.fields){let n=o[y.name];if(n&&typeof n=="object"){if(m in n)return n[m];let a=Se(y.fields,n,m);if(a!==void 0)return a}}}}w.get("/api/search",async r=>{try{let o=r.req.query("q")||"",m=r.req.query("collections")||"",y=Math.min(parseInt(r.req.query("limit")||"10"),50);if(!o||o.length<2)return r.json({results:[],message:"Query too short"});let{user:n,tenantID:a}=await P(r.req.raw,R,d,c),p=m?m.split(",").filter(Boolean):e.getCollectionSlugs(),b=[],h=new RegExp(o.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),"i");for(let I of e.getCollections()){if(!p.includes(I.slug)||!(await L(I,"read",r.req.raw,n,a,void 0,T,j)).allowed)continue;let v=I.fields.filter(x=>x.name&&x.name!=="id"&&(x.type==="text"||x.type==="email"||x.type==="textarea"||x.type==="richtext"||x.indexed)&&!x.admin?.hidden).map(x=>x.name);if(v.length!==0)try{let x=v.map(q=>{let C={};return C[q]={like:`%${o}%`},C}),D=await t.find({collection:I.slug,where:{OR:x},limit:y,tenantID:a});await chunk4FV3HQBI_cjs.a(D.docs,I.fields,t,e,1,0);for(let q of D.docs){let C=I.admin?.useAsTitle||v.find(E=>E==="title"||E==="name"||E==="heading"||E==="slug"),$=C?Se(I.fields,q,C)??q.id:q.id;b.push({collection:I.slug,label:I.label||I.slug,id:q.id,title:String($||"Untitled"),doc:q});}}catch(x){console.error(`Search error for ${I.slug}:`,x);}}return b.sort((I,S)=>I.label.localeCompare(S.label)),r.json({results:b})}catch(o){return r.json({error:o.message,results:[]},500)}}),w.get("/api/keys",async r=>{try{let{user:o,tenantID:m}=await P(r.req.raw,R,d,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:read"))return r.json({error:"Forbidden"},403);let y=parseInt(r.req.query("page")||"1"),n=Math.min(parseInt(r.req.query("limit")||"50"),100),a=await t.find({collection:chunkNY47CFVP_cjs.d,where:{},page:y,limit:n,tenantID:m}),p=(a.docs||[]).map(b=>({id:b.id,name:b.name,keyPrefix:b.keyPrefix,permissions:b.permissions||[],lastUsed:b.lastUsedAt,createdAt:b.createdAt}));return r.json({docs:p,totalDocs:a.totalDocs||p.length,totalPages:a.totalPages||1})}catch(o){return console.error("[ApiKeys] GET error:",o),r.json({error:o.message},500)}}),w.post("/api/keys",async r=>{try{let{user:o}=await P(r.req.raw,R,d,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);let m=await r.req.json();if(!m.name||typeof m.name!="string")return r.json({error:"name is required"},400);let y=chunkNY47CFVP_cjs.i(),n=await t.create({collection:chunkNY47CFVP_cjs.d,data:{userId:o.id,name:m.name,key:y,keyPrefix:chunkNY47CFVP_cjs.j(y),permissions:Array.isArray(m.permissions)?m.permissions:["*"],expiresAt:m.expiresAt||null,createdAt:new Date().toISOString()}});return await k?.createAuditLog({action:"api_key_create",userId:o.id,resource:"api_key",resourceId:n.id,success:!0,metadata:{keyName:m.name}}),r.json({...n,key:y,permissions:Array.isArray(m.permissions)?m.permissions:["*"]},201)}catch(o){return console.error("[ApiKeys] POST error:",o),r.json({error:o.message},500)}}),w.delete("/api/keys/:id",async r=>{try{let{user:o}=await P(r.req.raw,R,d,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);let m=r.req.param("id"),y=await t.findByID({collection:chunkNY47CFVP_cjs.d,id:m});return y?(await t.delete({collection:chunkNY47CFVP_cjs.d,id:m}),await k?.createAuditLog({action:"api_key_delete",userId:o.id,resource:"api_key",resourceId:m,success:!0,metadata:{keyName:y.name}}),r.json({message:"API key deleted"})):r.json({error:"API key not found"},404)}catch(o){return console.error("[ApiKeys] DELETE error:",o),r.json({error:o.message},500)}}),w.patch("/api/keys/:id",async r=>{try{let{user:o}=await P(r.req.raw,R,d,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);let m=r.req.param("id"),y=await r.req.json(),n=await t.findByID({collection:chunkNY47CFVP_cjs.d,id:m});if(!n)return r.json({error:"API key not found"},404);let a={};if(typeof y.name=="string"&&y.name.trim()&&(a.name=y.name.trim()),Array.isArray(y.permissions)&&(a.permissions=y.permissions),y.expiresAt!==void 0&&(a.expiresAt=y.expiresAt||null),Object.keys(a).length===0)return r.json({error:"Nothing to update"},400);let p=await t.update({collection:chunkNY47CFVP_cjs.d,id:m,data:a});return r.json({...p,keyPrefix:n.keyPrefix})}catch(o){return console.error("[ApiKeys] PATCH error:",o),r.json({error:o.message},500)}}),w.post("/api/keys/:id/rotate",async r=>{try{let{user:o}=await P(r.req.raw,R,d,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);let m=r.req.param("id"),y=await t.findByID({collection:chunkNY47CFVP_cjs.d,id:m});if(!y)return r.json({error:"API key not found"},404);let n=chunkNY47CFVP_cjs.i(),a=await t.update({collection:chunkNY47CFVP_cjs.d,id:m,data:{key:n,keyPrefix:chunkNY47CFVP_cjs.j(n),lastUsedAt:null}});return await k?.createAuditLog({action:"api_key_rotate",userId:o.id,resource:"api_key",resourceId:m,success:!0,metadata:{keyName:y.name}}),r.json({...a,key:n,permissions:y.permissions,expiresAt:y.expiresAt})}catch(o){return console.error("[ApiKeys] rotate error:",o),r.json({error:o.message},500)}}),w.get("/api/webhooks",async r=>{try{let{user:o}=await P(r.req.raw,R,d,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:read"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=await f.getWebhooks();return r.json({docs:m})}catch(o){return console.error("[Webhooks] GET error:",o),r.json({error:o.message},500)}}),w.post("/api/webhooks",async r=>{try{let{user:o}=await P(r.req.raw,R,d,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=await r.req.json(),y=await f.createWebhook(m);return await k?.createAuditLog({action:"webhook_create",userId:o.id,resource:"webhook",resourceId:y.id,success:!0,metadata:{name:y.name,url:y.url}}),r.json(y,201)}catch(o){return console.error("[Webhooks] POST error:",o),r.json({error:o.message},500)}}),w.get("/api/webhooks/:id",async r=>{try{let{user:o}=await P(r.req.raw,R,d,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:read"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=await f.getWebhookById(m);return y?r.json(y):r.json({error:"Webhook not found"},404)}catch(o){return console.error("[Webhooks] GET :id error:",o),r.json({error:o.message},500)}}),w.patch("/api/webhooks/:id",async r=>{try{let{user:o}=await P(r.req.raw,R,d,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=await r.req.json(),n=await f.updateWebhook(m,y);return n?(await k?.createAuditLog({action:"webhook_update",userId:o.id,resource:"webhook",resourceId:m,success:!0,metadata:{name:n.name}}),r.json(n)):r.json({error:"Webhook not found"},404)}catch(o){return console.error("[Webhooks] PATCH error:",o),r.json({error:o.message},500)}}),w.delete("/api/webhooks/:id",async r=>{try{let{user:o}=await P(r.req.raw,R,d,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=await f.getWebhookById(m);return y?(await f.deleteWebhook(m),await k?.createAuditLog({action:"webhook_delete",userId:o.id,resource:"webhook",resourceId:m,success:!0,metadata:{name:y.name}}),r.json({message:"Webhook deleted"})):r.json({error:"Webhook not found"},404)}catch(o){return console.error("[Webhooks] DELETE error:",o),r.json({error:o.message},500)}}),w.post("/api/webhooks/:id/test",async r=>{try{let{user:o}=await P(r.req.raw,R,d,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=await f.testWebhook(m);return y?r.json(y):r.json({error:"Webhook not found"},404)}catch(o){return console.error("[Webhooks] test error:",o),r.json({error:o.message},500)}}),w.get("/api/webhooks/:id/history",async r=>{try{let{user:o}=await P(r.req.raw,R,d,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:read"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=Math.min(parseInt(r.req.query("limit")||"50"),100),n=await f.getDeliveryHistory(m,y);return r.json({docs:n})}catch(o){return console.error("[Webhooks] history error:",o),r.json({error:o.message},500)}});function Me(r){let o={},m=["name","type","required","hasMany","relationTo","options","min","max","minLength","maxLength","defaultValue","label","localized","admin","unique","index","hidden","readOnly","deprecated"];for(let y of m)y in r&&(o[y]=r[y]);return r.fields&&(o.fields=r.fields.map(Me)),r.tabs&&(o.tabs=r.tabs.map(y=>({label:y.label,name:y.name,fields:y.fields.map(Me)}))),o}w.get("/api/__schema",async r=>{try{let{user:o,apiKeyContext:m}=await P(r.req.raw,R,d,c);if(!o&&!m)return r.json({error:"Unauthorized"},401);let n=e.getCollections().filter(a=>a.slug!=="users"&&a.slug!=="audit_logs").map(a=>({slug:a.slug,label:a.label,labelPlural:a.labelPlural,singularLabel:a.singularLabel,timestamps:a.timestamps,auth:!!a.auth,tenantScoped:!!a.tenantScoped,upload:a.upload?{staticDir:a.upload.staticDir,imageSizes:a.upload.imageSizes,mimeTypes:a.upload.mimeTypes}:void 0,fields:a.fields.map(Me)}));return r.json(n)}catch(o){return console.error("[Schema] error:",o),r.json({error:o.message},500)}});let Qt=e.getCollections();for(let r of Qt){let y=function(n,a){let p=[],b=new Set([...Object.keys(n),...Object.keys(a)]);for(let h of b)h==="id"||h==="createdAt"||h==="updatedAt"||JSON.stringify(n[h])!==JSON.stringify(a[h])&&p.push({field:h,oldValue:h in n?n[h]:void 0,newValue:h in a?a[h]:void 0});return p};let o=r.slug;if(o==="users"||o==="audit_logs")continue;let m=`/api/${o}`;w.post(`${m}/dynamic-options/:fieldName`,async n=>{try{let{user:a,tenantID:p,apiKeyContext:b}=await P(n.req.raw,R,d,c),h=await L(r,"read",n.req.raw,a,p,b,T,j);if(!h.allowed)return n.json({error:h.error},h.status||403);let I=n.req.param("fieldName"),S=await n.req.json(),{data:v,siblingData:x}=S,D=ce(r.fields,I);if(!D)return n.json({error:"Field not found"},404);if(D.type!=="select")return n.json({error:"Field is not a select field"},400);let q=[];return typeof D.options=="function"?q=await D.options({data:v||{},siblingData:x||{}}):Array.isArray(D.options)&&(q=D.options),n.json({options:q})}catch(a){return n.json({error:a.message},500)}}),w.get(m,async n=>{try{let{user:a,tenantID:p,apiKeyContext:b}=await P(n.req.raw,R,d,c),h=await L(r,"read",n.req.raw,a,p,b,T,j);if(!h.allowed)return n.json({error:h.error},h.status||403);p&&t.setTenantContext({tenantId:p,userId:a?.id??"",role:a?.role,isSuperAdmin:a?.role==="super_admin"});let I=new URL(n.req.url),S=parseInt(I.searchParams.get("page")||"1"),v=Math.min(parseInt(I.searchParams.get("limit")||"10"),100),x=I.searchParams.get("sort")||void 0,D=parseInt(I.searchParams.get("depth")||"0"),q=I.searchParams.get("select")?.split(",")||void 0,C=I.searchParams.get("draft"),$=C==="true"?!0:C==="false"?!1:!!a,E={},N=I.searchParams.get("where");if(N)try{E=JSON.parse(N);}catch{return n.json({error:"Invalid JSON in where parameter"},400)}let O=await t.find({collection:o,where:E,sort:x,limit:v,page:S,depth:D,tenantID:p,select:q,draft:$});return await chunk4FV3HQBI_cjs.a(O.docs,r.fields,t,e,1,D),n.json(O)}catch(a){return console.error("[API] list error:",a),n.json({error:a.message},500)}}),w.get(`${m}/:id/versions`,async n=>{try{let{user:a,tenantID:p,apiKeyContext:b}=await P(n.req.raw,R,d,c),h=await L(r,"read",n.req.raw,a,p,b,T,j);if(!h.allowed)return n.json({error:h.error},h.status||403);let I=n.req.param("id");if(!I)return n.json({error:"Missing document ID"},400);let S=new URL(n.req.url),v=S.searchParams.get("compareA"),x=S.searchParams.get("compareB");if(Oe(k,b,`${m}/${I}/versions`,"GET",n.req.raw),v&&x){let[$,E]=await Promise.all([t.findVersionByID({collection:o,versionId:v,tenantID:p}),t.findVersionByID({collection:o,versionId:x,tenantID:p})]);if(!$||!E)return n.json({error:"Version not found"},404);let N=y($.data,E.data);return n.json({diffs:N})}let D=parseInt(S.searchParams.get("page")||"1"),q=Math.min(parseInt(S.searchParams.get("limit")||"10"),100),C=await t.findVersions({collection:o,documentId:I,page:D,limit:q,tenantID:p});return n.json(C)}catch(a){return console.error("[API] versions error:",a),n.json({error:a.message},500)}}),w.put(`${m}/:id/draft`,async n=>{try{let{user:a,tenantID:p,apiKeyContext:b}=await P(n.req.raw,R,d,c),h=await L(r,"update",n.req.raw,a,p,b,T,j);if(!h.allowed)return n.json({error:h.error},h.status||403);let I=n.req.param("id"),S=await n.req.json(),v=ut(S),x=await t.findByID({collection:o,id:I,tenantID:p,draft:!0});if(!x)return n.json({error:"Document not found"},404);let D;S.delta?D={...x,...S.delta}:D=S.data??pt(S);let q=await t.updateLatestVersion({collection:o,documentId:I,data:D,status:"draft",tenantID:p});return a&&k?.createAuditLog({action:"document_update",userId:a.id,resource:o,resourceId:I,success:!0,metadata:{type:"draft_save"}}),n.json({data:q,message:"Draft saved successfully"})}catch(a){return n.json({error:a.message},500)}}),w.delete(`${m}/:id/draft`,async n=>{try{let{user:a,tenantID:p,apiKeyContext:b}=await P(n.req.raw,R,d,c),h=await L(r,"update",n.req.raw,a,p,b,T,j);return h.allowed?(a&&k?.createAuditLog({action:"document_update",userId:a.id,resource:o,resourceId:n.req.param("id"),success:!0,metadata:{type:"draft_discard"}}),n.json({message:"Draft discarded successfully"})):n.json({error:h.error},h.status||403)}catch(a){return n.json({error:a.message},500)}}),w.get(`${m}/:id`,async n=>{try{let{user:a,tenantID:p,apiKeyContext:b}=await P(n.req.raw,R,d,c),h=await L(r,"read",n.req.raw,a,p,b,T,j);if(!h.allowed)return n.json({error:h.error},h.status||403);let I=n.req.param("id"),S=new URL(n.req.url),v=parseInt(S.searchParams.get("depth")||"0"),x=S.searchParams.get("select")?.split(",")||void 0,D=S.searchParams.get("draft"),q=D==="true"?!0:D==="false"?!1:!!a,C=await t.findByID({collection:o,id:I,depth:v,tenantID:p,select:x,draft:q});return !C&&r.fields.some($=>$.name==="slug")&&(C=await t.findOne({collection:o,where:{slug:I},tenantID:p,draft:q})),C?(await chunk4FV3HQBI_cjs.a([C],r.fields,t,e,1,v),n.json({data:C})):n.json({error:"Document not found"},404)}catch(a){return n.json({error:a.message},500)}}),w.post(m,async n=>{try{let{user:a,tenantID:p,apiKeyContext:b}=await P(n.req.raw,R,d,c),h=await L(r,"create",n.req.raw,a,p,b,T,j);if(!h.allowed)return n.json({error:h.error},h.status||403);p&&t.setTenantContext({tenantId:p,userId:a?.id??"",role:a?.role,isSuperAdmin:a?.role==="super_admin"}),Oe(k,b,m,"POST",n.req.raw);let S=await n.req.json();me(S,r.fields),ge(r.fields,S);let v=n.req.raw;if(r.hooks?.beforeValidate)for(let E of r.hooks.beforeValidate){let N=await E({collection:o,data:S,req:v,user:a,tenantID:p,operation:"create"});N&&Object.assign(S,N);}let x=e.getCreateZodSchema(o);try{S=x.parse(S);}catch(E){return n.json({error:`Validation failed: ${Ne(E.errors)}`,details:E.errors},400)}r.tenantScoped&&p&&(S.tenantID=p);let D=r.versions?.drafts===!0,q=r.fields.find(E=>E.name==="status"),C=q?.type==="select"&&Array.isArray(q.options)&&q.options.some(E=>E.value==="published");if(D?S.status="draft":C&&!S.status&&(S.status="published"),r.hooks?.beforeChange)for(let E of r.hooks.beforeChange){let N=await E({collection:o,data:S,req:v,user:a,tenantID:p,operation:"create"});N&&Object.assign(S,N);}let $=await t.create({collection:o,data:S,tenantID:p});if(D&&await t.createVersion({collection:o,documentId:$.id,data:S,status:"draft",createdBy:a?.id,changeDescription:"Created",tenantID:p}),r.hooks?.afterChange)for(let E of r.hooks.afterChange)await E({collection:o,doc:$,data:S,req:v,user:a,tenantID:p,operation:"create"});return f&&f.trigger(Ae(o,"create"),{collection:o,operation:"create",data:$,user:a?{id:a.id,email:a.email,role:a.role}:void 0,tenantId:p}).catch(E=>console.error("[Webhook] Failed to trigger:",E)),a&&k?.createAuditLog({action:"document_create",userId:a.id,resource:o,resourceId:$.id,success:!0}),n.json({data:$,message:"Created successfully"},201)}catch(a){return a.name==="ZodError"?n.json({error:`Validation failed: ${Ne(a.errors)}`,details:a.errors},400):n.json({error:a.message},500)}}),w.patch(`${m}/:id`,async n=>{try{let{user:a,tenantID:p,apiKeyContext:b}=await P(n.req.raw,R,d,c),h=await L(r,"update",n.req.raw,a,p,b,T,j);if(!h.allowed)return n.json({error:h.error},h.status||403);let I=n.req.param("id"),S=await n.req.json(),v=ut(S),x=await t.findByID({collection:o,id:I,tenantID:p,draft:!0});if(!x)return n.json({error:"Document not found"},404);if(v&&x.updatedAt&&v!==x.updatedAt)return n.json(Yt(v,x),409);let D=Object.fromEntries(Object.entries(pt(S)).filter(([F,z])=>z!=="null"&&z!==void 0));me(D,r.fields),ge(r.fields,D);let q=n.req.raw;if(r.hooks?.beforeValidate)for(let F of r.hooks.beforeValidate){let z=await F({collection:o,data:D,originalDoc:x,req:q,user:a,tenantID:p,operation:"update"});z&&Object.assign(D,z);}if(D=e.getUpdateZodSchema(o).parse(D),r.hooks?.beforeChange)for(let F of r.hooks.beforeChange){let z=await F({collection:o,data:D,originalDoc:x,req:q,user:a,tenantID:p,operation:"update"});z&&Object.assign(D,z);}let $=n.req.header("X-Draft")==="true",E=r.versions?.drafts===!0,N=n.req.query("autosave")==="true",O;if(E&&$?await t.createVersion({collection:o,documentId:I,data:D,status:"draft",autosave:N,createdBy:a?.id,changeDescription:N?"Autosave":"Draft saved",tenantID:p}):E?(await t.update({collection:o,id:I,data:{...D,status:"published"},tenantID:p}),await t.createVersion({collection:o,documentId:I,data:D,status:"published",createdBy:a?.id,changeDescription:"Published",tenantID:p})):await t.update({collection:o,id:I,data:D,tenantID:p}),O=await t.findByID({collection:o,id:I,tenantID:p,draft:!0}),r.hooks?.afterChange)for(let F of r.hooks.afterChange)await F({collection:o,doc:O,data:D,originalDoc:x,req:q,user:a,tenantID:p,operation:"update"});return f&&f.trigger(Ae(o,"update"),{collection:o,operation:"update",data:O,previousData:x,user:a?{id:a.id,email:a.email,role:a.role}:void 0,tenantId:p}).catch(F=>console.error("[Webhook] Failed to trigger:",F)),Oe(k,b,`${m}/${I}`,"PATCH",n.req.raw),a&&k?.createAuditLog({action:"document_update",userId:a.id,resource:o,resourceId:I,success:!0}),n.json({data:O,message:E?"Draft saved":"Updated successfully"})}catch(a){return a.name==="ZodError"?(console.error(`[PATCH ${m}/:id] Validation failed:`,a.errors),n.json({error:`Validation failed: ${Ne(a.errors)}`,details:a.errors},400)):(console.error(`[PATCH ${m}/:id] ERROR:`,a.message,"CAUSE:",a.cause?.message||a.cause,"QUERY:",a.query),n.json({error:a.message},500))}}),w.delete(`${m}/:id`,async n=>{try{let{user:a,tenantID:p,apiKeyContext:b}=await P(n.req.raw,R,d,c),h=await L(r,"delete",n.req.raw,a,p,b,T,j);if(!h.allowed)return n.json({error:h.error},h.status||403);p&&t.setTenantContext({tenantId:p,userId:a?.id??"",role:a?.role,isSuperAdmin:a?.role==="super_admin"});let I=n.req.param("id"),S=n.req.raw,v=await t.findByID({collection:o,id:I,tenantID:p,draft:!0});if(!v)return n.json({error:"Document not found"},404);if(r.hooks?.beforeDelete)for(let D of r.hooks.beforeDelete)await D({collection:o,doc:v,req:S,user:a,tenantID:p,operation:"delete"});let x=await t.delete({collection:o,id:I,tenantID:p});if(r.hooks?.afterDelete)for(let D of r.hooks.afterDelete)await D({collection:o,doc:x,originalDoc:v,req:S,user:a,tenantID:p,operation:"delete"});return f&&f.trigger(Ae(o,"delete"),{collection:o,operation:"delete",data:x,previousData:v,user:a?{id:a.id,email:a.email,role:a.role}:void 0,tenantId:p}).catch(D=>console.error("[Webhook] Failed to trigger:",D)),Oe(k,b,`${m}/${I}`,"DELETE",n.req.raw),a&&k?.createAuditLog({action:"document_delete",userId:a.id,resource:o,resourceId:I,success:!0}),n.json({data:x,message:"Deleted successfully"})}catch(a){return console.error(`[DELETE] Error deleting ${o}:`,a),n.json({error:a.message||String(a)},500)}}),w.post(`${m}/:id/duplicate`,async n=>{try{let{user:a,tenantID:p,apiKeyContext:b}=await P(n.req.raw,R,d,c),h=await L(r,"create",n.req.raw,a,p,b,T,j);if(!h.allowed)return n.json({error:h.error},h.status||403);let I=n.req.param("id"),S=await t.findByID({collection:o,id:I,tenantID:p,draft:!0});if(!S)return n.json({error:"Document not found"},404);let{id:v,createdAt:x,updatedAt:D,...q}=S,C=Date.now().toString(36),$=`${S.slug||"document"}-copy-${C}`,E=await t.create({collection:o,data:{...q,slug:$,status:"draft"},tenantID:p});return n.json({data:E,message:"Document duplicated successfully"})}catch(a){return console.error("[Duplicate] Error:",a),n.json({error:a.message||String(a)},500)}}),w.post(`${m}/:id/versions/:versionId/restore`,async n=>{try{let{user:a,tenantID:p,apiKeyContext:b}=await P(n.req.raw,R,d,c),h=await L(r,"update",n.req.raw,a,p,b,T,j);if(!h.allowed)return n.json({error:h.error},h.status||403);let I=n.req.param("id"),S=n.req.param("versionId"),v=await t.findVersionByID({collection:o,versionId:S,tenantID:p});if(!v)return n.json({error:"Version not found"},404);let x=await t.update({collection:o,id:I,data:{...v.data,status:"draft"},tenantID:p});return n.json({data:x,message:"Version restored successfully"})}catch(a){return n.json({error:a.message},500)}}),w.post(`${m}/:id/versions`,async n=>{try{let{user:a,tenantID:p,apiKeyContext:b}=await P(n.req.raw,R,d,c),h=await L(r,"update",n.req.raw,a,p,b,T,j);if(!h.allowed)return n.json({error:h.error},h.status||403);let I=await n.req.json(),{versionId:S,action:v}=I;if(v==="restore"&&S){let x=await t.findVersionByID({collection:o,versionId:S,tenantID:p});if(!x)return n.json({error:"Version not found"},404);let D=await t.update({collection:o,id:n.req.param("id"),data:{...x.data,status:"draft"},tenantID:p});return n.json({data:D,message:"Version restored successfully"})}return n.json({error:"Invalid action"},400)}catch(a){return n.json({error:a.message},500)}}),w.post(`${m}/:id/publish`,async n=>{try{let{user:a,tenantID:p,apiKeyContext:b}=await P(n.req.raw,R,d,c),h=await L(r,"update",n.req.raw,a,p,b,T,j);if(!h.allowed)return n.json({error:h.error},h.status||403);p&&t.setTenantContext({tenantId:p,userId:a?.id??"",role:a?.role,isSuperAdmin:a?.role==="super_admin"});let I=n.req.param("id"),S=await n.req.json().catch(()=>({})),v=ut(S),x=await t.findByID({collection:o,id:I,tenantID:p,draft:!0});if(!x)return n.json({error:"Document not found"},404);if(v&&x.updatedAt&&v!==x.updatedAt)return n.json(Yt(v,x),409);let D={status:"published"},q=x;if(r.versions?.drafts){let $=await t.findVersions({collection:o,documentId:I,limit:1,sort:"-createdAt",tenantID:p});if($.docs.length>0){let E=$.docs[0];q={...x,...E.data},D={...E.data,...D};}}let C=await t.update({collection:o,id:I,data:D,tenantID:p});return r.versions?.drafts&&await t.createVersion({collection:o,documentId:I,data:{...q,status:"published"},status:"published",createdBy:a?.id,changeDescription:"Published",tenantID:p}),f&&f.trigger(Ae(o,"update"),{collection:o,operation:"update",data:C,user:a?{id:a.id,email:a.email,role:a.role}:void 0,tenantId:p}).catch($=>console.error("[Webhook] Failed to trigger:",$)),n.json({data:C,message:"Published successfully"})}catch(a){return n.json({error:a.message},500)}}),w.post(`${m}/:id/unpublish`,async n=>{try{let{user:a,tenantID:p,apiKeyContext:b}=await P(n.req.raw,R,d,c),h=await L(r,"update",n.req.raw,a,p,b,T,j);if(!h.allowed)return n.json({error:h.error},h.status||403);let I=n.req.param("id");if(!await t.findByID({collection:o,id:I,tenantID:p,draft:!0}))return n.json({error:"Document not found"},404);let v=await t.update({collection:o,id:I,data:{status:"draft"},tenantID:p});return f&&f.trigger(Ae(o,"update"),{collection:o,operation:"update",data:v,user:a?{id:a.id,email:a.email,role:a.role}:void 0,tenantId:p}).catch(x=>console.error("[Webhook] Failed to trigger:",x)),n.json({data:v,message:"Unpublished successfully"})}catch(a){return n.json({error:a.message},500)}});}for(let r of e.getGlobals()){let o=r.slug,m=`/api/globals/${o}`;w.post(`${m}/dynamic-options/:fieldName`,async n=>{try{let{user:a,tenantID:p}=await P(n.req.raw,R,d,c),b=await X(r,"read",n.req.raw,a,p,T);if(!b.allowed)return n.json({error:b.error},b.status||403);let h=n.req.param("fieldName"),I=await n.req.json(),{data:S,siblingData:v}=I,x=ce(r.fields,h);if(!x)return n.json({error:"Field not found"},404);if(x.type!=="select")return n.json({error:"Field is not a select field"},400);let D=[];return typeof x.options=="function"?D=await x.options({data:S||{},siblingData:v||{}}):Array.isArray(x.options)&&(D=x.options),n.json({options:D})}catch(a){return n.json({error:a.message},500)}}),w.get(m,async n=>{try{let{user:a,tenantID:p}=await P(n.req.raw,R,d,c),b=await X(r,"read",n.req.raw,a,p,T);if(!b.allowed)return n.json({error:b.error},b.status||403);let h=!!a,I=await t.findOne({collection:`_globals_${o}`,where:{},tenantID:p,draft:h});if(o==="system"){let S=rr__default.default.randomBytes(32).toString("hex");I?I.appSecret||(await t.update({collection:`_globals_${o}`,id:o,data:{appSecret:S},tenantID:p}),I.appSecret=S):I=await t.create({collection:`_globals_${o}`,data:{id:o,appSecret:S},tenantID:p});}return n.json({data:I||{}})}catch(a){return n.json({error:a.message},500)}});let y=async n=>{try{let{user:a,tenantID:p}=await P(n.req.raw,R,d,c),b=await X(r,"update",n.req.raw,a,p,T);if(!b.allowed)return n.json({error:b.error},b.status||403);let h=pt(await n.req.json()),I=Object.fromEntries(Object.entries(h).filter(([F,z])=>z!==null&&z!=="null"&&z!==void 0));me(I,r.fields),ge(r.fields,I);let S=e.getUpdateZodSchema(o),v;try{v=S.parse(I);}catch(F){return n.json({error:`Validation failed: ${Ne(F.errors)}`,details:F.errors},400)}let x=new Set(["id","createdAt","updatedAt","status","baseUpdatedAt","_baseUpdatedAt"]),D=Object.fromEntries(Object.entries(v).filter(([F])=>!x.has(F))),q=`_globals_${o}`,C=await t.findOne({collection:q,where:{},tenantID:p,draft:!0}),$=n.req.header("X-Draft")==="true",E=r.versions?.drafts===!0,N=n.req.query("autosave")==="true",O;if(E&&$)await t.createVersion({collection:q,documentId:o,data:D,status:"draft",autosave:N,createdBy:a?.id,changeDescription:N?"Autosave":"Manual save",tenantID:p}),C?O=C:O=await t.create({collection:q,data:{...D,id:o,status:"draft"},tenantID:p});else if(E&&!$){let F="published";C?O=await t.update({collection:q,id:o,data:{...D,status:F},tenantID:p}):O=await t.create({collection:q,data:{...D,id:o,status:F},tenantID:p}),await t.createVersion({collection:q,documentId:o,data:D,status:F,autosave:!1,createdBy:a?.id,changeDescription:"Published",tenantID:p});}else C?O=await t.update({collection:q,id:o,data:D,tenantID:p}):O=await t.create({collection:q,data:{...D,id:o},tenantID:p});if(o==="storage-settings"&&(oe=null,de=null),o==="email-settings"){let F=await chunkAJAZ7D3W_cjs.b.fromConfig(t);M.email=F||void 0;}return o==="system"&&await Tt(),a&&k?.createAuditLog({action:"settings_change",userId:a.id,resource:`global:${o}`,resourceId:o,success:!0}),n.json({data:O,message:"Updated successfully"})}catch(a){return console.error(`[API] Save global "${o}" failed:`,a),n.json({error:a.message||"Save failed",stack:process.env.NODE_ENV==="development"?a.stack:void 0},500)}};w.post(m,y),w.patch(m,y),w.post(`${m}/publish`,async n=>{try{let{user:a,tenantID:p}=await P(n.req.raw,R,d,c),b=await X(r,"update",n.req.raw,a,p,T);if(!b.allowed)return n.json({error:b.error},403);let h=`_globals_${o}`,I=await t.findOne({collection:h,where:{},tenantID:p,draft:!0});if(!I)return n.json({error:"Global not found"},404);let S={status:"published"},v=I;if(r.versions?.drafts){let D=await t.findVersions({collection:h,documentId:o,limit:1,sort:"-createdAt",tenantID:p});D.docs.length>0&&(v={...I,...D.docs[0].data},S={...D.docs[0].data,...S});}let x=await t.update({collection:h,id:o,data:S,tenantID:p});return r.versions?.drafts&&await t.createVersion({collection:h,documentId:o,data:{...v,status:"published"},status:"published",createdBy:a?.id,changeDescription:"Published",tenantID:p}),n.json({data:x,message:"Published successfully"})}catch(a){return n.json({error:a.message},500)}}),w.post(`${m}/unpublish`,async n=>{try{let{user:a,tenantID:p}=await P(n.req.raw,R,d,c),b=await X(r,"update",n.req.raw,a,p,T);if(!b.allowed)return n.json({error:b.error},403);let h=await t.update({collection:`_globals_${o}`,id:o,data:{status:"draft"},tenantID:p});return n.json({data:h,message:"Unpublished successfully"})}catch(a){return n.json({error:a.message},500)}}),w.get(`${m}/versions`,async n=>{try{let{user:a,tenantID:p}=await P(n.req.raw,R,d,c),b=await X(r,"read",n.req.raw,a,p,T);if(!b.allowed)return n.json({error:b.error},403);let h=parseInt(n.req.query("limit")||"10"),I=parseInt(n.req.query("page")||"1"),S=await t.findVersions({collection:`_globals_${o}`,documentId:o,limit:h,page:I,tenantID:p});return n.json(S)}catch(a){return n.json({error:a.message},500)}}),w.get(`${m}/versions/:versionId`,async n=>{try{let a=n.req.param("versionId"),{user:p,tenantID:b}=await P(n.req.raw,R,d,c),h=await X(r,"read",n.req.raw,p,b,T);if(!h.allowed)return n.json({error:h.error},403);let I=await t.findVersionByID({collection:`_globals_${o}`,versionId:a,tenantID:b});return I?n.json({data:I}):n.json({error:"Version not found"},404)}catch(a){return n.json({error:a.message},500)}}),w.post(`${m}/versions/:versionId/restore`,async n=>{try{let a=n.req.param("versionId"),{user:p,tenantID:b}=await P(n.req.raw,R,d,c),h=await X(r,"update",n.req.raw,p,b,T);if(!h.allowed)return n.json({error:h.error},403);let I=`_globals_${o}`,S=await t.findVersionByID({collection:I,versionId:a,tenantID:b});if(!S)return n.json({error:"Version not found"},404);let v=await t.update({collection:I,id:o,data:{...S.data,status:"draft"},tenantID:b});return n.json({data:v,message:"Version restored successfully"})}catch(a){return n.json({error:a.message},500)}}),o==="email-settings"&&w.post(`${m}/test`,async n=>{try{let{user:a,tenantID:p}=await P(n.req.raw,R,d,c),b=await X(r,"update",n.req.raw,a,p,T);if(!b.allowed)return n.json({error:b.error},b.status||403);let h=await n.req.json(),I={provider:h.provider,from:h.fromEmail||h.from,fromName:h.fromName,replyTo:h.replyTo,smtp:h.smtp?{host:h.smtp.host,port:h.smtp.port,secure:h.smtp.secure,auth:{user:h.smtp.username||h.smtp.user,pass:h.smtp.password||h.smtp.pass}}:void 0,resend:h.resend,sendgrid:h.sendgrid,mailgun:h.mailgun,ses:h.ses},S=new chunkAJAZ7D3W_cjs.b(I),v=h.testEmail||h.testEmailSection&&h.testEmailSection.testEmail;return v?(await S.send({to:v,subject:"Kyro CMS - Test Email",html:`
66
+ <div style="font-family: sans-serif; max-width: 600px; margin: 0 auto; padding: 20px; border: 1px solid #e2e8f0; border-radius: 8px;">
67
+ <h1 style="color: #0b1222; margin-bottom: 16px;">Success! \u{1F680}</h1>
68
+ <p style="font-size: 16px; color: #334155; line-height: 1.6;">
69
+ Your email settings in <b>Kyro CMS</b> are working correctly.
70
+ </p>
71
+ <div style="background: #f8fafc; padding: 16px; border-radius: 6px; margin: 24px 0;">
72
+ <p style="margin: 0; font-size: 14px; color: #64748b;">
73
+ <b>Provider:</b> ${h.provider.toUpperCase()}
74
+ </p>
75
+ <p style="margin: 8px 0 0; font-size: 14px; color: #64748b;">
76
+ <b>Sent at:</b> ${new Date().toLocaleString()}
77
+ </p>
78
+ </div>
79
+ <p style="font-size: 12px; color: #94a3b8; margin-top: 32px; border-top: 1px solid #f1f5f9; padding-top: 16px;">
80
+ This is a test email sent from the Kyro CMS Admin Panel.
81
+ </p>
82
+ </div>
83
+ `,text:`Success! Your email settings in Kyro CMS are working correctly.
84
+
85
+ Provider: ${h.provider}
86
+ Sent at: ${new Date().toLocaleString()}`}),n.json({message:"Test email sent successfully!"})):n.json({error:"No test recipient email provided"},400)}catch(a){return console.error("[Email Test] Failed:",a),n.json({error:a.message||"Failed to send test email"},500)}});}return w.onError((r,o)=>(console.error(`[API Error] ${o.req.method} ${o.req.path}:`,r),o.json({error:r.message||"Internal server error",code:"INTERNAL_ERROR"},500))),w}function Nr(l,e,t){return Zt({registry:l,db:e,authSecret:t?.authSecret,user:t?.user,req:t?.req,tenantID:t?.tenantID,cors:t?.cors,webhookService:t?.webhookService})}exports.a=Tr;exports.b=Pr;exports.c=qr;exports.d=zt;exports.e=pe;exports.f=it;exports.g=Kr;exports.h=Tt;exports.i=sr;exports.j=zr;exports.k=Pt;exports.l=Ve;exports.m=ke;exports.n=Ct;exports.o=as;exports.p=$t;exports.q=Ee;exports.r=_e;exports.s=Zt;exports.t=Nr;
@@ -0,0 +1,2 @@
1
+ import {a,c,b,d}from'./chunk-4YYBWCDJ.js';import {randomBytes}from'crypto';var _=class extends a{client;db;database;connectionString;constructor(i){if(super(),i.connectionString){this.connectionString=i.connectionString;try{let e=new URL(i.connectionString);this.database=e.pathname.replace(/^\//,"")||"kyro_cms";}catch{this.database="kyro_cms";}}else this.client=i.client,this.database=i.database;}async connect(){if(this.connectionString&&!this.client){let{MongoClient:i}=await import('mongodb');this.client=new i(this.connectionString),await this.client.connect();}this.db=this.client.db(this.database),this.connected=true;}async disconnect(){this.client&&(await this.client.close(),this.connected=false);}getMongoCollection(i){if(!this.db)throw new Error("MongoDB not connected");return this.db.collection(i)}async find(i){let{collection:e,where:n={},sort:s,limit:t=10,page:o=1,tenantID:r,select:a,draft:c$1}=i,u=this.getCollectionConfig(e),f=this.getMongoCollection(e),d$1={...n};this.tenantContext&&u.tenantScoped&&(d$1=c({where:d$1},e,this.tenantContext,b).where||{});let l=this.buildFilter(d$1,r),g=u.fields.find(h=>h.name==="status"),p=g?.type==="select"&&Array.isArray(g.options)&&g.options.some(h=>h.value==="published");!c$1&&p&&(l.status="published");let v=this.parseSort(s),b$1={[v.field]:v.direction==="asc"?1:-1},R=(o-1)*t,[$,x]=await Promise.all([f.find(l).sort(b$1).skip(R).limit(t).project(this.buildProjection(a)).toArray(),f.countDocuments(l)]),y=$.map(h=>this.processResult(h,u));return this.tenantContext&&!this.tenantContext.isSuperAdmin&&(y=y.filter(h=>d(h,e,this.tenantContext,b))),c$1&&(y=await Promise.all(y.map(async h=>{let A=await this.getMongoCollection(`${e}_versions`).findOne({document_id:h.id},{sort:{createdAt:-1}});if(A){let S=A.data||{};return {...h,...S,status:h.status}}return h}))),{docs:y,...this.calculatePagination(o,t,x)}}async findByID(i){let{collection:e,id:n,tenantID:s,draft:t}=i,o=this.getCollectionConfig(e),r=this.getMongoCollection(e);if(this.tenantContext&&o.tenantScoped){let l={_id:n,tenantId:this.tenantContext.tenantId};if(!d(l,e,this.tenantContext,b))return null}let a={_id:n};s&&(a.tenantId=s);let c=o.fields.find(l=>l.name==="status"),u=c?.type==="select"&&Array.isArray(c.options)&&c.options.some(l=>l.value==="published");!t&&u&&(a.status="published");let f=await r.findOne(a);if(!f)return null;let d$1=this.processResult(f,o);if(t){let g=await this.getMongoCollection(`${e}_versions`).findOne({document_id:d$1.id},{sort:{createdAt:-1}});if(g){let p=g.data||{};d$1={...d$1,...p,status:d$1.status};}}return d$1}async create(i){let{collection:e,data:n,tenantID:s}=i,t=this.getCollectionConfig(e),o=this.getMongoCollection(e),r={...this.prepareData(n,t),_id:this.generateId()};return s&&(r.tenantId=s),await o.insertOne(r),this.processResult(r,t)}async update(i){let{collection:e,id:n,data:s,tenantID:t}=i,o=this.getCollectionConfig(e),r=this.getMongoCollection(e),a={_id:n};t&&(a.tenantId=t);let c=this.prepareData(s,o),u=await r.findOneAndUpdate(a,{$set:c},{returnDocument:"after"});if(!u)throw new Error(`Document not found: ${e}/${n}`);return this.processResult(u,o)}async delete(i){let{collection:e,id:n,tenantID:s}=i,t=this.getCollectionConfig(e),o=this.getMongoCollection(e),r={_id:n};s&&(r.tenantId=s);let a=await o.findOneAndDelete(r);if(!a)throw new Error(`Document not found: ${e}/${n}`);return this.processResult(a,t)}async count(i){let{collection:e,where:n={},tenantID:s}=i,t=this.getMongoCollection(e),o=this.buildFilter(n,s);return t.countDocuments(o)}async findOne(i){let{collection:e,where:n={},tenantID:s,draft:t}=i,o=this.getCollectionConfig(e),r=this.getMongoCollection(e),a=this.buildFilter(n,s),c=o.fields.find(l=>l.name==="status"),u=c?.type==="select"&&Array.isArray(c.options)&&c.options.some(l=>l.value==="published");!t&&u&&(a.status="published");let f=await r.findOne(a);if(!f)return null;let d=this.processResult(f,o);if(t){let g=await this.getMongoCollection(`${e}_versions`).findOne({document_id:d.id},{sort:{createdAt:-1}});if(g){let p=g.data||{};d={...d,...p,status:d.status};}}return d}async findVersions(i){let{collection:e,documentId:n,sort:s,limit:t=10,page:o=1,tenantID:r}=i,a=this.getMongoCollection(`${e}_versions`),c={document_id:n,autosave:{$ne:true}};r&&(c.tenant_id=r);let u=(o-1)*t,f=this.parseSort(s),d={[f.field]:f.direction==="asc"?1:-1},[l,g]=await Promise.all([a.find(c).sort(d).skip(u).limit(t).toArray(),a.countDocuments(c)]);return {docs:l.map(p=>this.processResult(p,{})),...this.calculatePagination(o,t,g)}}async findVersionByID(i){let{collection:e,versionId:n,tenantID:s}=i,t=this.getMongoCollection(`${e}_versions`),o={_id:n};s&&(o.tenant_id=s);let r=await t.findOne(o);return r?this.processResult(r,{}):null}async createVersion(i){let{collection:e,documentId:n,data:s,status:t,createdBy:o,changeDescription:r,tenantID:a,autosave:c}=i,u=this.getMongoCollection(`${e}_versions`);if(c){let l={document_id:n,collection_slug:e,autosave:true};a&&(l.tenant_id=a);let g=await u.findOne(l);if(g){let p=new Date().toISOString();return await u.updateOne({_id:g._id},{$set:{data:s,status:t,updatedAt:p}}),this.processResult({...g,data:s,status:t,updatedAt:p},{})}}let f=new Date().toISOString(),d={_id:this.generateId(),document_id:n,collection_slug:e,tenant_id:a,data:s,status:t,autosave:c===true,created_by:o,change_description:r,createdAt:f,updatedAt:f};if(await u.insertOne(d),!c){let l=this.getCollectionConfig(e);l.versions?.maxPerDoc&&await this.deleteVersions({collection:e,documentId:n,keepLatest:l.versions.maxPerDoc,tenantID:a});}return this.processResult(d,{})}async updateLatestVersion(i){return this.createVersion({...i,autosave:true})}async deleteVersions(i){let{collection:e,documentId:n,keepLatest:s,tenantID:t}=i,o=this.getMongoCollection(`${e}_versions`);if(s){let r={document_id:n,autosave:{$ne:true}};t&&(r.tenant_id=t);let c=(await o.find(r).sort({createdAt:-1}).limit(s).project({_id:1}).toArray()).map(u=>u._id);c.length>0&&await o.deleteMany({document_id:n,autosave:{$ne:true},_id:{$nin:c},...t?{tenant_id:t}:{}});}else {let r={document_id:n};t&&(r.tenant_id=t),await o.deleteMany(r);}}async migrate(){for(let i of this.collections.values()){let e=this.getMongoCollection(i.slug);await e.createIndex({_id:1}),i.tenantScoped&&await e.createIndex({tenantId:1}),i.timestamps&&await e.createIndex({createdAt:-1});for(let n of i.fields)n.unique&&n.name&&await e.createIndex({[n.name]:1},{unique:true}),n.indexed&&n.name&&await e.createIndex({[n.name]:1});}}getCollectionConfig(i){let e=this.collections.get(i);if(!e)throw new Error(`Collection "${i}" not found`);return e}buildFilter(i={},e){let n={};e&&(n.tenantId=e);for(let[s,t]of Object.entries(i))if(s==="AND"&&Array.isArray(t)){let o=t.map(r=>this.buildFilter(r));Object.assign(n,...o);}else if(s==="OR"&&Array.isArray(t))n.$or=t.map(o=>this.buildFilter(o));else if(typeof t=="object"&&t!==null&&!Array.isArray(t)){let o={};if(t.equals!==void 0){n[s==="id"?"_id":s]=t.equals;continue}t.not_equals!==void 0&&(o.$ne=t.not_equals),t.in!==void 0&&(o.$in=t.in),t.not_in!==void 0&&(o.$nin=t.not_in),t.greater_than!==void 0&&(o.$gt=t.greater_than),t.greater_than_equal!==void 0&&(o.$gte=t.greater_than_equal),t.less_than!==void 0&&(o.$lt=t.less_than),t.less_than_equal!==void 0&&(o.$lte=t.less_than_equal),t.like!==void 0&&(o.$regex=new RegExp(t.like.replace(/%/g,".*"),"i")),t.not_like!==void 0&&(o.$not=new RegExp(t.not_like.replace(/%/g,".*"),"i")),t.contains!==void 0&&(o.$regex=new RegExp(`.*${t.contains}.*`,"i")),t.exists!==void 0&&(o.$exists=t.exists),Object.keys(o).length>0&&(n[s==="id"?"_id":s]=o);}else n[s==="id"?"_id":s]=t;return n}buildProjection(i){if(!i||i.length===0)return;let e={_id:1};for(let n of i)e[n]=1;return e}processResult(i,e){if(!i)return null;let n={...i};return i._id&&(n.id=i._id,delete n._id),delete n.__v,n.createdAt&&(n.createdAt=new Date(n.createdAt).toISOString()),n.updatedAt&&(n.updatedAt=new Date(n.updatedAt).toISOString()),n}generateId(){let i=Date.now().toString(16).padStart(12,"0"),e=randomBytes(6).toString("hex");return i+e}};function F(w){return new _(w)}
2
+ export{_ as a,F as b};