@kyro-cms/core 0.12.1 → 0.12.3

package/dist/{chunk-APQOYPRT.cjs → chunk-54B2Q567.cjs}

@@ -1,4 +1,4 @@
-'use strict';var chunkAJAZ7D3W_cjs=require('./chunk-AJAZ7D3W.cjs'),chunkGFU7AOI3_cjs=require('./chunk-GFU7AOI3.cjs'),chunkET6NN2V2_cjs=require('./chunk-ET6NN2V2.cjs'),chunkHVXO3OFB_cjs=require('./chunk-HVXO3OFB.cjs'),chunkWE46GGL4_cjs=require('./chunk-WE46GGL4.cjs'),chunkNY47CFVP_cjs=require('./chunk-NY47CFVP.cjs'),chunk5KGQOTLK_cjs=require('./chunk-5KGQOTLK.cjs'),chunkGYQMNXXW_cjs=require('./chunk-GYQMNXXW.cjs'),chunkUCCFT5OO_cjs=require('./chunk-UCCFT5OO.cjs'),chunkATLSIYRH_cjs=require('./chunk-ATLSIYRH.cjs'),chunkQ3Q7BJVQ_cjs=require('./chunk-Q3Q7BJVQ.cjs'),chunkAHSFSERC_cjs=require('./chunk-AHSFSERC.cjs'),dr=require('crypto'),unstorage=require('unstorage'),pr=require('unstorage/drivers/fs'),hono=require('hono'),Fe=require('path'),fs=require('fs'),gt=require('sharp'),promises=require('fs/promises'),Tr=require('process'),clientS3=require('@aws-sdk/client-s3'),nodeHttpHandler=require('@smithy/node-http-handler'),stream=require('stream'),basicFtp=require('basic-ftp'),zodToJsonSchema=require('zod-to-json-schema');function _interopDefault(e){return e&&e.__esModule?e:{default:e}}var dr__default=/*#__PURE__*/_interopDefault(dr);var pr__default=/*#__PURE__*/_interopDefault(pr);var Fe__default=/*#__PURE__*/_interopDefault(Fe);var gt__default=/*#__PURE__*/_interopDefault(gt);var Tr__default=/*#__PURE__*/_interopDefault(Tr);function Gr(l){Ge=l;}async function Dt(){if(Ge)try{let l=await Ge.findOne({collection:"_globals_system",where:{}});if(l){re={appSecret:l.appSecret||null,encryptionKey:l.encryptionKey||null,sessionConfig:l.sessionMaxAge||l.maxSessionsPerUser?{maxAge:(l.sessionMaxAge||7)*24*60*60*1e3,maxSessionsPerUser:l.maxSessionsPerUser||3}:null};return}}catch{}re={appSecret:process.env.APP_SECRET||"development-secret-key",encryptionKey:null,sessionConfig:null};}function lr(){return re?.appSecret?re.appSecret:process.env.APP_SECRET||"development-secret-key"}function Yr(){if(re?.encryptionKey)return re.encryptionKey;let l=lr();return dr__default.default.createHash("sha256").update(l).digest("hex")}function Ct(){return re?.sessionConfig?re.sessionConfig:{maxAge:10080*60*1e3,maxSessionsPerUser:3}}var Ge,re,Ye=chunkAHSFSERC_cjs.a(()=>{Ge=null,re=null;});var _t={};chunkAHSFSERC_cjs.b(_t,{SESSION_CONFIG:()=>te,clearSessionCookie:()=>et,createSession:()=>rt,deleteSession:()=>we,getClientIp:()=>Ze,getCurrentUser:()=>V,getSession:()=>pe,getSessionIdFromRequest:()=>Z,getUserSessions:()=>be,invalidateAllUserSessions:()=>fr,refreshSession:()=>De,setSessionCookie:()=>Qe,updateSessionName:()=>st,validateSession:()=>Ee});async function se(){return ke||(ke=unstorage.createStorage({driver:pr__default.default({base:".astro/sessions"})}),ke)}function mr(){return dr__default.default.randomUUID()}function Lt(l){let e="Unknown",t="Unknown",s="Unknown";return l.includes("Firefox")?e="Firefox":l.includes("Edg/")?e="Edge":l.includes("Chrome")?e="Chrome":l.includes("Safari")&&!l.includes("Chrome")&&(e="Safari"),l.includes("iPhone")?(t="iPhone",s="iOS"):l.includes("iPad")?(t="iPad",s="iOS"):l.includes("Mac")?(t="MacBook",s="macOS"):l.includes("Windows")?(t="Windows PC",s="Windows"):l.includes("Linux")?(t="Linux PC",s="Linux"):l.includes("Android")&&(t="Android Phone",s="Android"),{browser:e,device:t,platform:s}}function gr(l){if(!l?.userAgent)return "Session";let{browser:e,device:t}=Lt(l.userAgent);return `${t} - ${e}`}function Z(l){let e=l.headers.get("Cookie");return e&&Object.fromEntries(e.split("; ").map(s=>s.split("=")))[Je]||null}function Ze(l){let e=l.headers.get("x-forwarded-for");return e?e.split(",")[0].trim():l.headers.get("x-real-ip")||"unknown"}function Qe(l,e){let s=process.env.NODE_ENV==="production"?"Secure; ":"",i=new Headers(l.headers);return i.append("Set-Cookie",`${Je}=${e}; HttpOnly; Path=/; Max-Age=${te.absoluteMaxAge/1e3}; SameSite=Strict; ${s}`),new Response(l.body,{status:l.status,statusText:l.statusText,headers:i})}function et(l){let t=process.env.NODE_ENV==="production"?"Secure; ":"",s=new Headers(l.headers);return s.append("Set-Cookie",`${Je}=; HttpOnly; Path=/; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=Strict; ${t}`),new Response(l.body,{status:l.status,statusText:l.statusText,headers:s})}async function qe(l){return await(await se()).getItem(`user:${l}`)||[]}async function tt(l,e){let t=await se();e.length>0?await t.setItem(`user:${l}`,e):await t.removeItem(`user:${l}`);}async function rt(l,e){let t=await se(),s=await qe(l.id);for(;s.length>=te.maxSessionsPerUser;){let I=s.shift();I&&await t.removeItem(`session:${I}`);}let i=mr(),u=Date.now(),d=e?.headers.get("user-agent"),c=e?Ze(e):"unknown",g=d?{userAgent:d,ip:c,...Lt(d)}:{ip:c},f={id:i,userId:l.id,email:l.email,role:l.role,tenantId:l.tenantId,permissions:l.permissions,createdAt:u,expiresAt:u+te.absoluteMaxAge,lastActivityAt:u,deviceInfo:g,sessionName:gr(g)};return await t.setItem(`session:${i}`,f,{ttl:Math.floor(te.absoluteMaxAge/1e3)}),s.push(i),await tt(l.id,s),i}async function pe(l){return await(await se()).getItem(`session:${l}`)||null}async function Ee(l){let e=await pe(l);return e?e.expiresAt<Date.now()?(await we(l),{valid:false,reason:"Session expired"}):{valid:true}:{valid:false,reason:"Session not found"}}async function De(l,e){let t=await se(),s=await pe(l);if(!s)return null;let i=Date.now(),u=s.expiresAt-i,d=s.deviceInfo;if(e){let f=Ze(e);f!==s.deviceInfo?.ip&&(d={...s.deviceInfo,ip:f});}let c={...s,lastActivityAt:i,expiresAt:u<te.refreshThreshold?i+te.absoluteMaxAge:s.expiresAt,deviceInfo:d},g=u<te.refreshThreshold?te.absoluteMaxAge:void 0;return await t.setItem(`session:${l}`,c,g?{ttl:Math.floor(g/1e3)}:void 0),c}async function we(l){let e=await se(),t=await pe(l);if(t){let i=(await qe(t.userId)).filter(u=>u!==l);await tt(t.userId,i);}await e.removeItem(`session:${l}`),await e.removeItem(`activity:${l}`);}async function fr(l){let e=await qe(l),t=await se();for(let s of e)await t.removeItem(`session:${s}`),await t.removeItem(`activity:${s}`);await tt(l,[]);}async function be(l,e){let t=await qe(l),s=[];for(let i of t){let u=await pe(i);u&&s.push({id:u.id,sessionName:u.sessionName||"Session",deviceInfo:u.deviceInfo,createdAt:u.createdAt,lastActivityAt:u.lastActivityAt,currentSession:u.id===e});}return s.sort((i,u)=>u.lastActivityAt-i.lastActivityAt),s}async function st(l,e){let t=await pe(l);return t?(await(await se()).setItem(`session:${l}`,{...t,sessionName:e}),true):false}async function V(l){let e=Z(l);if(!e||!(await Ee(e)).valid)return null;let s=await pe(e);return s?(await De(e,l),s):null}var $t,te,Je,ke,Ce=chunkAHSFSERC_cjs.a(()=>{Ye();$t=Ct(),te={absoluteMaxAge:$t.maxAge,maxSessionsPerUser:$t.maxSessionsPerUser,refreshThreshold:300*1e3,activityDebounce:30*1e3,pollInterval:30*1e3},Je="kyro-session",ke=null;});function ue(l,e){for(let t of l){if(t.name===e)return t;if(t.type==="group"||t.type==="array"){let s=ue(t.fields||[],e);if(s)return s}if(t.type==="blocks")for(let s of t.blocks||[]){let i=ue(s.fields||[],e);if(i)return i}if(t.type==="tabs")for(let s of t.tabs||[]){let i=ue(s.fields||[],e);if(i)return i}if(t.type==="collapsible"||t.type==="row"){let s=ue(t.fields||[],e);if(s)return s}}return null}Ce();function Ft(l){let{db:t,userLookup:s}=l;return async function(u){let d=chunkNY47CFVP_cjs.f(u);if(d&&t){let g=await chunkNY47CFVP_cjs.e(d,t,s);if(g.valid&&g.user)return {user:g.user,tenantContext:Ot(g.user),apiKeyContext:chunkNY47CFVP_cjs.g(g),status:200,authType:"apikey"};if(g.error)return {status:401,error:g.error}}let c=Z(u);if(c)try{let g=await Ee(c);if(!g.valid)return {status:401,error:g.reason||"Session invalid"};let f=await V(u);if(f){let I=s?await s(f.userId):null;if(I)return {user:I,tenantContext:Ot(I),status:200,authType:"session"}}}catch(g){console.error("Session validation error:",g);}return {status:401,error:"Authentication required"}}}function Ot(l){return {tenantId:l.tenantId||"default",userId:l.id||"anonymous",role:l.role||"guest",roles:[l.role||"guest"],permissions:[],isSuperAdmin:l.role==="super_admin"}}Ye();var $e=class{storage=new Map;userStorage=new Map;limits;userLimits;constructor(e,t){this.limits={...hr,...e},this.userLimits=t||{"user:api":{window:6e4,max:500},"user:write":{window:36e5,max:100}};}getKey(e,t){return `${e}:${t}`}getUserKey(e,t,s){return `user:${e}:${t}:${s}`}cleanupOldEntries(e,t){let i=Date.now()-t;for(;e.length>0&&e[0].timestamp<i;)e.shift();}async check(e,t){let s=this.limits[e]||this.limits["api:general"],i=this.getKey(e,t),u=this.storage.get(i);u||(u=[],this.storage.set(i,u)),this.cleanupOldEntries(u,s.window);let d=Date.now(),c=u.reduce((g,f)=>g+f.count,0);if(u.push({timestamp:d,count:1}),c>=s.max){let f=u.reduce((I,b)=>I.timestamp<b.timestamp?I:b,u[0]).timestamp+s.window;return {allowed:false,remaining:0,resetAt:f,retryAfter:Math.ceil((f-d)/1e3)}}return {allowed:true,remaining:s.max-c-1,resetAt:d+s.window}}async checkUser(e,t,s){let i=this.userLimits[e]||this.userLimits["user:api"],u=this.userStorage.get(t),d=[];u?d=u.get(this.getKey(e,s))||[]:(this.userStorage.has(t)||this.userStorage.set(t,new Map),this.userStorage.get(t).set(this.getKey(e,s),d)),this.cleanupOldEntries(d,i.window);let c=Date.now(),g=d.reduce((f,I)=>f+I.count,0);if(d.push({timestamp:c,count:1}),g>=i.max){let I=d.reduce((b,j)=>b.timestamp<j.timestamp?b:j,d[0]).timestamp+i.window;return {allowed:false,remaining:0,resetAt:I,retryAfter:Math.ceil((I-c)/1e3)}}return {allowed:true,remaining:i.max-g-1,resetAt:c+i.window}}async reset(e,t){let s=this.getKey(e,t);this.storage.delete(s);}async resetUser(e,t,s){let i=this.userStorage.get(t);if(i){let u=this.getKey(e,s);i.delete(u);}}async getStatus(e,t){let s=this.limits[e]||this.limits["api:general"],i=this.getKey(e,t),u=this.storage.get(i);u||(u=[],this.storage.set(i,u)),this.cleanupOldEntries(u,s.window);let d=Date.now(),c=u.reduce((g,f)=>g+f.count,0);return {count:c,limit:s.max,remaining:Math.max(0,s.max-c),resetAt:d+s.window}}setLimit(e,t){this.limits[e]=t;}setUserLimit(e,t){this.userLimits[e]=t;}},hr={"auth:login":{window:9e5,max:5},"auth:register":{window:36e5,max:3},"auth:forgot":{window:36e5,max:3},"auth:reset":{window:36e5,max:5},"auth:verify":{window:36e5,max:5},"api:general":{window:6e4,max:100},"api:authenticated":{window:6e4,max:200}};var at={retentionDays:30};var Nt=class{redis;prefix;retentionDays;constructor(e,t=30,s="kyro:audit:"){this.redis=e,this.prefix=s,this.retentionDays=t;}async log(e){let t=dr.randomBytes(16).toString("hex"),s=new Date,i={...e,id:t,timestamp:s},u=this.getKeyForDate(s),d=`${this.prefix}log:${t}`;await this.redis.hset(d,this.serializeLog(i)),await this.redis.expire(d,this.retentionDays*24*60*60+3600),await this.redis.zadd(u,s.getTime(),t),await this.redis.expire(u,this.retentionDays*24*60*60+3600);let c=e.userId?`${this.prefix}user:${e.userId}`:null;return c&&(await this.redis.zadd(c,s.getTime(),t),await this.redis.expire(c,this.retentionDays*24*60*60+3600)),t}async get(e){let t=`${this.prefix}log:${e}`,s=await this.redis.hgetall(t);return !s||Object.keys(s).length===0?null:this.deserializeLog(s)}async query(e={}){let{limit:t=50,offset:s=0}=e,i=[];if(e.userId)i.push(`${this.prefix}user:${e.userId}`);else if(e.startDate||e.endDate)i=this.getKeysForDateRange(e.startDate,e.endDate);else {let g=new Date;i=this.getKeysForDateRange(new Date(g.getTime()-this.retentionDays*24*60*60*1e3),g);}let u=[];for(let g of i){let f=await this.redis.zrange(g,0,-1,"WITHSCORES");for(let I=0;I<f.length;I+=2)u.push([f[I],parseInt(f[I+1],10)]);}u.sort((g,f)=>f[1]-g[1]);let d=u.length;u=u.slice(s,s+t);let c=[];for(let[g]of u){let f=await this.get(g);f&&this.matchesFilter(f,e)&&c.push(f);}return {logs:c,total:d}}async getRecent(e=50){let t=[],s=new Date,i=this.getKeysForDateRange(new Date(s.getTime()-10080*60*1e3),s),u=[];for(let d of i){let c=await this.redis.zrange(d,0,-1,"WITHSCORES");for(let g=0;g<c.length;g+=2)u.push([c[g],parseInt(c[g+1],10)]);}u.sort((d,c)=>c[1]-d[1]);for(let[d]of u.slice(0,e)){let c=await this.get(d);c&&t.push(c);}return t}async getUserActivity(e,t=50){let s=`${this.prefix}user:${e}`,i=await this.redis.zrange(s,0,t-1),u=[];for(let d of i){let c=await this.get(d);c&&u.push(c);}return u}async getStats(e,t){let s=this.getKeysForDateRange(e||new Date(Date.now()-2592e6),t||new Date),i={},u=0,d=0,c=0,g=new Set;for(let f of s){let I=await this.redis.zrange(f,0,-1);for(let b of I){let j=await this.get(b);j&&(u++,i[j.action]=(i[j.action]||0)+1,j.success&&c++,j.action==="login_failed"&&d++,j.userId&&g.add(j.userId));}}return {totalEvents:u,byAction:i,successRate:u>0?c/u:1,failedLogins:d,uniqueUsers:g}}async cleanup(){let e=Date.now()-this.retentionDays*24*60*60*1e3,t=await this.redis.keys(`${this.prefix}date:*`),s=0;for(let i of t){let u=await this.redis.zrangebyscore(i,0,e);for(let d of u)await this.redis.del(`${this.prefix}log:${d}`),s++;await this.redis.zremrangebyscore(i,0,e);}return s}getKeyForDate(e){let t=e.getFullYear(),s=String(e.getMonth()+1).padStart(2,"0"),i=String(e.getDate()).padStart(2,"0");return `${this.prefix}date:${t}-${s}-${i}`}getKeysForDateRange(e,t){let s=[],i=e||new Date(Date.now()-this.retentionDays*24*60*60*1e3),u=t||new Date,d=new Date(i);for(;d<=u;)s.push(this.getKeyForDate(d)),d.setDate(d.getDate()+1);return s}matchesFilter(e,t){return !(t.action&&!(Array.isArray(t.action)?t.action:[t.action]).includes(e.action)||t.resource&&e.resource!==t.resource||t.resourceId&&e.resourceId!==t.resourceId||t.success!==void 0&&e.success!==t.success)}serializeLog(e){let t={id:e.id,timestamp:new Date(e.timestamp).toISOString(),action:e.action,resource:e.resource,success:e.success?"1":"0"};return e.userId&&(t.userId=e.userId),e.userEmail&&(t.userEmail=e.userEmail),e.role&&(t.role=e.role),e.resourceId&&(t.resourceId=e.resourceId),e.ipAddress&&(t.ipAddress=e.ipAddress),e.userAgent&&(t.userAgent=e.userAgent),e.error&&(t.error=e.error),e.changes&&(t.changes=JSON.stringify(e.changes)),e.metadata&&(t.metadata=JSON.stringify(e.metadata)),t}deserializeLog(e){return {id:e.id,timestamp:new Date(e.timestamp),action:e.action,userId:e.userId,userEmail:e.userEmail,role:e.role,resource:e.resource,resourceId:e.resourceId,ipAddress:e.ipAddress,userAgent:e.userAgent,success:e.success==="1",error:e.error,changes:e.changes?JSON.parse(e.changes):void 0,metadata:e.metadata?JSON.parse(e.metadata):void 0}}};function cs(l){return {ipAddress:l.headers.get("x-forwarded-for")?.split(",")[0]?.trim()||l.headers.get("x-real-ip")||"unknown",userAgent:l.headers.get("user-agent")||"unknown"}}var Mt=class{logs=[];retentionDays;constructor(e=at.retentionDays){this.retentionDays=e;}async log(e){let t=dr.randomBytes(16).toString("hex"),i={...e,id:t,timestamp:new Date};return this.logs.push(i),this.cleanupOldLogs(),t}async get(e){return this.logs.find(t=>t.id===e)||null}async query(e={}){let{limit:t=50,offset:s=0}=e,i=[...this.logs];if(e.userId&&(i=i.filter(f=>f.userId===e.userId)),e.action){let f=Array.isArray(e.action)?e.action:[e.action];i=i.filter(I=>f.includes(I.action));}e.resource&&(i=i.filter(f=>f.resource===e.resource)),e.resourceId&&(i=i.filter(f=>f.resourceId===e.resourceId)),e.success!==void 0&&(i=i.filter(f=>f.success===e.success));let u=e.startDate,d=e.endDate;u!==void 0&&(i=i.filter(f=>f.timestamp>=u)),d!==void 0&&(i=i.filter(f=>f.timestamp<=d)),i.sort((f,I)=>I.timestamp.getTime()-f.timestamp.getTime());let c=i.length;return {logs:i.slice(s,s+t),total:c}}async getRecent(e=50){let t=new Date(Date.now()-6048e5);return this.logs.filter(i=>i.timestamp>=t).sort((i,u)=>u.timestamp.getTime()-i.timestamp.getTime()).slice(0,e)}async getUserActivity(e,t=50){return this.logs.filter(i=>i.userId===e).sort((i,u)=>u.timestamp.getTime()-i.timestamp.getTime()).slice(0,t)}async getStats(e,t){let s=e||new Date(Date.now()-2592e6),i=t||new Date,u=this.logs.filter(b=>b.timestamp>=s&&b.timestamp<=i),d={},c=0,g=0,f=0,I=new Set;for(let b of u){c++;let j=b.action;d[j]=(d[j]||0)+1,b.success&&f++,b.action==="login_failed"&&g++,b.userId&&I.add(b.userId);}return {totalEvents:c,byAction:d,successRate:c>0?f/c:1,failedLogins:g,uniqueUsers:I}}async cleanup(){let e=new Date(Date.now()-this.retentionDays*24*60*60*1e3),t=this.logs.length;return this.logs=this.logs.filter(s=>s.timestamp>=e),t-this.logs.length}cleanupOldLogs(){let e=new Date(Date.now()-this.retentionDays*24*60*60*1e3);this.logs.length;this.logs=this.logs.filter(s=>s.timestamp>=e);}};Ce();var Le=class{authAdapter;email;passwordPolicy;lockout;rateLimiter;auditLogger;baseUrl;emailVerificationRequired;constructor(e){this.authAdapter=e.redis,this.email=e.email,this.passwordPolicy=e.passwordPolicy||new chunkAJAZ7D3W_cjs.c,this.lockout=e.lockout,this.rateLimiter=e.rateLimiter,this.auditLogger=e.auditLogger,this.baseUrl=e.baseUrl||"http://localhost:3000",this.emailVerificationRequired=e.emailVerificationRequired??true;}async register(e){let{ipAddress:t,userAgent:s}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let i=await this.rateLimiter.check("auth:register",t);if(!i.allowed)return this.rateLimitResponse(i)}try{let i=await e.json();if(!i.email||!i.password)return this.errorResponse("Email and password are required",400);if(i.password!==i.confirmPassword)return this.errorResponse("Passwords do not match",400);let u=this.passwordPolicy.validate(i.password);if(!u.valid)return this.errorResponse(u.errors.join(". "),400);if(await this.authAdapter.findUserByEmail(i.email))return this.errorResponse("Email already registered",400);let c=await this.authAdapter.createUser({email:i.email,password:i.password,role:i.role||"customer",tenantId:i.tenantId});if(this.emailVerificationRequired&&this.email){let g=dr.randomBytes(32).toString("hex"),f=`${this.baseUrl}/api/auth/verify?token=${g}`;await this.authAdapter.createSession(c.id,{ipAddress:t,userAgent:s});let I=this.email.getTemplates().verifyEmail(f,i.email);await this.email.send({to:i.email,...I});}return this.auditLogger&&await this.auditLogger.log({action:"register",userId:c.id,userEmail:c.email,resource:"auth",ipAddress:t,userAgent:s,success:!0}),this.jsonResponse({success:!0,message:"Registration successful",user:this.sanitizeUser(c),requiresVerification:this.emailVerificationRequired&&!!this.email},201)}catch(i){return console.error("[AuthRoutes.register] Registration error:",i),this.errorResponse("Registration failed",500)}}async login(e){let{ipAddress:t,userAgent:s}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let i=await this.rateLimiter.check("auth:login",t);if(!i.allowed)return this.rateLimitResponse(i)}try{let i=await e.json();if(!i.email||!i.password)return this.errorResponse("Email and password are required",400);let u=await this.authAdapter.findUserByEmail(i.email);if(!u)return await this.recordFailedLogin(t,s),this.errorResponse("Invalid credentials",401);if(u.locked)return this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:u.id,userEmail:u.email,resource:"auth",ipAddress:t,userAgent:s,success:!1,error:"Account locked"}),this.errorResponse("Account locked. Contact an administrator.",403);if(this.lockout){let I=await this.lockout.checkLockout(u.id);if(I.locked)return this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:u.id,userEmail:u.email,resource:"auth",ipAddress:t,userAgent:s,success:!1,error:"Account locked"}),this.errorResponse(`Account locked. Try again in ${Math.ceil((I.lockedUntil.getTime()-Date.now())/6e4)} minutes`,423)}if(!await this.authAdapter.verifyPassword(i.email,i.password))return await this.recordFailedLogin(t,s,u.id,u.email),this.errorResponse("Invalid credentials",401);this.lockout&&await this.lockout.resetAttempts(u.id),this.auditLogger&&await this.auditLogger.log({action:"login",userId:u.id,userEmail:u.email,role:u.role,resource:"auth",ipAddress:t,userAgent:s,success:!0}),await this.authAdapter.updateUser(u.id,{lastLogin:new Date().toISOString()});let c=await rt({id:u.id,email:u.email,role:u.role,tenantId:u.tenantId}),g={success:!0,user:this.sanitizeUser(u)},f=this.jsonResponse(g);return Qe(f,c)}catch(i){return console.error("[Auth] Login error:",i),this.errorResponse("Login failed",500)}}async logout(e){let t=Z(e);if(!t)return this.errorResponse("No session to logout",401);let{ipAddress:s,userAgent:i}=chunkHVXO3OFB_cjs.a(e);try{let u=await V(e);u&&(await we(t),this.auditLogger&&await this.auditLogger.log({action:"logout",userId:u.userId,userEmail:u.email,resource:"auth",ipAddress:s,userAgent:i,success:!0}));let d=this.jsonResponse({success:!0,message:"Logged out successfully"});return et(d)}catch{return this.errorResponse("Logout failed",500)}}async refresh(e){try{let t=Z(e);if(!t)return this.errorResponse("Not authenticated",401);let s=await De(t,e);return s?this.jsonResponse({success:!0,expiresAt:s.expiresAt}):this.errorResponse("Session not found",404)}catch(t){return console.error("[Auth] Session refresh error:",t),this.errorResponse("Session refresh failed",500)}}async me(e){let t=await V(e);return t?this.jsonResponse({success:true,user:{id:t.userId,email:t.email,role:t.role,tenantId:t.tenantId}}):this.errorResponse("Not authenticated",401)}async changePassword(e){let t=await V(e);if(!t)return this.errorResponse("Not authenticated",401);let{ipAddress:s,userAgent:i}=chunkHVXO3OFB_cjs.a(e);try{let u=await e.json(),{currentPassword:d,newPassword:c,confirmPassword:g}=u;if(!d||!c)return this.errorResponse("Current and new password required",400);if(c!==g)return this.errorResponse("Passwords do not match",400);let f=this.passwordPolicy.validate(c);if(!f.valid)return this.errorResponse(f.errors.join(". "),400);let I=await this.authAdapter.findUserById(t.userId);if(!I)return this.errorResponse("User not found",404);if(!(I.passwordHash?await this.authAdapter.verifyPassword(d,I.passwordHash):!1))return this.errorResponse("Current password is incorrect",401);let j=await this.authAdapter.getPasswordHistory?.(I.id,5);if(await this.authAdapter.isPasswordInHistory?.(c,I.id,5))return this.errorResponse("Password was recently used. Please choose a different password",400);let q=await this.authAdapter.hashPassword(c);if(I.passwordHash&&await this.authAdapter.addPasswordToHistory?.(I.id,I.passwordHash),await this.authAdapter.updateUser(I.id,{passwordHash:q}),await this.authAdapter.deleteUserSessions(I.id),this.email&&this.email.getTemplates){let O=this.email.getTemplates().passwordChanged(I.email);await this.email.send({to:I.email,...O});}return this.auditLogger&&await this.auditLogger.log({action:"password_change",userId:I.id,userEmail:I.email,resource:"auth",ipAddress:s,userAgent:i,success:!0}),this.jsonResponse({success:!0,message:"Password changed successfully"})}catch{return this.errorResponse("Password change failed",500)}}async forgotPassword(e){let{ipAddress:t,userAgent:s}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let i=await this.rateLimiter.check("auth:forgot",t);if(!i.allowed)return this.rateLimitResponse(i)}try{let i=await e.json(),{email:u}=i;if(!u)return this.errorResponse("Email required",400);let d=await this.authAdapter.findUserByEmail(u);if(!d)return this.jsonResponse({success:!0,message:"If the email exists, a reset link has been sent"});if(this.email){let c=dr.randomBytes(32).toString("hex"),g=`${this.baseUrl}/api/auth/reset-password?token=${c}`,f=this.email.getTemplates().resetPassword(g,d.email);await this.email.send({to:d.email,...f});}return this.auditLogger&&await this.auditLogger.log({action:"password_reset",userId:d.id,userEmail:d.email,resource:"auth",ipAddress:t,userAgent:s,success:!0}),this.jsonResponse({success:!0,message:"If the email exists, a reset link has been sent"})}catch{return this.errorResponse("Password reset request failed",500)}}async verifyEmail(e){if(!new URL(e.url).searchParams.get("token"))return this.errorResponse("Verification token required",400);try{return this.jsonResponse({success:!0,message:"Email verified"})}catch{return this.errorResponse("Email verification failed",500)}}async recordFailedLogin(e,t,s,i){this.lockout&&await this.lockout.recordFailedAttempt(s||e),this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:s,userEmail:i,resource:"auth",ipAddress:e,userAgent:t,success:false,error:"Invalid credentials"});}sanitizeUser(e){let{passwordHash:t,...s}=e;return s}jsonResponse(e,t=200){return new Response(JSON.stringify(e),{status:t,headers:{"Content-Type":"application/json","Cache-Control":"no-store, no-cache, must-revalidate, max-age=0"}})}async listSessions(e){let t=await V(e);if(!t)return this.errorResponse("Not authenticated",401);try{let s=await be(t.userId,Z(e)??void 0);return this.jsonResponse({sessions:s})}catch(s){return console.error("[AuthRoutes.listSessions] Error:",s),this.errorResponse("Failed to list sessions",500)}}async revokeSession(e,t){let s=await V(e);if(!s)return this.errorResponse("Not authenticated",401);try{let u=(await be(s.userId)).find(d=>d.id===t);return u?u.currentSession?this.errorResponse("Cannot revoke current session",400):(await we(t),this.jsonResponse({success:!0,message:"Session revoked"})):this.errorResponse("Session not found",404)}catch(i){return console.error("[AuthRoutes.revokeSession] Error:",i),this.errorResponse("Failed to revoke session",500)}}async revokeOtherSessions(e){let t=await V(e);if(!t)return this.errorResponse("Not authenticated",401);try{let s=await be(t.userId),i=Z(e);for(let u of s)u.currentSession||await we(u.id);return this.jsonResponse({success:!0,message:"Other sessions revoked"})}catch(s){return console.error("[AuthRoutes.revokeOtherSessions] Error:",s),this.errorResponse("Failed to revoke sessions",500)}}async renameSession(e,t){let s=await V(e);if(!s)return this.errorResponse("Not authenticated",401);try{if(!(await be(s.userId)).find(g=>g.id===t))return this.errorResponse("Session not found",404);let d=await e.json(),{name:c}=d;return !c||typeof c!="string"||c.trim().length===0?this.errorResponse("Invalid session name",400):(await st(t,c.trim()),this.jsonResponse({success:!0,message:"Session renamed"}))}catch(i){return console.error("[AuthRoutes.renameSession] Error:",i),this.errorResponse("Failed to rename session",500)}}async refreshSession(e){let t=Z(e);if(!t)return this.errorResponse("No session",401);try{let s=await(Ce(),chunkAHSFSERC_cjs.c(_t)).refreshSession(t,e);return s?this.jsonResponse({success:!0,expiresAt:s.expiresAt}):this.errorResponse("Session not found",404)}catch(s){return console.error("[AuthRoutes.refreshSession] Error:",s),this.errorResponse("Failed to refresh session",500)}}errorResponse(e,t){return new Response(JSON.stringify({success:false,error:e}),{status:t,headers:{"Content-Type":"application/json"}})}async rateLimitResponse(e){return new Response(JSON.stringify({success:false,error:"Too many requests",retryAfter:e.retryAfter}),{status:429,headers:{"Content-Type":"application/json","Retry-After":String(e.retryAfter||60)}})}};function me(l){let{uploadDir:e=Fe.join(Tr__default.default.cwd(),"public","uploads"),baseUrl:t="/uploads"}=l;async function s(d){fs.existsSync(d)||await promises.mkdir(d,{recursive:true});}function i(d){let c=Fe.extname(d).toLowerCase();return {".jpg":"image/jpeg",".jpeg":"image/jpeg",".png":"image/png",".gif":"image/gif",".webp":"image/webp",".avif":"image/avif",".svg":"image/svg+xml",".mp4":"video/mp4",".webm":"video/webm",".mov":"video/quicktime",".avi":"video/x-msvideo",".mp3":"audio/mpeg",".wav":"audio/wav",".ogg":"audio/ogg",".pdf":"application/pdf",".doc":"application/msword",".docx":"application/vnd.openxmlformats-officedocument.wordprocessingml.document",".xls":"application/vnd.ms-excel",".xlsx":"application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",".zip":"application/zip",".tar":"application/x-tar",".gz":"application/gzip",".rar":"application/vnd.rar",".7z":"application/x-7z-compressed"}[c]||"application/octet-stream"}async function u(d){try{let c=d.toString("hex",0,8);if(c.startsWith("89504e47")){let g=d.readUInt32BE(16),f=d.readUInt32BE(20);return {width:g,height:f}}if(c.startsWith("ffd8")){let g=2;for(;g<d.length&&d[g]===255;){let f=d[g+1];if(f===192||f===194){let I=d.readUInt16BE(g+5);return {width:d.readUInt16BE(g+7),height:I}}g+=2+d.readUInt16BE(g+2);}}}catch{}return {}}return ae({name:"local",displayName:"Local Storage",supportsDynamicResize:true,async upload(d,c){await s(e);let g=Buffer.from(await d.arrayBuffer()),f=dr.createHash("md5").update(g).digest("hex"),I=Fe.extname(d.name),b=c?.filename||`${f}${I}`,j=c?.folder||"",P=j?Fe.join(e,j):e;await s(P);let q=Fe.join(P,b);await promises.writeFile(q,g);let O=d.type.startsWith("image/")?await u(g):{},B=t||"/uploads",ne=j?`/${j}/${b}`:`/${b}`,D=B+ne;return {id:f,filename:b,originalName:d.name,mimeType:d.type||i(d.name),size:g.length,url:D,thumbnailUrl:d.type.startsWith("image/")?D:void 0,folder:j||void 0,provider:"local",metadata:{...O,...c?.metadata},createdAt:new Date().toISOString()}},async uploadFromUrl(d,c){let g=await fetch(d);if(!g.ok)throw new Error(`Failed to fetch file: ${g.statusText}`);let f=await g.blob(),I=g.headers.get("content-disposition"),b=c?.filename;if(!b&&I){let P=I.match(/filename[^;=\n]*=((['"]).*?\2|[^;\n]*)/);P&&(b=P[1].replace(/['"]/g,""));}b||(b=Fe.basename(new URL(d).pathname));let j=new File([f],b,{type:f.type||i(b)});return this.upload(j,c)},async delete(d){let c=Fe.join(e,d.replace(t+"/",""));try{await promises.unlink(c);}catch{}},async rename(d,c){let g=Fe.join(e,d.replace(t+"/","")),f=Fe.join(e,c);return await promises.rename(g,f),`${t}/${c}`},async list(d){let c=d?Fe.join(e,d):e;if(!fs.existsSync(c))return [];let g=[],f=await promises.readdir(c,{withFileTypes:true});for(let I of f)if(I.isFile()){let b=Fe.join(c,I.name),j=await promises.stat(b),P=`${t}${d?`/${d}`:""}/${I.name}`;g.push({id:dr.createHash("md5").update(I.name).digest("hex"),filename:I.name,originalName:I.name,mimeType:i(I.name),size:j.size,url:P,provider:"local",createdAt:j.birthtime.toISOString()});}return g},async exists(d){let c=Fe.join(e,d.replace(t+"/",""));return fs.existsSync(c)},async createFolder(d){let c=Fe.join(e,d);await promises.mkdir(c,{recursive:true});},async deleteFolder(d){let c=Fe.join(e,d);if(fs.existsSync(c)){let{rm:g}=await import('fs/promises');await g(c,{recursive:true,force:true});}}})}function nt(l){let e=(t,s)=>{if(!l.signKey)return t;let i=dr.createHmac("sha256",l.signKey).update(t+s.toString()).digest("hex");return s.set("s",i),t};return {name:"imgix",displayName:"Imgix",supportsDynamicResize:true,async upload(t,s){throw new Error("Imgix is a transformation service. Use another provider for uploads.")},async uploadFromUrl(t,s){let i=s?.filename||t.split("/").pop()||"file",u=await fetch(t);if(!u.ok)throw new Error(`Failed to fetch: ${u.statusText}`);let d=await u.blob();new File([d],i,{type:d.type});return {id:Buffer.from(t).toString("base64").slice(0,20),filename:i,originalName:i,mimeType:d.type,size:d.size,url:this.getImageUrl(t),thumbnailUrl:this.getImageUrl(t,{width:200,height:200,fit:"crop"}),provider:"imgix",createdAt:new Date().toISOString()}},async delete(t){},async rename(t,s){return `https://${l.domain}/${s}`},getImageUrl(t,s){let i=new URL(t),u=new URLSearchParams(i.search);l.defaultParameters&&Object.entries(l.defaultParameters).forEach(([c,g])=>{u.has(c)||u.set(c,g);}),s&&(s.width&&u.set("w",String(s.width)),s.height&&u.set("h",String(s.height)),s.quality&&u.set("q",String(s.quality)),s.format&&u.set("fm",s.format),s.fit&&u.set("fit",s.fit),s.blur&&u.set("blur",String(s.blur)),s.sharpen&&u.set("sharp",String(s.sharpen))),u.set("auto","compress,format");i.pathname+"?"+u.toString();return l.signKey&&(e(i.pathname+u.toString(),u)),`https://${l.domain}${i.pathname}${u.toString()?"?"+u.toString():""}`},async generateThumbnail(t){return this.getImageUrl(t.url,{width:200,height:200,fit:"crop"})},async list(){return []},async exists(t){try{return (await fetch(t,{method:"HEAD"})).ok}catch{return  false}},async createFolder(){},async deleteFolder(){}}}function Oe(l,e){return e.cdnUrl?`${e.cdnUrl.replace(/\/$/,"")}/${l}`:`https://${e.storageZone}.b-cdn.net/${l}`}function it(l){return l.cdnUrl?l.cdnUrl.replace(/\/$/,"")+"/":`https://${l.storageZone}.b-cdn.net/`}function ot(l){let e=`https://storage.bunnycdn.com/${l.storageZone}`,t=s=>`${l.prefix?`${l.prefix}/`:""}${s}`.replace(/\/+/g,"/");return ae({name:"bunny",displayName:"Bunny.net Storage",supportsDynamicResize:true,async upload(s,i){let u=t(`${i?.folder?`${i.folder}/`:""}${i?.filename||s.name}`),d=Buffer.from(await s.arrayBuffer()),c=await fetch(`${e}/${u}`,{method:"PUT",headers:{AccessKey:l.apiKey,"Content-Type":s.type},body:d});if(!c.ok){let g=await c.text();throw new Error(`Bunny.net upload failed: ${c.status} ${g}`)}return {id:Buffer.from(u).toString("base64url"),filename:i?.filename||s.name,originalName:s.name,mimeType:s.type,size:d.length,url:Oe(u,l),thumbnailUrl:s.type.startsWith("image/")?Oe(u,l):void 0,folder:i?.folder,provider:"bunny",metadata:i?.metadata,createdAt:new Date().toISOString()}},async delete(s){let i=s.replace(it(l),""),u=await fetch(`${e}/${i}`,{method:"DELETE",headers:{AccessKey:l.apiKey}});if(!u.ok&&u.status!==404){let d=await u.text();throw new Error(`Bunny.net delete failed: ${u.status} ${d}`)}},async rename(s,i){let u=s.replace(it(l),""),d=l.prefix?`${l.prefix}/${i}`:i,c=await fetch(`${e}/${u}`,{method:"GET",headers:{AccessKey:l.apiKey}});if(!c.ok)throw new Error("Bunny.net rename failed: could not read old file");let g=await c.arrayBuffer();return await fetch(`${e}/${d}`,{method:"PUT",headers:{AccessKey:l.apiKey,"Content-Type":c.headers.get("Content-Type")||"application/octet-stream"},body:g}),await this.delete(s),Oe(d,l)},async list(s){let i=t(s||""),u=await fetch(`${e}/${i}`,{method:"GET",headers:{AccessKey:l.apiKey}});if(!u.ok){let c=await u.text();throw new Error(`Bunny.net list failed: ${u.status} ${c}`)}return (await u.json()).map(c=>({id:Buffer.from(c.ObjectName||"").toString("base64url"),filename:c.ObjectName?.split("/").pop()||"",originalName:c.ObjectName?.split("/").pop()||"",mimeType:"application/octet-stream",size:c.Length||0,url:Oe(c.ObjectName||"",l),provider:"bunny",createdAt:c.LastChanged||new Date().toISOString()}))},async exists(s){let i=s.replace(it(l),"");return (await fetch(`${e}/${i}`,{method:"HEAD",headers:{AccessKey:l.apiKey}})).ok},async createFolder(s){let i=t(`${s}/`);await fetch(`${e}/${i}`,{method:"PUT",headers:{AccessKey:l.apiKey,"Content-Length":"0"},body:""});},async deleteFolder(s){let i=t(`${s}/`);await fetch(`${e}/${i}`,{method:"DELETE",headers:{AccessKey:l.apiKey}});}})}var lt=class{providers=new Map;providerToPlugin=new Map;disabledPlugins=new Set;constructor(){this.registerLocal(),this.registerImgix(),this.registerBunny();}registerLocal(){this.register({type:"local",displayName:"Local Server",configKey:"local",configFields:[{name:"uploadDir",type:"text",label:"Upload Directory",defaultValue:"./public/uploads"},{name:"baseUrl",type:"text",label:"Base URL",defaultValue:"/uploads"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>{let t=e?.local||e,s=(t?.uploadDir||"").trim(),i;s?Fe__default.default.isAbsolute(s)?i=s:s.includes("/")||s.includes("\\")?i=Fe__default.default.resolve(process.cwd(),s):i=Fe__default.default.join(process.cwd(),"public",s):i=Fe__default.default.join(process.cwd(),"public","uploads");let u=(t?.baseUrl||"").trim(),d;return u?d=u.startsWith("/")?u:`/${u}`:d="/uploads",{uploadDir:i,baseUrl:d}},factory:e=>me(e)});}registerImgix(){this.register({type:"imgix",displayName:"Imgix",configKey:"imgix",configFields:[{name:"domain",type:"text",label:"Domain",required:true},{name:"signKey",type:"password",label:"Sign Key"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>e?.imgix||e,factory:e=>nt(e)});}registerBunny(){this.register({type:"bunny",displayName:"Bunny.net",configKey:"bunny",configFields:[{name:"storageZone",type:"text",label:"Storage Zone",required:true},{name:"apiKey",type:"password",label:"API Key",required:true},{name:"cdnUrl",type:"text",label:"CDN URL"},{name:"prefix",type:"text",label:"Path Prefix"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>e?.bunny||e,factory:e=>ot(e)});}register(e){if(this.providers.has(e.type)){console.warn(`[StorageRegistry] Provider "${e.type}" already registered, skipping`);return}e.pluginName&&this.providerToPlugin.set(e.type,e.pluginName),this.providers.set(e.type,e);}unregister(e){this.providers.delete(e),this.providerToPlugin.delete(e);}get(e){return this.providers.get(e)}getAll(){return Array.from(this.providers.values())}getAllAvailable(e){let t=this.getAll();return e?t.filter(s=>s.pluginName?e(s.pluginName):true):t}has(e){return this.providers.has(e)}async resolve(e,t){let s=this.providers.get(e);if(!s)throw new Error(`Unknown storage provider type: "${e}". Is the plugin that provides it enabled?`);if(s.pluginName&&this.disabledPlugins.has(s.pluginName))throw new Error(`Storage provider "${e}" is not available (plugin "${s.pluginName}" is disabled)`);let i=s.configKey||e,u=s.extractConfig(t,i);return s.factory(u)}async resolveWithConfig(e,t){let s=this.providers.get(e);if(!s)throw new Error(`Unknown storage provider type: "${e}". Is the plugin that provides it enabled?`);if(s.pluginName&&this.disabledPlugins.has(s.pluginName))throw new Error(`Storage provider "${e}" is not available (plugin "${s.pluginName}" is disabled)`);let i=s.extractRawConfig(t);return s.factory(i)}getProviderPluginName(e){return this.providerToPlugin.get(e)}getAllPluginNames(){return Array.from(new Set(this.providerToPlugin.values()))}setPluginEnabled(e,t){t?this.disabledPlugins.delete(e):this.disabledPlugins.add(e);}isPluginEnabled(e){return !this.disabledPlugins.has(e)}},dt=null;function ct(){return dt||(dt=new lt),dt}function Gt(l){if(!l)return "";if(l.startsWith("pub-"))return l;let e=l.match(/pub-[a-zA-Z0-9]+/i);return e?e[0]:""}function qr(l,e){let t=l.startsWith("/")?l.slice(1):l;if(e.cdnUrl)return `${e.cdnUrl.replace(/\/$/,"")}/${t}`;switch(e.provider){case "r2":{let s=Gt(e.publicDevUrl);return s?`https://${s}.r2.dev/${t}`:`https://${e.bucket}.${e.accountId}.r2.cloudflarestorage.com/${t}`}case "gcs":return `https://storage.googleapis.com/${e.bucket}/${t}`;case "digitalocean":return `https://${e.bucket}.${e.region}.cdn.digitaloceanspaces.com/${t}`;case "backblaze":return `https://${e.bucket}.s3.backblazeb2.com/${t}`;case "wasabi":return `https://${e.bucket}.s3.wasabisys.com/${t}`;default:return `https://${e.bucket}.s3.${e.region}.amazonaws.com/${t}`}}function pt(l){if(l.cdnUrl)return l.cdnUrl.replace(/\/$/,"")+"/";switch(l.provider){case "r2":{let e=Gt(l.publicDevUrl);return e?`https://${e}.r2.dev/`:`https://${l.bucket}.${l.accountId}.r2.cloudflarestorage.com/`}case "gcs":return `https://storage.googleapis.com/${l.bucket}/`;case "digitalocean":return `https://${l.bucket}.${l.region}.cdn.digitaloceanspaces.com/`;case "backblaze":return `https://${l.bucket}.s3.backblazeb2.com/`;case "wasabi":return `https://${l.bucket}.s3.wasabisys.com/`;default:return `https://${l.bucket}.s3.${l.region}.amazonaws.com/`}}function Er(l){switch(l){case "r2":return "Cloudflare R2";case "gcs":return "Google Cloud Storage";case "digitalocean":return "DigitalOcean Spaces";case "backblaze":return "Backblaze B2";case "wasabi":return "Wasabi";default:return "AWS S3"}}function Dr(l){let e=new clientS3.S3Client({region:l.region||"auto",endpoint:l.endpoint,credentials:{accessKeyId:l.accessKeyId,secretAccessKey:l.secretAccessKey},forcePathStyle:true,tls:true,...l.provider==="r2"&&{requestHandler:new nodeHttpHandler.NodeHttpHandler}}),t=i=>`${l.prefix?`${l.prefix}/`:""}${i}`.replace(/\/+/g,"/"),s=i=>qr(i,l);return ae({name:l.provider,displayName:Er(l.provider),supportsDynamicResize:true,async upload(i,u){let d=t(`${u?.folder?`${u.folder}/`:""}${u?.filename||i.name}`),c=Buffer.from(await i.arrayBuffer());await e.send(new clientS3.PutObjectCommand({Bucket:l.bucket,Key:d,Body:c,ContentType:i.type,Metadata:u?.metadata}));let g=await e.send(new clientS3.HeadObjectCommand({Bucket:l.bucket,Key:d}));return {id:Buffer.from(d).toString("base64url"),filename:u?.filename||i.name,originalName:i.name,mimeType:i.type,size:c.length,url:s(d),thumbnailUrl:i.type.startsWith("image/")?s(d):void 0,folder:u?.folder,provider:l.provider,metadata:{...u?.metadata,etag:g.ETag},createdAt:new Date().toISOString()}},async delete(i){let u=i.replace(pt(l),"");await e.send(new clientS3.DeleteObjectCommand({Bucket:l.bucket,Key:u}));},async rename(i,u){let d=i.replace(pt(l),""),c=l.prefix?`${l.prefix}/${u}`:u;return await e.send(new clientS3.CopyObjectCommand({Bucket:l.bucket,CopySource:`${l.bucket}/${d}`,Key:c})),await e.send(new clientS3.DeleteObjectCommand({Bucket:l.bucket,Key:d})),s(c)},async list(i){let u=t(i||"");return ((await e.send(new clientS3.ListObjectsV2Command({Bucket:l.bucket,Prefix:u}))).Contents||[]).map(c=>({id:Buffer.from(c.Key||"").toString("base64url"),filename:c.Key?.split("/").pop()||"",originalName:c.Key?.split("/").pop()||"",mimeType:"application/octet-stream",size:c.Size||0,url:s(c.Key||""),provider:l.provider,createdAt:c.LastModified?.toISOString()||new Date().toISOString()}))},async exists(i){try{let u=i.replace(pt(l),"");return await e.send(new clientS3.HeadObjectCommand({Bucket:l.bucket,Key:u})),!0}catch{return  false}},async createFolder(i){let u=t(`${i}/`);await e.send(new clientS3.PutObjectCommand({Bucket:l.bucket,Key:u,Body:""}));},async deleteFolder(i){let u=t(`${i}/`),d;do{let c=await e.send(new clientS3.ListObjectsV2Command({Bucket:l.bucket,Prefix:u,ContinuationToken:d}));if(c.Contents?.length){let g=c.Contents.map(f=>({Key:f.Key}));await e.send(new clientS3.DeleteObjectsCommand({Bucket:l.bucket,Delete:{Objects:g}}));}d=c.IsTruncated?c.NextContinuationToken:void 0;}while(d);await e.send(new clientS3.DeleteObjectCommand({Bucket:l.bucket,Key:u}));}})}function Cr(l){let e=()=>`https://api.cloudinary.com/v1_1/${l.cloudName}/upload`,t=async s=>{let i=await import('crypto'),u=Object.keys(s).sort().map(d=>`${d}=${s[d]}`).join("&");return i.createHash("sha256").update(u+l.apiSecret).digest("hex")};return {name:"cloudinary",displayName:"Cloudinary",supportsDynamicResize:true,async upload(s,i){let u=new FormData;if(u.append("file",s),l.uploadPreset)u.append("upload_preset",l.uploadPreset);else {let g=Math.round(Date.now()/1e3),f={timestamp:String(g)};(i?.folder||l.folder)&&(f.folder=i?.folder||l.folder||"");let I=await t(f);u.append("timestamp",String(g)),u.append("signature",I),u.append("api_key",l.apiKey);}(i?.folder||l.folder)&&u.append("folder",i?.folder||l.folder||"");let d=await fetch(e(),{method:"POST",body:u});if(!d.ok){let g=await d.json();throw new Error(`Cloudinary upload failed: ${g.error?.message||d.statusText}`)}let c=await d.json();return {id:c.public_id,filename:`${c.public_id}.${c.format}`,originalName:c.original_filename||s.name,mimeType:s.type||`image/${c.format}`,size:c.bytes,url:c.secure_url,thumbnailUrl:this.getImageUrl(c.secure_url,{width:200,height:200,fit:"crop"}),width:c.width,height:c.height,folder:i?.folder||l.folder,provider:"cloudinary",createdAt:new Date().toISOString()}},async uploadFromUrl(s,i){let u=new FormData;u.append("file",s),u.append("upload_preset","ml_default"),(i?.folder||l.folder)&&u.append("folder",i?.folder||l.folder||"");let d=await fetch(e(),{method:"POST",body:u});if(!d.ok)throw new Error("Cloudinary upload failed");let c=await d.json();return {id:c.public_id,filename:`${c.public_id}.${c.format}`,originalName:c.original_filename||s.split("/").pop()||"file",mimeType:`image/${c.format}`,size:c.bytes,url:c.secure_url,thumbnailUrl:this.getImageUrl(c.secure_url,{width:200,height:200,fit:"crop"}),width:c.width,height:c.height,provider:"cloudinary",createdAt:new Date().toISOString()}},async delete(s){try{let i=s.split("/image/upload/");if(i.length!==2){console.warn("[Cloudinary delete] Could not parse URL:",s);return}let u=i[1].replace(/^v\d+\//,"").replace(/\.[^.]+$/,""),d=Math.round(Date.now()/1e3),c={timestamp:String(d),public_id:u},g=Object.keys(c).sort().map(q=>`${q}=${c[q]}`).join("&"),I=(await import('crypto')).createHash("sha256").update(g+l.apiSecret).digest("hex"),b=`https://api.cloudinary.com/v1_1/${l.cloudName}/image/destroy`,j=new FormData;j.append("public_id",u),j.append("timestamp",String(d)),j.append("signature",I),j.append("api_key",l.apiKey);let P=await fetch(b,{method:"POST",body:j});if(!P.ok){let q=await P.json();console.warn("[Cloudinary delete] Failed:",q);}}catch(i){console.warn("[Cloudinary delete] Error:",i.message);}},async rename(s,i){let u="",d=i.replace(/\.[^.]+$/,""),c="";try{let g=s.split("/image/upload/");if(g.length!==2)return console.warn("[Cloudinary rename] Could not parse old URL:",s),s;let f=g[1],I=f.match(/^(v\d+)\//);u=I?I[1]:"";let b=f.replace(/^v\d+\//,"").replace(/\.[^.]+$/,""),j=b.split("/");c=j.length>1?j.slice(0,-1).join("/"):"";let P=i.replace(/\.[^.]+$/,"");d=c?`${c}/${P}`:P;let q=Math.round(Date.now()/1e3),O={from_public_id:b,to_public_id:d,timestamp:String(q)},B=Object.keys(O).sort().map(T=>`${T}=${O[T]}`).join("&"),D=(await import('crypto')).createHash("sha256").update(B+l.apiSecret).digest("hex"),Y=new FormData;Y.append("from_public_id",b),Y.append("to_public_id",d),Y.append("timestamp",String(q)),Y.append("signature",D),Y.append("api_key",l.apiKey);let Q=await fetch(`https://api.cloudinary.com/v1_1/${l.cloudName}/image/rename`,{method:"POST",body:Y});if(Q.ok)return (await Q.json()).secure_url;{let T=await Q.json();console.warn("[Cloudinary rename] Failed:",T);let ee=u?`/${u}/`:"/";return `https://res.cloudinary.com/${l.cloudName}/image/upload${ee}${d}.${i.split(".").pop()}`}}catch(g){console.warn("[Cloudinary rename] Error:",g.message);let f=u?`/${u}/`:"/";return `https://res.cloudinary.com/${l.cloudName}/image/upload${f}${d}.${i.split(".").pop()}`}},getImageUrl(s,i){if(!i)return s;let u=s.split("/upload/");if(u.length!==2)return s;let d=[];if(i.width&&d.push(`w_${i.width}`),i.height&&d.push(`h_${i.height}`),i.fit){let g={crop:"c_fill",clip:"c_fit",scale:"c_scale",fill:"c_fill"};d.push(g[i.fit]||"c_limit");}i.quality&&d.push(`q_${i.quality}`),i.format&&d.push(`f_${i.format}`);let c=d.join(",");return `${u[0]}/upload/${c}/${u[1]}`},async generateThumbnail(s){return this.getImageUrl(s.url,{width:200,height:200,fit:"crop"})},async list(){return []},async exists(s){return (await fetch(s,{method:"HEAD"})).ok},async createFolder(){},async deleteFolder(){}}}function _r(l){let e=null;async function t(){return e||(e=new basicFtp.Client(6e4,{allowSeparateTransferHost:true}),e.ftp.verbose=false,await e.access({host:l.host,port:l.port||21,user:l.user,password:l.password,secure:l.secure,secureOptions:{}})),e}let s=d=>`${l.prefix?`${l.prefix}/`:""}${d}`.replace(/\/+/g,"/"),i=d=>`${l.baseUrl.replace(/\/$/,"")}/${d}`,u=()=>l.baseUrl.replace(/\/$/,"")+"/";return ae({name:l.type,displayName:l.type==="sftp"?"SFTP Storage":"FTP Storage",supportsDynamicResize:false,async upload(d,c){let g=await t(),f=s(`${c?.folder?`${c.folder}/`:""}${c?.filename||d.name}`),I=Buffer.from(await d.arrayBuffer()),b=f.split("/").slice(0,-1),j="";for(let q of b){j=j?`${j}/${q}`:q;try{await g.ensureDir(j);}catch{}}let P=stream.Readable.from(I);return await g.uploadFrom(P,f),{id:Buffer.from(f).toString("base64url"),filename:c?.filename||d.name,originalName:d.name,mimeType:d.type,size:I.length,url:i(f),thumbnailUrl:d.type.startsWith("image/")?i(f):void 0,folder:c?.folder,provider:l.type,metadata:c?.metadata,createdAt:new Date().toISOString()}},async delete(d){let c=await t(),g=d.replace(u(),"");await c.remove(g);},async rename(d,c){let g=await t(),f=d.replace(u(),""),I=l.prefix?`${l.prefix}/${c}`:c;return await g.rename(f,I),i(I)},async list(d){let c=await t(),g=s(d||""),f;try{f=await c.list(g);}catch{return []}return f.filter(I=>I.type===0).map(I=>({id:Buffer.from(`${g}/${I.name}`).toString("base64url"),filename:I.name,originalName:I.name,mimeType:"application/octet-stream",size:Number(I.size)||0,url:i(`${g}/${I.name}`.replace(/\/+/g,"/")),provider:l.type,createdAt:I.modifiedAt?I.modifiedAt.toISOString():new Date().toISOString()}))},async exists(d){let c=await t(),g=d.replace(u(),"");try{return await c.size(g),!0}catch{return  false}},async createFolder(d){let c=await t(),g=s(d);await c.ensureDir(g);},async deleteFolder(d){let c=await t(),g=s(d);await c.removeDir(g);}})}async function Yt(l){let e=l.getStorageConfig(),t=ct();try{return await t.resolve(e.type,e)}catch(s){return console.warn(`[resolveProvider] ${s.message} \u2014 falling back to local storage`),me({uploadDir:Fe__default.default.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"})}}function ae(l){return {async uploadFromUrl(e,t){let s=await fetch(e);if(!s.ok)throw new Error(`Failed to fetch: ${s.statusText}`);let i=await s.blob(),u=e.split("/").pop()||"file",d=new File([i],u,{type:i.type});return this.upload(d,t)},getImageUrl(e,t){if(!t||Object.keys(t).length===0)return e;let s=new URLSearchParams({url:e});return t.width&&s.set("w",String(t.width)),t.height&&s.set("h",String(t.height)),t.quality&&s.set("q",String(t.quality)),t.format&&s.set("f",t.format),t.cropWidth&&t.cropHeight&&(s.set("cx",String(t.cropX??0)),s.set("cy",String(t.cropY??0)),s.set("cw",String(t.cropWidth)),s.set("ch",String(t.cropHeight))),`/api/media/resize?${s.toString()}`},async generateThumbnail(e){return this.getImageUrl(e.url,{width:400,height:400})},...l}}async function Jt(l){if(!l)return console.warn("[resolveProviderWithConfig] No config, using local"),me({uploadDir:Fe__default.default.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"});let e=l.type||"local",t=ct();try{return await t.resolveWithConfig(e,l)}catch(s){return console.warn(`[resolveProviderWithConfig] ${s.message} \u2014 falling back to local storage`),me({uploadDir:Fe__default.default.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"})}}async function Zt(l){let e=await gt__default.default(l).metadata(),t=gt__default.default(l).webp({quality:85}),s=gt__default.default(l).resize({width:500,withoutEnlargement:true}).webp({quality:80});return {buffer:await t.toBuffer(),thumbnailBuffer:await s.toBuffer(),width:e.width,height:e.height,format:"webp"}}var Qt=false,Ne=class l{db;storage;dialect;genId;mediaTable="media";foldersTable="media_folders";constructor(e,t,s){this.db=e,this.storage=t,this.dialect=s?.dialect||"sqlite",this.genId=s?.genId||chunk5KGQOTLK_cjs.e;}static async init(e,t){let s;if(t?.storageConfig)s=await Jt(t.storageConfig);else {let u=new chunkAJAZ7D3W_cjs.a(e);await u.load(),s=await Yt(u);}let i=new l(e,s,t);return await i.ensureTables(),i}async ensureTables(){if(this.dialect==="sqlite")this.db.exec(`
+'use strict';var chunkAJAZ7D3W_cjs=require('./chunk-AJAZ7D3W.cjs'),chunkGFU7AOI3_cjs=require('./chunk-GFU7AOI3.cjs'),chunkET6NN2V2_cjs=require('./chunk-ET6NN2V2.cjs'),chunkHVXO3OFB_cjs=require('./chunk-HVXO3OFB.cjs'),chunkWE46GGL4_cjs=require('./chunk-WE46GGL4.cjs'),chunkNY47CFVP_cjs=require('./chunk-NY47CFVP.cjs'),chunkZ7CNY2UV_cjs=require('./chunk-Z7CNY2UV.cjs'),chunkGYQMNXXW_cjs=require('./chunk-GYQMNXXW.cjs'),chunkUCCFT5OO_cjs=require('./chunk-UCCFT5OO.cjs'),chunkATLSIYRH_cjs=require('./chunk-ATLSIYRH.cjs'),chunkQ3Q7BJVQ_cjs=require('./chunk-Q3Q7BJVQ.cjs'),chunkAHSFSERC_cjs=require('./chunk-AHSFSERC.cjs'),lr=require('crypto'),unstorage=require('unstorage'),mr=require('unstorage/drivers/fs'),hono=require('hono'),Ne=require('path'),fs=require('fs'),ft=require('sharp'),promises=require('fs/promises'),Rr=require('process'),clientS3=require('@aws-sdk/client-s3'),nodeHttpHandler=require('@smithy/node-http-handler'),stream=require('stream'),basicFtp=require('basic-ftp'),zodToJsonSchema=require('zod-to-json-schema');function _interopDefault(e){return e&&e.__esModule?e:{default:e}}var lr__default=/*#__PURE__*/_interopDefault(lr);var mr__default=/*#__PURE__*/_interopDefault(mr);var Ne__default=/*#__PURE__*/_interopDefault(Ne);var ft__default=/*#__PURE__*/_interopDefault(ft);var Rr__default=/*#__PURE__*/_interopDefault(Rr);function Yr(d){Ye=d;}async function Ct(){if(Ye)try{let d=await Ye.findOne({collection:"_globals_system",where:{}});if(d){re={appSecret:d.appSecret||null,encryptionKey:d.encryptionKey||null,sessionConfig:d.sessionMaxAge||d.maxSessionsPerUser?{maxAge:(d.sessionMaxAge||7)*24*60*60*1e3,maxSessionsPerUser:d.maxSessionsPerUser||3}:null};return}}catch{}re={appSecret:process.env.APP_SECRET||"development-secret-key",encryptionKey:null,sessionConfig:null};}function cr(){return re?.appSecret?re.appSecret:process.env.APP_SECRET||"development-secret-key"}function Jr(){if(re?.encryptionKey)return re.encryptionKey;let d=cr();return lr__default.default.createHash("sha256").update(d).digest("hex")}function $t(){return re?.sessionConfig?re.sessionConfig:{maxAge:10080*60*1e3,maxSessionsPerUser:3}}var Ye,re,Je=chunkAHSFSERC_cjs.a(()=>{Ye=null,re=null;});var Ot={};chunkAHSFSERC_cjs.b(Ot,{SESSION_CONFIG:()=>te,clearSessionCookie:()=>tt,createSession:()=>st,deleteSession:()=>we,getClientIp:()=>Qe,getCurrentUser:()=>V,getSession:()=>pe,getSessionIdFromRequest:()=>Z,getUserSessions:()=>be,invalidateAllUserSessions:()=>hr,refreshSession:()=>Ce,setSessionCookie:()=>et,updateSessionName:()=>at,validateSession:()=>De});async function se(){return qe||(qe=unstorage.createStorage({driver:mr__default.default({base:".astro/sessions"})}),qe)}function gr(){return lr__default.default.randomUUID()}function _t(d){let e="Unknown",t="Unknown",s="Unknown";return d.includes("Firefox")?e="Firefox":d.includes("Edg/")?e="Edge":d.includes("Chrome")?e="Chrome":d.includes("Safari")&&!d.includes("Chrome")&&(e="Safari"),d.includes("iPhone")?(t="iPhone",s="iOS"):d.includes("iPad")?(t="iPad",s="iOS"):d.includes("Mac")?(t="MacBook",s="macOS"):d.includes("Windows")?(t="Windows PC",s="Windows"):d.includes("Linux")?(t="Linux PC",s="Linux"):d.includes("Android")&&(t="Android Phone",s="Android"),{browser:e,device:t,platform:s}}function fr(d){if(!d?.userAgent)return "Session";let{browser:e,device:t}=_t(d.userAgent);return `${t} - ${e}`}function Z(d){let e=d.headers.get("Cookie");return e&&Object.fromEntries(e.split("; ").map(s=>s.split("=")))[Ze]||null}function Qe(d){let e=d.headers.get("x-forwarded-for");return e?e.split(",")[0].trim():d.headers.get("x-real-ip")||"unknown"}function et(d,e){let s=process.env.NODE_ENV==="production"?"Secure; ":"",i=new Headers(d.headers);return i.append("Set-Cookie",`${Ze}=${e}; HttpOnly; Path=/; Max-Age=${te.absoluteMaxAge/1e3}; SameSite=Strict; ${s}`),new Response(d.body,{status:d.status,statusText:d.statusText,headers:i})}function tt(d){let t=process.env.NODE_ENV==="production"?"Secure; ":"",s=new Headers(d.headers);return s.append("Set-Cookie",`${Ze}=; HttpOnly; Path=/; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=Strict; ${t}`),new Response(d.body,{status:d.status,statusText:d.statusText,headers:s})}async function Ee(d){return await(await se()).getItem(`user:${d}`)||[]}async function rt(d,e){let t=await se();e.length>0?await t.setItem(`user:${d}`,e):await t.removeItem(`user:${d}`);}async function st(d,e){let t=await se(),s=await Ee(d.id);for(;s.length>=te.maxSessionsPerUser;){let I=s.shift();I&&await t.removeItem(`session:${I}`);}let i=gr(),u=Date.now(),l=e?.headers.get("user-agent"),c=e?Qe(e):"unknown",g=l?{userAgent:l,ip:c,..._t(l)}:{ip:c},f={id:i,userId:d.id,email:d.email,role:d.role,tenantId:d.tenantId,permissions:d.permissions,createdAt:u,expiresAt:u+te.absoluteMaxAge,lastActivityAt:u,deviceInfo:g,sessionName:fr(g)};return await t.setItem(`session:${i}`,f,{ttl:Math.floor(te.absoluteMaxAge/1e3)}),s.push(i),await rt(d.id,s),i}async function pe(d){return await(await se()).getItem(`session:${d}`)||null}async function De(d){let e=await pe(d);return e?e.expiresAt<Date.now()?(await we(d),{valid:false,reason:"Session expired"}):{valid:true}:{valid:false,reason:"Session not found"}}async function Ce(d,e){let t=await se(),s=await pe(d);if(!s)return null;let i=Date.now(),u=s.expiresAt-i,l=s.deviceInfo;if(e){let f=Qe(e);f!==s.deviceInfo?.ip&&(l={...s.deviceInfo,ip:f});}let c={...s,lastActivityAt:i,expiresAt:u<te.refreshThreshold?i+te.absoluteMaxAge:s.expiresAt,deviceInfo:l},g=u<te.refreshThreshold?te.absoluteMaxAge:void 0;return await t.setItem(`session:${d}`,c,g?{ttl:Math.floor(g/1e3)}:void 0),c}async function we(d){let e=await se(),t=await pe(d);if(t){let i=(await Ee(t.userId)).filter(u=>u!==d);await rt(t.userId,i);}await e.removeItem(`session:${d}`),await e.removeItem(`activity:${d}`);}async function hr(d){let e=await Ee(d),t=await se();for(let s of e)await t.removeItem(`session:${s}`),await t.removeItem(`activity:${s}`);await rt(d,[]);}async function be(d,e){let t=await Ee(d),s=[];for(let i of t){let u=await pe(i);u&&s.push({id:u.id,sessionName:u.sessionName||"Session",deviceInfo:u.deviceInfo,createdAt:u.createdAt,lastActivityAt:u.lastActivityAt,currentSession:u.id===e});}return s.sort((i,u)=>u.lastActivityAt-i.lastActivityAt),s}async function at(d,e){let t=await pe(d);return t?(await(await se()).setItem(`session:${d}`,{...t,sessionName:e}),true):false}async function V(d){let e=Z(d);if(!e||!(await De(e)).valid)return null;let s=await pe(e);return s?(await Ce(e,d),s):null}var Lt,te,Ze,qe,$e=chunkAHSFSERC_cjs.a(()=>{Je();Lt=$t(),te={absoluteMaxAge:Lt.maxAge,maxSessionsPerUser:Lt.maxSessionsPerUser,refreshThreshold:300*1e3,activityDebounce:30*1e3,pollInterval:30*1e3},Ze="kyro-session",qe=null;});function ue(d,e){for(let t of d){if(t.name===e)return t;if(t.type==="group"||t.type==="array"){let s=ue(t.fields||[],e);if(s)return s}if(t.type==="blocks")for(let s of t.blocks||[]){let i=ue(s.fields||[],e);if(i)return i}if(t.type==="tabs")for(let s of t.tabs||[]){let i=ue(s.fields||[],e);if(i)return i}if(t.type==="collapsible"||t.type==="row"){let s=ue(t.fields||[],e);if(s)return s}}return null}$e();function Nt(d){let{db:t,userLookup:s}=d;return async function(u){let l=chunkNY47CFVP_cjs.f(u);if(l&&t){let g=await chunkNY47CFVP_cjs.e(l,t,s);if(g.valid&&g.user)return {user:g.user,tenantContext:Ft(g.user),apiKeyContext:chunkNY47CFVP_cjs.g(g),status:200,authType:"apikey"};if(g.error)return {status:401,error:g.error}}let c=Z(u);if(c)try{let g=await De(c);if(!g.valid)return {status:401,error:g.reason||"Session invalid"};let f=await V(u);if(f){let I=s?await s(f.userId):null;if(I)return {user:I,tenantContext:Ft(I),status:200,authType:"session"}}}catch(g){console.error("Session validation error:",g);}return {status:401,error:"Authentication required"}}}function Ft(d){return {tenantId:d.tenantId||"default",userId:d.id||"anonymous",role:d.role||"guest",roles:[d.role||"guest"],permissions:[],isSuperAdmin:d.role==="super_admin"}}Je();var Le=class{storage=new Map;userStorage=new Map;limits;userLimits;constructor(e,t){this.limits={...yr,...e},this.userLimits=t||{"user:api":{window:6e4,max:500},"user:write":{window:36e5,max:100}};}getKey(e,t){return `${e}:${t}`}getUserKey(e,t,s){return `user:${e}:${t}:${s}`}cleanupOldEntries(e,t){let i=Date.now()-t;for(;e.length>0&&e[0].timestamp<i;)e.shift();}async check(e,t){let s=this.limits[e]||this.limits["api:general"],i=this.getKey(e,t),u=this.storage.get(i);u||(u=[],this.storage.set(i,u)),this.cleanupOldEntries(u,s.window);let l=Date.now(),c=u.reduce((g,f)=>g+f.count,0);if(u.push({timestamp:l,count:1}),c>=s.max){let f=u.reduce((I,w)=>I.timestamp<w.timestamp?I:w,u[0]).timestamp+s.window;return {allowed:false,remaining:0,resetAt:f,retryAfter:Math.ceil((f-l)/1e3)}}return {allowed:true,remaining:s.max-c-1,resetAt:l+s.window}}async checkUser(e,t,s){let i=this.userLimits[e]||this.userLimits["user:api"],u=this.userStorage.get(t),l=[];u?l=u.get(this.getKey(e,s))||[]:(this.userStorage.has(t)||this.userStorage.set(t,new Map),this.userStorage.get(t).set(this.getKey(e,s),l)),this.cleanupOldEntries(l,i.window);let c=Date.now(),g=l.reduce((f,I)=>f+I.count,0);if(l.push({timestamp:c,count:1}),g>=i.max){let I=l.reduce((w,j)=>w.timestamp<j.timestamp?w:j,l[0]).timestamp+i.window;return {allowed:false,remaining:0,resetAt:I,retryAfter:Math.ceil((I-c)/1e3)}}return {allowed:true,remaining:i.max-g-1,resetAt:c+i.window}}async reset(e,t){let s=this.getKey(e,t);this.storage.delete(s);}async resetUser(e,t,s){let i=this.userStorage.get(t);if(i){let u=this.getKey(e,s);i.delete(u);}}async getStatus(e,t){let s=this.limits[e]||this.limits["api:general"],i=this.getKey(e,t),u=this.storage.get(i);u||(u=[],this.storage.set(i,u)),this.cleanupOldEntries(u,s.window);let l=Date.now(),c=u.reduce((g,f)=>g+f.count,0);return {count:c,limit:s.max,remaining:Math.max(0,s.max-c),resetAt:l+s.window}}setLimit(e,t){this.limits[e]=t;}setUserLimit(e,t){this.userLimits[e]=t;}},yr={"auth:login":{window:9e5,max:5},"auth:register":{window:36e5,max:3},"auth:forgot":{window:36e5,max:3},"auth:reset":{window:36e5,max:5},"auth:verify":{window:36e5,max:5},"api:general":{window:6e4,max:100},"api:authenticated":{window:6e4,max:200}};var nt={retentionDays:30};var Mt=class{redis;prefix;retentionDays;constructor(e,t=30,s="kyro:audit:"){this.redis=e,this.prefix=s,this.retentionDays=t;}async log(e){let t=lr.randomBytes(16).toString("hex"),s=new Date,i={...e,id:t,timestamp:s},u=this.getKeyForDate(s),l=`${this.prefix}log:${t}`;await this.redis.hset(l,this.serializeLog(i)),await this.redis.expire(l,this.retentionDays*24*60*60+3600),await this.redis.zadd(u,s.getTime(),t),await this.redis.expire(u,this.retentionDays*24*60*60+3600);let c=e.userId?`${this.prefix}user:${e.userId}`:null;return c&&(await this.redis.zadd(c,s.getTime(),t),await this.redis.expire(c,this.retentionDays*24*60*60+3600)),t}async get(e){let t=`${this.prefix}log:${e}`,s=await this.redis.hgetall(t);return !s||Object.keys(s).length===0?null:this.deserializeLog(s)}async query(e={}){let{limit:t=50,offset:s=0}=e,i=[];if(e.userId)i.push(`${this.prefix}user:${e.userId}`);else if(e.startDate||e.endDate)i=this.getKeysForDateRange(e.startDate,e.endDate);else {let g=new Date;i=this.getKeysForDateRange(new Date(g.getTime()-this.retentionDays*24*60*60*1e3),g);}let u=[];for(let g of i){let f=await this.redis.zrange(g,0,-1,"WITHSCORES");for(let I=0;I<f.length;I+=2)u.push([f[I],parseInt(f[I+1],10)]);}u.sort((g,f)=>f[1]-g[1]);let l=u.length;u=u.slice(s,s+t);let c=[];for(let[g]of u){let f=await this.get(g);f&&this.matchesFilter(f,e)&&c.push(f);}return {logs:c,total:l}}async getRecent(e=50){let t=[],s=new Date,i=this.getKeysForDateRange(new Date(s.getTime()-10080*60*1e3),s),u=[];for(let l of i){let c=await this.redis.zrange(l,0,-1,"WITHSCORES");for(let g=0;g<c.length;g+=2)u.push([c[g],parseInt(c[g+1],10)]);}u.sort((l,c)=>c[1]-l[1]);for(let[l]of u.slice(0,e)){let c=await this.get(l);c&&t.push(c);}return t}async getUserActivity(e,t=50){let s=`${this.prefix}user:${e}`,i=await this.redis.zrange(s,0,t-1),u=[];for(let l of i){let c=await this.get(l);c&&u.push(c);}return u}async getStats(e,t){let s=this.getKeysForDateRange(e||new Date(Date.now()-2592e6),t||new Date),i={},u=0,l=0,c=0,g=new Set;for(let f of s){let I=await this.redis.zrange(f,0,-1);for(let w of I){let j=await this.get(w);j&&(u++,i[j.action]=(i[j.action]||0)+1,j.success&&c++,j.action==="login_failed"&&l++,j.userId&&g.add(j.userId));}}return {totalEvents:u,byAction:i,successRate:u>0?c/u:1,failedLogins:l,uniqueUsers:g}}async cleanup(){let e=Date.now()-this.retentionDays*24*60*60*1e3,t=await this.redis.keys(`${this.prefix}date:*`),s=0;for(let i of t){let u=await this.redis.zrangebyscore(i,0,e);for(let l of u)await this.redis.del(`${this.prefix}log:${l}`),s++;await this.redis.zremrangebyscore(i,0,e);}return s}getKeyForDate(e){let t=e.getFullYear(),s=String(e.getMonth()+1).padStart(2,"0"),i=String(e.getDate()).padStart(2,"0");return `${this.prefix}date:${t}-${s}-${i}`}getKeysForDateRange(e,t){let s=[],i=e||new Date(Date.now()-this.retentionDays*24*60*60*1e3),u=t||new Date,l=new Date(i);for(;l<=u;)s.push(this.getKeyForDate(l)),l.setDate(l.getDate()+1);return s}matchesFilter(e,t){return !(t.action&&!(Array.isArray(t.action)?t.action:[t.action]).includes(e.action)||t.resource&&e.resource!==t.resource||t.resourceId&&e.resourceId!==t.resourceId||t.success!==void 0&&e.success!==t.success)}serializeLog(e){let t={id:e.id,timestamp:new Date(e.timestamp).toISOString(),action:e.action,resource:e.resource,success:e.success?"1":"0"};return e.userId&&(t.userId=e.userId),e.userEmail&&(t.userEmail=e.userEmail),e.role&&(t.role=e.role),e.resourceId&&(t.resourceId=e.resourceId),e.ipAddress&&(t.ipAddress=e.ipAddress),e.userAgent&&(t.userAgent=e.userAgent),e.error&&(t.error=e.error),e.changes&&(t.changes=JSON.stringify(e.changes)),e.metadata&&(t.metadata=JSON.stringify(e.metadata)),t}deserializeLog(e){return {id:e.id,timestamp:new Date(e.timestamp),action:e.action,userId:e.userId,userEmail:e.userEmail,role:e.role,resource:e.resource,resourceId:e.resourceId,ipAddress:e.ipAddress,userAgent:e.userAgent,success:e.success==="1",error:e.error,changes:e.changes?JSON.parse(e.changes):void 0,metadata:e.metadata?JSON.parse(e.metadata):void 0}}};function us(d){return {ipAddress:d.headers.get("x-forwarded-for")?.split(",")[0]?.trim()||d.headers.get("x-real-ip")||"unknown",userAgent:d.headers.get("user-agent")||"unknown"}}var Bt=class{logs=[];retentionDays;constructor(e=nt.retentionDays){this.retentionDays=e;}async log(e){let t=lr.randomBytes(16).toString("hex"),i={...e,id:t,timestamp:new Date};return this.logs.push(i),this.cleanupOldLogs(),t}async get(e){return this.logs.find(t=>t.id===e)||null}async query(e={}){let{limit:t=50,offset:s=0}=e,i=[...this.logs];if(e.userId&&(i=i.filter(f=>f.userId===e.userId)),e.action){let f=Array.isArray(e.action)?e.action:[e.action];i=i.filter(I=>f.includes(I.action));}e.resource&&(i=i.filter(f=>f.resource===e.resource)),e.resourceId&&(i=i.filter(f=>f.resourceId===e.resourceId)),e.success!==void 0&&(i=i.filter(f=>f.success===e.success));let u=e.startDate,l=e.endDate;u!==void 0&&(i=i.filter(f=>f.timestamp>=u)),l!==void 0&&(i=i.filter(f=>f.timestamp<=l)),i.sort((f,I)=>I.timestamp.getTime()-f.timestamp.getTime());let c=i.length;return {logs:i.slice(s,s+t),total:c}}async getRecent(e=50){let t=new Date(Date.now()-6048e5);return this.logs.filter(i=>i.timestamp>=t).sort((i,u)=>u.timestamp.getTime()-i.timestamp.getTime()).slice(0,e)}async getUserActivity(e,t=50){return this.logs.filter(i=>i.userId===e).sort((i,u)=>u.timestamp.getTime()-i.timestamp.getTime()).slice(0,t)}async getStats(e,t){let s=e||new Date(Date.now()-2592e6),i=t||new Date,u=this.logs.filter(w=>w.timestamp>=s&&w.timestamp<=i),l={},c=0,g=0,f=0,I=new Set;for(let w of u){c++;let j=w.action;l[j]=(l[j]||0)+1,w.success&&f++,w.action==="login_failed"&&g++,w.userId&&I.add(w.userId);}return {totalEvents:c,byAction:l,successRate:c>0?f/c:1,failedLogins:g,uniqueUsers:I}}async cleanup(){let e=new Date(Date.now()-this.retentionDays*24*60*60*1e3),t=this.logs.length;return this.logs=this.logs.filter(s=>s.timestamp>=e),t-this.logs.length}cleanupOldLogs(){let e=new Date(Date.now()-this.retentionDays*24*60*60*1e3);this.logs.length;this.logs=this.logs.filter(s=>s.timestamp>=e);}};$e();var _e=class{authAdapter;email;passwordPolicy;lockout;rateLimiter;auditLogger;baseUrl;emailVerificationRequired;constructor(e){this.authAdapter=e.redis,this.email=e.email,this.passwordPolicy=e.passwordPolicy||new chunkAJAZ7D3W_cjs.c,this.lockout=e.lockout,this.rateLimiter=e.rateLimiter,this.auditLogger=e.auditLogger,this.baseUrl=e.baseUrl||"http://localhost:3000",this.emailVerificationRequired=e.emailVerificationRequired??true;}async register(e){let{ipAddress:t,userAgent:s}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let i=await this.rateLimiter.check("auth:register",t);if(!i.allowed)return this.rateLimitResponse(i)}try{let i=await e.json();if(!i.email||!i.password)return this.errorResponse("Email and password are required",400);if(i.password!==i.confirmPassword)return this.errorResponse("Passwords do not match",400);let u=this.passwordPolicy.validate(i.password);if(!u.valid)return this.errorResponse(u.errors.join(". "),400);if(await this.authAdapter.findUserByEmail(i.email))return this.errorResponse("Email already registered",400);let c=await this.authAdapter.createUser({email:i.email,password:i.password,role:i.role||"customer",tenantId:i.tenantId});if(this.emailVerificationRequired&&this.email){let g=lr.randomBytes(32).toString("hex"),f=`${this.baseUrl}/api/auth/verify?token=${g}`;await this.authAdapter.createSession(c.id,{ipAddress:t,userAgent:s});let I=this.email.getTemplates().verifyEmail(f,i.email);await this.email.send({to:i.email,...I});}return this.auditLogger&&await this.auditLogger.log({action:"register",userId:c.id,userEmail:c.email,resource:"auth",ipAddress:t,userAgent:s,success:!0}),this.jsonResponse({success:!0,message:"Registration successful",user:this.sanitizeUser(c),requiresVerification:this.emailVerificationRequired&&!!this.email},201)}catch(i){return console.error("[AuthRoutes.register] Registration error:",i),this.errorResponse("Registration failed",500)}}async login(e){let{ipAddress:t,userAgent:s}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let i=await this.rateLimiter.check("auth:login",t);if(!i.allowed)return this.rateLimitResponse(i)}try{let i=await e.json();if(!i.email||!i.password)return this.errorResponse("Email and password are required",400);let u=await this.authAdapter.findUserByEmail(i.email);if(!u)return await this.recordFailedLogin(t,s),this.errorResponse("Invalid credentials",401);if(u.locked)return this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:u.id,userEmail:u.email,resource:"auth",ipAddress:t,userAgent:s,success:!1,error:"Account locked"}),this.errorResponse("Account locked. Contact an administrator.",403);if(this.lockout){let I=await this.lockout.checkLockout(u.id);if(I.locked)return this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:u.id,userEmail:u.email,resource:"auth",ipAddress:t,userAgent:s,success:!1,error:"Account locked"}),this.errorResponse(`Account locked. Try again in ${Math.ceil((I.lockedUntil.getTime()-Date.now())/6e4)} minutes`,423)}if(!await this.authAdapter.verifyPassword(i.email,i.password))return await this.recordFailedLogin(t,s,u.id,u.email),this.errorResponse("Invalid credentials",401);this.lockout&&await this.lockout.resetAttempts(u.id),this.auditLogger&&await this.auditLogger.log({action:"login",userId:u.id,userEmail:u.email,role:u.role,resource:"auth",ipAddress:t,userAgent:s,success:!0}),await this.authAdapter.updateUser(u.id,{lastLogin:new Date().toISOString()});let c=await st({id:u.id,email:u.email,role:u.role,tenantId:u.tenantId}),g={success:!0,user:this.sanitizeUser(u)},f=this.jsonResponse(g);return et(f,c)}catch(i){return console.error("[Auth] Login error:",i),this.errorResponse("Login failed",500)}}async logout(e){let t=Z(e);if(!t)return this.errorResponse("No session to logout",401);let{ipAddress:s,userAgent:i}=chunkHVXO3OFB_cjs.a(e);try{let u=await V(e);u&&(await we(t),this.auditLogger&&await this.auditLogger.log({action:"logout",userId:u.userId,userEmail:u.email,resource:"auth",ipAddress:s,userAgent:i,success:!0}));let l=this.jsonResponse({success:!0,message:"Logged out successfully"});return tt(l)}catch{return this.errorResponse("Logout failed",500)}}async refresh(e){try{let t=Z(e);if(!t)return this.errorResponse("Not authenticated",401);let s=await Ce(t,e);return s?this.jsonResponse({success:!0,expiresAt:s.expiresAt}):this.errorResponse("Session not found",404)}catch(t){return console.error("[Auth] Session refresh error:",t),this.errorResponse("Session refresh failed",500)}}async me(e){let t=await V(e);return t?this.jsonResponse({success:true,user:{id:t.userId,email:t.email,role:t.role,tenantId:t.tenantId}}):this.errorResponse("Not authenticated",401)}async changePassword(e){let t=await V(e);if(!t)return this.errorResponse("Not authenticated",401);let{ipAddress:s,userAgent:i}=chunkHVXO3OFB_cjs.a(e);try{let u=await e.json(),{currentPassword:l,newPassword:c,confirmPassword:g}=u;if(!l||!c)return this.errorResponse("Current and new password required",400);if(c!==g)return this.errorResponse("Passwords do not match",400);let f=this.passwordPolicy.validate(c);if(!f.valid)return this.errorResponse(f.errors.join(". "),400);let I=await this.authAdapter.findUserById(t.userId);if(!I)return this.errorResponse("User not found",404);if(!(I.passwordHash?await this.authAdapter.verifyPassword(l,I.passwordHash):!1))return this.errorResponse("Current password is incorrect",401);let j=await this.authAdapter.getPasswordHistory?.(I.id,5);if(await this.authAdapter.isPasswordInHistory?.(c,I.id,5))return this.errorResponse("Password was recently used. Please choose a different password",400);let q=await this.authAdapter.hashPassword(c);if(I.passwordHash&&await this.authAdapter.addPasswordToHistory?.(I.id,I.passwordHash),await this.authAdapter.updateUser(I.id,{passwordHash:q}),await this.authAdapter.deleteUserSessions(I.id),this.email&&this.email.getTemplates){let O=this.email.getTemplates().passwordChanged(I.email);await this.email.send({to:I.email,...O});}return this.auditLogger&&await this.auditLogger.log({action:"password_change",userId:I.id,userEmail:I.email,resource:"auth",ipAddress:s,userAgent:i,success:!0}),this.jsonResponse({success:!0,message:"Password changed successfully"})}catch{return this.errorResponse("Password change failed",500)}}async forgotPassword(e){let{ipAddress:t,userAgent:s}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let i=await this.rateLimiter.check("auth:forgot",t);if(!i.allowed)return this.rateLimitResponse(i)}try{let i=await e.json(),{email:u}=i;if(!u)return this.errorResponse("Email required",400);let l=await this.authAdapter.findUserByEmail(u);if(!l)return this.jsonResponse({success:!0,message:"If the email exists, a reset link has been sent"});if(this.email){let c=lr.randomBytes(32).toString("hex"),g=`${this.baseUrl}/api/auth/reset-password?token=${c}`,f=this.email.getTemplates().resetPassword(g,l.email);await this.email.send({to:l.email,...f});}return this.auditLogger&&await this.auditLogger.log({action:"password_reset",userId:l.id,userEmail:l.email,resource:"auth",ipAddress:t,userAgent:s,success:!0}),this.jsonResponse({success:!0,message:"If the email exists, a reset link has been sent"})}catch{return this.errorResponse("Password reset request failed",500)}}async verifyEmail(e){if(!new URL(e.url).searchParams.get("token"))return this.errorResponse("Verification token required",400);try{return this.jsonResponse({success:!0,message:"Email verified"})}catch{return this.errorResponse("Email verification failed",500)}}async recordFailedLogin(e,t,s,i){this.lockout&&await this.lockout.recordFailedAttempt(s||e),this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:s,userEmail:i,resource:"auth",ipAddress:e,userAgent:t,success:false,error:"Invalid credentials"});}sanitizeUser(e){let{passwordHash:t,...s}=e;return s}jsonResponse(e,t=200){return new Response(JSON.stringify(e),{status:t,headers:{"Content-Type":"application/json","Cache-Control":"no-store, no-cache, must-revalidate, max-age=0"}})}async listSessions(e){let t=await V(e);if(!t)return this.errorResponse("Not authenticated",401);try{let s=await be(t.userId,Z(e)??void 0);return this.jsonResponse({sessions:s})}catch(s){return console.error("[AuthRoutes.listSessions] Error:",s),this.errorResponse("Failed to list sessions",500)}}async revokeSession(e,t){let s=await V(e);if(!s)return this.errorResponse("Not authenticated",401);try{let u=(await be(s.userId)).find(l=>l.id===t);return u?u.currentSession?this.errorResponse("Cannot revoke current session",400):(await we(t),this.jsonResponse({success:!0,message:"Session revoked"})):this.errorResponse("Session not found",404)}catch(i){return console.error("[AuthRoutes.revokeSession] Error:",i),this.errorResponse("Failed to revoke session",500)}}async revokeOtherSessions(e){let t=await V(e);if(!t)return this.errorResponse("Not authenticated",401);try{let s=await be(t.userId),i=Z(e);for(let u of s)u.currentSession||await we(u.id);return this.jsonResponse({success:!0,message:"Other sessions revoked"})}catch(s){return console.error("[AuthRoutes.revokeOtherSessions] Error:",s),this.errorResponse("Failed to revoke sessions",500)}}async renameSession(e,t){let s=await V(e);if(!s)return this.errorResponse("Not authenticated",401);try{if(!(await be(s.userId)).find(g=>g.id===t))return this.errorResponse("Session not found",404);let l=await e.json(),{name:c}=l;return !c||typeof c!="string"||c.trim().length===0?this.errorResponse("Invalid session name",400):(await at(t,c.trim()),this.jsonResponse({success:!0,message:"Session renamed"}))}catch(i){return console.error("[AuthRoutes.renameSession] Error:",i),this.errorResponse("Failed to rename session",500)}}async refreshSession(e){let t=Z(e);if(!t)return this.errorResponse("No session",401);try{let s=await($e(),chunkAHSFSERC_cjs.c(Ot)).refreshSession(t,e);return s?this.jsonResponse({success:!0,expiresAt:s.expiresAt}):this.errorResponse("Session not found",404)}catch(s){return console.error("[AuthRoutes.refreshSession] Error:",s),this.errorResponse("Failed to refresh session",500)}}errorResponse(e,t){return new Response(JSON.stringify({success:false,error:e}),{status:t,headers:{"Content-Type":"application/json"}})}async rateLimitResponse(e){return new Response(JSON.stringify({success:false,error:"Too many requests",retryAfter:e.retryAfter}),{status:429,headers:{"Content-Type":"application/json","Retry-After":String(e.retryAfter||60)}})}};function me(d){let{uploadDir:e=Ne.join(Rr__default.default.cwd(),"public","uploads"),baseUrl:t="/uploads"}=d;async function s(l){fs.existsSync(l)||await promises.mkdir(l,{recursive:true});}function i(l){let c=Ne.extname(l).toLowerCase();return {".jpg":"image/jpeg",".jpeg":"image/jpeg",".png":"image/png",".gif":"image/gif",".webp":"image/webp",".avif":"image/avif",".svg":"image/svg+xml",".mp4":"video/mp4",".webm":"video/webm",".mov":"video/quicktime",".avi":"video/x-msvideo",".mp3":"audio/mpeg",".wav":"audio/wav",".ogg":"audio/ogg",".pdf":"application/pdf",".doc":"application/msword",".docx":"application/vnd.openxmlformats-officedocument.wordprocessingml.document",".xls":"application/vnd.ms-excel",".xlsx":"application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",".zip":"application/zip",".tar":"application/x-tar",".gz":"application/gzip",".rar":"application/vnd.rar",".7z":"application/x-7z-compressed"}[c]||"application/octet-stream"}async function u(l){try{let c=l.toString("hex",0,8);if(c.startsWith("89504e47")){let g=l.readUInt32BE(16),f=l.readUInt32BE(20);return {width:g,height:f}}if(c.startsWith("ffd8")){let g=2;for(;g<l.length&&l[g]===255;){let f=l[g+1];if(f===192||f===194){let I=l.readUInt16BE(g+5);return {width:l.readUInt16BE(g+7),height:I}}g+=2+l.readUInt16BE(g+2);}}}catch{}return {}}return ae({name:"local",displayName:"Local Storage",supportsDynamicResize:true,async upload(l,c){await s(e);let g=Buffer.from(await l.arrayBuffer()),f=lr.createHash("md5").update(g).digest("hex"),I=Ne.extname(l.name),w=c?.filename||`${f}${I}`,j=c?.folder||"",P=j?Ne.join(e,j):e;await s(P);let q=Ne.join(P,w);await promises.writeFile(q,g);let O=l.type.startsWith("image/")?await u(g):{},N=t||"/uploads",ne=j?`/${j}/${w}`:`/${w}`,D=N+ne;return {id:f,filename:w,originalName:l.name,mimeType:l.type||i(l.name),size:g.length,url:D,thumbnailUrl:l.type.startsWith("image/")?D:void 0,folder:j||void 0,provider:"local",metadata:{...O,...c?.metadata},createdAt:new Date().toISOString()}},async uploadFromUrl(l,c){let g=await fetch(l);if(!g.ok)throw new Error(`Failed to fetch file: ${g.statusText}`);let f=await g.blob(),I=g.headers.get("content-disposition"),w=c?.filename;if(!w&&I){let P=I.match(/filename[^;=\n]*=((['"]).*?\2|[^;\n]*)/);P&&(w=P[1].replace(/['"]/g,""));}w||(w=Ne.basename(new URL(l).pathname));let j=new File([f],w,{type:f.type||i(w)});return this.upload(j,c)},async delete(l){let c=Ne.join(e,l.replace(t+"/",""));try{await promises.unlink(c);}catch{}},async rename(l,c){let g=Ne.join(e,l.replace(t+"/","")),f=Ne.join(e,c);return await promises.rename(g,f),`${t}/${c}`},async list(l){let c=l?Ne.join(e,l):e;if(!fs.existsSync(c))return [];let g=[],f=await promises.readdir(c,{withFileTypes:true});for(let I of f)if(I.isFile()){let w=Ne.join(c,I.name),j=await promises.stat(w),P=`${t}${l?`/${l}`:""}/${I.name}`;g.push({id:lr.createHash("md5").update(I.name).digest("hex"),filename:I.name,originalName:I.name,mimeType:i(I.name),size:j.size,url:P,provider:"local",createdAt:j.birthtime.toISOString()});}return g},async exists(l){let c=Ne.join(e,l.replace(t+"/",""));return fs.existsSync(c)},async createFolder(l){let c=Ne.join(e,l);await promises.mkdir(c,{recursive:true});},async deleteFolder(l){let c=Ne.join(e,l);if(fs.existsSync(c)){let{rm:g}=await import('fs/promises');await g(c,{recursive:true,force:true});}}})}function it(d){let e=(t,s)=>{if(!d.signKey)return t;let i=lr.createHmac("sha256",d.signKey).update(t+s.toString()).digest("hex");return s.set("s",i),t};return {name:"imgix",displayName:"Imgix",supportsDynamicResize:true,async upload(t,s){throw new Error("Imgix is a transformation service. Use another provider for uploads.")},async uploadFromUrl(t,s){let i=s?.filename||t.split("/").pop()||"file",u=await fetch(t);if(!u.ok)throw new Error(`Failed to fetch: ${u.statusText}`);let l=await u.blob();new File([l],i,{type:l.type});return {id:Buffer.from(t).toString("base64").slice(0,20),filename:i,originalName:i,mimeType:l.type,size:l.size,url:this.getImageUrl(t),thumbnailUrl:this.getImageUrl(t,{width:200,height:200,fit:"crop"}),provider:"imgix",createdAt:new Date().toISOString()}},async delete(t){},async rename(t,s){return `https://${d.domain}/${s}`},getImageUrl(t,s){let i=new URL(t),u=new URLSearchParams(i.search);d.defaultParameters&&Object.entries(d.defaultParameters).forEach(([c,g])=>{u.has(c)||u.set(c,g);}),s&&(s.width&&u.set("w",String(s.width)),s.height&&u.set("h",String(s.height)),s.quality&&u.set("q",String(s.quality)),s.format&&u.set("fm",s.format),s.fit&&u.set("fit",s.fit),s.blur&&u.set("blur",String(s.blur)),s.sharpen&&u.set("sharp",String(s.sharpen))),u.set("auto","compress,format");i.pathname+"?"+u.toString();return d.signKey&&(e(i.pathname+u.toString(),u)),`https://${d.domain}${i.pathname}${u.toString()?"?"+u.toString():""}`},async generateThumbnail(t){return this.getImageUrl(t.url,{width:200,height:200,fit:"crop"})},async list(){return []},async exists(t){try{return (await fetch(t,{method:"HEAD"})).ok}catch{return  false}},async createFolder(){},async deleteFolder(){}}}function Fe(d,e){return e.cdnUrl?`${e.cdnUrl.replace(/\/$/,"")}/${d}`:`https://${e.storageZone}.b-cdn.net/${d}`}function ot(d){return d.cdnUrl?d.cdnUrl.replace(/\/$/,"")+"/":`https://${d.storageZone}.b-cdn.net/`}function dt(d){let e=`https://storage.bunnycdn.com/${d.storageZone}`,t=s=>`${d.prefix?`${d.prefix}/`:""}${s}`.replace(/\/+/g,"/");return ae({name:"bunny",displayName:"Bunny.net Storage",supportsDynamicResize:true,async upload(s,i){let u=t(`${i?.folder?`${i.folder}/`:""}${i?.filename||s.name}`),l=Buffer.from(await s.arrayBuffer()),c=await fetch(`${e}/${u}`,{method:"PUT",headers:{AccessKey:d.apiKey,"Content-Type":s.type},body:l});if(!c.ok){let g=await c.text();throw new Error(`Bunny.net upload failed: ${c.status} ${g}`)}return {id:Buffer.from(u).toString("base64url"),filename:i?.filename||s.name,originalName:s.name,mimeType:s.type,size:l.length,url:Fe(u,d),thumbnailUrl:s.type.startsWith("image/")?Fe(u,d):void 0,folder:i?.folder,provider:"bunny",metadata:i?.metadata,createdAt:new Date().toISOString()}},async delete(s){let i=s.replace(ot(d),""),u=await fetch(`${e}/${i}`,{method:"DELETE",headers:{AccessKey:d.apiKey}});if(!u.ok&&u.status!==404){let l=await u.text();throw new Error(`Bunny.net delete failed: ${u.status} ${l}`)}},async rename(s,i){let u=s.replace(ot(d),""),l=d.prefix?`${d.prefix}/${i}`:i,c=await fetch(`${e}/${u}`,{method:"GET",headers:{AccessKey:d.apiKey}});if(!c.ok)throw new Error("Bunny.net rename failed: could not read old file");let g=await c.arrayBuffer();return await fetch(`${e}/${l}`,{method:"PUT",headers:{AccessKey:d.apiKey,"Content-Type":c.headers.get("Content-Type")||"application/octet-stream"},body:g}),await this.delete(s),Fe(l,d)},async list(s){let i=t(s||""),u=await fetch(`${e}/${i}`,{method:"GET",headers:{AccessKey:d.apiKey}});if(!u.ok){let c=await u.text();throw new Error(`Bunny.net list failed: ${u.status} ${c}`)}return (await u.json()).map(c=>({id:Buffer.from(c.ObjectName||"").toString("base64url"),filename:c.ObjectName?.split("/").pop()||"",originalName:c.ObjectName?.split("/").pop()||"",mimeType:"application/octet-stream",size:c.Length||0,url:Fe(c.ObjectName||"",d),provider:"bunny",createdAt:c.LastChanged||new Date().toISOString()}))},async exists(s){let i=s.replace(ot(d),"");return (await fetch(`${e}/${i}`,{method:"HEAD",headers:{AccessKey:d.apiKey}})).ok},async createFolder(s){let i=t(`${s}/`);await fetch(`${e}/${i}`,{method:"PUT",headers:{AccessKey:d.apiKey,"Content-Length":"0"},body:""});},async deleteFolder(s){let i=t(`${s}/`);await fetch(`${e}/${i}`,{method:"DELETE",headers:{AccessKey:d.apiKey}});}})}var ct=class{providers=new Map;providerToPlugin=new Map;disabledPlugins=new Set;constructor(){this.registerLocal(),this.registerImgix(),this.registerBunny();}registerLocal(){this.register({type:"local",displayName:"Local Server",configKey:"local",configFields:[{name:"uploadDir",type:"text",label:"Upload Directory",defaultValue:"./public/uploads"},{name:"baseUrl",type:"text",label:"Base URL",defaultValue:"/uploads"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>{let t=e?.local||e,s=(t?.uploadDir||"").trim(),i;s?Ne__default.default.isAbsolute(s)?i=s:s.includes("/")||s.includes("\\")?i=Ne__default.default.resolve(process.cwd(),s):i=Ne__default.default.join(process.cwd(),"public",s):i=Ne__default.default.join(process.cwd(),"public","uploads");let u=(t?.baseUrl||"").trim(),l;return u?l=u.startsWith("/")?u:`/${u}`:l="/uploads",{uploadDir:i,baseUrl:l}},factory:e=>me(e)});}registerImgix(){this.register({type:"imgix",displayName:"Imgix",configKey:"imgix",configFields:[{name:"domain",type:"text",label:"Domain",required:true},{name:"signKey",type:"password",label:"Sign Key"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>e?.imgix||e,factory:e=>it(e)});}registerBunny(){this.register({type:"bunny",displayName:"Bunny.net",configKey:"bunny",configFields:[{name:"storageZone",type:"text",label:"Storage Zone",required:true},{name:"apiKey",type:"password",label:"API Key",required:true},{name:"cdnUrl",type:"text",label:"CDN URL"},{name:"prefix",type:"text",label:"Path Prefix"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>e?.bunny||e,factory:e=>dt(e)});}register(e){if(this.providers.has(e.type)){console.warn(`[StorageRegistry] Provider "${e.type}" already registered, skipping`);return}e.pluginName&&this.providerToPlugin.set(e.type,e.pluginName),this.providers.set(e.type,e);}unregister(e){this.providers.delete(e),this.providerToPlugin.delete(e);}get(e){return this.providers.get(e)}getAll(){return Array.from(this.providers.values())}getAllAvailable(e){let t=this.getAll();return e?t.filter(s=>s.pluginName?e(s.pluginName):true):t}has(e){return this.providers.has(e)}async resolve(e,t){let s=this.providers.get(e);if(!s)throw new Error(`Unknown storage provider type: "${e}". Is the plugin that provides it enabled?`);if(s.pluginName&&this.disabledPlugins.has(s.pluginName))throw new Error(`Storage provider "${e}" is not available (plugin "${s.pluginName}" is disabled)`);let i=s.configKey||e,u=s.extractConfig(t,i);return s.factory(u)}async resolveWithConfig(e,t){let s=this.providers.get(e);if(!s)throw new Error(`Unknown storage provider type: "${e}". Is the plugin that provides it enabled?`);if(s.pluginName&&this.disabledPlugins.has(s.pluginName))throw new Error(`Storage provider "${e}" is not available (plugin "${s.pluginName}" is disabled)`);let i=s.extractRawConfig(t);return s.factory(i)}getProviderPluginName(e){return this.providerToPlugin.get(e)}getAllPluginNames(){return Array.from(new Set(this.providerToPlugin.values()))}setPluginEnabled(e,t){t?this.disabledPlugins.delete(e):this.disabledPlugins.add(e);}isPluginEnabled(e){return !this.disabledPlugins.has(e)}},lt=null;function ut(){return lt||(lt=new ct),lt}function Yt(d){if(!d)return "";if(d.startsWith("pub-"))return d;let e=d.match(/pub-[a-zA-Z0-9]+/i);return e?e[0]:""}function Er(d,e){let t=d.startsWith("/")?d.slice(1):d;if(e.cdnUrl)return `${e.cdnUrl.replace(/\/$/,"")}/${t}`;switch(e.provider){case "r2":{let s=Yt(e.publicDevUrl);return s?`https://${s}.r2.dev/${t}`:`https://${e.bucket}.${e.accountId}.r2.cloudflarestorage.com/${t}`}case "gcs":return `https://storage.googleapis.com/${e.bucket}/${t}`;case "digitalocean":return `https://${e.bucket}.${e.region}.cdn.digitaloceanspaces.com/${t}`;case "backblaze":return `https://${e.bucket}.s3.backblazeb2.com/${t}`;case "wasabi":return `https://${e.bucket}.s3.wasabisys.com/${t}`;default:return `https://${e.bucket}.s3.${e.region}.amazonaws.com/${t}`}}function mt(d){if(d.cdnUrl)return d.cdnUrl.replace(/\/$/,"")+"/";switch(d.provider){case "r2":{let e=Yt(d.publicDevUrl);return e?`https://${e}.r2.dev/`:`https://${d.bucket}.${d.accountId}.r2.cloudflarestorage.com/`}case "gcs":return `https://storage.googleapis.com/${d.bucket}/`;case "digitalocean":return `https://${d.bucket}.${d.region}.cdn.digitaloceanspaces.com/`;case "backblaze":return `https://${d.bucket}.s3.backblazeb2.com/`;case "wasabi":return `https://${d.bucket}.s3.wasabisys.com/`;default:return `https://${d.bucket}.s3.${d.region}.amazonaws.com/`}}function Dr(d){switch(d){case "r2":return "Cloudflare R2";case "gcs":return "Google Cloud Storage";case "digitalocean":return "DigitalOcean Spaces";case "backblaze":return "Backblaze B2";case "wasabi":return "Wasabi";default:return "AWS S3"}}function Cr(d){let e=new clientS3.S3Client({region:d.region||"auto",endpoint:d.endpoint,credentials:{accessKeyId:d.accessKeyId,secretAccessKey:d.secretAccessKey},forcePathStyle:true,tls:true,...d.provider==="r2"&&{requestHandler:new nodeHttpHandler.NodeHttpHandler}}),t=i=>`${d.prefix?`${d.prefix}/`:""}${i}`.replace(/\/+/g,"/"),s=i=>Er(i,d);return ae({name:d.provider,displayName:Dr(d.provider),supportsDynamicResize:true,async upload(i,u){let l=t(`${u?.folder?`${u.folder}/`:""}${u?.filename||i.name}`),c=Buffer.from(await i.arrayBuffer());await e.send(new clientS3.PutObjectCommand({Bucket:d.bucket,Key:l,Body:c,ContentType:i.type,Metadata:u?.metadata}));let g=await e.send(new clientS3.HeadObjectCommand({Bucket:d.bucket,Key:l}));return {id:Buffer.from(l).toString("base64url"),filename:u?.filename||i.name,originalName:i.name,mimeType:i.type,size:c.length,url:s(l),thumbnailUrl:i.type.startsWith("image/")?s(l):void 0,folder:u?.folder,provider:d.provider,metadata:{...u?.metadata,etag:g.ETag},createdAt:new Date().toISOString()}},async delete(i){let u=i.replace(mt(d),"");await e.send(new clientS3.DeleteObjectCommand({Bucket:d.bucket,Key:u}));},async rename(i,u){let l=i.replace(mt(d),""),c=d.prefix?`${d.prefix}/${u}`:u;return await e.send(new clientS3.CopyObjectCommand({Bucket:d.bucket,CopySource:`${d.bucket}/${l}`,Key:c})),await e.send(new clientS3.DeleteObjectCommand({Bucket:d.bucket,Key:l})),s(c)},async list(i){let u=t(i||"");return ((await e.send(new clientS3.ListObjectsV2Command({Bucket:d.bucket,Prefix:u}))).Contents||[]).map(c=>({id:Buffer.from(c.Key||"").toString("base64url"),filename:c.Key?.split("/").pop()||"",originalName:c.Key?.split("/").pop()||"",mimeType:"application/octet-stream",size:c.Size||0,url:s(c.Key||""),provider:d.provider,createdAt:c.LastModified?.toISOString()||new Date().toISOString()}))},async exists(i){try{let u=i.replace(mt(d),"");return await e.send(new clientS3.HeadObjectCommand({Bucket:d.bucket,Key:u})),!0}catch{return  false}},async createFolder(i){let u=t(`${i}/`);await e.send(new clientS3.PutObjectCommand({Bucket:d.bucket,Key:u,Body:""}));},async deleteFolder(i){let u=t(`${i}/`),l;do{let c=await e.send(new clientS3.ListObjectsV2Command({Bucket:d.bucket,Prefix:u,ContinuationToken:l}));if(c.Contents?.length){let g=c.Contents.map(f=>({Key:f.Key}));await e.send(new clientS3.DeleteObjectsCommand({Bucket:d.bucket,Delete:{Objects:g}}));}l=c.IsTruncated?c.NextContinuationToken:void 0;}while(l);await e.send(new clientS3.DeleteObjectCommand({Bucket:d.bucket,Key:u}));}})}function $r(d){let e=()=>`https://api.cloudinary.com/v1_1/${d.cloudName}/upload`,t=async s=>{let i=await import('crypto'),u=Object.keys(s).sort().map(l=>`${l}=${s[l]}`).join("&");return i.createHash("sha256").update(u+d.apiSecret).digest("hex")};return {name:"cloudinary",displayName:"Cloudinary",supportsDynamicResize:true,async upload(s,i){let u=new FormData;if(u.append("file",s),d.uploadPreset)u.append("upload_preset",d.uploadPreset);else {let g=Math.round(Date.now()/1e3),f={timestamp:String(g)};(i?.folder||d.folder)&&(f.folder=i?.folder||d.folder||"");let I=await t(f);u.append("timestamp",String(g)),u.append("signature",I),u.append("api_key",d.apiKey);}(i?.folder||d.folder)&&u.append("folder",i?.folder||d.folder||"");let l=await fetch(e(),{method:"POST",body:u});if(!l.ok){let g=await l.json();throw new Error(`Cloudinary upload failed: ${g.error?.message||l.statusText}`)}let c=await l.json();return {id:c.public_id,filename:`${c.public_id}.${c.format}`,originalName:c.original_filename||s.name,mimeType:s.type||`image/${c.format}`,size:c.bytes,url:c.secure_url,thumbnailUrl:this.getImageUrl(c.secure_url,{width:200,height:200,fit:"crop"}),width:c.width,height:c.height,folder:i?.folder||d.folder,provider:"cloudinary",createdAt:new Date().toISOString()}},async uploadFromUrl(s,i){let u=new FormData;u.append("file",s),u.append("upload_preset","ml_default"),(i?.folder||d.folder)&&u.append("folder",i?.folder||d.folder||"");let l=await fetch(e(),{method:"POST",body:u});if(!l.ok)throw new Error("Cloudinary upload failed");let c=await l.json();return {id:c.public_id,filename:`${c.public_id}.${c.format}`,originalName:c.original_filename||s.split("/").pop()||"file",mimeType:`image/${c.format}`,size:c.bytes,url:c.secure_url,thumbnailUrl:this.getImageUrl(c.secure_url,{width:200,height:200,fit:"crop"}),width:c.width,height:c.height,provider:"cloudinary",createdAt:new Date().toISOString()}},async delete(s){try{let i=s.split("/image/upload/");if(i.length!==2){console.warn("[Cloudinary delete] Could not parse URL:",s);return}let u=i[1].replace(/^v\d+\//,"").replace(/\.[^.]+$/,""),l=Math.round(Date.now()/1e3),c={timestamp:String(l),public_id:u},g=Object.keys(c).sort().map(q=>`${q}=${c[q]}`).join("&"),I=(await import('crypto')).createHash("sha256").update(g+d.apiSecret).digest("hex"),w=`https://api.cloudinary.com/v1_1/${d.cloudName}/image/destroy`,j=new FormData;j.append("public_id",u),j.append("timestamp",String(l)),j.append("signature",I),j.append("api_key",d.apiKey);let P=await fetch(w,{method:"POST",body:j});if(!P.ok){let q=await P.json();console.warn("[Cloudinary delete] Failed:",q);}}catch(i){console.warn("[Cloudinary delete] Error:",i.message);}},async rename(s,i){let u="",l=i.replace(/\.[^.]+$/,""),c="";try{let g=s.split("/image/upload/");if(g.length!==2)return console.warn("[Cloudinary rename] Could not parse old URL:",s),s;let f=g[1],I=f.match(/^(v\d+)\//);u=I?I[1]:"";let w=f.replace(/^v\d+\//,"").replace(/\.[^.]+$/,""),j=w.split("/");c=j.length>1?j.slice(0,-1).join("/"):"";let P=i.replace(/\.[^.]+$/,"");l=c?`${c}/${P}`:P;let q=Math.round(Date.now()/1e3),O={from_public_id:w,to_public_id:l,timestamp:String(q)},N=Object.keys(O).sort().map(T=>`${T}=${O[T]}`).join("&"),D=(await import('crypto')).createHash("sha256").update(N+d.apiSecret).digest("hex"),Y=new FormData;Y.append("from_public_id",w),Y.append("to_public_id",l),Y.append("timestamp",String(q)),Y.append("signature",D),Y.append("api_key",d.apiKey);let Q=await fetch(`https://api.cloudinary.com/v1_1/${d.cloudName}/image/rename`,{method:"POST",body:Y});if(Q.ok)return (await Q.json()).secure_url;{let T=await Q.json();console.warn("[Cloudinary rename] Failed:",T);let ee=u?`/${u}/`:"/";return `https://res.cloudinary.com/${d.cloudName}/image/upload${ee}${l}.${i.split(".").pop()}`}}catch(g){console.warn("[Cloudinary rename] Error:",g.message);let f=u?`/${u}/`:"/";return `https://res.cloudinary.com/${d.cloudName}/image/upload${f}${l}.${i.split(".").pop()}`}},getImageUrl(s,i){if(!i)return s;let u=s.split("/upload/");if(u.length!==2)return s;let l=[];if(i.width&&l.push(`w_${i.width}`),i.height&&l.push(`h_${i.height}`),i.fit){let g={crop:"c_fill",clip:"c_fit",scale:"c_scale",fill:"c_fill"};l.push(g[i.fit]||"c_limit");}i.quality&&l.push(`q_${i.quality}`),i.format&&l.push(`f_${i.format}`);let c=l.join(",");return `${u[0]}/upload/${c}/${u[1]}`},async generateThumbnail(s){return this.getImageUrl(s.url,{width:200,height:200,fit:"crop"})},async list(){return []},async exists(s){return (await fetch(s,{method:"HEAD"})).ok},async createFolder(){},async deleteFolder(){}}}function Or(d){let e=null;async function t(){return e||(e=new basicFtp.Client(6e4,{allowSeparateTransferHost:true}),e.ftp.verbose=false,await e.access({host:d.host,port:d.port||21,user:d.user,password:d.password,secure:d.secure,secureOptions:{}})),e}let s=l=>`${d.prefix?`${d.prefix}/`:""}${l}`.replace(/\/+/g,"/"),i=l=>`${d.baseUrl.replace(/\/$/,"")}/${l}`,u=()=>d.baseUrl.replace(/\/$/,"")+"/";return ae({name:d.type,displayName:d.type==="sftp"?"SFTP Storage":"FTP Storage",supportsDynamicResize:false,async upload(l,c){let g=await t(),f=s(`${c?.folder?`${c.folder}/`:""}${c?.filename||l.name}`),I=Buffer.from(await l.arrayBuffer()),w=f.split("/").slice(0,-1),j="";for(let q of w){j=j?`${j}/${q}`:q;try{await g.ensureDir(j);}catch{}}let P=stream.Readable.from(I);return await g.uploadFrom(P,f),{id:Buffer.from(f).toString("base64url"),filename:c?.filename||l.name,originalName:l.name,mimeType:l.type,size:I.length,url:i(f),thumbnailUrl:l.type.startsWith("image/")?i(f):void 0,folder:c?.folder,provider:d.type,metadata:c?.metadata,createdAt:new Date().toISOString()}},async delete(l){let c=await t(),g=l.replace(u(),"");await c.remove(g);},async rename(l,c){let g=await t(),f=l.replace(u(),""),I=d.prefix?`${d.prefix}/${c}`:c;return await g.rename(f,I),i(I)},async list(l){let c=await t(),g=s(l||""),f;try{f=await c.list(g);}catch{return []}return f.filter(I=>I.type===0).map(I=>({id:Buffer.from(`${g}/${I.name}`).toString("base64url"),filename:I.name,originalName:I.name,mimeType:"application/octet-stream",size:Number(I.size)||0,url:i(`${g}/${I.name}`.replace(/\/+/g,"/")),provider:d.type,createdAt:I.modifiedAt?I.modifiedAt.toISOString():new Date().toISOString()}))},async exists(l){let c=await t(),g=l.replace(u(),"");try{return await c.size(g),!0}catch{return  false}},async createFolder(l){let c=await t(),g=s(l);await c.ensureDir(g);},async deleteFolder(l){let c=await t(),g=s(l);await c.removeDir(g);}})}async function Jt(d){let e=d.getStorageConfig(),t=ut();try{return await t.resolve(e.type,e)}catch(s){return console.warn(`[resolveProvider] ${s.message} \u2014 falling back to local storage`),me({uploadDir:Ne__default.default.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"})}}function ae(d){return {async uploadFromUrl(e,t){let s=await fetch(e);if(!s.ok)throw new Error(`Failed to fetch: ${s.statusText}`);let i=await s.blob(),u=e.split("/").pop()||"file",l=new File([i],u,{type:i.type});return this.upload(l,t)},getImageUrl(e,t){if(!t||Object.keys(t).length===0)return e;let s=new URLSearchParams({url:e});return t.width&&s.set("w",String(t.width)),t.height&&s.set("h",String(t.height)),t.quality&&s.set("q",String(t.quality)),t.format&&s.set("f",t.format),t.cropWidth&&t.cropHeight&&(s.set("cx",String(t.cropX??0)),s.set("cy",String(t.cropY??0)),s.set("cw",String(t.cropWidth)),s.set("ch",String(t.cropHeight))),`/api/media/resize?${s.toString()}`},async generateThumbnail(e){return this.getImageUrl(e.url,{width:400,height:400})},...d}}async function Zt(d){if(!d)return console.warn("[resolveProviderWithConfig] No config, using local"),me({uploadDir:Ne__default.default.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"});let e=d.type||"local",t=ut();try{return await t.resolveWithConfig(e,d)}catch(s){return console.warn(`[resolveProviderWithConfig] ${s.message} \u2014 falling back to local storage`),me({uploadDir:Ne__default.default.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"})}}async function Qt(d){let e=await ft__default.default(d).metadata(),t=ft__default.default(d).webp({quality:85}),s=ft__default.default(d).resize({width:500,withoutEnlargement:true}).webp({quality:80});return {buffer:await t.toBuffer(),thumbnailBuffer:await s.toBuffer(),width:e.width,height:e.height,format:"webp"}}var er=false;function ve(d){if(typeof d!="string")return d;let e=d.replace(/-/g,"").toLowerCase();return e.length===32?`${e.slice(0,8)}-${e.slice(8,12)}-${e.slice(12,16)}-${e.slice(16,20)}-${e.slice(20)}`:d}var Me=class d{db;storage;dialect;genId;mediaTable="media";foldersTable="media_folders";constructor(e,t,s){this.db=e,this.storage=t,this.dialect=s?.dialect||"sqlite",this.genId=s?.genId||chunkZ7CNY2UV_cjs.e;}static async init(e,t){let s;if(t?.storageConfig)s=await Zt(t.storageConfig);else {let u=new chunkAJAZ7D3W_cjs.a(e);await u.load(),s=await Jt(u);}let i=new d(e,s,t);return await i.ensureTables(),i}async ensureTables(){if(this.dialect==="sqlite")this.db.exec(`
         CREATE TABLE IF NOT EXISTS media (
           id TEXT PRIMARY KEY,
           filename TEXT NOT NULL UNIQUE,
@@ -30,7 +30,7 @@
           created_at TEXT
         );
         CREATE INDEX IF NOT EXISTS idx_media_folders_path ON media_folders(path);
-      `);else if(this.dialect==="postgres"){if(Qt)return;let{sql:e}=await import('drizzle-orm');await this.db.execute(e`
+      `);else if(this.dialect==="postgres"){if(er)return;let{sql:e}=await import('drizzle-orm');await this.db.execute(e`
         CREATE TABLE IF NOT EXISTS "media" (
           "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
           "filename" VARCHAR(255) NOT NULL UNIQUE,
@@ -58,11 +58,11 @@
           "parent_path" TEXT,
           "created_at" TIMESTAMP NOT NULL DEFAULT NOW()
         )
-      `),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_folders_path" ON "media_folders" ("path")`),Qt=true;}}now(){return new Date().toISOString()}buildFindConditions(e){let t=[],s=[],i=e.sortBy==="name"?"title":e.sortBy==="createdAt"?"created_at":e.sortBy==="updatedAt"?"updated_at":e.sortBy||"created_at",u=e.sortDir==="asc"?"ASC":"DESC";if(e.search){t.push("(title LIKE ? OR filename LIKE ? OR original_name LIKE ? OR alt LIKE ?)");let c=`%${e.search}%`;s.push(c,c,c,c);}return e.type&&e.type!=="all"&&(t.push("mime_type LIKE ?"),s.push(`${e.type}/%`)),e.folder&&(t.push("(folder = ? OR folder LIKE ?)"),s.push(e.folder,`${e.folder}/%`)),{where:t.length>0?`WHERE ${t.join(" AND ")}`:"",params:s,orderBy:u,sortCol:i}}rowToMedia(e,t){return {id:e.id,filename:e.filename,title:e.title??null,originalName:e.original_name??e.originalName,mimeType:e.mime_type??e.mimeType,fileSize:e.file_size??e.fileSize,width:e.width??null,height:e.height??null,url:l.resolveMediaUrl(e.url,t),thumbnailUrl:l.resolveMediaUrl(e.thumbnail_url??e.thumbnailUrl??null,t),folder:e.folder??null,provider:e.provider,alt:e.alt??null,caption:e.caption??null,metadata:typeof e.metadata=="string"?JSON.parse(e.metadata):e.metadata??null,createdAt:e.created_at??e.createdAt,updatedAt:e.updated_at??e.updatedAt}}static resolveMediaUrl(e,t){return e?e.startsWith("http://")||e.startsWith("https://")||e.startsWith("blob:")||e.startsWith("data:")?e:`${(process.env.KYRO_BASE_URL||t||"http://localhost:4321").replace(/\/+$/,"")}${e.startsWith("/")?"":"/"}${e}`:null}async sqliteRun(e,t=[]){let s=this.db.prepare(e),i=e.trim().toLowerCase();return i.startsWith("insert")||i.startsWith("update")||i.startsWith("delete")?s.run(...t):s.all(...t)}sqliteGet(e,t=[]){return this.db.prepare(e).get(...t)}async upload(e,t=""){let s=e.type.startsWith("image/"),i,u=e,d=e.name,c=null,g=null;if(s&&!e.type.includes("svg")){let P=Buffer.from(await e.arrayBuffer());i=await Zt(P),d=`${e.name.replace(/\.[^/.]+$/,"").toLowerCase().replace(/[^a-z0-9]/g,"-").replace(/-+/g,"-").substring(0,50)}.webp`,c=i.width??null,g=i.height??null,u=new File([i.buffer],d,{type:"image/webp"});}let f=await this.storage.upload(u,{folder:t,filename:d}),I=await this.storage.generateThumbnail({...f,id:"",provider:this.storage.name,createdAt:this.now()},{width:400,height:400}),b=this.genId(),j=this.now();if(this.dialect==="sqlite")await this.sqliteRun(`INSERT INTO ${this.mediaTable}
+      `),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_folders_path" ON "media_folders" ("path")`),er=true;}}now(){return new Date().toISOString()}buildFindConditions(e){let t=[],s=[],i=e.sortBy==="name"?"title":e.sortBy==="createdAt"?"created_at":e.sortBy==="updatedAt"?"updated_at":e.sortBy||"created_at",u=e.sortDir==="asc"?"ASC":"DESC";if(e.search){t.push("(title LIKE ? OR filename LIKE ? OR original_name LIKE ? OR alt LIKE ?)");let c=`%${e.search}%`;s.push(c,c,c,c);}return e.type&&e.type!=="all"&&(t.push("mime_type LIKE ?"),s.push(`${e.type}/%`)),e.folder&&(t.push("(folder = ? OR folder LIKE ?)"),s.push(e.folder,`${e.folder}/%`)),{where:t.length>0?`WHERE ${t.join(" AND ")}`:"",params:s,orderBy:u,sortCol:i}}rowToMedia(e,t){return {id:e.id,filename:e.filename,title:e.title??null,originalName:e.original_name??e.originalName,mimeType:e.mime_type??e.mimeType,fileSize:e.file_size??e.fileSize,width:e.width??null,height:e.height??null,url:d.resolveMediaUrl(e.url,t),thumbnailUrl:d.resolveMediaUrl(e.thumbnail_url??e.thumbnailUrl??null,t),folder:e.folder??null,provider:e.provider,alt:e.alt??null,caption:e.caption??null,metadata:typeof e.metadata=="string"?JSON.parse(e.metadata):e.metadata??null,createdAt:e.created_at??e.createdAt,updatedAt:e.updated_at??e.updatedAt}}static resolveMediaUrl(e,t){return e?e.startsWith("http://")||e.startsWith("https://")||e.startsWith("blob:")||e.startsWith("data:")?e:`${(process.env.KYRO_BASE_URL||t||"http://localhost:4321").replace(/\/+$/,"")}${e.startsWith("/")?"":"/"}${e}`:null}async sqliteRun(e,t=[]){let s=this.db.prepare(e),i=e.trim().toLowerCase();return i.startsWith("insert")||i.startsWith("update")||i.startsWith("delete")?s.run(...t):s.all(...t)}sqliteGet(e,t=[]){return this.db.prepare(e).get(...t)}async upload(e,t=""){let s=e.type.startsWith("image/"),i,u=e,l=e.name,c=null,g=null;if(s&&!e.type.includes("svg")){let P=Buffer.from(await e.arrayBuffer());i=await Qt(P),l=`${e.name.replace(/\.[^/.]+$/,"").toLowerCase().replace(/[^a-z0-9]/g,"-").replace(/-+/g,"-").substring(0,50)}.webp`,c=i.width??null,g=i.height??null,u=new File([i.buffer],l,{type:"image/webp"});}let f=await this.storage.upload(u,{folder:t,filename:l}),I=await this.storage.generateThumbnail({...f,id:"",provider:this.storage.name,createdAt:this.now()},{width:400,height:400}),w=this.genId(),j=this.now();if(this.dialect==="sqlite")await this.sqliteRun(`INSERT INTO ${this.mediaTable}
           (id, filename, title, original_name, mime_type, file_size, width, height, url, thumbnail_url, folder, provider, alt, caption, metadata, created_at, updated_at)
-         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,[b,f.filename,e.name.replace(/\.[^/.]+$/,""),e.name,f.mimeType,f.size,c,g,f.url,I,t||null,this.storage.name,null,null,null,j,j]);else {let{media:P}=await import('./media-OUBQTIQP.cjs'),q=f.mimeType,O=q.startsWith("image/")?"image":q.startsWith("video/")?"video":q.startsWith("audio/")?"audio":q.startsWith("application/pdf")?"document":["application/zip","application/x-zip","application/x-tar","application/gzip","application/x-7z"].includes(q)?"archive":"other";await this.db.insert(P).values({id:b,filename:f.filename,title:e.name.replace(/\.[^/.]+$/,""),originalName:e.name,mimeType:q,fileSize:f.size,width:c,height:g,url:f.url,thumbnailUrl:I,folder:t||"",provider:this.storage.name,type:O,status:"active",alt:null,caption:null,createdAt:new Date,updatedAt:new Date}).returning();}return {id:b,filename:f.filename,title:e.name.replace(/\.[^/.]+$/,""),originalName:e.name,mimeType:f.mimeType,fileSize:f.size,width:c,height:g,url:f.url,thumbnailUrl:I,folder:t||null,provider:this.storage.name,alt:null,caption:null,metadata:null,createdAt:j,updatedAt:j}}async uploadFromUrl(e,t=""){let s=await fetch(e);if(!s.ok)throw new Error(`Failed to fetch URL: ${s.status}`);let i=await s.blob(),u=e.split("/").pop()||"url-image",d=s.headers.get("content-type")||i.type||"application/octet-stream",c=new File([i],u,{type:d});return this.upload(c,t)}async delete(e,t){let s=await this.findById(e,t);if(s){if(await this.deleteFile(s.url),s.thumbnailUrl&&s.thumbnailUrl!==s.url&&s.thumbnailUrl!==s.url+"?thumb")try{await this.deleteFile(s.thumbnailUrl);}catch{}if(this.dialect==="sqlite")await this.sqliteRun(`DELETE FROM ${this.mediaTable} WHERE id = ?`,[e]);else {let{media:i}=await import('./media-OUBQTIQP.cjs'),{eq:u}=await import('drizzle-orm');await this.db.delete(i).where(u(i.id,e));}}}async deleteFile(e){await this.storage.delete(e);}async rename(e,t,s){let i=await this.findById(e,s);if(!i)return null;let u=await this.storage.rename(i.url,t),d;if(i.thumbnailUrl||this.storage.name==="cloudinary"){let I=u.match(/\/upload\/(v\d+)\//),b=I?I[1]+"/":"",j=u.match(/(.+?)\/upload\//);d=`${j?j[1]:"https://res.cloudinary.com/"+this.storage.config?.cloudName||"unknown"}/upload/w_200,h_200,c_fill/${b}${t}`;}let c=i.filename.split(".").pop(),g=t.includes(".")?t:`${t}.${c}`,f={url:u,filename:g,thumbnailUrl:d};if(this.dialect==="sqlite"){let I={...f};"thumbnailUrl"in I&&(I.thumbnail_url=I.thumbnailUrl,delete I.thumbnailUrl);let b=Object.keys(I).map(P=>`${P} = ?`).join(", "),j=Object.values(I);await this.sqliteRun(`UPDATE ${this.mediaTable} SET ${b}, updated_at = ? WHERE id = ?`,[...j,this.now(),e]);}else {let{media:I}=await import('./media-OUBQTIQP.cjs'),{eq:b}=await import('drizzle-orm');await this.db.update(I).set({...f,updatedAt:this.now()}).where(b(I.id,e));}return {...i,...f,updatedAt:this.now(),thumbnailUrl:f.thumbnailUrl??null}}async findById(e,t){if(this.dialect==="sqlite"){let d=this.sqliteGet(`SELECT * FROM ${this.mediaTable} WHERE id = ?`,[e]);return d?this.rowToMedia(d,t):null}let{media:s}=await import('./media-OUBQTIQP.cjs'),{eq:i}=await import('drizzle-orm'),[u]=await this.db.select().from(s).where(i(s.id,e));return u?this.rowToMedia(u,t):null}async find(e={},t){let{page:s=1,limit:i=30,search:u="",type:d="",folder:c="",sortBy:g="createdAt",sortDir:f="desc"}=e,{where:I,params:b,orderBy:j,sortCol:P}=this.buildFindConditions({page:s,limit:i,search:u,type:d,folder:c,sortBy:g,sortDir:f}),q=(s-1)*i;if(this.dialect==="sqlite"){let le=this.sqliteGet(`SELECT COUNT(*) as cnt FROM ${this.mediaTable} ${I}`,b)?.cnt??0;return {docs:(await this.sqliteRun(`SELECT * FROM ${this.mediaTable} ${I} ORDER BY ${P} ${j} LIMIT ? OFFSET ?`,[...b,i,q])).map(Te=>this.rowToMedia(Te,t)),totalDocs:le,page:s,limit:i,totalPages:Math.ceil(le/i)}}let{media:O}=await import('./media-OUBQTIQP.cjs'),{like:B,or:ne,and:D,asc:Y,desc:Q,eq:T,sql:ee}=await import('drizzle-orm'),ie=[];u&&ie.push(ne(B(O.title,`%${u}%`),B(O.filename,`%${u}%`),B(O.originalName,`%${u}%`),B(O.alt,`%${u}%`))),d&&d!=="all"&&ie.push(B(O.mimeType,`${d}/%`)),c&&ie.push(ne(T(O.folder,c),B(O.folder,`${c}/%`)));let Ae=ie.length>0?D(...ie):void 0,We=O[{created_at:"createdAt",updated_at:"updatedAt",title:"title",filename:"filename",file_size:"fileSize",mime_type:"mimeType",original_name:"originalName"}[P]||"createdAt"],Se=f==="asc"?Y(We):Q(We),he=await this.db.select().from(O).where(Ae).orderBy(Se).limit(i).offset(q),[{count:K}]=await this.db.select({count:ee`count(*)`}).from(O).where(Ae),oe=Number(K);return {docs:he.map(de=>this.rowToMedia(de,t)),totalDocs:oe,page:s,limit:i,totalPages:Math.ceil(oe/i)}}async update(e,t,s){let i=this.now();if(this.dialect==="sqlite"){let g=["updated_at = ?"],f=[i];t.title!==void 0&&(g.push("title = ?"),f.push(t.title)),t.alt!==void 0&&(g.push("alt = ?"),f.push(t.alt)),t.caption!==void 0&&(g.push("caption = ?"),f.push(t.caption)),t.folder!==void 0&&(g.push("folder = ?"),f.push(t.folder)),t.metadata!==void 0&&(g.push("metadata = ?"),f.push(t.metadata===null?null:JSON.stringify(t.metadata))),t.originalName!==void 0&&(g.push("original_name = ?"),f.push(t.originalName)),f.push(e),await this.sqliteRun(`UPDATE ${this.mediaTable} SET ${g.join(", ")} WHERE id = ?`,f);let I=this.sqliteGet(`SELECT * FROM ${this.mediaTable} WHERE id = ?`,[e]);return I?this.rowToMedia(I,s):null}let{media:u}=await import('./media-OUBQTIQP.cjs'),{eq:d}=await import('drizzle-orm'),[c]=await this.db.update(u).set({...t,updatedAt:new Date}).where(d(u.id,e)).returning();return c?this.rowToMedia(c,s):null}async updateMany(e,t){let s=this.now();if(this.dialect==="sqlite")for(let i of e){let u=["updated_at = ?"],d=[s];t.folder!==void 0&&(u.push("folder = ?"),d.push(t.folder||null)),d.push(i),await this.sqliteRun(`UPDATE ${this.mediaTable} SET ${u.join(", ")} WHERE id = ?`,d);}else {let{media:i}=await import('./media-OUBQTIQP.cjs'),{eq:u}=await import('drizzle-orm');for(let d of e)await this.db.update(i).set({...t,updatedAt:new Date}).where(u(i.id,d));}}async listFolders(){if(this.dialect==="sqlite")return (await this.sqliteRun(`SELECT path FROM ${this.foldersTable} UNION
-         SELECT folder as path FROM ${this.mediaTable} WHERE folder IS NOT NULL AND folder != ''`)).map(f=>f.path).filter(f=>f&&f!=="").sort();let{media:e,mediaFolders:t}=await import('./media-OUBQTIQP.cjs'),{eq:s,sql:i}=await import('drizzle-orm'),u=await this.db.select({folder:e.folder}).from(e).groupBy(e.folder),d=await this.db.select({path:t.path}).from(t),c=new Set([...u.map(g=>g.folder),...d.map(g=>g.path)]);return Array.from(c).filter(g=>g&&g!=="").sort()}async createFolder(e,t=""){let s=t?`${t}/${e}`:e;await this.storage.createFolder?.(s);let i=this.now();if(this.dialect==="sqlite")await this.sqliteRun(`INSERT OR IGNORE INTO ${this.foldersTable} (path, name, parent_path, created_at) VALUES (?, ?, ?, ?)`,[s,e,t||null,i]);else {let{mediaFolders:u}=await import('./media-OUBQTIQP.cjs');await this.db.insert(u).values({path:s,name:e,parentPath:t||null,createdAt:new Date}).onConflictDoNothing();}}async deleteFolder(e){let t=await this.find({folder:e,limit:1e4});for(let s of t.docs)await this.delete(s.id);if(await this.storage.deleteFolder?.(e),this.dialect==="sqlite")await this.sqliteRun(`DELETE FROM ${this.foldersTable} WHERE path = ? OR path LIKE ?`,[e,`${e}/%`]);else {let{mediaFolders:s}=await import('./media-OUBQTIQP.cjs'),{like:i,or:u,eq:d}=await import('drizzle-orm');await this.db.delete(s).where(u(d(s.path,e),i(s.path,`${e}/%`)));}}};function Be(l){return l.map(e=>`${e.path.join(".")}: ${e.message}`).join(", ")}function ge(l,e){if(!(!l||typeof l!="object"))for(let t of e){if(!t.name||!(t.name in l))continue;if(l[t.name]===""&&(t.type==="text"||t.type==="textarea"||t.type==="code"||t.type==="markdown"||t.type==="email"||t.type==="password"||t.type==="color"||(l[t.name]=null)),t.type==="tabs"&&t.name&&Array.isArray(t.tabs)&&l[t.name]&&typeof l[t.name]=="object")for(let i of t.tabs)Array.isArray(i.fields)&&ge(l[t.name],i.fields);else if((t.type==="group"||t.type==="collapsible")&&t.name&&Array.isArray(t.fields)&&l[t.name]&&typeof l[t.name]=="object")ge(l[t.name],t.fields);else if(t.type==="array"&&t.name&&Array.isArray(t.fields)&&Array.isArray(l[t.name]))for(let i of l[t.name])i&&typeof i=="object"&&ge(i,t.fields);else if(t.type==="blocks"&&t.name&&Array.isArray(t.blocks)&&Array.isArray(l[t.name]))for(let i of l[t.name]){if(!i||typeof i!="object")continue;let u=i.type||i.blockType;if(!u)continue;let d=t.blocks.find(g=>g.slug===u);if(!d||!Array.isArray(d.fields))continue;let c=i.data&&typeof i.data=="object"?i.data:i;ge(c,d.fields);}}}function fe(l,e){if(!(!e||typeof e!="object"))for(let t of l){if(t.type==="richtext"&&t.name){let s=e[t.name];typeof s=="string"?e[t.name]=[{type:"paragraph",children:[{text:s}]}]:s&&typeof s=="object"&&!Array.isArray(s)&&s.type==="doc"&&Array.isArray(s.content)&&(e[t.name]=s.content);}if(t.type==="tabs"&&t.name&&Array.isArray(t.tabs)&&e[t.name]&&typeof e[t.name]=="object")for(let s of t.tabs)Array.isArray(s.fields)&&fe(s.fields,e[t.name]);else if((t.type==="group"||t.type==="collapsible")&&t.name&&Array.isArray(t.fields)&&e[t.name]&&typeof e[t.name]=="object")fe(t.fields,e[t.name]);else if(t.type==="array"&&t.name&&Array.isArray(t.fields)&&Array.isArray(e[t.name]))for(let s of e[t.name])s&&typeof s=="object"&&fe(t.fields,s);else if(t.type==="blocks"&&t.name&&Array.isArray(t.blocks)&&Array.isArray(e[t.name]))for(let s of e[t.name]){if(!s||typeof s!="object")continue;let i=s.type||s.blockType;if(!i)continue;let u=t.blocks.find(c=>c.slug===i);if(!u||!Array.isArray(u.fields))continue;let d=s.data&&typeof s.data=="object"?s.data:s;fe(u.fields,d);}}}function xe(l,e){if(!(!e||typeof e!="object")){for(let t of l)if(!(!t.name||!(t.name in e))){if(t.unique&&(t.type==="text"||t.type==="email"?e[t.name]=`${e[t.name]||t.name}-copy-${Date.now().toString(36)}`:delete e[t.name]),t.type==="tabs"&&t.name&&Array.isArray(t.tabs)&&e[t.name]&&typeof e[t.name]=="object")for(let s of t.tabs)Array.isArray(s.fields)&&xe(s.fields,e[t.name]);else if((t.type==="group"||t.type==="collapsible")&&t.name&&Array.isArray(t.fields)&&e[t.name]&&typeof e[t.name]=="object")xe(t.fields,e[t.name]);else if(t.type==="array"&&t.name&&Array.isArray(t.fields)&&Array.isArray(e[t.name]))for(let s of e[t.name])s&&typeof s=="object"&&(delete s.id,xe(t.fields,s));else if(t.type==="blocks"&&t.name&&Array.isArray(t.blocks)&&Array.isArray(e[t.name]))for(let s of e[t.name]){if(!s||typeof s!="object")continue;delete s.id;let i=s.type||s.blockType;if(!i)continue;let u=t.blocks.find(c=>c.slug===i);if(!u||!Array.isArray(u.fields))continue;let d=s.data&&typeof s.data=="object"?s.data:s;xe(u.fields,d);}}}}var Br={_media:{create:chunkWE46GGL4_cjs.d.MEDIA_UPLOAD,update:chunkWE46GGL4_cjs.d.MEDIA_UPLOAD,delete:chunkWE46GGL4_cjs.d.MEDIA_DELETE}};function ve(l,e){let t=Br[l];return t?t[e]:`collection.${e}`}function Kr(l){let e=l.headers.get("x-forwarded-for");return e?e.split(",")[0].trim():l.headers.get("x-real-ip")||"unknown"}function Ke(l,e,t,s,i){e?.apiKeyId&&l&&l.createAuditLog({action:"api_request",userId:e.userId||"",resource:"api_key",resourceId:e.apiKeyId,success:true,metadata:{endpoint:t,method:s,ip:Kr(i)}});}function ze(l){return l.baseUpdatedAt??l._baseUpdatedAt}function ht(l){let{baseUpdatedAt:e,_baseUpdatedAt:t,...s}=l;return s}function yt(l,e){return {error:"Document has changed since you started editing",code:"REVISION_CONFLICT",conflict:{expectedUpdatedAt:l??null,actualUpdatedAt:e.updatedAt??null,current:e}}}async function L(l,e,t,s,i,u,d=true,c="none"){return await chunkWE46GGL4_cjs.b(l,e,{user:s,req:t,tenantId:i,apiKey:u},{enablePublicAccess:d,defaultAccess:c})}async function G(l,e,t,s,i,u=true){return await chunkWE46GGL4_cjs.c(l,e,{user:s,req:t,tenantId:i},{enablePublicAccess:u})}async function U(l,e,t,s){if(t)return {user:t,tenantId:s,apiKeyContext:void 0,authType:"static"};if(e){let i=await e(l);if(i.status===200&&i.user)return {user:i.user,tenantId:i.tenantContext?.tenantId,apiKeyContext:i.apiKeyContext,authType:i.authType}}return {user:void 0,tenantId:void 0,apiKeyContext:void 0,authType:void 0}}function zr(l,e){if(l instanceof chunk5KGQOTLK_cjs.c&&l.dialect==="postgres")return new chunkGYQMNXXW_cjs.a({db:l.client});if(l instanceof chunkUCCFT5OO_cjs.a)return new chunkATLSIYRH_cjs.a({db:l.db});let t=Fe.resolve(e,"data","kyro.db");return new chunkET6NN2V2_cjs.a({path:process.env.KYRO_AUTH_DB_PATH||t})}function rr(l){let {registry:e,db:t,authSecret:s,authAdapter:i,checkSession:u,user:d,tenantId:c,cors:g,webhookService:f,settings:I}=l,b=new hono.Hono,j=I?.access?.apiAccess,P=I?.access?.enablePublicAccess??false,q=I?.access?.defaultCollectionAccess??"none";j?.requireAuth;let B=process.cwd(),ne=B.endsWith("admin")?Fe.resolve(B,".."):B,D=i||zr(t,ne),T=s?Ft({db:t,userLookup:async r=>await D.findUserById(r)||null}):null,ee=j?.cors?.allowedOrigins,ie=g?.origins,Ae=Array.isArray(ee)?ee:typeof ee=="string"&&ee?ee.split(`
-`).map(r=>r.trim()).filter(Boolean):[],Ie=Ae.length>0?Ae:ie||[];(Ie.length>0||g)&&b.use("*",async(r,o)=>{let m=r.req.header("Origin")||"*";if(Ie.length>0&&!Ie.includes(m))return r.json({error:"Origin not allowed"},403);let y=Ie.length>0?m:"*";if(r.header("Access-Control-Allow-Origin",y),r.header("Access-Control-Allow-Methods","GET, POST, PATCH, DELETE, OPTIONS"),r.header("Access-Control-Allow-Headers","Content-Type, Authorization, X-API-Key"),g?.credentials&&r.header("Access-Control-Allow-Credentials","true"),r.req.method==="OPTIONS")return r.text("");await o();});let Se=I?.access?.rateLimiting,he;if(Se?.enabled){let r=Se.maxRequests||100,o=Se.windowMs||6e4;he=new $e({"api:general":{window:o,max:r}}),b.use("/api/*",async(m,y)=>{if(!he)return y();let n=m.req.header("CF-Connecting-IP")||m.req.header("X-Forwarded-For")?.split(",")[0]?.trim()||m.req.header("X-Real-IP")||"unknown",a=await he.check("api:general",n);if(m.header("X-RateLimit-Limit",String(r)),m.header("X-RateLimit-Remaining",String(a.remaining)),m.header("X-RateLimit-Reset",String(a.resetAt)),!a.allowed)return m.json({error:"Too many requests",retryAfter:a.retryAfter},429);await y();});}let K=new Le({redis:D,jwtSecret:s||"change-me",baseUrl:process.env.KYRO_BASE_URL||"http://localhost:4321",rateLimiter:he});chunkAJAZ7D3W_cjs.b.fromConfig(t).then(r=>{r&&(K.email=r);}).catch(r=>{console.error("[Email] Failed to initialize transport from config:",r);}),b.post("/api/auth/login",async r=>K.login(r.req.raw)),b.post("/api/auth/register",async r=>K.register(r.req.raw)),b.post("/api/auth/logout",async r=>K.logout(r.req.raw)),b.post("/api/auth/refresh",async r=>K.refresh(r.req.raw)),b.get("/api/auth/me",async r=>K.me(r.req.raw)),b.get("/api/auth/sessions",async r=>K.listSessions(r.req.raw)),b.post("/api/auth/sessions/refresh",async r=>K.refreshSession(r.req.raw)),b.delete("/api/auth/sessions",async r=>K.revokeOtherSessions(r.req.raw)),b.delete("/api/auth/sessions/:id",async r=>K.revokeSession(r.req.raw,r.req.param("id"))),b.put("/api/auth/sessions/:id/name",async r=>K.renameSession(r.req.raw,r.req.param("id"))),b.get("/api/auth/access",async r=>{try{let{user:o,tenantId:m}=await U(r.req.raw,T,d,c);if(!o)return r.json({error:"Not authenticated"},401);let y={},n={};for(let a of e.getCollections()){let p={read:(await L(a,"read",r.req.raw,o,m,void 0,P,q)).allowed,create:(await L(a,"create",r.req.raw,o,m,void 0,P,q)).allowed,update:(await L(a,"update",r.req.raw,o,m,void 0,P,q)).allowed,delete:(await L(a,"delete",r.req.raw,o,m,void 0,P,q)).allowed};y[a.slug]=p;}for(let a of e.getGlobals()){let p={read:(await G(a,"read",r.req.raw,o,m,P)).allowed,update:(await G(a,"update",r.req.raw,o,m,P)).allowed};n[a.slug]=p;}return r.json({collections:y,globals:n})}catch(o){return r.json({error:o.message},500)}});let oe=typeof e.hasCollection=="function"&&e.hasCollection("users")?e.getCollection("users"):(()=>{try{return e.getCollection("users")}catch{return chunkGFU7AOI3_cjs.a}})();b.get("/api/users",async r=>{try{let{user:o,tenantId:m}=await U(r.req.raw,T,d,c),y=await L(oe,"read",r.req.raw,o,m,void 0,P,q);if(!y.allowed)return r.json({error:y.error},y.status||403);let n=parseInt(r.req.query("page")||"1"),a=Math.min(parseInt(r.req.query("limit")||"10"),100),p=r.req.query("search")||void 0,w=await D.findUsers({page:n,limit:a,search:p});return r.json({docs:w.users,totalDocs:w.total,limit:a,totalPages:Math.ceil(w.total/a),page:n,pagingCounter:(n-1)*a+1,hasPrevPage:n>1,hasNextPage:n<Math.ceil(w.total/a),prevPage:n>1?n-1:null,nextPage:n<Math.ceil(w.total/a)?n+1:null})}catch(o){return console.error("[API] Error listing users:",o),r.json({error:o.message},500)}}),b.get("/api/users/:id",async r=>{try{let{user:o,tenantId:m}=await U(r.req.raw,T,d,c),y=r.req.param("id"),n=await D.findUserById(y);return n?r.json({data:n}):r.json({error:"User not found"},404)}catch(o){return r.json({error:o.message},500)}}),b.post("/api/users",async r=>{try{let{user:o,tenantId:m}=await U(r.req.raw,T,d,c),y=await L(oe,"create",r.req.raw,o,m,void 0,P,q);if(!y.allowed)return r.json({error:y.error},y.status||403);let n=await r.req.json();if(!n.email||!n.password)return r.json({error:"Email and password are required"},400);if(await D.findUserByEmail(n.email))return r.json({error:"Email already in use"},400);let p=await D.createUser({email:n.email,password:n.password,name:n.name,role:n.role||"customer",avatar:n.avatar,tenantId:n.tenantId});return o&&D?.createAuditLog({action:"user_create",userId:o.id,resource:"users",resourceId:p.id,success:!0}),r.json({data:p,message:"User created successfully"},201)}catch(o){return r.json({error:o.message},500)}}),b.patch("/api/users/:id",async r=>{try{let{user:o,tenantId:m}=await U(r.req.raw,T,d,c),y=await L(oe,"update",r.req.raw,o,m,void 0,P,q);if(!y.allowed)return r.json({error:y.error},y.status||403);let n=r.req.param("id"),a=await r.req.json(),p=await D.findUserById(n);if(!p)return r.json({error:"User not found"},404);let w={};a.name!==void 0&&(w.name=a.name),a.email!==void 0&&(w.email=a.email),a.role!==void 0&&(w.role=a.role),a.avatar!==void 0&&(w.avatar=typeof a.avatar=="object"&&a.avatar!==null?a.avatar.id||String(a.avatar):a.avatar),a.tenantId!==void 0&&(w.tenantId=a.tenantId),a.emailVerified!==void 0&&(w.emailVerified=a.emailVerified),a.locked!==void 0&&(w.locked=a.locked),a.failedLoginAttempts!==void 0&&(w.failedLoginAttempts=a.failedLoginAttempts),a.lastLogin!==void 0&&(w.lastLogin=a.lastLogin);let h=await D.updateUser(n,w);return h?(o&&(D?.createAuditLog({action:"user_update",userId:o.id,resource:"users",resourceId:n,success:!0}),a.role&&p.role!==a.role&&D?.createAuditLog({action:"role_change",userId:o.id,resource:"users",resourceId:n,success:!0,metadata:{oldRole:p.role,newRole:a.role}})),r.json({data:h,message:"User updated successfully"})):r.json({error:"User update failed"},500)}catch(o){return r.json({error:o.message},500)}}),b.delete("/api/users/:id",async r=>{try{let{user:o,tenantId:m}=await U(r.req.raw,T,d,c),y=await L(oe,"delete",r.req.raw,o,m,void 0,P,q);if(!y.allowed)return r.json({error:y.error},y.status||403);let n=r.req.param("id");if(o&&o.id===n)return r.json({error:"You cannot delete your own account"},403);let a=await D.findUserById(n);return a?await D.deleteUser(n)?(o&&D?.createAuditLog({action:"user_delete",userId:o.id,resource:"users",resourceId:n,success:!0}),r.json({data:a,message:"User deleted successfully"})):r.json({error:"User deletion failed"},500):r.json({error:"User not found"},404)}catch(o){return r.json({error:o.message},500)}}),b.get("/api/auth/audit-logs",async r=>{try{let{user:o,tenantId:m}=await U(r.req.raw,T,d,c),y=e.getCollection("audit_logs");if(y){let S=await L(y,"read",r.req.raw,o,m,void 0,P,q);if(!S.allowed)return r.json({error:S.error},S.status||403)}else if(!o)return r.json({error:"Authentication required"},401);let n=parseInt(r.req.query("page")||"1"),a=Math.min(parseInt(r.req.query("limit")||"50"),100),p=r.req.query("action")||void 0,w=r.req.query("userId")||void 0,h=r.req.query("resource")||void 0,A=await D.findAuditLogs({action:p,userId:w,resource:h,limit:a,offset:(n-1)*a});return r.json({docs:A.logs,totalDocs:A.total,limit:a,totalPages:Math.ceil(A.total/a),page:n,pagingCounter:(n-1)*a+1,hasPrevPage:n>1,hasNextPage:n<Math.ceil(A.total/a),prevPage:n>1?n-1:null,nextPage:n<Math.ceil(A.total/a)?n+1:null})}catch(o){return console.error("[API] Error listing audit logs:",o),r.json({error:o.message},500)}});let de=null,le=null,H=async()=>{if(le)throw le;if(!de)try{let r=t instanceof chunk5KGQOTLK_cjs.c?t.dialect:"sqlite",o=r==="postgres"&&t instanceof chunk5KGQOTLK_cjs.c?t.client:t;de=await Ne.init(o,{dialect:r});}catch(r){throw console.error("[getMedia] Init error:",r),le=r,r}return de};b.get("/api/media",async r=>{try{let{user:o}=await U(r.req.raw,T,d,c);if(!o)return r.json({error:"Authentication required"},401);let m=await H(),y=new URL(r.req.url).origin,n=parseInt(r.req.query("page")||"1"),a=parseInt(r.req.query("limit")||"30"),p=r.req.query("search")||"",w=r.req.query("type")||"",h=r.req.query("folder")||"",A=await m.find({page:n,limit:a,search:p,type:w,folder:h},y);return r.json(A)}catch(o){return console.error("[Media] find error:",o),r.json({error:o.message},500)}}),b.post("/api/media/upload",async r=>{try{let{user:o}=await U(r.req.raw,T,d,c);if(!o)return r.json({error:"Authentication required"},401);let m=await H();if((r.req.header("content-type")||"").includes("multipart/form-data")){let p=await r.req.formData(),w=p.get("file"),h=p.get("folder")||"";if(!w)return r.json({error:"No file uploaded"},400);let A=await m.upload(w,h);return r.json(A)}let{url:n}=await r.req.json();if(!n)return r.json({error:"No URL provided"},400);let a=await m.uploadFromUrl(n);return r.json(a)}catch(o){return console.error("[Media] upload error:",o),r.json({error:o.message},500)}}),b.get("/api/media/folders",async r=>{try{let{user:o}=await U(r.req.raw,T,d,c);if(!o)return r.json({error:"Authentication required"},401);let y=await(await H()).listFolders();return r.json(y)}catch(o){return console.error("[Media] folders error:",o),r.json({error:o.message},500)}}),b.post("/api/media/folders",async r=>{try{let{user:o}=await U(r.req.raw,T,d,c);if(!o)return r.json({error:"Authentication required"},401);let m=await H(),y=await r.req.json(),{name:n,parentPath:a}=y;return n?(await m.createFolder(n,a||""),r.json({message:"Folder created",path:a?`${a}/${n}`:n})):r.json({error:"Folder name is required"},400)}catch(o){return console.error("[Media] create folder error:",o),r.json({error:o.message},500)}}),b.delete("/api/media/folders",async r=>{try{let{user:o}=await U(r.req.raw,T,d,c);if(!o)return r.json({error:"Authentication required"},401);let m=await H(),y=r.req.query("path");return y?(await m.deleteFolder(y),r.json({message:"Folder deleted"})):r.json({error:"Path is required"},400)}catch(o){return console.error("[Media] delete folder error:",o),r.json({error:o.message},500)}}),b.delete("/api/media/:id",async r=>{try{let{user:o}=await U(r.req.raw,T,d,c);if(!o)return r.json({error:"Authentication required"},401);let m=await H(),y=r.req.param("id"),n=new URL(r.req.url).origin;return await m.delete(y,n),r.json({success:!0})}catch(o){return console.error("[Media] delete error:",o),r.json({error:o.message},500)}}),b.get("/api/media/resize",async r=>{try{let{user:o}=await U(r.req.raw,T,d,c);if(!o)return r.json({error:"Authentication required"},401);let m=r.req.query("url"),y=parseInt(r.req.query("w")||"0"),n=parseInt(r.req.query("h")||"0"),a=r.req.query("fit")||"cover",p=parseFloat(r.req.query("cx")||"0"),w=parseFloat(r.req.query("cy")||"0"),h=parseFloat(r.req.query("cw")||"0"),A=parseFloat(r.req.query("ch")||"0");if(!m)return r.json({error:"URL is required"},400);let x=(await H()).storage;if(x.name!=="local")return r.redirect(m);let v=x.config?.uploadDir||Fe.join(process.cwd(),"public","uploads"),R=x.config?.baseUrl||"/uploads";if(!m.startsWith(R))return r.redirect(m);let k=m.replace(R,""),$=Fe.join(v,k);if(!fs.existsSync($))return r.json({error:"File not found"},404);let C=fs.readFileSync($),E=gt__default.default(C);if(h>0&&A>0){let z=await gt__default.default(C).metadata(),_=z.width||0,N=z.height||0;if(_>0&&N>0){let ye=Math.max(0,Math.min(Math.round(p/100*_),_-1)),wt=Math.max(0,Math.min(Math.round(w/100*N),N-1)),ar=Math.max(1,Math.min(Math.round(h/100*_),_-ye)),nr=Math.max(1,Math.min(Math.round(A/100*N),N-wt));E=E.extract({left:ye,top:wt,width:ar,height:nr});}}(y>0||n>0)&&(E=E.resize({width:y>0?y:void 0,height:n>0?n:void 0,fit:a}));let F=await E.toBuffer(),W=await gt__default.default(C).metadata();return r.header("Content-Type",`image/${W.format||"webp"}`),r.header("Cache-Control","public, max-age=31536000, immutable"),r.body(F)}catch(o){return console.error("[Media] resize error:",o),r.json({error:o.message},500)}}),b.get("/api/media/:id",async r=>{try{let{user:o}=await U(r.req.raw,T,d,c);if(!o)return r.json({error:"Authentication required"},401);let m=await H(),y=r.req.param("id"),n=new URL(r.req.url).origin,a=await m.findById(y,n);return a?r.json(a):r.json({error:"Media not found"},404)}catch(o){return console.error("[Media] get error:",o),r.json({error:o.message},500)}}),b.patch("/api/media/:id",async r=>{try{let{user:o}=await U(r.req.raw,T,d,c);if(!o)return r.json({error:"Authentication required"},401);let m=await H(),y=r.req.param("id"),n=await r.req.json(),a=new URL(r.req.url).origin,p=["folder","metadata","title","alt","caption","originalName"],w={};for(let h of p)n[h]!==void 0&&(w[h]=n[h]);if(Object.keys(w).length>0){let h=await m.update(y,w,a);return r.json({doc:h})}return r.json({error:"No valid fields to update"},400)}catch(o){return console.error("[Media] update error:",o),r.json({error:o.message},500)}}),b.get("/api/media/test",async r=>{try{let{user:o}=await U(r.req.raw,T,d,c);if(!o)return r.json({error:"Authentication required"},401);let m=await H();return r.json({status:m?"initialized":"failed",serviceType:m?.constructor?.name})}catch(o){return console.error("[test] Error:",o),r.json({error:o.message,type:o.constructor?.name,stack:o.stack},500)}}),b.get("/api/storage-status",async r=>{try{let{user:o}=await U(r.req.raw,T,d,c);if(!o)return r.json({error:"Authentication required"},401);let m=!1,y="local";if(t)try{let n=t.prepare('SELECT provider FROM "_globals_storage-settings" LIMIT 1').get();n&&n.provider&&(m=!0,y=n.provider==="aws"?"s3":n.provider);}catch{try{let n=await t.findOne({collection:"_globals_storage-settings",where:{},draft:!0});n&&n.provider&&(m=!0,y=n.provider==="aws"?"s3":n.provider);}catch{}}return r.json({provider:y,configured:m,usage:0,limit:"unlimited"})}catch(o){return console.error("[Storage] status error:",o),r.json({error:o.message},500)}}),b.get("/api/plugins",async r=>{try{let{user:o}=await U(r.req.raw,T,d,c);if(!o)return r.json({error:"Authentication required"},401);let m=e.getPlugins(),y=e.storageProviders,n=await Promise.all(m.map(async a=>{let p=!0,w=a.name,h={};try{let A=await t.findOne({collection:"_globals_plugin-settings",where:{},draft:!0});A&&A.states&&(h=A.states);}catch{}return h[w]!==void 0&&(p=h[w]),y.setPluginEnabled(w,p),{id:w,name:w,version:a.version||"1.0.0",description:a.description||"",enabled:p,status:p?"active":"disabled"}}));return r.json(n)}catch(o){return console.error("[Plugins] list error:",o),r.json({error:o.message},500)}}),b.put("/api/plugins/:name/toggle",async r=>{try{let{user:o}=await U(r.req.raw,T,d,c);if(!o)return r.json({error:"Authentication required"},401);let m=r.req.param("name"),y=e.storageProviders,a=!y.isPluginEnabled(m),p=[];if(!a)for(let h of y.getAll())h.pluginName===m&&p.push(h.type);if(!(r.req.query("force")==="1")&&!a&&p.length>0){let h="local";try{let A=t?.prepare?.('SELECT provider FROM "_globals_storage-settings" LIMIT 1')?.get();A?.provider&&(h=A.provider);}catch{try{let A=await t?.findOne?.({collection:"_globals_storage-settings",where:{},draft:!0});A?.provider&&(h=A.provider);}catch{}}if(p.includes(h))return r.json({error:`Cannot disable "${m}" \u2014 storage provider "${h}" is currently active. Switch to Local storage first.`,requiresAction:!0,activeProvider:h},409)}try{let h={},A="global",S=await t.findOne({collection:"_globals_plugin-settings",where:{},draft:!0});S&&(h=S.states||{},A=S.id),h[m]=a,S?await t.update({collection:"_globals_plugin-settings",id:A,data:{states:h}}):await t.create({collection:"_globals_plugin-settings",data:{states:h,id:"global"}});}catch(h){console.warn(`[Plugins] Could not persist state for "${m}":`,h);}return y.setPluginEnabled(m,a),r.json({name:m,enabled:a})}catch(o){return console.error("[Plugins] toggle error:",o),r.json({error:o.message},500)}}),b.get("/api/health",r=>r.json({status:"ok",version:"0.11.0",collections:e.getCollectionSlugs(),timestamp:new Date().toISOString()})),b.get("/api/metrics",async r=>{try{let{user:o,tenantId:m}=await U(r.req.raw,T,d,c);if(!o)return r.json({error:"Authentication required"},401);let y=o.role==="admin"||o.role==="super_admin",a=e.getCollectionSlugs().filter(v=>!["users","audit_logs","media","_globals_access-settings","_globals_brand-settings"].includes(v)&&!v.startsWith("_globals_")).filter(v=>y||chunkQ3Q7BJVQ_cjs.a(o,`${v}:read`)),p=0;await Promise.all(a.map(async v=>{try{let k=(await t.find({collection:v,where:{},limit:1,page:1,tenantId:m})).totalDocs??0;p+=k;}catch{}}));let w=0;try{w=(await t.find({collection:"media",where:{},limit:1,page:1,tenantId:m})).totalDocs??0;}catch{}let h=0;try{h=(await D.findUsers({page:1,limit:1})).total??0;}catch{}let A=0;try{if(f){let v=await f.getWebhooks();A=Array.isArray(v)?v.length:0;}}catch{}let S=0;try{S=(await t.find({collection:chunkNY47CFVP_cjs.d,where:{},limit:1,page:1,tenantId:m})).totalDocs??0;}catch{}let x=p+w+h;return r.json({totalDocuments:p,totalMedia:y||chunkQ3Q7BJVQ_cjs.a(o,"media:read")?w:void 0,totalUsers:y||chunkQ3Q7BJVQ_cjs.a(o,"users:read")?h:void 0,totalWebhooks:y?A:void 0,totalApiKeys:y?S:void 0,totalStoredRecords:x,collections:a.length,timestamp:new Date().toISOString()})}catch(o){return console.error("[API] Metrics error:",o),r.json({error:o.message},500)}}),b.get("/api/kyro/schema",async r=>{let{user:o}=await U(r.req.raw,T,d,c);if(!o)return r.json({error:"Authentication required"},401);let m=n=>n.map(a=>{let p={name:a.name,type:a.type,label:a.label,required:a.required??false,unique:a.unique??false,indexed:a.indexed??false,defaultValue:a.defaultValue,admin:a.admin?{...a.admin}:void 0};return a.minLength!==void 0&&(p.minLength=a.minLength),a.maxLength!==void 0&&(p.maxLength=a.maxLength),a.pattern!==void 0&&(p.pattern=a.pattern),a.variant!==void 0&&(p.variant=a.variant),a.hasMany!==void 0&&(p.hasMany=a.hasMany),a.min!==void 0&&(p.min=a.min),a.max!==void 0&&(p.max=a.max),a.step!==void 0&&(p.step=a.step),a.integer!==void 0&&(p.integer=a.integer),a.options&&(p.options=a.options),a.relationTo&&(p.relationTo=a.relationTo),a.maxDepth!==void 0&&(p.maxDepth=a.maxDepth),a.minRows!==void 0&&(p.minRows=a.minRows),a.maxRows!==void 0&&(p.maxRows=a.maxRows),a.localized!==void 0&&(p.localized=a.localized),a.language&&(p.language=a.language),a.format&&(p.format=a.format),a.allowedTypes&&(p.allowedTypes=a.allowedTypes),a.maxSize&&(p.maxSize=a.maxSize),(a.type==="group"||a.type==="row"||a.type==="collapsible"&&a.fields)&&(p.fields=m(a.fields)),a.type==="array"&&a.fields&&(p.fields=m(a.fields)),a.type==="blocks"&&a.blocks&&(p.blocks=a.blocks.map(w=>({slug:w.slug,label:w.label,fields:m(w.fields)}))),a.type==="tabs"&&a.tabs&&(p.tabs=a.tabs.map(w=>({label:w.label,name:w.name,fields:m(w.fields)}))),p}),y={collections:{},globals:{}};for(let n of e.getCollections()){let a=n.slug;try{y.collections[a]={slug:a,label:n.label||a,fields:m(n.fields),jsonSchema:zodToJsonSchema.zodToJsonSchema(e.getZodSchema(a),{target:"openApi3"}),createSchema:zodToJsonSchema.zodToJsonSchema(e.getCreateZodSchema(a),{target:"openApi3"}),updateSchema:zodToJsonSchema.zodToJsonSchema(e.getUpdateZodSchema(a),{target:"openApi3"}),procedures:{find:{collection:a,where:"Record<string,any>",sort:"string",limit:"number",page:"number",depth:"number",select:"string[]",draft:"boolean"},findByID:{collection:a,id:"string",depth:"number",select:"string[]",draft:"boolean"},create:{collection:a,data:"Record<string,any>",depth:"number",select:"string[]"},update:{collection:a,id:"string",data:"Record<string,any>",depth:"number",select:"string[]",baseUpdatedAt:"string"},delete:{collection:a,id:"string"},count:{collection:a,where:"Record<string,any>"}}};}catch{}}for(let n of e.getGlobals()){let a=n.slug,p=n.fields;if(a==="storage-settings"){let w=e.storageProviders,h=w.getAll(),A=new Set(w.getAllAvailable(x=>w.isPluginEnabled(x)).map(x=>x.type));A.add("local");let S=new Set(h.map(x=>x.type));p=p.filter(x=>x.type==="group"&&x.name&&S.has(x.name)?A.has(x.name):true).map(x=>x.name==="provider"&&x.type==="select"?{...x,options:x.options.filter(v=>A.has(v.value))}:x);}try{y.globals[a]={slug:a,label:n.label||a,fields:m(p),jsonSchema:zodToJsonSchema.zodToJsonSchema(e.getZodSchema(a),{target:"openApi3"}),procedures:{get:{},update:{data:"Record<string,any>"}}};}catch{}}return r.json(y)}),b.get("/api/collections",async r=>{let{user:o}=await U(r.req.raw,T,d,c);if(!o)return r.json({error:"Authentication required"},401);let m=e.getCollections().map(y=>({slug:y.slug,label:y.label||y.slug,fields:y.fields.filter(n=>n.name).map(n=>({name:n.name,type:n.type,required:n.required,label:n.label}))}));return r.json(m)});function Te(r,o,m){if(m in o)return o[m];for(let y of r)if(y.name){if(y.type==="tabs"&&y.tabs){let n=o[y.name];if(n&&typeof n=="object"&&m in n)return n[m]}if((y.type==="group"||y.type==="collapsible")&&y.fields){let n=o[y.name];if(n&&typeof n=="object"){if(m in n)return n[m];let a=Te(y.fields,n,m);if(a!==void 0)return a}}}}b.get("/api/search",async r=>{try{let o=r.req.query("q")||"",m=r.req.query("collections")||"",y=Math.min(parseInt(r.req.query("limit")||"10"),50);if(!o||o.length<2)return r.json({results:[],message:"Query too short"});let{user:n,tenantId:a}=await U(r.req.raw,T,d,c),p=m?m.split(",").filter(Boolean):e.getCollectionSlugs(),w=[],h=new RegExp(o.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),"i");for(let A of e.getCollections()){if(!p.includes(A.slug)||!(await L(A,"read",r.req.raw,n,a,void 0,P,q)).allowed)continue;let x=A.fields.filter(v=>v.name&&v.name!=="id"&&(v.type==="text"||v.type==="email"||v.type==="textarea"||v.type==="richtext"||v.indexed)&&!v.admin?.hidden).map(v=>v.name);if(x.length!==0)try{let v=x.map(k=>{let $={};return $[k]={like:`%${o}%`},$}),R=await t.find({collection:A.slug,where:{OR:v},limit:y,tenantId:a});await chunkWE46GGL4_cjs.a(R.docs,A.fields,t,e,1,0);for(let k of R.docs){let $=A.admin?.useAsTitle||x.find(E=>E==="title"||E==="name"||E==="heading"||E==="slug"),C=$?Te(A.fields,k,$)??k.id:k.id;w.push({collection:A.slug,label:A.label||A.slug,id:k.id,title:String(C||"Untitled"),doc:k});}}catch(v){console.error(`Search error for ${A.slug}:`,v);}}return w.sort((A,S)=>A.label.localeCompare(S.label)),r.json({results:w})}catch(o){return r.json({error:o.message,results:[]},500)}}),b.get("/api/keys",async r=>{try{let{user:o,tenantId:m}=await U(r.req.raw,T,d,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:read"))return r.json({error:"Forbidden"},403);let y=parseInt(r.req.query("page")||"1"),n=Math.min(parseInt(r.req.query("limit")||"50"),100),a=await t.find({collection:chunkNY47CFVP_cjs.d,where:{},page:y,limit:n,tenantId:m}),p=(a.docs||[]).map(w=>({id:w.id,name:w.name,keyPrefix:w.keyPrefix,permissions:w.permissions||[],lastUsed:w.lastUsedAt,createdAt:w.createdAt}));return r.json({docs:p,totalDocs:a.totalDocs||p.length,totalPages:a.totalPages||1})}catch(o){return console.error("[ApiKeys] GET error:",o),r.json({error:o.message},500)}}),b.post("/api/keys",async r=>{try{let{user:o}=await U(r.req.raw,T,d,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);let m=await r.req.json();if(!m.name||typeof m.name!="string")return r.json({error:"name is required"},400);let y=chunkNY47CFVP_cjs.i(),n=await t.create({collection:chunkNY47CFVP_cjs.d,data:{userId:o.id,name:m.name,key:y,keyPrefix:chunkNY47CFVP_cjs.j(y),permissions:Array.isArray(m.permissions)?m.permissions:["*"],expiresAt:m.expiresAt||null,createdAt:new Date().toISOString()}});return await D?.createAuditLog({action:"api_key_create",userId:o.id,resource:"api_key",resourceId:n.id,success:!0,metadata:{keyName:m.name}}),r.json({...n,key:y,permissions:Array.isArray(m.permissions)?m.permissions:["*"]},201)}catch(o){return console.error("[ApiKeys] POST error:",o),r.json({error:o.message},500)}}),b.delete("/api/keys/:id",async r=>{try{let{user:o}=await U(r.req.raw,T,d,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);let m=r.req.param("id"),y=await t.findByID({collection:chunkNY47CFVP_cjs.d,id:m});return y?(await t.delete({collection:chunkNY47CFVP_cjs.d,id:m}),await D?.createAuditLog({action:"api_key_delete",userId:o.id,resource:"api_key",resourceId:m,success:!0,metadata:{keyName:y.name}}),r.json({message:"API key deleted"})):r.json({error:"API key not found"},404)}catch(o){return console.error("[ApiKeys] DELETE error:",o),r.json({error:o.message},500)}}),b.patch("/api/keys/:id",async r=>{try{let{user:o}=await U(r.req.raw,T,d,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);let m=r.req.param("id"),y=await r.req.json(),n=await t.findByID({collection:chunkNY47CFVP_cjs.d,id:m});if(!n)return r.json({error:"API key not found"},404);let a={};if(typeof y.name=="string"&&y.name.trim()&&(a.name=y.name.trim()),Array.isArray(y.permissions)&&(a.permissions=y.permissions),y.expiresAt!==void 0&&(a.expiresAt=y.expiresAt||null),Object.keys(a).length===0)return r.json({error:"Nothing to update"},400);let p=await t.update({collection:chunkNY47CFVP_cjs.d,id:m,data:a});return r.json({...p,keyPrefix:n.keyPrefix})}catch(o){return console.error("[ApiKeys] PATCH error:",o),r.json({error:o.message},500)}}),b.post("/api/keys/:id/rotate",async r=>{try{let{user:o}=await U(r.req.raw,T,d,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);let m=r.req.param("id"),y=await t.findByID({collection:chunkNY47CFVP_cjs.d,id:m});if(!y)return r.json({error:"API key not found"},404);let n=chunkNY47CFVP_cjs.i(),a=await t.update({collection:chunkNY47CFVP_cjs.d,id:m,data:{key:n,keyPrefix:chunkNY47CFVP_cjs.j(n),lastUsedAt:null}});return await D?.createAuditLog({action:"api_key_rotate",userId:o.id,resource:"api_key",resourceId:m,success:!0,metadata:{keyName:y.name}}),r.json({...a,key:n,permissions:y.permissions,expiresAt:y.expiresAt})}catch(o){return console.error("[ApiKeys] rotate error:",o),r.json({error:o.message},500)}}),b.get("/api/webhooks/actions",async r=>{try{let{user:o}=await U(r.req.raw,T,d,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:read"))return r.json({error:"Forbidden"},403);let m={generic:{label:"Custom URL",description:"POST to any endpoint with Kyro payload",configFields:[],envVars:[]},"github-dispatch":{label:"GitHub Actions",description:"Trigger a GitHub Actions workflow",configFields:[{name:"githubOwner",label:"Owner",required:!0,placeholder:"e.g., kyro-dev"},{name:"githubRepo",label:"Repository",required:!0,placeholder:"e.g., my-website"},{name:"githubEventType",label:"Event Type",required:!1,placeholder:"kyro-cms-content-update"}],envVars:["GITHUB_TOKEN"]},"dokploy-deploy":{label:"Dokploy",description:"Trigger a Dokploy deployment",configFields:[{name:"dokployProjectId",label:"Project ID",required:!0,placeholder:"e.g., proj_xxx"},{name:"dokployBranch",label:"Branch",required:!1,placeholder:"main"}],envVars:["DOKPLOY_TOKEN","DOKPLOY_HOST"]},"coolify-deploy":{label:"Coolify",description:"Trigger a Coolify redeployment",configFields:[{name:"coolifyProjectUuid",label:"Project UUID",required:!0,placeholder:"e.g., xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"},{name:"coolifyEnvironmentName",label:"Environment",required:!1,placeholder:"production"}],envVars:["COOLIFY_TOKEN","COOLIFY_HOST"]}};return r.json({actions:m})}catch(o){return console.error("[Webhooks] actions error:",o),r.json({error:o.message},500)}}),b.get("/api/webhooks",async r=>{try{let{user:o}=await U(r.req.raw,T,d,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:read"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=await f.getWebhooks();return r.json({docs:m})}catch(o){return console.error("[Webhooks] GET error:",o),r.json({error:o.message},500)}}),b.post("/api/webhooks",async r=>{try{let{user:o}=await U(r.req.raw,T,d,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=await r.req.json(),y=await f.createWebhook(m);return await D?.createAuditLog({action:"webhook_create",userId:o.id,resource:"webhook",resourceId:y.id,success:!0,metadata:{name:y.name,url:y.url}}),r.json(y,201)}catch(o){return console.error("[Webhooks] POST error:",o),r.json({error:o.message},500)}}),b.get("/api/webhooks/:id",async r=>{try{let{user:o}=await U(r.req.raw,T,d,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:read"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=await f.getWebhookById(m);return y?r.json(y):r.json({error:"Webhook not found"},404)}catch(o){return console.error("[Webhooks] GET :id error:",o),r.json({error:o.message},500)}}),b.patch("/api/webhooks/:id",async r=>{try{let{user:o}=await U(r.req.raw,T,d,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=await r.req.json(),n=await f.updateWebhook(m,y);return n?(await D?.createAuditLog({action:"webhook_update",userId:o.id,resource:"webhook",resourceId:m,success:!0,metadata:{name:n.name}}),r.json(n)):r.json({error:"Webhook not found"},404)}catch(o){return console.error("[Webhooks] PATCH error:",o),r.json({error:o.message},500)}}),b.delete("/api/webhooks/:id",async r=>{try{let{user:o}=await U(r.req.raw,T,d,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=await f.getWebhookById(m);return y?(await f.deleteWebhook(m),await D?.createAuditLog({action:"webhook_delete",userId:o.id,resource:"webhook",resourceId:m,success:!0,metadata:{name:y.name}}),r.json({message:"Webhook deleted"})):r.json({error:"Webhook not found"},404)}catch(o){return console.error("[Webhooks] DELETE error:",o),r.json({error:o.message},500)}}),b.post("/api/webhooks/:id/test",async r=>{try{let{user:o}=await U(r.req.raw,T,d,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=await f.testWebhook(m);return y?r.json(y):r.json({error:"Webhook not found"},404)}catch(o){return console.error("[Webhooks] test error:",o),r.json({error:o.message},500)}}),b.get("/api/webhooks/:id/history",async r=>{try{let{user:o}=await U(r.req.raw,T,d,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:read"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=Math.min(parseInt(r.req.query("limit")||"50"),100),n=await f.getDeliveryHistory(m,y);return r.json({docs:n})}catch(o){return console.error("[Webhooks] history error:",o),r.json({error:o.message},500)}});function He(r){let o={},m=["name","type","required","hasMany","relationTo","options","min","max","minLength","maxLength","defaultValue","label","localized","admin","unique","index","hidden","readOnly","deprecated"];for(let y of m)y in r&&(o[y]=r[y]);return r.fields&&(o.fields=r.fields.map(He)),r.tabs&&(o.tabs=r.tabs.map(y=>({label:y.label,name:y.name,fields:y.fields.map(He)}))),o}b.get("/api/__schema",async r=>{try{let{user:o,apiKeyContext:m}=await U(r.req.raw,T,d,c);if(!o&&!m)return r.json({error:"Unauthorized"},401);let n=e.getCollections().filter(a=>a.slug!=="users"&&a.slug!=="audit_logs").map(a=>({slug:a.slug,label:a.label,labelPlural:a.labelPlural,singularLabel:a.singularLabel,timestamps:a.timestamps,auth:!!a.auth,tenantScoped:!!a.tenantScoped,upload:a.upload?{staticDir:a.upload.staticDir,imageSizes:a.upload.imageSizes,mimeTypes:a.upload.mimeTypes}:void 0,fields:a.fields.map(He)}));return r.json(n)}catch(o){return console.error("[Schema] error:",o),r.json({error:o.message},500)}});let sr=e.getCollections();for(let r of sr){let y=function(n,a){let p=[],w=new Set([...Object.keys(n),...Object.keys(a)]);for(let h of w)h==="id"||h==="createdAt"||h==="updatedAt"||JSON.stringify(n[h])!==JSON.stringify(a[h])&&p.push({field:h,oldValue:h in n?n[h]:void 0,newValue:h in a?a[h]:void 0});return p};let o=r.slug;if(o==="users"||o==="audit_logs")continue;let m=`/api/${o}`;b.post(`${m}/dynamic-options/:fieldName`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:w}=await U(n.req.raw,T,d,c),h=await L(r,"read",n.req.raw,a,p,w,P,q);if(!h.allowed)return n.json({error:h.error},h.status||403);let A=n.req.param("fieldName"),S=await n.req.json(),{data:x,siblingData:v}=S,R=ue(r.fields,A);if(!R)return n.json({error:"Field not found"},404);if(R.type!=="select")return n.json({error:"Field is not a select field"},400);let k=[];return typeof R.options=="function"?k=await R.options({data:x||{},siblingData:v||{}}):Array.isArray(R.options)&&(k=R.options),n.json({options:k})}catch(a){return n.json({error:a.message},500)}}),b.get(m,async n=>{try{let{user:a,tenantId:p,apiKeyContext:w}=await U(n.req.raw,T,d,c),h=await L(r,"read",n.req.raw,a,p,w,P,q);if(!h.allowed)return n.json({error:h.error},h.status||403);p&&t.setTenantContext({tenantId:p,userId:a?.id??"",role:a?.role,isSuperAdmin:a?.role==="super_admin"});let A=new URL(n.req.url),S=parseInt(A.searchParams.get("page")||"1"),x=Math.min(parseInt(A.searchParams.get("limit")||"10"),100),v=A.searchParams.get("sort")||void 0,R=parseInt(A.searchParams.get("depth")||"0"),k=A.searchParams.get("select")?.split(",")||void 0,$=A.searchParams.get("draft"),C=$==="true"?!0:$==="false"?!1:!!a,E={},F=A.searchParams.get("where");if(F)try{E=JSON.parse(F);}catch{return n.json({error:"Invalid JSON in where parameter"},400)}let W=await t.find({collection:o,where:E,sort:v,limit:x,page:S,depth:R,tenantId:p,select:k,draft:C});return await chunkWE46GGL4_cjs.a(W.docs,r.fields,t,e,1,R),n.json(W)}catch(a){return console.error("[API] list error:",a),n.json({error:a.message},500)}}),b.get(`${m}/:id/versions`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:w}=await U(n.req.raw,T,d,c),h=await L(r,"read",n.req.raw,a,p,w,P,q);if(!h.allowed)return n.json({error:h.error},h.status||403);let A=n.req.param("id");if(!A)return n.json({error:"Missing document ID"},400);let S=new URL(n.req.url),x=S.searchParams.get("compareA"),v=S.searchParams.get("compareB");if(Ke(D,w,`${m}/${A}/versions`,"GET",n.req.raw),x&&v){let[C,E]=await Promise.all([t.findVersionByID({collection:o,versionId:x,tenantId:p}),t.findVersionByID({collection:o,versionId:v,tenantId:p})]);if(!C||!E)return n.json({error:"Version not found"},404);let F=y(C.data,E.data);return n.json({diffs:F})}let R=parseInt(S.searchParams.get("page")||"1"),k=Math.min(parseInt(S.searchParams.get("limit")||"10"),100),$=await t.findVersions({collection:o,documentId:A,page:R,limit:k,tenantId:p});return n.json($)}catch(a){return console.error("[API] versions error:",a),n.json({error:a.message},500)}}),b.put(`${m}/:id/draft`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:w}=await U(n.req.raw,T,d,c),h=await L(r,"update",n.req.raw,a,p,w,P,q);if(!h.allowed)return n.json({error:h.error},h.status||403);let A=n.req.param("id"),S=await n.req.json(),x=ze(S),v=await t.findByID({collection:o,id:A,tenantId:p,draft:!0});if(!v)return n.json({error:"Document not found"},404);let R;S.delta?R={...v,...S.delta}:R=S.data??ht(S);let k=await t.updateLatestVersion({collection:o,documentId:A,data:R,status:"draft",tenantId:p});return a&&D?.createAuditLog({action:"document_update",userId:a.id,resource:o,resourceId:A,success:!0,metadata:{type:"draft_save"}}),n.json({data:k,message:"Draft saved successfully"})}catch(a){return n.json({error:a.message},500)}}),b.delete(`${m}/:id/draft`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:w}=await U(n.req.raw,T,d,c),h=await L(r,"update",n.req.raw,a,p,w,P,q);return h.allowed?(a&&D?.createAuditLog({action:"document_update",userId:a.id,resource:o,resourceId:n.req.param("id"),success:!0,metadata:{type:"draft_discard"}}),n.json({message:"Draft discarded successfully"})):n.json({error:h.error},h.status||403)}catch(a){return n.json({error:a.message},500)}}),b.get(`${m}/:id`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:w}=await U(n.req.raw,T,d,c),h=await L(r,"read",n.req.raw,a,p,w,P,q);if(!h.allowed)return n.json({error:h.error},h.status||403);let A=n.req.param("id"),S=new URL(n.req.url),x=parseInt(S.searchParams.get("depth")||"0"),v=S.searchParams.get("select")?.split(",")||void 0,R=S.searchParams.get("draft"),k=R==="true"?!0:R==="false"?!1:!!a,$=await t.findByID({collection:o,id:A,depth:x,tenantId:p,select:v,draft:k});return !$&&r.fields.some(C=>C.name==="slug")&&($=await t.findOne({collection:o,where:{slug:A},tenantId:p,draft:k})),$?(await chunkWE46GGL4_cjs.a([$],r.fields,t,e,1,x),n.json({data:$})):n.json({error:"Document not found"},404)}catch(a){return n.json({error:a.message},500)}}),b.post(m,async n=>{try{let{user:a,tenantId:p,apiKeyContext:w}=await U(n.req.raw,T,d,c),h=await L(r,"create",n.req.raw,a,p,w,P,q);if(!h.allowed)return n.json({error:h.error},h.status||403);p&&t.setTenantContext({tenantId:p,userId:a?.id??"",role:a?.role,isSuperAdmin:a?.role==="super_admin"}),Ke(D,w,m,"POST",n.req.raw);let S=await n.req.json();ge(S,r.fields),fe(r.fields,S);let x=n.req.raw;if(r.hooks?.beforeValidate)for(let E of r.hooks.beforeValidate){let F=await E({collection:o,data:S,req:x,user:a,tenantId:p,operation:"create"});F&&Object.assign(S,F);}let v=e.getCreateZodSchema(o);try{S=v.parse(S);}catch(E){return n.json({error:`Validation failed: ${Be(E.errors)}`,details:E.errors},400)}r.tenantScoped&&p&&(S.tenantId=p);let R=r.versions?.drafts===!0,k=r.fields.find(E=>E.name==="status"),$=k?.type==="select"&&Array.isArray(k.options)&&k.options.some(E=>E.value==="published");if(R?S.status="draft":$&&!S.status&&(S.status="published"),r.hooks?.beforeChange)for(let E of r.hooks.beforeChange){let F=await E({collection:o,data:S,req:x,user:a,tenantId:p,operation:"create"});F&&Object.assign(S,F);}let C=await t.create({collection:o,data:S,tenantId:p});if(R&&await t.createVersion({collection:o,documentId:C.id,data:S,status:"draft",createdBy:a?.id,changeDescription:"Created",tenantId:p}),r.hooks?.afterChange)for(let E of r.hooks.afterChange)await E({collection:o,doc:C,data:S,req:x,user:a,tenantId:p,operation:"create"});return f&&f.trigger(ve(o,"create"),{collection:o,operation:"create",data:C,user:a?{id:a.id,email:a.email,role:a.role}:void 0,tenantId:p}).catch(E=>console.error("[Webhook] Failed to trigger:",E)),a&&D?.createAuditLog({action:"document_create",userId:a.id,resource:o,resourceId:C.id,success:!0}),n.json({data:C,message:"Created successfully"},201)}catch(a){return a.name==="ZodError"?n.json({error:`Validation failed: ${Be(a.errors)}`,details:a.errors},400):n.json({error:a.message},500)}}),b.patch(`${m}/:id`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:w}=await U(n.req.raw,T,d,c),h=await L(r,"update",n.req.raw,a,p,w,P,q);if(!h.allowed)return n.json({error:h.error},h.status||403);let A=n.req.param("id"),S=await n.req.json(),x=ze(S),v=await t.findByID({collection:o,id:A,tenantId:p,draft:!0});if(!v)return n.json({error:"Document not found"},404);if(x&&v.updatedAt&&x!==v.updatedAt)return n.json(yt(x,v),409);let R=Object.fromEntries(Object.entries(ht(S)).filter(([z,_])=>_!=="null"&&_!==void 0));ge(R,r.fields),fe(r.fields,R);let k=n.req.raw;if(r.hooks?.beforeValidate)for(let z of r.hooks.beforeValidate){let _=await z({collection:o,data:R,originalDoc:v,req:k,user:a,tenantId:p,operation:"update"});_&&Object.assign(R,_);}if(R=e.getUpdateZodSchema(o).parse(R),r.hooks?.beforeChange)for(let z of r.hooks.beforeChange){let _=await z({collection:o,data:R,originalDoc:v,req:k,user:a,tenantId:p,operation:"update"});_&&Object.assign(R,_);}let C=n.req.header("X-Draft")==="true",E=r.versions?.drafts===!0,F=n.req.query("autosave")==="true",W;if(E&&C?await t.createVersion({collection:o,documentId:A,data:R,status:"draft",autosave:F,createdBy:a?.id,changeDescription:F?"Autosave":"Draft saved",tenantId:p}):E?(await t.update({collection:o,id:A,data:{...R,status:"published"},tenantId:p}),await t.createVersion({collection:o,documentId:A,data:R,status:"published",createdBy:a?.id,changeDescription:"Published",tenantId:p})):await t.update({collection:o,id:A,data:R,tenantId:p}),W=await t.findByID({collection:o,id:A,tenantId:p,draft:!0}),r.hooks?.afterChange)for(let z of r.hooks.afterChange)await z({collection:o,doc:W,data:R,originalDoc:v,req:k,user:a,tenantId:p,operation:"update"});return f&&!F&&f.trigger(ve(o,"update"),{collection:o,operation:"update",data:W,previousData:v,user:a?{id:a.id,email:a.email,role:a.role}:void 0,tenantId:p}).catch(z=>console.error("[Webhook] Failed to trigger:",z)),Ke(D,w,`${m}/${A}`,"PATCH",n.req.raw),a&&D?.createAuditLog({action:"document_update",userId:a.id,resource:o,resourceId:A,success:!0}),n.json({data:W,message:E?"Draft saved":"Updated successfully"})}catch(a){return a.name==="ZodError"?(console.error(`[PATCH ${m}/:id] Validation failed:`,a.errors),n.json({error:`Validation failed: ${Be(a.errors)}`,details:a.errors},400)):(console.error(`[PATCH ${m}/:id] ERROR:`,a.message,"CAUSE:",a.cause?.message||a.cause,"QUERY:",a.query),n.json({error:a.message},500))}}),b.delete(`${m}/:id`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:w}=await U(n.req.raw,T,d,c),h=await L(r,"delete",n.req.raw,a,p,w,P,q);if(!h.allowed)return n.json({error:h.error},h.status||403);p&&t.setTenantContext({tenantId:p,userId:a?.id??"",role:a?.role,isSuperAdmin:a?.role==="super_admin"});let A=n.req.param("id"),S=n.req.raw,x=await t.findByID({collection:o,id:A,tenantId:p,draft:!0});if(!x)return n.json({error:"Document not found"},404);if(r.hooks?.beforeDelete)for(let R of r.hooks.beforeDelete)await R({collection:o,doc:x,req:S,user:a,tenantId:p,operation:"delete"});let v=await t.delete({collection:o,id:A,tenantId:p});if(r.hooks?.afterDelete)for(let R of r.hooks.afterDelete)await R({collection:o,doc:v,originalDoc:x,req:S,user:a,tenantId:p,operation:"delete"});return f&&f.trigger(ve(o,"delete"),{collection:o,operation:"delete",data:v,previousData:x,user:a?{id:a.id,email:a.email,role:a.role}:void 0,tenantId:p}).catch(R=>console.error("[Webhook] Failed to trigger:",R)),Ke(D,w,`${m}/${A}`,"DELETE",n.req.raw),a&&D?.createAuditLog({action:"document_delete",userId:a.id,resource:o,resourceId:A,success:!0}),n.json({data:v,message:"Deleted successfully"})}catch(a){return console.error(`[DELETE] Error deleting ${o}:`,a),n.json({error:a.message||String(a)},500)}}),b.post(`${m}/:id/duplicate`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:w}=await U(n.req.raw,T,d,c),h=await L(r,"create",n.req.raw,a,p,w,P,q);if(!h.allowed)return n.json({error:h.error},h.status||403);let A=n.req.param("id"),S=await t.findByID({collection:o,id:A,tenantId:p,draft:!0});if(!S)return n.json({error:"Document not found"},404);let{id:x,createdAt:v,updatedAt:R,...k}=S;xe(r.fields,k);let $=Date.now().toString(36);"slug"in k&&typeof k.slug=="string"&&(k.slug=`${k.slug||"document"}-copy-${$}`),"title"in k&&typeof k.title=="string"?k.title=`${k.title||"Copy"} (Copy)`:"name"in k&&typeof k.name=="string"&&(k.name=`${k.name||"Copy"} (Copy)`);let C=await t.create({collection:o,data:{...k,status:"draft"},tenantId:p});return n.json({data:C,message:"Document duplicated successfully"})}catch(a){return console.error("[Duplicate] Error:",a),n.json({error:a.message||String(a)},500)}}),b.post(`${m}/:id/versions/:versionId/restore`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:w}=await U(n.req.raw,T,d,c),h=await L(r,"update",n.req.raw,a,p,w,P,q);if(!h.allowed)return n.json({error:h.error},h.status||403);let A=n.req.param("id"),S=n.req.param("versionId"),x=await t.findVersionByID({collection:o,versionId:S,tenantId:p});if(!x)return n.json({error:"Version not found"},404);let v=await t.update({collection:o,id:A,data:{...x.data,status:"draft"},tenantId:p});return n.json({data:v,message:"Version restored successfully"})}catch(a){return n.json({error:a.message},500)}}),b.post(`${m}/:id/versions`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:w}=await U(n.req.raw,T,d,c),h=await L(r,"update",n.req.raw,a,p,w,P,q);if(!h.allowed)return n.json({error:h.error},h.status||403);let A=await n.req.json(),{versionId:S,action:x}=A;if(x==="restore"&&S){let v=await t.findVersionByID({collection:o,versionId:S,tenantId:p});if(!v)return n.json({error:"Version not found"},404);let R=await t.update({collection:o,id:n.req.param("id"),data:{...v.data,status:"draft"},tenantId:p});return n.json({data:R,message:"Version restored successfully"})}return n.json({error:"Invalid action"},400)}catch(a){return n.json({error:a.message},500)}}),b.post(`${m}/:id/publish`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:w}=await U(n.req.raw,T,d,c),h=await L(r,"update",n.req.raw,a,p,w,P,q);if(!h.allowed)return n.json({error:h.error},h.status||403);p&&t.setTenantContext({tenantId:p,userId:a?.id??"",role:a?.role,isSuperAdmin:a?.role==="super_admin"});let A=n.req.param("id"),S=await n.req.json().catch(()=>({})),x=ze(S),v=await t.findByID({collection:o,id:A,tenantId:p,draft:!0});if(!v)return n.json({error:"Document not found"},404);if(x&&v.updatedAt&&x!==v.updatedAt)return n.json(yt(x,v),409);let R={status:"published"},k=v;if(r.versions?.drafts){let C=await t.findVersions({collection:o,documentId:A,limit:1,sort:"-createdAt",tenantId:p});if(C.docs.length>0){let E=C.docs[0];k={...v,...E.data},R={...E.data,...R};}}let $=await t.update({collection:o,id:A,data:R,tenantId:p});return r.versions?.drafts&&await t.createVersion({collection:o,documentId:A,data:{...k,status:"published"},status:"published",createdBy:a?.id,changeDescription:"Published",tenantId:p}),f&&f.trigger(ve(o,"update"),{collection:o,operation:"update",data:$,user:a?{id:a.id,email:a.email,role:a.role}:void 0,tenantId:p}).catch(C=>console.error("[Webhook] Failed to trigger:",C)),n.json({data:$,message:"Published successfully"})}catch(a){return n.json({error:a.message},500)}}),b.post(`${m}/:id/unpublish`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:w}=await U(n.req.raw,T,d,c),h=await L(r,"update",n.req.raw,a,p,w,P,q);if(!h.allowed)return n.json({error:h.error},h.status||403);let A=n.req.param("id");if(!await t.findByID({collection:o,id:A,tenantId:p,draft:!0}))return n.json({error:"Document not found"},404);let x=await t.update({collection:o,id:A,data:{status:"draft"},tenantId:p});return f&&f.trigger(ve(o,"update"),{collection:o,operation:"update",data:x,user:a?{id:a.id,email:a.email,role:a.role}:void 0,tenantId:p}).catch(v=>console.error("[Webhook] Failed to trigger:",v)),n.json({data:x,message:"Unpublished successfully"})}catch(a){return n.json({error:a.message},500)}});}for(let r of e.getGlobals()){let o=r.slug,m=`/api/globals/${o}`;b.post(`${m}/dynamic-options/:fieldName`,async n=>{try{let{user:a,tenantId:p}=await U(n.req.raw,T,d,c),w=await G(r,"read",n.req.raw,a,p,P);if(!w.allowed)return n.json({error:w.error},w.status||403);let h=n.req.param("fieldName"),A=await n.req.json(),{data:S,siblingData:x}=A,v=ue(r.fields,h);if(!v)return n.json({error:"Field not found"},404);if(v.type!=="select")return n.json({error:"Field is not a select field"},400);let R=[];return typeof v.options=="function"?R=await v.options({data:S||{},siblingData:x||{}}):Array.isArray(v.options)&&(R=v.options),n.json({options:R})}catch(a){return n.json({error:a.message},500)}}),b.get(m,async n=>{try{let{user:a,tenantId:p}=await U(n.req.raw,T,d,c),w=await G(r,"read",n.req.raw,a,p,P);if(!w.allowed)return n.json({error:w.error},w.status||403);let h=!!a,A=await t.findOne({collection:`_globals_${o}`,where:{},tenantId:p,draft:h});if(o==="system"){let S=dr__default.default.randomBytes(32).toString("hex");A?A.appSecret||(await t.update({collection:`_globals_${o}`,id:o,data:{appSecret:S},tenantId:p}),A.appSecret=S):A=await t.create({collection:`_globals_${o}`,data:{id:o,appSecret:S},tenantId:p});}return n.json({data:A||{}})}catch(a){return n.json({error:a.message},500)}});let y=async n=>{try{let{user:a,tenantId:p}=await U(n.req.raw,T,d,c),w=await G(r,"update",n.req.raw,a,p,P);if(!w.allowed)return n.json({error:w.error},w.status||403);let h=await n.req.json(),A=ze(h),S=ht(h),x=Object.fromEntries(Object.entries(S).filter(([N,ye])=>ye!==null&&ye!=="null"&&ye!==void 0));ge(x,r.fields),fe(r.fields,x);let v=e.getUpdateZodSchema(o),R;try{R=v.parse(x);}catch(N){return n.json({error:`Validation failed: ${Be(N.errors)}`,details:N.errors},400)}let k=new Set(["id","createdAt","updatedAt","status","baseUpdatedAt","_baseUpdatedAt"]),$=Object.fromEntries(Object.entries(R).filter(([N])=>!k.has(N))),C=`_globals_${o}`,E=await t.findOne({collection:C,where:{},tenantId:p,draft:!0});if(E&&A&&E.updatedAt&&A!==E.updatedAt)return n.json(yt(A,E),409);let F=n.req.header("X-Draft")==="true",W=r.versions?.drafts===!0,z=n.req.query("autosave")==="true",_;if(W&&F)await t.createVersion({collection:C,documentId:o,data:$,status:"draft",autosave:z,createdBy:a?.id,changeDescription:z?"Autosave":"Manual save",tenantId:p}),E?_=E:_=await t.create({collection:C,data:{...$,id:o,status:"draft"},tenantId:p});else if(W&&!F){let N="published";E?_=await t.update({collection:C,id:o,data:{...$,status:N},tenantId:p}):_=await t.create({collection:C,data:{...$,id:o,status:N},tenantId:p}),await t.createVersion({collection:C,documentId:o,data:$,status:N,autosave:!1,createdBy:a?.id,changeDescription:"Published",tenantId:p});}else E?_=await t.update({collection:C,id:o,data:$,tenantId:p}):_=await t.create({collection:C,data:{...$,id:o},tenantId:p});if(o==="storage-settings"&&(de=null,le=null),o==="email-settings"){let N=await chunkAJAZ7D3W_cjs.b.fromConfig(t);K.email=N||void 0;}return o==="system"&&await Dt(),a&&D?.createAuditLog({action:"settings_change",userId:a.id,resource:`global:${o}`,resourceId:o,success:!0}),n.json({data:_,message:"Updated successfully"})}catch(a){return console.error(`[API] Save global "${o}" failed:`,a),n.json({error:a.message||"Save failed",stack:process.env.NODE_ENV==="development"?a.stack:void 0},500)}};b.post(m,y),b.patch(m,y),b.post(`${m}/publish`,async n=>{try{let{user:a,tenantId:p}=await U(n.req.raw,T,d,c),w=await G(r,"update",n.req.raw,a,p,P);if(!w.allowed)return n.json({error:w.error},403);let h=`_globals_${o}`,A=await t.findOne({collection:h,where:{},tenantId:p,draft:!0});if(!A)return n.json({error:"Global not found"},404);let S={status:"published"},x=A;if(r.versions?.drafts){let R=await t.findVersions({collection:h,documentId:o,limit:1,sort:"-createdAt",tenantId:p});R.docs.length>0&&(x={...A,...R.docs[0].data},S={...R.docs[0].data,...S});}let v=await t.update({collection:h,id:o,data:S,tenantId:p});return r.versions?.drafts&&await t.createVersion({collection:h,documentId:o,data:{...x,status:"published"},status:"published",createdBy:a?.id,changeDescription:"Published",tenantId:p}),n.json({data:v,message:"Published successfully"})}catch(a){return n.json({error:a.message},500)}}),b.post(`${m}/unpublish`,async n=>{try{let{user:a,tenantId:p}=await U(n.req.raw,T,d,c),w=await G(r,"update",n.req.raw,a,p,P);if(!w.allowed)return n.json({error:w.error},403);let h=await t.update({collection:`_globals_${o}`,id:o,data:{status:"draft"},tenantId:p});return n.json({data:h,message:"Unpublished successfully"})}catch(a){return n.json({error:a.message},500)}}),b.get(`${m}/versions`,async n=>{try{let{user:a,tenantId:p}=await U(n.req.raw,T,d,c),w=await G(r,"read",n.req.raw,a,p,P);if(!w.allowed)return n.json({error:w.error},403);let h=parseInt(n.req.query("limit")||"10"),A=parseInt(n.req.query("page")||"1"),S=await t.findVersions({collection:`_globals_${o}`,documentId:o,limit:h,page:A,tenantId:p});return n.json(S)}catch(a){return n.json({error:a.message},500)}}),b.get(`${m}/versions/:versionId`,async n=>{try{let a=n.req.param("versionId"),{user:p,tenantId:w}=await U(n.req.raw,T,d,c),h=await G(r,"read",n.req.raw,p,w,P);if(!h.allowed)return n.json({error:h.error},403);let A=await t.findVersionByID({collection:`_globals_${o}`,versionId:a,tenantId:w});return A?n.json({data:A}):n.json({error:"Version not found"},404)}catch(a){return n.json({error:a.message},500)}}),b.post(`${m}/versions/:versionId/restore`,async n=>{try{let a=n.req.param("versionId"),{user:p,tenantId:w}=await U(n.req.raw,T,d,c),h=await G(r,"update",n.req.raw,p,w,P);if(!h.allowed)return n.json({error:h.error},403);let A=`_globals_${o}`,S=await t.findVersionByID({collection:A,versionId:a,tenantId:w});if(!S)return n.json({error:"Version not found"},404);let x=await t.update({collection:A,id:o,data:{...S.data,status:"draft"},tenantId:w});return n.json({data:x,message:"Version restored successfully"})}catch(a){return n.json({error:a.message},500)}}),o==="email-settings"&&b.post(`${m}/test`,async n=>{try{let{user:a,tenantId:p}=await U(n.req.raw,T,d,c),w=await G(r,"update",n.req.raw,a,p,P);if(!w.allowed)return n.json({error:w.error},w.status||403);let h=await n.req.json(),A={provider:h.provider,from:h.fromEmail||h.from,fromName:h.fromName,replyTo:h.replyTo,smtp:h.smtp?{host:h.smtp.host,port:h.smtp.port,secure:h.smtp.secure,auth:{user:h.smtp.username||h.smtp.user,pass:h.smtp.password||h.smtp.pass}}:void 0,resend:h.resend,sendgrid:h.sendgrid,mailgun:h.mailgun,ses:h.ses},S=new chunkAJAZ7D3W_cjs.b(A),x=h.testEmail||h.testEmailSection&&h.testEmailSection.testEmail;return x?(await S.send({to:x,subject:"Kyro CMS - Test Email",html:`
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,[w,f.filename,e.name.replace(/\.[^/.]+$/,""),e.name,f.mimeType,f.size,c,g,f.url,I,t||null,this.storage.name,null,null,null,j,j]);else {let{media:P}=await import('./media-OUBQTIQP.cjs'),q=f.mimeType,O=q.startsWith("image/")?"image":q.startsWith("video/")?"video":q.startsWith("audio/")?"audio":q.startsWith("application/pdf")?"document":["application/zip","application/x-zip","application/x-tar","application/gzip","application/x-7z"].includes(q)?"archive":"other",N=await this.db.insert(P).values({id:w,filename:f.filename,title:e.name.replace(/\.[^/.]+$/,""),originalName:e.name,mimeType:q,fileSize:f.size,width:c,height:g,url:f.url,thumbnailUrl:I,folder:t||"",provider:this.storage.name,type:O,status:"active",alt:null,caption:null,createdAt:new Date,updatedAt:new Date}).returning();N&&N[0]&&(w=N[0].id);}return {id:w,filename:f.filename,title:e.name.replace(/\.[^/.]+$/,""),originalName:e.name,mimeType:f.mimeType,fileSize:f.size,width:c,height:g,url:f.url,thumbnailUrl:I,folder:t||null,provider:this.storage.name,alt:null,caption:null,metadata:null,createdAt:j,updatedAt:j}}async uploadFromUrl(e,t=""){let s=await fetch(e);if(!s.ok)throw new Error(`Failed to fetch URL: ${s.status}`);let i=await s.blob(),u=e.split("/").pop()||"url-image",l=s.headers.get("content-type")||i.type||"application/octet-stream",c=new File([i],u,{type:l});return this.upload(c,t)}async delete(e,t){this.dialect==="postgres"&&(e=ve(e));let s=await this.findById(e,t);if(s){if(await this.deleteFile(s.url),s.thumbnailUrl&&s.thumbnailUrl!==s.url&&s.thumbnailUrl!==s.url+"?thumb")try{await this.deleteFile(s.thumbnailUrl);}catch{}if(this.dialect==="sqlite")await this.sqliteRun(`DELETE FROM ${this.mediaTable} WHERE id = ?`,[e]);else {let{media:i}=await import('./media-OUBQTIQP.cjs'),{eq:u}=await import('drizzle-orm');await this.db.delete(i).where(u(i.id,e));}}}async deleteFile(e){await this.storage.delete(e);}async rename(e,t,s){this.dialect==="postgres"&&(e=ve(e));let i=await this.findById(e,s);if(!i)return null;let u=await this.storage.rename(i.url,t),l;if(i.thumbnailUrl||this.storage.name==="cloudinary"){let I=u.match(/\/upload\/(v\d+)\//),w=I?I[1]+"/":"",j=u.match(/(.+?)\/upload\//);l=`${j?j[1]:"https://res.cloudinary.com/"+this.storage.config?.cloudName||"unknown"}/upload/w_200,h_200,c_fill/${w}${t}`;}let c=i.filename.split(".").pop(),g=t.includes(".")?t:`${t}.${c}`,f={url:u,filename:g,thumbnailUrl:l};if(this.dialect==="sqlite"){let I={...f};"thumbnailUrl"in I&&(I.thumbnail_url=I.thumbnailUrl,delete I.thumbnailUrl);let w=Object.keys(I).map(P=>`${P} = ?`).join(", "),j=Object.values(I);await this.sqliteRun(`UPDATE ${this.mediaTable} SET ${w}, updated_at = ? WHERE id = ?`,[...j,this.now(),e]);}else {let{media:I}=await import('./media-OUBQTIQP.cjs'),{eq:w}=await import('drizzle-orm');await this.db.update(I).set({...f,updatedAt:this.now()}).where(w(I.id,e));}return {...i,...f,updatedAt:this.now(),thumbnailUrl:f.thumbnailUrl??null}}async findById(e,t){if(this.dialect==="postgres"&&(e=ve(e)),this.dialect==="sqlite"){let l=this.sqliteGet(`SELECT * FROM ${this.mediaTable} WHERE id = ?`,[e]);return l?this.rowToMedia(l,t):null}let{media:s}=await import('./media-OUBQTIQP.cjs'),{eq:i}=await import('drizzle-orm'),[u]=await this.db.select().from(s).where(i(s.id,e));return u?this.rowToMedia(u,t):null}async find(e={},t){let{page:s=1,limit:i=30,search:u="",type:l="",folder:c="",sortBy:g="createdAt",sortDir:f="desc"}=e,{where:I,params:w,orderBy:j,sortCol:P}=this.buildFindConditions({page:s,limit:i,search:u,type:l,folder:c,sortBy:g,sortDir:f}),q=(s-1)*i;if(this.dialect==="sqlite"){let le=this.sqliteGet(`SELECT COUNT(*) as cnt FROM ${this.mediaTable} ${I}`,w)?.cnt??0;return {docs:(await this.sqliteRun(`SELECT * FROM ${this.mediaTable} ${I} ORDER BY ${P} ${j} LIMIT ? OFFSET ?`,[...w,i,q])).map(Re=>this.rowToMedia(Re,t)),totalDocs:le,page:s,limit:i,totalPages:Math.ceil(le/i)}}let{media:O}=await import('./media-OUBQTIQP.cjs'),{like:N,or:ne,and:D,asc:Y,desc:Q,eq:T,sql:ee}=await import('drizzle-orm'),ie=[];u&&ie.push(ne(N(O.title,`%${u}%`),N(O.filename,`%${u}%`),N(O.originalName,`%${u}%`),N(O.alt,`%${u}%`))),l&&l!=="all"&&ie.push(N(O.mimeType,`${l}/%`)),c&&ie.push(ne(T(O.folder,c),N(O.folder,`${c}/%`)));let Ae=ie.length>0?D(...ie):void 0,He=O[{created_at:"createdAt",updated_at:"updatedAt",title:"title",filename:"filename",file_size:"fileSize",mime_type:"mimeType",original_name:"originalName"}[P]||"createdAt"],Se=f==="asc"?Y(He):Q(He),he=await this.db.select().from(O).where(Ae).orderBy(Se).limit(i).offset(q),[{count:K}]=await this.db.select({count:ee`count(*)`}).from(O).where(Ae),oe=Number(K);return {docs:he.map(de=>this.rowToMedia(de,t)),totalDocs:oe,page:s,limit:i,totalPages:Math.ceil(oe/i)}}async update(e,t,s){this.dialect==="postgres"&&(e=ve(e));let i=this.now();if(this.dialect==="sqlite"){let g=["updated_at = ?"],f=[i];t.title!==void 0&&(g.push("title = ?"),f.push(t.title)),t.alt!==void 0&&(g.push("alt = ?"),f.push(t.alt)),t.caption!==void 0&&(g.push("caption = ?"),f.push(t.caption)),t.folder!==void 0&&(g.push("folder = ?"),f.push(t.folder)),t.metadata!==void 0&&(g.push("metadata = ?"),f.push(t.metadata===null?null:JSON.stringify(t.metadata))),t.originalName!==void 0&&(g.push("original_name = ?"),f.push(t.originalName)),f.push(e),await this.sqliteRun(`UPDATE ${this.mediaTable} SET ${g.join(", ")} WHERE id = ?`,f);let I=this.sqliteGet(`SELECT * FROM ${this.mediaTable} WHERE id = ?`,[e]);return I?this.rowToMedia(I,s):null}let{media:u}=await import('./media-OUBQTIQP.cjs'),{eq:l}=await import('drizzle-orm'),[c]=await this.db.update(u).set({...t,updatedAt:new Date}).where(l(u.id,e)).returning();return c?this.rowToMedia(c,s):null}async updateMany(e,t){this.dialect==="postgres"&&(e=e.map(ve));let s=this.now();if(this.dialect==="sqlite")for(let i of e){let u=["updated_at = ?"],l=[s];t.folder!==void 0&&(u.push("folder = ?"),l.push(t.folder||null)),l.push(i),await this.sqliteRun(`UPDATE ${this.mediaTable} SET ${u.join(", ")} WHERE id = ?`,l);}else {let{media:i}=await import('./media-OUBQTIQP.cjs'),{eq:u}=await import('drizzle-orm');for(let l of e)await this.db.update(i).set({...t,updatedAt:new Date}).where(u(i.id,l));}}async listFolders(){if(this.dialect==="sqlite")return (await this.sqliteRun(`SELECT path FROM ${this.foldersTable} UNION
+         SELECT folder as path FROM ${this.mediaTable} WHERE folder IS NOT NULL AND folder != ''`)).map(f=>f.path).filter(f=>f&&f!=="").sort();let{media:e,mediaFolders:t}=await import('./media-OUBQTIQP.cjs'),{eq:s,sql:i}=await import('drizzle-orm'),u=await this.db.select({folder:e.folder}).from(e).groupBy(e.folder),l=await this.db.select({path:t.path}).from(t),c=new Set([...u.map(g=>g.folder),...l.map(g=>g.path)]);return Array.from(c).filter(g=>g&&g!=="").sort()}async createFolder(e,t=""){let s=t?`${t}/${e}`:e;await this.storage.createFolder?.(s);let i=this.now();if(this.dialect==="sqlite")await this.sqliteRun(`INSERT OR IGNORE INTO ${this.foldersTable} (path, name, parent_path, created_at) VALUES (?, ?, ?, ?)`,[s,e,t||null,i]);else {let{mediaFolders:u}=await import('./media-OUBQTIQP.cjs');await this.db.insert(u).values({path:s,name:e,parentPath:t||null,createdAt:new Date}).onConflictDoNothing();}}async deleteFolder(e){let t=await this.find({folder:e,limit:1e4});for(let s of t.docs)await this.delete(s.id);if(await this.storage.deleteFolder?.(e),this.dialect==="sqlite")await this.sqliteRun(`DELETE FROM ${this.foldersTable} WHERE path = ? OR path LIKE ?`,[e,`${e}/%`]);else {let{mediaFolders:s}=await import('./media-OUBQTIQP.cjs'),{like:i,or:u,eq:l}=await import('drizzle-orm');await this.db.delete(s).where(u(l(s.path,e),i(s.path,`${e}/%`)));}}};function Ke(d){return d.map(e=>`${e.path.join(".")}: ${e.message}`).join(", ")}function ge(d,e){if(!(!d||typeof d!="object"))for(let t of e){if(!t.name||!(t.name in d))continue;if(d[t.name]===""&&(t.type==="text"||t.type==="textarea"||t.type==="code"||t.type==="markdown"||t.type==="email"||t.type==="password"||t.type==="color"||(d[t.name]=null)),t.type==="tabs"&&t.name&&Array.isArray(t.tabs)&&d[t.name]&&typeof d[t.name]=="object")for(let i of t.tabs)Array.isArray(i.fields)&&ge(d[t.name],i.fields);else if((t.type==="group"||t.type==="collapsible")&&t.name&&Array.isArray(t.fields)&&d[t.name]&&typeof d[t.name]=="object")ge(d[t.name],t.fields);else if(t.type==="array"&&t.name&&Array.isArray(t.fields)&&Array.isArray(d[t.name]))for(let i of d[t.name])i&&typeof i=="object"&&ge(i,t.fields);else if(t.type==="blocks"&&t.name&&Array.isArray(t.blocks)&&Array.isArray(d[t.name]))for(let i of d[t.name]){if(!i||typeof i!="object")continue;let u=i.type||i.blockType;if(!u)continue;let l=t.blocks.find(g=>g.slug===u);if(!l||!Array.isArray(l.fields))continue;let c=i.data&&typeof i.data=="object"?i.data:i;ge(c,l.fields);}}}function fe(d,e){if(!(!e||typeof e!="object"))for(let t of d){if(t.type==="richtext"&&t.name){let s=e[t.name];typeof s=="string"?e[t.name]=[{type:"paragraph",children:[{text:s}]}]:s&&typeof s=="object"&&!Array.isArray(s)&&s.type==="doc"&&Array.isArray(s.content)&&(e[t.name]=s.content);}if(t.type==="tabs"&&t.name&&Array.isArray(t.tabs)&&e[t.name]&&typeof e[t.name]=="object")for(let s of t.tabs)Array.isArray(s.fields)&&fe(s.fields,e[t.name]);else if((t.type==="group"||t.type==="collapsible")&&t.name&&Array.isArray(t.fields)&&e[t.name]&&typeof e[t.name]=="object")fe(t.fields,e[t.name]);else if(t.type==="array"&&t.name&&Array.isArray(t.fields)&&Array.isArray(e[t.name]))for(let s of e[t.name])s&&typeof s=="object"&&fe(t.fields,s);else if(t.type==="blocks"&&t.name&&Array.isArray(t.blocks)&&Array.isArray(e[t.name]))for(let s of e[t.name]){if(!s||typeof s!="object")continue;let i=s.type||s.blockType;if(!i)continue;let u=t.blocks.find(c=>c.slug===i);if(!u||!Array.isArray(u.fields))continue;let l=s.data&&typeof s.data=="object"?s.data:s;fe(u.fields,l);}}}function Te(d,e){if(!(!e||typeof e!="object")){for(let t of d)if(!(!t.name||!(t.name in e))){if(t.unique&&(t.type==="text"||t.type==="email"?e[t.name]=`${e[t.name]||t.name}-copy-${Date.now().toString(36)}`:delete e[t.name]),t.type==="tabs"&&t.name&&Array.isArray(t.tabs)&&e[t.name]&&typeof e[t.name]=="object")for(let s of t.tabs)Array.isArray(s.fields)&&Te(s.fields,e[t.name]);else if((t.type==="group"||t.type==="collapsible")&&t.name&&Array.isArray(t.fields)&&e[t.name]&&typeof e[t.name]=="object")Te(t.fields,e[t.name]);else if(t.type==="array"&&t.name&&Array.isArray(t.fields)&&Array.isArray(e[t.name]))for(let s of e[t.name])s&&typeof s=="object"&&(delete s.id,Te(t.fields,s));else if(t.type==="blocks"&&t.name&&Array.isArray(t.blocks)&&Array.isArray(e[t.name]))for(let s of e[t.name]){if(!s||typeof s!="object")continue;delete s.id;let i=s.type||s.blockType;if(!i)continue;let u=t.blocks.find(c=>c.slug===i);if(!u||!Array.isArray(u.fields))continue;let l=s.data&&typeof s.data=="object"?s.data:s;Te(u.fields,l);}}}}var Kr={_media:{create:chunkWE46GGL4_cjs.d.MEDIA_UPLOAD,update:chunkWE46GGL4_cjs.d.MEDIA_UPLOAD,delete:chunkWE46GGL4_cjs.d.MEDIA_DELETE}};function xe(d,e){let t=Kr[d];return t?t[e]:`collection.${e}`}function zr(d){let e=d.headers.get("x-forwarded-for");return e?e.split(",")[0].trim():d.headers.get("x-real-ip")||"unknown"}function ze(d,e,t,s,i){e?.apiKeyId&&d&&d.createAuditLog({action:"api_request",userId:e.userId||"",resource:"api_key",resourceId:e.apiKeyId,success:true,metadata:{endpoint:t,method:s,ip:zr(i)}});}function We(d){return d.baseUpdatedAt??d._baseUpdatedAt}function yt(d){let{baseUpdatedAt:e,_baseUpdatedAt:t,...s}=d;return s}function wt(d,e){return {error:"Document has changed since you started editing",code:"REVISION_CONFLICT",conflict:{expectedUpdatedAt:d??null,actualUpdatedAt:e.updatedAt??null,current:e}}}async function L(d,e,t,s,i,u,l=true,c="none"){return await chunkWE46GGL4_cjs.b(d,e,{user:s,req:t,tenantId:i,apiKey:u},{enablePublicAccess:l,defaultAccess:c})}async function G(d,e,t,s,i,u=true){return await chunkWE46GGL4_cjs.c(d,e,{user:s,req:t,tenantId:i},{enablePublicAccess:u})}async function U(d,e,t,s){if(t)return {user:t,tenantId:s,apiKeyContext:void 0,authType:"static"};if(e){let i=await e(d);if(i.status===200&&i.user)return {user:i.user,tenantId:i.tenantContext?.tenantId,apiKeyContext:i.apiKeyContext,authType:i.authType}}return {user:void 0,tenantId:void 0,apiKeyContext:void 0,authType:void 0}}function Wr(d,e){if(d instanceof chunkZ7CNY2UV_cjs.c&&d.dialect==="postgres")return new chunkGYQMNXXW_cjs.a({db:d.client});if(d instanceof chunkUCCFT5OO_cjs.a)return new chunkATLSIYRH_cjs.a({db:d.db});let t=Ne.resolve(e,"data","kyro.db");return new chunkET6NN2V2_cjs.a({path:process.env.KYRO_AUTH_DB_PATH||t})}function sr(d){let {registry:e,db:t,authSecret:s,authAdapter:i,checkSession:u,user:l,tenantId:c,cors:g,webhookService:f,settings:I}=d,w=new hono.Hono,j=I?.access?.apiAccess,P=I?.access?.enablePublicAccess??false,q=I?.access?.defaultCollectionAccess??"none";j?.requireAuth;let N=process.cwd(),ne=N.endsWith("admin")?Ne.resolve(N,".."):N,D=i||Wr(t,ne),T=s?Nt({db:t,userLookup:async r=>await D.findUserById(r)||null}):null,ee=j?.cors?.allowedOrigins,ie=g?.origins,Ae=Array.isArray(ee)?ee:typeof ee=="string"&&ee?ee.split(`
+`).map(r=>r.trim()).filter(Boolean):[],Ie=Ae.length>0?Ae:ie||[];(Ie.length>0||g)&&w.use("*",async(r,o)=>{let m=r.req.header("Origin")||"*";if(Ie.length>0&&!Ie.includes(m))return r.json({error:"Origin not allowed"},403);let y=Ie.length>0?m:"*";if(r.header("Access-Control-Allow-Origin",y),r.header("Access-Control-Allow-Methods","GET, POST, PATCH, DELETE, OPTIONS"),r.header("Access-Control-Allow-Headers","Content-Type, Authorization, X-API-Key"),g?.credentials&&r.header("Access-Control-Allow-Credentials","true"),r.req.method==="OPTIONS")return r.text("");await o();});let Se=I?.access?.rateLimiting,he;if(Se?.enabled){let r=Se.maxRequests||100,o=Se.windowMs||6e4;he=new Le({"api:general":{window:o,max:r}}),w.use("/api/*",async(m,y)=>{if(!he)return y();let n=m.req.header("CF-Connecting-IP")||m.req.header("X-Forwarded-For")?.split(",")[0]?.trim()||m.req.header("X-Real-IP")||"unknown",a=await he.check("api:general",n);if(m.header("X-RateLimit-Limit",String(r)),m.header("X-RateLimit-Remaining",String(a.remaining)),m.header("X-RateLimit-Reset",String(a.resetAt)),!a.allowed)return m.json({error:"Too many requests",retryAfter:a.retryAfter},429);await y();});}let K=new _e({redis:D,jwtSecret:s||"change-me",baseUrl:process.env.KYRO_BASE_URL||"http://localhost:4321",rateLimiter:he});chunkAJAZ7D3W_cjs.b.fromConfig(t).then(r=>{r&&(K.email=r);}).catch(r=>{console.error("[Email] Failed to initialize transport from config:",r);}),w.post("/api/auth/login",async r=>K.login(r.req.raw)),w.post("/api/auth/register",async r=>K.register(r.req.raw)),w.post("/api/auth/logout",async r=>K.logout(r.req.raw)),w.post("/api/auth/refresh",async r=>K.refresh(r.req.raw)),w.get("/api/auth/me",async r=>K.me(r.req.raw)),w.get("/api/auth/sessions",async r=>K.listSessions(r.req.raw)),w.post("/api/auth/sessions/refresh",async r=>K.refreshSession(r.req.raw)),w.delete("/api/auth/sessions",async r=>K.revokeOtherSessions(r.req.raw)),w.delete("/api/auth/sessions/:id",async r=>K.revokeSession(r.req.raw,r.req.param("id"))),w.put("/api/auth/sessions/:id/name",async r=>K.renameSession(r.req.raw,r.req.param("id"))),w.get("/api/auth/access",async r=>{try{let{user:o,tenantId:m}=await U(r.req.raw,T,l,c);if(!o)return r.json({error:"Not authenticated"},401);let y={},n={};for(let a of e.getCollections()){let p={read:(await L(a,"read",r.req.raw,o,m,void 0,P,q)).allowed,create:(await L(a,"create",r.req.raw,o,m,void 0,P,q)).allowed,update:(await L(a,"update",r.req.raw,o,m,void 0,P,q)).allowed,delete:(await L(a,"delete",r.req.raw,o,m,void 0,P,q)).allowed};y[a.slug]=p;}for(let a of e.getGlobals()){let p={read:(await G(a,"read",r.req.raw,o,m,P)).allowed,update:(await G(a,"update",r.req.raw,o,m,P)).allowed};n[a.slug]=p;}return r.json({collections:y,globals:n})}catch(o){return r.json({error:o.message},500)}});let oe=typeof e.hasCollection=="function"&&e.hasCollection("users")?e.getCollection("users"):(()=>{try{return e.getCollection("users")}catch{return chunkGFU7AOI3_cjs.a}})();w.get("/api/users",async r=>{try{let{user:o,tenantId:m}=await U(r.req.raw,T,l,c),y=await L(oe,"read",r.req.raw,o,m,void 0,P,q);if(!y.allowed)return r.json({error:y.error},y.status||403);let n=parseInt(r.req.query("page")||"1"),a=Math.min(parseInt(r.req.query("limit")||"10"),100),p=r.req.query("search")||void 0,b=await D.findUsers({page:n,limit:a,search:p});return r.json({docs:b.users,totalDocs:b.total,limit:a,totalPages:Math.ceil(b.total/a),page:n,pagingCounter:(n-1)*a+1,hasPrevPage:n>1,hasNextPage:n<Math.ceil(b.total/a),prevPage:n>1?n-1:null,nextPage:n<Math.ceil(b.total/a)?n+1:null})}catch(o){return console.error("[API] Error listing users:",o),r.json({error:o.message},500)}}),w.get("/api/users/:id",async r=>{try{let{user:o,tenantId:m}=await U(r.req.raw,T,l,c),y=r.req.param("id"),n=await D.findUserById(y);return n?r.json({data:n}):r.json({error:"User not found"},404)}catch(o){return r.json({error:o.message},500)}}),w.post("/api/users",async r=>{try{let{user:o,tenantId:m}=await U(r.req.raw,T,l,c),y=await L(oe,"create",r.req.raw,o,m,void 0,P,q);if(!y.allowed)return r.json({error:y.error},y.status||403);let n=await r.req.json();if(!n.email||!n.password)return r.json({error:"Email and password are required"},400);if(await D.findUserByEmail(n.email))return r.json({error:"Email already in use"},400);let p=await D.createUser({email:n.email,password:n.password,name:n.name,role:n.role||"customer",avatar:n.avatar,tenantId:n.tenantId});return o&&D?.createAuditLog({action:"user_create",userId:o.id,resource:"users",resourceId:p.id,success:!0}),r.json({data:p,message:"User created successfully"},201)}catch(o){return r.json({error:o.message},500)}}),w.patch("/api/users/:id",async r=>{try{let{user:o,tenantId:m}=await U(r.req.raw,T,l,c),y=await L(oe,"update",r.req.raw,o,m,void 0,P,q);if(!y.allowed)return r.json({error:y.error},y.status||403);let n=r.req.param("id"),a=await r.req.json(),p=await D.findUserById(n);if(!p)return r.json({error:"User not found"},404);let b={};a.name!==void 0&&(b.name=a.name),a.email!==void 0&&(b.email=a.email),a.role!==void 0&&(b.role=a.role),a.avatar!==void 0&&(b.avatar=typeof a.avatar=="object"&&a.avatar!==null?a.avatar.id||String(a.avatar):a.avatar),a.tenantId!==void 0&&(b.tenantId=a.tenantId),a.emailVerified!==void 0&&(b.emailVerified=a.emailVerified),a.locked!==void 0&&(b.locked=a.locked),a.failedLoginAttempts!==void 0&&(b.failedLoginAttempts=a.failedLoginAttempts),a.lastLogin!==void 0&&(b.lastLogin=a.lastLogin);let h=await D.updateUser(n,b);return h?(o&&(D?.createAuditLog({action:"user_update",userId:o.id,resource:"users",resourceId:n,success:!0}),a.role&&p.role!==a.role&&D?.createAuditLog({action:"role_change",userId:o.id,resource:"users",resourceId:n,success:!0,metadata:{oldRole:p.role,newRole:a.role}})),r.json({data:h,message:"User updated successfully"})):r.json({error:"User update failed"},500)}catch(o){return r.json({error:o.message},500)}}),w.delete("/api/users/:id",async r=>{try{let{user:o,tenantId:m}=await U(r.req.raw,T,l,c),y=await L(oe,"delete",r.req.raw,o,m,void 0,P,q);if(!y.allowed)return r.json({error:y.error},y.status||403);let n=r.req.param("id");if(o&&o.id===n)return r.json({error:"You cannot delete your own account"},403);let a=await D.findUserById(n);return a?await D.deleteUser(n)?(o&&D?.createAuditLog({action:"user_delete",userId:o.id,resource:"users",resourceId:n,success:!0}),r.json({data:a,message:"User deleted successfully"})):r.json({error:"User deletion failed"},500):r.json({error:"User not found"},404)}catch(o){return r.json({error:o.message},500)}}),w.get("/api/auth/audit-logs",async r=>{try{let{user:o,tenantId:m}=await U(r.req.raw,T,l,c),y=e.getCollection("audit_logs");if(y){let S=await L(y,"read",r.req.raw,o,m,void 0,P,q);if(!S.allowed)return r.json({error:S.error},S.status||403)}else if(!o)return r.json({error:"Authentication required"},401);let n=parseInt(r.req.query("page")||"1"),a=Math.min(parseInt(r.req.query("limit")||"50"),100),p=r.req.query("action")||void 0,b=r.req.query("userId")||void 0,h=r.req.query("resource")||void 0,A=await D.findAuditLogs({action:p,userId:b,resource:h,limit:a,offset:(n-1)*a});return r.json({docs:A.logs,totalDocs:A.total,limit:a,totalPages:Math.ceil(A.total/a),page:n,pagingCounter:(n-1)*a+1,hasPrevPage:n>1,hasNextPage:n<Math.ceil(A.total/a),prevPage:n>1?n-1:null,nextPage:n<Math.ceil(A.total/a)?n+1:null})}catch(o){return console.error("[API] Error listing audit logs:",o),r.json({error:o.message},500)}});let de=null,le=null,H=async()=>{if(le)throw le;if(!de)try{let r=t instanceof chunkZ7CNY2UV_cjs.c?t.dialect:"sqlite",o=r==="postgres"&&t instanceof chunkZ7CNY2UV_cjs.c?t.client:t;de=await Me.init(o,{dialect:r});}catch(r){throw console.error("[getMedia] Init error:",r),le=r,r}return de};w.get("/api/media",async r=>{try{let{user:o}=await U(r.req.raw,T,l,c);if(!o)return r.json({error:"Authentication required"},401);let m=await H(),y=new URL(r.req.url).origin,n=parseInt(r.req.query("page")||"1"),a=parseInt(r.req.query("limit")||"30"),p=r.req.query("search")||"",b=r.req.query("type")||"",h=r.req.query("folder")||"",A=await m.find({page:n,limit:a,search:p,type:b,folder:h},y);return r.json(A)}catch(o){return console.error("[Media] find error:",o),r.json({error:o.message},500)}}),w.post("/api/media/upload",async r=>{try{let{user:o}=await U(r.req.raw,T,l,c);if(!o)return r.json({error:"Authentication required"},401);let m=await H();if((r.req.header("content-type")||"").includes("multipart/form-data")){let p=await r.req.formData(),b=p.get("file"),h=p.get("folder")||"";if(!b)return r.json({error:"No file uploaded"},400);let A=await m.upload(b,h);return r.json(A)}let{url:n}=await r.req.json();if(!n)return r.json({error:"No URL provided"},400);let a=await m.uploadFromUrl(n);return r.json(a)}catch(o){return console.error("[Media] upload error:",o),r.json({error:o.message},500)}}),w.get("/api/media/folders",async r=>{try{let{user:o}=await U(r.req.raw,T,l,c);if(!o)return r.json({error:"Authentication required"},401);let y=await(await H()).listFolders();return r.json(y)}catch(o){return console.error("[Media] folders error:",o),r.json({error:o.message},500)}}),w.post("/api/media/folders",async r=>{try{let{user:o}=await U(r.req.raw,T,l,c);if(!o)return r.json({error:"Authentication required"},401);let m=await H(),y=await r.req.json(),{name:n,parentPath:a}=y;return n?(await m.createFolder(n,a||""),r.json({message:"Folder created",path:a?`${a}/${n}`:n})):r.json({error:"Folder name is required"},400)}catch(o){return console.error("[Media] create folder error:",o),r.json({error:o.message},500)}}),w.delete("/api/media/folders",async r=>{try{let{user:o}=await U(r.req.raw,T,l,c);if(!o)return r.json({error:"Authentication required"},401);let m=await H(),y=r.req.query("path");return y?(await m.deleteFolder(y),r.json({message:"Folder deleted"})):r.json({error:"Path is required"},400)}catch(o){return console.error("[Media] delete folder error:",o),r.json({error:o.message},500)}}),w.delete("/api/media/:id",async r=>{try{let{user:o}=await U(r.req.raw,T,l,c);if(!o)return r.json({error:"Authentication required"},401);let m=await H(),y=r.req.param("id"),n=new URL(r.req.url).origin;return await m.delete(y,n),r.json({success:!0})}catch(o){return console.error("[Media] delete error:",o),r.json({error:o.message},500)}}),w.get("/api/media/resize",async r=>{try{let{user:o}=await U(r.req.raw,T,l,c);if(!o)return r.json({error:"Authentication required"},401);let m=r.req.query("url"),y=parseInt(r.req.query("w")||"0"),n=parseInt(r.req.query("h")||"0"),a=r.req.query("fit")||"cover",p=parseFloat(r.req.query("cx")||"0"),b=parseFloat(r.req.query("cy")||"0"),h=parseFloat(r.req.query("cw")||"0"),A=parseFloat(r.req.query("ch")||"0");if(!m)return r.json({error:"URL is required"},400);let x=(await H()).storage;if(x.name!=="local")return r.redirect(m);let v=x.config?.uploadDir||Ne.join(process.cwd(),"public","uploads"),R=x.config?.baseUrl||"/uploads";if(!m.startsWith(R))return r.redirect(m);let k=m.replace(R,""),$=Ne.join(v,k);if(!fs.existsSync($))return r.json({error:"File not found"},404);let C=fs.readFileSync($),E=ft__default.default(C);if(h>0&&A>0){let z=await ft__default.default(C).metadata(),_=z.width||0,M=z.height||0;if(_>0&&M>0){let ye=Math.max(0,Math.min(Math.round(p/100*_),_-1)),bt=Math.max(0,Math.min(Math.round(b/100*M),M-1)),nr=Math.max(1,Math.min(Math.round(h/100*_),_-ye)),ir=Math.max(1,Math.min(Math.round(A/100*M),M-bt));E=E.extract({left:ye,top:bt,width:nr,height:ir});}}(y>0||n>0)&&(E=E.resize({width:y>0?y:void 0,height:n>0?n:void 0,fit:a}));let F=await E.toBuffer(),W=await ft__default.default(C).metadata();return r.header("Content-Type",`image/${W.format||"webp"}`),r.header("Cache-Control","public, max-age=31536000, immutable"),r.body(F)}catch(o){return console.error("[Media] resize error:",o),r.json({error:o.message},500)}}),w.get("/api/media/:id",async r=>{try{let{user:o}=await U(r.req.raw,T,l,c);if(!o)return r.json({error:"Authentication required"},401);let m=await H(),y=r.req.param("id"),n=new URL(r.req.url).origin,a=await m.findById(y,n);return a?r.json(a):r.json({error:"Media not found"},404)}catch(o){return console.error("[Media] get error:",o),r.json({error:o.message},500)}}),w.patch("/api/media/:id",async r=>{try{let{user:o}=await U(r.req.raw,T,l,c);if(!o)return r.json({error:"Authentication required"},401);let m=await H(),y=r.req.param("id"),n=await r.req.json(),a=new URL(r.req.url).origin,p=["folder","metadata","title","alt","caption","originalName"],b={};for(let h of p)n[h]!==void 0&&(b[h]=n[h]);if(Object.keys(b).length>0){let h=await m.update(y,b,a);return r.json({doc:h})}return r.json({error:"No valid fields to update"},400)}catch(o){return console.error("[Media] update error:",o),r.json({error:o.message},500)}}),w.get("/api/media/test",async r=>{try{let{user:o}=await U(r.req.raw,T,l,c);if(!o)return r.json({error:"Authentication required"},401);let m=await H();return r.json({status:m?"initialized":"failed",serviceType:m?.constructor?.name})}catch(o){return console.error("[test] Error:",o),r.json({error:o.message,type:o.constructor?.name,stack:o.stack},500)}}),w.get("/api/storage-status",async r=>{try{let{user:o}=await U(r.req.raw,T,l,c);if(!o)return r.json({error:"Authentication required"},401);let m=!1,y="local";if(t)try{let n=t.prepare('SELECT provider FROM "_globals_storage-settings" LIMIT 1').get();n&&n.provider&&(m=!0,y=n.provider==="aws"?"s3":n.provider);}catch{try{let n=await t.findOne({collection:"_globals_storage-settings",where:{},draft:!0});n&&n.provider&&(m=!0,y=n.provider==="aws"?"s3":n.provider);}catch{}}return r.json({provider:y,configured:m,usage:0,limit:"unlimited"})}catch(o){return console.error("[Storage] status error:",o),r.json({error:o.message},500)}}),w.get("/api/plugins",async r=>{try{let{user:o}=await U(r.req.raw,T,l,c);if(!o)return r.json({error:"Authentication required"},401);let m=e.getPlugins(),y=e.storageProviders,n=await Promise.all(m.map(async a=>{let p=!0,b=a.name,h={};try{let A=await t.findOne({collection:"_globals_plugin-settings",where:{},draft:!0});A&&A.states&&(h=A.states);}catch{}return h[b]!==void 0&&(p=h[b]),y.setPluginEnabled(b,p),{id:b,name:b,version:a.version||"1.0.0",description:a.description||"",enabled:p,status:p?"active":"disabled"}}));return r.json(n)}catch(o){return console.error("[Plugins] list error:",o),r.json({error:o.message},500)}}),w.put("/api/plugins/:name/toggle",async r=>{try{let{user:o}=await U(r.req.raw,T,l,c);if(!o)return r.json({error:"Authentication required"},401);let m=r.req.param("name"),y=e.storageProviders,a=!y.isPluginEnabled(m),p=[];if(!a)for(let h of y.getAll())h.pluginName===m&&p.push(h.type);if(!(r.req.query("force")==="1")&&!a&&p.length>0){let h="local";try{let A=t?.prepare?.('SELECT provider FROM "_globals_storage-settings" LIMIT 1')?.get();A?.provider&&(h=A.provider);}catch{try{let A=await t?.findOne?.({collection:"_globals_storage-settings",where:{},draft:!0});A?.provider&&(h=A.provider);}catch{}}if(p.includes(h))return r.json({error:`Cannot disable "${m}" \u2014 storage provider "${h}" is currently active. Switch to Local storage first.`,requiresAction:!0,activeProvider:h},409)}try{let h={},A="global",S=await t.findOne({collection:"_globals_plugin-settings",where:{},draft:!0});S&&(h=S.states||{},A=S.id),h[m]=a,S?await t.update({collection:"_globals_plugin-settings",id:A,data:{states:h}}):await t.create({collection:"_globals_plugin-settings",data:{states:h,id:"global"}});}catch(h){console.warn(`[Plugins] Could not persist state for "${m}":`,h);}return y.setPluginEnabled(m,a),r.json({name:m,enabled:a})}catch(o){return console.error("[Plugins] toggle error:",o),r.json({error:o.message},500)}}),w.get("/api/health",r=>r.json({status:"ok",version:"0.11.0",collections:e.getCollectionSlugs(),timestamp:new Date().toISOString()})),w.get("/api/metrics",async r=>{try{let{user:o,tenantId:m}=await U(r.req.raw,T,l,c);if(!o)return r.json({error:"Authentication required"},401);let y=o.role==="admin"||o.role==="super_admin",a=e.getCollectionSlugs().filter(v=>!["users","audit_logs","media","_globals_access-settings","_globals_brand-settings"].includes(v)&&!v.startsWith("_globals_")).filter(v=>y||chunkQ3Q7BJVQ_cjs.a(o,`${v}:read`)),p=0;await Promise.all(a.map(async v=>{try{let k=(await t.find({collection:v,where:{},limit:1,page:1,tenantId:m})).totalDocs??0;p+=k;}catch{}}));let b=0;try{b=(await t.find({collection:"media",where:{},limit:1,page:1,tenantId:m})).totalDocs??0;}catch{}let h=0;try{h=(await D.findUsers({page:1,limit:1})).total??0;}catch{}let A=0;try{if(f){let v=await f.getWebhooks();A=Array.isArray(v)?v.length:0;}}catch{}let S=0;try{S=(await t.find({collection:chunkNY47CFVP_cjs.d,where:{},limit:1,page:1,tenantId:m})).totalDocs??0;}catch{}let x=p+b+h;return r.json({totalDocuments:p,totalMedia:y||chunkQ3Q7BJVQ_cjs.a(o,"media:read")?b:void 0,totalUsers:y||chunkQ3Q7BJVQ_cjs.a(o,"users:read")?h:void 0,totalWebhooks:y?A:void 0,totalApiKeys:y?S:void 0,totalStoredRecords:x,collections:a.length,timestamp:new Date().toISOString()})}catch(o){return console.error("[API] Metrics error:",o),r.json({error:o.message},500)}}),w.get("/api/kyro/schema",async r=>{let{user:o}=await U(r.req.raw,T,l,c);if(!o)return r.json({error:"Authentication required"},401);let m=n=>n.map(a=>{let p={name:a.name,type:a.type,label:a.label,required:a.required??false,unique:a.unique??false,indexed:a.indexed??false,defaultValue:a.defaultValue,admin:a.admin?{...a.admin}:void 0};return a.minLength!==void 0&&(p.minLength=a.minLength),a.maxLength!==void 0&&(p.maxLength=a.maxLength),a.pattern!==void 0&&(p.pattern=a.pattern),a.variant!==void 0&&(p.variant=a.variant),a.hasMany!==void 0&&(p.hasMany=a.hasMany),a.min!==void 0&&(p.min=a.min),a.max!==void 0&&(p.max=a.max),a.step!==void 0&&(p.step=a.step),a.integer!==void 0&&(p.integer=a.integer),a.options&&(p.options=a.options),a.relationTo&&(p.relationTo=a.relationTo),a.maxDepth!==void 0&&(p.maxDepth=a.maxDepth),a.minRows!==void 0&&(p.minRows=a.minRows),a.maxRows!==void 0&&(p.maxRows=a.maxRows),a.localized!==void 0&&(p.localized=a.localized),a.language&&(p.language=a.language),a.format&&(p.format=a.format),a.allowedTypes&&(p.allowedTypes=a.allowedTypes),a.maxSize&&(p.maxSize=a.maxSize),(a.type==="group"||a.type==="row"||a.type==="collapsible"&&a.fields)&&(p.fields=m(a.fields)),a.type==="array"&&a.fields&&(p.fields=m(a.fields)),a.type==="blocks"&&a.blocks&&(p.blocks=a.blocks.map(b=>({slug:b.slug,label:b.label,fields:m(b.fields)}))),a.type==="tabs"&&a.tabs&&(p.tabs=a.tabs.map(b=>({label:b.label,name:b.name,fields:m(b.fields)}))),p}),y={collections:{},globals:{}};for(let n of e.getCollections()){let a=n.slug;try{y.collections[a]={slug:a,label:n.label||a,fields:m(n.fields),jsonSchema:zodToJsonSchema.zodToJsonSchema(e.getZodSchema(a),{target:"openApi3"}),createSchema:zodToJsonSchema.zodToJsonSchema(e.getCreateZodSchema(a),{target:"openApi3"}),updateSchema:zodToJsonSchema.zodToJsonSchema(e.getUpdateZodSchema(a),{target:"openApi3"}),procedures:{find:{collection:a,where:"Record<string,any>",sort:"string",limit:"number",page:"number",depth:"number",select:"string[]",draft:"boolean"},findByID:{collection:a,id:"string",depth:"number",select:"string[]",draft:"boolean"},create:{collection:a,data:"Record<string,any>",depth:"number",select:"string[]"},update:{collection:a,id:"string",data:"Record<string,any>",depth:"number",select:"string[]",baseUpdatedAt:"string"},delete:{collection:a,id:"string"},count:{collection:a,where:"Record<string,any>"}}};}catch{}}for(let n of e.getGlobals()){let a=n.slug,p=n.fields;if(a==="storage-settings"){let b=e.storageProviders,h=b.getAll(),A=new Set(b.getAllAvailable(x=>b.isPluginEnabled(x)).map(x=>x.type));A.add("local");let S=new Set(h.map(x=>x.type));p=p.filter(x=>x.type==="group"&&x.name&&S.has(x.name)?A.has(x.name):true).map(x=>x.name==="provider"&&x.type==="select"?{...x,options:x.options.filter(v=>A.has(v.value))}:x);}try{y.globals[a]={slug:a,label:n.label||a,fields:m(p),jsonSchema:zodToJsonSchema.zodToJsonSchema(e.getZodSchema(a),{target:"openApi3"}),procedures:{get:{},update:{data:"Record<string,any>"}}};}catch{}}return r.json(y)}),w.get("/api/collections",async r=>{let{user:o}=await U(r.req.raw,T,l,c);if(!o)return r.json({error:"Authentication required"},401);let m=e.getCollections().map(y=>({slug:y.slug,label:y.label||y.slug,fields:y.fields.filter(n=>n.name).map(n=>({name:n.name,type:n.type,required:n.required,label:n.label}))}));return r.json(m)});function Re(r,o,m){if(m in o)return o[m];for(let y of r)if(y.name){if(y.type==="tabs"&&y.tabs){let n=o[y.name];if(n&&typeof n=="object"&&m in n)return n[m]}if((y.type==="group"||y.type==="collapsible")&&y.fields){let n=o[y.name];if(n&&typeof n=="object"){if(m in n)return n[m];let a=Re(y.fields,n,m);if(a!==void 0)return a}}}}w.get("/api/search",async r=>{try{let o=r.req.query("q")||"",m=r.req.query("collections")||"",y=Math.min(parseInt(r.req.query("limit")||"10"),50);if(!o||o.length<2)return r.json({results:[],message:"Query too short"});let{user:n,tenantId:a}=await U(r.req.raw,T,l,c),p=m?m.split(",").filter(Boolean):e.getCollectionSlugs(),b=[],h=new RegExp(o.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),"i");for(let A of e.getCollections()){if(!p.includes(A.slug)||!(await L(A,"read",r.req.raw,n,a,void 0,P,q)).allowed)continue;let x=A.fields.filter(v=>v.name&&v.name!=="id"&&(v.type==="text"||v.type==="email"||v.type==="textarea"||v.type==="richtext"||v.indexed)&&!v.admin?.hidden).map(v=>v.name);if(x.length!==0)try{let v=x.map(k=>{let $={};return $[k]={like:`%${o}%`},$}),R=await t.find({collection:A.slug,where:{OR:v},limit:y,tenantId:a});await chunkWE46GGL4_cjs.a(R.docs,A.fields,t,e,1,0);for(let k of R.docs){let $=A.admin?.useAsTitle||x.find(E=>E==="title"||E==="name"||E==="heading"||E==="slug"),C=$?Re(A.fields,k,$)??k.id:k.id;b.push({collection:A.slug,label:A.label||A.slug,id:k.id,title:String(C||"Untitled"),doc:k});}}catch(v){console.error(`Search error for ${A.slug}:`,v);}}return b.sort((A,S)=>A.label.localeCompare(S.label)),r.json({results:b})}catch(o){return r.json({error:o.message,results:[]},500)}}),w.get("/api/keys",async r=>{try{let{user:o,tenantId:m}=await U(r.req.raw,T,l,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:read"))return r.json({error:"Forbidden"},403);let y=parseInt(r.req.query("page")||"1"),n=Math.min(parseInt(r.req.query("limit")||"50"),100),a=await t.find({collection:chunkNY47CFVP_cjs.d,where:{},page:y,limit:n,tenantId:m}),p=(a.docs||[]).map(b=>({id:b.id,name:b.name,keyPrefix:b.keyPrefix,permissions:b.permissions||[],lastUsed:b.lastUsedAt,createdAt:b.createdAt}));return r.json({docs:p,totalDocs:a.totalDocs||p.length,totalPages:a.totalPages||1})}catch(o){return console.error("[ApiKeys] GET error:",o),r.json({error:o.message},500)}}),w.post("/api/keys",async r=>{try{let{user:o}=await U(r.req.raw,T,l,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);let m=await r.req.json();if(!m.name||typeof m.name!="string")return r.json({error:"name is required"},400);let y=chunkNY47CFVP_cjs.i(),n=await t.create({collection:chunkNY47CFVP_cjs.d,data:{userId:o.id,name:m.name,key:y,keyPrefix:chunkNY47CFVP_cjs.j(y),permissions:Array.isArray(m.permissions)?m.permissions:["*"],expiresAt:m.expiresAt||null,createdAt:new Date().toISOString()}});return await D?.createAuditLog({action:"api_key_create",userId:o.id,resource:"api_key",resourceId:n.id,success:!0,metadata:{keyName:m.name}}),r.json({...n,key:y,permissions:Array.isArray(m.permissions)?m.permissions:["*"]},201)}catch(o){return console.error("[ApiKeys] POST error:",o),r.json({error:o.message},500)}}),w.delete("/api/keys/:id",async r=>{try{let{user:o}=await U(r.req.raw,T,l,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);let m=r.req.param("id"),y=await t.findByID({collection:chunkNY47CFVP_cjs.d,id:m});return y?(await t.delete({collection:chunkNY47CFVP_cjs.d,id:m}),await D?.createAuditLog({action:"api_key_delete",userId:o.id,resource:"api_key",resourceId:m,success:!0,metadata:{keyName:y.name}}),r.json({message:"API key deleted"})):r.json({error:"API key not found"},404)}catch(o){return console.error("[ApiKeys] DELETE error:",o),r.json({error:o.message},500)}}),w.patch("/api/keys/:id",async r=>{try{let{user:o}=await U(r.req.raw,T,l,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);let m=r.req.param("id"),y=await r.req.json(),n=await t.findByID({collection:chunkNY47CFVP_cjs.d,id:m});if(!n)return r.json({error:"API key not found"},404);let a={};if(typeof y.name=="string"&&y.name.trim()&&(a.name=y.name.trim()),Array.isArray(y.permissions)&&(a.permissions=y.permissions),y.expiresAt!==void 0&&(a.expiresAt=y.expiresAt||null),Object.keys(a).length===0)return r.json({error:"Nothing to update"},400);let p=await t.update({collection:chunkNY47CFVP_cjs.d,id:m,data:a});return r.json({...p,keyPrefix:n.keyPrefix})}catch(o){return console.error("[ApiKeys] PATCH error:",o),r.json({error:o.message},500)}}),w.post("/api/keys/:id/rotate",async r=>{try{let{user:o}=await U(r.req.raw,T,l,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);let m=r.req.param("id"),y=await t.findByID({collection:chunkNY47CFVP_cjs.d,id:m});if(!y)return r.json({error:"API key not found"},404);let n=chunkNY47CFVP_cjs.i(),a=await t.update({collection:chunkNY47CFVP_cjs.d,id:m,data:{key:n,keyPrefix:chunkNY47CFVP_cjs.j(n),lastUsedAt:null}});return await D?.createAuditLog({action:"api_key_rotate",userId:o.id,resource:"api_key",resourceId:m,success:!0,metadata:{keyName:y.name}}),r.json({...a,key:n,permissions:y.permissions,expiresAt:y.expiresAt})}catch(o){return console.error("[ApiKeys] rotate error:",o),r.json({error:o.message},500)}}),w.get("/api/webhooks/actions",async r=>{try{let{user:o}=await U(r.req.raw,T,l,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:read"))return r.json({error:"Forbidden"},403);let m={generic:{label:"Custom URL",description:"POST to any endpoint with Kyro payload",configFields:[],envVars:[]},"github-dispatch":{label:"GitHub Actions",description:"Trigger a GitHub Actions workflow",configFields:[{name:"githubOwner",label:"Owner",required:!0,placeholder:"e.g., kyro-dev"},{name:"githubRepo",label:"Repository",required:!0,placeholder:"e.g., my-website"},{name:"githubEventType",label:"Event Type",required:!1,placeholder:"kyro-cms-content-update"}],envVars:["GITHUB_TOKEN"]},"dokploy-deploy":{label:"Dokploy",description:"Trigger a Dokploy deployment",configFields:[{name:"dokployProjectId",label:"Project ID",required:!0,placeholder:"e.g., proj_xxx"},{name:"dokployBranch",label:"Branch",required:!1,placeholder:"main"}],envVars:["DOKPLOY_TOKEN","DOKPLOY_HOST"]},"coolify-deploy":{label:"Coolify",description:"Trigger a Coolify redeployment",configFields:[{name:"coolifyProjectUuid",label:"Project UUID",required:!0,placeholder:"e.g., xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"},{name:"coolifyEnvironmentName",label:"Environment",required:!1,placeholder:"production"}],envVars:["COOLIFY_TOKEN","COOLIFY_HOST"]}};return r.json({actions:m})}catch(o){return console.error("[Webhooks] actions error:",o),r.json({error:o.message},500)}}),w.get("/api/webhooks",async r=>{try{let{user:o}=await U(r.req.raw,T,l,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:read"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=await f.getWebhooks();return r.json({docs:m})}catch(o){return console.error("[Webhooks] GET error:",o),r.json({error:o.message},500)}}),w.post("/api/webhooks",async r=>{try{let{user:o}=await U(r.req.raw,T,l,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=await r.req.json(),y=await f.createWebhook(m);return await D?.createAuditLog({action:"webhook_create",userId:o.id,resource:"webhook",resourceId:y.id,success:!0,metadata:{name:y.name,url:y.url}}),r.json(y,201)}catch(o){return console.error("[Webhooks] POST error:",o),r.json({error:o.message},500)}}),w.get("/api/webhooks/:id",async r=>{try{let{user:o}=await U(r.req.raw,T,l,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:read"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=await f.getWebhookById(m);return y?r.json(y):r.json({error:"Webhook not found"},404)}catch(o){return console.error("[Webhooks] GET :id error:",o),r.json({error:o.message},500)}}),w.patch("/api/webhooks/:id",async r=>{try{let{user:o}=await U(r.req.raw,T,l,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=await r.req.json(),n=await f.updateWebhook(m,y);return n?(await D?.createAuditLog({action:"webhook_update",userId:o.id,resource:"webhook",resourceId:m,success:!0,metadata:{name:n.name}}),r.json(n)):r.json({error:"Webhook not found"},404)}catch(o){return console.error("[Webhooks] PATCH error:",o),r.json({error:o.message},500)}}),w.delete("/api/webhooks/:id",async r=>{try{let{user:o}=await U(r.req.raw,T,l,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=await f.getWebhookById(m);return y?(await f.deleteWebhook(m),await D?.createAuditLog({action:"webhook_delete",userId:o.id,resource:"webhook",resourceId:m,success:!0,metadata:{name:y.name}}),r.json({message:"Webhook deleted"})):r.json({error:"Webhook not found"},404)}catch(o){return console.error("[Webhooks] DELETE error:",o),r.json({error:o.message},500)}}),w.post("/api/webhooks/:id/test",async r=>{try{let{user:o}=await U(r.req.raw,T,l,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=await f.testWebhook(m);return y?r.json(y):r.json({error:"Webhook not found"},404)}catch(o){return console.error("[Webhooks] test error:",o),r.json({error:o.message},500)}}),w.get("/api/webhooks/:id/history",async r=>{try{let{user:o}=await U(r.req.raw,T,l,c);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:read"))return r.json({error:"Forbidden"},403);if(!f)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=Math.min(parseInt(r.req.query("limit")||"50"),100),n=await f.getDeliveryHistory(m,y);return r.json({docs:n})}catch(o){return console.error("[Webhooks] history error:",o),r.json({error:o.message},500)}});function Ve(r){let o={},m=["name","type","required","hasMany","relationTo","options","min","max","minLength","maxLength","defaultValue","label","localized","admin","unique","index","hidden","readOnly","deprecated"];for(let y of m)y in r&&(o[y]=r[y]);return r.fields&&(o.fields=r.fields.map(Ve)),r.tabs&&(o.tabs=r.tabs.map(y=>({label:y.label,name:y.name,fields:y.fields.map(Ve)}))),o}w.get("/api/__schema",async r=>{try{let{user:o,apiKeyContext:m}=await U(r.req.raw,T,l,c);if(!o&&!m)return r.json({error:"Unauthorized"},401);let n=e.getCollections().filter(a=>a.slug!=="users"&&a.slug!=="audit_logs").map(a=>({slug:a.slug,label:a.label,labelPlural:a.labelPlural,singularLabel:a.singularLabel,timestamps:a.timestamps,auth:!!a.auth,tenantScoped:!!a.tenantScoped,upload:a.upload?{staticDir:a.upload.staticDir,imageSizes:a.upload.imageSizes,mimeTypes:a.upload.mimeTypes}:void 0,fields:a.fields.map(Ve)}));return r.json(n)}catch(o){return console.error("[Schema] error:",o),r.json({error:o.message},500)}});let ar=e.getCollections();for(let r of ar){let y=function(n,a){let p=[],b=new Set([...Object.keys(n),...Object.keys(a)]);for(let h of b)h==="id"||h==="createdAt"||h==="updatedAt"||JSON.stringify(n[h])!==JSON.stringify(a[h])&&p.push({field:h,oldValue:h in n?n[h]:void 0,newValue:h in a?a[h]:void 0});return p};let o=r.slug;if(o==="users"||o==="audit_logs")continue;let m=`/api/${o}`;w.post(`${m}/dynamic-options/:fieldName`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:b}=await U(n.req.raw,T,l,c),h=await L(r,"read",n.req.raw,a,p,b,P,q);if(!h.allowed)return n.json({error:h.error},h.status||403);let A=n.req.param("fieldName"),S=await n.req.json(),{data:x,siblingData:v}=S,R=ue(r.fields,A);if(!R)return n.json({error:"Field not found"},404);if(R.type!=="select")return n.json({error:"Field is not a select field"},400);let k=[];return typeof R.options=="function"?k=await R.options({data:x||{},siblingData:v||{}}):Array.isArray(R.options)&&(k=R.options),n.json({options:k})}catch(a){return n.json({error:a.message},500)}}),w.get(m,async n=>{try{let{user:a,tenantId:p,apiKeyContext:b}=await U(n.req.raw,T,l,c),h=await L(r,"read",n.req.raw,a,p,b,P,q);if(!h.allowed)return n.json({error:h.error},h.status||403);p&&t.setTenantContext({tenantId:p,userId:a?.id??"",role:a?.role,isSuperAdmin:a?.role==="super_admin"});let A=new URL(n.req.url),S=parseInt(A.searchParams.get("page")||"1"),x=Math.min(parseInt(A.searchParams.get("limit")||"10"),100),v=A.searchParams.get("sort")||void 0,R=parseInt(A.searchParams.get("depth")||"0"),k=A.searchParams.get("select")?.split(",")||void 0,$=A.searchParams.get("draft"),C=$==="true"?!0:$==="false"?!1:!!a,E={},F=A.searchParams.get("where");if(F)try{E=JSON.parse(F);}catch{return n.json({error:"Invalid JSON in where parameter"},400)}let W=await t.find({collection:o,where:E,sort:v,limit:x,page:S,depth:R,tenantId:p,select:k,draft:C});return await chunkWE46GGL4_cjs.a(W.docs,r.fields,t,e,1,R),n.json(W)}catch(a){return console.error("[API] list error:",a),n.json({error:a.message},500)}}),w.get(`${m}/:id/versions`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:b}=await U(n.req.raw,T,l,c),h=await L(r,"read",n.req.raw,a,p,b,P,q);if(!h.allowed)return n.json({error:h.error},h.status||403);let A=n.req.param("id");if(!A)return n.json({error:"Missing document ID"},400);let S=new URL(n.req.url),x=S.searchParams.get("compareA"),v=S.searchParams.get("compareB");if(ze(D,b,`${m}/${A}/versions`,"GET",n.req.raw),x&&v){let[C,E]=await Promise.all([t.findVersionByID({collection:o,versionId:x,tenantId:p}),t.findVersionByID({collection:o,versionId:v,tenantId:p})]);if(!C||!E)return n.json({error:"Version not found"},404);let F=y(C.data,E.data);return n.json({diffs:F})}let R=parseInt(S.searchParams.get("page")||"1"),k=Math.min(parseInt(S.searchParams.get("limit")||"10"),100),$=await t.findVersions({collection:o,documentId:A,page:R,limit:k,tenantId:p});return n.json($)}catch(a){return console.error("[API] versions error:",a),n.json({error:a.message},500)}}),w.put(`${m}/:id/draft`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:b}=await U(n.req.raw,T,l,c),h=await L(r,"update",n.req.raw,a,p,b,P,q);if(!h.allowed)return n.json({error:h.error},h.status||403);let A=n.req.param("id"),S=await n.req.json(),x=We(S),v=await t.findByID({collection:o,id:A,tenantId:p,draft:!0});if(!v)return n.json({error:"Document not found"},404);let R;S.delta?R={...v,...S.delta}:R=S.data??yt(S);let k=await t.updateLatestVersion({collection:o,documentId:A,data:R,status:"draft",tenantId:p});return a&&D?.createAuditLog({action:"document_update",userId:a.id,resource:o,resourceId:A,success:!0,metadata:{type:"draft_save"}}),n.json({data:k,message:"Draft saved successfully"})}catch(a){return n.json({error:a.message},500)}}),w.delete(`${m}/:id/draft`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:b}=await U(n.req.raw,T,l,c),h=await L(r,"update",n.req.raw,a,p,b,P,q);return h.allowed?(a&&D?.createAuditLog({action:"document_update",userId:a.id,resource:o,resourceId:n.req.param("id"),success:!0,metadata:{type:"draft_discard"}}),n.json({message:"Draft discarded successfully"})):n.json({error:h.error},h.status||403)}catch(a){return n.json({error:a.message},500)}}),w.get(`${m}/:id`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:b}=await U(n.req.raw,T,l,c),h=await L(r,"read",n.req.raw,a,p,b,P,q);if(!h.allowed)return n.json({error:h.error},h.status||403);let A=n.req.param("id"),S=new URL(n.req.url),x=parseInt(S.searchParams.get("depth")||"0"),v=S.searchParams.get("select")?.split(",")||void 0,R=S.searchParams.get("draft"),k=R==="true"?!0:R==="false"?!1:!!a,$=await t.findByID({collection:o,id:A,depth:x,tenantId:p,select:v,draft:k});return !$&&r.fields.some(C=>C.name==="slug")&&($=await t.findOne({collection:o,where:{slug:A},tenantId:p,draft:k})),$?(await chunkWE46GGL4_cjs.a([$],r.fields,t,e,1,x),n.json({data:$})):n.json({error:"Document not found"},404)}catch(a){return n.json({error:a.message},500)}}),w.post(m,async n=>{try{let{user:a,tenantId:p,apiKeyContext:b}=await U(n.req.raw,T,l,c),h=await L(r,"create",n.req.raw,a,p,b,P,q);if(!h.allowed)return n.json({error:h.error},h.status||403);p&&t.setTenantContext({tenantId:p,userId:a?.id??"",role:a?.role,isSuperAdmin:a?.role==="super_admin"}),ze(D,b,m,"POST",n.req.raw);let S=await n.req.json();ge(S,r.fields),fe(r.fields,S);let x=n.req.raw;if(r.hooks?.beforeValidate)for(let E of r.hooks.beforeValidate){let F=await E({collection:o,data:S,req:x,user:a,tenantId:p,operation:"create"});F&&Object.assign(S,F);}let v=e.getCreateZodSchema(o);try{S=v.parse(S);}catch(E){return n.json({error:`Validation failed: ${Ke(E.errors)}`,details:E.errors},400)}r.tenantScoped&&p&&(S.tenantId=p);let R=r.versions?.drafts===!0,k=r.fields.find(E=>E.name==="status"),$=k?.type==="select"&&Array.isArray(k.options)&&k.options.some(E=>E.value==="published");if(R?S.status="draft":$&&!S.status&&(S.status="published"),r.hooks?.beforeChange)for(let E of r.hooks.beforeChange){let F=await E({collection:o,data:S,req:x,user:a,tenantId:p,operation:"create"});F&&Object.assign(S,F);}let C=await t.create({collection:o,data:S,tenantId:p});if(R&&await t.createVersion({collection:o,documentId:C.id,data:S,status:"draft",createdBy:a?.id,changeDescription:"Created",tenantId:p}),r.hooks?.afterChange)for(let E of r.hooks.afterChange)await E({collection:o,doc:C,data:S,req:x,user:a,tenantId:p,operation:"create"});return f&&f.trigger(xe(o,"create"),{collection:o,operation:"create",data:C,user:a?{id:a.id,email:a.email,role:a.role}:void 0,tenantId:p}).catch(E=>console.error("[Webhook] Failed to trigger:",E)),a&&D?.createAuditLog({action:"document_create",userId:a.id,resource:o,resourceId:C.id,success:!0}),n.json({data:C,message:"Created successfully"},201)}catch(a){return a.name==="ZodError"?n.json({error:`Validation failed: ${Ke(a.errors)}`,details:a.errors},400):n.json({error:a.message},500)}}),w.patch(`${m}/:id`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:b}=await U(n.req.raw,T,l,c),h=await L(r,"update",n.req.raw,a,p,b,P,q);if(!h.allowed)return n.json({error:h.error},h.status||403);let A=n.req.param("id"),S=await n.req.json(),x=We(S),v=await t.findByID({collection:o,id:A,tenantId:p,draft:!0});if(!v)return n.json({error:"Document not found"},404);if(x&&v.updatedAt&&x!==v.updatedAt)return n.json(wt(x,v),409);let R=Object.fromEntries(Object.entries(yt(S)).filter(([z,_])=>_!=="null"&&_!==void 0));ge(R,r.fields),fe(r.fields,R);let k=n.req.raw;if(r.hooks?.beforeValidate)for(let z of r.hooks.beforeValidate){let _=await z({collection:o,data:R,originalDoc:v,req:k,user:a,tenantId:p,operation:"update"});_&&Object.assign(R,_);}if(R=e.getUpdateZodSchema(o).parse(R),r.hooks?.beforeChange)for(let z of r.hooks.beforeChange){let _=await z({collection:o,data:R,originalDoc:v,req:k,user:a,tenantId:p,operation:"update"});_&&Object.assign(R,_);}let C=n.req.header("X-Draft")==="true",E=r.versions?.drafts===!0,F=n.req.query("autosave")==="true",W;if(E&&C?await t.createVersion({collection:o,documentId:A,data:R,status:"draft",autosave:F,createdBy:a?.id,changeDescription:F?"Autosave":"Draft saved",tenantId:p}):E?(await t.update({collection:o,id:A,data:{...R,status:"published"},tenantId:p}),await t.createVersion({collection:o,documentId:A,data:R,status:"published",createdBy:a?.id,changeDescription:"Published",tenantId:p})):await t.update({collection:o,id:A,data:R,tenantId:p}),W=await t.findByID({collection:o,id:A,tenantId:p,draft:!0}),r.hooks?.afterChange)for(let z of r.hooks.afterChange)await z({collection:o,doc:W,data:R,originalDoc:v,req:k,user:a,tenantId:p,operation:"update"});return f&&!F&&f.trigger(xe(o,"update"),{collection:o,operation:"update",data:W,previousData:v,user:a?{id:a.id,email:a.email,role:a.role}:void 0,tenantId:p}).catch(z=>console.error("[Webhook] Failed to trigger:",z)),ze(D,b,`${m}/${A}`,"PATCH",n.req.raw),a&&D?.createAuditLog({action:"document_update",userId:a.id,resource:o,resourceId:A,success:!0}),n.json({data:W,message:E?"Draft saved":"Updated successfully"})}catch(a){return a.name==="ZodError"?(console.error(`[PATCH ${m}/:id] Validation failed:`,a.errors),n.json({error:`Validation failed: ${Ke(a.errors)}`,details:a.errors},400)):(console.error(`[PATCH ${m}/:id] ERROR:`,a.message,"CAUSE:",a.cause?.message||a.cause,"QUERY:",a.query),n.json({error:a.message},500))}}),w.delete(`${m}/:id`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:b}=await U(n.req.raw,T,l,c),h=await L(r,"delete",n.req.raw,a,p,b,P,q);if(!h.allowed)return n.json({error:h.error},h.status||403);p&&t.setTenantContext({tenantId:p,userId:a?.id??"",role:a?.role,isSuperAdmin:a?.role==="super_admin"});let A=n.req.param("id"),S=n.req.raw,x=await t.findByID({collection:o,id:A,tenantId:p,draft:!0});if(!x)return n.json({error:"Document not found"},404);if(r.hooks?.beforeDelete)for(let R of r.hooks.beforeDelete)await R({collection:o,doc:x,req:S,user:a,tenantId:p,operation:"delete"});let v=await t.delete({collection:o,id:A,tenantId:p});if(r.hooks?.afterDelete)for(let R of r.hooks.afterDelete)await R({collection:o,doc:v,originalDoc:x,req:S,user:a,tenantId:p,operation:"delete"});return f&&f.trigger(xe(o,"delete"),{collection:o,operation:"delete",data:v,previousData:x,user:a?{id:a.id,email:a.email,role:a.role}:void 0,tenantId:p}).catch(R=>console.error("[Webhook] Failed to trigger:",R)),ze(D,b,`${m}/${A}`,"DELETE",n.req.raw),a&&D?.createAuditLog({action:"document_delete",userId:a.id,resource:o,resourceId:A,success:!0}),n.json({data:v,message:"Deleted successfully"})}catch(a){return console.error(`[DELETE] Error deleting ${o}:`,a),n.json({error:a.message||String(a)},500)}}),w.post(`${m}/:id/duplicate`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:b}=await U(n.req.raw,T,l,c),h=await L(r,"create",n.req.raw,a,p,b,P,q);if(!h.allowed)return n.json({error:h.error},h.status||403);let A=n.req.param("id"),S=await t.findByID({collection:o,id:A,tenantId:p,draft:!0});if(!S)return n.json({error:"Document not found"},404);let{id:x,createdAt:v,updatedAt:R,...k}=S;Te(r.fields,k);let $=Date.now().toString(36);"slug"in k&&typeof k.slug=="string"&&(k.slug=`${k.slug||"document"}-copy-${$}`),"title"in k&&typeof k.title=="string"?k.title=`${k.title||"Copy"} (Copy)`:"name"in k&&typeof k.name=="string"&&(k.name=`${k.name||"Copy"} (Copy)`);let C=await t.create({collection:o,data:{...k,status:"draft"},tenantId:p});return n.json({data:C,message:"Document duplicated successfully"})}catch(a){return console.error("[Duplicate] Error:",a),n.json({error:a.message||String(a)},500)}}),w.post(`${m}/:id/versions/:versionId/restore`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:b}=await U(n.req.raw,T,l,c),h=await L(r,"update",n.req.raw,a,p,b,P,q);if(!h.allowed)return n.json({error:h.error},h.status||403);let A=n.req.param("id"),S=n.req.param("versionId"),x=await t.findVersionByID({collection:o,versionId:S,tenantId:p});if(!x)return n.json({error:"Version not found"},404);let v=await t.update({collection:o,id:A,data:{...x.data,status:"draft"},tenantId:p});return n.json({data:v,message:"Version restored successfully"})}catch(a){return n.json({error:a.message},500)}}),w.post(`${m}/:id/versions`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:b}=await U(n.req.raw,T,l,c),h=await L(r,"update",n.req.raw,a,p,b,P,q);if(!h.allowed)return n.json({error:h.error},h.status||403);let A=await n.req.json(),{versionId:S,action:x}=A;if(x==="restore"&&S){let v=await t.findVersionByID({collection:o,versionId:S,tenantId:p});if(!v)return n.json({error:"Version not found"},404);let R=await t.update({collection:o,id:n.req.param("id"),data:{...v.data,status:"draft"},tenantId:p});return n.json({data:R,message:"Version restored successfully"})}return n.json({error:"Invalid action"},400)}catch(a){return n.json({error:a.message},500)}}),w.post(`${m}/:id/publish`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:b}=await U(n.req.raw,T,l,c),h=await L(r,"update",n.req.raw,a,p,b,P,q);if(!h.allowed)return n.json({error:h.error},h.status||403);p&&t.setTenantContext({tenantId:p,userId:a?.id??"",role:a?.role,isSuperAdmin:a?.role==="super_admin"});let A=n.req.param("id"),S=await n.req.json().catch(()=>({})),x=We(S),v=await t.findByID({collection:o,id:A,tenantId:p,draft:!0});if(!v)return n.json({error:"Document not found"},404);if(x&&v.updatedAt&&x!==v.updatedAt)return n.json(wt(x,v),409);let R={status:"published"},k=v;if(r.versions?.drafts){let C=await t.findVersions({collection:o,documentId:A,limit:1,sort:"-createdAt",tenantId:p});if(C.docs.length>0){let E=C.docs[0];k={...v,...E.data},R={...E.data,...R};}}let $=await t.update({collection:o,id:A,data:R,tenantId:p});return r.versions?.drafts&&await t.createVersion({collection:o,documentId:A,data:{...k,status:"published"},status:"published",createdBy:a?.id,changeDescription:"Published",tenantId:p}),f&&f.trigger(xe(o,"update"),{collection:o,operation:"update",data:$,user:a?{id:a.id,email:a.email,role:a.role}:void 0,tenantId:p}).catch(C=>console.error("[Webhook] Failed to trigger:",C)),n.json({data:$,message:"Published successfully"})}catch(a){return n.json({error:a.message},500)}}),w.post(`${m}/:id/unpublish`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:b}=await U(n.req.raw,T,l,c),h=await L(r,"update",n.req.raw,a,p,b,P,q);if(!h.allowed)return n.json({error:h.error},h.status||403);let A=n.req.param("id");if(!await t.findByID({collection:o,id:A,tenantId:p,draft:!0}))return n.json({error:"Document not found"},404);let x=await t.update({collection:o,id:A,data:{status:"draft"},tenantId:p});return f&&f.trigger(xe(o,"update"),{collection:o,operation:"update",data:x,user:a?{id:a.id,email:a.email,role:a.role}:void 0,tenantId:p}).catch(v=>console.error("[Webhook] Failed to trigger:",v)),n.json({data:x,message:"Unpublished successfully"})}catch(a){return n.json({error:a.message},500)}});}for(let r of e.getGlobals()){let o=r.slug,m=`/api/globals/${o}`;w.post(`${m}/dynamic-options/:fieldName`,async n=>{try{let{user:a,tenantId:p}=await U(n.req.raw,T,l,c),b=await G(r,"read",n.req.raw,a,p,P);if(!b.allowed)return n.json({error:b.error},b.status||403);let h=n.req.param("fieldName"),A=await n.req.json(),{data:S,siblingData:x}=A,v=ue(r.fields,h);if(!v)return n.json({error:"Field not found"},404);if(v.type!=="select")return n.json({error:"Field is not a select field"},400);let R=[];return typeof v.options=="function"?R=await v.options({data:S||{},siblingData:x||{}}):Array.isArray(v.options)&&(R=v.options),n.json({options:R})}catch(a){return n.json({error:a.message},500)}}),w.get(m,async n=>{try{let{user:a,tenantId:p}=await U(n.req.raw,T,l,c),b=await G(r,"read",n.req.raw,a,p,P);if(!b.allowed)return n.json({error:b.error},b.status||403);let h=!!a,A=await t.findOne({collection:`_globals_${o}`,where:{},tenantId:p,draft:h});if(o==="system"){let S=lr__default.default.randomBytes(32).toString("hex");A?A.appSecret||(await t.update({collection:`_globals_${o}`,id:o,data:{appSecret:S},tenantId:p}),A.appSecret=S):A=await t.create({collection:`_globals_${o}`,data:{id:o,appSecret:S},tenantId:p});}return n.json({data:A||{}})}catch(a){return n.json({error:a.message},500)}});let y=async n=>{try{let{user:a,tenantId:p}=await U(n.req.raw,T,l,c),b=await G(r,"update",n.req.raw,a,p,P);if(!b.allowed)return n.json({error:b.error},b.status||403);let h=await n.req.json(),A=We(h),S=yt(h),x=Object.fromEntries(Object.entries(S).filter(([M,ye])=>ye!==null&&ye!=="null"&&ye!==void 0));ge(x,r.fields),fe(r.fields,x);let v=e.getUpdateZodSchema(o),R;try{R=v.parse(x);}catch(M){return n.json({error:`Validation failed: ${Ke(M.errors)}`,details:M.errors},400)}let k=new Set(["id","createdAt","updatedAt","status","baseUpdatedAt","_baseUpdatedAt"]),$=Object.fromEntries(Object.entries(R).filter(([M])=>!k.has(M))),C=`_globals_${o}`,E=await t.findOne({collection:C,where:{},tenantId:p,draft:!0});if(E&&A&&E.updatedAt&&A!==E.updatedAt)return n.json(wt(A,E),409);let F=n.req.header("X-Draft")==="true",W=r.versions?.drafts===!0,z=n.req.query("autosave")==="true",_;if(W&&F)await t.createVersion({collection:C,documentId:o,data:$,status:"draft",autosave:z,createdBy:a?.id,changeDescription:z?"Autosave":"Manual save",tenantId:p}),E?_=E:_=await t.create({collection:C,data:{...$,id:o,status:"draft"},tenantId:p});else if(W&&!F){let M="published";E?_=await t.update({collection:C,id:o,data:{...$,status:M},tenantId:p}):_=await t.create({collection:C,data:{...$,id:o,status:M},tenantId:p}),await t.createVersion({collection:C,documentId:o,data:$,status:M,autosave:!1,createdBy:a?.id,changeDescription:"Published",tenantId:p});}else E?_=await t.update({collection:C,id:o,data:$,tenantId:p}):_=await t.create({collection:C,data:{...$,id:o},tenantId:p});if(o==="storage-settings"&&(de=null,le=null),o==="email-settings"){let M=await chunkAJAZ7D3W_cjs.b.fromConfig(t);K.email=M||void 0;}return o==="system"&&await Ct(),a&&D?.createAuditLog({action:"settings_change",userId:a.id,resource:`global:${o}`,resourceId:o,success:!0}),n.json({data:_,message:"Updated successfully"})}catch(a){return console.error(`[API] Save global "${o}" failed:`,a),n.json({error:a.message||"Save failed",stack:process.env.NODE_ENV==="development"?a.stack:void 0},500)}};w.post(m,y),w.patch(m,y),w.post(`${m}/publish`,async n=>{try{let{user:a,tenantId:p}=await U(n.req.raw,T,l,c),b=await G(r,"update",n.req.raw,a,p,P);if(!b.allowed)return n.json({error:b.error},403);let h=`_globals_${o}`,A=await t.findOne({collection:h,where:{},tenantId:p,draft:!0});if(!A)return n.json({error:"Global not found"},404);let S={status:"published"},x=A;if(r.versions?.drafts){let R=await t.findVersions({collection:h,documentId:o,limit:1,sort:"-createdAt",tenantId:p});R.docs.length>0&&(x={...A,...R.docs[0].data},S={...R.docs[0].data,...S});}let v=await t.update({collection:h,id:o,data:S,tenantId:p});return r.versions?.drafts&&await t.createVersion({collection:h,documentId:o,data:{...x,status:"published"},status:"published",createdBy:a?.id,changeDescription:"Published",tenantId:p}),n.json({data:v,message:"Published successfully"})}catch(a){return n.json({error:a.message},500)}}),w.post(`${m}/unpublish`,async n=>{try{let{user:a,tenantId:p}=await U(n.req.raw,T,l,c),b=await G(r,"update",n.req.raw,a,p,P);if(!b.allowed)return n.json({error:b.error},403);let h=await t.update({collection:`_globals_${o}`,id:o,data:{status:"draft"},tenantId:p});return n.json({data:h,message:"Unpublished successfully"})}catch(a){return n.json({error:a.message},500)}}),w.get(`${m}/versions`,async n=>{try{let{user:a,tenantId:p}=await U(n.req.raw,T,l,c),b=await G(r,"read",n.req.raw,a,p,P);if(!b.allowed)return n.json({error:b.error},403);let h=parseInt(n.req.query("limit")||"10"),A=parseInt(n.req.query("page")||"1"),S=await t.findVersions({collection:`_globals_${o}`,documentId:o,limit:h,page:A,tenantId:p});return n.json(S)}catch(a){return n.json({error:a.message},500)}}),w.get(`${m}/versions/:versionId`,async n=>{try{let a=n.req.param("versionId"),{user:p,tenantId:b}=await U(n.req.raw,T,l,c),h=await G(r,"read",n.req.raw,p,b,P);if(!h.allowed)return n.json({error:h.error},403);let A=await t.findVersionByID({collection:`_globals_${o}`,versionId:a,tenantId:b});return A?n.json({data:A}):n.json({error:"Version not found"},404)}catch(a){return n.json({error:a.message},500)}}),w.post(`${m}/versions/:versionId/restore`,async n=>{try{let a=n.req.param("versionId"),{user:p,tenantId:b}=await U(n.req.raw,T,l,c),h=await G(r,"update",n.req.raw,p,b,P);if(!h.allowed)return n.json({error:h.error},403);let A=`_globals_${o}`,S=await t.findVersionByID({collection:A,versionId:a,tenantId:b});if(!S)return n.json({error:"Version not found"},404);let x=await t.update({collection:A,id:o,data:{...S.data,status:"draft"},tenantId:b});return n.json({data:x,message:"Version restored successfully"})}catch(a){return n.json({error:a.message},500)}}),o==="email-settings"&&w.post(`${m}/test`,async n=>{try{let{user:a,tenantId:p}=await U(n.req.raw,T,l,c),b=await G(r,"update",n.req.raw,a,p,P);if(!b.allowed)return n.json({error:b.error},b.status||403);let h=await n.req.json(),A={provider:h.provider,from:h.fromEmail||h.from,fromName:h.fromName,replyTo:h.replyTo,smtp:h.smtp?{host:h.smtp.host,port:h.smtp.port,secure:h.smtp.secure,auth:{user:h.smtp.username||h.smtp.user,pass:h.smtp.password||h.smtp.pass}}:void 0,resend:h.resend,sendgrid:h.sendgrid,mailgun:h.mailgun,ses:h.ses},S=new chunkAJAZ7D3W_cjs.b(A),x=h.testEmail||h.testEmailSection&&h.testEmailSection.testEmail;return x?(await S.send({to:x,subject:"Kyro CMS - Test Email",html:`
               <div style="font-family: sans-serif; max-width: 600px; margin: 0 auto; padding: 20px; border: 1px solid #e2e8f0; border-radius: 8px;">
                 <h1 style="color: #0b1222; margin-bottom: 16px;">Success! \u{1F680}</h1>
                 <p style="font-size: 16px; color: #334155; line-height: 1.6;">
@@ -83,4 +83,4 @@
             `,text:`Success! Your email settings in Kyro CMS are working correctly.
 
 Provider: ${h.provider}
-Sent at: ${new Date().toLocaleString()}`}),n.json({message:"Test email sent successfully!"})):n.json({error:"No test recipient email provided"},400)}catch(a){return console.error("[Email Test] Failed:",a),n.json({error:a.message||"Failed to send test email"},500)}});}return b.onError((r,o)=>(console.error(`[API Error] ${o.req.method} ${o.req.path}:`,r),o.json({error:r.message||"Internal server error",code:"INTERNAL_ERROR"},500))),b}function Wr(l,e,t){return rr({registry:l,db:e,authSecret:t?.authSecret,user:t?.user,req:t?.req,tenantId:t?.tenantId,cors:t?.cors,webhookService:t?.webhookService})}exports.a=Dr;exports.b=Cr;exports.c=_r;exports.d=Yt;exports.e=me;exports.f=ct;exports.g=Gr;exports.h=Dt;exports.i=lr;exports.j=Yr;exports.k=Ct;exports.l=Ye;exports.m=$e;exports.n=Nt;exports.o=cs;exports.p=Mt;exports.q=Le;exports.r=Ne;exports.s=rr;exports.t=Wr;
+Sent at: ${new Date().toLocaleString()}`}),n.json({message:"Test email sent successfully!"})):n.json({error:"No test recipient email provided"},400)}catch(a){return console.error("[Email Test] Failed:",a),n.json({error:a.message||"Failed to send test email"},500)}});}return w.onError((r,o)=>(console.error(`[API Error] ${o.req.method} ${o.req.path}:`,r),o.json({error:r.message||"Internal server error",code:"INTERNAL_ERROR"},500))),w}function Hr(d,e,t){return sr({registry:d,db:e,authSecret:t?.authSecret,user:t?.user,req:t?.req,tenantId:t?.tenantId,cors:t?.cors,webhookService:t?.webhookService})}exports.a=Cr;exports.b=$r;exports.c=Or;exports.d=Jt;exports.e=me;exports.f=ut;exports.g=Yr;exports.h=Ct;exports.i=cr;exports.j=Jr;exports.k=$t;exports.l=Je;exports.m=Le;exports.n=Mt;exports.o=us;exports.p=Bt;exports.q=_e;exports.r=Me;exports.s=sr;exports.t=Hr;