@kyro-cms/core 0.12.10 → 0.12.15

package/dist/index.cjs

@@ -1,4 +1,4 @@
-'use strict';var chunk3RSMK4DA_cjs=require('./chunk-3RSMK4DA.cjs'),chunkEYUT6MOM_cjs=require('./chunk-EYUT6MOM.cjs'),chunkP5GIDGMG_cjs=require('./chunk-P5GIDGMG.cjs'),chunkOTFVOKH3_cjs=require('./chunk-OTFVOKH3.cjs'),chunkAMOXD7EJ_cjs=require('./chunk-AMOXD7EJ.cjs');require('./chunk-65G73T7Z.cjs');var chunk2BTRHVT3_cjs=require('./chunk-2BTRHVT3.cjs'),chunkSK2Q4PRV_cjs=require('./chunk-SK2Q4PRV.cjs');require('./chunk-KD7LUCFY.cjs');var chunkWMZEULS2_cjs=require('./chunk-WMZEULS2.cjs'),chunkHS2KNFAB_cjs=require('./chunk-HS2KNFAB.cjs'),chunkPFHIBSOU_cjs=require('./chunk-PFHIBSOU.cjs'),chunkAJAZ7D3W_cjs=require('./chunk-AJAZ7D3W.cjs');require('./chunk-WIZ6C5QZ.cjs'),require('./chunk-GFU7AOI3.cjs');var chunkHOP4D5XZ_cjs=require('./chunk-HOP4D5XZ.cjs');require('./chunk-HVXO3OFB.cjs');var chunkXUONID6O_cjs=require('./chunk-XUONID6O.cjs'),chunkNY47CFVP_cjs=require('./chunk-NY47CFVP.cjs'),chunkG3J2EU5D_cjs=require('./chunk-G3J2EU5D.cjs');require('./chunk-4ORJMSJU.cjs');var chunk5YW2WHXR_cjs=require('./chunk-5YW2WHXR.cjs'),chunkGYQMNXXW_cjs=require('./chunk-GYQMNXXW.cjs');require('./chunk-MIOMMB23.cjs');var chunkRYIEE2TH_cjs=require('./chunk-RYIEE2TH.cjs'),chunkHHH4XNNS_cjs=require('./chunk-HHH4XNNS.cjs'),chunkEJDIR56C_cjs=require('./chunk-EJDIR56C.cjs'),chunkD5P2IPGX_cjs=require('./chunk-D5P2IPGX.cjs');require('./chunk-Q3Q7BJVQ.cjs'),require('./chunk-AHSFSERC.cjs');var K=require('crypto'),fs=require('fs'),Ee=require('path'),zod=require('zod'),unstorage=require('unstorage'),jr=require('unstorage/drivers/indexedb'),Qr=require('unstorage/drivers/fs');function _interopDefault(e){return e&&e.__esModule?e:{default:e}}var K__default=/*#__PURE__*/_interopDefault(K);var Ee__default=/*#__PURE__*/_interopDefault(Ee);var jr__default=/*#__PURE__*/_interopDefault(jr);var Qr__default=/*#__PURE__*/_interopDefault(Qr);async function Te(s,e){let t=e.data;for(let r of s){let o=await r({...e,data:t});o!==void 0&&(t=o);}return t}async function Sr(s,e){return Te(s,e)}var kr={maxAttempts:5,lockDuration:9e5,notifyUser:true,notifyAdmin:true,adminNotifyAfter:3},S=class{redis;prefix;config;constructor(e,t={},r="kyro:lockout:"){this.redis=e,this.prefix=r,this.config={...kr,...t};}lockKey(e){return `${this.prefix}${e}`}historyKey(e){return `${this.prefix}${e}:history`}async checkLockout(e){let t=this.lockKey(e),r=await this.redis.hgetall(t);if(!r||Object.keys(r).length===0)return {locked:false,attemptsRemaining:this.config.maxAttempts,totalAttempts:0};let o=parseInt(r.attempts,10),i=r.lockedUntil?new Date(parseInt(r.lockedUntil,10)):void 0;return i&&i>new Date?{locked:true,attemptsRemaining:0,lockedUntil:i,totalAttempts:o}:i&&i<=new Date?(await this.unlockAccount(e),{locked:false,attemptsRemaining:this.config.maxAttempts,totalAttempts:0}):{locked:false,attemptsRemaining:Math.max(0,this.config.maxAttempts-o),totalAttempts:o}}async recordFailedAttempt(e){let t=this.lockKey(e),r=this.historyKey(e),o=Date.now(),i=await this.redis.hincrby(t,"attempts",1);if(await this.redis.hset(t,"lastAttempt",o.toString()),await this.redis.lpush(r,o.toString()),await this.redis.ltrim(r,0,99),i>=this.config.maxAttempts){let n=new Date(o+this.config.lockDuration);return await this.redis.hset(t,{lockedAt:o.toString(),lockedUntil:n.getTime().toString()}),await this.redis.expire(t,Math.ceil(this.config.lockDuration/1e3)+3600),{locked:true,attemptsRemaining:0,lockedUntil:n,totalAttempts:i}}return {locked:false,attemptsRemaining:Math.max(0,this.config.maxAttempts-i),totalAttempts:i}}async lockAccount(e,t){let r=this.lockKey(e),o=Date.now(),i=t||this.config.lockDuration,n=new Date(o+i),a=this.redis.pipeline();a.hset(r,{attempts:this.config.maxAttempts.toString(),lockedAt:o.toString(),lockedUntil:n.getTime().toString()}),a.expire(r,Math.ceil(i/1e3)+3600),await a.exec();}async unlockAccount(e){let t=this.lockKey(e);await this.redis.del(t);}async resetAttempts(e){let t=this.lockKey(e);(await this.redis.hgetall(t)).lockedAt?await this.redis.hset(t,{attempts:"0",lockedAt:"",lockedUntil:""}):await this.redis.del(t);}async getLockoutHistory(e,t=10){let r=this.historyKey(e);return (await this.redis.lrange(r,0,t-1)).map(i=>new Date(parseInt(i,10)))}async getLockoutStats(e){let t=this.historyKey(e),r=await this.redis.lrange(t,0,-1),o=r.filter((n,a)=>(a+1)%this.config.maxAttempts===0).length,i=await this.redis.hget(this.lockKey(e),"lockedAt");return {totalFailedAttempts:r.length,lockoutCount:o,lastLockout:i?new Date(parseInt(i,10)):null,averageAttemptsBeforeLockout:o>0?this.config.maxAttempts:0}}shouldNotifyAdmin(e){return this.config.notifyAdmin&&e>=this.config.adminNotifyAfter}getConfig(){return {...this.config}}setConfig(e){this.config={...this.config,...e};}};var xr={"auth:login":{window:9e5,max:5},"auth:register":{window:36e5,max:3},"auth:forgot":{window:36e5,max:3},"auth:reset":{window:36e5,max:5},"auth:verify":{window:36e5,max:5},"api:general":{window:6e4,max:100},"api:authenticated":{window:6e4,max:200}},k=class{redis;prefix;limits;userLimits;constructor(e,t,r,o="kyro:ratelimit:"){this.redis=e,this.prefix=o,this.limits={...xr,...t},this.userLimits=r||{"user:api":{window:6e4,max:500},"user:write":{window:36e5,max:100}};}getKey(e,t){return `${this.prefix}${e}:${t}`}async check(e,t){let r=this.limits[e]||this.limits["api:general"],o=this.getKey(e,t),i=Date.now(),n=i-r.window,a=this.redis.pipeline();a.zremrangebyscore(o,0,n),a.zcard(o),a.zadd(o,i,`${i}:${Math.random()}`),a.expire(o,Math.ceil(r.window/1e3)+1);let l=(await a.exec())?.[1]?.[1]||0;if(l>=r.max){let p=await this.redis.zrange(o,0,0,"WITHSCORES"),d=p.length>1?parseInt(p[1],10)+r.window:i+r.window;return {allowed:false,remaining:0,resetAt:d,retryAfter:Math.ceil((d-i)/1e3)}}return {allowed:true,remaining:r.max-l-1,resetAt:i+r.window}}async checkUser(e,t,r){let o=this.userLimits[e]||this.userLimits["user:api"],i=this.getKey(`user:${e}:${t}`,r),n=Date.now(),a=n-o.window,c=this.redis.pipeline();c.zremrangebyscore(i,0,a),c.zcard(i),c.zadd(i,n,`${n}:${Math.random()}`),c.expire(i,Math.ceil(o.window/1e3)+1);let p=(await c.exec())?.[1]?.[1]||0;if(p>=o.max){let d=await this.redis.zrange(i,0,0,"WITHSCORES"),u=d.length>1?parseInt(d[1],10)+o.window:n+o.window;return {allowed:false,remaining:0,resetAt:u,retryAfter:Math.ceil((u-n)/1e3)}}return {allowed:true,remaining:o.max-p-1,resetAt:n+o.window}}async reset(e,t){let r=this.getKey(e,t);await this.redis.del(r);}async resetUser(e,t,r){let o=this.getKey(`user:${e}:${t}`,r);await this.redis.del(o);}async getStatus(e,t){let r=this.limits[e]||this.limits["api:general"],o=this.getKey(e,t),i=Date.now(),n=i-r.window;await this.redis.zremrangebyscore(o,0,n);let a=await this.redis.zcard(o);return {count:a,limit:r.max,remaining:Math.max(0,r.max-a),resetAt:i+r.window}}setLimit(e,t){this.limits[e]=t;}setUserLimit(e,t){this.userLimits[e]=t;}};var x=class{users=new Map;sessions=new Map;refreshTokens=new Map;emailToUserId=new Map;passwordHistory=new Map;emailVerificationTokens=new Map;passwordResetTokens=new Map;auditLogs=[];externalDb=false;constructor(){}async connect(){}async disconnect(){this.users.clear(),this.sessions.clear(),this.refreshTokens.clear(),this.emailToUserId.clear(),this.passwordHistory.clear();}async createUser(e){let t=K.randomBytes(16).toString("hex"),r=new Date().toISOString(),o=await this.hashPassword(e.password),i={id:t,email:e.email.toLowerCase(),passwordHash:o,role:e.role||"customer",tenantId:e.tenantId,createdAt:r,updatedAt:r};return this.users.set(t,i),this.emailToUserId.set(e.email.toLowerCase(),t),this.passwordHistory.set(t,[]),i}async findUserByEmail(e){let t=this.emailToUserId.get(e.toLowerCase());return t?this.findUserById(t):null}async findUserById(e){return this.users.get(e)||null}async updateUser(e,t){let r=await this.findUserById(e);if(!r)return null;let o={...r,...t,id:e,updatedAt:new Date().toISOString()};return t.email&&t.email!==r.email&&(this.emailToUserId.delete(r.email.toLowerCase()),this.emailToUserId.set(t.email.toLowerCase(),e)),this.users.set(e,o),o}async deleteUser(e){let t=await this.findUserById(e);return t?(this.users.delete(e),this.emailToUserId.delete(t.email.toLowerCase()),this.refreshTokens.forEach((r,o)=>{this.sessions.get(r)?.userId===e&&(this.refreshTokens.delete(o),this.sessions.delete(r));}),this.passwordHistory.delete(e),this.sessions.forEach((r,o)=>{r.userId===e&&this.sessions.delete(o);}),true):false}async hashPassword(e){return (await import('bcryptjs')).default.hash(e,12)}async verifyPassword(e,t){let r=await this.findUserByEmail(e);return !r||!r.passwordHash?null:await(await import('bcryptjs')).default.compare(t,r.passwordHash)?r:null}async createSession(e,t={}){let r=K.randomBytes(32).toString("hex"),o=K.randomBytes(32).toString("base64url"),i=K.randomBytes(32).toString("base64url"),n=new Date,a={id:r,userId:e,token:o,refreshToken:i,expiresAt:new Date(n.getTime()+86400*1e3).toISOString(),createdAt:n.toISOString(),ipAddress:t.ipAddress,userAgent:t.userAgent};return this.sessions.set(r,a),this.refreshTokens.set(i,r),a}async findSessionByToken(e){return this.sessions.get(e)||null}async findSessionByRefreshToken(e){let t=this.refreshTokens.get(e);return t&&this.sessions.get(t)||null}async deleteSession(e){let t=this.sessions.get(e);return t?(t.refreshToken&&this.refreshTokens.delete(t.refreshToken),this.sessions.delete(e),true):false}async deleteUserSessions(e){let t=0;return this.sessions.forEach((r,o)=>{r.userId===e&&(r.refreshToken&&this.refreshTokens.delete(r.refreshToken),this.sessions.delete(o),t++);}),t}async addPasswordToHistory(e,t){let r=this.passwordHistory.get(e)||[];r.push(t),r.length>5&&r.splice(0,r.length-5),this.passwordHistory.set(e,r);}async getPasswordHistory(e,t=5){return this.passwordHistory.get(e)||[]}async isPasswordInHistory(e,t,r=5){let o=await this.getPasswordHistory(t,r),i=(await import('bcryptjs')).default;for(let n of o)if(await i.compare(e,n))return  true;return  false}async createEmailVerificationToken(e){let t=K.randomBytes(32).toString("hex"),r=new Date(Date.now()+1440*60*1e3);return this.emailVerificationTokens.set(t,{userId:e,expiresAt:r}),{token:t,expiresAt:r}}async verifyEmailToken(e){let t=this.emailVerificationTokens.get(e);return !t||t.expiresAt<new Date?(this.emailVerificationTokens.delete(e),{success:false,error:"Invalid or expired token"}):(this.emailVerificationTokens.delete(e),{success:true,userId:t.userId})}async createPasswordResetToken(e){let t=await this.findUserByEmail(e);if(!t)return {token:"",expiresAt:new Date,error:"User not found"};let r=K.randomBytes(32).toString("hex"),o=new Date(Date.now()+3600*1e3);return this.passwordResetTokens.set(r,{userId:t.id,expiresAt:o}),{token:r,expiresAt:o}}async resetPasswordWithToken(e,t){let r=this.passwordResetTokens.get(e);if(!r||r.expiresAt<new Date)return this.passwordResetTokens.delete(e),{success:false,error:"Invalid or expired token"};let o=await this.hashPassword(t);return await this.updateUser(r.userId,{passwordHash:o}),this.passwordResetTokens.delete(e),{success:true}}async hasAnyUsers(){return this.users.size>0}async findAuditLogs(e){let{limit:t=50,offset:r=0}=e,o=this.auditLogs.slice().reverse();return e.userId&&(o=o.filter(i=>i.userId===e.userId)),e.action&&(Array.isArray(e.action)?o=o.filter(i=>e.action.includes(String(i.action))):o=o.filter(i=>i.action===e.action)),e.resource&&(o=o.filter(i=>i.resource===e.resource)),e.success!==void 0&&(o=o.filter(i=>i.success===e.success)),{logs:o.slice(r,r+t),total:o.length}}async createAuditLog(e){let t=K.randomBytes(16).toString("hex"),o={...e,id:t,timestamp:new Date};return this.auditLogs.push(o),o}};var T=class{storage=new Map;history=new Map;config;constructor(e={}){this.config={maxAttempts:5,lockDuration:9e5,notifyUser:true,notifyAdmin:true,adminNotifyAfter:3,...e};}async checkLockout(e){let t=Date.now(),r=this.storage.get(e);if(r&&r.lockedUntil!==null&&r.lockedUntil<=t)return await this.resetAttempts(e),{locked:false,attemptsRemaining:this.config.maxAttempts,totalAttempts:0};if(!r)return {locked:false,attemptsRemaining:this.config.maxAttempts,totalAttempts:0};let{attempts:o,lockedUntil:i}=r;return i!==null&&i>t?{locked:true,attemptsRemaining:0,lockedUntil:new Date(i),totalAttempts:o}:{locked:false,attemptsRemaining:Math.max(0,this.config.maxAttempts-o),totalAttempts:o}}async recordFailedAttempt(e){let t=Date.now(),r=this.storage.get(e)||{attempts:0,lastAttempt:null,lockedAt:null,lockedUntil:null};r.attempts+=1,r.lastAttempt=t;let o=this.history.get(e)||[];if(o.push(t),o.length>100&&o.splice(0,o.length-100),this.history.set(e,o),this.storage.set(e,r),r.attempts>=this.config.maxAttempts){let i=new Date(t+this.config.lockDuration);return r.lockedAt=t,r.lockedUntil=i.getTime(),this.storage.set(e,r),{locked:true,attemptsRemaining:0,lockedUntil:i,totalAttempts:r.attempts}}return {locked:false,attemptsRemaining:Math.max(0,this.config.maxAttempts-r.attempts),totalAttempts:r.attempts}}async lockAccount(e,t){let r=Date.now(),o=t||this.config.lockDuration,i=new Date(r+o),n=this.storage.get(e)||{attempts:0,lastAttempt:null,lockedAt:null,lockedUntil:null};n.attempts=this.config.maxAttempts,n.lockedAt=r,n.lockedUntil=i.getTime(),this.storage.set(e,n);}async unlockAccount(e){await this.resetAttempts(e);}async resetAttempts(e){let t=this.storage.get(e);t&&(t.attempts=0,t.lockedAt=null,t.lockedUntil=null,this.storage.set(e,t)),this.history.delete(e);}async getLockoutHistory(e,t=10){return (this.history.get(e)||[]).slice(-t).reverse().map(o=>new Date(o))}async getLockoutStats(e){let r=(this.history.get(e)||[]).length,o=Math.floor(r/this.config.maxAttempts),i=null,n=this.storage.get(e);n&&n.lockedAt!==null&&(i=new Date(n.lockedAt));let a=o>0?this.config.maxAttempts:0;return {totalFailedAttempts:r,lockoutCount:o,lastLockout:i,averageAttemptsBeforeLockout:a}}shouldNotifyAdmin(e){return this.config.notifyAdmin&&e>=this.config.adminNotifyAfter}getConfig(){return {...this.config}}setConfig(e){this.config={...this.config,...e};}};function h(s,e=""){return process.env[s]||e}function A(s,e=false){let t=process.env[s];return t?t.toLowerCase()==="true":e}function g(s,e=0){let t=process.env[s];return t?parseInt(t,10):e}function Pe(){let s=process.env.KYRO_AUTH_DATABASE?.toLowerCase();if(s&&["sqlite","postgres","mongodb","memory"].includes(s))return s;try{let e=Ee.join(process.cwd(),"kyro.config.ts"),t=fs.readFileSync(e,"utf8");if(t.includes("createLocalAdapter"))return "sqlite";if(t.includes("createDrizzleAdapter"))return t.includes("postgres")||t.includes("postgresql"),"postgres";if(t.includes("createMongoDBAdapter"))return "mongodb"}catch{}return "memory"}async function Cr(s){let e=process.cwd(),t=e.endsWith("admin")?Ee.join(e,".."):e,r=Ee.resolve(t,"data","auth.db");switch(s){case "sqlite":return new chunkHOP4D5XZ_cjs.a({path:h("KYRO_AUTH_DB_PATH",r)});case "postgres":{let o=h("DATABASE_URL","");if(o){let i,n;try{i=(await import('drizzle-orm/postgres-js')).drizzle,n=await import('postgres');}catch{chunkD5P2IPGX_cjs.a(["postgres","drizzle-orm"]),i=(await import('drizzle-orm/postgres-js')).drizzle,n=await import('postgres');}let a=n.default(o,{onnotice:()=>{}}),c=i(a);return new chunkGYQMNXXW_cjs.a({db:c})}return new chunkHOP4D5XZ_cjs.a({path:h("KYRO_AUTH_DB_PATH",r)})}case "mongodb":{let o=h("MONGODB_URI","");if(o){let i;try{i=(await import('mongodb')).MongoClient;}catch{chunkD5P2IPGX_cjs.a(["mongodb"]),i=(await import('mongodb')).MongoClient;}let n=new i(o);await n.connect();let c=new URL(o).pathname.replace(/^\//,"")||"kyro_cms",l=n.db(c);return new chunkHHH4XNNS_cjs.a({db:l})}return new chunkHOP4D5XZ_cjs.a({path:h("KYRO_AUTH_DB_PATH",r)})}default:return new x}}async function F(s,e){let t=A("KYRO_DISTRIBUTED",false),r;if(t){let{RedisAuthAdapter:d}=await import('./redis-adapter-OUKQGYCH.cjs'),u=h("REDIS_URL","redis://localhost:6379"),y=A("REDIS_TLS",false),f=new d({url:u,tls:y});await f.connect?.(),r=f;}else {let d=s||Pe();r=await Cr(d),r.connect&&await r.connect();}let o=e?await chunkAJAZ7D3W_cjs.b.fromConfig(e).catch(()=>null)||chunkAJAZ7D3W_cjs.b.fromEnv()||void 0:chunkAJAZ7D3W_cjs.b.fromEnv()||void 0,i=new chunkAJAZ7D3W_cjs.c({minLength:g("PASSWORD_MIN_LENGTH",12),requireUppercase:A("PASSWORD_REQUIRE_UPPERCASE",true),requireLowercase:A("PASSWORD_REQUIRE_LOWERCASE",true),requireNumbers:A("PASSWORD_REQUIRE_NUMBERS",true),requireSpecialChars:A("PASSWORD_REQUIRE_SPECIAL",true),preventReuse:g("PASSWORD_PREVENT_REUSE",5),maxLength:g("PASSWORD_MAX_LENGTH",128)}),n,a,c;if(t){let u=r.redis;n=new S(u,{maxAttempts:g("LOCKOUT_MAX_ATTEMPTS",5),lockDuration:g("LOCKOUT_DURATION_MINUTES",15)*60*1e3}),a=new k(u,{"auth:login":{window:g("RATE_LIMIT_AUTH_WINDOW_MS",9e5),max:g("RATE_LIMIT_AUTH_MAX_REQUESTS",10)},"api:general":{window:g("RATE_LIMIT_WINDOW_MS",6e4),max:g("RATE_LIMIT_MAX_REQUESTS",100)}}),c=new chunkPFHIBSOU_cjs.n(u,g("AUDIT_LOG_RETENTION_DAYS",30));}else n=new T({maxAttempts:g("LOCKOUT_MAX_ATTEMPTS",5),lockDuration:g("LOCKOUT_DURATION_MINUTES",15)*60*1e3}),a=new chunkPFHIBSOU_cjs.m({"auth:login":{window:g("RATE_LIMIT_AUTH_WINDOW_MS",9e5),max:g("RATE_LIMIT_AUTH_MAX_REQUESTS",10)},"api:general":{window:g("RATE_LIMIT_WINDOW_MS",6e4),max:g("RATE_LIMIT_MAX_REQUESTS",100)}}),c=A("AUDIT_LOG_ENABLED",true)?new chunkPFHIBSOU_cjs.p(g("AUDIT_LOG_RETENTION_DAYS",30)):void 0;let l=new chunkPFHIBSOU_cjs.q({redis:r,email:o,jwtSecret:h("APP_SECRET","change-me"),jwtExpiresIn:h("JWT_EXPIRES_IN","24h"),jwtIssuer:h("JWT_ISSUER","kyro-cms"),jwtAudience:h("JWT_AUDIENCE","kyro-cms-client"),passwordPolicy:i,lockout:n,rateLimiter:a,auditLogger:c,baseUrl:h("EMAIL_BASE_URL","http://localhost:4321"),emailVerificationRequired:A("EMAIL_VERIFICATION_REQUIRED",true)}),p=t?"distributed":s||Pe();return {authAdapter:r,databaseType:p,email:o,passwordPolicy:i,lockout:n,rateLimiter:a,auditLogger:c,routes:l}}var Re=F().catch(s=>(console.warn("[AuthConfig] Failed to initialize auth config:",s.message),null));var Rr=12,Dr="24h",vr="7d",L=class{adapter;config;constructor(e,t){this.adapter=e,this.config={secret:t.secret,expiresIn:t.expiresIn??Dr,refreshExpiresIn:t.refreshExpiresIn??vr,issuer:t.issuer??"kyro-cms",audience:t.audience??[],saltRounds:t.saltRounds??Rr};}async register(e){try{if(await this.adapter.findUserByEmail(e.email))return {success:!1,error:"Email already registered"};let r=await this.adapter.createUser({email:e.email,password:e.password,role:e.role??"customer",tenantId:e.tenantId});return this.createSessionForUser(r)}catch(t){return {success:false,error:String(t)}}}async login(e){try{let t=await this.adapter.verifyPassword(e.email,e.password);return t?this.createSessionForUser(t):{success:!1,error:"Invalid credentials"}}catch(t){return {success:false,error:String(t)}}}async logout(e){await this.adapter.deleteSession(e);}async refreshToken(e){try{let t=await this.adapter.findSessionByToken(e);if(!t||new Date(t.expiresAt)<new Date)return {success:!1,error:"Invalid or expired refresh token"};let r=await this.adapter.findUserById(t.userId);return r?(await this.adapter.deleteSession(e),this.createSessionForUser(r)):{success:!1,error:"User not found"}}catch(t){return {success:false,error:String(t)}}}async verifyToken(e){try{let{default:t}=await import('jsonwebtoken');return t.verify(e,this.config.secret,{issuer:this.config.issuer,audience:this.config.audience.length>0?this.config.audience[0]:void 0})}catch{return null}}async getUserFromToken(e){let t=await this.verifyToken(e);return t?this.adapter.findUserById(t.sub):null}async changePassword(e,t,r){try{let o=await this.adapter.findUserById(e);return o?await this.adapter.verifyPassword(o.email,t)?(await this.adapter.updateUser(e,{password:r}),await this.adapter.deleteUserSessions(e),{success:!0,user:o}):{success:!1,error:"Current password is incorrect"}:{success:!1,error:"User not found"}}catch(o){return {success:false,error:String(o)}}}async resetPassword(e,t){try{let r=await this.adapter.findUserByEmail(e);return r?(await this.adapter.updateUser(r.id,{password:t}),await this.adapter.deleteUserSessions(r.id),{success:!0,user:r}):{success:!1,error:"User not found"}}catch(r){return {success:false,error:String(r)}}}async sendEmailVerification(e){try{let{token:t,expiresAt:r}=await this.adapter.createEmailVerificationToken(e);return {success:!0}}catch(t){return {success:false,error:String(t)}}}async verifyEmail(e){try{return await this.adapter.verifyEmailToken(e)}catch(t){return {success:false,error:String(t)}}}async requestPasswordReset(e){try{let t=await this.adapter.createPasswordResetToken(e);return t.error?{success:!1,error:t.error}:{success:!0}}catch(t){return {success:false,error:String(t)}}}async resetPasswordWithToken(e,t){try{return await this.adapter.resetPasswordWithToken(e,t)}catch(r){return {success:false,error:String(r)}}}async deleteAccount(e){try{return await this.adapter.findUserById(e)?(await this.adapter.deleteUserSessions(e),await this.adapter.deleteUser(e),{success:!0}):{success:!1,error:"User not found"}}catch(t){return {success:false,error:String(t)}}}async createSessionForUser(e){let t=await this.generateToken(e),r=await this.adapter.createSession(e.id);return {success:true,user:e,session:r,token:t}}async generateToken(e){let{default:t}=await import('jsonwebtoken'),r={sub:e.id,email:e.email,role:e.role,tenantId:e.tenantId},o={expiresIn:this.parseExpiresIn(this.config.expiresIn)/1e3,issuer:this.config.issuer};return this.config.audience.length>0&&(o.audience=this.config.audience[0]),t.sign(r,this.config.secret,o)}async hashPassword(e){let{default:t}=await import('bcryptjs');return t.hash(e,this.config.saltRounds)}parseExpiresIn(e){if(typeof e=="number")return e;let t=e.match(/^(\d+)([smhd])$/);if(!t)return 864e5;let r=parseInt(t[1],10);switch(t[2]){case "s":return r*1e3;case "m":return r*6e4;case "h":return r*36e5;case "d":return r*864e5;default:return 864e5}}};function Lr(s,e){return new L(s,e)}function I(){return {enabled:true,draftsEnabled:true,publishEnabled:true,scheduleEnabled:false,versioningEnabled:true,maxVersionsPerDocument:50,autoPublish:false,requirePublishPermission:true}}var E=class{adapter;config;constructor(e,t){this.adapter=e,this.config={...I(),...t};}async createVersion(e){let r=((await this.adapter.getLatestVersion(e.collection,e.documentId))?.version??0)+1,o={...e,version:r},i=await this.adapter.createVersion(o);return this.config.maxVersionsPerDocument>0&&await this.pruneOldVersions(e.collection,e.documentId),i}async publishVersion(e){let t=await this.adapter.getVersion(e.collection,e.versionId);if(!t)throw new Error("Version not found");if(t.status==="published")throw new Error("Version is already published");await this.adapter.publishVersion(e);}async unpublishDocument(e,t){let r=await this.adapter.getVersions({collection:e,documentId:t,limit:1e3});for(let o of r)if(o.status==="published"){await this.createVersion({collection:e,documentId:t,data:o.data,status:"draft",createdBy:"system",changeDescription:"Unpublished document"});break}}async revertToVersion(e,t,r,o){if(!await this.adapter.getVersion(e,r))throw new Error("Version not found");return await this.adapter.revertToVersion({collection:e,documentId:t,versionId:r,userId:o})}async getVersionHistory(e,t,r=20,o=0){return this.adapter.getVersions({collection:e,documentId:t,limit:r,offset:o})}async compareTwoVersions(e,t,r,o){return this.adapter.compareVersions({collection:e,documentId:t,versionA:r,versionB:o})}async getLatestDraft(e,t){return this.adapter.getLatestVersion(e,t)}async getPublishedVersion(e,t){return this.adapter.getPublishedVersion(e,t)}async getVersion(e,t){return this.adapter.getVersion(e,t)}async schedulePublish(e,t,r,o){if(!this.config.scheduleEnabled)throw new Error("Scheduled publishing is not enabled");if(!await this.adapter.getVersion(e,r))throw new Error("Version not found")}async deleteVersionHistory(e,t){await this.adapter.deleteVersions(e,t);}async pruneOldVersions(e,t){let r=await this.adapter.getVersions({collection:e,documentId:t,limit:this.config.maxVersionsPerDocument+100});if(r.length<=this.config.maxVersionsPerDocument)return;r.slice(0,this.config.maxVersionsPerDocument);let i=r.slice(this.config.maxVersionsPerDocument);for(let n of i)if(n.status!=="published"){await this.adapter.deleteVersions(e,t);break}}};function Ir(s,e){return new E(s,e)}function Er(s){return s==="published"}function Ur(s){return s==="draft"}function Vr(s){return s==="archived"}function Or(s){return s?Array.isArray(s)?s:Object.values(s):[]}function _r(s){return s?Array.isArray(s)?s:Object.values(s):[]}function De(s){return {collections:Or(s.collections),globals:_r(s.globals),adapter:s.adapter,plugins:s.plugins,auth:s.auth,cors:s.cors,admin:s.admin,upload:s.upload,graphQL:s.graphQL,typescript:s.typescript,localization:s.localization,rateLimit:s.rateLimit,debug:s.debug}}var Mr=De;function Hr(s){let{siteSettings:e,seoSettings:t,title:r,description:o,image:i,url:n}=s;if(!e)return "";let a=e.siteName||"",c=r||t?.defaultTitle||a,l=t?.titleTemplate,p=t?.separator||" | ",d=t?.siteNameInTitle!==false,u=l?l.replace(/\{\{title\}\}/g,c).replace(/\{\{siteName\}\}/g,d?a:"").replace(/\{\{separator\}\}/g,p).replace(/\s+/g," ").trim():c,y=o||t?.defaultDescription||e.siteDescription||"",f=i||e.siteOgImage?.url||"",U=n||e.siteUrl||"",m=`
+'use strict';var chunk3RSMK4DA_cjs=require('./chunk-3RSMK4DA.cjs'),chunk2NJR2B4W_cjs=require('./chunk-2NJR2B4W.cjs'),chunkP5GIDGMG_cjs=require('./chunk-P5GIDGMG.cjs'),chunkIQYP3DDJ_cjs=require('./chunk-IQYP3DDJ.cjs'),chunkQMQXKCCQ_cjs=require('./chunk-QMQXKCCQ.cjs');require('./chunk-65G73T7Z.cjs');var chunk2BTRHVT3_cjs=require('./chunk-2BTRHVT3.cjs'),chunkSK2Q4PRV_cjs=require('./chunk-SK2Q4PRV.cjs');require('./chunk-KD7LUCFY.cjs');var chunkWMZEULS2_cjs=require('./chunk-WMZEULS2.cjs'),chunkHS2KNFAB_cjs=require('./chunk-HS2KNFAB.cjs'),chunkM5JUPA7G_cjs=require('./chunk-M5JUPA7G.cjs'),chunkGCQTSPX6_cjs=require('./chunk-GCQTSPX6.cjs');require('./chunk-WIZ6C5QZ.cjs'),require('./chunk-GO34AOBZ.cjs');var chunkHOP4D5XZ_cjs=require('./chunk-HOP4D5XZ.cjs');require('./chunk-HVXO3OFB.cjs');var chunkXUONID6O_cjs=require('./chunk-XUONID6O.cjs'),chunkNY47CFVP_cjs=require('./chunk-NY47CFVP.cjs'),chunkG3J2EU5D_cjs=require('./chunk-G3J2EU5D.cjs');require('./chunk-4ORJMSJU.cjs');var chunk3ZFRP5M2_cjs=require('./chunk-3ZFRP5M2.cjs'),chunkGYQMNXXW_cjs=require('./chunk-GYQMNXXW.cjs');require('./chunk-MIOMMB23.cjs');var chunkRYIEE2TH_cjs=require('./chunk-RYIEE2TH.cjs'),chunkHHH4XNNS_cjs=require('./chunk-HHH4XNNS.cjs'),chunkEJDIR56C_cjs=require('./chunk-EJDIR56C.cjs'),chunkD5P2IPGX_cjs=require('./chunk-D5P2IPGX.cjs');require('./chunk-Q3Q7BJVQ.cjs'),require('./chunk-AHSFSERC.cjs');var K=require('crypto'),fs=require('fs'),Ee=require('path'),zod=require('zod'),unstorage=require('unstorage'),jr=require('unstorage/drivers/indexedb'),Qr=require('unstorage/drivers/fs');function _interopDefault(e){return e&&e.__esModule?e:{default:e}}var K__default=/*#__PURE__*/_interopDefault(K);var Ee__default=/*#__PURE__*/_interopDefault(Ee);var jr__default=/*#__PURE__*/_interopDefault(jr);var Qr__default=/*#__PURE__*/_interopDefault(Qr);async function Te(s,e){let t=e.data;for(let r of s){let o=await r({...e,data:t});o!==void 0&&(t=o);}return t}async function Sr(s,e){return Te(s,e)}var kr={maxAttempts:5,lockDuration:9e5,notifyUser:true,notifyAdmin:true,adminNotifyAfter:3},S=class{redis;prefix;config;constructor(e,t={},r="kyro:lockout:"){this.redis=e,this.prefix=r,this.config={...kr,...t};}lockKey(e){return `${this.prefix}${e}`}historyKey(e){return `${this.prefix}${e}:history`}async checkLockout(e){let t=this.lockKey(e),r=await this.redis.hgetall(t);if(!r||Object.keys(r).length===0)return {locked:false,attemptsRemaining:this.config.maxAttempts,totalAttempts:0};let o=parseInt(r.attempts,10),i=r.lockedUntil?new Date(parseInt(r.lockedUntil,10)):void 0;return i&&i>new Date?{locked:true,attemptsRemaining:0,lockedUntil:i,totalAttempts:o}:i&&i<=new Date?(await this.unlockAccount(e),{locked:false,attemptsRemaining:this.config.maxAttempts,totalAttempts:0}):{locked:false,attemptsRemaining:Math.max(0,this.config.maxAttempts-o),totalAttempts:o}}async recordFailedAttempt(e){let t=this.lockKey(e),r=this.historyKey(e),o=Date.now(),i=await this.redis.hincrby(t,"attempts",1);if(await this.redis.hset(t,"lastAttempt",o.toString()),await this.redis.lpush(r,o.toString()),await this.redis.ltrim(r,0,99),i>=this.config.maxAttempts){let n=new Date(o+this.config.lockDuration);return await this.redis.hset(t,{lockedAt:o.toString(),lockedUntil:n.getTime().toString()}),await this.redis.expire(t,Math.ceil(this.config.lockDuration/1e3)+3600),{locked:true,attemptsRemaining:0,lockedUntil:n,totalAttempts:i}}return {locked:false,attemptsRemaining:Math.max(0,this.config.maxAttempts-i),totalAttempts:i}}async lockAccount(e,t){let r=this.lockKey(e),o=Date.now(),i=t||this.config.lockDuration,n=new Date(o+i),a=this.redis.pipeline();a.hset(r,{attempts:this.config.maxAttempts.toString(),lockedAt:o.toString(),lockedUntil:n.getTime().toString()}),a.expire(r,Math.ceil(i/1e3)+3600),await a.exec();}async unlockAccount(e){let t=this.lockKey(e);await this.redis.del(t);}async resetAttempts(e){let t=this.lockKey(e);(await this.redis.hgetall(t)).lockedAt?await this.redis.hset(t,{attempts:"0",lockedAt:"",lockedUntil:""}):await this.redis.del(t);}async getLockoutHistory(e,t=10){let r=this.historyKey(e);return (await this.redis.lrange(r,0,t-1)).map(i=>new Date(parseInt(i,10)))}async getLockoutStats(e){let t=this.historyKey(e),r=await this.redis.lrange(t,0,-1),o=r.filter((n,a)=>(a+1)%this.config.maxAttempts===0).length,i=await this.redis.hget(this.lockKey(e),"lockedAt");return {totalFailedAttempts:r.length,lockoutCount:o,lastLockout:i?new Date(parseInt(i,10)):null,averageAttemptsBeforeLockout:o>0?this.config.maxAttempts:0}}shouldNotifyAdmin(e){return this.config.notifyAdmin&&e>=this.config.adminNotifyAfter}getConfig(){return {...this.config}}setConfig(e){this.config={...this.config,...e};}};var xr={"auth:login":{window:9e5,max:5},"auth:register":{window:36e5,max:3},"auth:forgot":{window:36e5,max:3},"auth:reset":{window:36e5,max:5},"auth:verify":{window:36e5,max:5},"api:general":{window:6e4,max:100},"api:authenticated":{window:6e4,max:200}},k=class{redis;prefix;limits;userLimits;constructor(e,t,r,o="kyro:ratelimit:"){this.redis=e,this.prefix=o,this.limits={...xr,...t},this.userLimits=r||{"user:api":{window:6e4,max:500},"user:write":{window:36e5,max:100}};}getKey(e,t){return `${this.prefix}${e}:${t}`}async check(e,t){let r=this.limits[e]||this.limits["api:general"],o=this.getKey(e,t),i=Date.now(),n=i-r.window,a=this.redis.pipeline();a.zremrangebyscore(o,0,n),a.zcard(o),a.zadd(o,i,`${i}:${Math.random()}`),a.expire(o,Math.ceil(r.window/1e3)+1);let l=(await a.exec())?.[1]?.[1]||0;if(l>=r.max){let p=await this.redis.zrange(o,0,0,"WITHSCORES"),d=p.length>1?parseInt(p[1],10)+r.window:i+r.window;return {allowed:false,remaining:0,resetAt:d,retryAfter:Math.ceil((d-i)/1e3)}}return {allowed:true,remaining:r.max-l-1,resetAt:i+r.window}}async checkUser(e,t,r){let o=this.userLimits[e]||this.userLimits["user:api"],i=this.getKey(`user:${e}:${t}`,r),n=Date.now(),a=n-o.window,c=this.redis.pipeline();c.zremrangebyscore(i,0,a),c.zcard(i),c.zadd(i,n,`${n}:${Math.random()}`),c.expire(i,Math.ceil(o.window/1e3)+1);let p=(await c.exec())?.[1]?.[1]||0;if(p>=o.max){let d=await this.redis.zrange(i,0,0,"WITHSCORES"),u=d.length>1?parseInt(d[1],10)+o.window:n+o.window;return {allowed:false,remaining:0,resetAt:u,retryAfter:Math.ceil((u-n)/1e3)}}return {allowed:true,remaining:o.max-p-1,resetAt:n+o.window}}async reset(e,t){let r=this.getKey(e,t);await this.redis.del(r);}async resetUser(e,t,r){let o=this.getKey(`user:${e}:${t}`,r);await this.redis.del(o);}async getStatus(e,t){let r=this.limits[e]||this.limits["api:general"],o=this.getKey(e,t),i=Date.now(),n=i-r.window;await this.redis.zremrangebyscore(o,0,n);let a=await this.redis.zcard(o);return {count:a,limit:r.max,remaining:Math.max(0,r.max-a),resetAt:i+r.window}}setLimit(e,t){this.limits[e]=t;}setUserLimit(e,t){this.userLimits[e]=t;}};var x=class{users=new Map;sessions=new Map;refreshTokens=new Map;emailToUserId=new Map;passwordHistory=new Map;emailVerificationTokens=new Map;passwordResetTokens=new Map;auditLogs=[];externalDb=false;constructor(){}async connect(){}async disconnect(){this.users.clear(),this.sessions.clear(),this.refreshTokens.clear(),this.emailToUserId.clear(),this.passwordHistory.clear();}async createUser(e){let t=K.randomBytes(16).toString("hex"),r=new Date().toISOString(),o=await this.hashPassword(e.password),i={id:t,email:e.email.toLowerCase(),passwordHash:o,role:e.role||"customer",tenantId:e.tenantId,createdAt:r,updatedAt:r};return this.users.set(t,i),this.emailToUserId.set(e.email.toLowerCase(),t),this.passwordHistory.set(t,[]),i}async findUserByEmail(e){let t=this.emailToUserId.get(e.toLowerCase());return t?this.findUserById(t):null}async findUserById(e){return this.users.get(e)||null}async updateUser(e,t){let r=await this.findUserById(e);if(!r)return null;let o={...r,...t,id:e,updatedAt:new Date().toISOString()};return t.email&&t.email!==r.email&&(this.emailToUserId.delete(r.email.toLowerCase()),this.emailToUserId.set(t.email.toLowerCase(),e)),this.users.set(e,o),o}async deleteUser(e){let t=await this.findUserById(e);return t?(this.users.delete(e),this.emailToUserId.delete(t.email.toLowerCase()),this.refreshTokens.forEach((r,o)=>{this.sessions.get(r)?.userId===e&&(this.refreshTokens.delete(o),this.sessions.delete(r));}),this.passwordHistory.delete(e),this.sessions.forEach((r,o)=>{r.userId===e&&this.sessions.delete(o);}),true):false}async hashPassword(e){return (await import('bcryptjs')).default.hash(e,12)}async verifyPassword(e,t){let r=await this.findUserByEmail(e);return !r||!r.passwordHash?null:await(await import('bcryptjs')).default.compare(t,r.passwordHash)?r:null}async createSession(e,t={}){let r=K.randomBytes(32).toString("hex"),o=K.randomBytes(32).toString("base64url"),i=K.randomBytes(32).toString("base64url"),n=new Date,a={id:r,userId:e,token:o,refreshToken:i,expiresAt:new Date(n.getTime()+86400*1e3).toISOString(),createdAt:n.toISOString(),ipAddress:t.ipAddress,userAgent:t.userAgent};return this.sessions.set(r,a),this.refreshTokens.set(i,r),a}async findSessionByToken(e){return this.sessions.get(e)||null}async findSessionByRefreshToken(e){let t=this.refreshTokens.get(e);return t&&this.sessions.get(t)||null}async deleteSession(e){let t=this.sessions.get(e);return t?(t.refreshToken&&this.refreshTokens.delete(t.refreshToken),this.sessions.delete(e),true):false}async deleteUserSessions(e){let t=0;return this.sessions.forEach((r,o)=>{r.userId===e&&(r.refreshToken&&this.refreshTokens.delete(r.refreshToken),this.sessions.delete(o),t++);}),t}async addPasswordToHistory(e,t){let r=this.passwordHistory.get(e)||[];r.push(t),r.length>5&&r.splice(0,r.length-5),this.passwordHistory.set(e,r);}async getPasswordHistory(e,t=5){return this.passwordHistory.get(e)||[]}async isPasswordInHistory(e,t,r=5){let o=await this.getPasswordHistory(t,r),i=(await import('bcryptjs')).default;for(let n of o)if(await i.compare(e,n))return  true;return  false}async createEmailVerificationToken(e){let t=K.randomBytes(32).toString("hex"),r=new Date(Date.now()+1440*60*1e3);return this.emailVerificationTokens.set(t,{userId:e,expiresAt:r}),{token:t,expiresAt:r}}async verifyEmailToken(e){let t=this.emailVerificationTokens.get(e);return !t||t.expiresAt<new Date?(this.emailVerificationTokens.delete(e),{success:false,error:"Invalid or expired token"}):(this.emailVerificationTokens.delete(e),{success:true,userId:t.userId})}async createPasswordResetToken(e){let t=await this.findUserByEmail(e);if(!t)return {token:"",expiresAt:new Date,error:"User not found"};let r=K.randomBytes(32).toString("hex"),o=new Date(Date.now()+3600*1e3);return this.passwordResetTokens.set(r,{userId:t.id,expiresAt:o}),{token:r,expiresAt:o}}async resetPasswordWithToken(e,t){let r=this.passwordResetTokens.get(e);if(!r||r.expiresAt<new Date)return this.passwordResetTokens.delete(e),{success:false,error:"Invalid or expired token"};let o=await this.hashPassword(t);return await this.updateUser(r.userId,{passwordHash:o}),this.passwordResetTokens.delete(e),{success:true}}async hasAnyUsers(){return this.users.size>0}async findAuditLogs(e){let{limit:t=50,offset:r=0}=e,o=this.auditLogs.slice().reverse();return e.userId&&(o=o.filter(i=>i.userId===e.userId)),e.action&&(Array.isArray(e.action)?o=o.filter(i=>e.action.includes(String(i.action))):o=o.filter(i=>i.action===e.action)),e.resource&&(o=o.filter(i=>i.resource===e.resource)),e.success!==void 0&&(o=o.filter(i=>i.success===e.success)),{logs:o.slice(r,r+t),total:o.length}}async createAuditLog(e){let t=K.randomBytes(16).toString("hex"),o={...e,id:t,timestamp:new Date};return this.auditLogs.push(o),o}};var T=class{storage=new Map;history=new Map;config;constructor(e={}){this.config={maxAttempts:5,lockDuration:9e5,notifyUser:true,notifyAdmin:true,adminNotifyAfter:3,...e};}async checkLockout(e){let t=Date.now(),r=this.storage.get(e);if(r&&r.lockedUntil!==null&&r.lockedUntil<=t)return await this.resetAttempts(e),{locked:false,attemptsRemaining:this.config.maxAttempts,totalAttempts:0};if(!r)return {locked:false,attemptsRemaining:this.config.maxAttempts,totalAttempts:0};let{attempts:o,lockedUntil:i}=r;return i!==null&&i>t?{locked:true,attemptsRemaining:0,lockedUntil:new Date(i),totalAttempts:o}:{locked:false,attemptsRemaining:Math.max(0,this.config.maxAttempts-o),totalAttempts:o}}async recordFailedAttempt(e){let t=Date.now(),r=this.storage.get(e)||{attempts:0,lastAttempt:null,lockedAt:null,lockedUntil:null};r.attempts+=1,r.lastAttempt=t;let o=this.history.get(e)||[];if(o.push(t),o.length>100&&o.splice(0,o.length-100),this.history.set(e,o),this.storage.set(e,r),r.attempts>=this.config.maxAttempts){let i=new Date(t+this.config.lockDuration);return r.lockedAt=t,r.lockedUntil=i.getTime(),this.storage.set(e,r),{locked:true,attemptsRemaining:0,lockedUntil:i,totalAttempts:r.attempts}}return {locked:false,attemptsRemaining:Math.max(0,this.config.maxAttempts-r.attempts),totalAttempts:r.attempts}}async lockAccount(e,t){let r=Date.now(),o=t||this.config.lockDuration,i=new Date(r+o),n=this.storage.get(e)||{attempts:0,lastAttempt:null,lockedAt:null,lockedUntil:null};n.attempts=this.config.maxAttempts,n.lockedAt=r,n.lockedUntil=i.getTime(),this.storage.set(e,n);}async unlockAccount(e){await this.resetAttempts(e);}async resetAttempts(e){let t=this.storage.get(e);t&&(t.attempts=0,t.lockedAt=null,t.lockedUntil=null,this.storage.set(e,t)),this.history.delete(e);}async getLockoutHistory(e,t=10){return (this.history.get(e)||[]).slice(-t).reverse().map(o=>new Date(o))}async getLockoutStats(e){let r=(this.history.get(e)||[]).length,o=Math.floor(r/this.config.maxAttempts),i=null,n=this.storage.get(e);n&&n.lockedAt!==null&&(i=new Date(n.lockedAt));let a=o>0?this.config.maxAttempts:0;return {totalFailedAttempts:r,lockoutCount:o,lastLockout:i,averageAttemptsBeforeLockout:a}}shouldNotifyAdmin(e){return this.config.notifyAdmin&&e>=this.config.adminNotifyAfter}getConfig(){return {...this.config}}setConfig(e){this.config={...this.config,...e};}};function h(s,e=""){return process.env[s]||e}function A(s,e=false){let t=process.env[s];return t?t.toLowerCase()==="true":e}function g(s,e=0){let t=process.env[s];return t?parseInt(t,10):e}function Pe(){let s=process.env.KYRO_AUTH_DATABASE?.toLowerCase();if(s&&["sqlite","postgres","mongodb","memory"].includes(s))return s;try{let e=Ee.join(process.cwd(),"kyro.config.ts"),t=fs.readFileSync(e,"utf8");if(t.includes("createLocalAdapter"))return "sqlite";if(t.includes("createDrizzleAdapter"))return t.includes("postgres")||t.includes("postgresql"),"postgres";if(t.includes("createMongoDBAdapter"))return "mongodb"}catch{}return "memory"}async function Cr(s){let e=process.cwd(),t=e.endsWith("admin")?Ee.join(e,".."):e,r=Ee.resolve(t,"data","auth.db");switch(s){case "sqlite":return new chunkHOP4D5XZ_cjs.a({path:h("KYRO_AUTH_DB_PATH",r)});case "postgres":{let o=h("DATABASE_URL","");if(o){let i,n;try{i=(await import('drizzle-orm/postgres-js')).drizzle,n=await import('postgres');}catch{chunkD5P2IPGX_cjs.a(["postgres","drizzle-orm"]),i=(await import('drizzle-orm/postgres-js')).drizzle,n=await import('postgres');}let a=n.default(o,{onnotice:()=>{}}),c=i(a);return new chunkGYQMNXXW_cjs.a({db:c})}return new chunkHOP4D5XZ_cjs.a({path:h("KYRO_AUTH_DB_PATH",r)})}case "mongodb":{let o=h("MONGODB_URI","");if(o){let i;try{i=(await import('mongodb')).MongoClient;}catch{chunkD5P2IPGX_cjs.a(["mongodb"]),i=(await import('mongodb')).MongoClient;}let n=new i(o);await n.connect();let c=new URL(o).pathname.replace(/^\//,"")||"kyro_cms",l=n.db(c);return new chunkHHH4XNNS_cjs.a({db:l})}return new chunkHOP4D5XZ_cjs.a({path:h("KYRO_AUTH_DB_PATH",r)})}default:return new x}}async function F(s,e){let t=A("KYRO_DISTRIBUTED",false),r;if(t){let{RedisAuthAdapter:d}=await import('./redis-adapter-OUKQGYCH.cjs'),u=h("REDIS_URL","redis://localhost:6379"),y=A("REDIS_TLS",false),f=new d({url:u,tls:y});await f.connect?.(),r=f;}else {let d=s||Pe();r=await Cr(d),r.connect&&await r.connect();}let o=e?await chunkGCQTSPX6_cjs.b.fromConfig(e).catch(()=>null)||chunkGCQTSPX6_cjs.b.fromEnv()||void 0:chunkGCQTSPX6_cjs.b.fromEnv()||void 0,i=new chunkGCQTSPX6_cjs.c({minLength:g("PASSWORD_MIN_LENGTH",12),requireUppercase:A("PASSWORD_REQUIRE_UPPERCASE",true),requireLowercase:A("PASSWORD_REQUIRE_LOWERCASE",true),requireNumbers:A("PASSWORD_REQUIRE_NUMBERS",true),requireSpecialChars:A("PASSWORD_REQUIRE_SPECIAL",true),preventReuse:g("PASSWORD_PREVENT_REUSE",5),maxLength:g("PASSWORD_MAX_LENGTH",128)}),n,a,c;if(t){let u=r.redis;n=new S(u,{maxAttempts:g("LOCKOUT_MAX_ATTEMPTS",5),lockDuration:g("LOCKOUT_DURATION_MINUTES",15)*60*1e3}),a=new k(u,{"auth:login":{window:g("RATE_LIMIT_AUTH_WINDOW_MS",9e5),max:g("RATE_LIMIT_AUTH_MAX_REQUESTS",10)},"api:general":{window:g("RATE_LIMIT_WINDOW_MS",6e4),max:g("RATE_LIMIT_MAX_REQUESTS",100)}}),c=new chunkM5JUPA7G_cjs.n(u,g("AUDIT_LOG_RETENTION_DAYS",30));}else n=new T({maxAttempts:g("LOCKOUT_MAX_ATTEMPTS",5),lockDuration:g("LOCKOUT_DURATION_MINUTES",15)*60*1e3}),a=new chunkM5JUPA7G_cjs.m({"auth:login":{window:g("RATE_LIMIT_AUTH_WINDOW_MS",9e5),max:g("RATE_LIMIT_AUTH_MAX_REQUESTS",10)},"api:general":{window:g("RATE_LIMIT_WINDOW_MS",6e4),max:g("RATE_LIMIT_MAX_REQUESTS",100)}}),c=A("AUDIT_LOG_ENABLED",true)?new chunkM5JUPA7G_cjs.p(g("AUDIT_LOG_RETENTION_DAYS",30)):void 0;let l=new chunkM5JUPA7G_cjs.q({redis:r,email:o,jwtSecret:h("APP_SECRET","change-me"),jwtExpiresIn:h("JWT_EXPIRES_IN","24h"),jwtIssuer:h("JWT_ISSUER","kyro-cms"),jwtAudience:h("JWT_AUDIENCE","kyro-cms-client"),passwordPolicy:i,lockout:n,rateLimiter:a,auditLogger:c,baseUrl:h("EMAIL_BASE_URL","http://localhost:4321"),emailVerificationRequired:A("EMAIL_VERIFICATION_REQUIRED",true)}),p=t?"distributed":s||Pe();return {authAdapter:r,databaseType:p,email:o,passwordPolicy:i,lockout:n,rateLimiter:a,auditLogger:c,routes:l}}var Re=F().catch(s=>(console.warn("[AuthConfig] Failed to initialize auth config:",s.message),null));var Rr=12,Dr="24h",vr="7d",L=class{adapter;config;constructor(e,t){this.adapter=e,this.config={secret:t.secret,expiresIn:t.expiresIn??Dr,refreshExpiresIn:t.refreshExpiresIn??vr,issuer:t.issuer??"kyro-cms",audience:t.audience??[],saltRounds:t.saltRounds??Rr};}async register(e){try{if(await this.adapter.findUserByEmail(e.email))return {success:!1,error:"Email already registered"};let r=await this.adapter.createUser({email:e.email,password:e.password,role:e.role??"customer",tenantId:e.tenantId});return this.createSessionForUser(r)}catch(t){return {success:false,error:String(t)}}}async login(e){try{let t=await this.adapter.verifyPassword(e.email,e.password);return t?this.createSessionForUser(t):{success:!1,error:"Invalid credentials"}}catch(t){return {success:false,error:String(t)}}}async logout(e){await this.adapter.deleteSession(e);}async refreshToken(e){try{let t=await this.adapter.findSessionByToken(e);if(!t||new Date(t.expiresAt)<new Date)return {success:!1,error:"Invalid or expired refresh token"};let r=await this.adapter.findUserById(t.userId);return r?(await this.adapter.deleteSession(e),this.createSessionForUser(r)):{success:!1,error:"User not found"}}catch(t){return {success:false,error:String(t)}}}async verifyToken(e){try{let{default:t}=await import('jsonwebtoken');return t.verify(e,this.config.secret,{issuer:this.config.issuer,audience:this.config.audience.length>0?this.config.audience[0]:void 0})}catch{return null}}async getUserFromToken(e){let t=await this.verifyToken(e);return t?this.adapter.findUserById(t.sub):null}async changePassword(e,t,r){try{let o=await this.adapter.findUserById(e);return o?await this.adapter.verifyPassword(o.email,t)?(await this.adapter.updateUser(e,{password:r}),await this.adapter.deleteUserSessions(e),{success:!0,user:o}):{success:!1,error:"Current password is incorrect"}:{success:!1,error:"User not found"}}catch(o){return {success:false,error:String(o)}}}async resetPassword(e,t){try{let r=await this.adapter.findUserByEmail(e);return r?(await this.adapter.updateUser(r.id,{password:t}),await this.adapter.deleteUserSessions(r.id),{success:!0,user:r}):{success:!1,error:"User not found"}}catch(r){return {success:false,error:String(r)}}}async sendEmailVerification(e){try{let{token:t,expiresAt:r}=await this.adapter.createEmailVerificationToken(e);return {success:!0}}catch(t){return {success:false,error:String(t)}}}async verifyEmail(e){try{return await this.adapter.verifyEmailToken(e)}catch(t){return {success:false,error:String(t)}}}async requestPasswordReset(e){try{let t=await this.adapter.createPasswordResetToken(e);return t.error?{success:!1,error:t.error}:{success:!0}}catch(t){return {success:false,error:String(t)}}}async resetPasswordWithToken(e,t){try{return await this.adapter.resetPasswordWithToken(e,t)}catch(r){return {success:false,error:String(r)}}}async deleteAccount(e){try{return await this.adapter.findUserById(e)?(await this.adapter.deleteUserSessions(e),await this.adapter.deleteUser(e),{success:!0}):{success:!1,error:"User not found"}}catch(t){return {success:false,error:String(t)}}}async createSessionForUser(e){let t=await this.generateToken(e),r=await this.adapter.createSession(e.id);return {success:true,user:e,session:r,token:t}}async generateToken(e){let{default:t}=await import('jsonwebtoken'),r={sub:e.id,email:e.email,role:e.role,tenantId:e.tenantId},o={expiresIn:this.parseExpiresIn(this.config.expiresIn)/1e3,issuer:this.config.issuer};return this.config.audience.length>0&&(o.audience=this.config.audience[0]),t.sign(r,this.config.secret,o)}async hashPassword(e){let{default:t}=await import('bcryptjs');return t.hash(e,this.config.saltRounds)}parseExpiresIn(e){if(typeof e=="number")return e;let t=e.match(/^(\d+)([smhd])$/);if(!t)return 864e5;let r=parseInt(t[1],10);switch(t[2]){case "s":return r*1e3;case "m":return r*6e4;case "h":return r*36e5;case "d":return r*864e5;default:return 864e5}}};function Lr(s,e){return new L(s,e)}function I(){return {enabled:true,draftsEnabled:true,publishEnabled:true,scheduleEnabled:false,versioningEnabled:true,maxVersionsPerDocument:50,autoPublish:false,requirePublishPermission:true}}var E=class{adapter;config;constructor(e,t){this.adapter=e,this.config={...I(),...t};}async createVersion(e){let r=((await this.adapter.getLatestVersion(e.collection,e.documentId))?.version??0)+1,o={...e,version:r},i=await this.adapter.createVersion(o);return this.config.maxVersionsPerDocument>0&&await this.pruneOldVersions(e.collection,e.documentId),i}async publishVersion(e){let t=await this.adapter.getVersion(e.collection,e.versionId);if(!t)throw new Error("Version not found");if(t.status==="published")throw new Error("Version is already published");await this.adapter.publishVersion(e);}async unpublishDocument(e,t){let r=await this.adapter.getVersions({collection:e,documentId:t,limit:1e3});for(let o of r)if(o.status==="published"){await this.createVersion({collection:e,documentId:t,data:o.data,status:"draft",createdBy:"system",changeDescription:"Unpublished document"});break}}async revertToVersion(e,t,r,o){if(!await this.adapter.getVersion(e,r))throw new Error("Version not found");return await this.adapter.revertToVersion({collection:e,documentId:t,versionId:r,userId:o})}async getVersionHistory(e,t,r=20,o=0){return this.adapter.getVersions({collection:e,documentId:t,limit:r,offset:o})}async compareTwoVersions(e,t,r,o){return this.adapter.compareVersions({collection:e,documentId:t,versionA:r,versionB:o})}async getLatestDraft(e,t){return this.adapter.getLatestVersion(e,t)}async getPublishedVersion(e,t){return this.adapter.getPublishedVersion(e,t)}async getVersion(e,t){return this.adapter.getVersion(e,t)}async schedulePublish(e,t,r,o){if(!this.config.scheduleEnabled)throw new Error("Scheduled publishing is not enabled");if(!await this.adapter.getVersion(e,r))throw new Error("Version not found")}async deleteVersionHistory(e,t){await this.adapter.deleteVersions(e,t);}async pruneOldVersions(e,t){let r=await this.adapter.getVersions({collection:e,documentId:t,limit:this.config.maxVersionsPerDocument+100});if(r.length<=this.config.maxVersionsPerDocument)return;r.slice(0,this.config.maxVersionsPerDocument);let i=r.slice(this.config.maxVersionsPerDocument);for(let n of i)if(n.status!=="published"){await this.adapter.deleteVersions(e,t);break}}};function Ir(s,e){return new E(s,e)}function Er(s){return s==="published"}function Ur(s){return s==="draft"}function Vr(s){return s==="archived"}function Or(s){return s?Array.isArray(s)?s:Object.values(s):[]}function _r(s){return s?Array.isArray(s)?s:Object.values(s):[]}function De(s){return {collections:Or(s.collections),globals:_r(s.globals),adapter:s.adapter,plugins:s.plugins,auth:s.auth,cors:s.cors,admin:s.admin,upload:s.upload,graphQL:s.graphQL,typescript:s.typescript,localization:s.localization,rateLimit:s.rateLimit,debug:s.debug}}var Mr=De;function Hr(s){let{siteSettings:e,seoSettings:t,title:r,description:o,image:i,url:n}=s;if(!e)return "";let a=e.siteName||"",c=r||t?.defaultTitle||a,l=t?.titleTemplate,p=t?.separator||" | ",d=t?.siteNameInTitle!==false,u=l?l.replace(/\{\{title\}\}/g,c).replace(/\{\{siteName\}\}/g,d?a:"").replace(/\{\{separator\}\}/g,p).replace(/\s+/g," ").trim():c,y=o||t?.defaultDescription||e.siteDescription||"",f=i||e.siteOgImage?.url||"",U=n||e.siteUrl||"",m=`
     <title>${u}</title>
     <meta name="description" content="${y}">
   `;e.siteFavicon?.url&&(m+=`
@@ -40,4 +40,4 @@
     `),r&&(o+=`
       <!-- Plausible Analytics -->
       <script defer data-domain="${r}" src="https://plausible.io/js/script.js"></script>
-    `),o}var Br={facebook:{label:"Facebook"},twitter:{label:"Twitter / X"},instagram:{label:"Instagram"},linkedin:{label:"LinkedIn"},youtube:{label:"YouTube"},tiktok:{label:"TikTok"},pinterest:{label:"Pinterest"},discord:{label:"Discord"},twitch:{label:"Twitch"},github:{label:"GitHub"},mastodon:{label:"Mastodon"}},Nr=["facebook","twitter","instagram","linkedin","youtube","tiktok","pinterest","discord","twitch","github","mastodon"];function ve(s){if(!s)return [];let e=s.showAll===true,t=[];for(let r of Nr){let o=s[r];if(!o||["tiktok","pinterest","discord","twitch","github","mastodon"].includes(r)&&!e)continue;let n=Br[r];t.push({platform:r,url:o,label:n?.label||r});}return t}async function Kr(s,e){try{let t=await s.findOne({collection:"_globals_social-settings",where:{},draft:e?.draft??!1});return ve(t)}catch{return []}}function Le(s){return s?{storeName:s.storeName,storeEmail:s.storeEmail,storePhone:s.storePhone,address:s.address,currency:s.currency,tax:s.tax,shipping:s.shipping,orders:s.orders}:{}}async function zr(s,e){try{let t=await s.findOne({collection:"_globals_store-settings",where:{},draft:e?.draft??!1});return Le(t)}catch{return {}}}function Ie(s){return s?{testMode:s.testMode,provider:s.provider,stripe:s.stripe,paypal:s.paypal,square:s.square,methods:s.methods,bankTransfer:s.bankTransfer}:{}}async function $r(s,e){try{let t=await s.findOne({collection:"_globals_payment-settings",where:{},draft:e?.draft??!1});return Ie(t)}catch{return {}}}async function B(s={}){let{namespace:e="kyro",ttl:t}=s,r=unstorage.createStorage({driver:jr__default.default({dbName:"kyro-cms",storeName:e})}),o=e?`${e}:`:"";return {storage:{getItem:async n=>{let a=`${o}${n}`,c=await r.getItem(a);if(c==null)return null;try{let l=JSON.parse(c);return l.expiry&&Date.now()>l.expiry?(await r.removeItem(a),null):l.value}catch{return c}},setItem:async(n,a)=>{let c=`${o}${n}`,l=JSON.stringify(t?{value:a,expiry:Date.now()+t}:{value:a});await r.setItem(c,l);},removeItem:async n=>{await r.removeItem(`${o}${n}`);}},cleanup:async()=>{await r.dispose?.();}}}function N(s){let e=s||process.env.APP_SECRET||process.env.AUTH_SECRET||"development-secret-key";return K__default.default.createHash("sha256").update(e).digest("hex")}function Yr(s,e){let t=K__default.default.randomBytes(16),r=K__default.default.createCipheriv("aes-256-gcm",Buffer.from(e,"hex").subarray(0,32),t),o=r.update(s,"utf8","hex");o+=r.final("hex");let i=r.getAuthTag().toString("hex");return `${t.toString("hex")}:${i}:${o}`}function Xr(s,e){let[t,r,o]=s.split(":"),i=Buffer.from(t,"hex"),n=Buffer.from(r,"hex"),a=K__default.default.createDecipheriv("aes-256-gcm",Buffer.from(e,"hex").subarray(0,32),i);a.setAuthTag(n);let c=a.update(o,"hex","utf8");return c+=a.final("utf8"),c}async function z(s={}){let{namespace:e="kyro",ttl:t,encryption:r=true,secret:o,basePath:i}=s,n=i?Ee__default.default.join(i,".astro","kyro.json"):Ee__default.default.join(process.cwd(),".astro","kyro.json"),a=unstorage.createStorage({driver:Qr__default.default({base:n})}),c=r?N(o):null,l=e?`${e}:`:"";return {storage:{getItem:async p=>{let d=`${l}${p}`,u=await a.getItem(d);if(u==null)return null;try{let y=c?Xr(u,c):u,f=JSON.parse(y);return f.expiry&&Date.now()>f.expiry?(await a.removeItem(d),null):f.value}catch{return u}},setItem:async(p,d)=>{let u=`${l}${p}`,y=JSON.stringify(t?{value:d,expiry:Date.now()+t}:{value:d});await a.setItem(u,c?Yr(y,c):y);},removeItem:async p=>{await a.removeItem(`${l}${p}`);}},cleanup:async()=>{await a.dispose?.();}}}async function $(s){let{environment:e,adapter:t,connectionString:r,encryption:o}=s,i=process.env.APP_SECRET||process.env.AUTH_SECRET,n={enabled:o?.enabled??true,algorithm:o?.algorithm};return e==="browser"?B({namespace:"kyro"}):z({namespace:"kyro",encryption:n.enabled,secret:i})}async function Ue(s){let e={...s,encryption:{enabled:true,algorithm:s.encryption?.algorithm}};return $(e)}chunkPFHIBSOU_cjs.l();Object.defineProperty(exports,"RedisAuthAdapter",{enumerable:true,get:function(){return chunk3RSMK4DA_cjs.a}});Object.defineProperty(exports,"allSettingsGlobals",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.R}});Object.defineProperty(exports,"blogCollections",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.c}});Object.defineProperty(exports,"blogGlobals",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.d}});Object.defineProperty(exports,"coreSettingsGlobals",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.S}});Object.defineProperty(exports,"createTemplateConfig",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.W}});Object.defineProperty(exports,"ecommerceCollections",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.e}});Object.defineProperty(exports,"ecommerceGlobals",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.f}});Object.defineProperty(exports,"kitchenSinkCollections",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.g}});Object.defineProperty(exports,"mediaCollections",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.i}});Object.defineProperty(exports,"minimalCollections",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.a}});Object.defineProperty(exports,"templateCollections",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.V}});Object.defineProperty(exports,"kyro",{enumerable:true,get:function(){return chunkP5GIDGMG_cjs.a}});Object.defineProperty(exports,"AnalyticsPlugin",{enumerable:true,get:function(){return chunkOTFVOKH3_cjs.s}});Object.defineProperty(exports,"CommentsPlugin",{enumerable:true,get:function(){return chunkOTFVOKH3_cjs.t}});Object.defineProperty(exports,"ConfigValidationError",{enumerable:true,get:function(){return chunkOTFVOKH3_cjs.a}});Object.defineProperty(exports,"Kyro",{enumerable:true,get:function(){return chunkOTFVOKH3_cjs.y}});Object.defineProperty(exports,"KyroPlugin",{enumerable:true,get:function(){return chunkOTFVOKH3_cjs.p}});Object.defineProperty(exports,"LocalAdapter",{enumerable:true,get:function(){return chunkOTFVOKH3_cjs.A}});Object.defineProperty(exports,"PluginManager",{enumerable:true,get:function(){return chunkOTFVOKH3_cjs.q}});Object.defineProperty(exports,"Registry",{enumerable:true,get:function(){return chunkOTFVOKH3_cjs.l}});Object.defineProperty(exports,"ReviewsPlugin",{enumerable:true,get:function(){return chunkOTFVOKH3_cjs.u}});Object.defineProperty(exports,"SEOPlugin",{enumerable:true,get:function(){return chunkOTFVOKH3_cjs.r}});Object.defineProperty(exports,"WishlistPlugin",{enumerable:true,get:function(){return chunkOTFVOKH3_cjs.v}});Object.defineProperty(exports,"applyCollectionOverrides",{enumerable:true,get:function(){return chunkOTFVOKH3_cjs.x}});Object.defineProperty(exports,"collectionToCreateZod",{enumerable:true,get:function(){return chunkOTFVOKH3_cjs.h}});Object.defineProperty(exports,"collectionToUpdateZod",{enumerable:true,get:function(){return chunkOTFVOKH3_cjs.i}});Object.defineProperty(exports,"collectionToWhereZod",{enumerable:true,get:function(){return chunkOTFVOKH3_cjs.j}});Object.defineProperty(exports,"collectionToZod",{enumerable:true,get:function(){return chunkOTFVOKH3_cjs.g}});Object.defineProperty(exports,"createKyro",{enumerable:true,get:function(){return chunkOTFVOKH3_cjs.z}});Object.defineProperty(exports,"createLocalAdapter",{enumerable:true,get:function(){return chunkOTFVOKH3_cjs.B}});Object.defineProperty(exports,"createRegistry",{enumerable:true,get:function(){return chunkOTFVOKH3_cjs.o}});Object.defineProperty(exports,"fieldToZod",{enumerable:true,get:function(){return chunkOTFVOKH3_cjs.f}});Object.defineProperty(exports,"getRegistry",{enumerable:true,get:function(){return chunkOTFVOKH3_cjs.m}});Object.defineProperty(exports,"globalToZod",{enumerable:true,get:function(){return chunkOTFVOKH3_cjs.k}});Object.defineProperty(exports,"presetPlugins",{enumerable:true,get:function(){return chunkOTFVOKH3_cjs.w}});Object.defineProperty(exports,"resetRegistry",{enumerable:true,get:function(){return chunkOTFVOKH3_cjs.n}});Object.defineProperty(exports,"validateCollection",{enumerable:true,get:function(){return chunkOTFVOKH3_cjs.b}});Object.defineProperty(exports,"validateConfig",{enumerable:true,get:function(){return chunkOTFVOKH3_cjs.e}});Object.defineProperty(exports,"validateFields",{enumerable:true,get:function(){return chunkOTFVOKH3_cjs.d}});Object.defineProperty(exports,"validateGlobal",{enumerable:true,get:function(){return chunkOTFVOKH3_cjs.c}});Object.defineProperty(exports,"autoBootstrap",{enumerable:true,get:function(){return chunkAMOXD7EJ_cjs.d}});Object.defineProperty(exports,"bootstrapAdmin",{enumerable:true,get:function(){return chunkAMOXD7EJ_cjs.a}});Object.defineProperty(exports,"bootstrapWithRetry",{enumerable:true,get:function(){return chunkAMOXD7EJ_cjs.e}});Object.defineProperty(exports,"getBootstrapFromEnv",{enumerable:true,get:function(){return chunkAMOXD7EJ_cjs.c}});Object.defineProperty(exports,"CSSGenerator",{enumerable:true,get:function(){return chunk2BTRHVT3_cjs.a}});Object.defineProperty(exports,"createAdminStyling",{enumerable:true,get:function(){return chunk2BTRHVT3_cjs.g}});Object.defineProperty(exports,"defaultDarkTheme",{enumerable:true,get:function(){return chunk2BTRHVT3_cjs.d}});Object.defineProperty(exports,"defaultFieldStyling",{enumerable:true,get:function(){return chunk2BTRHVT3_cjs.h}});Object.defineProperty(exports,"defaultLightTheme",{enumerable:true,get:function(){return chunk2BTRHVT3_cjs.c}});Object.defineProperty(exports,"ecommerce2026Theme",{enumerable:true,get:function(){return chunk2BTRHVT3_cjs.e}});Object.defineProperty(exports,"generateCSSVariables",{enumerable:true,get:function(){return chunk2BTRHVT3_cjs.f}});Object.defineProperty(exports,"generateTailwindConfig",{enumerable:true,get:function(){return chunk2BTRHVT3_cjs.b}});Object.defineProperty(exports,"ALL_FIELD_TYPES",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.q}});Object.defineProperty(exports,"COMPLEX_FIELD_TYPES",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.n}});Object.defineProperty(exports,"LAYOUT_FIELD_TYPES",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.p}});Object.defineProperty(exports,"PRIMITIVE_FIELD_TYPES",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.m}});Object.defineProperty(exports,"RELATIONAL_FIELD_TYPES",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.o}});Object.defineProperty(exports,"isArrayField",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.d}});Object.defineProperty(exports,"isBlocksField",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.f}});Object.defineProperty(exports,"isGroupField",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.e}});Object.defineProperty(exports,"isImageField",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.h}});Object.defineProperty(exports,"isLayoutField",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.k}});Object.defineProperty(exports,"isNumberField",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.b}});Object.defineProperty(exports,"isRelationshipField",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.c}});Object.defineProperty(exports,"isRichTextField",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.i}});Object.defineProperty(exports,"isSelectField",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.j}});Object.defineProperty(exports,"isTextField",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.a}});Object.defineProperty(exports,"isUploadField",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.g}});Object.defineProperty(exports,"normalizeRichTextValue",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.t}});Object.defineProperty(exports,"renderRichText",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.u}});Object.defineProperty(exports,"richTextStyles",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.s}});Object.defineProperty(exports,"createContext",{enumerable:true,get:function(){return chunkWMZEULS2_cjs.a}});Object.defineProperty(exports,"createCountProcedure",{enumerable:true,get:function(){return chunkWMZEULS2_cjs.g}});Object.defineProperty(exports,"createCreateProcedure",{enumerable:true,get:function(){return chunkWMZEULS2_cjs.d}});Object.defineProperty(exports,"createDeleteProcedure",{enumerable:true,get:function(){return chunkWMZEULS2_cjs.f}});Object.defineProperty(exports,"createDynamicRouter",{enumerable:true,get:function(){return chunkWMZEULS2_cjs.h}});Object.defineProperty(exports,"createFindByIDProcedure",{enumerable:true,get:function(){return chunkWMZEULS2_cjs.c}});Object.defineProperty(exports,"createFindProcedure",{enumerable:true,get:function(){return chunkWMZEULS2_cjs.b}});Object.defineProperty(exports,"createKyroServer",{enumerable:true,get:function(){return chunkWMZEULS2_cjs.i}});Object.defineProperty(exports,"createUpdateProcedure",{enumerable:true,get:function(){return chunkWMZEULS2_cjs.e}});Object.defineProperty(exports,"buildGraphQLSchema",{enumerable:true,get:function(){return chunkHS2KNFAB_cjs.c}});Object.defineProperty(exports,"createGraphQLSchema",{enumerable:true,get:function(){return chunkHS2KNFAB_cjs.d}});Object.defineProperty(exports,"AuditLogger",{enumerable:true,get:function(){return chunkPFHIBSOU_cjs.n}});Object.defineProperty(exports,"InMemoryAuditLogger",{enumerable:true,get:function(){return chunkPFHIBSOU_cjs.p}});Object.defineProperty(exports,"InMemoryRateLimiter",{enumerable:true,get:function(){return chunkPFHIBSOU_cjs.m}});Object.defineProperty(exports,"MediaService",{enumerable:true,get:function(){return chunkPFHIBSOU_cjs.r}});Object.defineProperty(exports,"createAuditContext",{enumerable:true,get:function(){return chunkPFHIBSOU_cjs.o}});Object.defineProperty(exports,"createHonoApp",{enumerable:true,get:function(){return chunkPFHIBSOU_cjs.s}});Object.defineProperty(exports,"createLocalStorage",{enumerable:true,get:function(){return chunkPFHIBSOU_cjs.e}});Object.defineProperty(exports,"createRESTAPI",{enumerable:true,get:function(){return chunkPFHIBSOU_cjs.t}});Object.defineProperty(exports,"getAppSecret",{enumerable:true,get:function(){return chunkPFHIBSOU_cjs.i}});Object.defineProperty(exports,"getEncryptionKey",{enumerable:true,get:function(){return chunkPFHIBSOU_cjs.j}});Object.defineProperty(exports,"getSessionConfig",{enumerable:true,get:function(){return chunkPFHIBSOU_cjs.k}});Object.defineProperty(exports,"loadSecrets",{enumerable:true,get:function(){return chunkPFHIBSOU_cjs.h}});Object.defineProperty(exports,"resolveProvider",{enumerable:true,get:function(){return chunkPFHIBSOU_cjs.d}});Object.defineProperty(exports,"setDbAdapter",{enumerable:true,get:function(){return chunkPFHIBSOU_cjs.g}});Object.defineProperty(exports,"ConfigService",{enumerable:true,get:function(){return chunkAJAZ7D3W_cjs.a}});Object.defineProperty(exports,"EmailTransport",{enumerable:true,get:function(){return chunkAJAZ7D3W_cjs.b}});Object.defineProperty(exports,"PasswordPolicy",{enumerable:true,get:function(){return chunkAJAZ7D3W_cjs.c}});Object.defineProperty(exports,"SQLiteAuthAdapter",{enumerable:true,get:function(){return chunkHOP4D5XZ_cjs.a}});Object.defineProperty(exports,"ALL_WEBHOOK_EVENTS",{enumerable:true,get:function(){return chunkXUONID6O_cjs.e}});Object.defineProperty(exports,"WEBHOOK_COLLECTION",{enumerable:true,get:function(){return chunkXUONID6O_cjs.f}});Object.defineProperty(exports,"WEBHOOK_DELIVERY_COLLECTION",{enumerable:true,get:function(){return chunkXUONID6O_cjs.g}});Object.defineProperty(exports,"WEBHOOK_EVENTS",{enumerable:true,get:function(){return chunkXUONID6O_cjs.d}});Object.defineProperty(exports,"WebhookService",{enumerable:true,get:function(){return chunkXUONID6O_cjs.n}});Object.defineProperty(exports,"buildDeliveryRecord",{enumerable:true,get:function(){return chunkXUONID6O_cjs.l}});Object.defineProperty(exports,"createTestPayload",{enumerable:true,get:function(){return chunkXUONID6O_cjs.m}});Object.defineProperty(exports,"createWebhookService",{enumerable:true,get:function(){return chunkXUONID6O_cjs.o}});Object.defineProperty(exports,"deliverWebhook",{enumerable:true,get:function(){return chunkXUONID6O_cjs.j}});Object.defineProperty(exports,"deliverWithRetry",{enumerable:true,get:function(){return chunkXUONID6O_cjs.k}});Object.defineProperty(exports,"generateWebhookSecret",{enumerable:true,get:function(){return chunkXUONID6O_cjs.i}});Object.defineProperty(exports,"signPayload",{enumerable:true,get:function(){return chunkXUONID6O_cjs.h}});Object.defineProperty(exports,"evaluateAccess",{enumerable:true,get:function(){return chunkNY47CFVP_cjs.a}});Object.defineProperty(exports,"getWhereClause",{enumerable:true,get:function(){return chunkNY47CFVP_cjs.c}});Object.defineProperty(exports,"mergeWhereClauses",{enumerable:true,get:function(){return chunkNY47CFVP_cjs.b}});Object.defineProperty(exports,"KyroPubSub",{enumerable:true,get:function(){return chunkG3J2EU5D_cjs.b}});Object.defineProperty(exports,"KyroWSServer",{enumerable:true,get:function(){return chunkG3J2EU5D_cjs.c}});Object.defineProperty(exports,"PubSub",{enumerable:true,get:function(){return chunkG3J2EU5D_cjs.a}});Object.defineProperty(exports,"createWSServer",{enumerable:true,get:function(){return chunkG3J2EU5D_cjs.d}});Object.defineProperty(exports,"DrizzleAdapter",{enumerable:true,get:function(){return chunk5YW2WHXR_cjs.c}});Object.defineProperty(exports,"collectionToDrizzleSchema",{enumerable:true,get:function(){return chunk5YW2WHXR_cjs.b}});Object.defineProperty(exports,"createDatabase",{enumerable:true,get:function(){return chunk5YW2WHXR_cjs.f}});Object.defineProperty(exports,"createDrizzleAdapter",{enumerable:true,get:function(){return chunk5YW2WHXR_cjs.d}});Object.defineProperty(exports,"fieldToDrizzleType",{enumerable:true,get:function(){return chunk5YW2WHXR_cjs.a}});Object.defineProperty(exports,"runMigrations",{enumerable:true,get:function(){return chunk5YW2WHXR_cjs.g}});Object.defineProperty(exports,"seedDefaultRoles",{enumerable:true,get:function(){return chunk5YW2WHXR_cjs.h}});Object.defineProperty(exports,"PostgresAuthAdapter",{enumerable:true,get:function(){return chunkGYQMNXXW_cjs.a}});Object.defineProperty(exports,"MongoDBAdapter",{enumerable:true,get:function(){return chunkRYIEE2TH_cjs.a}});Object.defineProperty(exports,"createMongoDBAdapter",{enumerable:true,get:function(){return chunkRYIEE2TH_cjs.b}});Object.defineProperty(exports,"MongoDBAuthAdapter",{enumerable:true,get:function(){return chunkHHH4XNNS_cjs.a}});Object.defineProperty(exports,"AbstractBaseAdapter",{enumerable:true,get:function(){return chunkEJDIR56C_cjs.a}});Object.defineProperty(exports,"z",{enumerable:true,get:function(){return zod.z}});exports.AccountLockout=S;exports.Auth=L;exports.InMemoryAccountLockout=T;exports.InMemoryAuthAdapter=x;exports.RateLimiter=k;exports.VersionManager=E;exports.authConfig=Re;exports.createAuth=Lr;exports.createAuthConfig=F;exports.createAuthStorage=Ue;exports.createStorage=$;exports.createVersionManager=Ir;exports.defineConfig=De;exports.defineKyroConfig=Mr;exports.generateAnalyticsTags=Fr;exports.generateSeoTags=Hr;exports.getDefaultDraftPublishConfig=I;exports.getPaymentConfig=$r;exports.getPaymentConfigFromSettings=Ie;exports.getSocialLinks=Kr;exports.getSocialLinksFromSettings=ve;exports.getStoreConfig=zr;exports.getStoreConfigFromSettings=Le;exports.isArchived=Vr;exports.isDraft=Ur;exports.isPublished=Er;exports.runFieldHooks=Sr;exports.runHooks=Te;
+    `),o}var Br={facebook:{label:"Facebook"},twitter:{label:"Twitter / X"},instagram:{label:"Instagram"},linkedin:{label:"LinkedIn"},youtube:{label:"YouTube"},tiktok:{label:"TikTok"},pinterest:{label:"Pinterest"},discord:{label:"Discord"},twitch:{label:"Twitch"},github:{label:"GitHub"},mastodon:{label:"Mastodon"}},Nr=["facebook","twitter","instagram","linkedin","youtube","tiktok","pinterest","discord","twitch","github","mastodon"];function ve(s){if(!s)return [];let e=s.showAll===true,t=[];for(let r of Nr){let o=s[r];if(!o||["tiktok","pinterest","discord","twitch","github","mastodon"].includes(r)&&!e)continue;let n=Br[r];t.push({platform:r,url:o,label:n?.label||r});}return t}async function Kr(s,e){try{let t=await s.findOne({collection:"_globals_social-settings",where:{},draft:e?.draft??!1});return ve(t)}catch{return []}}function Le(s){return s?{storeName:s.storeName,storeEmail:s.storeEmail,storePhone:s.storePhone,address:s.address,currency:s.currency,tax:s.tax,shipping:s.shipping,orders:s.orders}:{}}async function zr(s,e){try{let t=await s.findOne({collection:"_globals_store-settings",where:{},draft:e?.draft??!1});return Le(t)}catch{return {}}}function Ie(s){return s?{testMode:s.testMode,provider:s.provider,stripe:s.stripe,paypal:s.paypal,square:s.square,methods:s.methods,bankTransfer:s.bankTransfer}:{}}async function $r(s,e){try{let t=await s.findOne({collection:"_globals_payment-settings",where:{},draft:e?.draft??!1});return Ie(t)}catch{return {}}}async function B(s={}){let{namespace:e="kyro",ttl:t}=s,r=unstorage.createStorage({driver:jr__default.default({dbName:"kyro-cms",storeName:e})}),o=e?`${e}:`:"";return {storage:{getItem:async n=>{let a=`${o}${n}`,c=await r.getItem(a);if(c==null)return null;try{let l=JSON.parse(c);return l.expiry&&Date.now()>l.expiry?(await r.removeItem(a),null):l.value}catch{return c}},setItem:async(n,a)=>{let c=`${o}${n}`,l=JSON.stringify(t?{value:a,expiry:Date.now()+t}:{value:a});await r.setItem(c,l);},removeItem:async n=>{await r.removeItem(`${o}${n}`);}},cleanup:async()=>{await r.dispose?.();}}}function N(s){let e=s||process.env.APP_SECRET||process.env.AUTH_SECRET||"development-secret-key";return K__default.default.createHash("sha256").update(e).digest("hex")}function Yr(s,e){let t=K__default.default.randomBytes(16),r=K__default.default.createCipheriv("aes-256-gcm",Buffer.from(e,"hex").subarray(0,32),t),o=r.update(s,"utf8","hex");o+=r.final("hex");let i=r.getAuthTag().toString("hex");return `${t.toString("hex")}:${i}:${o}`}function Xr(s,e){let[t,r,o]=s.split(":"),i=Buffer.from(t,"hex"),n=Buffer.from(r,"hex"),a=K__default.default.createDecipheriv("aes-256-gcm",Buffer.from(e,"hex").subarray(0,32),i);a.setAuthTag(n);let c=a.update(o,"hex","utf8");return c+=a.final("utf8"),c}async function z(s={}){let{namespace:e="kyro",ttl:t,encryption:r=true,secret:o,basePath:i}=s,n=i?Ee__default.default.join(i,".astro","kyro.json"):Ee__default.default.join(process.cwd(),".astro","kyro.json"),a=unstorage.createStorage({driver:Qr__default.default({base:n})}),c=r?N(o):null,l=e?`${e}:`:"";return {storage:{getItem:async p=>{let d=`${l}${p}`,u=await a.getItem(d);if(u==null)return null;try{let y=c?Xr(u,c):u,f=JSON.parse(y);return f.expiry&&Date.now()>f.expiry?(await a.removeItem(d),null):f.value}catch{return u}},setItem:async(p,d)=>{let u=`${l}${p}`,y=JSON.stringify(t?{value:d,expiry:Date.now()+t}:{value:d});await a.setItem(u,c?Yr(y,c):y);},removeItem:async p=>{await a.removeItem(`${l}${p}`);}},cleanup:async()=>{await a.dispose?.();}}}async function $(s){let{environment:e,adapter:t,connectionString:r,encryption:o}=s,i=process.env.APP_SECRET||process.env.AUTH_SECRET,n={enabled:o?.enabled??true,algorithm:o?.algorithm};return e==="browser"?B({namespace:"kyro"}):z({namespace:"kyro",encryption:n.enabled,secret:i})}async function Ue(s){let e={...s,encryption:{enabled:true,algorithm:s.encryption?.algorithm}};return $(e)}chunkM5JUPA7G_cjs.l();Object.defineProperty(exports,"RedisAuthAdapter",{enumerable:true,get:function(){return chunk3RSMK4DA_cjs.a}});Object.defineProperty(exports,"allSettingsGlobals",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.R}});Object.defineProperty(exports,"blogCollections",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.c}});Object.defineProperty(exports,"blogGlobals",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.d}});Object.defineProperty(exports,"coreSettingsGlobals",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.S}});Object.defineProperty(exports,"createTemplateConfig",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.W}});Object.defineProperty(exports,"ecommerceCollections",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.e}});Object.defineProperty(exports,"ecommerceGlobals",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.f}});Object.defineProperty(exports,"kitchenSinkCollections",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.g}});Object.defineProperty(exports,"mediaCollections",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.i}});Object.defineProperty(exports,"minimalCollections",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.a}});Object.defineProperty(exports,"templateCollections",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.V}});Object.defineProperty(exports,"kyro",{enumerable:true,get:function(){return chunkP5GIDGMG_cjs.a}});Object.defineProperty(exports,"AnalyticsPlugin",{enumerable:true,get:function(){return chunkIQYP3DDJ_cjs.s}});Object.defineProperty(exports,"CommentsPlugin",{enumerable:true,get:function(){return chunkIQYP3DDJ_cjs.t}});Object.defineProperty(exports,"ConfigValidationError",{enumerable:true,get:function(){return chunkIQYP3DDJ_cjs.a}});Object.defineProperty(exports,"Kyro",{enumerable:true,get:function(){return chunkIQYP3DDJ_cjs.y}});Object.defineProperty(exports,"KyroPlugin",{enumerable:true,get:function(){return chunkIQYP3DDJ_cjs.p}});Object.defineProperty(exports,"LocalAdapter",{enumerable:true,get:function(){return chunkIQYP3DDJ_cjs.A}});Object.defineProperty(exports,"PluginManager",{enumerable:true,get:function(){return chunkIQYP3DDJ_cjs.q}});Object.defineProperty(exports,"Registry",{enumerable:true,get:function(){return chunkIQYP3DDJ_cjs.l}});Object.defineProperty(exports,"ReviewsPlugin",{enumerable:true,get:function(){return chunkIQYP3DDJ_cjs.u}});Object.defineProperty(exports,"SEOPlugin",{enumerable:true,get:function(){return chunkIQYP3DDJ_cjs.r}});Object.defineProperty(exports,"WishlistPlugin",{enumerable:true,get:function(){return chunkIQYP3DDJ_cjs.v}});Object.defineProperty(exports,"applyCollectionOverrides",{enumerable:true,get:function(){return chunkIQYP3DDJ_cjs.x}});Object.defineProperty(exports,"collectionToCreateZod",{enumerable:true,get:function(){return chunkIQYP3DDJ_cjs.h}});Object.defineProperty(exports,"collectionToUpdateZod",{enumerable:true,get:function(){return chunkIQYP3DDJ_cjs.i}});Object.defineProperty(exports,"collectionToWhereZod",{enumerable:true,get:function(){return chunkIQYP3DDJ_cjs.j}});Object.defineProperty(exports,"collectionToZod",{enumerable:true,get:function(){return chunkIQYP3DDJ_cjs.g}});Object.defineProperty(exports,"createKyro",{enumerable:true,get:function(){return chunkIQYP3DDJ_cjs.z}});Object.defineProperty(exports,"createLocalAdapter",{enumerable:true,get:function(){return chunkIQYP3DDJ_cjs.B}});Object.defineProperty(exports,"createRegistry",{enumerable:true,get:function(){return chunkIQYP3DDJ_cjs.o}});Object.defineProperty(exports,"fieldToZod",{enumerable:true,get:function(){return chunkIQYP3DDJ_cjs.f}});Object.defineProperty(exports,"getRegistry",{enumerable:true,get:function(){return chunkIQYP3DDJ_cjs.m}});Object.defineProperty(exports,"globalToZod",{enumerable:true,get:function(){return chunkIQYP3DDJ_cjs.k}});Object.defineProperty(exports,"presetPlugins",{enumerable:true,get:function(){return chunkIQYP3DDJ_cjs.w}});Object.defineProperty(exports,"resetRegistry",{enumerable:true,get:function(){return chunkIQYP3DDJ_cjs.n}});Object.defineProperty(exports,"validateCollection",{enumerable:true,get:function(){return chunkIQYP3DDJ_cjs.b}});Object.defineProperty(exports,"validateConfig",{enumerable:true,get:function(){return chunkIQYP3DDJ_cjs.e}});Object.defineProperty(exports,"validateFields",{enumerable:true,get:function(){return chunkIQYP3DDJ_cjs.d}});Object.defineProperty(exports,"validateGlobal",{enumerable:true,get:function(){return chunkIQYP3DDJ_cjs.c}});Object.defineProperty(exports,"autoBootstrap",{enumerable:true,get:function(){return chunkQMQXKCCQ_cjs.d}});Object.defineProperty(exports,"bootstrapAdmin",{enumerable:true,get:function(){return chunkQMQXKCCQ_cjs.a}});Object.defineProperty(exports,"bootstrapWithRetry",{enumerable:true,get:function(){return chunkQMQXKCCQ_cjs.e}});Object.defineProperty(exports,"getBootstrapFromEnv",{enumerable:true,get:function(){return chunkQMQXKCCQ_cjs.c}});Object.defineProperty(exports,"CSSGenerator",{enumerable:true,get:function(){return chunk2BTRHVT3_cjs.a}});Object.defineProperty(exports,"createAdminStyling",{enumerable:true,get:function(){return chunk2BTRHVT3_cjs.g}});Object.defineProperty(exports,"defaultDarkTheme",{enumerable:true,get:function(){return chunk2BTRHVT3_cjs.d}});Object.defineProperty(exports,"defaultFieldStyling",{enumerable:true,get:function(){return chunk2BTRHVT3_cjs.h}});Object.defineProperty(exports,"defaultLightTheme",{enumerable:true,get:function(){return chunk2BTRHVT3_cjs.c}});Object.defineProperty(exports,"ecommerce2026Theme",{enumerable:true,get:function(){return chunk2BTRHVT3_cjs.e}});Object.defineProperty(exports,"generateCSSVariables",{enumerable:true,get:function(){return chunk2BTRHVT3_cjs.f}});Object.defineProperty(exports,"generateTailwindConfig",{enumerable:true,get:function(){return chunk2BTRHVT3_cjs.b}});Object.defineProperty(exports,"ALL_FIELD_TYPES",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.q}});Object.defineProperty(exports,"COMPLEX_FIELD_TYPES",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.n}});Object.defineProperty(exports,"LAYOUT_FIELD_TYPES",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.p}});Object.defineProperty(exports,"PRIMITIVE_FIELD_TYPES",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.m}});Object.defineProperty(exports,"RELATIONAL_FIELD_TYPES",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.o}});Object.defineProperty(exports,"isArrayField",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.d}});Object.defineProperty(exports,"isBlocksField",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.f}});Object.defineProperty(exports,"isGroupField",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.e}});Object.defineProperty(exports,"isImageField",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.h}});Object.defineProperty(exports,"isLayoutField",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.k}});Object.defineProperty(exports,"isNumberField",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.b}});Object.defineProperty(exports,"isRelationshipField",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.c}});Object.defineProperty(exports,"isRichTextField",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.i}});Object.defineProperty(exports,"isSelectField",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.j}});Object.defineProperty(exports,"isTextField",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.a}});Object.defineProperty(exports,"isUploadField",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.g}});Object.defineProperty(exports,"normalizeRichTextValue",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.t}});Object.defineProperty(exports,"renderRichText",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.u}});Object.defineProperty(exports,"richTextStyles",{enumerable:true,get:function(){return chunkSK2Q4PRV_cjs.s}});Object.defineProperty(exports,"createContext",{enumerable:true,get:function(){return chunkWMZEULS2_cjs.a}});Object.defineProperty(exports,"createCountProcedure",{enumerable:true,get:function(){return chunkWMZEULS2_cjs.g}});Object.defineProperty(exports,"createCreateProcedure",{enumerable:true,get:function(){return chunkWMZEULS2_cjs.d}});Object.defineProperty(exports,"createDeleteProcedure",{enumerable:true,get:function(){return chunkWMZEULS2_cjs.f}});Object.defineProperty(exports,"createDynamicRouter",{enumerable:true,get:function(){return chunkWMZEULS2_cjs.h}});Object.defineProperty(exports,"createFindByIDProcedure",{enumerable:true,get:function(){return chunkWMZEULS2_cjs.c}});Object.defineProperty(exports,"createFindProcedure",{enumerable:true,get:function(){return chunkWMZEULS2_cjs.b}});Object.defineProperty(exports,"createKyroServer",{enumerable:true,get:function(){return chunkWMZEULS2_cjs.i}});Object.defineProperty(exports,"createUpdateProcedure",{enumerable:true,get:function(){return chunkWMZEULS2_cjs.e}});Object.defineProperty(exports,"buildGraphQLSchema",{enumerable:true,get:function(){return chunkHS2KNFAB_cjs.c}});Object.defineProperty(exports,"createGraphQLSchema",{enumerable:true,get:function(){return chunkHS2KNFAB_cjs.d}});Object.defineProperty(exports,"AuditLogger",{enumerable:true,get:function(){return chunkM5JUPA7G_cjs.n}});Object.defineProperty(exports,"InMemoryAuditLogger",{enumerable:true,get:function(){return chunkM5JUPA7G_cjs.p}});Object.defineProperty(exports,"InMemoryRateLimiter",{enumerable:true,get:function(){return chunkM5JUPA7G_cjs.m}});Object.defineProperty(exports,"MediaService",{enumerable:true,get:function(){return chunkM5JUPA7G_cjs.r}});Object.defineProperty(exports,"createAuditContext",{enumerable:true,get:function(){return chunkM5JUPA7G_cjs.o}});Object.defineProperty(exports,"createHonoApp",{enumerable:true,get:function(){return chunkM5JUPA7G_cjs.s}});Object.defineProperty(exports,"createLocalStorage",{enumerable:true,get:function(){return chunkM5JUPA7G_cjs.e}});Object.defineProperty(exports,"createRESTAPI",{enumerable:true,get:function(){return chunkM5JUPA7G_cjs.t}});Object.defineProperty(exports,"getAppSecret",{enumerable:true,get:function(){return chunkM5JUPA7G_cjs.i}});Object.defineProperty(exports,"getEncryptionKey",{enumerable:true,get:function(){return chunkM5JUPA7G_cjs.j}});Object.defineProperty(exports,"getSessionConfig",{enumerable:true,get:function(){return chunkM5JUPA7G_cjs.k}});Object.defineProperty(exports,"loadSecrets",{enumerable:true,get:function(){return chunkM5JUPA7G_cjs.h}});Object.defineProperty(exports,"resolveProvider",{enumerable:true,get:function(){return chunkM5JUPA7G_cjs.d}});Object.defineProperty(exports,"setDbAdapter",{enumerable:true,get:function(){return chunkM5JUPA7G_cjs.g}});Object.defineProperty(exports,"ConfigService",{enumerable:true,get:function(){return chunkGCQTSPX6_cjs.a}});Object.defineProperty(exports,"EmailTransport",{enumerable:true,get:function(){return chunkGCQTSPX6_cjs.b}});Object.defineProperty(exports,"PasswordPolicy",{enumerable:true,get:function(){return chunkGCQTSPX6_cjs.c}});Object.defineProperty(exports,"SQLiteAuthAdapter",{enumerable:true,get:function(){return chunkHOP4D5XZ_cjs.a}});Object.defineProperty(exports,"ALL_WEBHOOK_EVENTS",{enumerable:true,get:function(){return chunkXUONID6O_cjs.e}});Object.defineProperty(exports,"WEBHOOK_COLLECTION",{enumerable:true,get:function(){return chunkXUONID6O_cjs.f}});Object.defineProperty(exports,"WEBHOOK_DELIVERY_COLLECTION",{enumerable:true,get:function(){return chunkXUONID6O_cjs.g}});Object.defineProperty(exports,"WEBHOOK_EVENTS",{enumerable:true,get:function(){return chunkXUONID6O_cjs.d}});Object.defineProperty(exports,"WebhookService",{enumerable:true,get:function(){return chunkXUONID6O_cjs.n}});Object.defineProperty(exports,"buildDeliveryRecord",{enumerable:true,get:function(){return chunkXUONID6O_cjs.l}});Object.defineProperty(exports,"createTestPayload",{enumerable:true,get:function(){return chunkXUONID6O_cjs.m}});Object.defineProperty(exports,"createWebhookService",{enumerable:true,get:function(){return chunkXUONID6O_cjs.o}});Object.defineProperty(exports,"deliverWebhook",{enumerable:true,get:function(){return chunkXUONID6O_cjs.j}});Object.defineProperty(exports,"deliverWithRetry",{enumerable:true,get:function(){return chunkXUONID6O_cjs.k}});Object.defineProperty(exports,"generateWebhookSecret",{enumerable:true,get:function(){return chunkXUONID6O_cjs.i}});Object.defineProperty(exports,"signPayload",{enumerable:true,get:function(){return chunkXUONID6O_cjs.h}});Object.defineProperty(exports,"evaluateAccess",{enumerable:true,get:function(){return chunkNY47CFVP_cjs.a}});Object.defineProperty(exports,"getWhereClause",{enumerable:true,get:function(){return chunkNY47CFVP_cjs.c}});Object.defineProperty(exports,"mergeWhereClauses",{enumerable:true,get:function(){return chunkNY47CFVP_cjs.b}});Object.defineProperty(exports,"KyroPubSub",{enumerable:true,get:function(){return chunkG3J2EU5D_cjs.b}});Object.defineProperty(exports,"KyroWSServer",{enumerable:true,get:function(){return chunkG3J2EU5D_cjs.c}});Object.defineProperty(exports,"PubSub",{enumerable:true,get:function(){return chunkG3J2EU5D_cjs.a}});Object.defineProperty(exports,"createWSServer",{enumerable:true,get:function(){return chunkG3J2EU5D_cjs.d}});Object.defineProperty(exports,"DrizzleAdapter",{enumerable:true,get:function(){return chunk3ZFRP5M2_cjs.c}});Object.defineProperty(exports,"collectionToDrizzleSchema",{enumerable:true,get:function(){return chunk3ZFRP5M2_cjs.b}});Object.defineProperty(exports,"createDatabase",{enumerable:true,get:function(){return chunk3ZFRP5M2_cjs.f}});Object.defineProperty(exports,"createDrizzleAdapter",{enumerable:true,get:function(){return chunk3ZFRP5M2_cjs.d}});Object.defineProperty(exports,"fieldToDrizzleType",{enumerable:true,get:function(){return chunk3ZFRP5M2_cjs.a}});Object.defineProperty(exports,"runMigrations",{enumerable:true,get:function(){return chunk3ZFRP5M2_cjs.g}});Object.defineProperty(exports,"seedDefaultRoles",{enumerable:true,get:function(){return chunk3ZFRP5M2_cjs.h}});Object.defineProperty(exports,"PostgresAuthAdapter",{enumerable:true,get:function(){return chunkGYQMNXXW_cjs.a}});Object.defineProperty(exports,"MongoDBAdapter",{enumerable:true,get:function(){return chunkRYIEE2TH_cjs.a}});Object.defineProperty(exports,"createMongoDBAdapter",{enumerable:true,get:function(){return chunkRYIEE2TH_cjs.b}});Object.defineProperty(exports,"MongoDBAuthAdapter",{enumerable:true,get:function(){return chunkHHH4XNNS_cjs.a}});Object.defineProperty(exports,"AbstractBaseAdapter",{enumerable:true,get:function(){return chunkEJDIR56C_cjs.a}});Object.defineProperty(exports,"z",{enumerable:true,get:function(){return zod.z}});exports.AccountLockout=S;exports.Auth=L;exports.InMemoryAccountLockout=T;exports.InMemoryAuthAdapter=x;exports.RateLimiter=k;exports.VersionManager=E;exports.authConfig=Re;exports.createAuth=Lr;exports.createAuthConfig=F;exports.createAuthStorage=Ue;exports.createStorage=$;exports.createVersionManager=Ir;exports.defineConfig=De;exports.defineKyroConfig=Mr;exports.generateAnalyticsTags=Fr;exports.generateSeoTags=Hr;exports.getDefaultDraftPublishConfig=I;exports.getPaymentConfig=$r;exports.getPaymentConfigFromSettings=Ie;exports.getSocialLinks=Kr;exports.getSocialLinksFromSettings=ve;exports.getStoreConfig=zr;exports.getStoreConfigFromSettings=Le;exports.isArchived=Vr;exports.isDraft=Ur;exports.isPublished=Er;exports.runFieldHooks=Sr;exports.runHooks=Te;

package/dist/index.js

@@ -1,4 +1,4 @@
-export{a as RedisAuthAdapter}from'./chunk-QOCHBPMK.js';export{R as allSettingsGlobals,c as blogCollections,d as blogGlobals,S as coreSettingsGlobals,W as createTemplateConfig,e as ecommerceCollections,f as ecommerceGlobals,g as kitchenSinkCollections,i as mediaCollections,a as minimalCollections,V as templateCollections}from'./chunk-5B7GPMJI.js';export{a as kyro}from'./chunk-PTS33SK5.js';export{s as AnalyticsPlugin,t as CommentsPlugin,a as ConfigValidationError,y as Kyro,p as KyroPlugin,A as LocalAdapter,q as PluginManager,l as Registry,u as ReviewsPlugin,r as SEOPlugin,v as WishlistPlugin,x as applyCollectionOverrides,h as collectionToCreateZod,i as collectionToUpdateZod,j as collectionToWhereZod,g as collectionToZod,z as createKyro,B as createLocalAdapter,o as createRegistry,f as fieldToZod,m as getRegistry,k as globalToZod,w as presetPlugins,n as resetRegistry,b as validateCollection,e as validateConfig,d as validateFields,c as validateGlobal}from'./chunk-NUUPBDZC.js';export{d as autoBootstrap,a as bootstrapAdmin,e as bootstrapWithRetry,c as getBootstrapFromEnv}from'./chunk-MSTTFMCM.js';import'./chunk-NZ35PV5R.js';export{a as CSSGenerator,g as createAdminStyling,d as defaultDarkTheme,h as defaultFieldStyling,c as defaultLightTheme,e as ecommerce2026Theme,f as generateCSSVariables,b as generateTailwindConfig}from'./chunk-UHFDH3PG.js';export{q as ALL_FIELD_TYPES,n as COMPLEX_FIELD_TYPES,p as LAYOUT_FIELD_TYPES,m as PRIMITIVE_FIELD_TYPES,o as RELATIONAL_FIELD_TYPES,d as isArrayField,f as isBlocksField,e as isGroupField,h as isImageField,k as isLayoutField,b as isNumberField,c as isRelationshipField,i as isRichTextField,j as isSelectField,a as isTextField,g as isUploadField,t as normalizeRichTextValue,u as renderRichText,s as richTextStyles}from'./chunk-INB4LNA6.js';import'./chunk-5SEHX7ON.js';export{a as createContext,g as createCountProcedure,d as createCreateProcedure,f as createDeleteProcedure,h as createDynamicRouter,c as createFindByIDProcedure,b as createFindProcedure,i as createKyroServer,e as createUpdateProcedure}from'./chunk-ISCIUG37.js';export{c as buildGraphQLSchema,d as createGraphQLSchema}from'./chunk-PP7W5UKL.js';import {l,n,m,p,q}from'./chunk-4JW6IVU5.js';export{n as AuditLogger,p as InMemoryAuditLogger,m as InMemoryRateLimiter,r as MediaService,o as createAuditContext,s as createHonoApp,e as createLocalStorage,t as createRESTAPI,i as getAppSecret,j as getEncryptionKey,k as getSessionConfig,h as loadSecrets,d as resolveProvider,g as setDbAdapter}from'./chunk-4JW6IVU5.js';import {b,c}from'./chunk-7WOX27LK.js';export{a as ConfigService,b as EmailTransport,c as PasswordPolicy}from'./chunk-7WOX27LK.js';import'./chunk-K6WUOU6P.js';import'./chunk-AE6GXUT7.js';import {a as a$2}from'./chunk-IKOXCJYO.js';export{a as SQLiteAuthAdapter}from'./chunk-IKOXCJYO.js';import'./chunk-NRLIGDYF.js';export{e as ALL_WEBHOOK_EVENTS,f as WEBHOOK_COLLECTION,g as WEBHOOK_DELIVERY_COLLECTION,d as WEBHOOK_EVENTS,n as WebhookService,l as buildDeliveryRecord,m as createTestPayload,o as createWebhookService,j as deliverWebhook,k as deliverWithRetry,i as generateWebhookSecret,h as signPayload}from'./chunk-I67R6MR5.js';export{a as evaluateAccess,c as getWhereClause,b as mergeWhereClauses}from'./chunk-HLSB2MCK.js';export{b as KyroPubSub,c as KyroWSServer,a as PubSub,d as createWSServer}from'./chunk-GKYEJ2UF.js';import'./chunk-PP5S2UBV.js';export{c as DrizzleAdapter,b as collectionToDrizzleSchema,f as createDatabase,d as createDrizzleAdapter,a as fieldToDrizzleType,g as runMigrations,h as seedDefaultRoles}from'./chunk-J5SP3Y2H.js';import {a as a$3}from'./chunk-RHCWCG3O.js';export{a as PostgresAuthAdapter}from'./chunk-RHCWCG3O.js';import'./chunk-OG7CNQGU.js';export{a as MongoDBAdapter,b as createMongoDBAdapter}from'./chunk-W6P4N3Z7.js';import {a as a$1}from'./chunk-IZCTG4RG.js';export{a as MongoDBAuthAdapter}from'./chunk-IZCTG4RG.js';export{a as AbstractBaseAdapter}from'./chunk-TQNM4C7H.js';import {a}from'./chunk-6SPPR5JZ.js';import'./chunk-KDNYHLD2.js';import'./chunk-5J6HXUF6.js';import K,{randomBytes}from'crypto';import {readFileSync}from'fs';import Ee,{join,resolve}from'path';export{z}from'zod';import {createStorage}from'unstorage';import jr from'unstorage/drivers/indexedb';import Qr from'unstorage/drivers/fs';async function Te(s,e){let t=e.data;for(let r of s){let o=await r({...e,data:t});o!==void 0&&(t=o);}return t}async function Sr(s,e){return Te(s,e)}var kr={maxAttempts:5,lockDuration:9e5,notifyUser:true,notifyAdmin:true,adminNotifyAfter:3},S=class{redis;prefix;config;constructor(e,t={},r="kyro:lockout:"){this.redis=e,this.prefix=r,this.config={...kr,...t};}lockKey(e){return `${this.prefix}${e}`}historyKey(e){return `${this.prefix}${e}:history`}async checkLockout(e){let t=this.lockKey(e),r=await this.redis.hgetall(t);if(!r||Object.keys(r).length===0)return {locked:false,attemptsRemaining:this.config.maxAttempts,totalAttempts:0};let o=parseInt(r.attempts,10),i=r.lockedUntil?new Date(parseInt(r.lockedUntil,10)):void 0;return i&&i>new Date?{locked:true,attemptsRemaining:0,lockedUntil:i,totalAttempts:o}:i&&i<=new Date?(await this.unlockAccount(e),{locked:false,attemptsRemaining:this.config.maxAttempts,totalAttempts:0}):{locked:false,attemptsRemaining:Math.max(0,this.config.maxAttempts-o),totalAttempts:o}}async recordFailedAttempt(e){let t=this.lockKey(e),r=this.historyKey(e),o=Date.now(),i=await this.redis.hincrby(t,"attempts",1);if(await this.redis.hset(t,"lastAttempt",o.toString()),await this.redis.lpush(r,o.toString()),await this.redis.ltrim(r,0,99),i>=this.config.maxAttempts){let n=new Date(o+this.config.lockDuration);return await this.redis.hset(t,{lockedAt:o.toString(),lockedUntil:n.getTime().toString()}),await this.redis.expire(t,Math.ceil(this.config.lockDuration/1e3)+3600),{locked:true,attemptsRemaining:0,lockedUntil:n,totalAttempts:i}}return {locked:false,attemptsRemaining:Math.max(0,this.config.maxAttempts-i),totalAttempts:i}}async lockAccount(e,t){let r=this.lockKey(e),o=Date.now(),i=t||this.config.lockDuration,n=new Date(o+i),a=this.redis.pipeline();a.hset(r,{attempts:this.config.maxAttempts.toString(),lockedAt:o.toString(),lockedUntil:n.getTime().toString()}),a.expire(r,Math.ceil(i/1e3)+3600),await a.exec();}async unlockAccount(e){let t=this.lockKey(e);await this.redis.del(t);}async resetAttempts(e){let t=this.lockKey(e);(await this.redis.hgetall(t)).lockedAt?await this.redis.hset(t,{attempts:"0",lockedAt:"",lockedUntil:""}):await this.redis.del(t);}async getLockoutHistory(e,t=10){let r=this.historyKey(e);return (await this.redis.lrange(r,0,t-1)).map(i=>new Date(parseInt(i,10)))}async getLockoutStats(e){let t=this.historyKey(e),r=await this.redis.lrange(t,0,-1),o=r.filter((n,a)=>(a+1)%this.config.maxAttempts===0).length,i=await this.redis.hget(this.lockKey(e),"lockedAt");return {totalFailedAttempts:r.length,lockoutCount:o,lastLockout:i?new Date(parseInt(i,10)):null,averageAttemptsBeforeLockout:o>0?this.config.maxAttempts:0}}shouldNotifyAdmin(e){return this.config.notifyAdmin&&e>=this.config.adminNotifyAfter}getConfig(){return {...this.config}}setConfig(e){this.config={...this.config,...e};}};var xr={"auth:login":{window:9e5,max:5},"auth:register":{window:36e5,max:3},"auth:forgot":{window:36e5,max:3},"auth:reset":{window:36e5,max:5},"auth:verify":{window:36e5,max:5},"api:general":{window:6e4,max:100},"api:authenticated":{window:6e4,max:200}},k=class{redis;prefix;limits;userLimits;constructor(e,t,r,o="kyro:ratelimit:"){this.redis=e,this.prefix=o,this.limits={...xr,...t},this.userLimits=r||{"user:api":{window:6e4,max:500},"user:write":{window:36e5,max:100}};}getKey(e,t){return `${this.prefix}${e}:${t}`}async check(e,t){let r=this.limits[e]||this.limits["api:general"],o=this.getKey(e,t),i=Date.now(),n=i-r.window,a=this.redis.pipeline();a.zremrangebyscore(o,0,n),a.zcard(o),a.zadd(o,i,`${i}:${Math.random()}`),a.expire(o,Math.ceil(r.window/1e3)+1);let l=(await a.exec())?.[1]?.[1]||0;if(l>=r.max){let p=await this.redis.zrange(o,0,0,"WITHSCORES"),d=p.length>1?parseInt(p[1],10)+r.window:i+r.window;return {allowed:false,remaining:0,resetAt:d,retryAfter:Math.ceil((d-i)/1e3)}}return {allowed:true,remaining:r.max-l-1,resetAt:i+r.window}}async checkUser(e,t,r){let o=this.userLimits[e]||this.userLimits["user:api"],i=this.getKey(`user:${e}:${t}`,r),n=Date.now(),a=n-o.window,c=this.redis.pipeline();c.zremrangebyscore(i,0,a),c.zcard(i),c.zadd(i,n,`${n}:${Math.random()}`),c.expire(i,Math.ceil(o.window/1e3)+1);let p=(await c.exec())?.[1]?.[1]||0;if(p>=o.max){let d=await this.redis.zrange(i,0,0,"WITHSCORES"),u=d.length>1?parseInt(d[1],10)+o.window:n+o.window;return {allowed:false,remaining:0,resetAt:u,retryAfter:Math.ceil((u-n)/1e3)}}return {allowed:true,remaining:o.max-p-1,resetAt:n+o.window}}async reset(e,t){let r=this.getKey(e,t);await this.redis.del(r);}async resetUser(e,t,r){let o=this.getKey(`user:${e}:${t}`,r);await this.redis.del(o);}async getStatus(e,t){let r=this.limits[e]||this.limits["api:general"],o=this.getKey(e,t),i=Date.now(),n=i-r.window;await this.redis.zremrangebyscore(o,0,n);let a=await this.redis.zcard(o);return {count:a,limit:r.max,remaining:Math.max(0,r.max-a),resetAt:i+r.window}}setLimit(e,t){this.limits[e]=t;}setUserLimit(e,t){this.userLimits[e]=t;}};var x=class{users=new Map;sessions=new Map;refreshTokens=new Map;emailToUserId=new Map;passwordHistory=new Map;emailVerificationTokens=new Map;passwordResetTokens=new Map;auditLogs=[];externalDb=false;constructor(){}async connect(){}async disconnect(){this.users.clear(),this.sessions.clear(),this.refreshTokens.clear(),this.emailToUserId.clear(),this.passwordHistory.clear();}async createUser(e){let t=randomBytes(16).toString("hex"),r=new Date().toISOString(),o=await this.hashPassword(e.password),i={id:t,email:e.email.toLowerCase(),passwordHash:o,role:e.role||"customer",tenantId:e.tenantId,createdAt:r,updatedAt:r};return this.users.set(t,i),this.emailToUserId.set(e.email.toLowerCase(),t),this.passwordHistory.set(t,[]),i}async findUserByEmail(e){let t=this.emailToUserId.get(e.toLowerCase());return t?this.findUserById(t):null}async findUserById(e){return this.users.get(e)||null}async updateUser(e,t){let r=await this.findUserById(e);if(!r)return null;let o={...r,...t,id:e,updatedAt:new Date().toISOString()};return t.email&&t.email!==r.email&&(this.emailToUserId.delete(r.email.toLowerCase()),this.emailToUserId.set(t.email.toLowerCase(),e)),this.users.set(e,o),o}async deleteUser(e){let t=await this.findUserById(e);return t?(this.users.delete(e),this.emailToUserId.delete(t.email.toLowerCase()),this.refreshTokens.forEach((r,o)=>{this.sessions.get(r)?.userId===e&&(this.refreshTokens.delete(o),this.sessions.delete(r));}),this.passwordHistory.delete(e),this.sessions.forEach((r,o)=>{r.userId===e&&this.sessions.delete(o);}),true):false}async hashPassword(e){return (await import('bcryptjs')).default.hash(e,12)}async verifyPassword(e,t){let r=await this.findUserByEmail(e);return !r||!r.passwordHash?null:await(await import('bcryptjs')).default.compare(t,r.passwordHash)?r:null}async createSession(e,t={}){let r=randomBytes(32).toString("hex"),o=randomBytes(32).toString("base64url"),i=randomBytes(32).toString("base64url"),n=new Date,a={id:r,userId:e,token:o,refreshToken:i,expiresAt:new Date(n.getTime()+86400*1e3).toISOString(),createdAt:n.toISOString(),ipAddress:t.ipAddress,userAgent:t.userAgent};return this.sessions.set(r,a),this.refreshTokens.set(i,r),a}async findSessionByToken(e){return this.sessions.get(e)||null}async findSessionByRefreshToken(e){let t=this.refreshTokens.get(e);return t&&this.sessions.get(t)||null}async deleteSession(e){let t=this.sessions.get(e);return t?(t.refreshToken&&this.refreshTokens.delete(t.refreshToken),this.sessions.delete(e),true):false}async deleteUserSessions(e){let t=0;return this.sessions.forEach((r,o)=>{r.userId===e&&(r.refreshToken&&this.refreshTokens.delete(r.refreshToken),this.sessions.delete(o),t++);}),t}async addPasswordToHistory(e,t){let r=this.passwordHistory.get(e)||[];r.push(t),r.length>5&&r.splice(0,r.length-5),this.passwordHistory.set(e,r);}async getPasswordHistory(e,t=5){return this.passwordHistory.get(e)||[]}async isPasswordInHistory(e,t,r=5){let o=await this.getPasswordHistory(t,r),i=(await import('bcryptjs')).default;for(let n of o)if(await i.compare(e,n))return  true;return  false}async createEmailVerificationToken(e){let t=randomBytes(32).toString("hex"),r=new Date(Date.now()+1440*60*1e3);return this.emailVerificationTokens.set(t,{userId:e,expiresAt:r}),{token:t,expiresAt:r}}async verifyEmailToken(e){let t=this.emailVerificationTokens.get(e);return !t||t.expiresAt<new Date?(this.emailVerificationTokens.delete(e),{success:false,error:"Invalid or expired token"}):(this.emailVerificationTokens.delete(e),{success:true,userId:t.userId})}async createPasswordResetToken(e){let t=await this.findUserByEmail(e);if(!t)return {token:"",expiresAt:new Date,error:"User not found"};let r=randomBytes(32).toString("hex"),o=new Date(Date.now()+3600*1e3);return this.passwordResetTokens.set(r,{userId:t.id,expiresAt:o}),{token:r,expiresAt:o}}async resetPasswordWithToken(e,t){let r=this.passwordResetTokens.get(e);if(!r||r.expiresAt<new Date)return this.passwordResetTokens.delete(e),{success:false,error:"Invalid or expired token"};let o=await this.hashPassword(t);return await this.updateUser(r.userId,{passwordHash:o}),this.passwordResetTokens.delete(e),{success:true}}async hasAnyUsers(){return this.users.size>0}async findAuditLogs(e){let{limit:t=50,offset:r=0}=e,o=this.auditLogs.slice().reverse();return e.userId&&(o=o.filter(i=>i.userId===e.userId)),e.action&&(Array.isArray(e.action)?o=o.filter(i=>e.action.includes(String(i.action))):o=o.filter(i=>i.action===e.action)),e.resource&&(o=o.filter(i=>i.resource===e.resource)),e.success!==void 0&&(o=o.filter(i=>i.success===e.success)),{logs:o.slice(r,r+t),total:o.length}}async createAuditLog(e){let t=randomBytes(16).toString("hex"),o={...e,id:t,timestamp:new Date};return this.auditLogs.push(o),o}};var T=class{storage=new Map;history=new Map;config;constructor(e={}){this.config={maxAttempts:5,lockDuration:9e5,notifyUser:true,notifyAdmin:true,adminNotifyAfter:3,...e};}async checkLockout(e){let t=Date.now(),r=this.storage.get(e);if(r&&r.lockedUntil!==null&&r.lockedUntil<=t)return await this.resetAttempts(e),{locked:false,attemptsRemaining:this.config.maxAttempts,totalAttempts:0};if(!r)return {locked:false,attemptsRemaining:this.config.maxAttempts,totalAttempts:0};let{attempts:o,lockedUntil:i}=r;return i!==null&&i>t?{locked:true,attemptsRemaining:0,lockedUntil:new Date(i),totalAttempts:o}:{locked:false,attemptsRemaining:Math.max(0,this.config.maxAttempts-o),totalAttempts:o}}async recordFailedAttempt(e){let t=Date.now(),r=this.storage.get(e)||{attempts:0,lastAttempt:null,lockedAt:null,lockedUntil:null};r.attempts+=1,r.lastAttempt=t;let o=this.history.get(e)||[];if(o.push(t),o.length>100&&o.splice(0,o.length-100),this.history.set(e,o),this.storage.set(e,r),r.attempts>=this.config.maxAttempts){let i=new Date(t+this.config.lockDuration);return r.lockedAt=t,r.lockedUntil=i.getTime(),this.storage.set(e,r),{locked:true,attemptsRemaining:0,lockedUntil:i,totalAttempts:r.attempts}}return {locked:false,attemptsRemaining:Math.max(0,this.config.maxAttempts-r.attempts),totalAttempts:r.attempts}}async lockAccount(e,t){let r=Date.now(),o=t||this.config.lockDuration,i=new Date(r+o),n=this.storage.get(e)||{attempts:0,lastAttempt:null,lockedAt:null,lockedUntil:null};n.attempts=this.config.maxAttempts,n.lockedAt=r,n.lockedUntil=i.getTime(),this.storage.set(e,n);}async unlockAccount(e){await this.resetAttempts(e);}async resetAttempts(e){let t=this.storage.get(e);t&&(t.attempts=0,t.lockedAt=null,t.lockedUntil=null,this.storage.set(e,t)),this.history.delete(e);}async getLockoutHistory(e,t=10){return (this.history.get(e)||[]).slice(-t).reverse().map(o=>new Date(o))}async getLockoutStats(e){let r=(this.history.get(e)||[]).length,o=Math.floor(r/this.config.maxAttempts),i=null,n=this.storage.get(e);n&&n.lockedAt!==null&&(i=new Date(n.lockedAt));let a=o>0?this.config.maxAttempts:0;return {totalFailedAttempts:r,lockoutCount:o,lastLockout:i,averageAttemptsBeforeLockout:a}}shouldNotifyAdmin(e){return this.config.notifyAdmin&&e>=this.config.adminNotifyAfter}getConfig(){return {...this.config}}setConfig(e){this.config={...this.config,...e};}};function h(s,e=""){return process.env[s]||e}function A(s,e=false){let t=process.env[s];return t?t.toLowerCase()==="true":e}function g(s,e=0){let t=process.env[s];return t?parseInt(t,10):e}function Pe(){let s=process.env.KYRO_AUTH_DATABASE?.toLowerCase();if(s&&["sqlite","postgres","mongodb","memory"].includes(s))return s;try{let e=join(process.cwd(),"kyro.config.ts"),t=readFileSync(e,"utf8");if(t.includes("createLocalAdapter"))return "sqlite";if(t.includes("createDrizzleAdapter"))return t.includes("postgres")||t.includes("postgresql"),"postgres";if(t.includes("createMongoDBAdapter"))return "mongodb"}catch{}return "memory"}async function Cr(s){let e=process.cwd(),t=e.endsWith("admin")?join(e,".."):e,r=resolve(t,"data","auth.db");switch(s){case "sqlite":return new a$2({path:h("KYRO_AUTH_DB_PATH",r)});case "postgres":{let o=h("DATABASE_URL","");if(o){let i,n;try{i=(await import('drizzle-orm/postgres-js')).drizzle,n=await import('postgres');}catch{a(["postgres","drizzle-orm"]),i=(await import('drizzle-orm/postgres-js')).drizzle,n=await import('postgres');}let a$1=n.default(o,{onnotice:()=>{}}),c=i(a$1);return new a$3({db:c})}return new a$2({path:h("KYRO_AUTH_DB_PATH",r)})}case "mongodb":{let o=h("MONGODB_URI","");if(o){let i;try{i=(await import('mongodb')).MongoClient;}catch{a(["mongodb"]),i=(await import('mongodb')).MongoClient;}let n=new i(o);await n.connect();let c=new URL(o).pathname.replace(/^\//,"")||"kyro_cms",l=n.db(c);return new a$1({db:l})}return new a$2({path:h("KYRO_AUTH_DB_PATH",r)})}default:return new x}}async function F(s,e){let t=A("KYRO_DISTRIBUTED",false),r;if(t){let{RedisAuthAdapter:d}=await import('./redis-adapter-NN3H4GRX.js'),u=h("REDIS_URL","redis://localhost:6379"),y=A("REDIS_TLS",false),f=new d({url:u,tls:y});await f.connect?.(),r=f;}else {let d=s||Pe();r=await Cr(d),r.connect&&await r.connect();}let o=e?await b.fromConfig(e).catch(()=>null)||b.fromEnv()||void 0:b.fromEnv()||void 0,i=new c({minLength:g("PASSWORD_MIN_LENGTH",12),requireUppercase:A("PASSWORD_REQUIRE_UPPERCASE",true),requireLowercase:A("PASSWORD_REQUIRE_LOWERCASE",true),requireNumbers:A("PASSWORD_REQUIRE_NUMBERS",true),requireSpecialChars:A("PASSWORD_REQUIRE_SPECIAL",true),preventReuse:g("PASSWORD_PREVENT_REUSE",5),maxLength:g("PASSWORD_MAX_LENGTH",128)}),n$1,a,c$1;if(t){let u=r.redis;n$1=new S(u,{maxAttempts:g("LOCKOUT_MAX_ATTEMPTS",5),lockDuration:g("LOCKOUT_DURATION_MINUTES",15)*60*1e3}),a=new k(u,{"auth:login":{window:g("RATE_LIMIT_AUTH_WINDOW_MS",9e5),max:g("RATE_LIMIT_AUTH_MAX_REQUESTS",10)},"api:general":{window:g("RATE_LIMIT_WINDOW_MS",6e4),max:g("RATE_LIMIT_MAX_REQUESTS",100)}}),c$1=new n(u,g("AUDIT_LOG_RETENTION_DAYS",30));}else n$1=new T({maxAttempts:g("LOCKOUT_MAX_ATTEMPTS",5),lockDuration:g("LOCKOUT_DURATION_MINUTES",15)*60*1e3}),a=new m({"auth:login":{window:g("RATE_LIMIT_AUTH_WINDOW_MS",9e5),max:g("RATE_LIMIT_AUTH_MAX_REQUESTS",10)},"api:general":{window:g("RATE_LIMIT_WINDOW_MS",6e4),max:g("RATE_LIMIT_MAX_REQUESTS",100)}}),c$1=A("AUDIT_LOG_ENABLED",true)?new p(g("AUDIT_LOG_RETENTION_DAYS",30)):void 0;let l=new q({redis:r,email:o,jwtSecret:h("APP_SECRET","change-me"),jwtExpiresIn:h("JWT_EXPIRES_IN","24h"),jwtIssuer:h("JWT_ISSUER","kyro-cms"),jwtAudience:h("JWT_AUDIENCE","kyro-cms-client"),passwordPolicy:i,lockout:n$1,rateLimiter:a,auditLogger:c$1,baseUrl:h("EMAIL_BASE_URL","http://localhost:4321"),emailVerificationRequired:A("EMAIL_VERIFICATION_REQUIRED",true)}),p$1=t?"distributed":s||Pe();return {authAdapter:r,databaseType:p$1,email:o,passwordPolicy:i,lockout:n$1,rateLimiter:a,auditLogger:c$1,routes:l}}var Re=F().catch(s=>(console.warn("[AuthConfig] Failed to initialize auth config:",s.message),null));var Rr=12,Dr="24h",vr="7d",L=class{adapter;config;constructor(e,t){this.adapter=e,this.config={secret:t.secret,expiresIn:t.expiresIn??Dr,refreshExpiresIn:t.refreshExpiresIn??vr,issuer:t.issuer??"kyro-cms",audience:t.audience??[],saltRounds:t.saltRounds??Rr};}async register(e){try{if(await this.adapter.findUserByEmail(e.email))return {success:!1,error:"Email already registered"};let r=await this.adapter.createUser({email:e.email,password:e.password,role:e.role??"customer",tenantId:e.tenantId});return this.createSessionForUser(r)}catch(t){return {success:false,error:String(t)}}}async login(e){try{let t=await this.adapter.verifyPassword(e.email,e.password);return t?this.createSessionForUser(t):{success:!1,error:"Invalid credentials"}}catch(t){return {success:false,error:String(t)}}}async logout(e){await this.adapter.deleteSession(e);}async refreshToken(e){try{let t=await this.adapter.findSessionByToken(e);if(!t||new Date(t.expiresAt)<new Date)return {success:!1,error:"Invalid or expired refresh token"};let r=await this.adapter.findUserById(t.userId);return r?(await this.adapter.deleteSession(e),this.createSessionForUser(r)):{success:!1,error:"User not found"}}catch(t){return {success:false,error:String(t)}}}async verifyToken(e){try{let{default:t}=await import('jsonwebtoken');return t.verify(e,this.config.secret,{issuer:this.config.issuer,audience:this.config.audience.length>0?this.config.audience[0]:void 0})}catch{return null}}async getUserFromToken(e){let t=await this.verifyToken(e);return t?this.adapter.findUserById(t.sub):null}async changePassword(e,t,r){try{let o=await this.adapter.findUserById(e);return o?await this.adapter.verifyPassword(o.email,t)?(await this.adapter.updateUser(e,{password:r}),await this.adapter.deleteUserSessions(e),{success:!0,user:o}):{success:!1,error:"Current password is incorrect"}:{success:!1,error:"User not found"}}catch(o){return {success:false,error:String(o)}}}async resetPassword(e,t){try{let r=await this.adapter.findUserByEmail(e);return r?(await this.adapter.updateUser(r.id,{password:t}),await this.adapter.deleteUserSessions(r.id),{success:!0,user:r}):{success:!1,error:"User not found"}}catch(r){return {success:false,error:String(r)}}}async sendEmailVerification(e){try{let{token:t,expiresAt:r}=await this.adapter.createEmailVerificationToken(e);return {success:!0}}catch(t){return {success:false,error:String(t)}}}async verifyEmail(e){try{return await this.adapter.verifyEmailToken(e)}catch(t){return {success:false,error:String(t)}}}async requestPasswordReset(e){try{let t=await this.adapter.createPasswordResetToken(e);return t.error?{success:!1,error:t.error}:{success:!0}}catch(t){return {success:false,error:String(t)}}}async resetPasswordWithToken(e,t){try{return await this.adapter.resetPasswordWithToken(e,t)}catch(r){return {success:false,error:String(r)}}}async deleteAccount(e){try{return await this.adapter.findUserById(e)?(await this.adapter.deleteUserSessions(e),await this.adapter.deleteUser(e),{success:!0}):{success:!1,error:"User not found"}}catch(t){return {success:false,error:String(t)}}}async createSessionForUser(e){let t=await this.generateToken(e),r=await this.adapter.createSession(e.id);return {success:true,user:e,session:r,token:t}}async generateToken(e){let{default:t}=await import('jsonwebtoken'),r={sub:e.id,email:e.email,role:e.role,tenantId:e.tenantId},o={expiresIn:this.parseExpiresIn(this.config.expiresIn)/1e3,issuer:this.config.issuer};return this.config.audience.length>0&&(o.audience=this.config.audience[0]),t.sign(r,this.config.secret,o)}async hashPassword(e){let{default:t}=await import('bcryptjs');return t.hash(e,this.config.saltRounds)}parseExpiresIn(e){if(typeof e=="number")return e;let t=e.match(/^(\d+)([smhd])$/);if(!t)return 864e5;let r=parseInt(t[1],10);switch(t[2]){case "s":return r*1e3;case "m":return r*6e4;case "h":return r*36e5;case "d":return r*864e5;default:return 864e5}}};function Lr(s,e){return new L(s,e)}function I(){return {enabled:true,draftsEnabled:true,publishEnabled:true,scheduleEnabled:false,versioningEnabled:true,maxVersionsPerDocument:50,autoPublish:false,requirePublishPermission:true}}var E=class{adapter;config;constructor(e,t){this.adapter=e,this.config={...I(),...t};}async createVersion(e){let r=((await this.adapter.getLatestVersion(e.collection,e.documentId))?.version??0)+1,o={...e,version:r},i=await this.adapter.createVersion(o);return this.config.maxVersionsPerDocument>0&&await this.pruneOldVersions(e.collection,e.documentId),i}async publishVersion(e){let t=await this.adapter.getVersion(e.collection,e.versionId);if(!t)throw new Error("Version not found");if(t.status==="published")throw new Error("Version is already published");await this.adapter.publishVersion(e);}async unpublishDocument(e,t){let r=await this.adapter.getVersions({collection:e,documentId:t,limit:1e3});for(let o of r)if(o.status==="published"){await this.createVersion({collection:e,documentId:t,data:o.data,status:"draft",createdBy:"system",changeDescription:"Unpublished document"});break}}async revertToVersion(e,t,r,o){if(!await this.adapter.getVersion(e,r))throw new Error("Version not found");return await this.adapter.revertToVersion({collection:e,documentId:t,versionId:r,userId:o})}async getVersionHistory(e,t,r=20,o=0){return this.adapter.getVersions({collection:e,documentId:t,limit:r,offset:o})}async compareTwoVersions(e,t,r,o){return this.adapter.compareVersions({collection:e,documentId:t,versionA:r,versionB:o})}async getLatestDraft(e,t){return this.adapter.getLatestVersion(e,t)}async getPublishedVersion(e,t){return this.adapter.getPublishedVersion(e,t)}async getVersion(e,t){return this.adapter.getVersion(e,t)}async schedulePublish(e,t,r,o){if(!this.config.scheduleEnabled)throw new Error("Scheduled publishing is not enabled");if(!await this.adapter.getVersion(e,r))throw new Error("Version not found")}async deleteVersionHistory(e,t){await this.adapter.deleteVersions(e,t);}async pruneOldVersions(e,t){let r=await this.adapter.getVersions({collection:e,documentId:t,limit:this.config.maxVersionsPerDocument+100});if(r.length<=this.config.maxVersionsPerDocument)return;r.slice(0,this.config.maxVersionsPerDocument);let i=r.slice(this.config.maxVersionsPerDocument);for(let n of i)if(n.status!=="published"){await this.adapter.deleteVersions(e,t);break}}};function Ir(s,e){return new E(s,e)}function Er(s){return s==="published"}function Ur(s){return s==="draft"}function Vr(s){return s==="archived"}function Or(s){return s?Array.isArray(s)?s:Object.values(s):[]}function _r(s){return s?Array.isArray(s)?s:Object.values(s):[]}function De(s){return {collections:Or(s.collections),globals:_r(s.globals),adapter:s.adapter,plugins:s.plugins,auth:s.auth,cors:s.cors,admin:s.admin,upload:s.upload,graphQL:s.graphQL,typescript:s.typescript,localization:s.localization,rateLimit:s.rateLimit,debug:s.debug}}var Mr=De;function Hr(s){let{siteSettings:e,seoSettings:t,title:r,description:o,image:i,url:n}=s;if(!e)return "";let a=e.siteName||"",c=r||t?.defaultTitle||a,l=t?.titleTemplate,p=t?.separator||" | ",d=t?.siteNameInTitle!==false,u=l?l.replace(/\{\{title\}\}/g,c).replace(/\{\{siteName\}\}/g,d?a:"").replace(/\{\{separator\}\}/g,p).replace(/\s+/g," ").trim():c,y=o||t?.defaultDescription||e.siteDescription||"",f=i||e.siteOgImage?.url||"",U=n||e.siteUrl||"",m=`
+export{a as RedisAuthAdapter}from'./chunk-QOCHBPMK.js';export{R as allSettingsGlobals,c as blogCollections,d as blogGlobals,S as coreSettingsGlobals,W as createTemplateConfig,e as ecommerceCollections,f as ecommerceGlobals,g as kitchenSinkCollections,i as mediaCollections,a as minimalCollections,V as templateCollections}from'./chunk-FGSIHWQJ.js';export{a as kyro}from'./chunk-PTS33SK5.js';export{s as AnalyticsPlugin,t as CommentsPlugin,a as ConfigValidationError,y as Kyro,p as KyroPlugin,A as LocalAdapter,q as PluginManager,l as Registry,u as ReviewsPlugin,r as SEOPlugin,v as WishlistPlugin,x as applyCollectionOverrides,h as collectionToCreateZod,i as collectionToUpdateZod,j as collectionToWhereZod,g as collectionToZod,z as createKyro,B as createLocalAdapter,o as createRegistry,f as fieldToZod,m as getRegistry,k as globalToZod,w as presetPlugins,n as resetRegistry,b as validateCollection,e as validateConfig,d as validateFields,c as validateGlobal}from'./chunk-DTSYK7KK.js';export{d as autoBootstrap,a as bootstrapAdmin,e as bootstrapWithRetry,c as getBootstrapFromEnv}from'./chunk-O62KJ2J7.js';import'./chunk-NZ35PV5R.js';export{a as CSSGenerator,g as createAdminStyling,d as defaultDarkTheme,h as defaultFieldStyling,c as defaultLightTheme,e as ecommerce2026Theme,f as generateCSSVariables,b as generateTailwindConfig}from'./chunk-UHFDH3PG.js';export{q as ALL_FIELD_TYPES,n as COMPLEX_FIELD_TYPES,p as LAYOUT_FIELD_TYPES,m as PRIMITIVE_FIELD_TYPES,o as RELATIONAL_FIELD_TYPES,d as isArrayField,f as isBlocksField,e as isGroupField,h as isImageField,k as isLayoutField,b as isNumberField,c as isRelationshipField,i as isRichTextField,j as isSelectField,a as isTextField,g as isUploadField,t as normalizeRichTextValue,u as renderRichText,s as richTextStyles}from'./chunk-INB4LNA6.js';import'./chunk-5SEHX7ON.js';export{a as createContext,g as createCountProcedure,d as createCreateProcedure,f as createDeleteProcedure,h as createDynamicRouter,c as createFindByIDProcedure,b as createFindProcedure,i as createKyroServer,e as createUpdateProcedure}from'./chunk-ISCIUG37.js';export{c as buildGraphQLSchema,d as createGraphQLSchema}from'./chunk-PP7W5UKL.js';import {l,n,m,p,q}from'./chunk-NI7S5JMH.js';export{n as AuditLogger,p as InMemoryAuditLogger,m as InMemoryRateLimiter,r as MediaService,o as createAuditContext,s as createHonoApp,e as createLocalStorage,t as createRESTAPI,i as getAppSecret,j as getEncryptionKey,k as getSessionConfig,h as loadSecrets,d as resolveProvider,g as setDbAdapter}from'./chunk-NI7S5JMH.js';import {b,c}from'./chunk-6NGUY76Y.js';export{a as ConfigService,b as EmailTransport,c as PasswordPolicy}from'./chunk-6NGUY76Y.js';import'./chunk-K6WUOU6P.js';import'./chunk-IETGL7WJ.js';import {a as a$2}from'./chunk-IKOXCJYO.js';export{a as SQLiteAuthAdapter}from'./chunk-IKOXCJYO.js';import'./chunk-NRLIGDYF.js';export{e as ALL_WEBHOOK_EVENTS,f as WEBHOOK_COLLECTION,g as WEBHOOK_DELIVERY_COLLECTION,d as WEBHOOK_EVENTS,n as WebhookService,l as buildDeliveryRecord,m as createTestPayload,o as createWebhookService,j as deliverWebhook,k as deliverWithRetry,i as generateWebhookSecret,h as signPayload}from'./chunk-I67R6MR5.js';export{a as evaluateAccess,c as getWhereClause,b as mergeWhereClauses}from'./chunk-HLSB2MCK.js';export{b as KyroPubSub,c as KyroWSServer,a as PubSub,d as createWSServer}from'./chunk-GKYEJ2UF.js';import'./chunk-PP5S2UBV.js';export{c as DrizzleAdapter,b as collectionToDrizzleSchema,f as createDatabase,d as createDrizzleAdapter,a as fieldToDrizzleType,g as runMigrations,h as seedDefaultRoles}from'./chunk-3RR6IV5I.js';import {a as a$3}from'./chunk-RHCWCG3O.js';export{a as PostgresAuthAdapter}from'./chunk-RHCWCG3O.js';import'./chunk-OG7CNQGU.js';export{a as MongoDBAdapter,b as createMongoDBAdapter}from'./chunk-W6P4N3Z7.js';import {a as a$1}from'./chunk-IZCTG4RG.js';export{a as MongoDBAuthAdapter}from'./chunk-IZCTG4RG.js';export{a as AbstractBaseAdapter}from'./chunk-TQNM4C7H.js';import {a}from'./chunk-6SPPR5JZ.js';import'./chunk-KDNYHLD2.js';import'./chunk-5J6HXUF6.js';import K,{randomBytes}from'crypto';import {readFileSync}from'fs';import Ee,{join,resolve}from'path';export{z}from'zod';import {createStorage}from'unstorage';import jr from'unstorage/drivers/indexedb';import Qr from'unstorage/drivers/fs';async function Te(s,e){let t=e.data;for(let r of s){let o=await r({...e,data:t});o!==void 0&&(t=o);}return t}async function Sr(s,e){return Te(s,e)}var kr={maxAttempts:5,lockDuration:9e5,notifyUser:true,notifyAdmin:true,adminNotifyAfter:3},S=class{redis;prefix;config;constructor(e,t={},r="kyro:lockout:"){this.redis=e,this.prefix=r,this.config={...kr,...t};}lockKey(e){return `${this.prefix}${e}`}historyKey(e){return `${this.prefix}${e}:history`}async checkLockout(e){let t=this.lockKey(e),r=await this.redis.hgetall(t);if(!r||Object.keys(r).length===0)return {locked:false,attemptsRemaining:this.config.maxAttempts,totalAttempts:0};let o=parseInt(r.attempts,10),i=r.lockedUntil?new Date(parseInt(r.lockedUntil,10)):void 0;return i&&i>new Date?{locked:true,attemptsRemaining:0,lockedUntil:i,totalAttempts:o}:i&&i<=new Date?(await this.unlockAccount(e),{locked:false,attemptsRemaining:this.config.maxAttempts,totalAttempts:0}):{locked:false,attemptsRemaining:Math.max(0,this.config.maxAttempts-o),totalAttempts:o}}async recordFailedAttempt(e){let t=this.lockKey(e),r=this.historyKey(e),o=Date.now(),i=await this.redis.hincrby(t,"attempts",1);if(await this.redis.hset(t,"lastAttempt",o.toString()),await this.redis.lpush(r,o.toString()),await this.redis.ltrim(r,0,99),i>=this.config.maxAttempts){let n=new Date(o+this.config.lockDuration);return await this.redis.hset(t,{lockedAt:o.toString(),lockedUntil:n.getTime().toString()}),await this.redis.expire(t,Math.ceil(this.config.lockDuration/1e3)+3600),{locked:true,attemptsRemaining:0,lockedUntil:n,totalAttempts:i}}return {locked:false,attemptsRemaining:Math.max(0,this.config.maxAttempts-i),totalAttempts:i}}async lockAccount(e,t){let r=this.lockKey(e),o=Date.now(),i=t||this.config.lockDuration,n=new Date(o+i),a=this.redis.pipeline();a.hset(r,{attempts:this.config.maxAttempts.toString(),lockedAt:o.toString(),lockedUntil:n.getTime().toString()}),a.expire(r,Math.ceil(i/1e3)+3600),await a.exec();}async unlockAccount(e){let t=this.lockKey(e);await this.redis.del(t);}async resetAttempts(e){let t=this.lockKey(e);(await this.redis.hgetall(t)).lockedAt?await this.redis.hset(t,{attempts:"0",lockedAt:"",lockedUntil:""}):await this.redis.del(t);}async getLockoutHistory(e,t=10){let r=this.historyKey(e);return (await this.redis.lrange(r,0,t-1)).map(i=>new Date(parseInt(i,10)))}async getLockoutStats(e){let t=this.historyKey(e),r=await this.redis.lrange(t,0,-1),o=r.filter((n,a)=>(a+1)%this.config.maxAttempts===0).length,i=await this.redis.hget(this.lockKey(e),"lockedAt");return {totalFailedAttempts:r.length,lockoutCount:o,lastLockout:i?new Date(parseInt(i,10)):null,averageAttemptsBeforeLockout:o>0?this.config.maxAttempts:0}}shouldNotifyAdmin(e){return this.config.notifyAdmin&&e>=this.config.adminNotifyAfter}getConfig(){return {...this.config}}setConfig(e){this.config={...this.config,...e};}};var xr={"auth:login":{window:9e5,max:5},"auth:register":{window:36e5,max:3},"auth:forgot":{window:36e5,max:3},"auth:reset":{window:36e5,max:5},"auth:verify":{window:36e5,max:5},"api:general":{window:6e4,max:100},"api:authenticated":{window:6e4,max:200}},k=class{redis;prefix;limits;userLimits;constructor(e,t,r,o="kyro:ratelimit:"){this.redis=e,this.prefix=o,this.limits={...xr,...t},this.userLimits=r||{"user:api":{window:6e4,max:500},"user:write":{window:36e5,max:100}};}getKey(e,t){return `${this.prefix}${e}:${t}`}async check(e,t){let r=this.limits[e]||this.limits["api:general"],o=this.getKey(e,t),i=Date.now(),n=i-r.window,a=this.redis.pipeline();a.zremrangebyscore(o,0,n),a.zcard(o),a.zadd(o,i,`${i}:${Math.random()}`),a.expire(o,Math.ceil(r.window/1e3)+1);let l=(await a.exec())?.[1]?.[1]||0;if(l>=r.max){let p=await this.redis.zrange(o,0,0,"WITHSCORES"),d=p.length>1?parseInt(p[1],10)+r.window:i+r.window;return {allowed:false,remaining:0,resetAt:d,retryAfter:Math.ceil((d-i)/1e3)}}return {allowed:true,remaining:r.max-l-1,resetAt:i+r.window}}async checkUser(e,t,r){let o=this.userLimits[e]||this.userLimits["user:api"],i=this.getKey(`user:${e}:${t}`,r),n=Date.now(),a=n-o.window,c=this.redis.pipeline();c.zremrangebyscore(i,0,a),c.zcard(i),c.zadd(i,n,`${n}:${Math.random()}`),c.expire(i,Math.ceil(o.window/1e3)+1);let p=(await c.exec())?.[1]?.[1]||0;if(p>=o.max){let d=await this.redis.zrange(i,0,0,"WITHSCORES"),u=d.length>1?parseInt(d[1],10)+o.window:n+o.window;return {allowed:false,remaining:0,resetAt:u,retryAfter:Math.ceil((u-n)/1e3)}}return {allowed:true,remaining:o.max-p-1,resetAt:n+o.window}}async reset(e,t){let r=this.getKey(e,t);await this.redis.del(r);}async resetUser(e,t,r){let o=this.getKey(`user:${e}:${t}`,r);await this.redis.del(o);}async getStatus(e,t){let r=this.limits[e]||this.limits["api:general"],o=this.getKey(e,t),i=Date.now(),n=i-r.window;await this.redis.zremrangebyscore(o,0,n);let a=await this.redis.zcard(o);return {count:a,limit:r.max,remaining:Math.max(0,r.max-a),resetAt:i+r.window}}setLimit(e,t){this.limits[e]=t;}setUserLimit(e,t){this.userLimits[e]=t;}};var x=class{users=new Map;sessions=new Map;refreshTokens=new Map;emailToUserId=new Map;passwordHistory=new Map;emailVerificationTokens=new Map;passwordResetTokens=new Map;auditLogs=[];externalDb=false;constructor(){}async connect(){}async disconnect(){this.users.clear(),this.sessions.clear(),this.refreshTokens.clear(),this.emailToUserId.clear(),this.passwordHistory.clear();}async createUser(e){let t=randomBytes(16).toString("hex"),r=new Date().toISOString(),o=await this.hashPassword(e.password),i={id:t,email:e.email.toLowerCase(),passwordHash:o,role:e.role||"customer",tenantId:e.tenantId,createdAt:r,updatedAt:r};return this.users.set(t,i),this.emailToUserId.set(e.email.toLowerCase(),t),this.passwordHistory.set(t,[]),i}async findUserByEmail(e){let t=this.emailToUserId.get(e.toLowerCase());return t?this.findUserById(t):null}async findUserById(e){return this.users.get(e)||null}async updateUser(e,t){let r=await this.findUserById(e);if(!r)return null;let o={...r,...t,id:e,updatedAt:new Date().toISOString()};return t.email&&t.email!==r.email&&(this.emailToUserId.delete(r.email.toLowerCase()),this.emailToUserId.set(t.email.toLowerCase(),e)),this.users.set(e,o),o}async deleteUser(e){let t=await this.findUserById(e);return t?(this.users.delete(e),this.emailToUserId.delete(t.email.toLowerCase()),this.refreshTokens.forEach((r,o)=>{this.sessions.get(r)?.userId===e&&(this.refreshTokens.delete(o),this.sessions.delete(r));}),this.passwordHistory.delete(e),this.sessions.forEach((r,o)=>{r.userId===e&&this.sessions.delete(o);}),true):false}async hashPassword(e){return (await import('bcryptjs')).default.hash(e,12)}async verifyPassword(e,t){let r=await this.findUserByEmail(e);return !r||!r.passwordHash?null:await(await import('bcryptjs')).default.compare(t,r.passwordHash)?r:null}async createSession(e,t={}){let r=randomBytes(32).toString("hex"),o=randomBytes(32).toString("base64url"),i=randomBytes(32).toString("base64url"),n=new Date,a={id:r,userId:e,token:o,refreshToken:i,expiresAt:new Date(n.getTime()+86400*1e3).toISOString(),createdAt:n.toISOString(),ipAddress:t.ipAddress,userAgent:t.userAgent};return this.sessions.set(r,a),this.refreshTokens.set(i,r),a}async findSessionByToken(e){return this.sessions.get(e)||null}async findSessionByRefreshToken(e){let t=this.refreshTokens.get(e);return t&&this.sessions.get(t)||null}async deleteSession(e){let t=this.sessions.get(e);return t?(t.refreshToken&&this.refreshTokens.delete(t.refreshToken),this.sessions.delete(e),true):false}async deleteUserSessions(e){let t=0;return this.sessions.forEach((r,o)=>{r.userId===e&&(r.refreshToken&&this.refreshTokens.delete(r.refreshToken),this.sessions.delete(o),t++);}),t}async addPasswordToHistory(e,t){let r=this.passwordHistory.get(e)||[];r.push(t),r.length>5&&r.splice(0,r.length-5),this.passwordHistory.set(e,r);}async getPasswordHistory(e,t=5){return this.passwordHistory.get(e)||[]}async isPasswordInHistory(e,t,r=5){let o=await this.getPasswordHistory(t,r),i=(await import('bcryptjs')).default;for(let n of o)if(await i.compare(e,n))return  true;return  false}async createEmailVerificationToken(e){let t=randomBytes(32).toString("hex"),r=new Date(Date.now()+1440*60*1e3);return this.emailVerificationTokens.set(t,{userId:e,expiresAt:r}),{token:t,expiresAt:r}}async verifyEmailToken(e){let t=this.emailVerificationTokens.get(e);return !t||t.expiresAt<new Date?(this.emailVerificationTokens.delete(e),{success:false,error:"Invalid or expired token"}):(this.emailVerificationTokens.delete(e),{success:true,userId:t.userId})}async createPasswordResetToken(e){let t=await this.findUserByEmail(e);if(!t)return {token:"",expiresAt:new Date,error:"User not found"};let r=randomBytes(32).toString("hex"),o=new Date(Date.now()+3600*1e3);return this.passwordResetTokens.set(r,{userId:t.id,expiresAt:o}),{token:r,expiresAt:o}}async resetPasswordWithToken(e,t){let r=this.passwordResetTokens.get(e);if(!r||r.expiresAt<new Date)return this.passwordResetTokens.delete(e),{success:false,error:"Invalid or expired token"};let o=await this.hashPassword(t);return await this.updateUser(r.userId,{passwordHash:o}),this.passwordResetTokens.delete(e),{success:true}}async hasAnyUsers(){return this.users.size>0}async findAuditLogs(e){let{limit:t=50,offset:r=0}=e,o=this.auditLogs.slice().reverse();return e.userId&&(o=o.filter(i=>i.userId===e.userId)),e.action&&(Array.isArray(e.action)?o=o.filter(i=>e.action.includes(String(i.action))):o=o.filter(i=>i.action===e.action)),e.resource&&(o=o.filter(i=>i.resource===e.resource)),e.success!==void 0&&(o=o.filter(i=>i.success===e.success)),{logs:o.slice(r,r+t),total:o.length}}async createAuditLog(e){let t=randomBytes(16).toString("hex"),o={...e,id:t,timestamp:new Date};return this.auditLogs.push(o),o}};var T=class{storage=new Map;history=new Map;config;constructor(e={}){this.config={maxAttempts:5,lockDuration:9e5,notifyUser:true,notifyAdmin:true,adminNotifyAfter:3,...e};}async checkLockout(e){let t=Date.now(),r=this.storage.get(e);if(r&&r.lockedUntil!==null&&r.lockedUntil<=t)return await this.resetAttempts(e),{locked:false,attemptsRemaining:this.config.maxAttempts,totalAttempts:0};if(!r)return {locked:false,attemptsRemaining:this.config.maxAttempts,totalAttempts:0};let{attempts:o,lockedUntil:i}=r;return i!==null&&i>t?{locked:true,attemptsRemaining:0,lockedUntil:new Date(i),totalAttempts:o}:{locked:false,attemptsRemaining:Math.max(0,this.config.maxAttempts-o),totalAttempts:o}}async recordFailedAttempt(e){let t=Date.now(),r=this.storage.get(e)||{attempts:0,lastAttempt:null,lockedAt:null,lockedUntil:null};r.attempts+=1,r.lastAttempt=t;let o=this.history.get(e)||[];if(o.push(t),o.length>100&&o.splice(0,o.length-100),this.history.set(e,o),this.storage.set(e,r),r.attempts>=this.config.maxAttempts){let i=new Date(t+this.config.lockDuration);return r.lockedAt=t,r.lockedUntil=i.getTime(),this.storage.set(e,r),{locked:true,attemptsRemaining:0,lockedUntil:i,totalAttempts:r.attempts}}return {locked:false,attemptsRemaining:Math.max(0,this.config.maxAttempts-r.attempts),totalAttempts:r.attempts}}async lockAccount(e,t){let r=Date.now(),o=t||this.config.lockDuration,i=new Date(r+o),n=this.storage.get(e)||{attempts:0,lastAttempt:null,lockedAt:null,lockedUntil:null};n.attempts=this.config.maxAttempts,n.lockedAt=r,n.lockedUntil=i.getTime(),this.storage.set(e,n);}async unlockAccount(e){await this.resetAttempts(e);}async resetAttempts(e){let t=this.storage.get(e);t&&(t.attempts=0,t.lockedAt=null,t.lockedUntil=null,this.storage.set(e,t)),this.history.delete(e);}async getLockoutHistory(e,t=10){return (this.history.get(e)||[]).slice(-t).reverse().map(o=>new Date(o))}async getLockoutStats(e){let r=(this.history.get(e)||[]).length,o=Math.floor(r/this.config.maxAttempts),i=null,n=this.storage.get(e);n&&n.lockedAt!==null&&(i=new Date(n.lockedAt));let a=o>0?this.config.maxAttempts:0;return {totalFailedAttempts:r,lockoutCount:o,lastLockout:i,averageAttemptsBeforeLockout:a}}shouldNotifyAdmin(e){return this.config.notifyAdmin&&e>=this.config.adminNotifyAfter}getConfig(){return {...this.config}}setConfig(e){this.config={...this.config,...e};}};function h(s,e=""){return process.env[s]||e}function A(s,e=false){let t=process.env[s];return t?t.toLowerCase()==="true":e}function g(s,e=0){let t=process.env[s];return t?parseInt(t,10):e}function Pe(){let s=process.env.KYRO_AUTH_DATABASE?.toLowerCase();if(s&&["sqlite","postgres","mongodb","memory"].includes(s))return s;try{let e=join(process.cwd(),"kyro.config.ts"),t=readFileSync(e,"utf8");if(t.includes("createLocalAdapter"))return "sqlite";if(t.includes("createDrizzleAdapter"))return t.includes("postgres")||t.includes("postgresql"),"postgres";if(t.includes("createMongoDBAdapter"))return "mongodb"}catch{}return "memory"}async function Cr(s){let e=process.cwd(),t=e.endsWith("admin")?join(e,".."):e,r=resolve(t,"data","auth.db");switch(s){case "sqlite":return new a$2({path:h("KYRO_AUTH_DB_PATH",r)});case "postgres":{let o=h("DATABASE_URL","");if(o){let i,n;try{i=(await import('drizzle-orm/postgres-js')).drizzle,n=await import('postgres');}catch{a(["postgres","drizzle-orm"]),i=(await import('drizzle-orm/postgres-js')).drizzle,n=await import('postgres');}let a$1=n.default(o,{onnotice:()=>{}}),c=i(a$1);return new a$3({db:c})}return new a$2({path:h("KYRO_AUTH_DB_PATH",r)})}case "mongodb":{let o=h("MONGODB_URI","");if(o){let i;try{i=(await import('mongodb')).MongoClient;}catch{a(["mongodb"]),i=(await import('mongodb')).MongoClient;}let n=new i(o);await n.connect();let c=new URL(o).pathname.replace(/^\//,"")||"kyro_cms",l=n.db(c);return new a$1({db:l})}return new a$2({path:h("KYRO_AUTH_DB_PATH",r)})}default:return new x}}async function F(s,e){let t=A("KYRO_DISTRIBUTED",false),r;if(t){let{RedisAuthAdapter:d}=await import('./redis-adapter-NN3H4GRX.js'),u=h("REDIS_URL","redis://localhost:6379"),y=A("REDIS_TLS",false),f=new d({url:u,tls:y});await f.connect?.(),r=f;}else {let d=s||Pe();r=await Cr(d),r.connect&&await r.connect();}let o=e?await b.fromConfig(e).catch(()=>null)||b.fromEnv()||void 0:b.fromEnv()||void 0,i=new c({minLength:g("PASSWORD_MIN_LENGTH",12),requireUppercase:A("PASSWORD_REQUIRE_UPPERCASE",true),requireLowercase:A("PASSWORD_REQUIRE_LOWERCASE",true),requireNumbers:A("PASSWORD_REQUIRE_NUMBERS",true),requireSpecialChars:A("PASSWORD_REQUIRE_SPECIAL",true),preventReuse:g("PASSWORD_PREVENT_REUSE",5),maxLength:g("PASSWORD_MAX_LENGTH",128)}),n$1,a,c$1;if(t){let u=r.redis;n$1=new S(u,{maxAttempts:g("LOCKOUT_MAX_ATTEMPTS",5),lockDuration:g("LOCKOUT_DURATION_MINUTES",15)*60*1e3}),a=new k(u,{"auth:login":{window:g("RATE_LIMIT_AUTH_WINDOW_MS",9e5),max:g("RATE_LIMIT_AUTH_MAX_REQUESTS",10)},"api:general":{window:g("RATE_LIMIT_WINDOW_MS",6e4),max:g("RATE_LIMIT_MAX_REQUESTS",100)}}),c$1=new n(u,g("AUDIT_LOG_RETENTION_DAYS",30));}else n$1=new T({maxAttempts:g("LOCKOUT_MAX_ATTEMPTS",5),lockDuration:g("LOCKOUT_DURATION_MINUTES",15)*60*1e3}),a=new m({"auth:login":{window:g("RATE_LIMIT_AUTH_WINDOW_MS",9e5),max:g("RATE_LIMIT_AUTH_MAX_REQUESTS",10)},"api:general":{window:g("RATE_LIMIT_WINDOW_MS",6e4),max:g("RATE_LIMIT_MAX_REQUESTS",100)}}),c$1=A("AUDIT_LOG_ENABLED",true)?new p(g("AUDIT_LOG_RETENTION_DAYS",30)):void 0;let l=new q({redis:r,email:o,jwtSecret:h("APP_SECRET","change-me"),jwtExpiresIn:h("JWT_EXPIRES_IN","24h"),jwtIssuer:h("JWT_ISSUER","kyro-cms"),jwtAudience:h("JWT_AUDIENCE","kyro-cms-client"),passwordPolicy:i,lockout:n$1,rateLimiter:a,auditLogger:c$1,baseUrl:h("EMAIL_BASE_URL","http://localhost:4321"),emailVerificationRequired:A("EMAIL_VERIFICATION_REQUIRED",true)}),p$1=t?"distributed":s||Pe();return {authAdapter:r,databaseType:p$1,email:o,passwordPolicy:i,lockout:n$1,rateLimiter:a,auditLogger:c$1,routes:l}}var Re=F().catch(s=>(console.warn("[AuthConfig] Failed to initialize auth config:",s.message),null));var Rr=12,Dr="24h",vr="7d",L=class{adapter;config;constructor(e,t){this.adapter=e,this.config={secret:t.secret,expiresIn:t.expiresIn??Dr,refreshExpiresIn:t.refreshExpiresIn??vr,issuer:t.issuer??"kyro-cms",audience:t.audience??[],saltRounds:t.saltRounds??Rr};}async register(e){try{if(await this.adapter.findUserByEmail(e.email))return {success:!1,error:"Email already registered"};let r=await this.adapter.createUser({email:e.email,password:e.password,role:e.role??"customer",tenantId:e.tenantId});return this.createSessionForUser(r)}catch(t){return {success:false,error:String(t)}}}async login(e){try{let t=await this.adapter.verifyPassword(e.email,e.password);return t?this.createSessionForUser(t):{success:!1,error:"Invalid credentials"}}catch(t){return {success:false,error:String(t)}}}async logout(e){await this.adapter.deleteSession(e);}async refreshToken(e){try{let t=await this.adapter.findSessionByToken(e);if(!t||new Date(t.expiresAt)<new Date)return {success:!1,error:"Invalid or expired refresh token"};let r=await this.adapter.findUserById(t.userId);return r?(await this.adapter.deleteSession(e),this.createSessionForUser(r)):{success:!1,error:"User not found"}}catch(t){return {success:false,error:String(t)}}}async verifyToken(e){try{let{default:t}=await import('jsonwebtoken');return t.verify(e,this.config.secret,{issuer:this.config.issuer,audience:this.config.audience.length>0?this.config.audience[0]:void 0})}catch{return null}}async getUserFromToken(e){let t=await this.verifyToken(e);return t?this.adapter.findUserById(t.sub):null}async changePassword(e,t,r){try{let o=await this.adapter.findUserById(e);return o?await this.adapter.verifyPassword(o.email,t)?(await this.adapter.updateUser(e,{password:r}),await this.adapter.deleteUserSessions(e),{success:!0,user:o}):{success:!1,error:"Current password is incorrect"}:{success:!1,error:"User not found"}}catch(o){return {success:false,error:String(o)}}}async resetPassword(e,t){try{let r=await this.adapter.findUserByEmail(e);return r?(await this.adapter.updateUser(r.id,{password:t}),await this.adapter.deleteUserSessions(r.id),{success:!0,user:r}):{success:!1,error:"User not found"}}catch(r){return {success:false,error:String(r)}}}async sendEmailVerification(e){try{let{token:t,expiresAt:r}=await this.adapter.createEmailVerificationToken(e);return {success:!0}}catch(t){return {success:false,error:String(t)}}}async verifyEmail(e){try{return await this.adapter.verifyEmailToken(e)}catch(t){return {success:false,error:String(t)}}}async requestPasswordReset(e){try{let t=await this.adapter.createPasswordResetToken(e);return t.error?{success:!1,error:t.error}:{success:!0}}catch(t){return {success:false,error:String(t)}}}async resetPasswordWithToken(e,t){try{return await this.adapter.resetPasswordWithToken(e,t)}catch(r){return {success:false,error:String(r)}}}async deleteAccount(e){try{return await this.adapter.findUserById(e)?(await this.adapter.deleteUserSessions(e),await this.adapter.deleteUser(e),{success:!0}):{success:!1,error:"User not found"}}catch(t){return {success:false,error:String(t)}}}async createSessionForUser(e){let t=await this.generateToken(e),r=await this.adapter.createSession(e.id);return {success:true,user:e,session:r,token:t}}async generateToken(e){let{default:t}=await import('jsonwebtoken'),r={sub:e.id,email:e.email,role:e.role,tenantId:e.tenantId},o={expiresIn:this.parseExpiresIn(this.config.expiresIn)/1e3,issuer:this.config.issuer};return this.config.audience.length>0&&(o.audience=this.config.audience[0]),t.sign(r,this.config.secret,o)}async hashPassword(e){let{default:t}=await import('bcryptjs');return t.hash(e,this.config.saltRounds)}parseExpiresIn(e){if(typeof e=="number")return e;let t=e.match(/^(\d+)([smhd])$/);if(!t)return 864e5;let r=parseInt(t[1],10);switch(t[2]){case "s":return r*1e3;case "m":return r*6e4;case "h":return r*36e5;case "d":return r*864e5;default:return 864e5}}};function Lr(s,e){return new L(s,e)}function I(){return {enabled:true,draftsEnabled:true,publishEnabled:true,scheduleEnabled:false,versioningEnabled:true,maxVersionsPerDocument:50,autoPublish:false,requirePublishPermission:true}}var E=class{adapter;config;constructor(e,t){this.adapter=e,this.config={...I(),...t};}async createVersion(e){let r=((await this.adapter.getLatestVersion(e.collection,e.documentId))?.version??0)+1,o={...e,version:r},i=await this.adapter.createVersion(o);return this.config.maxVersionsPerDocument>0&&await this.pruneOldVersions(e.collection,e.documentId),i}async publishVersion(e){let t=await this.adapter.getVersion(e.collection,e.versionId);if(!t)throw new Error("Version not found");if(t.status==="published")throw new Error("Version is already published");await this.adapter.publishVersion(e);}async unpublishDocument(e,t){let r=await this.adapter.getVersions({collection:e,documentId:t,limit:1e3});for(let o of r)if(o.status==="published"){await this.createVersion({collection:e,documentId:t,data:o.data,status:"draft",createdBy:"system",changeDescription:"Unpublished document"});break}}async revertToVersion(e,t,r,o){if(!await this.adapter.getVersion(e,r))throw new Error("Version not found");return await this.adapter.revertToVersion({collection:e,documentId:t,versionId:r,userId:o})}async getVersionHistory(e,t,r=20,o=0){return this.adapter.getVersions({collection:e,documentId:t,limit:r,offset:o})}async compareTwoVersions(e,t,r,o){return this.adapter.compareVersions({collection:e,documentId:t,versionA:r,versionB:o})}async getLatestDraft(e,t){return this.adapter.getLatestVersion(e,t)}async getPublishedVersion(e,t){return this.adapter.getPublishedVersion(e,t)}async getVersion(e,t){return this.adapter.getVersion(e,t)}async schedulePublish(e,t,r,o){if(!this.config.scheduleEnabled)throw new Error("Scheduled publishing is not enabled");if(!await this.adapter.getVersion(e,r))throw new Error("Version not found")}async deleteVersionHistory(e,t){await this.adapter.deleteVersions(e,t);}async pruneOldVersions(e,t){let r=await this.adapter.getVersions({collection:e,documentId:t,limit:this.config.maxVersionsPerDocument+100});if(r.length<=this.config.maxVersionsPerDocument)return;r.slice(0,this.config.maxVersionsPerDocument);let i=r.slice(this.config.maxVersionsPerDocument);for(let n of i)if(n.status!=="published"){await this.adapter.deleteVersions(e,t);break}}};function Ir(s,e){return new E(s,e)}function Er(s){return s==="published"}function Ur(s){return s==="draft"}function Vr(s){return s==="archived"}function Or(s){return s?Array.isArray(s)?s:Object.values(s):[]}function _r(s){return s?Array.isArray(s)?s:Object.values(s):[]}function De(s){return {collections:Or(s.collections),globals:_r(s.globals),adapter:s.adapter,plugins:s.plugins,auth:s.auth,cors:s.cors,admin:s.admin,upload:s.upload,graphQL:s.graphQL,typescript:s.typescript,localization:s.localization,rateLimit:s.rateLimit,debug:s.debug}}var Mr=De;function Hr(s){let{siteSettings:e,seoSettings:t,title:r,description:o,image:i,url:n}=s;if(!e)return "";let a=e.siteName||"",c=r||t?.defaultTitle||a,l=t?.titleTemplate,p=t?.separator||" | ",d=t?.siteNameInTitle!==false,u=l?l.replace(/\{\{title\}\}/g,c).replace(/\{\{siteName\}\}/g,d?a:"").replace(/\{\{separator\}\}/g,p).replace(/\s+/g," ").trim():c,y=o||t?.defaultDescription||e.siteDescription||"",f=i||e.siteOgImage?.url||"",U=n||e.siteUrl||"",m=`
     <title>${u}</title>
     <meta name="description" content="${y}">
   `;e.siteFavicon?.url&&(m+=`

package/dist/rest/index.cjs

@@ -1 +1 @@
-'use strict';var chunkPFHIBSOU_cjs=require('../chunk-PFHIBSOU.cjs');require('../chunk-AJAZ7D3W.cjs'),require('../chunk-WIZ6C5QZ.cjs'),require('../chunk-GFU7AOI3.cjs'),require('../chunk-HOP4D5XZ.cjs'),require('../chunk-HVXO3OFB.cjs'),require('../chunk-XUONID6O.cjs'),require('../chunk-NY47CFVP.cjs'),require('../chunk-5YW2WHXR.cjs'),require('../chunk-GYQMNXXW.cjs'),require('../chunk-MIOMMB23.cjs'),require('../chunk-HHH4XNNS.cjs'),require('../chunk-EJDIR56C.cjs'),require('../chunk-D5P2IPGX.cjs'),require('../chunk-Q3Q7BJVQ.cjs'),require('../chunk-AHSFSERC.cjs');Object.defineProperty(exports,"createHonoApp",{enumerable:true,get:function(){return chunkPFHIBSOU_cjs.s}});Object.defineProperty(exports,"createRESTAPI",{enumerable:true,get:function(){return chunkPFHIBSOU_cjs.t}});
+'use strict';var chunkM5JUPA7G_cjs=require('../chunk-M5JUPA7G.cjs');require('../chunk-GCQTSPX6.cjs'),require('../chunk-WIZ6C5QZ.cjs'),require('../chunk-GO34AOBZ.cjs'),require('../chunk-HOP4D5XZ.cjs'),require('../chunk-HVXO3OFB.cjs'),require('../chunk-XUONID6O.cjs'),require('../chunk-NY47CFVP.cjs'),require('../chunk-3ZFRP5M2.cjs'),require('../chunk-GYQMNXXW.cjs'),require('../chunk-MIOMMB23.cjs'),require('../chunk-HHH4XNNS.cjs'),require('../chunk-EJDIR56C.cjs'),require('../chunk-D5P2IPGX.cjs'),require('../chunk-Q3Q7BJVQ.cjs'),require('../chunk-AHSFSERC.cjs');Object.defineProperty(exports,"createHonoApp",{enumerable:true,get:function(){return chunkM5JUPA7G_cjs.s}});Object.defineProperty(exports,"createRESTAPI",{enumerable:true,get:function(){return chunkM5JUPA7G_cjs.t}});

package/dist/rest/index.js

@@ -1 +1 @@
-export{s as createHonoApp,t as createRESTAPI}from'../chunk-4JW6IVU5.js';import'../chunk-7WOX27LK.js';import'../chunk-K6WUOU6P.js';import'../chunk-AE6GXUT7.js';import'../chunk-IKOXCJYO.js';import'../chunk-NRLIGDYF.js';import'../chunk-I67R6MR5.js';import'../chunk-HLSB2MCK.js';import'../chunk-J5SP3Y2H.js';import'../chunk-RHCWCG3O.js';import'../chunk-OG7CNQGU.js';import'../chunk-IZCTG4RG.js';import'../chunk-TQNM4C7H.js';import'../chunk-6SPPR5JZ.js';import'../chunk-KDNYHLD2.js';import'../chunk-5J6HXUF6.js';
+export{s as createHonoApp,t as createRESTAPI}from'../chunk-NI7S5JMH.js';import'../chunk-6NGUY76Y.js';import'../chunk-K6WUOU6P.js';import'../chunk-IETGL7WJ.js';import'../chunk-IKOXCJYO.js';import'../chunk-NRLIGDYF.js';import'../chunk-I67R6MR5.js';import'../chunk-HLSB2MCK.js';import'../chunk-3RR6IV5I.js';import'../chunk-RHCWCG3O.js';import'../chunk-OG7CNQGU.js';import'../chunk-IZCTG4RG.js';import'../chunk-TQNM4C7H.js';import'../chunk-6SPPR5JZ.js';import'../chunk-KDNYHLD2.js';import'../chunk-5J6HXUF6.js';

package/dist/templates/index.cjs

@@ -1 +1 @@
-'use strict';var chunkEYUT6MOM_cjs=require('../chunk-EYUT6MOM.cjs'),chunk65G73T7Z_cjs=require('../chunk-65G73T7Z.cjs'),chunkGFU7AOI3_cjs=require('../chunk-GFU7AOI3.cjs');require('../chunk-AHSFSERC.cjs');Object.defineProperty(exports,"accessSettingsGlobal",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.N}});Object.defineProperty(exports,"allSettingsGlobals",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.R}});Object.defineProperty(exports,"blogCollections",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.c}});Object.defineProperty(exports,"blogGlobals",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.d}});Object.defineProperty(exports,"brandSettingsGlobal",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.L}});Object.defineProperty(exports,"brandsCollection",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.H}});Object.defineProperty(exports,"brandsCollections",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.I}});Object.defineProperty(exports,"categoriesCollection",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.p}});Object.defineProperty(exports,"categoriesCollections",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.q}});Object.defineProperty(exports,"coreSettingsGlobals",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.S}});Object.defineProperty(exports,"couponsCollection",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.z}});Object.defineProperty(exports,"couponsCollections",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.A}});Object.defineProperty(exports,"createTemplateConfig",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.W}});Object.defineProperty(exports,"customersCollection",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.v}});Object.defineProperty(exports,"customersCollections",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.w}});Object.defineProperty(exports,"ecommerceCollections",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.e}});Object.defineProperty(exports,"ecommerceGlobals",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.f}});Object.defineProperty(exports,"emailSettingsGlobal",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.M}});Object.defineProperty(exports,"formEntriesCollection",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.D}});Object.defineProperty(exports,"formEntriesCollections",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.E}});Object.defineProperty(exports,"formsCollection",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.B}});Object.defineProperty(exports,"formsCollections",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.C}});Object.defineProperty(exports,"getSettingsForTemplate",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.U}});Object.defineProperty(exports,"kitchenSinkCollections",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.g}});Object.defineProperty(exports,"mediaCollection",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.h}});Object.defineProperty(exports,"mediaCollections",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.i}});Object.defineProperty(exports,"menuCollection",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.j}});Object.defineProperty(exports,"menuCollections",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.k}});Object.defineProperty(exports,"minimalCollections",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.a}});Object.defineProperty(exports,"ordersCollection",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.x}});Object.defineProperty(exports,"ordersCollections",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.y}});Object.defineProperty(exports,"pageCollection",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.n}});Object.defineProperty(exports,"pageCollections",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.o}});Object.defineProperty(exports,"postsCollection",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.l}});Object.defineProperty(exports,"postsCollections",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.m}});Object.defineProperty(exports,"productCategoriesCollection",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.r}});Object.defineProperty(exports,"productCategoriesCollections",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.s}});Object.defineProperty(exports,"productsCollection",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.t}});Object.defineProperty(exports,"productsCollections",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.u}});Object.defineProperty(exports,"reviewsCollection",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.F}});Object.defineProperty(exports,"reviewsCollections",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.G}});Object.defineProperty(exports,"seoSettingsGlobal",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.K}});Object.defineProperty(exports,"settingsBySlug",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.T}});Object.defineProperty(exports,"shippingSettingsGlobal",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.P}});Object.defineProperty(exports,"siteSettingsGlobal",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.J}});Object.defineProperty(exports,"starterCollections",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.b}});Object.defineProperty(exports,"storeSettingsGlobal",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.O}});Object.defineProperty(exports,"systemSettingsGlobal",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.Q}});Object.defineProperty(exports,"templateCollections",{enumerable:true,get:function(){return chunkEYUT6MOM_cjs.V}});Object.defineProperty(exports,"storageSettingsGlobal",{enumerable:true,get:function(){return chunk65G73T7Z_cjs.a}});Object.defineProperty(exports,"authCollections",{enumerable:true,get:function(){return chunkGFU7AOI3_cjs.b}});
+'use strict';var chunk2NJR2B4W_cjs=require('../chunk-2NJR2B4W.cjs'),chunk65G73T7Z_cjs=require('../chunk-65G73T7Z.cjs'),chunkGO34AOBZ_cjs=require('../chunk-GO34AOBZ.cjs');require('../chunk-AHSFSERC.cjs');Object.defineProperty(exports,"accessSettingsGlobal",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.N}});Object.defineProperty(exports,"allSettingsGlobals",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.R}});Object.defineProperty(exports,"blogCollections",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.c}});Object.defineProperty(exports,"blogGlobals",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.d}});Object.defineProperty(exports,"brandSettingsGlobal",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.L}});Object.defineProperty(exports,"brandsCollection",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.H}});Object.defineProperty(exports,"brandsCollections",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.I}});Object.defineProperty(exports,"categoriesCollection",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.p}});Object.defineProperty(exports,"categoriesCollections",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.q}});Object.defineProperty(exports,"coreSettingsGlobals",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.S}});Object.defineProperty(exports,"couponsCollection",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.z}});Object.defineProperty(exports,"couponsCollections",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.A}});Object.defineProperty(exports,"createTemplateConfig",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.W}});Object.defineProperty(exports,"customersCollection",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.v}});Object.defineProperty(exports,"customersCollections",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.w}});Object.defineProperty(exports,"ecommerceCollections",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.e}});Object.defineProperty(exports,"ecommerceGlobals",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.f}});Object.defineProperty(exports,"emailSettingsGlobal",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.M}});Object.defineProperty(exports,"formEntriesCollection",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.D}});Object.defineProperty(exports,"formEntriesCollections",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.E}});Object.defineProperty(exports,"formsCollection",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.B}});Object.defineProperty(exports,"formsCollections",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.C}});Object.defineProperty(exports,"getSettingsForTemplate",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.U}});Object.defineProperty(exports,"kitchenSinkCollections",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.g}});Object.defineProperty(exports,"mediaCollection",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.h}});Object.defineProperty(exports,"mediaCollections",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.i}});Object.defineProperty(exports,"menuCollection",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.j}});Object.defineProperty(exports,"menuCollections",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.k}});Object.defineProperty(exports,"minimalCollections",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.a}});Object.defineProperty(exports,"ordersCollection",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.x}});Object.defineProperty(exports,"ordersCollections",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.y}});Object.defineProperty(exports,"pageCollection",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.n}});Object.defineProperty(exports,"pageCollections",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.o}});Object.defineProperty(exports,"postsCollection",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.l}});Object.defineProperty(exports,"postsCollections",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.m}});Object.defineProperty(exports,"productCategoriesCollection",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.r}});Object.defineProperty(exports,"productCategoriesCollections",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.s}});Object.defineProperty(exports,"productsCollection",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.t}});Object.defineProperty(exports,"productsCollections",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.u}});Object.defineProperty(exports,"reviewsCollection",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.F}});Object.defineProperty(exports,"reviewsCollections",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.G}});Object.defineProperty(exports,"seoSettingsGlobal",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.K}});Object.defineProperty(exports,"settingsBySlug",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.T}});Object.defineProperty(exports,"shippingSettingsGlobal",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.P}});Object.defineProperty(exports,"siteSettingsGlobal",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.J}});Object.defineProperty(exports,"starterCollections",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.b}});Object.defineProperty(exports,"storeSettingsGlobal",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.O}});Object.defineProperty(exports,"systemSettingsGlobal",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.Q}});Object.defineProperty(exports,"templateCollections",{enumerable:true,get:function(){return chunk2NJR2B4W_cjs.V}});Object.defineProperty(exports,"storageSettingsGlobal",{enumerable:true,get:function(){return chunk65G73T7Z_cjs.a}});Object.defineProperty(exports,"authCollections",{enumerable:true,get:function(){return chunkGO34AOBZ_cjs.b}});

package/dist/templates/index.js

@@ -1 +1 @@
-export{N as accessSettingsGlobal,R as allSettingsGlobals,c as blogCollections,d as blogGlobals,L as brandSettingsGlobal,H as brandsCollection,I as brandsCollections,p as categoriesCollection,q as categoriesCollections,S as coreSettingsGlobals,z as couponsCollection,A as couponsCollections,W as createTemplateConfig,v as customersCollection,w as customersCollections,e as ecommerceCollections,f as ecommerceGlobals,M as emailSettingsGlobal,D as formEntriesCollection,E as formEntriesCollections,B as formsCollection,C as formsCollections,U as getSettingsForTemplate,g as kitchenSinkCollections,h as mediaCollection,i as mediaCollections,j as menuCollection,k as menuCollections,a as minimalCollections,x as ordersCollection,y as ordersCollections,n as pageCollection,o as pageCollections,l as postsCollection,m as postsCollections,r as productCategoriesCollection,s as productCategoriesCollections,t as productsCollection,u as productsCollections,F as reviewsCollection,G as reviewsCollections,K as seoSettingsGlobal,T as settingsBySlug,P as shippingSettingsGlobal,J as siteSettingsGlobal,b as starterCollections,O as storeSettingsGlobal,Q as systemSettingsGlobal,V as templateCollections}from'../chunk-5B7GPMJI.js';export{a as storageSettingsGlobal}from'../chunk-NZ35PV5R.js';export{b as authCollections}from'../chunk-AE6GXUT7.js';import'../chunk-5J6HXUF6.js';
+export{N as accessSettingsGlobal,R as allSettingsGlobals,c as blogCollections,d as blogGlobals,L as brandSettingsGlobal,H as brandsCollection,I as brandsCollections,p as categoriesCollection,q as categoriesCollections,S as coreSettingsGlobals,z as couponsCollection,A as couponsCollections,W as createTemplateConfig,v as customersCollection,w as customersCollections,e as ecommerceCollections,f as ecommerceGlobals,M as emailSettingsGlobal,D as formEntriesCollection,E as formEntriesCollections,B as formsCollection,C as formsCollections,U as getSettingsForTemplate,g as kitchenSinkCollections,h as mediaCollection,i as mediaCollections,j as menuCollection,k as menuCollections,a as minimalCollections,x as ordersCollection,y as ordersCollections,n as pageCollection,o as pageCollections,l as postsCollection,m as postsCollections,r as productCategoriesCollection,s as productCategoriesCollections,t as productsCollection,u as productsCollections,F as reviewsCollection,G as reviewsCollections,K as seoSettingsGlobal,T as settingsBySlug,P as shippingSettingsGlobal,J as siteSettingsGlobal,b as starterCollections,O as storeSettingsGlobal,Q as systemSettingsGlobal,V as templateCollections}from'../chunk-FGSIHWQJ.js';export{a as storageSettingsGlobal}from'../chunk-NZ35PV5R.js';export{b as authCollections}from'../chunk-IETGL7WJ.js';import'../chunk-5J6HXUF6.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kyro-cms/core",
-  "version": "0.12.10",
+  "version": "0.12.15",
   "description": "Astro-native headless CMS with multi-database adapters, multi-protocol APIs, and multi-vendor support",
   "engines": {
     "node": ">=22"
@@ -169,7 +169,7 @@
     "@ai-sdk/openai": "^0.0.14",
     "@aws-sdk/client-s3": "^3.751.0",
     "@aws-sdk/s3-request-presigner": "^3.751.0",
-    "@kyro-cms/ai": "^0.1.2",
+    "@kyro-cms/ai": "^0.0.5",
     "@smithy/node-http-handler": "^4.7.0",
     "@tiptap/core": "^3.23.6",
     "@tiptap/extension-color": "^3.23.6",
@@ -259,4 +259,4 @@
       "optional": true
     }
   }
-}
+}

package/dist/WebhookService-ByrpAI4d.d.ts

@@ -1,143 +0,0 @@
-import { B as BaseAdapter } from './types-Dc8VAPhF.js';
-
-declare const WEBHOOK_EVENTS: {
-    readonly COLLECTION_CREATE: "collection.create";
-    readonly COLLECTION_UPDATE: "collection.update";
-    readonly COLLECTION_DELETE: "collection.delete";
-    readonly MEDIA_UPLOAD: "media.upload";
-    readonly MEDIA_DELETE: "media.delete";
-    readonly AUTH_LOGIN: "auth.login";
-    readonly AUTH_REGISTER: "auth.register";
-    readonly AUTH_LOGOUT: "auth.logout";
-    readonly ORDER_CREATED: "order.created";
-    readonly ORDER_PAID: "order.paid";
-    readonly ORDER_SHIPPED: "order.shipped";
-    readonly ORDER_DELIVERED: "order.delivered";
-};
-type WebhookEvent = (typeof WEBHOOK_EVENTS)[keyof typeof WEBHOOK_EVENTS];
-declare const ALL_WEBHOOK_EVENTS: WebhookEvent[];
-type WebhookActionType = "generic" | "github-push";
-interface WebhookActionConfig {
-    githubOwner?: string;
-    githubRepo?: string;
-    githubBranch?: string;
-}
-interface WebhookConfig {
-    id: string;
-    name: string;
-    url: string;
-    events: WebhookEvent[];
-    collections?: string[];
-    status: "active" | "inactive" | "error";
-    secret?: string;
-    headers?: Record<string, string>;
-    action?: WebhookActionType;
-    config?: WebhookActionConfig;
-    lastTriggered?: string;
-    lastError?: string;
-    createdAt: string;
-    updatedAt: string;
-}
-interface CreateWebhookData {
-    name: string;
-    url: string;
-    events: (WebhookEvent | "create" | "update" | "delete")[];
-    collections?: string[];
-    status?: "active" | "inactive";
-    secret?: string;
-    headers?: Record<string, string>;
-    action?: WebhookActionType;
-    config?: WebhookActionConfig;
-}
-interface UpdateWebhookData {
-    name?: string;
-    url?: string;
-    events?: (WebhookEvent | "create" | "update" | "delete")[];
-    collections?: string[];
-    status?: "active" | "inactive" | "error";
-    secret?: string;
-    headers?: Record<string, string>;
-    action?: WebhookActionType;
-    config?: WebhookActionConfig;
-    lastTriggered?: string | null;
-    lastError?: string | null;
-}
-interface WebhookPayload {
-    id: string;
-    event: WebhookEvent;
-    timestamp: string;
-    collection?: string;
-    operation?: "create" | "update" | "delete";
-    data?: unknown;
-    previousData?: unknown;
-    user?: {
-        id: string;
-        email?: string;
-        role?: string;
-    };
-    tenantId?: string;
-    metadata?: Record<string, unknown>;
-}
-interface WebhookDelivery {
-    id: string;
-    webhookId: string;
-    event: WebhookEvent;
-    payload: WebhookPayload;
-    attempt: number;
-    status: "pending" | "success" | "failed" | "retrying";
-    responseStatus?: number;
-    responseBody?: string;
-    error?: string;
-    duration?: number;
-    createdAt: string;
-    deliveredAt?: string;
-    nextRetryAt?: string;
-}
-interface WebhookTriggerResult {
-    deliveryId: string;
-    webhookId: string;
-    event: WebhookEvent;
-    status: "queued" | "success" | "failed";
-    responseStatus?: number;
-    duration?: number;
-    error?: string;
-}
-declare const WEBHOOK_COLLECTION = "_webhooks";
-declare const WEBHOOK_DELIVERY_COLLECTION = "_webhook_deliveries";
-interface DeliveryResult {
-    success: boolean;
-    status: number;
-    statusText?: string;
-    body?: string;
-    duration: number;
-    error?: string;
-}
-interface DeliveryOptions {
-    timeout?: number;
-    maxRetries?: number;
-    retryDelay?: number;
-    onRetry?: (attempt: number, error: string) => void;
-    onSuccess?: (result: DeliveryResult) => void;
-    onFailure?: (error: string) => void;
-}
-
-declare class WebhookService {
-    private db;
-    constructor(db: BaseAdapter);
-    getWebhooks(filters?: {
-        status?: string;
-        event?: WebhookEvent;
-    }): Promise<WebhookConfig[]>;
-    getWebhookById(id: string): Promise<WebhookConfig | null>;
-    createWebhook(data: CreateWebhookData): Promise<WebhookConfig>;
-    updateWebhook(id: string, data: UpdateWebhookData): Promise<WebhookConfig | null>;
-    deleteWebhook(id: string): Promise<void>;
-    trigger(event: WebhookEvent, payloadData: Omit<WebhookPayload, "id" | "event" | "timestamp">): Promise<WebhookTriggerResult[]>;
-    triggerWebhook(webhook: WebhookConfig, payload: WebhookPayload): Promise<WebhookTriggerResult>;
-    testWebhook(webhookId: string): Promise<WebhookTriggerResult | null>;
-    getDeliveryHistory(webhookId: string, limit?: number): Promise<WebhookDelivery[]>;
-    retryDelivery(deliveryId: string): Promise<WebhookTriggerResult | null>;
-}
-declare function createWebhookService(db: BaseAdapter): WebhookService;
-
-export { ALL_WEBHOOK_EVENTS as A, type CreateWebhookData as C, type DeliveryResult as D, type UpdateWebhookData as U, type WebhookPayload as W, type WebhookDelivery as a, type WebhookConfig as b, type DeliveryOptions as c, WebhookService as d, WEBHOOK_COLLECTION as e, WEBHOOK_DELIVERY_COLLECTION as f, WEBHOOK_EVENTS as g, type WebhookEvent as h, type WebhookTriggerResult as i, createWebhookService as j };