@kyro-cms/core 0.12.17 → 0.12.21

package/dist/chunk-IZCTG4RG.js

@@ -1 +0,0 @@
-import h from'bcryptjs';import {randomUUID,randomBytes}from'crypto';var w=class{db;prefix;sessionTTL;refreshTokenTTL;indexesEnsured=false;constructor(e){this.db=e.db,this.prefix=e.collectionPrefix||"",this.sessionTTL=e.sessionTTL||86400,this.refreshTokenTTL=e.refreshTokenTTL||604800;}getDatabase(){if(typeof this.db=="function"){let e=this.db();if(!e)throw new Error("MongoDB database not initialized");return e}if(!this.db)throw new Error("MongoDB database not initialized");return this.db}col(e){return this.getDatabase().collection(`${this.prefix}${e}`)}async connect(){this.indexesEnsured||await this.ensureIndexes();}async disconnect(){}async ensureIndexes(){await this.col("users").createIndex({email:1},{unique:true}),await this.col("users").createIndex({tenantId:1}),await this.col("users").createIndex({role:1}),await this.col("sessions").createIndex({token:1},{unique:true}),await this.col("sessions").createIndex({refreshToken:1}),await this.col("sessions").createIndex({userId:1}),await this.col("sessions").createIndex({expiresAt:1},{expireAfterSeconds:0}),await this.col("audit_logs").createIndex({timestamp:-1}),await this.col("audit_logs").createIndex({userId:1}),await this.col("audit_logs").createIndex({action:1}),await this.col("audit_logs").createIndex({resource:1}),await this.col("password_history").createIndex({userId:1,createdAt:-1}),await this.col("lockouts").createIndex({userId:1},{unique:true}),await this.col("lockouts").createIndex({lockedUntil:1}),this.indexesEnsured=true;}async createUser(e){let s=randomUUID(),t=new Date,i=await this.hashPassword(e.password),n={_id:s,name:e.name||null,email:e.email.toLowerCase(),passwordHash:i,role:e.role||"customer",avatar:e.avatar||null,tenantId:e.tenantId||null,emailVerified:false,locked:false,lastLogin:null,failedLoginAttempts:0,createdAt:t,updatedAt:t};return await this.col("users").insertOne(n),this.docToAuthUser(n)}async findUserByEmail(e){let s=await this.col("users").findOne({email:e.toLowerCase()});return s?this.docToAuthUser(s):null}async findUserById(e){let s=await this.col("users").findOne({_id:e});return s?this.docToAuthUser(s):null}async updateUser(e,s){let t={updatedAt:new Date};s.name!==void 0&&(t.name=s.name),s.email!==void 0&&(t.email=s.email),s.passwordHash!==void 0&&(t.passwordHash=s.passwordHash),s.role!==void 0&&(t.role=s.role),s.avatar!==void 0&&(t.avatar=s.avatar),s.tenantId!==void 0&&(t.tenantId=s.tenantId),s.emailVerified!==void 0&&(t.emailVerified=s.emailVerified),s.locked!==void 0&&(t.locked=s.locked),s.lastLogin!==void 0&&(t.lastLogin=s.lastLogin?new Date(s.lastLogin):null),s.failedLoginAttempts!==void 0&&(t.failedLoginAttempts=s.failedLoginAttempts);let i=await this.col("users").findOneAndUpdate({_id:e},{$set:t},{returnDocument:"after"});return i?this.docToAuthUser(i):null}async deleteUser(e){return (await this.col("users").deleteOne({_id:e})).deletedCount>0}async verifyPassword(e,s){let t=await this.findUserByEmail(e);if(!t)return null;let i=await this.col("users").findOne({email:e.toLowerCase()},{projection:{passwordHash:1}});return i?.passwordHash&&await h.compare(s,i.passwordHash)?t:null}async hashPassword(e){return h.hash(e,12)}async createSession(e,s){let t=randomUUID(),i=randomBytes(32).toString("base64url"),n=randomBytes(32).toString("base64url"),a=new Date,u=new Date(a.getTime()+this.sessionTTL*1e3),d={_id:t,userId:e,token:i,refreshToken:n,ipAddress:s?.ipAddress||null,userAgent:s?.userAgent||null,expiresAt:u,createdAt:a};return await this.col("sessions").insertOne(d),this.docToSession(d)}async findSessionByToken(e){let s=await this.col("sessions").findOne({token:e,expiresAt:{$gt:new Date}});return s?this.docToSession(s):null}async findSessionByRefreshToken(e){let s=await this.col("sessions").findOne({refreshToken:e,expiresAt:{$gt:new Date}});return s?this.docToSession(s):null}async deleteSession(e){return (await this.col("sessions").deleteOne({_id:e})).deletedCount>0}async deleteUserSessions(e){return (await this.col("sessions").deleteMany({userId:e})).deletedCount}async hasAnyUsers(){return await this.col("users").countDocuments()>0}async addPasswordToHistory(e,s){await this.col("password_history").insertOne({userId:e,passwordHash:s,createdAt:new Date});}async getPasswordHistory(e,s=5){return (await this.col("password_history").find({userId:e}).sort({createdAt:-1}).limit(s).toArray()).map(i=>i.passwordHash)}async isPasswordInHistory(e,s,t=5){let i=await this.getPasswordHistory(s,t);for(let n of i)if(await h.compare(e,n))return  true;return  false}async findAuditLogs(e){let{limit:s=50,offset:t=0,userId:i,action:n,resource:a,resourceId:u,success:d,startDate:c,endDate:f}=e,o={};i&&(o.userId=i),n&&(Array.isArray(n)?o.action={$in:n}:o.action=n),a&&(o.resource=a),u&&(o.resourceId=u),d!==void 0&&(o.success=d),(c||f)&&(o.timestamp={},c&&(o.timestamp.$gte=c),f&&(o.timestamp.$lte=f));let g=await this.col("audit_logs").countDocuments(o);return {logs:(await this.col("audit_logs").find(o).sort({timestamp:-1}).skip(t).limit(s).toArray()).map(r=>({id:r._id,timestamp:r.timestamp,action:r.action,userId:r.userId||void 0,userEmail:r.userEmail||void 0,role:r.role||void 0,resource:r.resource,resourceId:r.resourceId||void 0,changes:r.changes||void 0,ipAddress:r.ipAddress||void 0,userAgent:r.userAgent||void 0,success:r.success,error:r.error||void 0,metadata:r.metadata||void 0})),total:g}}async createAuditLog(e){let s=randomUUID(),t=new Date;return await this.col("audit_logs").insertOne({_id:s,action:e.action,userId:e.userId||null,userEmail:e.userEmail||null,role:e.role||null,resource:e.resource,resourceId:e.resourceId||null,changes:e.changes||null,ipAddress:e.ipAddress||null,userAgent:e.userAgent||null,success:e.success,error:e.error||null,metadata:e.metadata||null,timestamp:t}),{...e,id:s,timestamp:t}}docToAuthUser(e){return {id:e._id,name:e.name||void 0,email:e.email,passwordHash:e.passwordHash||void 0,role:e.role,tenantId:e.tenantId||void 0,avatar:e.avatar||void 0,emailVerified:e.emailVerified||false,locked:e.locked||false,lastLogin:e.lastLogin?.toISOString?.()||e.lastLogin||void 0,failedLoginAttempts:e.failedLoginAttempts||0,createdAt:e.createdAt?.toISOString?.()||e.createdAt,updatedAt:e.updatedAt?.toISOString?.()||e.updatedAt}}docToSession(e){return {id:e._id,userId:e.userId,token:e.token,refreshToken:e.refreshToken||void 0,expiresAt:e.expiresAt?.toISOString?.()||e.expiresAt,createdAt:e.createdAt?.toISOString?.()||e.createdAt,ipAddress:e.ipAddress||void 0,userAgent:e.userAgent||void 0}}async createEmailVerificationToken(e){let s=randomBytes(32).toString("hex"),t=new Date(Date.now()+1440*60*1e3);return await this.db.collection("email_verifications").insertOne({userId:new(await import('mongodb')).ObjectId(e),token:s,expiresAt:t,createdAt:new Date}),{token:s,expiresAt:t}}async verifyEmailToken(e){let s=await this.db.collection("email_verifications").findOne({token:e});return s?s.expiresAt<new Date?{success:false,error:"Verification token has expired"}:(await this.db.collection("users").updateOne({_id:s.userId},{$set:{emailVerified:true}}),await this.db.collection("email_verifications").deleteOne({_id:s._id}),{success:true,userId:s.userId.toString()}):{success:false,error:"Invalid verification token"}}async createPasswordResetToken(e){let s=await this.findUserByEmail(e);if(!s)return {token:"",expiresAt:new Date,error:"User not found"};let t=randomBytes(32).toString("hex"),i=new Date(Date.now()+3600*1e3);return await this.db.collection("password_resets").insertOne({userId:new(await import('mongodb')).ObjectId(s.id),token:t,expiresAt:i,createdAt:new Date}),{token:t,expiresAt:i}}async resetPasswordWithToken(e,s){let t=await this.db.collection("password_resets").findOne({token:e});if(!t)return {success:false,error:"Invalid reset token"};if(t.expiresAt<new Date)return {success:false,error:"Reset token has expired"};if(t.usedAt)return {success:false,error:"Reset token has already been used"};let i=await this.hashPassword(s);return await this.db.collection("users").updateOne({_id:t.userId},{$set:{passwordHash:i,updatedAt:new Date}}),await this.db.collection("password_resets").updateOne({_id:t._id},{$set:{usedAt:new Date}}),await this.db.collection("sessions").deleteMany({userId:t.userId}),{success:true}}};export{w as a};

package/dist/chunk-LMIBASPC.cjs

@@ -1,86 +0,0 @@
-'use strict';var chunkGCQTSPX6_cjs=require('./chunk-GCQTSPX6.cjs'),chunkGO34AOBZ_cjs=require('./chunk-GO34AOBZ.cjs'),chunkHOP4D5XZ_cjs=require('./chunk-HOP4D5XZ.cjs'),chunkHVXO3OFB_cjs=require('./chunk-HVXO3OFB.cjs'),chunkXUONID6O_cjs=require('./chunk-XUONID6O.cjs'),chunkNY47CFVP_cjs=require('./chunk-NY47CFVP.cjs'),chunk3ZFRP5M2_cjs=require('./chunk-3ZFRP5M2.cjs'),chunkGYQMNXXW_cjs=require('./chunk-GYQMNXXW.cjs'),chunkHHH4XNNS_cjs=require('./chunk-HHH4XNNS.cjs'),chunkQ3Q7BJVQ_cjs=require('./chunk-Q3Q7BJVQ.cjs'),chunkAHSFSERC_cjs=require('./chunk-AHSFSERC.cjs'),pr=require('crypto'),unstorage=require('unstorage'),hr=require('unstorage/drivers/fs'),hono=require('hono'),jwt=require('hono/jwt'),Ke=require('path'),fs=require('fs'),promises=require('fs/promises'),kr=require('process'),clientS3=require('@aws-sdk/client-s3'),nodeHttpHandler=require('@smithy/node-http-handler'),stream=require('stream'),basicFtp=require('basic-ftp'),zodToJsonSchema=require('zod-to-json-schema');function _interopDefault(e){return e&&e.__esModule?e:{default:e}}var pr__default=/*#__PURE__*/_interopDefault(pr);var hr__default=/*#__PURE__*/_interopDefault(hr);var Ke__default=/*#__PURE__*/_interopDefault(Ke);var kr__default=/*#__PURE__*/_interopDefault(kr);function Zr(l){Ze=l;}async function Lt(){if(Ze)try{let l=await Ze.findOne({collection:"_globals_system",where:{}});if(l){de={appSecret:l.appSecret||null,encryptionKey:l.encryptionKey||null,sessionConfig:l.sessionMaxAge||l.maxSessionsPerUser?{maxAge:(l.sessionMaxAge||7)*24*60*60*1e3,maxSessionsPerUser:l.maxSessionsPerUser||3}:null};return}}catch{}de={appSecret:process.env.APP_SECRET||"development-secret-key",encryptionKey:null,sessionConfig:null};}function mr(){return de?.appSecret?de.appSecret:process.env.APP_SECRET||"development-secret-key"}function Qr(){if(de?.encryptionKey)return de.encryptionKey;let l=mr();return pr__default.default.createHash("sha256").update(l).digest("hex")}function _t(){return de?.sessionConfig?de.sessionConfig:{maxAge:10080*60*1e3,maxSessionsPerUser:3}}var Ze,de,Qe=chunkAHSFSERC_cjs.a(()=>{Ze=null,de=null;});var Nt={};chunkAHSFSERC_cjs.b(Nt,{SESSION_CONFIG:()=>ne,clearSessionCookie:()=>st,createSession:()=>nt,deleteSession:()=>ve,getClientIp:()=>tt,getCurrentUser:()=>ee,getSession:()=>fe,getSessionIdFromRequest:()=>se,getUserSessions:()=>Se,invalidateAllUserSessions:()=>br,refreshSession:()=>_e,setSessionCookie:()=>rt,updateSessionName:()=>it,validateSession:()=>Le});async function le(){return $e||($e=unstorage.createStorage({driver:hr__default.default({base:".astro/sessions"})}),$e)}function yr(){return pr__default.default.randomUUID()}function Ft(l){let e="Unknown",t="Unknown",s="Unknown";return l.includes("Firefox")?e="Firefox":l.includes("Edg/")?e="Edge":l.includes("Chrome")?e="Chrome":l.includes("Safari")&&!l.includes("Chrome")&&(e="Safari"),l.includes("iPhone")?(t="iPhone",s="iOS"):l.includes("iPad")?(t="iPad",s="iOS"):l.includes("Mac")?(t="MacBook",s="macOS"):l.includes("Windows")?(t="Windows PC",s="Windows"):l.includes("Linux")?(t="Linux PC",s="Linux"):l.includes("Android")&&(t="Android Phone",s="Android"),{browser:e,device:t,platform:s}}function wr(l){if(!l?.userAgent)return "Session";let{browser:e,device:t}=Ft(l.userAgent);return `${t} - ${e}`}function se(l){let e=l.headers.get("Cookie");return e&&Object.fromEntries(e.split("; ").map(s=>s.split("=")))[et]||null}function tt(l){let e=l.headers.get("x-forwarded-for");return e?e.split(",")[0].trim():l.headers.get("x-real-ip")||"unknown"}function rt(l,e){let s=process.env.NODE_ENV==="production"?"Secure; ":"",o=new Headers(l.headers);return o.append("Set-Cookie",`${et}=${e}; HttpOnly; Path=/; Max-Age=${ne.absoluteMaxAge/1e3}; SameSite=Strict; ${s}`),new Response(l.body,{status:l.status,statusText:l.statusText,headers:o})}function st(l){let t=process.env.NODE_ENV==="production"?"Secure; ":"",s=new Headers(l.headers);return s.append("Set-Cookie",`${et}=; HttpOnly; Path=/; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=Strict; ${t}`),new Response(l.body,{status:l.status,statusText:l.statusText,headers:s})}async function Ce(l){return await(await le()).getItem(`user:${l}`)||[]}async function at(l,e){let t=await le();e.length>0?await t.setItem(`user:${l}`,e):await t.removeItem(`user:${l}`);}async function nt(l,e){let t=await le(),s=await Ce(l.id);for(;s.length>=ne.maxSessionsPerUser;){let I=s.shift();I&&await t.removeItem(`session:${I}`);}let o=yr(),c=Date.now(),d=e?.headers.get("user-agent"),u=e?tt(e):"unknown",f=d?{userAgent:d,ip:u,...Ft(d)}:{ip:u},h={id:o,userId:l.id,email:l.email,role:l.role,tenantId:l.tenantId,permissions:l.permissions,createdAt:c,expiresAt:c+ne.absoluteMaxAge,lastActivityAt:c,deviceInfo:f,sessionName:wr(f)};return await t.setItem(`session:${o}`,h,{ttl:Math.floor(ne.absoluteMaxAge/1e3)}),s.push(o),await at(l.id,s),o}async function fe(l){return await(await le()).getItem(`session:${l}`)||null}async function Le(l){let e=await fe(l);return e?e.expiresAt<Date.now()?(await ve(l),{valid:false,reason:"Session expired"}):{valid:true}:{valid:false,reason:"Session not found"}}async function _e(l,e){let t=await le(),s=await fe(l);if(!s)return null;let o=Date.now(),c=s.expiresAt-o,d=s.deviceInfo;if(e){let h=tt(e);h!==s.deviceInfo?.ip&&(d={...s.deviceInfo,ip:h});}let u={...s,lastActivityAt:o,expiresAt:c<ne.refreshThreshold?o+ne.absoluteMaxAge:s.expiresAt,deviceInfo:d},f=c<ne.refreshThreshold?ne.absoluteMaxAge:void 0;return await t.setItem(`session:${l}`,u,f?{ttl:Math.floor(f/1e3)}:void 0),u}async function ve(l){let e=await le(),t=await fe(l);if(t){let o=(await Ce(t.userId)).filter(c=>c!==l);await at(t.userId,o);}await e.removeItem(`session:${l}`),await e.removeItem(`activity:${l}`);}async function br(l){let e=await Ce(l),t=await le();for(let s of e)await t.removeItem(`session:${s}`),await t.removeItem(`activity:${s}`);await at(l,[]);}async function Se(l,e){let t=await Ce(l),s=[];for(let o of t){let c=await fe(o);c&&s.push({id:c.id,sessionName:c.sessionName||"Session",deviceInfo:c.deviceInfo,createdAt:c.createdAt,lastActivityAt:c.lastActivityAt,currentSession:c.id===e});}return s.sort((o,c)=>c.lastActivityAt-o.lastActivityAt),s}async function it(l,e){let t=await fe(l);return t?(await(await le()).setItem(`session:${l}`,{...t,sessionName:e}),true):false}async function ee(l){let e=se(l);if(!e||!(await Le(e)).valid)return null;let s=await fe(e);return s?(await _e(e,l),s):null}var Ot,ne,et,$e,Oe=chunkAHSFSERC_cjs.a(()=>{Qe();Ot=_t(),ne={absoluteMaxAge:Ot.maxAge,maxSessionsPerUser:Ot.maxSessionsPerUser,refreshThreshold:300*1e3,activityDebounce:30*1e3,pollInterval:30*1e3},et="kyro-session",$e=null;});function ge(l,e){for(let t of l){if(t.name===e)return t;if(t.type==="group"||t.type==="array"){let s=ge(t.fields||[],e);if(s)return s}if(t.type==="blocks")for(let s of t.blocks||[]){let o=ge(s.fields||[],e);if(o)return o}if(t.type==="tabs")for(let s of t.tabs||[]){let o=ge(s.fields||[],e);if(o)return o}if(t.type==="collapsible"||t.type==="row"){let s=ge(t.fields||[],e);if(s)return s}}return null}Oe();function Bt(l){let{db:t,userLookup:s}=l;return async function(c){let d=chunkNY47CFVP_cjs.f(c);if(d&&t){let f=await chunkNY47CFVP_cjs.e(d,t,s);if(f.valid&&f.user)return {user:f.user,tenantContext:Mt(f.user),apiKeyContext:chunkNY47CFVP_cjs.g(f),status:200,authType:"apikey"};if(f.error)return {status:401,error:f.error}}let u=se(c);if(u)try{let f=await Le(u);if(!f.valid)return {status:401,error:f.reason||"Session invalid"};let h=await ee(c);if(h){let I=s?await s(h.userId):null;if(I)return {user:I,tenantContext:Mt(I),status:200,authType:"session"}}}catch(f){console.error("Session validation error:",f);}return {status:401,error:"Authentication required"}}}function Mt(l){return {tenantId:l.tenantId||"default",userId:l.id||"anonymous",role:l.role||"guest",roles:[l.role||"guest"],permissions:[],isSuperAdmin:l.role==="super_admin"}}Qe();var Fe=class{storage=new Map;userStorage=new Map;limits;userLimits;constructor(e,t){this.limits={...Ar,...e},this.userLimits=t||{"user:api":{window:6e4,max:500},"user:write":{window:36e5,max:100}};}getKey(e,t){return `${e}:${t}`}getUserKey(e,t,s){return `user:${e}:${t}:${s}`}cleanupOldEntries(e,t){let o=Date.now()-t;for(;e.length>0&&e[0].timestamp<o;)e.shift();}async check(e,t){let s=this.limits[e]||this.limits["api:general"],o=this.getKey(e,t),c=this.storage.get(o);c||(c=[],this.storage.set(o,c)),this.cleanupOldEntries(c,s.window);let d=Date.now(),u=c.reduce((f,h)=>f+h.count,0);if(c.push({timestamp:d,count:1}),u>=s.max){let h=c.reduce((I,w)=>I.timestamp<w.timestamp?I:w,c[0]).timestamp+s.window;return {allowed:false,remaining:0,resetAt:h,retryAfter:Math.ceil((h-d)/1e3)}}return {allowed:true,remaining:s.max-u-1,resetAt:d+s.window}}async checkUser(e,t,s){let o=this.userLimits[e]||this.userLimits["user:api"],c=this.userStorage.get(t),d=[];c?d=c.get(this.getKey(e,s))||[]:(this.userStorage.has(t)||this.userStorage.set(t,new Map),this.userStorage.get(t).set(this.getKey(e,s),d)),this.cleanupOldEntries(d,o.window);let u=Date.now(),f=d.reduce((h,I)=>h+I.count,0);if(d.push({timestamp:u,count:1}),f>=o.max){let I=d.reduce((w,k)=>w.timestamp<k.timestamp?w:k,d[0]).timestamp+o.window;return {allowed:false,remaining:0,resetAt:I,retryAfter:Math.ceil((I-u)/1e3)}}return {allowed:true,remaining:o.max-f-1,resetAt:u+o.window}}async reset(e,t){let s=this.getKey(e,t);this.storage.delete(s);}async resetUser(e,t,s){let o=this.userStorage.get(t);if(o){let c=this.getKey(e,s);o.delete(c);}}async getStatus(e,t){let s=this.limits[e]||this.limits["api:general"],o=this.getKey(e,t),c=this.storage.get(o);c||(c=[],this.storage.set(o,c)),this.cleanupOldEntries(c,s.window);let d=Date.now(),u=c.reduce((f,h)=>f+h.count,0);return {count:u,limit:s.max,remaining:Math.max(0,s.max-u),resetAt:d+s.window}}setLimit(e,t){this.limits[e]=t;}setUserLimit(e,t){this.userLimits[e]=t;}},Ar={"auth:login":{window:9e5,max:5},"auth:register":{window:36e5,max:3},"auth:forgot":{window:36e5,max:3},"auth:reset":{window:36e5,max:5},"auth:verify":{window:36e5,max:5},"api:general":{window:6e4,max:100},"api:authenticated":{window:6e4,max:200}};var ot={retentionDays:30};var Kt=class{redis;prefix;retentionDays;constructor(e,t=30,s="kyro:audit:"){this.redis=e,this.prefix=s,this.retentionDays=t;}async log(e){let t=pr.randomBytes(16).toString("hex"),s=new Date,o={...e,id:t,timestamp:s},c=this.getKeyForDate(s),d=`${this.prefix}log:${t}`;await this.redis.hset(d,this.serializeLog(o)),await this.redis.expire(d,this.retentionDays*24*60*60+3600),await this.redis.zadd(c,s.getTime(),t),await this.redis.expire(c,this.retentionDays*24*60*60+3600);let u=e.userId?`${this.prefix}user:${e.userId}`:null;return u&&(await this.redis.zadd(u,s.getTime(),t),await this.redis.expire(u,this.retentionDays*24*60*60+3600)),t}async get(e){let t=`${this.prefix}log:${e}`,s=await this.redis.hgetall(t);return !s||Object.keys(s).length===0?null:this.deserializeLog(s)}async query(e={}){let{limit:t=50,offset:s=0}=e,o=[];if(e.userId)o.push(`${this.prefix}user:${e.userId}`);else if(e.startDate||e.endDate)o=this.getKeysForDateRange(e.startDate,e.endDate);else {let f=new Date;o=this.getKeysForDateRange(new Date(f.getTime()-this.retentionDays*24*60*60*1e3),f);}let c=[];for(let f of o){let h=await this.redis.zrange(f,0,-1,"WITHSCORES");for(let I=0;I<h.length;I+=2)c.push([h[I],parseInt(h[I+1],10)]);}c.sort((f,h)=>h[1]-f[1]);let d=c.length;c=c.slice(s,s+t);let u=[];for(let[f]of c){let h=await this.get(f);h&&this.matchesFilter(h,e)&&u.push(h);}return {logs:u,total:d}}async getRecent(e=50){let t=[],s=new Date,o=this.getKeysForDateRange(new Date(s.getTime()-10080*60*1e3),s),c=[];for(let d of o){let u=await this.redis.zrange(d,0,-1,"WITHSCORES");for(let f=0;f<u.length;f+=2)c.push([u[f],parseInt(u[f+1],10)]);}c.sort((d,u)=>u[1]-d[1]);for(let[d]of c.slice(0,e)){let u=await this.get(d);u&&t.push(u);}return t}async getUserActivity(e,t=50){let s=`${this.prefix}user:${e}`,o=await this.redis.zrange(s,0,t-1),c=[];for(let d of o){let u=await this.get(d);u&&c.push(u);}return c}async getStats(e,t){let s=this.getKeysForDateRange(e||new Date(Date.now()-2592e6),t||new Date),o={},c=0,d=0,u=0,f=new Set;for(let h of s){let I=await this.redis.zrange(h,0,-1);for(let w of I){let k=await this.get(w);k&&(c++,o[k.action]=(o[k.action]||0)+1,k.success&&u++,k.action==="login_failed"&&d++,k.userId&&f.add(k.userId));}}return {totalEvents:c,byAction:o,successRate:c>0?u/c:1,failedLogins:d,uniqueUsers:f}}async cleanup(){let e=Date.now()-this.retentionDays*24*60*60*1e3,t=await this.redis.keys(`${this.prefix}date:*`),s=0;for(let o of t){let c=await this.redis.zrangebyscore(o,0,e);for(let d of c)await this.redis.del(`${this.prefix}log:${d}`),s++;await this.redis.zremrangebyscore(o,0,e);}return s}getKeyForDate(e){let t=e.getFullYear(),s=String(e.getMonth()+1).padStart(2,"0"),o=String(e.getDate()).padStart(2,"0");return `${this.prefix}date:${t}-${s}-${o}`}getKeysForDateRange(e,t){let s=[],o=e||new Date(Date.now()-this.retentionDays*24*60*60*1e3),c=t||new Date,d=new Date(o);for(;d<=c;)s.push(this.getKeyForDate(d)),d.setDate(d.getDate()+1);return s}matchesFilter(e,t){return !(t.action&&!(Array.isArray(t.action)?t.action:[t.action]).includes(e.action)||t.resource&&e.resource!==t.resource||t.resourceId&&e.resourceId!==t.resourceId||t.success!==void 0&&e.success!==t.success)}serializeLog(e){let t={id:e.id,timestamp:new Date(e.timestamp).toISOString(),action:e.action,resource:e.resource,success:e.success?"1":"0"};return e.userId&&(t.userId=e.userId),e.userEmail&&(t.userEmail=e.userEmail),e.role&&(t.role=e.role),e.resourceId&&(t.resourceId=e.resourceId),e.ipAddress&&(t.ipAddress=e.ipAddress),e.userAgent&&(t.userAgent=e.userAgent),e.error&&(t.error=e.error),e.changes&&(t.changes=JSON.stringify(e.changes)),e.metadata&&(t.metadata=JSON.stringify(e.metadata)),t}deserializeLog(e){return {id:e.id,timestamp:new Date(e.timestamp),action:e.action,userId:e.userId,userEmail:e.userEmail,role:e.role,resource:e.resource,resourceId:e.resourceId,ipAddress:e.ipAddress,userAgent:e.userAgent,success:e.success==="1",error:e.error,changes:e.changes?JSON.parse(e.changes):void 0,metadata:e.metadata?JSON.parse(e.metadata):void 0}}};function ms(l){return {ipAddress:l.headers.get("x-forwarded-for")?.split(",")[0]?.trim()||l.headers.get("x-real-ip")||"unknown",userAgent:l.headers.get("user-agent")||"unknown"}}var zt=class{logs=[];retentionDays;constructor(e=ot.retentionDays){this.retentionDays=e;}async log(e){let t=pr.randomBytes(16).toString("hex"),o={...e,id:t,timestamp:new Date};return this.logs.push(o),this.cleanupOldLogs(),t}async get(e){return this.logs.find(t=>t.id===e)||null}async query(e={}){let{limit:t=50,offset:s=0}=e,o=[...this.logs];if(e.userId&&(o=o.filter(h=>h.userId===e.userId)),e.action){let h=Array.isArray(e.action)?e.action:[e.action];o=o.filter(I=>h.includes(I.action));}e.resource&&(o=o.filter(h=>h.resource===e.resource)),e.resourceId&&(o=o.filter(h=>h.resourceId===e.resourceId)),e.success!==void 0&&(o=o.filter(h=>h.success===e.success));let c=e.startDate,d=e.endDate;c!==void 0&&(o=o.filter(h=>h.timestamp>=c)),d!==void 0&&(o=o.filter(h=>h.timestamp<=d)),o.sort((h,I)=>I.timestamp.getTime()-h.timestamp.getTime());let u=o.length;return {logs:o.slice(s,s+t),total:u}}async getRecent(e=50){let t=new Date(Date.now()-6048e5);return this.logs.filter(o=>o.timestamp>=t).sort((o,c)=>c.timestamp.getTime()-o.timestamp.getTime()).slice(0,e)}async getUserActivity(e,t=50){return this.logs.filter(o=>o.userId===e).sort((o,c)=>c.timestamp.getTime()-o.timestamp.getTime()).slice(0,t)}async getStats(e,t){let s=e||new Date(Date.now()-2592e6),o=t||new Date,c=this.logs.filter(w=>w.timestamp>=s&&w.timestamp<=o),d={},u=0,f=0,h=0,I=new Set;for(let w of c){u++;let k=w.action;d[k]=(d[k]||0)+1,w.success&&h++,w.action==="login_failed"&&f++,w.userId&&I.add(w.userId);}return {totalEvents:u,byAction:d,successRate:u>0?h/u:1,failedLogins:f,uniqueUsers:I}}async cleanup(){let e=new Date(Date.now()-this.retentionDays*24*60*60*1e3),t=this.logs.length;return this.logs=this.logs.filter(s=>s.timestamp>=e),t-this.logs.length}cleanupOldLogs(){let e=new Date(Date.now()-this.retentionDays*24*60*60*1e3);this.logs.length;this.logs=this.logs.filter(s=>s.timestamp>=e);}};Oe();var Ne=class{authAdapter;email;passwordPolicy;lockout;rateLimiter;auditLogger;baseUrl;emailVerificationRequired;constructor(e){this.authAdapter=e.redis,this.email=e.email,this.passwordPolicy=e.passwordPolicy||new chunkGCQTSPX6_cjs.c,this.lockout=e.lockout,this.rateLimiter=e.rateLimiter,this.auditLogger=e.auditLogger,this.baseUrl=e.baseUrl||"http://localhost:3000",this.emailVerificationRequired=e.emailVerificationRequired??true;}async register(e){let{ipAddress:t,userAgent:s}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let o=await this.rateLimiter.check("auth:register",t);if(!o.allowed)return this.rateLimitResponse(o)}try{let o=await e.json();if(!o.email||!o.password)return this.errorResponse("Email and password are required",400);if(o.password!==o.confirmPassword)return this.errorResponse("Passwords do not match",400);let c=this.passwordPolicy.validate(o.password);if(!c.valid)return this.errorResponse(c.errors.join(". "),400);if(await this.authAdapter.findUserByEmail(o.email))return this.errorResponse("Email already registered",400);let u=await this.authAdapter.createUser({email:o.email,password:o.password,role:o.role||"customer",tenantId:o.tenantId});if(this.emailVerificationRequired&&this.email){let f=pr.randomBytes(32).toString("hex"),h=`${this.baseUrl}/api/auth/verify?token=${f}`;await this.authAdapter.createSession(u.id,{ipAddress:t,userAgent:s});let I=this.email.getTemplates().verifyEmail(h,o.email);await this.email.send({to:o.email,...I});}return this.auditLogger&&await this.auditLogger.log({action:"register",userId:u.id,userEmail:u.email,resource:"auth",ipAddress:t,userAgent:s,success:!0}),this.jsonResponse({success:!0,message:"Registration successful",user:this.sanitizeUser(u),requiresVerification:this.emailVerificationRequired&&!!this.email},201)}catch(o){return console.error("[AuthRoutes.register] Registration error:",o),this.errorResponse("Registration failed",500)}}async login(e){let{ipAddress:t,userAgent:s}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let o=await this.rateLimiter.check("auth:login",t);if(!o.allowed)return this.rateLimitResponse(o)}try{let o=await e.json();if(!o.email||!o.password)return this.errorResponse("Email and password are required",400);let c=await this.authAdapter.findUserByEmail(o.email);if(!c)return await this.recordFailedLogin(t,s),this.errorResponse("Invalid credentials",401);if(c.locked)return this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:c.id,userEmail:c.email,resource:"auth",ipAddress:t,userAgent:s,success:!1,error:"Account locked"}),this.errorResponse("Account locked. Contact an administrator.",403);if(this.lockout){let I=await this.lockout.checkLockout(c.id);if(I.locked)return this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:c.id,userEmail:c.email,resource:"auth",ipAddress:t,userAgent:s,success:!1,error:"Account locked"}),this.errorResponse(`Account locked. Try again in ${Math.ceil((I.lockedUntil.getTime()-Date.now())/6e4)} minutes`,423)}if(!await this.authAdapter.verifyPassword(o.email,o.password))return await this.recordFailedLogin(t,s,c.id,c.email),this.errorResponse("Invalid credentials",401);this.lockout&&await this.lockout.resetAttempts(c.id),this.auditLogger&&await this.auditLogger.log({action:"login",userId:c.id,userEmail:c.email,role:c.role,resource:"auth",ipAddress:t,userAgent:s,success:!0}),await this.authAdapter.updateUser(c.id,{lastLogin:new Date().toISOString()});let u=await nt({id:c.id,email:c.email,role:c.role,tenantId:c.tenantId}),f={success:!0,user:this.sanitizeUser(c)},h=this.jsonResponse(f);return rt(h,u)}catch(o){return console.error("[Auth] Login error:",o),this.errorResponse("Login failed",500)}}async logout(e){let t=se(e);if(!t)return this.errorResponse("No session to logout",401);let{ipAddress:s,userAgent:o}=chunkHVXO3OFB_cjs.a(e);try{let c=await ee(e);c&&(await ve(t),this.auditLogger&&await this.auditLogger.log({action:"logout",userId:c.userId,userEmail:c.email,resource:"auth",ipAddress:s,userAgent:o,success:!0}));let d=this.jsonResponse({success:!0,message:"Logged out successfully"});return st(d)}catch{return this.errorResponse("Logout failed",500)}}async refresh(e){try{let t=se(e);if(!t)return this.errorResponse("Not authenticated",401);let s=await _e(t,e);return s?this.jsonResponse({success:!0,expiresAt:s.expiresAt}):this.errorResponse("Session not found",404)}catch(t){return console.error("[Auth] Session refresh error:",t),this.errorResponse("Session refresh failed",500)}}async me(e){let t=await ee(e);return t?this.jsonResponse({success:true,user:{id:t.userId,email:t.email,role:t.role,tenantId:t.tenantId}}):this.errorResponse("Not authenticated",401)}async changePassword(e){let t=await ee(e);if(!t)return this.errorResponse("Not authenticated",401);let{ipAddress:s,userAgent:o}=chunkHVXO3OFB_cjs.a(e);try{let c=await e.json(),{currentPassword:d,newPassword:u,confirmPassword:f}=c;if(!d||!u)return this.errorResponse("Current and new password required",400);if(u!==f)return this.errorResponse("Passwords do not match",400);let h=this.passwordPolicy.validate(u);if(!h.valid)return this.errorResponse(h.errors.join(". "),400);let I=await this.authAdapter.findUserById(t.userId);if(!I)return this.errorResponse("User not found",404);if(!(I.passwordHash?await this.authAdapter.verifyPassword(d,I.passwordHash):!1))return this.errorResponse("Current password is incorrect",401);let k=await this.authAdapter.getPasswordHistory?.(I.id,5);if(await this.authAdapter.isPasswordInHistory?.(u,I.id,5))return this.errorResponse("Password was recently used. Please choose a different password",400);let P=await this.authAdapter.hashPassword(u);if(I.passwordHash&&await this.authAdapter.addPasswordToHistory?.(I.id,I.passwordHash),await this.authAdapter.updateUser(I.id,{passwordHash:P}),await this.authAdapter.deleteUserSessions(I.id),this.email&&this.email.getTemplates){let D=this.email.getTemplates().passwordChanged(I.email);await this.email.send({to:I.email,...D});}return this.auditLogger&&await this.auditLogger.log({action:"password_change",userId:I.id,userEmail:I.email,resource:"auth",ipAddress:s,userAgent:o,success:!0}),this.jsonResponse({success:!0,message:"Password changed successfully"})}catch{return this.errorResponse("Password change failed",500)}}async forgotPassword(e){let{ipAddress:t,userAgent:s}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let o=await this.rateLimiter.check("auth:forgot",t);if(!o.allowed)return this.rateLimitResponse(o)}try{let o=await e.json(),{email:c}=o;if(!c)return this.errorResponse("Email required",400);let d=await this.authAdapter.findUserByEmail(c);if(!d)return this.jsonResponse({success:!0,message:"If the email exists, a reset link has been sent"});if(this.email){let u=pr.randomBytes(32).toString("hex"),f=`${this.baseUrl}/api/auth/reset-password?token=${u}`,h=this.email.getTemplates().resetPassword(f,d.email);await this.email.send({to:d.email,...h});}return this.auditLogger&&await this.auditLogger.log({action:"password_reset",userId:d.id,userEmail:d.email,resource:"auth",ipAddress:t,userAgent:s,success:!0}),this.jsonResponse({success:!0,message:"If the email exists, a reset link has been sent"})}catch{return this.errorResponse("Password reset request failed",500)}}async verifyEmail(e){if(!new URL(e.url).searchParams.get("token"))return this.errorResponse("Verification token required",400);try{return this.jsonResponse({success:!0,message:"Email verified"})}catch{return this.errorResponse("Email verification failed",500)}}async recordFailedLogin(e,t,s,o){this.lockout&&await this.lockout.recordFailedAttempt(s||e),this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:s,userEmail:o,resource:"auth",ipAddress:e,userAgent:t,success:false,error:"Invalid credentials"});}sanitizeUser(e){let{passwordHash:t,...s}=e;return s}jsonResponse(e,t=200){return new Response(JSON.stringify(e),{status:t,headers:{"Content-Type":"application/json","Cache-Control":"no-store, no-cache, must-revalidate, max-age=0"}})}async listSessions(e){let t=await ee(e);if(!t)return this.errorResponse("Not authenticated",401);try{let s=await Se(t.userId,se(e)??void 0);return this.jsonResponse({sessions:s})}catch(s){return console.error("[AuthRoutes.listSessions] Error:",s),this.errorResponse("Failed to list sessions",500)}}async revokeSession(e,t){let s=await ee(e);if(!s)return this.errorResponse("Not authenticated",401);try{let c=(await Se(s.userId)).find(d=>d.id===t);return c?c.currentSession?this.errorResponse("Cannot revoke current session",400):(await ve(t),this.jsonResponse({success:!0,message:"Session revoked"})):this.errorResponse("Session not found",404)}catch(o){return console.error("[AuthRoutes.revokeSession] Error:",o),this.errorResponse("Failed to revoke session",500)}}async revokeOtherSessions(e){let t=await ee(e);if(!t)return this.errorResponse("Not authenticated",401);try{let s=await Se(t.userId),o=se(e);for(let c of s)c.currentSession||await ve(c.id);return this.jsonResponse({success:!0,message:"Other sessions revoked"})}catch(s){return console.error("[AuthRoutes.revokeOtherSessions] Error:",s),this.errorResponse("Failed to revoke sessions",500)}}async renameSession(e,t){let s=await ee(e);if(!s)return this.errorResponse("Not authenticated",401);try{if(!(await Se(s.userId)).find(f=>f.id===t))return this.errorResponse("Session not found",404);let d=await e.json(),{name:u}=d;return !u||typeof u!="string"||u.trim().length===0?this.errorResponse("Invalid session name",400):(await it(t,u.trim()),this.jsonResponse({success:!0,message:"Session renamed"}))}catch(o){return console.error("[AuthRoutes.renameSession] Error:",o),this.errorResponse("Failed to rename session",500)}}async refreshSession(e){let t=se(e);if(!t)return this.errorResponse("No session",401);try{let s=await(Oe(),chunkAHSFSERC_cjs.c(Nt)).refreshSession(t,e);return s?this.jsonResponse({success:!0,expiresAt:s.expiresAt}):this.errorResponse("Session not found",404)}catch(s){return console.error("[AuthRoutes.refreshSession] Error:",s),this.errorResponse("Failed to refresh session",500)}}errorResponse(e,t){return new Response(JSON.stringify({success:false,error:e}),{status:t,headers:{"Content-Type":"application/json"}})}async rateLimitResponse(e){return new Response(JSON.stringify({success:false,error:"Too many requests",retryAfter:e.retryAfter}),{status:429,headers:{"Content-Type":"application/json","Retry-After":String(e.retryAfter||60)}})}};function he(l){let{uploadDir:e=Ke.join(kr__default.default.cwd(),"public","uploads"),baseUrl:t="/uploads"}=l;async function s(d){fs.existsSync(d)||await promises.mkdir(d,{recursive:true});}function o(d){let u=Ke.extname(d).toLowerCase();return {".jpg":"image/jpeg",".jpeg":"image/jpeg",".png":"image/png",".gif":"image/gif",".webp":"image/webp",".avif":"image/avif",".svg":"image/svg+xml",".mp4":"video/mp4",".webm":"video/webm",".mov":"video/quicktime",".avi":"video/x-msvideo",".mp3":"audio/mpeg",".wav":"audio/wav",".ogg":"audio/ogg",".pdf":"application/pdf",".doc":"application/msword",".docx":"application/vnd.openxmlformats-officedocument.wordprocessingml.document",".xls":"application/vnd.ms-excel",".xlsx":"application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",".zip":"application/zip",".tar":"application/x-tar",".gz":"application/gzip",".rar":"application/vnd.rar",".7z":"application/x-7z-compressed"}[u]||"application/octet-stream"}async function c(d){try{let u=d.toString("hex",0,8);if(u.startsWith("89504e47")){let f=d.readUInt32BE(16),h=d.readUInt32BE(20);return {width:f,height:h}}if(u.startsWith("ffd8")){let f=2;for(;f<d.length&&d[f]===255;){let h=d[f+1];if(h===192||h===194){let I=d.readUInt16BE(f+5);return {width:d.readUInt16BE(f+7),height:I}}f+=2+d.readUInt16BE(f+2);}}}catch{}return {}}return ce({name:"local",displayName:"Local Storage",supportsDynamicResize:true,async upload(d,u){await s(e);let f=Buffer.from(await d.arrayBuffer()),h=pr.createHash("md5").update(f).digest("hex"),I=Ke.extname(d.name),w=u?.filename||`${h}${I}`,k=u?.folder||"",L=k?Ke.join(e,k):e;await s(L);let P=Ke.join(L,w);await promises.writeFile(P,f);let D=d.type.startsWith("image/")?await c(f):{},z=t||"/uploads",V=k?`/${k}/${w}`:`/${w}`,ie=z+V;return {id:h,filename:w,originalName:d.name,mimeType:d.type||o(d.name),size:f.length,url:ie,thumbnailUrl:d.type.startsWith("image/")?ie:void 0,folder:k||void 0,provider:"local",metadata:{...D,...u?.metadata},createdAt:new Date().toISOString()}},async uploadFromUrl(d,u){let f=await fetch(d);if(!f.ok)throw new Error(`Failed to fetch file: ${f.statusText}`);let h=await f.blob(),I=f.headers.get("content-disposition"),w=u?.filename;if(!w&&I){let L=I.match(/filename[^;=\n]*=((['"]).*?\2|[^;\n]*)/);L&&(w=L[1].replace(/['"]/g,""));}w||(w=Ke.basename(new URL(d).pathname));let k=new File([h],w,{type:h.type||o(w)});return this.upload(k,u)},async delete(d){let u=Ke.join(e,d.replace(t+"/",""));try{await promises.unlink(u);}catch{}},async rename(d,u){let f=Ke.join(e,d.replace(t+"/","")),h=Ke.join(e,u);return await promises.rename(f,h),`${t}/${u}`},async list(d){let u=d?Ke.join(e,d):e;if(!fs.existsSync(u))return [];let f=[],h=await promises.readdir(u,{withFileTypes:true});for(let I of h)if(I.isFile()){let w=Ke.join(u,I.name),k=await promises.stat(w),L=`${t}${d?`/${d}`:""}/${I.name}`;f.push({id:pr.createHash("md5").update(I.name).digest("hex"),filename:I.name,originalName:I.name,mimeType:o(I.name),size:k.size,url:L,provider:"local",createdAt:k.birthtime.toISOString()});}return f},async exists(d){let u=Ke.join(e,d.replace(t+"/",""));return fs.existsSync(u)},async createFolder(d){let u=Ke.join(e,d);await promises.mkdir(u,{recursive:true});},async deleteFolder(d){let u=Ke.join(e,d);if(fs.existsSync(u)){let{rm:f}=await import('fs/promises');await f(u,{recursive:true,force:true});}}})}function dt(l){let e=(t,s)=>{if(!l.signKey)return t;let o=pr.createHmac("sha256",l.signKey).update(t+s.toString()).digest("hex");return s.set("s",o),t};return {name:"imgix",displayName:"Imgix",supportsDynamicResize:true,async upload(t,s){throw new Error("Imgix is a transformation service. Use another provider for uploads.")},async uploadFromUrl(t,s){let o=s?.filename||t.split("/").pop()||"file",c=await fetch(t);if(!c.ok)throw new Error(`Failed to fetch: ${c.statusText}`);let d=await c.blob();new File([d],o,{type:d.type});return {id:Buffer.from(t).toString("base64").slice(0,20),filename:o,originalName:o,mimeType:d.type,size:d.size,url:this.getImageUrl(t),thumbnailUrl:this.getImageUrl(t,{width:200,height:200,fit:"crop"}),provider:"imgix",createdAt:new Date().toISOString()}},async delete(t){},async rename(t,s){return `https://${l.domain}/${s}`},getImageUrl(t,s){let o=new URL(t),c=new URLSearchParams(o.search);l.defaultParameters&&Object.entries(l.defaultParameters).forEach(([u,f])=>{c.has(u)||c.set(u,f);}),s&&(s.width&&c.set("w",String(s.width)),s.height&&c.set("h",String(s.height)),s.quality&&c.set("q",String(s.quality)),s.format&&c.set("fm",s.format),s.fit&&c.set("fit",s.fit),s.blur&&c.set("blur",String(s.blur)),s.sharpen&&c.set("sharp",String(s.sharpen))),c.set("auto","compress,format");o.pathname+"?"+c.toString();return l.signKey&&(e(o.pathname+c.toString(),c)),`https://${l.domain}${o.pathname}${c.toString()?"?"+c.toString():""}`},async generateThumbnail(t){return this.getImageUrl(t.url,{width:200,height:200,fit:"crop"})},async list(){return []},async exists(t){try{return (await fetch(t,{method:"HEAD"})).ok}catch{return  false}},async createFolder(){},async deleteFolder(){}}}function Be(l,e){return e.cdnUrl?`${e.cdnUrl.replace(/\/$/,"")}/${l}`:`https://${e.storageZone}.b-cdn.net/${l}`}function lt(l){return l.cdnUrl?l.cdnUrl.replace(/\/$/,"")+"/":`https://${l.storageZone}.b-cdn.net/`}function ct(l){let e=`https://storage.bunnycdn.com/${l.storageZone}`,t=s=>`${l.prefix?`${l.prefix}/`:""}${s}`.replace(/\/+/g,"/");return ce({name:"bunny",displayName:"Bunny.net Storage",supportsDynamicResize:true,async upload(s,o){let c=t(`${o?.folder?`${o.folder}/`:""}${o?.filename||s.name}`),d=Buffer.from(await s.arrayBuffer()),u=await fetch(`${e}/${c}`,{method:"PUT",headers:{AccessKey:l.apiKey,"Content-Type":s.type},body:d});if(!u.ok){let f=await u.text();throw new Error(`Bunny.net upload failed: ${u.status} ${f}`)}return {id:Buffer.from(c).toString("base64url"),filename:o?.filename||s.name,originalName:s.name,mimeType:s.type,size:d.length,url:Be(c,l),thumbnailUrl:s.type.startsWith("image/")?Be(c,l):void 0,folder:o?.folder,provider:"bunny",metadata:o?.metadata,createdAt:new Date().toISOString()}},async delete(s){let o=s.replace(lt(l),""),c=await fetch(`${e}/${o}`,{method:"DELETE",headers:{AccessKey:l.apiKey}});if(!c.ok&&c.status!==404){let d=await c.text();throw new Error(`Bunny.net delete failed: ${c.status} ${d}`)}},async rename(s,o){let c=s.replace(lt(l),""),d=l.prefix?`${l.prefix}/${o}`:o,u=await fetch(`${e}/${c}`,{method:"GET",headers:{AccessKey:l.apiKey}});if(!u.ok)throw new Error("Bunny.net rename failed: could not read old file");let f=await u.arrayBuffer();return await fetch(`${e}/${d}`,{method:"PUT",headers:{AccessKey:l.apiKey,"Content-Type":u.headers.get("Content-Type")||"application/octet-stream"},body:f}),await this.delete(s),Be(d,l)},async list(s){let o=t(s||""),c=await fetch(`${e}/${o}`,{method:"GET",headers:{AccessKey:l.apiKey}});if(!c.ok){let u=await c.text();throw new Error(`Bunny.net list failed: ${c.status} ${u}`)}return (await c.json()).map(u=>({id:Buffer.from(u.ObjectName||"").toString("base64url"),filename:u.ObjectName?.split("/").pop()||"",originalName:u.ObjectName?.split("/").pop()||"",mimeType:"application/octet-stream",size:u.Length||0,url:Be(u.ObjectName||"",l),provider:"bunny",createdAt:u.LastChanged||new Date().toISOString()}))},async exists(s){let o=s.replace(lt(l),"");return (await fetch(`${e}/${o}`,{method:"HEAD",headers:{AccessKey:l.apiKey}})).ok},async createFolder(s){let o=t(`${s}/`);await fetch(`${e}/${o}`,{method:"PUT",headers:{AccessKey:l.apiKey,"Content-Length":"0"},body:""});},async deleteFolder(s){let o=t(`${s}/`);await fetch(`${e}/${o}`,{method:"DELETE",headers:{AccessKey:l.apiKey}});}})}var pt=class{providers=new Map;providerToPlugin=new Map;disabledPlugins=new Set;constructor(){this.registerLocal(),this.registerImgix(),this.registerBunny();}registerLocal(){this.register({type:"local",displayName:"Local Server",configKey:"local",configFields:[{name:"uploadDir",type:"text",label:"Upload Directory",defaultValue:"./public/uploads"},{name:"baseUrl",type:"text",label:"Base URL",defaultValue:"/uploads"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>{let t=e?.local||e,s=(t?.uploadDir||"").trim(),o;s?Ke__default.default.isAbsolute(s)?o=s:s.includes("/")||s.includes("\\")?o=Ke__default.default.resolve(process.cwd(),s):o=Ke__default.default.join(process.cwd(),"public",s):o=Ke__default.default.join(process.cwd(),"public","uploads");let c=(t?.baseUrl||"").trim(),d;return c?d=c.startsWith("/")?c:`/${c}`:d="/uploads",{uploadDir:o,baseUrl:d}},factory:e=>he(e)});}registerImgix(){this.register({type:"imgix",displayName:"Imgix",configKey:"imgix",configFields:[{name:"domain",type:"text",label:"Domain",required:true},{name:"signKey",type:"password",label:"Sign Key"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>e?.imgix||e,factory:e=>dt(e)});}registerBunny(){this.register({type:"bunny",displayName:"Bunny.net",configKey:"bunny",configFields:[{name:"storageZone",type:"text",label:"Storage Zone",required:true},{name:"apiKey",type:"password",label:"API Key",required:true},{name:"cdnUrl",type:"text",label:"CDN URL"},{name:"prefix",type:"text",label:"Path Prefix"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>e?.bunny||e,factory:e=>ct(e)});}register(e){if(this.providers.has(e.type)){console.warn(`[StorageRegistry] Provider "${e.type}" already registered, skipping`);return}e.pluginName&&this.providerToPlugin.set(e.type,e.pluginName),this.providers.set(e.type,e);}unregister(e){this.providers.delete(e),this.providerToPlugin.delete(e);}get(e){return this.providers.get(e)}getAll(){return Array.from(this.providers.values())}getAllAvailable(e){let t=this.getAll();return e?t.filter(s=>s.pluginName?e(s.pluginName):true):t}has(e){return this.providers.has(e)}async resolve(e,t){let s=this.providers.get(e);if(!s)throw new Error(`Unknown storage provider type: "${e}". Is the plugin that provides it enabled?`);if(s.pluginName&&this.disabledPlugins.has(s.pluginName))throw new Error(`Storage provider "${e}" is not available (plugin "${s.pluginName}" is disabled)`);let o=s.configKey||e,c=s.extractConfig(t,o);return s.factory(c)}async resolveWithConfig(e,t){let s=this.providers.get(e);if(!s)throw new Error(`Unknown storage provider type: "${e}". Is the plugin that provides it enabled?`);if(s.pluginName&&this.disabledPlugins.has(s.pluginName))throw new Error(`Storage provider "${e}" is not available (plugin "${s.pluginName}" is disabled)`);let o=s.extractRawConfig(t);return s.factory(o)}getProviderPluginName(e){return this.providerToPlugin.get(e)}getAllPluginNames(){return Array.from(new Set(this.providerToPlugin.values()))}setPluginEnabled(e,t){t?this.disabledPlugins.delete(e):this.disabledPlugins.add(e);}isPluginEnabled(e){return !this.disabledPlugins.has(e)}},ut=null;function mt(){return ut||(ut=new pt),ut}function Zt(l){if(!l)return "";if(l.startsWith("pub-"))return l;let e=l.match(/pub-[a-zA-Z0-9]+/i);return e?e[0]:""}function Cr(l,e){let t=l.startsWith("/")?l.slice(1):l;if(e.cdnUrl)return `${e.cdnUrl.replace(/\/$/,"")}/${t}`;switch(e.provider){case "r2":{let s=Zt(e.publicDevUrl);return s?`https://${s}.r2.dev/${t}`:`https://${e.bucket}.${e.accountId}.r2.cloudflarestorage.com/${t}`}case "gcs":return `https://storage.googleapis.com/${e.bucket}/${t}`;case "digitalocean":return `https://${e.bucket}.${e.region}.cdn.digitaloceanspaces.com/${t}`;case "backblaze":return `https://${e.bucket}.s3.backblazeb2.com/${t}`;case "wasabi":return `https://${e.bucket}.s3.wasabisys.com/${t}`;default:return `https://${e.bucket}.s3.${e.region}.amazonaws.com/${t}`}}function ft(l){if(l.cdnUrl)return l.cdnUrl.replace(/\/$/,"")+"/";switch(l.provider){case "r2":{let e=Zt(l.publicDevUrl);return e?`https://${e}.r2.dev/`:`https://${l.bucket}.${l.accountId}.r2.cloudflarestorage.com/`}case "gcs":return `https://storage.googleapis.com/${l.bucket}/`;case "digitalocean":return `https://${l.bucket}.${l.region}.cdn.digitaloceanspaces.com/`;case "backblaze":return `https://${l.bucket}.s3.backblazeb2.com/`;case "wasabi":return `https://${l.bucket}.s3.wasabisys.com/`;default:return `https://${l.bucket}.s3.${l.region}.amazonaws.com/`}}function Lr(l){switch(l){case "r2":return "Cloudflare R2";case "gcs":return "Google Cloud Storage";case "digitalocean":return "DigitalOcean Spaces";case "backblaze":return "Backblaze B2";case "wasabi":return "Wasabi";default:return "AWS S3"}}function _r(l){let e=new clientS3.S3Client({region:l.region||"auto",endpoint:l.endpoint,credentials:{accessKeyId:l.accessKeyId,secretAccessKey:l.secretAccessKey},forcePathStyle:true,tls:true,...l.provider==="r2"&&{requestHandler:new nodeHttpHandler.NodeHttpHandler}}),t=o=>`${l.prefix?`${l.prefix}/`:""}${o}`.replace(/\/+/g,"/"),s=o=>Cr(o,l);return ce({name:l.provider,displayName:Lr(l.provider),supportsDynamicResize:true,async upload(o,c){let d=t(`${c?.folder?`${c.folder}/`:""}${c?.filename||o.name}`),u=Buffer.from(await o.arrayBuffer());await e.send(new clientS3.PutObjectCommand({Bucket:l.bucket,Key:d,Body:u,ContentType:o.type,Metadata:c?.metadata}));let f=await e.send(new clientS3.HeadObjectCommand({Bucket:l.bucket,Key:d}));return {id:Buffer.from(d).toString("base64url"),filename:c?.filename||o.name,originalName:o.name,mimeType:o.type,size:u.length,url:s(d),thumbnailUrl:o.type.startsWith("image/")?s(d):void 0,folder:c?.folder,provider:l.provider,metadata:{...c?.metadata,etag:f.ETag},createdAt:new Date().toISOString()}},async delete(o){let c=o.replace(ft(l),"");await e.send(new clientS3.DeleteObjectCommand({Bucket:l.bucket,Key:c}));},async rename(o,c){let d=o.replace(ft(l),""),u=l.prefix?`${l.prefix}/${c}`:c;return await e.send(new clientS3.CopyObjectCommand({Bucket:l.bucket,CopySource:`${l.bucket}/${d}`,Key:u})),await e.send(new clientS3.DeleteObjectCommand({Bucket:l.bucket,Key:d})),s(u)},async list(o){let c=t(o||"");return ((await e.send(new clientS3.ListObjectsV2Command({Bucket:l.bucket,Prefix:c}))).Contents||[]).map(u=>({id:Buffer.from(u.Key||"").toString("base64url"),filename:u.Key?.split("/").pop()||"",originalName:u.Key?.split("/").pop()||"",mimeType:"application/octet-stream",size:u.Size||0,url:s(u.Key||""),provider:l.provider,createdAt:u.LastModified?.toISOString()||new Date().toISOString()}))},async exists(o){try{let c=o.replace(ft(l),"");return await e.send(new clientS3.HeadObjectCommand({Bucket:l.bucket,Key:c})),!0}catch{return  false}},async createFolder(o){let c=t(`${o}/`);await e.send(new clientS3.PutObjectCommand({Bucket:l.bucket,Key:c,Body:""}));},async deleteFolder(o){let c=t(`${o}/`),d;do{let u=await e.send(new clientS3.ListObjectsV2Command({Bucket:l.bucket,Prefix:c,ContinuationToken:d}));if(u.Contents?.length){let f=u.Contents.map(h=>({Key:h.Key}));await e.send(new clientS3.DeleteObjectsCommand({Bucket:l.bucket,Delete:{Objects:f}}));}d=u.IsTruncated?u.NextContinuationToken:void 0;}while(d);await e.send(new clientS3.DeleteObjectCommand({Bucket:l.bucket,Key:c}));}})}function Or(l){let e=()=>`https://api.cloudinary.com/v1_1/${l.cloudName}/upload`,t=async s=>{let o=await import('crypto'),c=Object.keys(s).sort().map(d=>`${d}=${s[d]}`).join("&");return o.createHash("sha256").update(c+l.apiSecret).digest("hex")};return {name:"cloudinary",displayName:"Cloudinary",supportsDynamicResize:true,async upload(s,o){let c=new FormData;if(c.append("file",s),l.uploadPreset)c.append("upload_preset",l.uploadPreset);else {let f=Math.round(Date.now()/1e3),h={timestamp:String(f)};(o?.folder||l.folder)&&(h.folder=o?.folder||l.folder||"");let I=await t(h);c.append("timestamp",String(f)),c.append("signature",I),c.append("api_key",l.apiKey);}(o?.folder||l.folder)&&c.append("folder",o?.folder||l.folder||"");let d=await fetch(e(),{method:"POST",body:c});if(!d.ok){let f=await d.json();throw new Error(`Cloudinary upload failed: ${f.error?.message||d.statusText}`)}let u=await d.json();return {id:u.public_id,filename:`${u.public_id}.${u.format}`,originalName:u.original_filename||s.name,mimeType:s.type||`image/${u.format}`,size:u.bytes,url:u.secure_url,thumbnailUrl:this.getImageUrl(u.secure_url,{width:200,height:200,fit:"crop"}),width:u.width,height:u.height,folder:o?.folder||l.folder,provider:"cloudinary",createdAt:new Date().toISOString()}},async uploadFromUrl(s,o){let c=new FormData;c.append("file",s),c.append("upload_preset","ml_default"),(o?.folder||l.folder)&&c.append("folder",o?.folder||l.folder||"");let d=await fetch(e(),{method:"POST",body:c});if(!d.ok)throw new Error("Cloudinary upload failed");let u=await d.json();return {id:u.public_id,filename:`${u.public_id}.${u.format}`,originalName:u.original_filename||s.split("/").pop()||"file",mimeType:`image/${u.format}`,size:u.bytes,url:u.secure_url,thumbnailUrl:this.getImageUrl(u.secure_url,{width:200,height:200,fit:"crop"}),width:u.width,height:u.height,provider:"cloudinary",createdAt:new Date().toISOString()}},async delete(s){try{let o=s.split("/image/upload/");if(o.length!==2){console.warn("[Cloudinary delete] Could not parse URL:",s);return}let c=o[1].replace(/^v\d+\//,"").replace(/\.[^.]+$/,""),d=Math.round(Date.now()/1e3),u={timestamp:String(d),public_id:c},f=Object.keys(u).sort().map(P=>`${P}=${u[P]}`).join("&"),I=(await import('crypto')).createHash("sha256").update(f+l.apiSecret).digest("hex"),w=`https://api.cloudinary.com/v1_1/${l.cloudName}/image/destroy`,k=new FormData;k.append("public_id",c),k.append("timestamp",String(d)),k.append("signature",I),k.append("api_key",l.apiKey);let L=await fetch(w,{method:"POST",body:k});if(!L.ok){let P=await L.json();console.warn("[Cloudinary delete] Failed:",P);}}catch(o){console.warn("[Cloudinary delete] Error:",o.message);}},async rename(s,o){let c="",d=o.replace(/\.[^.]+$/,""),u="";try{let f=s.split("/image/upload/");if(f.length!==2)return console.warn("[Cloudinary rename] Could not parse old URL:",s),s;let h=f[1],I=h.match(/^(v\d+)\//);c=I?I[1]:"";let w=h.replace(/^v\d+\//,"").replace(/\.[^.]+$/,""),k=w.split("/");u=k.length>1?k.slice(0,-1).join("/"):"";let L=o.replace(/\.[^.]+$/,"");d=u?`${u}/${L}`:L;let P=Math.round(Date.now()/1e3),D={from_public_id:w,to_public_id:d,timestamp:String(P)},z=Object.keys(D).sort().map(Z=>`${Z}=${D[Z]}`).join("&"),ie=(await import('crypto')).createHash("sha256").update(z+l.apiSecret).digest("hex"),$=new FormData;$.append("from_public_id",w),$.append("to_public_id",d),$.append("timestamp",String(P)),$.append("signature",ie),$.append("api_key",l.apiKey);let ue=await fetch(`https://api.cloudinary.com/v1_1/${l.cloudName}/image/rename`,{method:"POST",body:$});if(ue.ok)return (await ue.json()).secure_url;{let Z=await ue.json();console.warn("[Cloudinary rename] Failed:",Z);let R=c?`/${c}/`:"/";return `https://res.cloudinary.com/${l.cloudName}/image/upload${R}${d}.${o.split(".").pop()}`}}catch(f){console.warn("[Cloudinary rename] Error:",f.message);let h=c?`/${c}/`:"/";return `https://res.cloudinary.com/${l.cloudName}/image/upload${h}${d}.${o.split(".").pop()}`}},getImageUrl(s,o){if(!o)return s;let c=s.split("/upload/");if(c.length!==2)return s;let d=[];if(o.width&&d.push(`w_${o.width}`),o.height&&d.push(`h_${o.height}`),o.fit){let f={crop:"c_fill",clip:"c_fit",scale:"c_scale",fill:"c_fill"};d.push(f[o.fit]||"c_limit");}o.quality&&d.push(`q_${o.quality}`),o.format&&d.push(`f_${o.format}`);let u=d.join(",");return `${c[0]}/upload/${u}/${c[1]}`},async generateThumbnail(s){return this.getImageUrl(s.url,{width:200,height:200,fit:"crop"})},async list(){return []},async exists(s){return (await fetch(s,{method:"HEAD"})).ok},async createFolder(){},async deleteFolder(){}}}function Mr(l){let e=null;async function t(){return e||(e=new basicFtp.Client(6e4,{allowSeparateTransferHost:true}),e.ftp.verbose=false,await e.access({host:l.host,port:l.port||21,user:l.user,password:l.password,secure:l.secure,secureOptions:{}})),e}let s=d=>`${l.prefix?`${l.prefix}/`:""}${d}`.replace(/\/+/g,"/"),o=d=>`${l.baseUrl.replace(/\/$/,"")}/${d}`,c=()=>l.baseUrl.replace(/\/$/,"")+"/";return ce({name:l.type,displayName:l.type==="sftp"?"SFTP Storage":"FTP Storage",supportsDynamicResize:false,async upload(d,u){let f=await t(),h=s(`${u?.folder?`${u.folder}/`:""}${u?.filename||d.name}`),I=Buffer.from(await d.arrayBuffer()),w=h.split("/").slice(0,-1),k="";for(let P of w){k=k?`${k}/${P}`:P;try{await f.ensureDir(k);}catch{}}let L=stream.Readable.from(I);return await f.uploadFrom(L,h),{id:Buffer.from(h).toString("base64url"),filename:u?.filename||d.name,originalName:d.name,mimeType:d.type,size:I.length,url:o(h),thumbnailUrl:d.type.startsWith("image/")?o(h):void 0,folder:u?.folder,provider:l.type,metadata:u?.metadata,createdAt:new Date().toISOString()}},async delete(d){let u=await t(),f=d.replace(c(),"");await u.remove(f);},async rename(d,u){let f=await t(),h=d.replace(c(),""),I=l.prefix?`${l.prefix}/${u}`:u;return await f.rename(h,I),o(I)},async list(d){let u=await t(),f=s(d||""),h;try{h=await u.list(f);}catch{return []}return h.filter(I=>I.type===0).map(I=>({id:Buffer.from(`${f}/${I.name}`).toString("base64url"),filename:I.name,originalName:I.name,mimeType:"application/octet-stream",size:Number(I.size)||0,url:o(`${f}/${I.name}`.replace(/\/+/g,"/")),provider:l.type,createdAt:I.modifiedAt?I.modifiedAt.toISOString():new Date().toISOString()}))},async exists(d){let u=await t(),f=d.replace(c(),"");try{return await u.size(f),!0}catch{return  false}},async createFolder(d){let u=await t(),f=s(d);await u.ensureDir(f);},async deleteFolder(d){let u=await t(),f=s(d);await u.removeDir(f);}})}async function Qt(l){let e=l.getStorageConfig(),t=mt();try{return await t.resolve(e.type,e)}catch(s){return console.warn(`[resolveProvider] ${s.message} \u2014 falling back to local storage`),he({uploadDir:Ke__default.default.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"})}}function ce(l){return {async uploadFromUrl(e,t){let s=await fetch(e);if(!s.ok)throw new Error(`Failed to fetch: ${s.statusText}`);let o=await s.blob(),c=e.split("/").pop()||"file",d=new File([o],c,{type:o.type});return this.upload(d,t)},getImageUrl(e,t){if(!t||Object.keys(t).length===0)return e;let s=new URLSearchParams({url:e});return t.width&&s.set("w",String(t.width)),t.height&&s.set("h",String(t.height)),t.quality&&s.set("q",String(t.quality)),t.format&&s.set("f",t.format),t.cropWidth&&t.cropHeight&&(s.set("cx",String(t.cropX??0)),s.set("cy",String(t.cropY??0)),s.set("cw",String(t.cropWidth)),s.set("ch",String(t.cropHeight))),`/api/media/resize?${s.toString()}`},async generateThumbnail(e){return this.getImageUrl(e.url,{width:400,height:400})},...l}}async function er(l){if(!l)return console.warn("[resolveProviderWithConfig] No config, using local"),he({uploadDir:Ke__default.default.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"});let e=l.type||"local",t=mt();try{return await t.resolveWithConfig(e,l)}catch(s){return console.warn(`[resolveProviderWithConfig] ${s.message} \u2014 falling back to local storage`),he({uploadDir:Ke__default.default.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"})}}function tr(){return typeof globalThis>"u"?false:typeof globalThis.EdgeRuntime=="string"||typeof globalThis.WebSocketPair<"u"||typeof globalThis.Deno<"u"||typeof process<"u"&&process.env?.NEXT_RUNTIME==="edge"}async function rr(l){if(!tr())try{let{default:e}=await import('sharp'),t=await e(l).metadata(),s=e(l).webp({quality:85}),o=e(l).resize({width:500,withoutEnlargement:!0}).webp({quality:80});return {buffer:await s.toBuffer(),thumbnailBuffer:await o.toBuffer(),width:t.width,height:t.height,format:"webp"}}catch{}return {buffer:l,thumbnailBuffer:l,format:"passthrough"}}var yt=false;function Pe(l){if(typeof l!="string")return l;let e=l.replace(/-/g,"").toLowerCase();return e.length===32?`${e.slice(0,8)}-${e.slice(8,12)}-${e.slice(12,16)}-${e.slice(16,20)}-${e.slice(20)}`:l}var ze=class l{db;storage;dialect;genId;mediaTable="media";foldersTable="media_folders";constructor(e,t,s){this.db=e,this.storage=t,this.dialect=s?.dialect||"sqlite",this.genId=s?.genId||chunk3ZFRP5M2_cjs.e;}static async init(e,t){let s;if(t?.storageConfig)s=await er(t.storageConfig);else {let c=new chunkGCQTSPX6_cjs.a(e);await c.load(),s=await Qt(c);}let o=new l(e,s,t);return await o.ensureTables(),o}async ensureTables(){if(this.dialect==="mongodb"){let e=this.db.db;await e.collection(this.mediaTable).createIndex({filename:1},{unique:true}),await e.collection(this.foldersTable).createIndex({path:1},{unique:true}),yt=true;return}if(this.dialect==="sqlite")this.db.exec(`
-        CREATE TABLE IF NOT EXISTS media (
-          id TEXT PRIMARY KEY,
-          filename TEXT NOT NULL UNIQUE,
-          title TEXT,
-          original_name TEXT NOT NULL,
-          mime_type TEXT NOT NULL,
-          file_size INTEGER NOT NULL,
-          width INTEGER,
-          height INTEGER,
-          url TEXT NOT NULL UNIQUE,
-          thumbnail_url TEXT,
-          folder TEXT,
-          provider TEXT NOT NULL,
-          alt TEXT,
-          caption TEXT,
-          metadata TEXT,
-          created_at TEXT NOT NULL,
-          updated_at TEXT NOT NULL
-        );
-        CREATE INDEX IF NOT EXISTS idx_media_folder ON media(folder);
-        CREATE INDEX IF NOT EXISTS idx_media_provider ON media(provider);
-        CREATE INDEX IF NOT EXISTS idx_media_filename ON media(filename);
-      `),this.db.exec(`
-        CREATE TABLE IF NOT EXISTS media_folders (
-          id TEXT PRIMARY KEY,
-          name TEXT NOT NULL,
-          path TEXT NOT NULL,
-          parent_path TEXT,
-          created_at TEXT
-        );
-        CREATE INDEX IF NOT EXISTS idx_media_folders_path ON media_folders(path);
-      `);else if(this.dialect==="postgres"){if(yt)return;let{sql:e}=await import('drizzle-orm');await this.db.execute(e`
-        CREATE TABLE IF NOT EXISTS "media" (
-          "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-          "filename" VARCHAR(255) NOT NULL UNIQUE,
-          "title" VARCHAR(255),
-          "original_name" VARCHAR(255) NOT NULL,
-          "mime_type" VARCHAR(100),
-          "file_size" INTEGER,
-          "width" INTEGER,
-          "height" INTEGER,
-          "url" TEXT NOT NULL UNIQUE,
-          "thumbnail_url" TEXT,
-          "folder" VARCHAR(255),
-          "provider" VARCHAR(50) NOT NULL,
-          "alt" TEXT,
-          "caption" TEXT,
-          "metadata" JSONB,
-          "created_at" TIMESTAMP NOT NULL DEFAULT NOW(),
-          "updated_at" TIMESTAMP NOT NULL DEFAULT NOW()
-        )
-      `),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_folder" ON "media" ("folder")`),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_provider" ON "media" ("provider")`),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_filename" ON "media" ("filename")`),await this.db.execute(e`
-        CREATE TABLE IF NOT EXISTS "media_folders" (
-          "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-          "name" VARCHAR(255) NOT NULL,
-          "path" TEXT NOT NULL,
-          "parent_path" TEXT,
-          "created_at" TIMESTAMP NOT NULL DEFAULT NOW()
-        )
-      `),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_folders_path" ON "media_folders" ("path")`),yt=true;}}now(){return new Date().toISOString()}buildFindConditions(e){let t=[],s=[],o=e.sortBy==="name"?"title":e.sortBy==="createdAt"?"created_at":e.sortBy==="updatedAt"?"updated_at":e.sortBy||"created_at",c=e.sortDir==="asc"?"ASC":"DESC";if(e.search){t.push("(title LIKE ? OR filename LIKE ? OR original_name LIKE ? OR alt LIKE ?)");let u=`%${e.search}%`;s.push(u,u,u,u);}return e.type&&e.type!=="all"&&(t.push("mime_type LIKE ?"),s.push(`${e.type}/%`)),e.folder&&(t.push("(folder = ? OR folder LIKE ?)"),s.push(e.folder,`${e.folder}/%`)),{where:t.length>0?`WHERE ${t.join(" AND ")}`:"",params:s,orderBy:c,sortCol:o}}rowToMedia(e,t){return {id:e.id,filename:e.filename,title:e.title??null,originalName:e.original_name??e.originalName,mimeType:e.mime_type??e.mimeType,fileSize:e.file_size??e.fileSize,width:e.width??null,height:e.height??null,url:l.resolveMediaUrl(e.url,t),thumbnailUrl:l.resolveMediaUrl(e.thumbnail_url??e.thumbnailUrl??null,t),folder:e.folder??null,provider:e.provider,alt:e.alt??null,caption:e.caption??null,metadata:typeof e.metadata=="string"?JSON.parse(e.metadata):e.metadata??null,createdAt:e.created_at??e.createdAt,updatedAt:e.updated_at??e.updatedAt}}static resolveMediaUrl(e,t){return e?e.startsWith("http://")||e.startsWith("https://")||e.startsWith("blob:")||e.startsWith("data:")?e:`${(process.env.KYRO_BASE_URL||t||"http://localhost:4321").replace(/\/+$/,"")}${e.startsWith("/")?"":"/"}${e}`:null}async sqliteRun(e,t=[]){let s=this.db.prepare(e),o=e.trim().toLowerCase();return o.startsWith("insert")||o.startsWith("update")||o.startsWith("delete")?s.run(...t):s.all(...t)}sqliteGet(e,t=[]){return this.db.prepare(e).get(...t)}async upload(e,t="",s){let o=e.type.startsWith("image/"),c,d=e,u=e.name,f=null,h=null;if(o&&!e.type.includes("svg")){let P=Buffer.from(await e.arrayBuffer());c=await rr(P),u=`${e.name.replace(/\.[^/.]+$/,"").toLowerCase().replace(/[^a-z0-9]/g,"-").replace(/-+/g,"-").substring(0,50)}.webp`,f=c.width??null,h=c.height??null,d=new File([c.buffer],u,{type:"image/webp"});}let I=await this.storage.upload(d,{folder:t,filename:u}),w=await this.storage.generateThumbnail({...I,id:"",provider:this.storage.name,createdAt:this.now()},{width:400,height:400}),k=this.genId(),L=this.now();if(this.dialect==="mongodb"){let P=I.mimeType,D=P.startsWith("image/")?"image":P.startsWith("video/")?"video":P.startsWith("audio/")?"audio":P.startsWith("application/pdf")?"document":["application/zip","application/x-zip","application/x-tar","application/gzip","application/x-7z"].includes(P)?"archive":"other";return await this.db.db.collection(this.mediaTable).insertOne({_id:k,id:k,filename:I.filename,title:e.name.replace(/\.[^/.]+$/,""),originalName:e.name,mimeType:P,fileSize:I.size,width:f,height:h,url:I.url,thumbnailUrl:w,folder:t||"",provider:this.storage.name,type:D,status:"active",alt:null,caption:null,createdAt:new Date,updatedAt:new Date}),this.rowToMedia({id:k,filename:I.filename,title:e.name.replace(/\.[^/.]+$/,""),originalName:e.name,mimeType:P,fileSize:I.size,width:f,height:h,url:I.url,thumbnailUrl:w,folder:t||"",provider:this.storage.name,type:D,status:"active",alt:null,caption:null,createdAt:new Date,updatedAt:new Date},s)}if(this.dialect==="sqlite")await this.sqliteRun(`INSERT INTO ${this.mediaTable}
-          (id, filename, title, original_name, mime_type, file_size, width, height, url, thumbnail_url, folder, provider, alt, caption, metadata, created_at, updated_at)
-         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,[k,I.filename,e.name.replace(/\.[^/.]+$/,""),e.name,I.mimeType,I.size,f,h,I.url,w,t||null,this.storage.name,null,null,null,L,L]);else {let{media:P}=await import('./media-OUBQTIQP.cjs'),D=I.mimeType,z=D.startsWith("image/")?"image":D.startsWith("video/")?"video":D.startsWith("audio/")?"audio":D.startsWith("application/pdf")?"document":["application/zip","application/x-zip","application/x-tar","application/gzip","application/x-7z"].includes(D)?"archive":"other",V=await this.db.insert(P).values({id:k,filename:I.filename,title:e.name.replace(/\.[^/.]+$/,""),originalName:e.name,mimeType:D,fileSize:I.size,width:f,height:h,url:I.url,thumbnailUrl:w,folder:t||"",provider:this.storage.name,type:z,status:"active",alt:null,caption:null,createdAt:new Date,updatedAt:new Date}).returning();V&&V[0]&&(k=V[0].id);}return {id:k,filename:I.filename,title:e.name.replace(/\.[^/.]+$/,""),originalName:e.name,mimeType:I.mimeType,fileSize:I.size,width:f,height:h,url:I.url,thumbnailUrl:w,folder:t||null,provider:this.storage.name,alt:null,caption:null,metadata:null,createdAt:L,updatedAt:L}}async uploadFromUrl(e,t="",s){let o=await fetch(e);if(!o.ok)throw new Error(`Failed to fetch URL: ${o.status}`);let c=await o.blob(),d=e.split("/").pop()||"url-image",u=o.headers.get("content-type")||c.type||"application/octet-stream",f=new File([c],d,{type:u});return this.upload(f,t,s)}async delete(e,t){this.dialect==="postgres"&&(e=Pe(e));let s=await this.findById(e,t);if(s){if(await this.deleteFile(s.url),s.thumbnailUrl&&s.thumbnailUrl!==s.url&&s.thumbnailUrl!==s.url+"?thumb")try{await this.deleteFile(s.thumbnailUrl);}catch{}if(this.dialect==="mongodb"){await this.db.db.collection(this.mediaTable).deleteOne({id:e});return}if(this.dialect==="sqlite")await this.sqliteRun(`DELETE FROM ${this.mediaTable} WHERE id = ?`,[e]);else {let{media:o}=await import('./media-OUBQTIQP.cjs'),{eq:c}=await import('drizzle-orm');await this.db.delete(o).where(c(o.id,e));}}}async deleteFile(e){await this.storage.delete(e);}async rename(e,t,s){this.dialect==="postgres"&&(e=Pe(e));let o=await this.findById(e,s);if(!o)return null;let c=await this.storage.rename(o.url,t),d;if(o.thumbnailUrl||this.storage.name==="cloudinary"){let I=c.match(/\/upload\/(v\d+)\//),w=I?I[1]+"/":"",k=c.match(/(.+?)\/upload\//);d=`${k?k[1]:"https://res.cloudinary.com/"+this.storage.config?.cloudName||"unknown"}/upload/w_200,h_200,c_fill/${w}${t}`;}let u=o.filename.split(".").pop(),f=t.includes(".")?t:`${t}.${u}`,h={url:c,filename:f,thumbnailUrl:d};if(this.dialect==="mongodb")return await this.db.db.collection(this.mediaTable).updateOne({id:e},{$set:{url:c,thumbnailUrl:d||null,updatedAt:new Date}}),this.findById(e,s);if(this.dialect==="sqlite"){let I={...h};"thumbnailUrl"in I&&(I.thumbnail_url=I.thumbnailUrl,delete I.thumbnailUrl);let w=Object.keys(I).map(L=>`${L} = ?`).join(", "),k=Object.values(I);await this.sqliteRun(`UPDATE ${this.mediaTable} SET ${w}, updated_at = ? WHERE id = ?`,[...k,this.now(),e]);}else {let{media:I}=await import('./media-OUBQTIQP.cjs'),{eq:w}=await import('drizzle-orm');await this.db.update(I).set({...h,updatedAt:this.now()}).where(w(I.id,e));}return {...o,...h,updatedAt:this.now(),thumbnailUrl:h.thumbnailUrl??null}}async findById(e,t){if(this.dialect==="postgres"&&(e=Pe(e)),this.dialect==="mongodb"){let d=await this.db.db.collection(this.mediaTable).findOne({id:e});return d?this.rowToMedia(d,t):null}if(this.dialect==="sqlite"){let d=this.sqliteGet(`SELECT * FROM ${this.mediaTable} WHERE id = ?`,[e]);return d?this.rowToMedia(d,t):null}let{media:s}=await import('./media-OUBQTIQP.cjs'),{eq:o}=await import('drizzle-orm'),[c]=await this.db.select().from(s).where(o(s.id,e));return c?this.rowToMedia(c,t):null}async find(e={},t){let{page:s=1,limit:o=30,search:c="",type:d="",folder:u="",sortBy:f="createdAt",sortDir:h="desc"}=e,{where:I,params:w,orderBy:k,sortCol:L}=this.buildFindConditions({page:s,limit:o,search:c,type:d,folder:u,sortBy:f,sortDir:h}),P=(s-1)*o;if(this.dialect==="mongodb"){let X={},{search:G,type:ae,folder:M,sortBy:Te="createdAt",sortDir:Re="desc"}=e;G&&(X.$or=[{title:{$regex:G,$options:"i"}},{filename:{$regex:G,$options:"i"}},{originalName:{$regex:G,$options:"i"}},{alt:{$regex:G,$options:"i"}}]),ae&&ae!=="all"&&(X.mimeType={$regex:`^${ae}/`}),M&&(X.$or=[{folder:M},{folder:{$regex:`^${M}/`}}]);let vt={[Te==="name"?"title":Te]:Re==="asc"?1:-1},r=await this.db.db.collection(this.mediaTable).countDocuments(X);return {docs:(await this.db.db.collection(this.mediaTable).find(X).sort(vt).skip(P).limit(o).toArray()).map(m=>this.rowToMedia(m,t)),totalDocs:r,page:s,limit:o,totalPages:Math.ceil(r/o)}}if(this.dialect==="sqlite"){let G=this.sqliteGet(`SELECT COUNT(*) as cnt FROM ${this.mediaTable} ${I}`,w)?.cnt??0;return {docs:(await this.sqliteRun(`SELECT * FROM ${this.mediaTable} ${I} ORDER BY ${L} ${k} LIMIT ? OFFSET ?`,[...w,o,P])).map(M=>this.rowToMedia(M,t)),totalDocs:G,page:s,limit:o,totalPages:Math.ceil(G/o)}}let{media:D}=await import('./media-OUBQTIQP.cjs'),{like:z,or:V,and:ie,asc:$,desc:ue,eq:Z,sql:R}=await import('drizzle-orm'),Q=[];c&&Q.push(V(z(D.title,`%${c}%`),z(D.filename,`%${c}%`),z(D.originalName,`%${c}%`),z(D.alt,`%${c}%`))),d&&d!=="all"&&Q.push(z(D.mimeType,`${d}/%`)),u&&Q.push(V(Z(D.folder,u),z(D.folder,`${u}/%`)));let qe=Q.length>0?ie(...Q):void 0,pe=D[{created_at:"createdAt",updated_at:"updatedAt",title:"title",filename:"filename",file_size:"fileSize",mime_type:"mimeType",original_name:"originalName"}[L]||"createdAt"],At=h==="asc"?$(pe):ue(pe),xe=await this.db.select().from(D).where(qe).orderBy(At).limit(o).offset(P),[{count:be}]=await this.db.select({count:R`count(*)`}).from(D).where(qe),B=Number(be);return {docs:xe.map(X=>this.rowToMedia(X,t)),totalDocs:B,page:s,limit:o,totalPages:Math.ceil(B/o)}}async update(e,t,s){this.dialect==="postgres"&&(e=Pe(e));let o=this.now();if(this.dialect==="mongodb")return await this.db.db.collection(this.mediaTable).updateOne({id:e},{$set:{...t,updatedAt:new Date}}),this.findById(e,s);if(this.dialect==="sqlite"){let f=["updated_at = ?"],h=[o];t.title!==void 0&&(f.push("title = ?"),h.push(t.title)),t.alt!==void 0&&(f.push("alt = ?"),h.push(t.alt)),t.caption!==void 0&&(f.push("caption = ?"),h.push(t.caption)),t.folder!==void 0&&(f.push("folder = ?"),h.push(t.folder)),t.metadata!==void 0&&(f.push("metadata = ?"),h.push(t.metadata===null?null:JSON.stringify(t.metadata))),t.originalName!==void 0&&(f.push("original_name = ?"),h.push(t.originalName)),h.push(e),await this.sqliteRun(`UPDATE ${this.mediaTable} SET ${f.join(", ")} WHERE id = ?`,h);let I=this.sqliteGet(`SELECT * FROM ${this.mediaTable} WHERE id = ?`,[e]);return I?this.rowToMedia(I,s):null}let{media:c}=await import('./media-OUBQTIQP.cjs'),{eq:d}=await import('drizzle-orm'),[u]=await this.db.update(c).set({...t,updatedAt:new Date}).where(d(c.id,e)).returning();return u?this.rowToMedia(u,s):null}async updateMany(e,t){this.dialect==="postgres"&&(e=e.map(Pe));let s=this.now();if(this.dialect==="mongodb"){for(let o of e)await this.db.db.collection(this.mediaTable).updateOne({id:o},{$set:{...t,updatedAt:new Date}});return}if(this.dialect==="sqlite")for(let o of e){let c=["updated_at = ?"],d=[s];t.folder!==void 0&&(c.push("folder = ?"),d.push(t.folder||null)),d.push(o),await this.sqliteRun(`UPDATE ${this.mediaTable} SET ${c.join(", ")} WHERE id = ?`,d);}else {let{media:o}=await import('./media-OUBQTIQP.cjs'),{eq:c}=await import('drizzle-orm');for(let d of e)await this.db.update(o).set({...t,updatedAt:new Date}).where(c(o.id,d));}}async listFolders(){if(this.dialect==="mongodb"){let f=await this.db.db.collection(this.foldersTable).find({},{projection:{path:1}}).toArray(),h=await this.db.db.collection(this.mediaTable).distinct("folder"),I=new Set([...f.map(w=>w.path),...h]);return Array.from(I).filter(w=>w&&w!=="").sort()}if(this.dialect==="sqlite")return (await this.sqliteRun(`SELECT path FROM ${this.foldersTable} UNION
-         SELECT folder as path FROM ${this.mediaTable} WHERE folder IS NOT NULL AND folder != ''`)).map(h=>h.path).filter(h=>h&&h!=="").sort();let{media:e,mediaFolders:t}=await import('./media-OUBQTIQP.cjs'),{eq:s,sql:o}=await import('drizzle-orm'),c=await this.db.select({folder:e.folder}).from(e).groupBy(e.folder),d=await this.db.select({path:t.path}).from(t),u=new Set([...c.map(f=>f.folder),...d.map(f=>f.path)]);return Array.from(u).filter(f=>f&&f!=="").sort()}async createFolder(e,t=""){let s=t?`${t}/${e}`:e;await this.storage.createFolder?.(s);let o=this.now();if(this.dialect==="mongodb"){await this.db.db.collection(this.foldersTable).findOne({path:s})||await this.db.db.collection(this.foldersTable).insertOne({_id:this.genId(),name:e,path:s,parentPath:t||null,createdAt:new Date});return}if(this.dialect==="sqlite")await this.sqliteRun(`INSERT OR IGNORE INTO ${this.foldersTable} (path, name, parent_path, created_at) VALUES (?, ?, ?, ?)`,[s,e,t||null,o]);else {let{mediaFolders:c}=await import('./media-OUBQTIQP.cjs');await this.db.insert(c).values({path:s,name:e,parentPath:t||null,createdAt:new Date}).onConflictDoNothing();}}async deleteFolder(e){let t=await this.find({folder:e,limit:1e4});for(let s of t.docs)await this.delete(s.id);if(await this.storage.deleteFolder?.(e),this.dialect==="mongodb"){await this.db.db.collection(this.foldersTable).deleteMany({$or:[{path:e},{path:{$regex:`^${e}/`}}]});return}if(this.dialect==="sqlite")await this.sqliteRun(`DELETE FROM ${this.foldersTable} WHERE path = ? OR path LIKE ?`,[e,`${e}/%`]);else {let{mediaFolders:s}=await import('./media-OUBQTIQP.cjs'),{like:o,or:c,eq:d}=await import('drizzle-orm');await this.db.delete(s).where(c(d(s.path,e),o(s.path,`${e}/%`)));}}};function He(l){return l.map(e=>`${e.path.join(".")}: ${e.message}`).join(", ")}function ye(l,e){if(!(!l||typeof l!="object"))for(let t of e){if(!t.name||!(t.name in l))continue;if(l[t.name]===""&&(t.type==="text"||t.type==="textarea"||t.type==="code"||t.type==="markdown"||(l[t.name]=null)),t.type==="tabs"&&t.name&&Array.isArray(t.tabs)&&l[t.name]&&typeof l[t.name]=="object")for(let o of t.tabs)Array.isArray(o.fields)&&ye(l[t.name],o.fields);else if((t.type==="group"||t.type==="collapsible")&&t.name&&Array.isArray(t.fields)&&l[t.name]&&typeof l[t.name]=="object")ye(l[t.name],t.fields);else if(t.type==="array"&&t.name&&Array.isArray(t.fields)&&Array.isArray(l[t.name]))for(let o of l[t.name])o&&typeof o=="object"&&ye(o,t.fields);else if(t.type==="blocks"&&t.name&&Array.isArray(t.blocks)&&Array.isArray(l[t.name]))for(let o of l[t.name]){if(!o||typeof o!="object")continue;let c=o.type||o.blockType;if(!c)continue;let d=t.blocks.find(f=>f.slug===c);if(!d||!Array.isArray(d.fields))continue;let u=o.data&&typeof o.data=="object"?o.data:o;ye(u,d.fields);}}}function we(l,e){if(!(!e||typeof e!="object"))for(let t of l){if(t.type==="richtext"&&t.name){let s=e[t.name];typeof s=="string"?e[t.name]=[{type:"paragraph",children:[{text:s}]}]:s&&typeof s=="object"&&!Array.isArray(s)&&s.type==="doc"&&Array.isArray(s.content)&&(e[t.name]=s.content);}if(t.type==="tabs"&&t.name&&Array.isArray(t.tabs)&&e[t.name]&&typeof e[t.name]=="object")for(let s of t.tabs)Array.isArray(s.fields)&&we(s.fields,e[t.name]);else if((t.type==="group"||t.type==="collapsible")&&t.name&&Array.isArray(t.fields)&&e[t.name]&&typeof e[t.name]=="object")we(t.fields,e[t.name]);else if(t.type==="array"&&t.name&&Array.isArray(t.fields)&&Array.isArray(e[t.name]))for(let s of e[t.name])s&&typeof s=="object"&&we(t.fields,s);else if(t.type==="blocks"&&t.name&&Array.isArray(t.blocks)&&Array.isArray(e[t.name]))for(let s of e[t.name]){if(!s||typeof s!="object")continue;let o=s.type||s.blockType;if(!o)continue;let c=t.blocks.find(u=>u.slug===o);if(!c||!Array.isArray(c.fields))continue;let d=s.data&&typeof s.data=="object"?s.data:s;we(c.fields,d);}}}function ke(l,e){if(!(!e||typeof e!="object")){for(let t of l)if(!(!t.name||!(t.name in e))){if(t.unique&&(t.type==="text"||t.type==="email"?e[t.name]=`${e[t.name]||t.name}-copy-${Date.now().toString(36)}`:delete e[t.name]),t.type==="tabs"&&t.name&&Array.isArray(t.tabs)&&e[t.name]&&typeof e[t.name]=="object")for(let s of t.tabs)Array.isArray(s.fields)&&ke(s.fields,e[t.name]);else if((t.type==="group"||t.type==="collapsible")&&t.name&&Array.isArray(t.fields)&&e[t.name]&&typeof e[t.name]=="object")ke(t.fields,e[t.name]);else if(t.type==="array"&&t.name&&Array.isArray(t.fields)&&Array.isArray(e[t.name]))for(let s of e[t.name])s&&typeof s=="object"&&(delete s.id,ke(t.fields,s));else if(t.type==="blocks"&&t.name&&Array.isArray(t.blocks)&&Array.isArray(e[t.name]))for(let s of e[t.name]){if(!s||typeof s!="object")continue;delete s.id;let o=s.type||s.blockType;if(!o)continue;let c=t.blocks.find(u=>u.slug===o);if(!c||!Array.isArray(c.fields))continue;let d=s.data&&typeof s.data=="object"?s.data:s;ke(c.fields,d);}}}}var Hr={_media:{create:chunkXUONID6O_cjs.d.MEDIA_UPLOAD,update:chunkXUONID6O_cjs.d.MEDIA_UPLOAD,delete:chunkXUONID6O_cjs.d.MEDIA_DELETE}};function Ue(l,e){let t=Hr[l];return t?t[e]:`collection.${e}`}function Vr(l){let e=l.headers.get("x-forwarded-for");return e?e.split(",")[0].trim():l.headers.get("x-real-ip")||"unknown"}function Ve(l,e,t,s,o){e?.apiKeyId&&l&&l.createAuditLog({action:"api_request",userId:e.userId||"",resource:"api_key",resourceId:e.apiKeyId,success:true,metadata:{endpoint:t,method:s,ip:Vr(o)}});}function Xe(l){return l.baseUpdatedAt??l._baseUpdatedAt}function wt(l){let{baseUpdatedAt:e,_baseUpdatedAt:t,...s}=l;return s}function bt(l,e){return {error:"Document has changed since you started editing",code:"REVISION_CONFLICT",conflict:{expectedUpdatedAt:l??null,actualUpdatedAt:e.updatedAt??null,current:e}}}async function O(l,e,t,s,o,c,d=true,u="none"){return await chunkXUONID6O_cjs.b(l,e,{user:s,req:t,tenantId:o,apiKey:c},{enablePublicAccess:d,defaultAccess:u})}async function J(l,e,t,s,o,c=true){return await chunkXUONID6O_cjs.c(l,e,{user:s,req:t,tenantId:o},{enablePublicAccess:c})}async function U(l,e,t,s){if(t)return {user:t,tenantId:s,apiKeyContext:void 0,authType:"static"};if(e){let o=await e(l);if(o.status===200&&o.user)return {user:o.user,tenantId:o.tenantContext?.tenantId,apiKeyContext:o.apiKeyContext,authType:o.authType}}return {user:void 0,tenantId:void 0,apiKeyContext:void 0,authType:void 0}}function Xr(l,e){if("dialect"in l&&l.dialect==="postgres"&&l instanceof chunk3ZFRP5M2_cjs.c)return new chunkGYQMNXXW_cjs.a({db:l.client});if("dialect"in l&&l.dialect==="mongodb"){let s=l;return new chunkHHH4XNNS_cjs.a({db:()=>s.db})}let t=Ke.resolve(e,"data","kyro.db");return new chunkHOP4D5XZ_cjs.a({path:process.env.KYRO_AUTH_DB_PATH||t})}function or(l){let{registry:e,db:t,authSecret:s,authAdapter:o,checkSession:c,user:d,tenantId:u,cors:f,webhookService:h,settings:I}=l,w=new hono.Hono;function k(r){if(Array.isArray(r))return r.map(k);if(r!==null&&typeof r=="object"){let i={};for(let m in r)m!=="attrs"&&(i[m]=k(r[m]));return i}return r}w.use("*",async(r,i)=>{await i();let m=r.req.header("referer")||"";if(!(r.req.header("x-kyro-admin")==="true"||m.includes("/admin"))){let n=r.res.headers.get("Content-Type");if(n&&n.includes("application/json"))try{let p=await r.res.clone().json(),b=k(p);r.res=r.json(b,r.res.status);}catch{}}});for(let r of e.getPlugins())typeof r.serverMiddleware=="function"&&r.serverMiddleware(w);let L=I?.access?.apiAccess,P=I?.access?.enablePublicAccess??false,D=I?.access?.defaultCollectionAccess??"none";L?.requireAuth;let V=process.cwd(),ie=V.endsWith("admin")?Ke.resolve(V,".."):V,$=o||Xr(t,ie),R=Bt({db:t,userLookup:async r=>await $.findUserById(r)||null}),Q=L?.cors?.allowedOrigins,qe=f?.origins,Ge=Array.isArray(Q)?Q:typeof Q=="string"&&Q?Q.split(`
-`).map(r=>r.trim()).filter(Boolean):[],pe=Ge.length>0?Ge:qe||[];(pe.length>0||f)&&w.use("*",async(r,i)=>{let m=r.req.header("Origin")||"*";if(pe.length>0&&!pe.includes(m))return r.json({error:"Origin not allowed"},403);let y=pe.length>0?m:"*";if(r.header("Access-Control-Allow-Origin",y),r.header("Access-Control-Allow-Methods","GET, POST, PATCH, DELETE, OPTIONS"),r.header("Access-Control-Allow-Headers","Content-Type, Authorization, X-API-Key"),f?.credentials&&r.header("Access-Control-Allow-Credentials","true"),r.req.method==="OPTIONS")return r.text("");await i();});let xe=I?.access?.rateLimiting,be;if(xe?.enabled){let r=xe.maxRequests||100,i=xe.windowMs||6e4;be=new Fe({"api:general":{window:i,max:r}}),w.use("/api/*",async(m,y)=>{if(!be)return y();let n=m.req.header("CF-Connecting-IP")||m.req.header("X-Forwarded-For")?.split(",")[0]?.trim()||m.req.header("X-Real-IP")||"unknown",a=await be.check("api:general",n);if(m.header("X-RateLimit-Limit",String(r)),m.header("X-RateLimit-Remaining",String(a.remaining)),m.header("X-RateLimit-Reset",String(a.resetAt)),!a.allowed)return m.json({error:"Too many requests",retryAfter:a.retryAfter},429);await y();});}let B=new Ne({redis:$,jwtSecret:s||"change-me",baseUrl:process.env.KYRO_BASE_URL||"http://localhost:4321",rateLimiter:be});chunkGCQTSPX6_cjs.b.fromConfig(t).then(r=>{r&&(B.email=r);}).catch(r=>{console.error("[Email] Failed to initialize transport from config:",r);}),w.post("/api/auth/login",async r=>B.login(r.req.raw)),w.post("/api/auth/register",async r=>B.register(r.req.raw)),w.post("/api/auth/logout",async r=>B.logout(r.req.raw)),w.post("/api/auth/refresh",async r=>B.refresh(r.req.raw)),w.get("/api/auth/me",async r=>B.me(r.req.raw)),w.get("/api/auth/sessions",async r=>B.listSessions(r.req.raw)),w.post("/api/auth/sessions/refresh",async r=>B.refreshSession(r.req.raw)),w.delete("/api/auth/sessions",async r=>B.revokeOtherSessions(r.req.raw)),w.delete("/api/auth/sessions/:id",async r=>B.revokeSession(r.req.raw,r.req.param("id"))),w.put("/api/auth/sessions/:id/name",async r=>B.renameSession(r.req.raw,r.req.param("id"))),w.get("/api/auth/access",async r=>{try{let{user:i,tenantId:m}=await U(r.req.raw,R,d,u);if(!i)return r.json({error:"Not authenticated"},401);let y={},n={};for(let a of e.getCollections()){let p={read:(await O(a,"read",r.req.raw,i,m,void 0,P,D)).allowed,create:(await O(a,"create",r.req.raw,i,m,void 0,P,D)).allowed,update:(await O(a,"update",r.req.raw,i,m,void 0,P,D)).allowed,delete:(await O(a,"delete",r.req.raw,i,m,void 0,P,D)).allowed};y[a.slug]=p;}for(let a of e.getGlobals()){let p={read:(await J(a,"read",r.req.raw,i,m,P)).allowed,update:(await J(a,"update",r.req.raw,i,m,P)).allowed};n[a.slug]=p;}return r.json({collections:y,globals:n})}catch(i){return r.json({error:i.message},500)}});let X=typeof e.hasCollection=="function"&&e.hasCollection("users")?e.getCollection("users"):(()=>{try{return e.getCollection("users")}catch{return chunkGO34AOBZ_cjs.a}})();w.get("/api/users",async r=>{try{let{user:i,tenantId:m}=await U(r.req.raw,R,d,u),y=await O(X,"read",r.req.raw,i,m,void 0,P,D);if(!y.allowed)return r.json({error:y.error},y.status||403);let n=parseInt(r.req.query("page")||"1"),a=Math.min(parseInt(r.req.query("limit")||"10"),100),p=r.req.query("search")||void 0,b=await t.find({collection:"users",page:n,limit:a,where:p?{email:{contains:p}}:{},tenantId:m});return r.json({docs:b.docs,totalDocs:b.totalDocs||0,limit:a,totalPages:Math.ceil((b.totalDocs||0)/a),page:n,pagingCounter:(n-1)*a+1,hasPrevPage:n>1,hasNextPage:n<Math.ceil((b.totalDocs||0)/a),prevPage:n>1?n-1:null,nextPage:n<Math.ceil((b.totalDocs||0)/a)?n+1:null})}catch(i){return console.error("[API] Error listing users:",i),r.json({error:i.message},500)}}),w.get("/api/users/:id",async r=>{try{let{user:i,tenantId:m}=await U(r.req.raw,R,d,u),y=r.req.param("id"),n=await $.findUserById(y);return n?r.json({data:n}):r.json({error:"User not found"},404)}catch(i){return r.json({error:i.message},500)}}),w.post("/api/users",async r=>{try{let{user:i,tenantId:m}=await U(r.req.raw,R,d,u),y=await O(X,"create",r.req.raw,i,m,void 0,P,D);if(!y.allowed)return r.json({error:y.error},y.status||403);let n=await r.req.json();if(!n.email||!n.password)return r.json({error:"Email and password are required"},400);if(await $.findUserByEmail(n.email))return r.json({error:"Email already in use"},400);let p=await $.createUser({email:n.email,password:n.password,name:n.name,role:n.role||"customer",avatar:n.avatar,tenantId:n.tenantId});return i&&$?.createAuditLog({action:"user_create",userId:i.id,resource:"users",resourceId:p.id,success:!0}),r.json({data:p,message:"User created successfully"},201)}catch(i){return r.json({error:i.message},500)}}),w.patch("/api/users/:id",async r=>{try{let{user:i,tenantId:m}=await U(r.req.raw,R,d,u),y=await O(X,"update",r.req.raw,i,m,void 0,P,D);if(!y.allowed)return r.json({error:y.error},y.status||403);let n=r.req.param("id"),a=await r.req.json(),p=await $.findUserById(n);if(!p)return r.json({error:"User not found"},404);let b={};a.name!==void 0&&(b.name=a.name),a.email!==void 0&&(b.email=a.email),a.role!==void 0&&(b.role=a.role),a.avatar!==void 0&&(b.avatar=typeof a.avatar=="object"&&a.avatar!==null?a.avatar.id||String(a.avatar):a.avatar),a.tenantId!==void 0&&(b.tenantId=a.tenantId),a.emailVerified!==void 0&&(b.emailVerified=a.emailVerified),a.locked!==void 0&&(b.locked=a.locked),a.failedLoginAttempts!==void 0&&(b.failedLoginAttempts=a.failedLoginAttempts),a.lastLogin!==void 0&&(b.lastLogin=a.lastLogin);let g=await $.updateUser(n,b);return g?(i&&($?.createAuditLog({action:"user_update",userId:i.id,resource:"users",resourceId:n,success:!0}),a.role&&p.role!==a.role&&$?.createAuditLog({action:"role_change",userId:i.id,resource:"users",resourceId:n,success:!0,metadata:{oldRole:p.role,newRole:a.role}})),r.json({data:g,message:"User updated successfully"})):r.json({error:"User update failed"},500)}catch(i){return r.json({error:i.message},500)}}),w.delete("/api/users/:id",async r=>{try{let{user:i,tenantId:m}=await U(r.req.raw,R,d,u),y=await O(X,"delete",r.req.raw,i,m,void 0,P,D);if(!y.allowed)return r.json({error:y.error},y.status||403);let n=r.req.param("id");if(i&&i.id===n)return r.json({error:"You cannot delete your own account"},403);let a=await $.findUserById(n);return a?await $.deleteUser(n)?(i&&$?.createAuditLog({action:"user_delete",userId:i.id,resource:"users",resourceId:n,success:!0}),r.json({data:a,message:"User deleted successfully"})):r.json({error:"User deletion failed"},500):r.json({error:"User not found"},404)}catch(i){return r.json({error:i.message},500)}}),w.get("/api/auth/audit-logs",async r=>{try{let{user:i,tenantId:m}=await U(r.req.raw,R,d,u),y=e.getCollection("audit_logs");if(y){let S=await O(y,"read",r.req.raw,i,m,void 0,P,D);if(!S.allowed)return r.json({error:S.error},S.status||403)}else if(!i)return r.json({error:"Authentication required"},401);let n=parseInt(r.req.query("page")||"1"),a=Math.min(parseInt(r.req.query("limit")||"50"),100),p=r.req.query("action")||void 0,b=r.req.query("userId")||void 0,g=r.req.query("resource")||void 0,A=await $.findAuditLogs({action:p,userId:b,resource:g,limit:a,offset:(n-1)*a});return r.json({docs:A.logs,totalDocs:A.total,limit:a,totalPages:Math.ceil(A.total/a),page:n,pagingCounter:(n-1)*a+1,hasPrevPage:n>1,hasNextPage:n<Math.ceil(A.total/a),prevPage:n>1?n-1:null,nextPage:n<Math.ceil(A.total/a)?n+1:null})}catch(i){return console.error("[API] Error listing audit logs:",i),r.json({error:i.message},500)}});let G=null,ae=null,M=async()=>{if(ae)throw ae;if(!G)try{let r="sqlite";"dialect"in t&&t.dialect==="postgres"&&t instanceof chunk3ZFRP5M2_cjs.c?r=t.dialect:"dialect"in t&&t.dialect==="mongodb"&&(r="mongodb");let i=r==="postgres"&&t instanceof chunk3ZFRP5M2_cjs.c?t.client:t;G=await ze.init(i,{dialect:r});}catch(r){throw console.error("[getMedia] Init error:",r),ae=r,r}return G};w.get("/api/media",async r=>{try{let{user:i}=await U(r.req.raw,R,d,u);if(!i)return r.json({error:"Authentication required"},401);let m=await M(),y=new URL(r.req.url).origin,n=parseInt(r.req.query("page")||"1"),a=parseInt(r.req.query("limit")||"30"),p=r.req.query("search")||"",b=r.req.query("type")||"",g=r.req.query("folder")||"",A=await m.find({page:n,limit:a,search:p,type:b,folder:g},y);return r.json(A)}catch(i){return console.error("[Media] find error:",i),r.json({error:i.message},500)}}),w.post("/api/media/upload",async r=>{try{let{user:i}=await U(r.req.raw,R,d,u);if(!i)return r.json({error:"Authentication required"},401);let m=await M(),y=r.req.header("content-type")||"",n=new URL(r.req.url).origin;if(y.includes("multipart/form-data")){let A=await r.req.formData(),S=A.get("file"),v=A.get("folder")||"";if(!S)return r.json({error:"No file uploaded"},400);let x=await m.upload(S,v,n);return r.json(x)}let a=await r.req.json(),{url:p}=a,b=a.folder||"";if(!p)return r.json({error:"No URL provided"},400);let g=await m.uploadFromUrl(p,b,n);return r.json(g)}catch(i){return console.error("[Media] upload error:",i),r.json({error:i.message},500)}}),w.get("/api/media/folders",async r=>{try{let{user:i}=await U(r.req.raw,R,d,u);if(!i)return r.json({error:"Authentication required"},401);let y=await(await M()).listFolders();return r.json(y)}catch(i){return console.error("[Media] folders error:",i),r.json({error:i.message},500)}}),w.post("/api/media/folders",async r=>{try{let{user:i}=await U(r.req.raw,R,d,u);if(!i)return r.json({error:"Authentication required"},401);let m=await M(),y=await r.req.json(),{name:n,parentPath:a}=y;return n?(await m.createFolder(n,a||""),r.json({message:"Folder created",path:a?`${a}/${n}`:n})):r.json({error:"Folder name is required"},400)}catch(i){return console.error("[Media] create folder error:",i),r.json({error:i.message},500)}}),w.delete("/api/media/folders",async r=>{try{let{user:i}=await U(r.req.raw,R,d,u);if(!i)return r.json({error:"Authentication required"},401);let m=await M(),y=r.req.query("path");return y?(await m.deleteFolder(y),r.json({message:"Folder deleted"})):r.json({error:"Path is required"},400)}catch(i){return console.error("[Media] delete folder error:",i),r.json({error:i.message},500)}}),w.delete("/api/media/:id",async r=>{try{let{user:i}=await U(r.req.raw,R,d,u);if(!i)return r.json({error:"Authentication required"},401);let m=await M(),y=r.req.param("id"),n=new URL(r.req.url).origin;return await m.delete(y,n),r.json({success:!0})}catch(i){return console.error("[Media] delete error:",i),r.json({error:i.message},500)}}),w.get("/api/media/resize",async r=>{try{let{user:i}=await U(r.req.raw,R,d,u);if(!i)return r.json({error:"Authentication required"},401);let m=r.req.query("url"),y=parseInt(r.req.query("w")||"0"),n=parseInt(r.req.query("h")||"0"),a=r.req.query("fit")||"cover",p=parseFloat(r.req.query("cx")||"0"),b=parseFloat(r.req.query("cy")||"0"),g=parseFloat(r.req.query("cw")||"0"),A=parseFloat(r.req.query("ch")||"0");if(!m)return r.json({error:"URL is required"},400);let v=(await M()).storage;if(v.name!=="local")return r.redirect(m);let x=v.config?.uploadDir||Ke.join(process.cwd(),"public","uploads"),T=v.config?.baseUrl||"/uploads";if(!m.startsWith(T))return r.redirect(m);let q=m.replace(T,""),E=Ke.join(x,q);if(!fs.existsSync(E))return r.json({error:"File not found"},404);let C=fs.readFileSync(E),{default:j}=await import('sharp'),_=j(C);if(g>0&&A>0){let W=await j(C).metadata(),oe=W.width||0,K=W.height||0;if(oe>0&&K>0){let H=Math.max(0,Math.min(Math.round(p/100*oe),oe-1)),Ae=Math.max(0,Math.min(Math.round(b/100*K),K-1)),dr=Math.max(1,Math.min(Math.round(g/100*oe),oe-H)),lr=Math.max(1,Math.min(Math.round(A/100*K),K-Ae));_=_.extract({left:H,top:Ae,width:dr,height:lr});}}(y>0||n>0)&&(_=_.resize({width:y>0?y:void 0,height:n>0?n:void 0,fit:a}));let F=await _.toBuffer(),Y=await j(C).metadata();return r.header("Content-Type",`image/${Y.format||"webp"}`),r.header("Cache-Control","public, max-age=31536000, immutable"),r.body(F)}catch(i){return console.error("[Media] resize error:",i),r.json({error:i.message},500)}}),w.get("/api/media/:id",async r=>{try{let{user:i}=await U(r.req.raw,R,d,u);if(!i)return r.json({error:"Authentication required"},401);let m=await M(),y=r.req.param("id"),n=new URL(r.req.url).origin,a=await m.findById(y,n);return a?r.json(a):r.json({error:"Media not found"},404)}catch(i){return console.error("[Media] get error:",i),r.json({error:i.message},500)}}),w.patch("/api/media/:id",async r=>{try{let{user:i}=await U(r.req.raw,R,d,u);if(!i)return r.json({error:"Authentication required"},401);let m=await M(),y=r.req.param("id"),n=await r.req.json(),a=new URL(r.req.url).origin,p=["folder","metadata","title","alt","caption","originalName"],b={};for(let g of p)n[g]!==void 0&&(b[g]=n[g]);if(Object.keys(b).length>0){let g=await m.update(y,b,a);return r.json({doc:g})}return r.json({error:"No valid fields to update"},400)}catch(i){return console.error("[Media] update error:",i),r.json({error:i.message},500)}}),w.get("/api/media/test",async r=>{try{let{user:i}=await U(r.req.raw,R,d,u);if(!i)return r.json({error:"Authentication required"},401);let m=await M();return r.json({status:m?"initialized":"failed",serviceType:m?.constructor?.name})}catch(i){return console.error("[test] Error:",i),r.json({error:i.message,type:i.constructor?.name,stack:i.stack},500)}}),w.get("/api/storage-status",async r=>{try{let{user:i}=await U(r.req.raw,R,d,u);if(!i)return r.json({error:"Authentication required"},401);let m=!1,y="local";if(t)try{let n=t.prepare('SELECT provider FROM "_globals_storage-settings" LIMIT 1').get();n&&n.provider&&(m=!0,y=n.provider==="aws"?"s3":n.provider);}catch{try{let n=await t.findOne({collection:"_globals_storage-settings",where:{},draft:!0});n&&n.provider&&(m=!0,y=n.provider==="aws"?"s3":n.provider);}catch{}}return r.json({provider:y,configured:m,usage:0,limit:"unlimited"})}catch(i){return console.error("[Storage] status error:",i),r.json({error:i.message},500)}}),w.get("/api/plugins",async r=>{try{let{user:i}=await U(r.req.raw,R,d,u);if(!i)return r.json({error:"Authentication required"},401);let m=e.getPlugins(),y=e.storageProviders,n=await Promise.all(m.map(async a=>{let p=!0,b=a.name,g={};try{let v=await t.findOne({collection:"_globals_plugin-settings",where:{},draft:!0});v&&v.states&&(g=v.states);}catch{}g[b]!==void 0&&(p=g[b]),y.setPluginEnabled(b,p);let A=b.replace(/^@[^/]+\//,"");A=A.replace(/^(plugin|kyro)-/,"");let S={ai:"AI",seo:"SEO",s3:"S3",aws:"AWS",api:"API",ui:"UI",ftp:"FTP"};if(A=A.split("-").map(v=>{let x=v.toLowerCase();return S[x]?S[x]:v.charAt(0).toUpperCase()+v.slice(1)}).join(" "),A.toLowerCase().startsWith("storage ")){let v=A.split(" ");v.length===2&&(A=`${v[1]} Storage`);}return {id:b,name:a.displayName||A,version:a.version||"1.0.0",description:a.description||"",enabled:p,status:p?"active":"disabled"}}));return r.json(n)}catch(i){return console.error("[Plugins] list error:",i),r.json({error:i.message},500)}}),w.put("/api/plugins/:name/toggle",async r=>{try{let{user:i}=await U(r.req.raw,R,d,u);if(!i)return r.json({error:"Authentication required"},401);let m=r.req.param("name"),y=e.storageProviders,a=!y.isPluginEnabled(m),p=[];if(!a)for(let g of y.getAll())g.pluginName===m&&p.push(g.type);if(!(r.req.query("force")==="1")&&!a&&p.length>0){let g="local";try{let A=t?.prepare?.('SELECT provider FROM "_globals_storage-settings" LIMIT 1')?.get();A?.provider&&(g=A.provider);}catch{try{let A=await t?.findOne?.({collection:"_globals_storage-settings",where:{},draft:!0});A?.provider&&(g=A.provider);}catch{}}if(p.includes(g))return r.json({error:`Cannot disable "${m}" \u2014 storage provider "${g}" is currently active. Switch to Local storage first.`,requiresAction:!0,activeProvider:g},409)}try{let g={},A="global",S=await t.findOne({collection:"_globals_plugin-settings",where:{},draft:!0});S&&(g=S.states||{},A=S.id),g[m]=a,S?await t.update({collection:"_globals_plugin-settings",id:A,data:{states:g}}):await t.create({collection:"_globals_plugin-settings",data:{states:g,id:"global"}});}catch(g){console.warn(`[Plugins] Could not persist state for "${m}":`,g);}return y.setPluginEnabled(m,a),r.json({name:m,enabled:a})}catch(i){return console.error("[Plugins] toggle error:",i),r.json({error:i.message},500)}}),w.get("/api/health",r=>r.json({status:"ok",version:"0.11.0",collections:e.getCollectionSlugs(),timestamp:new Date().toISOString()})),w.get("/api/metrics",async r=>{try{let{user:i,tenantId:m}=await U(r.req.raw,R,d,u);if(!i)return r.json({error:"Authentication required"},401);let y=i.role==="admin"||i.role==="super_admin",a=e.getCollectionSlugs().filter(T=>!["users","audit_logs","media","_globals_access-settings","_globals_brand-settings"].includes(T)&&!T.startsWith("_globals_")).filter(T=>y||chunkQ3Q7BJVQ_cjs.a(i,`${T}:read`)),p=0,b={};await Promise.all(a.map(async T=>{try{let E=(await t.find({collection:T,where:{},limit:1,page:1,tenantId:m})).totalDocs??0;p+=E,b[T]=E;}catch{}}));let g=0;try{g=(await t.find({collection:"media",where:{},limit:1,page:1,tenantId:m})).totalDocs??0;}catch{}let A=0;try{A=(await t.find({collection:"users",where:{},limit:1,page:1,tenantId:m})).totalDocs??0;}catch{}let S=0;try{if(h){let T=await h.getWebhooks();S=Array.isArray(T)?T.length:0;}}catch{}let v=0;try{v=(await t.find({collection:chunkNY47CFVP_cjs.d,where:{},limit:1,page:1,tenantId:m})).totalDocs??0;}catch{}let x=p+g+A;return r.json({totalDocuments:p,totalMedia:y||chunkQ3Q7BJVQ_cjs.a(i,"media:read")?g:void 0,totalUsers:y||chunkQ3Q7BJVQ_cjs.a(i,"users:read")?A:void 0,totalWebhooks:y?S:void 0,totalApiKeys:y?v:void 0,totalStoredRecords:x,collectionCounts:b,collections:a.length,timestamp:new Date().toISOString()})}catch(i){return console.error("[API] Metrics error:",i),r.json({error:i.message},500)}}),w.get("/api/analytics",async r=>{try{let{user:i,tenantId:m}=await U(r.req.raw,R,d,u);if(!i)return r.json({error:"Authentication required"},401);if(!(i.role==="admin"||i.role==="super_admin"))return r.json({error:"Unauthorized"},403);let a=(await t.find({collection:"orders",where:{},limit:1e3,page:1,tenantId:m})).docs||[],b=(await t.findOne({collection:"_globals_store-settings",where:{},tenantId:m}))?.currency?.code||"USD",g={},A={};a.forEach(x=>{let T=new Date(x.createdAt||Date.now()).toISOString().split("T")[0];g[T]||(g[T]=0),A[T]||(A[T]=0),g[T]+=x.total||0,A[T]+=1;});let S=Object.keys(g).sort().map(x=>({date:x,revenue:g[x],orders:A[x]})),v={};return a.forEach(x=>{let T=x.orderStatus||"pending";v[T]=(v[T]||0)+1;}),r.json({chartData:S,totalRevenue:S.reduce((x,T)=>x+T.revenue,0),totalOrders:S.reduce((x,T)=>x+T.orders,0),ordersByStatus:v,currencyCode:b})}catch(i){return r.json({error:i.message},500)}}),w.get("/api/kyro/schema",async r=>{let{user:i}=await U(r.req.raw,R,d,u);if(!i)return r.json({error:"Authentication required"},401);let m=n=>n.map(a=>{let p={name:a.name,type:a.type,label:a.label,required:a.required??false,unique:a.unique??false,indexed:a.indexed??false,defaultValue:a.defaultValue,admin:a.admin?{...a.admin}:void 0};return a.minLength!==void 0&&(p.minLength=a.minLength),a.maxLength!==void 0&&(p.maxLength=a.maxLength),a.pattern!==void 0&&(p.pattern=a.pattern),a.variant!==void 0&&(p.variant=a.variant),a.hasMany!==void 0&&(p.hasMany=a.hasMany),a.min!==void 0&&(p.min=a.min),a.max!==void 0&&(p.max=a.max),a.step!==void 0&&(p.step=a.step),a.integer!==void 0&&(p.integer=a.integer),a.options&&(p.options=a.options),a.relationTo&&(p.relationTo=a.relationTo),a.maxDepth!==void 0&&(p.maxDepth=a.maxDepth),a.minRows!==void 0&&(p.minRows=a.minRows),a.maxRows!==void 0&&(p.maxRows=a.maxRows),a.localized!==void 0&&(p.localized=a.localized),a.language&&(p.language=a.language),a.format&&(p.format=a.format),a.allowedTypes&&(p.allowedTypes=a.allowedTypes),a.maxSize&&(p.maxSize=a.maxSize),(a.type==="group"||a.type==="row"||a.type==="collapsible"&&a.fields)&&(p.fields=m(a.fields)),a.type==="array"&&a.fields&&(p.fields=m(a.fields)),a.type==="blocks"&&a.blocks&&(p.blocks=a.blocks.map(b=>({slug:b.slug,label:b.label,fields:m(b.fields)}))),a.type==="tabs"&&a.tabs&&(p.tabs=a.tabs.map(b=>({label:b.label,name:b.name,fields:m(b.fields)}))),p}),y={collections:{},globals:{}};for(let n of e.getCollections()){let a=n.slug;try{y.collections[a]={slug:a,label:n.label||a,fields:m(n.fields),jsonSchema:zodToJsonSchema.zodToJsonSchema(e.getZodSchema(a),{target:"openApi3"}),createSchema:zodToJsonSchema.zodToJsonSchema(e.getCreateZodSchema(a),{target:"openApi3"}),updateSchema:zodToJsonSchema.zodToJsonSchema(e.getUpdateZodSchema(a),{target:"openApi3"}),procedures:{find:{collection:a,where:"Record<string,any>",sort:"string",limit:"number",page:"number",depth:"number",select:"string[]",draft:"boolean"},findByID:{collection:a,id:"string",depth:"number",select:"string[]",draft:"boolean"},create:{collection:a,data:"Record<string,any>",depth:"number",select:"string[]"},update:{collection:a,id:"string",data:"Record<string,any>",depth:"number",select:"string[]",baseUpdatedAt:"string"},delete:{collection:a,id:"string"},count:{collection:a,where:"Record<string,any>"}}};}catch{}}for(let n of e.getGlobals()){let a=n.slug,p=n.fields;if(a==="storage-settings"){let b=e.storageProviders,g=b.getAll(),A=new Set(b.getAllAvailable(v=>b.isPluginEnabled(v)).map(v=>v.type));A.add("local");let S=new Set(g.map(v=>v.type));p=p.filter(v=>v.type==="group"&&v.name&&S.has(v.name)?A.has(v.name):true).map(v=>v.name==="provider"&&v.type==="select"?{...v,options:v.options.filter(x=>A.has(x.value))}:v);}try{y.globals[a]={slug:a,label:n.label||a,fields:m(p),jsonSchema:zodToJsonSchema.zodToJsonSchema(e.getZodSchema(a),{target:"openApi3"}),procedures:{get:{},update:{data:"Record<string,any>"}}};}catch{}}return r.json(y)}),w.get("/api/collections",async r=>{let{user:i}=await U(r.req.raw,R,d,u);if(!i)return r.json({error:"Authentication required"},401);let m=e.getCollections().map(y=>({slug:y.slug,label:y.label||y.slug,fields:y.fields.filter(n=>n.name).map(n=>({name:n.name,type:n.type,required:n.required,label:n.label}))}));return r.json(m)});function Te(r,i,m){if(m in i)return i[m];for(let y of r)if(y.name){if(y.type==="tabs"&&y.tabs){let n=i[y.name];if(n&&typeof n=="object"&&m in n)return n[m]}if((y.type==="group"||y.type==="collapsible")&&y.fields){let n=i[y.name];if(n&&typeof n=="object"){if(m in n)return n[m];let a=Te(y.fields,n,m);if(a!==void 0)return a}}}}w.get("/api/search",async r=>{try{let i=r.req.query("q")||"",m=r.req.query("collections")||"",y=Math.min(parseInt(r.req.query("limit")||"10"),50);if(!i||i.length<2)return r.json({results:[],message:"Query too short"});let{user:n,tenantId:a}=await U(r.req.raw,R,d,u),p=m?m.split(",").filter(Boolean):e.getCollectionSlugs(),b=[],g=new RegExp(i.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),"i");for(let A of e.getCollections()){if(!p.includes(A.slug)||!(await O(A,"read",r.req.raw,n,a,void 0,P,D)).allowed)continue;let v=A.fields.filter(x=>x.name&&x.name!=="id"&&(x.type==="text"||x.type==="email"||x.type==="textarea"||x.type==="richtext"||x.indexed)&&!x.admin?.hidden).map(x=>x.name);if(v.length!==0)try{let x=v.map(q=>{let E={};return E[q]={like:`%${i}%`},E}),T=await t.find({collection:A.slug,where:{OR:x},limit:y,tenantId:a});await chunkXUONID6O_cjs.a(T.docs,A.fields,t,e,1,0);for(let q of T.docs){let E=A.admin?.useAsTitle||v.find(j=>j==="title"||j==="name"||j==="heading"||j==="slug"),C=E?Te(A.fields,q,E)??q.id:q.id;b.push({collection:A.slug,label:A.label||A.slug,id:q.id,title:String(C||"Untitled"),doc:q});}}catch(x){console.error(`Search error for ${A.slug}:`,x);}}return b.sort((A,S)=>A.label.localeCompare(S.label)),r.json({results:b})}catch(i){return r.json({error:i.message,results:[]},500)}}),w.get("/api/keys",async r=>{try{let{user:i,tenantId:m}=await U(r.req.raw,R,d,u);if(!i||!chunkQ3Q7BJVQ_cjs.a(i,"users:read"))return r.json({error:"Forbidden"},403);let y=parseInt(r.req.query("page")||"1"),n=Math.min(parseInt(r.req.query("limit")||"50"),100),a=await t.find({collection:chunkNY47CFVP_cjs.d,where:{},page:y,limit:n,tenantId:m}),p=(a.docs||[]).map(b=>({id:b.id,name:b.name,keyPrefix:b.keyPrefix,permissions:b.permissions||[],lastUsed:b.lastUsedAt,createdAt:b.createdAt}));return r.json({docs:p,totalDocs:a.totalDocs||p.length,totalPages:a.totalPages||1})}catch(i){return console.error("[ApiKeys] GET error:",i),r.json({error:i.message},500)}}),w.post("/api/keys",async r=>{try{let{user:i}=await U(r.req.raw,R,d,u);if(!i||!chunkQ3Q7BJVQ_cjs.a(i,"users:admin"))return r.json({error:"Forbidden"},403);let m=await r.req.json();if(!m.name||typeof m.name!="string")return r.json({error:"name is required"},400);let y=chunkNY47CFVP_cjs.i(),n=await t.create({collection:chunkNY47CFVP_cjs.d,data:{userId:i.id,name:m.name,key:y,keyPrefix:chunkNY47CFVP_cjs.j(y),permissions:Array.isArray(m.permissions)?m.permissions:["*"],expiresAt:m.expiresAt||null,createdAt:new Date().toISOString()}});return await $?.createAuditLog({action:"api_key_create",userId:i.id,resource:"api_key",resourceId:n.id,success:!0,metadata:{keyName:m.name}}),r.json({...n,key:y,permissions:Array.isArray(m.permissions)?m.permissions:["*"]},201)}catch(i){return console.error("[ApiKeys] POST error:",i),r.json({error:i.message},500)}}),w.delete("/api/keys/:id",async r=>{try{let{user:i}=await U(r.req.raw,R,d,u);if(!i||!chunkQ3Q7BJVQ_cjs.a(i,"users:admin"))return r.json({error:"Forbidden"},403);let m=r.req.param("id"),y=await t.findByID({collection:chunkNY47CFVP_cjs.d,id:m});return y?(await t.delete({collection:chunkNY47CFVP_cjs.d,id:m}),await $?.createAuditLog({action:"api_key_delete",userId:i.id,resource:"api_key",resourceId:m,success:!0,metadata:{keyName:y.name}}),r.json({message:"API key deleted"})):r.json({error:"API key not found"},404)}catch(i){return console.error("[ApiKeys] DELETE error:",i),r.json({error:i.message},500)}}),w.patch("/api/keys/:id",async r=>{try{let{user:i}=await U(r.req.raw,R,d,u);if(!i||!chunkQ3Q7BJVQ_cjs.a(i,"users:admin"))return r.json({error:"Forbidden"},403);let m=r.req.param("id"),y=await r.req.json(),n=await t.findByID({collection:chunkNY47CFVP_cjs.d,id:m});if(!n)return r.json({error:"API key not found"},404);let a={};if(typeof y.name=="string"&&y.name.trim()&&(a.name=y.name.trim()),Array.isArray(y.permissions)&&(a.permissions=y.permissions),y.expiresAt!==void 0&&(a.expiresAt=y.expiresAt||null),Object.keys(a).length===0)return r.json({error:"Nothing to update"},400);let p=await t.update({collection:chunkNY47CFVP_cjs.d,id:m,data:a});return r.json({...p,keyPrefix:n.keyPrefix})}catch(i){return console.error("[ApiKeys] PATCH error:",i),r.json({error:i.message},500)}}),w.post("/api/keys/:id/rotate",async r=>{try{let{user:i}=await U(r.req.raw,R,d,u);if(!i||!chunkQ3Q7BJVQ_cjs.a(i,"users:admin"))return r.json({error:"Forbidden"},403);let m=r.req.param("id"),y=await t.findByID({collection:chunkNY47CFVP_cjs.d,id:m});if(!y)return r.json({error:"API key not found"},404);let n=chunkNY47CFVP_cjs.i(),a=await t.update({collection:chunkNY47CFVP_cjs.d,id:m,data:{key:n,keyPrefix:chunkNY47CFVP_cjs.j(n),lastUsedAt:null}});return await $?.createAuditLog({action:"api_key_rotate",userId:i.id,resource:"api_key",resourceId:m,success:!0,metadata:{keyName:y.name}}),r.json({...a,key:n,permissions:y.permissions,expiresAt:y.expiresAt})}catch(i){return console.error("[ApiKeys] rotate error:",i),r.json({error:i.message},500)}}),w.get("/api/webhooks/actions",async r=>{try{let{user:i}=await U(r.req.raw,R,d,u);if(!i||!chunkQ3Q7BJVQ_cjs.a(i,"users:read"))return r.json({error:"Forbidden"},403);let m={generic:{label:"Custom URL",description:"POST to any endpoint with Kyro payload",configFields:[],envVars:[]},"github-push":{label:"GitHub Push",description:"Push an empty commit to simulate a push event",configFields:[{name:"githubOwner",label:"Owner",required:!0,placeholder:"e.g., kyro-dev"},{name:"githubRepo",label:"Repository",required:!0,placeholder:"e.g., my-website"},{name:"githubBranch",label:"Branch",required:!1,placeholder:"main"}],envVars:["GITHUB_TOKEN"]}};return r.json({actions:m})}catch(i){return console.error("[Webhooks] actions error:",i),r.json({error:i.message},500)}}),w.get("/api/webhooks",async r=>{try{let{user:i}=await U(r.req.raw,R,d,u);if(!i||!chunkQ3Q7BJVQ_cjs.a(i,"users:read"))return r.json({error:"Forbidden"},403);if(!h)return r.json({error:"Webhook service not available"},503);let m=await h.getWebhooks();return r.json({docs:m})}catch(i){return console.error("[Webhooks] GET error:",i),r.json({error:i.message},500)}}),w.post("/api/webhooks",async r=>{try{let{user:i}=await U(r.req.raw,R,d,u);if(!i||!chunkQ3Q7BJVQ_cjs.a(i,"users:admin"))return r.json({error:"Forbidden"},403);if(!h)return r.json({error:"Webhook service not available"},503);let m=await r.req.json(),y=await h.createWebhook(m);return await $?.createAuditLog({action:"webhook_create",userId:i.id,resource:"webhook",resourceId:y.id,success:!0,metadata:{name:y.name,url:y.url}}),r.json(y,201)}catch(i){return console.error("[Webhooks] POST error:",i),r.json({error:i.message},500)}}),w.get("/api/webhooks/:id",async r=>{try{let{user:i}=await U(r.req.raw,R,d,u);if(!i||!chunkQ3Q7BJVQ_cjs.a(i,"users:read"))return r.json({error:"Forbidden"},403);if(!h)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=await h.getWebhookById(m);return y?r.json(y):r.json({error:"Webhook not found"},404)}catch(i){return console.error("[Webhooks] GET :id error:",i),r.json({error:i.message},500)}}),w.patch("/api/webhooks/:id",async r=>{try{let{user:i}=await U(r.req.raw,R,d,u);if(!i||!chunkQ3Q7BJVQ_cjs.a(i,"users:admin"))return r.json({error:"Forbidden"},403);if(!h)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=await r.req.json(),n=await h.updateWebhook(m,y);return n?(await $?.createAuditLog({action:"webhook_update",userId:i.id,resource:"webhook",resourceId:m,success:!0,metadata:{name:n.name}}),r.json(n)):r.json({error:"Webhook not found"},404)}catch(i){return console.error("[Webhooks] PATCH error:",i),r.json({error:i.message},500)}}),w.delete("/api/webhooks/:id",async r=>{try{let{user:i}=await U(r.req.raw,R,d,u);if(!i||!chunkQ3Q7BJVQ_cjs.a(i,"users:admin"))return r.json({error:"Forbidden"},403);if(!h)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=await h.getWebhookById(m);return y?(await h.deleteWebhook(m),await $?.createAuditLog({action:"webhook_delete",userId:i.id,resource:"webhook",resourceId:m,success:!0,metadata:{name:y.name}}),r.json({message:"Webhook deleted"})):r.json({error:"Webhook not found"},404)}catch(i){return console.error("[Webhooks] DELETE error:",i),r.json({error:i.message},500)}}),w.post("/api/webhooks/:id/test",async r=>{try{let{user:i}=await U(r.req.raw,R,d,u);if(!i||!chunkQ3Q7BJVQ_cjs.a(i,"users:admin"))return r.json({error:"Forbidden"},403);if(!h)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=await h.testWebhook(m);return y?r.json(y):r.json({error:"Webhook not found"},404)}catch(i){return console.error("[Webhooks] test error:",i),r.json({error:i.message},500)}}),w.get("/api/webhooks/:id/history",async r=>{try{let{user:i}=await U(r.req.raw,R,d,u);if(!i||!chunkQ3Q7BJVQ_cjs.a(i,"users:read"))return r.json({error:"Forbidden"},403);if(!h)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),y=Math.min(parseInt(r.req.query("limit")||"50"),100),n=await h.getDeliveryHistory(m,y);return r.json({docs:n})}catch(i){return console.error("[Webhooks] history error:",i),r.json({error:i.message},500)}});function Re(r){let i={},m=["name","type","required","hasMany","relationTo","options","min","max","minLength","maxLength","defaultValue","label","localized","admin","unique","index","hidden","readOnly","deprecated"];for(let y of m)y in r&&(i[y]=r[y]);return r.fields&&(i.fields=r.fields.map(Re)),r.tabs&&(i.tabs=r.tabs.map(y=>({label:y.label,name:y.name,fields:y.fields.map(Re)}))),i}w.get("/api/__schema",async r=>{try{let{user:i,apiKeyContext:m}=await U(r.req.raw,R,d,u);if(!i&&!m)return r.json({error:"Unauthorized"},401);let n=e.getCollections().filter(a=>a.slug!=="users"&&a.slug!=="audit_logs").map(a=>({slug:a.slug,label:a.label,labelPlural:a.labelPlural,singularLabel:a.singularLabel,timestamps:a.timestamps,auth:!!a.auth,tenantScoped:!!a.tenantScoped,upload:a.upload?{staticDir:a.upload.staticDir,imageSizes:a.upload.imageSizes,mimeTypes:a.upload.mimeTypes}:void 0,fields:a.fields.map(Re)}));return r.json(n)}catch(i){return console.error("[Schema] error:",i),r.json({error:i.message},500)}});let It=e.getCollections();for(let r of It){let y=function(n,a){let p=[],b=new Set([...Object.keys(n),...Object.keys(a)]);for(let g of b)g==="id"||g==="createdAt"||g==="updatedAt"||JSON.stringify(n[g])!==JSON.stringify(a[g])&&p.push({field:g,oldValue:g in n?n[g]:void 0,newValue:g in a?a[g]:void 0});return p};let i=r.slug;if(i==="users"||i==="audit_logs")continue;let m=`/api/${i}`;w.post(`${m}/dynamic-options/:fieldName`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:b}=await U(n.req.raw,R,d,u),g=await O(r,"read",n.req.raw,a,p,b,P,D);if(!g.allowed)return n.json({error:g.error},g.status||403);let A=n.req.param("fieldName"),S=await n.req.json(),{data:v,siblingData:x}=S,T=ge(r.fields,A);if(!T)return n.json({error:"Field not found"},404);if(T.type!=="select")return n.json({error:"Field is not a select field"},400);let q=[];return typeof T.options=="function"?q=await T.options({data:v||{},siblingData:x||{}}):Array.isArray(T.options)&&(q=T.options),n.json({options:q})}catch(a){return n.json({error:a.message},500)}}),w.get(m,async n=>{try{let{user:a,tenantId:p,apiKeyContext:b}=await U(n.req.raw,R,d,u),g=await O(r,"read",n.req.raw,a,p,b,P,D);if(!g.allowed)return n.json({error:g.error},g.status||403);p&&t.setTenantContext({tenantId:p,userId:a?.id??"",role:a?.role,isSuperAdmin:a?.role==="super_admin"});let A=new URL(n.req.url),S=parseInt(A.searchParams.get("page")||"1"),v=Math.min(parseInt(A.searchParams.get("limit")||"10"),100),x=A.searchParams.get("sort")||void 0,T=parseInt(A.searchParams.get("depth")||"0"),q=A.searchParams.get("select")?.split(",")||void 0,E=A.searchParams.get("draft"),C=E==="true"?!0:E==="false"?!1:!!a,j={},_=A.searchParams.get("where");if(_)try{j=JSON.parse(_);}catch{return n.json({error:"Invalid JSON in where parameter"},400)}let F=await t.find({collection:i,where:j,sort:x,limit:v,page:S,depth:T,tenantId:p,select:q,draft:C});return await chunkXUONID6O_cjs.a(F.docs,r.fields,t,e,1,T),n.json(F)}catch(a){return console.error("[API] list error:",a),n.json({error:a.message},500)}}),w.get(`${m}/:id/versions`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:b}=await U(n.req.raw,R,d,u),g=await O(r,"read",n.req.raw,a,p,b,P,D);if(!g.allowed)return n.json({error:g.error},g.status||403);let A=n.req.param("id");if(!A)return n.json({error:"Missing document ID"},400);let S=new URL(n.req.url),v=S.searchParams.get("compareA"),x=S.searchParams.get("compareB");if(Ve($,b,`${m}/${A}/versions`,"GET",n.req.raw),v&&x){let[C,j]=await Promise.all([t.findVersionByID({collection:i,versionId:v,tenantId:p}),t.findVersionByID({collection:i,versionId:x,tenantId:p})]);if(!C||!j)return n.json({error:"Version not found"},404);let _=y(C.data,j.data);return n.json({diffs:_})}let T=parseInt(S.searchParams.get("page")||"1"),q=Math.min(parseInt(S.searchParams.get("limit")||"10"),100),E=await t.findVersions({collection:i,documentId:A,page:T,limit:q,tenantId:p});return n.json(E)}catch(a){return console.error("[API] versions error:",a),n.json({error:a.message},500)}}),w.put(`${m}/:id/draft`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:b}=await U(n.req.raw,R,d,u),g=await O(r,"update",n.req.raw,a,p,b,P,D);if(!g.allowed)return n.json({error:g.error},g.status||403);let A=n.req.param("id"),S=await n.req.json(),v=Xe(S),x=await t.findByID({collection:i,id:A,tenantId:p,draft:!0});if(!x)return n.json({error:"Document not found"},404);let T;S.delta?T={...x,...S.delta}:T=S.data??wt(S);let q=await t.updateLatestVersion({collection:i,documentId:A,data:T,status:"draft",tenantId:p});return a&&$?.createAuditLog({action:"document_update",userId:a.id,resource:i,resourceId:A,success:!0,metadata:{type:"draft_save"}}),n.json({data:q,message:"Draft saved successfully"})}catch(a){return n.json({error:a.message},500)}}),w.delete(`${m}/:id/draft`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:b}=await U(n.req.raw,R,d,u),g=await O(r,"update",n.req.raw,a,p,b,P,D);return g.allowed?(a&&$?.createAuditLog({action:"document_update",userId:a.id,resource:i,resourceId:n.req.param("id"),success:!0,metadata:{type:"draft_discard"}}),n.json({message:"Draft discarded successfully"})):n.json({error:g.error},g.status||403)}catch(a){return n.json({error:a.message},500)}}),w.get(`${m}/:id`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:b}=await U(n.req.raw,R,d,u),g=new URL(n.req.url),A=g.searchParams.get("draft"),S=g.searchParams.get("kyroToken"),v=!1;if(A==="true"&&S&&s)try{let j=await jwt.verify(S,s,"HS256");j&&j.type==="preview"&&j.collection===r.slug&&(v=!0);}catch(j){console.warn("Invalid preview token",j);}if(!v){let j=await O(r,"read",n.req.raw,a,p,b,P,D);if(!j.allowed)return n.json({error:j.error},j.status||403)}let x=n.req.param("id"),T=parseInt(g.searchParams.get("depth")||"0"),q=g.searchParams.get("select")?.split(",")||void 0,E=A==="true"?!0:A==="false"?!1:!!a,C=await t.findByID({collection:i,id:x,depth:T,tenantId:p,select:q,draft:E});return !C&&r.fields.some(j=>j.name==="slug")&&(C=await t.findOne({collection:i,where:{slug:x},tenantId:p,draft:E})),C?(await chunkXUONID6O_cjs.a([C],r.fields,t,e,1,T),n.json({data:C})):n.json({error:"Document not found"},404)}catch(a){return n.json({error:a.message},500)}}),w.post(`${m}/preview-url`,async n=>{try{let{user:a,tenantId:p}=await U(n.req.raw,R,d,u),b=await O(r,"read",n.req.raw,a,p);if(!b.allowed)return n.json({error:b.error||"Forbidden"},b.status||403);let g=await n.req.json().catch(()=>({})),A="";s&&(A=await jwt.sign({type:"preview",collection:r.slug,id:g.id,exp:Math.floor(Date.now()/1e3)+3600},s,"HS256"));let S="";if(r.admin?.preview){S=await r.admin.preview(g,{req:n.req.raw,token:A});try{let v=new URL(S,"http://localhost");v.searchParams.has("preview")||v.searchParams.set("preview","true"),!v.searchParams.has("kyroToken")&&A&&v.searchParams.set("kyroToken",A),S=S.startsWith("http")?v.toString():`${v.pathname}${v.search}`;}catch{}}else {let v="";try{let T=await t.findOne({collection:"_globals_site-settings",where:{}});T?.siteUrl&&(v=T.siteUrl);}catch{}if(!v)return n.json({error:"No site URL configured in settings, and no custom preview function defined for this collection."},400);v=v.replace(/\/$/,"");let x=g.slug||g.id||"";S=`${v}/${r.slug}/${x}?preview=true&kyroToken=${A}`;}return n.json({url:S})}catch(a){return n.json({error:a.message},500)}}),w.post(m,async n=>{try{let{user:a,tenantId:p,apiKeyContext:b}=await U(n.req.raw,R,d,u),g=await O(r,"create",n.req.raw,a,p,b,P,D);if(!g.allowed)return n.json({error:g.error},g.status||403);p&&t.setTenantContext({tenantId:p,userId:a?.id??"",role:a?.role,isSuperAdmin:a?.role==="super_admin"}),Ve($,b,m,"POST",n.req.raw);let S=await n.req.json();ye(S,r.fields),we(r.fields,S);let v=n.req.raw;if(r.hooks?.beforeValidate)for(let j of r.hooks.beforeValidate){let _=await j({collection:i,data:S,req:v,user:a,tenantId:p,operation:"create"});_&&Object.assign(S,_);}let x=e.getCreateZodSchema(i);try{S=x.parse(S);}catch(j){return n.json({error:`Validation failed: ${He(j.errors)}`,details:j.errors},400)}r.tenantScoped&&p&&(S.tenantId=p);let T=r.versions?.drafts===!0,q=r.fields.find(j=>j.name==="status"),E=q?.type==="select"&&Array.isArray(q.options)&&q.options.some(j=>j.value==="published");if(T?S.status="draft":E&&!S.status&&(S.status="published"),r.hooks?.beforeChange)for(let j of r.hooks.beforeChange){let _=await j({collection:i,data:S,req:v,user:a,tenantId:p,operation:"create"});_&&Object.assign(S,_);}let C=await t.create({collection:i,data:S,tenantId:p});if(T&&await t.createVersion({collection:i,documentId:C.id,data:S,status:"draft",createdBy:a?.id,changeDescription:"Created",tenantId:p}),r.hooks?.afterChange)for(let j of r.hooks.afterChange)await j({collection:i,doc:C,data:S,req:v,user:a,tenantId:p,operation:"create"});return h&&h.trigger(Ue(i,"create"),{collection:i,operation:"create",data:C,user:a?{id:a.id,email:a.email,role:a.role}:void 0,tenantId:p}).catch(j=>console.error("[Webhook] Failed to trigger:",j)),a&&$?.createAuditLog({action:"document_create",userId:a.id,resource:i,resourceId:C.id,success:!0}),n.json({data:C,message:"Created successfully"},201)}catch(a){return a.name==="ZodError"?n.json({error:`Validation failed: ${He(a.errors)}`,details:a.errors},400):n.json({error:a.message},500)}}),w.patch(`${m}/:id`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:b}=await U(n.req.raw,R,d,u),g=await O(r,"update",n.req.raw,a,p,b,P,D);if(!g.allowed)return n.json({error:g.error},g.status||403);let A=n.req.param("id"),S=await n.req.json(),v=Xe(S),x=await t.findByID({collection:i,id:A,tenantId:p,draft:!0});if(!x)return n.json({error:"Document not found"},404);if(v&&x.updatedAt&&v!==x.updatedAt)return n.json(bt(v,x),409);let T=Object.fromEntries(Object.entries(wt(S)).filter(([Y,W])=>W!=="null"&&W!==void 0));ye(T,r.fields),we(r.fields,T);let q=n.req.raw;if(r.hooks?.beforeValidate)for(let Y of r.hooks.beforeValidate){let W=await Y({collection:i,data:T,originalDoc:x,req:q,user:a,tenantId:p,operation:"update"});W&&Object.assign(T,W);}if(T=e.getUpdateZodSchema(i).parse(T),r.hooks?.beforeChange)for(let Y of r.hooks.beforeChange){let W=await Y({collection:i,data:T,originalDoc:x,req:q,user:a,tenantId:p,operation:"update"});W&&Object.assign(T,W);}let C=n.req.header("X-Draft")==="true",j=r.versions?.drafts===!0,_=n.req.query("autosave")==="true",F;if(j&&C?await t.createVersion({collection:i,documentId:A,data:T,status:"draft",autosave:_,createdBy:a?.id,changeDescription:_?"Autosave":"Draft saved",tenantId:p}):j?(await t.update({collection:i,id:A,data:{...T,status:"published"},tenantId:p}),await t.createVersion({collection:i,documentId:A,data:T,status:"published",createdBy:a?.id,changeDescription:"Published",tenantId:p})):await t.update({collection:i,id:A,data:T,tenantId:p}),F=await t.findByID({collection:i,id:A,tenantId:p,draft:!0}),r.hooks?.afterChange)for(let Y of r.hooks.afterChange)await Y({collection:i,doc:F,data:T,originalDoc:x,req:q,user:a,tenantId:p,operation:"update"});return h&&!_&&h.trigger(Ue(i,"update"),{collection:i,operation:"update",data:F,previousData:x,user:a?{id:a.id,email:a.email,role:a.role}:void 0,tenantId:p}).catch(Y=>console.error("[Webhook] Failed to trigger:",Y)),Ve($,b,`${m}/${A}`,"PATCH",n.req.raw),a&&$?.createAuditLog({action:"document_update",userId:a.id,resource:i,resourceId:A,success:!0}),n.json({data:F,message:j?"Draft saved":"Updated successfully"})}catch(a){return a.name==="ZodError"?(console.error(`[PATCH ${m}/:id] Validation failed:`,a.errors),n.json({error:`Validation failed: ${He(a.errors)}`,details:a.errors},400)):(console.error(`[PATCH ${m}/:id] ERROR:`,a.message,"CAUSE:",a.cause?.message||a.cause,"QUERY:",a.query),n.json({error:a.message},500))}}),w.delete(`${m}/:id`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:b}=await U(n.req.raw,R,d,u),g=await O(r,"delete",n.req.raw,a,p,b,P,D);if(!g.allowed)return n.json({error:g.error},g.status||403);p&&t.setTenantContext({tenantId:p,userId:a?.id??"",role:a?.role,isSuperAdmin:a?.role==="super_admin"});let A=n.req.param("id"),S=n.req.raw,v=await t.findByID({collection:i,id:A,tenantId:p,draft:!0});if(!v)return n.json({error:"Document not found"},404);if(r.hooks?.beforeDelete)for(let T of r.hooks.beforeDelete)await T({collection:i,doc:v,req:S,user:a,tenantId:p,operation:"delete"});let x=await t.delete({collection:i,id:A,tenantId:p});if(r.hooks?.afterDelete)for(let T of r.hooks.afterDelete)await T({collection:i,doc:x,originalDoc:v,req:S,user:a,tenantId:p,operation:"delete"});return h&&h.trigger(Ue(i,"delete"),{collection:i,operation:"delete",data:x,previousData:v,user:a?{id:a.id,email:a.email,role:a.role}:void 0,tenantId:p}).catch(T=>console.error("[Webhook] Failed to trigger:",T)),Ve($,b,`${m}/${A}`,"DELETE",n.req.raw),a&&$?.createAuditLog({action:"document_delete",userId:a.id,resource:i,resourceId:A,success:!0}),n.json({data:x,message:"Deleted successfully"})}catch(a){return console.error(`[DELETE] Error deleting ${i}:`,a),n.json({error:a.message||String(a)},500)}}),w.post(`${m}/:id/duplicate`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:b}=await U(n.req.raw,R,d,u),g=await O(r,"create",n.req.raw,a,p,b,P,D);if(!g.allowed)return n.json({error:g.error},g.status||403);let A=n.req.param("id"),S=await t.findByID({collection:i,id:A,tenantId:p,draft:!0});if(!S)return n.json({error:"Document not found"},404);let{id:v,createdAt:x,updatedAt:T,...q}=S;ke(r.fields,q);let E=Date.now().toString(36);"slug"in q&&typeof q.slug=="string"&&(q.slug=`${q.slug||"document"}-copy-${E}`),"title"in q&&typeof q.title=="string"?q.title=`${q.title||"Copy"} (Copy)`:"name"in q&&typeof q.name=="string"&&(q.name=`${q.name||"Copy"} (Copy)`);let C=await t.create({collection:i,data:{...q,status:"draft"},tenantId:p});return n.json({data:C,message:"Document duplicated successfully"})}catch(a){return console.error("[Duplicate] Error:",a),n.json({error:a.message||String(a)},500)}}),w.post(`${m}/:id/versions/:versionId/restore`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:b}=await U(n.req.raw,R,d,u),g=await O(r,"update",n.req.raw,a,p,b,P,D);if(!g.allowed)return n.json({error:g.error},g.status||403);let A=n.req.param("id"),S=n.req.param("versionId"),v=await t.findVersionByID({collection:i,versionId:S,tenantId:p});if(!v)return n.json({error:"Version not found"},404);let x=await t.update({collection:i,id:A,data:{...v.data,status:"draft"},tenantId:p});return n.json({data:x,message:"Version restored successfully"})}catch(a){return n.json({error:a.message},500)}}),w.post(`${m}/:id/versions`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:b}=await U(n.req.raw,R,d,u),g=await O(r,"update",n.req.raw,a,p,b,P,D);if(!g.allowed)return n.json({error:g.error},g.status||403);let A=await n.req.json(),{versionId:S,action:v}=A;if(v==="restore"&&S){let x=await t.findVersionByID({collection:i,versionId:S,tenantId:p});if(!x)return n.json({error:"Version not found"},404);let T=await t.update({collection:i,id:n.req.param("id"),data:{...x.data,status:"draft"},tenantId:p});return n.json({data:T,message:"Version restored successfully"})}return n.json({error:"Invalid action"},400)}catch(a){return n.json({error:a.message},500)}}),w.post(`${m}/:id/publish`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:b}=await U(n.req.raw,R,d,u),g=await O(r,"update",n.req.raw,a,p,b,P,D);if(!g.allowed)return n.json({error:g.error},g.status||403);p&&t.setTenantContext({tenantId:p,userId:a?.id??"",role:a?.role,isSuperAdmin:a?.role==="super_admin"});let A=n.req.param("id"),S=await n.req.json().catch(()=>({})),v=Xe(S),x=await t.findByID({collection:i,id:A,tenantId:p,draft:!0});if(!x)return n.json({error:"Document not found"},404);if(v&&x.updatedAt&&v!==x.updatedAt)return n.json(bt(v,x),409);let T={status:"published"},q=x;if(r.versions?.drafts){let C=await t.findVersions({collection:i,documentId:A,limit:1,sort:"-createdAt",tenantId:p});if(C.docs.length>0){let j=C.docs[0];q={...x,...j.data},T={...j.data,...T};}}let E=await t.update({collection:i,id:A,data:T,tenantId:p});return r.versions?.drafts&&await t.createVersion({collection:i,documentId:A,data:{...q,status:"published"},status:"published",createdBy:a?.id,changeDescription:"Published",tenantId:p}),h&&h.trigger(Ue(i,"update"),{collection:i,operation:"update",data:E,user:a?{id:a.id,email:a.email,role:a.role}:void 0,tenantId:p}).catch(C=>console.error("[Webhook] Failed to trigger:",C)),n.json({data:E,message:"Published successfully"})}catch(a){return n.json({error:a.message},500)}}),w.post(`${m}/:id/unpublish`,async n=>{try{let{user:a,tenantId:p,apiKeyContext:b}=await U(n.req.raw,R,d,u),g=await O(r,"update",n.req.raw,a,p,b,P,D);if(!g.allowed)return n.json({error:g.error},g.status||403);let A=n.req.param("id");if(!await t.findByID({collection:i,id:A,tenantId:p,draft:!0}))return n.json({error:"Document not found"},404);let v=await t.update({collection:i,id:A,data:{status:"draft"},tenantId:p});return h&&h.trigger(Ue(i,"update"),{collection:i,operation:"update",data:v,user:a?{id:a.id,email:a.email,role:a.role}:void 0,tenantId:p}).catch(x=>console.error("[Webhook] Failed to trigger:",x)),n.json({data:v,message:"Unpublished successfully"})}catch(a){return n.json({error:a.message},500)}});}for(let r of e.getGlobals()){let i=r.slug,m=`/api/globals/${i}`;w.post(`${m}/dynamic-options/:fieldName`,async n=>{try{let{user:a,tenantId:p}=await U(n.req.raw,R,d,u),b=await J(r,"read",n.req.raw,a,p,P);if(!b.allowed)return n.json({error:b.error},b.status||403);let g=n.req.param("fieldName"),A=await n.req.json(),{data:S,siblingData:v}=A,x=ge(r.fields,g);if(!x)return n.json({error:"Field not found"},404);if(x.type!=="select")return n.json({error:"Field is not a select field"},400);let T=[];return typeof x.options=="function"?T=await x.options({data:S||{},siblingData:v||{}}):Array.isArray(x.options)&&(T=x.options),n.json({options:T})}catch(a){return n.json({error:a.message},500)}}),w.get(m,async n=>{try{let{user:a,tenantId:p}=await U(n.req.raw,R,d,u),b=new URL(n.req.url),g=b.searchParams.get("kyroToken"),A=b.searchParams.get("draft"),S=!1;if(A==="true"&&g&&s)try{let E=await jwt.verify(g,s,"HS256");E&&E.type==="preview"&&E.collection===`_globals_${r.slug}`&&(S=!0);}catch(E){console.warn("Invalid preview token",E);}if(!S){let E=await J(r,"read",n.req.raw,a,p,P);if(!E.allowed)return n.json({error:E.error},E.status||403)}let v=A==="true"?!0:A==="false"?!1:!!a,x=parseInt(b.searchParams.get("depth")||"0"),q=(await t.find({collection:`_globals_${i}`,where:{},tenantId:p,draft:v,depth:x,limit:1})).docs[0];if(q&&x>0&&await chunkXUONID6O_cjs.a([q],r.fields,t,e,1,x),i==="system"){let E=pr__default.default.randomBytes(32).toString("hex");q?q.appSecret||(await t.update({collection:`_globals_${i}`,id:i,data:{appSecret:E},tenantId:p}),q.appSecret=E):q=await t.create({collection:`_globals_${i}`,data:{id:i,appSecret:E},tenantId:p});}return n.json({data:q||{}})}catch(a){return n.json({error:a.message},500)}});let y=async n=>{try{let{user:a,tenantId:p}=await U(n.req.raw,R,d,u),b=await J(r,"update",n.req.raw,a,p,P);if(!b.allowed)return n.json({error:b.error},b.status||403);let g=new URL(n.req.url),A=parseInt(g.searchParams.get("depth")||"0"),S=await n.req.json(),v=Xe(S),x=wt(S),T=Object.fromEntries(Object.entries(x).filter(([H,Ae])=>Ae!==null&&Ae!=="null"&&Ae!==void 0));ye(T,r.fields),we(r.fields,T);let q=e.getUpdateZodSchema(i),E;try{E=q.parse(T);}catch(H){return n.json({error:`Validation failed: ${He(H.errors)}`,details:H.errors},400)}let C=new Set(["id","createdAt","updatedAt","status","baseUpdatedAt","_baseUpdatedAt"]),j=Object.fromEntries(Object.entries(E).filter(([H])=>!C.has(H))),_=`_globals_${i}`,F=await t.findOne({collection:_,where:{},tenantId:p,draft:!0});if(F&&v&&F.updatedAt&&v!==F.updatedAt)return n.json(bt(v,F),409);let Y=n.req.header("X-Draft")==="true",W=r.versions?.drafts===!0,oe=n.req.query("autosave")==="true",K;if(W&&Y)await t.createVersion({collection:_,documentId:i,data:j,status:"draft",autosave:oe,createdBy:a?.id,changeDescription:oe?"Autosave":"Manual save",tenantId:p}),F?K=F:K=await t.create({collection:_,data:{...j,id:i,status:"draft"},tenantId:p});else if(W&&!Y){let H="published";F?K=await t.update({collection:_,id:i,data:{...j,status:H},tenantId:p}):K=await t.create({collection:_,data:{...j,id:i,status:H},tenantId:p}),await t.createVersion({collection:_,documentId:i,data:j,status:H,autosave:!1,createdBy:a?.id,changeDescription:"Published",tenantId:p});}else F?K=await t.update({collection:_,id:i,data:j,tenantId:p}):K=await t.create({collection:_,data:{...j,id:i},tenantId:p});if(i==="storage-settings"&&(G=null,ae=null),i==="email-settings"){let H=await chunkGCQTSPX6_cjs.b.fromConfig(t);B.email=H||void 0;}return i==="system"&&await Lt(),a&&$?.createAuditLog({action:"settings_change",userId:a.id,resource:`global:${i}`,resourceId:i,success:!0}),K&&A>0&&await chunkXUONID6O_cjs.a([K],r.fields,t,e,1,A),n.json({data:K,message:"Updated successfully"})}catch(a){return console.error(`[API] Save global "${i}" failed:`,a),n.json({error:a.message||"Save failed",stack:process.env.NODE_ENV==="development"?a.stack:void 0},500)}};w.post(m,y),w.patch(m,y),w.post(`${m}/preview-url`,async n=>{try{let{user:a,tenantId:p}=await U(n.req.raw,R,d,u),b=await J(r,"read",n.req.raw,a,p);if(!b.allowed)return n.json({error:b.error||"Forbidden"},b.status||403);let g=await n.req.json().catch(()=>({})),A="";s&&(A=await jwt.sign({type:"preview",collection:`_globals_${r.slug}`,exp:Math.floor(Date.now()/1e3)+3600},s,"HS256"));let S="";if(r.admin?.preview)S=await r.admin.preview(g,{req:n.req.raw,token:A});else {let v="";try{let x=await t.findOne({collection:"_globals_site-settings",where:{}});x?.siteUrl&&(v=x.siteUrl);}catch{}if(!v)return n.json({error:"No site URL configured in settings, and no custom preview function defined."},400);v=v.replace(/\/$/,""),S=`${v}/?preview=true&kyroToken=${A}`;}return n.json({url:S})}catch(a){return n.json({error:a.message},500)}}),w.post(`${m}/publish`,async n=>{try{let{user:a,tenantId:p}=await U(n.req.raw,R,d,u),b=await J(r,"update",n.req.raw,a,p,P);if(!b.allowed)return n.json({error:b.error},403);let g=`_globals_${i}`,A=await t.findOne({collection:g,where:{},tenantId:p,draft:!0});if(!A)return n.json({error:"Global not found"},404);let S={status:"published"},v=A;if(r.versions?.drafts){let T=await t.findVersions({collection:g,documentId:i,limit:1,sort:"-createdAt",tenantId:p});T.docs.length>0&&(v={...A,...T.docs[0].data},S={...T.docs[0].data,...S});}let x=await t.update({collection:g,id:i,data:S,tenantId:p});return r.versions?.drafts&&await t.createVersion({collection:g,documentId:i,data:{...v,status:"published"},status:"published",createdBy:a?.id,changeDescription:"Published",tenantId:p}),n.json({data:x,message:"Published successfully"})}catch(a){return n.json({error:a.message},500)}}),w.post(`${m}/unpublish`,async n=>{try{let{user:a,tenantId:p}=await U(n.req.raw,R,d,u),b=await J(r,"update",n.req.raw,a,p,P);if(!b.allowed)return n.json({error:b.error},403);let g=await t.update({collection:`_globals_${i}`,id:i,data:{status:"draft"},tenantId:p});return n.json({data:g,message:"Unpublished successfully"})}catch(a){return n.json({error:a.message},500)}}),w.get(`${m}/versions`,async n=>{try{let{user:a,tenantId:p}=await U(n.req.raw,R,d,u),b=await J(r,"read",n.req.raw,a,p,P);if(!b.allowed)return n.json({error:b.error},403);let g=parseInt(n.req.query("limit")||"10"),A=parseInt(n.req.query("page")||"1"),S=await t.findVersions({collection:`_globals_${i}`,documentId:i,limit:g,page:A,tenantId:p});return n.json(S)}catch(a){return n.json({error:a.message},500)}}),w.get(`${m}/versions/:versionId`,async n=>{try{let a=n.req.param("versionId"),{user:p,tenantId:b}=await U(n.req.raw,R,d,u),g=await J(r,"read",n.req.raw,p,b,P);if(!g.allowed)return n.json({error:g.error},403);let A=await t.findVersionByID({collection:`_globals_${i}`,versionId:a,tenantId:b});return A?n.json({data:A}):n.json({error:"Version not found"},404)}catch(a){return n.json({error:a.message},500)}}),w.post(`${m}/versions/:versionId/restore`,async n=>{try{let a=n.req.param("versionId"),{user:p,tenantId:b}=await U(n.req.raw,R,d,u),g=await J(r,"update",n.req.raw,p,b,P);if(!g.allowed)return n.json({error:g.error},403);let A=`_globals_${i}`,S=await t.findVersionByID({collection:A,versionId:a,tenantId:b});if(!S)return n.json({error:"Version not found"},404);let v=await t.update({collection:A,id:i,data:{...S.data,status:"draft"},tenantId:b});return n.json({data:v,message:"Version restored successfully"})}catch(a){return n.json({error:a.message},500)}}),i==="email-settings"&&w.post(`${m}/test`,async n=>{try{let{user:a,tenantId:p}=await U(n.req.raw,R,d,u),b=await J(r,"update",n.req.raw,a,p,P);if(!b.allowed)return n.json({error:b.error},b.status||403);let g=await n.req.json(),A={provider:g.provider,from:g.fromEmail||g.from,fromName:g.fromName,replyTo:g.replyTo,smtp:g.smtp?{host:g.smtp.host,port:g.smtp.port,secure:g.smtp.secure,auth:{user:g.smtp.username||g.smtp.user,pass:g.smtp.password||g.smtp.pass}}:void 0,resend:g.resend,sendgrid:g.sendgrid,mailgun:g.mailgun,ses:g.ses},S=new chunkGCQTSPX6_cjs.b(A),v=g.testEmail||g.testEmailSection&&g.testEmailSection.testEmail;return v?(await S.send({to:v,subject:"Kyro CMS - Test Email",html:`
-              <div style="font-family: sans-serif; max-width: 600px; margin: 0 auto; padding: 20px; border: 1px solid #e2e8f0; border-radius: 8px;">
-                <h1 style="color: #0b1222; margin-bottom: 16px;">Success! \u{1F680}</h1>
-                <p style="font-size: 16px; color: #334155; line-height: 1.6;">
-                  Your email settings in <b>Kyro CMS</b> are working correctly.
-                </p>
-                <div style="background: #f8fafc; padding: 16px; border-radius: 6px; margin: 24px 0;">
-                  <p style="margin: 0; font-size: 14px; color: #64748b;">
-                    <b>Provider:</b> ${g.provider.toUpperCase()}
-                  </p>
-                  <p style="margin: 8px 0 0; font-size: 14px; color: #64748b;">
-                    <b>Sent at:</b> ${new Date().toLocaleString()}
-                  </p>
-                </div>
-                <p style="font-size: 12px; color: #94a3b8; margin-top: 32px; border-top: 1px solid #f1f5f9; padding-top: 16px;">
-                  This is a test email sent from the Kyro CMS Admin Panel.
-                </p>
-              </div>
-            `,text:`Success! Your email settings in Kyro CMS are working correctly.
-
-Provider: ${g.provider}
-Sent at: ${new Date().toLocaleString()}`}),n.json({message:"Test email sent successfully!"})):n.json({error:"No test recipient email provided"},400)}catch(a){return console.error("[Email Test] Failed:",a),n.json({error:a.message||"Failed to send test email"},500)}});}return w.onError((r,i)=>(console.error(`[API Error] ${i.req.method} ${i.req.path}:`,r),i.json({error:r.message||"Internal server error",code:"INTERNAL_ERROR"},500))),w}function Gr(l,e,t){return or({registry:l,db:e,authSecret:t?.authSecret,user:t?.user,req:t?.req,tenantId:t?.tenantId,cors:t?.cors,webhookService:t?.webhookService})}exports.a=_r;exports.b=Or;exports.c=Mr;exports.d=Qt;exports.e=he;exports.f=mt;exports.g=Zr;exports.h=Lt;exports.i=mr;exports.j=Qr;exports.k=_t;exports.l=Qe;exports.m=Fe;exports.n=Kt;exports.o=ms;exports.p=zt;exports.q=Ne;exports.r=tr;exports.s=ze;exports.t=or;exports.u=Gr;

package/dist/chunk-O62KJ2J7.js

@@ -1 +0,0 @@
-import {c,b}from'./chunk-6NGUY76Y.js';import {a}from'./chunk-IKOXCJYO.js';async function f(t){let{adminEmail:e,adminPassword:r,adminRole:o="super_admin",tenantId:n,emailConfig:s,sendWelcomeEmail:c$1=false}=t,a$1=t.authAdapter||new a({path:t.authDbPath||"./data/auth.db"});try{await a$1.connect?.();}catch{return {success:false,error:"Failed to connect to auth storage"}}let l=new c().validate(r);if(!l.valid)return await a$1.disconnect?.(),{success:false,error:`Invalid password: ${l.errors.join(", ")}`};if(await a$1.findUserByEmail(e))return await a$1.disconnect?.(),{success:false,error:"Admin user already exists"};try{let i=await a$1.createUser({email:e,password:r,role:o||"admin",tenantId:n});if(c$1&&s){let u=new b(s),A=u.getTemplates().welcome(e.split("@")[0]);await u.send({to:e,...A});}return await a$1.disconnect?.(),{success:!0,user:i}}catch(i){return await a$1.disconnect?.(),{success:false,error:i instanceof Error?i.message:"Failed to create admin user"}}}async function y(t,e){return !await t.findUserByEmail(e)}function w(){let t=process.env.KYRO_ADMIN_EMAIL,e=process.env.KYRO_ADMIN_PASSWORD;return !t||!e?null:{authDbPath:process.env.KYRO_AUTH_DB_PATH||"./data/auth.db",adminEmail:t,adminPassword:e,adminRole:process.env.KYRO_ADMIN_ROLE||"super_admin",tenantId:process.env.KYRO_ADMIN_TENANT_ID,emailConfig:process.env.SMTP_HOST?{provider:"smtp",smtp:{host:process.env.SMTP_HOST,port:parseInt(process.env.SMTP_PORT||"587",10),secure:process.env.SMTP_SECURE==="true",auth:{user:process.env.SMTP_USER||"",pass:process.env.SMTP_PASS||""}},from:process.env.SMTP_FROM||"noreply@example.com",fromName:process.env.SMTP_FROM_NAME}:void 0,sendWelcomeEmail:process.env.KYRO_ADMIN_SEND_WELCOME==="true"}}async function T(t){let e=w();if(!e)return null;t&&(e.authAdapter=t);try{if(await e.authAdapter?.connect?.(),await e.authAdapter?.findUserByEmail(e.adminEmail))return await e.authAdapter?.disconnect?.(),{success:!1,error:"Admin user already exists"}}catch{}let r=await f(e);return r.success||console.error(`Bootstrap failed: ${r.error}`),r}async function v(t,e=3,r=2e3){let o="";for(let n=0;n<e;n++){let s=await f(t);if(s.success||(o=s.error||"Unknown error",o.includes("already exists")))return s;n<e-1&&await new Promise(c=>setTimeout(c,r));}return {success:false,error:`Failed after ${e} retries: ${o}`}}export{f as a,y as b,w as c,T as d,v as e};

package/dist/chunk-RYIEE2TH.cjs

@@ -1,2 +0,0 @@
-'use strict';var chunkEJDIR56C_cjs=require('./chunk-EJDIR56C.cjs'),chunkD5P2IPGX_cjs=require('./chunk-D5P2IPGX.cjs'),crypto=require('crypto');var _=class extends chunkEJDIR56C_cjs.a{dialect="mongodb";client;db;database;connectionString;constructor(o){if(super(),o.connectionString){this.connectionString=o.connectionString;try{let e=new URL(o.connectionString);this.database=e.pathname.replace(/^\//,"")||"kyro_cms";}catch{this.database="kyro_cms";}}else this.client=o.client,this.database=o.database;}async connect(){if(this.connectionString&&!this.client){let o;try{o=(await import('mongodb')).MongoClient;}catch{chunkD5P2IPGX_cjs.a(["mongodb"]),o=(await import('mongodb')).MongoClient;}this.client=new o(this.connectionString),await this.client.connect();}this.db=this.client.db(this.database),this.connected=true;}async disconnect(){this.client&&(await this.client.close(),this.connected=false);}getMongoCollection(o){if(!this.db)throw new Error("MongoDB not connected");return this.db.collection(o)}async find(o){let{collection:e,where:n={},sort:s,limit:t=10,page:i=1,tenantId:a,select:r,draft:c}=o,l=this.getCollectionConfig(e),f=this.getMongoCollection(e),d={...n};this.tenantContext&&l.tenantScoped&&(d=chunkEJDIR56C_cjs.c({where:d},e,this.tenantContext,chunkEJDIR56C_cjs.b).where||{});let g=this.buildFilter(d,l.tenantScoped?a:void 0),u=l.fields.find(p=>p.name==="status"),h=u?.type==="select"&&Array.isArray(u.options)&&u.options.some(p=>p.value==="published");!c&&h&&(g.status="published");let m=this.parseSort(s),S={[m.field]:m.direction==="asc"?1:-1},R=(i-1)*t,[x,$]=await Promise.all([f.find(g).sort(S).skip(R).limit(t).project(this.buildProjection(r)).toArray(),f.countDocuments(g)]),y=x.map(p=>this.processResult(p,l));return this.tenantContext&&!this.tenantContext.isSuperAdmin&&(y=y.filter(p=>chunkEJDIR56C_cjs.d(p,e,this.tenantContext,chunkEJDIR56C_cjs.b))),c&&(y=await Promise.all(y.map(async p=>{let v=await this.getMongoCollection(`${e}_versions`).findOne({document_id:p.id},{sort:{createdAt:-1}});if(v){let M=v.data||{};return {...p,...M,status:p.status}}return p}))),{docs:y,...this.calculatePagination(i,t,$)}}async findByID(o){let{collection:e,id:n,tenantId:s,draft:t}=o,i=this.getCollectionConfig(e),a=this.getMongoCollection(e);if(this.tenantContext&&i.tenantScoped){let g={_id:n,tenantId:this.tenantContext.tenantId};if(!chunkEJDIR56C_cjs.d(g,e,this.tenantContext,chunkEJDIR56C_cjs.b))return null}let r={_id:n};s&&i.tenantScoped&&(r.tenantId=s);let c=i.fields.find(g=>g.name==="status"),l=c?.type==="select"&&Array.isArray(c.options)&&c.options.some(g=>g.value==="published");!t&&l&&(r.status="published");let f=await a.findOne(r);if(!f)return null;let d=this.processResult(f,i);if(t){let u=await this.getMongoCollection(`${e}_versions`).findOne({document_id:d.id},{sort:{createdAt:-1}});if(u){let h=u.data||{};d={...d,...h,status:d.status};}}return d}async create(o){let{collection:e,data:n,tenantId:s}=o,t=this.getCollectionConfig(e),i=this.getMongoCollection(e),a=this.prepareData(n,t),r=a.id||this.generateId();delete a.id;let c={...a,_id:r};return s&&t.tenantScoped&&(c.tenantId=s),await i.insertOne(c),this.processResult(c,t)}async update(o){let{collection:e,id:n,data:s,tenantId:t}=o,i=this.getCollectionConfig(e),a=this.getMongoCollection(e),r={_id:n};t&&i.tenantScoped&&(r.tenantId=t);let c=this.prepareData(s,i),l=await a.findOneAndUpdate(r,{$set:c},{returnDocument:"after"});if(!l)throw new Error(`Document not found: ${e}/${n}`);return this.processResult(l,i)}async delete(o){let{collection:e,id:n,tenantId:s}=o,t=this.getCollectionConfig(e),i=this.getMongoCollection(e),a={_id:n};s&&t.tenantScoped&&(a.tenantId=s);let r=await i.findOneAndDelete(a);if(!r)throw new Error(`Document not found: ${e}/${n}`);return this.processResult(r,t)}async count(o){let{collection:e,where:n={},tenantId:s}=o,t=this.getCollectionConfig(e),i=this.getMongoCollection(e),a=this.buildFilter(n,t.tenantScoped?s:void 0);return i.countDocuments(a)}async findOne(o){let{collection:e,where:n={},tenantId:s,draft:t}=o,i=this.getCollectionConfig(e),a=this.getMongoCollection(e),r=this.buildFilter(n,i.tenantScoped?s:void 0),c=i.fields.find(g=>g.name==="status"),l=c?.type==="select"&&Array.isArray(c.options)&&c.options.some(g=>g.value==="published");!t&&l&&(r.status="published");let f=await a.findOne(r);if(!f)return null;let d=this.processResult(f,i);if(t){let u=await this.getMongoCollection(`${e}_versions`).findOne({document_id:d.id},{sort:{createdAt:-1}});if(u){let h=u.data||{};d={...d,...h,status:d.status};}}return d}async findVersions(o){let{collection:e,documentId:n,sort:s,limit:t=10,page:i=1,tenantId:a}=o,r=this.getCollectionConfig(e),c=this.getMongoCollection(`${e}_versions`),l={document_id:n,autosave:{$ne:true}};a&&r.tenantScoped&&(l.tenant_id=a);let f=(i-1)*t,d=this.parseSort(s),g={[d.field]:d.direction==="asc"?1:-1},[u,h]=await Promise.all([c.find(l).sort(g).skip(f).limit(t).toArray(),c.countDocuments(l)]);return {docs:u.map(m=>this.processResult(m,{})),...this.calculatePagination(i,t,h)}}async findVersionByID(o){let{collection:e,versionId:n,tenantId:s}=o,t=this.getCollectionConfig(e),i=this.getMongoCollection(`${e}_versions`),a={_id:n};s&&t.tenantScoped&&(a.tenant_id=s);let r=await i.findOne(a);return r?this.processResult(r,{}):null}async createVersion(o){let{collection:e,documentId:n,data:s,status:t,createdBy:i,changeDescription:a,tenantId:r,autosave:c}=o,l=this.getCollectionConfig(e),f=this.getMongoCollection(`${e}_versions`);if(c){let u={document_id:n,collection_slug:e,autosave:true};r&&l.tenantScoped&&(u.tenant_id=r);let h=await f.findOne(u);if(h){let m=new Date().toISOString();return await f.updateOne({_id:h._id},{$set:{data:s,status:t,updatedAt:m}}),this.processResult({...h,data:s,status:t,updatedAt:m},{})}}let d=new Date().toISOString(),g={_id:this.generateId(),document_id:n,collection_slug:e,data:s,status:t,autosave:c===true,created_by:i,change_description:a,createdAt:d,updatedAt:d};if(r&&l.tenantScoped&&(g.tenant_id=r),await f.insertOne(g),!c){let u=this.getCollectionConfig(e);u.versions?.maxPerDoc&&await this.deleteVersions({collection:e,documentId:n,keepLatest:u.versions.maxPerDoc,tenantId:r});}return this.processResult(g,{})}async updateLatestVersion(o){return this.createVersion({...o,autosave:true})}async deleteVersions(o){let{collection:e,documentId:n,keepLatest:s,tenantId:t}=o,i=this.getCollectionConfig(e),a=this.getMongoCollection(`${e}_versions`);if(s){let r={document_id:n,autosave:{$ne:true}};t&&i.tenantScoped&&(r.tenant_id=t);let l=(await a.find(r).sort({createdAt:-1}).limit(s).project({_id:1}).toArray()).map(f=>f._id);l.length>0&&await a.deleteMany({document_id:n,autosave:{$ne:true},_id:{$nin:l},...t&&i.tenantScoped?{tenant_id:t}:{}});}else {let r={document_id:n};t&&i.tenantScoped&&(r.tenant_id=t),await a.deleteMany(r);}}async migrate(){for(let o of this.collections.values()){let e=this.getMongoCollection(o.slug);await e.createIndex({_id:1}),o.tenantScoped&&await e.createIndex({tenantId:1}),o.timestamps&&await e.createIndex({createdAt:-1});for(let n of o.fields)n.unique&&n.name&&await e.createIndex({[n.name]:1},{unique:true}),n.indexed&&n.name&&await e.createIndex({[n.name]:1});}}getCollectionConfig(o){if(o.startsWith("_globals_")){let n=o.replace("_globals_",""),s=this.globals.get(n);if(!s)throw new Error(`Global "${n}" not found`);return s}let e=this.collections.get(o);if(!e)throw new Error(`Collection "${o}" not found`);return e}buildFilter(o={},e){let n={};e&&(n.tenantId=e);for(let[s,t]of Object.entries(o))if(s==="AND"&&Array.isArray(t)){let i=t.map(a=>this.buildFilter(a));Object.assign(n,...i);}else if(s==="OR"&&Array.isArray(t))n.$or=t.map(i=>this.buildFilter(i));else if(typeof t=="object"&&t!==null&&!Array.isArray(t)){let i={};if(t.equals!==void 0){n[s==="id"?"_id":s]=t.equals;continue}t.not_equals!==void 0&&(i.$ne=t.not_equals),t.in!==void 0&&(i.$in=t.in),t.not_in!==void 0&&(i.$nin=t.not_in),t.greater_than!==void 0&&(i.$gt=t.greater_than),t.greater_than_equal!==void 0&&(i.$gte=t.greater_than_equal),t.less_than!==void 0&&(i.$lt=t.less_than),t.less_than_equal!==void 0&&(i.$lte=t.less_than_equal),t.like!==void 0&&(i.$regex=new RegExp(t.like.replace(/%/g,".*"),"i")),t.not_like!==void 0&&(i.$not=new RegExp(t.not_like.replace(/%/g,".*"),"i")),t.contains!==void 0&&(i.$regex=new RegExp(`.*${t.contains}.*`,"i")),t.exists!==void 0&&(i.$exists=t.exists),Object.keys(i).length>0&&(n[s==="id"?"_id":s]=i);}else n[s==="id"?"_id":s]=t;return n}buildProjection(o){if(!o||o.length===0)return;let e={_id:1};for(let n of o)e[n]=1;return e}processResult(o,e){if(!o)return null;let n={...o};return o._id&&(n.id=o._id,delete n._id),delete n.__v,n.createdAt&&(n.createdAt=new Date(n.createdAt).toISOString()),n.updatedAt&&(n.updatedAt=new Date(n.updatedAt).toISOString()),n}generateId(){let o=Date.now().toString(16).padStart(12,"0"),e=crypto.randomBytes(6).toString("hex");return o+e}};function P(A){return new _(A)}
-exports.a=_;exports.b=P;

package/dist/chunk-W6P4N3Z7.js

@@ -1,2 +0,0 @@
-import {a,c,b,d}from'./chunk-TQNM4C7H.js';import {a as a$1}from'./chunk-6SPPR5JZ.js';import {randomBytes}from'crypto';var _=class extends a{dialect="mongodb";client;db;database;connectionString;constructor(o){if(super(),o.connectionString){this.connectionString=o.connectionString;try{let e=new URL(o.connectionString);this.database=e.pathname.replace(/^\//,"")||"kyro_cms";}catch{this.database="kyro_cms";}}else this.client=o.client,this.database=o.database;}async connect(){if(this.connectionString&&!this.client){let o;try{o=(await import('mongodb')).MongoClient;}catch{a$1(["mongodb"]),o=(await import('mongodb')).MongoClient;}this.client=new o(this.connectionString),await this.client.connect();}this.db=this.client.db(this.database),this.connected=true;}async disconnect(){this.client&&(await this.client.close(),this.connected=false);}getMongoCollection(o){if(!this.db)throw new Error("MongoDB not connected");return this.db.collection(o)}async find(o){let{collection:e,where:n={},sort:s,limit:t=10,page:i=1,tenantId:a,select:r,draft:c$1}=o,l=this.getCollectionConfig(e),f=this.getMongoCollection(e),d$1={...n};this.tenantContext&&l.tenantScoped&&(d$1=c({where:d$1},e,this.tenantContext,b).where||{});let g=this.buildFilter(d$1,l.tenantScoped?a:void 0),u=l.fields.find(p=>p.name==="status"),h=u?.type==="select"&&Array.isArray(u.options)&&u.options.some(p=>p.value==="published");!c$1&&h&&(g.status="published");let m=this.parseSort(s),S={[m.field]:m.direction==="asc"?1:-1},R=(i-1)*t,[x,$]=await Promise.all([f.find(g).sort(S).skip(R).limit(t).project(this.buildProjection(r)).toArray(),f.countDocuments(g)]),y=x.map(p=>this.processResult(p,l));return this.tenantContext&&!this.tenantContext.isSuperAdmin&&(y=y.filter(p=>d(p,e,this.tenantContext,b))),c$1&&(y=await Promise.all(y.map(async p=>{let v=await this.getMongoCollection(`${e}_versions`).findOne({document_id:p.id},{sort:{createdAt:-1}});if(v){let M=v.data||{};return {...p,...M,status:p.status}}return p}))),{docs:y,...this.calculatePagination(i,t,$)}}async findByID(o){let{collection:e,id:n,tenantId:s,draft:t}=o,i=this.getCollectionConfig(e),a=this.getMongoCollection(e);if(this.tenantContext&&i.tenantScoped){let g={_id:n,tenantId:this.tenantContext.tenantId};if(!d(g,e,this.tenantContext,b))return null}let r={_id:n};s&&i.tenantScoped&&(r.tenantId=s);let c=i.fields.find(g=>g.name==="status"),l=c?.type==="select"&&Array.isArray(c.options)&&c.options.some(g=>g.value==="published");!t&&l&&(r.status="published");let f=await a.findOne(r);if(!f)return null;let d$1=this.processResult(f,i);if(t){let u=await this.getMongoCollection(`${e}_versions`).findOne({document_id:d$1.id},{sort:{createdAt:-1}});if(u){let h=u.data||{};d$1={...d$1,...h,status:d$1.status};}}return d$1}async create(o){let{collection:e,data:n,tenantId:s}=o,t=this.getCollectionConfig(e),i=this.getMongoCollection(e),a=this.prepareData(n,t),r=a.id||this.generateId();delete a.id;let c={...a,_id:r};return s&&t.tenantScoped&&(c.tenantId=s),await i.insertOne(c),this.processResult(c,t)}async update(o){let{collection:e,id:n,data:s,tenantId:t}=o,i=this.getCollectionConfig(e),a=this.getMongoCollection(e),r={_id:n};t&&i.tenantScoped&&(r.tenantId=t);let c=this.prepareData(s,i),l=await a.findOneAndUpdate(r,{$set:c},{returnDocument:"after"});if(!l)throw new Error(`Document not found: ${e}/${n}`);return this.processResult(l,i)}async delete(o){let{collection:e,id:n,tenantId:s}=o,t=this.getCollectionConfig(e),i=this.getMongoCollection(e),a={_id:n};s&&t.tenantScoped&&(a.tenantId=s);let r=await i.findOneAndDelete(a);if(!r)throw new Error(`Document not found: ${e}/${n}`);return this.processResult(r,t)}async count(o){let{collection:e,where:n={},tenantId:s}=o,t=this.getCollectionConfig(e),i=this.getMongoCollection(e),a=this.buildFilter(n,t.tenantScoped?s:void 0);return i.countDocuments(a)}async findOne(o){let{collection:e,where:n={},tenantId:s,draft:t}=o,i=this.getCollectionConfig(e),a=this.getMongoCollection(e),r=this.buildFilter(n,i.tenantScoped?s:void 0),c=i.fields.find(g=>g.name==="status"),l=c?.type==="select"&&Array.isArray(c.options)&&c.options.some(g=>g.value==="published");!t&&l&&(r.status="published");let f=await a.findOne(r);if(!f)return null;let d=this.processResult(f,i);if(t){let u=await this.getMongoCollection(`${e}_versions`).findOne({document_id:d.id},{sort:{createdAt:-1}});if(u){let h=u.data||{};d={...d,...h,status:d.status};}}return d}async findVersions(o){let{collection:e,documentId:n,sort:s,limit:t=10,page:i=1,tenantId:a}=o,r=this.getCollectionConfig(e),c=this.getMongoCollection(`${e}_versions`),l={document_id:n,autosave:{$ne:true}};a&&r.tenantScoped&&(l.tenant_id=a);let f=(i-1)*t,d=this.parseSort(s),g={[d.field]:d.direction==="asc"?1:-1},[u,h]=await Promise.all([c.find(l).sort(g).skip(f).limit(t).toArray(),c.countDocuments(l)]);return {docs:u.map(m=>this.processResult(m,{})),...this.calculatePagination(i,t,h)}}async findVersionByID(o){let{collection:e,versionId:n,tenantId:s}=o,t=this.getCollectionConfig(e),i=this.getMongoCollection(`${e}_versions`),a={_id:n};s&&t.tenantScoped&&(a.tenant_id=s);let r=await i.findOne(a);return r?this.processResult(r,{}):null}async createVersion(o){let{collection:e,documentId:n,data:s,status:t,createdBy:i,changeDescription:a,tenantId:r,autosave:c}=o,l=this.getCollectionConfig(e),f=this.getMongoCollection(`${e}_versions`);if(c){let u={document_id:n,collection_slug:e,autosave:true};r&&l.tenantScoped&&(u.tenant_id=r);let h=await f.findOne(u);if(h){let m=new Date().toISOString();return await f.updateOne({_id:h._id},{$set:{data:s,status:t,updatedAt:m}}),this.processResult({...h,data:s,status:t,updatedAt:m},{})}}let d=new Date().toISOString(),g={_id:this.generateId(),document_id:n,collection_slug:e,data:s,status:t,autosave:c===true,created_by:i,change_description:a,createdAt:d,updatedAt:d};if(r&&l.tenantScoped&&(g.tenant_id=r),await f.insertOne(g),!c){let u=this.getCollectionConfig(e);u.versions?.maxPerDoc&&await this.deleteVersions({collection:e,documentId:n,keepLatest:u.versions.maxPerDoc,tenantId:r});}return this.processResult(g,{})}async updateLatestVersion(o){return this.createVersion({...o,autosave:true})}async deleteVersions(o){let{collection:e,documentId:n,keepLatest:s,tenantId:t}=o,i=this.getCollectionConfig(e),a=this.getMongoCollection(`${e}_versions`);if(s){let r={document_id:n,autosave:{$ne:true}};t&&i.tenantScoped&&(r.tenant_id=t);let l=(await a.find(r).sort({createdAt:-1}).limit(s).project({_id:1}).toArray()).map(f=>f._id);l.length>0&&await a.deleteMany({document_id:n,autosave:{$ne:true},_id:{$nin:l},...t&&i.tenantScoped?{tenant_id:t}:{}});}else {let r={document_id:n};t&&i.tenantScoped&&(r.tenant_id=t),await a.deleteMany(r);}}async migrate(){for(let o of this.collections.values()){let e=this.getMongoCollection(o.slug);await e.createIndex({_id:1}),o.tenantScoped&&await e.createIndex({tenantId:1}),o.timestamps&&await e.createIndex({createdAt:-1});for(let n of o.fields)n.unique&&n.name&&await e.createIndex({[n.name]:1},{unique:true}),n.indexed&&n.name&&await e.createIndex({[n.name]:1});}}getCollectionConfig(o){if(o.startsWith("_globals_")){let n=o.replace("_globals_",""),s=this.globals.get(n);if(!s)throw new Error(`Global "${n}" not found`);return s}let e=this.collections.get(o);if(!e)throw new Error(`Collection "${o}" not found`);return e}buildFilter(o={},e){let n={};e&&(n.tenantId=e);for(let[s,t]of Object.entries(o))if(s==="AND"&&Array.isArray(t)){let i=t.map(a=>this.buildFilter(a));Object.assign(n,...i);}else if(s==="OR"&&Array.isArray(t))n.$or=t.map(i=>this.buildFilter(i));else if(typeof t=="object"&&t!==null&&!Array.isArray(t)){let i={};if(t.equals!==void 0){n[s==="id"?"_id":s]=t.equals;continue}t.not_equals!==void 0&&(i.$ne=t.not_equals),t.in!==void 0&&(i.$in=t.in),t.not_in!==void 0&&(i.$nin=t.not_in),t.greater_than!==void 0&&(i.$gt=t.greater_than),t.greater_than_equal!==void 0&&(i.$gte=t.greater_than_equal),t.less_than!==void 0&&(i.$lt=t.less_than),t.less_than_equal!==void 0&&(i.$lte=t.less_than_equal),t.like!==void 0&&(i.$regex=new RegExp(t.like.replace(/%/g,".*"),"i")),t.not_like!==void 0&&(i.$not=new RegExp(t.not_like.replace(/%/g,".*"),"i")),t.contains!==void 0&&(i.$regex=new RegExp(`.*${t.contains}.*`,"i")),t.exists!==void 0&&(i.$exists=t.exists),Object.keys(i).length>0&&(n[s==="id"?"_id":s]=i);}else n[s==="id"?"_id":s]=t;return n}buildProjection(o){if(!o||o.length===0)return;let e={_id:1};for(let n of o)e[n]=1;return e}processResult(o,e){if(!o)return null;let n={...o};return o._id&&(n.id=o._id,delete n._id),delete n.__v,n.createdAt&&(n.createdAt=new Date(n.createdAt).toISOString()),n.updatedAt&&(n.updatedAt=new Date(n.updatedAt).toISOString()),n}generateId(){let o=Date.now().toString(16).padStart(12,"0"),e=randomBytes(6).toString("hex");return o+e}};function P(A){return new _(A)}
-export{_ as a,P as b};

package/dist/chunk-WMZEULS2.cjs

@@ -1 +0,0 @@
-'use strict';var chunkXUONID6O_cjs=require('./chunk-XUONID6O.cjs'),chunkNY47CFVP_cjs=require('./chunk-NY47CFVP.cjs');async function T(e){let a=chunkXUONID6O_cjs.o(e.db),t={db:e.db,registry:e.registry,req:e.req,user:e.user,tenantId:e.tenantId,webhookService:a,settings:e.settings},n=chunkNY47CFVP_cjs.f(e.req);if(n){let r=await chunkNY47CFVP_cjs.e(n,e.db,async o=>{try{return await e.db.findByID({collection:"users",id:o})||null}catch{return null}});r.valid&&(t.user=r.user||e.user,t.tenantId=r.tenantId||e.tenantId,t.apiKey=chunkNY47CFVP_cjs.g(r));}return t}var W={_media:{create:chunkXUONID6O_cjs.d.MEDIA_UPLOAD,update:chunkXUONID6O_cjs.d.MEDIA_UPLOAD,delete:chunkXUONID6O_cjs.d.MEDIA_DELETE}};function A(e,a){let t=W[e];return t?t[a]:`collection.${a}`}async function C(e,a,t){if(e.webhookService)try{await e.webhookService.trigger(a,{collection:t.collection,operation:t.operation,data:t.data,previousData:t.previousData,user:e.user?{id:e.user.id,email:e.user.email,role:e.user.role}:void 0,tenantId:e.tenantId});}catch(n){console.error(`[Webhook] Failed to trigger ${a}:`,n);}}function m(e,a){if(!(!e||typeof e!="object"))for(let t of a){if(!t.name||!(t.name in e))continue;if(e[t.name]===""&&(t.type==="text"||t.type==="textarea"||t.type==="code"||t.type==="markdown"||t.type==="email"||t.type==="password"||t.type==="color"||(e[t.name]=null)),t.type==="tabs"&&t.name&&Array.isArray(t.tabs)&&e[t.name]&&typeof e[t.name]=="object")for(let r of t.tabs)Array.isArray(r.fields)&&m(e[t.name],r.fields);else if((t.type==="group"||t.type==="collapsible")&&t.name&&Array.isArray(t.fields)&&e[t.name]&&typeof e[t.name]=="object")m(e[t.name],t.fields);else if(t.type==="array"&&t.name&&Array.isArray(t.fields)&&Array.isArray(e[t.name]))for(let r of e[t.name])r&&typeof r=="object"&&m(r,t.fields);else if(t.type==="blocks"&&t.name&&Array.isArray(t.blocks)&&Array.isArray(e[t.name]))for(let r of e[t.name]){if(!r||typeof r!="object")continue;let o=r.type||r.blockType;if(!o)continue;let s=t.blocks.find(i=>i.slug===o);if(!s||!Array.isArray(s.fields))continue;let c=r.data&&typeof r.data=="object"?r.data:r;m(c,s.fields);}}}async function p(e,a,t){let n=await chunkXUONID6O_cjs.b(e,a,{user:t.user,req:t.req,tenantId:t.tenantId,apiKey:t.apiKey});if(!n.allowed)throw new Error(n.error||"Access denied");t.tenantId&&t.db.setTenantContext({tenantId:t.tenantId,userId:t.user?.id??"",role:t.user?.role,isSuperAdmin:t.user?.role==="super_admin"});}function D(e){return async a=>{let{collection:t,where:n,sort:r,limit:o,page:s,depth:c,select:i,draft:d}=a,u=e.registry.getCollection(t);if(await p(u,"read",e),u.hooks?.beforeRead)for(let f of u.hooks.beforeRead)await f({collection:t,req:e.req,user:e.user,tenantId:e.tenantId,operation:"read",where:n});let l=d??!!e.user,g=await e.db.find({collection:t,where:n||{},sort:r,limit:o||10,page:s||1,depth:c||0,tenantId:e.tenantId,select:i,draft:l});if(u.hooks?.afterRead)for(let f of g.docs)for(let w of u.hooks.afterRead)await w({collection:t,doc:f,req:e.req,user:e.user,tenantId:e.tenantId,operation:"read"});return await chunkXUONID6O_cjs.a(g.docs,u.fields,e.db,e.registry,1,c||0),g}}function R(e){return async a=>{let{collection:t,id:n,depth:r,select:o,draft:s}=a,c=e.registry.getCollection(t);await p(c,"read",e);let i=s??!!e.user,d=await e.db.findByID({collection:t,id:n,depth:r||0,tenantId:e.tenantId,select:o,draft:i});if(!d)throw new Error(`Document not found: ${t}/${n}`);if(c.hooks?.afterRead)for(let u of c.hooks.afterRead)await u({collection:t,doc:d,req:e.req,user:e.user,tenantId:e.tenantId,operation:"read",id:n});return await chunkXUONID6O_cjs.a([d],c.fields,e.db,e.registry,1,r||0),d}}function q(e){return async a=>{let{collection:t,data:n,depth:r,select:o}=a,s=e.registry.getCollection(t);await p(s,"create",e);let i=e.registry.getCreateZodSchema(t).parse(n);if(s.tenantScoped&&e.tenantId&&(i.tenantId=e.tenantId),s.hooks?.beforeValidate)for(let u of s.hooks.beforeValidate){let l=await u({collection:t,data:i,req:e.req,user:e.user,tenantId:e.tenantId,operation:"create"});l&&Object.assign(i,l);}if(s.hooks?.beforeChange)for(let u of s.hooks.beforeChange){let l=await u({collection:t,data:i,req:e.req,user:e.user,tenantId:e.tenantId,operation:"create"});l&&Object.assign(i,l);}let d=await e.db.create({collection:t,data:i,depth:r||0,tenantId:e.tenantId,select:o});if(s.hooks?.afterChange)for(let u of s.hooks.afterChange)await u({collection:t,doc:d,data:i,req:e.req,user:e.user,tenantId:e.tenantId,operation:"create"});return await C(e,A(t,"create"),{collection:t,data:d,operation:"create"}),{doc:d}}}function P(e){return async a=>{let{collection:t,id:n,data:r,depth:o,select:s,baseUpdatedAt:c}=a,i=e.registry.getCollection(t);await p(i,"update",e);let d=await e.db.findByID({collection:t,id:n,tenantId:e.tenantId,draft:true});if(!d)throw new Error(`Document not found: ${t}/${n}`);if(c&&d.updatedAt&&c!==d.updatedAt)throw new Error(`Revision conflict: document has changed since ${c}. Current updatedAt: ${d.updatedAt}`);m(r,i.fields);let l=e.registry.getUpdateZodSchema(t).parse(r);if(i.tenantScoped&&e.tenantId&&(l.tenantId=e.tenantId),i.hooks?.beforeValidate)for(let b of i.hooks.beforeValidate){let h=await b({collection:t,data:l,originalDoc:d,req:e.req,user:e.user,tenantId:e.tenantId,operation:"update",id:n});h&&Object.assign(l,h);}if(i.hooks?.beforeChange)for(let b of i.hooks.beforeChange){let h=await b({collection:t,data:l,originalDoc:d,req:e.req,user:e.user,tenantId:e.tenantId,operation:"update",id:n});h&&Object.assign(l,h);}let g=e.req&&typeof e.req.headers?.get=="function"&&e.req.headers.get("x-draft")==="true"||a.draft===true,f=i.versions?.drafts===true,w=e.req?.query?.autosave==="true"||e.req?.url?.includes("autosave=true")||a.autosave===true,y;if(f&&g?(await e.db.createVersion({collection:t,documentId:n,data:l,status:"draft",autosave:w,createdBy:e.user?.id,tenantId:e.tenantId}),y=await e.db.findByID({collection:t,id:n,tenantId:e.tenantId,draft:true})):f?(y=await e.db.update({collection:t,id:n,data:{...l,status:"published"},depth:o||0,tenantId:e.tenantId,select:s}),await e.db.createVersion({collection:t,documentId:n,data:l,status:"published",createdBy:e.user?.id,tenantId:e.tenantId})):y=await e.db.update({collection:t,id:n,data:l,depth:o||0,tenantId:e.tenantId,select:s}),i.hooks?.afterChange)for(let b of i.hooks.afterChange)await b({collection:t,doc:y,data:l,originalDoc:d,req:e.req,user:e.user,tenantId:e.tenantId,operation:"update",id:n});return await C(e,A(t,"update"),{collection:t,data:y,previousData:d,operation:"update"}),{doc:y}}}function v(e){return async a=>{let{collection:t,id:n}=a,r=e.registry.getCollection(t);await p(r,"delete",e);let o=await e.db.findByID({collection:t,id:n,tenantId:e.tenantId,draft:true});if(!o)throw new Error(`Document not found: ${t}/${n}`);if(r.hooks?.beforeDelete)for(let c of r.hooks.beforeDelete)await c({collection:t,doc:o,req:e.req,user:e.user,tenantId:e.tenantId,operation:"delete",id:n});let s=await e.db.delete({collection:t,id:n,tenantId:e.tenantId});if(r.hooks?.afterDelete)for(let c of r.hooks.afterDelete)await c({collection:t,doc:s,req:e.req,user:e.user,tenantId:e.tenantId,operation:"delete",id:n});return await C(e,A(t,"delete"),{collection:t,data:s,previousData:o,operation:"delete"}),{doc:s,message:"Deleted successfully"}}}function K(e){return async a=>{let{collection:t,where:n}=a,r=e.registry.getCollection(t);return await p(r,"read",e),{totalDocs:await e.db.count({collection:t,where:n||{},tenantId:e.tenantId})}}}async function U(e,a,t){let n=await chunkXUONID6O_cjs.c(e,a,{user:t.user,req:t.req,tenantId:t.tenantId});if(!n.allowed)throw new Error(n.error||"Access denied");t.tenantId&&t.db.setTenantContext({tenantId:t.tenantId,userId:t.user?.id??"",role:t.user?.role,isSuperAdmin:t.user?.role==="super_admin"});}function $(e){let a={},t=e.registry.getCollections();for(let r of t){let o=r.slug;a[o]={find:D(e),findByID:R(e),create:q(e),update:P(e),delete:v(e),count:K(e)};}let n=e.registry.getGlobals();for(let r of n){let o=r.slug;a[`_globals_${o}`]={get:async()=>(await U(r,"read",e),await e.db.findOne({collection:`_globals_${o}`,where:{},tenantId:e.tenantId})),update:async s=>{await U(r,"update",e);let i=e.registry.getZodSchema(o).parse(s.data),d=await e.db.findOne({collection:`_globals_${o}`,where:{},tenantId:e.tenantId,draft:true}),u;return d?u=await e.db.update({collection:`_globals_${o}`,id:d.id,data:i,tenantId:e.tenantId}):u=await e.db.create({collection:`_globals_${o}`,data:{...i,id:o},tenantId:e.tenantId}),u}};}return a}function O(e){if(e.settings?.access?.apiAccess?.trpcEnabled===false)throw new Error("tRPC API is disabled");return $(e)}exports.a=T;exports.b=D;exports.c=R;exports.d=q;exports.e=P;exports.f=v;exports.g=K;exports.h=$;exports.i=O;

package/dist/chunk-XUONID6O.cjs

@@ -1,2 +0,0 @@
-'use strict';var chunkNY47CFVP_cjs=require('./chunk-NY47CFVP.cjs'),chunkQ3Q7BJVQ_cjs=require('./chunk-Q3Q7BJVQ.cjs'),crypto=require('crypto');var S={COLLECTION_CREATE:"collection.create",COLLECTION_UPDATE:"collection.update",COLLECTION_DELETE:"collection.delete",MEDIA_UPLOAD:"media.upload",MEDIA_DELETE:"media.delete",AUTH_LOGIN:"auth.login",AUTH_REGISTER:"auth.register",AUTH_LOGOUT:"auth.logout",ORDER_CREATED:"order.created",ORDER_PAID:"order.paid",ORDER_SHIPPED:"order.shipped",ORDER_DELIVERED:"order.delivered"},j=Object.values(S);var h="_webhooks",k="_webhook_deliveries";async function x(r,o,s,e={}){let t=e.timeout||3e4,a=Date.now(),c=new AbortController,i=setTimeout(()=>c.abort(),t);try{let n=await fetch(r,{method:"POST",headers:o,body:s,signal:c.signal});clearTimeout(i);let l=Date.now()-a,u;try{u=(await n.text()).slice(0,1e3);}catch{}let d={success:n.ok,status:n.status,statusText:n.statusText,body:u,duration:l};return d.success&&e.onSuccess?e.onSuccess(d):!d.success&&e.onFailure&&e.onFailure(`HTTP ${n.status}: ${n.statusText}`),d}catch(n){clearTimeout(i);let l=Date.now()-a,u=n.name==="AbortError"?`Request timed out after ${t}ms`:n.message||"Unknown error";return e.onFailure&&e.onFailure(u),{success:false,status:0,duration:l,error:u}}}async function I(r,o,s={}){let e=JSON.stringify(o),t={"Content-Type":"application/json","User-Agent":"Kyro-CMS-Webhook/1.0","X-Webhook-Event":o.event,"X-Webhook-Delivery":o.id,"X-Webhook-Timestamp":o.timestamp,...r.headers||{}};return r.secret&&(t["X-Webhook-Signature"]=O(e,r.secret)),x(r.url,t,e,s)}async function H(r,o,s={}){let e=r.config||{},t=process.env.GITHUB_TOKEN;if(!t)return {success:false,status:0,duration:0,error:"GITHUB_TOKEN environment variable is not set"};if(!e.githubOwner||!e.githubRepo)return {success:false,status:0,duration:0,error:"GitHub owner and repo are required"};let a=e.githubBranch||"main",c=Date.now(),i=async(n,l,u)=>{let d=await fetch(n,{method:l,headers:{"Content-Type":"application/json",Accept:"application/vnd.github+json",Authorization:`Bearer ${t}`,"X-GitHub-Api-Version":"2022-11-28","User-Agent":"Kyro-CMS-Webhook/1.0"},body:u?JSON.stringify(u):void 0});if(!d.ok){let y=await d.text();throw new Error(`GitHub API HTTP ${d.status}: ${y}`)}return d.json()};try{let n=`https://api.github.com/repos/${e.githubOwner}/${e.githubRepo}/git/refs/heads/${a}`,u=(await i(n,"GET")).object.sha,d=`https://api.github.com/repos/${e.githubOwner}/${e.githubRepo}/git/commits/${u}`,g=(await i(d,"GET")).tree.sha,f=`https://api.github.com/repos/${e.githubOwner}/${e.githubRepo}/git/commits`,p=(await i(f,"POST",{message:`Content updated via Kyro CMS (${o.event})`,tree:g,parents:[u]})).sha;return await i(n,"PATCH",{sha:p,force:!1}),{success:!0,status:201,duration:Date.now()-c,body:`Successfully pushed empty commit ${p} to branch ${a}`}}catch(n){return {success:false,status:0,duration:Date.now()-c,error:n.message||"Failed to push empty commit to GitHub"}}}var B={generic:I,"github-push":H};function R(r){return B[r||"generic"]||B.generic}function O(r,o){return `sha256=${crypto.createHmac("sha256",o).update(r).digest("hex")}`}function E(){return crypto.randomBytes(32).toString("hex")}async function _(r,o,s={}){return R(r.action)(r,o,s)}async function C(r,o,s,e={}){let t=e.maxRetries??5,a=e.retryDelay??1e3,c=null;for(let i=0;i<=t;i++){if(i>0){let n=Math.min(a*Math.pow(2,i-1),3e4);e.onRetry&&e.onRetry(i,`Retrying in ${n}ms...`),await N(n);}if(e.onRetry&&i>0&&e.onRetry(i,`Attempt ${i+1}/${t+1}`),c=await _(r,o,{...e,onRetry:void 0,onSuccess:void 0,onFailure:void 0}),c.success)return c;if(!(c.error?.includes("timed out")&&i<t)&&c.status>=400&&c.status<500)return c}return c||{success:false,status:0,duration:0,error:"All delivery attempts failed"}}function P(r,o,s,e,t,a){return {id:r,webhookId:o,event:s,payload:e,attempt:t,status:a.success?"success":"failed",responseStatus:a.status||void 0,responseBody:a.body,duration:a.duration,error:a.error,createdAt:new Date().toISOString(),deliveredAt:a.success?new Date().toISOString():void 0}}function N(r){return new Promise(o=>setTimeout(o,r))}function M(){return {id:`test_${Date.now()}`,event:"collection.create",timestamp:new Date().toISOString(),collection:"test",operation:"create",data:{message:"This is a test webhook delivery"},user:{id:"system",email:"system@kyro.dev",role:"super_admin"}}}function L(r){let o=new Set,s=[];for(let e of r){let t=e==="create"||e==="update"||e==="delete"?`collection.${e}`:e;o.has(t)||(o.add(t),s.push(t));}return s}var w=class{db;constructor(o){this.db=o;}async getWebhooks(o){let e=(await this.db.find({collection:h,where:o?.status?{status:{equals:o.status}}:{},limit:100,page:1,draft:true})).docs;return o?.event?e.filter(t=>t.events.includes(o.event)):e}async getWebhookById(o){return this.db.findByID({collection:h,id:o,draft:true})}async createWebhook(o){let s=new Date().toISOString(),e=o.secret||E(),t={id:crypto.randomUUID(),name:o.name,url:o.url,events:L(o.events),collections:o.collections||[],status:o.status||"active",secret:e,headers:o.headers||{},action:o.action||"generic",config:o.config||{},createdAt:s,updatedAt:s};return await this.db.create({collection:h,data:t}),t}async updateWebhook(o,s){let e=await this.getWebhookById(o);if(!e)return null;let t={...e,...s,events:s.events?L(s.events):e.events,collections:s.collections!==void 0?s.collections:e.collections,action:s.action!==void 0?s.action:e.action,config:s.config!==void 0?{...e.config,...s.config}:e.config,updatedAt:new Date().toISOString()};return s.secret===""&&"secret"in s&&delete t.secret,await this.db.update({collection:h,id:o,data:t}),t}async deleteWebhook(o){await this.db.delete({collection:h,id:o});}async trigger(o,s){let e=await this.getWebhooks({status:"active",event:o}),t=s.collection,a=e.filter(n=>!n.collections||n.collections.length===0||!t?true:n.collections.includes(t));if(a.length===0)return [];let c={id:crypto.randomUUID(),event:o,timestamp:new Date().toISOString(),...s},i=[];for(let n of a){let l=await this.triggerWebhook(n,c);i.push(l);}return i}async triggerWebhook(o,s){let e=crypto.randomUUID();try{let t=await C(o,s,e,{maxRetries:5,retryDelay:1e3}),a=P(e,o.id,o.events[0],s,1,t);try{await this.db.create({collection:k,data:a});}catch{console.warn("[WebhookService] Failed to save delivery record:",e);}return t.success?await this.updateWebhook(o.id,{lastTriggered:new Date().toISOString(),lastError:null}).catch(()=>{}):await this.updateWebhook(o.id,{lastError:t.error||`HTTP ${t.status}`}).catch(()=>{}),{deliveryId:e,webhookId:o.id,event:o.events[0],status:t.success?"success":"failed",responseStatus:t.status,duration:t.duration,error:t.error}}catch(t){return {deliveryId:e,webhookId:o.id,event:o.events[0],status:"failed",error:t.message}}}async testWebhook(o){let s=await this.getWebhookById(o);if(!s)return null;let e={id:crypto.randomUUID(),event:s.events[0]||"collection.create",timestamp:new Date().toISOString(),collection:"test",operation:"create",data:{message:"This is a test webhook delivery from Kyro CMS"},user:{id:"system",email:"system@kyro.dev",role:"super_admin"}};return this.triggerWebhook(s,e)}async getDeliveryHistory(o,s=50){return (await this.db.find({collection:k,where:{webhookId:{equals:o}},sort:"-createdAt",limit:s,page:1})).docs}async retryDelivery(o){let s=await this.db.findByID({collection:k,id:o});if(!s)return null;let e=await this.getWebhookById(s.webhookId);return e?this.triggerWebhook(e,s.payload):null}};function G(r){return new w(r)}function q(r){if(!r)return [];if(typeof r=="string")return [{id:r}];if(Array.isArray(r))return r.map(o=>typeof o=="object"?{id:o.value??o.id??o,relationTo:o.relationTo}:{id:o});if(typeof r=="object"){let o=r.value??r.id??r;if(typeof o=="string")return [{id:o,relationTo:r.relationTo}];if(Array.isArray(o))return o.map(s=>({id:s,relationTo:r.relationTo}))}return []}function W(r,o,s){if(!(!r||typeof r!="object")){for(let e of o)if(!(!e.name&&e.type!=="row"&&e.type!=="collapsible"&&e.type!=="tabs")){if(e.type==="relationship"||e.type==="upload"){let t=r[e.name];if(!t)continue;let a=Array.isArray(e.relationTo)?e.relationTo:[e.relationTo],c=q(t);for(let i of c){if(!i.id)continue;let n=i.relationTo?[i.relationTo]:a;for(let l of n)l!=="*"&&(s.has(l)||s.set(l,new Set),s.get(l).add(i.id));}}else if(e.type==="group"||e.type==="collapsible"||e.type==="row"){let t=e.name?r[e.name]:r;W(t,e.fields||[],s);}else if(e.type==="tabs"&&e.tabs){let t=e.name?r[e.name]:r;for(let a of e.tabs)W(t,a.fields||[],s);}else if(e.type==="array"&&e.name&&Array.isArray(r[e.name]))for(let t of r[e.name])W(t,e.fields||[],s);else if(e.type==="blocks"&&e.name&&Array.isArray(r[e.name]))for(let t of r[e.name]){if(!t||typeof t!="object")continue;let a=t.type||t.blockType;if(!a)continue;let c=e.blocks?.find(i=>i.slug===a);if(c&&Array.isArray(c.fields)){let i=t.data&&typeof t.data=="object"?t.data:t;W(i,c.fields,s);}}}}}function v(r,o,s){if(!(!r||typeof r!="object")){for(let e of o)if(!(!e.name&&e.type!=="row"&&e.type!=="collapsible"&&e.type!=="tabs")){if(e.type==="relationship"||e.type==="upload"){let t=r[e.name];if(!t)continue;let a=Array.isArray(e.relationTo)?e.relationTo:[e.relationTo],c=n=>{r[e.name]=n;},i=(n,l)=>{let u=l?[l]:a;for(let d of u){let y=s.get(d);if(y&&y.has(n))return y.get(n)}return null};if(typeof t=="string"){let n=i(t);c(n||{id:t});}else if(Array.isArray(t))c(t.map(n=>{let l=typeof n=="object"?n.value??n.id:n,u=typeof n=="object"?n.relationTo:void 0,d=i(l,u);return d||{id:l}}));else if(typeof t=="object"){let n=t.value??t.id,l=t.relationTo,u=i(n,l);c(u||{id:n});}}else if(e.type==="group"||e.type==="collapsible"||e.type==="row"){let t=e.name?r[e.name]:r;v(t,e.fields||[],s);}else if(e.type==="tabs"&&e.tabs){let t=e.name?r[e.name]:r;for(let a of e.tabs)v(t,a.fields||[],s);}else if(e.type==="array"&&e.name&&Array.isArray(r[e.name]))for(let t of r[e.name])v(t,e.fields||[],s);else if(e.type==="blocks"&&e.name&&Array.isArray(r[e.name]))for(let t of r[e.name]){if(!t||typeof t!="object")continue;let a=t.type||t.blockType;if(!a)continue;let c=e.blocks?.find(i=>i.slug===a);if(c&&Array.isArray(c.fields)){let i=t.data&&typeof t.data=="object"?t.data:t;v(i,c.fields,s);}}}}}async function V(r,o,s,e,t=1,a=0){if(!r||r.length===0||t>a)return;let c=new Map;for(let l of r)W(l,o,c);if(c.size===0)return;let i=new Map,n=new Map;for(let[l,u]of c.entries()){if(u.size===0||!e.getCollection(l))continue;let y=new Map,g=Array.from(u),f=[];for(let m of g)try{let p=await s.findByID({collection:l,id:m,draft:!0});p&&(y.set(m,p),f.push(p));}catch{}i.set(l,y),f.length>0&&n.set(l,f);}if(t<a)for(let[l,u]of n.entries()){let d=e.getCollection(l);d&&await V(u,d.fields,s,e,t+1,a);}for(let l of r)v(l,o,i);}function $(r){return r==="read"?"read":r==="create"?"create":r==="update"?"update":"delete"}function F(r,o){return {none:false,read:r==="read",create:r==="read"||r==="create",update:r==="read"||r==="create"||r==="update",delete:r==="read"||r==="create"||r==="update"||r==="delete",admin:true}[o]||false}async function We(r,o,s,e={}){let{user:t,req:a,tenantId:c,apiKey:i}=s,{enablePublicAccess:n=true,defaultAccess:l="none"}=e,u=r.access?.[o];if(u){let y=await chunkNY47CFVP_cjs.a(u,{req:a,user:t,tenantId:c});return y===false?{allowed:false,error:"Access denied",status:403}:typeof y=="object"?{allowed:true,extraWhere:y}:{allowed:true}}if(i?.permissions?.length>0){let y=r.slug,g=$(o),f=`${y}:${g}`;return !chunkNY47CFVP_cjs.h(i.permissions,f)&&!chunkNY47CFVP_cjs.h(i.permissions,`${y}:admin`)?{allowed:false,error:"Access denied: insufficient permissions",status:403}:{allowed:true}}if(t){let y=r.slug,g=$(o),f=`${y}:${g}`,m=chunkQ3Q7BJVQ_cjs.a({id:t.id,email:t.email,role:t.role},f),p=chunkQ3Q7BJVQ_cjs.a({id:t.id,email:t.email,role:t.role},`${y}:admin`);return m||p?{allowed:true}:{allowed:false,error:"Access denied: missing RBAC permission",status:403}}let d=F(o,l);return n&&d?{allowed:true}:{allowed:false,error:"Authentication required",status:401}}async function ve(r,o,s,e={}){let{user:t,req:a,tenantId:c}=s,{enablePublicAccess:i=true}=e,n=r.access?.[o];if(n)return await chunkNY47CFVP_cjs.a(n,{req:a,user:t,tenantId:c})===false?{allowed:false,error:"Access denied",status:403}:{allowed:true};if(t){let l=`globals:${o}`,u=chunkQ3Q7BJVQ_cjs.a({id:t.id,email:t.email,role:t.role},l),d=chunkQ3Q7BJVQ_cjs.a({id:t.id,email:t.email,role:t.role},"globals:admin");return u||d?{allowed:true}:{allowed:false,error:"Access denied: missing RBAC permission",status:403}}return i?{allowed:true}:{allowed:false,error:"Authentication required",status:401}}
-exports.a=V;exports.b=We;exports.c=ve;exports.d=S;exports.e=j;exports.f=h;exports.g=k;exports.h=O;exports.i=E;exports.j=_;exports.k=C;exports.l=P;exports.m=M;exports.n=w;exports.o=G;