@kyro-cms/core 0.12.17 → 0.12.21

package/dist/chunk-XTRY75KC.cjs

@@ -0,0 +1,210 @@
+'use strict';var chunk5K4YG5DA_cjs=require('./chunk-5K4YG5DA.cjs'),chunkGO34AOBZ_cjs=require('./chunk-GO34AOBZ.cjs'),chunkHOP4D5XZ_cjs=require('./chunk-HOP4D5XZ.cjs'),chunkHVXO3OFB_cjs=require('./chunk-HVXO3OFB.cjs'),chunkILEZ3NYX_cjs=require('./chunk-ILEZ3NYX.cjs'),chunkNY47CFVP_cjs=require('./chunk-NY47CFVP.cjs'),chunkWG3UQEV7_cjs=require('./chunk-WG3UQEV7.cjs'),chunkGYQMNXXW_cjs=require('./chunk-GYQMNXXW.cjs'),chunkBVG6VSAJ_cjs=require('./chunk-BVG6VSAJ.cjs'),chunkG7SSHELM_cjs=require('./chunk-G7SSHELM.cjs'),chunkQ3Q7BJVQ_cjs=require('./chunk-Q3Q7BJVQ.cjs'),chunkAHSFSERC_cjs=require('./chunk-AHSFSERC.cjs'),mr=require('crypto'),unstorage=require('unstorage'),yr=require('unstorage/drivers/fs'),hono=require('hono'),jwt=require('hono/jwt'),ze=require('path'),fs=require('fs'),promises=require('fs/promises'),Er=require('process'),clientS3=require('@aws-sdk/client-s3'),nodeHttpHandler=require('@smithy/node-http-handler'),stream=require('stream'),basicFtp=require('basic-ftp'),zodToJsonSchema=require('zod-to-json-schema');function _interopDefault(e){return e&&e.__esModule?e:{default:e}}var mr__default=/*#__PURE__*/_interopDefault(mr);var yr__default=/*#__PURE__*/_interopDefault(yr);var ze__default=/*#__PURE__*/_interopDefault(ze);var Er__default=/*#__PURE__*/_interopDefault(Er);function Qr(d){et=d;}async function Nt(){if(et)try{let d=await et.findOne({collection:"_globals_system",where:{}});if(d){de={appSecret:d.appSecret||null,encryptionKey:d.encryptionKey||null,sessionConfig:d.sessionMaxAge||d.maxSessionsPerUser?{maxAge:(d.sessionMaxAge||7)*24*60*60*1e3,maxSessionsPerUser:d.maxSessionsPerUser||3}:null};return}}catch{}de={appSecret:process.env.APP_SECRET||"development-secret-key",encryptionKey:null,sessionConfig:null};}function gr(){return de?.appSecret?de.appSecret:process.env.APP_SECRET||"development-secret-key"}function es(){if(de?.encryptionKey)return de.encryptionKey;let d=gr();return mr__default.default.createHash("sha256").update(d).digest("hex")}function Ot(){return de?.sessionConfig?de.sessionConfig:{maxAge:10080*60*1e3,maxSessionsPerUser:3}}var et,de,tt=chunkAHSFSERC_cjs.a(()=>{et=null,de=null;});var Bt={};chunkAHSFSERC_cjs.b(Bt,{SESSION_CONFIG:()=>ie,clearSessionCookie:()=>it,createSession:()=>ot,deleteSession:()=>ve,getClientIp:()=>st,getCurrentUser:()=>ee,getSession:()=>fe,getSessionIdFromRequest:()=>se,getUserSessions:()=>Ie,invalidateAllUserSessions:()=>Ar,refreshSession:()=>_e,setSessionCookie:()=>at,updateSessionName:()=>lt,validateSession:()=>Le});async function ce(){return $e||($e=unstorage.createStorage({driver:yr__default.default({base:".astro/sessions"})}),$e)}function wr(){return mr__default.default.randomUUID()}function Mt(d){let e="Unknown",t="Unknown",s="Unknown";return d.includes("Firefox")?e="Firefox":d.includes("Edg/")?e="Edge":d.includes("Chrome")?e="Chrome":d.includes("Safari")&&!d.includes("Chrome")&&(e="Safari"),d.includes("iPhone")?(t="iPhone",s="iOS"):d.includes("iPad")?(t="iPad",s="iOS"):d.includes("Mac")?(t="MacBook",s="macOS"):d.includes("Windows")?(t="Windows PC",s="Windows"):d.includes("Linux")?(t="Linux PC",s="Linux"):d.includes("Android")&&(t="Android Phone",s="Android"),{browser:e,device:t,platform:s}}function br(d){if(!d?.userAgent)return "Session";let{browser:e,device:t}=Mt(d.userAgent);return `${t} - ${e}`}function se(d){let e=d.headers.get("Cookie");return e&&Object.fromEntries(e.split("; ").map(s=>s.split("=")))[rt]||null}function st(d){let e=d.headers.get("x-forwarded-for");return e?e.split(",")[0].trim():d.headers.get("x-real-ip")||"unknown"}function at(d,e){let s=process.env.NODE_ENV==="production"?"Secure; ":"",n=new Headers(d.headers);return n.append("Set-Cookie",`${rt}=${e}; HttpOnly; Path=/; Max-Age=${ie.absoluteMaxAge/1e3}; SameSite=Strict; ${s}`),new Response(d.body,{status:d.status,statusText:d.statusText,headers:n})}function it(d){let t=process.env.NODE_ENV==="production"?"Secure; ":"",s=new Headers(d.headers);return s.append("Set-Cookie",`${rt}=; HttpOnly; Path=/; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=Strict; ${t}`),new Response(d.body,{status:d.status,statusText:d.statusText,headers:s})}async function Ce(d){return await(await ce()).getItem(`user:${d}`)||[]}async function nt(d,e){let t=await ce();e.length>0?await t.setItem(`user:${d}`,e):await t.removeItem(`user:${d}`);}async function ot(d,e){let t=await ce(),s=await Ce(d.id);for(;s.length>=ie.maxSessionsPerUser;){let x=s.shift();x&&await t.removeItem(`session:${x}`);}let n=wr(),c=Date.now(),l=e?.headers.get("user-agent"),u=e?st(e):"unknown",f=l?{userAgent:l,ip:u,...Mt(l)}:{ip:u},y={id:n,userId:d.id,email:d.email,role:d.role,tenantId:d.tenantId,permissions:d.permissions,createdAt:c,expiresAt:c+ie.absoluteMaxAge,lastActivityAt:c,deviceInfo:f,sessionName:br(f)};return await t.setItem(`session:${n}`,y,{ttl:Math.floor(ie.absoluteMaxAge/1e3)}),s.push(n),await nt(d.id,s),n}async function fe(d){return await(await ce()).getItem(`session:${d}`)||null}async function Le(d){let e=await fe(d);return e?e.expiresAt<Date.now()?(await ve(d),{valid:false,reason:"Session expired"}):{valid:true}:{valid:false,reason:"Session not found"}}async function _e(d,e){let t=await ce(),s=await fe(d);if(!s)return null;let n=Date.now(),c=s.expiresAt-n,l=s.deviceInfo;if(e){let y=st(e);y!==s.deviceInfo?.ip&&(l={...s.deviceInfo,ip:y});}let u={...s,lastActivityAt:n,expiresAt:c<ie.refreshThreshold?n+ie.absoluteMaxAge:s.expiresAt,deviceInfo:l},f=c<ie.refreshThreshold?ie.absoluteMaxAge:void 0;return await t.setItem(`session:${d}`,u,f?{ttl:Math.floor(f/1e3)}:void 0),u}async function ve(d){let e=await ce(),t=await fe(d);if(t){let n=(await Ce(t.userId)).filter(c=>c!==d);await nt(t.userId,n);}await e.removeItem(`session:${d}`),await e.removeItem(`activity:${d}`);}async function Ar(d){let e=await Ce(d),t=await ce();for(let s of e)await t.removeItem(`session:${s}`),await t.removeItem(`activity:${s}`);await nt(d,[]);}async function Ie(d,e){let t=await Ce(d),s=[];for(let n of t){let c=await fe(n);c&&s.push({id:c.id,sessionName:c.sessionName||"Session",deviceInfo:c.deviceInfo,createdAt:c.createdAt,lastActivityAt:c.lastActivityAt,currentSession:c.id===e});}return s.sort((n,c)=>c.lastActivityAt-n.lastActivityAt),s}async function lt(d,e){let t=await fe(d);return t?(await(await ce()).setItem(`session:${d}`,{...t,sessionName:e}),true):false}async function ee(d){let e=se(d);if(!e||!(await Le(e)).valid)return null;let s=await fe(e);return s?(await _e(e,d),s):null}var Ft,ie,rt,$e,Ne=chunkAHSFSERC_cjs.a(()=>{tt();Ft=Ot(),ie={absoluteMaxAge:Ft.maxAge,maxSessionsPerUser:Ft.maxSessionsPerUser,refreshThreshold:300*1e3,activityDebounce:30*1e3,pollInterval:30*1e3},rt="kyro-session",$e=null;});function ge(d,e){for(let t of d){if(t.name===e)return t;if(t.type==="group"||t.type==="array"){let s=ge(t.fields||[],e);if(s)return s}if(t.type==="blocks")for(let s of t.blocks||[]){let n=ge(s.fields||[],e);if(n)return n}if(t.type==="tabs")for(let s of t.tabs||[]){let n=ge(s.fields||[],e);if(n)return n}if(t.type==="collapsible"||t.type==="row"){let s=ge(t.fields||[],e);if(s)return s}}return null}Ne();function zt(d){let{db:t,userLookup:s}=d;return async function(c){let l=chunkNY47CFVP_cjs.f(c);if(l&&t){let f=await chunkNY47CFVP_cjs.e(l,t,s);if(f.valid&&f.user)return {user:f.user,tenantContext:Kt(f.user),apiKeyContext:chunkNY47CFVP_cjs.g(f),status:200,authType:"apikey"};if(f.error)return {status:401,error:f.error}}let u=se(c);if(u)try{let f=await Le(u);if(!f.valid)return {status:401,error:f.reason||"Session invalid"};let y=await ee(c);if(y){let x=s?await s(y.userId):null;if(x)return {user:x,tenantContext:Kt(x),status:200,authType:"session"}}}catch(f){console.error("Session validation error:",f);}return {status:401,error:"Authentication required"}}}function Kt(d){return {tenantId:d.tenantId||"default",userId:d.id||"anonymous",role:d.role||"guest",roles:[d.role||"guest"],permissions:[],isSuperAdmin:d.role==="super_admin"}}tt();var Oe=class{storage=new Map;userStorage=new Map;limits;userLimits;constructor(e,t){this.limits={...xr,...e},this.userLimits=t||{"user:api":{window:6e4,max:500},"user:write":{window:36e5,max:100}};}getKey(e,t){return `${e}:${t}`}getUserKey(e,t,s){return `user:${e}:${t}:${s}`}cleanupOldEntries(e,t){let n=Date.now()-t;for(;e.length>0&&e[0].timestamp<n;)e.shift();}async check(e,t){let s=this.limits[e]||this.limits["api:general"],n=this.getKey(e,t),c=this.storage.get(n);c||(c=[],this.storage.set(n,c)),this.cleanupOldEntries(c,s.window);let l=Date.now(),u=c.reduce((f,y)=>f+y.count,0);if(c.push({timestamp:l,count:1}),u>=s.max){let y=c.reduce((x,h)=>x.timestamp<h.timestamp?x:h,c[0]).timestamp+s.window;return {allowed:false,remaining:0,resetAt:y,retryAfter:Math.ceil((y-l)/1e3)}}return {allowed:true,remaining:s.max-u-1,resetAt:l+s.window}}async checkUser(e,t,s){let n=this.userLimits[e]||this.userLimits["user:api"],c=this.userStorage.get(t),l=[];c?l=c.get(this.getKey(e,s))||[]:(this.userStorage.has(t)||this.userStorage.set(t,new Map),this.userStorage.get(t).set(this.getKey(e,s),l)),this.cleanupOldEntries(l,n.window);let u=Date.now(),f=l.reduce((y,x)=>y+x.count,0);if(l.push({timestamp:u,count:1}),f>=n.max){let x=l.reduce((h,E)=>h.timestamp<E.timestamp?h:E,l[0]).timestamp+n.window;return {allowed:false,remaining:0,resetAt:x,retryAfter:Math.ceil((x-u)/1e3)}}return {allowed:true,remaining:n.max-f-1,resetAt:u+n.window}}async reset(e,t){let s=this.getKey(e,t);this.storage.delete(s);}async resetUser(e,t,s){let n=this.userStorage.get(t);if(n){let c=this.getKey(e,s);n.delete(c);}}async getStatus(e,t){let s=this.limits[e]||this.limits["api:general"],n=this.getKey(e,t),c=this.storage.get(n);c||(c=[],this.storage.set(n,c)),this.cleanupOldEntries(c,s.window);let l=Date.now(),u=c.reduce((f,y)=>f+y.count,0);return {count:u,limit:s.max,remaining:Math.max(0,s.max-u),resetAt:l+s.window}}setLimit(e,t){this.limits[e]=t;}setUserLimit(e,t){this.userLimits[e]=t;}},xr={"auth:login":{window:9e5,max:5},"auth:register":{window:36e5,max:3},"auth:forgot":{window:36e5,max:3},"auth:reset":{window:36e5,max:5},"auth:verify":{window:36e5,max:5},"api:general":{window:6e4,max:100},"api:authenticated":{window:6e4,max:200}};var dt={retentionDays:30};var Wt=class{redis;prefix;retentionDays;constructor(e,t=30,s="kyro:audit:"){this.redis=e,this.prefix=s,this.retentionDays=t;}async log(e){let t=mr.randomBytes(16).toString("hex"),s=new Date,n={...e,id:t,timestamp:s},c=this.getKeyForDate(s),l=`${this.prefix}log:${t}`;await this.redis.hset(l,this.serializeLog(n)),await this.redis.expire(l,this.retentionDays*24*60*60+3600),await this.redis.zadd(c,s.getTime(),t),await this.redis.expire(c,this.retentionDays*24*60*60+3600);let u=e.userId?`${this.prefix}user:${e.userId}`:null;return u&&(await this.redis.zadd(u,s.getTime(),t),await this.redis.expire(u,this.retentionDays*24*60*60+3600)),t}async get(e){let t=`${this.prefix}log:${e}`,s=await this.redis.hgetall(t);return !s||Object.keys(s).length===0?null:this.deserializeLog(s)}async query(e={}){let{limit:t=50,offset:s=0}=e,n=[];if(e.userId)n.push(`${this.prefix}user:${e.userId}`);else if(e.startDate||e.endDate)n=this.getKeysForDateRange(e.startDate,e.endDate);else {let f=new Date;n=this.getKeysForDateRange(new Date(f.getTime()-this.retentionDays*24*60*60*1e3),f);}let c=[];for(let f of n){let y=await this.redis.zrange(f,0,-1,"WITHSCORES");for(let x=0;x<y.length;x+=2)c.push([y[x],parseInt(y[x+1],10)]);}c.sort((f,y)=>y[1]-f[1]);let l=c.length;c=c.slice(s,s+t);let u=[];for(let[f]of c){let y=await this.get(f);y&&this.matchesFilter(y,e)&&u.push(y);}return {logs:u,total:l}}async getRecent(e=50){let t=[],s=new Date,n=this.getKeysForDateRange(new Date(s.getTime()-10080*60*1e3),s),c=[];for(let l of n){let u=await this.redis.zrange(l,0,-1,"WITHSCORES");for(let f=0;f<u.length;f+=2)c.push([u[f],parseInt(u[f+1],10)]);}c.sort((l,u)=>u[1]-l[1]);for(let[l]of c.slice(0,e)){let u=await this.get(l);u&&t.push(u);}return t}async getUserActivity(e,t=50){let s=`${this.prefix}user:${e}`,n=await this.redis.zrange(s,0,t-1),c=[];for(let l of n){let u=await this.get(l);u&&c.push(u);}return c}async getStats(e,t){let s=this.getKeysForDateRange(e||new Date(Date.now()-2592e6),t||new Date),n={},c=0,l=0,u=0,f=new Set;for(let y of s){let x=await this.redis.zrange(y,0,-1);for(let h of x){let E=await this.get(h);E&&(c++,n[E.action]=(n[E.action]||0)+1,E.success&&u++,E.action==="login_failed"&&l++,E.userId&&f.add(E.userId));}}return {totalEvents:c,byAction:n,successRate:c>0?u/c:1,failedLogins:l,uniqueUsers:f}}async cleanup(){let e=Date.now()-this.retentionDays*24*60*60*1e3,t=await this.redis.keys(`${this.prefix}date:*`),s=0;for(let n of t){let c=await this.redis.zrangebyscore(n,0,e);for(let l of c)await this.redis.del(`${this.prefix}log:${l}`),s++;await this.redis.zremrangebyscore(n,0,e);}return s}getKeyForDate(e){let t=e.getFullYear(),s=String(e.getMonth()+1).padStart(2,"0"),n=String(e.getDate()).padStart(2,"0");return `${this.prefix}date:${t}-${s}-${n}`}getKeysForDateRange(e,t){let s=[],n=e||new Date(Date.now()-this.retentionDays*24*60*60*1e3),c=t||new Date,l=new Date(n);for(;l<=c;)s.push(this.getKeyForDate(l)),l.setDate(l.getDate()+1);return s}matchesFilter(e,t){return !(t.action&&!(Array.isArray(t.action)?t.action:[t.action]).includes(e.action)||t.resource&&e.resource!==t.resource||t.resourceId&&e.resourceId!==t.resourceId||t.success!==void 0&&e.success!==t.success)}serializeLog(e){let t={id:e.id,timestamp:new Date(e.timestamp).toISOString(),action:e.action,resource:e.resource,success:e.success?"1":"0"};return e.userId&&(t.userId=e.userId),e.userEmail&&(t.userEmail=e.userEmail),e.role&&(t.role=e.role),e.resourceId&&(t.resourceId=e.resourceId),e.ipAddress&&(t.ipAddress=e.ipAddress),e.userAgent&&(t.userAgent=e.userAgent),e.error&&(t.error=e.error),e.changes&&(t.changes=JSON.stringify(e.changes)),e.metadata&&(t.metadata=JSON.stringify(e.metadata)),t}deserializeLog(e){return {id:e.id,timestamp:new Date(e.timestamp),action:e.action,userId:e.userId,userEmail:e.userEmail,role:e.role,resource:e.resource,resourceId:e.resourceId,ipAddress:e.ipAddress,userAgent:e.userAgent,success:e.success==="1",error:e.error,changes:e.changes?JSON.parse(e.changes):void 0,metadata:e.metadata?JSON.parse(e.metadata):void 0}}};function gs(d){return {ipAddress:d.headers.get("x-forwarded-for")?.split(",")[0]?.trim()||d.headers.get("x-real-ip")||"unknown",userAgent:d.headers.get("user-agent")||"unknown"}}var Ht=class{logs=[];retentionDays;constructor(e=dt.retentionDays){this.retentionDays=e;}async log(e){let t=mr.randomBytes(16).toString("hex"),n={...e,id:t,timestamp:new Date};return this.logs.push(n),this.cleanupOldLogs(),t}async get(e){return this.logs.find(t=>t.id===e)||null}async query(e={}){let{limit:t=50,offset:s=0}=e,n=[...this.logs];if(e.userId&&(n=n.filter(y=>y.userId===e.userId)),e.action){let y=Array.isArray(e.action)?e.action:[e.action];n=n.filter(x=>y.includes(x.action));}e.resource&&(n=n.filter(y=>y.resource===e.resource)),e.resourceId&&(n=n.filter(y=>y.resourceId===e.resourceId)),e.success!==void 0&&(n=n.filter(y=>y.success===e.success));let c=e.startDate,l=e.endDate;c!==void 0&&(n=n.filter(y=>y.timestamp>=c)),l!==void 0&&(n=n.filter(y=>y.timestamp<=l)),n.sort((y,x)=>x.timestamp.getTime()-y.timestamp.getTime());let u=n.length;return {logs:n.slice(s,s+t),total:u}}async getRecent(e=50){let t=new Date(Date.now()-6048e5);return this.logs.filter(n=>n.timestamp>=t).sort((n,c)=>c.timestamp.getTime()-n.timestamp.getTime()).slice(0,e)}async getUserActivity(e,t=50){return this.logs.filter(n=>n.userId===e).sort((n,c)=>c.timestamp.getTime()-n.timestamp.getTime()).slice(0,t)}async getStats(e,t){let s=e||new Date(Date.now()-2592e6),n=t||new Date,c=this.logs.filter(h=>h.timestamp>=s&&h.timestamp<=n),l={},u=0,f=0,y=0,x=new Set;for(let h of c){u++;let E=h.action;l[E]=(l[E]||0)+1,h.success&&y++,h.action==="login_failed"&&f++,h.userId&&x.add(h.userId);}return {totalEvents:u,byAction:l,successRate:u>0?y/u:1,failedLogins:f,uniqueUsers:x}}async cleanup(){let e=new Date(Date.now()-this.retentionDays*24*60*60*1e3),t=this.logs.length;return this.logs=this.logs.filter(s=>s.timestamp>=e),t-this.logs.length}cleanupOldLogs(){let e=new Date(Date.now()-this.retentionDays*24*60*60*1e3);this.logs.length;this.logs=this.logs.filter(s=>s.timestamp>=e);}};Ne();var Me=class{authAdapter;email;passwordPolicy;lockout;rateLimiter;auditLogger;baseUrl;emailVerificationRequired;constructor(e){this.authAdapter=e.redis,this.email=e.email,this.passwordPolicy=e.passwordPolicy||new chunk5K4YG5DA_cjs.l,this.lockout=e.lockout,this.rateLimiter=e.rateLimiter,this.auditLogger=e.auditLogger,this.baseUrl=e.baseUrl||"http://localhost:4321",this.emailVerificationRequired=e.emailVerificationRequired??true;}getBaseUrl(e){if(e)try{let t=e.headers.get("x-forwarded-proto")||(e.url.startsWith("https")?"https":"http"),s=e.headers.get("x-forwarded-host")||e.headers.get("host");return s?`${t}://${s}`:new URL(e.url).origin}catch{}return process.env.KYRO_BASE_URL||process.env.SERVER_URL||process.env.PUBLIC_URL||process.env.SITE_URL||this.baseUrl||"http://localhost:4321"}async register(e){let{ipAddress:t,userAgent:s}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let n=await this.rateLimiter.check("auth:register",t);if(!n.allowed)return this.rateLimitResponse(n)}try{let n=await e.json();if(!n.email||!n.password)return this.errorResponse("Email and password are required",400);if(n.password!==n.confirmPassword)return this.errorResponse("Passwords do not match",400);let c=this.passwordPolicy.validate(n.password);if(!c.valid)return this.errorResponse(c.errors.join(". "),400);let l=await this.authAdapter.findUserByEmail(n.email);if(l){if(!l.emailVerified&&this.emailVerificationRequired&&this.email){let y=(await this.authAdapter.createEmailVerificationToken?.(l.id))?.token||mr.randomBytes(32).toString("hex"),h=`${this.getBaseUrl(e)}/admin/auth/verify-email?token=${y}`,E=this.email.getTemplates().verifyEmail(h,n.email);return await this.email.send({to:n.email,...E}),this.jsonResponse({success:!0,message:"An unverified account already exists with this email. We have resent the confirmation link to your inbox.",requiresVerification:!0},200)}return this.errorResponse("Email already registered",400)}let u=await this.authAdapter.createUser({email:n.email,password:n.password,role:n.role||"customer",tenantId:n.tenantId});if(this.emailVerificationRequired&&this.email){let f=mr.randomBytes(32).toString("hex"),x=`${this.getBaseUrl(e)}/admin/auth/verify-email?token=${f}`;await this.authAdapter.createSession(u.id,{ipAddress:t,userAgent:s});let h=this.email.getTemplates().verifyEmail(x,n.email);await this.email.send({to:n.email,...h});}return this.auditLogger&&await this.auditLogger.log({action:"register",userId:u.id,userEmail:u.email,resource:"auth",ipAddress:t,userAgent:s,success:!0}),this.jsonResponse({success:!0,message:"Registration successful",user:this.sanitizeUser(u),requiresVerification:this.emailVerificationRequired&&!!this.email},201)}catch(n){return console.error("[AuthRoutes.register] Registration error:",n),this.errorResponse("Registration failed",500)}}async login(e){let{ipAddress:t,userAgent:s}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let n=await this.rateLimiter.check("auth:login",t);if(!n.allowed)return this.rateLimitResponse(n)}try{let n=await e.json();if(!n.email||!n.password)return this.errorResponse("Email and password are required",400);let c=await this.authAdapter.findUserByEmail(n.email);if(!c)return await this.recordFailedLogin(t,s),this.errorResponse("Invalid credentials",401);if(c.locked)return this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:c.id,userEmail:c.email,resource:"auth",ipAddress:t,userAgent:s,success:!1,error:"Account locked"}),this.errorResponse("Account locked. Contact an administrator.",403);if(this.lockout){let x=await this.lockout.checkLockout(c.id);if(x.locked)return this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:c.id,userEmail:c.email,resource:"auth",ipAddress:t,userAgent:s,success:!1,error:"Account locked"}),this.errorResponse(`Account locked. Try again in ${Math.ceil((x.lockedUntil.getTime()-Date.now())/6e4)} minutes`,423)}let l=await this.authAdapter.verifyPassword(n.email,n.password);if(!l)return await this.recordFailedLogin(t,s,c.id,c.email),this.errorResponse("Invalid credentials",401);if(this.emailVerificationRequired&&l.emailVerified===!1){if(this.email){let h=(await this.authAdapter.createEmailVerificationToken?.(l.id))?.token||mr.randomBytes(32).toString("hex"),_=`${this.getBaseUrl(e)}/admin/auth/verify-email?token=${h}`,R=this.email.getTemplates().verifyEmail(_,l.email);await this.email.send({to:l.email,...R});}return this.errorResponse("Your email address is not verified yet. We have sent a new confirmation link to your email inbox.",403)}this.lockout&&await this.lockout.resetAttempts(c.id),this.auditLogger&&await this.auditLogger.log({action:"login",userId:c.id,userEmail:c.email,role:c.role,resource:"auth",ipAddress:t,userAgent:s,success:!0}),await this.authAdapter.updateUser(c.id,{lastLogin:new Date().toISOString()});let u=await ot({id:c.id,email:c.email,role:c.role,tenantId:c.tenantId}),f={success:!0,user:this.sanitizeUser(c)},y=this.jsonResponse(f);return at(y,u)}catch(n){return console.error("[Auth] Login error:",n),this.errorResponse("Login failed",500)}}async logout(e){let t=se(e);if(!t)return this.errorResponse("No session to logout",401);let{ipAddress:s,userAgent:n}=chunkHVXO3OFB_cjs.a(e);try{let c=await ee(e);c&&(await ve(t),this.auditLogger&&await this.auditLogger.log({action:"logout",userId:c.userId,userEmail:c.email,resource:"auth",ipAddress:s,userAgent:n,success:!0}));let l=this.jsonResponse({success:!0,message:"Logged out successfully"});return it(l)}catch{return this.errorResponse("Logout failed",500)}}async refresh(e){try{let t=se(e);if(!t)return this.errorResponse("Not authenticated",401);let s=await _e(t,e);return s?this.jsonResponse({success:!0,expiresAt:s.expiresAt}):this.errorResponse("Session not found",404)}catch(t){return console.error("[Auth] Session refresh error:",t),this.errorResponse("Session refresh failed",500)}}async me(e){let t=await ee(e);return t?this.jsonResponse({success:true,user:{id:t.userId,email:t.email,role:t.role,tenantId:t.tenantId}}):this.errorResponse("Not authenticated",401)}async changePassword(e){let t=await ee(e);if(!t)return this.errorResponse("Not authenticated",401);let{ipAddress:s,userAgent:n}=chunkHVXO3OFB_cjs.a(e);try{let c=await e.json(),{currentPassword:l,newPassword:u,confirmPassword:f}=c;if(!l||!u)return this.errorResponse("Current and new password required",400);if(u!==f)return this.errorResponse("Passwords do not match",400);let y=this.passwordPolicy.validate(u);if(!y.valid)return this.errorResponse(y.errors.join(". "),400);let x=await this.authAdapter.findUserById(t.userId);if(!x)return this.errorResponse("User not found",404);if(!(x.passwordHash?await this.authAdapter.verifyPassword(l,x.passwordHash):!1))return this.errorResponse("Current password is incorrect",401);let E=await this.authAdapter.getPasswordHistory?.(x.id,5);if(await this.authAdapter.isPasswordInHistory?.(u,x.id,5))return this.errorResponse("Password was recently used. Please choose a different password",400);let R=await this.authAdapter.hashPassword(u);if(x.passwordHash&&await this.authAdapter.addPasswordToHistory?.(x.id,x.passwordHash),await this.authAdapter.updateUser(x.id,{passwordHash:R}),await this.authAdapter.deleteUserSessions(x.id),this.email&&this.email.getTemplates){let q=this.email.getTemplates().passwordChanged(x.email);await this.email.send({to:x.email,...q});}return this.auditLogger&&await this.auditLogger.log({action:"password_change",userId:x.id,userEmail:x.email,resource:"auth",ipAddress:s,userAgent:n,success:!0}),this.jsonResponse({success:!0,message:"Password changed successfully"})}catch{return this.errorResponse("Password change failed",500)}}async forgotPassword(e){let{ipAddress:t,userAgent:s}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let n=await this.rateLimiter.check("auth:forgot",t);if(!n.allowed)return this.rateLimitResponse(n)}try{let n=await e.json(),{email:c}=n;if(!c)return this.errorResponse("Email required",400);let l=await this.authAdapter.findUserByEmail(c);if(!l)return this.jsonResponse({success:!0,message:"If the email exists, a reset link has been sent"});if(this.email){let u=mr.randomBytes(32).toString("hex");if(this.authAdapter.createPasswordResetToken){let h=await this.authAdapter.createPasswordResetToken(l.email);h.token&&(u=h.token);}let y=`${this.getBaseUrl(e)}/admin/auth/reset-password?token=${u}`,x=this.email.getTemplates().resetPassword(y,l.email);await this.email.send({to:l.email,...x});}return this.auditLogger&&await this.auditLogger.log({action:"password_reset",userId:l.id,userEmail:l.email,resource:"auth",ipAddress:t,userAgent:s,success:!0}),this.jsonResponse({success:!0,message:"If the email exists, a reset link has been sent"})}catch{return this.errorResponse("Password reset request failed",500)}}async resetPassword(e){let{ipAddress:t,userAgent:s}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let n=await this.rateLimiter.check("auth:reset",t);if(!n.allowed)return this.rateLimitResponse(n)}try{let n=await e.json(),{token:c,newPassword:l,confirmPassword:u}=n;if(!c||!l)return this.errorResponse("Reset token and new password are required",400);if(l!==u)return this.errorResponse("Passwords do not match",400);let f=this.passwordPolicy.validate(l);if(!f.valid)return this.errorResponse(f.errors.join(". "),400);if(this.authAdapter.resetPasswordWithToken){let y=await this.authAdapter.resetPasswordWithToken(c,l);if(!y.success)return this.errorResponse(y.error||"Password reset failed or token expired",400)}return this.jsonResponse({success:!0,message:"Password reset successful. You can now log in with your new password."})}catch(n){return console.error("[AuthRoutes.resetPassword] Error:",n),this.errorResponse("Password reset failed",500)}}async verifyEmail(e){let s=new URL(e.url).searchParams.get("token");if(!s)return this.errorResponse("Verification token required",400);try{if(this.authAdapter.verifyEmailToken){let n=await this.authAdapter.verifyEmailToken(s);if(!n.success)return this.errorResponse(n.error||"Invalid or expired verification token",400);if(n.userId&&this.email){let c=await this.authAdapter.findUserById(n.userId);if(c){let l=this.email.getTemplates().welcome(c.email);await this.email.send({to:c.email,...l});}}}return this.jsonResponse({success:!0,message:"Email address verified successfully"})}catch(n){return console.error("[AuthRoutes.verifyEmail] Error:",n),this.errorResponse("Email verification failed",500)}}async recordFailedLogin(e,t,s,n){this.lockout&&await this.lockout.recordFailedAttempt(s||e),this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:s,userEmail:n,resource:"auth",ipAddress:e,userAgent:t,success:false,error:"Invalid credentials"});}sanitizeUser(e){let{passwordHash:t,...s}=e;return s}jsonResponse(e,t=200){return new Response(JSON.stringify(e),{status:t,headers:{"Content-Type":"application/json","Cache-Control":"no-store, no-cache, must-revalidate, max-age=0"}})}async listSessions(e){let t=await ee(e);if(!t)return this.errorResponse("Not authenticated",401);try{let s=await Ie(t.userId,se(e)??void 0);return this.jsonResponse({sessions:s})}catch(s){return console.error("[AuthRoutes.listSessions] Error:",s),this.errorResponse("Failed to list sessions",500)}}async revokeSession(e,t){let s=await ee(e);if(!s)return this.errorResponse("Not authenticated",401);try{let c=(await Ie(s.userId)).find(l=>l.id===t);return c?c.currentSession?this.errorResponse("Cannot revoke current session",400):(await ve(t),this.jsonResponse({success:!0,message:"Session revoked"})):this.errorResponse("Session not found",404)}catch(n){return console.error("[AuthRoutes.revokeSession] Error:",n),this.errorResponse("Failed to revoke session",500)}}async revokeOtherSessions(e){let t=await ee(e);if(!t)return this.errorResponse("Not authenticated",401);try{let s=await Ie(t.userId),n=se(e);for(let c of s)c.currentSession||await ve(c.id);return this.jsonResponse({success:!0,message:"Other sessions revoked"})}catch(s){return console.error("[AuthRoutes.revokeOtherSessions] Error:",s),this.errorResponse("Failed to revoke sessions",500)}}async renameSession(e,t){let s=await ee(e);if(!s)return this.errorResponse("Not authenticated",401);try{if(!(await Ie(s.userId)).find(f=>f.id===t))return this.errorResponse("Session not found",404);let l=await e.json(),{name:u}=l;return !u||typeof u!="string"||u.trim().length===0?this.errorResponse("Invalid session name",400):(await lt(t,u.trim()),this.jsonResponse({success:!0,message:"Session renamed"}))}catch(n){return console.error("[AuthRoutes.renameSession] Error:",n),this.errorResponse("Failed to rename session",500)}}async refreshSession(e){let t=se(e);if(!t)return this.errorResponse("No session",401);try{let s=await(Ne(),chunkAHSFSERC_cjs.c(Bt)).refreshSession(t,e);return s?this.jsonResponse({success:!0,expiresAt:s.expiresAt}):this.errorResponse("Session not found",404)}catch(s){return console.error("[AuthRoutes.refreshSession] Error:",s),this.errorResponse("Failed to refresh session",500)}}errorResponse(e,t){return new Response(JSON.stringify({success:false,error:e}),{status:t,headers:{"Content-Type":"application/json"}})}async rateLimitResponse(e){return new Response(JSON.stringify({success:false,error:"Too many requests",retryAfter:e.retryAfter}),{status:429,headers:{"Content-Type":"application/json","Retry-After":String(e.retryAfter||60)}})}};function he(d){let{uploadDir:e=ze.join(Er__default.default.cwd(),"public","uploads"),baseUrl:t="/uploads"}=d;async function s(l){fs.existsSync(l)||await promises.mkdir(l,{recursive:true});}function n(l){let u=ze.extname(l).toLowerCase();return {".jpg":"image/jpeg",".jpeg":"image/jpeg",".png":"image/png",".gif":"image/gif",".webp":"image/webp",".avif":"image/avif",".svg":"image/svg+xml",".mp4":"video/mp4",".webm":"video/webm",".mov":"video/quicktime",".avi":"video/x-msvideo",".mp3":"audio/mpeg",".wav":"audio/wav",".ogg":"audio/ogg",".pdf":"application/pdf",".doc":"application/msword",".docx":"application/vnd.openxmlformats-officedocument.wordprocessingml.document",".xls":"application/vnd.ms-excel",".xlsx":"application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",".zip":"application/zip",".tar":"application/x-tar",".gz":"application/gzip",".rar":"application/vnd.rar",".7z":"application/x-7z-compressed"}[u]||"application/octet-stream"}async function c(l){try{let u=l.toString("hex",0,8);if(u.startsWith("89504e47")){let f=l.readUInt32BE(16),y=l.readUInt32BE(20);return {width:f,height:y}}if(u.startsWith("ffd8")){let f=2;for(;f<l.length&&l[f]===255;){let y=l[f+1];if(y===192||y===194){let x=l.readUInt16BE(f+5);return {width:l.readUInt16BE(f+7),height:x}}f+=2+l.readUInt16BE(f+2);}}}catch{}return {}}return ue({name:"local",displayName:"Local Storage",supportsDynamicResize:true,async upload(l,u){await s(e);let f=Buffer.from(await l.arrayBuffer()),y=mr.createHash("md5").update(f).digest("hex"),x=ze.extname(l.name),h=u?.filename||`${y}${x}`,E=u?.folder||"",_=E?ze.join(e,E):e;await s(_);let R=ze.join(_,h);await promises.writeFile(R,f);let q=l.type.startsWith("image/")?await c(f):{},W=t||"/uploads",V=E?`/${E}/${h}`:`/${h}`,ne=W+V;return {id:y,filename:h,originalName:l.name,mimeType:l.type||n(l.name),size:f.length,url:ne,thumbnailUrl:l.type.startsWith("image/")?ne:void 0,folder:E||void 0,provider:"local",metadata:{...q,...u?.metadata},createdAt:new Date().toISOString()}},async uploadFromUrl(l,u){let f=await fetch(l);if(!f.ok)throw new Error(`Failed to fetch file: ${f.statusText}`);let y=await f.blob(),x=f.headers.get("content-disposition"),h=u?.filename;if(!h&&x){let _=x.match(/filename[^;=\n]*=((['"]).*?\2|[^;\n]*)/);_&&(h=_[1].replace(/['"]/g,""));}h||(h=ze.basename(new URL(l).pathname));let E=new File([y],h,{type:y.type||n(h)});return this.upload(E,u)},async delete(l){let u=ze.join(e,l.replace(t+"/",""));try{await promises.unlink(u);}catch{}},async rename(l,u){let f=ze.join(e,l.replace(t+"/","")),y=ze.join(e,u);return await promises.rename(f,y),`${t}/${u}`},async list(l){let u=l?ze.join(e,l):e;if(!fs.existsSync(u))return [];let f=[],y=await promises.readdir(u,{withFileTypes:true});for(let x of y)if(x.isFile()){let h=ze.join(u,x.name),E=await promises.stat(h),_=`${t}${l?`/${l}`:""}/${x.name}`;f.push({id:mr.createHash("md5").update(x.name).digest("hex"),filename:x.name,originalName:x.name,mimeType:n(x.name),size:E.size,url:_,provider:"local",createdAt:E.birthtime.toISOString()});}return f},async exists(l){let u=ze.join(e,l.replace(t+"/",""));return fs.existsSync(u)},async createFolder(l){let u=ze.join(e,l);await promises.mkdir(u,{recursive:true});},async deleteFolder(l){let u=ze.join(e,l);if(fs.existsSync(u)){let{rm:f}=await import('fs/promises');await f(u,{recursive:true,force:true});}}})}function ct(d){let e=(t,s)=>{if(!d.signKey)return t;let n=mr.createHmac("sha256",d.signKey).update(t+s.toString()).digest("hex");return s.set("s",n),t};return {name:"imgix",displayName:"Imgix",supportsDynamicResize:true,async upload(t,s){throw new Error("Imgix is a transformation service. Use another provider for uploads.")},async uploadFromUrl(t,s){let n=s?.filename||t.split("/").pop()||"file",c=await fetch(t);if(!c.ok)throw new Error(`Failed to fetch: ${c.statusText}`);let l=await c.blob();new File([l],n,{type:l.type});return {id:Buffer.from(t).toString("base64").slice(0,20),filename:n,originalName:n,mimeType:l.type,size:l.size,url:this.getImageUrl(t),thumbnailUrl:this.getImageUrl(t,{width:200,height:200,fit:"crop"}),provider:"imgix",createdAt:new Date().toISOString()}},async delete(t){},async rename(t,s){return `https://${d.domain}/${s}`},getImageUrl(t,s){let n=new URL(t),c=new URLSearchParams(n.search);d.defaultParameters&&Object.entries(d.defaultParameters).forEach(([u,f])=>{c.has(u)||c.set(u,f);}),s&&(s.width&&c.set("w",String(s.width)),s.height&&c.set("h",String(s.height)),s.quality&&c.set("q",String(s.quality)),s.format&&c.set("fm",s.format),s.fit&&c.set("fit",s.fit),s.blur&&c.set("blur",String(s.blur)),s.sharpen&&c.set("sharp",String(s.sharpen))),c.set("auto","compress,format");n.pathname+"?"+c.toString();return d.signKey&&(e(n.pathname+c.toString(),c)),`https://${d.domain}${n.pathname}${c.toString()?"?"+c.toString():""}`},async generateThumbnail(t){return this.getImageUrl(t.url,{width:200,height:200,fit:"crop"})},async list(){return []},async exists(t){try{return (await fetch(t,{method:"HEAD"})).ok}catch{return  false}},async createFolder(){},async deleteFolder(){}}}function Ke(d,e){return e.cdnUrl?`${e.cdnUrl.replace(/\/$/,"")}/${d}`:`https://${e.storageZone}.b-cdn.net/${d}`}function ut(d){return d.cdnUrl?d.cdnUrl.replace(/\/$/,"")+"/":`https://${d.storageZone}.b-cdn.net/`}function pt(d){let e=`https://storage.bunnycdn.com/${d.storageZone}`,t=s=>`${d.prefix?`${d.prefix}/`:""}${s}`.replace(/\/+/g,"/");return ue({name:"bunny",displayName:"Bunny.net Storage",supportsDynamicResize:true,async upload(s,n){let c=t(`${n?.folder?`${n.folder}/`:""}${n?.filename||s.name}`),l=Buffer.from(await s.arrayBuffer()),u=await fetch(`${e}/${c}`,{method:"PUT",headers:{AccessKey:d.apiKey,"Content-Type":s.type},body:l});if(!u.ok){let f=await u.text();throw new Error(`Bunny.net upload failed: ${u.status} ${f}`)}return {id:Buffer.from(c).toString("base64url"),filename:n?.filename||s.name,originalName:s.name,mimeType:s.type,size:l.length,url:Ke(c,d),thumbnailUrl:s.type.startsWith("image/")?Ke(c,d):void 0,folder:n?.folder,provider:"bunny",metadata:n?.metadata,createdAt:new Date().toISOString()}},async delete(s){let n=s.replace(ut(d),""),c=await fetch(`${e}/${n}`,{method:"DELETE",headers:{AccessKey:d.apiKey}});if(!c.ok&&c.status!==404){let l=await c.text();throw new Error(`Bunny.net delete failed: ${c.status} ${l}`)}},async rename(s,n){let c=s.replace(ut(d),""),l=d.prefix?`${d.prefix}/${n}`:n,u=await fetch(`${e}/${c}`,{method:"GET",headers:{AccessKey:d.apiKey}});if(!u.ok)throw new Error("Bunny.net rename failed: could not read old file");let f=await u.arrayBuffer();return await fetch(`${e}/${l}`,{method:"PUT",headers:{AccessKey:d.apiKey,"Content-Type":u.headers.get("Content-Type")||"application/octet-stream"},body:f}),await this.delete(s),Ke(l,d)},async list(s){let n=t(s||""),c=await fetch(`${e}/${n}`,{method:"GET",headers:{AccessKey:d.apiKey}});if(!c.ok){let u=await c.text();throw new Error(`Bunny.net list failed: ${c.status} ${u}`)}return (await c.json()).map(u=>({id:Buffer.from(u.ObjectName||"").toString("base64url"),filename:u.ObjectName?.split("/").pop()||"",originalName:u.ObjectName?.split("/").pop()||"",mimeType:"application/octet-stream",size:u.Length||0,url:Ke(u.ObjectName||"",d),provider:"bunny",createdAt:u.LastChanged||new Date().toISOString()}))},async exists(s){let n=s.replace(ut(d),"");return (await fetch(`${e}/${n}`,{method:"HEAD",headers:{AccessKey:d.apiKey}})).ok},async createFolder(s){let n=t(`${s}/`);await fetch(`${e}/${n}`,{method:"PUT",headers:{AccessKey:d.apiKey,"Content-Length":"0"},body:""});},async deleteFolder(s){let n=t(`${s}/`);await fetch(`${e}/${n}`,{method:"DELETE",headers:{AccessKey:d.apiKey}});}})}var gt=class{providers=new Map;providerToPlugin=new Map;disabledPlugins=new Set;constructor(){this.registerLocal(),this.registerImgix(),this.registerBunny();}registerLocal(){this.register({type:"local",displayName:"Local Server",configKey:"local",configFields:[{name:"uploadDir",type:"text",label:"Upload Directory",defaultValue:"./public/uploads"},{name:"baseUrl",type:"text",label:"Base URL",defaultValue:"/uploads"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>{let t=e?.local||e,s=(t?.uploadDir||"").trim(),n;s?ze__default.default.isAbsolute(s)?n=s:s.includes("/")||s.includes("\\")?n=ze__default.default.resolve(process.cwd(),s):n=ze__default.default.join(process.cwd(),"public",s):n=ze__default.default.join(process.cwd(),"public","uploads");let c=(t?.baseUrl||"").trim(),l;return c?l=c.startsWith("/")?c:`/${c}`:l="/uploads",{uploadDir:n,baseUrl:l}},factory:e=>he(e)});}registerImgix(){this.register({type:"imgix",displayName:"Imgix",configKey:"imgix",configFields:[{name:"domain",type:"text",label:"Domain",required:true},{name:"signKey",type:"password",label:"Sign Key"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>e?.imgix||e,factory:e=>ct(e)});}registerBunny(){this.register({type:"bunny",displayName:"Bunny.net",configKey:"bunny",configFields:[{name:"storageZone",type:"text",label:"Storage Zone",required:true},{name:"apiKey",type:"password",label:"API Key",required:true},{name:"cdnUrl",type:"text",label:"CDN URL"},{name:"prefix",type:"text",label:"Path Prefix"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>e?.bunny||e,factory:e=>pt(e)});}register(e){if(this.providers.has(e.type)){console.warn(`[StorageRegistry] Provider "${e.type}" already registered, skipping`);return}e.pluginName&&this.providerToPlugin.set(e.type,e.pluginName),this.providers.set(e.type,e);}unregister(e){this.providers.delete(e),this.providerToPlugin.delete(e);}get(e){return this.providers.get(e)}getAll(){return Array.from(this.providers.values())}getAllAvailable(e){let t=this.getAll();return e?t.filter(s=>s.pluginName?e(s.pluginName):true):t}has(e){return this.providers.has(e)}async resolve(e,t){let s=this.providers.get(e);if(!s)throw new Error(`Unknown storage provider type: "${e}". Is the plugin that provides it enabled?`);if(s.pluginName&&this.disabledPlugins.has(s.pluginName))throw new Error(`Storage provider "${e}" is not available (plugin "${s.pluginName}" is disabled)`);let n=s.configKey||e,c=s.extractConfig(t,n);return s.factory(c)}async resolveWithConfig(e,t){let s=this.providers.get(e);if(!s)throw new Error(`Unknown storage provider type: "${e}". Is the plugin that provides it enabled?`);if(s.pluginName&&this.disabledPlugins.has(s.pluginName))throw new Error(`Storage provider "${e}" is not available (plugin "${s.pluginName}" is disabled)`);let n=s.extractRawConfig(t);return s.factory(n)}getProviderPluginName(e){return this.providerToPlugin.get(e)}getAllPluginNames(){return Array.from(new Set(this.providerToPlugin.values()))}setPluginEnabled(e,t){t?this.disabledPlugins.delete(e):this.disabledPlugins.add(e);}isPluginEnabled(e){return !this.disabledPlugins.has(e)}},mt=null;function ft(){return mt||(mt=new gt),mt}function Qt(d){if(!d)return "";if(d.startsWith("pub-"))return d;let e=d.match(/pub-[a-zA-Z0-9]+/i);return e?e[0]:""}function Lr(d,e){let t=d.startsWith("/")?d.slice(1):d;if(e.cdnUrl)return `${e.cdnUrl.replace(/\/$/,"")}/${t}`;switch(e.provider){case "r2":{let s=Qt(e.publicDevUrl);return s?`https://${s}.r2.dev/${t}`:`https://${e.bucket}.${e.accountId}.r2.cloudflarestorage.com/${t}`}case "gcs":return `https://storage.googleapis.com/${e.bucket}/${t}`;case "digitalocean":return `https://${e.bucket}.${e.region}.cdn.digitaloceanspaces.com/${t}`;case "backblaze":return `https://${e.bucket}.s3.backblazeb2.com/${t}`;case "wasabi":return `https://${e.bucket}.s3.wasabisys.com/${t}`;default:return `https://${e.bucket}.s3.${e.region}.amazonaws.com/${t}`}}function yt(d){if(d.cdnUrl)return d.cdnUrl.replace(/\/$/,"")+"/";switch(d.provider){case "r2":{let e=Qt(d.publicDevUrl);return e?`https://${e}.r2.dev/`:`https://${d.bucket}.${d.accountId}.r2.cloudflarestorage.com/`}case "gcs":return `https://storage.googleapis.com/${d.bucket}/`;case "digitalocean":return `https://${d.bucket}.${d.region}.cdn.digitaloceanspaces.com/`;case "backblaze":return `https://${d.bucket}.s3.backblazeb2.com/`;case "wasabi":return `https://${d.bucket}.s3.wasabisys.com/`;default:return `https://${d.bucket}.s3.${d.region}.amazonaws.com/`}}function _r(d){switch(d){case "r2":return "Cloudflare R2";case "gcs":return "Google Cloud Storage";case "digitalocean":return "DigitalOcean Spaces";case "backblaze":return "Backblaze B2";case "wasabi":return "Wasabi";default:return "AWS S3"}}function Nr(d){let e=new clientS3.S3Client({region:d.region||"auto",endpoint:d.endpoint,credentials:{accessKeyId:d.accessKeyId,secretAccessKey:d.secretAccessKey},forcePathStyle:true,tls:true,...d.provider==="r2"&&{requestHandler:new nodeHttpHandler.NodeHttpHandler}}),t=n=>`${d.prefix?`${d.prefix}/`:""}${n}`.replace(/\/+/g,"/"),s=n=>Lr(n,d);return ue({name:d.provider,displayName:_r(d.provider),supportsDynamicResize:true,async upload(n,c){let l=t(`${c?.folder?`${c.folder}/`:""}${c?.filename||n.name}`),u=Buffer.from(await n.arrayBuffer());await e.send(new clientS3.PutObjectCommand({Bucket:d.bucket,Key:l,Body:u,ContentType:n.type,Metadata:c?.metadata}));let f=await e.send(new clientS3.HeadObjectCommand({Bucket:d.bucket,Key:l}));return {id:Buffer.from(l).toString("base64url"),filename:c?.filename||n.name,originalName:n.name,mimeType:n.type,size:u.length,url:s(l),thumbnailUrl:n.type.startsWith("image/")?s(l):void 0,folder:c?.folder,provider:d.provider,metadata:{...c?.metadata,etag:f.ETag},createdAt:new Date().toISOString()}},async delete(n){let c=n.replace(yt(d),"");await e.send(new clientS3.DeleteObjectCommand({Bucket:d.bucket,Key:c}));},async rename(n,c){let l=n.replace(yt(d),""),u=d.prefix?`${d.prefix}/${c}`:c;return await e.send(new clientS3.CopyObjectCommand({Bucket:d.bucket,CopySource:`${d.bucket}/${l}`,Key:u})),await e.send(new clientS3.DeleteObjectCommand({Bucket:d.bucket,Key:l})),s(u)},async list(n){let c=t(n||"");return ((await e.send(new clientS3.ListObjectsV2Command({Bucket:d.bucket,Prefix:c}))).Contents||[]).map(u=>({id:Buffer.from(u.Key||"").toString("base64url"),filename:u.Key?.split("/").pop()||"",originalName:u.Key?.split("/").pop()||"",mimeType:"application/octet-stream",size:u.Size||0,url:s(u.Key||""),provider:d.provider,createdAt:u.LastModified?.toISOString()||new Date().toISOString()}))},async exists(n){try{let c=n.replace(yt(d),"");return await e.send(new clientS3.HeadObjectCommand({Bucket:d.bucket,Key:c})),!0}catch{return  false}},async createFolder(n){let c=t(`${n}/`);await e.send(new clientS3.PutObjectCommand({Bucket:d.bucket,Key:c,Body:""}));},async deleteFolder(n){let c=t(`${n}/`),l;do{let u=await e.send(new clientS3.ListObjectsV2Command({Bucket:d.bucket,Prefix:c,ContinuationToken:l}));if(u.Contents?.length){let f=u.Contents.map(y=>({Key:y.Key}));await e.send(new clientS3.DeleteObjectsCommand({Bucket:d.bucket,Delete:{Objects:f}}));}l=u.IsTruncated?u.NextContinuationToken:void 0;}while(l);await e.send(new clientS3.DeleteObjectCommand({Bucket:d.bucket,Key:c}));}})}function Or(d){let e=()=>`https://api.cloudinary.com/v1_1/${d.cloudName}/upload`,t=async s=>{let n=await import('crypto'),c=Object.keys(s).sort().map(l=>`${l}=${s[l]}`).join("&");return n.createHash("sha256").update(c+d.apiSecret).digest("hex")};return {name:"cloudinary",displayName:"Cloudinary",supportsDynamicResize:true,async upload(s,n){let c=new FormData;if(c.append("file",s),d.uploadPreset)c.append("upload_preset",d.uploadPreset);else {let f=Math.round(Date.now()/1e3),y={timestamp:String(f)};(n?.folder||d.folder)&&(y.folder=n?.folder||d.folder||"");let x=await t(y);c.append("timestamp",String(f)),c.append("signature",x),c.append("api_key",d.apiKey);}(n?.folder||d.folder)&&c.append("folder",n?.folder||d.folder||"");let l=await fetch(e(),{method:"POST",body:c});if(!l.ok){let f=await l.json();throw new Error(`Cloudinary upload failed: ${f.error?.message||l.statusText}`)}let u=await l.json();return {id:u.public_id,filename:`${u.public_id}.${u.format}`,originalName:u.original_filename||s.name,mimeType:s.type||`image/${u.format}`,size:u.bytes,url:u.secure_url,thumbnailUrl:this.getImageUrl(u.secure_url,{width:200,height:200,fit:"crop"}),width:u.width,height:u.height,folder:n?.folder||d.folder,provider:"cloudinary",createdAt:new Date().toISOString()}},async uploadFromUrl(s,n){let c=new FormData;c.append("file",s),c.append("upload_preset","ml_default"),(n?.folder||d.folder)&&c.append("folder",n?.folder||d.folder||"");let l=await fetch(e(),{method:"POST",body:c});if(!l.ok)throw new Error("Cloudinary upload failed");let u=await l.json();return {id:u.public_id,filename:`${u.public_id}.${u.format}`,originalName:u.original_filename||s.split("/").pop()||"file",mimeType:`image/${u.format}`,size:u.bytes,url:u.secure_url,thumbnailUrl:this.getImageUrl(u.secure_url,{width:200,height:200,fit:"crop"}),width:u.width,height:u.height,provider:"cloudinary",createdAt:new Date().toISOString()}},async delete(s){try{let n=s.split("/image/upload/");if(n.length!==2){console.warn("[Cloudinary delete] Could not parse URL:",s);return}let c=n[1].replace(/^v\d+\//,"").replace(/\.[^.]+$/,""),l=Math.round(Date.now()/1e3),u={timestamp:String(l),public_id:c},f=Object.keys(u).sort().map(R=>`${R}=${u[R]}`).join("&"),x=(await import('crypto')).createHash("sha256").update(f+d.apiSecret).digest("hex"),h=`https://api.cloudinary.com/v1_1/${d.cloudName}/image/destroy`,E=new FormData;E.append("public_id",c),E.append("timestamp",String(l)),E.append("signature",x),E.append("api_key",d.apiKey);let _=await fetch(h,{method:"POST",body:E});if(!_.ok){let R=await _.json();console.warn("[Cloudinary delete] Failed:",R);}}catch(n){console.warn("[Cloudinary delete] Error:",n.message);}},async rename(s,n){let c="",l=n.replace(/\.[^.]+$/,""),u="";try{let f=s.split("/image/upload/");if(f.length!==2)return console.warn("[Cloudinary rename] Could not parse old URL:",s),s;let y=f[1],x=y.match(/^(v\d+)\//);c=x?x[1]:"";let h=y.replace(/^v\d+\//,"").replace(/\.[^.]+$/,""),E=h.split("/");u=E.length>1?E.slice(0,-1).join("/"):"";let _=n.replace(/\.[^.]+$/,"");l=u?`${u}/${_}`:_;let R=Math.round(Date.now()/1e3),q={from_public_id:h,to_public_id:l,timestamp:String(R)},W=Object.keys(q).sort().map(Z=>`${Z}=${q[Z]}`).join("&"),ne=(await import('crypto')).createHash("sha256").update(W+d.apiSecret).digest("hex"),$=new FormData;$.append("from_public_id",h),$.append("to_public_id",l),$.append("timestamp",String(R)),$.append("signature",ne),$.append("api_key",d.apiKey);let pe=await fetch(`https://api.cloudinary.com/v1_1/${d.cloudName}/image/rename`,{method:"POST",body:$});if(pe.ok)return (await pe.json()).secure_url;{let Z=await pe.json();console.warn("[Cloudinary rename] Failed:",Z);let k=c?`/${c}/`:"/";return `https://res.cloudinary.com/${d.cloudName}/image/upload${k}${l}.${n.split(".").pop()}`}}catch(f){console.warn("[Cloudinary rename] Error:",f.message);let y=c?`/${c}/`:"/";return `https://res.cloudinary.com/${d.cloudName}/image/upload${y}${l}.${n.split(".").pop()}`}},getImageUrl(s,n){if(!n)return s;let c=s.split("/upload/");if(c.length!==2)return s;let l=[];if(n.width&&l.push(`w_${n.width}`),n.height&&l.push(`h_${n.height}`),n.fit){let f={crop:"c_fill",clip:"c_fit",scale:"c_scale",fill:"c_fill"};l.push(f[n.fit]||"c_limit");}n.quality&&l.push(`q_${n.quality}`),n.format&&l.push(`f_${n.format}`);let u=l.join(",");return `${c[0]}/upload/${u}/${c[1]}`},async generateThumbnail(s){return this.getImageUrl(s.url,{width:200,height:200,fit:"crop"})},async list(){return []},async exists(s){return (await fetch(s,{method:"HEAD"})).ok},async createFolder(){},async deleteFolder(){}}}function Br(d){let e=null;async function t(){return e||(e=new basicFtp.Client(6e4,{allowSeparateTransferHost:true}),e.ftp.verbose=false,await e.access({host:d.host,port:d.port||21,user:d.user,password:d.password,secure:d.secure,secureOptions:{}})),e}let s=l=>`${d.prefix?`${d.prefix}/`:""}${l}`.replace(/\/+/g,"/"),n=l=>`${d.baseUrl.replace(/\/$/,"")}/${l}`,c=()=>d.baseUrl.replace(/\/$/,"")+"/";return ue({name:d.type,displayName:d.type==="sftp"?"SFTP Storage":"FTP Storage",supportsDynamicResize:false,async upload(l,u){let f=await t(),y=s(`${u?.folder?`${u.folder}/`:""}${u?.filename||l.name}`),x=Buffer.from(await l.arrayBuffer()),h=y.split("/").slice(0,-1),E="";for(let R of h){E=E?`${E}/${R}`:R;try{await f.ensureDir(E);}catch{}}let _=stream.Readable.from(x);return await f.uploadFrom(_,y),{id:Buffer.from(y).toString("base64url"),filename:u?.filename||l.name,originalName:l.name,mimeType:l.type,size:x.length,url:n(y),thumbnailUrl:l.type.startsWith("image/")?n(y):void 0,folder:u?.folder,provider:d.type,metadata:u?.metadata,createdAt:new Date().toISOString()}},async delete(l){let u=await t(),f=l.replace(c(),"");await u.remove(f);},async rename(l,u){let f=await t(),y=l.replace(c(),""),x=d.prefix?`${d.prefix}/${u}`:u;return await f.rename(y,x),n(x)},async list(l){let u=await t(),f=s(l||""),y;try{y=await u.list(f);}catch{return []}return y.filter(x=>x.type===0).map(x=>({id:Buffer.from(`${f}/${x.name}`).toString("base64url"),filename:x.name,originalName:x.name,mimeType:"application/octet-stream",size:Number(x.size)||0,url:n(`${f}/${x.name}`.replace(/\/+/g,"/")),provider:d.type,createdAt:x.modifiedAt?x.modifiedAt.toISOString():new Date().toISOString()}))},async exists(l){let u=await t(),f=l.replace(c(),"");try{return await u.size(f),!0}catch{return  false}},async createFolder(l){let u=await t(),f=s(l);await u.ensureDir(f);},async deleteFolder(l){let u=await t(),f=s(l);await u.removeDir(f);}})}async function er(d){let e=d.getStorageConfig(),t=ft();try{return await t.resolve(e.type,e)}catch(s){return console.warn(`[resolveProvider] ${s.message} \u2014 falling back to local storage`),he({uploadDir:ze__default.default.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"})}}function ue(d){return {async uploadFromUrl(e,t){let s=await fetch(e);if(!s.ok)throw new Error(`Failed to fetch: ${s.statusText}`);let n=await s.blob(),c=e.split("/").pop()||"file",l=new File([n],c,{type:n.type});return this.upload(l,t)},getImageUrl(e,t){if(!t||Object.keys(t).length===0)return e;let s=new URLSearchParams({url:e});return t.width&&s.set("w",String(t.width)),t.height&&s.set("h",String(t.height)),t.quality&&s.set("q",String(t.quality)),t.format&&s.set("f",t.format),t.cropWidth&&t.cropHeight&&(s.set("cx",String(t.cropX??0)),s.set("cy",String(t.cropY??0)),s.set("cw",String(t.cropWidth)),s.set("ch",String(t.cropHeight))),`/api/media/resize?${s.toString()}`},async generateThumbnail(e){return this.getImageUrl(e.url,{width:400,height:400})},...d}}async function tr(d){if(!d)return console.warn("[resolveProviderWithConfig] No config, using local"),he({uploadDir:ze__default.default.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"});let e=d.type||"local",t=ft();try{return await t.resolveWithConfig(e,d)}catch(s){return console.warn(`[resolveProviderWithConfig] ${s.message} \u2014 falling back to local storage`),he({uploadDir:ze__default.default.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"})}}function rr(){return typeof globalThis>"u"?false:typeof globalThis.EdgeRuntime=="string"||typeof globalThis.WebSocketPair<"u"||typeof globalThis.Deno<"u"||typeof process<"u"&&process.env?.NEXT_RUNTIME==="edge"}async function sr(d){if(!rr())try{let{default:e}=await import('sharp'),t=await e(d).metadata(),s=e(d).webp({quality:85}),n=e(d).resize({width:500,withoutEnlargement:!0}).webp({quality:80});return {buffer:await s.toBuffer(),thumbnailBuffer:await n.toBuffer(),width:t.width,height:t.height,format:"webp"}}catch{}return {buffer:d,thumbnailBuffer:d,format:"passthrough"}}var bt=false;function ke(d){if(typeof d!="string")return d;let e=d.replace(/-/g,"").toLowerCase();return e.length===32?`${e.slice(0,8)}-${e.slice(8,12)}-${e.slice(12,16)}-${e.slice(16,20)}-${e.slice(20)}`:d}var We=class d{db;storage;dialect;genId;mediaTable="media";foldersTable="media_folders";constructor(e,t,s){this.db=e,this.storage=t,this.dialect=s?.dialect||"sqlite",this.genId=s?.genId||chunkWG3UQEV7_cjs.e;}static async init(e,t){let s;if(t?.storageConfig)s=await tr(t.storageConfig);else {let c=new chunk5K4YG5DA_cjs.j(e);await c.load(),s=await er(c);}let n=new d(e,s,t);return await n.ensureTables(),n}async ensureTables(){if(this.dialect==="mongodb"){let e=this.db.db;await e.collection(this.mediaTable).createIndex({filename:1},{unique:true}),await e.collection(this.foldersTable).createIndex({path:1},{unique:true}),bt=true;return}if(this.dialect==="sqlite"){this.db.exec(`
+        CREATE TABLE IF NOT EXISTS media (
+          id TEXT PRIMARY KEY,
+          filename TEXT NOT NULL UNIQUE,
+          title TEXT,
+          original_name TEXT NOT NULL,
+          mime_type TEXT NOT NULL,
+          file_size INTEGER NOT NULL,
+          width INTEGER,
+          height INTEGER,
+          url TEXT NOT NULL UNIQUE,
+          thumbnail_url TEXT,
+          folder TEXT,
+          provider TEXT NOT NULL,
+          alt TEXT,
+          caption TEXT,
+          metadata TEXT,
+          created_at TEXT NOT NULL,
+          updated_at TEXT NOT NULL
+        );
+        CREATE INDEX IF NOT EXISTS idx_media_folder ON media(folder);
+        CREATE INDEX IF NOT EXISTS idx_media_provider ON media(provider);
+        CREATE INDEX IF NOT EXISTS idx_media_filename ON media(filename);
+      `),this.db.exec(`
+        CREATE TABLE IF NOT EXISTS media_folders (
+          id TEXT PRIMARY KEY,
+          name TEXT NOT NULL,
+          path TEXT NOT NULL,
+          parent_path TEXT,
+          created_at TEXT
+        );
+        CREATE INDEX IF NOT EXISTS idx_media_folders_path ON media_folders(path);
+      `);try{let e=this.db.prepare("PRAGMA table_info(media)").all(),t=new Set(e.map(n=>n.name)),s=(n,c)=>{t.has(n)||this.db.exec(`ALTER TABLE media ADD COLUMN ${n} ${c}`);};s("created_at","TEXT"),s("updated_at","TEXT"),s("original_name","TEXT"),s("mime_type","TEXT"),s("file_size","INTEGER"),s("thumbnail_url","TEXT"),t.has("createdAt")&&this.db.exec("UPDATE media SET created_at = createdAt WHERE created_at IS NULL AND createdAt IS NOT NULL"),t.has("updatedAt")&&this.db.exec("UPDATE media SET updated_at = updatedAt WHERE updated_at IS NULL AND updatedAt IS NOT NULL"),t.has("originalName")&&this.db.exec("UPDATE media SET original_name = originalName WHERE original_name IS NULL AND originalName IS NOT NULL"),t.has("mimeType")&&this.db.exec("UPDATE media SET mime_type = mimeType WHERE mime_type IS NULL AND mimeType IS NOT NULL"),t.has("fileSize")&&this.db.exec("UPDATE media SET file_size = fileSize WHERE file_size IS NULL AND fileSize IS NOT NULL"),t.has("thumbnailUrl")&&this.db.exec("UPDATE media SET thumbnail_url = thumbnailUrl WHERE thumbnail_url IS NULL AND thumbnailUrl IS NOT NULL");}catch{}}else if(this.dialect==="postgres"){if(bt)return;let{sql:e}=await import('drizzle-orm');await this.db.execute(e`
+        CREATE TABLE IF NOT EXISTS "media" (
+          "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+          "filename" VARCHAR(255) NOT NULL UNIQUE,
+          "title" VARCHAR(255),
+          "original_name" VARCHAR(255) NOT NULL,
+          "mime_type" VARCHAR(100),
+          "file_size" INTEGER,
+          "width" INTEGER,
+          "height" INTEGER,
+          "url" TEXT NOT NULL UNIQUE,
+          "thumbnail_url" TEXT,
+          "folder" VARCHAR(255),
+          "provider" VARCHAR(50) NOT NULL,
+          "alt" TEXT,
+          "caption" TEXT,
+          "metadata" JSONB,
+          "created_at" TIMESTAMP NOT NULL DEFAULT NOW(),
+          "updated_at" TIMESTAMP NOT NULL DEFAULT NOW()
+        )
+      `),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_folder" ON "media" ("folder")`),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_provider" ON "media" ("provider")`),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_filename" ON "media" ("filename")`),await this.db.execute(e`
+        CREATE TABLE IF NOT EXISTS "media_folders" (
+          "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+          "name" VARCHAR(255) NOT NULL,
+          "path" TEXT NOT NULL,
+          "parent_path" TEXT,
+          "created_at" TIMESTAMP NOT NULL DEFAULT NOW()
+        )
+      `),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_folders_path" ON "media_folders" ("path")`),bt=true;}}now(){return new Date().toISOString()}buildFindConditions(e){let t=[],s=[],n=e.sortBy==="name"?"title":e.sortBy==="createdAt"?"created_at":e.sortBy==="updatedAt"?"updated_at":e.sortBy||"created_at",c=e.sortDir==="asc"?"ASC":"DESC";if(e.search){t.push("(title LIKE ? OR filename LIKE ? OR original_name LIKE ? OR alt LIKE ?)");let u=`%${e.search}%`;s.push(u,u,u,u);}return e.type&&e.type!=="all"&&(t.push("mime_type LIKE ?"),s.push(`${e.type}/%`)),e.folder&&(t.push("(folder = ? OR folder LIKE ?)"),s.push(e.folder,`${e.folder}/%`)),{where:t.length>0?`WHERE ${t.join(" AND ")}`:"",params:s,orderBy:c,sortCol:n}}rowToMedia(e,t){return {id:e.id,filename:e.filename,title:e.title??null,originalName:e.original_name??e.originalName,mimeType:e.mime_type??e.mimeType,fileSize:e.file_size??e.fileSize,width:e.width??null,height:e.height??null,url:d.resolveMediaUrl(e.url,t),thumbnailUrl:d.resolveMediaUrl(e.thumbnail_url??e.thumbnailUrl??null,t),folder:e.folder??null,provider:e.provider,alt:e.alt??null,caption:e.caption??null,metadata:typeof e.metadata=="string"?JSON.parse(e.metadata):e.metadata??null,createdAt:e.created_at??e.createdAt,updatedAt:e.updated_at??e.updatedAt}}static resolveMediaUrl(e,t){return e?e.startsWith("http://")||e.startsWith("https://")||e.startsWith("blob:")||e.startsWith("data:")?e:`${(process.env.KYRO_BASE_URL||t||"http://localhost:4321").replace(/\/+$/,"")}${e.startsWith("/")?"":"/"}${e}`:null}async sqliteRun(e,t=[]){let s=this.db.prepare(e),n=e.trim().toLowerCase();return n.startsWith("insert")||n.startsWith("update")||n.startsWith("delete")?s.run(...t):s.all(...t)}sqliteGet(e,t=[]){return this.db.prepare(e).get(...t)}async upload(e,t="",s){let n=e.type.startsWith("image/"),c,l=e,u=e.name,f=null,y=null;if(n&&!e.type.includes("svg")){let R=Buffer.from(await e.arrayBuffer());c=await sr(R),u=`${e.name.replace(/\.[^/.]+$/,"").toLowerCase().replace(/[^a-z0-9]/g,"-").replace(/-+/g,"-").substring(0,50)}.webp`,f=c.width??null,y=c.height??null,l=new File([c.buffer],u,{type:"image/webp"});}let x=await this.storage.upload(l,{folder:t,filename:u}),h=await this.storage.generateThumbnail({...x,id:"",provider:this.storage.name,createdAt:this.now()},{width:400,height:400}),E=this.genId(),_=this.now();if(this.dialect==="mongodb"){let R=x.mimeType,q=R.startsWith("image/")?"image":R.startsWith("video/")?"video":R.startsWith("audio/")?"audio":R.startsWith("application/pdf")?"document":["application/zip","application/x-zip","application/x-tar","application/gzip","application/x-7z"].includes(R)?"archive":"other";return await this.db.db.collection(this.mediaTable).insertOne({_id:E,id:E,filename:x.filename,title:e.name.replace(/\.[^/.]+$/,""),originalName:e.name,mimeType:R,fileSize:x.size,width:f,height:y,url:x.url,thumbnailUrl:h,folder:t||"",provider:this.storage.name,type:q,status:"active",alt:null,caption:null,createdAt:new Date,updatedAt:new Date}),this.rowToMedia({id:E,filename:x.filename,title:e.name.replace(/\.[^/.]+$/,""),originalName:e.name,mimeType:R,fileSize:x.size,width:f,height:y,url:x.url,thumbnailUrl:h,folder:t||"",provider:this.storage.name,type:q,status:"active",alt:null,caption:null,createdAt:new Date,updatedAt:new Date},s)}if(this.dialect==="sqlite")await this.sqliteRun(`INSERT INTO ${this.mediaTable}
+          (id, filename, title, original_name, mime_type, file_size, width, height, url, thumbnail_url, folder, provider, alt, caption, metadata, created_at, updated_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,[E,x.filename,e.name.replace(/\.[^/.]+$/,""),e.name,x.mimeType,x.size,f,y,x.url,h,t||null,this.storage.name,null,null,null,_,_]);else {let{media:R}=await import('./media-OUBQTIQP.cjs'),q=x.mimeType,W=q.startsWith("image/")?"image":q.startsWith("video/")?"video":q.startsWith("audio/")?"audio":q.startsWith("application/pdf")?"document":["application/zip","application/x-zip","application/x-tar","application/gzip","application/x-7z"].includes(q)?"archive":"other",V=await this.db.insert(R).values({id:E,filename:x.filename,title:e.name.replace(/\.[^/.]+$/,""),originalName:e.name,mimeType:q,fileSize:x.size,width:f,height:y,url:x.url,thumbnailUrl:h,folder:t||"",provider:this.storage.name,type:W,status:"active",alt:null,caption:null,createdAt:new Date,updatedAt:new Date}).returning();V&&V[0]&&(E=V[0].id);}return {id:E,filename:x.filename,title:e.name.replace(/\.[^/.]+$/,""),originalName:e.name,mimeType:x.mimeType,fileSize:x.size,width:f,height:y,url:x.url,thumbnailUrl:h,folder:t||null,provider:this.storage.name,alt:null,caption:null,metadata:null,createdAt:_,updatedAt:_}}async uploadFromUrl(e,t="",s){let n=await fetch(e);if(!n.ok)throw new Error(`Failed to fetch URL: ${n.status}`);let c=await n.blob(),l=e.split("/").pop()||"url-image",u=n.headers.get("content-type")||c.type||"application/octet-stream",f=new File([c],l,{type:u});return this.upload(f,t,s)}async delete(e,t){this.dialect==="postgres"&&(e=ke(e));let s=await this.findById(e,t);if(s){if(await this.deleteFile(s.url),s.thumbnailUrl&&s.thumbnailUrl!==s.url&&s.thumbnailUrl!==s.url+"?thumb")try{await this.deleteFile(s.thumbnailUrl);}catch{}if(this.dialect==="mongodb"){await this.db.db.collection(this.mediaTable).deleteOne({id:e});return}if(this.dialect==="sqlite")await this.sqliteRun(`DELETE FROM ${this.mediaTable} WHERE id = ?`,[e]);else {let{media:n}=await import('./media-OUBQTIQP.cjs'),{eq:c}=await import('drizzle-orm');await this.db.delete(n).where(c(n.id,e));}}}async deleteFile(e){await this.storage.delete(e);}async rename(e,t,s){this.dialect==="postgres"&&(e=ke(e));let n=await this.findById(e,s);if(!n)return null;let c=await this.storage.rename(n.url,t),l;if(n.thumbnailUrl||this.storage.name==="cloudinary"){let x=c.match(/\/upload\/(v\d+)\//),h=x?x[1]+"/":"",E=c.match(/(.+?)\/upload\//);l=`${E?E[1]:"https://res.cloudinary.com/"+this.storage.config?.cloudName||"unknown"}/upload/w_200,h_200,c_fill/${h}${t}`;}let u=n.filename.split(".").pop(),f=t.includes(".")?t:`${t}.${u}`,y={url:c,filename:f,thumbnailUrl:l};if(this.dialect==="mongodb")return await this.db.db.collection(this.mediaTable).updateOne({id:e},{$set:{url:c,thumbnailUrl:l||null,updatedAt:new Date}}),this.findById(e,s);if(this.dialect==="sqlite"){let x={...y};"thumbnailUrl"in x&&(x.thumbnail_url=x.thumbnailUrl,delete x.thumbnailUrl);let h=Object.keys(x).map(_=>`${_} = ?`).join(", "),E=Object.values(x);await this.sqliteRun(`UPDATE ${this.mediaTable} SET ${h}, updated_at = ? WHERE id = ?`,[...E,this.now(),e]);}else {let{media:x}=await import('./media-OUBQTIQP.cjs'),{eq:h}=await import('drizzle-orm');await this.db.update(x).set({...y,updatedAt:this.now()}).where(h(x.id,e));}return {...n,...y,updatedAt:this.now(),thumbnailUrl:y.thumbnailUrl??null}}async findById(e,t){if(this.dialect==="postgres"&&(e=ke(e)),this.dialect==="mongodb"){let l=await this.db.db.collection(this.mediaTable).findOne({id:e});return l?this.rowToMedia(l,t):null}if(this.dialect==="sqlite"){let l=this.sqliteGet(`SELECT * FROM ${this.mediaTable} WHERE id = ?`,[e]);return l?this.rowToMedia(l,t):null}let{media:s}=await import('./media-OUBQTIQP.cjs'),{eq:n}=await import('drizzle-orm'),[c]=await this.db.select().from(s).where(n(s.id,e));return c?this.rowToMedia(c,t):null}async find(e={},t){let{page:s=1,limit:n=30,search:c="",type:l="",folder:u="",sortBy:f="createdAt",sortDir:y="desc"}=e,{where:x,params:h,orderBy:E,sortCol:_}=this.buildFindConditions({page:s,limit:n,search:c,type:l,folder:u,sortBy:f,sortDir:y}),R=(s-1)*n;if(this.dialect==="mongodb"){let X={},{search:G,type:ae,folder:K,sortBy:Te="createdAt",sortDir:Re="desc"}=e;G&&(X.$or=[{title:{$regex:G,$options:"i"}},{filename:{$regex:G,$options:"i"}},{originalName:{$regex:G,$options:"i"}},{alt:{$regex:G,$options:"i"}}]),ae&&ae!=="all"&&(X.mimeType={$regex:`^${ae}/`}),K&&(X.$or=[{folder:K},{folder:{$regex:`^${K}/`}}]);let St={[Te==="name"?"title":Te]:Re==="asc"?1:-1},r=await this.db.db.collection(this.mediaTable).countDocuments(X);return {docs:(await this.db.db.collection(this.mediaTable).find(X).sort(St).skip(R).limit(n).toArray()).map(m=>this.rowToMedia(m,t)),totalDocs:r,page:s,limit:n,totalPages:Math.ceil(r/n)}}if(this.dialect==="sqlite"){let G=this.sqliteGet(`SELECT COUNT(*) as cnt FROM ${this.mediaTable} ${x}`,h)?.cnt??0;return {docs:(await this.sqliteRun(`SELECT * FROM ${this.mediaTable} ${x} ORDER BY ${_} ${E} LIMIT ? OFFSET ?`,[...h,n,R])).map(K=>this.rowToMedia(K,t)),totalDocs:G,page:s,limit:n,totalPages:Math.ceil(G/n)}}let{media:q}=await import('./media-OUBQTIQP.cjs'),{like:W,or:V,and:ne,asc:$,desc:pe,eq:Z,sql:k}=await import('drizzle-orm'),Q=[];c&&Q.push(V(W(q.title,`%${c}%`),W(q.filename,`%${c}%`),W(q.originalName,`%${c}%`),W(q.alt,`%${c}%`))),l&&l!=="all"&&Q.push(W(q.mimeType,`${l}/%`)),u&&Q.push(V(Z(q.folder,u),W(q.folder,`${u}/%`)));let Ee=Q.length>0?ne(...Q):void 0,me=q[{created_at:"createdAt",updated_at:"updatedAt",title:"title",filename:"filename",file_size:"fileSize",mime_type:"mimeType",original_name:"originalName"}[_]||"createdAt"],vt=y==="asc"?$(me):pe(me),Se=await this.db.select().from(q).where(Ee).orderBy(vt).limit(n).offset(R),[{count:be}]=await this.db.select({count:k`count(*)`}).from(q).where(Ee),O=Number(be);return {docs:Se.map(X=>this.rowToMedia(X,t)),totalDocs:O,page:s,limit:n,totalPages:Math.ceil(O/n)}}async update(e,t,s){this.dialect==="postgres"&&(e=ke(e));let n=this.now();if(this.dialect==="mongodb")return await this.db.db.collection(this.mediaTable).updateOne({id:e},{$set:{...t,updatedAt:new Date}}),this.findById(e,s);if(this.dialect==="sqlite"){let f=["updated_at = ?"],y=[n];t.title!==void 0&&(f.push("title = ?"),y.push(t.title)),t.alt!==void 0&&(f.push("alt = ?"),y.push(t.alt)),t.caption!==void 0&&(f.push("caption = ?"),y.push(t.caption)),t.folder!==void 0&&(f.push("folder = ?"),y.push(t.folder)),t.metadata!==void 0&&(f.push("metadata = ?"),y.push(t.metadata===null?null:JSON.stringify(t.metadata))),t.originalName!==void 0&&(f.push("original_name = ?"),y.push(t.originalName)),y.push(e),await this.sqliteRun(`UPDATE ${this.mediaTable} SET ${f.join(", ")} WHERE id = ?`,y);let x=this.sqliteGet(`SELECT * FROM ${this.mediaTable} WHERE id = ?`,[e]);return x?this.rowToMedia(x,s):null}let{media:c}=await import('./media-OUBQTIQP.cjs'),{eq:l}=await import('drizzle-orm'),[u]=await this.db.update(c).set({...t,updatedAt:new Date}).where(l(c.id,e)).returning();return u?this.rowToMedia(u,s):null}async updateMany(e,t){this.dialect==="postgres"&&(e=e.map(ke));let s=this.now();if(this.dialect==="mongodb"){for(let n of e)await this.db.db.collection(this.mediaTable).updateOne({id:n},{$set:{...t,updatedAt:new Date}});return}if(this.dialect==="sqlite")for(let n of e){let c=["updated_at = ?"],l=[s];t.folder!==void 0&&(c.push("folder = ?"),l.push(t.folder||null)),l.push(n),await this.sqliteRun(`UPDATE ${this.mediaTable} SET ${c.join(", ")} WHERE id = ?`,l);}else {let{media:n}=await import('./media-OUBQTIQP.cjs'),{eq:c}=await import('drizzle-orm');for(let l of e)await this.db.update(n).set({...t,updatedAt:new Date}).where(c(n.id,l));}}async listFolders(){if(this.dialect==="mongodb"){let f=await this.db.db.collection(this.foldersTable).find({},{projection:{path:1}}).toArray(),y=await this.db.db.collection(this.mediaTable).distinct("folder"),x=new Set([...f.map(h=>h.path),...y]);return Array.from(x).filter(h=>h&&h!=="").sort()}if(this.dialect==="sqlite")return (await this.sqliteRun(`SELECT path FROM ${this.foldersTable} UNION
+         SELECT folder as path FROM ${this.mediaTable} WHERE folder IS NOT NULL AND folder != ''`)).map(y=>y.path).filter(y=>y&&y!=="").sort();let{media:e,mediaFolders:t}=await import('./media-OUBQTIQP.cjs'),{eq:s,sql:n}=await import('drizzle-orm'),c=await this.db.select({folder:e.folder}).from(e).groupBy(e.folder),l=await this.db.select({path:t.path}).from(t),u=new Set([...c.map(f=>f.folder),...l.map(f=>f.path)]);return Array.from(u).filter(f=>f&&f!=="").sort()}async createFolder(e,t=""){let s=t?`${t}/${e}`:e;await this.storage.createFolder?.(s);let n=this.now();if(this.dialect==="mongodb"){await this.db.db.collection(this.foldersTable).findOne({path:s})||await this.db.db.collection(this.foldersTable).insertOne({_id:this.genId(),name:e,path:s,parentPath:t||null,createdAt:new Date});return}if(this.dialect==="sqlite")await this.sqliteRun(`INSERT OR IGNORE INTO ${this.foldersTable} (path, name, parent_path, created_at) VALUES (?, ?, ?, ?)`,[s,e,t||null,n]);else {let{mediaFolders:c}=await import('./media-OUBQTIQP.cjs');await this.db.insert(c).values({path:s,name:e,parentPath:t||null,createdAt:new Date}).onConflictDoNothing();}}async deleteFolder(e){let t=await this.find({folder:e,limit:1e4});for(let s of t.docs)await this.delete(s.id);if(await this.storage.deleteFolder?.(e),this.dialect==="mongodb"){await this.db.db.collection(this.foldersTable).deleteMany({$or:[{path:e},{path:{$regex:`^${e}/`}}]});return}if(this.dialect==="sqlite")await this.sqliteRun(`DELETE FROM ${this.foldersTable} WHERE path = ? OR path LIKE ?`,[e,`${e}/%`]);else {let{mediaFolders:s}=await import('./media-OUBQTIQP.cjs'),{like:n,or:c,eq:l}=await import('drizzle-orm');await this.db.delete(s).where(c(l(s.path,e),n(s.path,`${e}/%`)));}}};function Ve(d){return d.map(e=>`${e.path.join(".")}: ${e.message}`).join(", ")}function ye(d,e){if(!(!d||typeof d!="object"))for(let t of e){if(t.type==="tabs"&&Array.isArray(t.tabs)){let n=t.name?d[t.name]:d;if(n&&typeof n=="object")for(let c of t.tabs)Array.isArray(c.fields)&&ye(n,c.fields);continue}if(!t.name||!(t.name in d))continue;if(d[t.name]===""&&(t.type==="text"||t.type==="textarea"||t.type==="code"||t.type==="markdown"||(d[t.name]=null)),(t.type==="group"||t.type==="collapsible")&&t.name&&Array.isArray(t.fields)&&d[t.name]&&typeof d[t.name]=="object")ye(d[t.name],t.fields);else if(t.type==="array"&&t.name&&Array.isArray(t.fields)&&Array.isArray(d[t.name]))for(let n of d[t.name])n&&typeof n=="object"&&ye(n,t.fields);else if(t.type==="blocks"&&t.name&&Array.isArray(t.blocks)&&Array.isArray(d[t.name]))for(let n of d[t.name]){if(!n||typeof n!="object")continue;let c=n.type||n.blockType;if(!c)continue;let l=t.blocks.find(f=>f.slug===c);if(!l||!Array.isArray(l.fields))continue;let u=n.data&&typeof n.data=="object"?n.data:n;ye(u,l.fields);}}}function we(d,e){if(!(!e||typeof e!="object"))for(let t of d){if(t.type==="tabs"&&Array.isArray(t.tabs)){let s=t.name?e[t.name]:e;if(s&&typeof s=="object")for(let n of t.tabs)Array.isArray(n.fields)&&we(n.fields,s);}if(t.type==="richtext"&&t.name){let s=e[t.name];typeof s=="string"?e[t.name]=[{type:"paragraph",children:[{text:s}]}]:s&&typeof s=="object"&&!Array.isArray(s)&&s.type==="doc"&&Array.isArray(s.content)&&(e[t.name]=s.content);}if((t.type==="group"||t.type==="collapsible")&&t.name&&Array.isArray(t.fields)&&e[t.name]&&typeof e[t.name]=="object")we(t.fields,e[t.name]);else if(t.type==="array"&&t.name&&Array.isArray(t.fields)&&Array.isArray(e[t.name]))for(let s of e[t.name])s&&typeof s=="object"&&we(t.fields,s);else if(t.type==="blocks"&&t.name&&Array.isArray(t.blocks)&&Array.isArray(e[t.name]))for(let s of e[t.name]){if(!s||typeof s!="object")continue;let n=s.type||s.blockType;if(!n)continue;let c=t.blocks.find(u=>u.slug===n);if(!c||!Array.isArray(c.fields))continue;let l=s.data&&typeof s.data=="object"?s.data:s;we(c.fields,l);}}}function Ue(d,e){if(!(!e||typeof e!="object")){for(let t of d)if(!(!t.name||!(t.name in e))){if(t.unique&&(t.type==="text"||t.type==="email"?e[t.name]=`${e[t.name]||t.name}-copy-${Date.now().toString(36)}`:delete e[t.name]),t.type==="tabs"&&t.name&&Array.isArray(t.tabs)&&e[t.name]&&typeof e[t.name]=="object")for(let s of t.tabs)Array.isArray(s.fields)&&Ue(s.fields,e[t.name]);else if((t.type==="group"||t.type==="collapsible")&&t.name&&Array.isArray(t.fields)&&e[t.name]&&typeof e[t.name]=="object")Ue(t.fields,e[t.name]);else if(t.type==="array"&&t.name&&Array.isArray(t.fields)&&Array.isArray(e[t.name]))for(let s of e[t.name])s&&typeof s=="object"&&(delete s.id,Ue(t.fields,s));else if(t.type==="blocks"&&t.name&&Array.isArray(t.blocks)&&Array.isArray(e[t.name]))for(let s of e[t.name]){if(!s||typeof s!="object")continue;delete s.id;let n=s.type||s.blockType;if(!n)continue;let c=t.blocks.find(u=>u.slug===n);if(!c||!Array.isArray(c.fields))continue;let l=s.data&&typeof s.data=="object"?s.data:s;Ue(c.fields,l);}}}}var Vr={_media:{create:chunkILEZ3NYX_cjs.d.MEDIA_UPLOAD,update:chunkILEZ3NYX_cjs.d.MEDIA_UPLOAD,delete:chunkILEZ3NYX_cjs.d.MEDIA_DELETE}};function Pe(d,e){let t=Vr[d];return t?t[e]:`collection.${e}`}function Xr(d){let e=d.headers.get("x-forwarded-for");return e?e.split(",")[0].trim():d.headers.get("x-real-ip")||"unknown"}function Xe(d,e,t,s,n){e?.apiKeyId&&d&&d.createAuditLog({action:"api_request",userId:e.userId||"",resource:"api_key",resourceId:e.apiKeyId,success:true,metadata:{endpoint:t,method:s,ip:Xr(n)}});}function Ge(d){return d.baseUpdatedAt??d._baseUpdatedAt}function At(d){let{baseUpdatedAt:e,_baseUpdatedAt:t,...s}=d;return s}function xt(d,e){return {error:"Document has changed since you started editing",code:"REVISION_CONFLICT",conflict:{expectedUpdatedAt:d??null,actualUpdatedAt:e.updatedAt??null,current:e}}}async function N(d,e,t,s,n,c,l=true,u="none"){return await chunkILEZ3NYX_cjs.b(d,e,{user:s,req:t,tenantId:n,apiKey:c},{enablePublicAccess:l,defaultAccess:u})}async function J(d,e,t,s,n,c=true){return await chunkILEZ3NYX_cjs.c(d,e,{user:s,req:t,tenantId:n},{enablePublicAccess:c})}async function U(d,e,t,s){if(t)return {user:t,tenantId:s,apiKeyContext:void 0,authType:"static"};if(e){let n=await e(d);if(n.status===200&&n.user)return {user:n.user,tenantId:n.tenantContext?.tenantId,apiKeyContext:n.apiKeyContext,authType:n.authType}}return {user:void 0,tenantId:void 0,apiKeyContext:void 0,authType:void 0}}function Gr(d,e){if("dialect"in d&&d.dialect==="postgres"&&d instanceof chunkWG3UQEV7_cjs.c)return new chunkGYQMNXXW_cjs.a({db:d.client});if("dialect"in d&&d.dialect==="mongodb"){let s=d;return new chunkBVG6VSAJ_cjs.a({db:()=>s.db})}let t=ze.resolve(e,"data","kyro.db");return new chunkHOP4D5XZ_cjs.a({path:process.env.KYRO_AUTH_DB_PATH||t})}function lr(d){let{registry:e,db:t,authSecret:s,authAdapter:n,checkSession:c,user:l,tenantId:u,cors:f,webhookService:y,settings:x}=d,h=new hono.Hono;function E(r){if(Array.isArray(r))return r.map(E);if(r!==null&&typeof r=="object"){let o={};for(let m in r)m!=="attrs"&&(o[m]=E(r[m]));return o}return r}h.use("*",async(r,o)=>{await o();let m=r.req.header("referer")||"";if(!(r.req.header("x-kyro-admin")==="true"||m.includes("/admin"))){let i=r.res.headers.get("Content-Type");if(i&&i.includes("application/json"))try{let p=await r.res.clone().json(),A=E(p);r.res=r.json(A,r.res.status);}catch{}}});for(let r of e.getPlugins())typeof r.serverMiddleware=="function"&&r.serverMiddleware(h);let _=x?.access?.apiAccess,R=x?.access?.enablePublicAccess??false,q=x?.access?.defaultCollectionAccess??"none";_?.requireAuth;let V=process.cwd(),ne=V.endsWith("admin")?ze.resolve(V,".."):V,$=n||Gr(t,ne),k=zt({db:t,userLookup:async r=>await $.findUserById(r)||null}),Q=_?.cors?.allowedOrigins,Ee=f?.origins,Ye=Array.isArray(Q)?Q:typeof Q=="string"&&Q?Q.split(`
+`).map(r=>r.trim()).filter(Boolean):[],me=Ye.length>0?Ye:Ee||[];(me.length>0||f)&&h.use("*",async(r,o)=>{let m=r.req.header("Origin")||"*";if(me.length>0&&!me.includes(m))return r.json({error:"Origin not allowed"},403);let b=me.length>0?m:"*";if(r.header("Access-Control-Allow-Origin",b),r.header("Access-Control-Allow-Methods","GET, POST, PATCH, DELETE, OPTIONS"),r.header("Access-Control-Allow-Headers","Content-Type, Authorization, X-API-Key"),f?.credentials&&r.header("Access-Control-Allow-Credentials","true"),r.req.method==="OPTIONS")return r.text("");await o();});let Se=x?.access?.rateLimiting,be;if(Se?.enabled){let r=Se.maxRequests||100,o=Se.windowMs||6e4;be=new Oe({"api:general":{window:o,max:r}}),h.use("/api/*",async(m,b)=>{if(!be)return b();let i=m.req.header("CF-Connecting-IP")||m.req.header("X-Forwarded-For")?.split(",")[0]?.trim()||m.req.header("X-Real-IP")||"unknown",a=await be.check("api:general",i);if(m.header("X-RateLimit-Limit",String(r)),m.header("X-RateLimit-Remaining",String(a.remaining)),m.header("X-RateLimit-Reset",String(a.resetAt)),!a.allowed)return m.json({error:"Too many requests",retryAfter:a.retryAfter},429);await b();});}let O=new Me({redis:$,jwtSecret:s||"change-me",baseUrl:process.env.KYRO_BASE_URL||"http://localhost:4321",rateLimiter:be});chunk5K4YG5DA_cjs.k.fromConfig(t).then(r=>{r&&(O.email=r);}).catch(r=>{console.error("[Email] Failed to initialize transport from config:",r);}),h.post("/api/auth/login",async r=>O.login(r.req.raw)),h.post("/api/auth/register",async r=>{try{let o=await t.findOne({collection:"_globals_system",where:{}});if(o&&o.enableRegistration===!1)return r.json({error:"User registration is currently disabled by administrator."},403);if(o?.defaultRegistrationRole){let m=r.req.raw;if((m.headers.get("content-type")||"").includes("application/json")){let i=await r.req.json();i.role||(i.role=o.defaultRegistrationRole);let a=new Request(m.url,{method:m.method,headers:m.headers,body:JSON.stringify(i)});return O.register(a)}}}catch{}return O.register(r.req.raw)}),h.post("/api/auth/logout",async r=>O.logout(r.req.raw)),h.post("/api/auth/refresh",async r=>O.refresh(r.req.raw)),h.get("/api/auth/me",async r=>O.me(r.req.raw)),h.post("/api/auth/forgot-password",async r=>O.forgotPassword(r.req.raw)),h.post("/api/auth/reset-password",async r=>O.resetPassword(r.req.raw)),h.post("/api/auth/change-password",async r=>O.changePassword(r.req.raw)),h.get("/api/auth/verify-email",async r=>O.verifyEmail(r.req.raw)),h.post("/api/auth/verify-email",async r=>O.verifyEmail(r.req.raw)),h.get("/api/auth/verify",async r=>O.verifyEmail(r.req.raw)),h.post("/api/auth/verify",async r=>O.verifyEmail(r.req.raw)),h.get("/api/auth/sessions",async r=>O.listSessions(r.req.raw)),h.post("/api/auth/sessions/refresh",async r=>O.refreshSession(r.req.raw)),h.delete("/api/auth/sessions",async r=>O.revokeOtherSessions(r.req.raw)),h.delete("/api/auth/sessions/:id",async r=>O.revokeSession(r.req.raw,r.req.param("id"))),h.put("/api/auth/sessions/:id/name",async r=>O.renameSession(r.req.raw,r.req.param("id"))),h.get("/api/auth/access",async r=>{try{let{user:o,tenantId:m}=await U(r.req.raw,k,l,u);if(!o)return r.json({error:"Not authenticated"},401);let b={},i={};for(let a of e.getCollections()){let p={read:(await N(a,"read",r.req.raw,o,m,void 0,R,q)).allowed,create:(await N(a,"create",r.req.raw,o,m,void 0,R,q)).allowed,update:(await N(a,"update",r.req.raw,o,m,void 0,R,q)).allowed,delete:(await N(a,"delete",r.req.raw,o,m,void 0,R,q)).allowed};b[a.slug]=p;}for(let a of e.getGlobals()){let p={read:(await J(a,"read",r.req.raw,o,m,R)).allowed,update:(await J(a,"update",r.req.raw,o,m,R)).allowed};i[a.slug]=p;}return r.json({collections:b,globals:i})}catch(o){return r.json({error:o.message},500)}});let X=typeof e.hasCollection=="function"&&e.hasCollection("users")?e.getCollection("users"):(()=>{try{return e.getCollection("users")}catch{return chunkGO34AOBZ_cjs.a}})();h.get("/api/users",async r=>{try{let{user:o,tenantId:m}=await U(r.req.raw,k,l,u),b=await N(X,"read",r.req.raw,o,m,void 0,R,q);if(!b.allowed)return r.json({error:b.error},b.status||403);let i=parseInt(r.req.query("page")||"1"),a=Math.min(parseInt(r.req.query("limit")||"10"),100),p=r.req.query("search")||void 0,A=[],g=0;if(typeof $.findUsers=="function"){let w=await $.findUsers({page:i,limit:a,search:p});A=w.users||[],g=w.total||0;}else {let w=await t.find({collection:"users",page:i,limit:a,where:p?{email:{contains:p}}:{},tenantId:m});A=w.docs||[],g=w.totalDocs||0;}return r.json({docs:A,totalDocs:g,limit:a,totalPages:Math.ceil(g/a)||1,page:i,pagingCounter:(i-1)*a+1,hasPrevPage:i>1,hasNextPage:i<Math.ceil(g/a),prevPage:i>1?i-1:null,nextPage:i<Math.ceil(g/a)?i+1:null})}catch(o){return console.error("[API] Error listing users:",o),r.json({error:o.message},500)}}),h.get("/api/users/:id",async r=>{try{let{user:o,tenantId:m}=await U(r.req.raw,k,l,u),b=r.req.param("id"),i=await $.findUserById(b);return i?r.json({data:i}):r.json({error:"User not found"},404)}catch(o){return r.json({error:o.message},500)}}),h.post("/api/users",async r=>{try{let{user:o,tenantId:m}=await U(r.req.raw,k,l,u),b=await N(X,"create",r.req.raw,o,m,void 0,R,q);if(!b.allowed)return r.json({error:b.error},b.status||403);let i=await r.req.json();if(!i.email||!i.password)return r.json({error:"Email and password are required"},400);if(await $.findUserByEmail(i.email))return r.json({error:"Email already in use"},400);let p=i.role||"customer";if(p!=="customer"&&o?.role!=="super_admin")return r.json({error:"Forbidden: Only super_admin can assign administrative roles"},403);let A=await $.createUser({email:i.email,password:i.password,name:i.name,role:p,avatar:i.avatar,tenantId:i.tenantId});return o&&$?.createAuditLog({action:"user_create",userId:o.id,resource:"users",resourceId:A.id,success:!0}),r.json({data:A,message:"User created successfully"},201)}catch(o){return r.json({error:o.message},500)}}),h.patch("/api/users/:id",async r=>{try{let{user:o,tenantId:m}=await U(r.req.raw,k,l,u),b=await N(X,"update",r.req.raw,o,m,void 0,R,q);if(!b.allowed)return r.json({error:b.error},b.status||403);let i=r.req.param("id"),a=await r.req.json(),p=await $.findUserById(i);if(!p)return r.json({error:"User not found"},404);let A={};if(a.name!==void 0&&(A.name=a.name),a.email!==void 0&&(A.email=a.email),a.role!==void 0&&a.role!==p.role){if(o?.role!=="super_admin")return r.json({error:"Forbidden: Only super_admin can modify user roles"},403);A.role=a.role;}a.avatar!==void 0&&(A.avatar=typeof a.avatar=="object"&&a.avatar!==null?a.avatar.id||String(a.avatar):a.avatar),a.tenantId!==void 0&&(A.tenantId=a.tenantId),a.emailVerified!==void 0&&(A.emailVerified=a.emailVerified),a.locked!==void 0&&(A.locked=a.locked),a.failedLoginAttempts!==void 0&&(A.failedLoginAttempts=a.failedLoginAttempts),a.lastLogin!==void 0&&(A.lastLogin=a.lastLogin);let g=await $.updateUser(i,A);return g?(o&&($?.createAuditLog({action:"user_update",userId:o.id,resource:"users",resourceId:i,success:!0}),a.role&&p.role!==a.role&&$?.createAuditLog({action:"role_change",userId:o.id,resource:"users",resourceId:i,success:!0,metadata:{oldRole:p.role,newRole:a.role}})),r.json({data:g,message:"User updated successfully"})):r.json({error:"User update failed"},500)}catch(o){return r.json({error:o.message},500)}}),h.delete("/api/users/:id",async r=>{try{let{user:o,tenantId:m}=await U(r.req.raw,k,l,u),b=await N(X,"delete",r.req.raw,o,m,void 0,R,q);if(!b.allowed)return r.json({error:b.error},b.status||403);let i=r.req.param("id");if(o&&o.id===i)return r.json({error:"You cannot delete your own account"},403);let a=await $.findUserById(i);return a?await $.deleteUser(i)?(o&&$?.createAuditLog({action:"user_delete",userId:o.id,resource:"users",resourceId:i,success:!0}),r.json({data:a,message:"User deleted successfully"})):r.json({error:"User deletion failed"},500):r.json({error:"User not found"},404)}catch(o){return r.json({error:o.message},500)}}),h.get("/api/auth/audit-logs",async r=>{try{let{user:o,tenantId:m}=await U(r.req.raw,k,l,u),b=e.getCollection("audit_logs");if(b){let I=await N(b,"read",r.req.raw,o,m,void 0,R,q);if(!I.allowed)return r.json({error:I.error},I.status||403)}else if(!o)return r.json({error:"Authentication required"},401);let i=parseInt(r.req.query("page")||"1"),a=Math.min(parseInt(r.req.query("limit")||"50"),100),p=r.req.query("action")||void 0,A=r.req.query("userId")||void 0,g=r.req.query("resource")||void 0,w=await $.findAuditLogs({action:p,userId:A,resource:g,limit:a,offset:(i-1)*a});return r.json({docs:w.logs,totalDocs:w.total,limit:a,totalPages:Math.ceil(w.total/a),page:i,pagingCounter:(i-1)*a+1,hasPrevPage:i>1,hasNextPage:i<Math.ceil(w.total/a),prevPage:i>1?i-1:null,nextPage:i<Math.ceil(w.total/a)?i+1:null})}catch(o){return console.error("[API] Error listing audit logs:",o),r.json({error:o.message},500)}});let G=null,ae=null,K=async()=>{if(ae)throw ae;if(!G)try{let r="sqlite";"dialect"in t&&t.dialect==="postgres"&&t instanceof chunkWG3UQEV7_cjs.c?r=t.dialect:"dialect"in t&&t.dialect==="mongodb"&&(r="mongodb");let o=r==="postgres"&&t instanceof chunkWG3UQEV7_cjs.c?t.client:t;G=await We.init(o,{dialect:r});}catch(r){throw console.error("[getMedia] Init error:",r),ae=r,r}return G};h.get("/api/media",async r=>{try{let{user:o}=await U(r.req.raw,k,l,u);if(!o)return r.json({error:"Authentication required"},401);let m=await K(),b=new URL(r.req.url).origin,i=parseInt(r.req.query("page")||"1"),a=parseInt(r.req.query("limit")||"30"),p=r.req.query("search")||"",A=r.req.query("type")||"",g=r.req.query("folder")||"",w=await m.find({page:i,limit:a,search:p,type:A,folder:g},b);return r.json(w)}catch(o){return console.error("[Media] find error:",o),r.json({error:o.message},500)}}),h.post("/api/media/upload",async r=>{try{let{user:o}=await U(r.req.raw,k,l,u);if(!o)return r.json({error:"Authentication required"},401);let m=await K(),b=r.req.header("content-type")||"",i=new URL(r.req.url).origin;if(b.includes("multipart/form-data")){let w=await r.req.formData(),I=w.get("file"),v=w.get("folder")||"";if(!I)return r.json({error:"No file uploaded"},400);let T=await m.upload(I,v,i);return r.json(T)}let a=await r.req.json(),{url:p}=a,A=a.folder||"";if(!p)return r.json({error:"No URL provided"},400);let g=await m.uploadFromUrl(p,A,i);return r.json(g)}catch(o){return console.error("[Media] upload error:",o),r.json({error:o.message},500)}}),h.get("/api/media/folders",async r=>{try{let{user:o}=await U(r.req.raw,k,l,u);if(!o)return r.json({error:"Authentication required"},401);let b=await(await K()).listFolders();return r.json(b)}catch(o){return console.error("[Media] folders error:",o),r.json({error:o.message},500)}}),h.post("/api/media/folders",async r=>{try{let{user:o}=await U(r.req.raw,k,l,u);if(!o)return r.json({error:"Authentication required"},401);let m=await K(),b=await r.req.json(),{name:i,parentPath:a}=b;return i?(await m.createFolder(i,a||""),r.json({message:"Folder created",path:a?`${a}/${i}`:i})):r.json({error:"Folder name is required"},400)}catch(o){return console.error("[Media] create folder error:",o),r.json({error:o.message},500)}}),h.delete("/api/media/folders",async r=>{try{let{user:o}=await U(r.req.raw,k,l,u);if(!o)return r.json({error:"Authentication required"},401);let m=await K(),b=r.req.query("path");return b?(await m.deleteFolder(b),r.json({message:"Folder deleted"})):r.json({error:"Path is required"},400)}catch(o){return console.error("[Media] delete folder error:",o),r.json({error:o.message},500)}}),h.delete("/api/media/:id",async r=>{try{let{user:o}=await U(r.req.raw,k,l,u);if(!o)return r.json({error:"Authentication required"},401);let m=await K(),b=r.req.param("id"),i=new URL(r.req.url).origin;return await m.delete(b,i),r.json({success:!0})}catch(o){return console.error("[Media] delete error:",o),r.json({error:o.message},500)}}),h.get("/api/media/resize",async r=>{try{let{user:o}=await U(r.req.raw,k,l,u);if(!o)return r.json({error:"Authentication required"},401);let m=r.req.query("url"),b=parseInt(r.req.query("w")||"0"),i=parseInt(r.req.query("h")||"0"),a=r.req.query("fit")||"cover",p=parseFloat(r.req.query("cx")||"0"),A=parseFloat(r.req.query("cy")||"0"),g=parseFloat(r.req.query("cw")||"0"),w=parseFloat(r.req.query("ch")||"0");if(!m)return r.json({error:"URL is required"},400);let v=(await K()).storage;if(v.name!=="local")return r.redirect(m);let T=v.config?.uploadDir||ze.join(process.cwd(),"public","uploads"),S=v.config?.baseUrl||"/uploads";if(!m.startsWith(S))return r.redirect(m);let P=m.replace(S,""),D=ze.join(T,P);if(!fs.existsSync(D))return r.json({error:"File not found"},404);let C=fs.readFileSync(D),{default:j}=await import('sharp'),L=j(C);if(g>0&&w>0){let M=await j(C).metadata(),oe=M.width||0,z=M.height||0;if(oe>0&&z>0){let H=Math.max(0,Math.min(Math.round(p/100*oe),oe-1)),Ae=Math.max(0,Math.min(Math.round(A/100*z),z-1)),dr=Math.max(1,Math.min(Math.round(g/100*oe),oe-H)),cr=Math.max(1,Math.min(Math.round(w/100*z),z-Ae));L=L.extract({left:H,top:Ae,width:dr,height:cr});}}(b>0||i>0)&&(L=L.resize({width:b>0?b:void 0,height:i>0?i:void 0,fit:a}));let F=await L.toBuffer(),Y=await j(C).metadata();return r.header("Content-Type",`image/${Y.format||"webp"}`),r.header("Cache-Control","public, max-age=31536000, immutable"),r.body(F)}catch(o){return console.error("[Media] resize error:",o),r.json({error:o.message},500)}}),h.get("/api/media/:id",async r=>{try{let{user:o}=await U(r.req.raw,k,l,u);if(!o)return r.json({error:"Authentication required"},401);let m=await K(),b=r.req.param("id"),i=new URL(r.req.url).origin,a=await m.findById(b,i);return a?r.json(a):r.json({error:"Media not found"},404)}catch(o){return console.error("[Media] get error:",o),r.json({error:o.message},500)}}),h.patch("/api/media/:id",async r=>{try{let{user:o}=await U(r.req.raw,k,l,u);if(!o)return r.json({error:"Authentication required"},401);let m=await K(),b=r.req.param("id"),i=await r.req.json(),a=new URL(r.req.url).origin,p=["folder","metadata","title","alt","caption","originalName"],A={};for(let g of p)i[g]!==void 0&&(A[g]=i[g]);if(Object.keys(A).length>0){let g=await m.update(b,A,a);return r.json({doc:g})}return r.json({error:"No valid fields to update"},400)}catch(o){return console.error("[Media] update error:",o),r.json({error:o.message},500)}}),h.get("/api/media/test",async r=>{try{let{user:o}=await U(r.req.raw,k,l,u);if(!o)return r.json({error:"Authentication required"},401);let m=await K();return r.json({status:m?"initialized":"failed",serviceType:m?.constructor?.name})}catch(o){return console.error("[test] Error:",o),r.json({error:o.message,type:o.constructor?.name,stack:o.stack},500)}}),h.get("/api/storage-status",async r=>{try{let{user:o}=await U(r.req.raw,k,l,u);if(!o)return r.json({error:"Authentication required"},401);let m=!1,b="local";if(t)try{let i=t.prepare('SELECT provider FROM "_globals_storage-settings" LIMIT 1').get();i&&i.provider&&(m=!0,b=i.provider==="aws"?"s3":i.provider);}catch{try{let i=await t.findOne({collection:"_globals_storage-settings",where:{},draft:!0});i&&i.provider&&(m=!0,b=i.provider==="aws"?"s3":i.provider);}catch{}}return r.json({provider:b,configured:m,usage:0,limit:"unlimited"})}catch(o){return console.error("[Storage] status error:",o),r.json({error:o.message},500)}}),h.get("/api/plugins",async r=>{try{let{user:o}=await U(r.req.raw,k,l,u);if(!o)return r.json({error:"Authentication required"},401);let m=e.getPlugins(),b=e.storageProviders,i=await Promise.all(m.map(async a=>{let p=!0,A=a.name,g={};try{let v=await t.findOne({collection:"_globals_plugin-settings",where:{},draft:!0});v&&v.states&&(g=v.states);}catch{}g[A]!==void 0&&(p=g[A]),b.setPluginEnabled(A,p);let w=A.replace(/^@[^/]+\//,"");w=w.replace(/^(plugin|kyro)-/,"");let I={ai:"AI",seo:"SEO",s3:"S3",aws:"AWS",api:"API",ui:"UI",ftp:"FTP"};if(w=w.split("-").map(v=>{let T=v.toLowerCase();return I[T]?I[T]:v.charAt(0).toUpperCase()+v.slice(1)}).join(" "),w.toLowerCase().startsWith("storage ")){let v=w.split(" ");v.length===2&&(w=`${v[1]} Storage`);}return {id:A,name:a.displayName||w,version:a.version||"1.0.0",description:a.description||"",enabled:p,status:p?"active":"disabled"}}));return r.json(i)}catch(o){return console.error("[Plugins] list error:",o),r.json({error:o.message},500)}}),h.put("/api/plugins/:name/toggle",async r=>{try{let{user:o}=await U(r.req.raw,k,l,u);if(!o)return r.json({error:"Authentication required"},401);let m=r.req.param("name"),b=e.storageProviders,a=!b.isPluginEnabled(m),p=[];if(!a)for(let g of b.getAll())g.pluginName===m&&p.push(g.type);if(!(r.req.query("force")==="1")&&!a&&p.length>0){let g="local";try{let w=t?.prepare?.('SELECT provider FROM "_globals_storage-settings" LIMIT 1')?.get();w?.provider&&(g=w.provider);}catch{try{let w=await t?.findOne?.({collection:"_globals_storage-settings",where:{},draft:!0});w?.provider&&(g=w.provider);}catch{}}if(p.includes(g))return r.json({error:`Cannot disable "${m}" \u2014 storage provider "${g}" is currently active. Switch to Local storage first.`,requiresAction:!0,activeProvider:g},409)}try{let g={},w="global",I=await t.findOne({collection:"_globals_plugin-settings",where:{},draft:!0});I&&(g=I.states||{},w=I.id),g[m]=a,I?await t.update({collection:"_globals_plugin-settings",id:w,data:{states:g}}):await t.create({collection:"_globals_plugin-settings",data:{states:g,id:"global"}});}catch(g){console.warn(`[Plugins] Could not persist state for "${m}":`,g);}return b.setPluginEnabled(m,a),r.json({name:m,enabled:a})}catch(o){return console.error("[Plugins] toggle error:",o),r.json({error:o.message},500)}}),h.get("/api/health",r=>r.json({status:"ok",version:"0.11.0",collections:e.getCollectionSlugs(),timestamp:new Date().toISOString()})),h.get("/api/metrics",async r=>{try{let{user:o,tenantId:m}=await U(r.req.raw,k,l,u);if(!o)return r.json({error:"Authentication required"},401);let b=o.role==="admin"||o.role==="super_admin",a=e.getCollectionSlugs().filter(S=>!["users","audit_logs","media","_globals_access-settings","_globals_brand-settings"].includes(S)&&!S.startsWith("_globals_")).filter(S=>b||chunkQ3Q7BJVQ_cjs.a(o,`${S}:read`)),p=0,A={};await Promise.all(a.map(async S=>{try{let D=(await t.find({collection:S,where:{},limit:1,page:1,tenantId:m})).totalDocs??0;p+=D,A[S]=D;}catch{}}));let g=0;try{g=(await t.find({collection:"media",where:{},limit:1,page:1,tenantId:m})).totalDocs??0;}catch{}let w=0;try{w=(await t.find({collection:"users",where:{},limit:1,page:1,tenantId:m})).totalDocs??0;}catch{}let I=0;try{if(y){let S=await y.getWebhooks();I=Array.isArray(S)?S.length:0;}}catch{}let v=0;try{v=(await t.find({collection:chunkNY47CFVP_cjs.d,where:{},limit:1,page:1,tenantId:m})).totalDocs??0;}catch{}let T=p+g+w;return r.json({totalDocuments:p,totalMedia:b||chunkQ3Q7BJVQ_cjs.a(o,"media:read")?g:void 0,totalUsers:b||chunkQ3Q7BJVQ_cjs.a(o,"users:read")?w:void 0,totalWebhooks:b?I:void 0,totalApiKeys:b?v:void 0,totalStoredRecords:T,collectionCounts:A,collections:a.length,timestamp:new Date().toISOString()})}catch(o){return console.error("[API] Metrics error:",o),r.json({error:o.message},500)}}),h.get("/api/analytics",async r=>{try{let{user:o,tenantId:m}=await U(r.req.raw,k,l,u);if(!o)return r.json({error:"Authentication required"},401);if(!(o.role==="admin"||o.role==="super_admin"))return r.json({error:"Unauthorized"},403);let a=(await t.find({collection:"orders",where:{},limit:1e3,page:1,tenantId:m})).docs||[],p=await t.findOne({collection:"_globals_store-settings",where:{},tenantId:m}),A=p?.currency?.code||p?.currency||"USD",g={},w={},I={};a.forEach(S=>{let P=S.createdAt||S.updatedAt,D=P?new Date(P).toISOString().split("T")[0]:new Date().toISOString().split("T")[0];g[D]||(g[D]=0),w[D]||(w[D]=0);let C=typeof S.total=="number"?S.total:parseFloat(String(S.total||0));g[D]+=isNaN(C)?0:C,w[D]+=1;let j=S.orderStatus||S.status||"pending";I[j]=(I[j]||0)+1;});let v=Object.keys(g).sort().map(S=>({date:S,revenue:Math.round(g[S]*100)/100,orders:w[S]})),T=Math.round(v.reduce((S,P)=>S+P.revenue,0)*100)/100;return r.json({chartData:v,totalRevenue:T,totalOrders:a.length,ordersByStatus:I,currencyCode:typeof A=="string"?A:"USD"})}catch(o){return r.json({error:o.message},500)}}),h.get("/api/kyro/schema",async r=>{let{user:o}=await U(r.req.raw,k,l,u);if(!o)return r.json({error:"Authentication required"},401);let m=i=>i.map(a=>{let p={name:a.name,type:a.type,label:a.label,required:a.required??false,unique:a.unique??false,indexed:a.indexed??false,defaultValue:a.defaultValue,admin:a.admin?{...a.admin}:void 0};return a.minLength!==void 0&&(p.minLength=a.minLength),a.maxLength!==void 0&&(p.maxLength=a.maxLength),a.pattern!==void 0&&(p.pattern=a.pattern),a.variant!==void 0&&(p.variant=a.variant),a.hasMany!==void 0&&(p.hasMany=a.hasMany),a.min!==void 0&&(p.min=a.min),a.max!==void 0&&(p.max=a.max),a.step!==void 0&&(p.step=a.step),a.integer!==void 0&&(p.integer=a.integer),a.options&&(p.options=a.options),a.relationTo&&(p.relationTo=a.relationTo),a.maxDepth!==void 0&&(p.maxDepth=a.maxDepth),a.minRows!==void 0&&(p.minRows=a.minRows),a.maxRows!==void 0&&(p.maxRows=a.maxRows),a.localized!==void 0&&(p.localized=a.localized),a.language&&(p.language=a.language),a.format&&(p.format=a.format),a.allowedTypes&&(p.allowedTypes=a.allowedTypes),a.maxSize&&(p.maxSize=a.maxSize),(a.type==="group"||a.type==="row"||a.type==="collapsible"&&a.fields)&&(p.fields=m(a.fields)),a.type==="array"&&a.fields&&(p.fields=m(a.fields)),a.type==="blocks"&&a.blocks&&(p.blocks=a.blocks.map(A=>({slug:A.slug,label:A.label,fields:m(A.fields)}))),a.type==="tabs"&&a.tabs&&(p.tabs=a.tabs.map(A=>({label:A.label,name:A.name,fields:m(A.fields)}))),p}),b={collections:{},globals:{}};for(let i of e.getCollections()){let a=i.slug;try{b.collections[a]={slug:a,label:i.label||a,fields:m(i.fields),jsonSchema:zodToJsonSchema.zodToJsonSchema(e.getZodSchema(a),{target:"openApi3"}),createSchema:zodToJsonSchema.zodToJsonSchema(e.getCreateZodSchema(a),{target:"openApi3"}),updateSchema:zodToJsonSchema.zodToJsonSchema(e.getUpdateZodSchema(a),{target:"openApi3"}),procedures:{find:{collection:a,where:"Record<string,any>",sort:"string",limit:"number",page:"number",depth:"number",select:"string[]",draft:"boolean"},findByID:{collection:a,id:"string",depth:"number",select:"string[]",draft:"boolean"},create:{collection:a,data:"Record<string,any>",depth:"number",select:"string[]"},update:{collection:a,id:"string",data:"Record<string,any>",depth:"number",select:"string[]",baseUpdatedAt:"string"},delete:{collection:a,id:"string"},count:{collection:a,where:"Record<string,any>"}}};}catch{}}for(let i of e.getGlobals()){let a=i.slug,p=i.fields;if(a==="storage-settings"){let A=e.storageProviders,g=A.getAll(),w=new Set(A.getAllAvailable(v=>A.isPluginEnabled(v)).map(v=>v.type));w.add("local");let I=new Set(g.map(v=>v.type));p=p.filter(v=>v.type==="group"&&v.name&&I.has(v.name)?w.has(v.name):true).map(v=>v.name==="provider"&&v.type==="select"?{...v,options:v.options.filter(T=>w.has(T.value))}:v);}try{b.globals[a]={slug:a,label:i.label||a,fields:m(p),jsonSchema:zodToJsonSchema.zodToJsonSchema(e.getZodSchema(a),{target:"openApi3"}),procedures:{get:{},update:{data:"Record<string,any>"}}};}catch{}}return r.json(b)}),h.get("/api/collections",async r=>{let{user:o}=await U(r.req.raw,k,l,u);if(!o)return r.json({error:"Authentication required"},401);let m=e.getCollections().map(b=>({slug:b.slug,label:b.label||b.slug,fields:b.fields.filter(i=>i.name).map(i=>({name:i.name,type:i.type,required:i.required,label:i.label}))}));return r.json(m)});function Te(r,o,m){if(m in o)return o[m];for(let b of r)if(b.name){if(b.type==="tabs"&&b.tabs){let i=o[b.name];if(i&&typeof i=="object"&&m in i)return i[m]}if((b.type==="group"||b.type==="collapsible")&&b.fields){let i=o[b.name];if(i&&typeof i=="object"){if(m in i)return i[m];let a=Te(b.fields,i,m);if(a!==void 0)return a}}}}h.get("/api/search",async r=>{try{let o=r.req.query("q")||"",m=r.req.query("collections")||"",b=Math.min(parseInt(r.req.query("limit")||"10"),50);if(!o||o.length<2)return r.json({results:[],message:"Query too short"});let{user:i,tenantId:a}=await U(r.req.raw,k,l,u),p=m?m.split(",").filter(Boolean):e.getCollectionSlugs(),A=[],g=new RegExp(o.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),"i");for(let w of e.getCollections()){if(!p.includes(w.slug)||!(await N(w,"read",r.req.raw,i,a,void 0,R,q)).allowed)continue;let v=w.fields.filter(T=>T.name&&T.name!=="id"&&(T.type==="text"||T.type==="email"||T.type==="textarea"||T.type==="richtext"||T.indexed)&&!T.admin?.hidden).map(T=>T.name);if(v.length!==0)try{let T=v.map(P=>{let D={};return D[P]={like:`%${o}%`},D}),S=await t.find({collection:w.slug,where:{OR:T},limit:b,tenantId:a});await chunkILEZ3NYX_cjs.a(S.docs,w.fields,t,e,1,0);for(let P of S.docs){let D=w.admin?.useAsTitle||v.find(j=>j==="title"||j==="name"||j==="heading"||j==="slug"),C=D?Te(w.fields,P,D)??P.id:P.id;A.push({collection:w.slug,label:w.label||w.slug,id:P.id,title:String(C||"Untitled"),doc:P});}}catch(T){console.error(`Search error for ${w.slug}:`,T);}}return A.sort((w,I)=>w.label.localeCompare(I.label)),r.json({results:A})}catch(o){return r.json({error:o.message,results:[]},500)}}),h.get("/api/keys",async r=>{try{let{user:o,tenantId:m}=await U(r.req.raw,k,l,u);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:read"))return r.json({error:"Forbidden"},403);let b=parseInt(r.req.query("page")||"1"),i=Math.min(parseInt(r.req.query("limit")||"50"),100),a=await t.find({collection:chunkNY47CFVP_cjs.d,where:{},page:b,limit:i,tenantId:m}),p=(a.docs||[]).map(A=>({id:A.id,name:A.name,keyPrefix:A.keyPrefix,permissions:A.permissions||[],lastUsed:A.lastUsedAt,createdAt:A.createdAt}));return r.json({docs:p,totalDocs:a.totalDocs||p.length,totalPages:a.totalPages||1})}catch(o){return console.error("[ApiKeys] GET error:",o),r.json({error:o.message},500)}}),h.post("/api/keys",async r=>{try{let{user:o}=await U(r.req.raw,k,l,u);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);let m=await r.req.json();if(!m.name||typeof m.name!="string")return r.json({error:"name is required"},400);let b=chunkNY47CFVP_cjs.i(),i=await t.create({collection:chunkNY47CFVP_cjs.d,data:{userId:o.id,name:m.name,key:b,keyPrefix:chunkNY47CFVP_cjs.j(b),permissions:Array.isArray(m.permissions)?m.permissions:["*"],expiresAt:m.expiresAt||null,createdAt:new Date().toISOString()}});return await $?.createAuditLog({action:"api_key_create",userId:o.id,resource:"api_key",resourceId:i.id,success:!0,metadata:{keyName:m.name}}),r.json({...i,key:b,permissions:Array.isArray(m.permissions)?m.permissions:["*"]},201)}catch(o){return console.error("[ApiKeys] POST error:",o),r.json({error:o.message},500)}}),h.delete("/api/keys/:id",async r=>{try{let{user:o}=await U(r.req.raw,k,l,u);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);let m=r.req.param("id"),b=await t.findByID({collection:chunkNY47CFVP_cjs.d,id:m});return b?(await t.delete({collection:chunkNY47CFVP_cjs.d,id:m}),await $?.createAuditLog({action:"api_key_delete",userId:o.id,resource:"api_key",resourceId:m,success:!0,metadata:{keyName:b.name}}),r.json({message:"API key deleted"})):r.json({error:"API key not found"},404)}catch(o){return console.error("[ApiKeys] DELETE error:",o),r.json({error:o.message},500)}}),h.patch("/api/keys/:id",async r=>{try{let{user:o}=await U(r.req.raw,k,l,u);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);let m=r.req.param("id"),b=await r.req.json(),i=await t.findByID({collection:chunkNY47CFVP_cjs.d,id:m});if(!i)return r.json({error:"API key not found"},404);let a={};if(typeof b.name=="string"&&b.name.trim()&&(a.name=b.name.trim()),Array.isArray(b.permissions)&&(a.permissions=b.permissions),b.expiresAt!==void 0&&(a.expiresAt=b.expiresAt||null),Object.keys(a).length===0)return r.json({error:"Nothing to update"},400);let p=await t.update({collection:chunkNY47CFVP_cjs.d,id:m,data:a});return r.json({...p,keyPrefix:i.keyPrefix})}catch(o){return console.error("[ApiKeys] PATCH error:",o),r.json({error:o.message},500)}}),h.post("/api/keys/:id/rotate",async r=>{try{let{user:o}=await U(r.req.raw,k,l,u);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);let m=r.req.param("id"),b=await t.findByID({collection:chunkNY47CFVP_cjs.d,id:m});if(!b)return r.json({error:"API key not found"},404);let i=chunkNY47CFVP_cjs.i(),a=await t.update({collection:chunkNY47CFVP_cjs.d,id:m,data:{key:i,keyPrefix:chunkNY47CFVP_cjs.j(i),lastUsedAt:null}});return await $?.createAuditLog({action:"api_key_rotate",userId:o.id,resource:"api_key",resourceId:m,success:!0,metadata:{keyName:b.name}}),r.json({...a,key:i,permissions:b.permissions,expiresAt:b.expiresAt})}catch(o){return console.error("[ApiKeys] rotate error:",o),r.json({error:o.message},500)}}),h.get("/api/webhooks/actions",async r=>{try{let{user:o}=await U(r.req.raw,k,l,u);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:read"))return r.json({error:"Forbidden"},403);let m={generic:{label:"Custom URL",description:"POST to any endpoint with Kyro payload",configFields:[],envVars:[]},"github-push":{label:"GitHub Push",description:"Push an empty commit to simulate a push event",configFields:[{name:"githubOwner",label:"Owner",required:!0,placeholder:"e.g., kyro-dev"},{name:"githubRepo",label:"Repository",required:!0,placeholder:"e.g., my-website"},{name:"githubBranch",label:"Branch",required:!1,placeholder:"main"}],envVars:["GITHUB_TOKEN"]}};return r.json({actions:m})}catch(o){return console.error("[Webhooks] actions error:",o),r.json({error:o.message},500)}}),h.get("/api/webhooks",async r=>{try{let{user:o}=await U(r.req.raw,k,l,u);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:read"))return r.json({error:"Forbidden"},403);if(!y)return r.json({error:"Webhook service not available"},503);let m=await y.getWebhooks();return r.json({docs:m})}catch(o){return console.error("[Webhooks] GET error:",o),r.json({error:o.message},500)}}),h.post("/api/webhooks",async r=>{try{let{user:o}=await U(r.req.raw,k,l,u);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);if(!y)return r.json({error:"Webhook service not available"},503);let m=await r.req.json(),b=await y.createWebhook(m);return await $?.createAuditLog({action:"webhook_create",userId:o.id,resource:"webhook",resourceId:b.id,success:!0,metadata:{name:b.name,url:b.url}}),r.json(b,201)}catch(o){return console.error("[Webhooks] POST error:",o),r.json({error:o.message},500)}}),h.get("/api/webhooks/:id",async r=>{try{let{user:o}=await U(r.req.raw,k,l,u);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:read"))return r.json({error:"Forbidden"},403);if(!y)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),b=await y.getWebhookById(m);return b?r.json(b):r.json({error:"Webhook not found"},404)}catch(o){return console.error("[Webhooks] GET :id error:",o),r.json({error:o.message},500)}}),h.patch("/api/webhooks/:id",async r=>{try{let{user:o}=await U(r.req.raw,k,l,u);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);if(!y)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),b=await r.req.json(),i=await y.updateWebhook(m,b);return i?(await $?.createAuditLog({action:"webhook_update",userId:o.id,resource:"webhook",resourceId:m,success:!0,metadata:{name:i.name}}),r.json(i)):r.json({error:"Webhook not found"},404)}catch(o){return console.error("[Webhooks] PATCH error:",o),r.json({error:o.message},500)}}),h.delete("/api/webhooks/:id",async r=>{try{let{user:o}=await U(r.req.raw,k,l,u);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);if(!y)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),b=await y.getWebhookById(m);return b?(await y.deleteWebhook(m),await $?.createAuditLog({action:"webhook_delete",userId:o.id,resource:"webhook",resourceId:m,success:!0,metadata:{name:b.name}}),r.json({message:"Webhook deleted"})):r.json({error:"Webhook not found"},404)}catch(o){return console.error("[Webhooks] DELETE error:",o),r.json({error:o.message},500)}}),h.post("/api/webhooks/:id/test",async r=>{try{let{user:o}=await U(r.req.raw,k,l,u);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return r.json({error:"Forbidden"},403);if(!y)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),b=await y.testWebhook(m);return b?r.json(b):r.json({error:"Webhook not found"},404)}catch(o){return console.error("[Webhooks] test error:",o),r.json({error:o.message},500)}}),h.get("/api/webhooks/:id/history",async r=>{try{let{user:o}=await U(r.req.raw,k,l,u);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:read"))return r.json({error:"Forbidden"},403);if(!y)return r.json({error:"Webhook service not available"},503);let m=r.req.param("id"),b=Math.min(parseInt(r.req.query("limit")||"50"),100),i=await y.getDeliveryHistory(m,b);return r.json({docs:i})}catch(o){return console.error("[Webhooks] history error:",o),r.json({error:o.message},500)}});function Re(r){let o={},m=["name","type","required","hasMany","relationTo","options","min","max","minLength","maxLength","defaultValue","label","localized","admin","unique","index","hidden","readOnly","deprecated"];for(let b of m)b in r&&(o[b]=r[b]);return r.fields&&(o.fields=r.fields.map(Re)),r.tabs&&(o.tabs=r.tabs.map(b=>({label:b.label,name:b.name,fields:b.fields.map(Re)}))),o}h.get("/api/__schema",async r=>{try{let{user:o,apiKeyContext:m}=await U(r.req.raw,k,l,u);if(!o&&!m)return r.json({error:"Unauthorized"},401);let i=e.getCollections().filter(a=>a.slug!=="users"&&a.slug!=="audit_logs").map(a=>({slug:a.slug,label:a.label,labelPlural:a.labelPlural,singularLabel:a.singularLabel,timestamps:a.timestamps,auth:!!a.auth,tenantScoped:!!a.tenantScoped,upload:a.upload?{staticDir:a.upload.staticDir,imageSizes:a.upload.imageSizes,mimeTypes:a.upload.mimeTypes}:void 0,fields:a.fields.map(Re)}));return r.json(i)}catch(o){return console.error("[Schema] error:",o),r.json({error:o.message},500)}});let It=e.getCollections();for(let r of It){let b=function(i,a){let p=[],A=new Set([...Object.keys(i),...Object.keys(a)]);for(let g of A)g==="id"||g==="createdAt"||g==="updatedAt"||JSON.stringify(i[g])!==JSON.stringify(a[g])&&p.push({field:g,oldValue:g in i?i[g]:void 0,newValue:g in a?a[g]:void 0});return p};let o=r.slug;if(o==="users"||o==="audit_logs")continue;let m=`/api/${o}`;h.post(`${m}/dynamic-options/:fieldName`,async i=>{try{let{user:a,tenantId:p,apiKeyContext:A}=await U(i.req.raw,k,l,u),g=await N(r,"read",i.req.raw,a,p,A,R,q);if(!g.allowed)return i.json({error:g.error},g.status||403);let w=i.req.param("fieldName"),I=await i.req.json(),{data:v,siblingData:T}=I,S=ge(r.fields,w);if(!S)return i.json({error:"Field not found"},404);if(S.type!=="select")return i.json({error:"Field is not a select field"},400);let P=[];return typeof S.options=="function"?P=await S.options({data:v||{},siblingData:T||{}}):Array.isArray(S.options)&&(P=S.options),i.json({options:P})}catch(a){return i.json({error:a.message},500)}}),h.get(m,async i=>{try{let{user:a,tenantId:p,apiKeyContext:A}=await U(i.req.raw,k,l,u),g=await N(r,"read",i.req.raw,a,p,A,R,q);if(!g.allowed)return i.json({error:g.error},g.status||403);p&&t.setTenantContext({tenantId:p,userId:a?.id??"",role:a?.role,isSuperAdmin:a?.role==="super_admin"});let w=new URL(i.req.url),I=parseInt(w.searchParams.get("page")||"1"),v=Math.min(parseInt(w.searchParams.get("limit")||"10"),100),T=w.searchParams.get("sort")||void 0,S=parseInt(w.searchParams.get("depth")||"0"),P=w.searchParams.get("select")?.split(",")||void 0,D=w.searchParams.get("draft"),C=D==="true"?!0:D==="false"?!1:!!a,j={},L=w.searchParams.get("where");if(L)try{j=JSON.parse(L);}catch{return i.json({error:"Invalid JSON in where parameter"},400)}let F=await t.find({collection:o,where:j,sort:T,limit:v,page:I,depth:S,tenantId:p,select:P,draft:C});return await chunkILEZ3NYX_cjs.a(F.docs,r.fields,t,e,1,S),i.json(chunkG7SSHELM_cjs.a(F))}catch(a){return console.error("[API] list error:",a),i.json({error:a.message},500)}}),h.get(`${m}/:id/versions`,async i=>{try{let{user:a,tenantId:p,apiKeyContext:A}=await U(i.req.raw,k,l,u),g=await N(r,"read",i.req.raw,a,p,A,R,q);if(!g.allowed)return i.json({error:g.error},g.status||403);let w=i.req.param("id");if(!w)return i.json({error:"Missing document ID"},400);let I=new URL(i.req.url),v=I.searchParams.get("compareA"),T=I.searchParams.get("compareB");if(Xe($,A,`${m}/${w}/versions`,"GET",i.req.raw),v&&T){let[C,j]=await Promise.all([t.findVersionByID({collection:o,versionId:v,tenantId:p}),t.findVersionByID({collection:o,versionId:T,tenantId:p})]);if(!C||!j)return i.json({error:"Version not found"},404);let L=b(C.data,j.data);return i.json({diffs:L})}let S=parseInt(I.searchParams.get("page")||"1"),P=Math.min(parseInt(I.searchParams.get("limit")||"10"),100),D=await t.findVersions({collection:o,documentId:w,page:S,limit:P,tenantId:p});return i.json(D)}catch(a){return console.error("[API] versions error:",a),i.json({error:a.message},500)}}),h.put(`${m}/:id/draft`,async i=>{try{let{user:a,tenantId:p,apiKeyContext:A}=await U(i.req.raw,k,l,u),g=await N(r,"update",i.req.raw,a,p,A,R,q);if(!g.allowed)return i.json({error:g.error},g.status||403);let w=i.req.param("id"),I=await i.req.json(),v=Ge(I),T=await t.findByID({collection:o,id:w,tenantId:p,draft:!0});if(!T)return i.json({error:"Document not found"},404);let S;I.delta?S={...T,...I.delta}:S=I.data??At(I);let P=await t.updateLatestVersion({collection:o,documentId:w,data:S,status:"draft",tenantId:p});return a&&$?.createAuditLog({action:"document_update",userId:a.id,resource:o,resourceId:w,success:!0,metadata:{type:"draft_save"}}),i.json({data:P,message:"Draft saved successfully"})}catch(a){return i.json({error:a.message},500)}}),h.delete(`${m}/:id/draft`,async i=>{try{let{user:a,tenantId:p,apiKeyContext:A}=await U(i.req.raw,k,l,u),g=await N(r,"update",i.req.raw,a,p,A,R,q);return g.allowed?(a&&$?.createAuditLog({action:"document_update",userId:a.id,resource:o,resourceId:i.req.param("id"),success:!0,metadata:{type:"draft_discard"}}),i.json({message:"Draft discarded successfully"})):i.json({error:g.error},g.status||403)}catch(a){return i.json({error:a.message},500)}}),h.get(`${m}/:id`,async i=>{try{let{user:a,tenantId:p,apiKeyContext:A}=await U(i.req.raw,k,l,u),g=new URL(i.req.url),w=g.searchParams.get("draft"),I=g.searchParams.get("kyroToken"),v=!1;if(w==="true"&&I&&s)try{let j=await jwt.verify(I,s,"HS256");j&&j.type==="preview"&&j.collection===r.slug&&(v=!0);}catch(j){console.warn("Invalid preview token",j);}if(!v){let j=await N(r,"read",i.req.raw,a,p,A,R,q);if(!j.allowed)return i.json({error:j.error},j.status||403)}let T=i.req.param("id"),S=parseInt(g.searchParams.get("depth")||"0"),P=g.searchParams.get("select")?.split(",")||void 0,D=w==="true"?!0:w==="false"?!1:!!a,C=await t.findByID({collection:o,id:T,depth:S,tenantId:p,select:P,draft:D});return !C&&r.fields.some(j=>j.name==="slug")&&(C=await t.findOne({collection:o,where:{slug:T},tenantId:p,draft:D})),C?(await chunkILEZ3NYX_cjs.a([C],r.fields,t,e,1,S),i.json({data:chunkG7SSHELM_cjs.a(C)})):i.json({error:"Document not found"},404)}catch(a){return i.json({error:a.message},500)}}),h.post(`${m}/preview-url`,async i=>{try{let{user:a,tenantId:p}=await U(i.req.raw,k,l,u),A=await N(r,"read",i.req.raw,a,p);if(!A.allowed)return i.json({error:A.error||"Forbidden"},A.status||403);let g=await i.req.json().catch(()=>({})),w="";s&&(w=await jwt.sign({type:"preview",collection:r.slug,id:g.id,exp:Math.floor(Date.now()/1e3)+3600},s,"HS256"));let I="";if(r.admin?.preview){I=await r.admin.preview(g,{req:i.req.raw,token:w});try{let v=new URL(I,"http://localhost");v.searchParams.has("preview")||v.searchParams.set("preview","true"),!v.searchParams.has("kyroToken")&&w&&v.searchParams.set("kyroToken",w),I=I.startsWith("http")?v.toString():`${v.pathname}${v.search}`;}catch{}}else {let v="";try{let S=await t.findOne({collection:"_globals_site-settings",where:{}});S?.siteUrl&&(v=S.siteUrl);}catch{}if(!v)return i.json({error:"No site URL configured in settings, and no custom preview function defined for this collection."},400);v=v.replace(/\/$/,"");let T=g.slug||g.id||"";I=`${v}/${r.slug}/${T}?preview=true&kyroToken=${w}`;}return i.json({url:I})}catch(a){return i.json({error:a.message},500)}}),h.post(m,async i=>{try{let{user:a,tenantId:p,apiKeyContext:A}=await U(i.req.raw,k,l,u),g=await N(r,"create",i.req.raw,a,p,A,R,q);if(!g.allowed)return i.json({error:g.error},g.status||403);p&&t.setTenantContext({tenantId:p,userId:a?.id??"",role:a?.role,isSuperAdmin:a?.role==="super_admin"}),Xe($,A,m,"POST",i.req.raw);let I=await i.req.json();ye(I,r.fields),we(r.fields,I);let v=i.req.raw;if(r.hooks?.beforeValidate)for(let j of r.hooks.beforeValidate){let L=await j({collection:o,data:I,req:v,user:a,tenantId:p,operation:"create"});L&&typeof L=="object"&&!Array.isArray(L)&&Object.assign(I,L);}let T=e.getCreateZodSchema(o);try{I=T.parse(I);}catch(j){return i.json({error:`Validation failed: ${Ve(j.errors)}`,details:j.errors},400)}r.tenantScoped&&p&&(I.tenantId=p);let S=r.versions?.drafts===!0,P=r.fields.find(j=>j.name==="status"),D=P?.type==="select"&&Array.isArray(P.options)&&P.options.some(j=>j.value==="published");if(S?I.status="draft":D&&!I.status&&(I.status="published"),r.hooks?.beforeChange)for(let j of r.hooks.beforeChange){let L=await j({collection:o,data:I,req:v,user:a,tenantId:p,operation:"create"});L&&typeof L=="object"&&!Array.isArray(L)&&Object.assign(I,L);}let C=await t.create({collection:o,data:I,tenantId:p});if(S&&await t.createVersion({collection:o,documentId:C.id,data:I,status:"draft",createdBy:a?.id,changeDescription:"Created",tenantId:p}),r.hooks?.afterChange)for(let j of r.hooks.afterChange)await j({collection:o,doc:C,data:I,req:v,user:a,tenantId:p,operation:"create"});return y&&y.trigger(Pe(o,"create"),{collection:o,operation:"create",data:C,user:a?{id:a.id,email:a.email,role:a.role}:void 0,tenantId:p}).catch(j=>console.error("[Webhook] Failed to trigger:",j)),a&&$?.createAuditLog({action:"document_create",userId:a.id,resource:o,resourceId:C.id,success:!0}),i.json({data:C,message:"Created successfully"},201)}catch(a){return a.name==="ZodError"?i.json({error:`Validation failed: ${Ve(a.errors)}`,details:a.errors},400):i.json({error:a.message},500)}}),h.patch(`${m}/:id`,async i=>{try{let{user:a,tenantId:p,apiKeyContext:A}=await U(i.req.raw,k,l,u),g=await N(r,"update",i.req.raw,a,p,A,R,q);if(!g.allowed)return i.json({error:g.error},g.status||403);let w=i.req.param("id"),I=await i.req.json(),v=Ge(I),T=await t.findByID({collection:o,id:w,tenantId:p,draft:!0});if(!T)return i.json({error:"Document not found"},404);if(v&&T.updatedAt&&v!==T.updatedAt)return i.json(xt(v,T),409);let S=Object.fromEntries(Object.entries(At(I)).filter(([Y,M])=>M!=="null"&&M!==void 0));ye(S,r.fields),we(r.fields,S);let P=i.req.raw;if(r.hooks?.beforeValidate)for(let Y of r.hooks.beforeValidate){let M=await Y({collection:o,data:S,originalDoc:T,req:P,user:a,tenantId:p,operation:"update"});M&&typeof M=="object"&&!Array.isArray(M)&&Object.assign(S,M);}if(S=e.getUpdateZodSchema(o).parse(S),r.hooks?.beforeChange)for(let Y of r.hooks.beforeChange){let M=await Y({collection:o,data:S,originalDoc:T,req:P,user:a,tenantId:p,operation:"update"});M&&typeof M=="object"&&!Array.isArray(M)&&Object.assign(S,M);}let C=i.req.header("X-Draft")==="true",j=r.versions?.drafts===!0,L=i.req.query("autosave")==="true",F;if(j&&C?await t.createVersion({collection:o,documentId:w,data:S,status:"draft",autosave:L,createdBy:a?.id,changeDescription:L?"Autosave":"Draft saved",tenantId:p}):j?(await t.update({collection:o,id:w,data:{...S,status:"published"},tenantId:p}),await t.createVersion({collection:o,documentId:w,data:S,status:"published",createdBy:a?.id,changeDescription:"Published",tenantId:p})):await t.update({collection:o,id:w,data:S,tenantId:p}),F=await t.findByID({collection:o,id:w,tenantId:p,draft:!0}),r.hooks?.afterChange)for(let Y of r.hooks.afterChange)await Y({collection:o,doc:F,data:S,originalDoc:T,req:P,user:a,tenantId:p,operation:"update"});return y&&!L&&y.trigger(Pe(o,"update"),{collection:o,operation:"update",data:F,previousData:T,user:a?{id:a.id,email:a.email,role:a.role}:void 0,tenantId:p}).catch(Y=>console.error("[Webhook] Failed to trigger:",Y)),Xe($,A,`${m}/${w}`,"PATCH",i.req.raw),a&&$?.createAuditLog({action:"document_update",userId:a.id,resource:o,resourceId:w,success:!0}),i.json({data:F,message:j?"Draft saved":"Updated successfully"})}catch(a){return a.name==="ZodError"?(console.error(`[PATCH ${m}/:id] Validation failed:`,a.errors),i.json({error:`Validation failed: ${Ve(a.errors)}`,details:a.errors},400)):(console.error(`[PATCH ${m}/:id] ERROR:`,a.message,"CAUSE:",a.cause?.message||a.cause,"QUERY:",a.query),i.json({error:a.message},500))}}),h.delete(`${m}/:id`,async i=>{try{let{user:a,tenantId:p,apiKeyContext:A}=await U(i.req.raw,k,l,u),g=await N(r,"delete",i.req.raw,a,p,A,R,q);if(!g.allowed)return i.json({error:g.error},g.status||403);p&&t.setTenantContext({tenantId:p,userId:a?.id??"",role:a?.role,isSuperAdmin:a?.role==="super_admin"});let w=i.req.param("id"),I=i.req.raw,v=await t.findByID({collection:o,id:w,tenantId:p,draft:!0});if(!v)return i.json({error:"Document not found"},404);if(r.hooks?.beforeDelete)for(let S of r.hooks.beforeDelete)await S({collection:o,doc:v,req:I,user:a,tenantId:p,operation:"delete"});let T=await t.delete({collection:o,id:w,tenantId:p});if(r.hooks?.afterDelete)for(let S of r.hooks.afterDelete)await S({collection:o,doc:T,originalDoc:v,req:I,user:a,tenantId:p,operation:"delete"});return y&&y.trigger(Pe(o,"delete"),{collection:o,operation:"delete",data:T,previousData:v,user:a?{id:a.id,email:a.email,role:a.role}:void 0,tenantId:p}).catch(S=>console.error("[Webhook] Failed to trigger:",S)),Xe($,A,`${m}/${w}`,"DELETE",i.req.raw),a&&$?.createAuditLog({action:"document_delete",userId:a.id,resource:o,resourceId:w,success:!0}),i.json({data:T,message:"Deleted successfully"})}catch(a){return console.error(`[DELETE] Error deleting ${o}:`,a),i.json({error:a.message||String(a)},500)}}),h.post(`${m}/:id/duplicate`,async i=>{try{let{user:a,tenantId:p,apiKeyContext:A}=await U(i.req.raw,k,l,u),g=await N(r,"create",i.req.raw,a,p,A,R,q);if(!g.allowed)return i.json({error:g.error},g.status||403);let w=i.req.param("id"),I=await t.findByID({collection:o,id:w,tenantId:p,draft:!0});if(!I)return i.json({error:"Document not found"},404);let{id:v,createdAt:T,updatedAt:S,...P}=I;Ue(r.fields,P);let D=Date.now().toString(36);"slug"in P&&typeof P.slug=="string"&&(P.slug=`${P.slug||"document"}-copy-${D}`),"title"in P&&typeof P.title=="string"?P.title=`${P.title||"Copy"} (Copy)`:"name"in P&&typeof P.name=="string"&&(P.name=`${P.name||"Copy"} (Copy)`);let C=await t.create({collection:o,data:{...P,status:"draft"},tenantId:p});return i.json({data:C,message:"Document duplicated successfully"})}catch(a){return console.error("[Duplicate] Error:",a),i.json({error:a.message||String(a)},500)}}),h.post(`${m}/:id/versions/:versionId/restore`,async i=>{try{let{user:a,tenantId:p,apiKeyContext:A}=await U(i.req.raw,k,l,u),g=await N(r,"update",i.req.raw,a,p,A,R,q);if(!g.allowed)return i.json({error:g.error},g.status||403);let w=i.req.param("id"),I=i.req.param("versionId"),v=await t.findVersionByID({collection:o,versionId:I,tenantId:p});if(!v)return i.json({error:"Version not found"},404);let T=await t.update({collection:o,id:w,data:{...v.data,status:"draft"},tenantId:p});return i.json({data:T,message:"Version restored successfully"})}catch(a){return i.json({error:a.message},500)}}),h.post(`${m}/:id/versions`,async i=>{try{let{user:a,tenantId:p,apiKeyContext:A}=await U(i.req.raw,k,l,u),g=await N(r,"update",i.req.raw,a,p,A,R,q);if(!g.allowed)return i.json({error:g.error},g.status||403);let w=await i.req.json(),{versionId:I,action:v}=w;if(v==="restore"&&I){let T=await t.findVersionByID({collection:o,versionId:I,tenantId:p});if(!T)return i.json({error:"Version not found"},404);let S=await t.update({collection:o,id:i.req.param("id"),data:{...T.data,status:"draft"},tenantId:p});return i.json({data:S,message:"Version restored successfully"})}return i.json({error:"Invalid action"},400)}catch(a){return i.json({error:a.message},500)}}),h.post(`${m}/:id/publish`,async i=>{try{let{user:a,tenantId:p,apiKeyContext:A}=await U(i.req.raw,k,l,u),g=await N(r,"update",i.req.raw,a,p,A,R,q);if(!g.allowed)return i.json({error:g.error},g.status||403);p&&t.setTenantContext({tenantId:p,userId:a?.id??"",role:a?.role,isSuperAdmin:a?.role==="super_admin"});let w=i.req.param("id"),I=await i.req.json().catch(()=>({})),v=Ge(I),T=await t.findByID({collection:o,id:w,tenantId:p,draft:!0});if(!T)return i.json({error:"Document not found"},404);if(v&&T.updatedAt&&v!==T.updatedAt)return i.json(xt(v,T),409);let S={status:"published"},P=T;if(r.versions?.drafts){let C=await t.findVersions({collection:o,documentId:w,limit:1,sort:"-createdAt",tenantId:p});if(C.docs.length>0){let j=C.docs[0];P={...T,...j.data},S={...j.data,...S};}}let D=await t.update({collection:o,id:w,data:S,tenantId:p});return r.versions?.drafts&&await t.createVersion({collection:o,documentId:w,data:{...P,status:"published"},status:"published",createdBy:a?.id,changeDescription:"Published",tenantId:p}),y&&y.trigger(Pe(o,"update"),{collection:o,operation:"update",data:D,user:a?{id:a.id,email:a.email,role:a.role}:void 0,tenantId:p}).catch(C=>console.error("[Webhook] Failed to trigger:",C)),i.json({data:D,message:"Published successfully"})}catch(a){return i.json({error:a.message},500)}}),h.post(`${m}/:id/unpublish`,async i=>{try{let{user:a,tenantId:p,apiKeyContext:A}=await U(i.req.raw,k,l,u),g=await N(r,"update",i.req.raw,a,p,A,R,q);if(!g.allowed)return i.json({error:g.error},g.status||403);let w=i.req.param("id");if(!await t.findByID({collection:o,id:w,tenantId:p,draft:!0}))return i.json({error:"Document not found"},404);let v=await t.update({collection:o,id:w,data:{status:"draft"},tenantId:p});return y&&y.trigger(Pe(o,"update"),{collection:o,operation:"update",data:v,user:a?{id:a.id,email:a.email,role:a.role}:void 0,tenantId:p}).catch(T=>console.error("[Webhook] Failed to trigger:",T)),i.json({data:v,message:"Unpublished successfully"})}catch(a){return i.json({error:a.message},500)}});}for(let r of e.getGlobals()){let o=r.slug,m=`/api/globals/${o}`;h.post(`${m}/dynamic-options/:fieldName`,async i=>{try{let{user:a,tenantId:p}=await U(i.req.raw,k,l,u),A=await J(r,"read",i.req.raw,a,p,R);if(!A.allowed)return i.json({error:A.error},A.status||403);let g=i.req.param("fieldName"),w=await i.req.json(),{data:I,siblingData:v}=w,T=ge(r.fields,g);if(!T)return i.json({error:"Field not found"},404);if(T.type!=="select")return i.json({error:"Field is not a select field"},400);let S=[];return typeof T.options=="function"?S=await T.options({data:I||{},siblingData:v||{}}):Array.isArray(T.options)&&(S=T.options),i.json({options:S})}catch(a){return i.json({error:a.message},500)}}),h.get(m,async i=>{try{let{user:a,tenantId:p}=await U(i.req.raw,k,l,u),A=new URL(i.req.url),g=A.searchParams.get("kyroToken"),w=A.searchParams.get("draft"),I=!1;if(w==="true"&&g&&s)try{let D=await jwt.verify(g,s,"HS256");D&&D.type==="preview"&&D.collection===`_globals_${r.slug}`&&(I=!0);}catch(D){console.warn("Invalid preview token",D);}if(!I){let D=await J(r,"read",i.req.raw,a,p,R);if(!D.allowed)return i.json({error:D.error},D.status||403)}let v=w==="true"?!0:w==="false"?!1:!!a,T=parseInt(A.searchParams.get("depth")||"0"),P=(await t.find({collection:`_globals_${o}`,where:{},tenantId:p,draft:v,depth:T,limit:1})).docs[0];if(P&&T>0&&await chunkILEZ3NYX_cjs.a([P],r.fields,t,e,1,T),o==="system"){let D=mr__default.default.randomBytes(32).toString("hex");P?P.appSecret||(await t.update({collection:`_globals_${o}`,id:o,data:{appSecret:D},tenantId:p}),P.appSecret=D):P=await t.create({collection:`_globals_${o}`,data:{id:o,appSecret:D},tenantId:p});}return i.json({data:P||{}})}catch(a){return i.json({error:a.message},500)}});let b=async i=>{try{let{user:a,tenantId:p}=await U(i.req.raw,k,l,u),A=await J(r,"update",i.req.raw,a,p,R);if(!A.allowed)return i.json({error:A.error},A.status||403);let g=new URL(i.req.url),w=parseInt(g.searchParams.get("depth")||"0"),I=await i.req.json(),v=Ge(I),T=At(I),S=Object.fromEntries(Object.entries(T).filter(([H,Ae])=>Ae!==null&&Ae!=="null"&&Ae!==void 0));ye(S,r.fields),we(r.fields,S);let P=e.getUpdateZodSchema(o),D;try{D=P.parse(S);}catch(H){return i.json({error:`Validation failed: ${Ve(H.errors)}`,details:H.errors},400)}let C=new Set(["id","createdAt","updatedAt","status","baseUpdatedAt","_baseUpdatedAt"]),j=Object.fromEntries(Object.entries(D).filter(([H])=>!C.has(H))),L=`_globals_${o}`,F=await t.findOne({collection:L,where:{},tenantId:p,draft:!0});if(F&&v&&F.updatedAt&&v!==F.updatedAt)return i.json(xt(v,F),409);let Y=i.req.header("X-Draft")==="true",M=r.versions?.drafts===!0,oe=i.req.query("autosave")==="true",z;if(M&&Y)await t.createVersion({collection:L,documentId:o,data:j,status:"draft",autosave:oe,createdBy:a?.id,changeDescription:oe?"Autosave":"Manual save",tenantId:p}),F?z=F:z=await t.create({collection:L,data:{...j,id:o,status:"draft"},tenantId:p});else if(M&&!Y){let H="published";F?z=await t.update({collection:L,id:o,data:{...j,status:H},tenantId:p}):z=await t.create({collection:L,data:{...j,id:o,status:H},tenantId:p}),await t.createVersion({collection:L,documentId:o,data:j,status:H,autosave:!1,createdBy:a?.id,changeDescription:"Published",tenantId:p});}else F?z=await t.update({collection:L,id:o,data:j,tenantId:p}):z=await t.create({collection:L,data:{...j,id:o},tenantId:p});if(o==="storage-settings"&&(G=null,ae=null),o==="email-settings"){let H=await chunk5K4YG5DA_cjs.k.fromConfig(t);O.email=H||void 0;}return o==="system"&&await Nt(),a&&$?.createAuditLog({action:"settings_change",userId:a.id,resource:`global:${o}`,resourceId:o,success:!0}),z&&w>0&&await chunkILEZ3NYX_cjs.a([z],r.fields,t,e,1,w),i.json({data:z,message:"Updated successfully"})}catch(a){return console.error(`[API] Save global "${o}" failed:`,a),i.json({error:a.message||"Save failed",stack:process.env.NODE_ENV==="development"?a.stack:void 0},500)}};h.post(m,b),h.patch(m,b),h.post(`${m}/preview-url`,async i=>{try{let{user:a,tenantId:p}=await U(i.req.raw,k,l,u),A=await J(r,"read",i.req.raw,a,p);if(!A.allowed)return i.json({error:A.error||"Forbidden"},A.status||403);let g=await i.req.json().catch(()=>({})),w="";s&&(w=await jwt.sign({type:"preview",collection:`_globals_${r.slug}`,exp:Math.floor(Date.now()/1e3)+3600},s,"HS256"));let I="";if(r.admin?.preview)I=await r.admin.preview(g,{req:i.req.raw,token:w});else {let v="";try{let T=await t.findOne({collection:"_globals_site-settings",where:{}});T?.siteUrl&&(v=T.siteUrl);}catch{}if(!v)return i.json({error:"No site URL configured in settings, and no custom preview function defined."},400);v=v.replace(/\/$/,""),I=`${v}/?preview=true&kyroToken=${w}`;}return i.json({url:I})}catch(a){return i.json({error:a.message},500)}}),h.post(`${m}/publish`,async i=>{try{let{user:a,tenantId:p}=await U(i.req.raw,k,l,u),A=await J(r,"update",i.req.raw,a,p,R);if(!A.allowed)return i.json({error:A.error},403);let g=`_globals_${o}`,w=await t.findOne({collection:g,where:{},tenantId:p,draft:!0});if(!w)return i.json({error:"Global not found"},404);let I={status:"published"},v=w;if(r.versions?.drafts){let S=await t.findVersions({collection:g,documentId:o,limit:1,sort:"-createdAt",tenantId:p});S.docs.length>0&&(v={...w,...S.docs[0].data},I={...S.docs[0].data,...I});}let T=await t.update({collection:g,id:o,data:I,tenantId:p});return r.versions?.drafts&&await t.createVersion({collection:g,documentId:o,data:{...v,status:"published"},status:"published",createdBy:a?.id,changeDescription:"Published",tenantId:p}),i.json({data:T,message:"Published successfully"})}catch(a){return i.json({error:a.message},500)}}),h.post(`${m}/unpublish`,async i=>{try{let{user:a,tenantId:p}=await U(i.req.raw,k,l,u),A=await J(r,"update",i.req.raw,a,p,R);if(!A.allowed)return i.json({error:A.error},403);let g=await t.update({collection:`_globals_${o}`,id:o,data:{status:"draft"},tenantId:p});return i.json({data:g,message:"Unpublished successfully"})}catch(a){return i.json({error:a.message},500)}}),h.get(`${m}/versions`,async i=>{try{let{user:a,tenantId:p}=await U(i.req.raw,k,l,u),A=await J(r,"read",i.req.raw,a,p,R);if(!A.allowed)return i.json({error:A.error},403);let g=parseInt(i.req.query("limit")||"10"),w=parseInt(i.req.query("page")||"1"),I=await t.findVersions({collection:`_globals_${o}`,documentId:o,limit:g,page:w,tenantId:p});return i.json(I)}catch(a){return i.json({error:a.message},500)}}),h.get(`${m}/versions/:versionId`,async i=>{try{let a=i.req.param("versionId"),{user:p,tenantId:A}=await U(i.req.raw,k,l,u),g=await J(r,"read",i.req.raw,p,A,R);if(!g.allowed)return i.json({error:g.error},403);let w=await t.findVersionByID({collection:`_globals_${o}`,versionId:a,tenantId:A});return w?i.json({data:w}):i.json({error:"Version not found"},404)}catch(a){return i.json({error:a.message},500)}}),h.post(`${m}/versions/:versionId/restore`,async i=>{try{let a=i.req.param("versionId"),{user:p,tenantId:A}=await U(i.req.raw,k,l,u),g=await J(r,"update",i.req.raw,p,A,R);if(!g.allowed)return i.json({error:g.error},403);let w=`_globals_${o}`,I=await t.findVersionByID({collection:w,versionId:a,tenantId:A});if(!I)return i.json({error:"Version not found"},404);let v=await t.update({collection:w,id:o,data:{...I.data,status:"draft"},tenantId:A});return i.json({data:v,message:"Version restored successfully"})}catch(a){return i.json({error:a.message},500)}}),o==="email-settings"&&h.post(`${m}/test`,async i=>{try{let{user:a,tenantId:p}=await U(i.req.raw,k,l,u),A=await J(r,"update",i.req.raw,a,p,R);if(!A.allowed)return i.json({error:A.error},A.status||403);let g=await i.req.json(),w={provider:g.provider,from:g.fromEmail||g.from,fromName:g.fromName,replyTo:g.replyTo,smtp:g.smtp?{host:g.smtp.host,port:g.smtp.port,secure:g.smtp.secure,auth:{user:g.smtp.username||g.smtp.user,pass:g.smtp.password||g.smtp.pass}}:void 0,resend:g.resend,sendgrid:g.sendgrid,mailgun:g.mailgun,ses:g.ses},I=new chunk5K4YG5DA_cjs.k(w),v=g.email||g.testEmail||g.testEmailSection&&g.testEmailSection.testEmail;if(!v)return i.json({error:"No test recipient email provided"},400);let T=g.provider?g.provider.charAt(0).toUpperCase()+g.provider.slice(1):"SMTP",S=g.fromName?`${g.fromName} <${g.fromEmail||g.from||"default"}>`:g.fromEmail||g.from||"Configured Sender",P=new Date().toUTCString();return await I.send({to:v,subject:"Kyro CMS \u2014 Email Connection Test",html:`<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <meta name="color-scheme" content="light dark">
+  <meta name="supported-color-schemes" content="light dark">
+  <title>Kyro CMS Test Email</title>
+  <style>
+    :root {
+      color-scheme: light dark;
+      supported-color-schemes: light dark;
+    }
+    @media (prefers-color-scheme: dark) {
+      .email-body { background-color: #09090b !important; color: #f4f4f5 !important; }
+      .email-card { background-color: #121215 !important; border-color: #27272a !important; box-shadow: none !important; }
+      .email-header { background-color: #18181b !important; border-color: #27272a !important; }
+      .email-brand-text { color: #ffffff !important; }
+      .email-title { color: #ffffff !important; }
+      .email-text { color: #a1a1aa !important; }
+      .email-strong { color: #ffffff !important; }
+      .email-table { background-color: #18181b !important; border-color: #27272a !important; }
+      .email-td-border { border-color: #27272a !important; }
+      .email-label { color: #a1a1aa !important; }
+      .email-value { color: #f4f4f5 !important; }
+      .email-btn-primary { background-color: #ffffff !important; color: #09090b !important; }
+      .email-btn-secondary { background-color: #18181b !important; border-color: #27272a !important; color: #f4f4f5 !important; }
+      .email-footer { background-color: #09090b !important; border-color: #27272a !important; }
+      .email-footer-text { color: #71717a !important; }
+      .email-footer-link { color: #a1a1aa !important; }
+      .logo-light { display: none !important; }
+      .logo-dark { display: inline-block !important; }
+      .badge-status { background-color: #064e3b !important; border-color: #047857 !important; color: #34d399 !important; }
+    }
+  </style>
+</head>
+<body class="email-body" style="margin: 0; padding: 36px 16px; background-color: #f4f4f5; font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif; color: #09090b; -webkit-font-smoothing: antialiased;">
+  <table role="presentation" width="100%" border="0" cellspacing="0" cellpadding="0" class="email-card" style="max-width: 540px; margin: 0 auto; background-color: #ffffff; border: 1px solid #e4e4e7; border-radius: 12px; overflow: hidden; box-shadow: 0 4px 12px rgba(0, 0, 0, 0.03);">
+    <!-- Header Bar -->
+    <tr>
+      <td class="email-header" style="padding: 22px 28px; border-bottom: 1px solid #f4f4f5; background-color: #ffffff;">
+        <table role="presentation" width="100%" border="0" cellspacing="0" cellpadding="0">
+          <tr>
+            <td align="left" valign="middle">
+              <a href="https://kyro-cms.com" target="_blank" style="text-decoration: none; display: inline-flex; align-items: center; gap: 10px;">
+                <!-- Light Mode Logo -->
+                <img src="https://kyro-cms.com/logo.svg" alt="Kyro Logo" class="logo-light" height="24" style="display: inline-block; border: 0; max-height: 24px; vertical-align: middle;" />
+                <!-- Dark Mode Logo -->
+                <img src="https://kyro-cms.com/logo-white.svg" alt="Kyro Logo" class="logo-dark" height="24" style="display: none; border: 0; max-height: 24px; vertical-align: middle;" />
+                <span class="email-brand-text" style="font-size: 16px; font-weight: 700; color: #09090b; letter-spacing: -0.3px; vertical-align: middle;">Kyro CMS</span>
+              </a>
+            </td>
+            <td align="right" valign="middle">
+              <span class="badge-status" style="display: inline-block; padding: 4px 10px; background-color: #ecfdf5; border: 1px solid #a7f3d0; border-radius: 9999px; font-size: 11px; font-weight: 500; color: #047857;">
+                \u2713 Active Connection
+              </span>
+            </td>
+          </tr>
+        </table>
+      </td>
+    </tr>
+
+    <!-- Body Section -->
+    <tr>
+      <td style="padding: 28px;">
+        <h1 class="email-title" style="margin: 0 0 10px; font-size: 20px; font-weight: 600; color: #09090b; letter-spacing: -0.3px;">
+          Test Email Dispatch Successful
+        </h1>
+        <p class="email-text" style="margin: 0 0 24px; font-size: 14px; line-height: 1.6; color: #52525b;">
+          Your email transport configuration in <strong class="email-strong" style="color: #09090b;">Kyro CMS</strong> is active and successfully delivering messages. Below are the connection diagnostics.
+        </p>
+
+        <!-- Compact Metadata Grid -->
+        <table role="presentation" width="100%" border="0" cellspacing="0" cellpadding="0" class="email-table" style="background-color: #fafafa; border: 1px solid #e4e4e7; border-radius: 8px; margin-bottom: 24px; border-collapse: separate; overflow: hidden;">
+          <tr>
+            <td class="email-label email-td-border" style="padding: 10px 14px; border-bottom: 1px solid #e4e4e7; border-right: 1px solid #e4e4e7; width: 30%; font-size: 12px; font-weight: 500; color: #71717a;">
+              Provider
+            </td>
+            <td class="email-value email-td-border" style="padding: 10px 14px; border-bottom: 1px solid #e4e4e7; font-size: 13px; font-weight: 600; color: #09090b;">
+              ${T}
+            </td>
+          </tr>
+          <tr>
+            <td class="email-label email-td-border" style="padding: 10px 14px; border-bottom: 1px solid #e4e4e7; border-right: 1px solid #e4e4e7; font-size: 12px; font-weight: 500; color: #71717a;">
+              Recipient
+            </td>
+            <td class="email-value email-td-border" style="padding: 10px 14px; border-bottom: 1px solid #e4e4e7; font-size: 13px; color: #18181b; font-family: monospace;">
+              ${v}
+            </td>
+          </tr>
+          <tr>
+            <td class="email-label email-td-border" style="padding: 10px 14px; border-bottom: 1px solid #e4e4e7; border-right: 1px solid #e4e4e7; font-size: 12px; font-weight: 500; color: #71717a;">
+              From Sender
+            </td>
+            <td class="email-value email-td-border" style="padding: 10px 14px; border-bottom: 1px solid #e4e4e7; font-size: 13px; color: #18181b;">
+              ${S}
+            </td>
+          </tr>
+          <tr>
+            <td class="email-label email-td-border" style="padding: 10px 14px; border-right: 1px solid #e4e4e7; font-size: 12px; font-weight: 500; color: #71717a;">
+              Timestamp
+            </td>
+            <td class="email-value" style="padding: 10px 14px; font-size: 12px; color: #52525b;">
+              ${P}
+            </td>
+          </tr>
+        </table>
+
+        <!-- Action Links -->
+        <table role="presentation" width="100%" border="0" cellspacing="0" cellpadding="0">
+          <tr>
+            <td align="left">
+              <a href="https://kyro-cms.com" target="_blank" class="email-btn-primary" style="display: inline-block; padding: 10px 18px; background-color: #09090b; color: #ffffff; font-size: 13px; font-weight: 500; text-decoration: none; border-radius: 6px;">
+                Visit Website \u2192
+              </a>
+              <a href="https://kyro-cms.com/docs" target="_blank" class="email-btn-secondary" style="display: inline-block; padding: 10px 16px; margin-left: 8px; background-color: #ffffff; border: 1px solid #e4e4e7; color: #09090b; font-size: 13px; font-weight: 500; text-decoration: none; border-radius: 6px;">
+                Documentation
+              </a>
+            </td>
+          </tr>
+        </table>
+      </td>
+    </tr>
+
+    <!-- Footer -->
+    <tr>
+      <td class="email-footer" style="padding: 18px 28px; border-top: 1px solid #f4f4f5; background-color: #fafafa; text-align: center;">
+        <p class="email-footer-text" style="margin: 0 0 8px; font-size: 12px; color: #71717a;">
+          Automated test message dispatched from <strong>Kyro CMS Engine</strong>.
+        </p>
+        <p style="margin: 0; font-size: 12px; color: #71717a;">
+          <a href="https://kyro-cms.com" target="_blank" class="email-footer-link" style="color: #09090b; text-decoration: none; font-weight: 500;">kyro-cms.com</a> &nbsp;\u2022&nbsp; 
+          <a href="https://kyro-cms.com/docs" target="_blank" class="email-footer-link" style="color: #09090b; text-decoration: none; font-weight: 500;">Docs</a> &nbsp;\u2022&nbsp; 
+          <a href="https://github.com/danielDozie/kyro-cms" target="_blank" class="email-footer-link" style="color: #09090b; text-decoration: none; font-weight: 500;">GitHub</a>
+        </p>
+      </td>
+    </tr>
+  </table>
+</body>
+</html>`,text:`Success! Your email settings in Kyro CMS are working correctly.
+
+Provider: ${T}
+Recipient: ${v}
+Timestamp: ${P}
+Website: https://kyro-cms.com`}),i.json({message:"Test email sent successfully!"})}catch(a){return console.error("[Email Test] Failed:",a),i.json({error:a.message||"Failed to send test email"},500)}});}return h.onError((r,o)=>(console.error(`[API Error] ${o.req.method} ${o.req.path}:`,r),o.json({error:r.message||"Internal server error",code:"INTERNAL_ERROR"},500))),h}function Yr(d,e,t){return lr({registry:d,db:e,authSecret:t?.authSecret,user:t?.user,req:t?.req,tenantId:t?.tenantId,cors:t?.cors,webhookService:t?.webhookService})}
+exports.a=Nr;exports.b=Or;exports.c=Br;exports.d=er;exports.e=he;exports.f=ft;exports.g=Qr;exports.h=Nt;exports.i=gr;exports.j=es;exports.k=Ot;exports.l=tt;exports.m=Oe;exports.n=Wt;exports.o=gs;exports.p=Ht;exports.q=Me;exports.r=rr;exports.s=We;exports.t=lr;exports.u=Yr;