@kyro-cms/core 0.12.44 → 0.12.46

package/dist/chunk-NZJAGASC.cjs

@@ -1,251 +0,0 @@
-'use strict';var chunkBGX27ZRG_cjs=require('./chunk-BGX27ZRG.cjs'),chunkGO34AOBZ_cjs=require('./chunk-GO34AOBZ.cjs'),chunkJ4252I5B_cjs=require('./chunk-J4252I5B.cjs'),chunkHVXO3OFB_cjs=require('./chunk-HVXO3OFB.cjs'),chunkILEZ3NYX_cjs=require('./chunk-ILEZ3NYX.cjs'),chunkNY47CFVP_cjs=require('./chunk-NY47CFVP.cjs'),chunkCCUQZ66T_cjs=require('./chunk-CCUQZ66T.cjs'),chunkGYQMNXXW_cjs=require('./chunk-GYQMNXXW.cjs'),chunkQCA3AP3M_cjs=require('./chunk-QCA3AP3M.cjs'),chunkG7SSHELM_cjs=require('./chunk-G7SSHELM.cjs'),chunkQ3Q7BJVQ_cjs=require('./chunk-Q3Q7BJVQ.cjs'),chunkAHSFSERC_cjs=require('./chunk-AHSFSERC.cjs'),wr=require('crypto'),unstorage=require('unstorage'),Sr=require('unstorage/drivers/fs'),Ir=require('unstorage/drivers/memory'),hono=require('hono'),jwt=require('hono/jwt'),We=require('path'),fs=require('fs'),Jt=require('bcryptjs'),drizzleOrm=require('drizzle-orm'),promises=require('fs/promises'),_r=require('process'),clientS3=require('@aws-sdk/client-s3'),nodeHttpHandler=require('@smithy/node-http-handler'),stream=require('stream'),basicFtp=require('basic-ftp'),zodToJsonSchema=require('zod-to-json-schema');function _interopDefault(e){return e&&e.__esModule?e:{default:e}}var wr__default=/*#__PURE__*/_interopDefault(wr);var Sr__default=/*#__PURE__*/_interopDefault(Sr);var Ir__default=/*#__PURE__*/_interopDefault(Ir);var We__default=/*#__PURE__*/_interopDefault(We);var Jt__default=/*#__PURE__*/_interopDefault(Jt);var _r__default=/*#__PURE__*/_interopDefault(_r);function as(c){tt=c;}async function Mt(){if(tt)try{let c=await tt.findOne({collection:"_globals_system",where:{}});if(c){ce={appSecret:c.appSecret||null,encryptionKey:c.encryptionKey||null,sessionConfig:c.sessionMaxAge||c.maxSessionsPerUser?{maxAge:(c.sessionMaxAge||7)*24*60*60*1e3,maxSessionsPerUser:c.maxSessionsPerUser||3}:null};return}}catch{}ce={appSecret:process.env.APP_SECRET||"development-secret-key",encryptionKey:null,sessionConfig:null};}function br(){return ce?.appSecret?ce.appSecret:process.env.APP_SECRET||"development-secret-key"}function is(){if(ce?.encryptionKey)return ce.encryptionKey;let c=br();return wr__default.default.createHash("sha256").update(c).digest("hex")}function Bt(){return ce?.sessionConfig?ce.sessionConfig:{maxAge:10080*60*1e3,maxSessionsPerUser:3}}var tt,ce,rt=chunkAHSFSERC_cjs.a(()=>{tt=null,ce=null;});var Ht={};chunkAHSFSERC_cjs.b(Ht,{SESSION_CONFIG:()=>ne,clearSessionCookie:()=>nt,createSession:()=>lt,deleteSession:()=>Te,getClientIp:()=>at,getCurrentUser:()=>ee,getSession:()=>fe,getSessionIdFromRequest:()=>se,getUserSessions:()=>ve,invalidateAllUserSessions:()=>xr,refreshSession:()=>$e,setSessionCookie:()=>it,updateSessionName:()=>dt,validateSession:()=>Ce});async function ue(){if(Ie)return Ie;try{if(!(typeof window>"u"&&(typeof process<"u"&&(process.env?.CLOUDFLARE||process.env?.CF_PAGES)||globalThis.DB)))return Ie=unstorage.createStorage({driver:Sr__default.default({base:".astro/sessions"})}),Ie}catch{}return Ie=unstorage.createStorage({driver:Ir__default.default()}),Ie}function Tr(){return wr__default.default.randomUUID()}function Wt(c){let e="Unknown",t="Unknown",r="Unknown";return c.includes("Firefox")?e="Firefox":c.includes("Edg/")?e="Edge":c.includes("Chrome")?e="Chrome":c.includes("Safari")&&!c.includes("Chrome")&&(e="Safari"),c.includes("iPhone")?(t="iPhone",r="iOS"):c.includes("iPad")?(t="iPad",r="iOS"):c.includes("Mac")?(t="MacBook",r="macOS"):c.includes("Windows")?(t="Windows PC",r="Windows"):c.includes("Linux")?(t="Linux PC",r="Linux"):c.includes("Android")&&(t="Android Phone",r="Android"),{browser:e,device:t,platform:r}}function vr(c){if(!c?.userAgent)return "Session";let{browser:e,device:t}=Wt(c.userAgent);return `${t} - ${e}`}function se(c){let e=c.headers.get("Cookie");return e&&Object.fromEntries(e.split("; ").map(r=>r.split("=")))[st]||null}function at(c){let e=c.headers.get("x-forwarded-for");return e?e.split(",")[0].trim():c.headers.get("x-real-ip")||"unknown"}function it(c,e){let r=process.env.NODE_ENV==="production"?"Secure; ":"",a=new Headers(c.headers);return a.append("Set-Cookie",`${st}=${e}; HttpOnly; Path=/; Max-Age=${ne.absoluteMaxAge/1e3}; SameSite=Strict; ${r}`),new Response(c.body,{status:c.status,statusText:c.statusText,headers:a})}function nt(c){let t=process.env.NODE_ENV==="production"?"Secure; ":"",r=new Headers(c.headers);return r.append("Set-Cookie",`${st}=; HttpOnly; Path=/; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=Strict; ${t}`),new Response(c.body,{status:c.status,statusText:c.statusText,headers:r})}async function _e(c){return await(await ue()).getItem(`user:${c}`)||[]}async function ot(c,e){let t=await ue();e.length>0?await t.setItem(`user:${c}`,e):await t.removeItem(`user:${c}`);}async function lt(c,e){let t=await ue(),r=await _e(c.id);for(;r.length>=ne.maxSessionsPerUser;){let S=r.shift();S&&await t.removeItem(`session:${S}`);}let a=Tr(),d=Date.now(),l=e?.headers.get("user-agent"),u=e?at(e):"unknown",f=l?{userAgent:l,ip:u,...Wt(l)}:{ip:u},y={id:a,userId:c.id,email:c.email,role:c.role,tenantId:c.tenantId,permissions:c.permissions,createdAt:d,expiresAt:d+ne.absoluteMaxAge,lastActivityAt:d,deviceInfo:f,sessionName:vr(f)};return await t.setItem(`session:${a}`,y,{ttl:Math.floor(ne.absoluteMaxAge/1e3)}),r.push(a),await ot(c.id,r),a}async function fe(c){return await(await ue()).getItem(`session:${c}`)||null}async function Ce(c){let e=await fe(c);return e?e.expiresAt<Date.now()?(await Te(c),{valid:false,reason:"Session expired"}):{valid:true}:{valid:false,reason:"Session not found"}}async function $e(c,e){let t=await ue(),r=await fe(c);if(!r)return null;let a=Date.now(),d=r.expiresAt-a,l=r.deviceInfo;if(e){let y=at(e);y!==r.deviceInfo?.ip&&(l={...r.deviceInfo,ip:y});}let u={...r,lastActivityAt:a,expiresAt:d<ne.refreshThreshold?a+ne.absoluteMaxAge:r.expiresAt,deviceInfo:l},f=d<ne.refreshThreshold?ne.absoluteMaxAge:void 0;return await t.setItem(`session:${c}`,u,f?{ttl:Math.floor(f/1e3)}:void 0),u}async function Te(c){let e=await ue(),t=await fe(c);if(t){let a=(await _e(t.userId)).filter(d=>d!==c);await ot(t.userId,a);}await e.removeItem(`session:${c}`),await e.removeItem(`activity:${c}`);}async function xr(c){let e=await _e(c),t=await ue();for(let r of e)await t.removeItem(`session:${r}`),await t.removeItem(`activity:${r}`);await ot(c,[]);}async function ve(c,e){let t=await _e(c),r=[];for(let a of t){let d=await fe(a);d&&r.push({id:d.id,sessionName:d.sessionName||"Session",deviceInfo:d.deviceInfo,createdAt:d.createdAt,lastActivityAt:d.lastActivityAt,currentSession:d.id===e});}return r.sort((a,d)=>d.lastActivityAt-a.lastActivityAt),r}async function dt(c,e){let t=await fe(c);return t?(await(await ue()).setItem(`session:${c}`,{...t,sessionName:e}),true):false}async function ee(c){let e=se(c);if(!e||!(await Ce(e)).valid)return null;let r=await fe(e);return r?(await $e(e,c),r):null}var zt,ne,st,Ie,Ne=chunkAHSFSERC_cjs.a(()=>{rt();zt=Bt(),ne={absoluteMaxAge:zt.maxAge,maxSessionsPerUser:zt.maxSessionsPerUser,refreshThreshold:300*1e3,activityDebounce:30*1e3,pollInterval:30*1e3},st="kyro-session",Ie=null;});function ge(c,e){for(let t of c){if(t.name===e)return t;if(t.type==="group"||t.type==="array"){let r=ge(t.fields||[],e);if(r)return r}if(t.type==="blocks")for(let r of t.blocks||[]){let a=ge(r.fields||[],e);if(a)return a}if(t.type==="tabs")for(let r of t.tabs||[]){let a=ge(r.fields||[],e);if(a)return a}if(t.type==="collapsible"||t.type==="row"){let r=ge(t.fields||[],e);if(r)return r}}return null}Ne();function Xt(c){let{db:t,userLookup:r}=c;return async function(d){let l=chunkNY47CFVP_cjs.f(d);if(l&&t){let f=await chunkNY47CFVP_cjs.e(l,t,r);if(f.valid&&f.user)return {user:f.user,tenantContext:Vt(f.user),apiKeyContext:chunkNY47CFVP_cjs.g(f),status:200,authType:"apikey"};if(f.error)return {status:401,error:f.error}}let u=se(d);if(u)try{let f=await Ce(u);if(!f.valid)return {status:401,error:f.reason||"Session invalid"};let y=await ee(d);if(y){let S=r?await r(y.userId):null;if(S)return {user:S,tenantContext:Vt(S),status:200,authType:"session"}}}catch(f){console.error("Session validation error:",f);}return {status:401,error:"Authentication required"}}}function Vt(c){return {tenantId:c.tenantId||"default",userId:c.id||"anonymous",role:c.role||"guest",roles:[c.role||"guest"],permissions:[],isSuperAdmin:c.role==="super_admin"}}rt();var Oe=class{storage=new Map;userStorage=new Map;limits;userLimits;constructor(e,t){this.limits={...Rr,...e},this.userLimits=t||{"user:api":{window:6e4,max:500},"user:write":{window:36e5,max:100}};}getKey(e,t){return `${e}:${t}`}getUserKey(e,t,r){return `user:${e}:${t}:${r}`}cleanupOldEntries(e,t){let a=Date.now()-t;for(;e.length>0&&e[0].timestamp<a;)e.shift();}async check(e,t){let r=this.limits[e]||this.limits["api:general"],a=this.getKey(e,t),d=this.storage.get(a);d||(d=[],this.storage.set(a,d)),this.cleanupOldEntries(d,r.window);let l=Date.now(),u=d.reduce((f,y)=>f+y.count,0);if(d.push({timestamp:l,count:1}),u>=r.max){let y=d.reduce((S,h)=>S.timestamp<h.timestamp?S:h,d[0]).timestamp+r.window;return {allowed:false,remaining:0,resetAt:y,retryAfter:Math.ceil((y-l)/1e3)}}return {allowed:true,remaining:r.max-u-1,resetAt:l+r.window}}async checkUser(e,t,r){let a=this.userLimits[e]||this.userLimits["user:api"],d=this.userStorage.get(t),l=[];d?l=d.get(this.getKey(e,r))||[]:(this.userStorage.has(t)||this.userStorage.set(t,new Map),this.userStorage.get(t).set(this.getKey(e,r),l)),this.cleanupOldEntries(l,a.window);let u=Date.now(),f=l.reduce((y,S)=>y+S.count,0);if(l.push({timestamp:u,count:1}),f>=a.max){let S=l.reduce((h,P)=>h.timestamp<P.timestamp?h:P,l[0]).timestamp+a.window;return {allowed:false,remaining:0,resetAt:S,retryAfter:Math.ceil((S-u)/1e3)}}return {allowed:true,remaining:a.max-f-1,resetAt:u+a.window}}async reset(e,t){let r=this.getKey(e,t);this.storage.delete(r);}async resetUser(e,t,r){let a=this.userStorage.get(t);if(a){let d=this.getKey(e,r);a.delete(d);}}async getStatus(e,t){let r=this.limits[e]||this.limits["api:general"],a=this.getKey(e,t),d=this.storage.get(a);d||(d=[],this.storage.set(a,d)),this.cleanupOldEntries(d,r.window);let l=Date.now(),u=d.reduce((f,y)=>f+y.count,0);return {count:u,limit:r.max,remaining:Math.max(0,r.max-u),resetAt:l+r.window}}setLimit(e,t){this.limits[e]=t;}setUserLimit(e,t){this.userLimits[e]=t;}},Rr={"auth:login":{window:9e5,max:5},"auth:register":{window:36e5,max:3},"auth:forgot":{window:36e5,max:3},"auth:reset":{window:36e5,max:5},"auth:verify":{window:36e5,max:5},"api:general":{window:6e4,max:100},"api:authenticated":{window:6e4,max:200}};var ct={retentionDays:30};var Gt=class{redis;prefix;retentionDays;constructor(e,t=30,r="kyro:audit:"){this.redis=e,this.prefix=r,this.retentionDays=t;}async log(e){let t=wr.randomBytes(16).toString("hex"),r=new Date,a={...e,id:t,timestamp:r},d=this.getKeyForDate(r),l=`${this.prefix}log:${t}`;await this.redis.hset(l,this.serializeLog(a)),await this.redis.expire(l,this.retentionDays*24*60*60+3600),await this.redis.zadd(d,r.getTime(),t),await this.redis.expire(d,this.retentionDays*24*60*60+3600);let u=e.userId?`${this.prefix}user:${e.userId}`:null;return u&&(await this.redis.zadd(u,r.getTime(),t),await this.redis.expire(u,this.retentionDays*24*60*60+3600)),t}async get(e){let t=`${this.prefix}log:${e}`,r=await this.redis.hgetall(t);return !r||Object.keys(r).length===0?null:this.deserializeLog(r)}async query(e={}){let{limit:t=50,offset:r=0}=e,a=[];if(e.userId)a.push(`${this.prefix}user:${e.userId}`);else if(e.startDate||e.endDate)a=this.getKeysForDateRange(e.startDate,e.endDate);else {let f=new Date;a=this.getKeysForDateRange(new Date(f.getTime()-this.retentionDays*24*60*60*1e3),f);}let d=[];for(let f of a){let y=await this.redis.zrange(f,0,-1,"WITHSCORES");for(let S=0;S<y.length;S+=2)d.push([y[S],parseInt(y[S+1],10)]);}d.sort((f,y)=>y[1]-f[1]);let l=d.length;d=d.slice(r,r+t);let u=[];for(let[f]of d){let y=await this.get(f);y&&this.matchesFilter(y,e)&&u.push(y);}return {logs:u,total:l}}async getRecent(e=50){let t=[],r=new Date,a=this.getKeysForDateRange(new Date(r.getTime()-10080*60*1e3),r),d=[];for(let l of a){let u=await this.redis.zrange(l,0,-1,"WITHSCORES");for(let f=0;f<u.length;f+=2)d.push([u[f],parseInt(u[f+1],10)]);}d.sort((l,u)=>u[1]-l[1]);for(let[l]of d.slice(0,e)){let u=await this.get(l);u&&t.push(u);}return t}async getUserActivity(e,t=50){let r=`${this.prefix}user:${e}`,a=await this.redis.zrange(r,0,t-1),d=[];for(let l of a){let u=await this.get(l);u&&d.push(u);}return d}async getStats(e,t){let r=this.getKeysForDateRange(e||new Date(Date.now()-2592e6),t||new Date),a={},d=0,l=0,u=0,f=new Set;for(let y of r){let S=await this.redis.zrange(y,0,-1);for(let h of S){let P=await this.get(h);P&&(d++,a[P.action]=(a[P.action]||0)+1,P.success&&u++,P.action==="login_failed"&&l++,P.userId&&f.add(P.userId));}}return {totalEvents:d,byAction:a,successRate:d>0?u/d:1,failedLogins:l,uniqueUsers:f}}async cleanup(){let e=Date.now()-this.retentionDays*24*60*60*1e3,t=await this.redis.keys(`${this.prefix}date:*`),r=0;for(let a of t){let d=await this.redis.zrangebyscore(a,0,e);for(let l of d)await this.redis.del(`${this.prefix}log:${l}`),r++;await this.redis.zremrangebyscore(a,0,e);}return r}getKeyForDate(e){let t=e.getFullYear(),r=String(e.getMonth()+1).padStart(2,"0"),a=String(e.getDate()).padStart(2,"0");return `${this.prefix}date:${t}-${r}-${a}`}getKeysForDateRange(e,t){let r=[],a=e||new Date(Date.now()-this.retentionDays*24*60*60*1e3),d=t||new Date,l=new Date(a);for(;l<=d;)r.push(this.getKeyForDate(l)),l.setDate(l.getDate()+1);return r}matchesFilter(e,t){return !(t.action&&!(Array.isArray(t.action)?t.action:[t.action]).includes(e.action)||t.resource&&e.resource!==t.resource||t.resourceId&&e.resourceId!==t.resourceId||t.success!==void 0&&e.success!==t.success)}serializeLog(e){let t={id:e.id,timestamp:new Date(e.timestamp).toISOString(),action:e.action,resource:e.resource,success:e.success?"1":"0"};return e.userId&&(t.userId=e.userId),e.userEmail&&(t.userEmail=e.userEmail),e.role&&(t.role=e.role),e.resourceId&&(t.resourceId=e.resourceId),e.ipAddress&&(t.ipAddress=e.ipAddress),e.userAgent&&(t.userAgent=e.userAgent),e.error&&(t.error=e.error),e.changes&&(t.changes=JSON.stringify(e.changes)),e.metadata&&(t.metadata=JSON.stringify(e.metadata)),t}deserializeLog(e){return {id:e.id,timestamp:new Date(e.timestamp),action:e.action,userId:e.userId,userEmail:e.userEmail,role:e.role,resource:e.resource,resourceId:e.resourceId,ipAddress:e.ipAddress,userAgent:e.userAgent,success:e.success==="1",error:e.error,changes:e.changes?JSON.parse(e.changes):void 0,metadata:e.metadata?JSON.parse(e.metadata):void 0}}};function As(c){return {ipAddress:c.headers.get("x-forwarded-for")?.split(",")[0]?.trim()||c.headers.get("x-real-ip")||"unknown",userAgent:c.headers.get("user-agent")||"unknown"}}var Yt=class{logs=[];retentionDays;constructor(e=ct.retentionDays){this.retentionDays=e;}async log(e){let t=wr.randomBytes(16).toString("hex"),a={...e,id:t,timestamp:new Date};return this.logs.push(a),this.cleanupOldLogs(),t}async get(e){return this.logs.find(t=>t.id===e)||null}async query(e={}){let{limit:t=50,offset:r=0}=e,a=[...this.logs];if(e.userId&&(a=a.filter(y=>y.userId===e.userId)),e.action){let y=Array.isArray(e.action)?e.action:[e.action];a=a.filter(S=>y.includes(S.action));}e.resource&&(a=a.filter(y=>y.resource===e.resource)),e.resourceId&&(a=a.filter(y=>y.resourceId===e.resourceId)),e.success!==void 0&&(a=a.filter(y=>y.success===e.success));let d=e.startDate,l=e.endDate;d!==void 0&&(a=a.filter(y=>y.timestamp>=d)),l!==void 0&&(a=a.filter(y=>y.timestamp<=l)),a.sort((y,S)=>S.timestamp.getTime()-y.timestamp.getTime());let u=a.length;return {logs:a.slice(r,r+t),total:u}}async getRecent(e=50){let t=new Date(Date.now()-6048e5);return this.logs.filter(a=>a.timestamp>=t).sort((a,d)=>d.timestamp.getTime()-a.timestamp.getTime()).slice(0,e)}async getUserActivity(e,t=50){return this.logs.filter(a=>a.userId===e).sort((a,d)=>d.timestamp.getTime()-a.timestamp.getTime()).slice(0,t)}async getStats(e,t){let r=e||new Date(Date.now()-2592e6),a=t||new Date,d=this.logs.filter(h=>h.timestamp>=r&&h.timestamp<=a),l={},u=0,f=0,y=0,S=new Set;for(let h of d){u++;let P=h.action;l[P]=(l[P]||0)+1,h.success&&y++,h.action==="login_failed"&&f++,h.userId&&S.add(h.userId);}return {totalEvents:u,byAction:l,successRate:u>0?y/u:1,failedLogins:f,uniqueUsers:S}}async cleanup(){let e=new Date(Date.now()-this.retentionDays*24*60*60*1e3),t=this.logs.length;return this.logs=this.logs.filter(r=>r.timestamp>=e),t-this.logs.length}cleanupOldLogs(){let e=new Date(Date.now()-this.retentionDays*24*60*60*1e3);this.logs.length;this.logs=this.logs.filter(r=>r.timestamp>=e);}};Ne();var Me=class{authAdapter;email;passwordPolicy;lockout;rateLimiter;auditLogger;baseUrl;emailVerificationRequired;constructor(e){this.authAdapter=e.redis,this.email=e.email,this.passwordPolicy=e.passwordPolicy||new chunkBGX27ZRG_cjs.l,this.lockout=e.lockout,this.rateLimiter=e.rateLimiter,this.auditLogger=e.auditLogger,this.baseUrl=e.baseUrl||"http://localhost:4321",this.emailVerificationRequired=e.emailVerificationRequired??true;}getBaseUrl(e){if(e)try{let t=e.headers.get("x-forwarded-proto")||(e.url.startsWith("https")?"https":"http"),r=e.headers.get("x-forwarded-host")||e.headers.get("host");return r?`${t}://${r}`:new URL(e.url).origin}catch{}return process.env.KYRO_BASE_URL||process.env.SERVER_URL||process.env.PUBLIC_URL||process.env.SITE_URL||this.baseUrl||"http://localhost:4321"}async register(e){let{ipAddress:t,userAgent:r}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let a=await this.rateLimiter.check("auth:register",t);if(!a.allowed)return this.rateLimitResponse(a)}try{let a=await e.json();if(!a.email||!a.password)return this.errorResponse("Email and password are required",400);if(a.password!==a.confirmPassword)return this.errorResponse("Passwords do not match",400);let d=this.passwordPolicy.validate(a.password);if(!d.valid)return this.errorResponse(d.errors.join(". "),400);let l=await this.authAdapter.findUserByEmail(a.email);if(l){if(!l.emailVerified&&this.emailVerificationRequired&&this.email){let y=(await this.authAdapter.createEmailVerificationToken?.(l.id))?.token||wr.randomBytes(32).toString("hex"),h=`${this.getBaseUrl(e)}/admin/auth/verify-email?token=${y}`,P=this.email.getTemplates().verifyEmail(h,a.email);return await this.email.send({to:a.email,...P}),this.jsonResponse({success:!0,message:"An unverified account already exists with this email. We have resent the confirmation link to your inbox.",requiresVerification:!0},200)}return this.errorResponse("Email already registered",400)}let u=await this.authAdapter.createUser({email:a.email,password:a.password,role:a.role||"customer",tenantId:a.tenantId});if(this.emailVerificationRequired&&this.email){let f=wr.randomBytes(32).toString("hex"),S=`${this.getBaseUrl(e)}/admin/auth/verify-email?token=${f}`;await this.authAdapter.createSession(u.id,{ipAddress:t,userAgent:r});let h=this.email.getTemplates().verifyEmail(S,a.email);await this.email.send({to:a.email,...h});}return this.auditLogger&&await this.auditLogger.log({action:"register",userId:u.id,userEmail:u.email,resource:"auth",ipAddress:t,userAgent:r,success:!0}),this.jsonResponse({success:!0,message:"Registration successful",user:this.sanitizeUser(u),requiresVerification:this.emailVerificationRequired&&!!this.email},201)}catch(a){return console.error("[AuthRoutes.register] Registration error:",a),this.errorResponse("Registration failed",500)}}async login(e){let{ipAddress:t,userAgent:r}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let a=await this.rateLimiter.check("auth:login",t);if(!a.allowed)return this.rateLimitResponse(a)}try{let a=await e.json();if(!a.email||!a.password)return this.errorResponse("Email and password are required",400);let d=await this.authAdapter.findUserByEmail(a.email);if(!d)return await this.recordFailedLogin(t,r),this.errorResponse("Invalid credentials",401);if(d.locked)return this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:d.id,userEmail:d.email,resource:"auth",ipAddress:t,userAgent:r,success:!1,error:"Account locked"}),this.errorResponse("Account locked. Contact an administrator.",403);if(this.lockout){let S=await this.lockout.checkLockout(d.id);if(S.locked)return this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:d.id,userEmail:d.email,resource:"auth",ipAddress:t,userAgent:r,success:!1,error:"Account locked"}),this.errorResponse(`Account locked. Try again in ${Math.ceil((S.lockedUntil.getTime()-Date.now())/6e4)} minutes`,423)}let l=await this.authAdapter.verifyPassword(a.email,a.password);if(!l)return await this.recordFailedLogin(t,r,d.id,d.email),this.errorResponse("Invalid credentials",401);if(this.emailVerificationRequired&&l.emailVerified===!1){if(this.email){let h=(await this.authAdapter.createEmailVerificationToken?.(l.id))?.token||wr.randomBytes(32).toString("hex"),$=`${this.getBaseUrl(e)}/admin/auth/verify-email?token=${h}`,E=this.email.getTemplates().verifyEmail($,l.email);await this.email.send({to:l.email,...E});}return this.errorResponse("Your email address is not verified yet. We have sent a new confirmation link to your email inbox.",403)}this.lockout&&await this.lockout.resetAttempts(d.id),this.auditLogger&&await this.auditLogger.log({action:"login",userId:d.id,userEmail:d.email,role:d.role,resource:"auth",ipAddress:t,userAgent:r,success:!0}),await this.authAdapter.updateUser(d.id,{lastLogin:new Date().toISOString()});let u=await lt({id:d.id,email:d.email,role:d.role,tenantId:d.tenantId}),f={success:!0,user:this.sanitizeUser(d)},y=this.jsonResponse(f);return it(y,u)}catch(a){return console.error("[Auth] Login error:",a),this.errorResponse("Login failed",500)}}async logout(e){let t=se(e);if(!t)return this.errorResponse("No session to logout",401);let{ipAddress:r,userAgent:a}=chunkHVXO3OFB_cjs.a(e);try{let d=await ee(e);d&&(await Te(t),this.auditLogger&&await this.auditLogger.log({action:"logout",userId:d.userId,userEmail:d.email,resource:"auth",ipAddress:r,userAgent:a,success:!0}));let l=this.jsonResponse({success:!0,message:"Logged out successfully"});return nt(l)}catch{return this.errorResponse("Logout failed",500)}}async refresh(e){try{let t=se(e);if(!t)return this.errorResponse("Not authenticated",401);let r=await $e(t,e);return r?this.jsonResponse({success:!0,expiresAt:r.expiresAt}):this.errorResponse("Session not found",404)}catch(t){return console.error("[Auth] Session refresh error:",t),this.errorResponse("Session refresh failed",500)}}async me(e){let t=await ee(e);return t?this.jsonResponse({success:true,user:{id:t.userId,email:t.email,role:t.role,tenantId:t.tenantId}}):this.errorResponse("Not authenticated",401)}async changePassword(e){let t=await ee(e);if(!t)return this.errorResponse("Not authenticated",401);let{ipAddress:r,userAgent:a}=chunkHVXO3OFB_cjs.a(e);try{let d=await e.json(),{currentPassword:l,newPassword:u,confirmPassword:f}=d;if(!l||!u)return this.errorResponse("Current and new password required",400);if(u!==f)return this.errorResponse("Passwords do not match",400);let y=this.passwordPolicy.validate(u);if(!y.valid)return this.errorResponse(y.errors.join(". "),400);let S=await this.authAdapter.findUserById(t.userId);if(!S)return this.errorResponse("User not found",404);if(!(S.passwordHash?await this.authAdapter.verifyPassword(l,S.passwordHash):!1))return this.errorResponse("Current password is incorrect",401);let P=await this.authAdapter.getPasswordHistory?.(S.id,5);if(await this.authAdapter.isPasswordInHistory?.(u,S.id,5))return this.errorResponse("Password was recently used. Please choose a different password",400);let E=await this.authAdapter.hashPassword(u);if(S.passwordHash&&await this.authAdapter.addPasswordToHistory?.(S.id,S.passwordHash),await this.authAdapter.updateUser(S.id,{passwordHash:E}),await this.authAdapter.deleteUserSessions(S.id),this.email&&this.email.getTemplates){let j=this.email.getTemplates().passwordChanged(S.email);await this.email.send({to:S.email,...j});}return this.auditLogger&&await this.auditLogger.log({action:"password_change",userId:S.id,userEmail:S.email,resource:"auth",ipAddress:r,userAgent:a,success:!0}),this.jsonResponse({success:!0,message:"Password changed successfully"})}catch{return this.errorResponse("Password change failed",500)}}async forgotPassword(e){let{ipAddress:t,userAgent:r}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let a=await this.rateLimiter.check("auth:forgot",t);if(!a.allowed)return this.rateLimitResponse(a)}try{let a=await e.json(),{email:d}=a;if(!d)return this.errorResponse("Email required",400);let l=await this.authAdapter.findUserByEmail(d);if(!l)return this.jsonResponse({success:!0,message:"If the email exists, a reset link has been sent"});if(this.email){let u=wr.randomBytes(32).toString("hex");if(this.authAdapter.createPasswordResetToken){let h=await this.authAdapter.createPasswordResetToken(l.email);h.token&&(u=h.token);}let y=`${this.getBaseUrl(e)}/admin/auth/reset-password?token=${u}`,S=this.email.getTemplates().resetPassword(y,l.email);await this.email.send({to:l.email,...S});}return this.auditLogger&&await this.auditLogger.log({action:"password_reset",userId:l.id,userEmail:l.email,resource:"auth",ipAddress:t,userAgent:r,success:!0}),this.jsonResponse({success:!0,message:"If the email exists, a reset link has been sent"})}catch{return this.errorResponse("Password reset request failed",500)}}async resetPassword(e){let{ipAddress:t,userAgent:r}=chunkHVXO3OFB_cjs.a(e);if(this.rateLimiter){let a=await this.rateLimiter.check("auth:reset",t);if(!a.allowed)return this.rateLimitResponse(a)}try{let a=await e.json(),{token:d,newPassword:l,confirmPassword:u}=a;if(!d||!l)return this.errorResponse("Reset token and new password are required",400);if(l!==u)return this.errorResponse("Passwords do not match",400);let f=this.passwordPolicy.validate(l);if(!f.valid)return this.errorResponse(f.errors.join(". "),400);if(this.authAdapter.resetPasswordWithToken){let y=await this.authAdapter.resetPasswordWithToken(d,l);if(!y.success)return this.errorResponse(y.error||"Password reset failed or token expired",400)}return this.jsonResponse({success:!0,message:"Password reset successful. You can now log in with your new password."})}catch(a){return console.error("[AuthRoutes.resetPassword] Error:",a),this.errorResponse("Password reset failed",500)}}async verifyEmail(e){let r=new URL(e.url).searchParams.get("token");if(!r)return this.errorResponse("Verification token required",400);try{if(this.authAdapter.verifyEmailToken){let a=await this.authAdapter.verifyEmailToken(r);if(!a.success)return this.errorResponse(a.error||"Invalid or expired verification token",400);if(a.userId&&this.email){let d=await this.authAdapter.findUserById(a.userId);if(d){let l=this.email.getTemplates().welcome(d.email);await this.email.send({to:d.email,...l});}}}return this.jsonResponse({success:!0,message:"Email address verified successfully"})}catch(a){return console.error("[AuthRoutes.verifyEmail] Error:",a),this.errorResponse("Email verification failed",500)}}async recordFailedLogin(e,t,r,a){this.lockout&&await this.lockout.recordFailedAttempt(r||e),this.auditLogger&&await this.auditLogger.log({action:"login_failed",userId:r,userEmail:a,resource:"auth",ipAddress:e,userAgent:t,success:false,error:"Invalid credentials"});}sanitizeUser(e){let{passwordHash:t,...r}=e;return r}jsonResponse(e,t=200){return new Response(JSON.stringify(e),{status:t,headers:{"Content-Type":"application/json","Cache-Control":"no-store, no-cache, must-revalidate, max-age=0"}})}async listSessions(e){let t=await ee(e);if(!t)return this.errorResponse("Not authenticated",401);try{let r=await ve(t.userId,se(e)??void 0);return this.jsonResponse({sessions:r})}catch(r){return console.error("[AuthRoutes.listSessions] Error:",r),this.errorResponse("Failed to list sessions",500)}}async revokeSession(e,t){let r=await ee(e);if(!r)return this.errorResponse("Not authenticated",401);try{let d=(await ve(r.userId)).find(l=>l.id===t);return d?d.currentSession?this.errorResponse("Cannot revoke current session",400):(await Te(t),this.jsonResponse({success:!0,message:"Session revoked"})):this.errorResponse("Session not found",404)}catch(a){return console.error("[AuthRoutes.revokeSession] Error:",a),this.errorResponse("Failed to revoke session",500)}}async revokeOtherSessions(e){let t=await ee(e);if(!t)return this.errorResponse("Not authenticated",401);try{let r=await ve(t.userId),a=se(e);for(let d of r)d.currentSession||await Te(d.id);return this.jsonResponse({success:!0,message:"Other sessions revoked"})}catch(r){return console.error("[AuthRoutes.revokeOtherSessions] Error:",r),this.errorResponse("Failed to revoke sessions",500)}}async renameSession(e,t){let r=await ee(e);if(!r)return this.errorResponse("Not authenticated",401);try{if(!(await ve(r.userId)).find(f=>f.id===t))return this.errorResponse("Session not found",404);let l=await e.json(),{name:u}=l;return !u||typeof u!="string"||u.trim().length===0?this.errorResponse("Invalid session name",400):(await dt(t,u.trim()),this.jsonResponse({success:!0,message:"Session renamed"}))}catch(a){return console.error("[AuthRoutes.renameSession] Error:",a),this.errorResponse("Failed to rename session",500)}}async refreshSession(e){let t=se(e);if(!t)return this.errorResponse("No session",401);try{let r=await(Ne(),chunkAHSFSERC_cjs.c(Ht)).refreshSession(t,e);return r?this.jsonResponse({success:!0,expiresAt:r.expiresAt}):this.errorResponse("Session not found",404)}catch(r){return console.error("[AuthRoutes.refreshSession] Error:",r),this.errorResponse("Failed to refresh session",500)}}errorResponse(e,t){return new Response(JSON.stringify({success:false,error:e}),{status:t,headers:{"Content-Type":"application/json"}})}async rateLimitResponse(e){return new Response(JSON.stringify({success:false,error:"Too many requests",retryAfter:e.retryAfter}),{status:429,headers:{"Content-Type":"application/json","Retry-After":String(e.retryAfter||60)}})}};var Be=class{db;sessionTTL;constructor(e){this.db=e.db?.client||e.db,this.sessionTTL=e.sessionTTL||86400;}async executeSql(e,t=[]){try{if(this.db&&typeof this.db.prepare=="function"){let r=this.db.prepare(e);return (await(t.length>0?r.bind(...t):r).all()).results||[]}else if(this.db&&typeof this.db.run=="function"){let r=await this.db.run(drizzleOrm.sql.raw(this.replaceParams(e,t)));return r.rows||r.results||(Array.isArray(r)?r:[])}else if(this.db&&typeof this.db.all=="function"){let r=await this.db.all(drizzleOrm.sql.raw(this.replaceParams(e,t)));return Array.isArray(r)?r:r.results||[]}else if(this.db&&typeof this.db.execute=="function"){let r=await this.db.execute(drizzleOrm.sql.raw(this.replaceParams(e,t)));return r.rows||r.results||(Array.isArray(r)?r:[])}}catch(r){console.warn("[D1AuthAdapter] SQL execution note:",r.message);}return []}async getOne(e,t=[]){try{if(this.db&&typeof this.db.prepare=="function"){let a=this.db.prepare(e);return await(t.length>0?a.bind(...t):a).first()||null}}catch{}let r=await this.executeSql(e,t);return r.length>0?r[0]:null}replaceParams(e,t){let r=0;return e.replace(/\?/g,()=>{let a=t[r++];return a==null?"NULL":typeof a=="number"||typeof a=="boolean"?String(a):`'${String(a).replace(/'/g,"''")}'`})}async connect(){await this.executeSql(`
-      CREATE TABLE IF NOT EXISTS users (
-        id TEXT PRIMARY KEY,
-        email TEXT UNIQUE NOT NULL,
-        password_hash TEXT,
-        name TEXT,
-        role TEXT DEFAULT 'customer',
-        avatar TEXT,
-        tenant_id TEXT,
-        email_verified INTEGER DEFAULT 1,
-        locked INTEGER DEFAULT 0,
-        last_login TEXT,
-        failed_login_attempts INTEGER DEFAULT 0,
-        metadata TEXT,
-        created_at TEXT DEFAULT CURRENT_TIMESTAMP,
-        updated_at TEXT DEFAULT CURRENT_TIMESTAMP
-      );
-    `),await this.executeSql(`
-      CREATE TABLE IF NOT EXISTS sessions (
-        id TEXT PRIMARY KEY,
-        user_id TEXT NOT NULL,
-        token TEXT UNIQUE NOT NULL,
-        refresh_token TEXT,
-        ip_address TEXT,
-        user_agent TEXT,
-        expires_at TEXT NOT NULL,
-        created_at TEXT DEFAULT CURRENT_TIMESTAMP
-      );
-    `),await this.executeSql(`
-      CREATE TABLE IF NOT EXISTS audit_logs (
-        id TEXT PRIMARY KEY,
-        action TEXT NOT NULL,
-        user_id TEXT,
-        user_email TEXT,
-        role TEXT,
-        resource TEXT NOT NULL,
-        details TEXT,
-        ip_address TEXT,
-        status TEXT,
-        timestamp TEXT DEFAULT CURRENT_TIMESTAMP
-      );
-    `);}async hashPassword(e){return Jt__default.default.hashSync(e,10)}async verifyPassword(e,t){let r=await this.findUserByEmail(e);return !r||!r.passwordHash?null:Jt__default.default.compareSync(t,r.passwordHash)?r:null}async findUserByEmail(e){let t=await this.getOne("SELECT * FROM users WHERE LOWER(email) = LOWER(?) LIMIT 1",[e]);return t?this.mapUser(t):null}async findUserById(e){let t=await this.getOne("SELECT * FROM users WHERE id = ? LIMIT 1",[e]);return t?this.mapUser(t):null}async createUser(e){let t=`user-${Date.now()}-${Math.random().toString(36).substring(2,9)}`,r=await this.hashPassword(e.password),a=e.email.toLowerCase(),d=e.role||"customer",l=new Date().toISOString();await this.executeSql("INSERT INTO users (id, email, password_hash, name, role, avatar, tenant_id, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)",[t,a,r,e.name||null,d,e.avatar||null,e.tenantId||null,l,l]);let u=await this.findUserById(t);if(!u)throw new Error("Failed to create user in D1");return u}async updateUser(e,t){if(!await this.findUserById(e))return null;let a=["updated_at = ?"],d=[new Date().toISOString()];return t.email&&(a.push("email = ?"),d.push(t.email.toLowerCase())),t.name!==void 0&&(a.push("name = ?"),d.push(t.name)),t.password&&(a.push("password_hash = ?"),d.push(await this.hashPassword(t.password))),t.passwordHash&&(a.push("password_hash = ?"),d.push(t.passwordHash)),t.role&&(a.push("role = ?"),d.push(t.role)),t.avatar!==void 0&&(a.push("avatar = ?"),d.push(t.avatar)),t.tenantId!==void 0&&(a.push("tenant_id = ?"),d.push(t.tenantId)),d.push(e),await this.executeSql(`UPDATE users SET ${a.join(", ")} WHERE id = ?`,d),this.findUserById(e)}async deleteUser(e){return await this.executeSql("DELETE FROM users WHERE id = ?",[e]),true}async createSession(e,t){let r=`sess-${Date.now()}-${Math.random().toString(36).substring(2,9)}`,a=`token-${Date.now()}-${Math.random().toString(36).substring(2,16)}`,d=new Date(Date.now()+this.sessionTTL*1e3).toISOString(),l=new Date().toISOString();return await this.executeSql("INSERT INTO sessions (id, user_id, token, expires_at, created_at, ip_address, user_agent) VALUES (?, ?, ?, ?, ?, ?, ?)",[r,e,a,d,l,t?.ipAddress||null,t?.userAgent||null]),{id:r,userId:e,token:a,expiresAt:d,createdAt:l,ipAddress:t?.ipAddress,userAgent:t?.userAgent}}async findSessionByToken(e){let t=await this.getOne("SELECT * FROM sessions WHERE token = ? LIMIT 1",[e]);return t?{id:t.id,userId:t.user_id||t.userId,token:t.token,expiresAt:t.expires_at||t.expiresAt,createdAt:t.created_at||t.createdAt,ipAddress:t.ip_address||t.ipAddress,userAgent:t.user_agent||t.userAgent}:null}async findSessionByRefreshToken(e){let t=await this.getOne("SELECT * FROM sessions WHERE refresh_token = ? LIMIT 1",[e]);return t?{id:t.id,userId:t.user_id||t.userId,token:t.token,refreshToken:t.refresh_token,expiresAt:t.expires_at||t.expiresAt,createdAt:t.created_at||t.createdAt}:null}async deleteSession(e){return await this.executeSql("DELETE FROM sessions WHERE id = ?",[e]),true}async deleteUserSessions(e){return await this.executeSql("DELETE FROM sessions WHERE user_id = ?",[e]),1}async hasAnyUsers(){return ((await this.getOne("SELECT COUNT(*) as count FROM users"))?.count||0)>0}async createEmailVerificationToken(e){return {token:`verify-${Date.now()}`,expiresAt:new Date(Date.now()+864e5)}}async verifyEmailToken(e){return {success:true}}async createPasswordResetToken(e){return {token:`reset-${Date.now()}`,expiresAt:new Date(Date.now()+36e5)}}async resetPasswordWithToken(e,t){return {success:true}}async findAuditLogs(e){let r=(await this.executeSql("SELECT * FROM audit_logs ORDER BY timestamp DESC LIMIT ?",[e.limit||50])).map(a=>({id:a.id,action:a.action,userId:a.user_id||a.userId,userEmail:a.user_email||a.userEmail,role:a.role,resource:a.resource,resourceId:a.resource_id||a.resourceId,ipAddress:a.ip_address||a.ipAddress,userAgent:a.user_agent||a.userAgent,success:!!(a.success??true),error:a.error||void 0,metadata:a.details?JSON.parse(a.details):void 0,timestamp:new Date(a.timestamp||Date.now())}));return {logs:r,total:r.length}}async createAuditLog(e){let t=`audit-${Date.now()}-${Math.random().toString(36).substring(2,9)}`,r=new Date;return await this.executeSql("INSERT INTO audit_logs (id, action, user_id, user_email, role, resource, details, ip_address, status, timestamp) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)",[t,e.action,e.userId||null,e.userEmail||null,e.role||null,e.resource,e.metadata?JSON.stringify(e.metadata):null,e.ipAddress||null,e.success?"success":"failed",r.toISOString()]),{id:t,timestamp:r,...e}}mapUser(e){return {id:e.id,email:e.email,name:e.name||void 0,passwordHash:e.password_hash||e.passwordHash||void 0,role:e.role,avatar:e.avatar||void 0,tenantId:e.tenant_id||e.tenantId||void 0,emailVerified:!!(e.email_verified||e.emailVerified),locked:!!e.locked,lastLogin:e.last_login||e.lastLogin||void 0,failedLoginAttempts:Number(e.failed_login_attempts||e.failedLoginAttempts||0),createdAt:e.created_at||e.createdAt||new Date().toISOString(),updatedAt:e.updated_at||e.updatedAt||new Date().toISOString()}}};function he(c){let{uploadDir:e=We.join(_r__default.default.cwd(),"public","uploads"),baseUrl:t="/uploads"}=c;async function r(l){fs.existsSync(l)||await promises.mkdir(l,{recursive:true});}function a(l){let u=We.extname(l).toLowerCase();return {".jpg":"image/jpeg",".jpeg":"image/jpeg",".png":"image/png",".gif":"image/gif",".webp":"image/webp",".avif":"image/avif",".svg":"image/svg+xml",".mp4":"video/mp4",".webm":"video/webm",".mov":"video/quicktime",".avi":"video/x-msvideo",".mp3":"audio/mpeg",".wav":"audio/wav",".ogg":"audio/ogg",".pdf":"application/pdf",".doc":"application/msword",".docx":"application/vnd.openxmlformats-officedocument.wordprocessingml.document",".xls":"application/vnd.ms-excel",".xlsx":"application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",".zip":"application/zip",".tar":"application/x-tar",".gz":"application/gzip",".rar":"application/vnd.rar",".7z":"application/x-7z-compressed"}[u]||"application/octet-stream"}async function d(l){try{let u=l.toString("hex",0,8);if(u.startsWith("89504e47")){let f=l.readUInt32BE(16),y=l.readUInt32BE(20);return {width:f,height:y}}if(u.startsWith("ffd8")){let f=2;for(;f<l.length&&l[f]===255;){let y=l[f+1];if(y===192||y===194){let S=l.readUInt16BE(f+5);return {width:l.readUInt16BE(f+7),height:S}}f+=2+l.readUInt16BE(f+2);}}}catch{}return {}}return ae({name:"local",displayName:"Local Storage",supportsDynamicResize:true,async upload(l,u){await r(e);let f=Buffer.from(await l.arrayBuffer()),y=wr.createHash("md5").update(f).digest("hex"),S=We.extname(l.name),h=u?.filename||`${y}${S}`,P=u?.folder||"",$=P?We.join(e,P):e;await r($);let E=We.join($,h);await promises.writeFile(E,f);let j=l.type.startsWith("image/")?await d(f):{},W=t||"/uploads",V=P?`/${P}/${h}`:`/${h}`,oe=W+V;return {id:y,filename:h,originalName:l.name,mimeType:l.type||a(l.name),size:f.length,url:oe,thumbnailUrl:l.type.startsWith("image/")?oe:void 0,folder:P||void 0,provider:"local",metadata:{...j,...u?.metadata},createdAt:new Date().toISOString()}},async uploadFromUrl(l,u){let f=await fetch(l);if(!f.ok)throw new Error(`Failed to fetch file: ${f.statusText}`);let y=await f.blob(),S=f.headers.get("content-disposition"),h=u?.filename;if(!h&&S){let $=S.match(/filename[^;=\n]*=((['"]).*?\2|[^;\n]*)/);$&&(h=$[1].replace(/['"]/g,""));}h||(h=We.basename(new URL(l).pathname));let P=new File([y],h,{type:y.type||a(h)});return this.upload(P,u)},async delete(l){let u=We.join(e,l.replace(t+"/",""));try{await promises.unlink(u);}catch{}},async rename(l,u){let f=We.join(e,l.replace(t+"/","")),y=We.join(e,u);return await promises.rename(f,y),`${t}/${u}`},async list(l){let u=l?We.join(e,l):e;if(!fs.existsSync(u))return [];let f=[],y=await promises.readdir(u,{withFileTypes:true});for(let S of y)if(S.isFile()){let h=We.join(u,S.name),P=await promises.stat(h),$=`${t}${l?`/${l}`:""}/${S.name}`;f.push({id:wr.createHash("md5").update(S.name).digest("hex"),filename:S.name,originalName:S.name,mimeType:a(S.name),size:P.size,url:$,provider:"local",createdAt:P.birthtime.toISOString()});}return f},async exists(l){let u=We.join(e,l.replace(t+"/",""));return fs.existsSync(u)},async createFolder(l){let u=We.join(e,l);await promises.mkdir(u,{recursive:true});},async deleteFolder(l){let u=We.join(e,l);if(fs.existsSync(u)){let{rm:f}=await import('fs/promises');await f(u,{recursive:true,force:true});}}})}function pt(c){let e=(t,r)=>{if(!c.signKey)return t;let a=wr.createHmac("sha256",c.signKey).update(t+r.toString()).digest("hex");return r.set("s",a),t};return {name:"imgix",displayName:"Imgix",supportsDynamicResize:true,async upload(t,r){throw new Error("Imgix is a transformation service. Use another provider for uploads.")},async uploadFromUrl(t,r){let a=r?.filename||t.split("/").pop()||"file",d=await fetch(t);if(!d.ok)throw new Error(`Failed to fetch: ${d.statusText}`);let l=await d.blob();new File([l],a,{type:l.type});return {id:Buffer.from(t).toString("base64").slice(0,20),filename:a,originalName:a,mimeType:l.type,size:l.size,url:this.getImageUrl(t),thumbnailUrl:this.getImageUrl(t,{width:200,height:200,fit:"crop"}),provider:"imgix",createdAt:new Date().toISOString()}},async delete(t){},async rename(t,r){return `https://${c.domain}/${r}`},getImageUrl(t,r){let a=new URL(t),d=new URLSearchParams(a.search);c.defaultParameters&&Object.entries(c.defaultParameters).forEach(([u,f])=>{d.has(u)||d.set(u,f);}),r&&(r.width&&d.set("w",String(r.width)),r.height&&d.set("h",String(r.height)),r.quality&&d.set("q",String(r.quality)),r.format&&d.set("fm",r.format),r.fit&&d.set("fit",r.fit),r.blur&&d.set("blur",String(r.blur)),r.sharpen&&d.set("sharp",String(r.sharpen))),d.set("auto","compress,format");a.pathname+"?"+d.toString();return c.signKey&&(e(a.pathname+d.toString(),d)),`https://${c.domain}${a.pathname}${d.toString()?"?"+d.toString():""}`},async generateThumbnail(t){return this.getImageUrl(t.url,{width:200,height:200,fit:"crop"})},async list(){return []},async exists(t){try{return (await fetch(t,{method:"HEAD"})).ok}catch{return  false}},async createFolder(){},async deleteFolder(){}}}function ze(c,e){return e.cdnUrl?`${e.cdnUrl.replace(/\/$/,"")}/${c}`:`https://${e.storageZone}.b-cdn.net/${c}`}function mt(c){return c.cdnUrl?c.cdnUrl.replace(/\/$/,"")+"/":`https://${c.storageZone}.b-cdn.net/`}function gt(c){let e=`https://storage.bunnycdn.com/${c.storageZone}`,t=r=>`${c.prefix?`${c.prefix}/`:""}${r}`.replace(/\/+/g,"/");return ae({name:"bunny",displayName:"Bunny.net Storage",supportsDynamicResize:true,async upload(r,a){let d=t(`${a?.folder?`${a.folder}/`:""}${a?.filename||r.name}`),l=Buffer.from(await r.arrayBuffer()),u=await fetch(`${e}/${d}`,{method:"PUT",headers:{AccessKey:c.apiKey,"Content-Type":r.type},body:l});if(!u.ok){let f=await u.text();throw new Error(`Bunny.net upload failed: ${u.status} ${f}`)}return {id:Buffer.from(d).toString("base64url"),filename:a?.filename||r.name,originalName:r.name,mimeType:r.type,size:l.length,url:ze(d,c),thumbnailUrl:r.type.startsWith("image/")?ze(d,c):void 0,folder:a?.folder,provider:"bunny",metadata:a?.metadata,createdAt:new Date().toISOString()}},async delete(r){let a=r.replace(mt(c),""),d=await fetch(`${e}/${a}`,{method:"DELETE",headers:{AccessKey:c.apiKey}});if(!d.ok&&d.status!==404){let l=await d.text();throw new Error(`Bunny.net delete failed: ${d.status} ${l}`)}},async rename(r,a){let d=r.replace(mt(c),""),l=c.prefix?`${c.prefix}/${a}`:a,u=await fetch(`${e}/${d}`,{method:"GET",headers:{AccessKey:c.apiKey}});if(!u.ok)throw new Error("Bunny.net rename failed: could not read old file");let f=await u.arrayBuffer();return await fetch(`${e}/${l}`,{method:"PUT",headers:{AccessKey:c.apiKey,"Content-Type":u.headers.get("Content-Type")||"application/octet-stream"},body:f}),await this.delete(r),ze(l,c)},async list(r){let a=t(r||""),d=await fetch(`${e}/${a}`,{method:"GET",headers:{AccessKey:c.apiKey}});if(!d.ok){let u=await d.text();throw new Error(`Bunny.net list failed: ${d.status} ${u}`)}return (await d.json()).map(u=>({id:Buffer.from(u.ObjectName||"").toString("base64url"),filename:u.ObjectName?.split("/").pop()||"",originalName:u.ObjectName?.split("/").pop()||"",mimeType:"application/octet-stream",size:u.Length||0,url:ze(u.ObjectName||"",c),provider:"bunny",createdAt:u.LastChanged||new Date().toISOString()}))},async exists(r){let a=r.replace(mt(c),"");return (await fetch(`${e}/${a}`,{method:"HEAD",headers:{AccessKey:c.apiKey}})).ok},async createFolder(r){let a=t(`${r}/`);await fetch(`${e}/${a}`,{method:"PUT",headers:{AccessKey:c.apiKey,"Content-Length":"0"},body:""});},async deleteFolder(r){let a=t(`${r}/`);await fetch(`${e}/${a}`,{method:"DELETE",headers:{AccessKey:c.apiKey}});}})}function ft(){let c=()=>{let r=globalThis.STORAGE_BUCKET;if(!r)throw new Error("Cloudflare R2 native binding 'STORAGE_BUCKET' not found in global scope.");return r},e=r=>`/api/media/file/${r}`,t=r=>r.replace(/\/+/g,"/").replace(/^\/+/,"");return ae({name:"cloudflare_r2",displayName:"Cloudflare R2 (Native)",supportsDynamicResize:true,async upload(r,a){let d=c(),l=t(`${a?.folder?`${a.folder}/`:""}${a?.filename||r.name}`),u=await r.arrayBuffer(),f=await d.put(l,u,{httpMetadata:{contentType:r.type},customMetadata:a?.metadata||{}});return {id:Buffer.from(l).toString("base64url"),filename:a?.filename||r.name,originalName:r.name,mimeType:r.type,size:f.size,url:e(l),thumbnailUrl:r.type.startsWith("image/")?e(l):void 0,folder:a?.folder,provider:"cloudflare_r2",metadata:{...a?.metadata,etag:f.etag},createdAt:new Date().toISOString()}},async delete(r){let a=c(),d=r.replace(/^\/api\/media\/file\//,"");await a.delete(d);},async rename(r,a){let d=c(),l=r.replace(/^\/api\/media\/file\//,""),u=t(a),f=await d.get(l);if(!f)throw new Error("File not found");return await d.put(u,f.body,{httpMetadata:f.httpMetadata,customMetadata:f.customMetadata}),await d.delete(l),e(u)},async list(r){let a=c(),d=t(r||"");return (await a.list({prefix:d})).objects.map(u=>({id:Buffer.from(u.key).toString("base64url"),filename:u.key.split("/").pop()||"",originalName:u.key.split("/").pop()||"",mimeType:u.httpMetadata?.contentType||"application/octet-stream",size:u.size,url:e(u.key),provider:"cloudflare_r2",createdAt:u.uploaded.toISOString()}))},async exists(r){try{let a=c(),d=r.replace(/^\/api\/media\/file\//,"");return await a.head(d)!==null}catch{return  false}}})}var yt=class{providers=new Map;providerToPlugin=new Map;disabledPlugins=new Set;constructor(){this.registerLocal(),this.registerImgix(),this.registerBunny(),this.registerCloudflareR2(),this.registerCloudflareS3();}registerLocal(){this.register({type:"local",displayName:"Local Server",configKey:"local",configFields:[{name:"uploadDir",type:"text",label:"Upload Directory",defaultValue:"./public/uploads"},{name:"baseUrl",type:"text",label:"Base URL",defaultValue:"/uploads"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>{let t=e?.local||e,r=(t?.uploadDir||"").trim(),a;r?We__default.default.isAbsolute(r)?a=r:r.includes("/")||r.includes("\\")?a=We__default.default.resolve(process.cwd(),r):a=We__default.default.join(process.cwd(),"public",r):a=We__default.default.join(process.cwd(),"public","uploads");let d=(t?.baseUrl||"").trim(),l;return d?l=d.startsWith("/")?d:`/${d}`:l="/uploads",{uploadDir:a,baseUrl:l}},factory:e=>he(e)});}registerImgix(){this.register({type:"imgix",displayName:"Imgix",configKey:"imgix",configFields:[{name:"domain",type:"text",label:"Domain",required:true},{name:"signKey",type:"password",label:"Sign Key"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>e?.imgix||e,factory:e=>pt(e)});}registerBunny(){this.register({type:"bunny",displayName:"Bunny.net",configKey:"bunny",configFields:[{name:"storageZone",type:"text",label:"Storage Zone",required:true},{name:"apiKey",type:"password",label:"API Key",required:true},{name:"cdnUrl",type:"text",label:"CDN URL"},{name:"prefix",type:"text",label:"Path Prefix"}],extractConfig:(e,t)=>e[t]||{},extractRawConfig:e=>e?.bunny||e,factory:e=>gt(e)});}registerCloudflareR2(){this.register({type:"cloudflare_r2",displayName:"Cloudflare R2 (Native)",configKey:"cloudflareR2",configFields:[],extractConfig:()=>({}),extractRawConfig:()=>({}),factory:()=>ft()});}registerCloudflareS3(){this.register({type:"cloudflare_s3",displayName:"Cloudflare R2 (S3 Compat)",configKey:"cloudflareR2",configFields:[],extractConfig:()=>(console.warn('[StorageRegistry] "cloudflare_s3" is deprecated; use "cloudflare_r2" instead.'),{}),extractRawConfig:()=>({}),factory:()=>ft()});}register(e){if(this.providers.has(e.type)){console.warn(`[StorageRegistry] Provider "${e.type}" already registered, skipping`);return}e.pluginName&&this.providerToPlugin.set(e.type,e.pluginName),this.providers.set(e.type,e);}unregister(e){this.providers.delete(e),this.providerToPlugin.delete(e);}get(e){return this.providers.get(e)}getAll(){return Array.from(this.providers.values())}getAllAvailable(e){let t=this.getAll();return e?t.filter(r=>r.pluginName?e(r.pluginName):true):t}has(e){return this.providers.has(e)}async resolve(e,t){let r=this.providers.get(e);if(!r)throw new Error(`Unknown storage provider type: "${e}". Is the plugin that provides it enabled?`);if(r.pluginName&&this.disabledPlugins.has(r.pluginName))throw new Error(`Storage provider "${e}" is not available (plugin "${r.pluginName}" is disabled)`);let a=r.configKey||e,d=r.extractConfig(t,a);return r.factory(d)}async resolveWithConfig(e,t){let r=this.providers.get(e);if(!r)throw new Error(`Unknown storage provider type: "${e}". Is the plugin that provides it enabled?`);if(r.pluginName&&this.disabledPlugins.has(r.pluginName))throw new Error(`Storage provider "${e}" is not available (plugin "${r.pluginName}" is disabled)`);let a=r.extractRawConfig(t);return r.factory(a)}getProviderPluginName(e){return this.providerToPlugin.get(e)}getAllPluginNames(){return Array.from(new Set(this.providerToPlugin.values()))}setPluginEnabled(e,t){t?this.disabledPlugins.delete(e):this.disabledPlugins.add(e);}isPluginEnabled(e){return !this.disabledPlugins.has(e)}},ht=null;function wt(){return ht||(ht=new yt),ht}function ar(c){if(!c)return "";if(c.startsWith("pub-"))return c;let e=c.match(/pub-[a-zA-Z0-9]+/i);return e?e[0]:""}function Mr(c,e){let t=c.startsWith("/")?c.slice(1):c;if(e.cdnUrl)return `${e.cdnUrl.replace(/\/$/,"")}/${t}`;switch(e.provider){case "r2":{let r=ar(e.publicDevUrl);return r?`https://${r}.r2.dev/${t}`:`https://${e.bucket}.${e.accountId}.r2.cloudflarestorage.com/${t}`}case "gcs":return `https://storage.googleapis.com/${e.bucket}/${t}`;case "digitalocean":return `https://${e.bucket}.${e.region}.cdn.digitaloceanspaces.com/${t}`;case "backblaze":return `https://${e.bucket}.s3.backblazeb2.com/${t}`;case "wasabi":return `https://${e.bucket}.s3.wasabisys.com/${t}`;default:return `https://${e.bucket}.s3.${e.region}.amazonaws.com/${t}`}}function At(c){if(c.cdnUrl)return c.cdnUrl.replace(/\/$/,"")+"/";switch(c.provider){case "r2":{let e=ar(c.publicDevUrl);return e?`https://${e}.r2.dev/`:`https://${c.bucket}.${c.accountId}.r2.cloudflarestorage.com/`}case "gcs":return `https://storage.googleapis.com/${c.bucket}/`;case "digitalocean":return `https://${c.bucket}.${c.region}.cdn.digitaloceanspaces.com/`;case "backblaze":return `https://${c.bucket}.s3.backblazeb2.com/`;case "wasabi":return `https://${c.bucket}.s3.wasabisys.com/`;default:return `https://${c.bucket}.s3.${c.region}.amazonaws.com/`}}function Br(c){switch(c){case "r2":return "Cloudflare R2";case "gcs":return "Google Cloud Storage";case "digitalocean":return "DigitalOcean Spaces";case "backblaze":return "Backblaze B2";case "wasabi":return "Wasabi";default:return "AWS S3"}}function Kr(c){let e=new clientS3.S3Client({region:c.region||"auto",endpoint:c.endpoint,credentials:{accessKeyId:c.accessKeyId,secretAccessKey:c.secretAccessKey},forcePathStyle:true,tls:true,...c.provider==="r2"&&{requestHandler:new nodeHttpHandler.NodeHttpHandler}}),t=a=>`${c.prefix?`${c.prefix}/`:""}${a}`.replace(/\/+/g,"/"),r=a=>Mr(a,c);return ae({name:c.provider,displayName:Br(c.provider),supportsDynamicResize:true,async upload(a,d){let l=t(`${d?.folder?`${d.folder}/`:""}${d?.filename||a.name}`),u=Buffer.from(await a.arrayBuffer());await e.send(new clientS3.PutObjectCommand({Bucket:c.bucket,Key:l,Body:u,ContentType:a.type,Metadata:d?.metadata}));let f=await e.send(new clientS3.HeadObjectCommand({Bucket:c.bucket,Key:l}));return {id:Buffer.from(l).toString("base64url"),filename:d?.filename||a.name,originalName:a.name,mimeType:a.type,size:u.length,url:r(l),thumbnailUrl:a.type.startsWith("image/")?r(l):void 0,folder:d?.folder,provider:c.provider,metadata:{...d?.metadata,etag:f.ETag},createdAt:new Date().toISOString()}},async delete(a){let d=a.replace(At(c),"");await e.send(new clientS3.DeleteObjectCommand({Bucket:c.bucket,Key:d}));},async rename(a,d){let l=a.replace(At(c),""),u=c.prefix?`${c.prefix}/${d}`:d;return await e.send(new clientS3.CopyObjectCommand({Bucket:c.bucket,CopySource:`${c.bucket}/${l}`,Key:u})),await e.send(new clientS3.DeleteObjectCommand({Bucket:c.bucket,Key:l})),r(u)},async list(a){let d=t(a||"");return ((await e.send(new clientS3.ListObjectsV2Command({Bucket:c.bucket,Prefix:d}))).Contents||[]).map(u=>({id:Buffer.from(u.Key||"").toString("base64url"),filename:u.Key?.split("/").pop()||"",originalName:u.Key?.split("/").pop()||"",mimeType:"application/octet-stream",size:u.Size||0,url:r(u.Key||""),provider:c.provider,createdAt:u.LastModified?.toISOString()||new Date().toISOString()}))},async exists(a){try{let d=a.replace(At(c),"");return await e.send(new clientS3.HeadObjectCommand({Bucket:c.bucket,Key:d})),!0}catch{return  false}},async createFolder(a){let d=t(`${a}/`);await e.send(new clientS3.PutObjectCommand({Bucket:c.bucket,Key:d,Body:""}));},async deleteFolder(a){let d=t(`${a}/`),l;do{let u=await e.send(new clientS3.ListObjectsV2Command({Bucket:c.bucket,Prefix:d,ContinuationToken:l}));if(u.Contents?.length){let f=u.Contents.map(y=>({Key:y.Key}));await e.send(new clientS3.DeleteObjectsCommand({Bucket:c.bucket,Delete:{Objects:f}}));}l=u.IsTruncated?u.NextContinuationToken:void 0;}while(l);await e.send(new clientS3.DeleteObjectCommand({Bucket:c.bucket,Key:d}));}})}function zr(c){let e=()=>`https://api.cloudinary.com/v1_1/${c.cloudName}/upload`,t=async r=>{let a=await import('crypto'),d=Object.keys(r).sort().map(l=>`${l}=${r[l]}`).join("&");return a.createHash("sha256").update(d+c.apiSecret).digest("hex")};return {name:"cloudinary",displayName:"Cloudinary",supportsDynamicResize:true,async upload(r,a){let d=new FormData;if(d.append("file",r),c.uploadPreset)d.append("upload_preset",c.uploadPreset);else {let f=Math.round(Date.now()/1e3),y={timestamp:String(f)};(a?.folder||c.folder)&&(y.folder=a?.folder||c.folder||"");let S=await t(y);d.append("timestamp",String(f)),d.append("signature",S),d.append("api_key",c.apiKey);}(a?.folder||c.folder)&&d.append("folder",a?.folder||c.folder||"");let l=await fetch(e(),{method:"POST",body:d});if(!l.ok){let f=await l.json();throw new Error(`Cloudinary upload failed: ${f.error?.message||l.statusText}`)}let u=await l.json();return {id:u.public_id,filename:`${u.public_id}.${u.format}`,originalName:u.original_filename||r.name,mimeType:r.type||`image/${u.format}`,size:u.bytes,url:u.secure_url,thumbnailUrl:this.getImageUrl(u.secure_url,{width:200,height:200,fit:"crop"}),width:u.width,height:u.height,folder:a?.folder||c.folder,provider:"cloudinary",createdAt:new Date().toISOString()}},async uploadFromUrl(r,a){let d=new FormData;d.append("file",r),d.append("upload_preset","ml_default"),(a?.folder||c.folder)&&d.append("folder",a?.folder||c.folder||"");let l=await fetch(e(),{method:"POST",body:d});if(!l.ok)throw new Error("Cloudinary upload failed");let u=await l.json();return {id:u.public_id,filename:`${u.public_id}.${u.format}`,originalName:u.original_filename||r.split("/").pop()||"file",mimeType:`image/${u.format}`,size:u.bytes,url:u.secure_url,thumbnailUrl:this.getImageUrl(u.secure_url,{width:200,height:200,fit:"crop"}),width:u.width,height:u.height,provider:"cloudinary",createdAt:new Date().toISOString()}},async delete(r){try{let a=r.split("/image/upload/");if(a.length!==2){console.warn("[Cloudinary delete] Could not parse URL:",r);return}let d=a[1].replace(/^v\d+\//,"").replace(/\.[^.]+$/,""),l=Math.round(Date.now()/1e3),u={timestamp:String(l),public_id:d},f=Object.keys(u).sort().map(E=>`${E}=${u[E]}`).join("&"),S=(await import('crypto')).createHash("sha256").update(f+c.apiSecret).digest("hex"),h=`https://api.cloudinary.com/v1_1/${c.cloudName}/image/destroy`,P=new FormData;P.append("public_id",d),P.append("timestamp",String(l)),P.append("signature",S),P.append("api_key",c.apiKey);let $=await fetch(h,{method:"POST",body:P});if(!$.ok){let E=await $.json();console.warn("[Cloudinary delete] Failed:",E);}}catch(a){console.warn("[Cloudinary delete] Error:",a.message);}},async rename(r,a){let d="",l=a.replace(/\.[^.]+$/,""),u="";try{let f=r.split("/image/upload/");if(f.length!==2)return console.warn("[Cloudinary rename] Could not parse old URL:",r),r;let y=f[1],S=y.match(/^(v\d+)\//);d=S?S[1]:"";let h=y.replace(/^v\d+\//,"").replace(/\.[^.]+$/,""),P=h.split("/");u=P.length>1?P.slice(0,-1).join("/"):"";let $=a.replace(/\.[^.]+$/,"");l=u?`${u}/${$}`:$;let E=Math.round(Date.now()/1e3),j={from_public_id:h,to_public_id:l,timestamp:String(E)},W=Object.keys(j).sort().map(Z=>`${Z}=${j[Z]}`).join("&"),oe=(await import('crypto')).createHash("sha256").update(W+c.apiSecret).digest("hex"),L=new FormData;L.append("from_public_id",h),L.append("to_public_id",l),L.append("timestamp",String(E)),L.append("signature",oe),L.append("api_key",c.apiKey);let pe=await fetch(`https://api.cloudinary.com/v1_1/${c.cloudName}/image/rename`,{method:"POST",body:L});if(pe.ok)return (await pe.json()).secure_url;{let Z=await pe.json();console.warn("[Cloudinary rename] Failed:",Z);let U=d?`/${d}/`:"/";return `https://res.cloudinary.com/${c.cloudName}/image/upload${U}${l}.${a.split(".").pop()}`}}catch(f){console.warn("[Cloudinary rename] Error:",f.message);let y=d?`/${d}/`:"/";return `https://res.cloudinary.com/${c.cloudName}/image/upload${y}${l}.${a.split(".").pop()}`}},getImageUrl(r,a){if(!a)return r;let d=r.split("/upload/");if(d.length!==2)return r;let l=[];if(a.width&&l.push(`w_${a.width}`),a.height&&l.push(`h_${a.height}`),a.fit){let f={crop:"c_fill",clip:"c_fit",scale:"c_scale",fill:"c_fill"};l.push(f[a.fit]||"c_limit");}a.quality&&l.push(`q_${a.quality}`),a.format&&l.push(`f_${a.format}`);let u=l.join(",");return `${d[0]}/upload/${u}/${d[1]}`},async generateThumbnail(r){return this.getImageUrl(r.url,{width:200,height:200,fit:"crop"})},async list(){return []},async exists(r){return (await fetch(r,{method:"HEAD"})).ok},async createFolder(){},async deleteFolder(){}}}function Vr(c){let e=null;async function t(){return e||(e=new basicFtp.Client(6e4,{allowSeparateTransferHost:true}),e.ftp.verbose=false,await e.access({host:c.host,port:c.port||21,user:c.user,password:c.password,secure:c.secure,secureOptions:{}})),e}let r=l=>`${c.prefix?`${c.prefix}/`:""}${l}`.replace(/\/+/g,"/"),a=l=>`${c.baseUrl.replace(/\/$/,"")}/${l}`,d=()=>c.baseUrl.replace(/\/$/,"")+"/";return ae({name:c.type,displayName:c.type==="sftp"?"SFTP Storage":"FTP Storage",supportsDynamicResize:false,async upload(l,u){let f=await t(),y=r(`${u?.folder?`${u.folder}/`:""}${u?.filename||l.name}`),S=Buffer.from(await l.arrayBuffer()),h=y.split("/").slice(0,-1),P="";for(let E of h){P=P?`${P}/${E}`:E;try{await f.ensureDir(P);}catch{}}let $=stream.Readable.from(S);return await f.uploadFrom($,y),{id:Buffer.from(y).toString("base64url"),filename:u?.filename||l.name,originalName:l.name,mimeType:l.type,size:S.length,url:a(y),thumbnailUrl:l.type.startsWith("image/")?a(y):void 0,folder:u?.folder,provider:c.type,metadata:u?.metadata,createdAt:new Date().toISOString()}},async delete(l){let u=await t(),f=l.replace(d(),"");await u.remove(f);},async rename(l,u){let f=await t(),y=l.replace(d(),""),S=c.prefix?`${c.prefix}/${u}`:u;return await f.rename(y,S),a(S)},async list(l){let u=await t(),f=r(l||""),y;try{y=await u.list(f);}catch{return []}return y.filter(S=>S.type===0).map(S=>({id:Buffer.from(`${f}/${S.name}`).toString("base64url"),filename:S.name,originalName:S.name,mimeType:"application/octet-stream",size:Number(S.size)||0,url:a(`${f}/${S.name}`.replace(/\/+/g,"/")),provider:c.type,createdAt:S.modifiedAt?S.modifiedAt.toISOString():new Date().toISOString()}))},async exists(l){let u=await t(),f=l.replace(d(),"");try{return await u.size(f),!0}catch{return  false}},async createFolder(l){let u=await t(),f=r(l);await u.ensureDir(f);},async deleteFolder(l){let u=await t(),f=r(l);await u.removeDir(f);}})}async function ir(c){let e=c.getStorageConfig(),t=wt();try{return await t.resolve(e.type,e)}catch(r){return console.warn(`[resolveProvider] ${r.message} \u2014 falling back to local storage`),he({uploadDir:We__default.default.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"})}}function ae(c){return {async uploadFromUrl(e,t){let r=await fetch(e);if(!r.ok)throw new Error(`Failed to fetch: ${r.statusText}`);let a=await r.blob(),d=e.split("/").pop()||"file",l=new File([a],d,{type:a.type});return this.upload(l,t)},getImageUrl(e,t){if(!t||Object.keys(t).length===0)return e;let r=new URLSearchParams({url:e});return t.width&&r.set("w",String(t.width)),t.height&&r.set("h",String(t.height)),t.quality&&r.set("q",String(t.quality)),t.format&&r.set("f",t.format),t.cropWidth&&t.cropHeight&&(r.set("cx",String(t.cropX??0)),r.set("cy",String(t.cropY??0)),r.set("cw",String(t.cropWidth)),r.set("ch",String(t.cropHeight))),`/api/media/resize?${r.toString()}`},async generateThumbnail(e){return this.getImageUrl(e.url,{width:400,height:400})},...c}}async function nr(c){if(!c)return console.warn("[resolveProviderWithConfig] No config, using local"),he({uploadDir:We__default.default.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"});let e=c.type||"local",t=wt();try{return await t.resolveWithConfig(e,c)}catch(r){return console.warn(`[resolveProviderWithConfig] ${r.message} \u2014 falling back to local storage`),he({uploadDir:We__default.default.join(process.cwd(),"public","uploads"),baseUrl:"/uploads"})}}function or(){return typeof globalThis>"u"?false:typeof globalThis.EdgeRuntime=="string"||typeof globalThis.WebSocketPair<"u"||typeof globalThis.Deno<"u"||typeof process<"u"&&process.env?.NEXT_RUNTIME==="edge"}async function lr(c){if(!or())try{let{default:e}=await import('sharp'),t=await e(c).metadata(),r=e(c).webp({quality:85}),a=e(c).resize({width:500,withoutEnlargement:!0}).webp({quality:80});return {buffer:await r.toBuffer(),thumbnailBuffer:await a.toBuffer(),width:t.width,height:t.height,format:"webp"}}catch{}return {buffer:c,thumbnailBuffer:c,format:"passthrough"}}var It=false;function ke(c){if(typeof c!="string")return c;let e=c.replace(/-/g,"").toLowerCase();return e.length===32?`${e.slice(0,8)}-${e.slice(8,12)}-${e.slice(12,16)}-${e.slice(16,20)}-${e.slice(20)}`:c}var He=class c{db;storage;dialect;genId;mediaTable="media";foldersTable="media_folders";constructor(e,t,r){this.db=e,this.storage=t,this.dialect=r?.dialect||"sqlite",this.genId=r?.genId||chunkCCUQZ66T_cjs.e;}static async init(e,t){let r;if(t?.storageConfig)r=await nr(t.storageConfig);else {let d=new chunkBGX27ZRG_cjs.j(e);await d.load(),r=await ir(d);}let a=new c(e,r,t);return await a.ensureTables(),a}async ensureTables(){if(this.dialect==="mongodb"){let e=this.db.db;await e.collection(this.mediaTable).createIndex({filename:1},{unique:true}),await e.collection(this.foldersTable).createIndex({path:1},{unique:true}),It=true;return}if(this.dialect==="sqlite"){this.db.exec(`
-        CREATE TABLE IF NOT EXISTS media (
-          id TEXT PRIMARY KEY,
-          filename TEXT NOT NULL UNIQUE,
-          title TEXT,
-          original_name TEXT NOT NULL,
-          mime_type TEXT NOT NULL,
-          file_size INTEGER NOT NULL,
-          width INTEGER,
-          height INTEGER,
-          url TEXT NOT NULL UNIQUE,
-          thumbnail_url TEXT,
-          folder TEXT,
-          provider TEXT NOT NULL,
-          alt TEXT,
-          caption TEXT,
-          metadata TEXT,
-          created_at TEXT NOT NULL,
-          updated_at TEXT NOT NULL
-        );
-        CREATE INDEX IF NOT EXISTS idx_media_folder ON media(folder);
-        CREATE INDEX IF NOT EXISTS idx_media_provider ON media(provider);
-        CREATE INDEX IF NOT EXISTS idx_media_filename ON media(filename);
-      `),this.db.exec(`
-        CREATE TABLE IF NOT EXISTS media_folders (
-          id TEXT PRIMARY KEY,
-          name TEXT NOT NULL,
-          path TEXT NOT NULL,
-          parent_path TEXT,
-          created_at TEXT
-        );
-        CREATE INDEX IF NOT EXISTS idx_media_folders_path ON media_folders(path);
-      `);try{let e=this.db.prepare("PRAGMA table_info(media)").all(),t=new Set(e.map(a=>a.name)),r=(a,d)=>{t.has(a)||this.db.exec(`ALTER TABLE media ADD COLUMN ${a} ${d}`);};r("created_at","TEXT"),r("updated_at","TEXT"),r("original_name","TEXT"),r("mime_type","TEXT"),r("file_size","INTEGER"),r("thumbnail_url","TEXT"),t.has("createdAt")&&this.db.exec("UPDATE media SET created_at = createdAt WHERE created_at IS NULL AND createdAt IS NOT NULL"),t.has("updatedAt")&&this.db.exec("UPDATE media SET updated_at = updatedAt WHERE updated_at IS NULL AND updatedAt IS NOT NULL"),t.has("originalName")&&this.db.exec("UPDATE media SET original_name = originalName WHERE original_name IS NULL AND originalName IS NOT NULL"),t.has("mimeType")&&this.db.exec("UPDATE media SET mime_type = mimeType WHERE mime_type IS NULL AND mimeType IS NOT NULL"),t.has("fileSize")&&this.db.exec("UPDATE media SET file_size = fileSize WHERE file_size IS NULL AND fileSize IS NOT NULL"),t.has("thumbnailUrl")&&this.db.exec("UPDATE media SET thumbnail_url = thumbnailUrl WHERE thumbnail_url IS NULL AND thumbnailUrl IS NOT NULL");}catch{}}else if(this.dialect==="postgres"){if(It)return;let{sql:e}=await import('drizzle-orm');await this.db.execute(e`
-        CREATE TABLE IF NOT EXISTS "media" (
-          "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-          "filename" VARCHAR(255) NOT NULL UNIQUE,
-          "title" VARCHAR(255),
-          "original_name" VARCHAR(255) NOT NULL,
-          "mime_type" VARCHAR(100),
-          "file_size" INTEGER,
-          "width" INTEGER,
-          "height" INTEGER,
-          "url" TEXT NOT NULL UNIQUE,
-          "thumbnail_url" TEXT,
-          "folder" VARCHAR(255),
-          "provider" VARCHAR(50) NOT NULL,
-          "alt" TEXT,
-          "caption" TEXT,
-          "metadata" JSONB,
-          "created_at" TIMESTAMP NOT NULL DEFAULT NOW(),
-          "updated_at" TIMESTAMP NOT NULL DEFAULT NOW()
-        )
-      `),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_folder" ON "media" ("folder")`),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_provider" ON "media" ("provider")`),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_filename" ON "media" ("filename")`),await this.db.execute(e`
-        CREATE TABLE IF NOT EXISTS "media_folders" (
-          "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-          "name" VARCHAR(255) NOT NULL,
-          "path" TEXT NOT NULL,
-          "parent_path" TEXT,
-          "created_at" TIMESTAMP NOT NULL DEFAULT NOW()
-        )
-      `),await this.db.execute(e`CREATE INDEX IF NOT EXISTS "idx_media_folders_path" ON "media_folders" ("path")`),It=true;}}now(){return new Date().toISOString()}buildFindConditions(e){let t=[],r=[],a=e.sortBy==="name"?"title":e.sortBy==="createdAt"?"created_at":e.sortBy==="updatedAt"?"updated_at":e.sortBy||"created_at",d=e.sortDir==="asc"?"ASC":"DESC";if(e.search){t.push("(title LIKE ? OR filename LIKE ? OR original_name LIKE ? OR alt LIKE ?)");let u=`%${e.search}%`;r.push(u,u,u,u);}return e.type&&e.type!=="all"&&(t.push("mime_type LIKE ?"),r.push(`${e.type}/%`)),e.folder&&(t.push("(folder = ? OR folder LIKE ?)"),r.push(e.folder,`${e.folder}/%`)),{where:t.length>0?`WHERE ${t.join(" AND ")}`:"",params:r,orderBy:d,sortCol:a}}rowToMedia(e,t){return {id:e.id,filename:e.filename,title:e.title??null,originalName:e.original_name??e.originalName,mimeType:e.mime_type??e.mimeType,fileSize:e.file_size??e.fileSize,width:e.width??null,height:e.height??null,url:c.resolveMediaUrl(e.url,t),thumbnailUrl:c.resolveMediaUrl(e.thumbnail_url??e.thumbnailUrl??null,t),folder:e.folder??null,provider:e.provider,alt:e.alt??null,caption:e.caption??null,metadata:typeof e.metadata=="string"?JSON.parse(e.metadata):e.metadata??null,createdAt:e.created_at??e.createdAt,updatedAt:e.updated_at??e.updatedAt}}static resolveMediaUrl(e,t){return e?e.startsWith("http://")||e.startsWith("https://")||e.startsWith("blob:")||e.startsWith("data:")?e:`${(process.env.KYRO_BASE_URL||t||"http://localhost:4321").replace(/\/+$/,"")}${e.startsWith("/")?"":"/"}${e}`:null}async sqliteRun(e,t=[]){let r=this.db.prepare(e),a=e.trim().toLowerCase();return a.startsWith("insert")||a.startsWith("update")||a.startsWith("delete")?r.run(...t):r.all(...t)}sqliteGet(e,t=[]){return this.db.prepare(e).get(...t)}async upload(e,t="",r){let a=e.type.startsWith("image/"),d,l=e,u=e.name,f=null,y=null;if(a&&!e.type.includes("svg")){let E=Buffer.from(await e.arrayBuffer());d=await lr(E),u=`${e.name.replace(/\.[^/.]+$/,"").toLowerCase().replace(/[^a-z0-9]/g,"-").replace(/-+/g,"-").substring(0,50)}.webp`,f=d.width??null,y=d.height??null,l=new File([d.buffer],u,{type:"image/webp"});}let S=await this.storage.upload(l,{folder:t,filename:u}),h=await this.storage.generateThumbnail({...S,id:"",provider:this.storage.name,createdAt:this.now()},{width:400,height:400}),P=this.genId(),$=this.now();if(this.dialect==="mongodb"){let E=S.mimeType,j=E.startsWith("image/")?"image":E.startsWith("video/")?"video":E.startsWith("audio/")?"audio":E.startsWith("application/pdf")?"document":["application/zip","application/x-zip","application/x-tar","application/gzip","application/x-7z"].includes(E)?"archive":"other";return await this.db.db.collection(this.mediaTable).insertOne({_id:P,id:P,filename:S.filename,title:e.name.replace(/\.[^/.]+$/,""),originalName:e.name,mimeType:E,fileSize:S.size,width:f,height:y,url:S.url,thumbnailUrl:h,folder:t||"",provider:this.storage.name,type:j,status:"active",alt:null,caption:null,createdAt:new Date,updatedAt:new Date}),this.rowToMedia({id:P,filename:S.filename,title:e.name.replace(/\.[^/.]+$/,""),originalName:e.name,mimeType:E,fileSize:S.size,width:f,height:y,url:S.url,thumbnailUrl:h,folder:t||"",provider:this.storage.name,type:j,status:"active",alt:null,caption:null,createdAt:new Date,updatedAt:new Date},r)}if(this.dialect==="sqlite")await this.sqliteRun(`INSERT INTO ${this.mediaTable}
-          (id, filename, title, original_name, mime_type, file_size, width, height, url, thumbnail_url, folder, provider, alt, caption, metadata, created_at, updated_at)
-         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,[P,S.filename,e.name.replace(/\.[^/.]+$/,""),e.name,S.mimeType,S.size,f,y,S.url,h,t||null,this.storage.name,null,null,null,$,$]);else {let{media:E}=await import('./media-OUBQTIQP.cjs'),j=S.mimeType,W=j.startsWith("image/")?"image":j.startsWith("video/")?"video":j.startsWith("audio/")?"audio":j.startsWith("application/pdf")?"document":["application/zip","application/x-zip","application/x-tar","application/gzip","application/x-7z"].includes(j)?"archive":"other",V=await this.db.insert(E).values({id:P,filename:S.filename,title:e.name.replace(/\.[^/.]+$/,""),originalName:e.name,mimeType:j,fileSize:S.size,width:f,height:y,url:S.url,thumbnailUrl:h,folder:t||"",provider:this.storage.name,type:W,status:"active",alt:null,caption:null,createdAt:new Date,updatedAt:new Date}).returning();V&&V[0]&&(P=V[0].id);}return {id:P,filename:S.filename,title:e.name.replace(/\.[^/.]+$/,""),originalName:e.name,mimeType:S.mimeType,fileSize:S.size,width:f,height:y,url:S.url,thumbnailUrl:h,folder:t||null,provider:this.storage.name,alt:null,caption:null,metadata:null,createdAt:$,updatedAt:$}}async uploadFromUrl(e,t="",r){let a=await fetch(e);if(!a.ok)throw new Error(`Failed to fetch URL: ${a.status}`);let d=await a.blob(),l=e.split("/").pop()||"url-image",u=a.headers.get("content-type")||d.type||"application/octet-stream",f=new File([d],l,{type:u});return this.upload(f,t,r)}async delete(e,t){this.dialect==="postgres"&&(e=ke(e));let r=await this.findById(e,t);if(r){if(await this.deleteFile(r.url),r.thumbnailUrl&&r.thumbnailUrl!==r.url&&r.thumbnailUrl!==r.url+"?thumb")try{await this.deleteFile(r.thumbnailUrl);}catch{}if(this.dialect==="mongodb"){await this.db.db.collection(this.mediaTable).deleteOne({id:e});return}if(this.dialect==="sqlite")await this.sqliteRun(`DELETE FROM ${this.mediaTable} WHERE id = ?`,[e]);else {let{media:a}=await import('./media-OUBQTIQP.cjs'),{eq:d}=await import('drizzle-orm');await this.db.delete(a).where(d(a.id,e));}}}async deleteFile(e){await this.storage.delete(e);}async rename(e,t,r){this.dialect==="postgres"&&(e=ke(e));let a=await this.findById(e,r);if(!a)return null;let d=await this.storage.rename(a.url,t),l;if(a.thumbnailUrl||this.storage.name==="cloudinary"){let S=d.match(/\/upload\/(v\d+)\//),h=S?S[1]+"/":"",P=d.match(/(.+?)\/upload\//);l=`${P?P[1]:"https://res.cloudinary.com/"+this.storage.config?.cloudName||"unknown"}/upload/w_200,h_200,c_fill/${h}${t}`;}let u=a.filename.split(".").pop(),f=t.includes(".")?t:`${t}.${u}`,y={url:d,filename:f,thumbnailUrl:l};if(this.dialect==="mongodb")return await this.db.db.collection(this.mediaTable).updateOne({id:e},{$set:{url:d,thumbnailUrl:l||null,updatedAt:new Date}}),this.findById(e,r);if(this.dialect==="sqlite"){let S={...y};"thumbnailUrl"in S&&(S.thumbnail_url=S.thumbnailUrl,delete S.thumbnailUrl);let h=Object.keys(S).map($=>`${$} = ?`).join(", "),P=Object.values(S);await this.sqliteRun(`UPDATE ${this.mediaTable} SET ${h}, updated_at = ? WHERE id = ?`,[...P,this.now(),e]);}else {let{media:S}=await import('./media-OUBQTIQP.cjs'),{eq:h}=await import('drizzle-orm');await this.db.update(S).set({...y,updatedAt:this.now()}).where(h(S.id,e));}return {...a,...y,updatedAt:this.now(),thumbnailUrl:y.thumbnailUrl??null}}async findById(e,t){if(this.dialect==="postgres"&&(e=ke(e)),this.dialect==="mongodb"){let l=await this.db.db.collection(this.mediaTable).findOne({id:e});return l?this.rowToMedia(l,t):null}if(this.dialect==="sqlite"){let l=this.sqliteGet(`SELECT * FROM ${this.mediaTable} WHERE id = ?`,[e]);return l?this.rowToMedia(l,t):null}let{media:r}=await import('./media-OUBQTIQP.cjs'),{eq:a}=await import('drizzle-orm'),[d]=await this.db.select().from(r).where(a(r.id,e));return d?this.rowToMedia(d,t):null}async find(e={},t){let{page:r=1,limit:a=30,search:d="",type:l="",folder:u="",sortBy:f="createdAt",sortDir:y="desc"}=e,{where:S,params:h,orderBy:P,sortCol:$}=this.buildFindConditions({page:r,limit:a,search:d,type:l,folder:u,sortBy:f,sortDir:y}),E=(r-1)*a;if(this.dialect==="mongodb"){let X={},{search:G,type:ie,folder:K,sortBy:Re="createdAt",sortDir:Ee="desc"}=e;G&&(X.$or=[{title:{$regex:G,$options:"i"}},{filename:{$regex:G,$options:"i"}},{originalName:{$regex:G,$options:"i"}},{alt:{$regex:G,$options:"i"}}]),ie&&ie!=="all"&&(X.mimeType={$regex:`^${ie}/`}),K&&(X.$or=[{folder:K},{folder:{$regex:`^${K}/`}}]);let Et={[Re==="name"?"title":Re]:Ee==="asc"?1:-1},s=await this.db.db.collection(this.mediaTable).countDocuments(X);return {docs:(await this.db.db.collection(this.mediaTable).find(X).sort(Et).skip(E).limit(a).toArray()).map(m=>this.rowToMedia(m,t)),totalDocs:s,page:r,limit:a,totalPages:Math.ceil(s/a)}}if(this.dialect==="sqlite"){let G=this.sqliteGet(`SELECT COUNT(*) as cnt FROM ${this.mediaTable} ${S}`,h)?.cnt??0;return {docs:(await this.sqliteRun(`SELECT * FROM ${this.mediaTable} ${S} ORDER BY ${$} ${P} LIMIT ? OFFSET ?`,[...h,a,E])).map(K=>this.rowToMedia(K,t)),totalDocs:G,page:r,limit:a,totalPages:Math.ceil(G/a)}}let{media:j}=await import('./media-OUBQTIQP.cjs'),{like:W,or:V,and:oe,asc:L,desc:pe,eq:Z,sql:U}=await import('drizzle-orm'),Q=[];d&&Q.push(V(W(j.title,`%${d}%`),W(j.filename,`%${d}%`),W(j.originalName,`%${d}%`),W(j.alt,`%${d}%`))),l&&l!=="all"&&Q.push(W(j.mimeType,`${l}/%`)),u&&Q.push(V(Z(j.folder,u),W(j.folder,`${u}/%`)));let je=Q.length>0?oe(...Q):void 0,me=j[{created_at:"createdAt",updated_at:"updatedAt",title:"title",filename:"filename",file_size:"fileSize",mime_type:"mimeType",original_name:"originalName"}[$]||"createdAt"],xt=y==="asc"?L(me):pe(me),xe=await this.db.select().from(j).where(je).orderBy(xt).limit(a).offset(E),[{count:be}]=await this.db.select({count:U`count(*)`}).from(j).where(je),O=Number(be);return {docs:xe.map(X=>this.rowToMedia(X,t)),totalDocs:O,page:r,limit:a,totalPages:Math.ceil(O/a)}}async update(e,t,r){this.dialect==="postgres"&&(e=ke(e));let a=this.now();if(this.dialect==="mongodb")return await this.db.db.collection(this.mediaTable).updateOne({id:e},{$set:{...t,updatedAt:new Date}}),this.findById(e,r);if(this.dialect==="sqlite"){let f=["updated_at = ?"],y=[a];t.title!==void 0&&(f.push("title = ?"),y.push(t.title)),t.alt!==void 0&&(f.push("alt = ?"),y.push(t.alt)),t.caption!==void 0&&(f.push("caption = ?"),y.push(t.caption)),t.folder!==void 0&&(f.push("folder = ?"),y.push(t.folder)),t.metadata!==void 0&&(f.push("metadata = ?"),y.push(t.metadata===null?null:JSON.stringify(t.metadata))),t.originalName!==void 0&&(f.push("original_name = ?"),y.push(t.originalName)),y.push(e),await this.sqliteRun(`UPDATE ${this.mediaTable} SET ${f.join(", ")} WHERE id = ?`,y);let S=this.sqliteGet(`SELECT * FROM ${this.mediaTable} WHERE id = ?`,[e]);return S?this.rowToMedia(S,r):null}let{media:d}=await import('./media-OUBQTIQP.cjs'),{eq:l}=await import('drizzle-orm'),[u]=await this.db.update(d).set({...t,updatedAt:new Date}).where(l(d.id,e)).returning();return u?this.rowToMedia(u,r):null}async updateMany(e,t){this.dialect==="postgres"&&(e=e.map(ke));let r=this.now();if(this.dialect==="mongodb"){for(let a of e)await this.db.db.collection(this.mediaTable).updateOne({id:a},{$set:{...t,updatedAt:new Date}});return}if(this.dialect==="sqlite")for(let a of e){let d=["updated_at = ?"],l=[r];t.folder!==void 0&&(d.push("folder = ?"),l.push(t.folder||null)),l.push(a),await this.sqliteRun(`UPDATE ${this.mediaTable} SET ${d.join(", ")} WHERE id = ?`,l);}else {let{media:a}=await import('./media-OUBQTIQP.cjs'),{eq:d}=await import('drizzle-orm');for(let l of e)await this.db.update(a).set({...t,updatedAt:new Date}).where(d(a.id,l));}}async listFolders(){if(this.dialect==="mongodb"){let f=await this.db.db.collection(this.foldersTable).find({},{projection:{path:1}}).toArray(),y=await this.db.db.collection(this.mediaTable).distinct("folder"),S=new Set([...f.map(h=>h.path),...y]);return Array.from(S).filter(h=>h&&h!=="").sort()}if(this.dialect==="sqlite")return (await this.sqliteRun(`SELECT path FROM ${this.foldersTable} UNION
-         SELECT folder as path FROM ${this.mediaTable} WHERE folder IS NOT NULL AND folder != ''`)).map(y=>y.path).filter(y=>y&&y!=="").sort();let{media:e,mediaFolders:t}=await import('./media-OUBQTIQP.cjs'),{eq:r,sql:a}=await import('drizzle-orm'),d=await this.db.select({folder:e.folder}).from(e).groupBy(e.folder),l=await this.db.select({path:t.path}).from(t),u=new Set([...d.map(f=>f.folder),...l.map(f=>f.path)]);return Array.from(u).filter(f=>f&&f!=="").sort()}async createFolder(e,t=""){let r=t?`${t}/${e}`:e;await this.storage.createFolder?.(r);let a=this.now();if(this.dialect==="mongodb"){await this.db.db.collection(this.foldersTable).findOne({path:r})||await this.db.db.collection(this.foldersTable).insertOne({_id:this.genId(),name:e,path:r,parentPath:t||null,createdAt:new Date});return}if(this.dialect==="sqlite")await this.sqliteRun(`INSERT OR IGNORE INTO ${this.foldersTable} (path, name, parent_path, created_at) VALUES (?, ?, ?, ?)`,[r,e,t||null,a]);else {let{mediaFolders:d}=await import('./media-OUBQTIQP.cjs');await this.db.insert(d).values({path:r,name:e,parentPath:t||null,createdAt:new Date}).onConflictDoNothing();}}async deleteFolder(e){let t=await this.find({folder:e,limit:1e4});for(let r of t.docs)await this.delete(r.id);if(await this.storage.deleteFolder?.(e),this.dialect==="mongodb"){await this.db.db.collection(this.foldersTable).deleteMany({$or:[{path:e},{path:{$regex:`^${e}/`}}]});return}if(this.dialect==="sqlite")await this.sqliteRun(`DELETE FROM ${this.foldersTable} WHERE path = ? OR path LIKE ?`,[e,`${e}/%`]);else {let{mediaFolders:r}=await import('./media-OUBQTIQP.cjs'),{like:a,or:d,eq:l}=await import('drizzle-orm');await this.db.delete(r).where(d(l(r.path,e),a(r.path,`${e}/%`)));}}};function Xe(c){return c.map(e=>`${e.path.join(".")}: ${e.message}`).join(", ")}function ye(c,e){if(!(!c||typeof c!="object"))for(let t of e){if(t.type==="tabs"&&Array.isArray(t.tabs)){let a=t.name?c[t.name]:c;if(a&&typeof a=="object")for(let d of t.tabs)Array.isArray(d.fields)&&ye(a,d.fields);continue}if(!t.name||!(t.name in c))continue;if(c[t.name]===""&&(t.type==="text"||t.type==="textarea"||t.type==="code"||t.type==="markdown"||(c[t.name]=null)),(t.type==="group"||t.type==="collapsible")&&t.name&&Array.isArray(t.fields)&&c[t.name]&&typeof c[t.name]=="object")ye(c[t.name],t.fields);else if(t.type==="array"&&t.name&&Array.isArray(t.fields)&&Array.isArray(c[t.name]))for(let a of c[t.name])a&&typeof a=="object"&&ye(a,t.fields);else if(t.type==="blocks"&&t.name&&Array.isArray(t.blocks)&&Array.isArray(c[t.name]))for(let a of c[t.name]){if(!a||typeof a!="object")continue;let d=a.type||a.blockType;if(!d)continue;let l=t.blocks.find(f=>f.slug===d);if(!l||!Array.isArray(l.fields))continue;let u=a.data&&typeof a.data=="object"?a.data:a;ye(u,l.fields);}}}function we(c,e){if(!(!e||typeof e!="object"))for(let t of c){if(t.type==="tabs"&&Array.isArray(t.tabs)){let r=t.name?e[t.name]:e;if(r&&typeof r=="object")for(let a of t.tabs)Array.isArray(a.fields)&&we(a.fields,r);}if(t.type==="richtext"&&t.name){let r=e[t.name];typeof r=="string"?e[t.name]=[{type:"paragraph",children:[{text:r}]}]:r&&typeof r=="object"&&!Array.isArray(r)&&r.type==="doc"&&Array.isArray(r.content)&&(e[t.name]=r.content);}if((t.type==="group"||t.type==="collapsible")&&t.name&&Array.isArray(t.fields)&&e[t.name]&&typeof e[t.name]=="object")we(t.fields,e[t.name]);else if(t.type==="array"&&t.name&&Array.isArray(t.fields)&&Array.isArray(e[t.name]))for(let r of e[t.name])r&&typeof r=="object"&&we(t.fields,r);else if(t.type==="blocks"&&t.name&&Array.isArray(t.blocks)&&Array.isArray(e[t.name]))for(let r of e[t.name]){if(!r||typeof r!="object")continue;let a=r.type||r.blockType;if(!a)continue;let d=t.blocks.find(u=>u.slug===a);if(!d||!Array.isArray(d.fields))continue;let l=r.data&&typeof r.data=="object"?r.data:r;we(d.fields,l);}}}function De(c,e){if(!(!e||typeof e!="object")){for(let t of c)if(!(!t.name||!(t.name in e))){if(t.unique&&(t.type==="text"||t.type==="email"?e[t.name]=`${e[t.name]||t.name}-copy-${Date.now().toString(36)}`:delete e[t.name]),t.type==="tabs"&&t.name&&Array.isArray(t.tabs)&&e[t.name]&&typeof e[t.name]=="object")for(let r of t.tabs)Array.isArray(r.fields)&&De(r.fields,e[t.name]);else if((t.type==="group"||t.type==="collapsible")&&t.name&&Array.isArray(t.fields)&&e[t.name]&&typeof e[t.name]=="object")De(t.fields,e[t.name]);else if(t.type==="array"&&t.name&&Array.isArray(t.fields)&&Array.isArray(e[t.name]))for(let r of e[t.name])r&&typeof r=="object"&&(delete r.id,De(t.fields,r));else if(t.type==="blocks"&&t.name&&Array.isArray(t.blocks)&&Array.isArray(e[t.name]))for(let r of e[t.name]){if(!r||typeof r!="object")continue;delete r.id;let a=r.type||r.blockType;if(!a)continue;let d=t.blocks.find(u=>u.slug===a);if(!d||!Array.isArray(d.fields))continue;let l=r.data&&typeof r.data=="object"?r.data:r;De(d.fields,l);}}}}var Zr={_media:{create:chunkILEZ3NYX_cjs.d.MEDIA_UPLOAD,update:chunkILEZ3NYX_cjs.d.MEDIA_UPLOAD,delete:chunkILEZ3NYX_cjs.d.MEDIA_DELETE}};function Pe(c,e){let t=Zr[c];return t?t[e]:`collection.${e}`}function Qr(c){let e=c.headers.get("x-forwarded-for");return e?e.split(",")[0].trim():c.headers.get("x-real-ip")||"unknown"}function Ge(c,e,t,r,a){e?.apiKeyId&&c&&c.createAuditLog({action:"api_request",userId:e.userId||"",resource:"api_key",resourceId:e.apiKeyId,success:true,metadata:{endpoint:t,method:r,ip:Qr(a)}});}function Ye(c){return c.baseUpdatedAt??c._baseUpdatedAt}function Tt(c){let{baseUpdatedAt:e,_baseUpdatedAt:t,...r}=c;return r}function vt(c,e){return {error:"Document has changed since you started editing",code:"REVISION_CONFLICT",conflict:{expectedUpdatedAt:c??null,actualUpdatedAt:e.updatedAt??null,current:e}}}async function N(c,e,t,r,a,d,l=true,u="none"){return await chunkILEZ3NYX_cjs.b(c,e,{user:r,req:t,tenantId:a,apiKey:d},{enablePublicAccess:l,defaultAccess:u})}async function J(c,e,t,r,a,d=true){return await chunkILEZ3NYX_cjs.c(c,e,{user:r,req:t,tenantId:a},{enablePublicAccess:d})}async function k(c,e,t,r){if(t)return {user:t,tenantId:r,apiKeyContext:void 0,authType:"static"};if(e){let a=await e(c);if(a.status===200&&a.user)return {user:a.user,tenantId:a.tenantContext?.tenantId,apiKeyContext:a.apiKeyContext,authType:a.authType}}return {user:void 0,tenantId:void 0,apiKeyContext:void 0,authType:void 0}}function es(c,e){if("dialect"in c&&c.dialect==="postgres"&&c instanceof chunkCCUQZ66T_cjs.c)return new chunkGYQMNXXW_cjs.a({db:c.client});if("dialect"in c&&c.dialect==="sqlite"&&c instanceof chunkCCUQZ66T_cjs.c)return new Be({db:c.client});if("dialect"in c&&c.dialect==="mongodb"){let r=c;return new chunkQCA3AP3M_cjs.a({db:()=>r.db})}let t=We.resolve(e,"data","auth.db");return new chunkJ4252I5B_cjs.a({path:process.env.KYRO_AUTH_DB_PATH||t})}function mr(c){let{registry:e,db:t,authSecret:r,authAdapter:a,checkSession:d,user:l,tenantId:u,cors:f,webhookService:y,settings:S}=c,h=new hono.Hono;function P(s){if(Array.isArray(s))return s.map(P);if(s!==null&&typeof s=="object"){let o={};for(let m in s)m!=="attrs"&&(o[m]=P(s[m]));return o}return s}h.use("*",async(s,o)=>{await o();let m=s.req.header("referer")||"";if(!(s.req.header("x-kyro-admin")==="true"||m.includes("/admin"))){let n=s.res.headers.get("Content-Type");if(n&&n.includes("application/json"))try{let p=await s.res.clone().json(),A=P(p);s.res=s.json(A,s.res.status);}catch{}}});for(let s of e.getPlugins())typeof s.serverMiddleware=="function"&&s.serverMiddleware(h);let $=S?.access?.apiAccess,E=S?.access?.enablePublicAccess??false,j=S?.access?.defaultCollectionAccess??"none";$?.requireAuth;let V=process.cwd(),oe=V.endsWith("admin")?We.resolve(V,".."):V,L=a||es(t,oe),U=Xt({db:t,userLookup:async s=>await L.findUserById(s)||null}),Q=$?.cors?.allowedOrigins,je=f?.origins,Je=Array.isArray(Q)?Q:typeof Q=="string"&&Q?Q.split(`
-`).map(s=>s.trim()).filter(Boolean):[],me=Je.length>0?Je:je||[];(me.length>0||f)&&h.use("*",async(s,o)=>{let m=s.req.header("Origin")||"*";if(me.length>0&&!me.includes(m))return s.json({error:"Origin not allowed"},403);let w=me.length>0?m:"*";if(s.header("Access-Control-Allow-Origin",w),s.header("Access-Control-Allow-Methods","GET, POST, PATCH, DELETE, OPTIONS"),s.header("Access-Control-Allow-Headers","Content-Type, Authorization, X-API-Key"),f?.credentials&&s.header("Access-Control-Allow-Credentials","true"),s.req.method==="OPTIONS")return s.text("");await o();});let xe=S?.access?.rateLimiting,be;if(xe?.enabled){let s=xe.maxRequests||100,o=xe.windowMs||6e4;be=new Oe({"api:general":{window:o,max:s}}),h.use("/api/*",async(m,w)=>{if(!be)return w();let n=m.req.header("CF-Connecting-IP")||m.req.header("X-Forwarded-For")?.split(",")[0]?.trim()||m.req.header("X-Real-IP")||"unknown",i=await be.check("api:general",n);if(m.header("X-RateLimit-Limit",String(s)),m.header("X-RateLimit-Remaining",String(i.remaining)),m.header("X-RateLimit-Reset",String(i.resetAt)),!i.allowed)return m.json({error:"Too many requests",retryAfter:i.retryAfter},429);await w();});}let O=new Me({redis:L,jwtSecret:r||"change-me",baseUrl:process.env.KYRO_BASE_URL||"http://localhost:4321",rateLimiter:be});chunkBGX27ZRG_cjs.k.fromConfig(t).then(s=>{s&&(O.email=s);}).catch(s=>{console.error("[Email] Failed to initialize transport from config:",s);}),h.post("/api/auth/login",async s=>O.login(s.req.raw)),h.post("/api/auth/register",async s=>{try{let o=await t.findOne({collection:"_globals_system",where:{}});if(o&&o.enableRegistration===!1)return s.json({error:"User registration is currently disabled by administrator."},403);if(o?.defaultRegistrationRole){let m=s.req.raw;if((m.headers.get("content-type")||"").includes("application/json")){let n=await s.req.json();n.role||(n.role=o.defaultRegistrationRole);let i=new Request(m.url,{method:m.method,headers:m.headers,body:JSON.stringify(n)});return O.register(i)}}}catch{}return O.register(s.req.raw)}),h.post("/api/auth/logout",async s=>O.logout(s.req.raw)),h.post("/api/auth/refresh",async s=>O.refresh(s.req.raw)),h.get("/api/auth/me",async s=>O.me(s.req.raw)),h.post("/api/auth/forgot-password",async s=>O.forgotPassword(s.req.raw)),h.post("/api/auth/reset-password",async s=>O.resetPassword(s.req.raw)),h.post("/api/auth/change-password",async s=>O.changePassword(s.req.raw)),h.get("/api/auth/verify-email",async s=>O.verifyEmail(s.req.raw)),h.post("/api/auth/verify-email",async s=>O.verifyEmail(s.req.raw)),h.get("/api/auth/verify",async s=>O.verifyEmail(s.req.raw)),h.post("/api/auth/verify",async s=>O.verifyEmail(s.req.raw)),h.get("/api/auth/sessions",async s=>O.listSessions(s.req.raw)),h.post("/api/auth/sessions/refresh",async s=>O.refreshSession(s.req.raw)),h.delete("/api/auth/sessions",async s=>O.revokeOtherSessions(s.req.raw)),h.delete("/api/auth/sessions/:id",async s=>O.revokeSession(s.req.raw,s.req.param("id"))),h.put("/api/auth/sessions/:id/name",async s=>O.renameSession(s.req.raw,s.req.param("id"))),h.get("/api/auth/access",async s=>{try{let{user:o,tenantId:m}=await k(s.req.raw,U,l,u);if(!o)return s.json({error:"Not authenticated"},401);let w={},n={};for(let i of e.getCollections()){let p={read:(await N(i,"read",s.req.raw,o,m,void 0,E,j)).allowed,create:(await N(i,"create",s.req.raw,o,m,void 0,E,j)).allowed,update:(await N(i,"update",s.req.raw,o,m,void 0,E,j)).allowed,delete:(await N(i,"delete",s.req.raw,o,m,void 0,E,j)).allowed};w[i.slug]=p;}for(let i of e.getGlobals()){let p={read:(await J(i,"read",s.req.raw,o,m,E)).allowed,update:(await J(i,"update",s.req.raw,o,m,E)).allowed};n[i.slug]=p;}return s.json({collections:w,globals:n})}catch(o){return s.json({error:o.message},500)}});let X=typeof e.hasCollection=="function"&&e.hasCollection("users")?e.getCollection("users"):(()=>{try{return e.getCollection("users")}catch{return chunkGO34AOBZ_cjs.a}})();h.get("/api/users",async s=>{try{let{user:o,tenantId:m}=await k(s.req.raw,U,l,u),w=await N(X,"read",s.req.raw,o,m,void 0,E,j);if(!w.allowed)return s.json({error:w.error},w.status||403);let n=parseInt(s.req.query("page")||"1"),i=Math.min(parseInt(s.req.query("limit")||"10"),100),p=s.req.query("search")||void 0,A=[],g=0;if(typeof L.findUsers=="function"){let b=await L.findUsers({page:n,limit:i,search:p});A=b.users||[],g=b.total||0;}else {let b=await t.find({collection:"users",page:n,limit:i,where:p?{email:{contains:p}}:{},tenantId:m});A=b.docs||[],g=b.totalDocs||0;}return s.json({docs:A,totalDocs:g,limit:i,totalPages:Math.ceil(g/i)||1,page:n,pagingCounter:(n-1)*i+1,hasPrevPage:n>1,hasNextPage:n<Math.ceil(g/i),prevPage:n>1?n-1:null,nextPage:n<Math.ceil(g/i)?n+1:null})}catch(o){return console.error("[API] Error listing users:",o),s.json({error:o.message},500)}}),h.get("/api/users/:id",async s=>{try{let{user:o,tenantId:m}=await k(s.req.raw,U,l,u),w=s.req.param("id"),n=await L.findUserById(w);return n?s.json({data:n}):s.json({error:"User not found"},404)}catch(o){return s.json({error:o.message},500)}}),h.post("/api/users",async s=>{try{let{user:o,tenantId:m}=await k(s.req.raw,U,l,u),w=await N(X,"create",s.req.raw,o,m,void 0,E,j);if(!w.allowed)return s.json({error:w.error},w.status||403);let n=await s.req.json();if(!n.email||!n.password)return s.json({error:"Email and password are required"},400);if(await L.findUserByEmail(n.email))return s.json({error:"Email already in use"},400);let p=n.role||"customer";if(p!=="customer"&&o?.role!=="super_admin")return s.json({error:"Forbidden: Only super_admin can assign administrative roles"},403);let A=await L.createUser({email:n.email,password:n.password,name:n.name,role:p,avatar:n.avatar,tenantId:n.tenantId});return o&&L?.createAuditLog({action:"user_create",userId:o.id,resource:"users",resourceId:A.id,success:!0}),s.json({data:A,message:"User created successfully"},201)}catch(o){return s.json({error:o.message},500)}}),h.patch("/api/users/:id",async s=>{try{let{user:o,tenantId:m}=await k(s.req.raw,U,l,u),w=await N(X,"update",s.req.raw,o,m,void 0,E,j);if(!w.allowed)return s.json({error:w.error},w.status||403);let n=s.req.param("id"),i=await s.req.json(),p=await L.findUserById(n);if(!p)return s.json({error:"User not found"},404);let A={};if(i.name!==void 0&&(A.name=i.name),i.email!==void 0&&(A.email=i.email),i.role!==void 0&&i.role!==p.role){if(o?.role!=="super_admin")return s.json({error:"Forbidden: Only super_admin can modify user roles"},403);A.role=i.role;}i.avatar!==void 0&&(A.avatar=typeof i.avatar=="object"&&i.avatar!==null?i.avatar.id||String(i.avatar):i.avatar),i.tenantId!==void 0&&(A.tenantId=i.tenantId),i.emailVerified!==void 0&&(A.emailVerified=i.emailVerified),i.locked!==void 0&&(A.locked=i.locked),i.failedLoginAttempts!==void 0&&(A.failedLoginAttempts=i.failedLoginAttempts),i.lastLogin!==void 0&&(A.lastLogin=i.lastLogin);let g=await L.updateUser(n,A);return g?(o&&(L?.createAuditLog({action:"user_update",userId:o.id,resource:"users",resourceId:n,success:!0}),i.role&&p.role!==i.role&&L?.createAuditLog({action:"role_change",userId:o.id,resource:"users",resourceId:n,success:!0,metadata:{oldRole:p.role,newRole:i.role}})),s.json({data:g,message:"User updated successfully"})):s.json({error:"User update failed"},500)}catch(o){return s.json({error:o.message},500)}}),h.delete("/api/users/:id",async s=>{try{let{user:o,tenantId:m}=await k(s.req.raw,U,l,u),w=await N(X,"delete",s.req.raw,o,m,void 0,E,j);if(!w.allowed)return s.json({error:w.error},w.status||403);let n=s.req.param("id");if(o&&o.id===n)return s.json({error:"You cannot delete your own account"},403);let i=await L.findUserById(n);return i?await L.deleteUser(n)?(o&&L?.createAuditLog({action:"user_delete",userId:o.id,resource:"users",resourceId:n,success:!0}),s.json({data:i,message:"User deleted successfully"})):s.json({error:"User deletion failed"},500):s.json({error:"User not found"},404)}catch(o){return s.json({error:o.message},500)}}),h.get("/api/auth/audit-logs",async s=>{try{let{user:o,tenantId:m}=await k(s.req.raw,U,l,u),w=e.getCollection("audit_logs");if(w){let T=await N(w,"read",s.req.raw,o,m,void 0,E,j);if(!T.allowed)return s.json({error:T.error},T.status||403)}else if(!o)return s.json({error:"Authentication required"},401);let n=parseInt(s.req.query("page")||"1"),i=Math.min(parseInt(s.req.query("limit")||"50"),100),p=s.req.query("action")||void 0,A=s.req.query("userId")||void 0,g=s.req.query("resource")||void 0,b=await L.findAuditLogs({action:p,userId:A,resource:g,limit:i,offset:(n-1)*i});return s.json({docs:b.logs,totalDocs:b.total,limit:i,totalPages:Math.ceil(b.total/i),page:n,pagingCounter:(n-1)*i+1,hasPrevPage:n>1,hasNextPage:n<Math.ceil(b.total/i),prevPage:n>1?n-1:null,nextPage:n<Math.ceil(b.total/i)?n+1:null})}catch(o){return console.error("[API] Error listing audit logs:",o),s.json({error:o.message},500)}});let G=null,ie=null,K=async()=>{if(ie)throw ie;if(!G)try{let s="sqlite";"dialect"in t&&t.dialect==="postgres"&&t instanceof chunkCCUQZ66T_cjs.c?s=t.dialect:"dialect"in t&&t.dialect==="mongodb"&&(s="mongodb");let o=s==="postgres"&&t instanceof chunkCCUQZ66T_cjs.c?t.client:t;G=await He.init(o,{dialect:s});}catch(s){throw console.error("[getMedia] Init error:",s),ie=s,s}return G};h.get("/api/media",async s=>{try{let{user:o}=await k(s.req.raw,U,l,u);if(!o)return s.json({error:"Authentication required"},401);let m=await K(),w=new URL(s.req.url).origin,n=parseInt(s.req.query("page")||"1"),i=parseInt(s.req.query("limit")||"30"),p=s.req.query("search")||"",A=s.req.query("type")||"",g=s.req.query("folder")||"",b=await m.find({page:n,limit:i,search:p,type:A,folder:g},w);return s.json(b)}catch(o){return console.error("[Media] find error:",o),s.json({error:o.message},500)}}),h.post("/api/media/upload",async s=>{try{let{user:o}=await k(s.req.raw,U,l,u);if(!o)return s.json({error:"Authentication required"},401);let m=await K(),w=s.req.header("content-type")||"",n=new URL(s.req.url).origin;if(w.includes("multipart/form-data")){let b=await s.req.formData(),T=b.get("file"),I=b.get("folder")||"";if(!T)return s.json({error:"No file uploaded"},400);let x=await m.upload(T,I,n);return s.json(x)}let i=await s.req.json(),{url:p}=i,A=i.folder||"";if(!p)return s.json({error:"No URL provided"},400);let g=await m.uploadFromUrl(p,A,n);return s.json(g)}catch(o){return console.error("[Media] upload error:",o),s.json({error:o.message},500)}}),h.get("/api/media/folders",async s=>{try{let{user:o}=await k(s.req.raw,U,l,u);if(!o)return s.json({error:"Authentication required"},401);let w=await(await K()).listFolders();return s.json(w)}catch(o){return console.error("[Media] folders error:",o),s.json({error:o.message},500)}}),h.post("/api/media/folders",async s=>{try{let{user:o}=await k(s.req.raw,U,l,u);if(!o)return s.json({error:"Authentication required"},401);let m=await K(),w=await s.req.json(),{name:n,parentPath:i}=w;return n?(await m.createFolder(n,i||""),s.json({message:"Folder created",path:i?`${i}/${n}`:n})):s.json({error:"Folder name is required"},400)}catch(o){return console.error("[Media] create folder error:",o),s.json({error:o.message},500)}}),h.delete("/api/media/folders",async s=>{try{let{user:o}=await k(s.req.raw,U,l,u);if(!o)return s.json({error:"Authentication required"},401);let m=await K(),w=s.req.query("path");return w?(await m.deleteFolder(w),s.json({message:"Folder deleted"})):s.json({error:"Path is required"},400)}catch(o){return console.error("[Media] delete folder error:",o),s.json({error:o.message},500)}}),h.delete("/api/media/:id",async s=>{try{let{user:o}=await k(s.req.raw,U,l,u);if(!o)return s.json({error:"Authentication required"},401);let m=await K(),w=s.req.param("id"),n=new URL(s.req.url).origin;return await m.delete(w,n),s.json({success:!0})}catch(o){return console.error("[Media] delete error:",o),s.json({error:o.message},500)}}),h.get("/api/media/file/:key{.+$}",async s=>{let o=s.req.param("key"),m=globalThis.STORAGE_BUCKET;if(m){let w=await m.get(o);if(!w)return s.notFound();let n=new Headers;return w.writeHttpMetadata(n),n.set("etag",w.httpEtag),new Response(w.body,{headers:n})}return s.notFound()}),h.get("/api/media/resize",async s=>{try{let{user:o}=await k(s.req.raw,U,l,u);if(!o)return s.json({error:"Authentication required"},401);let m=s.req.query("url"),w=parseInt(s.req.query("w")||"0"),n=parseInt(s.req.query("h")||"0"),i=s.req.query("fit")||"cover",p=parseFloat(s.req.query("cx")||"0"),A=parseFloat(s.req.query("cy")||"0"),g=parseFloat(s.req.query("cw")||"0"),b=parseFloat(s.req.query("ch")||"0");if(!m)return s.json({error:"URL is required"},400);let I=(await K()).storage;if(I.name!=="local")return s.redirect(m);let x=I.config?.uploadDir||We.join(process.cwd(),"public","uploads"),v=I.config?.baseUrl||"/uploads";if(!m.startsWith(v))return s.redirect(m);let R=m.replace(v,""),q=We.join(x,R);if(!fs.existsSync(q))return s.json({error:"File not found"},404);let _=fs.readFileSync(q),{default:D}=await import('sharp'),C=D(_);if(g>0&&b>0){let M=await D(_).metadata(),le=M.width||0,z=M.height||0;if(le>0&&z>0){let H=Math.max(0,Math.min(Math.round(p/100*le),le-1)),Ae=Math.max(0,Math.min(Math.round(A/100*z),z-1)),gr=Math.max(1,Math.min(Math.round(g/100*le),le-H)),fr=Math.max(1,Math.min(Math.round(b/100*z),z-Ae));C=C.extract({left:H,top:Ae,width:gr,height:fr});}}(w>0||n>0)&&(C=C.resize({width:w>0?w:void 0,height:n>0?n:void 0,fit:i}));let F=await C.toBuffer(),Y=await D(_).metadata();return s.header("Content-Type",`image/${Y.format||"webp"}`),s.header("Cache-Control","public, max-age=31536000, immutable"),s.body(F)}catch(o){return console.error("[Media] resize error:",o),s.json({error:o.message},500)}}),h.get("/api/media/:id",async s=>{try{let{user:o}=await k(s.req.raw,U,l,u);if(!o)return s.json({error:"Authentication required"},401);let m=await K(),w=s.req.param("id"),n=new URL(s.req.url).origin,i=await m.findById(w,n);return i?s.json(i):s.json({error:"Media not found"},404)}catch(o){return console.error("[Media] get error:",o),s.json({error:o.message},500)}}),h.patch("/api/media/:id",async s=>{try{let{user:o}=await k(s.req.raw,U,l,u);if(!o)return s.json({error:"Authentication required"},401);let m=await K(),w=s.req.param("id"),n=await s.req.json(),i=new URL(s.req.url).origin,p=["folder","metadata","title","alt","caption","originalName"],A={};for(let g of p)n[g]!==void 0&&(A[g]=n[g]);if(Object.keys(A).length>0){let g=await m.update(w,A,i);return s.json({doc:g})}return s.json({error:"No valid fields to update"},400)}catch(o){return console.error("[Media] update error:",o),s.json({error:o.message},500)}}),h.get("/api/media/test",async s=>{try{let{user:o}=await k(s.req.raw,U,l,u);if(!o)return s.json({error:"Authentication required"},401);let m=await K();return s.json({status:m?"initialized":"failed",serviceType:m?.constructor?.name})}catch(o){return console.error("[test] Error:",o),s.json({error:o.message,type:o.constructor?.name,stack:o.stack},500)}}),h.get("/api/storage-status",async s=>{try{let{user:o}=await k(s.req.raw,U,l,u);if(!o)return s.json({error:"Authentication required"},401);let m=typeof globalThis.STORAGE_BUCKET<"u"||typeof s.env?.STORAGE_BUCKET<"u",w=m,n=m?"cloudflare_r2":"local";if(t)try{let i=t.prepare('SELECT provider FROM "_globals_storage-settings" LIMIT 1').get();i&&i.provider&&(w=!0,n=i.provider==="aws"?"s3":i.provider);}catch{try{let i=await t.findOne({collection:"_globals_storage-settings",where:{},draft:!0});i&&i.provider&&(w=!0,n=i.provider==="aws"?"s3":i.provider);}catch{}}return s.json({provider:n,configured:w,usage:0,limit:"unlimited"})}catch(o){return console.error("[Storage] status error:",o),s.json({error:o.message},500)}}),h.get("/api/plugins",async s=>{try{let{user:o}=await k(s.req.raw,U,l,u);if(!o)return s.json({error:"Authentication required"},401);let m=e.getPlugins(),w=e.storageProviders,n=await Promise.all(m.map(async i=>{let p=!0,A=i.name,g={};try{let I=await t.findOne({collection:"_globals_plugin-settings",where:{},draft:!0});I&&I.states&&(g=I.states);}catch{}g[A]!==void 0&&(p=g[A]),w.setPluginEnabled(A,p);let b=A.replace(/^@[^/]+\//,"");b=b.replace(/^(plugin|kyro)-/,"");let T={ai:"AI",seo:"SEO",s3:"S3",aws:"AWS",api:"API",ui:"UI",ftp:"FTP"};if(b=b.split("-").map(I=>{let x=I.toLowerCase();return T[x]?T[x]:I.charAt(0).toUpperCase()+I.slice(1)}).join(" "),b.toLowerCase().startsWith("storage ")){let I=b.split(" ");I.length===2&&(b=`${I[1]} Storage`);}return {id:A,name:i.displayName||b,version:i.version||"1.0.0",description:i.description||"",enabled:p,status:p?"active":"disabled"}}));return s.json(n)}catch(o){return console.error("[Plugins] list error:",o),s.json({error:o.message},500)}}),h.put("/api/plugins/:name/toggle",async s=>{try{let{user:o}=await k(s.req.raw,U,l,u);if(!o)return s.json({error:"Authentication required"},401);let m=s.req.param("name"),w=e.storageProviders,i=!w.isPluginEnabled(m),p=[];if(!i)for(let g of w.getAll())g.pluginName===m&&p.push(g.type);if(!(s.req.query("force")==="1")&&!i&&p.length>0){let g="local";try{let b=t?.prepare?.('SELECT provider FROM "_globals_storage-settings" LIMIT 1')?.get();b?.provider&&(g=b.provider);}catch{try{let b=await t?.findOne?.({collection:"_globals_storage-settings",where:{},draft:!0});b?.provider&&(g=b.provider);}catch{}}if(p.includes(g))return s.json({error:`Cannot disable "${m}" \u2014 storage provider "${g}" is currently active. Switch to Local storage first.`,requiresAction:!0,activeProvider:g},409)}try{let g={},b="global",T=await t.findOne({collection:"_globals_plugin-settings",where:{},draft:!0});T&&(g=T.states||{},b=T.id),g[m]=i,T?await t.update({collection:"_globals_plugin-settings",id:b,data:{states:g}}):await t.create({collection:"_globals_plugin-settings",data:{states:g,id:"global"}});}catch(g){console.warn(`[Plugins] Could not persist state for "${m}":`,g);}return w.setPluginEnabled(m,i),s.json({name:m,enabled:i})}catch(o){return console.error("[Plugins] toggle error:",o),s.json({error:o.message},500)}}),h.get("/api/health",s=>s.json({status:"ok",version:"0.11.0",collections:e.getCollectionSlugs(),timestamp:new Date().toISOString()})),h.get("/api/metrics",async s=>{try{let{user:o,tenantId:m}=await k(s.req.raw,U,l,u);if(!o)return s.json({error:"Authentication required"},401);let w=o.role==="admin"||o.role==="super_admin",i=e.getCollectionSlugs().filter(v=>!["users","audit_logs","media","_globals_access-settings","_globals_brand-settings"].includes(v)&&!v.startsWith("_globals_")).filter(v=>w||chunkQ3Q7BJVQ_cjs.a(o,`${v}:read`)),p=0,A={};await Promise.all(i.map(async v=>{try{let q=(await t.find({collection:v,where:{},limit:1,page:1,tenantId:m})).totalDocs??0;p+=q,A[v]=q;}catch{}}));let g=0;try{g=(await t.find({collection:"media",where:{},limit:1,page:1,tenantId:m})).totalDocs??0;}catch{}let b=0;try{b=(await t.find({collection:"users",where:{},limit:1,page:1,tenantId:m})).totalDocs??0;}catch{}let T=0;try{if(y){let v=await y.getWebhooks();T=Array.isArray(v)?v.length:0;}}catch{}let I=0;try{I=(await t.find({collection:chunkNY47CFVP_cjs.d,where:{},limit:1,page:1,tenantId:m})).totalDocs??0;}catch{}let x=p+g+b;return s.json({totalDocuments:p,totalMedia:w||chunkQ3Q7BJVQ_cjs.a(o,"media:read")?g:void 0,totalUsers:w||chunkQ3Q7BJVQ_cjs.a(o,"users:read")?b:void 0,totalWebhooks:w?T:void 0,totalApiKeys:w?I:void 0,totalStoredRecords:x,collectionCounts:A,collections:i.length,timestamp:new Date().toISOString()})}catch(o){return console.error("[API] Metrics error:",o),s.json({error:o.message},500)}}),h.get("/api/analytics",async s=>{try{let{user:o,tenantId:m}=await k(s.req.raw,U,l,u);if(!o)return s.json({error:"Authentication required"},401);if(!(o.role==="admin"||o.role==="super_admin"))return s.json({error:"Unauthorized"},403);let i=(await t.find({collection:"orders",where:{},limit:1e3,page:1,tenantId:m})).docs||[],p=await t.findOne({collection:"_globals_store-settings",where:{},tenantId:m}),A=p?.currency?.code||p?.currency||"USD",g={},b={},T={};i.forEach(v=>{let R=v.createdAt||v.updatedAt,q=R?new Date(R).toISOString().split("T")[0]:new Date().toISOString().split("T")[0];g[q]||(g[q]=0),b[q]||(b[q]=0);let _=typeof v.total=="number"?v.total:parseFloat(String(v.total||0));g[q]+=isNaN(_)?0:_,b[q]+=1;let D=v.orderStatus||v.status||"pending";T[D]=(T[D]||0)+1;});let I=Object.keys(g).sort().map(v=>({date:v,revenue:Math.round(g[v]*100)/100,orders:b[v]})),x=Math.round(I.reduce((v,R)=>v+R.revenue,0)*100)/100;return s.json({chartData:I,totalRevenue:x,totalOrders:i.length,ordersByStatus:T,currencyCode:typeof A=="string"?A:"USD"})}catch(o){return s.json({error:o.message},500)}}),h.get("/api/kyro/schema",async s=>{let{user:o}=await k(s.req.raw,U,l,u);if(!o)return s.json({error:"Authentication required"},401);let m=n=>n.map(i=>{let p={name:i.name,type:i.type,label:i.label,required:i.required??false,unique:i.unique??false,indexed:i.indexed??false,defaultValue:i.defaultValue,admin:i.admin?{...i.admin}:void 0};return i.minLength!==void 0&&(p.minLength=i.minLength),i.maxLength!==void 0&&(p.maxLength=i.maxLength),i.pattern!==void 0&&(p.pattern=i.pattern),i.variant!==void 0&&(p.variant=i.variant),i.hasMany!==void 0&&(p.hasMany=i.hasMany),i.min!==void 0&&(p.min=i.min),i.max!==void 0&&(p.max=i.max),i.step!==void 0&&(p.step=i.step),i.integer!==void 0&&(p.integer=i.integer),i.options&&(p.options=i.options),i.relationTo&&(p.relationTo=i.relationTo),i.maxDepth!==void 0&&(p.maxDepth=i.maxDepth),i.minRows!==void 0&&(p.minRows=i.minRows),i.maxRows!==void 0&&(p.maxRows=i.maxRows),i.localized!==void 0&&(p.localized=i.localized),i.language&&(p.language=i.language),i.format&&(p.format=i.format),i.allowedTypes&&(p.allowedTypes=i.allowedTypes),i.maxSize&&(p.maxSize=i.maxSize),(i.type==="group"||i.type==="row"||i.type==="collapsible"&&i.fields)&&(p.fields=m(i.fields)),i.type==="array"&&i.fields&&(p.fields=m(i.fields)),i.type==="blocks"&&i.blocks&&(p.blocks=i.blocks.map(A=>({slug:A.slug,label:A.label,fields:m(A.fields)}))),i.type==="tabs"&&i.tabs&&(p.tabs=i.tabs.map(A=>({label:A.label,name:A.name,fields:m(A.fields)}))),p}),w={collections:{},globals:{}};for(let n of e.getCollections()){let i=n.slug;try{w.collections[i]={slug:i,label:n.label||i,fields:m(n.fields),jsonSchema:zodToJsonSchema.zodToJsonSchema(e.getZodSchema(i),{target:"openApi3"}),createSchema:zodToJsonSchema.zodToJsonSchema(e.getCreateZodSchema(i),{target:"openApi3"}),updateSchema:zodToJsonSchema.zodToJsonSchema(e.getUpdateZodSchema(i),{target:"openApi3"}),procedures:{find:{collection:i,where:"Record<string,any>",sort:"string",limit:"number",page:"number",depth:"number",select:"string[]",draft:"boolean"},findByID:{collection:i,id:"string",depth:"number",select:"string[]",draft:"boolean"},create:{collection:i,data:"Record<string,any>",depth:"number",select:"string[]"},update:{collection:i,id:"string",data:"Record<string,any>",depth:"number",select:"string[]",baseUpdatedAt:"string"},delete:{collection:i,id:"string"},count:{collection:i,where:"Record<string,any>"}}};}catch{}}for(let n of e.getGlobals()){let i=n.slug,p=n.fields;if(i==="storage-settings"){let A=e.storageProviders,g=A.getAll(),b=new Set(A.getAllAvailable(I=>A.isPluginEnabled(I)).map(I=>I.type));b.add("local");let T=new Set(g.map(I=>I.type));p=p.filter(I=>I.type==="group"&&I.name&&T.has(I.name)?b.has(I.name):true).map(I=>I.name==="provider"&&I.type==="select"?{...I,options:I.options.filter(x=>b.has(x.value))}:I);}try{w.globals[i]={slug:i,label:n.label||i,fields:m(p),jsonSchema:zodToJsonSchema.zodToJsonSchema(e.getZodSchema(i),{target:"openApi3"}),procedures:{get:{},update:{data:"Record<string,any>"}}};}catch{}}return s.json(w)}),h.get("/api/collections",async s=>{let{user:o}=await k(s.req.raw,U,l,u);if(!o)return s.json({error:"Authentication required"},401);let m=e.getCollections().map(w=>({slug:w.slug,label:w.label||w.slug,fields:w.fields.filter(n=>n.name).map(n=>({name:n.name,type:n.type,required:n.required,label:n.label}))}));return s.json(m)});function Re(s,o,m){if(m in o)return o[m];for(let w of s)if(w.name){if(w.type==="tabs"&&w.tabs){let n=o[w.name];if(n&&typeof n=="object"&&m in n)return n[m]}if((w.type==="group"||w.type==="collapsible")&&w.fields){let n=o[w.name];if(n&&typeof n=="object"){if(m in n)return n[m];let i=Re(w.fields,n,m);if(i!==void 0)return i}}}}h.get("/api/search",async s=>{try{let o=s.req.query("q")||"",m=s.req.query("collections")||"",w=Math.min(parseInt(s.req.query("limit")||"10"),50);if(!o||o.length<2)return s.json({results:[],message:"Query too short"});let{user:n,tenantId:i}=await k(s.req.raw,U,l,u),p=m?m.split(",").filter(Boolean):e.getCollectionSlugs(),A=[],g=new RegExp(o.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),"i");for(let b of e.getCollections()){if(!p.includes(b.slug)||!(await N(b,"read",s.req.raw,n,i,void 0,E,j)).allowed)continue;let I=b.fields.filter(x=>x.name&&x.name!=="id"&&(x.type==="text"||x.type==="email"||x.type==="textarea"||x.type==="richtext"||x.indexed)&&!x.admin?.hidden).map(x=>x.name);if(I.length!==0)try{let x=I.map(R=>{let q={};return q[R]={like:`%${o}%`},q}),v=await t.find({collection:b.slug,where:{OR:x},limit:w,tenantId:i});await chunkILEZ3NYX_cjs.a(v.docs,b.fields,t,e,1,0);for(let R of v.docs){let q=b.admin?.useAsTitle||I.find(D=>D==="title"||D==="name"||D==="heading"||D==="slug"),_=q?Re(b.fields,R,q)??R.id:R.id;A.push({collection:b.slug,label:b.label||b.slug,id:R.id,title:String(_||"Untitled"),doc:R});}}catch(x){console.error(`Search error for ${b.slug}:`,x);}}return A.sort((b,T)=>b.label.localeCompare(T.label)),s.json({results:A})}catch(o){return s.json({error:o.message,results:[]},500)}}),h.get("/api/keys",async s=>{try{let{user:o,tenantId:m}=await k(s.req.raw,U,l,u);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:read"))return s.json({error:"Forbidden"},403);let w=parseInt(s.req.query("page")||"1"),n=Math.min(parseInt(s.req.query("limit")||"50"),100),i=await t.find({collection:chunkNY47CFVP_cjs.d,where:{},page:w,limit:n,tenantId:m}),p=(i.docs||[]).map(A=>({id:A.id,name:A.name,keyPrefix:A.keyPrefix,permissions:A.permissions||[],lastUsed:A.lastUsedAt,createdAt:A.createdAt}));return s.json({docs:p,totalDocs:i.totalDocs||p.length,totalPages:i.totalPages||1})}catch(o){return console.error("[ApiKeys] GET error:",o),s.json({error:o.message},500)}}),h.post("/api/keys",async s=>{try{let{user:o}=await k(s.req.raw,U,l,u);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return s.json({error:"Forbidden"},403);let m=await s.req.json();if(!m.name||typeof m.name!="string")return s.json({error:"name is required"},400);let w=chunkNY47CFVP_cjs.i(),n=await t.create({collection:chunkNY47CFVP_cjs.d,data:{userId:o.id,name:m.name,key:w,keyPrefix:chunkNY47CFVP_cjs.j(w),permissions:Array.isArray(m.permissions)?m.permissions:["*"],expiresAt:m.expiresAt||null,createdAt:new Date().toISOString()}});return await L?.createAuditLog({action:"api_key_create",userId:o.id,resource:"api_key",resourceId:n.id,success:!0,metadata:{keyName:m.name}}),s.json({...n,key:w,permissions:Array.isArray(m.permissions)?m.permissions:["*"]},201)}catch(o){return console.error("[ApiKeys] POST error:",o),s.json({error:o.message},500)}}),h.delete("/api/keys/:id",async s=>{try{let{user:o}=await k(s.req.raw,U,l,u);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return s.json({error:"Forbidden"},403);let m=s.req.param("id"),w=await t.findByID({collection:chunkNY47CFVP_cjs.d,id:m});return w?(await t.delete({collection:chunkNY47CFVP_cjs.d,id:m}),await L?.createAuditLog({action:"api_key_delete",userId:o.id,resource:"api_key",resourceId:m,success:!0,metadata:{keyName:w.name}}),s.json({message:"API key deleted"})):s.json({error:"API key not found"},404)}catch(o){return console.error("[ApiKeys] DELETE error:",o),s.json({error:o.message},500)}}),h.patch("/api/keys/:id",async s=>{try{let{user:o}=await k(s.req.raw,U,l,u);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return s.json({error:"Forbidden"},403);let m=s.req.param("id"),w=await s.req.json(),n=await t.findByID({collection:chunkNY47CFVP_cjs.d,id:m});if(!n)return s.json({error:"API key not found"},404);let i={};if(typeof w.name=="string"&&w.name.trim()&&(i.name=w.name.trim()),Array.isArray(w.permissions)&&(i.permissions=w.permissions),w.expiresAt!==void 0&&(i.expiresAt=w.expiresAt||null),Object.keys(i).length===0)return s.json({error:"Nothing to update"},400);let p=await t.update({collection:chunkNY47CFVP_cjs.d,id:m,data:i});return s.json({...p,keyPrefix:n.keyPrefix})}catch(o){return console.error("[ApiKeys] PATCH error:",o),s.json({error:o.message},500)}}),h.post("/api/keys/:id/rotate",async s=>{try{let{user:o}=await k(s.req.raw,U,l,u);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return s.json({error:"Forbidden"},403);let m=s.req.param("id"),w=await t.findByID({collection:chunkNY47CFVP_cjs.d,id:m});if(!w)return s.json({error:"API key not found"},404);let n=chunkNY47CFVP_cjs.i(),i=await t.update({collection:chunkNY47CFVP_cjs.d,id:m,data:{key:n,keyPrefix:chunkNY47CFVP_cjs.j(n),lastUsedAt:null}});return await L?.createAuditLog({action:"api_key_rotate",userId:o.id,resource:"api_key",resourceId:m,success:!0,metadata:{keyName:w.name}}),s.json({...i,key:n,permissions:w.permissions,expiresAt:w.expiresAt})}catch(o){return console.error("[ApiKeys] rotate error:",o),s.json({error:o.message},500)}}),h.get("/api/webhooks/actions",async s=>{try{let{user:o}=await k(s.req.raw,U,l,u);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:read"))return s.json({error:"Forbidden"},403);let m={generic:{label:"Custom URL",description:"POST to any endpoint with Kyro payload",configFields:[],envVars:[]},"github-push":{label:"GitHub Push",description:"Push an empty commit to simulate a push event",configFields:[{name:"githubOwner",label:"Owner",required:!0,placeholder:"e.g., kyro-dev"},{name:"githubRepo",label:"Repository",required:!0,placeholder:"e.g., my-website"},{name:"githubBranch",label:"Branch",required:!1,placeholder:"main"}],envVars:["GITHUB_TOKEN"]}};return s.json({actions:m})}catch(o){return console.error("[Webhooks] actions error:",o),s.json({error:o.message},500)}}),h.get("/api/webhooks",async s=>{try{let{user:o}=await k(s.req.raw,U,l,u);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:read"))return s.json({error:"Forbidden"},403);if(!y)return s.json({error:"Webhook service not available"},503);let m=await y.getWebhooks();return s.json({docs:m})}catch(o){return console.error("[Webhooks] GET error:",o),s.json({error:o.message},500)}}),h.post("/api/webhooks",async s=>{try{let{user:o}=await k(s.req.raw,U,l,u);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return s.json({error:"Forbidden"},403);if(!y)return s.json({error:"Webhook service not available"},503);let m=await s.req.json(),w=await y.createWebhook(m);return await L?.createAuditLog({action:"webhook_create",userId:o.id,resource:"webhook",resourceId:w.id,success:!0,metadata:{name:w.name,url:w.url}}),s.json(w,201)}catch(o){return console.error("[Webhooks] POST error:",o),s.json({error:o.message},500)}}),h.get("/api/webhooks/:id",async s=>{try{let{user:o}=await k(s.req.raw,U,l,u);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:read"))return s.json({error:"Forbidden"},403);if(!y)return s.json({error:"Webhook service not available"},503);let m=s.req.param("id"),w=await y.getWebhookById(m);return w?s.json(w):s.json({error:"Webhook not found"},404)}catch(o){return console.error("[Webhooks] GET :id error:",o),s.json({error:o.message},500)}}),h.patch("/api/webhooks/:id",async s=>{try{let{user:o}=await k(s.req.raw,U,l,u);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return s.json({error:"Forbidden"},403);if(!y)return s.json({error:"Webhook service not available"},503);let m=s.req.param("id"),w=await s.req.json(),n=await y.updateWebhook(m,w);return n?(await L?.createAuditLog({action:"webhook_update",userId:o.id,resource:"webhook",resourceId:m,success:!0,metadata:{name:n.name}}),s.json(n)):s.json({error:"Webhook not found"},404)}catch(o){return console.error("[Webhooks] PATCH error:",o),s.json({error:o.message},500)}}),h.delete("/api/webhooks/:id",async s=>{try{let{user:o}=await k(s.req.raw,U,l,u);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return s.json({error:"Forbidden"},403);if(!y)return s.json({error:"Webhook service not available"},503);let m=s.req.param("id"),w=await y.getWebhookById(m);return w?(await y.deleteWebhook(m),await L?.createAuditLog({action:"webhook_delete",userId:o.id,resource:"webhook",resourceId:m,success:!0,metadata:{name:w.name}}),s.json({message:"Webhook deleted"})):s.json({error:"Webhook not found"},404)}catch(o){return console.error("[Webhooks] DELETE error:",o),s.json({error:o.message},500)}}),h.post("/api/webhooks/:id/test",async s=>{try{let{user:o}=await k(s.req.raw,U,l,u);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:admin"))return s.json({error:"Forbidden"},403);if(!y)return s.json({error:"Webhook service not available"},503);let m=s.req.param("id"),w=await y.testWebhook(m);return w?s.json(w):s.json({error:"Webhook not found"},404)}catch(o){return console.error("[Webhooks] test error:",o),s.json({error:o.message},500)}}),h.get("/api/webhooks/:id/history",async s=>{try{let{user:o}=await k(s.req.raw,U,l,u);if(!o||!chunkQ3Q7BJVQ_cjs.a(o,"users:read"))return s.json({error:"Forbidden"},403);if(!y)return s.json({error:"Webhook service not available"},503);let m=s.req.param("id"),w=Math.min(parseInt(s.req.query("limit")||"50"),100),n=await y.getDeliveryHistory(m,w);return s.json({docs:n})}catch(o){return console.error("[Webhooks] history error:",o),s.json({error:o.message},500)}});function Ee(s){let o={},m=["name","type","required","hasMany","relationTo","options","min","max","minLength","maxLength","defaultValue","label","localized","admin","unique","index","hidden","readOnly","deprecated"];for(let w of m)w in s&&(o[w]=s[w]);return s.fields&&(o.fields=s.fields.map(Ee)),s.tabs&&(o.tabs=s.tabs.map(w=>({label:w.label,name:w.name,fields:w.fields.map(Ee)}))),o}h.get("/api/__schema",async s=>{try{let{user:o,apiKeyContext:m}=await k(s.req.raw,U,l,u);if(!o&&!m)return s.json({error:"Unauthorized"},401);let n=e.getCollections().filter(i=>i.slug!=="users"&&i.slug!=="audit_logs").map(i=>({slug:i.slug,label:i.label,labelPlural:i.labelPlural,singularLabel:i.singularLabel,timestamps:i.timestamps,auth:!!i.auth,tenantScoped:!!i.tenantScoped,upload:i.upload?{staticDir:i.upload.staticDir,imageSizes:i.upload.imageSizes,mimeTypes:i.upload.mimeTypes}:void 0,fields:i.fields.map(Ee)}));return s.json(n)}catch(o){return console.error("[Schema] error:",o),s.json({error:o.message},500)}});let Rt=e.getCollections();for(let s of Rt){let w=function(n,i){let p=[],A=new Set([...Object.keys(n),...Object.keys(i)]);for(let g of A)g==="id"||g==="createdAt"||g==="updatedAt"||JSON.stringify(n[g])!==JSON.stringify(i[g])&&p.push({field:g,oldValue:g in n?n[g]:void 0,newValue:g in i?i[g]:void 0});return p};let o=s.slug;if(o==="users"||o==="audit_logs")continue;let m=`/api/${o}`;h.post(`${m}/dynamic-options/:fieldName`,async n=>{try{let{user:i,tenantId:p,apiKeyContext:A}=await k(n.req.raw,U,l,u),g=await N(s,"read",n.req.raw,i,p,A,E,j);if(!g.allowed)return n.json({error:g.error},g.status||403);let b=n.req.param("fieldName"),T=await n.req.json(),{data:I,siblingData:x}=T,v=ge(s.fields,b);if(!v)return n.json({error:"Field not found"},404);if(v.type!=="select")return n.json({error:"Field is not a select field"},400);let R=[];return typeof v.options=="function"?R=await v.options({data:I||{},siblingData:x||{}}):Array.isArray(v.options)&&(R=v.options),n.json({options:R})}catch(i){return n.json({error:i.message},500)}}),h.get(m,async n=>{try{let{user:i,tenantId:p,apiKeyContext:A}=await k(n.req.raw,U,l,u),g=await N(s,"read",n.req.raw,i,p,A,E,j);if(!g.allowed)return n.json({error:g.error},g.status||403);p&&t.setTenantContext({tenantId:p,userId:i?.id??"",role:i?.role,isSuperAdmin:i?.role==="super_admin"});let b=new URL(n.req.url),T=parseInt(b.searchParams.get("page")||"1"),I=Math.min(parseInt(b.searchParams.get("limit")||"10"),100),x=b.searchParams.get("sort")||void 0,v=parseInt(b.searchParams.get("depth")||"0"),R=b.searchParams.get("select")?.split(",")||void 0,q=b.searchParams.get("draft"),_=q==="true"?!0:q==="false"?!1:!!i,D={},C=b.searchParams.get("where");if(C)try{D=JSON.parse(C);}catch{return n.json({error:"Invalid JSON in where parameter"},400)}let F=await t.find({collection:o,where:D,sort:x,limit:I,page:T,depth:v,tenantId:p,select:R,draft:_});return await chunkILEZ3NYX_cjs.a(F.docs,s.fields,t,e,1,v),n.json(chunkG7SSHELM_cjs.a(F))}catch(i){return console.error("[API] list error:",i),n.json({error:i.message},500)}}),h.get(`${m}/:id/versions`,async n=>{try{let{user:i,tenantId:p,apiKeyContext:A}=await k(n.req.raw,U,l,u),g=await N(s,"read",n.req.raw,i,p,A,E,j);if(!g.allowed)return n.json({error:g.error},g.status||403);let b=n.req.param("id");if(!b)return n.json({error:"Missing document ID"},400);let T=new URL(n.req.url),I=T.searchParams.get("compareA"),x=T.searchParams.get("compareB");if(Ge(L,A,`${m}/${b}/versions`,"GET",n.req.raw),I&&x){let[_,D]=await Promise.all([t.findVersionByID({collection:o,versionId:I,tenantId:p}),t.findVersionByID({collection:o,versionId:x,tenantId:p})]);if(!_||!D)return n.json({error:"Version not found"},404);let C=w(_.data,D.data);return n.json({diffs:C})}let v=parseInt(T.searchParams.get("page")||"1"),R=Math.min(parseInt(T.searchParams.get("limit")||"10"),100),q=await t.findVersions({collection:o,documentId:b,page:v,limit:R,tenantId:p});return n.json(q)}catch(i){return console.error("[API] versions error:",i),n.json({error:i.message},500)}}),h.put(`${m}/:id/draft`,async n=>{try{let{user:i,tenantId:p,apiKeyContext:A}=await k(n.req.raw,U,l,u),g=await N(s,"update",n.req.raw,i,p,A,E,j);if(!g.allowed)return n.json({error:g.error},g.status||403);let b=n.req.param("id"),T=await n.req.json(),I=Ye(T),x=await t.findByID({collection:o,id:b,tenantId:p,draft:!0});if(!x)return n.json({error:"Document not found"},404);let v;T.delta?v={...x,...T.delta}:v=T.data??Tt(T);let R=await t.updateLatestVersion({collection:o,documentId:b,data:v,status:"draft",tenantId:p});return i&&L?.createAuditLog({action:"document_update",userId:i.id,resource:o,resourceId:b,success:!0,metadata:{type:"draft_save"}}),n.json({data:R,message:"Draft saved successfully"})}catch(i){return n.json({error:i.message},500)}}),h.delete(`${m}/:id/draft`,async n=>{try{let{user:i,tenantId:p,apiKeyContext:A}=await k(n.req.raw,U,l,u),g=await N(s,"update",n.req.raw,i,p,A,E,j);return g.allowed?(i&&L?.createAuditLog({action:"document_update",userId:i.id,resource:o,resourceId:n.req.param("id"),success:!0,metadata:{type:"draft_discard"}}),n.json({message:"Draft discarded successfully"})):n.json({error:g.error},g.status||403)}catch(i){return n.json({error:i.message},500)}}),h.get(`${m}/:id`,async n=>{try{let{user:i,tenantId:p,apiKeyContext:A}=await k(n.req.raw,U,l,u),g=new URL(n.req.url),b=g.searchParams.get("draft"),T=g.searchParams.get("kyroToken"),I=!1;if(b==="true"&&T&&r)try{let D=await jwt.verify(T,r,"HS256");D&&D.type==="preview"&&D.collection===s.slug&&(I=!0);}catch(D){console.warn("Invalid preview token",D);}if(!I){let D=await N(s,"read",n.req.raw,i,p,A,E,j);if(!D.allowed)return n.json({error:D.error},D.status||403)}let x=n.req.param("id"),v=parseInt(g.searchParams.get("depth")||"0"),R=g.searchParams.get("select")?.split(",")||void 0,q=b==="true"?!0:b==="false"?!1:!!i,_=await t.findByID({collection:o,id:x,depth:v,tenantId:p,select:R,draft:q});return !_&&s.fields.some(D=>D.name==="slug")&&(_=await t.findOne({collection:o,where:{slug:x},tenantId:p,draft:q})),_?(await chunkILEZ3NYX_cjs.a([_],s.fields,t,e,1,v),n.json({data:chunkG7SSHELM_cjs.a(_)})):n.json({error:"Document not found"},404)}catch(i){return n.json({error:i.message},500)}}),h.post(`${m}/preview-url`,async n=>{try{let{user:i,tenantId:p}=await k(n.req.raw,U,l,u),A=await N(s,"read",n.req.raw,i,p);if(!A.allowed)return n.json({error:A.error||"Forbidden"},A.status||403);let g=await n.req.json().catch(()=>({})),b="";r&&(b=await jwt.sign({type:"preview",collection:s.slug,id:g.id,exp:Math.floor(Date.now()/1e3)+3600},r,"HS256"));let T="";if(s.admin?.preview){T=await s.admin.preview(g,{req:n.req.raw,token:b});try{let I=new URL(T,"http://localhost");I.searchParams.has("preview")||I.searchParams.set("preview","true"),!I.searchParams.has("kyroToken")&&b&&I.searchParams.set("kyroToken",b),T=T.startsWith("http")?I.toString():`${I.pathname}${I.search}`;}catch{}}else {let I="";try{let v=await t.findOne({collection:"_globals_site-settings",where:{}});v?.siteUrl&&(I=v.siteUrl);}catch{}if(!I)return n.json({error:"No site URL configured in settings, and no custom preview function defined for this collection."},400);I=I.replace(/\/$/,"");let x=g.slug||g.id||"";T=`${I}/${s.slug}/${x}?preview=true&kyroToken=${b}`;}return n.json({url:T})}catch(i){return n.json({error:i.message},500)}}),h.post(m,async n=>{try{let{user:i,tenantId:p,apiKeyContext:A}=await k(n.req.raw,U,l,u),g=await N(s,"create",n.req.raw,i,p,A,E,j);if(!g.allowed)return n.json({error:g.error},g.status||403);p&&t.setTenantContext({tenantId:p,userId:i?.id??"",role:i?.role,isSuperAdmin:i?.role==="super_admin"}),Ge(L,A,m,"POST",n.req.raw);let T=await n.req.json();ye(T,s.fields),we(s.fields,T);let I=n.req.raw;if(s.hooks?.beforeValidate)for(let D of s.hooks.beforeValidate){let C=await D({collection:o,data:T,req:I,user:i,tenantId:p,operation:"create"});C&&typeof C=="object"&&!Array.isArray(C)&&Object.assign(T,C);}let x=e.getCreateZodSchema(o);try{T=x.parse(T);}catch(D){return n.json({error:`Validation failed: ${Xe(D.errors)}`,details:D.errors},400)}s.tenantScoped&&p&&(T.tenantId=p);let v=s.versions?.drafts===!0,R=s.fields.find(D=>D.name==="status"),q=R?.type==="select"&&Array.isArray(R.options)&&R.options.some(D=>D.value==="published");if(v?T.status="draft":q&&!T.status&&(T.status="published"),s.hooks?.beforeChange)for(let D of s.hooks.beforeChange){let C=await D({collection:o,data:T,req:I,user:i,tenantId:p,operation:"create"});C&&typeof C=="object"&&!Array.isArray(C)&&Object.assign(T,C);}let _=await t.create({collection:o,data:T,tenantId:p});if(v&&await t.createVersion({collection:o,documentId:_.id,data:T,status:"draft",createdBy:i?.id,changeDescription:"Created",tenantId:p}),s.hooks?.afterChange)for(let D of s.hooks.afterChange)await D({collection:o,doc:_,data:T,req:I,user:i,tenantId:p,operation:"create"});return y&&y.trigger(Pe(o,"create"),{collection:o,operation:"create",data:_,user:i?{id:i.id,email:i.email,role:i.role}:void 0,tenantId:p}).catch(D=>console.error("[Webhook] Failed to trigger:",D)),i&&L?.createAuditLog({action:"document_create",userId:i.id,resource:o,resourceId:_.id,success:!0}),n.json({data:_,message:"Created successfully"},201)}catch(i){return i.name==="ZodError"?n.json({error:`Validation failed: ${Xe(i.errors)}`,details:i.errors},400):n.json({error:i.message},500)}}),h.patch(`${m}/:id`,async n=>{try{let{user:i,tenantId:p,apiKeyContext:A}=await k(n.req.raw,U,l,u),g=await N(s,"update",n.req.raw,i,p,A,E,j);if(!g.allowed)return n.json({error:g.error},g.status||403);let b=n.req.param("id"),T=await n.req.json(),I=Ye(T),x=await t.findByID({collection:o,id:b,tenantId:p,draft:!0});if(!x)return n.json({error:"Document not found"},404);if(I&&x.updatedAt&&I!==x.updatedAt)return n.json(vt(I,x),409);let v=Object.fromEntries(Object.entries(Tt(T)).filter(([Y,M])=>M!=="null"&&M!==void 0));ye(v,s.fields),we(s.fields,v);let R=n.req.raw;if(s.hooks?.beforeValidate)for(let Y of s.hooks.beforeValidate){let M=await Y({collection:o,data:v,originalDoc:x,req:R,user:i,tenantId:p,operation:"update"});M&&typeof M=="object"&&!Array.isArray(M)&&Object.assign(v,M);}if(v=e.getUpdateZodSchema(o).parse(v),s.hooks?.beforeChange)for(let Y of s.hooks.beforeChange){let M=await Y({collection:o,data:v,originalDoc:x,req:R,user:i,tenantId:p,operation:"update"});M&&typeof M=="object"&&!Array.isArray(M)&&Object.assign(v,M);}let _=n.req.header("X-Draft")==="true",D=s.versions?.drafts===!0,C=n.req.query("autosave")==="true",F;if(D&&_?await t.createVersion({collection:o,documentId:b,data:v,status:"draft",autosave:C,createdBy:i?.id,changeDescription:C?"Autosave":"Draft saved",tenantId:p}):D?(await t.update({collection:o,id:b,data:{...v,status:"published"},tenantId:p}),await t.createVersion({collection:o,documentId:b,data:v,status:"published",createdBy:i?.id,changeDescription:"Published",tenantId:p})):await t.update({collection:o,id:b,data:v,tenantId:p}),F=await t.findByID({collection:o,id:b,tenantId:p,draft:!0}),s.hooks?.afterChange)for(let Y of s.hooks.afterChange)await Y({collection:o,doc:F,data:v,originalDoc:x,req:R,user:i,tenantId:p,operation:"update"});return y&&!C&&y.trigger(Pe(o,"update"),{collection:o,operation:"update",data:F,previousData:x,user:i?{id:i.id,email:i.email,role:i.role}:void 0,tenantId:p}).catch(Y=>console.error("[Webhook] Failed to trigger:",Y)),Ge(L,A,`${m}/${b}`,"PATCH",n.req.raw),i&&L?.createAuditLog({action:"document_update",userId:i.id,resource:o,resourceId:b,success:!0}),n.json({data:F,message:D?"Draft saved":"Updated successfully"})}catch(i){return i.name==="ZodError"?(console.error(`[PATCH ${m}/:id] Validation failed:`,i.errors),n.json({error:`Validation failed: ${Xe(i.errors)}`,details:i.errors},400)):(console.error(`[PATCH ${m}/:id] ERROR:`,i.message,"CAUSE:",i.cause?.message||i.cause,"QUERY:",i.query),n.json({error:i.message},500))}}),h.delete(`${m}/:id`,async n=>{try{let{user:i,tenantId:p,apiKeyContext:A}=await k(n.req.raw,U,l,u),g=await N(s,"delete",n.req.raw,i,p,A,E,j);if(!g.allowed)return n.json({error:g.error},g.status||403);p&&t.setTenantContext({tenantId:p,userId:i?.id??"",role:i?.role,isSuperAdmin:i?.role==="super_admin"});let b=n.req.param("id"),T=n.req.raw,I=await t.findByID({collection:o,id:b,tenantId:p,draft:!0});if(!I)return n.json({error:"Document not found"},404);if(s.hooks?.beforeDelete)for(let v of s.hooks.beforeDelete)await v({collection:o,doc:I,req:T,user:i,tenantId:p,operation:"delete"});let x=await t.delete({collection:o,id:b,tenantId:p});if(s.hooks?.afterDelete)for(let v of s.hooks.afterDelete)await v({collection:o,doc:x,originalDoc:I,req:T,user:i,tenantId:p,operation:"delete"});return y&&y.trigger(Pe(o,"delete"),{collection:o,operation:"delete",data:x,previousData:I,user:i?{id:i.id,email:i.email,role:i.role}:void 0,tenantId:p}).catch(v=>console.error("[Webhook] Failed to trigger:",v)),Ge(L,A,`${m}/${b}`,"DELETE",n.req.raw),i&&L?.createAuditLog({action:"document_delete",userId:i.id,resource:o,resourceId:b,success:!0}),n.json({data:x,message:"Deleted successfully"})}catch(i){return console.error(`[DELETE] Error deleting ${o}:`,i),n.json({error:i.message||String(i)},500)}}),h.post(`${m}/:id/duplicate`,async n=>{try{let{user:i,tenantId:p,apiKeyContext:A}=await k(n.req.raw,U,l,u),g=await N(s,"create",n.req.raw,i,p,A,E,j);if(!g.allowed)return n.json({error:g.error},g.status||403);let b=n.req.param("id"),T=await t.findByID({collection:o,id:b,tenantId:p,draft:!0});if(!T)return n.json({error:"Document not found"},404);let{id:I,createdAt:x,updatedAt:v,...R}=T;De(s.fields,R);let q=Date.now().toString(36);"slug"in R&&typeof R.slug=="string"&&(R.slug=`${R.slug||"document"}-copy-${q}`),"title"in R&&typeof R.title=="string"?R.title=`${R.title||"Copy"} (Copy)`:"name"in R&&typeof R.name=="string"&&(R.name=`${R.name||"Copy"} (Copy)`);let _=await t.create({collection:o,data:{...R,status:"draft"},tenantId:p});return n.json({data:_,message:"Document duplicated successfully"})}catch(i){return console.error("[Duplicate] Error:",i),n.json({error:i.message||String(i)},500)}}),h.post(`${m}/:id/versions/:versionId/restore`,async n=>{try{let{user:i,tenantId:p,apiKeyContext:A}=await k(n.req.raw,U,l,u),g=await N(s,"update",n.req.raw,i,p,A,E,j);if(!g.allowed)return n.json({error:g.error},g.status||403);let b=n.req.param("id"),T=n.req.param("versionId"),I=await t.findVersionByID({collection:o,versionId:T,tenantId:p});if(!I)return n.json({error:"Version not found"},404);let x=await t.update({collection:o,id:b,data:{...I.data,status:"draft"},tenantId:p});return n.json({data:x,message:"Version restored successfully"})}catch(i){return n.json({error:i.message},500)}}),h.post(`${m}/:id/versions`,async n=>{try{let{user:i,tenantId:p,apiKeyContext:A}=await k(n.req.raw,U,l,u),g=await N(s,"update",n.req.raw,i,p,A,E,j);if(!g.allowed)return n.json({error:g.error},g.status||403);let b=await n.req.json(),{versionId:T,action:I}=b;if(I==="restore"&&T){let x=await t.findVersionByID({collection:o,versionId:T,tenantId:p});if(!x)return n.json({error:"Version not found"},404);let v=await t.update({collection:o,id:n.req.param("id"),data:{...x.data,status:"draft"},tenantId:p});return n.json({data:v,message:"Version restored successfully"})}return n.json({error:"Invalid action"},400)}catch(i){return n.json({error:i.message},500)}}),h.post(`${m}/:id/publish`,async n=>{try{let{user:i,tenantId:p,apiKeyContext:A}=await k(n.req.raw,U,l,u),g=await N(s,"update",n.req.raw,i,p,A,E,j);if(!g.allowed)return n.json({error:g.error},g.status||403);p&&t.setTenantContext({tenantId:p,userId:i?.id??"",role:i?.role,isSuperAdmin:i?.role==="super_admin"});let b=n.req.param("id"),T=await n.req.json().catch(()=>({})),I=Ye(T),x=await t.findByID({collection:o,id:b,tenantId:p,draft:!0});if(!x)return n.json({error:"Document not found"},404);if(I&&x.updatedAt&&I!==x.updatedAt)return n.json(vt(I,x),409);let v={status:"published"},R=x;if(s.versions?.drafts){let _=await t.findVersions({collection:o,documentId:b,limit:1,sort:"-createdAt",tenantId:p});if(_.docs.length>0){let D=_.docs[0];R={...x,...D.data},v={...D.data,...v};}}let q=await t.update({collection:o,id:b,data:v,tenantId:p});return s.versions?.drafts&&await t.createVersion({collection:o,documentId:b,data:{...R,status:"published"},status:"published",createdBy:i?.id,changeDescription:"Published",tenantId:p}),y&&y.trigger(Pe(o,"update"),{collection:o,operation:"update",data:q,user:i?{id:i.id,email:i.email,role:i.role}:void 0,tenantId:p}).catch(_=>console.error("[Webhook] Failed to trigger:",_)),n.json({data:q,message:"Published successfully"})}catch(i){return n.json({error:i.message},500)}}),h.post(`${m}/:id/unpublish`,async n=>{try{let{user:i,tenantId:p,apiKeyContext:A}=await k(n.req.raw,U,l,u),g=await N(s,"update",n.req.raw,i,p,A,E,j);if(!g.allowed)return n.json({error:g.error},g.status||403);let b=n.req.param("id");if(!await t.findByID({collection:o,id:b,tenantId:p,draft:!0}))return n.json({error:"Document not found"},404);let I=await t.update({collection:o,id:b,data:{status:"draft"},tenantId:p});return y&&y.trigger(Pe(o,"update"),{collection:o,operation:"update",data:I,user:i?{id:i.id,email:i.email,role:i.role}:void 0,tenantId:p}).catch(x=>console.error("[Webhook] Failed to trigger:",x)),n.json({data:I,message:"Unpublished successfully"})}catch(i){return n.json({error:i.message},500)}});}for(let s of e.getGlobals()){let o=s.slug,m=`/api/globals/${o}`;h.post(`${m}/dynamic-options/:fieldName`,async n=>{try{let{user:i,tenantId:p}=await k(n.req.raw,U,l,u),A=await J(s,"read",n.req.raw,i,p,E);if(!A.allowed)return n.json({error:A.error},A.status||403);let g=n.req.param("fieldName"),b=await n.req.json(),{data:T,siblingData:I}=b,x=ge(s.fields,g);if(!x)return n.json({error:"Field not found"},404);if(x.type!=="select")return n.json({error:"Field is not a select field"},400);let v=[];return typeof x.options=="function"?v=await x.options({data:T||{},siblingData:I||{}}):Array.isArray(x.options)&&(v=x.options),n.json({options:v})}catch(i){return n.json({error:i.message},500)}}),h.get(m,async n=>{try{let{user:i,tenantId:p}=await k(n.req.raw,U,l,u),A=new URL(n.req.url),g=A.searchParams.get("kyroToken"),b=A.searchParams.get("draft"),T=!1;if(b==="true"&&g&&r)try{let q=await jwt.verify(g,r,"HS256");q&&q.type==="preview"&&q.collection===`_globals_${s.slug}`&&(T=!0);}catch(q){console.warn("Invalid preview token",q);}if(!T){let q=await J(s,"read",n.req.raw,i,p,E);if(!q.allowed)return n.json({error:q.error},q.status||403)}let I=b==="true"?!0:b==="false"?!1:!!i,x=parseInt(A.searchParams.get("depth")||"0"),R=(await t.find({collection:`_globals_${o}`,where:{},tenantId:p,draft:I,depth:x,limit:1})).docs[0];if(R&&x>0&&await chunkILEZ3NYX_cjs.a([R],s.fields,t,e,1,x),o==="storage-settings"&&(typeof globalThis.STORAGE_BUCKET<"u"||typeof n.env?.STORAGE_BUCKET<"u")&&(R?R.provider||(R.provider="cloudflare_r2"):R={id:o,provider:"cloudflare_r2"}),o==="system"){let q=wr__default.default.randomBytes(32).toString("hex");R?R.appSecret||(await t.update({collection:`_globals_${o}`,id:o,data:{appSecret:q},tenantId:p}),R.appSecret=q):R=await t.create({collection:`_globals_${o}`,data:{id:o,appSecret:q},tenantId:p});}return n.json({data:R||{}})}catch(i){return n.json({error:i.message},500)}});let w=async n=>{try{let{user:i,tenantId:p}=await k(n.req.raw,U,l,u),A=await J(s,"update",n.req.raw,i,p,E);if(!A.allowed)return n.json({error:A.error},A.status||403);let g=new URL(n.req.url),b=parseInt(g.searchParams.get("depth")||"0"),T=await n.req.json(),I=Ye(T),x=Tt(T),v=Object.fromEntries(Object.entries(x).filter(([H,Ae])=>Ae!==null&&Ae!=="null"&&Ae!==void 0));ye(v,s.fields),we(s.fields,v);let R=e.getUpdateZodSchema(o),q;try{q=R.parse(v);}catch(H){return n.json({error:`Validation failed: ${Xe(H.errors)}`,details:H.errors},400)}let _=new Set(["id","createdAt","updatedAt","status","baseUpdatedAt","_baseUpdatedAt"]),D=Object.fromEntries(Object.entries(q).filter(([H])=>!_.has(H))),C=`_globals_${o}`,F=await t.findOne({collection:C,where:{},tenantId:p,draft:!0});if(F&&I&&F.updatedAt&&I!==F.updatedAt)return n.json(vt(I,F),409);let Y=n.req.header("X-Draft")==="true",M=s.versions?.drafts===!0,le=n.req.query("autosave")==="true",z;if(M&&Y)await t.createVersion({collection:C,documentId:o,data:D,status:"draft",autosave:le,createdBy:i?.id,changeDescription:le?"Autosave":"Manual save",tenantId:p}),F?z=F:z=await t.create({collection:C,data:{...D,id:o,status:"draft"},tenantId:p});else if(M&&!Y){let H="published";F?z=await t.update({collection:C,id:o,data:{...D,status:H},tenantId:p}):z=await t.create({collection:C,data:{...D,id:o,status:H},tenantId:p}),await t.createVersion({collection:C,documentId:o,data:D,status:H,autosave:!1,createdBy:i?.id,changeDescription:"Published",tenantId:p});}else F?z=await t.update({collection:C,id:o,data:D,tenantId:p}):z=await t.create({collection:C,data:{...D,id:o},tenantId:p});if(o==="storage-settings"&&(G=null,ie=null),o==="email-settings"){let H=await chunkBGX27ZRG_cjs.k.fromConfig(t);O.email=H||void 0;}return o==="system"&&await Mt(),i&&L?.createAuditLog({action:"settings_change",userId:i.id,resource:`global:${o}`,resourceId:o,success:!0}),z&&b>0&&await chunkILEZ3NYX_cjs.a([z],s.fields,t,e,1,b),n.json({data:z,message:"Updated successfully"})}catch(i){return console.error(`[API] Save global "${o}" failed:`,i),n.json({error:i.message||"Save failed",stack:process.env.NODE_ENV==="development"?i.stack:void 0},500)}};h.post(m,w),h.patch(m,w),h.post(`${m}/preview-url`,async n=>{try{let{user:i,tenantId:p}=await k(n.req.raw,U,l,u),A=await J(s,"read",n.req.raw,i,p);if(!A.allowed)return n.json({error:A.error||"Forbidden"},A.status||403);let g=await n.req.json().catch(()=>({})),b="";r&&(b=await jwt.sign({type:"preview",collection:`_globals_${s.slug}`,exp:Math.floor(Date.now()/1e3)+3600},r,"HS256"));let T="";if(s.admin?.preview)T=await s.admin.preview(g,{req:n.req.raw,token:b});else {let I="";try{let x=await t.findOne({collection:"_globals_site-settings",where:{}});x?.siteUrl&&(I=x.siteUrl);}catch{}if(!I)return n.json({error:"No site URL configured in settings, and no custom preview function defined."},400);I=I.replace(/\/$/,""),T=`${I}/?preview=true&kyroToken=${b}`;}return n.json({url:T})}catch(i){return n.json({error:i.message},500)}}),h.post(`${m}/publish`,async n=>{try{let{user:i,tenantId:p}=await k(n.req.raw,U,l,u),A=await J(s,"update",n.req.raw,i,p,E);if(!A.allowed)return n.json({error:A.error},403);let g=`_globals_${o}`,b=await t.findOne({collection:g,where:{},tenantId:p,draft:!0});if(!b)return n.json({error:"Global not found"},404);let T={status:"published"},I=b;if(s.versions?.drafts){let v=await t.findVersions({collection:g,documentId:o,limit:1,sort:"-createdAt",tenantId:p});v.docs.length>0&&(I={...b,...v.docs[0].data},T={...v.docs[0].data,...T});}let x=await t.update({collection:g,id:o,data:T,tenantId:p});return s.versions?.drafts&&await t.createVersion({collection:g,documentId:o,data:{...I,status:"published"},status:"published",createdBy:i?.id,changeDescription:"Published",tenantId:p}),n.json({data:x,message:"Published successfully"})}catch(i){return n.json({error:i.message},500)}}),h.post(`${m}/unpublish`,async n=>{try{let{user:i,tenantId:p}=await k(n.req.raw,U,l,u),A=await J(s,"update",n.req.raw,i,p,E);if(!A.allowed)return n.json({error:A.error},403);let g=await t.update({collection:`_globals_${o}`,id:o,data:{status:"draft"},tenantId:p});return n.json({data:g,message:"Unpublished successfully"})}catch(i){return n.json({error:i.message},500)}}),h.get(`${m}/versions`,async n=>{try{let{user:i,tenantId:p}=await k(n.req.raw,U,l,u),A=await J(s,"read",n.req.raw,i,p,E);if(!A.allowed)return n.json({error:A.error},403);let g=parseInt(n.req.query("limit")||"10"),b=parseInt(n.req.query("page")||"1"),T=await t.findVersions({collection:`_globals_${o}`,documentId:o,limit:g,page:b,tenantId:p});return n.json(T)}catch(i){return n.json({error:i.message},500)}}),h.get(`${m}/versions/:versionId`,async n=>{try{let i=n.req.param("versionId"),{user:p,tenantId:A}=await k(n.req.raw,U,l,u),g=await J(s,"read",n.req.raw,p,A,E);if(!g.allowed)return n.json({error:g.error},403);let b=await t.findVersionByID({collection:`_globals_${o}`,versionId:i,tenantId:A});return b?n.json({data:b}):n.json({error:"Version not found"},404)}catch(i){return n.json({error:i.message},500)}}),h.post(`${m}/versions/:versionId/restore`,async n=>{try{let i=n.req.param("versionId"),{user:p,tenantId:A}=await k(n.req.raw,U,l,u),g=await J(s,"update",n.req.raw,p,A,E);if(!g.allowed)return n.json({error:g.error},403);let b=`_globals_${o}`,T=await t.findVersionByID({collection:b,versionId:i,tenantId:A});if(!T)return n.json({error:"Version not found"},404);let I=await t.update({collection:b,id:o,data:{...T.data,status:"draft"},tenantId:A});return n.json({data:I,message:"Version restored successfully"})}catch(i){return n.json({error:i.message},500)}}),o==="email-settings"&&h.post(`${m}/test`,async n=>{try{let{user:i,tenantId:p}=await k(n.req.raw,U,l,u),A=await J(s,"update",n.req.raw,i,p,E);if(!A.allowed)return n.json({error:A.error},A.status||403);let g=await n.req.json(),b={provider:g.provider,from:g.fromEmail||g.from,fromName:g.fromName,replyTo:g.replyTo,smtp:g.smtp?{host:g.smtp.host,port:g.smtp.port,secure:g.smtp.secure,auth:{user:g.smtp.username||g.smtp.user,pass:g.smtp.password||g.smtp.pass}}:void 0,resend:g.resend,sendgrid:g.sendgrid,mailgun:g.mailgun,ses:g.ses},T=new chunkBGX27ZRG_cjs.k(b),I=g.email||g.testEmail||g.testEmailSection&&g.testEmailSection.testEmail;if(!I)return n.json({error:"No test recipient email provided"},400);let x=g.provider?g.provider.charAt(0).toUpperCase()+g.provider.slice(1):"SMTP",v=g.fromName?`${g.fromName} <${g.fromEmail||g.from||"default"}>`:g.fromEmail||g.from||"Configured Sender",R=new Date().toUTCString();return await T.send({to:I,subject:"Kyro CMS \u2014 Email Connection Test",html:`<!DOCTYPE html>
-<html lang="en">
-<head>
-  <meta charset="UTF-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <meta name="color-scheme" content="light dark">
-  <meta name="supported-color-schemes" content="light dark">
-  <title>Kyro CMS Test Email</title>
-  <style>
-    :root {
-      color-scheme: light dark;
-      supported-color-schemes: light dark;
-    }
-    @media (prefers-color-scheme: dark) {
-      .email-body { background-color: #09090b !important; color: #f4f4f5 !important; }
-      .email-card { background-color: #121215 !important; border-color: #27272a !important; box-shadow: none !important; }
-      .email-header { background-color: #18181b !important; border-color: #27272a !important; }
-      .email-brand-text { color: #ffffff !important; }
-      .email-title { color: #ffffff !important; }
-      .email-text { color: #a1a1aa !important; }
-      .email-strong { color: #ffffff !important; }
-      .email-table { background-color: #18181b !important; border-color: #27272a !important; }
-      .email-td-border { border-color: #27272a !important; }
-      .email-label { color: #a1a1aa !important; }
-      .email-value { color: #f4f4f5 !important; }
-      .email-btn-primary { background-color: #ffffff !important; color: #09090b !important; }
-      .email-btn-secondary { background-color: #18181b !important; border-color: #27272a !important; color: #f4f4f5 !important; }
-      .email-footer { background-color: #09090b !important; border-color: #27272a !important; }
-      .email-footer-text { color: #71717a !important; }
-      .email-footer-link { color: #a1a1aa !important; }
-      .logo-light { display: none !important; }
-      .logo-dark { display: inline-block !important; }
-      .badge-status { background-color: #064e3b !important; border-color: #047857 !important; color: #34d399 !important; }
-    }
-  </style>
-</head>
-<body class="email-body" style="margin: 0; padding: 36px 16px; background-color: #f4f4f5; font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif; color: #09090b; -webkit-font-smoothing: antialiased;">
-  <table role="presentation" width="100%" border="0" cellspacing="0" cellpadding="0" class="email-card" style="max-width: 540px; margin: 0 auto; background-color: #ffffff; border: 1px solid #e4e4e7; border-radius: 12px; overflow: hidden; box-shadow: 0 4px 12px rgba(0, 0, 0, 0.03);">
-    <!-- Header Bar -->
-    <tr>
-      <td class="email-header" style="padding: 22px 28px; border-bottom: 1px solid #f4f4f5; background-color: #ffffff;">
-        <table role="presentation" width="100%" border="0" cellspacing="0" cellpadding="0">
-          <tr>
-            <td align="left" valign="middle">
-              <a href="https://kyro-cms.com" target="_blank" style="text-decoration: none; display: inline-flex; align-items: center; gap: 10px;">
-                <!-- Light Mode Logo -->
-                <img src="https://kyro-cms.com/logo.svg" alt="Kyro Logo" class="logo-light" height="24" style="display: inline-block; border: 0; max-height: 24px; vertical-align: middle;" />
-                <!-- Dark Mode Logo -->
-                <img src="https://kyro-cms.com/logo-white.svg" alt="Kyro Logo" class="logo-dark" height="24" style="display: none; border: 0; max-height: 24px; vertical-align: middle;" />
-                <span class="email-brand-text" style="font-size: 16px; font-weight: 700; color: #09090b; letter-spacing: -0.3px; vertical-align: middle;">Kyro CMS</span>
-              </a>
-            </td>
-            <td align="right" valign="middle">
-              <span class="badge-status" style="display: inline-block; padding: 4px 10px; background-color: #ecfdf5; border: 1px solid #a7f3d0; border-radius: 9999px; font-size: 11px; font-weight: 500; color: #047857;">
-                \u2713 Active Connection
-              </span>
-            </td>
-          </tr>
-        </table>
-      </td>
-    </tr>
-
-    <!-- Body Section -->
-    <tr>
-      <td style="padding: 28px;">
-        <h1 class="email-title" style="margin: 0 0 10px; font-size: 20px; font-weight: 600; color: #09090b; letter-spacing: -0.3px;">
-          Test Email Dispatch Successful
-        </h1>
-        <p class="email-text" style="margin: 0 0 24px; font-size: 14px; line-height: 1.6; color: #52525b;">
-          Your email transport configuration in <strong class="email-strong" style="color: #09090b;">Kyro CMS</strong> is active and successfully delivering messages. Below are the connection diagnostics.
-        </p>
-
-        <!-- Compact Metadata Grid -->
-        <table role="presentation" width="100%" border="0" cellspacing="0" cellpadding="0" class="email-table" style="background-color: #fafafa; border: 1px solid #e4e4e7; border-radius: 8px; margin-bottom: 24px; border-collapse: separate; overflow: hidden;">
-          <tr>
-            <td class="email-label email-td-border" style="padding: 10px 14px; border-bottom: 1px solid #e4e4e7; border-right: 1px solid #e4e4e7; width: 30%; font-size: 12px; font-weight: 500; color: #71717a;">
-              Provider
-            </td>
-            <td class="email-value email-td-border" style="padding: 10px 14px; border-bottom: 1px solid #e4e4e7; font-size: 13px; font-weight: 600; color: #09090b;">
-              ${x}
-            </td>
-          </tr>
-          <tr>
-            <td class="email-label email-td-border" style="padding: 10px 14px; border-bottom: 1px solid #e4e4e7; border-right: 1px solid #e4e4e7; font-size: 12px; font-weight: 500; color: #71717a;">
-              Recipient
-            </td>
-            <td class="email-value email-td-border" style="padding: 10px 14px; border-bottom: 1px solid #e4e4e7; font-size: 13px; color: #18181b; font-family: monospace;">
-              ${I}
-            </td>
-          </tr>
-          <tr>
-            <td class="email-label email-td-border" style="padding: 10px 14px; border-bottom: 1px solid #e4e4e7; border-right: 1px solid #e4e4e7; font-size: 12px; font-weight: 500; color: #71717a;">
-              From Sender
-            </td>
-            <td class="email-value email-td-border" style="padding: 10px 14px; border-bottom: 1px solid #e4e4e7; font-size: 13px; color: #18181b;">
-              ${v}
-            </td>
-          </tr>
-          <tr>
-            <td class="email-label email-td-border" style="padding: 10px 14px; border-right: 1px solid #e4e4e7; font-size: 12px; font-weight: 500; color: #71717a;">
-              Timestamp
-            </td>
-            <td class="email-value" style="padding: 10px 14px; font-size: 12px; color: #52525b;">
-              ${R}
-            </td>
-          </tr>
-        </table>
-
-        <!-- Action Links -->
-        <table role="presentation" width="100%" border="0" cellspacing="0" cellpadding="0">
-          <tr>
-            <td align="left">
-              <a href="https://kyro-cms.com" target="_blank" class="email-btn-primary" style="display: inline-block; padding: 10px 18px; background-color: #09090b; color: #ffffff; font-size: 13px; font-weight: 500; text-decoration: none; border-radius: 6px;">
-                Visit Website \u2192
-              </a>
-              <a href="https://kyro-cms.com/docs" target="_blank" class="email-btn-secondary" style="display: inline-block; padding: 10px 16px; margin-left: 8px; background-color: #ffffff; border: 1px solid #e4e4e7; color: #09090b; font-size: 13px; font-weight: 500; text-decoration: none; border-radius: 6px;">
-                Documentation
-              </a>
-            </td>
-          </tr>
-        </table>
-      </td>
-    </tr>
-
-    <!-- Footer -->
-    <tr>
-      <td class="email-footer" style="padding: 18px 28px; border-top: 1px solid #f4f4f5; background-color: #fafafa; text-align: center;">
-        <p class="email-footer-text" style="margin: 0 0 8px; font-size: 12px; color: #71717a;">
-          Automated test message dispatched from <strong>Kyro CMS Engine</strong>.
-        </p>
-        <p style="margin: 0; font-size: 12px; color: #71717a;">
-          <a href="https://kyro-cms.com" target="_blank" class="email-footer-link" style="color: #09090b; text-decoration: none; font-weight: 500;">kyro-cms.com</a> &nbsp;\u2022&nbsp; 
-          <a href="https://kyro-cms.com/docs" target="_blank" class="email-footer-link" style="color: #09090b; text-decoration: none; font-weight: 500;">Docs</a> &nbsp;\u2022&nbsp; 
-          <a href="https://github.com/danielDozie/kyro-cms" target="_blank" class="email-footer-link" style="color: #09090b; text-decoration: none; font-weight: 500;">GitHub</a>
-        </p>
-      </td>
-    </tr>
-  </table>
-</body>
-</html>`,text:`Success! Your email settings in Kyro CMS are working correctly.
-
-Provider: ${x}
-Recipient: ${I}
-Timestamp: ${R}
-Website: https://kyro-cms.com`}),n.json({message:"Test email sent successfully!"})}catch(i){return console.error("[Email Test] Failed:",i),n.json({error:i.message||"Failed to send test email"},500)}});}return h.onError((s,o)=>(console.error(`[API Error] ${o.req.method} ${o.req.path}:`,s),o.json({error:s.message||"Internal server error",code:"INTERNAL_ERROR"},500))),h}function ts(c,e,t){return mr({registry:c,db:e,authSecret:t?.authSecret,user:t?.user,req:t?.req,tenantId:t?.tenantId,cors:t?.cors,webhookService:t?.webhookService})}
-exports.a=Kr;exports.b=zr;exports.c=Vr;exports.d=ir;exports.e=he;exports.f=wt;exports.g=as;exports.h=Mt;exports.i=br;exports.j=is;exports.k=Bt;exports.l=rt;exports.m=Oe;exports.n=Gt;exports.o=As;exports.p=Yt;exports.q=Me;exports.r=Be;exports.s=or;exports.t=He;exports.u=mr;exports.v=ts;