@kyro-cms/core 0.3.1 → 0.3.4

package/dist/{chunk-E5X75WNB.js → chunk-QXIQWPAP.js}

@@ -1,32 +1,5 @@
 import { createHmac, randomBytes, randomUUID, timingSafeEqual } from 'crypto';
 
-// src/access/types.ts
-async function evaluateAccess(access, args) {
-  if (typeof access === "boolean") {
-    return access;
-  }
-  if (typeof access === "function") {
-    return await access(args);
-  }
-  return true;
-}
-function mergeWhereClauses(...whereClauses) {
-  const result = {};
-  for (const clause of whereClauses) {
-    if (clause && typeof clause === "object") {
-      Object.assign(result, clause);
-    }
-  }
-  return result;
-}
-function getWhereClause(access, args) {
-  return evaluateAccess(access, args).then((result) => {
-    if (result === true) return void 0;
-    if (result === false) return { _id: { $eq: null } };
-    return result;
-  });
-}
-
 // src/webhooks/types.ts
 var WEBHOOK_EVENTS = {
   COLLECTION_CREATE: "collection.create",
@@ -491,7 +464,18 @@ function hasApiKeyPermission(permissions, required) {
   if (permissions.includes(`${resource}:*`)) return true;
   return false;
 }
+function generateApiKey() {
+  const chars = "abcdefghijklmnopqrstuvwxyz0123456789";
+  let suffix = "";
+  for (let i = 0; i < 32; i++) {
+    suffix += chars[Math.floor(Math.random() * chars.length)];
+  }
+  return `kyro_${suffix}`;
+}
+function generateApiKeyPrefix(key) {
+  return key.substring(0, 8);
+}
 
-export { ALL_WEBHOOK_EVENTS, WEBHOOK_COLLECTION, WEBHOOK_DELIVERY_COLLECTION, WEBHOOK_EVENTS, WebhookService, buildDeliveryRecord, createApiKeyContext, createTestPayload, createWebhookService, deliverWebhook, deliverWithRetry, evaluateAccess, extractApiKeyFromRequest, generateWebhookSecret, getWhereClause, hasApiKeyPermission, mergeWhereClauses, signPayload, validateApiKey };
-//# sourceMappingURL=chunk-E5X75WNB.js.map
-//# sourceMappingURL=chunk-E5X75WNB.js.map
+export { ALL_WEBHOOK_EVENTS, API_KEY_COLLECTION, WEBHOOK_COLLECTION, WEBHOOK_DELIVERY_COLLECTION, WEBHOOK_EVENTS, WebhookService, buildDeliveryRecord, createApiKeyContext, createTestPayload, createWebhookService, deliverWebhook, deliverWithRetry, extractApiKeyFromRequest, generateApiKey, generateApiKeyPrefix, generateWebhookSecret, hasApiKeyPermission, signPayload, validateApiKey };
+//# sourceMappingURL=chunk-QXIQWPAP.js.map
+//# sourceMappingURL=chunk-QXIQWPAP.js.map

package/dist/chunk-QXIQWPAP.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/webhooks/types.ts","../src/webhooks/delivery.ts","../src/webhooks/WebhookService.ts","../src/auth/api-key.ts"],"names":[],"mappings":";;;AAAO,IAAM,cAAA,GAAiB;AAAA,EAC5B,iBAAA,EAAmB,mBAAA;AAAA,EACnB,iBAAA,EAAmB,mBAAA;AAAA,EACnB,iBAAA,EAAmB,mBAAA;AAAA,EACnB,YAAA,EAAc,cAAA;AAAA,EACd,YAAA,EAAc,cAAA;AAAA,EACd,UAAA,EAAY,YAAA;AAAA,EACZ,aAAA,EAAe,eAAA;AAAA,EACf,WAAA,EAAa,aAAA;AAAA,EACb,aAAA,EAAe,eAAA;AAAA,EACf,UAAA,EAAY,YAAA;AAAA,EACZ,aAAA,EAAe,eAAA;AAAA,EACf,eAAA,EAAiB;AACnB;AAIO,IAAM,kBAAA,GAAqC,MAAA,CAAO,MAAA,CAAO,cAAc;AA+EvE,IAAM,kBAAA,GAAqB;AAC3B,IAAM,2BAAA,GAA8B;ACxEpC,SAAS,WAAA,CAAY,SAAiB,MAAA,EAAwB;AACnE,EAAA,OAAO,CAAA,OAAA,EAAU,UAAA,CAAW,QAAA,EAAU,MAAM,CAAA,CAAE,OAAO,OAAO,CAAA,CAAE,MAAA,CAAO,KAAK,CAAC,CAAA,CAAA;AAC7E;AAEO,SAAS,qBAAA,GAAgC;AAC9C,EAAA,OAAO,WAAA,CAAY,EAAE,CAAA,CAAE,QAAA,CAAS,KAAK,CAAA;AACvC;AAEA,eAAsB,cAAA,CACpB,OAAA,EACA,OAAA,EACA,OAAA,GAA2B,EAAC,EACH;AACzB,EAAA,MAAM,OAAA,GAAU,QAAQ,OAAA,IAAW,GAAA;AACnC,EAAA,MAAM,SAAA,GAAY,KAAK,GAAA,EAAI;AAE3B,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAEnC,EAAA,MAAM,OAAA,GAAkC;AAAA,IACtC,cAAA,EAAgB,kBAAA;AAAA,IAChB,YAAA,EAAc,sBAAA;AAAA,IACd,mBAAmB,OAAA,CAAQ,KAAA;AAAA,IAC3B,sBAAsB,OAAA,CAAQ,EAAA;AAAA,IAC9B,uBAAuB,OAAA,CAAQ,SAAA;AAAA,IAC/B,GAAI,OAAA,CAAQ,OAAA,IAAW;AAAC,GAC1B;AAEA,EAAA,IAAI,QAAQ,MAAA,EAAQ;AAClB,IAAA,MAAM,SAAA,GAAY,WAAA,CAAY,IAAA,EAAM,OAAA,CAAQ,MAAM,CAAA;AAClD,IAAA,OAAA,CAAQ,qBAAqB,CAAA,GAAI,SAAA;AAAA,EACnC;AAEA,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,YAAY,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,OAAO,CAAA;AAE9D,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,OAAA,CAAQ,GAAA,EAAK;AAAA,MACxC,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA;AAAA,MACA,IAAA;AAAA,MACA,QAAQ,UAAA,CAAW;AAAA,KACpB,CAAA;AAED,IAAA,YAAA,CAAa,SAAS,CAAA;AAEtB,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,GAAA,EAAI,GAAI,SAAA;AAC9B,IAAA,IAAI,YAAA;AAEJ,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,MAAA,YAAA,GAAe,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,GAAI,CAAA;AAAA,IACnC,CAAA,CAAA,MAAQ;AAAA,IAAC;AAET,IAAA,MAAM,MAAA,GAAyB;AAAA,MAC7B,SAAS,QAAA,CAAS,EAAA;AAAA,MAClB,QAAQ,QAAA,CAAS,MAAA;AAAA,MACjB,YAAY,QAAA,CAAS,UAAA;AAAA,MACrB,IAAA,EAAM,YAAA;AAAA,MACN;AAAA,KACF;AAEA,IAAA,IAAI,MAAA,CAAO,OAAA,IAAW,OAAA,CAAQ,SAAA,EAAW;AACvC,MAAA,OAAA,CAAQ,UAAU,MAAM,CAAA;AAAA,IAC1B,CAAA,MAAA,IAAW,CAAC,MAAA,CAAO,OAAA,IAAW,QAAQ,SAAA,EAAW;AAC/C,MAAA,OAAA,CAAQ,UAAU,CAAA,KAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,EAAA,EAAK,QAAA,CAAS,UAAU,CAAA,CAAE,CAAA;AAAA,IACrE;AAEA,IAAA,OAAO,MAAA;AAAA,EACT,SAAS,KAAA,EAAY;AACnB,IAAA,YAAA,CAAa,SAAS,CAAA;AACtB,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,GAAA,EAAI,GAAI,SAAA;AAC9B,IAAA,MAAM,YAAA,GACJ,MAAM,IAAA,KAAS,YAAA,GACX,2BAA2B,OAAO,CAAA,EAAA,CAAA,GAClC,MAAM,OAAA,IAAW,eAAA;AAEvB,IAAA,IAAI,QAAQ,SAAA,EAAW;AACrB,MAAA,OAAA,CAAQ,UAAU,YAAY,CAAA;AAAA,IAChC;AAEA,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,MAAA,EAAQ,CAAA;AAAA,MACR,QAAA;AAAA,MACA,KAAA,EAAO;AAAA,KACT;AAAA,EACF;AACF;AAEA,eAAsB,iBACpB,OAAA,EACA,OAAA,EACA,UAAA,EACA,OAAA,GAA2B,EAAC,EACH;AACzB,EAAA,MAAM,UAAA,GAAa,QAAQ,UAAA,IAAc,CAAA;AACzC,EAAA,MAAM,SAAA,GAAY,QAAQ,UAAA,IAAc,GAAA;AACxC,EAAA,IAAI,UAAA,GAAoC,IAAA;AAExC,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,IAAW,UAAA,EAAY,OAAA,EAAA,EAAW;AACtD,IAAA,IAAI,UAAU,CAAA,EAAG;AACf,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,GAAA,CAAI,SAAA,GAAY,IAAA,CAAK,IAAI,CAAA,EAAG,OAAA,GAAU,CAAC,CAAA,EAAG,GAAK,CAAA;AAClE,MAAA,IAAI,QAAQ,OAAA,EAAS;AACnB,QAAA,OAAA,CAAQ,OAAA,CAAQ,OAAA,EAAS,CAAA,YAAA,EAAe,KAAK,CAAA,KAAA,CAAO,CAAA;AAAA,MACtD;AACA,MAAA,MAAM,MAAM,KAAK,CAAA;AAAA,IACnB;AAEA,IAAA,IAAI,OAAA,CAAQ,OAAA,IAAW,OAAA,GAAU,CAAA,EAAG;AAClC,MAAA,OAAA,CAAQ,OAAA,CAAQ,SAAS,CAAA,QAAA,EAAW,OAAA,GAAU,CAAC,CAAA,CAAA,EAAI,UAAA,GAAa,CAAC,CAAA,CAAE,CAAA;AAAA,IACrE;AAEA,IAAA,UAAA,GAAa,MAAM,cAAA,CAAe,OAAA,EAAS,OAAA,EAAS;AAAA,MAClD,GAAG,OAAA;AAAA,MACH,OAAA,EAAS,MAAA;AAAA,MACT,SAAA,EAAW,MAAA;AAAA,MACX,SAAA,EAAW;AAAA,KACZ,CAAA;AAED,IAAA,IAAI,WAAW,OAAA,EAAS;AACtB,MAAA,OAAO,UAAA;AAAA,IACT;AAEA,IAAA,IAAI,WAAW,KAAA,EAAO,QAAA,CAAS,WAAW,CAAA,IAAK,UAAU,UAAA,EAAY;AACnE,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,UAAA,CAAW,MAAA,IAAU,GAAA,IAAO,UAAA,CAAW,SAAS,GAAA,EAAK;AACvD,MAAA,OAAO,UAAA;AAAA,IACT;AAAA,EACF;AAEA,EAAA,OACE,UAAA,IAAc;AAAA,IACZ,OAAA,EAAS,KAAA;AAAA,IACT,MAAA,EAAQ,CAAA;AAAA,IACR,QAAA,EAAU,CAAA;AAAA,IACV,KAAA,EAAO;AAAA,GACT;AAEJ;AAEO,SAAS,oBACd,UAAA,EACA,SAAA,EACA,KAAA,EACA,OAAA,EACA,SACA,MAAA,EACiB;AACjB,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,UAAA;AAAA,IACJ,SAAA;AAAA,IACA,KAAA;AAAA,IACA,OAAA;AAAA,IACA,OAAA;AAAA,IACA,MAAA,EAAQ,MAAA,CAAO,OAAA,GAAU,SAAA,GAAY,QAAA;AAAA,IACrC,cAAA,EAAgB,OAAO,MAAA,IAAU,MAAA;AAAA,IACjC,cAAc,MAAA,CAAO,IAAA;AAAA,IACrB,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,OAAO,MAAA,CAAO,KAAA;AAAA,IACd,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,IAClC,aAAa,MAAA,CAAO,OAAA,GAAA,qBAAc,IAAA,EAAK,EAAE,aAAY,GAAI;AAAA,GAC3D;AACF;AAEA,SAAS,MAAM,EAAA,EAA2B;AACxC,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AACzD;AAEO,SAAS,iBAAA,GAAoC;AAClD,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,CAAA,KAAA,EAAQ,IAAA,CAAK,GAAA,EAAK,CAAA,CAAA;AAAA,IACtB,KAAA,EAAO,mBAAA;AAAA,IACP,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,IAClC,UAAA,EAAY,MAAA;AAAA,IACZ,SAAA,EAAW,QAAA;AAAA,IACX,IAAA,EAAM,EAAE,OAAA,EAAS,iCAAA,EAAkC;AAAA,IACnD,MAAM,EAAE,EAAA,EAAI,UAAU,KAAA,EAAO,iBAAA,EAAmB,MAAM,aAAA;AAAc,GACtE;AACF;AC1LO,IAAM,iBAAN,MAAqB;AAAA,EAClB,EAAA;AAAA,EAER,YAAY,EAAA,EAAiB;AAC3B,IAAA,IAAA,CAAK,EAAA,GAAK,EAAA;AAAA,EACZ;AAAA,EAEA,MAAM,YAAY,OAAA,EAGW;AAC3B,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,EAAA,CAAG,IAAA,CAAK;AAAA,MAChC,UAAA,EAAY,kBAAA;AAAA,MACZ,KAAA,EAAO,OAAA,EAAS,MAAA,GAAS,EAAE,MAAA,EAAQ,EAAE,MAAA,EAAQ,OAAA,CAAQ,MAAA,EAAO,EAAE,GAAI,EAAC;AAAA,MACnE,KAAA,EAAO,GAAA;AAAA,MACP,IAAA,EAAM;AAAA,KACP,CAAA;AAED,IAAA,MAAM,WAAW,MAAA,CAAO,IAAA;AAExB,IAAA,IAAI,SAAS,KAAA,EAAO;AAClB,MAAA,OAAO,QAAA,CAAS,MAAA;AAAA,QAAO,CAAC,CAAA,KACtB,CAAA,CAAE,MAAA,CAAO,QAAA,CAAS,QAAQ,KAAqB;AAAA,OACjD;AAAA,IACF;AAEA,IAAA,OAAO,QAAA;AAAA,EACT;AAAA,EAEA,MAAM,eAAe,EAAA,EAA2C;AAC9D,IAAA,OAAO,IAAA,CAAK,GAAG,QAAA,CAAS;AAAA,MACtB,UAAA,EAAY,kBAAA;AAAA,MACZ;AAAA,KACD,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,cAAc,IAAA,EAAiD;AACnE,IAAA,MAAM,GAAA,GAAA,iBAAM,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AACnC,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,MAAA,IAAU,qBAAA,EAAsB;AAEpD,IAAA,MAAM,OAAA,GAAU;AAAA,MACd,IAAI,UAAA,EAAW;AAAA,MACf,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,KAAK,IAAA,CAAK,GAAA;AAAA,MACV,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,MAAA,EAAQ,KAAK,MAAA,IAAU,QAAA;AAAA,MACvB,MAAA;AAAA,MACA,OAAA,EAAS,IAAA,CAAK,OAAA,IAAW,EAAC;AAAA,MAC1B,SAAA,EAAW,GAAA;AAAA,MACX,SAAA,EAAW;AAAA,KACb;AAEA,IAAA,MAAM,IAAA,CAAK,GAAG,MAAA,CAAO;AAAA,MACnB,UAAA,EAAY,kBAAA;AAAA,MACZ,IAAA,EAAM;AAAA,KACP,CAAA;AAED,IAAA,OAAO,OAAA;AAAA,EACT;AAAA,EAEA,MAAM,aAAA,CACJ,EAAA,EACA,IAAA,EAC+B;AAC/B,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,cAAA,CAAe,EAAE,CAAA;AAC7C,IAAA,IAAI,CAAC,UAAU,OAAO,IAAA;AAEtB,IAAA,MAAM,OAAA,GAAU;AAAA,MACd,GAAG,QAAA;AAAA,MACH,GAAG,IAAA;AAAA,MACH,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,KACpC;AAEA,IAAA,IAAI,IAAA,CAAK,MAAA,KAAW,EAAA,IAAM,QAAA,IAAY,IAAA,EAAM;AAC1C,MAAA,OAAO,OAAA,CAAQ,MAAA;AAAA,IACjB;AAEA,IAAA,MAAM,IAAA,CAAK,GAAG,MAAA,CAAO;AAAA,MACnB,UAAA,EAAY,kBAAA;AAAA,MACZ,EAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAED,IAAA,OAAO,OAAA;AAAA,EACT;AAAA,EAEA,MAAM,cAAc,EAAA,EAA2B;AAC7C,IAAA,MAAM,IAAA,CAAK,GAAG,MAAA,CAAO;AAAA,MACnB,UAAA,EAAY,kBAAA;AAAA,MACZ;AAAA,KACD,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,OAAA,CACJ,KAAA,EACA,WAAA,EACiC;AACjC,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,WAAA,EAAY;AACxC,IAAA,MAAM,iBAAiB,QAAA,CAAS,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,WAAW,QAAQ,CAAA;AAEnE,IAAA,MAAM,mBAAmB,cAAA,CAAe,MAAA;AAAA,MAAO,CAAC,CAAA,KAC9C,CAAA,CAAE,MAAA,CAAO,SAAS,KAAK;AAAA,KACzB;AAEA,IAAA,IAAI,gBAAA,CAAiB,WAAW,CAAA,EAAG;AACjC,MAAA,OAAO,EAAC;AAAA,IACV;AAEA,IAAA,MAAM,OAAA,GAA0B;AAAA,MAC9B,EAAA,EAAI,CAAA,GAAA,EAAM,IAAA,CAAK,GAAA,EAAK,CAAA,CAAA,EAAI,UAAA,EAAW,CAAE,KAAA,CAAM,CAAA,EAAG,CAAC,CAAC,CAAA,CAAA;AAAA,MAChD,KAAA;AAAA,MACA,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,MAClC,GAAG;AAAA,KACL;AAEA,IAAA,MAAM,UAAkC,EAAC;AAEzC,IAAA,KAAA,MAAW,WAAW,gBAAA,EAAkB;AACtC,MAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,cAAA,CAAe,SAAS,OAAO,CAAA;AACzD,MAAA,OAAA,CAAQ,KAAK,MAAM,CAAA;AAAA,IACrB;AAEA,IAAA,OAAO,OAAA;AAAA,EACT;AAAA,EAEA,MAAM,cAAA,CACJ,OAAA,EACA,OAAA,EAC+B;AAC/B,IAAA,MAAM,UAAA,GAAa,CAAA,IAAA,EAAO,IAAA,CAAK,GAAA,EAAK,CAAA,CAAA,EAAI,UAAA,EAAW,CAAE,KAAA,CAAM,CAAA,EAAG,CAAC,CAAC,CAAA,CAAA;AAEhE,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,MAAM,gBAAA,CAAiB,OAAA,EAAS,SAAS,UAAA,EAAY;AAAA,QAClE,UAAA,EAAY,CAAA;AAAA,QACZ,UAAA,EAAY;AAAA,OACb,CAAA;AAED,MAAA,MAAM,cAAA,GAAiB,mBAAA;AAAA,QACrB,UAAA;AAAA,QACA,OAAA,CAAQ,EAAA;AAAA,QACR,OAAA,CAAQ,OAAO,CAAC,CAAA;AAAA,QAChB,OAAA;AAAA,QACA,CAAA;AAAA,QACA;AAAA,OACF;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,CAAK,GAAG,MAAA,CAAO;AAAA,UACnB,UAAA,EAAY,2BAAA;AAAA,UACZ,IAAA,EAAM;AAAA,SACP,CAAA;AAAA,MACH,CAAA,CAAA,MAAQ;AACN,QAAA,OAAA,CAAQ,IAAA;AAAA,UACN,kDAAA;AAAA,UACA;AAAA,SACF;AAAA,MACF;AAEA,MAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,QAAA,MAAM,IAAA,CAAK,aAAA,CAAc,OAAA,CAAQ,EAAA,EAAI;AAAA,UACnC,MAAA,EAAQ,OAAA;AAAA,UACR,WAAW,MAAA,CAAO;AAAA,SACnB,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,QAAC,CAAC,CAAA;AAAA,MACnB,CAAA,MAAO;AACL,QAAA,MAAM,IAAA,CAAK,aAAA,CAAc,OAAA,CAAQ,EAAA,EAAI;AAAA,UACnC,MAAA,EAAQ,QAAA;AAAA,UACR,aAAA,EAAA,iBAAe,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,SACvC,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,QAAC,CAAC,CAAA;AAAA,MACnB;AAEA,MAAA,OAAO;AAAA,QACL,UAAA;AAAA,QACA,WAAW,OAAA,CAAQ,EAAA;AAAA,QACnB,KAAA,EAAO,OAAA,CAAQ,MAAA,CAAO,CAAC,CAAA;AAAA,QACvB,MAAA,EAAQ,MAAA,CAAO,OAAA,GAAU,SAAA,GAAY,QAAA;AAAA,QACrC,gBAAgB,MAAA,CAAO,MAAA;AAAA,QACvB,UAAU,MAAA,CAAO,QAAA;AAAA,QACjB,OAAO,MAAA,CAAO;AAAA,OAChB;AAAA,IACF,SAAS,KAAA,EAAY;AACnB,MAAA,OAAO;AAAA,QACL,UAAA;AAAA,QACA,WAAW,OAAA,CAAQ,EAAA;AAAA,QACnB,KAAA,EAAO,OAAA,CAAQ,MAAA,CAAO,CAAC,CAAA;AAAA,QACvB,MAAA,EAAQ,QAAA;AAAA,QACR,OAAO,KAAA,CAAM;AAAA,OACf;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,YAAY,SAAA,EAAyD;AACzE,IAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,cAAA,CAAe,SAAS,CAAA;AACnD,IAAA,IAAI,CAAC,SAAS,OAAO,IAAA;AAErB,IAAA,MAAM,OAAA,GAA0B;AAAA,MAC9B,EAAA,EAAI,CAAA,KAAA,EAAQ,IAAA,CAAK,GAAA,EAAK,CAAA,CAAA;AAAA,MACtB,KAAA,EAAO,OAAA,CAAQ,MAAA,CAAO,CAAC,CAAA,IAAK,mBAAA;AAAA,MAC5B,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,MAClC,UAAA,EAAY,MAAA;AAAA,MACZ,SAAA,EAAW,QAAA;AAAA,MACX,IAAA,EAAM,EAAE,OAAA,EAAS,+CAAA,EAAgD;AAAA,MACjE,IAAA,EAAM;AAAA,QACJ,EAAA,EAAI,QAAA;AAAA,QACJ,KAAA,EAAO,iBAAA;AAAA,QACP,IAAA,EAAM;AAAA;AACR,KACF;AAEA,IAAA,OAAO,IAAA,CAAK,cAAA,CAAe,OAAA,EAAS,OAAO,CAAA;AAAA,EAC7C;AAAA,EAEA,MAAM,kBAAA,CACJ,SAAA,EACA,KAAA,GAAgB,EAAA,EACY;AAC5B,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,EAAA,CAAG,IAAA,CAAK;AAAA,MAChC,UAAA,EAAY,2BAAA;AAAA,MACZ,OAAO,EAAE,SAAA,EAAW,EAAE,MAAA,EAAQ,WAAU,EAAE;AAAA,MAC1C,IAAA,EAAM,YAAA;AAAA,MACN,KAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAED,IAAA,OAAO,MAAA,CAAO,IAAA;AAAA,EAChB;AAAA,EAEA,MAAM,cACJ,UAAA,EACsC;AACtC,IAAA,MAAM,QAAA,GAAY,MAAM,IAAA,CAAK,EAAA,CAAG,QAAA,CAAS;AAAA,MACvC,UAAA,EAAY,2BAAA;AAAA,MACZ,EAAA,EAAI;AAAA,KACL,CAAA;AAED,IAAA,IAAI,CAAC,UAAU,OAAO,IAAA;AAEtB,IAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,cAAA,CAAe,SAAS,SAAS,CAAA;AAC5D,IAAA,IAAI,CAAC,SAAS,OAAO,IAAA;AAErB,IAAA,OAAO,IAAA,CAAK,cAAA,CAAe,OAAA,EAAS,QAAA,CAAS,OAAO,CAAA;AAAA,EACtD;AACF;AAEO,SAAS,qBAAqB,EAAA,EAAiC;AACpE,EAAA,OAAO,IAAI,eAAe,EAAE,CAAA;AAC9B;ACpOO,IAAM,kBAAA,GAAqB;AAElC,SAAS,kBAAkB,GAAA,EAAqB;AAC9C,EAAA,OAAO,GAAA,CAAI,SAAA,CAAU,CAAA,EAAG,CAAC,CAAA;AAC3B;AAEA,SAAS,mBAAA,CAAoB,GAAW,CAAA,EAAoB;AAC1D,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,CAAA,CAAE,MAAA,EAAQ;AACzB,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,IAAI;AACF,IAAA,OAAO,eAAA,CAAgB,OAAO,IAAA,CAAK,CAAC,GAAG,MAAA,CAAO,IAAA,CAAK,CAAC,CAAC,CAAA;AAAA,EACvD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAEA,eAAsB,cAAA,CACpB,MAAA,EACA,EAAA,EACA,UAAA,EACiC;AACjC,EAAA,IAAI,CAAC,MAAA,IAAU,OAAO,MAAA,KAAW,QAAA,EAAU;AACzC,IAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,qBAAA,EAAsB;AAAA,EACtD;AAEA,EAAA,IAAI,CAAC,MAAA,CAAO,UAAA,CAAW,OAAO,CAAA,EAAG;AAC/B,IAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,wBAAA,EAAyB;AAAA,EACzD;AAEA,EAAA,MAAM,SAAA,GAAY,kBAAkB,MAAM,CAAA;AAE1C,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,MAAM,EAAA,CAAG,IAAA,CAAK;AAAA,MAC3B,UAAA,EAAY,kBAAA;AAAA,MACZ,OAAO,EAAE,SAAA,EAAW,EAAE,MAAA,EAAQ,WAAU,EAAE;AAAA,MAC1C,KAAA,EAAO,GAAA;AAAA,MACP,IAAA,EAAM;AAAA,KACP,CAAA;AAED,IAAA,IAAI,CAAC,MAAA,CAAO,IAAA,IAAQ,MAAA,CAAO,IAAA,CAAK,WAAW,CAAA,EAAG;AAC5C,MAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,iBAAA,EAAkB;AAAA,IAClD;AAEA,IAAA,IAAI,UAAA,GAAkC,IAAA;AACtC,IAAA,KAAA,MAAW,GAAA,IAAO,OAAO,IAAA,EAAM;AAC7B,MAAA,MAAM,MAAA,GAAS,GAAA;AACf,MAAA,IAAI,mBAAA,CAAoB,MAAA,CAAO,GAAA,EAAK,MAAM,CAAA,EAAG;AAC3C,QAAA,UAAA,GAAa,MAAA;AACb,QAAA;AAAA,MACF;AAAA,IACF;AAEA,IAAA,IAAI,CAAC,UAAA,EAAY;AACf,MAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,iBAAA,EAAkB;AAAA,IAClD;AAEA,IAAA,IAAI,WAAW,SAAA,EAAW;AACxB,MAAA,MAAM,SAAA,GAAY,IAAI,IAAA,CAAK,UAAA,CAAW,SAAS,CAAA;AAC/C,MAAA,IAAI,SAAA,mBAAY,IAAI,IAAA,EAAK,EAAG;AAC1B,QAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,qBAAA,EAAsB;AAAA,MACtD;AAAA,IACF;AAEA,IAAA,IAAI;AACF,MAAA,MAAM,GAAG,MAAA,CAAO;AAAA,QACd,UAAA,EAAY,kBAAA;AAAA,QACZ,IAAI,UAAA,CAAW,EAAA;AAAA,QACf,MAAM,EAAE,UAAA,EAAA,qBAAgB,IAAA,EAAK,EAAE,aAAY;AAAE,OAC9C,CAAA;AAAA,IACH,CAAA,CAAA,MAAQ;AAAA,IAER;AAEA,IAAA,MAAM,IAAA,GAA0B;AAAA,MAC9B,IAAI,UAAA,CAAW,MAAA;AAAA,MACf,IAAA,EAAO,WAAmB,IAAA,IAAQ,QAAA;AAAA,MAClC,UAAW,UAAA,CAAmB;AAAA,KAChC;AAEA,IAAA,IAAI,UAAA,EAAY;AACd,MAAA,MAAM,MAAA,GAAS,MAAM,UAAA,CAAW,UAAA,CAAW,MAAM,CAAA;AACjD,MAAA,IAAI,MAAA,EAAQ;AACV,QAAA,MAAA,CAAO,MAAA,CAAO,MAAM,MAAM,CAAA;AAAA,MAC5B;AAAA,IACF;AAEA,IAAA,OAAO;AAAA,MACL,KAAA,EAAO,IAAA;AAAA,MACP,QAAQ,UAAA,CAAW,MAAA;AAAA,MACnB,IAAA;AAAA,MACA,WAAA,EAAa,UAAA,CAAW,WAAA,IAAe,EAAC;AAAA,MACxC,UAAU,UAAA,CAAW,EAAA;AAAA,MACrB,UAAU,IAAA,CAAK,QAAA;AAAA,MACf,MAAM,IAAA,CAAK;AAAA,KACb;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,8BAA8B,KAAK,CAAA;AACjD,IAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,4BAAA,EAA6B;AAAA,EAC7D;AACF;AAEO,SAAS,yBAAyB,OAAA,EAAiC;AACxE,EAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,eAAe,CAAA;AACtD,EAAA,IAAI,UAAA,EAAY;AACd,IAAA,IAAI,UAAA,CAAW,UAAA,CAAW,SAAS,CAAA,EAAG;AACpC,MAAA,OAAO,UAAA,CAAW,KAAA,CAAM,CAAC,CAAA,CAAE,IAAA,EAAK;AAAA,IAClC;AACA,IAAA,IAAI,UAAA,CAAW,UAAA,CAAW,SAAS,CAAA,EAAG;AACpC,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AAEA,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA;AAC/C,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,OAAO,QAAQ,IAAA,EAAK;AAAA,EACtB;AAEA,EAAA,OAAO,IAAA;AACT;AAEO,SAAS,oBACd,MAAA,EACsB;AACtB,EAAA,IAAI,CAAC,MAAA,CAAO,KAAA,IAAS,CAAC,OAAO,MAAA,EAAQ;AACnC,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,OAAO;AAAA,IACL,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,IAAA,EAAM,MAAA,CAAO,IAAA,IAAQ,EAAC;AAAA,IACtB,WAAA,EAAa,MAAA,CAAO,WAAA,IAAe,EAAC;AAAA,IACpC,QAAA,EAAU,OAAO,QAAA,IAAY,EAAA;AAAA,IAC7B,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,MAAM,MAAA,CAAO;AAAA,GACf;AACF;AAEO,SAAS,mBAAA,CACd,aACA,QAAA,EACS;AACT,EAAA,IAAI,WAAA,CAAY,MAAA,KAAW,CAAA,EAAG,OAAO,KAAA;AACrC,EAAA,IAAI,WAAA,CAAY,QAAA,CAAS,GAAG,CAAA,EAAG,OAAO,IAAA;AACtC,EAAA,IAAI,WAAA,CAAY,QAAA,CAAS,QAAQ,CAAA,EAAG,OAAO,IAAA;AAE3C,EAAA,MAAM,CAAC,QAAA,EAAU,MAAM,CAAA,GAAI,QAAA,CAAS,MAAM,GAAG,CAAA;AAC7C,EAAA,IAAI,YAAY,QAAA,CAAS,CAAA,EAAG,QAAQ,CAAA,EAAA,CAAI,GAAG,OAAO,IAAA;AAElD,EAAA,OAAO,KAAA;AACT;AAEO,SAAS,cAAA,GAAyB;AACvC,EAAA,MAAM,KAAA,GAAQ,sCAAA;AACd,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,EAAA,EAAI,CAAA,EAAA,EAAK;AAC3B,IAAA,MAAA,IAAU,KAAA,CAAM,KAAK,KAAA,CAAM,IAAA,CAAK,QAAO,GAAI,KAAA,CAAM,MAAM,CAAC,CAAA;AAAA,EAC1D;AACA,EAAA,OAAO,QAAQ,MAAM,CAAA,CAAA;AACvB;AAEO,SAAS,qBAAqB,GAAA,EAAqB;AACxD,EAAA,OAAO,GAAA,CAAI,SAAA,CAAU,CAAA,EAAG,CAAC,CAAA;AAC3B","file":"chunk-QXIQWPAP.js","sourcesContent":["export const WEBHOOK_EVENTS = {\n  COLLECTION_CREATE: \"collection.create\",\n  COLLECTION_UPDATE: \"collection.update\",\n  COLLECTION_DELETE: \"collection.delete\",\n  MEDIA_UPLOAD: \"media.upload\",\n  MEDIA_DELETE: \"media.delete\",\n  AUTH_LOGIN: \"auth.login\",\n  AUTH_REGISTER: \"auth.register\",\n  AUTH_LOGOUT: \"auth.logout\",\n  ORDER_CREATED: \"order.created\",\n  ORDER_PAID: \"order.paid\",\n  ORDER_SHIPPED: \"order.shipped\",\n  ORDER_DELIVERED: \"order.delivered\",\n} as const;\n\nexport type WebhookEvent = (typeof WEBHOOK_EVENTS)[keyof typeof WEBHOOK_EVENTS];\n\nexport const ALL_WEBHOOK_EVENTS: WebhookEvent[] = Object.values(WEBHOOK_EVENTS);\n\nexport interface WebhookConfig {\n  id: string;\n  name: string;\n  url: string;\n  events: WebhookEvent[];\n  status: \"active\" | \"inactive\" | \"error\";\n  secret?: string;\n  headers?: Record<string, string>;\n  lastTriggered?: string;\n  lastError?: string;\n  createdAt: string;\n  updatedAt: string;\n}\n\nexport interface CreateWebhookData {\n  name: string;\n  url: string;\n  events: WebhookEvent[];\n  status?: \"active\" | \"inactive\";\n  secret?: string;\n  headers?: Record<string, string>;\n}\n\nexport interface UpdateWebhookData {\n  name?: string;\n  url?: string;\n  events?: WebhookEvent[];\n  status?: \"active\" | \"inactive\" | \"error\";\n  secret?: string;\n  headers?: Record<string, string>;\n  lastTriggered?: string | null;\n  lastError?: string | null;\n}\n\nexport interface WebhookPayload {\n  id: string;\n  event: WebhookEvent;\n  timestamp: string;\n  collection?: string;\n  operation?: \"create\" | \"update\" | \"delete\";\n  data?: unknown;\n  previousData?: unknown;\n  user?: {\n    id: string;\n    email?: string;\n    role?: string;\n  };\n  tenantId?: string;\n  metadata?: Record<string, unknown>;\n}\n\nexport interface WebhookDelivery {\n  id: string;\n  webhookId: string;\n  event: WebhookEvent;\n  payload: WebhookPayload;\n  attempt: number;\n  status: \"pending\" | \"success\" | \"failed\" | \"retrying\";\n  responseStatus?: number;\n  responseBody?: string;\n  error?: string;\n  duration?: number;\n  createdAt: string;\n  deliveredAt?: string;\n  nextRetryAt?: string;\n}\n\nexport interface WebhookTriggerResult {\n  deliveryId: string;\n  webhookId: string;\n  event: WebhookEvent;\n  status: \"queued\" | \"success\" | \"failed\";\n  responseStatus?: number;\n  duration?: number;\n  error?: string;\n}\n\nexport const WEBHOOK_COLLECTION = \"_webhooks\";\nexport const WEBHOOK_DELIVERY_COLLECTION = \"_webhook_deliveries\";\n","import { createHmac, randomBytes } from \"crypto\";\nimport type {\n  WebhookConfig,\n  WebhookPayload,\n  WebhookDelivery,\n} from \"./types.js\";\n\nexport interface DeliveryResult {\n  success: boolean;\n  status: number;\n  statusText?: string;\n  body?: string;\n  duration: number;\n  error?: string;\n}\n\nexport interface DeliveryOptions {\n  timeout?: number;\n  maxRetries?: number;\n  retryDelay?: number;\n  onRetry?: (attempt: number, error: string) => void;\n  onSuccess?: (result: DeliveryResult) => void;\n  onFailure?: (error: string) => void;\n}\n\nexport function signPayload(payload: string, secret: string): string {\n  return `sha256=${createHmac(\"sha256\", secret).update(payload).digest(\"hex\")}`;\n}\n\nexport function generateWebhookSecret(): string {\n  return randomBytes(32).toString(\"hex\");\n}\n\nexport async function deliverWebhook(\n  webhook: WebhookConfig,\n  payload: WebhookPayload,\n  options: DeliveryOptions = {},\n): Promise<DeliveryResult> {\n  const timeout = options.timeout || 30000;\n  const startTime = Date.now();\n\n  const body = JSON.stringify(payload);\n\n  const headers: Record<string, string> = {\n    \"Content-Type\": \"application/json\",\n    \"User-Agent\": \"Kyro-CMS-Webhook/1.0\",\n    \"X-Webhook-Event\": payload.event,\n    \"X-Webhook-Delivery\": payload.id,\n    \"X-Webhook-Timestamp\": payload.timestamp,\n    ...(webhook.headers || {}),\n  };\n\n  if (webhook.secret) {\n    const signature = signPayload(body, webhook.secret);\n    headers[\"X-Webhook-Signature\"] = signature;\n  }\n\n  const controller = new AbortController();\n  const timeoutId = setTimeout(() => controller.abort(), timeout);\n\n  try {\n    const response = await fetch(webhook.url, {\n      method: \"POST\",\n      headers,\n      body,\n      signal: controller.signal,\n    });\n\n    clearTimeout(timeoutId);\n\n    const duration = Date.now() - startTime;\n    let responseBody: string | undefined;\n\n    try {\n      const text = await response.text();\n      responseBody = text.slice(0, 1000);\n    } catch {}\n\n    const result: DeliveryResult = {\n      success: response.ok,\n      status: response.status,\n      statusText: response.statusText,\n      body: responseBody,\n      duration,\n    };\n\n    if (result.success && options.onSuccess) {\n      options.onSuccess(result);\n    } else if (!result.success && options.onFailure) {\n      options.onFailure(`HTTP ${response.status}: ${response.statusText}`);\n    }\n\n    return result;\n  } catch (error: any) {\n    clearTimeout(timeoutId);\n    const duration = Date.now() - startTime;\n    const errorMessage =\n      error.name === \"AbortError\"\n        ? `Request timed out after ${timeout}ms`\n        : error.message || \"Unknown error\";\n\n    if (options.onFailure) {\n      options.onFailure(errorMessage);\n    }\n\n    return {\n      success: false,\n      status: 0,\n      duration,\n      error: errorMessage,\n    };\n  }\n}\n\nexport async function deliverWithRetry(\n  webhook: WebhookConfig,\n  payload: WebhookPayload,\n  deliveryId: string,\n  options: DeliveryOptions = {},\n): Promise<DeliveryResult> {\n  const maxRetries = options.maxRetries ?? 5;\n  const baseDelay = options.retryDelay ?? 1000;\n  let lastResult: DeliveryResult | null = null;\n\n  for (let attempt = 0; attempt <= maxRetries; attempt++) {\n    if (attempt > 0) {\n      const delay = Math.min(baseDelay * Math.pow(2, attempt - 1), 30000);\n      if (options.onRetry) {\n        options.onRetry(attempt, `Retrying in ${delay}ms...`);\n      }\n      await sleep(delay);\n    }\n\n    if (options.onRetry && attempt > 0) {\n      options.onRetry(attempt, `Attempt ${attempt + 1}/${maxRetries + 1}`);\n    }\n\n    lastResult = await deliverWebhook(webhook, payload, {\n      ...options,\n      onRetry: undefined,\n      onSuccess: undefined,\n      onFailure: undefined,\n    });\n\n    if (lastResult.success) {\n      return lastResult;\n    }\n\n    if (lastResult.error?.includes(\"timed out\") && attempt < maxRetries) {\n      continue;\n    }\n\n    if (lastResult.status >= 400 && lastResult.status < 500) {\n      return lastResult;\n    }\n  }\n\n  return (\n    lastResult || {\n      success: false,\n      status: 0,\n      duration: 0,\n      error: \"All delivery attempts failed\",\n    }\n  );\n}\n\nexport function buildDeliveryRecord(\n  deliveryId: string,\n  webhookId: string,\n  event: string,\n  payload: WebhookPayload,\n  attempt: number,\n  result: DeliveryResult,\n): WebhookDelivery {\n  return {\n    id: deliveryId,\n    webhookId,\n    event: event as any,\n    payload,\n    attempt,\n    status: result.success ? \"success\" : \"failed\",\n    responseStatus: result.status || undefined,\n    responseBody: result.body,\n    duration: result.duration,\n    error: result.error,\n    createdAt: new Date().toISOString(),\n    deliveredAt: result.success ? new Date().toISOString() : undefined,\n  };\n}\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\nexport function createTestPayload(): WebhookPayload {\n  return {\n    id: `test_${Date.now()}`,\n    event: \"collection.create\",\n    timestamp: new Date().toISOString(),\n    collection: \"test\",\n    operation: \"create\",\n    data: { message: \"This is a test webhook delivery\" },\n    user: { id: \"system\", email: \"system@kyro.dev\", role: \"super_admin\" },\n  };\n}\n","import { randomUUID } from \"crypto\";\nimport type { BaseAdapter } from \"../registry/types.js\";\nimport {\n  type WebhookConfig,\n  type CreateWebhookData,\n  type UpdateWebhookData,\n  type WebhookPayload,\n  type WebhookDelivery,\n  type WebhookEvent,\n  type WebhookTriggerResult,\n  WEBHOOK_COLLECTION,\n  WEBHOOK_DELIVERY_COLLECTION,\n} from \"./types.js\";\nimport {\n  deliverWithRetry,\n  buildDeliveryRecord,\n  generateWebhookSecret,\n} from \"./delivery.js\";\n\nexport class WebhookService {\n  private db: BaseAdapter;\n\n  constructor(db: BaseAdapter) {\n    this.db = db;\n  }\n\n  async getWebhooks(filters?: {\n    status?: string;\n    event?: WebhookEvent;\n  }): Promise<WebhookConfig[]> {\n    const result = await this.db.find({\n      collection: WEBHOOK_COLLECTION,\n      where: filters?.status ? { status: { equals: filters.status } } : {},\n      limit: 100,\n      page: 1,\n    });\n\n    const webhooks = result.docs as unknown as WebhookConfig[];\n\n    if (filters?.event) {\n      return webhooks.filter((w) =>\n        w.events.includes(filters.event as WebhookEvent),\n      );\n    }\n\n    return webhooks;\n  }\n\n  async getWebhookById(id: string): Promise<WebhookConfig | null> {\n    return this.db.findByID({\n      collection: WEBHOOK_COLLECTION,\n      id,\n    }) as Promise<WebhookConfig | null>;\n  }\n\n  async createWebhook(data: CreateWebhookData): Promise<WebhookConfig> {\n    const now = new Date().toISOString();\n    const secret = data.secret || generateWebhookSecret();\n\n    const webhook = {\n      id: randomUUID(),\n      name: data.name,\n      url: data.url,\n      events: data.events,\n      status: data.status || \"active\",\n      secret,\n      headers: data.headers || {},\n      createdAt: now,\n      updatedAt: now,\n    };\n\n    await this.db.create({\n      collection: WEBHOOK_COLLECTION,\n      data: webhook,\n    });\n\n    return webhook as WebhookConfig;\n  }\n\n  async updateWebhook(\n    id: string,\n    data: UpdateWebhookData,\n  ): Promise<WebhookConfig | null> {\n    const existing = await this.getWebhookById(id);\n    if (!existing) return null;\n\n    const updated = {\n      ...existing,\n      ...data,\n      updatedAt: new Date().toISOString(),\n    };\n\n    if (data.secret === \"\" && \"secret\" in data) {\n      delete updated.secret;\n    }\n\n    await this.db.update({\n      collection: WEBHOOK_COLLECTION,\n      id,\n      data: updated,\n    });\n\n    return updated as WebhookConfig;\n  }\n\n  async deleteWebhook(id: string): Promise<void> {\n    await this.db.delete({\n      collection: WEBHOOK_COLLECTION,\n      id,\n    });\n  }\n\n  async trigger(\n    event: WebhookEvent,\n    payloadData: Omit<WebhookPayload, \"id\" | \"event\" | \"timestamp\">,\n  ): Promise<WebhookTriggerResult[]> {\n    const webhooks = await this.getWebhooks();\n    const activeWebhooks = webhooks.filter((w) => w.status === \"active\");\n\n    const matchingWebhooks = activeWebhooks.filter((w) =>\n      w.events.includes(event),\n    );\n\n    if (matchingWebhooks.length === 0) {\n      return [];\n    }\n\n    const payload: WebhookPayload = {\n      id: `wh_${Date.now()}_${randomUUID().slice(0, 8)}`,\n      event,\n      timestamp: new Date().toISOString(),\n      ...payloadData,\n    };\n\n    const results: WebhookTriggerResult[] = [];\n\n    for (const webhook of matchingWebhooks) {\n      const result = await this.triggerWebhook(webhook, payload);\n      results.push(result);\n    }\n\n    return results;\n  }\n\n  async triggerWebhook(\n    webhook: WebhookConfig,\n    payload: WebhookPayload,\n  ): Promise<WebhookTriggerResult> {\n    const deliveryId = `dlv_${Date.now()}_${randomUUID().slice(0, 8)}`;\n\n    try {\n      const result = await deliverWithRetry(webhook, payload, deliveryId, {\n        maxRetries: 5,\n        retryDelay: 1000,\n      });\n\n      const deliveryRecord = buildDeliveryRecord(\n        deliveryId,\n        webhook.id,\n        webhook.events[0],\n        payload,\n        1,\n        result,\n      );\n\n      try {\n        await this.db.create({\n          collection: WEBHOOK_DELIVERY_COLLECTION,\n          data: deliveryRecord,\n        });\n      } catch {\n        console.warn(\n          \"[WebhookService] Failed to save delivery record:\",\n          deliveryId,\n        );\n      }\n\n      if (!result.success) {\n        await this.updateWebhook(webhook.id, {\n          status: \"error\",\n          lastError: result.error,\n        }).catch(() => {});\n      } else {\n        await this.updateWebhook(webhook.id, {\n          status: \"active\",\n          lastTriggered: new Date().toISOString(),\n        }).catch(() => {});\n      }\n\n      return {\n        deliveryId,\n        webhookId: webhook.id,\n        event: webhook.events[0],\n        status: result.success ? \"success\" : \"failed\",\n        responseStatus: result.status,\n        duration: result.duration,\n        error: result.error,\n      };\n    } catch (error: any) {\n      return {\n        deliveryId,\n        webhookId: webhook.id,\n        event: webhook.events[0],\n        status: \"failed\",\n        error: error.message,\n      };\n    }\n  }\n\n  async testWebhook(webhookId: string): Promise<WebhookTriggerResult | null> {\n    const webhook = await this.getWebhookById(webhookId);\n    if (!webhook) return null;\n\n    const payload: WebhookPayload = {\n      id: `test_${Date.now()}`,\n      event: webhook.events[0] || \"collection.create\",\n      timestamp: new Date().toISOString(),\n      collection: \"test\",\n      operation: \"create\",\n      data: { message: \"This is a test webhook delivery from Kyro CMS\" },\n      user: {\n        id: \"system\",\n        email: \"system@kyro.dev\",\n        role: \"super_admin\",\n      },\n    };\n\n    return this.triggerWebhook(webhook, payload);\n  }\n\n  async getDeliveryHistory(\n    webhookId: string,\n    limit: number = 50,\n  ): Promise<WebhookDelivery[]> {\n    const result = await this.db.find({\n      collection: WEBHOOK_DELIVERY_COLLECTION,\n      where: { webhookId: { equals: webhookId } },\n      sort: \"-createdAt\",\n      limit,\n      page: 1,\n    });\n\n    return result.docs as unknown as WebhookDelivery[];\n  }\n\n  async retryDelivery(\n    deliveryId: string,\n  ): Promise<WebhookTriggerResult | null> {\n    const delivery = (await this.db.findByID({\n      collection: WEBHOOK_DELIVERY_COLLECTION,\n      id: deliveryId,\n    })) as WebhookDelivery | null;\n\n    if (!delivery) return null;\n\n    const webhook = await this.getWebhookById(delivery.webhookId);\n    if (!webhook) return null;\n\n    return this.triggerWebhook(webhook, delivery.payload);\n  }\n}\n\nexport function createWebhookService(db: BaseAdapter): WebhookService {\n  return new WebhookService(db);\n}\n","import { timingSafeEqual } from \"crypto\";\nimport type { BaseAdapter } from \"../registry/types.js\";\nimport type { AuthUser, UserRole } from \"./types.js\";\n\nexport interface ApiKeyRecord {\n  id: string;\n  userId: string;\n  name: string;\n  key: string;\n  keyPrefix: string;\n  permissions: string[];\n  lastUsedAt?: string;\n  expiresAt?: string;\n  createdAt: string;\n}\n\nexport interface ApiKeyValidationResult {\n  valid: boolean;\n  userId?: string;\n  user?: Partial<AuthUser>;\n  permissions?: string[];\n  apiKeyId?: string;\n  error?: string;\n  tenantId?: string;\n  role?: UserRole;\n}\n\nexport interface ApiKeyContext {\n  userId: string;\n  user: Partial<AuthUser>;\n  permissions: string[];\n  apiKeyId: string;\n  tenantId?: string;\n  role?: UserRole;\n}\n\nexport const API_KEY_COLLECTION = \"_api_keys\";\n\nfunction generateKeyPrefix(key: string): string {\n  return key.substring(0, 8);\n}\n\nfunction constantTimeCompare(a: string, b: string): boolean {\n  if (a.length !== b.length) {\n    return false;\n  }\n  try {\n    return timingSafeEqual(Buffer.from(a), Buffer.from(b));\n  } catch {\n    return false;\n  }\n}\n\nexport async function validateApiKey(\n  rawKey: string,\n  db: BaseAdapter,\n  userLookup?: (userId: string) => Promise<Partial<AuthUser> | null>,\n): Promise<ApiKeyValidationResult> {\n  if (!rawKey || typeof rawKey !== \"string\") {\n    return { valid: false, error: \"No API key provided\" };\n  }\n\n  if (!rawKey.startsWith(\"kyro_\")) {\n    return { valid: false, error: \"Invalid API key format\" };\n  }\n\n  const keyPrefix = generateKeyPrefix(rawKey);\n\n  try {\n    const result = await db.find({\n      collection: API_KEY_COLLECTION,\n      where: { keyPrefix: { equals: keyPrefix } },\n      limit: 100,\n      page: 1,\n    });\n\n    if (!result.docs || result.docs.length === 0) {\n      return { valid: false, error: \"Invalid API key\" };\n    }\n\n    let matchedKey: ApiKeyRecord | null = null;\n    for (const doc of result.docs) {\n      const record = doc as unknown as ApiKeyRecord;\n      if (constantTimeCompare(record.key, rawKey)) {\n        matchedKey = record;\n        break;\n      }\n    }\n\n    if (!matchedKey) {\n      return { valid: false, error: \"Invalid API key\" };\n    }\n\n    if (matchedKey.expiresAt) {\n      const expiresAt = new Date(matchedKey.expiresAt);\n      if (expiresAt < new Date()) {\n        return { valid: false, error: \"API key has expired\" };\n      }\n    }\n\n    try {\n      await db.update({\n        collection: API_KEY_COLLECTION,\n        id: matchedKey.id,\n        data: { lastUsedAt: new Date().toISOString() },\n      });\n    } catch {\n      // Non-critical: don't fail if lastUsedAt update fails\n    }\n\n    const user: Partial<AuthUser> = {\n      id: matchedKey.userId,\n      role: (matchedKey as any).role || \"author\",\n      tenantId: (matchedKey as any).tenantId,\n    };\n\n    if (userLookup) {\n      const dbUser = await userLookup(matchedKey.userId);\n      if (dbUser) {\n        Object.assign(user, dbUser);\n      }\n    }\n\n    return {\n      valid: true,\n      userId: matchedKey.userId,\n      user,\n      permissions: matchedKey.permissions || [],\n      apiKeyId: matchedKey.id,\n      tenantId: user.tenantId,\n      role: user.role,\n    };\n  } catch (error) {\n    console.error(\"[ApiKey] Validation error:\", error);\n    return { valid: false, error: \"Failed to validate API key\" };\n  }\n}\n\nexport function extractApiKeyFromRequest(request: Request): string | null {\n  const authHeader = request.headers.get(\"Authorization\");\n  if (authHeader) {\n    if (authHeader.startsWith(\"ApiKey \")) {\n      return authHeader.slice(7).trim();\n    }\n    if (authHeader.startsWith(\"Bearer \")) {\n      return null;\n    }\n  }\n\n  const xApiKey = request.headers.get(\"X-API-Key\");\n  if (xApiKey) {\n    return xApiKey.trim();\n  }\n\n  return null;\n}\n\nexport function createApiKeyContext(\n  result: ApiKeyValidationResult,\n): ApiKeyContext | null {\n  if (!result.valid || !result.userId) {\n    return null;\n  }\n  return {\n    userId: result.userId,\n    user: result.user || {},\n    permissions: result.permissions || [],\n    apiKeyId: result.apiKeyId || \"\",\n    tenantId: result.tenantId,\n    role: result.role,\n  };\n}\n\nexport function hasApiKeyPermission(\n  permissions: string[],\n  required: string,\n): boolean {\n  if (permissions.length === 0) return false;\n  if (permissions.includes(\"*\")) return true;\n  if (permissions.includes(required)) return true;\n\n  const [resource, action] = required.split(\":\");\n  if (permissions.includes(`${resource}:*`)) return true;\n\n  return false;\n}\n\nexport function generateApiKey(): string {\n  const chars = \"abcdefghijklmnopqrstuvwxyz0123456789\";\n  let suffix = \"\";\n  for (let i = 0; i < 32; i++) {\n    suffix += chars[Math.floor(Math.random() * chars.length)];\n  }\n  return `kyro_${suffix}`;\n}\n\nexport function generateApiKeyPrefix(key: string): string {\n  return key.substring(0, 8);\n}\n"]}

package/dist/chunk-R3XIBBAW.cjs

@@ -0,0 +1,34 @@
+'use strict';
+
+// src/access/types.ts
+async function evaluateAccess(access, args) {
+  if (typeof access === "boolean") {
+    return access;
+  }
+  if (typeof access === "function") {
+    return await access(args);
+  }
+  return true;
+}
+function mergeWhereClauses(...whereClauses) {
+  const result = {};
+  for (const clause of whereClauses) {
+    if (clause && typeof clause === "object") {
+      Object.assign(result, clause);
+    }
+  }
+  return result;
+}
+function getWhereClause(access, args) {
+  return evaluateAccess(access, args).then((result) => {
+    if (result === true) return void 0;
+    if (result === false) return { _id: { $eq: null } };
+    return result;
+  });
+}
+
+exports.evaluateAccess = evaluateAccess;
+exports.getWhereClause = getWhereClause;
+exports.mergeWhereClauses = mergeWhereClauses;
+//# sourceMappingURL=chunk-R3XIBBAW.cjs.map
+//# sourceMappingURL=chunk-R3XIBBAW.cjs.map

package/dist/chunk-R3XIBBAW.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/access/types.ts"],"names":[],"mappings":";;;AA+CA,eAAsB,cAAA,CACpB,QACA,IAAA,EACgC;AAChC,EAAA,IAAI,OAAO,WAAW,SAAA,EAAW;AAC/B,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,IAAI,OAAO,WAAW,UAAA,EAAY;AAChC,IAAA,OAAO,MAAM,OAAO,IAAI,CAAA;AAAA,EAC1B;AACA,EAAA,OAAO,IAAA;AACT;AAEO,SAAS,qBACX,YAAA,EACU;AACb,EAAA,MAAM,SAAsB,EAAC;AAC7B,EAAA,KAAA,MAAW,UAAU,YAAA,EAAc;AACjC,IAAA,IAAI,MAAA,IAAU,OAAO,MAAA,KAAW,QAAA,EAAU;AACxC,MAAA,MAAA,CAAO,MAAA,CAAO,QAAQ,MAAM,CAAA;AAAA,IAC9B;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;AAEO,SAAS,cAAA,CACd,QACA,IAAA,EACkC;AAClC,EAAA,OAAO,cAAA,CAAe,MAAA,EAAQ,IAAI,CAAA,CAAE,KAAK,CAAA,MAAA,KAAU;AACjD,IAAA,IAAI,MAAA,KAAW,MAAM,OAAO,MAAA;AAC5B,IAAA,IAAI,MAAA,KAAW,OAAO,OAAO,EAAE,KAAK,EAAE,GAAA,EAAK,MAAK,EAAE;AAClD,IAAA,OAAO,MAAA;AAAA,EACT,CAAC,CAAA;AACH","file":"chunk-R3XIBBAW.cjs","sourcesContent":["import type { User, Request } from '../hooks/types.js';\n\n// ============================================================================\n// Access Control Types\n// ============================================================================\n\nexport interface WhereClause {\n  [field: string]: any;\n}\n\nexport interface AccessArgs {\n  req: Request;\n  user?: User;\n  data?: any;\n  doc?: any;\n  id?: string;\n  tenantID?: string;\n  context?: Record<string, any>;\n}\n\nexport type AccessControl = boolean | ((args: AccessArgs) => Promise<boolean | WhereClause> | boolean | WhereClause);\n\nexport interface CollectionAccess {\n  create?: AccessControl;\n  read?: AccessControl;\n  update?: AccessControl;\n  delete?: AccessControl;\n  admin?: AccessControl;\n  unlock?: AccessControl;\n  readVersions?: AccessControl;\n}\n\nexport interface GlobalAccess {\n  read?: AccessControl;\n  update?: AccessControl;\n}\n\nexport interface FieldAccess {\n  create?: AccessControl;\n  read?: AccessControl;\n  update?: AccessControl;\n}\n\n// ============================================================================\n// Access Control Evaluation\n// ============================================================================\n\nexport async function evaluateAccess(\n  access: AccessControl,\n  args: AccessArgs\n): Promise<boolean | WhereClause> {\n  if (typeof access === 'boolean') {\n    return access;\n  }\n  if (typeof access === 'function') {\n    return await access(args);\n  }\n  return true;\n}\n\nexport function mergeWhereClauses(\n  ...whereClauses: (WhereClause | boolean | undefined)[]\n): WhereClause {\n  const result: WhereClause = {};\n  for (const clause of whereClauses) {\n    if (clause && typeof clause === 'object') {\n      Object.assign(result, clause);\n    }\n  }\n  return result;\n}\n\nexport function getWhereClause(\n  access: AccessControl,\n  args: AccessArgs\n): Promise<WhereClause | undefined> {\n  return evaluateAccess(access, args).then(result => {\n    if (result === true) return undefined;\n    if (result === false) return { _id: { $eq: null } };\n    return result;\n  });\n}\n"]}

package/dist/{chunk-KWGNR4HM.js → chunk-REK7AYOC.js}

@@ -1,6 +1,28 @@
+import { evaluateAccess } from './chunk-SDMNUYVU.js';
 import { GraphQLObjectType, GraphQLString, GraphQLInputObjectType, GraphQLInt, GraphQLBoolean, GraphQLList, GraphQLNonNull, GraphQLSchema, GraphQLFloat } from 'graphql';
 
-// src/api/graphql/schema.ts
+async function checkGraphQLAccess(collection, operation, context) {
+  const accessRule = collection.access?.[operation];
+  if (!accessRule) {
+    if (!context.user) {
+      return { allowed: false };
+    }
+    const userRole = context.user.role;
+    if (userRole === "super_admin" || userRole === "admin") {
+      return { allowed: true };
+    }
+    return { allowed: false };
+  }
+  const result = await evaluateAccess(accessRule, {
+    req: context.req,
+    user: context.user,
+    tenantID: context.tenantID
+  });
+  if (typeof result === "boolean") {
+    return { allowed: result };
+  }
+  return { allowed: true, extraWhere: result };
+}
 function fieldToGraphQLType(field, registry) {
   switch (field.type) {
     case "text":
@@ -139,7 +161,15 @@ function buildGraphQLSchema(options) {
         limit: { type: GraphQLInt },
         page: { type: GraphQLInt }
       },
-      resolve: async (_, args) => {
+      resolve: async (_, args, context) => {
+        const access = await checkGraphQLAccess(collection, "read", {
+          user,
+          req,
+          tenantID
+        });
+        if (!access.allowed) {
+          throw new Error("Access denied");
+        }
         let where = {};
         if (args.where) {
           try {
@@ -147,6 +177,9 @@ function buildGraphQLSchema(options) {
           } catch {
           }
         }
+        if (access.extraWhere) {
+          where = { ...where, ...access.extraWhere };
+        }
         return db.find({
           collection: collection.slug,
           where,
@@ -162,7 +195,15 @@ function buildGraphQLSchema(options) {
       args: {
         id: { type: new GraphQLNonNull(GraphQLString) }
       },
-      resolve: async (_, args) => {
+      resolve: async (_, args, context) => {
+        const access = await checkGraphQLAccess(collection, "read", {
+          user,
+          req,
+          tenantID
+        });
+        if (!access.allowed) {
+          throw new Error("Access denied");
+        }
         const doc = await db.findByID({
           collection: collection.slug,
           id: args.id,
@@ -181,7 +222,15 @@ function buildGraphQLSchema(options) {
       args: {
         where: { type: GraphQLString }
       },
-      resolve: async (_, args) => {
+      resolve: async (_, args, context) => {
+        const access = await checkGraphQLAccess(collection, "read", {
+          user,
+          req,
+          tenantID
+        });
+        if (!access.allowed) {
+          return { totalDocs: 0 };
+        }
         let where = {};
         if (args.where) {
           try {
@@ -232,7 +281,15 @@ function buildGraphQLSchema(options) {
       args: {
         data: { type: new GraphQLNonNull(inputType) }
       },
-      resolve: async (_, args) => {
+      resolve: async (_, args, context) => {
+        const access = await checkGraphQLAccess(collection, "create", {
+          user,
+          req,
+          tenantID
+        });
+        if (!access.allowed) {
+          throw new Error("Access denied: cannot create");
+        }
         const schema = registry.getCreateZodSchema(collection.slug);
         const validated = schema.parse(args.data);
         const doc = await db.create({
@@ -255,7 +312,15 @@ function buildGraphQLSchema(options) {
         id: { type: new GraphQLNonNull(GraphQLString) },
         data: { type: new GraphQLNonNull(inputType) }
       },
-      resolve: async (_, args) => {
+      resolve: async (_, args, context) => {
+        const access = await checkGraphQLAccess(collection, "update", {
+          user,
+          req,
+          tenantID
+        });
+        if (!access.allowed) {
+          throw new Error("Access denied: cannot update");
+        }
         const schema = registry.getUpdateZodSchema(collection.slug);
         const validated = schema.parse(args.data);
         const doc = await db.update({
@@ -278,7 +343,15 @@ function buildGraphQLSchema(options) {
       args: {
         id: { type: new GraphQLNonNull(GraphQLString) }
       },
-      resolve: async (_, args) => {
+      resolve: async (_, args, context) => {
+        const access = await checkGraphQLAccess(collection, "delete", {
+          user,
+          req,
+          tenantID
+        });
+        if (!access.allowed) {
+          throw new Error("Access denied: cannot delete");
+        }
         const doc = await db.delete({
           collection: collection.slug,
           id: args.id,
@@ -308,5 +381,5 @@ function createGraphQLSchema(registry, db, options) {
 }
 
 export { buildGraphQLSchema, createGraphQLSchema };
-//# sourceMappingURL=chunk-KWGNR4HM.js.map
-//# sourceMappingURL=chunk-KWGNR4HM.js.map
+//# sourceMappingURL=chunk-REK7AYOC.js.map
+//# sourceMappingURL=chunk-REK7AYOC.js.map

package/dist/chunk-REK7AYOC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/api/graphql/schema.ts"],"names":[],"mappings":";;;AA4BA,eAAe,kBAAA,CACb,UAAA,EACA,SAAA,EACA,OAAA,EACyD;AACzD,EAAA,MAAM,UAAA,GAAa,UAAA,CAAW,MAAA,GAAS,SAAS,CAAA;AAEhD,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,IAAI,CAAC,QAAQ,IAAA,EAAM;AACjB,MAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,IAC1B;AACA,IAAA,MAAM,QAAA,GAAW,QAAQ,IAAA,CAAK,IAAA;AAC9B,IAAA,IAAI,QAAA,KAAa,aAAA,IAAiB,QAAA,KAAa,OAAA,EAAS;AACtD,MAAA,OAAO,EAAE,SAAS,IAAA,EAAK;AAAA,IACzB;AACA,IAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,EAC1B;AAEA,EAAA,MAAM,MAAA,GAAS,MAAM,cAAA,CAAe,UAAA,EAAY;AAAA,IAC9C,KAAK,OAAA,CAAQ,GAAA;AAAA,IACb,MAAM,OAAA,CAAQ,IAAA;AAAA,IACd,UAAU,OAAA,CAAQ;AAAA,GACnB,CAAA;AAED,EAAA,IAAI,OAAO,WAAW,SAAA,EAAW;AAC/B,IAAA,OAAO,EAAE,SAAS,MAAA,EAAO;AAAA,EAC3B;AAEA,EAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,UAAA,EAAY,MAAA,EAAO;AAC7C;AAMA,SAAS,kBAAA,CAAmB,OAAc,QAAA,EAAiC;AACzE,EAAA,QAAQ,MAAM,IAAA;AAAM,IAClB,KAAK,MAAA;AAAA,IACL,KAAK,OAAA;AAAA,IACL,KAAK,UAAA;AAAA,IACL,KAAK,UAAA;AAAA,IACL,KAAK,OAAA;AAAA,IACL,KAAK,MAAA;AAAA,IACL,KAAK,UAAA;AAAA,IACL,KAAK,MAAA;AAAA,IACL,KAAK,QAAA;AAAA,IACL,KAAK,OAAA;AAAA,IACL,KAAK,QAAA;AACH,MAAA,OAAO,aAAA;AAAA,IACT,KAAK,QAAA;AACH,MAAA,OAAO,KAAA,CAAM,UAAU,UAAA,GAAa,YAAA;AAAA,IACtC,KAAK,UAAA;AACH,MAAA,OAAO,cAAA;AAAA,IACT,KAAK,MAAA;AAAA,IACL,KAAK,UAAA;AACH,MAAA,OAAO,aAAA;AAAA;AAAA,IACT,KAAK,cAAA;AACH,MAAA,IAAI,OAAO,KAAA,CAAM,UAAA,KAAe,QAAA,EAAU;AACxC,QAAA,MAAM,iBAAA,GAAoB,QAAA,CAAS,aAAA,CAAc,KAAA,CAAM,UAAU,CAAA;AACjE,QAAA,IAAI,iBAAA,EAAmB;AACrB,UAAA,OAAO,IAAI,iBAAA,CAAkB;AAAA,YAC3B,IAAA,EAAM,CAAA,EAAG,KAAA,CAAM,UAAU,CAAA,IAAA,CAAA;AAAA,YACzB,QAAQ,OAAO;AAAA,cACb,EAAA,EAAI,EAAE,IAAA,EAAM,aAAA,EAAc;AAAA,cAC1B,GAAG,yBAAA,CAA0B,iBAAA,EAAmB,QAAQ;AAAA,aAC1D;AAAA,WACD,CAAA;AAAA,QACH;AAAA,MACF;AACA,MAAA,OAAO,aAAA;AAAA,IACT,KAAK,OAAA;AACH,MAAA,OAAO,IAAI,YAAY,aAAa,CAAA;AAAA;AAAA,IACtC,KAAK,OAAA;AACH,MAAA,OAAO,aAAA;AAAA;AAAA,IACT,KAAK,QAAA;AACH,MAAA,OAAO,IAAI,YAAY,aAAa,CAAA;AAAA;AAAA,IACtC,KAAK,KAAA;AAAA,IACL,KAAK,aAAA;AAAA,IACL,KAAK,MAAA;AACH,MAAA,OAAO,aAAA;AAAA,IACT;AACE,MAAA,OAAO,aAAA;AAAA;AAEb;AAEA,SAAS,yBAAA,CACP,QACA,QAAA,EAC8C;AAC9C,EAAA,MAAM,SAAuD,EAAC;AAE9D,EAAA,KAAA,MAAW,KAAA,IAAS,OAAO,MAAA,EAAQ;AACjC,IAAA,IAAI,KAAA,CAAM,IAAA,IAAQ,KAAA,CAAM,KAAA,EAAO,WAAW,IAAA,EAAM;AAC9C,MAAA,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA,GAAI;AAAA,QACnB,IAAA,EAAM,KAAA,CAAM,QAAA,GACR,IAAI,cAAA,CAAe,kBAAA,CAAmB,KAAA,EAAO,QAAQ,CAAQ,CAAA,GAC5D,kBAAA,CAAmB,KAAA,EAAO,QAAQ,CAAA;AAAA,QACvC,WAAA,EAAa,KAAA,CAAM,KAAA,EAAO,WAAA,IAAe,KAAA,CAAM;AAAA,OACjD;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO,MAAA;AACT;AAeO,SAAS,mBACd,OAAA,EACe;AACf,EAAA,MAAM,EAAE,QAAA,EAAU,EAAA,EAAI,MAAM,GAAA,EAAK,QAAA,EAAU,UAAS,GAAI,OAAA;AAGxD,EAAA,MAAM,SAAA,GAAY,UAAU,MAAA,EAAQ,SAAA;AACpC,EAAA,IAAI,SAAA,EAAW,mBAAmB,KAAA,EAAO;AACvC,IAAA,MAAM,IAAI,MAAM,yBAAyB,CAAA;AAAA,EAC3C;AAEA,EAAA,MAAM,WAAA,GAAc,SAAS,cAAA,EAAe;AAC5C,EAAA,MAAM,OAAA,GAAU,SAAS,UAAA,EAAW;AAGpC,EAAA,MAAM,kBAAqD,EAAC;AAC5D,EAAA,MAAM,uBAA+D,EAAC;AAEtE,EAAA,KAAA,MAAW,cAAc,WAAA,EAAa;AAEpC,IAAA,eAAA,CAAgB,UAAA,CAAW,IAAI,CAAA,GAAI,IAAI,iBAAA,CAAkB;AAAA,MACvD,MAAM,CAAA,EAAG,UAAA,CAAW,KAAK,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAC,CAAA,KAAA,CAAA;AAAA,MAC3C,QAAQ,OAAO;AAAA,QACb,EAAA,EAAI,EAAE,IAAA,EAAM,aAAA,EAAc;AAAA,QAC1B,GAAG,yBAAA,CAA0B,UAAA,EAAY,QAAQ,CAAA;AAAA,QACjD,GAAI,WAAW,UAAA,GACX;AAAA,UACE,SAAA,EAAW,EAAE,IAAA,EAAM,aAAA,EAAc;AAAA,UACjC,SAAA,EAAW,EAAE,IAAA,EAAM,aAAA;AAAc,YAEnC,EAAC;AAAA,QACL,GAAI,WAAW,YAAA,GACX;AAAA,UACE,QAAA,EAAU,EAAE,IAAA,EAAM,aAAA;AAAc,YAElC;AAAC,OACP;AAAA,KACD,CAAA;AAGD,IAAA,MAAM,cAAqD,EAAC;AAC5D,IAAA,KAAA,MAAW,KAAA,IAAS,WAAW,MAAA,EAAQ;AACrC,MAAA,IAAI,KAAA,CAAM,IAAA,IAAQ,KAAA,CAAM,IAAA,KAAS,IAAA,EAAM;AACrC,QAAA,WAAA,CAAY,KAAA,CAAM,IAAI,CAAA,GAAI;AAAA,UACxB,IAAA,EAAM,kBAAA,CAAmB,KAAA,EAAO,QAAQ;AAAA,SAC1C;AAAA,MACF;AAAA,IACF;AAEA,IAAA,oBAAA,CAAqB,UAAA,CAAW,IAAI,CAAA,GAAI,IAAI,sBAAA,CAAuB;AAAA,MACjE,MAAM,CAAA,EAAG,UAAA,CAAW,KAAK,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAC,CAAA,MAAA,CAAA;AAAA,MAC3C,QAAQ,MAAM;AAAA,KACf,CAAA;AAAA,EACH;AAGA,EAAA,MAAM,cAAiD,EAAC;AAExD,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,WAAA,CAAY,MAAA,CAAO,IAAI,CAAA,GAAI,IAAI,iBAAA,CAAkB;AAAA,MAC/C,MAAM,CAAA,EAAG,MAAA,CAAO,KAAK,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAC,CAAA,YAAA,CAAA;AAAA,MACvC,QAAQ,OAAO;AAAA,QACb,EAAA,EAAI,EAAE,IAAA,EAAM,aAAA,EAAc;AAAA,QAC1B,GAAG,yBAAA;AAAA,UACD,EAAE,IAAA,EAAM,MAAA,CAAO,IAAA,EAAM,MAAA,EAAQ,OAAO,MAAA,EAAO;AAAA,UAC3C;AAAA;AACF,OACF;AAAA,KACD,CAAA;AAAA,EACH;AAGA,EAAA,MAAM,cAA4D,EAAC;AAGnE,EAAA,KAAA,MAAW,cAAc,WAAA,EAAa;AACpC,IAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,UAAA,CAAW,IAAI,CAAA;AAC5C,IAAA,IAAI,CAAC,IAAA,EAAM;AAGX,IAAA,WAAA,CAAY,CAAA,EAAG,UAAA,CAAW,IAAI,CAAA,IAAA,CAAM,CAAA,GAAI;AAAA,MACtC,IAAA,EAAM,IAAI,iBAAA,CAAkB;AAAA,QAC1B,MAAM,CAAA,EAAG,UAAA,CAAW,KAAK,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAC,CAAA,YAAA,CAAA;AAAA,QAC3C,MAAA,EAAQ;AAAA,UACN,MAAM,EAAE,IAAA,EAAM,IAAI,WAAA,CAAY,IAAI,CAAA,EAAE;AAAA,UACpC,SAAA,EAAW,EAAE,IAAA,EAAM,UAAA,EAAW;AAAA,UAC9B,IAAA,EAAM,EAAE,IAAA,EAAM,UAAA,EAAW;AAAA,UACzB,UAAA,EAAY,EAAE,IAAA,EAAM,UAAA,EAAW;AAAA,UAC/B,WAAA,EAAa,EAAE,IAAA,EAAM,cAAA,EAAe;AAAA,UACpC,WAAA,EAAa,EAAE,IAAA,EAAM,cAAA;AAAe;AACtC,OACD,CAAA;AAAA,MACD,IAAA,EAAM;AAAA,QACJ,KAAA,EAAO,EAAE,IAAA,EAAM,aAAA,EAAc;AAAA,QAC7B,IAAA,EAAM,EAAE,IAAA,EAAM,aAAA,EAAc;AAAA,QAC5B,KAAA,EAAO,EAAE,IAAA,EAAM,UAAA,EAAW;AAAA,QAC1B,IAAA,EAAM,EAAE,IAAA,EAAM,UAAA;AAAW,OAC3B;AAAA,MACA,OAAA,EAAS,OAAO,CAAA,EAAQ,IAAA,EAAW,OAAA,KAAiB;AAClD,QAAA,MAAM,MAAA,GAAS,MAAM,kBAAA,CAAmB,UAAA,EAAY,MAAA,EAAQ;AAAA,UAC1D,IAAA;AAAA,UACA,GAAA;AAAA,UACA;AAAA,SACD,CAAA;AACD,QAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,UAAA,MAAM,IAAI,MAAM,eAAe,CAAA;AAAA,QACjC;AAEA,QAAA,IAAI,QAAQ,EAAC;AACb,QAAA,IAAI,KAAK,KAAA,EAAO;AACd,UAAA,IAAI;AACF,YAAA,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,KAAK,CAAA;AAAA,UAC/B,CAAA,CAAA,MAAQ;AAAA,UAAC;AAAA,QACX;AAEA,QAAA,IAAI,OAAO,UAAA,EAAY;AACrB,UAAA,KAAA,GAAQ,EAAE,GAAG,KAAA,EAAO,GAAG,OAAO,UAAA,EAAW;AAAA,QAC3C;AAEA,QAAA,OAAO,GAAG,IAAA,CAAK;AAAA,UACb,YAAY,UAAA,CAAW,IAAA;AAAA,UACvB,KAAA;AAAA,UACA,MAAM,IAAA,CAAK,IAAA;AAAA,UACX,KAAA,EAAO,KAAK,KAAA,IAAS,EAAA;AAAA,UACrB,IAAA,EAAM,KAAK,IAAA,IAAQ,CAAA;AAAA,UACnB;AAAA,SACD,CAAA;AAAA,MACH;AAAA,KACF;AAGA,IAAA,WAAA,CAAY,CAAA,EAAG,UAAA,CAAW,IAAI,CAAA,QAAA,CAAU,CAAA,GAAI;AAAA,MAC1C,IAAA;AAAA,MACA,IAAA,EAAM;AAAA,QACJ,IAAI,EAAE,IAAA,EAAM,IAAI,cAAA,CAAe,aAAa,CAAA;AAAE,OAChD;AAAA,MACA,OAAA,EAAS,OAAO,CAAA,EAAQ,IAAA,EAAW,OAAA,KAAiB;AAClD,QAAA,MAAM,MAAA,GAAS,MAAM,kBAAA,CAAmB,UAAA,EAAY,MAAA,EAAQ;AAAA,UAC1D,IAAA;AAAA,UACA,GAAA;AAAA,UACA;AAAA,SACD,CAAA;AACD,QAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,UAAA,MAAM,IAAI,MAAM,eAAe,CAAA;AAAA,QACjC;AACA,QAAA,MAAM,GAAA,GAAM,MAAM,EAAA,CAAG,QAAA,CAAS;AAAA,UAC5B,YAAY,UAAA,CAAW,IAAA;AAAA,UACvB,IAAI,IAAA,CAAK,EAAA;AAAA,UACT;AAAA,SACD,CAAA;AACD,QAAA,OAAO,GAAA;AAAA,MACT;AAAA,KACF;AAGA,IAAA,WAAA,CAAY,CAAA,EAAG,UAAA,CAAW,IAAI,CAAA,KAAA,CAAO,CAAA,GAAI;AAAA,MACvC,IAAA,EAAM,IAAI,iBAAA,CAAkB;AAAA,QAC1B,MAAM,CAAA,EAAG,UAAA,CAAW,KAAK,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAC,CAAA,MAAA,CAAA;AAAA,QAC3C,MAAA,EAAQ;AAAA,UACN,SAAA,EAAW,EAAE,IAAA,EAAM,UAAA;AAAW;AAChC,OACD,CAAA;AAAA,MACD,IAAA,EAAM;AAAA,QACJ,KAAA,EAAO,EAAE,IAAA,EAAM,aAAA;AAAc,OAC/B;AAAA,MACA,OAAA,EAAS,OAAO,CAAA,EAAQ,IAAA,EAAW,OAAA,KAAiB;AAClD,QAAA,MAAM,MAAA,GAAS,MAAM,kBAAA,CAAmB,UAAA,EAAY,MAAA,EAAQ;AAAA,UAC1D,IAAA;AAAA,UACA,GAAA;AAAA,UACA;AAAA,SACD,CAAA;AACD,QAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,UAAA,OAAO,EAAE,WAAW,CAAA,EAAE;AAAA,QACxB;AACA,QAAA,IAAI,QAAQ,EAAC;AACb,QAAA,IAAI,KAAK,KAAA,EAAO;AACd,UAAA,IAAI;AACF,YAAA,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,KAAK,CAAA;AAAA,UAC/B,CAAA,CAAA,MAAQ;AAAA,UAAC;AAAA,QACX;AACA,QAAA,MAAM,KAAA,GAAQ,MAAM,EAAA,CAAG,KAAA,CAAM;AAAA,UAC3B,YAAY,UAAA,CAAW,IAAA;AAAA,UACvB,KAAA;AAAA,UACA;AAAA,SACD,CAAA;AACD,QAAA,OAAO,EAAE,WAAW,KAAA,EAAM;AAAA,MAC5B;AAAA,KACF;AAAA,EACF;AAGA,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,MAAM,IAAA,GAAO,WAAA,CAAY,MAAA,CAAO,IAAI,CAAA;AACpC,IAAA,IAAI,CAAC,IAAA,EAAM;AAEX,IAAA,WAAA,CAAY,CAAA,EAAG,MAAA,CAAO,IAAI,CAAA,GAAA,CAAK,CAAA,GAAI;AAAA,MACjC,IAAA;AAAA,MACA,SAAS,YAAY;AACnB,QAAA,OAAO,GAAG,OAAA,CAAQ;AAAA,UAChB,UAAA,EAAY,CAAA,SAAA,EAAY,MAAA,CAAO,IAAI,CAAA,CAAA;AAAA,UACnC,OAAO,EAAC;AAAA,UACR;AAAA,SACD,CAAA;AAAA,MACH;AAAA,KACF;AAAA,EACF;AAEA,EAAA,MAAM,KAAA,GAAQ,IAAI,iBAAA,CAAkB;AAAA,IAClC,IAAA,EAAM,OAAA;AAAA,IACN,MAAA,EAAQ;AAAA,GACT,CAAA;AAGD,EAAA,MAAM,iBAA+D,EAAC;AAEtE,EAAA,KAAA,MAAW,cAAc,WAAA,EAAa;AACpC,IAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,UAAA,CAAW,IAAI,CAAA;AAC5C,IAAA,MAAM,SAAA,GAAY,oBAAA,CAAqB,UAAA,CAAW,IAAI,CAAA;AACtD,IAAA,IAAI,CAAC,IAAA,IAAQ,CAAC,SAAA,EAAW;AAGzB,IAAA,cAAA,CAAe,CAAA,EAAG,UAAA,CAAW,IAAI,CAAA,MAAA,CAAQ,CAAA,GAAI;AAAA,MAC3C,IAAA,EAAM,IAAI,iBAAA,CAAkB;AAAA,QAC1B,MAAM,CAAA,EAAG,UAAA,CAAW,KAAK,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAC,CAAA,cAAA,CAAA;AAAA,QAC3C,MAAA,EAAQ;AAAA,UACN,GAAA,EAAK,EAAE,IAAA,EAAK;AAAA,UACZ,OAAA,EAAS,EAAE,IAAA,EAAM,aAAA;AAAc;AACjC,OACD,CAAA;AAAA,MACD,IAAA,EAAM;AAAA,QACJ,MAAM,EAAE,IAAA,EAAM,IAAI,cAAA,CAAe,SAAS,CAAA;AAAE,OAC9C;AAAA,MACA,OAAA,EAAS,OAAO,CAAA,EAAQ,IAAA,EAAW,OAAA,KAAiB;AAClD,QAAA,MAAM,MAAA,GAAS,MAAM,kBAAA,CAAmB,UAAA,EAAY,QAAA,EAAU;AAAA,UAC5D,IAAA;AAAA,UACA,GAAA;AAAA,UACA;AAAA,SACD,CAAA;AACD,QAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,UAAA,MAAM,IAAI,MAAM,8BAA8B,CAAA;AAAA,QAChD;AACA,QAAA,MAAM,MAAA,GAAS,QAAA,CAAS,kBAAA,CAAmB,UAAA,CAAW,IAAI,CAAA;AAC1D,QAAA,MAAM,SAAA,GAAY,MAAA,CAAO,KAAA,CAAM,IAAA,CAAK,IAAI,CAAA;AAExC,QAAA,MAAM,GAAA,GAAM,MAAM,EAAA,CAAG,MAAA,CAAO;AAAA,UAC1B,YAAY,UAAA,CAAW,IAAA;AAAA,UACvB,IAAA,EAAM,SAAA;AAAA,UACN;AAAA,SACD,CAAA;AAED,QAAA,OAAO,EAAE,GAAA,EAAK,OAAA,EAAS,sBAAA,EAAuB;AAAA,MAChD;AAAA,KACF;AAGA,IAAA,cAAA,CAAe,CAAA,EAAG,UAAA,CAAW,IAAI,CAAA,MAAA,CAAQ,CAAA,GAAI;AAAA,MAC3C,IAAA,EAAM,IAAI,iBAAA,CAAkB;AAAA,QAC1B,MAAM,CAAA,EAAG,UAAA,CAAW,KAAK,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAC,CAAA,cAAA,CAAA;AAAA,QAC3C,MAAA,EAAQ;AAAA,UACN,GAAA,EAAK,EAAE,IAAA,EAAK;AAAA,UACZ,OAAA,EAAS,EAAE,IAAA,EAAM,aAAA;AAAc;AACjC,OACD,CAAA;AAAA,MACD,IAAA,EAAM;AAAA,QACJ,IAAI,EAAE,IAAA,EAAM,IAAI,cAAA,CAAe,aAAa,CAAA,EAAE;AAAA,QAC9C,MAAM,EAAE,IAAA,EAAM,IAAI,cAAA,CAAe,SAAS,CAAA;AAAE,OAC9C;AAAA,MACA,OAAA,EAAS,OAAO,CAAA,EAAQ,IAAA,EAAW,OAAA,KAAiB;AAClD,QAAA,MAAM,MAAA,GAAS,MAAM,kBAAA,CAAmB,UAAA,EAAY,QAAA,EAAU;AAAA,UAC5D,IAAA;AAAA,UACA,GAAA;AAAA,UACA;AAAA,SACD,CAAA;AACD,QAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,UAAA,MAAM,IAAI,MAAM,8BAA8B,CAAA;AAAA,QAChD;AACA,QAAA,MAAM,MAAA,GAAS,QAAA,CAAS,kBAAA,CAAmB,UAAA,CAAW,IAAI,CAAA;AAC1D,QAAA,MAAM,SAAA,GAAY,MAAA,CAAO,KAAA,CAAM,IAAA,CAAK,IAAI,CAAA;AAExC,QAAA,MAAM,GAAA,GAAM,MAAM,EAAA,CAAG,MAAA,CAAO;AAAA,UAC1B,YAAY,UAAA,CAAW,IAAA;AAAA,UACvB,IAAI,IAAA,CAAK,EAAA;AAAA,UACT,IAAA,EAAM,SAAA;AAAA,UACN;AAAA,SACD,CAAA;AAED,QAAA,OAAO,EAAE,GAAA,EAAK,OAAA,EAAS,sBAAA,EAAuB;AAAA,MAChD;AAAA,KACF;AAGA,IAAA,cAAA,CAAe,CAAA,EAAG,UAAA,CAAW,IAAI,CAAA,MAAA,CAAQ,CAAA,GAAI;AAAA,MAC3C,IAAA,EAAM,IAAI,iBAAA,CAAkB;AAAA,QAC1B,MAAM,CAAA,EAAG,UAAA,CAAW,KAAK,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAC,CAAA,cAAA,CAAA;AAAA,QAC3C,MAAA,EAAQ;AAAA,UACN,GAAA,EAAK,EAAE,IAAA,EAAK;AAAA,UACZ,OAAA,EAAS,EAAE,IAAA,EAAM,aAAA;AAAc;AACjC,OACD,CAAA;AAAA,MACD,IAAA,EAAM;AAAA,QACJ,IAAI,EAAE,IAAA,EAAM,IAAI,cAAA,CAAe,aAAa,CAAA;AAAE,OAChD;AAAA,MACA,OAAA,EAAS,OAAO,CAAA,EAAQ,IAAA,EAAW,OAAA,KAAiB;AAClD,QAAA,MAAM,MAAA,GAAS,MAAM,kBAAA,CAAmB,UAAA,EAAY,QAAA,EAAU;AAAA,UAC5D,IAAA;AAAA,UACA,GAAA;AAAA,UACA;AAAA,SACD,CAAA;AACD,QAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,UAAA,MAAM,IAAI,MAAM,8BAA8B,CAAA;AAAA,QAChD;AACA,QAAA,MAAM,GAAA,GAAM,MAAM,EAAA,CAAG,MAAA,CAAO;AAAA,UAC1B,YAAY,UAAA,CAAW,IAAA;AAAA,UACvB,IAAI,IAAA,CAAK,EAAA;AAAA,UACT;AAAA,SACD,CAAA;AAED,QAAA,OAAO,EAAE,GAAA,EAAK,OAAA,EAAS,sBAAA,EAAuB;AAAA,MAChD;AAAA,KACF;AAAA,EACF;AAEA,EAAA,MAAM,QAAA,GAAW,IAAI,iBAAA,CAAkB;AAAA,IACrC,IAAA,EAAM,UAAA;AAAA,IACN,MAAA,EAAQ;AAAA,GACT,CAAA;AAED,EAAA,OAAO,IAAI,aAAA,CAAc;AAAA,IACvB,KAAA,EAAO,KAAA;AAAA,IACP,QAAA,EAAU;AAAA,GACX,CAAA;AACH;AAMO,SAAS,mBAAA,CACd,QAAA,EACA,EAAA,EACA,OAAA,EAKe;AACf,EAAA,OAAO,kBAAA,CAAmB;AAAA,IACxB,QAAA;AAAA,IACA,EAAA;AAAA,IACA,MAAM,OAAA,EAAS,IAAA;AAAA,IACf,KAAK,OAAA,EAAS,GAAA;AAAA,IACd,UAAU,OAAA,EAAS;AAAA,GACpB,CAAA;AACH","file":"chunk-REK7AYOC.js","sourcesContent":["import {\n  GraphQLSchema,\n  GraphQLObjectType,\n  GraphQLString,\n  GraphQLInt,\n  GraphQLBoolean,\n  GraphQLFloat,\n  GraphQLList,\n  GraphQLNonNull,\n  GraphQLInputObjectType,\n  type GraphQLFieldConfig,\n  type GraphQLType,\n} from \"graphql\";\nimport type {\n  CollectionConfig,\n  GlobalConfig,\n  BaseAdapter,\n} from \"../../registry/types.js\";\nimport { Registry } from \"../../registry/index.js\";\nimport type { Field, SelectField } from \"../../fields/types.js\";\nimport { evaluateAccess, type WhereClause } from \"../../access/types.js\";\nimport type { User, Request } from \"../../hooks/types.js\";\nimport type { TenantContext } from \"../../auth/rls/tenant.js\";\n\n// ============================================================================\n// Access Control Helper\n// ============================================================================\n\nasync function checkGraphQLAccess(\n  collection: { access?: any },\n  operation: \"read\" | \"create\" | \"update\" | \"delete\",\n  context: { user?: User; req?: Request; tenantID?: string },\n): Promise<{ allowed: boolean; extraWhere?: WhereClause }> {\n  const accessRule = collection.access?.[operation];\n\n  if (!accessRule) {\n    if (!context.user) {\n      return { allowed: false };\n    }\n    const userRole = context.user.role;\n    if (userRole === \"super_admin\" || userRole === \"admin\") {\n      return { allowed: true };\n    }\n    return { allowed: false };\n  }\n\n  const result = await evaluateAccess(accessRule, {\n    req: context.req!,\n    user: context.user,\n    tenantID: context.tenantID,\n  });\n\n  if (typeof result === \"boolean\") {\n    return { allowed: result };\n  }\n\n  return { allowed: true, extraWhere: result };\n}\n\n// ============================================================================\n// Field → GraphQL Type Mapping\n// ============================================================================\n\nfunction fieldToGraphQLType(field: Field, registry: Registry): GraphQLType {\n  switch (field.type) {\n    case \"text\":\n    case \"email\":\n    case \"password\":\n    case \"textarea\":\n    case \"color\":\n    case \"code\":\n    case \"markdown\":\n    case \"date\":\n    case \"select\":\n    case \"radio\":\n    case \"upload\":\n      return GraphQLString;\n    case \"number\":\n      return field.integer ? GraphQLInt : GraphQLFloat;\n    case \"checkbox\":\n      return GraphQLBoolean;\n    case \"json\":\n    case \"richtext\":\n      return GraphQLString; // JSON as string\n    case \"relationship\":\n      if (typeof field.relationTo === \"string\") {\n        const relatedCollection = registry.getCollection(field.relationTo);\n        if (relatedCollection) {\n          return new GraphQLObjectType({\n            name: `${field.relationTo}_ref`,\n            fields: () => ({\n              id: { type: GraphQLString },\n              ...buildFieldsFromCollection(relatedCollection, registry),\n            }),\n          });\n        }\n      }\n      return GraphQLString;\n    case \"array\":\n      return new GraphQLList(GraphQLString); // Simplified\n    case \"group\":\n      return GraphQLString; // Simplified - JSON string\n    case \"blocks\":\n      return new GraphQLList(GraphQLString); // Simplified\n    case \"row\":\n    case \"collapsible\":\n    case \"tabs\":\n      return GraphQLString;\n    default:\n      return GraphQLString;\n  }\n}\n\nfunction buildFieldsFromCollection(\n  config: CollectionConfig,\n  registry: Registry,\n): Record<string, GraphQLFieldConfig<any, any>> {\n  const fields: Record<string, GraphQLFieldConfig<any, any>> = {};\n\n  for (const field of config.fields) {\n    if (field.name && field.admin?.hidden !== true) {\n      fields[field.name] = {\n        type: field.required\n          ? new GraphQLNonNull(fieldToGraphQLType(field, registry) as any)\n          : (fieldToGraphQLType(field, registry) as any),\n        description: field.admin?.description || field.label,\n      };\n    }\n  }\n\n  return fields;\n}\n\n// ============================================================================\n// GraphQL Schema Builder\n// ============================================================================\n\nexport interface GraphQLSchemaOptions {\n  registry: Registry;\n  db: BaseAdapter;\n  user?: User;\n  req?: Request;\n  tenantID?: string;\n  settings?: Record<string, any>;\n}\n\nexport function buildGraphQLSchema(\n  options: GraphQLSchemaOptions,\n): GraphQLSchema {\n  const { registry, db, user, req, tenantID, settings } = options;\n\n  // Check if GraphQL is disabled in settings\n  const apiAccess = settings?.access?.apiAccess;\n  if (apiAccess?.graphqlEnabled === false) {\n    throw new Error(\"GraphQL API is disabled\");\n  }\n\n  const collections = registry.getCollections();\n  const globals = registry.getGlobals();\n\n  // Build collection types\n  const collectionTypes: Record<string, GraphQLObjectType> = {};\n  const collectionInputTypes: Record<string, GraphQLInputObjectType> = {};\n\n  for (const collection of collections) {\n    // Output type\n    collectionTypes[collection.slug] = new GraphQLObjectType({\n      name: `${collection.slug.replace(/-/g, \"_\")}_type`,\n      fields: () => ({\n        id: { type: GraphQLString },\n        ...buildFieldsFromCollection(collection, registry),\n        ...(collection.timestamps\n          ? {\n              createdAt: { type: GraphQLString },\n              updatedAt: { type: GraphQLString },\n            }\n          : {}),\n        ...(collection.tenantScoped\n          ? {\n              tenantID: { type: GraphQLString },\n            }\n          : {}),\n      }),\n    });\n\n    // Input type for create/update\n    const inputFields: Record<string, { type: GraphQLType }> = {};\n    for (const field of collection.fields) {\n      if (field.name && field.name !== \"id\") {\n        inputFields[field.name] = {\n          type: fieldToGraphQLType(field, registry) as any,\n        };\n      }\n    }\n\n    collectionInputTypes[collection.slug] = new GraphQLInputObjectType({\n      name: `${collection.slug.replace(/-/g, \"_\")}_input`,\n      fields: () => inputFields as any,\n    });\n  }\n\n  // Build global types\n  const globalTypes: Record<string, GraphQLObjectType> = {};\n\n  for (const global of globals) {\n    globalTypes[global.slug] = new GraphQLObjectType({\n      name: `${global.slug.replace(/-/g, \"_\")}_global_type`,\n      fields: () => ({\n        id: { type: GraphQLString },\n        ...buildFieldsFromCollection(\n          { slug: global.slug, fields: global.fields } as CollectionConfig,\n          registry,\n        ),\n      }),\n    });\n  }\n\n  // Build query type\n  const queryFields: Record<string, GraphQLFieldConfig<any, any>> = {};\n\n  // List queries for each collection\n  for (const collection of collections) {\n    const type = collectionTypes[collection.slug];\n    if (!type) continue;\n\n    // FindMany query\n    queryFields[`${collection.slug}Find`] = {\n      type: new GraphQLObjectType({\n        name: `${collection.slug.replace(/-/g, \"_\")}_find_result`,\n        fields: {\n          docs: { type: new GraphQLList(type) },\n          totalDocs: { type: GraphQLInt },\n          page: { type: GraphQLInt },\n          totalPages: { type: GraphQLInt },\n          hasNextPage: { type: GraphQLBoolean },\n          hasPrevPage: { type: GraphQLBoolean },\n        },\n      }),\n      args: {\n        where: { type: GraphQLString },\n        sort: { type: GraphQLString },\n        limit: { type: GraphQLInt },\n        page: { type: GraphQLInt },\n      },\n      resolve: async (_: any, args: any, context: any) => {\n        const access = await checkGraphQLAccess(collection, \"read\", {\n          user,\n          req,\n          tenantID,\n        });\n        if (!access.allowed) {\n          throw new Error(\"Access denied\");\n        }\n\n        let where = {};\n        if (args.where) {\n          try {\n            where = JSON.parse(args.where);\n          } catch {}\n        }\n\n        if (access.extraWhere) {\n          where = { ...where, ...access.extraWhere };\n        }\n\n        return db.find({\n          collection: collection.slug,\n          where,\n          sort: args.sort,\n          limit: args.limit || 10,\n          page: args.page || 1,\n          tenantID,\n        });\n      },\n    };\n\n    // FindByID query\n    queryFields[`${collection.slug}FindByID`] = {\n      type,\n      args: {\n        id: { type: new GraphQLNonNull(GraphQLString) },\n      },\n      resolve: async (_: any, args: any, context: any) => {\n        const access = await checkGraphQLAccess(collection, \"read\", {\n          user,\n          req,\n          tenantID,\n        });\n        if (!access.allowed) {\n          throw new Error(\"Access denied\");\n        }\n        const doc = await db.findByID({\n          collection: collection.slug,\n          id: args.id,\n          tenantID,\n        });\n        return doc;\n      },\n    };\n\n    // Count query\n    queryFields[`${collection.slug}Count`] = {\n      type: new GraphQLObjectType({\n        name: `${collection.slug.replace(/-/g, \"_\")}_count`,\n        fields: {\n          totalDocs: { type: GraphQLInt },\n        },\n      }),\n      args: {\n        where: { type: GraphQLString },\n      },\n      resolve: async (_: any, args: any, context: any) => {\n        const access = await checkGraphQLAccess(collection, \"read\", {\n          user,\n          req,\n          tenantID,\n        });\n        if (!access.allowed) {\n          return { totalDocs: 0 };\n        }\n        let where = {};\n        if (args.where) {\n          try {\n            where = JSON.parse(args.where);\n          } catch {}\n        }\n        const count = await db.count({\n          collection: collection.slug,\n          where,\n          tenantID,\n        });\n        return { totalDocs: count };\n      },\n    };\n  }\n\n  // Global queries\n  for (const global of globals) {\n    const type = globalTypes[global.slug];\n    if (!type) continue;\n\n    queryFields[`${global.slug}Get`] = {\n      type,\n      resolve: async () => {\n        return db.findOne({\n          collection: `_globals_${global.slug}`,\n          where: {},\n          tenantID,\n        });\n      },\n    };\n  }\n\n  const Query = new GraphQLObjectType({\n    name: \"Query\",\n    fields: queryFields,\n  });\n\n  // Build mutation type\n  const mutationFields: Record<string, GraphQLFieldConfig<any, any>> = {};\n\n  for (const collection of collections) {\n    const type = collectionTypes[collection.slug];\n    const inputType = collectionInputTypes[collection.slug];\n    if (!type || !inputType) continue;\n\n    // Create mutation\n    mutationFields[`${collection.slug}Create`] = {\n      type: new GraphQLObjectType({\n        name: `${collection.slug.replace(/-/g, \"_\")}_create_result`,\n        fields: {\n          doc: { type },\n          message: { type: GraphQLString },\n        },\n      }),\n      args: {\n        data: { type: new GraphQLNonNull(inputType) },\n      },\n      resolve: async (_: any, args: any, context: any) => {\n        const access = await checkGraphQLAccess(collection, \"create\", {\n          user,\n          req,\n          tenantID,\n        });\n        if (!access.allowed) {\n          throw new Error(\"Access denied: cannot create\");\n        }\n        const schema = registry.getCreateZodSchema(collection.slug);\n        const validated = schema.parse(args.data);\n\n        const doc = await db.create({\n          collection: collection.slug,\n          data: validated,\n          tenantID,\n        });\n\n        return { doc, message: \"Created successfully\" };\n      },\n    };\n\n    // Update mutation\n    mutationFields[`${collection.slug}Update`] = {\n      type: new GraphQLObjectType({\n        name: `${collection.slug.replace(/-/g, \"_\")}_update_result`,\n        fields: {\n          doc: { type },\n          message: { type: GraphQLString },\n        },\n      }),\n      args: {\n        id: { type: new GraphQLNonNull(GraphQLString) },\n        data: { type: new GraphQLNonNull(inputType) },\n      },\n      resolve: async (_: any, args: any, context: any) => {\n        const access = await checkGraphQLAccess(collection, \"update\", {\n          user,\n          req,\n          tenantID,\n        });\n        if (!access.allowed) {\n          throw new Error(\"Access denied: cannot update\");\n        }\n        const schema = registry.getUpdateZodSchema(collection.slug);\n        const validated = schema.parse(args.data);\n\n        const doc = await db.update({\n          collection: collection.slug,\n          id: args.id,\n          data: validated,\n          tenantID,\n        });\n\n        return { doc, message: \"Updated successfully\" };\n      },\n    };\n\n    // Delete mutation\n    mutationFields[`${collection.slug}Delete`] = {\n      type: new GraphQLObjectType({\n        name: `${collection.slug.replace(/-/g, \"_\")}_delete_result`,\n        fields: {\n          doc: { type },\n          message: { type: GraphQLString },\n        },\n      }),\n      args: {\n        id: { type: new GraphQLNonNull(GraphQLString) },\n      },\n      resolve: async (_: any, args: any, context: any) => {\n        const access = await checkGraphQLAccess(collection, \"delete\", {\n          user,\n          req,\n          tenantID,\n        });\n        if (!access.allowed) {\n          throw new Error(\"Access denied: cannot delete\");\n        }\n        const doc = await db.delete({\n          collection: collection.slug,\n          id: args.id,\n          tenantID,\n        });\n\n        return { doc, message: \"Deleted successfully\" };\n      },\n    };\n  }\n\n  const Mutation = new GraphQLObjectType({\n    name: \"Mutation\",\n    fields: mutationFields,\n  });\n\n  return new GraphQLSchema({\n    query: Query,\n    mutation: Mutation,\n  });\n}\n\n// ============================================================================\n// Factory\n// ============================================================================\n\nexport function createGraphQLSchema(\n  registry: Registry,\n  db: BaseAdapter,\n  options?: {\n    user?: User;\n    req?: Request;\n    tenantID?: string;\n  },\n): GraphQLSchema {\n  return buildGraphQLSchema({\n    registry,\n    db,\n    user: options?.user,\n    req: options?.req,\n    tenantID: options?.tenantID,\n  });\n}\n"]}

package/dist/chunk-RGIQKTZ7.js

@@ -0,0 +1,68 @@
+import { drizzle as drizzle$1 } from 'drizzle-orm/postgres-js';
+import { drizzle } from 'drizzle-orm/mysql2';
+import postgres from 'postgres';
+import mysql from 'mysql2/promise';
+import { DatabaseSync } from 'sqlite';
+import { randomBytes } from 'crypto';
+import { mkdir } from 'fs/promises';
+import { resolve, dirname } from 'path';
+
+// src/database/drizzle/database.ts
+function getDialect() {
+  const val = process.env.DB_TYPE;
+  if (val === "mysql") return "mysql";
+  if (val === "postgres") return "postgres";
+  return "sqlite";
+}
+function genId() {
+  return randomBytes(16).toString("hex");
+}
+async function createDatabase() {
+  const dialect = getDialect();
+  if (dialect === "sqlite") {
+    const dbPath = resolve(process.cwd(), "data", "kyro.db");
+    await mkdir(dirname(dbPath), { recursive: true });
+    const db2 = new DatabaseSync(dbPath);
+    db2.exec("PRAGMA journal_mode = WAL");
+    return { db: db2, dialect, genId };
+  }
+  if (dialect === "mysql") {
+    const connectionString = process.env.DATABASE_URL || `mysql://${process.env.DB_USER || "root"}:${process.env.DB_PASSWORD || ""}@${process.env.DB_HOST || "localhost"}:${process.env.DB_PORT || 3306}/${process.env.DB_NAME || "kyro"}?timezone=+00:00`;
+    const pool = mysql.createPool({
+      uri: connectionString,
+      waitForConnections: true,
+      connectionLimit: parseInt(process.env.DB_POOL_MAX || "10", 10),
+      enableKeepAlive: true
+    });
+    const db2 = drizzle(pool);
+    return { db: db2, dialect, genId };
+  }
+  const databaseUrl = process.env.DATABASE_URL || "postgresql://postgres:postgres@localhost:5432/kyro_cms";
+  const maxConnections = parseInt(process.env.DB_POOL_MAX || "10", 10);
+  const ssl = process.env.DB_SSL === "true";
+  const client = postgres(databaseUrl, {
+    max: maxConnections,
+    ssl: ssl ? "require" : false
+  });
+  const db = drizzle$1(client);
+  return { db, dialect, genId };
+}
+async function runMigrations(_db, _dialect) {
+  console.log(
+    `[createDatabase] runMigrations called \u2014 use drizzle-kit CLI for migrations (drizzle-kit migrate)`
+  );
+}
+async function seedDefaultRoles(db) {
+  const { roles } = await import('./schema-6Q4W6AE6.js');
+  await db.insert(roles).values({
+    name: "super_admin",
+    level: 100,
+    inherits: [],
+    description: "Full system access across all tenants",
+    isSystem: true
+  }).onConflictDoNothing();
+}
+
+export { createDatabase, genId, runMigrations, seedDefaultRoles };
+//# sourceMappingURL=chunk-RGIQKTZ7.js.map
+//# sourceMappingURL=chunk-RGIQKTZ7.js.map

package/dist/chunk-RGIQKTZ7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/database/drizzle/database.ts"],"names":["db","drizzleMysql","drizzle"],"mappings":";;;;;;;;;;AAWA,SAAS,UAAA,GAAsB;AAC7B,EAAA,MAAM,GAAA,GAAM,QAAQ,GAAA,CAAI,OAAA;AACxB,EAAA,IAAI,GAAA,KAAQ,SAAS,OAAO,OAAA;AAC5B,EAAA,IAAI,GAAA,KAAQ,YAAY,OAAO,UAAA;AAC/B,EAAA,OAAO,QAAA;AACT;AAEO,SAAS,KAAA,GAAgB;AAC9B,EAAA,OAAO,WAAA,CAAY,EAAE,CAAA,CAAE,QAAA,CAAS,KAAK,CAAA;AACvC;AAQA,eAAsB,cAAA,GAA0C;AAC9D,EAAA,MAAM,UAAU,UAAA,EAAW;AAE3B,EAAA,IAAI,YAAY,QAAA,EAAU;AACxB,IAAA,MAAM,SAAS,OAAA,CAAQ,OAAA,CAAQ,GAAA,EAAI,EAAG,QAAQ,SAAS,CAAA;AACvD,IAAA,MAAM,MAAM,OAAA,CAAQ,MAAM,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAChD,IAAA,MAAMA,GAAAA,GAAK,IAAI,YAAA,CAAa,MAAM,CAAA;AAClC,IAAAA,GAAAA,CAAG,KAAK,2BAA2B,CAAA;AACnC,IAAA,OAAO,EAAE,EAAA,EAAAA,GAAAA,EAAI,OAAA,EAAS,KAAA,EAAM;AAAA,EAC9B;AAEA,EAAA,IAAI,YAAY,OAAA,EAAS;AACvB,IAAA,MAAM,gBAAA,GACJ,OAAA,CAAQ,GAAA,CAAI,YAAA,IACZ,CAAA,QAAA,EAAW,OAAA,CAAQ,GAAA,CAAI,OAAA,IAAW,MAAM,CAAA,CAAA,EAAI,OAAA,CAAQ,GAAA,CAAI,WAAA,IAAe,EAAE,CAAA,CAAA,EAAI,OAAA,CAAQ,GAAA,CAAI,OAAA,IAAW,WAAW,CAAA,CAAA,EAAI,OAAA,CAAQ,GAAA,CAAI,OAAA,IAAW,IAAI,CAAA,CAAA,EAAI,OAAA,CAAQ,GAAA,CAAI,OAAA,IAAW,MAAM,CAAA,gBAAA,CAAA;AACjL,IAAA,MAAM,IAAA,GAAO,MAAM,UAAA,CAAW;AAAA,MAC5B,GAAA,EAAK,gBAAA;AAAA,MACL,kBAAA,EAAoB,IAAA;AAAA,MACpB,iBAAiB,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,WAAA,IAAe,MAAM,EAAE,CAAA;AAAA,MAC7D,eAAA,EAAiB;AAAA,KAClB,CAAA;AACD,IAAA,MAAMA,GAAAA,GAAKC,QAAa,IAAI,CAAA;AAC5B,IAAA,OAAO,EAAE,EAAA,EAAAD,GAAAA,EAAI,OAAA,EAAS,KAAA,EAAM;AAAA,EAC9B;AAGA,EAAA,MAAM,WAAA,GACJ,OAAA,CAAQ,GAAA,CAAI,YAAA,IACZ,wDAAA;AACF,EAAA,MAAM,iBAAiB,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,WAAA,IAAe,MAAM,EAAE,CAAA;AACnE,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,CAAI,MAAA,KAAW,MAAA;AACnC,EAAA,MAAM,MAAA,GAAS,SAAS,WAAA,EAAa;AAAA,IACnC,GAAA,EAAK,cAAA;AAAA,IACL,GAAA,EAAK,MAAM,SAAA,GAAY;AAAA,GACxB,CAAA;AACD,EAAA,MAAM,EAAA,GAAKE,UAAQ,MAAM,CAAA;AACzB,EAAA,OAAO,EAAE,EAAA,EAAI,OAAA,EAAS,KAAA,EAAM;AAC9B;AAEA,eAAsB,aAAA,CACpB,KACA,QAAA,EACe;AACf,EAAA,OAAA,CAAQ,GAAA;AAAA,IACN,CAAA,qGAAA;AAAA,GACF;AACF;AAEA,eAAsB,iBAAiB,EAAA,EAAwB;AAC7D,EAAA,MAAM,EAAE,KAAA,EAAM,GAAI,MAAM,OAAO,sBAAmB,CAAA;AAClD,EAAA,MAAM,EAAA,CACH,MAAA,CAAO,KAAK,CAAA,CACZ,MAAA,CAAO;AAAA,IACN,IAAA,EAAM,aAAA;AAAA,IACN,KAAA,EAAO,GAAA;AAAA,IACP,UAAU,EAAC;AAAA,IACX,WAAA,EAAa,uCAAA;AAAA,IACb,QAAA,EAAU;AAAA,GACX,EACA,mBAAA,EAAoB;AACzB","file":"chunk-RGIQKTZ7.js","sourcesContent":["import { drizzle } from \"drizzle-orm/postgres-js\";\nimport { drizzle as drizzleMysql } from \"drizzle-orm/mysql2\";\nimport postgres from \"postgres\";\nimport mysql from \"mysql2/promise\";\nimport { DatabaseSync } from \"node:sqlite\";\nimport { randomBytes } from \"crypto\";\nimport { mkdir } from \"fs/promises\";\nimport { dirname, resolve } from \"path\";\n\nexport type Dialect = \"sqlite\" | \"postgres\" | \"mysql\";\n\nfunction getDialect(): Dialect {\n  const val = process.env.DB_TYPE as Dialect | undefined;\n  if (val === \"mysql\") return \"mysql\";\n  if (val === \"postgres\") return \"postgres\";\n  return \"sqlite\";\n}\n\nexport function genId(): string {\n  return randomBytes(16).toString(\"hex\");\n}\n\nexport interface DatabaseResult {\n  db: any;\n  dialect: Dialect;\n  genId: () => string;\n}\n\nexport async function createDatabase(): Promise<DatabaseResult> {\n  const dialect = getDialect();\n\n  if (dialect === \"sqlite\") {\n    const dbPath = resolve(process.cwd(), \"data\", \"kyro.db\");\n    await mkdir(dirname(dbPath), { recursive: true });\n    const db = new DatabaseSync(dbPath);\n    db.exec(\"PRAGMA journal_mode = WAL\");\n    return { db, dialect, genId };\n  }\n\n  if (dialect === \"mysql\") {\n    const connectionString =\n      process.env.DATABASE_URL ||\n      `mysql://${process.env.DB_USER || \"root\"}:${process.env.DB_PASSWORD || \"\"}@${process.env.DB_HOST || \"localhost\"}:${process.env.DB_PORT || 3306}/${process.env.DB_NAME || \"kyro\"}?timezone=+00:00`;\n    const pool = mysql.createPool({\n      uri: connectionString,\n      waitForConnections: true,\n      connectionLimit: parseInt(process.env.DB_POOL_MAX || \"10\", 10),\n      enableKeepAlive: true,\n    });\n    const db = drizzleMysql(pool);\n    return { db, dialect, genId };\n  }\n\n  // postgres default\n  const databaseUrl =\n    process.env.DATABASE_URL ||\n    \"postgresql://postgres:postgres@localhost:5432/kyro_cms\";\n  const maxConnections = parseInt(process.env.DB_POOL_MAX || \"10\", 10);\n  const ssl = process.env.DB_SSL === \"true\";\n  const client = postgres(databaseUrl, {\n    max: maxConnections,\n    ssl: ssl ? \"require\" : false,\n  });\n  const db = drizzle(client);\n  return { db, dialect, genId };\n}\n\nexport async function runMigrations(\n  _db: any,\n  _dialect?: Dialect,\n): Promise<void> {\n  console.log(\n    `[createDatabase] runMigrations called — use drizzle-kit CLI for migrations (drizzle-kit migrate)`,\n  );\n}\n\nexport async function seedDefaultRoles(db: any): Promise<void> {\n  const { roles } = await import(\"./schema/index.js\");\n  await db\n    .insert(roles)\n    .values({\n      name: \"super_admin\",\n      level: 100,\n      inherits: [],\n      description: \"Full system access across all tenants\",\n      isSystem: true,\n    })\n    .onConflictDoNothing();\n}\n"]}