@kyro-cms/core 0.6.0 → 0.8.0

package/dist/chunk-57P6MJKC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/config/ConfigService.ts","../src/auth/nodemailer-transport.ts","../src/auth/security/password-policy.ts"],"names":[],"mappings":";;;AAGA,IAAI,qBAAA,GAAwB,KAAA;AAC5B,IAAI,OAAA,GAAU,KAAA;AA+FP,IAAM,aAAA,GAAN,MAAM,cAAA,CAAc;AAAA,EACjB,EAAA;AAAA,EACA,QAAgC,EAAC;AAAA,EACzC,OAAwB,cAAA,GAAiB;AAAA,IACvC,8BAAA;AAAA,IACA,8BAAA;AAAA,IACA,yBAAA;AAAA,IACA,mCAAA;AAAA,IACA,kCAAA;AAAA,IACA,sBAAA;AAAA,IACA,uBAAA;AAAA,IACA,+BAAA;AAAA,IACA,wBAAA;AAAA,IACA,iBAAA;AAAA,IACA,iBAAA;AAAA,IACA,oBAAA;AAAA,IACA,oBAAA;AAAA,IACA,iBAAA;AAAA,IACA,cAAA;AAAA,IACA,WAAA;AAAA,IACA;AAAA,GACF;AAAA,EAEA,YAAY,EAAA,EAAS;AACnB,IAAA,IAAA,CAAK,EAAA,GAAK,EAAA;AAAA,EACZ;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,IAAA,GAAsB;AAC1B,IAAA,IAAI,OAAA,EAAS;AAEb,IAAA,MAAM,KAAK,mBAAA,EAAoB;AAE/B,IAAA,IAAI;AACF,MAAA,IAAI,OAAO,IAAA,CAAK,EAAA,EAAI,MAAA,KAAW,UAAA,EAAY;AACzC,QAAA,MAAM,cAAc,MAAM,IAAA,CAAK,GAAG,MAAA,EAAO,CAAE,KAAK,QAAc,CAAA;AAC9D,QAAA,IAAA,CAAK,KAAA,GAAQ,WAAA,CAAY,MAAA,CAAO,CAAC,KAAU,GAAA,KAAa;AACtD,UAAA,GAAA,CAAI,GAAA,CAAI,GAAG,CAAA,GAAI,GAAA,CAAI,KAAA;AACnB,UAAA,OAAO,GAAA;AAAA,QACT,CAAA,EAAG,EAAE,CAAA;AAAA,MACP,CAAA,MAAO;AACL,QAAA,MAAM,KAAK,eAAA,EAAgB;AAAA,MAC7B;AAAA,IACF,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,IAAA;AAAA,QACN;AAAA,OACF;AAAA,IACF;AAEA,IAAA,OAAA,GAAU,IAAA;AAAA,EACZ;AAAA,EAEA,MAAc,mBAAA,GAAqC;AACjD,IAAA,IAAI,qBAAA,EAAuB;AAE3B,IAAA,IAAI;AACF,MAAA,IAAI,OAAO,IAAA,CAAK,EAAA,EAAI,OAAA,KAAY,UAAA,EAAY;AAC1C,QAAA,MAAM,EAAE,GAAA,EAAI,GAAI,MAAM,OAAO,aAAa,CAAA;AAC1C,QAAA,MAAM,IAAA,CAAK,GAAG,OAAA,CAAQ,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAAA,CAOrB,CAAA;AACD,QAAA,qBAAA,GAAwB,IAAA;AAAA,MAC1B,CAAA,MAAA,IAAW,OAAO,IAAA,CAAK,EAAA,EAAI,SAAS,UAAA,EAAY;AAC9C,QAAA,IAAA,CAAK,GAAG,IAAA,CAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAAA,CAOZ,CAAA;AACD,QAAA,qBAAA,GAAwB,IAAA;AAAA,MAC1B;AAAA,IACF,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAc,eAAA,GAAiC;AAC7C,IAAA,IAAI;AACF,MAAA,MAAM,MAAM,IAAA,CAAK,EAAA,CACd,OAAA,CAAQ,CAAA,iDAAA,CAAmD,EAC3D,GAAA,EAAI;AAEP,MAAA,IAAI,CAAC,GAAA,EAAK;AAEV,MAAA,MAAM,SAAA,GAAY,CAAC,GAAA,KAAa;AAC9B,QAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AACjB,QAAA,IAAI,OAAO,QAAQ,QAAA,EAAU;AAC3B,UAAA,IAAI;AACF,YAAA,OAAO,IAAA,CAAK,MAAM,GAAG,CAAA;AAAA,UACvB,CAAA,CAAA,MAAQ;AACN,YAAA,OAAO,IAAA;AAAA,UACT;AAAA,QACF;AACA,QAAA,OAAO,GAAA;AAAA,MACT,CAAA;AAEA,MAAA,MAAM,QAAA,GAAW,IAAI,QAAA,IAAY,OAAA;AACjC,MAAA,IAAA,CAAK,KAAA,CAAM,cAAc,CAAA,GAAI,QAAA,KAAa,QAAQ,IAAA,GAAO,QAAA;AAEzD,MAAA,IAAI,aAAa,OAAA,EAAS;AACxB,QAAA,MAAM,KAAA,GAAQ,SAAA,CAAU,GAAA,CAAI,KAAK,CAAA;AACjC,QAAA,IAAA,CAAK,KAAA,CAAM,mBAAmB,CAAA,GAC5B,KAAA,EAAO,SAAA,IAAa,kBAAA;AACtB,QAAA,IAAA,CAAK,KAAA,CAAM,mBAAmB,CAAA,GAAI,KAAA,EAAO,OAAA,IAAW,UAAA;AAAA,MACtD;AAEA,MAAA,IAAI,aAAa,KAAA,EAAO;AACtB,QAAA,MAAM,GAAA,GAAM,SAAA,CAAU,GAAA,CAAI,GAAG,CAAA;AAC7B,QAAA,IAAA,CAAK,KAAA,CAAM,mBAAmB,CAAA,GAAI,GAAA,EAAK,MAAA,IAAU,EAAA;AACjD,QAAA,IAAA,CAAK,KAAA,CAAM,mBAAmB,CAAA,GAAI,GAAA,EAAK,MAAA,IAAU,WAAA;AACjD,QAAA,IAAA,CAAK,KAAA,CAAM,0BAA0B,CAAA,GAAI,GAAA,EAAK,WAAA,IAAe,EAAA;AAC7D,QAAA,IAAA,CAAK,KAAA,CAAM,8BAA8B,CAAA,GAAI,GAAA,EAAK,eAAA,IAAmB,EAAA;AACrE,QAAA,IAAA,CAAK,KAAA,CAAM,qBAAqB,CAAA,GAAI,GAAA,EAAK,QAAA,IAAY,EAAA;AACrD,QAAA,IAAA,CAAK,KAAA,CAAM,oBAAoB,CAAA,GAAI,GAAA,EAAK,MAAA,IAAU,EAAA;AAClD,QAAA,IAAA,CAAK,KAAA,CAAM,mBAAmB,CAAA,GAAI,GAAA,EAAK,MAAA,IAAU,EAAA;AAAA,MACnD;AAEA,MAAA,IAAI,aAAa,IAAA,EAAM;AACrB,QAAA,MAAM,EAAA,GAAK,SAAA,CAAU,GAAA,CAAI,EAAE,CAAA;AAC3B,QAAA,IAAA,CAAK,KAAA,CAAM,uBAAuB,CAAA,GAAI,EAAA,EAAI,SAAA,IAAa,EAAA;AACvD,QAAA,IAAA,CAAK,KAAA,CAAM,0BAA0B,CAAA,GAAI,EAAA,EAAI,WAAA,IAAe,EAAA;AAC5D,QAAA,IAAA,CAAK,KAAA,CAAM,8BAA8B,CAAA,GAAI,EAAA,EAAI,eAAA,IAAmB,EAAA;AACpE,QAAA,IAAA,CAAK,KAAA,CAAM,mBAAmB,CAAA,GAAI,EAAA,EAAI,MAAA,IAAU,EAAA;AAChD,QAAA,IAAA,CAAK,KAAA,CAAM,oBAAoB,CAAA,GAAI,EAAA,EAAI,MAAA,IAAU,EAAA;AACjD,QAAA,IAAA,CAAK,KAAA,CAAM,mBAAmB,CAAA,GAAI,EAAA,EAAI,MAAA,IAAU,EAAA;AAAA,MAClD;AAEA,MAAA,IAAI,aAAa,YAAA,EAAc;AAC7B,QAAA,MAAM,UAAA,GAAa,SAAA,CAAU,GAAA,CAAI,UAAU,CAAA;AAC3C,QAAA,IAAA,CAAK,KAAA,CAAM,+BAA+B,CAAA,GACxC,UAAA,EAAY,SAAA,IAAa,EAAA;AAC3B,QAAA,IAAA,CAAK,KAAA,CAAM,4BAA4B,CAAA,GAAI,UAAA,EAAY,MAAA,IAAU,EAAA;AACjE,QAAA,IAAA,CAAK,KAAA,CAAM,+BAA+B,CAAA,GACxC,UAAA,EAAY,SAAA,IAAa,EAAA;AAC3B,QAAA,IAAA,CAAK,KAAA,CAAM,2BAA2B,CAAA,GAAI,UAAA,EAAY,MAAA,IAAU,EAAA;AAAA,MAClE;AAEA,MAAA,IAAI,aAAa,KAAA,EAAO;AACtB,QAAA,MAAM,GAAA,GAAM,SAAA,CAAU,GAAA,CAAI,GAAG,CAAA;AAC7B,QAAA,IAAA,CAAK,KAAA,CAAM,kBAAkB,CAAA,GAAI,GAAA,EAAK,IAAA,IAAQ,EAAA;AAC9C,QAAA,IAAA,CAAK,MAAM,kBAAkB,CAAA,GAAI,MAAA,CAAO,GAAA,EAAK,QAAQ,IAAI,CAAA;AACzD,QAAA,IAAA,CAAK,KAAA,CAAM,kBAAkB,CAAA,GAAI,GAAA,EAAK,IAAA,IAAQ,EAAA;AAC9C,QAAA,IAAA,CAAK,KAAA,CAAM,sBAAsB,CAAA,GAAI,GAAA,EAAK,QAAA,IAAY,EAAA;AACtD,QAAA,IAAA,CAAK,KAAA,CAAM,oBAAoB,CAAA,GAAI,GAAA,EAAK,SAAS,MAAA,GAAS,OAAA;AAC1D,QAAA,IAAA,CAAK,KAAA,CAAM,sBAAsB,CAAA,GAAI,GAAA,EAAK,OAAA,IAAW,EAAA;AACrD,QAAA,IAAA,CAAK,KAAA,CAAM,oBAAoB,CAAA,GAAI,GAAA,EAAK,MAAA,IAAU,EAAA;AAAA,MACpD;AAAA,IACF,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,IAAA,CAAK,qDAAqD,KAAK,CAAA;AAAA,IACzE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,GAAA,CAAI,GAAA,EAAa,MAAA,EAAiB,YAAA,EAA2C;AAE3E,IAAA,IAAI,KAAK,KAAA,CAAM,GAAG,GAAG,OAAO,IAAA,CAAK,MAAM,GAAG,CAAA;AAG1C,IAAA,IAAI,MAAA,IAAU,QAAQ,GAAA,CAAI,MAAM,GAAG,OAAO,OAAA,CAAQ,IAAI,MAAM,CAAA;AAG5D,IAAA,OAAO,YAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,gBAAA,GAAkC;AAChC,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,IAAA,CAAK,GAAA,CAAI,cAAA,EAAgB,gBAAgB,OAAO,CAAA;AAAA,MACtD,EAAA,EAAI;AAAA,QACF,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,mBAAA,EAAqB,gBAAgB,CAAA;AAAA,QACtD,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,mBAAA,EAAqB,kBAAkB,WAAW,CAAA;AAAA,QACnE,aAAa,IAAA,CAAK,GAAA;AAAA,UAChB,0BAAA;AAAA,UACA;AAAA,SACF;AAAA,QACA,iBAAiB,IAAA,CAAK,GAAA;AAAA,UACpB,8BAAA;AAAA,UACA;AAAA,SACF;AAAA,QACA,QAAA,EAAU,IAAA,CAAK,GAAA,CAAI,qBAAA,EAAuB,kBAAkB,CAAA;AAAA,QAC5D,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,oBAAA,EAAsB,iBAAiB,CAAA;AAAA,QACxD,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,mBAAA,EAAqB,gBAAgB;AAAA,OACxD;AAAA,MACA,EAAA,EAAI;AAAA,QACF,SAAA,EAAW,IAAA,CAAK,GAAA,CAAI,uBAAA,EAAyB,eAAe,CAAA;AAAA,QAC5D,WAAA,EAAa,IAAA,CAAK,GAAA,CAAI,0BAAA,EAA4B,kBAAkB,CAAA;AAAA,QACpE,iBAAiB,IAAA,CAAK,GAAA;AAAA,UACpB,8BAAA;AAAA,UACA;AAAA,SACF;AAAA,QACA,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,mBAAA,EAAqB,WAAW,CAAA;AAAA,QACjD,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,oBAAA,EAAsB,YAAY,CAAA;AAAA,QACnD,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,mBAAA,EAAqB,WAAW;AAAA,OACnD;AAAA,MACA,GAAA,EAAK;AAAA,QACH,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,oBAAA,EAAsB,YAAY,CAAA;AAAA,QACnD,SAAA,EAAW,IAAA,CAAK,GAAA,CAAI,wBAAA,EAA0B,gBAAgB,CAAA;AAAA,QAC9D,WAAA,EAAa,IAAA,CAAK,GAAA,CAAI,0BAAA,EAA4B,kBAAkB,CAAA;AAAA,QACpE,UAAA,EAAY,IAAA,CAAK,GAAA,CAAI,yBAAA,EAA2B,iBAAiB,CAAA;AAAA,QACjE,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,qBAAA,EAAuB,aAAa,CAAA;AAAA,QACrD,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,oBAAA,EAAsB,YAAY;AAAA,OACrD;AAAA,MACA,YAAA,EAAc;AAAA,QACZ,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,6BAAA,EAA+B,WAAW,CAAA;AAAA,QAC3D,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,6BAAA,EAA+B,aAAa,MAAM,CAAA;AAAA,QACnE,aAAa,IAAA,CAAK,GAAA;AAAA,UAChB,oCAAA;AAAA,UACA;AAAA,SACF;AAAA,QACA,iBAAiB,IAAA,CAAK,GAAA;AAAA,UACpB,wCAAA;AAAA,UACA;AAAA,SACF;AAAA,QACA,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,8BAAA,EAAgC,YAAY,CAAA;AAAA,QAC7D,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,6BAAA,EAA+B,WAAW;AAAA,OAC7D;AAAA,MACA,SAAA,EAAW;AAAA,QACT,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,0BAAA,EAA4B,WAAW,CAAA;AAAA,QACxD,SAAA,EAAW,IAAA,CAAK,GAAA,CAAI,8BAAA,EAAgC,eAAe,CAAA;AAAA,QACnE,kBAAkB,IAAA,CAAK,GAAA;AAAA,UACrB,sCAAA;AAAA,UACA;AAAA,SACF;AAAA,QACA,gBAAgB,IAAA,CAAK,GAAA;AAAA,UACnB,mCAAA;AAAA,UACA;AAAA,SACF;AAAA,QACA,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,2BAAA,EAA6B,YAAY,CAAA;AAAA,QAC1D,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,0BAAA,EAA4B,WAAW;AAAA,OAC1D;AAAA,MACA,MAAA,EAAQ;AAAA,QACN,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,uBAAA,EAAyB,eAAe,CAAA;AAAA,QACzD,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,uBAAA,EAAyB,iBAAiB,WAAW,CAAA;AAAA,QACtE,aAAa,IAAA,CAAK,GAAA;AAAA,UAChB,8BAAA;AAAA,UACA;AAAA,SACF;AAAA,QACA,iBAAiB,IAAA,CAAK,GAAA;AAAA,UACpB,kCAAA;AAAA,UACA;AAAA,SACF;AAAA,QACA,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,wBAAA,EAA0B,gBAAgB,CAAA;AAAA,QAC3D,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,uBAAA,EAAyB,eAAe;AAAA,OAC3D;AAAA,MACA,KAAA,EAAO;AAAA,QACL,aAAa,IAAA,CAAK,GAAA;AAAA,UAChB,4BAAA;AAAA,UACA;AAAA,SACF;AAAA,QACA,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,uBAAA,EAAyB,eAAe,CAAA;AAAA,QACzD,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,uBAAA,EAAyB,eAAe,CAAA;AAAA,QACzD,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,sBAAA,EAAwB,cAAc;AAAA,OACzD;AAAA,MACA,GAAA,EAAK;AAAA,QACH,IAAA,EAAM,IAAA,CAAK,GAAA,CAAI,kBAAA,EAAoB,UAAU,CAAA;AAAA,QAC7C,IAAA,EAAM,SAAS,IAAA,CAAK,GAAA,CAAI,oBAAoB,UAAA,EAAY,IAAI,GAAI,EAAE,CAAA;AAAA,QAClE,IAAA,EAAM,IAAA,CAAK,GAAA,CAAI,kBAAA,EAAoB,UAAU,CAAA;AAAA,QAC7C,QAAA,EAAU,IAAA,CAAK,GAAA,CAAI,sBAAA,EAAwB,cAAc,CAAA;AAAA,QACzD,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,oBAAA,EAAsB,YAAY,CAAA,KAAM,MAAA;AAAA,QACzD,OAAA,EAAS,IAAA,CAAK,GAAA,CAAI,sBAAA,EAAwB,cAAc,CAAA;AAAA,QACxD,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,oBAAA,EAAsB,YAAY;AAAA,OACrD;AAAA,MACA,UAAA,EAAY;AAAA,QACV,WAAW,IAAA,CAAK,GAAA;AAAA,UACd,+BAAA;AAAA,UACA;AAAA,SACF;AAAA,QACA,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,4BAAA,EAA8B,oBAAoB,CAAA;AAAA,QACnE,WAAW,IAAA,CAAK,GAAA;AAAA,UACd,+BAAA;AAAA,UACA;AAAA,SACF;AAAA,QACA,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,2BAAA,EAA6B,mBAAmB;AAAA,OACnE;AAAA,MACA,KAAA,EAAO;AAAA,QACL,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,sBAAA,EAAwB,cAAc,CAAA;AAAA,QACvD,OAAA,EAAS,IAAA,CAAK,GAAA,CAAI,wBAAA,EAA0B,gBAAgB;AAAA,OAC9D;AAAA,MACA,KAAA,EAAO;AAAA,QACL,SAAA,EAAW,IAAA,CAAK,GAAA,CAAI,mBAAA,EAAqB,mBAAmB,CAAA;AAAA,QAC5D,OAAA,EAAS,IAAA,CAAK,GAAA,CAAI,mBAAA,EAAqB,qBAAqB,UAAU;AAAA;AACxE,KACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,cAAA,GAA8B;AAC5B,IAAA,OAAO;AAAA,MACL,QAAA,EAAU,IAAA,CAAK,GAAA,CAAI,gBAAA,EAAkB,kBAAkB,MAAM,CAAA;AAAA,MAC7D,IAAA,EAAM,IAAA,CAAK,GAAA,CAAI,iBAAA,EAAmB,WAAW,CAAA;AAAA,MAC7C,IAAA,EAAM,SAAS,IAAA,CAAK,GAAA,CAAI,mBAAmB,WAAA,EAAa,KAAK,GAAI,EAAE,CAAA;AAAA,MACnE,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,mBAAA,EAAqB,aAAa,CAAA,KAAM,MAAA;AAAA,MACzD,IAAA,EAAM,IAAA,CAAK,GAAA,CAAI,iBAAA,EAAmB,WAAW,CAAA;AAAA,MAC7C,IAAA,EAAM,IAAA,CAAK,GAAA,CAAI,iBAAA,EAAmB,WAAW,CAAA;AAAA,MAC7C,IAAA,EAAM,IAAA,CAAK,GAAA,CAAI,iBAAA,EAAmB,aAAa,qBAAqB,CAAA;AAAA,MACpE,QAAA,EAAU,IAAA,CAAK,GAAA,CAAI,sBAAA,EAAwB,kBAAkB,UAAU,CAAA;AAAA,MACvE,OAAA,EAAS,IAAA,CAAK,GAAA,CAAI,qBAAA,EAAuB,eAAe;AAAA,KAC1D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,aAAA,CAAc,KAAa,KAAA,EAA+C;AACxE,IAAA,IAAI,CAAC,OAAO,OAAO,KAAA;AACnB,IAAA,IAAI,cAAA,CAAc,cAAA,CAAe,QAAA,CAAS,GAAG,CAAA,EAAG;AAC9C,MAAA,OAAO,UAAA;AAAA,IACT;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,GAAA,CAAI,GAAA,EAAa,KAAA,EAAe,WAAA,EAAqC;AACzE,IAAA,MAAM,IAAA,CAAK,EAAA,CACR,MAAA,CAAO,QAAc,EACrB,MAAA,CAAO;AAAA,MACN,GAAA;AAAA,MACA,KAAA;AAAA,MACA,WAAA;AAAA,MACA,SAAA,sBAAe,IAAA;AAAK,KACrB,EACA,kBAAA,CAAmB;AAAA,MAClB,MAAA,EAAQ,CAAC,QAAA,CAAe,GAAG,CAAA;AAAA,MAC3B,KAAK,EAAE,KAAA,EAAO,aAAa,SAAA,kBAAW,IAAI,MAAK;AAAE,KAClD,CAAA;AACH,IAAA,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,GAAI,KAAA;AAAA,EACpB;AACF;;;ACtXA,IAAM,gBAAA,GAAmC;AAAA,EACvC,WAAA,EAAa,CAAC,IAAA,EAAM,QAAA,GAAW,MAAA,MAAY;AAAA,IACzC,OAAA,EAAS,2BAAA;AAAA,IACT,IAAA,EAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,uBAAA,EAgBe,QAAQ,CAAA;AAAA;AAAA;AAAA,qBAAA,EAGV,IAAI,CAAA;AAAA;AAAA;AAAA,yDAAA,EAGgC,IAAI,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAAA;AAAA,IAS3D,IAAA,EAAM,WAAW,QAAQ,CAAA;;AAAA,gDAAA,EAAwD,IAAI;;AAAA;;AAAA,kEAAA;AAAA,GACvF,CAAA;AAAA,EAEA,aAAA,EAAe,CAAC,IAAA,EAAM,QAAA,GAAW,MAAA,MAAY;AAAA,IAC3C,OAAA,EAAS,qBAAA;AAAA,IACT,IAAA,EAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAAA,EAkBW,QAAQ,CAAA;AAAA;AAAA;AAAA,qBAAA,EAGN,IAAI,CAAA;AAAA;AAAA;AAAA,yDAAA,EAGgC,IAAI,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAAA;AAAA,IAW3D,IAAA,EAAM,CAAA;;AAAA,MAAA,EAAmC,QAAQ,CAAA;;AAAA,wFAAA,EAAgG,IAAI;;AAAA;;AAAA,iEAAA;AAAA,GACvJ,CAAA;AAAA,EAEA,OAAA,EAAS,CAAC,QAAA,GAAW,MAAA,MAAY;AAAA,IAC/B,OAAA,EAAS,qBAAA;AAAA,IACT,IAAA,EAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mCAAA,EAe2B,QAAQ,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAAA;AAAA,IAiBzC,IAAA,EAAM,wBAAwB,QAAQ,CAAA;;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA,2CAAA;AAAA,GACxC,CAAA;AAAA,EAEA,aAAA,EAAe,CAAC,QAAA,EAAU,QAAA,EAAU,WAAW,MAAA,MAAY;AAAA,IACzD,OAAA,EAAS,yCAAA;AAAA,IACT,IAAA,EAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAAA,EAiBW,QAAQ,CAAA;AAAA;AAAA;AAAA,gCAAA,EAGK,QAAQ,CAAA;AAAA,iCAAA,EACP,IAAA,CAAK,KAAA,CAAM,QAAA,GAAW,GAAK,CAAC,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAAA;AAAA,IAgB3D,IAAA,EAAM,CAAA;;AAAA,MAAA,EAAmC,QAAQ,CAAA;;AAAA,gFAAA,EAAwF,QAAQ,CAAA;;AAAA,kBAAA,EAA2B,IAAA,CAAK,KAAA,CAAM,QAAA,GAAW,GAAK,CAAC,CAAA;;AAAA;;AAAA,iEAAA;AAAA,GAC1M,CAAA;AAAA,EAEA,eAAA,EAAiB,CAAC,QAAA,GAAW,MAAA,MAAY;AAAA,IACvC,OAAA,EAAS,gCAAA;AAAA,IACT,IAAA,EAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAAA,EAgBW,QAAQ,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAAA;AAAA,IAUzB,IAAA,EAAM,CAAA;;AAAA,MAAA,EAA6B,QAAQ,CAAA;;AAAA;;AAAA;;AAAA,uEAAA;AAAA,GAC7C,CAAA;AAAA,EAEA,QAAA,EAAU,CAAC,QAAA,EAAU,IAAA,EAAM,WAAW,MAAA,MAAY;AAAA,IAChD,OAAA,EAAS,2BAAA;AAAA,IACT,IAAA,EAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAAA,EAiBW,QAAQ,CAAA;AAAA;AAAA;AAAA,0CAAA,EAGe,QAAQ,CAAA;AAAA,sCAAA,EACZ,IAAI,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAAA;AAAA,IAgBxC,IAAA,EAAM,CAAA;;AAAA,MAAA,EAA+B,QAAQ,CAAA;;AAAA;;AAAA,UAAA,EAA8D,QAAQ;AAAA,MAAA,EAAW,IAAI;;AAAA,gFAAA;AAAA,GACpI;AACF,CAAA;AAIO,IAAM,cAAA,GAAN,MAAM,eAAA,CAAe;AAAA,EAClB,WAAA;AAAA,EACA,MAAA;AAAA,EACA,SAAA;AAAA,EACA,sBAAA,GAAkC,KAAA;AAAA,EAE1C,WAAA,CAAY,QAAqB,SAAA,EAAqC;AACpE,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,SAAA,GAAY,EAAE,GAAG,gBAAA,EAAkB,GAAG,SAAA,EAAU;AAAA,EACvD;AAAA,EAEA,MAAc,iBAAA,GAA2D;AACvE,IAAA,IAAI,KAAK,sBAAA,EAAwB;AAC/B,MAAA,OAAO,IAAA,CAAK,WAAA;AAAA,IACd;AAEA,IAAA,MAAM,EAAE,OAAA,EAAS,UAAA,EAAW,GAAI,MAAM,OAAO,YAAY,CAAA;AAEzD,IAAA,IAAI,KAAK,MAAA,CAAO,QAAA,KAAa,MAAA,IAAU,IAAA,CAAK,OAAO,IAAA,EAAM;AACvD,MAAA,IAAA,CAAK,WAAA,GAAc,WAAW,eAAA,CAAgB;AAAA,QAC5C,IAAA,EAAM,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,IAAA;AAAA,QACvB,IAAA,EAAM,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,IAAA;AAAA,QACvB,MAAA,EAAQ,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,MAAA;AAAA,QACzB,IAAA,EAAM,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK;AAAA,OACxB,CAAA;AAAA,IACH,WAAW,IAAA,CAAK,MAAA,CAAO,aAAa,KAAA,IAAS,IAAA,CAAK,OAAO,GAAA,EAAK;AAC5D,MAAA,IAAA,CAAK,WAAA,GAAc,WAAW,eAAA,CAAgB;AAAA,QAC5C,IAAA,EAAM,CAAA,WAAA,EAAc,IAAA,CAAK,MAAA,CAAO,IAAI,MAAM,CAAA,cAAA,CAAA;AAAA,QAC1C,IAAA,EAAM,GAAA;AAAA,QACN,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM;AAAA,UACJ,IAAA,EAAM,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,WAAA;AAAA,UACtB,IAAA,EAAM,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI;AAAA;AACxB,OACD,CAAA;AAAA,IACH;AAEA,IAAA,IAAA,CAAK,sBAAA,GAAyB,IAAA;AAC9B,IAAA,OAAO,IAAA,CAAK,WAAA;AAAA,EACd;AAAA,EAEA,MAAM,KAAK,OAAA,EAAqC;AAC9C,IAAA,MAAM,EAAE,QAAA,EAAU,IAAA,EAAM,UAAU,OAAA,EAAS,aAAA,KAAkB,IAAA,CAAK,MAAA;AAClE,IAAA,MAAM,QAAA,GAAW,CAAA,CAAA,EAAI,QAAA,IAAY,UAAU,MAAM,IAAI,CAAA,CAAA,CAAA;AACrD,IAAA,MAAM,OAAA,GAAU,QAAQ,OAAA,IAAW,aAAA;AAEnC,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,mCAAA,EAAsC,QAAQ,CAAA,GAAA,CAAK,CAAA;AAC/D,IAAA,OAAA,CAAQ,GAAA;AAAA,MACN,CAAA,qBAAA,EAAwB,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,EAAE,CAAA,GAAI,OAAA,CAAQ,EAAA,CAAG,IAAA,CAAK,IAAI,CAAA,GAAI,OAAA,CAAQ,EAAE,CAAA;AAAA,KACxF;AACA,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,0BAAA,EAA6B,OAAA,CAAQ,OAAO,CAAA,CAAE,CAAA;AAE1D,IAAA,IAAI;AACF,MAAA,IAAI,MAAA;AACJ,MAAA,QAAQ,QAAA;AAAU,QAChB,KAAK,MAAA;AAAA,QACL,KAAK,KAAA;AACH,UAAA;AACE,YAAA,MAAM,WAAA,GAAc,MAAM,IAAA,CAAK,iBAAA,EAAkB;AACjD,YAAA,IAAI,CAAC,WAAA;AACH,cAAA,MAAM,IAAI,KAAA,CAAM,CAAA,EAAG,QAAQ,CAAA,4BAAA,CAA8B,CAAA;AAC3D,YAAA,MAAA,GAAS,MAAM,YAAY,QAAA,CAAS;AAAA,cAClC,IAAA,EAAM,QAAA;AAAA,cACN,EAAA,EAAI,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,EAAE,CAAA,GACxB,OAAA,CAAQ,EAAA,CAAG,IAAA,CAAK,IAAI,CAAA,GACpB,OAAA,CAAQ,EAAA;AAAA,cACZ,SAAS,OAAA,CAAQ,OAAA;AAAA,cACjB,MAAM,OAAA,CAAQ,IAAA;AAAA,cACd,MAAM,OAAA,CAAQ,IAAA;AAAA,cACd;AAAA,aACD,CAAA;AAAA,UACH;AACA,UAAA;AAAA,QAEF,KAAK,QAAA;AACH,UAAA,MAAA,GAAS,MAAM,IAAA,CAAK,aAAA,CAAc,QAAA,EAAU,SAAS,OAAO,CAAA;AAC5D,UAAA;AAAA,QAEF,KAAK,UAAA;AACH,UAAA,MAAA,GAAS,MAAM,IAAA,CAAK,eAAA,CAAgB,QAAA,EAAU,SAAS,OAAO,CAAA;AAC9D,UAAA;AAAA,QAEF,KAAK,SAAA;AACH,UAAA,MAAA,GAAS,MAAM,IAAA,CAAK,cAAA,CAAe,QAAA,EAAU,SAAS,OAAO,CAAA;AAC7D,UAAA;AAAA,QAEF;AACE,UAAA,MAAM,IAAI,KAAA,CAAM,CAAA,4BAAA,EAA+B,QAAQ,CAAA,CAAE,CAAA;AAAA;AAE7D,MAAA,OAAA,CAAQ,IAAI,CAAA,qDAAA,CAAuD,CAAA;AACnE,MAAA,OAAO,MAAA;AAAA,IACT,SAAS,KAAA,EAAY;AACnB,MAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,sCAAA,CAAA,EAA0C,KAAA,CAAM,OAAO,CAAA;AACrE,MAAA,IAAI,MAAM,QAAA,EAAU;AAClB,QAAA,OAAA,CAAQ,KAAA;AAAA,UACN,CAAA,uCAAA,CAAA;AAAA,UACA,IAAA,CAAK,SAAA,CAAU,KAAA,CAAM,QAAA,EAAU,MAAM,CAAC;AAAA,SACxC;AAAA,MACF;AACA,MAAA,MAAM,KAAA;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAc,aAAA,CACZ,IAAA,EACA,OAAA,EACA,OAAA,EACA;AACA,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,MAAA,CAAO,MAAA,EAAQ,MAAA;AACnC,IAAA,IAAI,CAAC,MAAA,EAAQ,MAAM,IAAI,MAAM,wBAAwB,CAAA;AAErD,IAAA,MAAM,IAAA,GAAO;AAAA,MACX,IAAA;AAAA,MACA,IAAI,OAAA,CAAQ,EAAA;AAAA,MACZ,SAAS,OAAA,CAAQ,OAAA;AAAA,MACjB,MAAM,OAAA,CAAQ,IAAA;AAAA,MACd,MAAM,OAAA,CAAQ,IAAA;AAAA,MACd,QAAA,EAAU;AAAA,KACZ;AAEA,IAAA,OAAA,CAAQ,IAAI,CAAA,sCAAA,CAAwC,CAAA;AACpD,IAAA,MAAM,IAAA,GAAO,MAAM,KAAA,CAAM,+BAAA,EAAiC;AAAA,MACxD,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,aAAA,EAAe,UAAU,MAAM,CAAA,CAAA;AAAA,QAC/B,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI;AAAA,KAC1B,CAAA;AAED,IAAA,IAAI,CAAC,KAAK,EAAA,EAAI;AACZ,MAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,IAAA,EAAK;AAC9B,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,cAAA,EAAiB,KAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAE,CAAA;AAAA,IAC1D;AACA,IAAA,OAAO,KAAK,IAAA,EAAK;AAAA,EACnB;AAAA,EAEA,MAAc,eAAA,CACZ,IAAA,EACA,OAAA,EACA,OAAA,EACA;AACA,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,MAAA,CAAO,QAAA,EAAU,MAAA;AACrC,IAAA,IAAI,CAAC,MAAA,EAAQ,MAAM,IAAI,MAAM,0BAA0B,CAAA;AAEvD,IAAA,MAAM,IAAA,GAAO;AAAA,MACX,gBAAA,EAAkB;AAAA,QAChB;AAAA,UACE,EAAA,EAAI,MAAM,OAAA,CAAQ,OAAA,CAAQ,EAAE,CAAA,GACxB,OAAA,CAAQ,GAAG,GAAA,CAAI,CAAC,WAAW,EAAE,KAAA,GAAQ,CAAA,GACrC,CAAC,EAAE,KAAA,EAAO,OAAA,CAAQ,IAAI;AAAA;AAC5B,OACF;AAAA,MACA,IAAA,EAAM;AAAA,QACJ,OAAO,IAAA,CAAK,KAAA,CAAM,QAAQ,CAAA,GAAI,CAAC,CAAA,IAAK,IAAA;AAAA,QACpC,IAAA,EAAM,IAAA,CAAK,KAAA,CAAM,QAAQ,IAAI,CAAC;AAAA,OAChC;AAAA,MACA,SAAS,OAAA,CAAQ,OAAA;AAAA,MACjB,OAAA,EAAS;AAAA,QACP,EAAE,IAAA,EAAM,YAAA,EAAc,KAAA,EAAO,OAAA,CAAQ,QAAQ,EAAA,EAAG;AAAA,QAChD,EAAE,IAAA,EAAM,WAAA,EAAa,KAAA,EAAO,QAAQ,IAAA;AAAK,OAC3C;AAAA,MACA,QAAA,EAAU,OAAA,GAAU,EAAE,KAAA,EAAO,SAAQ,GAAI;AAAA,KAC3C;AAEA,IAAA,OAAA,CAAQ,IAAI,CAAA,wCAAA,CAA0C,CAAA;AACtD,IAAA,MAAM,IAAA,GAAO,MAAM,KAAA,CAAM,uCAAA,EAAyC;AAAA,MAChE,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,aAAA,EAAe,UAAU,MAAM,CAAA,CAAA;AAAA,QAC/B,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI;AAAA,KAC1B,CAAA;AAED,IAAA,IAAI,CAAC,KAAK,EAAA,EAAI;AACZ,MAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,IAAA,EAAK;AAC9B,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,gBAAA,EAAmB,KAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAE,CAAA;AAAA,IAC5D;AACA,IAAA,OAAO,EAAE,SAAS,IAAA,EAAK;AAAA,EACzB;AAAA,EAEA,MAAc,cAAA,CACZ,IAAA,EACA,OAAA,EACA,OAAA,EACA;AACA,IAAA,MAAM,EAAE,QAAQ,MAAA,EAAQ,MAAA,KAAW,IAAA,CAAK,MAAA,CAAO,WAAW,EAAC;AAC3D,IAAA,IAAI,CAAC,MAAA,IAAU,CAAC,QAAQ,MAAM,IAAI,MAAM,wBAAwB,CAAA;AAEhE,IAAA,MAAM,IAAA,GAAO,MAAA,KAAW,IAAA,GAAO,oBAAA,GAAuB,iBAAA;AACtD,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,CAAA,IAAA,EAAO,MAAM,CAAA,CAAE,CAAA;AAEjC,IAAA,MAAM,QAAA,GAAW,IAAI,eAAA,EAAgB;AACrC,IAAA,QAAA,CAAS,MAAA,CAAO,QAAQ,IAAI,CAAA;AAC5B,IAAA,MAAM,EAAA,GAAK,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,EAAE,CAAA,GAAI,OAAA,CAAQ,EAAA,CAAG,IAAA,CAAK,IAAI,CAAA,GAAI,OAAA,CAAQ,EAAA;AACvE,IAAA,QAAA,CAAS,MAAA,CAAO,MAAM,EAAE,CAAA;AACxB,IAAA,QAAA,CAAS,MAAA,CAAO,SAAA,EAAW,OAAA,CAAQ,OAAO,CAAA;AAC1C,IAAA,QAAA,CAAS,MAAA,CAAO,MAAA,EAAQ,OAAA,CAAQ,IAAI,CAAA;AACpC,IAAA,IAAI,QAAQ,IAAA,EAAM,QAAA,CAAS,MAAA,CAAO,MAAA,EAAQ,QAAQ,IAAI,CAAA;AACtD,IAAA,IAAI,OAAA,EAAS,QAAA,CAAS,MAAA,CAAO,YAAA,EAAc,OAAO,CAAA;AAElD,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,sCAAA,EAAyC,MAAA,IAAU,IAAI,CAAA,IAAA,CAAM,CAAA;AACzE,IAAA,MAAM,OAAO,MAAM,KAAA,CAAM,WAAW,IAAI,CAAA,IAAA,EAAO,MAAM,CAAA,SAAA,CAAA,EAAa;AAAA,MAChE,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,aAAA,EAAe,SAAS,IAAI,CAAA,CAAA;AAAA,QAC5B,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAED,IAAA,IAAI,CAAC,KAAK,EAAA,EAAI;AACZ,MAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,IAAA,EAAK;AAC9B,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,eAAA,EAAkB,KAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAE,CAAA;AAAA,IAC3D;AACA,IAAA,OAAO,KAAK,IAAA,EAAK;AAAA,EACnB;AAAA,EAEA,YAAA,GAA+B;AAC7B,IAAA,OAAO,IAAA,CAAK,SAAA;AAAA,EACd;AAAA,EAEA,MAAM,gBAAA,GAAqC;AACzC,IAAA,IAAI,KAAK,MAAA,CAAO,QAAA,KAAa,UAAU,IAAA,CAAK,MAAA,CAAO,aAAa,KAAA,EAAO;AACrE,MAAA,IAAI;AACF,QAAA,MAAM,WAAA,GAAc,MAAM,IAAA,CAAK,iBAAA,EAAkB;AACjD,QAAA,IAAI,WAAA,EAAa;AACf,UAAA,MAAM,YAAY,MAAA,EAAO;AACzB,UAAA,OAAO,IAAA;AAAA,QACT;AAAA,MACF,CAAA,CAAA,MAAQ;AACN,QAAA,OAAO,KAAA;AAAA,MACT;AAAA,IACF;AACA,IAAA,OAAO,CAAC,EACN,IAAA,CAAK,MAAA,CAAO,MAAA,EAAQ,MAAA,IACpB,IAAA,CAAK,MAAA,CAAO,QAAA,EAAU,MAAA,IACtB,IAAA,CAAK,MAAA,CAAO,OAAA,EAAS,MAAA,CAAA;AAAA,EAEzB;AAAA,EAEA,aAAa,WAAW,EAAA,EAAyC;AAC/D,IAAA,MAAM,aAAA,GAAgB,IAAI,aAAA,CAAc,EAAE,CAAA;AAC1C,IAAA,MAAM,cAAc,IAAA,EAAK;AACzB,IAAA,MAAM,MAAA,GAAS,cAAc,cAAA,EAAe;AAE5C,IAAA,IAAI,CAAC,OAAO,QAAA,EAAU;AACpB,MAAA,OAAO,KAAK,OAAA,EAAQ;AAAA,IACtB;AAEA,IAAA,MAAM,WAAA,GAA2B;AAAA,MAC/B,QAAA,EAAW,OAAO,QAAA,IAAoB,MAAA;AAAA,MACtC,IAAA,EAAM,OAAO,IAAA,IAAQ,qBAAA;AAAA,MACrB,UAAU,MAAA,CAAO,QAAA;AAAA,MACjB,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,IAAA,EACE,MAAA,CAAO,QAAA,KAAa,MAAA,GAChB;AAAA,QACE,IAAA,EAAM,OAAO,IAAA,IAAQ,EAAA;AAAA,QACrB,IAAA,EAAM,OAAO,IAAA,IAAQ,GAAA;AAAA,QACrB,MAAA,EAAQ,OAAO,MAAA,IAAU,KAAA;AAAA,QACzB,IAAA,EAAM,EAAE,IAAA,EAAM,MAAA,CAAO,QAAQ,EAAA,EAAI,IAAA,EAAM,MAAA,CAAO,IAAA,IAAQ,EAAA;AAAG,OAC3D,GACA,MAAA;AAAA,MACN,MAAA,EACE,OAAO,QAAA,KAAa,QAAA,GAChB,EAAE,MAAA,EAAQ,MAAA,CAAO,IAAA,IAAQ,EAAA,EAAG,GAC5B,MAAA;AAAA,MACN,QAAA,EACE,OAAO,QAAA,KAAa,UAAA,GAChB,EAAE,MAAA,EAAQ,MAAA,CAAO,IAAA,IAAQ,EAAA,EAAG,GAC5B,MAAA;AAAA,MACN,OAAA,EACE,MAAA,CAAO,QAAA,KAAa,SAAA,GAChB;AAAA,QACE,MAAA,EAAQ,OAAO,IAAA,IAAQ,EAAA;AAAA,QACvB,MAAA,EAAQ,OAAO,IAAA,IAAQ,EAAA;AAAA,QACvB,MAAA,EAAS,MAAA,CAAO,MAAA,GAAS,IAAA,GAAO;AAAA,OAClC,GACA,MAAA;AAAA,MACN,GAAA,EACE,MAAA,CAAO,QAAA,KAAa,KAAA,GAChB;AAAA,QACE,WAAA,EAAa,OAAO,IAAA,IAAQ,EAAA;AAAA,QAC5B,eAAA,EAAiB,OAAO,IAAA,IAAQ,EAAA;AAAA,QAChC,MAAA,EAAQ,OAAO,IAAA,IAAQ;AAAA,OACzB,GACA;AAAA,KACR;AAEA,IAAA,OAAO,IAAI,gBAAe,WAAW,CAAA;AAAA,EACvC;AAAA,EAEA,OAAO,OAAA,GAAiC;AACtC,IAAA,MAAM,QAAA,GAAY,OAAA,CAAQ,GAAA,CAAI,cAAA,IAA0B,MAAA;AACxD,IAAA,MAAM,OACJ,OAAA,CAAQ,GAAA,CAAI,SAAA,IACZ,OAAA,CAAQ,IAAI,YAAA,IACZ,qBAAA;AACF,IAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,GAAA,CAAI,cAAA,IAAkB,UAAA;AAC/C,IAAA,MAAM,OAAA,GAAU,QAAQ,GAAA,CAAI,aAAA;AAE5B,IAAA,IAAI,aAAa,MAAA,EAAQ;AACvB,MAAA,MAAM,IAAA,GAAO,QAAQ,GAAA,CAAI,SAAA;AACzB,MAAA,MAAM,IAAA,GAAO,QAAQ,GAAA,CAAI,SAAA;AACzB,MAAA,MAAM,IAAA,GAAO,QAAQ,GAAA,CAAI,SAAA;AACzB,MAAA,IAAI,CAAC,IAAA,IAAQ,CAAC,IAAA,IAAQ,CAAC,MAAM,OAAO,IAAA;AAEpC,MAAA,OAAO,IAAI,eAAA,CAAe;AAAA,QACxB,QAAA,EAAU,MAAA;AAAA,QACV,IAAA;AAAA,QACA,QAAA;AAAA,QACA,OAAA;AAAA,QACA,IAAA,EAAM;AAAA,UACJ,IAAA;AAAA,UACA,MAAM,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,SAAA,IAAa,OAAO,EAAE,CAAA;AAAA,UACjD,MAAA,EAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,KAAgB,MAAA;AAAA,UACpC,IAAA,EAAM,EAAE,IAAA,EAAM,IAAA;AAAK;AACrB,OACD,CAAA;AAAA,IACH;AAEA,IAAA,IAAI,aAAa,QAAA,EAAU;AACzB,MAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,GAAA,CAAI,cAAA,IAAkB,QAAQ,GAAA,CAAI,SAAA;AACzD,MAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,MAAA,OAAO,IAAI,eAAA,CAAe;AAAA,QACxB,QAAA,EAAU,QAAA;AAAA,QACV,IAAA;AAAA,QACA,QAAA;AAAA,QACA,OAAA;AAAA,QACA,MAAA,EAAQ,EAAE,MAAA;AAAO,OAClB,CAAA;AAAA,IACH;AAEA,IAAA,IAAI,aAAa,UAAA,EAAY;AAC3B,MAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,GAAA,CAAI,gBAAA,IAAoB,QAAQ,GAAA,CAAI,SAAA;AAC3D,MAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,MAAA,OAAO,IAAI,eAAA,CAAe;AAAA,QACxB,QAAA,EAAU,UAAA;AAAA,QACV,IAAA;AAAA,QACA,QAAA;AAAA,QACA,OAAA;AAAA,QACA,QAAA,EAAU,EAAE,MAAA;AAAO,OACpB,CAAA;AAAA,IACH;AAEA,IAAA,IAAI,aAAa,SAAA,EAAW;AAC1B,MAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,GAAA,CAAI,eAAA,IAAmB,QAAQ,GAAA,CAAI,SAAA;AAC1D,MAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,GAAA,CAAI,cAAA,IAAkB,QAAQ,GAAA,CAAI,SAAA;AACzD,MAAA,IAAI,CAAC,MAAA,IAAU,CAAC,MAAA,EAAQ,OAAO,IAAA;AAC/B,MAAA,OAAO,IAAI,eAAA,CAAe;AAAA,QACxB,QAAA,EAAU,SAAA;AAAA,QACV,IAAA;AAAA,QACA,QAAA;AAAA,QACA,OAAA;AAAA,QACA,OAAA,EAAS;AAAA,UACP,MAAA;AAAA,UACA,MAAA;AAAA,UACA,MAAA,EAAS,QAAQ,GAAA,CAAI,cAAA,KAClB,QAAQ,GAAA,CAAI,WAAA,KAAgB,SAAS,IAAA,GAAO,IAAA;AAAA;AACjD,OACD,CAAA;AAAA,IACH;AAEA,IAAA,IAAI,aAAa,KAAA,EAAO;AACtB,MAAA,MAAM,WAAA,GACJ,OAAA,CAAQ,GAAA,CAAI,iBAAA,IAAqB,QAAQ,GAAA,CAAI,SAAA;AAC/C,MAAA,MAAM,eAAA,GACJ,OAAA,CAAQ,GAAA,CAAI,qBAAA,IAAyB,QAAQ,GAAA,CAAI,SAAA;AACnD,MAAA,MAAM,SACJ,OAAA,CAAQ,GAAA,CAAI,UAAA,IAAc,OAAA,CAAQ,IAAI,SAAA,IAAa,WAAA;AACrD,MAAA,IAAI,CAAC,WAAA,IAAe,CAAC,eAAA,EAAiB,OAAO,IAAA;AAC7C,MAAA,OAAO,IAAI,eAAA,CAAe;AAAA,QACxB,QAAA,EAAU,KAAA;AAAA,QACV,IAAA;AAAA,QACA,QAAA;AAAA,QACA,OAAA;AAAA,QACA,GAAA,EAAK,EAAE,WAAA,EAAa,eAAA,EAAiB,MAAA;AAAO,OAC7C,CAAA;AAAA,IACH;AAEA,IAAA,OAAO,IAAA;AAAA,EACT;AACF;;;AClqBO,IAAM,uBAAA,GAAgD;AAAA,EAC3D,SAAA,EAAW,EAAA;AAAA,EACX,gBAAA,EAAkB,IAAA;AAAA,EAClB,gBAAA,EAAkB,IAAA;AAAA,EAClB,cAAA,EAAgB,IAAA;AAAA,EAChB,mBAAA,EAAqB,IAAA;AAAA,EACrB,YAAA,EAAc,CAAA;AAAA,EACd,SAAA,EAAW;AACb,CAAA;AAEO,IAAM,iBAAN,MAAqB;AAAA,EAClB,MAAA;AAAA,EAER,WAAA,CAAY,MAAA,GAAwC,EAAC,EAAG;AACtD,IAAA,IAAA,CAAK,MAAA,GAAS,EAAE,GAAG,uBAAA,EAAyB,GAAG,MAAA,EAAO;AAAA,EACxD;AAAA,EAEA,SAAS,QAAA,EAAoC;AAC3C,IAAA,MAAM,SAAmB,EAAC;AAE1B,IAAA,IAAI,KAAK,MAAA,CAAO,SAAA,IAAa,SAAS,MAAA,GAAS,IAAA,CAAK,OAAO,SAAA,EAAW;AACpE,MAAA,MAAA,CAAO,IAAA;AAAA,QACL,CAAA,yBAAA,EAA4B,IAAA,CAAK,MAAA,CAAO,SAAS,CAAA,WAAA;AAAA,OACnD;AAAA,IACF;AAEA,IAAA,IAAI,QAAA,CAAS,MAAA,GAAS,IAAA,CAAK,MAAA,CAAO,SAAA,EAAW;AAC3C,MAAA,MAAA,CAAO,IAAA;AAAA,QACL,CAAA,0BAAA,EAA6B,IAAA,CAAK,MAAA,CAAO,SAAS,CAAA,WAAA;AAAA,OACpD;AAAA,IACF;AAEA,IAAA,IAAI,KAAK,MAAA,CAAO,gBAAA,IAAoB,CAAC,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA,EAAG;AAC3D,MAAA,MAAA,CAAO,KAAK,qDAAqD,CAAA;AAAA,IACnE;AAEA,IAAA,IAAI,KAAK,MAAA,CAAO,gBAAA,IAAoB,CAAC,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA,EAAG;AAC3D,MAAA,MAAA,CAAO,KAAK,qDAAqD,CAAA;AAAA,IACnE;AAEA,IAAA,IAAI,KAAK,MAAA,CAAO,cAAA,IAAkB,CAAC,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA,EAAG;AACzD,MAAA,MAAA,CAAO,KAAK,2CAA2C,CAAA;AAAA,IACzD;AAEA,IAAA,IACE,KAAK,MAAA,CAAO,mBAAA,IACZ,CAAC,uCAAA,CAAwC,IAAA,CAAK,QAAQ,CAAA,EACtD;AACA,MAAA,MAAA,CAAO,KAAK,sDAAsD,CAAA;AAAA,IACpE;AAEA,IAAA,MAAM,eAAA,GAAkB;AAAA,MACtB,UAAA;AAAA,MACA,QAAA;AAAA,MACA,UAAA;AAAA,MACA,QAAA;AAAA,MACA,QAAA;AAAA,MACA,QAAA;AAAA,MACA,SAAA;AAAA,MACA,SAAA;AAAA,MACA,UAAA;AAAA,MACA,QAAA;AAAA,MACA,UAAA;AAAA,MACA,UAAA;AAAA,MACA,QAAA;AAAA,MACA,UAAA;AAAA,MACA,QAAA;AAAA,MACA,UAAA;AAAA,MACA,WAAA;AAAA,MACA,QAAA;AAAA,MACA,QAAA;AAAA,MACA;AAAA,KACF;AAEA,IAAA,IAAI,eAAA,CAAgB,QAAA,CAAS,QAAA,CAAS,WAAA,EAAa,CAAA,EAAG;AACpD,MAAA,MAAA,CAAO,IAAA;AAAA,QACL;AAAA,OACF;AAAA,IACF;AAEA,IAAA,IAAI,cAAc,IAAA,CAAK,QAAQ,KAAK,UAAA,CAAW,IAAA,CAAK,QAAQ,CAAA,EAAG;AAC7D,MAAA,MAAA,CAAO,IAAA;AAAA,QACL;AAAA,OACF;AAAA,IACF;AAEA,IAAA,IAAI,WAAA,CAAY,IAAA,CAAK,QAAQ,CAAA,EAAG;AAC9B,MAAA,MAAA,CAAO,IAAA;AAAA,QACL;AAAA,OACF;AAAA,IACF;AAEA,IAAA,IACE,+EAAA,CAAgF,IAAA;AAAA,MAC9E;AAAA,KACF,EACA;AACA,MAAA,MAAA,CAAO,KAAK,yDAAyD,CAAA;AAAA,IACvE;AAEA,IAAA,OAAO;AAAA,MACL,KAAA,EAAO,OAAO,MAAA,KAAW,CAAA;AAAA,MACzB;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,UAAA,CACJ,YAAA,EACA,OAAA,EACA,QAAA,EAC2B;AAC3B,IAAA,OAAO;AAAA,MACL,KAAA,EAAO,IAAA;AAAA,MACP,QAAQ;AAAC,KACX;AAAA,EACF;AAAA,EAEA,MAAM,WAAA,CACJ,QAAA,EACA,OAAA,EACA,QAAA,EACkB;AAClB,IAAA,KAAA,MAAW,QAAQ,OAAA,EAAS;AAC1B,MAAA,IAAI,MAAM,QAAA,CAAS,QAAA,EAAU,IAAI,CAAA,EAAG;AAClC,QAAA,OAAO,IAAA;AAAA,MACT;AAAA,IACF;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAAA,EAEA,gBAAA,CAAiB,SAAiB,EAAA,EAAY;AAC5C,IAAA,MAAM,SAAA,GAAY,4BAAA;AAClB,IAAA,MAAM,SAAA,GAAY,4BAAA;AAClB,IAAA,MAAM,OAAA,GAAU,YAAA;AAChB,IAAA,MAAM,OAAA,GAAU,4BAAA;AAEhB,IAAA,IAAI,QAAA,GAAW,EAAA;AAEf,IAAA,QAAA,IAAY,SAAA,CAAU,KAAK,KAAA,CAAM,IAAA,CAAK,QAAO,GAAI,SAAA,CAAU,MAAM,CAAC,CAAA;AAClE,IAAA,QAAA,IAAY,SAAA,CAAU,KAAK,KAAA,CAAM,IAAA,CAAK,QAAO,GAAI,SAAA,CAAU,MAAM,CAAC,CAAA;AAClE,IAAA,QAAA,IAAY,OAAA,CAAQ,KAAK,KAAA,CAAM,IAAA,CAAK,QAAO,GAAI,OAAA,CAAQ,MAAM,CAAC,CAAA;AAC9D,IAAA,QAAA,IAAY,OAAA,CAAQ,KAAK,KAAA,CAAM,IAAA,CAAK,QAAO,GAAI,OAAA,CAAQ,MAAM,CAAC,CAAA;AAE9D,IAAA,MAAM,QAAA,GAAW,SAAA,GAAY,SAAA,GAAY,OAAA,GAAU,OAAA;AACnD,IAAA,KAAA,IAAS,CAAA,GAAI,QAAA,CAAS,MAAA,EAAQ,CAAA,GAAI,QAAQ,CAAA,EAAA,EAAK;AAC7C,MAAA,QAAA,IAAY,QAAA,CAAS,KAAK,KAAA,CAAM,IAAA,CAAK,QAAO,GAAI,QAAA,CAAS,MAAM,CAAC,CAAA;AAAA,IAClE;AAEA,IAAA,OAAO,QAAA,CACJ,KAAA,CAAM,EAAE,CAAA,CACR,IAAA,CAAK,MAAM,IAAA,CAAK,MAAA,EAAO,GAAI,GAAG,CAAA,CAC9B,IAAA,CAAK,EAAE,CAAA;AAAA,EACZ;AAAA,EAEA,YAAY,QAAA,EAIV;AACA,IAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,IAAA,MAAM,WAAqB,EAAC;AAE5B,IAAA,IAAI,QAAA,CAAS,MAAA,IAAU,CAAA,EAAG,KAAA,IAAS,CAAA;AACnC,IAAA,IAAI,QAAA,CAAS,MAAA,IAAU,EAAA,EAAI,KAAA,IAAS,CAAA;AACpC,IAAA,IAAI,QAAA,CAAS,MAAA,IAAU,EAAA,EAAI,KAAA,IAAS,CAAA;AAEpC,IAAA,IAAI,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA,EAAG,KAAA,IAAS,CAAA;AACrC,IAAA,IAAI,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA,EAAG,KAAA,IAAS,CAAA;AACrC,IAAA,IAAI,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA,EAAG,KAAA,IAAS,CAAA;AACrC,IAAA,IAAI,iCAAA,CAAkC,IAAA,CAAK,QAAQ,CAAA,EAAG,KAAA,IAAS,CAAA;AAE/D,IAAA,IAAI,QAAA,CAAS,MAAA,GAAS,CAAA,EAAG,KAAA,IAAS,CAAA;AAClC,IAAA,IAAI,QAAA,CAAS,MAAA,GAAS,EAAA,EAAI,KAAA,IAAS,CAAA;AAEnC,IAAA,MAAM,WAAA,GAAc,IAAI,GAAA,CAAI,QAAQ,CAAA,CAAE,IAAA;AACtC,IAAA,IAAI,WAAA,GAAc,GAAG,KAAA,IAAS,CAAA;AAC9B,IAAA,IAAI,WAAA,GAAc,IAAI,KAAA,IAAS,CAAA;AAE/B,IAAA,IAAI,KAAA;AACJ,IAAA,IAAI,SAAS,CAAA,EAAG;AACd,MAAA,KAAA,GAAQ,MAAA;AACR,MAAA,QAAA,CAAS,KAAK,qBAAqB,CAAA;AACnC,MAAA,QAAA,CAAS,KAAK,yCAAyC,CAAA;AAAA,IACzD,CAAA,MAAA,IAAW,SAAS,CAAA,EAAG;AACrB,MAAA,KAAA,GAAQ,MAAA;AACR,MAAA,QAAA,CAAS,KAAK,wBAAwB,CAAA;AACtC,MAAA,QAAA,CAAS,KAAK,2BAA2B,CAAA;AAAA,IAC3C,CAAA,MAAA,IAAW,SAAS,CAAA,EAAG;AACrB,MAAA,KAAA,GAAQ,MAAA;AACR,MAAA,QAAA,CAAS,KAAK,8CAA8C,CAAA;AAAA,IAC9D,CAAA,MAAO;AACL,MAAA,KAAA,GAAQ,QAAA;AAAA,IACV;AAEA,IAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,QAAA,EAAS;AAAA,EAClC;AAAA,EAEA,UAAU,MAAA,EAA6C;AACrD,IAAA,IAAA,CAAK,SAAS,EAAE,GAAG,IAAA,CAAK,MAAA,EAAQ,GAAG,MAAA,EAAO;AAAA,EAC5C;AAAA,EAEA,SAAA,GAAkC;AAChC,IAAA,OAAO,EAAE,GAAG,IAAA,CAAK,MAAA,EAAO;AAAA,EAC1B;AACF","file":"chunk-57P6MJKC.js","sourcesContent":["import { eq } from \"drizzle-orm\";\nimport { settings as settingsSchema } from \"../database/drizzle/schema/settings.js\";\n\nlet _settingsTableEnsured = false;\nlet _loaded = false;\n\nexport interface S3CompatibleConfig {\n  bucket?: string;\n  region?: string;\n  accessKeyId?: string;\n  secretAccessKey?: string;\n  endpoint?: string;\n  cdnUrl?: string;\n  prefix?: string;\n}\n\nexport interface R2Config {\n  accountId?: string;\n  accessKeyId?: string;\n  secretAccessKey?: string;\n  bucket?: string;\n  cdnUrl?: string;\n  prefix?: string;\n  publicDevUrl?: string;\n}\n\nexport interface GCSConfig {\n  bucket?: string;\n  projectId?: string;\n  clientEmail?: string;\n  privateKey?: string;\n  cdnUrl?: string;\n  prefix?: string;\n}\n\nexport interface BackblazeConfig {\n  bucket?: string;\n  accountId?: string;\n  applicationKeyId?: string;\n  applicationKey?: string;\n  cdnUrl?: string;\n  prefix?: string;\n}\n\nexport interface BunnyConfig {\n  storageZone?: string;\n  apiKey?: string;\n  cdnUrl?: string;\n  prefix?: string;\n}\n\nexport interface FTPConfig {\n  host?: string;\n  port?: number;\n  user?: string;\n  password?: string;\n  secure?: boolean;\n  baseUrl?: string;\n  prefix?: string;\n}\n\nexport interface StorageConfig {\n  type: string;\n  s3: S3CompatibleConfig;\n  r2: R2Config;\n  gcs: GCSConfig;\n  digitalocean: S3CompatibleConfig;\n  backblaze: BackblazeConfig;\n  wasabi: S3CompatibleConfig;\n  bunny: BunnyConfig;\n  ftp: FTPConfig;\n  cloudinary: {\n    cloudName?: string;\n    apiKey?: string;\n    apiSecret?: string;\n    folder?: string;\n  };\n  imgix: {\n    domain?: string;\n    signKey?: string;\n  };\n  local: {\n    uploadDir?: string;\n    baseUrl?: string;\n  };\n}\n\nexport interface EmailConfig {\n  provider?: string;\n  host?: string;\n  port?: number;\n  secure?: boolean;\n  user?: string;\n  pass?: string;\n  from?: string;\n  fromName?: string;\n  replyTo?: string;\n}\n\nexport class ConfigService {\n  private db: any;\n  private cache: Record<string, string> = {};\n  private static readonly SENSITIVE_KEYS = [\n    \"storage.s3.secret_access_key\",\n    \"storage.r2.secret_access_key\",\n    \"storage.gcs.private_key\",\n    \"storage.backblaze.application_key\",\n    \"storage.wasabi.secret_access_key\",\n    \"storage.ftp.password\",\n    \"storage.bunny.api_key\",\n    \"storage.cloudinary.api_secret\",\n    \"storage.imgix.sign_key\",\n    \"email.smtp.pass\",\n    \"auth.jwt_secret\",\n    \"auth.github_secret\",\n    \"auth.google_secret\",\n    \"auth.app_secret\",\n    \"database.url\",\n    \"redis.url\",\n    \"auth.admin_password\",\n  ];\n\n  constructor(db: any) {\n    this.db = db;\n  }\n\n  /**\n   * Initialize the service by loading all settings from the database\n   */\n  async load(): Promise<void> {\n    if (_loaded) return;\n\n    await this.ensureSettingsTable();\n\n    try {\n      if (typeof this.db?.select === \"function\") {\n        const allSettings = await this.db.select().from(settingsSchema);\n        this.cache = allSettings.reduce((acc: any, row: any) => {\n          acc[row.key] = row.value;\n          return acc;\n        }, {});\n      } else {\n        await this.loadFromGlobals();\n      }\n    } catch (error) {\n      console.warn(\n        \"ConfigService: Could not load settings from database, using environment fallbacks.\",\n      );\n    }\n\n    _loaded = true;\n  }\n\n  private async ensureSettingsTable(): Promise<void> {\n    if (_settingsTableEnsured) return;\n\n    try {\n      if (typeof this.db?.execute === \"function\") {\n        const { sql } = await import(\"drizzle-orm\");\n        await this.db.execute(sql`\n          CREATE TABLE IF NOT EXISTS \"settings\" (\n            \"key\" VARCHAR(255) PRIMARY KEY,\n            \"value\" TEXT NOT NULL,\n            \"description\" TEXT,\n            \"updated_at\" TIMESTAMP DEFAULT NOW()\n          )\n        `);\n        _settingsTableEnsured = true;\n      } else if (typeof this.db?.exec === \"function\") {\n        this.db.exec(`\n          CREATE TABLE IF NOT EXISTS settings (\n            key TEXT PRIMARY KEY,\n            value TEXT NOT NULL,\n            description TEXT,\n            updated_at TEXT\n          )\n        `);\n        _settingsTableEnsured = true;\n      }\n    } catch {\n      // Table creation failed — will fall back to env vars\n    }\n  }\n\n  /**\n   * Load settings from the _globals_storage-settings table (SQLite fallback)\n   * Maps nested global structure to flat key-value cache\n   */\n  private async loadFromGlobals(): Promise<void> {\n    try {\n      const row = this.db\n        .prepare(`SELECT * FROM \"_globals_storage-settings\" LIMIT 1`)\n        .get() as any;\n\n      if (!row) return;\n\n      const parseJSON = (val: any) => {\n        if (!val) return null;\n        if (typeof val === \"string\") {\n          try {\n            return JSON.parse(val);\n          } catch {\n            return null;\n          }\n        }\n        return val;\n      };\n\n      const provider = row.provider || \"local\";\n      this.cache[\"storage.type\"] = provider === \"aws\" ? \"s3\" : provider;\n\n      if (provider === \"local\") {\n        const local = parseJSON(row.local);\n        this.cache[\"storage.local.dir\"] =\n          local?.uploadDir || \"./public/uploads\";\n        this.cache[\"storage.local.url\"] = local?.baseUrl || \"/uploads\";\n      }\n\n      if (provider === \"aws\") {\n        const aws = parseJSON(row.aws);\n        this.cache[\"storage.s3.bucket\"] = aws?.bucket || \"\";\n        this.cache[\"storage.s3.region\"] = aws?.region || \"us-east-1\";\n        this.cache[\"storage.s3.access_key_id\"] = aws?.accessKeyId || \"\";\n        this.cache[\"storage.s3.secret_access_key\"] = aws?.secretAccessKey || \"\";\n        this.cache[\"storage.s3.endpoint\"] = aws?.endpoint || \"\";\n        this.cache[\"storage.s3.cdn_url\"] = aws?.cdnUrl || \"\";\n        this.cache[\"storage.s3.prefix\"] = aws?.prefix || \"\";\n      }\n\n      if (provider === \"r2\") {\n        const r2 = parseJSON(row.r2);\n        this.cache[\"storage.r2.account_id\"] = r2?.accountId || \"\";\n        this.cache[\"storage.r2.access_key_id\"] = r2?.accessKeyId || \"\";\n        this.cache[\"storage.r2.secret_access_key\"] = r2?.secretAccessKey || \"\";\n        this.cache[\"storage.r2.bucket\"] = r2?.bucket || \"\";\n        this.cache[\"storage.r2.cdn_url\"] = r2?.cdnUrl || \"\";\n        this.cache[\"storage.r2.prefix\"] = r2?.prefix || \"\";\n      }\n\n      if (provider === \"cloudinary\") {\n        const cloudinary = parseJSON(row.cloudinary);\n        this.cache[\"storage.cloudinary.cloud_name\"] =\n          cloudinary?.cloudName || \"\";\n        this.cache[\"storage.cloudinary.api_key\"] = cloudinary?.apiKey || \"\";\n        this.cache[\"storage.cloudinary.api_secret\"] =\n          cloudinary?.apiSecret || \"\";\n        this.cache[\"storage.cloudinary.folder\"] = cloudinary?.folder || \"\";\n      }\n\n      if (provider === \"ftp\") {\n        const ftp = parseJSON(row.ftp);\n        this.cache[\"storage.ftp.host\"] = ftp?.host || \"\";\n        this.cache[\"storage.ftp.port\"] = String(ftp?.port || \"21\");\n        this.cache[\"storage.ftp.user\"] = ftp?.user || \"\";\n        this.cache[\"storage.ftp.password\"] = ftp?.password || \"\";\n        this.cache[\"storage.ftp.secure\"] = ftp?.secure ? \"true\" : \"false\";\n        this.cache[\"storage.ftp.base_url\"] = ftp?.baseUrl || \"\";\n        this.cache[\"storage.ftp.prefix\"] = ftp?.prefix || \"\";\n      }\n    } catch (error) {\n      console.warn(\"ConfigService: Could not load from globals table:\", error);\n    }\n  }\n\n  /**\n   * Get a settings value with environment fallback\n   */\n  get(key: string, envKey?: string, defaultValue?: string): string | undefined {\n    // 1. Check database cache\n    if (this.cache[key]) return this.cache[key];\n\n    // 2. Check environment variable\n    if (envKey && process.env[envKey]) return process.env[envKey];\n\n    // 3. Return default\n    return defaultValue;\n  }\n\n  /**\n   * Get storage configuration\n   */\n  getStorageConfig(): StorageConfig {\n    return {\n      type: this.get(\"storage.type\", \"STORAGE_TYPE\", \"local\")!,\n      s3: {\n        bucket: this.get(\"storage.s3.bucket\", \"STORAGE_BUCKET\"),\n        region: this.get(\"storage.s3.region\", \"STORAGE_REGION\", \"us-east-1\"),\n        accessKeyId: this.get(\n          \"storage.s3.access_key_id\",\n          \"STORAGE_ACCESS_KEY_ID\",\n        ),\n        secretAccessKey: this.get(\n          \"storage.s3.secret_access_key\",\n          \"STORAGE_SECRET_ACCESS_KEY\",\n        ),\n        endpoint: this.get(\"storage.s3.endpoint\", \"STORAGE_ENDPOINT\"),\n        cdnUrl: this.get(\"storage.s3.cdn_url\", \"STORAGE_CDN_URL\"),\n        prefix: this.get(\"storage.s3.prefix\", \"STORAGE_PREFIX\"),\n      },\n      r2: {\n        accountId: this.get(\"storage.r2.account_id\", \"R2_ACCOUNT_ID\"),\n        accessKeyId: this.get(\"storage.r2.access_key_id\", \"R2_ACCESS_KEY_ID\"),\n        secretAccessKey: this.get(\n          \"storage.r2.secret_access_key\",\n          \"R2_SECRET_ACCESS_KEY\",\n        ),\n        bucket: this.get(\"storage.r2.bucket\", \"R2_BUCKET\"),\n        cdnUrl: this.get(\"storage.r2.cdn_url\", \"R2_CDN_URL\"),\n        prefix: this.get(\"storage.r2.prefix\", \"R2_PREFIX\"),\n      },\n      gcs: {\n        bucket: this.get(\"storage.gcs.bucket\", \"GCS_BUCKET\"),\n        projectId: this.get(\"storage.gcs.project_id\", \"GCS_PROJECT_ID\"),\n        clientEmail: this.get(\"storage.gcs.client_email\", \"GCS_CLIENT_EMAIL\"),\n        privateKey: this.get(\"storage.gcs.private_key\", \"GCS_PRIVATE_KEY\"),\n        cdnUrl: this.get(\"storage.gcs.cdn_url\", \"GCS_CDN_URL\"),\n        prefix: this.get(\"storage.gcs.prefix\", \"GCS_PREFIX\"),\n      },\n      digitalocean: {\n        bucket: this.get(\"storage.digitalocean.bucket\", \"DO_BUCKET\"),\n        region: this.get(\"storage.digitalocean.region\", \"DO_REGION\", \"nyc3\"),\n        accessKeyId: this.get(\n          \"storage.digitalocean.access_key_id\",\n          \"DO_ACCESS_KEY_ID\",\n        ),\n        secretAccessKey: this.get(\n          \"storage.digitalocean.secret_access_key\",\n          \"DO_SECRET_ACCESS_KEY\",\n        ),\n        cdnUrl: this.get(\"storage.digitalocean.cdn_url\", \"DO_CDN_URL\"),\n        prefix: this.get(\"storage.digitalocean.prefix\", \"DO_PREFIX\"),\n      },\n      backblaze: {\n        bucket: this.get(\"storage.backblaze.bucket\", \"BB_BUCKET\"),\n        accountId: this.get(\"storage.backblaze.account_id\", \"BB_ACCOUNT_ID\"),\n        applicationKeyId: this.get(\n          \"storage.backblaze.application_key_id\",\n          \"BB_APPLICATION_KEY_ID\",\n        ),\n        applicationKey: this.get(\n          \"storage.backblaze.application_key\",\n          \"BB_APPLICATION_KEY\",\n        ),\n        cdnUrl: this.get(\"storage.backblaze.cdn_url\", \"BB_CDN_URL\"),\n        prefix: this.get(\"storage.backblaze.prefix\", \"BB_PREFIX\"),\n      },\n      wasabi: {\n        bucket: this.get(\"storage.wasabi.bucket\", \"WASABI_BUCKET\"),\n        region: this.get(\"storage.wasabi.region\", \"WASABI_REGION\", \"us-east-1\"),\n        accessKeyId: this.get(\n          \"storage.wasabi.access_key_id\",\n          \"WASABI_ACCESS_KEY_ID\",\n        ),\n        secretAccessKey: this.get(\n          \"storage.wasabi.secret_access_key\",\n          \"WASABI_SECRET_ACCESS_KEY\",\n        ),\n        cdnUrl: this.get(\"storage.wasabi.cdn_url\", \"WASABI_CDN_URL\"),\n        prefix: this.get(\"storage.wasabi.prefix\", \"WASABI_PREFIX\"),\n      },\n      bunny: {\n        storageZone: this.get(\n          \"storage.bunny.storage_zone\",\n          \"BUNNY_STORAGE_ZONE\",\n        ),\n        apiKey: this.get(\"storage.bunny.api_key\", \"BUNNY_API_KEY\"),\n        cdnUrl: this.get(\"storage.bunny.cdn_url\", \"BUNNY_CDN_URL\"),\n        prefix: this.get(\"storage.bunny.prefix\", \"BUNNY_PREFIX\"),\n      },\n      ftp: {\n        host: this.get(\"storage.ftp.host\", \"FTP_HOST\"),\n        port: parseInt(this.get(\"storage.ftp.port\", \"FTP_PORT\", \"21\")!, 10),\n        user: this.get(\"storage.ftp.user\", \"FTP_USER\"),\n        password: this.get(\"storage.ftp.password\", \"FTP_PASSWORD\"),\n        secure: this.get(\"storage.ftp.secure\", \"FTP_SECURE\") === \"true\",\n        baseUrl: this.get(\"storage.ftp.base_url\", \"FTP_BASE_URL\"),\n        prefix: this.get(\"storage.ftp.prefix\", \"FTP_PREFIX\"),\n      },\n      cloudinary: {\n        cloudName: this.get(\n          \"storage.cloudinary.cloud_name\",\n          \"CLOUDINARY_CLOUD_NAME\",\n        ),\n        apiKey: this.get(\"storage.cloudinary.api_key\", \"CLOUDINARY_API_KEY\"),\n        apiSecret: this.get(\n          \"storage.cloudinary.api_secret\",\n          \"CLOUDINARY_API_SECRET\",\n        ),\n        folder: this.get(\"storage.cloudinary.folder\", \"CLOUDINARY_FOLDER\"),\n      },\n      imgix: {\n        domain: this.get(\"storage.imgix.domain\", \"IMGIX_DOMAIN\"),\n        signKey: this.get(\"storage.imgix.sign_key\", \"IMGIX_SIGN_KEY\"),\n      },\n      local: {\n        uploadDir: this.get(\"storage.local.dir\", \"STORAGE_LOCAL_DIR\"),\n        baseUrl: this.get(\"storage.local.url\", \"STORAGE_LOCAL_URL\", \"/uploads\"),\n      },\n    };\n  }\n\n  /**\n   * Get email configuration\n   */\n  getEmailConfig(): EmailConfig {\n    return {\n      provider: this.get(\"email.provider\", \"EMAIL_PROVIDER\", \"smtp\"),\n      host: this.get(\"email.smtp.host\", \"SMTP_HOST\"),\n      port: parseInt(this.get(\"email.smtp.port\", \"SMTP_PORT\", \"587\")!, 10),\n      secure: this.get(\"email.smtp.secure\", \"SMTP_SECURE\") === \"true\",\n      user: this.get(\"email.smtp.user\", \"SMTP_USER\"),\n      pass: this.get(\"email.smtp.pass\", \"SMTP_PASS\"),\n      from: this.get(\"email.smtp.from\", \"SMTP_FROM\", \"noreply@example.com\"),\n      fromName: this.get(\"email.smtp.from_name\", \"SMTP_FROM_NAME\", \"Kyro CMS\"),\n      replyTo: this.get(\"email.smtp.reply_to\", \"SMTP_REPLY_TO\"),\n    };\n  }\n\n  /**\n   * Mask sensitive values for display\n   */\n  maskSensitive(key: string, value: string | undefined): string | undefined {\n    if (!value) return value;\n    if (ConfigService.SENSITIVE_KEYS.includes(key)) {\n      return \"********\";\n    }\n    return value;\n  }\n\n  /**\n   * Update a setting in the database\n   */\n  async set(key: string, value: string, description?: string): Promise<void> {\n    await this.db\n      .insert(settingsSchema)\n      .values({\n        key,\n        value,\n        description,\n        updatedAt: new Date(),\n      })\n      .onConflictDoUpdate({\n        target: [settingsSchema.key],\n        set: { value, description, updatedAt: new Date() },\n      });\n    this.cache[key] = value;\n  }\n}\n","import type { Transporter, SentMessageInfo } from \"nodemailer\";\n\nexport interface EmailConfig {\n  provider: \"smtp\" | \"resend\" | \"sendgrid\" | \"mailgun\" | \"ses\";\n  from: string;\n  fromName?: string;\n  replyTo?: string;\n  smtp?: {\n    host: string;\n    port: number;\n    secure: boolean;\n    auth: {\n      user: string;\n      pass: string;\n    };\n  };\n  resend?: {\n    apiKey: string;\n  };\n  sendgrid?: {\n    apiKey: string;\n  };\n  mailgun?: {\n    apiKey: string;\n    domain: string;\n    region?: \"us\" | \"eu\";\n  };\n  ses?: {\n    accessKeyId: string;\n    secretAccessKey: string;\n    region: string;\n  };\n}\n\nexport interface EmailOptions {\n  to: string | string[];\n  subject: string;\n  html: string;\n  text?: string;\n  replyTo?: string;\n}\n\nexport interface EmailTemplates {\n  verifyEmail: (\n    link: string,\n    userName?: string,\n  ) => { subject: string; html: string; text: string };\n  resetPassword: (\n    link: string,\n    userName?: string,\n  ) => { subject: string; html: string; text: string };\n  welcome: (userName?: string) => {\n    subject: string;\n    html: string;\n    text: string;\n  };\n  accountLocked: (\n    attempts: number,\n    duration: number,\n    userName?: string,\n  ) => { subject: string; html: string; text: string };\n  passwordChanged: (userName?: string) => {\n    subject: string;\n    html: string;\n    text: string;\n  };\n  newLogin: (\n    location: string,\n    time: string,\n    userName?: string,\n  ) => { subject: string; html: string; text: string };\n}\n\nconst defaultTemplates: EmailTemplates = {\n  verifyEmail: (link, userName = \"User\") => ({\n    subject: \"Verify your email address\",\n    html: `\n      <!DOCTYPE html>\n      <html>\n      <head>\n        <meta charset=\"utf-8\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n        <title>Verify Email</title>\n        <style>\n          body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; line-height: 1.6; color: #333; }\n          .container { max-width: 600px; margin: 0 auto; padding: 20px; }\n          .button { display: inline-block; padding: 12px 24px; background: #0b1222; color: white; text-decoration: none; border-radius: 6px; font-weight: 600; }\n          .footer { margin-top: 30px; font-size: 12px; color: #666; }\n        </style>\n      </head>\n      <body>\n        <div class=\"container\">\n          <h1>Welcome, ${userName}!</h1>\n          <p>Please verify your email address by clicking the button below:</p>\n          <p style=\"text-align: center; margin: 30px 0;\">\n            <a href=\"${link}\" class=\"button\">Verify Email</a>\n          </p>\n          <p>Or copy and paste this link into your browser:</p>\n          <p style=\"word-break: break-all; color: #666;\">${link}</p>\n          <p>This link will expire in 24 hours.</p>\n          <div class=\"footer\">\n            <p>If you didn't create an account, you can safely ignore this email.</p>\n          </div>\n        </div>\n      </body>\n      </html>\n    `,\n    text: `Welcome ${userName}!\\n\\nPlease verify your email by clicking this link: ${link}\\n\\nThis link will expire in 24 hours.\\n\\nIf you didn't create an account, you can safely ignore this email.`,\n  }),\n\n  resetPassword: (link, userName = \"User\") => ({\n    subject: \"Reset your password\",\n    html: `\n      <!DOCTYPE html>\n      <html>\n      <head>\n        <meta charset=\"utf-8\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n        <title>Reset Password</title>\n        <style>\n          body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; line-height: 1.6; color: #333; }\n          .container { max-width: 600px; margin: 0 auto; padding: 20px; }\n          .button { display: inline-block; padding: 12px 24px; background: #dc2626; color: white; text-decoration: none; border-radius: 6px; font-weight: 600; }\n          .warning { background: #fef3c7; border: 1px solid #f59e0b; padding: 12px; border-radius: 6px; margin: 20px 0; }\n          .footer { margin-top: 30px; font-size: 12px; color: #666; }\n        </style>\n      </head>\n      <body>\n        <div class=\"container\">\n          <h1>Password Reset Request</h1>\n          <p>Hello ${userName},</p>\n          <p>We received a request to reset your password. Click the button below to create a new password:</p>\n          <p style=\"text-align: center; margin: 30px 0;\">\n            <a href=\"${link}\" class=\"button\">Reset Password</a>\n          </p>\n          <p>Or copy and paste this link into your browser:</p>\n          <p style=\"word-break: break-all; color: #666;\">${link}</p>\n          <div class=\"warning\">\n            <strong>⚠️ Important:</strong> This link will expire in 1 hour. If you didn't request a password reset, please ignore this email or contact support if you have concerns.\n          </div>\n          <div class=\"footer\">\n            <p>For security reasons, please don't share this email with anyone.</p>\n          </div>\n        </div>\n      </body>\n      </html>\n    `,\n    text: `Password Reset Request\\n\\nHello ${userName},\\n\\nWe received a request to reset your password. Click this link to create a new password: ${link}\\n\\nThis link will expire in 1 hour.\\n\\nIf you didn't request a password reset, please ignore this email.`,\n  }),\n\n  welcome: (userName = \"User\") => ({\n    subject: \"Welcome to Kyro CMS\",\n    html: `\n      <!DOCTYPE html>\n      <html>\n      <head>\n        <meta charset=\"utf-8\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n        <title>Welcome</title>\n        <style>\n          body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; line-height: 1.6; color: #333; }\n          .container { max-width: 600px; margin: 0 auto; padding: 20px; }\n          .button { display: inline-block; padding: 12px 24px; background: #0b1222; color: white; text-decoration: none; border-radius: 6px; font-weight: 600; }\n        </style>\n      </head>\n      <body>\n        <div class=\"container\">\n          <h1>Welcome to Kyro CMS, ${userName}!</h1>\n          <p>Your account has been created successfully.</p>\n          <p>You can now:</p>\n          <ul>\n            <li>Manage your content collections</li>\n            <li>Upload and organize media</li>\n            <li>Configure settings</li>\n            <li>And much more...</li>\n          </ul>\n          <p style=\"text-align: center; margin: 30px 0;\">\n            <a href=\"#\" class=\"button\">Get Started</a>\n          </p>\n          <p>If you have any questions, feel free to reach out to our support team.</p>\n        </div>\n      </body>\n      </html>\n    `,\n    text: `Welcome to Kyro CMS, ${userName}!\\n\\nYour account has been created successfully.\\n\\nYou can now:\\n- Manage your content collections\\n- Upload and organize media\\n- Configure settings\\n- And much more...\\n\\nGet started by logging into your dashboard.`,\n  }),\n\n  accountLocked: (attempts, duration, userName = \"User\") => ({\n    subject: \"Account Security Alert - Account Locked\",\n    html: `\n      <!DOCTYPE html>\n      <html>\n      <head>\n        <meta charset=\"utf-8\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n        <title>Account Locked</title>\n        <style>\n          body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; line-height: 1.6; color: #333; }\n          .container { max-width: 600px; margin: 0 auto; padding: 20px; }\n          .alert { background: #fef2f2; border: 1px solid #ef4444; padding: 16px; border-radius: 8px; margin: 20px 0; }\n          .footer { margin-top: 30px; font-size: 12px; color: #666; }\n        </style>\n      </head>\n      <body>\n        <div class=\"container\">\n          <h1>Account Security Alert</h1>\n          <p>Hello ${userName},</p>\n          <div class=\"alert\">\n            <p><strong>⚠️ Your account has been temporarily locked due to multiple failed login attempts.</strong></p>\n            <p>Failed attempts: ${attempts}</p>\n            <p>Lockout duration: ${Math.round(duration / 60000)} minutes</p>\n          </div>\n          <p>Your account will automatically unlock after the lockout period expires.</p>\n          <p>If this wasn't you, we recommend:</p>\n          <ul>\n            <li>Using a strong, unique password</li>\n            <li>Enabling two-factor authentication (coming soon)</li>\n            <li>Reviewing your recent account activity</li>\n          </ul>\n          <div class=\"footer\">\n            <p>If you need immediate assistance, please contact support.</p>\n          </div>\n        </div>\n      </body>\n      </html>\n    `,\n    text: `Account Security Alert\\n\\nHello ${userName},\\n\\nYour account has been temporarily locked due to multiple failed login attempts (${attempts}).\\n\\nLockout duration: ${Math.round(duration / 60000)} minutes\\n\\nYour account will automatically unlock after this period.\\n\\nIf this wasn't you, we recommend using a strong, unique password.`,\n  }),\n\n  passwordChanged: (userName = \"User\") => ({\n    subject: \"Your password has been changed\",\n    html: `\n      <!DOCTYPE html>\n      <html>\n      <head>\n        <meta charset=\"utf-8\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n        <title>Password Changed</title>\n        <style>\n          body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; line-height: 1.6; color: #333; }\n          .container { max-width: 600px; margin: 0 auto; padding: 20px; }\n          .info { background: #f0fdf4; border: 1px solid #22c55e; padding: 12px; border-radius: 6px; margin: 20px 0; }\n        </style>\n      </head>\n      <body>\n        <div class=\"container\">\n          <h1>Password Changed</h1>\n          <p>Hello ${userName},</p>\n          <div class=\"info\">\n            <p>Your password was recently changed.</p>\n          </div>\n          <p>If you did this, you can safely ignore this email.</p>\n          <p><strong>If you didn't change your password</strong>, please contact our support team immediately as your account may have been compromised.</p>\n        </div>\n      </body>\n      </html>\n    `,\n    text: `Password Changed\\n\\nHello ${userName},\\n\\nYour password was recently changed.\\n\\nIf you did this, you can safely ignore this email.\\n\\nIf you didn't change your password, please contact support immediately.`,\n  }),\n\n  newLogin: (location, time, userName = \"User\") => ({\n    subject: \"New login to your account\",\n    html: `\n      <!DOCTYPE html>\n      <html>\n      <head>\n        <meta charset=\"utf-8\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n        <title>New Login</title>\n        <style>\n          body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; line-height: 1.6; color: #333; }\n          .container { max-width: 600px; margin: 0 auto; padding: 20px; }\n          .info-box { background: #f8fafc; border: 1px solid #e2e8f0; padding: 16px; border-radius: 8px; margin: 20px 0; }\n          .footer { margin-top: 30px; font-size: 12px; color: #666; }\n        </style>\n      </head>\n      <body>\n        <div class=\"container\">\n          <h1>New Login Detected</h1>\n          <p>Hello ${userName},</p>\n          <p>We detected a new login to your account:</p>\n          <div class=\"info-box\">\n            <p><strong>Location:</strong> ${location}</p>\n            <p><strong>Time:</strong> ${time}</p>\n          </div>\n          <p><strong>If this was you</strong>, no action is needed.</p>\n          <p><strong>If this wasn't you</strong>, your account may be compromised. Please:</p>\n          <ol>\n            <li>Change your password immediately</li>\n            <li>Review your recent account activity</li>\n            <li>Contact support if needed</li>\n          </ol>\n          <div class=\"footer\">\n            <p>This is an automated security notification.</p>\n          </div>\n        </div>\n      </body>\n      </html>\n    `,\n    text: `New Login Detected\\n\\nHello ${userName},\\n\\nWe detected a new login to your account:\\n\\nLocation: ${location}\\nTime: ${time}\\n\\nIf this wasn't you, please change your password immediately and contact support.`,\n  }),\n};\n\nimport { ConfigService } from \"../config/ConfigService.js\";\n\nexport class EmailTransport {\n  private transporter?: Transporter<SentMessageInfo>;\n  private config: EmailConfig;\n  private templates: EmailTemplates;\n  private transporterInitialized: boolean = false;\n\n  constructor(config: EmailConfig, templates?: Partial<EmailTemplates>) {\n    this.config = config;\n    this.templates = { ...defaultTemplates, ...templates };\n  }\n\n  private async ensureTransporter(): Promise<Transporter<SentMessageInfo>> {\n    if (this.transporterInitialized) {\n      return this.transporter!;\n    }\n\n    const { default: nodemailer } = await import(\"nodemailer\");\n\n    if (this.config.provider === \"smtp\" && this.config.smtp) {\n      this.transporter = nodemailer.createTransport({\n        host: this.config.smtp.host,\n        port: this.config.smtp.port,\n        secure: this.config.smtp.secure,\n        auth: this.config.smtp.auth,\n      });\n    } else if (this.config.provider === \"ses\" && this.config.ses) {\n      this.transporter = nodemailer.createTransport({\n        host: `email-smtp.${this.config.ses.region}.amazonaws.com`,\n        port: 587,\n        secure: false,\n        auth: {\n          user: this.config.ses.accessKeyId,\n          pass: this.config.ses.secretAccessKey,\n        },\n      });\n    }\n\n    this.transporterInitialized = true;\n    return this.transporter!;\n  }\n\n  async send(options: EmailOptions): Promise<any> {\n    const { provider, from, fromName, replyTo: configReplyTo } = this.config;\n    const fromFull = `\"${fromName || \"Kyro CMS\"}\" <${from}>`;\n    const replyTo = options.replyTo || configReplyTo;\n\n    console.log(`[EmailTransport] Sending email via ${provider}...`);\n    console.log(\n      `[EmailTransport] To: ${Array.isArray(options.to) ? options.to.join(\", \") : options.to}`,\n    );\n    console.log(`[EmailTransport] Subject: ${options.subject}`);\n\n    try {\n      let result;\n      switch (provider) {\n        case \"smtp\":\n        case \"ses\":\n          {\n            const transporter = await this.ensureTransporter();\n            if (!transporter)\n              throw new Error(`${provider} transporter not initialized`);\n            result = await transporter.sendMail({\n              from: fromFull,\n              to: Array.isArray(options.to)\n                ? options.to.join(\", \")\n                : options.to,\n              subject: options.subject,\n              html: options.html,\n              text: options.text,\n              replyTo,\n            });\n          }\n          break;\n\n        case \"resend\":\n          result = await this.sendViaResend(fromFull, options, replyTo);\n          break;\n\n        case \"sendgrid\":\n          result = await this.sendViaSendGrid(fromFull, options, replyTo);\n          break;\n\n        case \"mailgun\":\n          result = await this.sendViaMailgun(fromFull, options, replyTo);\n          break;\n\n        default:\n          throw new Error(`Unsupported email provider: ${provider}`);\n      }\n      console.log(`[EmailTransport] Success! Provider response received.`);\n      return result;\n    } catch (error: any) {\n      console.error(`[EmailTransport] FAILED to send email:`, error.message);\n      if (error.response) {\n        console.error(\n          `[EmailTransport] Provider Error Detail:`,\n          JSON.stringify(error.response, null, 2),\n        );\n      }\n      throw error;\n    }\n  }\n\n  private async sendViaResend(\n    from: string,\n    options: EmailOptions,\n    replyTo?: string,\n  ) {\n    const apiKey = this.config.resend?.apiKey;\n    if (!apiKey) throw new Error(\"Resend API Key missing\");\n\n    const body = {\n      from,\n      to: options.to,\n      subject: options.subject,\n      html: options.html,\n      text: options.text,\n      reply_to: replyTo,\n    };\n\n    console.log(`[EmailTransport] Calling Resend API...`);\n    const resp = await fetch(\"https://api.resend.com/emails\", {\n      method: \"POST\",\n      headers: {\n        Authorization: `Bearer ${apiKey}`,\n        \"Content-Type\": \"application/json\",\n      },\n      body: JSON.stringify(body),\n    });\n\n    if (!resp.ok) {\n      const error = await resp.json();\n      throw new Error(`Resend Error: ${JSON.stringify(error)}`);\n    }\n    return resp.json();\n  }\n\n  private async sendViaSendGrid(\n    from: string,\n    options: EmailOptions,\n    replyTo?: string,\n  ) {\n    const apiKey = this.config.sendgrid?.apiKey;\n    if (!apiKey) throw new Error(\"SendGrid API Key missing\");\n\n    const body = {\n      personalizations: [\n        {\n          to: Array.isArray(options.to)\n            ? options.to.map((email) => ({ email }))\n            : [{ email: options.to }],\n        },\n      ],\n      from: {\n        email: from.match(/<(.+)>/)?.[1] || from,\n        name: from.match(/\"(.+)\"/)?.[1],\n      },\n      subject: options.subject,\n      content: [\n        { type: \"text/plain\", value: options.text || \"\" },\n        { type: \"text/html\", value: options.html },\n      ],\n      reply_to: replyTo ? { email: replyTo } : undefined,\n    };\n\n    console.log(`[EmailTransport] Calling SendGrid API...`);\n    const resp = await fetch(\"https://api.sendgrid.com/v3/mail/send\", {\n      method: \"POST\",\n      headers: {\n        Authorization: `Bearer ${apiKey}`,\n        \"Content-Type\": \"application/json\",\n      },\n      body: JSON.stringify(body),\n    });\n\n    if (!resp.ok) {\n      const error = await resp.json();\n      throw new Error(`SendGrid Error: ${JSON.stringify(error)}`);\n    }\n    return { success: true };\n  }\n\n  private async sendViaMailgun(\n    from: string,\n    options: EmailOptions,\n    replyTo?: string,\n  ) {\n    const { apiKey, domain, region } = this.config.mailgun || {};\n    if (!apiKey || !domain) throw new Error(\"Mailgun config missing\");\n\n    const base = region === \"eu\" ? \"api.eu.mailgun.net\" : \"api.mailgun.net\";\n    const auth = btoa(`api:${apiKey}`);\n\n    const formData = new URLSearchParams();\n    formData.append(\"from\", from);\n    const to = Array.isArray(options.to) ? options.to.join(\", \") : options.to;\n    formData.append(\"to\", to);\n    formData.append(\"subject\", options.subject);\n    formData.append(\"html\", options.html);\n    if (options.text) formData.append(\"text\", options.text);\n    if (replyTo) formData.append(\"h:Reply-To\", replyTo);\n\n    console.log(`[EmailTransport] Calling Mailgun API (${region || \"us\"})...`);\n    const resp = await fetch(`https://${base}/v3/${domain}/messages`, {\n      method: \"POST\",\n      headers: {\n        Authorization: `Basic ${auth}`,\n        \"Content-Type\": \"application/x-www-form-urlencoded\",\n      },\n      body: formData,\n    });\n\n    if (!resp.ok) {\n      const error = await resp.json();\n      throw new Error(`Mailgun Error: ${JSON.stringify(error)}`);\n    }\n    return resp.json();\n  }\n\n  getTemplates(): EmailTemplates {\n    return this.templates;\n  }\n\n  async verifyConnection(): Promise<boolean> {\n    if (this.config.provider === \"smtp\" || this.config.provider === \"ses\") {\n      try {\n        const transporter = await this.ensureTransporter();\n        if (transporter) {\n          await transporter.verify();\n          return true;\n        }\n      } catch {\n        return false;\n      }\n    }\n    return !!(\n      this.config.resend?.apiKey ||\n      this.config.sendgrid?.apiKey ||\n      this.config.mailgun?.apiKey\n    );\n  }\n\n  static async fromConfig(db: any): Promise<EmailTransport | null> {\n    const configService = new ConfigService(db);\n    await configService.load();\n    const config = configService.getEmailConfig();\n\n    if (!config.provider) {\n      return this.fromEnv();\n    }\n\n    const transformed: EmailConfig = {\n      provider: (config.provider as any) || \"smtp\",\n      from: config.from || \"noreply@example.com\",\n      fromName: config.fromName,\n      replyTo: config.replyTo,\n      smtp:\n        config.provider === \"smtp\"\n          ? {\n              host: config.host || \"\",\n              port: config.port || 587,\n              secure: config.secure || false,\n              auth: { user: config.user || \"\", pass: config.pass || \"\" },\n            }\n          : undefined,\n      resend:\n        config.provider === \"resend\"\n          ? { apiKey: config.pass || \"\" }\n          : undefined,\n      sendgrid:\n        config.provider === \"sendgrid\"\n          ? { apiKey: config.pass || \"\" }\n          : undefined,\n      mailgun:\n        config.provider === \"mailgun\"\n          ? {\n              apiKey: config.pass || \"\",\n              domain: config.host || \"\",\n              region: (config.secure ? \"eu\" : \"us\") as any,\n            }\n          : undefined,\n      ses:\n        config.provider === \"ses\"\n          ? {\n              accessKeyId: config.user || \"\",\n              secretAccessKey: config.pass || \"\",\n              region: config.host || \"us-east-1\",\n            }\n          : undefined,\n    };\n\n    return new EmailTransport(transformed);\n  }\n\n  static fromEnv(): EmailTransport | null {\n    const provider = (process.env.EMAIL_PROVIDER as any) || \"smtp\";\n    const from =\n      process.env.SMTP_FROM ||\n      process.env.DEFAULT_FROM ||\n      \"noreply@example.com\";\n    const fromName = process.env.SMTP_FROM_NAME || \"Kyro CMS\";\n    const replyTo = process.env.SMTP_REPLY_TO;\n\n    if (provider === \"smtp\") {\n      const host = process.env.SMTP_HOST;\n      const user = process.env.SMTP_USER;\n      const pass = process.env.SMTP_PASS;\n      if (!host || !user || !pass) return null;\n\n      return new EmailTransport({\n        provider: \"smtp\",\n        from,\n        fromName,\n        replyTo,\n        smtp: {\n          host,\n          port: parseInt(process.env.SMTP_PORT || \"587\", 10),\n          secure: process.env.SMTP_SECURE === \"true\",\n          auth: { user, pass },\n        },\n      });\n    }\n\n    if (provider === \"resend\") {\n      const apiKey = process.env.RESEND_API_KEY || process.env.SMTP_PASS;\n      if (!apiKey) return null;\n      return new EmailTransport({\n        provider: \"resend\",\n        from,\n        fromName,\n        replyTo,\n        resend: { apiKey },\n      });\n    }\n\n    if (provider === \"sendgrid\") {\n      const apiKey = process.env.SENDGRID_API_KEY || process.env.SMTP_PASS;\n      if (!apiKey) return null;\n      return new EmailTransport({\n        provider: \"sendgrid\",\n        from,\n        fromName,\n        replyTo,\n        sendgrid: { apiKey },\n      });\n    }\n\n    if (provider === \"mailgun\") {\n      const apiKey = process.env.MAILGUN_API_KEY || process.env.SMTP_PASS;\n      const domain = process.env.MAILGUN_DOMAIN || process.env.SMTP_HOST;\n      if (!apiKey || !domain) return null;\n      return new EmailTransport({\n        provider: \"mailgun\",\n        from,\n        fromName,\n        replyTo,\n        mailgun: {\n          apiKey,\n          domain,\n          region: (process.env.MAILGUN_REGION ||\n            (process.env.SMTP_SECURE === \"true\" ? \"eu\" : \"us\")) as any,\n        },\n      });\n    }\n\n    if (provider === \"ses\") {\n      const accessKeyId =\n        process.env.AWS_ACCESS_KEY_ID || process.env.SMTP_USER;\n      const secretAccessKey =\n        process.env.AWS_SECRET_ACCESS_KEY || process.env.SMTP_PASS;\n      const region =\n        process.env.AWS_REGION || process.env.SMTP_HOST || \"us-east-1\";\n      if (!accessKeyId || !secretAccessKey) return null;\n      return new EmailTransport({\n        provider: \"ses\",\n        from,\n        fromName,\n        replyTo,\n        ses: { accessKeyId, secretAccessKey, region },\n      });\n    }\n\n    return null;\n  }\n}\n","export interface PasswordPolicyConfig {\n  minLength: number;\n  requireUppercase: boolean;\n  requireLowercase: boolean;\n  requireNumbers: boolean;\n  requireSpecialChars: boolean;\n  preventReuse: number;\n  maxLength?: number;\n}\n\nexport interface ValidationResult {\n  valid: boolean;\n  errors: string[];\n}\n\nexport const DEFAULT_PASSWORD_POLICY: PasswordPolicyConfig = {\n  minLength: 12,\n  requireUppercase: true,\n  requireLowercase: true,\n  requireNumbers: true,\n  requireSpecialChars: true,\n  preventReuse: 5,\n  maxLength: 128,\n};\n\nexport class PasswordPolicy {\n  private config: PasswordPolicyConfig;\n\n  constructor(config: Partial<PasswordPolicyConfig> = {}) {\n    this.config = { ...DEFAULT_PASSWORD_POLICY, ...config };\n  }\n\n  validate(password: string): ValidationResult {\n    const errors: string[] = [];\n\n    if (this.config.maxLength && password.length > this.config.maxLength) {\n      errors.push(\n        `Password must not exceed ${this.config.maxLength} characters`,\n      );\n    }\n\n    if (password.length < this.config.minLength) {\n      errors.push(\n        `Password must be at least ${this.config.minLength} characters`,\n      );\n    }\n\n    if (this.config.requireUppercase && !/[A-Z]/.test(password)) {\n      errors.push(\"Password must contain at least one uppercase letter\");\n    }\n\n    if (this.config.requireLowercase && !/[a-z]/.test(password)) {\n      errors.push(\"Password must contain at least one lowercase letter\");\n    }\n\n    if (this.config.requireNumbers && !/[0-9]/.test(password)) {\n      errors.push(\"Password must contain at least one number\");\n    }\n\n    if (\n      this.config.requireSpecialChars &&\n      !/[!@#$%^&*()_+\\-=\\[\\]{};':\"\\\\|,.<>\\/?]/.test(password)\n    ) {\n      errors.push(\"Password must contain at least one special character\");\n    }\n\n    const commonPasswords = [\n      \"password\",\n      \"123456\",\n      \"12345678\",\n      \"qwerty\",\n      \"abc123\",\n      \"monkey\",\n      \"1234567\",\n      \"letmein\",\n      \"trustno1\",\n      \"dragon\",\n      \"baseball\",\n      \"iloveyou\",\n      \"master\",\n      \"sunshine\",\n      \"ashley\",\n      \"football\",\n      \"password1\",\n      \"shadow\",\n      \"123123\",\n      \"654321\",\n    ];\n\n    if (commonPasswords.includes(password.toLowerCase())) {\n      errors.push(\n        \"This password is too common. Please choose a more secure password\",\n      );\n    }\n\n    if (/^[a-zA-Z]+$/.test(password) || /^[0-9]+$/.test(password)) {\n      errors.push(\n        \"Password must contain a mix of letters, numbers, and/or special characters\",\n      );\n    }\n\n    if (/(.)\\1{2,}/.test(password)) {\n      errors.push(\n        \"Password must not contain more than 2 consecutive identical characters\",\n      );\n    }\n\n    if (\n      /^(012|123|234|345|456|567|678|789|890|098|987|876|765|654|543|432|321|210)+$/i.test(\n        password,\n      )\n    ) {\n      errors.push(\"Password must not contain sequential numbers or letters\");\n    }\n\n    return {\n      valid: errors.length === 0,\n      errors,\n    };\n  }\n\n  async checkReuse(\n    passwordHash: string,\n    history: string[],\n    verifyFn: (password: string, hash: string) => Promise<boolean>,\n  ): Promise<ValidationResult> {\n    return {\n      valid: true,\n      errors: [],\n    };\n  }\n\n  async isInHistory(\n    password: string,\n    history: string[],\n    verifyFn: (password: string, hash: string) => Promise<boolean>,\n  ): Promise<boolean> {\n    for (const hash of history) {\n      if (await verifyFn(password, hash)) {\n        return true;\n      }\n    }\n    return false;\n  }\n\n  generatePassword(length: number = 16): string {\n    const uppercase = \"ABCDEFGHIJKLMNOPQRSTUVWXYZ\";\n    const lowercase = \"abcdefghijklmnopqrstuvwxyz\";\n    const numbers = \"0123456789\";\n    const special = \"!@#$%^&*()_+-=[]{}|;:,.<>?\";\n\n    let password = \"\";\n\n    password += uppercase[Math.floor(Math.random() * uppercase.length)];\n    password += lowercase[Math.floor(Math.random() * lowercase.length)];\n    password += numbers[Math.floor(Math.random() * numbers.length)];\n    password += special[Math.floor(Math.random() * special.length)];\n\n    const allChars = uppercase + lowercase + numbers + special;\n    for (let i = password.length; i < length; i++) {\n      password += allChars[Math.floor(Math.random() * allChars.length)];\n    }\n\n    return password\n      .split(\"\")\n      .sort(() => Math.random() - 0.5)\n      .join(\"\");\n  }\n\n  getStrength(password: string): {\n    score: number;\n    label: string;\n    feedback: string[];\n  } {\n    let score = 0;\n    const feedback: string[] = [];\n\n    if (password.length >= 8) score += 1;\n    if (password.length >= 12) score += 1;\n    if (password.length >= 16) score += 1;\n\n    if (/[a-z]/.test(password)) score += 1;\n    if (/[A-Z]/.test(password)) score += 1;\n    if (/[0-9]/.test(password)) score += 1;\n    if (/[!@#$%^&*()_+\\-=\\[\\]{}|;:,.<>?]/.test(password)) score += 1;\n\n    if (password.length > 8) score += 1;\n    if (password.length > 12) score += 1;\n\n    const uniqueChars = new Set(password).size;\n    if (uniqueChars > 6) score += 1;\n    if (uniqueChars > 10) score += 1;\n\n    let label: string;\n    if (score <= 3) {\n      label = \"Weak\";\n      feedback.push(\"Add more characters\");\n      feedback.push(\"Include uppercase and lowercase letters\");\n    } else if (score <= 5) {\n      label = \"Fair\";\n      feedback.push(\"Add special characters\");\n      feedback.push(\"Consider making it longer\");\n    } else if (score <= 7) {\n      label = \"Good\";\n      feedback.push(\"Consider making it longer for extra security\");\n    } else {\n      label = \"Strong\";\n    }\n\n    return { score, label, feedback };\n  }\n\n  setConfig(config: Partial<PasswordPolicyConfig>): void {\n    this.config = { ...this.config, ...config };\n  }\n\n  getConfig(): PasswordPolicyConfig {\n    return { ...this.config };\n  }\n}\n"]}

package/dist/{chunk-R2YHJN6W.cjs → chunk-5KVM3WEY.cjs}

@@ -1,13 +1,16 @@
 'use strict';
 
-var chunkRDRJVCL5_cjs = require('./chunk-RDRJVCL5.cjs');
+var chunkIA6AU5PI_cjs = require('./chunk-IA6AU5PI.cjs');
+var chunkI7HHI6QV_cjs = require('./chunk-I7HHI6QV.cjs');
 var chunkADLJSJSN_cjs = require('./chunk-ADLJSJSN.cjs');
 var chunkIBG6V56E_cjs = require('./chunk-IBG6V56E.cjs');
 var chunkVJT6P4N6_cjs = require('./chunk-VJT6P4N6.cjs');
 var chunkR3XIBBAW_cjs = require('./chunk-R3XIBBAW.cjs');
-var chunkWVPOPOEQ_cjs = require('./chunk-WVPOPOEQ.cjs');
-var chunkRALQO47U_cjs = require('./chunk-RALQO47U.cjs');
-var chunkXAEBVZTI_cjs = require('./chunk-XAEBVZTI.cjs');
+var chunk2KVHZE6O_cjs = require('./chunk-2KVHZE6O.cjs');
+var chunk2OL4O2TH_cjs = require('./chunk-2OL4O2TH.cjs');
+var chunkPDYFVNUX_cjs = require('./chunk-PDYFVNUX.cjs');
+var chunk4DA7QPLA_cjs = require('./chunk-4DA7QPLA.cjs');
+var chunkSA7NSSIQ_cjs = require('./chunk-SA7NSSIQ.cjs');
 var chunkG7VZBCD6_cjs = require('./chunk-G7VZBCD6.cjs');
 var crypto = require('crypto');
 var unstorage = require('unstorage');
@@ -954,7 +957,7 @@ var AuthRoutes = class {
   constructor(config) {
     this.authAdapter = config.redis;
     this.email = config.email;
-    this.passwordPolicy = config.passwordPolicy || new chunkRDRJVCL5_cjs.PasswordPolicy();
+    this.passwordPolicy = config.passwordPolicy || new chunkIA6AU5PI_cjs.PasswordPolicy();
     this.lockout = config.lockout;
     this.rateLimiter = config.rateLimiter;
     this.auditLogger = config.auditLogger;
@@ -2683,14 +2686,14 @@ var MediaService = class _MediaService {
     this.db = db;
     this.storage = storage2;
     this.dialect = options?.dialect || "sqlite";
-    this.genId = options?.genId || chunkWVPOPOEQ_cjs.genId;
+    this.genId = options?.genId || chunk2KVHZE6O_cjs.genId;
   }
   static async init(db, options) {
     let storage2;
     if (options?.storageConfig) {
       storage2 = await resolveProviderWithConfig(options.storageConfig);
     } else {
-      const configService = new chunkRDRJVCL5_cjs.ConfigService(db);
+      const configService = new chunkIA6AU5PI_cjs.ConfigService(db);
       if (typeof db?.select === "function") {
         await configService.load();
       }
@@ -3259,183 +3262,6 @@ var MediaService = class _MediaService {
   }
 };
 
-// src/auth/rbac/roles.ts
-var DEFAULT_ROLES = [
-  {
-    name: "super_admin",
-    level: 100,
-    inherits: [],
-    description: "Full system access across all tenants"
-  },
-  {
-    name: "admin",
-    level: 90,
-    inherits: ["editor"],
-    description: "Full tenant access with all content permissions"
-  },
-  {
-    name: "editor",
-    level: 70,
-    inherits: ["author"],
-    description: "Edit and publish all content"
-  },
-  {
-    name: "author",
-    level: 50,
-    inherits: ["customer"],
-    description: "Create and edit own content"
-  },
-  {
-    name: "customer",
-    level: 30,
-    inherits: [],
-    description: "Access own data and make purchases"
-  },
-  {
-    name: "guest",
-    level: 10,
-    inherits: [],
-    description: "Public read-only access"
-  }
-];
-var ROLE_PERMISSIONS = {
-  super_admin: ["*"],
-  admin: [
-    "users:admin",
-    "users:read",
-    "users:update",
-    "audit_logs:read",
-    "posts:admin",
-    "posts:read",
-    "posts:create",
-    "posts:update",
-    "posts:delete",
-    "pages:admin",
-    "pages:read",
-    "pages:create",
-    "pages:update",
-    "pages:delete",
-    "media:admin",
-    "media:read",
-    "media:create",
-    "media:update",
-    "media:delete",
-    "categories:admin",
-    "categories:read",
-    "categories:create",
-    "categories:update",
-    "categories:delete",
-    "products:admin",
-    "products:read",
-    "products:create",
-    "products:update",
-    "products:delete",
-    "orders:admin",
-    "orders:read",
-    "orders:update",
-    "customers:admin",
-    "customers:read",
-    "customers:update",
-    "coupons:admin",
-    "coupons:read",
-    "coupons:create",
-    "coupons:update",
-    "coupons:delete",
-    "navigation:admin",
-    "navigation:read",
-    "navigation:create",
-    "navigation:update",
-    "navigation:delete",
-    "settings:admin",
-    "settings:read",
-    "settings:update",
-    "profile:admin",
-    "profile:read",
-    "profile:update"
-  ],
-  editor: [
-    "posts:admin",
-    "posts:read",
-    "posts:create",
-    "posts:update",
-    "posts:delete",
-    "pages:admin",
-    "pages:read",
-    "pages:create",
-    "pages:update",
-    "pages:delete",
-    "media:read",
-    "media:create",
-    "media:update",
-    "categories:read",
-    "categories:create",
-    "categories:update",
-    "products:read",
-    "orders:read",
-    "orders:update",
-    "navigation:read",
-    "navigation:create",
-    "navigation:update",
-    "profile:read",
-    "profile:update"
-  ],
-  author: [
-    "posts:read",
-    "posts:create",
-    "posts:update",
-    "media:read",
-    "media:create",
-    "categories:read",
-    "profile:read",
-    "profile:update"
-  ],
-  customer: ["profile:read", "profile:update", "orders:read", "orders:create"],
-  guest: ["posts:read", "pages:read", "products:read"]
-};
-function getRoleHierarchy(role, roles = DEFAULT_ROLES) {
-  const hierarchy = [role];
-  const roleMap = new Map(roles.map((r) => [r.name, r]));
-  const addInherited = (r) => {
-    const roleData = roleMap.get(r);
-    if (roleData && roleData.inherits) {
-      for (const inherited of roleData.inherits) {
-        if (!hierarchy.includes(inherited)) {
-          hierarchy.push(inherited);
-          addInherited(inherited);
-        }
-      }
-    }
-  };
-  addInherited(role);
-  return hierarchy;
-}
-
-// src/auth/rbac/checker.ts
-function hasPermission(user, permission, rolePermissions = ROLE_PERMISSIONS) {
-  if (!user || !user.role) return false;
-  const userPermissions = getUserPermissions(user, rolePermissions);
-  if (userPermissions.includes("*")) return true;
-  if (userPermissions.includes(permission)) return true;
-  const [resource, action] = permission.split(":");
-  if (userPermissions.includes(`${resource}:*`)) return true;
-  if (userPermissions.includes(`${resource}:admin`)) return true;
-  return false;
-}
-function getUserPermissions(user, rolePermissions = ROLE_PERMISSIONS) {
-  if (!user || !user.role) return [];
-  const hierarchy = getRoleHierarchy(user.role);
-  const permissions = /* @__PURE__ */ new Set();
-  for (const role of hierarchy) {
-    const rolePerms = rolePermissions[role];
-    if (rolePerms) {
-      for (const perm of rolePerms) {
-        permissions.add(perm);
-      }
-    }
-  }
-  return Array.from(permissions);
-}
-
 // src/api/rest/hono-app.ts
 var COLLECTION_EVENT_MAP = {
   _media: {
@@ -3536,14 +3362,14 @@ async function checkCollectionAccess(collection, operation, req, ctxUser, ctxTen
     const permission = `${resource}:${action}`;
     let rbacAllowed = false;
     if (ctxUser.role) {
-      const userHasPermission = hasPermission(
+      const userHasPermission = chunkSA7NSSIQ_cjs.hasPermission(
         { id: ctxUser.id, email: ctxUser.email, role: ctxUser.role },
         permission
       );
       if (userHasPermission) {
         rbacAllowed = true;
       } else {
-        const adminPermission = hasPermission(
+        const adminPermission = chunkSA7NSSIQ_cjs.hasPermission(
           { id: ctxUser.id, email: ctxUser.email, role: ctxUser.role },
           `${resource}:admin`
         );
@@ -3617,14 +3443,14 @@ async function resolveAuthContext(req, authMw, staticUser, staticTenantID) {
   };
 }
 function createDefaultAuthAdapter(db, rootDir) {
-  if (db instanceof chunkWVPOPOEQ_cjs.DrizzleAdapter && db.dialect === "postgres") {
-    return new chunkRALQO47U_cjs.PostgresAuthAdapter({ db: db.client });
+  if (db instanceof chunk2KVHZE6O_cjs.DrizzleAdapter && db.dialect === "postgres") {
+    return new chunk2OL4O2TH_cjs.PostgresAuthAdapter({ db: db.client });
   }
-  if (db instanceof chunkXAEBVZTI_cjs.MongoDBAdapter) {
-    return new chunkXAEBVZTI_cjs.MongoDBAuthAdapter({ db: db.db });
+  if (db instanceof chunkPDYFVNUX_cjs.MongoDBAdapter) {
+    return new chunk4DA7QPLA_cjs.MongoDBAuthAdapter({ db: db.db });
   }
   const defaultAuthDbPath = path.resolve(rootDir, "data", "kyro.db");
-  return new chunkRDRJVCL5_cjs.SQLiteAuthAdapter({
+  return new chunkI7HHI6QV_cjs.SQLiteAuthAdapter({
     path: process.env.KYRO_AUTH_DB_PATH || defaultAuthDbPath
   });
 }
@@ -4154,8 +3980,8 @@ function createHonoApp(options) {
     }
     if (!mediaService) {
       try {
-        const dialect = db instanceof chunkWVPOPOEQ_cjs.DrizzleAdapter ? db.dialect : "sqlite";
-        const mediaDb = dialect === "postgres" && db instanceof chunkWVPOPOEQ_cjs.DrizzleAdapter ? db.client : db;
+        const dialect = db instanceof chunk2KVHZE6O_cjs.DrizzleAdapter ? db.dialect : "sqlite";
+        const mediaDb = dialect === "postgres" && db instanceof chunk2KVHZE6O_cjs.DrizzleAdapter ? db.client : db;
         mediaService = await MediaService.init(mediaDb, { dialect });
       } catch (error) {
         console.error("[getMedia] Init error:", error);
@@ -4499,7 +4325,7 @@ function createHonoApp(options) {
   app.get("/api/keys", async (c) => {
     try {
       const { user: ctxUser } = await resolveAuthContext(c.req.raw, authMw, user, tenantID);
-      if (!ctxUser || !hasPermission(ctxUser, "users:read")) {
+      if (!ctxUser || !chunkSA7NSSIQ_cjs.hasPermission(ctxUser, "users:read")) {
         return c.json({ error: "Forbidden" }, 403);
       }
       const page = parseInt(c.req.query("page") || "1");
@@ -4524,7 +4350,7 @@ function createHonoApp(options) {
   app.post("/api/keys", async (c) => {
     try {
       const { user: ctxUser } = await resolveAuthContext(c.req.raw, authMw, user, tenantID);
-      if (!ctxUser || !hasPermission(ctxUser, "users:admin")) {
+      if (!ctxUser || !chunkSA7NSSIQ_cjs.hasPermission(ctxUser, "users:admin")) {
         return c.json({ error: "Forbidden" }, 403);
       }
       const body = await c.req.json();
@@ -4565,7 +4391,7 @@ function createHonoApp(options) {
   app.delete("/api/keys/:id", async (c) => {
     try {
       const { user: ctxUser } = await resolveAuthContext(c.req.raw, authMw, user, tenantID);
-      if (!ctxUser || !hasPermission(ctxUser, "users:admin")) {
+      if (!ctxUser || !chunkSA7NSSIQ_cjs.hasPermission(ctxUser, "users:admin")) {
         return c.json({ error: "Forbidden" }, 403);
       }
       const id = c.req.param("id");
@@ -4589,7 +4415,7 @@ function createHonoApp(options) {
   app.patch("/api/keys/:id", async (c) => {
     try {
       const { user: ctxUser } = await resolveAuthContext(c.req.raw, authMw, user, tenantID);
-      if (!ctxUser || !hasPermission(ctxUser, "users:admin")) {
+      if (!ctxUser || !chunkSA7NSSIQ_cjs.hasPermission(ctxUser, "users:admin")) {
         return c.json({ error: "Forbidden" }, 403);
       }
       const id = c.req.param("id");
@@ -4611,7 +4437,7 @@ function createHonoApp(options) {
   app.post("/api/keys/:id/rotate", async (c) => {
     try {
       const { user: ctxUser } = await resolveAuthContext(c.req.raw, authMw, user, tenantID);
-      if (!ctxUser || !hasPermission(ctxUser, "users:admin")) {
+      if (!ctxUser || !chunkSA7NSSIQ_cjs.hasPermission(ctxUser, "users:admin")) {
         return c.json({ error: "Forbidden" }, 403);
       }
       const id = c.req.param("id");
@@ -4649,7 +4475,7 @@ function createHonoApp(options) {
   app.get("/api/webhooks", async (c) => {
     try {
       const { user: ctxUser } = await resolveAuthContext(c.req.raw, authMw, user, tenantID);
-      if (!ctxUser || !hasPermission(ctxUser, "users:read")) {
+      if (!ctxUser || !chunkSA7NSSIQ_cjs.hasPermission(ctxUser, "users:read")) {
         return c.json({ error: "Forbidden" }, 403);
       }
       if (!webhookService) return c.json({ error: "Webhook service not available" }, 503);
@@ -4663,7 +4489,7 @@ function createHonoApp(options) {
   app.post("/api/webhooks", async (c) => {
     try {
       const { user: ctxUser } = await resolveAuthContext(c.req.raw, authMw, user, tenantID);
-      if (!ctxUser || !hasPermission(ctxUser, "users:admin")) {
+      if (!ctxUser || !chunkSA7NSSIQ_cjs.hasPermission(ctxUser, "users:admin")) {
         return c.json({ error: "Forbidden" }, 403);
       }
       if (!webhookService) return c.json({ error: "Webhook service not available" }, 503);
@@ -4686,7 +4512,7 @@ function createHonoApp(options) {
   app.get("/api/webhooks/:id", async (c) => {
     try {
       const { user: ctxUser } = await resolveAuthContext(c.req.raw, authMw, user, tenantID);
-      if (!ctxUser || !hasPermission(ctxUser, "users:read")) {
+      if (!ctxUser || !chunkSA7NSSIQ_cjs.hasPermission(ctxUser, "users:read")) {
         return c.json({ error: "Forbidden" }, 403);
       }
       if (!webhookService) return c.json({ error: "Webhook service not available" }, 503);
@@ -4702,7 +4528,7 @@ function createHonoApp(options) {
   app.patch("/api/webhooks/:id", async (c) => {
     try {
       const { user: ctxUser } = await resolveAuthContext(c.req.raw, authMw, user, tenantID);
-      if (!ctxUser || !hasPermission(ctxUser, "users:admin")) {
+      if (!ctxUser || !chunkSA7NSSIQ_cjs.hasPermission(ctxUser, "users:admin")) {
         return c.json({ error: "Forbidden" }, 403);
       }
       if (!webhookService) return c.json({ error: "Webhook service not available" }, 503);
@@ -4727,7 +4553,7 @@ function createHonoApp(options) {
   app.delete("/api/webhooks/:id", async (c) => {
     try {
       const { user: ctxUser } = await resolveAuthContext(c.req.raw, authMw, user, tenantID);
-      if (!ctxUser || !hasPermission(ctxUser, "users:admin")) {
+      if (!ctxUser || !chunkSA7NSSIQ_cjs.hasPermission(ctxUser, "users:admin")) {
         return c.json({ error: "Forbidden" }, 403);
       }
       if (!webhookService) return c.json({ error: "Webhook service not available" }, 503);
@@ -4752,7 +4578,7 @@ function createHonoApp(options) {
   app.post("/api/webhooks/:id/test", async (c) => {
     try {
       const { user: ctxUser } = await resolveAuthContext(c.req.raw, authMw, user, tenantID);
-      if (!ctxUser || !hasPermission(ctxUser, "users:admin")) {
+      if (!ctxUser || !chunkSA7NSSIQ_cjs.hasPermission(ctxUser, "users:admin")) {
         return c.json({ error: "Forbidden" }, 403);
       }
       if (!webhookService) return c.json({ error: "Webhook service not available" }, 503);
@@ -4768,7 +4594,7 @@ function createHonoApp(options) {
   app.get("/api/webhooks/:id/history", async (c) => {
     try {
       const { user: ctxUser } = await resolveAuthContext(c.req.raw, authMw, user, tenantID);
-      if (!ctxUser || !hasPermission(ctxUser, "users:read")) {
+      if (!ctxUser || !chunkSA7NSSIQ_cjs.hasPermission(ctxUser, "users:read")) {
         return c.json({ error: "Forbidden" }, 403);
       }
       if (!webhookService) return c.json({ error: "Webhook service not available" }, 503);
@@ -5867,7 +5693,7 @@ function createHonoApp(options) {
             mailgun: body.mailgun,
             ses: body.ses
           };
-          const transport = new chunkRDRJVCL5_cjs.EmailTransport(transportConfig);
+          const transport = new chunkIA6AU5PI_cjs.EmailTransport(transportConfig);
           const recipient = body.testEmail || body.testEmailSection && body.testEmailSection.testEmail;
           if (!recipient) {
             return c.json({ error: "No test recipient email provided" }, 400);
@@ -5941,5 +5767,5 @@ exports.init_secret = init_secret;
 exports.loadSecrets = loadSecrets;
 exports.resolveProvider = resolveProvider;
 exports.setDbAdapter = setDbAdapter;
-//# sourceMappingURL=chunk-R2YHJN6W.cjs.map
-//# sourceMappingURL=chunk-R2YHJN6W.cjs.map
+//# sourceMappingURL=chunk-5KVM3WEY.cjs.map
+//# sourceMappingURL=chunk-5KVM3WEY.cjs.map