@kyro-cms/core 0.9.1 → 0.9.2

package/dist/chunk-E5UJBLQ7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/fields/types.ts","../src/fields/richtext.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAoVO,SAAS,YAAY,KAAA,EAAkC;AAC5D,EAAA,OAAO,MAAM,IAAA,KAAS,MAAA;AACxB;AAEO,SAAS,cAAc,KAAA,EAAoC;AAChE,EAAA,OAAO,MAAM,IAAA,KAAS,QAAA;AACxB;AAEO,SAAS,oBAAoB,KAAA,EAA0C;AAC5E,EAAA,OAAO,MAAM,IAAA,KAAS,cAAA;AACxB;AAEO,SAAS,aAAa,KAAA,EAAmC;AAC9D,EAAA,OAAO,MAAM,IAAA,KAAS,OAAA;AACxB;AAEO,SAAS,aAAa,KAAA,EAAmC;AAC9D,EAAA,OAAO,MAAM,IAAA,KAAS,OAAA;AACxB;AAEO,SAAS,cAAc,KAAA,EAAoC;AAChE,EAAA,OAAO,MAAM,IAAA,KAAS,QAAA;AACxB;AAEO,SAAS,cAAc,KAAA,EAAoC;AAChE,EAAA,OAAO,MAAM,IAAA,KAAS,QAAA;AACxB;AAEO,SAAS,aAAa,KAAA,EAAmC;AAC9D,EAAA,OAAO,MAAM,IAAA,KAAS,OAAA;AACxB;AAEO,SAAS,gBAAgB,KAAA,EAAsC;AACpE,EAAA,OAAO,MAAM,IAAA,KAAS,UAAA;AACxB;AAEO,SAAS,cAAc,KAAA,EAAoC;AAChE,EAAA,OAAO,MAAM,IAAA,KAAS,QAAA;AACxB;AAEO,SAAS,cACd,KAAA,EACkD;AAClD,EAAA,OACE,MAAM,IAAA,KAAS,KAAA,IACf,MAAM,IAAA,KAAS,aAAA,IACf,MAAM,IAAA,KAAS,MAAA;AAEnB;AAMO,IAAM,qBAAA,GAAwB;AAAA,EACnC,MAAA;AAAA,EACA,QAAA;AAAA,EACA,UAAA;AAAA,EACA,MAAA;AAAA,EACA,OAAA;AAAA,EACA,UAAA;AAAA,EACA,UAAA;AAAA,EACA,QAAA;AAAA,EACA,OAAA;AAAA,EACA;AACF;AAEO,IAAM,mBAAA,GAAsB;AAAA,EACjC,UAAA;AAAA,EACA,MAAA;AAAA,EACA,MAAA;AAAA,EACA,QAAA;AAAA,EACA,OAAA;AAAA,EACA;AACF;AAEO,IAAM,sBAAA,GAAyB;AAAA,EACpC,cAAA;AAAA,EACA,OAAA;AAAA,EACA,OAAA;AAAA,EACA;AACF;AAEO,IAAM,kBAAA,GAAqB,CAAC,KAAA,EAAO,aAAA,EAAe,MAAM;AAExD,IAAM,eAAA,GAAkB;AAAA,EAC7B,GAAG,qBAAA;AAAA,EACH,GAAG,mBAAA;AAAA,EACH,GAAG,sBAAA;AAAA,EACH,GAAG;AACL;AAMO,SAAS,6BAAA,CACd,IAAA,EACA,UAAA,EACA,OAAA,EACmB;AACnB,EAAA,OAAO;AAAA,IACL,IAAA;AAAA,IACA,IAAA,EAAM,cAAA;AAAA,IACN,UAAA;AAAA,IACA,GAAG,OAAA;AAAA,IACH,QAAA,EAAU,SAAS,QAAA,IAAY;AAAA,GACjC;AACF;ACpbO,IAAM,cAAA,GAAiB;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA,CAyF5B,IAAA;AAEF,IAAM,UAAA,GAAa;AAAA,EACjB,UAAA;AAAA,EACA,KAAK,SAAA,CAAU;AAAA,IACb,WAAA,EAAa;AAAA,GACd,CAAA;AAAA,EACD,KAAA;AAAA,EACA,UAAU,SAAA,CAAU;AAAA,IAClB,KAAA,EAAO,CAAC,SAAA,EAAW,WAAW;AAAA,GAC/B,CAAA;AAAA,EACD,SAAA;AAAA,EACA,UAAU,SAAA,CAAU;AAAA,IAClB,UAAA,EAAY;AAAA,GACb,CAAA;AAAA,EACD,QAAA;AAAA,EACA,SAAS,SAAA,CAAU;AAAA,IACjB,MAAA,EAAQ;AAAA,GACT,CAAA;AAAA,EACD,SAAA;AAAA,EACA;AACF,CAAA;AAEO,SAAS,uBAA0B,KAAA,EAAa;AAErD,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,IAAA,EAAM;AAC/C,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,EAAC;AACV;AAEO,SAAS,eAAe,KAAA,EAAwB;AACrD,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,IAAA,EAAM;AAC/C,IAAA,OAAO,EAAA;AAAA,EACT;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAO,YAAA,CAAa,KAAA,EAA8B,UAAU,CAAA;AAClE,IAAA,OAAO,8BAA8B,IAAI,CAAA,MAAA,CAAA;AAAA,EAC3C,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,+BAA+B,KAAK,CAAA;AAClD,IAAA,OAAO,EAAA;AAAA,EACT;AACF","file":"chunk-E5UJBLQ7.js","sourcesContent":["\n\n// ============================================================================\n// Base Field Interface\n// ============================================================================\n\n/**\n * Serializable condition for conditional field visibility.\n * Unlike function conditions, these survive JSON serialization\n * and can be used in admin configs that are built at compile time.\n */\nexport interface DeclarativeCondition {\n  /** The field name to evaluate (resolved from root form data) */\n  field: string;\n  /** Show the field when the target field equals this value */\n  equals?: string | number | boolean;\n  /** Show the field when the target field does NOT equal this value */\n  notEquals?: string | number | boolean;\n  /** Show the field when the target field's value is one of these */\n  in?: (string | number | boolean)[];\n}\n\nexport interface FieldAdmin {\n  description?: string;\n  placeholder?: string;\n  readOnly?: boolean | ((\n    data: Record<string, any>,\n    siblingData: Record<string, any>,\n  ) => boolean);\n  hidden?: boolean | ((\n    data: Record<string, any>,\n    siblingData: Record<string, any>,\n  ) => boolean);\n  width?: string;\n  position?: \"sidebar\" | \"main\";\n  autoGenerate?: string;\n  action?: string;\n  method?: string;\n  inline?: boolean;\n  pickerMode?: \"drawer\" | \"dropdown\";\n  condition?:\n    | ((\n        data: Record<string, any>,\n        siblingData: Record<string, any>,\n      ) => boolean)\n    | DeclarativeCondition;\n}\n\nexport interface BaseField {\n  name: string;\n  label?: string;\n  required?: boolean;\n  unique?: boolean;\n  indexed?: boolean;\n  defaultValue?: any;\n  admin?: FieldAdmin;\n  validate?: (\n    value: any,\n    options: ValidateOptions,\n  ) => string | true | Promise<string | true>;\n  hooks?: {\n    beforeValidate?: Hook[];\n    beforeChange?: Hook[];\n    afterChange?: Hook[];\n    afterRead?: Hook[];\n  };\n}\n\nexport interface ValidateOptions {\n  data?: Record<string, any>;\n  siblingData?: Record<string, any>;\n  user?: any;\n  operation?: string;\n  required?: boolean;\n}\n\nexport type Hook = (args: any) => Promise<any> | any;\n\n// ============================================================================\n// Primitive Fields\n// ============================================================================\n\nexport type TextFieldVariant = \"text\" | \"email\" | \"password\" | \"url\" | \"id\";\n\nexport interface TextField extends BaseField {\n  type: \"text\";\n  variant?: TextFieldVariant;\n  minLength?: number;\n  maxLength?: number;\n  pattern?: string;\n  hasMany?: boolean;\n  localized?: boolean;\n}\n\nexport interface NumberField extends BaseField {\n  type: \"number\";\n  min?: number;\n  max?: number;\n  step?: number;\n  integer?: boolean;\n  hasMany?: boolean;\n}\n\nexport interface CheckboxField extends BaseField {\n  type: \"checkbox\";\n}\n\nexport interface DateField extends BaseField {\n  type: \"date\";\n  minDate?: string;\n  maxDate?: string;\n  time?: boolean;\n}\n\nexport interface EmailField extends BaseField {\n  type: \"email\";\n}\n\nexport interface PasswordField extends BaseField {\n  type: \"password\";\n}\n\nexport interface TextareaField extends BaseField {\n  type: \"textarea\";\n  minLength?: number;\n  maxLength?: number;\n  rows?: number;\n  localized?: boolean;\n}\n\nexport interface SelectField extends BaseField {\n  type: \"select\";\n  options?: Array<{ label: string; value: string }>;\n  dynamicOptions?: string;\n  hasMany?: boolean;\n  defaultValue?: string | string[];\n}\n\nexport interface RadioField extends BaseField {\n  type: \"radio\";\n  options: Array<{ label: string; value: string }>;\n  defaultValue?: string;\n}\n\nexport interface ColorField extends BaseField {\n  type: \"color\";\n  format?: \"hex\" | \"rgb\" | \"hsl\";\n  defaultValue?: string;\n}\n\nexport interface ImageField extends BaseField {\n  type: \"image\";\n  minCount?: number;\n  maxCount?: number;\n  allowedTypes?: string[];\n  maxSize?: number;\n}\n\n// ============================================================================\n// Complex Fields\n// ============================================================================\n\nexport type RichTextBlock = Record<string, any>; // TipTap JSONContent\n\nexport interface RichTextField extends BaseField {\n  type: \"richtext\";\n  defaultValue?: Record<string, any>;\n  localized?: boolean;\n}\n\nexport interface JSONField extends BaseField {\n  type: \"json\";\n  defaultValue?: Record<string, any>;\n}\n\nexport interface CodeField extends BaseField {\n  type: \"code\";\n  language?: string;\n  defaultValue?: string;\n}\n\nexport interface UploadField extends BaseField {\n  type: \"upload\";\n  relationTo: string;\n  hasMany?: boolean;\n  maxDepth?: number;\n  defaultValue?: string;\n}\n\nexport interface MarkdownField extends BaseField {\n  type: \"markdown\";\n  localized?: boolean;\n  defaultValue?: string;\n}\n\n// ============================================================================\n// Relational Fields\n// ============================================================================\n\nexport interface RelationshipField extends BaseField {\n  type: \"relationship\";\n  relationTo: string | string[];\n  hasMany?: boolean;\n  maxDepth?: number;\n  filterOptions?: (args: { data: any; user: any }) => Record<string, any>;\n  defaultValue?: string | string[];\n}\n\nexport interface ArrayField extends BaseField {\n  type: \"array\";\n  fields: Field[];\n  minRows?: number;\n  maxRows?: number;\n  labels?: { singular?: string; plural?: string };\n  defaultValue?: Record<string, any>[];\n}\n\nexport interface ListField extends BaseField {\n  type: \"list\";\n  defaultValue?: string[];\n}\n\nexport interface GroupField extends BaseField {\n  type: \"group\";\n  fields: Field[];\n  defaultValue?: Record<string, any>;\n}\n\nexport interface BlockImage {\n  url: string;\n  alt?: string;\n}\n\nexport interface BlockAdmin {\n  group?: string;\n  description?: string;\n  images?: {\n    icon?: BlockImage | string;\n    thumbnail?: BlockImage | string;\n  };\n}\n\nexport interface Block {\n  slug: string;\n  label: string;\n  fields: Field[];\n  imageURL?: string;\n  admin?: BlockAdmin;\n}\n\nexport interface BlocksField extends BaseField {\n  type: \"blocks\";\n  blocks?: Block[];\n  minRows?: number;\n  maxRows?: number;\n  defaultValue?: Array<{ blockType: string; [key: string]: any }>;\n}\n\nexport interface RowField extends Omit<BaseField, \"name\"> {\n  type: \"row\";\n  fields: Field[];\n  name?: string;\n}\n\nexport interface CollapsibleField extends Omit<BaseField, \"name\"> {\n  type: \"collapsible\";\n  fields: Field[];\n  label: string;\n  name?: string;\n}\n\nexport interface TabsField extends Omit<BaseField, \"name\"> {\n  type: \"tabs\";\n  tabs: Array<{\n    label: string;\n    fields: Field[];\n    name?: string;\n  }>;\n  name?: string;\n}\n\nexport interface ButtonField extends BaseField {\n  type: \"button\";\n  label: string;\n  action?: string;\n  method?: string;\n  inline?: boolean;\n}\n\nexport interface ActionField extends BaseField {\n  type: \"action\";\n  label: string;\n  action?: string;\n  method?: string;\n  inline?: boolean;\n}\n\nexport interface SecretField extends BaseField {\n  type: \"secret\";\n}\n\n// ============================================================================\n// Union Type\n// ============================================================================\n\nexport type Field =\n  | TextField\n  | NumberField\n  | CheckboxField\n  | DateField\n  | EmailField\n  | PasswordField\n  | TextareaField\n  | SelectField\n  | RadioField\n  | ColorField\n  | ImageField\n  | RichTextField\n  | JSONField\n  | CodeField\n  | UploadField\n  | MarkdownField\n  | RelationshipField\n  | ArrayField\n  | ListField\n  | GroupField\n  | BlocksField\n  | RowField\n  | CollapsibleField\n  | TabsField\n  | ButtonField\n  | ActionField\n  | SecretField;\n\nexport type FieldType = Field[\"type\"];\n\n// ============================================================================\n// Field Type Guards\n// ============================================================================\n\nexport function isTextField(field: Field): field is TextField {\n  return field.type === \"text\";\n}\n\nexport function isNumberField(field: Field): field is NumberField {\n  return field.type === \"number\";\n}\n\nexport function isRelationshipField(field: Field): field is RelationshipField {\n  return field.type === \"relationship\";\n}\n\nexport function isArrayField(field: Field): field is ArrayField {\n  return field.type === \"array\";\n}\n\nexport function isGroupField(field: Field): field is GroupField {\n  return field.type === \"group\";\n}\n\nexport function isBlocksField(field: Field): field is BlocksField {\n  return field.type === \"blocks\";\n}\n\nexport function isUploadField(field: Field): field is UploadField {\n  return field.type === \"upload\";\n}\n\nexport function isImageField(field: Field): field is ImageField {\n  return field.type === \"image\";\n}\n\nexport function isRichTextField(field: Field): field is RichTextField {\n  return field.type === \"richtext\";\n}\n\nexport function isSelectField(field: Field): field is SelectField {\n  return field.type === \"select\";\n}\n\nexport function isLayoutField(\n  field: Field,\n): field is RowField | CollapsibleField | TabsField {\n  return (\n    field.type === \"row\" ||\n    field.type === \"collapsible\" ||\n    field.type === \"tabs\"\n  );\n}\n\n// ============================================================================\n// Field Type List\n// ============================================================================\n\nexport const PRIMITIVE_FIELD_TYPES = [\n  \"text\",\n  \"number\",\n  \"checkbox\",\n  \"date\",\n  \"email\",\n  \"password\",\n  \"textarea\",\n  \"select\",\n  \"radio\",\n  \"color\",\n] as const;\n\nexport const COMPLEX_FIELD_TYPES = [\n  \"richtext\",\n  \"json\",\n  \"code\",\n  \"upload\",\n  \"image\",\n  \"markdown\",\n] as const;\n\nexport const RELATIONAL_FIELD_TYPES = [\n  \"relationship\",\n  \"array\",\n  \"group\",\n  \"blocks\",\n] as const;\n\nexport const LAYOUT_FIELD_TYPES = [\"row\", \"collapsible\", \"tabs\"] as const;\n\nexport const ALL_FIELD_TYPES = [\n  ...PRIMITIVE_FIELD_TYPES,\n  ...COMPLEX_FIELD_TYPES,\n  ...RELATIONAL_FIELD_TYPES,\n  ...LAYOUT_FIELD_TYPES,\n] as const;\n\n// ============================================================================\n// Field Factory Functions\n// ============================================================================\n\nexport function createRelationshipFieldConfig(\n  name: string,\n  relationTo: string | string[],\n  options?: Partial<Omit<RelationshipField, \"type\" | \"name\" | \"relationTo\">>,\n): RelationshipField {\n  return {\n    name,\n    type: \"relationship\",\n    relationTo,\n    ...options,\n    required: options?.required ?? false,\n  };\n}\n","import { generateHTML } from \"@tiptap/html\";\nimport StarterKit from \"@tiptap/starter-kit\";\nimport Link from \"@tiptap/extension-link\";\nimport Image from \"@tiptap/extension-image\";\nimport TextAlign from \"@tiptap/extension-text-align\";\nimport Underline from \"@tiptap/extension-underline\";\nimport Highlight from \"@tiptap/extension-highlight\";\nimport TaskList from \"@tiptap/extension-task-list\";\nimport TaskItem from \"@tiptap/extension-task-item\";\nimport { TextStyle } from \"@tiptap/extension-text-style\";\nimport Color from \"@tiptap/extension-color\";\n\nexport const richTextStyles = `\n.kyro-richtext {\n  color: inherit;\n  line-height: 1.7;\n}\n\n.kyro-richtext > *:first-child {\n  margin-top: 0;\n}\n\n.kyro-richtext > *:last-child {\n  margin-bottom: 0;\n}\n\n.kyro-richtext p,\n.kyro-richtext ul,\n.kyro-richtext ol,\n.kyro-richtext blockquote,\n.kyro-richtext pre {\n  margin: 0 0 1rem;\n}\n\n.kyro-richtext h1,\n.kyro-richtext h2,\n.kyro-richtext h3,\n.kyro-richtext h4,\n.kyro-richtext h5,\n.kyro-richtext h6 {\n  margin: 0 0 0.75rem;\n  line-height: 1.2;\n}\n\n.kyro-richtext ul,\n.kyro-richtext ol {\n  padding-left: 1.5rem;\n}\n\n.kyro-richtext blockquote {\n  border-left: 4px solid rgba(148, 163, 184, 0.5);\n  margin-left: 0;\n  padding-left: 1rem;\n  font-style: italic;\n}\n\n.kyro-richtext pre {\n  overflow-x: auto;\n  border-radius: 0.75rem;\n  background: rgba(15, 23, 42, 0.92);\n  color: #f8fafc;\n  padding: 1rem;\n}\n\n.kyro-richtext code {\n  font-family: ui-monospace, SFMono-Regular, Menlo, monospace;\n}\n\n.kyro-richtext img {\n  display: block;\n  max-width: 100%;\n  height: auto;\n  border-radius: 0.75rem;\n}\n\n.kyro-richtext ul[data-type=\"taskList\"] {\n  list-style: none;\n  padding: 0;\n}\n\n.kyro-richtext li[data-type=\"taskItem\"] {\n  display: flex;\n  align-items: flex-start;\n  gap: 0.5rem;\n}\n\n.kyro-richtext li[data-type=\"taskItem\"] > label {\n  user-select: none;\n  pointer-events: none;\n  margin-top: 0.2rem;\n}\n\n.kyro-richtext li[data-type=\"taskItem\"] > div {\n  flex: 1;\n}\n\n.kyro-richtext mark {\n  background-color: #fef08a;\n  border-radius: 0.25rem;\n  padding: 0.125rem 0.25rem;\n}\n`.trim();\n\nconst extensions = [\n  StarterKit,\n  Link.configure({\n    openOnClick: false,\n  }),\n  Image,\n  TextAlign.configure({\n    types: [\"heading\", \"paragraph\"],\n  }),\n  Underline,\n  Highlight.configure({\n    multicolor: true,\n  }),\n  TaskList,\n  TaskItem.configure({\n    nested: true,\n  }),\n  TextStyle,\n  Color,\n];\n\nexport function normalizeRichTextValue<T>(value: T): T {\n  // TipTap JSON is already standard JSON, so we just ensure it's an object.\n  if (typeof value === \"object\" && value !== null) {\n    return value;\n  }\n  return {} as T;\n}\n\nexport function renderRichText(value: unknown): string {\n  if (typeof value !== \"object\" || value === null) {\n    return \"\";\n  }\n  \n  try {\n    const html = generateHTML(value as Record<string, any>, extensions);\n    return `<div class=\"kyro-richtext\">${html}</div>`;\n  } catch (error) {\n    console.error(\"Failed to render rich text:\", error);\n    return \"\";\n  }\n}\n"]}

package/dist/{chunk-DVD5P72E.cjs → chunk-EEJUFDMF.cjs}

@@ -166,7 +166,6 @@ var KyroWSServer = class {
         lastActivity: /* @__PURE__ */ new Date()
       };
       this.clients.set(clientId, client);
-      console.log(`[WS] Client connected: ${clientId} (total: ${this.clients.size})`);
       this.sendToClient(client, {
         type: "connected",
         clientId,
@@ -352,7 +351,6 @@ var KyroWSServer = class {
       subscription.unsubscribe();
     }
     this.clients.delete(client.id);
-    console.log(`[WS] Client disconnected: ${client.id} (total: ${this.clients.size})`);
   }
   sendToClient(client, data) {
     if (client.ws.readyState === ws.WebSocket.OPEN) {
@@ -369,7 +367,6 @@ var KyroWSServer = class {
         if (client.ws.readyState === ws.WebSocket.OPEN) {
           const timeSinceLastActivity = Date.now() - client.lastActivity.getTime();
           if (timeSinceLastActivity > this.options.pingInterval * 3) {
-            console.log(`[WS] Client ${id} timed out`);
             client.ws.terminate();
             this.handleDisconnect(client);
             continue;
@@ -407,7 +404,6 @@ var KyroWSServer = class {
     }
     return new Promise((resolve) => {
       this.wss.close(() => {
-        console.log("[WS] Server closed");
         resolve();
       });
     });
@@ -424,5 +420,5 @@ exports.KyroPubSub = KyroPubSub;
 exports.KyroWSServer = KyroWSServer;
 exports.PubSub = PubSub;
 exports.createWSServer = createWSServer;
-//# sourceMappingURL=chunk-DVD5P72E.cjs.map
-//# sourceMappingURL=chunk-DVD5P72E.cjs.map
+//# sourceMappingURL=chunk-EEJUFDMF.cjs.map
+//# sourceMappingURL=chunk-EEJUFDMF.cjs.map

package/dist/chunk-EEJUFDMF.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/api/ws/pubsub.ts","../src/api/ws/server.ts"],"names":["WebSocketServer","WebSocket"],"mappings":";;;;;AAMO,IAAM,SAAN,MAAa;AAAA,EACV,QAAA,uBAA+C,GAAA,EAAI;AAAA,EACnD,YAAA;AAAA,EAER,WAAA,CAAY,eAAe,GAAA,EAAK;AAC9B,IAAA,IAAA,CAAK,YAAA,GAAe,YAAA;AAAA,EACtB;AAAA,EAEA,SAAA,CAAU,SAAiB,OAAA,EAAmC;AAC5D,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,OAAO,CAAA,EAAG;AAC/B,MAAA,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,OAAA,kBAAS,IAAI,KAAK,CAAA;AAAA,IACtC;AAEA,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,OAAO,CAAA;AAC1C,IAAA,IAAI,QAAA,CAAS,IAAA,IAAQ,IAAA,CAAK,YAAA,EAAc;AACtC,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,eAAA,EAAkB,KAAK,YAAY,CAAA,uBAAA,EAA0B,OAAO,CAAA,CAAA,CAAG,CAAA;AAAA,IACzF;AAEA,IAAA,QAAA,CAAS,IAAI,OAAO,CAAA;AAGpB,IAAA,OAAO,MAAM;AACX,MAAA,QAAA,CAAS,OAAO,OAAO,CAAA;AACvB,MAAA,IAAI,QAAA,CAAS,SAAS,CAAA,EAAG;AACvB,QAAA,IAAA,CAAK,QAAA,CAAS,OAAO,OAAO,CAAA;AAAA,MAC9B;AAAA,IACF,CAAA;AAAA,EACF;AAAA,EAEA,OAAA,CAAQ,SAAiB,IAAA,EAAiB;AACxC,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,OAAO,CAAA;AAC1C,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,KAAA,MAAW,WAAW,QAAA,EAAU;AAC9B,QAAA,IAAI;AACF,UAAA,MAAM,MAAA,GAAS,QAAQ,IAAI,CAAA;AAC3B,UAAA,IAAI,kBAAkB,OAAA,EAAS;AAC7B,YAAA,MAAA,CAAO,KAAA,CAAM,CAAC,GAAA,KAAQ;AACpB,cAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,uCAAA,EAA0C,OAAO,CAAA,EAAA,CAAA,EAAM,GAAG,CAAA;AAAA,YAC1E,CAAC,CAAA;AAAA,UACH;AAAA,QACF,SAAS,GAAA,EAAK;AACZ,UAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,uCAAA,EAA0C,OAAO,CAAA,EAAA,CAAA,EAAM,GAAG,CAAA;AAAA,QAC1E;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,eAAe,OAAA,EAA0B;AACvC,IAAA,OAAO,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,OAAO,CAAA,IAAK,KAAK,QAAA,CAAS,GAAA,CAAI,OAAO,CAAA,CAAG,IAAA,GAAO,CAAA;AAAA,EAC1E;AAAA,EAEA,mBAAmB,OAAA,EAAyB;AAC1C,IAAA,OAAO,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,OAAO,GAAG,IAAA,IAAQ,CAAA;AAAA,EAC7C;AAAA,EAEA,WAAA,GAAwB;AACtB,IAAA,OAAO,KAAA,CAAM,IAAA,CAAK,IAAA,CAAK,QAAA,CAAS,MAAM,CAAA;AAAA,EACxC;AAAA,EAEA,KAAA,GAAc;AACZ,IAAA,IAAA,CAAK,SAAS,KAAA,EAAM;AAAA,EACtB;AACF;AAqBO,IAAM,UAAA,GAAN,cAAyB,MAAA,CAAO;AAAA,EAC7B,QAAA;AAAA,EAER,WAAA,CAAY,QAAA,EAAe,YAAA,GAAe,GAAA,EAAK;AAC7C,IAAA,KAAA,CAAM,YAAY,CAAA;AAClB,IAAA,IAAA,CAAK,QAAA,GAAW,QAAA;AAAA,EAClB;AAAA;AAAA,EAGA,sBAAA,CAAuB,YAAoB,KAAA,EAAwB;AAEjE,IAAA,IAAA,CAAK,OAAA,CAAQ,CAAA,WAAA,EAAc,UAAU,CAAA,CAAA,EAAI,KAAK,CAAA;AAG9C,IAAA,IAAA,CAAK,OAAA,CAAQ,qBAAqB,KAAK,CAAA;AAGvC,IAAA,IAAI,MAAM,QAAA,EAAU;AAClB,MAAA,IAAA,CAAK,QAAQ,CAAA,OAAA,EAAU,KAAA,CAAM,QAAQ,CAAA,YAAA,EAAe,UAAU,IAAI,KAAK,CAAA;AACvE,MAAA,IAAA,CAAK,OAAA,CAAQ,CAAA,OAAA,EAAU,KAAA,CAAM,QAAQ,WAAW,KAAK,CAAA;AAAA,IACvD;AAGA,IAAA,IAAA,CAAK,QAAQ,CAAA,WAAA,EAAc,UAAU,IAAI,KAAA,CAAM,IAAI,IAAI,KAAK,CAAA;AAAA,EAC9D;AAAA;AAAA,EAGA,qBAAA,CAAsB,YAAoB,OAAA,EAAmC;AAC3E,IAAA,OAAO,IAAA,CAAK,SAAA,CAAU,CAAA,WAAA,EAAc,UAAU,IAAI,OAAO,CAAA;AAAA,EAC3D;AAAA;AAAA,EAGA,0BAAA,CACE,UAAA,EACA,SAAA,EACA,OAAA,EACY;AACZ,IAAA,OAAO,KAAK,SAAA,CAAU,CAAA,WAAA,EAAc,UAAU,CAAA,CAAA,EAAI,SAAS,IAAI,OAAO,CAAA;AAAA,EACxE;AAAA;AAAA,EAGA,iBAAA,CAAkB,UAAkB,OAAA,EAAmC;AACrE,IAAA,OAAO,IAAA,CAAK,SAAA,CAAU,CAAA,OAAA,EAAU,QAAQ,WAAW,OAAO,CAAA;AAAA,EAC5D;AAAA;AAAA,EAGA,2BAAA,CACE,QAAA,EACA,UAAA,EACA,OAAA,EACY;AACZ,IAAA,OAAO,KAAK,SAAA,CAAU,CAAA,OAAA,EAAU,QAAQ,CAAA,YAAA,EAAe,UAAU,IAAI,OAAO,CAAA;AAAA,EAC9E;AAAA;AAAA,EAGA,0BAA0B,OAAA,EAAmC;AAC3D,IAAA,OAAO,IAAA,CAAK,SAAA,CAAU,mBAAA,EAAqB,OAAO,CAAA;AAAA,EACpD;AAAA;AAAA,EAGA,sBAAsB,UAAA,EAAoB;AACxC,IAAA,OAAO,OAAO,IAAA,KAAc;AAC1B,MAAA,IAAA,CAAK,uBAAuB,UAAA,EAAY;AAAA,QACtC,IAAA,EAAM,IAAA,CAAK,SAAA,KAAc,QAAA,GAAW,QAAA,GAAW,QAAA;AAAA,QAC/C,UAAA;AAAA,QACA,KAAK,IAAA,CAAK,GAAA;AAAA,QACV,aAAa,IAAA,CAAK,WAAA;AAAA,QAClB,EAAA,EAAI,IAAA,CAAK,EAAA,IAAM,IAAA,CAAK,GAAA,EAAK,EAAA;AAAA,QACzB,UAAU,IAAA,CAAK,QAAA;AAAA,QACf,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,QAClC,MAAM,IAAA,CAAK;AAAA,OACZ,CAAA;AAAA,IACH,CAAA;AAAA,EACF;AAAA,EAEA,sBAAsB,UAAA,EAAoB;AACxC,IAAA,OAAO,OAAO,IAAA,KAAc;AAC1B,MAAA,IAAA,CAAK,uBAAuB,UAAA,EAAY;AAAA,QACtC,IAAA,EAAM,QAAA;AAAA,QACN,UAAA;AAAA,QACA,KAAK,IAAA,CAAK,GAAA;AAAA,QACV,aAAa,IAAA,CAAK,WAAA;AAAA,QAClB,EAAA,EAAI,IAAA,CAAK,EAAA,IAAM,IAAA,CAAK,GAAA,EAAK,EAAA;AAAA,QACzB,UAAU,IAAA,CAAK,QAAA;AAAA,QACf,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,QAClC,MAAM,IAAA,CAAK;AAAA,OACZ,CAAA;AAAA,IACH,CAAA;AAAA,EACF;AAAA;AAAA,EAGA,iBAAA,GAA0B;AACxB,IAAA,MAAM,WAAA,GAAc,IAAA,CAAK,QAAA,CAAS,cAAA,EAAe;AACjD,IAAA,KAAA,MAAW,cAAc,WAAA,EAAa;AACpC,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,QAAA,CAAS,aAAA,CAAc,WAAW,IAAI,CAAA;AAC1D,MAAA,IAAI,MAAA,EAAQ;AACV,QAAA,IAAI,CAAC,MAAA,CAAO,KAAA,EAAO,MAAA,CAAO,QAAQ,EAAC;AACnC,QAAA,IAAI,CAAC,MAAA,CAAO,KAAA,CAAM,aAAa,MAAA,CAAO,KAAA,CAAM,cAAc,EAAC;AAC3D,QAAA,IAAI,CAAC,MAAA,CAAO,KAAA,CAAM,aAAa,MAAA,CAAO,KAAA,CAAM,cAAc,EAAC;AAE3D,QAAA,MAAA,CAAO,MAAM,WAAA,CAAY,IAAA,CAAK,KAAK,qBAAA,CAAsB,UAAA,CAAW,IAAI,CAAC,CAAA;AACzE,QAAA,MAAA,CAAO,MAAM,WAAA,CAAY,IAAA,CAAK,KAAK,qBAAA,CAAsB,UAAA,CAAW,IAAI,CAAC,CAAA;AAAA,MAC3E;AAAA,IACF;AAAA,EACF;AACF;AClKO,IAAM,eAAN,MAAmB;AAAA,EAChB,GAAA;AAAA,EACA,OAAA,uBAAqC,GAAA,EAAI;AAAA,EACzC,MAAA;AAAA,EACA,OAAA;AAAA,EACA,SAAA;AAAA,EAER,YAAY,OAAA,EAA0B;AACpC,IAAA,IAAA,CAAK,OAAA,GAAU,OAAA;AACf,IAAA,IAAA,CAAK,SAAS,OAAA,CAAQ,MAAA;AAEtB,IAAA,IAAA,CAAK,GAAA,GAAM,IAAIA,kBAAA,CAAgB;AAAA,MAC7B,IAAA,EAAM,QAAQ,IAAA,IAAQ;AAAA,KACvB,CAAA;AAED,IAAA,IAAA,CAAK,WAAA,EAAY;AACjB,IAAA,IAAA,CAAK,iBAAA,EAAkB;AAAA,EACzB;AAAA,EAEQ,WAAA,GAAoB;AAC1B,IAAA,IAAA,CAAK,GAAA,CAAI,EAAA,CAAG,YAAA,EAAc,CAAC,IAAe,GAAA,KAAa;AACrD,MAAA,MAAM,QAAA,GAAW,KAAK,gBAAA,EAAiB;AAEvC,MAAA,IAAI,IAAA,CAAK,QAAQ,cAAA,IAAkB,IAAA,CAAK,QAAQ,IAAA,IAAQ,IAAA,CAAK,QAAQ,cAAA,EAAgB;AACnF,QAAA,EAAA,CAAG,KAAA,CAAM,MAAM,oBAAoB,CAAA;AACnC,QAAA;AAAA,MACF;AAEA,MAAA,MAAM,MAAA,GAAmB;AAAA,QACvB,EAAA,EAAI,QAAA;AAAA,QACJ,EAAA;AAAA,QACA,aAAA,sBAAmB,GAAA,EAAI;AAAA,QACvB,aAAA,EAAe,KAAA;AAAA,QACf,WAAA,sBAAiB,IAAA,EAAK;AAAA,QACtB,YAAA,sBAAkB,IAAA;AAAK,OACzB;AAEA,MAAA,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,QAAA,EAAU,MAAM,CAAA;AAIjC,MAAA,IAAA,CAAK,aAAa,MAAA,EAAQ;AAAA,QACxB,IAAA,EAAM,WAAA;AAAA,QACN,QAAA;AAAA,QACA,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,OACnC,CAAA;AAGD,MAAA,EAAA,CAAG,EAAA,CAAG,SAAA,EAAW,CAAC,IAAA,KAAiB;AACjC,QAAA,IAAA,CAAK,aAAA,CAAc,QAAQ,IAAI,CAAA;AAAA,MACjC,CAAC,CAAA;AAGD,MAAA,EAAA,CAAG,EAAA,CAAG,OAAA,EAAS,CAAC,KAAA,KAAiB;AAC/B,QAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,kBAAA,EAAqB,QAAQ,CAAA,CAAA,CAAA,EAAK,KAAK,CAAA;AAAA,MACvD,CAAC,CAAA;AAGD,MAAA,EAAA,CAAG,EAAA,CAAG,SAAS,MAAM;AACnB,QAAA,IAAA,CAAK,iBAAiB,MAAM,CAAA;AAAA,MAC9B,CAAC,CAAA;AAGD,MAAA,EAAA,CAAG,EAAA,CAAG,QAAQ,MAAM;AAClB,QAAA,MAAA,CAAO,YAAA,uBAAmB,IAAA,EAAK;AAAA,MACjC,CAAC,CAAA;AAAA,IACH,CAAC,CAAA;AAED,IAAA,IAAA,CAAK,GAAA,CAAI,EAAA,CAAG,OAAA,EAAS,CAAC,KAAA,KAAiB;AACrC,MAAA,OAAA,CAAQ,KAAA,CAAM,sBAAsB,KAAK,CAAA;AAAA,IAC3C,CAAC,CAAA;AAAA,EACH;AAAA,EAEQ,aAAA,CAAc,QAAkB,IAAA,EAAoB;AAC1D,IAAA,MAAA,CAAO,YAAA,uBAAmB,IAAA,EAAK;AAE/B,IAAA,IAAI,OAAA;AACJ,IAAA,IAAI;AACF,MAAA,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,QAAA,EAAU,CAAA;AAAA,IACtC,CAAA,CAAA,MAAQ;AACN,MAAA,IAAA,CAAK,aAAa,MAAA,EAAQ;AAAA,QACxB,IAAA,EAAM,OAAA;AAAA,QACN,KAAA,EAAO;AAAA,OACR,CAAA;AACD,MAAA;AAAA,IACF;AAEA,IAAA,QAAQ,QAAQ,IAAA;AAAM,MACpB,KAAK,cAAA;AACH,QAAA,IAAA,CAAK,kBAAA,CAAmB,QAAQ,OAAO,CAAA;AACvC,QAAA;AAAA,MACF,KAAK,WAAA;AACH,QAAA,IAAA,CAAK,eAAA,CAAgB,QAAQ,OAAO,CAAA;AACpC,QAAA;AAAA,MACF,KAAK,aAAA;AACH,QAAA,IAAA,CAAK,iBAAA,CAAkB,QAAQ,OAAO,CAAA;AACtC,QAAA;AAAA,MACF,KAAK,gBAAA;AACH,QAAA,IAAA,CAAK,qBAAqB,MAAM,CAAA;AAChC,QAAA;AAAA,MACF,KAAK,MAAA;AACH,QAAA,IAAA,CAAK,WAAW,MAAM,CAAA;AACtB,QAAA;AAAA,MACF,KAAK,MAAA;AACH,QAAA,IAAA,CAAK,YAAA,CAAa,MAAA,EAAQ,EAAE,IAAA,EAAM,MAAA,EAAQ,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY,EAAG,CAAA;AAC/E,QAAA;AAAA,MACF;AACE,QAAA,IAAA,CAAK,aAAa,MAAA,EAAQ;AAAA,UACxB,IAAA,EAAM,OAAA;AAAA,UACN,KAAA,EAAO,CAAA,sBAAA,EAAyB,OAAA,CAAQ,IAAI,CAAA;AAAA,SAC7C,CAAA;AAAA;AACL,EACF;AAAA,EAEA,MAAc,kBAAA,CAAmB,MAAA,EAAkB,OAAA,EAA6B;AAC9E,IAAA,IAAI,CAAC,IAAA,CAAK,OAAA,CAAQ,WAAA,EAAa;AAC7B,MAAA,MAAA,CAAO,aAAA,GAAgB,IAAA;AACvB,MAAA,IAAA,CAAK,aAAa,MAAA,EAAQ;AAAA,QACxB,IAAA,EAAM,eAAA;AAAA,QACN,OAAA,EAAS;AAAA,OACV,CAAA;AACD,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,CAAC,IAAA,CAAK,OAAA,CAAQ,WAAA,EAAa;AAC7B,MAAA,MAAA,CAAO,aAAA,GAAgB,IAAA;AACvB,MAAA,IAAA,CAAK,aAAa,MAAA,EAAQ;AAAA,QACxB,IAAA,EAAM,eAAA;AAAA,QACN,OAAA,EAAS;AAAA,OACV,CAAA;AACD,MAAA;AAAA,IACF;AAEA,IAAA,IAAI;AACF,MAAA,MAAM,OAAO,MAAM,IAAA,CAAK,OAAA,CAAQ,WAAA,CAAY,QAAQ,KAAK,CAAA;AACzD,MAAA,MAAA,CAAO,aAAA,GAAgB,IAAA;AACvB,MAAA,MAAA,CAAO,IAAA,GAAO,IAAA;AACd,MAAA,MAAA,CAAO,WAAW,IAAA,CAAK,QAAA;AACvB,MAAA,IAAA,CAAK,aAAa,MAAA,EAAQ;AAAA,QACxB,IAAA,EAAM,eAAA;AAAA,QACN,OAAA,EAAS,IAAA;AAAA,QACT,MAAM,EAAE,EAAA,EAAI,KAAK,EAAA,EAAI,KAAA,EAAO,KAAK,KAAA;AAAM,OACxC,CAAA;AAAA,IACH,SAAS,KAAA,EAAY;AACnB,MAAA,IAAA,CAAK,aAAa,MAAA,EAAQ;AAAA,QACxB,IAAA,EAAM,eAAA;AAAA,QACN,OAAA,EAAS,KAAA;AAAA,QACT,OAAO,KAAA,CAAM;AAAA,OACd,CAAA;AAAA,IACH;AAAA,EACF;AAAA,EAEQ,eAAA,CAAgB,QAAkB,OAAA,EAAoB;AAC5D,IAAA,IAAI,IAAA,CAAK,OAAA,CAAQ,WAAA,IAAe,CAAC,OAAO,aAAA,EAAe;AACrD,MAAA,IAAA,CAAK,aAAa,MAAA,EAAQ;AAAA,QACxB,IAAA,EAAM,OAAA;AAAA,QACN,KAAA,EAAO;AAAA,OACR,CAAA;AACD,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,UAAU,OAAA,CAAQ,OAAA;AACxB,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,IAAA,CAAK,aAAa,MAAA,EAAQ;AAAA,QACxB,IAAA,EAAM,OAAA;AAAA,QACN,KAAA,EAAO;AAAA,OACR,CAAA;AACD,MAAA;AAAA,IACF;AAGA,IAAA,IAAI,MAAA,CAAO,aAAA,CAAc,GAAA,CAAI,OAAO,CAAA,EAAG;AACrC,MAAA,IAAA,CAAK,aAAa,MAAA,EAAQ;AAAA,QACxB,IAAA,EAAM,YAAA;AAAA,QACN,OAAA;AAAA,QACA,OAAA,EAAS,IAAA;AAAA,QACT,OAAA,EAAS;AAAA,OACV,CAAA;AACD,MAAA;AAAA,IACF;AAGA,IAAA,MAAM,cAAc,IAAA,CAAK,MAAA,CAAO,SAAA,CAAU,OAAA,EAAS,CAAC,IAAA,KAAc;AAChE,MAAA,IAAA,CAAK,aAAa,MAAA,EAAQ;AAAA,QACxB,IAAA,EAAM,OAAA;AAAA,QACN,OAAA;AAAA,QACA,IAAA;AAAA,QACA,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,OACnC,CAAA;AAAA,IACH,CAAC,CAAA;AAED,IAAA,MAAA,CAAO,cAAc,GAAA,CAAI,OAAA,EAAS,EAAE,OAAA,EAAS,aAAa,CAAA;AAE1D,IAAA,IAAA,CAAK,aAAa,MAAA,EAAQ;AAAA,MACxB,IAAA,EAAM,YAAA;AAAA,MACN,OAAA;AAAA,MACA,OAAA,EAAS;AAAA,KACV,CAAA;AAAA,EACH;AAAA,EAEQ,iBAAA,CAAkB,QAAkB,OAAA,EAAoB;AAC9D,IAAA,MAAM,UAAU,OAAA,CAAQ,OAAA;AACxB,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,IAAA,CAAK,aAAa,MAAA,EAAQ;AAAA,QACxB,IAAA,EAAM,OAAA;AAAA,QACN,KAAA,EAAO;AAAA,OACR,CAAA;AACD,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,YAAA,GAAe,MAAA,CAAO,aAAA,CAAc,GAAA,CAAI,OAAO,CAAA;AACrD,IAAA,IAAI,YAAA,EAAc;AAChB,MAAA,YAAA,CAAa,WAAA,EAAY;AACzB,MAAA,MAAA,CAAO,aAAA,CAAc,OAAO,OAAO,CAAA;AACnC,MAAA,IAAA,CAAK,aAAa,MAAA,EAAQ;AAAA,QACxB,IAAA,EAAM,cAAA;AAAA,QACN,OAAA;AAAA,QACA,OAAA,EAAS;AAAA,OACV,CAAA;AAAA,IACH,CAAA,MAAO;AACL,MAAA,IAAA,CAAK,aAAa,MAAA,EAAQ;AAAA,QACxB,IAAA,EAAM,cAAA;AAAA,QACN,OAAA;AAAA,QACA,OAAA,EAAS,KAAA;AAAA,QACT,OAAA,EAAS;AAAA,OACV,CAAA;AAAA,IACH;AAAA,EACF;AAAA,EAEQ,qBAAqB,MAAA,EAAwB;AACnD,IAAA,KAAA,MAAW,GAAG,YAAY,CAAA,IAAK,OAAO,aAAA,EAAe;AACnD,MAAA,YAAA,CAAa,WAAA,EAAY;AAAA,IAC3B;AACA,IAAA,MAAA,CAAO,cAAc,KAAA,EAAM;AAE3B,IAAA,IAAA,CAAK,aAAa,MAAA,EAAQ;AAAA,MACxB,IAAA,EAAM,iBAAA;AAAA,MACN,OAAA,EAAS;AAAA,KACV,CAAA;AAAA,EACH;AAAA,EAEQ,WAAW,MAAA,EAAwB;AACzC,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,MAAA,CAAO,WAAA,EAAY;AACzC,IAAA,IAAA,CAAK,aAAa,MAAA,EAAQ;AAAA,MACxB,IAAA,EAAM,UAAA;AAAA,MACN,QAAA;AAAA,MACA,OAAO,QAAA,CAAS;AAAA,KACjB,CAAA;AAAA,EACH;AAAA,EAEQ,iBAAiB,MAAA,EAAwB;AAE/C,IAAA,KAAA,MAAW,GAAG,YAAY,CAAA,IAAK,OAAO,aAAA,EAAe;AACnD,MAAA,YAAA,CAAa,WAAA,EAAY;AAAA,IAC3B;AAEA,IAAA,IAAA,CAAK,OAAA,CAAQ,MAAA,CAAO,MAAA,CAAO,EAAE,CAAA;AAAA,EAE/B;AAAA,EAEQ,YAAA,CAAa,QAAkB,IAAA,EAAiB;AACtD,IAAA,IAAI,MAAA,CAAO,EAAA,CAAG,UAAA,KAAeC,YAAA,CAAU,IAAA,EAAM;AAC3C,MAAA,MAAA,CAAO,EAAA,CAAG,IAAA,CAAK,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AAAA,IACrC;AAAA,EACF;AAAA,EAEQ,gBAAA,GAA2B;AACjC,IAAA,OAAO,CAAA,GAAA,EAAM,IAAA,CAAK,GAAA,EAAK,IAAI,IAAA,CAAK,MAAA,EAAO,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,CAAC,CAAC,CAAA,CAAA;AAAA,EACnE;AAAA,EAEQ,iBAAA,GAA0B;AAChC,IAAA,IAAI,CAAC,IAAA,CAAK,OAAA,CAAQ,YAAA,EAAc;AAEhC,IAAA,IAAA,CAAK,SAAA,GAAY,YAAY,MAAM;AACjC,MAAA,KAAA,MAAW,CAAC,EAAA,EAAI,MAAM,CAAA,IAAK,KAAK,OAAA,EAAS;AACvC,QAAA,IAAI,MAAA,CAAO,EAAA,CAAG,UAAA,KAAeA,YAAA,CAAU,IAAA,EAAM;AAE3C,UAAA,MAAM,wBAAwB,IAAA,CAAK,GAAA,EAAI,GAAI,MAAA,CAAO,aAAa,OAAA,EAAQ;AACvE,UAAA,IAAI,qBAAA,GAAyB,IAAA,CAAK,OAAA,CAAQ,YAAA,GAAgB,CAAA,EAAI;AAE5D,YAAA,MAAA,CAAO,GAAG,SAAA,EAAU;AACpB,YAAA,IAAA,CAAK,iBAAiB,MAAM,CAAA;AAC5B,YAAA;AAAA,UACF;AACA,UAAA,MAAA,CAAO,GAAG,IAAA,EAAK;AAAA,QACjB;AAAA,MACF;AAAA,IACF,CAAA,EAAG,IAAA,CAAK,OAAA,CAAQ,YAAY,CAAA;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA,EAMA,SAAA,CAAU,SAAiB,IAAA,EAAiB;AAC1C,IAAA,IAAA,CAAK,MAAA,CAAO,OAAA,CAAQ,OAAA,EAAS,IAAI,CAAA;AAAA,EACnC;AAAA,EAEA,mBAAA,GAAkC;AAChC,IAAA,OAAO,KAAA,CAAM,IAAA,CAAK,IAAA,CAAK,OAAA,CAAQ,QAAQ,CAAA;AAAA,EACzC;AAAA,EAEA,cAAA,GAAyB;AACvB,IAAA,OAAO,KAAK,OAAA,CAAQ,IAAA;AAAA,EACtB;AAAA,EAEA,oBAAA,GAA+B;AAC7B,IAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,IAAA,KAAA,MAAW,MAAA,IAAU,IAAA,CAAK,OAAA,CAAQ,MAAA,EAAO,EAAG;AAC1C,MAAA,KAAA,IAAS,OAAO,aAAA,CAAc,IAAA;AAAA,IAChC;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAAA,EAEA,MAAM,KAAA,GAAuB;AAC3B,IAAA,IAAI,KAAK,SAAA,EAAW;AAClB,MAAA,aAAA,CAAc,KAAK,SAAgB,CAAA;AAAA,IACrC;AAGA,IAAA,KAAA,MAAW,MAAA,IAAU,IAAA,CAAK,OAAA,CAAQ,MAAA,EAAO,EAAG;AAC1C,MAAA,MAAA,CAAO,EAAA,CAAG,KAAA,CAAM,IAAA,EAAM,sBAAsB,CAAA;AAAA,IAC9C;AAGA,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY;AAC9B,MAAA,IAAA,CAAK,GAAA,CAAI,MAAM,MAAM;AAEnB,QAAA,OAAA,EAAQ;AAAA,MACV,CAAC,CAAA;AAAA,IACH,CAAC,CAAA;AAAA,EACH;AAAA,EAEA,SAAA,GAA6B;AAC3B,IAAA,OAAO,IAAA,CAAK,GAAA;AAAA,EACd;AACF;AAMO,SAAS,eAAe,OAAA,EAAwC;AACrE,EAAA,OAAO,IAAI,aAAa,OAAO,CAAA;AACjC","file":"chunk-EEJUFDMF.cjs","sourcesContent":["// ============================================================================\n// Pub/Sub Event Emitter\n// ============================================================================\n\nexport type EventHandler = (data: any) => void | Promise<void>;\n\nexport class PubSub {\n  private channels: Map<string, Set<EventHandler>> = new Map();\n  private maxListeners: number;\n\n  constructor(maxListeners = 100) {\n    this.maxListeners = maxListeners;\n  }\n\n  subscribe(channel: string, handler: EventHandler): () => void {\n    if (!this.channels.has(channel)) {\n      this.channels.set(channel, new Set());\n    }\n\n    const handlers = this.channels.get(channel)!;\n    if (handlers.size >= this.maxListeners) {\n      throw new Error(`Max listeners (${this.maxListeners}) reached for channel \"${channel}\"`);\n    }\n\n    handlers.add(handler);\n\n    // Return unsubscribe function\n    return () => {\n      handlers.delete(handler);\n      if (handlers.size === 0) {\n        this.channels.delete(channel);\n      }\n    };\n  }\n\n  publish(channel: string, data: any): void {\n    const handlers = this.channels.get(channel);\n    if (handlers) {\n      for (const handler of handlers) {\n        try {\n          const result = handler(data);\n          if (result instanceof Promise) {\n            result.catch((err) => {\n              console.error(`[PubSub] Error in handler for channel \"${channel}\":`, err);\n            });\n          }\n        } catch (err) {\n          console.error(`[PubSub] Error in handler for channel \"${channel}\":`, err);\n        }\n      }\n    }\n  }\n\n  hasSubscribers(channel: string): boolean {\n    return this.channels.has(channel) && this.channels.get(channel)!.size > 0;\n  }\n\n  getSubscriberCount(channel: string): number {\n    return this.channels.get(channel)?.size || 0;\n  }\n\n  getChannels(): string[] {\n    return Array.from(this.channels.keys());\n  }\n\n  clear(): void {\n    this.channels.clear();\n  }\n}\n\n// ============================================================================\n// Kyro-specific Event Types\n// ============================================================================\n\nexport interface KyroEvent {\n  type: 'create' | 'update' | 'delete';\n  collection: string;\n  doc?: any;\n  originalDoc?: any;\n  id?: string;\n  tenantID?: string;\n  timestamp: string;\n  user?: any;\n}\n\n// ============================================================================\n// Kyro Pub/Sub with Hook Integration\n// ============================================================================\n\nexport class KyroPubSub extends PubSub {\n  private registry: any;\n\n  constructor(registry: any, maxListeners = 100) {\n    super(maxListeners);\n    this.registry = registry;\n  }\n\n  // Publish collection-level events\n  publishCollectionEvent(collection: string, event: KyroEvent): void {\n    // Publish to collection channel\n    this.publish(`collection:${collection}`, event);\n\n    // Publish to global events channel\n    this.publish('events:collection', event);\n\n    // Publish to tenant-specific channel if scoped\n    if (event.tenantID) {\n      this.publish(`tenant:${event.tenantID}:collection:${collection}`, event);\n      this.publish(`tenant:${event.tenantID}:events`, event);\n    }\n\n    // Publish to type-specific channel\n    this.publish(`collection:${collection}:${event.type}`, event);\n  }\n\n  // Subscribe to a collection\n  subscribeToCollection(collection: string, handler: EventHandler): () => void {\n    return this.subscribe(`collection:${collection}`, handler);\n  }\n\n  // Subscribe to a specific event type on a collection\n  subscribeToCollectionEvent(\n    collection: string,\n    eventType: 'create' | 'update' | 'delete',\n    handler: EventHandler\n  ): () => void {\n    return this.subscribe(`collection:${collection}:${eventType}`, handler);\n  }\n\n  // Subscribe to tenant-scoped events\n  subscribeToTenant(tenantID: string, handler: EventHandler): () => void {\n    return this.subscribe(`tenant:${tenantID}:events`, handler);\n  }\n\n  // Subscribe to tenant + collection events\n  subscribeToTenantCollection(\n    tenantID: string,\n    collection: string,\n    handler: EventHandler\n  ): () => void {\n    return this.subscribe(`tenant:${tenantID}:collection:${collection}`, handler);\n  }\n\n  // Subscribe to all collection events\n  subscribeToAllCollections(handler: EventHandler): () => void {\n    return this.subscribe('events:collection', handler);\n  }\n\n  // Create hooks for afterChange/afterDelete\n  createAfterChangeHook(collection: string) {\n    return async (args: any) => {\n      this.publishCollectionEvent(collection, {\n        type: args.operation === 'create' ? 'create' : 'update',\n        collection,\n        doc: args.doc,\n        originalDoc: args.originalDoc,\n        id: args.id || args.doc?.id,\n        tenantID: args.tenantID,\n        timestamp: new Date().toISOString(),\n        user: args.user,\n      });\n    };\n  }\n\n  createAfterDeleteHook(collection: string) {\n    return async (args: any) => {\n      this.publishCollectionEvent(collection, {\n        type: 'delete',\n        collection,\n        doc: args.doc,\n        originalDoc: args.originalDoc,\n        id: args.id || args.doc?.id,\n        tenantID: args.tenantID,\n        timestamp: new Date().toISOString(),\n        user: args.user,\n      });\n    };\n  }\n\n  // Auto-register hooks for all collections\n  autoRegisterHooks(): void {\n    const collections = this.registry.getCollections();\n    for (const collection of collections) {\n      const config = this.registry.getCollection(collection.slug);\n      if (config) {\n        if (!config.hooks) config.hooks = {};\n        if (!config.hooks.afterChange) config.hooks.afterChange = [];\n        if (!config.hooks.afterDelete) config.hooks.afterDelete = [];\n\n        config.hooks.afterChange.push(this.createAfterChangeHook(collection.slug));\n        config.hooks.afterDelete.push(this.createAfterDeleteHook(collection.slug));\n      }\n    }\n  }\n}\n","import { WebSocketServer, WebSocket } from 'ws';\nimport type { KyroPubSub, KyroEvent } from './pubsub.js';\n\n// ============================================================================\n// WebSocket Server\n// ============================================================================\n\nexport interface WSServerOptions {\n  port?: number;\n  pubsub: KyroPubSub;\n  maxConnections?: number;\n  pingInterval?: number;\n  requireAuth?: boolean;\n  verifyToken?: (token: string) => Promise<any>;\n}\n\nexport interface WSSubscription {\n  channel: string;\n  unsubscribe: () => void;\n}\n\nexport interface WSClient {\n  id: string;\n  ws: WebSocket;\n  subscriptions: Map<string, WSSubscription>;\n  authenticated: boolean;\n  user?: any;\n  tenantID?: string;\n  connectedAt: Date;\n  lastActivity: Date;\n}\n\nexport class KyroWSServer {\n  private wss: WebSocketServer;\n  private clients: Map<string, WSClient> = new Map();\n  private pubsub: KyroPubSub;\n  private options: WSServerOptions;\n  private pingTimer?: NodeJS.Timer;\n\n  constructor(options: WSServerOptions) {\n    this.options = options;\n    this.pubsub = options.pubsub;\n\n    this.wss = new WebSocketServer({\n      port: options.port || 8080,\n    });\n\n    this.setupServer();\n    this.startPingInterval();\n  }\n\n  private setupServer(): void {\n    this.wss.on('connection', (ws: WebSocket, req: any) => {\n      const clientId = this.generateClientId();\n\n      if (this.options.maxConnections && this.clients.size >= this.options.maxConnections) {\n        ws.close(1013, 'Server at capacity');\n        return;\n      }\n\n      const client: WSClient = {\n        id: clientId,\n        ws,\n        subscriptions: new Map(),\n        authenticated: false,\n        connectedAt: new Date(),\n        lastActivity: new Date(),\n      };\n\n      this.clients.set(clientId, client);\n\n\n      // Send welcome message\n      this.sendToClient(client, {\n        type: 'connected',\n        clientId,\n        timestamp: new Date().toISOString(),\n      });\n\n      // Handle messages\n      ws.on('message', (data: Buffer) => {\n        this.handleMessage(client, data);\n      });\n\n      // Handle errors\n      ws.on('error', (error: Error) => {\n        console.error(`[WS] Client error ${clientId}:`, error);\n      });\n\n      // Handle close\n      ws.on('close', () => {\n        this.handleDisconnect(client);\n      });\n\n      // Handle pong\n      ws.on('pong', () => {\n        client.lastActivity = new Date();\n      });\n    });\n\n    this.wss.on('error', (error: Error) => {\n      console.error('[WS] Server error:', error);\n    });\n  }\n\n  private handleMessage(client: WSClient, data: Buffer): void {\n    client.lastActivity = new Date();\n\n    let message: any;\n    try {\n      message = JSON.parse(data.toString());\n    } catch {\n      this.sendToClient(client, {\n        type: 'error',\n        error: 'Invalid JSON',\n      });\n      return;\n    }\n\n    switch (message.type) {\n      case 'authenticate':\n        this.handleAuthenticate(client, message);\n        break;\n      case 'subscribe':\n        this.handleSubscribe(client, message);\n        break;\n      case 'unsubscribe':\n        this.handleUnsubscribe(client, message);\n        break;\n      case 'unsubscribeAll':\n        this.handleUnsubscribeAll(client);\n        break;\n      case 'list':\n        this.handleList(client);\n        break;\n      case 'ping':\n        this.sendToClient(client, { type: 'pong', timestamp: new Date().toISOString() });\n        break;\n      default:\n        this.sendToClient(client, {\n          type: 'error',\n          error: `Unknown message type: ${message.type}`,\n        });\n    }\n  }\n\n  private async handleAuthenticate(client: WSClient, message: any): Promise<void> {\n    if (!this.options.requireAuth) {\n      client.authenticated = true;\n      this.sendToClient(client, {\n        type: 'authenticated',\n        success: true,\n      });\n      return;\n    }\n\n    if (!this.options.verifyToken) {\n      client.authenticated = true;\n      this.sendToClient(client, {\n        type: 'authenticated',\n        success: true,\n      });\n      return;\n    }\n\n    try {\n      const user = await this.options.verifyToken(message.token);\n      client.authenticated = true;\n      client.user = user;\n      client.tenantID = user.tenantID;\n      this.sendToClient(client, {\n        type: 'authenticated',\n        success: true,\n        user: { id: user.id, email: user.email },\n      });\n    } catch (error: any) {\n      this.sendToClient(client, {\n        type: 'authenticated',\n        success: false,\n        error: error.message,\n      });\n    }\n  }\n\n  private handleSubscribe(client: WSClient, message: any): void {\n    if (this.options.requireAuth && !client.authenticated) {\n      this.sendToClient(client, {\n        type: 'error',\n        error: 'Not authenticated',\n      });\n      return;\n    }\n\n    const channel = message.channel;\n    if (!channel) {\n      this.sendToClient(client, {\n        type: 'error',\n        error: 'Channel is required',\n      });\n      return;\n    }\n\n    // Check if already subscribed\n    if (client.subscriptions.has(channel)) {\n      this.sendToClient(client, {\n        type: 'subscribed',\n        channel,\n        success: true,\n        message: 'Already subscribed',\n      });\n      return;\n    }\n\n    // Subscribe to channel\n    const unsubscribe = this.pubsub.subscribe(channel, (data: any) => {\n      this.sendToClient(client, {\n        type: 'event',\n        channel,\n        data,\n        timestamp: new Date().toISOString(),\n      });\n    });\n\n    client.subscriptions.set(channel, { channel, unsubscribe });\n\n    this.sendToClient(client, {\n      type: 'subscribed',\n      channel,\n      success: true,\n    });\n  }\n\n  private handleUnsubscribe(client: WSClient, message: any): void {\n    const channel = message.channel;\n    if (!channel) {\n      this.sendToClient(client, {\n        type: 'error',\n        error: 'Channel is required',\n      });\n      return;\n    }\n\n    const subscription = client.subscriptions.get(channel);\n    if (subscription) {\n      subscription.unsubscribe();\n      client.subscriptions.delete(channel);\n      this.sendToClient(client, {\n        type: 'unsubscribed',\n        channel,\n        success: true,\n      });\n    } else {\n      this.sendToClient(client, {\n        type: 'unsubscribed',\n        channel,\n        success: false,\n        message: 'Not subscribed',\n      });\n    }\n  }\n\n  private handleUnsubscribeAll(client: WSClient): void {\n    for (const [, subscription] of client.subscriptions) {\n      subscription.unsubscribe();\n    }\n    client.subscriptions.clear();\n\n    this.sendToClient(client, {\n      type: 'unsubscribedAll',\n      success: true,\n    });\n  }\n\n  private handleList(client: WSClient): void {\n    const channels = this.pubsub.getChannels();\n    this.sendToClient(client, {\n      type: 'channels',\n      channels,\n      count: channels.length,\n    });\n  }\n\n  private handleDisconnect(client: WSClient): void {\n    // Unsubscribe from all channels\n    for (const [, subscription] of client.subscriptions) {\n      subscription.unsubscribe();\n    }\n\n    this.clients.delete(client.id);\n\n  }\n\n  private sendToClient(client: WSClient, data: any): void {\n    if (client.ws.readyState === WebSocket.OPEN) {\n      client.ws.send(JSON.stringify(data));\n    }\n  }\n\n  private generateClientId(): string {\n    return `ws_${Date.now()}_${Math.random().toString(36).slice(2, 9)}`;\n  }\n\n  private startPingInterval(): void {\n    if (!this.options.pingInterval) return;\n\n    this.pingTimer = setInterval(() => {\n      for (const [id, client] of this.clients) {\n        if (client.ws.readyState === WebSocket.OPEN) {\n          // Check if client responded to last ping\n          const timeSinceLastActivity = Date.now() - client.lastActivity.getTime();\n          if (timeSinceLastActivity > (this.options.pingInterval! * 3)) {\n\n            client.ws.terminate();\n            this.handleDisconnect(client);\n            continue;\n          }\n          client.ws.ping();\n        }\n      }\n    }, this.options.pingInterval);\n  }\n\n  // ============================================================================\n  // Public API\n  // ============================================================================\n\n  broadcast(channel: string, data: any): void {\n    this.pubsub.publish(channel, data);\n  }\n\n  getConnectedClients(): WSClient[] {\n    return Array.from(this.clients.values());\n  }\n\n  getClientCount(): number {\n    return this.clients.size;\n  }\n\n  getSubscriptionCount(): number {\n    let count = 0;\n    for (const client of this.clients.values()) {\n      count += client.subscriptions.size;\n    }\n    return count;\n  }\n\n  async close(): Promise<void> {\n    if (this.pingTimer) {\n      clearInterval(this.pingTimer as any);\n    }\n\n    // Close all client connections\n    for (const client of this.clients.values()) {\n      client.ws.close(1001, 'Server shutting down');\n    }\n\n    // Close server\n    return new Promise((resolve) => {\n      this.wss.close(() => {\n\n        resolve();\n      });\n    });\n  }\n\n  getServer(): WebSocketServer {\n    return this.wss;\n  }\n}\n\n// ============================================================================\n// Factory\n// ============================================================================\n\nexport function createWSServer(options: WSServerOptions): KyroWSServer {\n  return new KyroWSServer(options);\n}\n"]}

package/dist/{chunk-2HZRBATX.cjs → chunk-FSKONGCX.cjs}

@@ -249,5 +249,5 @@ exports.isUploadField = isUploadField;
 exports.normalizeRichTextValue = normalizeRichTextValue;
 exports.renderRichText = renderRichText;
 exports.richTextStyles = richTextStyles;
-//# sourceMappingURL=chunk-2HZRBATX.cjs.map
-//# sourceMappingURL=chunk-2HZRBATX.cjs.map
+//# sourceMappingURL=chunk-FSKONGCX.cjs.map
+//# sourceMappingURL=chunk-FSKONGCX.cjs.map

package/dist/chunk-FSKONGCX.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/fields/types.ts","../src/fields/richtext.ts"],"names":["StarterKit","Link","Image","TextAlign","Underline","Highlight","TaskList","TaskItem","TextStyle","Color","html","generateHTML"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAoVO,SAAS,YAAY,KAAA,EAAkC;AAC5D,EAAA,OAAO,MAAM,IAAA,KAAS,MAAA;AACxB;AAEO,SAAS,cAAc,KAAA,EAAoC;AAChE,EAAA,OAAO,MAAM,IAAA,KAAS,QAAA;AACxB;AAEO,SAAS,oBAAoB,KAAA,EAA0C;AAC5E,EAAA,OAAO,MAAM,IAAA,KAAS,cAAA;AACxB;AAEO,SAAS,aAAa,KAAA,EAAmC;AAC9D,EAAA,OAAO,MAAM,IAAA,KAAS,OAAA;AACxB;AAEO,SAAS,aAAa,KAAA,EAAmC;AAC9D,EAAA,OAAO,MAAM,IAAA,KAAS,OAAA;AACxB;AAEO,SAAS,cAAc,KAAA,EAAoC;AAChE,EAAA,OAAO,MAAM,IAAA,KAAS,QAAA;AACxB;AAEO,SAAS,cAAc,KAAA,EAAoC;AAChE,EAAA,OAAO,MAAM,IAAA,KAAS,QAAA;AACxB;AAEO,SAAS,aAAa,KAAA,EAAmC;AAC9D,EAAA,OAAO,MAAM,IAAA,KAAS,OAAA;AACxB;AAEO,SAAS,gBAAgB,KAAA,EAAsC;AACpE,EAAA,OAAO,MAAM,IAAA,KAAS,UAAA;AACxB;AAEO,SAAS,cAAc,KAAA,EAAoC;AAChE,EAAA,OAAO,MAAM,IAAA,KAAS,QAAA;AACxB;AAEO,SAAS,cACd,KAAA,EACkD;AAClD,EAAA,OACE,MAAM,IAAA,KAAS,KAAA,IACf,MAAM,IAAA,KAAS,aAAA,IACf,MAAM,IAAA,KAAS,MAAA;AAEnB;AAMO,IAAM,qBAAA,GAAwB;AAAA,EACnC,MAAA;AAAA,EACA,QAAA;AAAA,EACA,UAAA;AAAA,EACA,MAAA;AAAA,EACA,OAAA;AAAA,EACA,UAAA;AAAA,EACA,UAAA;AAAA,EACA,QAAA;AAAA,EACA,OAAA;AAAA,EACA;AACF;AAEO,IAAM,mBAAA,GAAsB;AAAA,EACjC,UAAA;AAAA,EACA,MAAA;AAAA,EACA,MAAA;AAAA,EACA,QAAA;AAAA,EACA,OAAA;AAAA,EACA;AACF;AAEO,IAAM,sBAAA,GAAyB;AAAA,EACpC,cAAA;AAAA,EACA,OAAA;AAAA,EACA,OAAA;AAAA,EACA;AACF;AAEO,IAAM,kBAAA,GAAqB,CAAC,KAAA,EAAO,aAAA,EAAe,MAAM;AAExD,IAAM,eAAA,GAAkB;AAAA,EAC7B,GAAG,qBAAA;AAAA,EACH,GAAG,mBAAA;AAAA,EACH,GAAG,sBAAA;AAAA,EACH,GAAG;AACL;AAMO,SAAS,6BAAA,CACd,IAAA,EACA,UAAA,EACA,OAAA,EACmB;AACnB,EAAA,OAAO;AAAA,IACL,IAAA;AAAA,IACA,IAAA,EAAM,cAAA;AAAA,IACN,UAAA;AAAA,IACA,GAAG,OAAA;AAAA,IACH,QAAA,EAAU,SAAS,QAAA,IAAY;AAAA,GACjC;AACF;ACpbO,IAAM,cAAA,GAAiB;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA,CAyF5B,IAAA;AAEF,IAAM,UAAA,GAAa;AAAA,EACjBA,2BAAA;AAAA,EACAC,sBAAK,SAAA,CAAU;AAAA,IACb,WAAA,EAAa;AAAA,GACd,CAAA;AAAA,EACDC,sBAAA;AAAA,EACAC,2BAAU,SAAA,CAAU;AAAA,IAClB,KAAA,EAAO,CAAC,SAAA,EAAW,WAAW;AAAA,GAC/B,CAAA;AAAA,EACDC,0BAAA;AAAA,EACAC,2BAAU,SAAA,CAAU;AAAA,IAClB,UAAA,EAAY;AAAA,GACb,CAAA;AAAA,EACDC,yBAAA;AAAA,EACAC,0BAAS,SAAA,CAAU;AAAA,IACjB,MAAA,EAAQ;AAAA,GACT,CAAA;AAAA,EACDC,4BAAA;AAAA,EACAC;AACF,CAAA;AAEO,SAAS,uBAA0B,KAAA,EAAa;AAErD,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,IAAA,EAAM;AAC/C,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,EAAC;AACV;AAEO,SAAS,eAAe,KAAA,EAAwB;AACrD,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,IAAA,EAAM;AAC/C,IAAA,OAAO,EAAA;AAAA,EACT;AAEA,EAAA,IAAI;AACF,IAAA,MAAMC,MAAA,GAAOC,iBAAA,CAAa,KAAA,EAA8B,UAAU,CAAA;AAClE,IAAA,OAAO,8BAA8BD,MAAI,CAAA,MAAA,CAAA;AAAA,EAC3C,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,+BAA+B,KAAK,CAAA;AAClD,IAAA,OAAO,EAAA;AAAA,EACT;AACF","file":"chunk-FSKONGCX.cjs","sourcesContent":["\n\n// ============================================================================\n// Base Field Interface\n// ============================================================================\n\n/**\n * Serializable condition for conditional field visibility.\n * Unlike function conditions, these survive JSON serialization\n * and can be used in admin configs that are built at compile time.\n */\nexport interface DeclarativeCondition {\n  /** The field name to evaluate (resolved from root form data) */\n  field: string;\n  /** Show the field when the target field equals this value */\n  equals?: string | number | boolean;\n  /** Show the field when the target field does NOT equal this value */\n  notEquals?: string | number | boolean;\n  /** Show the field when the target field's value is one of these */\n  in?: (string | number | boolean)[];\n}\n\nexport interface FieldAdmin {\n  description?: string;\n  placeholder?: string;\n  readOnly?: boolean | ((\n    data: Record<string, any>,\n    siblingData: Record<string, any>,\n  ) => boolean);\n  hidden?: boolean | ((\n    data: Record<string, any>,\n    siblingData: Record<string, any>,\n  ) => boolean);\n  width?: string;\n  position?: \"sidebar\" | \"main\";\n  autoGenerate?: string;\n  action?: string;\n  method?: string;\n  inline?: boolean;\n  pickerMode?: \"drawer\" | \"dropdown\";\n  condition?:\n    | ((\n        data: Record<string, any>,\n        siblingData: Record<string, any>,\n      ) => boolean)\n    | DeclarativeCondition;\n}\n\nexport interface BaseField {\n  name: string;\n  label?: string;\n  required?: boolean;\n  unique?: boolean;\n  indexed?: boolean;\n  defaultValue?: any;\n  admin?: FieldAdmin;\n  validate?: (\n    value: any,\n    options: ValidateOptions,\n  ) => string | true | Promise<string | true>;\n  hooks?: {\n    beforeValidate?: Hook[];\n    beforeChange?: Hook[];\n    afterChange?: Hook[];\n    afterRead?: Hook[];\n  };\n}\n\nexport interface ValidateOptions {\n  data?: Record<string, any>;\n  siblingData?: Record<string, any>;\n  user?: any;\n  operation?: string;\n  required?: boolean;\n}\n\nexport type Hook = (args: any) => Promise<any> | any;\n\n// ============================================================================\n// Primitive Fields\n// ============================================================================\n\nexport type TextFieldVariant = \"text\" | \"email\" | \"password\" | \"url\" | \"id\";\n\nexport interface TextField extends BaseField {\n  type: \"text\";\n  variant?: TextFieldVariant;\n  minLength?: number;\n  maxLength?: number;\n  pattern?: string;\n  hasMany?: boolean;\n  localized?: boolean;\n}\n\nexport interface NumberField extends BaseField {\n  type: \"number\";\n  min?: number;\n  max?: number;\n  step?: number;\n  integer?: boolean;\n  hasMany?: boolean;\n}\n\nexport interface CheckboxField extends BaseField {\n  type: \"checkbox\";\n}\n\nexport interface DateField extends BaseField {\n  type: \"date\";\n  minDate?: string;\n  maxDate?: string;\n  time?: boolean;\n}\n\nexport interface EmailField extends BaseField {\n  type: \"email\";\n}\n\nexport interface PasswordField extends BaseField {\n  type: \"password\";\n}\n\nexport interface TextareaField extends BaseField {\n  type: \"textarea\";\n  minLength?: number;\n  maxLength?: number;\n  rows?: number;\n  localized?: boolean;\n}\n\nexport interface SelectField extends BaseField {\n  type: \"select\";\n  options?: Array<{ label: string; value: string }>;\n  dynamicOptions?: string;\n  hasMany?: boolean;\n  defaultValue?: string | string[];\n}\n\nexport interface RadioField extends BaseField {\n  type: \"radio\";\n  options: Array<{ label: string; value: string }>;\n  defaultValue?: string;\n}\n\nexport interface ColorField extends BaseField {\n  type: \"color\";\n  format?: \"hex\" | \"rgb\" | \"hsl\";\n  defaultValue?: string;\n}\n\nexport interface ImageField extends BaseField {\n  type: \"image\";\n  minCount?: number;\n  maxCount?: number;\n  allowedTypes?: string[];\n  maxSize?: number;\n}\n\n// ============================================================================\n// Complex Fields\n// ============================================================================\n\nexport type RichTextBlock = Record<string, any>; // TipTap JSONContent\n\nexport interface RichTextField extends BaseField {\n  type: \"richtext\";\n  defaultValue?: Record<string, any>;\n  localized?: boolean;\n}\n\nexport interface JSONField extends BaseField {\n  type: \"json\";\n  defaultValue?: Record<string, any>;\n}\n\nexport interface CodeField extends BaseField {\n  type: \"code\";\n  language?: string;\n  defaultValue?: string;\n}\n\nexport interface UploadField extends BaseField {\n  type: \"upload\";\n  relationTo: string;\n  hasMany?: boolean;\n  maxDepth?: number;\n  defaultValue?: string;\n}\n\nexport interface MarkdownField extends BaseField {\n  type: \"markdown\";\n  localized?: boolean;\n  defaultValue?: string;\n}\n\n// ============================================================================\n// Relational Fields\n// ============================================================================\n\nexport interface RelationshipField extends BaseField {\n  type: \"relationship\";\n  relationTo: string | string[];\n  hasMany?: boolean;\n  maxDepth?: number;\n  filterOptions?: (args: { data: any; user: any }) => Record<string, any>;\n  defaultValue?: string | string[];\n}\n\nexport interface ArrayField extends BaseField {\n  type: \"array\";\n  fields: Field[];\n  minRows?: number;\n  maxRows?: number;\n  labels?: { singular?: string; plural?: string };\n  defaultValue?: Record<string, any>[];\n}\n\nexport interface ListField extends BaseField {\n  type: \"list\";\n  defaultValue?: string[];\n}\n\nexport interface GroupField extends BaseField {\n  type: \"group\";\n  fields: Field[];\n  defaultValue?: Record<string, any>;\n}\n\nexport interface BlockImage {\n  url: string;\n  alt?: string;\n}\n\nexport interface BlockAdmin {\n  group?: string;\n  description?: string;\n  images?: {\n    icon?: BlockImage | string;\n    thumbnail?: BlockImage | string;\n  };\n}\n\nexport interface Block {\n  slug: string;\n  label: string;\n  fields: Field[];\n  imageURL?: string;\n  admin?: BlockAdmin;\n}\n\nexport interface BlocksField extends BaseField {\n  type: \"blocks\";\n  blocks?: Block[];\n  minRows?: number;\n  maxRows?: number;\n  defaultValue?: Array<{ blockType: string; [key: string]: any }>;\n}\n\nexport interface RowField extends Omit<BaseField, \"name\"> {\n  type: \"row\";\n  fields: Field[];\n  name?: string;\n}\n\nexport interface CollapsibleField extends Omit<BaseField, \"name\"> {\n  type: \"collapsible\";\n  fields: Field[];\n  label: string;\n  name?: string;\n}\n\nexport interface TabsField extends Omit<BaseField, \"name\"> {\n  type: \"tabs\";\n  tabs: Array<{\n    label: string;\n    fields: Field[];\n    name?: string;\n  }>;\n  name?: string;\n}\n\nexport interface ButtonField extends BaseField {\n  type: \"button\";\n  label: string;\n  action?: string;\n  method?: string;\n  inline?: boolean;\n}\n\nexport interface ActionField extends BaseField {\n  type: \"action\";\n  label: string;\n  action?: string;\n  method?: string;\n  inline?: boolean;\n}\n\nexport interface SecretField extends BaseField {\n  type: \"secret\";\n}\n\n// ============================================================================\n// Union Type\n// ============================================================================\n\nexport type Field =\n  | TextField\n  | NumberField\n  | CheckboxField\n  | DateField\n  | EmailField\n  | PasswordField\n  | TextareaField\n  | SelectField\n  | RadioField\n  | ColorField\n  | ImageField\n  | RichTextField\n  | JSONField\n  | CodeField\n  | UploadField\n  | MarkdownField\n  | RelationshipField\n  | ArrayField\n  | ListField\n  | GroupField\n  | BlocksField\n  | RowField\n  | CollapsibleField\n  | TabsField\n  | ButtonField\n  | ActionField\n  | SecretField;\n\nexport type FieldType = Field[\"type\"];\n\n// ============================================================================\n// Field Type Guards\n// ============================================================================\n\nexport function isTextField(field: Field): field is TextField {\n  return field.type === \"text\";\n}\n\nexport function isNumberField(field: Field): field is NumberField {\n  return field.type === \"number\";\n}\n\nexport function isRelationshipField(field: Field): field is RelationshipField {\n  return field.type === \"relationship\";\n}\n\nexport function isArrayField(field: Field): field is ArrayField {\n  return field.type === \"array\";\n}\n\nexport function isGroupField(field: Field): field is GroupField {\n  return field.type === \"group\";\n}\n\nexport function isBlocksField(field: Field): field is BlocksField {\n  return field.type === \"blocks\";\n}\n\nexport function isUploadField(field: Field): field is UploadField {\n  return field.type === \"upload\";\n}\n\nexport function isImageField(field: Field): field is ImageField {\n  return field.type === \"image\";\n}\n\nexport function isRichTextField(field: Field): field is RichTextField {\n  return field.type === \"richtext\";\n}\n\nexport function isSelectField(field: Field): field is SelectField {\n  return field.type === \"select\";\n}\n\nexport function isLayoutField(\n  field: Field,\n): field is RowField | CollapsibleField | TabsField {\n  return (\n    field.type === \"row\" ||\n    field.type === \"collapsible\" ||\n    field.type === \"tabs\"\n  );\n}\n\n// ============================================================================\n// Field Type List\n// ============================================================================\n\nexport const PRIMITIVE_FIELD_TYPES = [\n  \"text\",\n  \"number\",\n  \"checkbox\",\n  \"date\",\n  \"email\",\n  \"password\",\n  \"textarea\",\n  \"select\",\n  \"radio\",\n  \"color\",\n] as const;\n\nexport const COMPLEX_FIELD_TYPES = [\n  \"richtext\",\n  \"json\",\n  \"code\",\n  \"upload\",\n  \"image\",\n  \"markdown\",\n] as const;\n\nexport const RELATIONAL_FIELD_TYPES = [\n  \"relationship\",\n  \"array\",\n  \"group\",\n  \"blocks\",\n] as const;\n\nexport const LAYOUT_FIELD_TYPES = [\"row\", \"collapsible\", \"tabs\"] as const;\n\nexport const ALL_FIELD_TYPES = [\n  ...PRIMITIVE_FIELD_TYPES,\n  ...COMPLEX_FIELD_TYPES,\n  ...RELATIONAL_FIELD_TYPES,\n  ...LAYOUT_FIELD_TYPES,\n] as const;\n\n// ============================================================================\n// Field Factory Functions\n// ============================================================================\n\nexport function createRelationshipFieldConfig(\n  name: string,\n  relationTo: string | string[],\n  options?: Partial<Omit<RelationshipField, \"type\" | \"name\" | \"relationTo\">>,\n): RelationshipField {\n  return {\n    name,\n    type: \"relationship\",\n    relationTo,\n    ...options,\n    required: options?.required ?? false,\n  };\n}\n","import { generateHTML } from \"@tiptap/html\";\nimport StarterKit from \"@tiptap/starter-kit\";\nimport Link from \"@tiptap/extension-link\";\nimport Image from \"@tiptap/extension-image\";\nimport TextAlign from \"@tiptap/extension-text-align\";\nimport Underline from \"@tiptap/extension-underline\";\nimport Highlight from \"@tiptap/extension-highlight\";\nimport TaskList from \"@tiptap/extension-task-list\";\nimport TaskItem from \"@tiptap/extension-task-item\";\nimport { TextStyle } from \"@tiptap/extension-text-style\";\nimport Color from \"@tiptap/extension-color\";\n\nexport const richTextStyles = `\n.kyro-richtext {\n  color: inherit;\n  line-height: 1.7;\n}\n\n.kyro-richtext > *:first-child {\n  margin-top: 0;\n}\n\n.kyro-richtext > *:last-child {\n  margin-bottom: 0;\n}\n\n.kyro-richtext p,\n.kyro-richtext ul,\n.kyro-richtext ol,\n.kyro-richtext blockquote,\n.kyro-richtext pre {\n  margin: 0 0 1rem;\n}\n\n.kyro-richtext h1,\n.kyro-richtext h2,\n.kyro-richtext h3,\n.kyro-richtext h4,\n.kyro-richtext h5,\n.kyro-richtext h6 {\n  margin: 0 0 0.75rem;\n  line-height: 1.2;\n}\n\n.kyro-richtext ul,\n.kyro-richtext ol {\n  padding-left: 1.5rem;\n}\n\n.kyro-richtext blockquote {\n  border-left: 4px solid rgba(148, 163, 184, 0.5);\n  margin-left: 0;\n  padding-left: 1rem;\n  font-style: italic;\n}\n\n.kyro-richtext pre {\n  overflow-x: auto;\n  border-radius: 0.75rem;\n  background: rgba(15, 23, 42, 0.92);\n  color: #f8fafc;\n  padding: 1rem;\n}\n\n.kyro-richtext code {\n  font-family: ui-monospace, SFMono-Regular, Menlo, monospace;\n}\n\n.kyro-richtext img {\n  display: block;\n  max-width: 100%;\n  height: auto;\n  border-radius: 0.75rem;\n}\n\n.kyro-richtext ul[data-type=\"taskList\"] {\n  list-style: none;\n  padding: 0;\n}\n\n.kyro-richtext li[data-type=\"taskItem\"] {\n  display: flex;\n  align-items: flex-start;\n  gap: 0.5rem;\n}\n\n.kyro-richtext li[data-type=\"taskItem\"] > label {\n  user-select: none;\n  pointer-events: none;\n  margin-top: 0.2rem;\n}\n\n.kyro-richtext li[data-type=\"taskItem\"] > div {\n  flex: 1;\n}\n\n.kyro-richtext mark {\n  background-color: #fef08a;\n  border-radius: 0.25rem;\n  padding: 0.125rem 0.25rem;\n}\n`.trim();\n\nconst extensions = [\n  StarterKit,\n  Link.configure({\n    openOnClick: false,\n  }),\n  Image,\n  TextAlign.configure({\n    types: [\"heading\", \"paragraph\"],\n  }),\n  Underline,\n  Highlight.configure({\n    multicolor: true,\n  }),\n  TaskList,\n  TaskItem.configure({\n    nested: true,\n  }),\n  TextStyle,\n  Color,\n];\n\nexport function normalizeRichTextValue<T>(value: T): T {\n  // TipTap JSON is already standard JSON, so we just ensure it's an object.\n  if (typeof value === \"object\" && value !== null) {\n    return value;\n  }\n  return {} as T;\n}\n\nexport function renderRichText(value: unknown): string {\n  if (typeof value !== \"object\" || value === null) {\n    return \"\";\n  }\n  \n  try {\n    const html = generateHTML(value as Record<string, any>, extensions);\n    return `<div class=\"kyro-richtext\">${html}</div>`;\n  } catch (error) {\n    console.error(\"Failed to render rich text:\", error);\n    return \"\";\n  }\n}\n"]}

package/dist/{chunk-P2HKJ7P5.js → chunk-GAAHG2Z4.js}

@@ -1,4 +1,4 @@
-import { PasswordPolicy, EmailTransport } from './chunk-TXSZFA4G.js';
+import { PasswordPolicy, EmailTransport } from './chunk-6UNONDW7.js';
 import { SQLiteAuthAdapter } from './chunk-Q72BOAPK.js';
 
 // src/auth/bootstrap.ts
@@ -149,5 +149,5 @@ async function bootstrapWithRetry(config, maxRetries = 3, retryDelayMs = 2e3) {
 }
 
 export { autoBootstrap, bootstrapAdmin, bootstrapWithRetry, checkBootstrapRequired, getBootstrapFromEnv };
-//# sourceMappingURL=chunk-P2HKJ7P5.js.map
-//# sourceMappingURL=chunk-P2HKJ7P5.js.map
+//# sourceMappingURL=chunk-GAAHG2Z4.js.map
+//# sourceMappingURL=chunk-GAAHG2Z4.js.map

package/dist/{chunk-P2HKJ7P5.js.map → chunk-GAAHG2Z4.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/auth/bootstrap.ts"],"names":[],"mappings":";;;;AAsBA,eAAsB,eACpB,MAAA,EAC0B;AAC1B,EAAA,MAAM;AAAA,IACJ,UAAA;AAAA,IACA,aAAA;AAAA,IACA,SAAA,GAAY,aAAA;AAAA,IACZ,QAAA;AAAA,IACA,WAAA;AAAA,IACA,gBAAA,GAAmB;AAAA,GACrB,GAAI,MAAA;AAEJ,EAAA,MAAM,WAAA,GACJ,MAAA,CAAO,WAAA,IACP,IAAI,iBAAA,CAAkB;AAAA,IACpB,IAAA,EAAM,OAAO,UAAA,IAAc;AAAA,GAC5B,CAAA;AAEH,EAAA,IAAI;AACF,IAAA,MAAM,YAAY,OAAA,IAAU;AAAA,EAC9B,SAAS,KAAA,EAAO;AACd,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,KAAA,EAAO;AAAA,KACT;AAAA,EACF;AAEA,EAAA,MAAM,cAAA,GAAiB,IAAI,cAAA,EAAe;AAC1C,EAAA,MAAM,kBAAA,GAAqB,cAAA,CAAe,QAAA,CAAS,aAAa,CAAA;AAChE,EAAA,IAAI,CAAC,mBAAmB,KAAA,EAAO;AAC7B,IAAA,MAAM,YAAY,UAAA,IAAa;AAC/B,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,OAAO,CAAA,kBAAA,EAAqB,kBAAA,CAAmB,MAAA,CAAO,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,KAClE;AAAA,EACF;AAEA,EAAA,MAAM,YAAA,GAAe,MAAM,WAAA,CAAY,eAAA,CAAgB,UAAU,CAAA;AACjE,EAAA,IAAI,YAAA,EAAc;AAChB,IAAA,MAAM,YAAY,UAAA,IAAa;AAC/B,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,KAAA,EAAO;AAAA,KACT;AAAA,EACF;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAO,MAAM,WAAA,CAAY,UAAA,CAAW;AAAA,MACxC,KAAA,EAAO,UAAA;AAAA,MACP,QAAA,EAAU,aAAA;AAAA,MACV,MAAO,SAAA,IAA0B,OAAA;AAAA,MACjC;AAAA,KACD,CAAA;AAED,IAAA,IAAI,oBAAoB,WAAA,EAAa;AACnC,MAAA,MAAM,cAAA,GAAiB,IAAI,cAAA,CAAe,WAAW,CAAA;AACrD,MAAA,MAAM,SAAA,GAAY,eAAe,YAAA,EAAa;AAC9C,MAAA,MAAM,eAAA,GAAkB,UAAU,OAAA,CAAQ,UAAA,CAAW,MAAM,GAAG,CAAA,CAAE,CAAC,CAAC,CAAA;AAClE,MAAA,MAAM,eAAe,IAAA,CAAK;AAAA,QACxB,EAAA,EAAI,UAAA;AAAA,QACJ,GAAG;AAAA,OACJ,CAAA;AAAA,IACH;AAEA,IAAA,MAAM,YAAY,UAAA,IAAa;AAC/B,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,IAAA;AAAA,MACT;AAAA,KACF;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,YAAY,UAAA,IAAa;AAC/B,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,KAAA,EACE,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU;AAAA,KAC7C;AAAA,EACF;AACF;AAEA,eAAsB,sBAAA,CACpB,aACA,UAAA,EACkB;AAClB,EAAA,MAAM,YAAA,GAAe,MAAM,WAAA,CAAY,eAAA,CAAgB,UAAU,CAAA;AACjE,EAAA,OAAO,CAAC,YAAA;AACV;AAEO,SAAS,mBAAA,GAA8C;AAC5D,EAAA,MAAM,KAAA,GAAQ,QAAQ,GAAA,CAAI,gBAAA;AAC1B,EAAA,MAAM,QAAA,GAAW,QAAQ,GAAA,CAAI,mBAAA;AAE7B,EAAA,IAAI,CAAC,KAAA,IAAS,CAAC,QAAA,EAAU;AACvB,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,OAAO;AAAA,IACL,UAAA,EAAY,OAAA,CAAQ,GAAA,CAAI,iBAAA,IAAqB,gBAAA;AAAA,IAC7C,UAAA,EAAY,KAAA;AAAA,IACZ,aAAA,EAAe,QAAA;AAAA,IACf,SAAA,EAAW,OAAA,CAAQ,GAAA,CAAI,eAAA,IAAmB,aAAA;AAAA,IAC1C,QAAA,EAAU,QAAQ,GAAA,CAAI,oBAAA;AAAA,IACtB,WAAA,EAAa,OAAA,CAAQ,GAAA,CAAI,SAAA,GACrB;AAAA,MACE,QAAA,EAAU,MAAA;AAAA,MACV,IAAA,EAAM;AAAA,QACJ,IAAA,EAAM,QAAQ,GAAA,CAAI,SAAA;AAAA,QAClB,MAAM,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,SAAA,IAAa,OAAO,EAAE,CAAA;AAAA,QACjD,MAAA,EAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,KAAgB,MAAA;AAAA,QACpC,IAAA,EAAM;AAAA,UACJ,IAAA,EAAM,OAAA,CAAQ,GAAA,CAAI,SAAA,IAAa,EAAA;AAAA,UAC/B,IAAA,EAAM,OAAA,CAAQ,GAAA,CAAI,SAAA,IAAa;AAAA;AACjC,OACF;AAAA,MACA,IAAA,EAAM,OAAA,CAAQ,GAAA,CAAI,SAAA,IAAa,qBAAA;AAAA,MAC/B,QAAA,EAAU,QAAQ,GAAA,CAAI;AAAA,KACxB,GACA,MAAA;AAAA,IACJ,gBAAA,EAAkB,OAAA,CAAQ,GAAA,CAAI,uBAAA,KAA4B;AAAA,GAC5D;AACF;AAEA,eAAsB,cACpB,WAAA,EACiC;AACjC,EAAA,MAAM,SAAS,mBAAA,EAAoB;AACnC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,MAAA,CAAO,WAAA,GAAc,WAAA;AAAA,EACvB;AAGA,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,CAAO,aAAa,OAAA,IAAU;AACpC,IAAA,MAAM,eAAe,MAAM,MAAA,CAAO,WAAA,EAAa,eAAA,CAAgB,OAAO,UAAU,CAAA;AAChF,IAAA,IAAI,YAAA,EAAc;AAChB,MAAA,MAAM,MAAA,CAAO,aAAa,UAAA,IAAa;AACvC,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,2BAAA,EAA4B;AAAA,IAC9D;AAAA,EACF,CAAA,CAAA,MAAQ;AAAA,EAER;AAEA,EAAA,OAAA,CAAQ,IAAI,kCAAkC,CAAA;AAC9C,EAAA,MAAM,MAAA,GAAS,MAAM,cAAA,CAAe,MAAM,CAAA;AAE1C,EAAA,IAAI,OAAO,OAAA,EAAS;AAClB,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,oBAAA,EAAuB,MAAA,CAAO,UAAU,CAAA,CAAE,CAAA;AAAA,EACxD,CAAA,MAAO;AACL,IAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,kBAAA,EAAqB,MAAA,CAAO,KAAK,CAAA,CAAE,CAAA;AAAA,EACnD;AAEA,EAAA,OAAO,MAAA;AACT;AAEA,eAAsB,kBAAA,CACpB,MAAA,EACA,UAAA,GAAqB,CAAA,EACrB,eAAuB,GAAA,EACG;AAC1B,EAAA,IAAI,SAAA,GAAoB,EAAA;AAExB,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,UAAA,EAAY,CAAA,EAAA,EAAK;AACnC,IAAA,MAAM,MAAA,GAAS,MAAM,cAAA,CAAe,MAAM,CAAA;AAE1C,IAAA,IAAI,OAAO,OAAA,EAAS;AAClB,MAAA,OAAO,MAAA;AAAA,IACT;AAEA,IAAA,SAAA,GAAY,OAAO,KAAA,IAAS,eAAA;AAE5B,IAAA,IAAI,SAAA,CAAU,QAAA,CAAS,gBAAgB,CAAA,EAAG;AACxC,MAAA,OAAO,MAAA;AAAA,IACT;AAEA,IAAA,IAAI,CAAA,GAAI,aAAa,CAAA,EAAG;AACtB,MAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,YAAY,CAAC,CAAA;AAAA,IAClE;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,KAAA;AAAA,IACT,KAAA,EAAO,CAAA,aAAA,EAAgB,UAAU,CAAA,UAAA,EAAa,SAAS,CAAA;AAAA,GACzD;AACF","file":"chunk-P2HKJ7P5.js","sourcesContent":["import { SQLiteAuthAdapter } from \"./sqlite-adapter.js\";\nimport { EmailTransport, type EmailConfig } from \"./nodemailer-transport.js\";\nimport { PasswordPolicy } from \"./security/password-policy.js\";\nimport type { AuthUser, UserRole, AuthAdapter } from \"./types.js\";\n\nexport interface BootstrapConfig {\n  authAdapter?: AuthAdapter;\n  authDbPath?: string;\n  adminEmail: string;\n  adminPassword: string;\n  adminRole?: string;\n  tenantId?: string;\n  emailConfig?: EmailConfig;\n  sendWelcomeEmail?: boolean;\n}\n\nexport interface BootstrapResult {\n  success: boolean;\n  user?: AuthUser;\n  error?: string;\n}\n\nexport async function bootstrapAdmin(\n  config: BootstrapConfig,\n): Promise<BootstrapResult> {\n  const {\n    adminEmail,\n    adminPassword,\n    adminRole = \"super_admin\",\n    tenantId,\n    emailConfig,\n    sendWelcomeEmail = false,\n  } = config;\n\n  const authAdapter =\n    config.authAdapter ||\n    new SQLiteAuthAdapter({\n      path: config.authDbPath || \"./data/auth.db\",\n    });\n\n  try {\n    await authAdapter.connect?.();\n  } catch (error) {\n    return {\n      success: false,\n      error: \"Failed to connect to auth storage\",\n    };\n  }\n\n  const passwordPolicy = new PasswordPolicy();\n  const passwordValidation = passwordPolicy.validate(adminPassword);\n  if (!passwordValidation.valid) {\n    await authAdapter.disconnect?.();\n    return {\n      success: false,\n      error: `Invalid password: ${passwordValidation.errors.join(\", \")}`,\n    };\n  }\n\n  const existingUser = await authAdapter.findUserByEmail(adminEmail);\n  if (existingUser) {\n    await authAdapter.disconnect?.();\n    return {\n      success: false,\n      error: \"Admin user already exists\",\n    };\n  }\n\n  try {\n    const user = await authAdapter.createUser({\n      email: adminEmail,\n      password: adminPassword,\n      role: (adminRole as UserRole) || \"admin\",\n      tenantId,\n    });\n\n    if (sendWelcomeEmail && emailConfig) {\n      const emailTransport = new EmailTransport(emailConfig);\n      const templates = emailTransport.getTemplates();\n      const welcomeTemplate = templates.welcome(adminEmail.split(\"@\")[0]);\n      await emailTransport.send({\n        to: adminEmail,\n        ...welcomeTemplate,\n      });\n    }\n\n    await authAdapter.disconnect?.();\n    return {\n      success: true,\n      user,\n    };\n  } catch (error) {\n    await authAdapter.disconnect?.();\n    return {\n      success: false,\n      error:\n        error instanceof Error ? error.message : \"Failed to create admin user\",\n    };\n  }\n}\n\nexport async function checkBootstrapRequired(\n  authAdapter: AuthAdapter,\n  adminEmail: string,\n): Promise<boolean> {\n  const existingUser = await authAdapter.findUserByEmail(adminEmail);\n  return !existingUser;\n}\n\nexport function getBootstrapFromEnv(): BootstrapConfig | null {\n  const email = process.env.KYRO_ADMIN_EMAIL;\n  const password = process.env.KYRO_ADMIN_PASSWORD;\n\n  if (!email || !password) {\n    return null;\n  }\n\n  return {\n    authDbPath: process.env.KYRO_AUTH_DB_PATH || \"./data/auth.db\",\n    adminEmail: email,\n    adminPassword: password,\n    adminRole: process.env.KYRO_ADMIN_ROLE || \"super_admin\",\n    tenantId: process.env.KYRO_ADMIN_TENANT_ID,\n    emailConfig: process.env.SMTP_HOST\n      ? {\n          provider: \"smtp\",\n          smtp: {\n            host: process.env.SMTP_HOST,\n            port: parseInt(process.env.SMTP_PORT || \"587\", 10),\n            secure: process.env.SMTP_SECURE === \"true\",\n            auth: {\n              user: process.env.SMTP_USER || \"\",\n              pass: process.env.SMTP_PASS || \"\",\n            },\n          },\n          from: process.env.SMTP_FROM || \"noreply@example.com\",\n          fromName: process.env.SMTP_FROM_NAME,\n        }\n      : undefined,\n    sendWelcomeEmail: process.env.KYRO_ADMIN_SEND_WELCOME === \"true\",\n  };\n}\n\nexport async function autoBootstrap(\n  authAdapter?: AuthAdapter,\n): Promise<BootstrapResult | null> {\n  const config = getBootstrapFromEnv();\n  if (!config) {\n    return null;\n  }\n\n  if (authAdapter) {\n    config.authAdapter = authAdapter;\n  }\n\n  // Check if bootstrap is actually needed before connecting\n  try {\n    await config.authAdapter?.connect?.();\n    const existingUser = await config.authAdapter?.findUserByEmail(config.adminEmail);\n    if (existingUser) {\n      await config.authAdapter?.disconnect?.();\n      return { success: false, error: \"Admin user already exists\" };\n    }\n  } catch {\n    // Connection failed — let bootstrapAdmin handle the error\n  }\n\n  console.log(\"Auto-bootstrapping admin user...\");\n  const result = await bootstrapAdmin(config);\n\n  if (result.success) {\n    console.log(`Admin user created: ${config.adminEmail}`);\n  } else {\n    console.error(`Bootstrap failed: ${result.error}`);\n  }\n\n  return result;\n}\n\nexport async function bootstrapWithRetry(\n  config: BootstrapConfig,\n  maxRetries: number = 3,\n  retryDelayMs: number = 2000,\n): Promise<BootstrapResult> {\n  let lastError: string = \"\";\n\n  for (let i = 0; i < maxRetries; i++) {\n    const result = await bootstrapAdmin(config);\n\n    if (result.success) {\n      return result;\n    }\n\n    lastError = result.error || \"Unknown error\";\n\n    if (lastError.includes(\"already exists\")) {\n      return result;\n    }\n\n    if (i < maxRetries - 1) {\n      await new Promise((resolve) => setTimeout(resolve, retryDelayMs));\n    }\n  }\n\n  return {\n    success: false,\n    error: `Failed after ${maxRetries} retries: ${lastError}`,\n  };\n}\n"]}
+{"version":3,"sources":["../src/auth/bootstrap.ts"],"names":[],"mappings":";;;;AAsBA,eAAsB,eACpB,MAAA,EAC0B;AAC1B,EAAA,MAAM;AAAA,IACJ,UAAA;AAAA,IACA,aAAA;AAAA,IACA,SAAA,GAAY,aAAA;AAAA,IACZ,QAAA;AAAA,IACA,WAAA;AAAA,IACA,gBAAA,GAAmB;AAAA,GACrB,GAAI,MAAA;AAEJ,EAAA,MAAM,WAAA,GACJ,MAAA,CAAO,WAAA,IACP,IAAI,iBAAA,CAAkB;AAAA,IACpB,IAAA,EAAM,OAAO,UAAA,IAAc;AAAA,GAC5B,CAAA;AAEH,EAAA,IAAI;AACF,IAAA,MAAM,YAAY,OAAA,IAAU;AAAA,EAC9B,SAAS,KAAA,EAAO;AACd,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,KAAA,EAAO;AAAA,KACT;AAAA,EACF;AAEA,EAAA,MAAM,cAAA,GAAiB,IAAI,cAAA,EAAe;AAC1C,EAAA,MAAM,kBAAA,GAAqB,cAAA,CAAe,QAAA,CAAS,aAAa,CAAA;AAChE,EAAA,IAAI,CAAC,mBAAmB,KAAA,EAAO;AAC7B,IAAA,MAAM,YAAY,UAAA,IAAa;AAC/B,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,OAAO,CAAA,kBAAA,EAAqB,kBAAA,CAAmB,MAAA,CAAO,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,KAClE;AAAA,EACF;AAEA,EAAA,MAAM,YAAA,GAAe,MAAM,WAAA,CAAY,eAAA,CAAgB,UAAU,CAAA;AACjE,EAAA,IAAI,YAAA,EAAc;AAChB,IAAA,MAAM,YAAY,UAAA,IAAa;AAC/B,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,KAAA,EAAO;AAAA,KACT;AAAA,EACF;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAO,MAAM,WAAA,CAAY,UAAA,CAAW;AAAA,MACxC,KAAA,EAAO,UAAA;AAAA,MACP,QAAA,EAAU,aAAA;AAAA,MACV,MAAO,SAAA,IAA0B,OAAA;AAAA,MACjC;AAAA,KACD,CAAA;AAED,IAAA,IAAI,oBAAoB,WAAA,EAAa;AACnC,MAAA,MAAM,cAAA,GAAiB,IAAI,cAAA,CAAe,WAAW,CAAA;AACrD,MAAA,MAAM,SAAA,GAAY,eAAe,YAAA,EAAa;AAC9C,MAAA,MAAM,eAAA,GAAkB,UAAU,OAAA,CAAQ,UAAA,CAAW,MAAM,GAAG,CAAA,CAAE,CAAC,CAAC,CAAA;AAClE,MAAA,MAAM,eAAe,IAAA,CAAK;AAAA,QACxB,EAAA,EAAI,UAAA;AAAA,QACJ,GAAG;AAAA,OACJ,CAAA;AAAA,IACH;AAEA,IAAA,MAAM,YAAY,UAAA,IAAa;AAC/B,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,IAAA;AAAA,MACT;AAAA,KACF;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,YAAY,UAAA,IAAa;AAC/B,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,KAAA,EACE,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU;AAAA,KAC7C;AAAA,EACF;AACF;AAEA,eAAsB,sBAAA,CACpB,aACA,UAAA,EACkB;AAClB,EAAA,MAAM,YAAA,GAAe,MAAM,WAAA,CAAY,eAAA,CAAgB,UAAU,CAAA;AACjE,EAAA,OAAO,CAAC,YAAA;AACV;AAEO,SAAS,mBAAA,GAA8C;AAC5D,EAAA,MAAM,KAAA,GAAQ,QAAQ,GAAA,CAAI,gBAAA;AAC1B,EAAA,MAAM,QAAA,GAAW,QAAQ,GAAA,CAAI,mBAAA;AAE7B,EAAA,IAAI,CAAC,KAAA,IAAS,CAAC,QAAA,EAAU;AACvB,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,OAAO;AAAA,IACL,UAAA,EAAY,OAAA,CAAQ,GAAA,CAAI,iBAAA,IAAqB,gBAAA;AAAA,IAC7C,UAAA,EAAY,KAAA;AAAA,IACZ,aAAA,EAAe,QAAA;AAAA,IACf,SAAA,EAAW,OAAA,CAAQ,GAAA,CAAI,eAAA,IAAmB,aAAA;AAAA,IAC1C,QAAA,EAAU,QAAQ,GAAA,CAAI,oBAAA;AAAA,IACtB,WAAA,EAAa,OAAA,CAAQ,GAAA,CAAI,SAAA,GACrB;AAAA,MACE,QAAA,EAAU,MAAA;AAAA,MACV,IAAA,EAAM;AAAA,QACJ,IAAA,EAAM,QAAQ,GAAA,CAAI,SAAA;AAAA,QAClB,MAAM,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,SAAA,IAAa,OAAO,EAAE,CAAA;AAAA,QACjD,MAAA,EAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,KAAgB,MAAA;AAAA,QACpC,IAAA,EAAM;AAAA,UACJ,IAAA,EAAM,OAAA,CAAQ,GAAA,CAAI,SAAA,IAAa,EAAA;AAAA,UAC/B,IAAA,EAAM,OAAA,CAAQ,GAAA,CAAI,SAAA,IAAa;AAAA;AACjC,OACF;AAAA,MACA,IAAA,EAAM,OAAA,CAAQ,GAAA,CAAI,SAAA,IAAa,qBAAA;AAAA,MAC/B,QAAA,EAAU,QAAQ,GAAA,CAAI;AAAA,KACxB,GACA,MAAA;AAAA,IACJ,gBAAA,EAAkB,OAAA,CAAQ,GAAA,CAAI,uBAAA,KAA4B;AAAA,GAC5D;AACF;AAEA,eAAsB,cACpB,WAAA,EACiC;AACjC,EAAA,MAAM,SAAS,mBAAA,EAAoB;AACnC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,MAAA,CAAO,WAAA,GAAc,WAAA;AAAA,EACvB;AAGA,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,CAAO,aAAa,OAAA,IAAU;AACpC,IAAA,MAAM,eAAe,MAAM,MAAA,CAAO,WAAA,EAAa,eAAA,CAAgB,OAAO,UAAU,CAAA;AAChF,IAAA,IAAI,YAAA,EAAc;AAChB,MAAA,MAAM,MAAA,CAAO,aAAa,UAAA,IAAa;AACvC,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,2BAAA,EAA4B;AAAA,IAC9D;AAAA,EACF,CAAA,CAAA,MAAQ;AAAA,EAER;AAEA,EAAA,OAAA,CAAQ,IAAI,kCAAkC,CAAA;AAC9C,EAAA,MAAM,MAAA,GAAS,MAAM,cAAA,CAAe,MAAM,CAAA;AAE1C,EAAA,IAAI,OAAO,OAAA,EAAS;AAClB,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,oBAAA,EAAuB,MAAA,CAAO,UAAU,CAAA,CAAE,CAAA;AAAA,EACxD,CAAA,MAAO;AACL,IAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,kBAAA,EAAqB,MAAA,CAAO,KAAK,CAAA,CAAE,CAAA;AAAA,EACnD;AAEA,EAAA,OAAO,MAAA;AACT;AAEA,eAAsB,kBAAA,CACpB,MAAA,EACA,UAAA,GAAqB,CAAA,EACrB,eAAuB,GAAA,EACG;AAC1B,EAAA,IAAI,SAAA,GAAoB,EAAA;AAExB,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,UAAA,EAAY,CAAA,EAAA,EAAK;AACnC,IAAA,MAAM,MAAA,GAAS,MAAM,cAAA,CAAe,MAAM,CAAA;AAE1C,IAAA,IAAI,OAAO,OAAA,EAAS;AAClB,MAAA,OAAO,MAAA;AAAA,IACT;AAEA,IAAA,SAAA,GAAY,OAAO,KAAA,IAAS,eAAA;AAE5B,IAAA,IAAI,SAAA,CAAU,QAAA,CAAS,gBAAgB,CAAA,EAAG;AACxC,MAAA,OAAO,MAAA;AAAA,IACT;AAEA,IAAA,IAAI,CAAA,GAAI,aAAa,CAAA,EAAG;AACtB,MAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,YAAY,CAAC,CAAA;AAAA,IAClE;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,KAAA;AAAA,IACT,KAAA,EAAO,CAAA,aAAA,EAAgB,UAAU,CAAA,UAAA,EAAa,SAAS,CAAA;AAAA,GACzD;AACF","file":"chunk-GAAHG2Z4.js","sourcesContent":["import { SQLiteAuthAdapter } from \"./sqlite-adapter.js\";\nimport { EmailTransport, type EmailConfig } from \"./nodemailer-transport.js\";\nimport { PasswordPolicy } from \"./security/password-policy.js\";\nimport type { AuthUser, UserRole, AuthAdapter } from \"./types.js\";\n\nexport interface BootstrapConfig {\n  authAdapter?: AuthAdapter;\n  authDbPath?: string;\n  adminEmail: string;\n  adminPassword: string;\n  adminRole?: string;\n  tenantId?: string;\n  emailConfig?: EmailConfig;\n  sendWelcomeEmail?: boolean;\n}\n\nexport interface BootstrapResult {\n  success: boolean;\n  user?: AuthUser;\n  error?: string;\n}\n\nexport async function bootstrapAdmin(\n  config: BootstrapConfig,\n): Promise<BootstrapResult> {\n  const {\n    adminEmail,\n    adminPassword,\n    adminRole = \"super_admin\",\n    tenantId,\n    emailConfig,\n    sendWelcomeEmail = false,\n  } = config;\n\n  const authAdapter =\n    config.authAdapter ||\n    new SQLiteAuthAdapter({\n      path: config.authDbPath || \"./data/auth.db\",\n    });\n\n  try {\n    await authAdapter.connect?.();\n  } catch (error) {\n    return {\n      success: false,\n      error: \"Failed to connect to auth storage\",\n    };\n  }\n\n  const passwordPolicy = new PasswordPolicy();\n  const passwordValidation = passwordPolicy.validate(adminPassword);\n  if (!passwordValidation.valid) {\n    await authAdapter.disconnect?.();\n    return {\n      success: false,\n      error: `Invalid password: ${passwordValidation.errors.join(\", \")}`,\n    };\n  }\n\n  const existingUser = await authAdapter.findUserByEmail(adminEmail);\n  if (existingUser) {\n    await authAdapter.disconnect?.();\n    return {\n      success: false,\n      error: \"Admin user already exists\",\n    };\n  }\n\n  try {\n    const user = await authAdapter.createUser({\n      email: adminEmail,\n      password: adminPassword,\n      role: (adminRole as UserRole) || \"admin\",\n      tenantId,\n    });\n\n    if (sendWelcomeEmail && emailConfig) {\n      const emailTransport = new EmailTransport(emailConfig);\n      const templates = emailTransport.getTemplates();\n      const welcomeTemplate = templates.welcome(adminEmail.split(\"@\")[0]);\n      await emailTransport.send({\n        to: adminEmail,\n        ...welcomeTemplate,\n      });\n    }\n\n    await authAdapter.disconnect?.();\n    return {\n      success: true,\n      user,\n    };\n  } catch (error) {\n    await authAdapter.disconnect?.();\n    return {\n      success: false,\n      error:\n        error instanceof Error ? error.message : \"Failed to create admin user\",\n    };\n  }\n}\n\nexport async function checkBootstrapRequired(\n  authAdapter: AuthAdapter,\n  adminEmail: string,\n): Promise<boolean> {\n  const existingUser = await authAdapter.findUserByEmail(adminEmail);\n  return !existingUser;\n}\n\nexport function getBootstrapFromEnv(): BootstrapConfig | null {\n  const email = process.env.KYRO_ADMIN_EMAIL;\n  const password = process.env.KYRO_ADMIN_PASSWORD;\n\n  if (!email || !password) {\n    return null;\n  }\n\n  return {\n    authDbPath: process.env.KYRO_AUTH_DB_PATH || \"./data/auth.db\",\n    adminEmail: email,\n    adminPassword: password,\n    adminRole: process.env.KYRO_ADMIN_ROLE || \"super_admin\",\n    tenantId: process.env.KYRO_ADMIN_TENANT_ID,\n    emailConfig: process.env.SMTP_HOST\n      ? {\n          provider: \"smtp\",\n          smtp: {\n            host: process.env.SMTP_HOST,\n            port: parseInt(process.env.SMTP_PORT || \"587\", 10),\n            secure: process.env.SMTP_SECURE === \"true\",\n            auth: {\n              user: process.env.SMTP_USER || \"\",\n              pass: process.env.SMTP_PASS || \"\",\n            },\n          },\n          from: process.env.SMTP_FROM || \"noreply@example.com\",\n          fromName: process.env.SMTP_FROM_NAME,\n        }\n      : undefined,\n    sendWelcomeEmail: process.env.KYRO_ADMIN_SEND_WELCOME === \"true\",\n  };\n}\n\nexport async function autoBootstrap(\n  authAdapter?: AuthAdapter,\n): Promise<BootstrapResult | null> {\n  const config = getBootstrapFromEnv();\n  if (!config) {\n    return null;\n  }\n\n  if (authAdapter) {\n    config.authAdapter = authAdapter;\n  }\n\n  // Check if bootstrap is actually needed before connecting\n  try {\n    await config.authAdapter?.connect?.();\n    const existingUser = await config.authAdapter?.findUserByEmail(config.adminEmail);\n    if (existingUser) {\n      await config.authAdapter?.disconnect?.();\n      return { success: false, error: \"Admin user already exists\" };\n    }\n  } catch {\n    // Connection failed — let bootstrapAdmin handle the error\n  }\n\n  console.log(\"Auto-bootstrapping admin user...\");\n  const result = await bootstrapAdmin(config);\n\n  if (result.success) {\n    console.log(`Admin user created: ${config.adminEmail}`);\n  } else {\n    console.error(`Bootstrap failed: ${result.error}`);\n  }\n\n  return result;\n}\n\nexport async function bootstrapWithRetry(\n  config: BootstrapConfig,\n  maxRetries: number = 3,\n  retryDelayMs: number = 2000,\n): Promise<BootstrapResult> {\n  let lastError: string = \"\";\n\n  for (let i = 0; i < maxRetries; i++) {\n    const result = await bootstrapAdmin(config);\n\n    if (result.success) {\n      return result;\n    }\n\n    lastError = result.error || \"Unknown error\";\n\n    if (lastError.includes(\"already exists\")) {\n      return result;\n    }\n\n    if (i < maxRetries - 1) {\n      await new Promise((resolve) => setTimeout(resolve, retryDelayMs));\n    }\n  }\n\n  return {\n    success: false,\n    error: `Failed after ${maxRetries} retries: ${lastError}`,\n  };\n}\n"]}

package/dist/{chunk-PI73NNOK.cjs → chunk-GUUB5EAG.cjs}

@@ -219,5 +219,5 @@ exports.AbstractBaseAdapter = AbstractBaseAdapter;
 exports.DEFAULT_RLS_CONFIG = DEFAULT_RLS_CONFIG;
 exports.applyRLS = applyRLS;
 exports.canAccessDocument = canAccessDocument;
-//# sourceMappingURL=chunk-PI73NNOK.cjs.map
-//# sourceMappingURL=chunk-PI73NNOK.cjs.map
+//# sourceMappingURL=chunk-GUUB5EAG.cjs.map
+//# sourceMappingURL=chunk-GUUB5EAG.cjs.map

package/dist/chunk-GUUB5EAG.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/database/base.ts","../src/auth/rls/tenant.ts"],"names":["hasAnyRole"],"mappings":";;;;;AAqBO,IAAe,sBAAf,MAA0D;AAAA,EACrD,WAAA,uBAAiD,GAAA,EAAI;AAAA,EACrD,OAAA,uBAAyC,GAAA,EAAI;AAAA,EAC7C,SAAA,GAAY,KAAA;AAAA,EACZ,aAAA;AAAA,EAKV,iBAAiB,OAAA,EAA0C;AACzD,IAAA,IAAA,CAAK,aAAA,GAAgB,OAAA;AAAA,EACvB;AAAA,EAEA,gBAAA,GAA8C;AAC5C,IAAA,OAAO,IAAA,CAAK,aAAA;AAAA,EACd;AAAA,EAEA,MAAM,IAAA,CAAK,WAAA,EAAiC,OAAA,GAA0B,EAAC,EAAkB;AACvF,IAAA,KAAA,MAAW,UAAU,WAAA,EAAa;AAChC,MAAA,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,MAAA,CAAO,IAAA,EAAM,MAAM,CAAA;AAAA,IAC1C;AACA,IAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,MAAA,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,MAAA,CAAO,IAAA,EAAM,MAAM,CAAA;AAAA,IACtC;AACA,IAAA,MAAM,KAAK,OAAA,EAAQ;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA,EAyBU,cAAc,IAAA,EAAgC;AACtD,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,IAAI,CAAA;AAC5C,IAAA,IAAI,CAAC,UAAA,EAAY;AACf,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,IAAI,CAAA,sBAAA,CAAwB,CAAA;AAAA,IAC7D;AACA,IAAA,OAAO,UAAA;AAAA,EACT;AAAA,EAEU,iBAAA,CAAkB,KAAA,GAA6B,EAAC,EAAG,QAAA,EAAwC;AACnG,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,OAAO;AAAA,QACL,GAAG,KAAA;AAAA,QACH,QAAA,EAAU,EAAE,MAAA,EAAQ,QAAA;AAAS,OAC/B;AAAA,IACF;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAAA,EAEU,aAAa,IAAA,EAAsB;AAC3C,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA;AAAA,EAC/B;AAAA,EAEU,WAAA,CAAY,MAA2B,UAAA,EAAmD;AAClG,IAAA,MAAM,QAAA,GAAgC,EAAE,GAAG,IAAA,EAAK;AAEhD,IAAA,IAAI,WAAW,UAAA,EAAY;AACzB,MAAA,QAAA,CAAS,SAAA,GAAA,iBAAY,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAC5C,MAAA,IAAI,CAAC,SAAS,SAAA,EAAW;AACvB,QAAA,QAAA,CAAS,SAAA,GAAA,iBAAY,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,MAC9C;AAAA,IACF;AAGA,IAAA,IAAI,UAAA,CAAW,IAAA,IAAQ,QAAA,CAAS,QAAA,EAAU;AAI1C,IAAA,OAAO,QAAA;AAAA,EACT;AAAA,EAEU,oBAAA,CACR,IAAA,EACA,MAAA,EACA,KAAA,EACqB;AAErB,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEU,UAAU,IAAA,EAA6D;AAC/E,IAAA,IAAI,CAAC,IAAA,EAAM,OAAO,EAAE,KAAA,EAAO,WAAA,EAAa,WAAW,MAAA,EAAO;AAC1D,IAAA,IAAI,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,EAAG;AACxB,MAAA,OAAO,EAAE,KAAA,EAAO,IAAA,CAAK,MAAM,CAAC,CAAA,EAAG,WAAW,MAAA,EAAO;AAAA,IACnD;AACA,IAAA,OAAO,EAAE,KAAA,EAAO,IAAA,EAAM,SAAA,EAAW,KAAA,EAAM;AAAA,EACzC;AAAA,EAEU,mBAAA,CAAoB,IAAA,EAAc,KAAA,EAAe,SAAA,EAAmB;AAC5E,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,IAAA,CAAK,SAAA,GAAY,KAAK,CAAA;AAC9C,IAAA,OAAO;AAAA,MACL,SAAA;AAAA,MACA,KAAA;AAAA,MACA,UAAA;AAAA,MACA,IAAA;AAAA,MACA,aAAA,EAAA,CAAgB,IAAA,GAAO,CAAA,IAAK,KAAA,GAAQ,CAAA;AAAA,MACpC,aAAa,IAAA,GAAO,CAAA;AAAA,MACpB,aAAa,IAAA,GAAO,UAAA;AAAA,MACpB,QAAA,EAAU,IAAA,GAAO,CAAA,GAAI,IAAA,GAAO,CAAA,GAAI,IAAA;AAAA,MAChC,QAAA,EAAU,IAAA,GAAO,UAAA,GAAa,IAAA,GAAO,CAAA,GAAI;AAAA,KAC3C;AAAA,EACF;AAAA,EAEU,YAAA,CAAa,MAA2B,MAAA,EAAwC;AACxF,IAAA,IAAI,CAAC,MAAA,IAAU,MAAA,CAAO,MAAA,KAAW,GAAG,OAAO,IAAA;AAC3C,IAAA,MAAM,SAA8B,EAAC;AACrC,IAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,MAAA,IAAI,SAAS,IAAA,EAAM;AACjB,QAAA,MAAA,CAAO,KAAK,CAAA,GAAI,IAAA,CAAK,KAAK,CAAA;AAAA,MAC5B;AAAA,IACF;AACA,IAAA,MAAA,CAAO,IAAI,IAAI,IAAA,CAAK,EAAA;AACpB,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEU,oBAAoB,KAAA,EAA0C;AACtE,IAAA,OAAO,MAAM,IAAA,KAAS,cAAA;AAAA,EACxB;AAAA,EAEU,cAAc,KAAA,EAAoC;AAC1D,IAAA,OAAO,MAAM,IAAA,KAAS,QAAA;AAAA,EACxB;AAAA,EAEU,sBAAsB,MAAA,EAAsC;AACpE,IAAA,MAAM,SAA8B,EAAC;AACrC,IAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,MAAA,IAAI,KAAA,CAAM,SAAS,cAAA,EAAgB;AACjC,QAAA,MAAA,CAAO,KAAK,KAAK,CAAA;AAAA,MACnB,CAAA,MAAA,IAAW,QAAA,IAAY,KAAA,IAAS,KAAA,CAAM,MAAA,EAAQ;AAC5C,QAAA,MAAA,CAAO,KAAK,GAAG,IAAA,CAAK,qBAAA,CAAsB,KAAA,CAAM,MAAM,CAAC,CAAA;AAAA,MACzD;AAAA,IACF;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEU,gBAAgB,MAAA,EAAgC;AACxD,IAAA,MAAM,SAAwB,EAAC;AAC/B,IAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,MAAA,IAAI,KAAA,CAAM,SAAS,QAAA,EAAU;AAC3B,QAAA,MAAA,CAAO,KAAK,KAAK,CAAA;AAAA,MACnB,CAAA,MAAA,IAAW,QAAA,IAAY,KAAA,IAAS,KAAA,CAAM,MAAA,EAAQ;AAC5C,QAAA,MAAA,CAAO,KAAK,GAAG,IAAA,CAAK,eAAA,CAAgB,KAAA,CAAM,MAAM,CAAC,CAAA;AAAA,MACnD;AAAA,IACF;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AACF;;;ACnKO,IAAM,kBAAA,GAAgC;AAAA,EAC3C,aAAA,EAAe,IAAA;AAAA,EACf,WAAA,EAAa,UAAA;AAAA,EACb,cAAA,EAAgB;AAAA,IACd,KAAA,EAAO;AAAA,MACL,UAAA,EAAY,UAAA;AAAA,MACZ,WAAA,EAAa,CAAC,aAAA,EAAe,OAAA,EAAS,QAAQ;AAAA,KAChD;AAAA,IACA,KAAA,EAAO;AAAA,MACL,UAAA,EAAY,UAAA;AAAA,MACZ,WAAA,EAAa,CAAC,aAAA,EAAe,OAAA,EAAS,QAAQ;AAAA,KAChD;AAAA,IACA,KAAA,EAAO;AAAA,MACL,UAAA,EAAY,YAAA;AAAA,MACZ,WAAA,EAAa,CAAC,aAAA,EAAe,OAAA,EAAS,QAAQ;AAAA,KAChD;AAAA,IACA,MAAA,EAAQ;AAAA,MACN,UAAA,EAAY,YAAA;AAAA,MACZ,WAAA,EAAa,CAAC,aAAA,EAAe,OAAA,EAAS,QAAQ;AAAA,KAChD;AAAA,IACA,SAAA,EAAW,EAAE,UAAA,EAAY,IAAA,EAAM,aAAa,CAAC,aAAA,EAAe,OAAO,CAAA,EAAE;AAAA,IACrE,UAAA,EAAY,EAAE,UAAA,EAAY,IAAA,EAAM,aAAa,CAAC,aAAA,EAAe,OAAO,CAAA;AAAE;AAE1E;AA0BO,SAAS,eAAA,CACd,KAAA,EACA,OAAA,EACA,MAAA,GAAoB,kBAAA,EACjB;AACH,EAAA,IAAI,CAAC,MAAA,CAAO,aAAA,IAAiB,OAAA,CAAQ,YAAA,EAAc;AACjD,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,OAAO;AAAA,IACL,GAAG,KAAA;AAAA,IACH,KAAA,EAAO;AAAA,MACL,GAAG,KAAA,CAAM,KAAA;AAAA,MACT,CAAC,MAAA,CAAO,WAAW,GAAG,OAAA,CAAQ;AAAA;AAChC,GACF;AACF;AAEO,SAAS,kBAAA,CACd,KAAA,EACA,UAAA,EACA,OAAA,EACA,SAAoB,kBAAA,EACC;AACrB,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,cAAA,CAAe,UAAU,CAAA;AAE7C,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,IACE,IAAA,CAAK,WAAA,IACLA,4BAAA,CAAW,EAAE,IAAA,EAAM,QAAQ,IAAA,EAAK,EAAe,IAAA,CAAK,WAAW,CAAA,EAC/D;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,IAAI,IAAA,CAAK,UAAA,KAAe,IAAA,IAAQ,OAAA,CAAQ,MAAA,EAAQ;AAC9C,IAAA,OAAO;AAAA,MACL,GAAG,KAAA;AAAA,MACH,KAAA,EAAO;AAAA,QACL,GAAG,KAAA,CAAM,KAAA;AAAA,QACT,IAAI,OAAA,CAAQ;AAAA;AACd,KACF;AAAA,EACF;AAEA,EAAA,IAAI,IAAA,CAAK,UAAA,IAAc,OAAA,CAAQ,MAAA,EAAQ;AACrC,IAAA,OAAO;AAAA,MACL,GAAG,KAAA;AAAA,MACH,KAAA,EAAO;AAAA,QACL,GAAG,KAAA,CAAM,KAAA;AAAA,QACT,CAAC,IAAA,CAAK,UAAU,GAAG,OAAA,CAAQ;AAAA;AAC7B,KACF;AAAA,EACF;AAEA,EAAA,OAAO,KAAA;AACT;AAEO,SAAS,QAAA,CACd,KAAA,EACA,UAAA,EACA,OAAA,EACA,SAAoB,kBAAA,EACjB;AACH,EAAA,IAAI,MAAA,GAAS,KAAA;AAEb,EAAA,MAAA,GAAS,eAAA,CAAgB,MAAA,EAAQ,OAAA,EAAS,MAAM,CAAA;AAEhD,EAAA,MAAA,GAAS,kBAAA,CAAmB,MAAA,EAAQ,UAAA,EAAY,OAAA,EAAS,MAAM,CAAA;AAE/D,EAAA,OAAO,MAAA;AACT;AAEO,SAAS,iBAAA,CACd,GAAA,EACA,UAAA,EACA,OAAA,EACA,SAAoB,kBAAA,EACX;AACT,EAAA,IAAI,QAAQ,YAAA,EAAc;AACxB,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,IAAI,OAAO,aAAA,IAAiB,GAAA,CAAI,OAAO,WAAW,CAAA,KAAM,QAAQ,QAAA,EAAU;AACxE,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,cAAA,CAAe,UAAU,CAAA;AAE7C,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,IACE,IAAA,CAAK,WAAA,IACLA,4BAAA,CAAW,EAAE,IAAA,EAAM,QAAQ,IAAA,EAAK,EAAe,IAAA,CAAK,WAAW,CAAA,EAC/D;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,IAAI,IAAA,CAAK,eAAe,IAAA,EAAM;AAC5B,IAAA,OAAO,GAAA,CAAI,OAAO,OAAA,CAAQ,MAAA;AAAA,EAC5B;AAEA,EAAA,IAAI,KAAK,UAAA,EAAY;AACnB,IAAA,OAAO,GAAA,CAAI,IAAA,CAAK,UAAU,CAAA,KAAM,OAAA,CAAQ,MAAA;AAAA,EAC1C;AAEA,EAAA,OAAO,IAAA;AACT","file":"chunk-GUUB5EAG.cjs","sourcesContent":["import type {\n  BaseAdapter,\n  CollectionConfig,\n  GlobalConfig,\n  FindArgs,\n  FindByIDArgs,\n  CreateArgs,\n  UpdateArgs,\n  DeleteArgs,\n  FindResult,\n  VersionRecord,\n  CreateVersionArgs,\n  FindVersionsArgs,\n} from '../registry/types.js';\nimport type { Field, RelationshipField, UploadField } from '../fields/types.js';\nimport type { TenantContext } from '../auth/rls/tenant.js';\n\n// ============================================================================\n// Abstract Base Adapter\n// ============================================================================\n\nexport abstract class AbstractBaseAdapter implements BaseAdapter {\n  protected collections: Map<string, CollectionConfig> = new Map();\n  protected globals: Map<string, GlobalConfig> = new Map();\n  protected connected = false;\n  protected tenantContext?: TenantContext;\n\n  abstract connect(): Promise<void>;\n  abstract disconnect(): Promise<void>;\n\n  setTenantContext(context: TenantContext | undefined): void {\n    this.tenantContext = context;\n  }\n\n  getTenantContext(): TenantContext | undefined {\n    return this.tenantContext;\n  }\n\n  async init(collections: CollectionConfig[], globals: GlobalConfig[] = []): Promise<void> {\n    for (const config of collections) {\n      this.collections.set(config.slug, config);\n    }\n    for (const config of globals) {\n      this.globals.set(config.slug, config);\n    }\n    await this.connect();\n  }\n\n  abstract find<T>(args: FindArgs): Promise<FindResult<T>>;\n  abstract findByID<T>(args: FindByIDArgs): Promise<T | null>;\n  abstract create<T>(args: CreateArgs): Promise<T>;\n  abstract update<T>(args: UpdateArgs): Promise<T>;\n  abstract delete<T>(args: DeleteArgs): Promise<T>;\n  abstract count(args: { collection: string; where?: Record<string, any>; tenantID?: string }): Promise<number>;\n\n  abstract findOne(args: { collection: string; where: Record<string, any>; tenantID?: string; draft?: boolean }): Promise<any>;\n\n  abstract findVersions(args: FindVersionsArgs): Promise<FindResult<VersionRecord>>;\n  abstract findVersionByID(args: { collection: string; versionId: string; tenantID?: string }): Promise<VersionRecord | null>;\n  abstract createVersion<T = Record<string, any>>(args: CreateVersionArgs<T>): Promise<VersionRecord<T>>;\n  abstract updateLatestVersion<T = Record<string, any>>(args: CreateVersionArgs<T>): Promise<VersionRecord<T>>;\n  abstract deleteVersions(args: { collection: string; documentId: string; keepLatest?: number; tenantID?: string }): Promise<void>;\n\n  async migrate?(): Promise<void>;\n  async rollback?(): Promise<void>;\n  async transaction?<T>(fn: (tx: any) => Promise<T>): Promise<T>;\n\n  // ========================================================================\n  // Utility Methods\n  // ========================================================================\n\n  protected getCollection(slug: string): CollectionConfig {\n    const collection = this.collections.get(slug);\n    if (!collection) {\n      throw new Error(`Collection \"${slug}\" not found in adapter`);\n    }\n    return collection;\n  }\n\n  protected applyTenantFilter(where: Record<string, any> = {}, tenantID?: string): Record<string, any> {\n    if (tenantID) {\n      return {\n        ...where,\n        tenantID: { equals: tenantID },\n      };\n    }\n    return where;\n  }\n\n  protected getTableName(slug: string): string {\n    return slug.replace(/-/g, '_');\n  }\n\n  protected prepareData(data: Record<string, any>, collection: CollectionConfig): Record<string, any> {\n    const prepared: Record<string, any> = { ...data };\n    \n    if (collection.timestamps) {\n      prepared.updatedAt = new Date().toISOString();\n      if (!prepared.createdAt) {\n        prepared.createdAt = new Date().toISOString();\n      }\n    }\n\n    // Handle password hashing\n    if (collection.auth && prepared.password) {\n      // Password should be hashed before this point via hooks\n    }\n\n    return prepared;\n  }\n\n  protected processRelationships(\n    data: Record<string, any>,\n    fields: Field[],\n    depth: number\n  ): Record<string, any> {\n    // This is a base implementation - specific adapters override\n    return data;\n  }\n\n  protected parseSort(sort?: string): { field: string; direction: 'asc' | 'desc' } {\n    if (!sort) return { field: 'createdAt', direction: 'desc' };\n    if (sort.startsWith('-')) {\n      return { field: sort.slice(1), direction: 'desc' };\n    }\n    return { field: sort, direction: 'asc' };\n  }\n\n  protected calculatePagination(page: number, limit: number, totalDocs: number) {\n    const totalPages = Math.ceil(totalDocs / limit);\n    return {\n      totalDocs,\n      limit,\n      totalPages,\n      page,\n      pagingCounter: (page - 1) * limit + 1,\n      hasPrevPage: page > 1,\n      hasNextPage: page < totalPages,\n      prevPage: page > 1 ? page - 1 : null,\n      nextPage: page < totalPages ? page + 1 : null,\n    };\n  }\n\n  protected selectFields(data: Record<string, any>, select?: string[]): Record<string, any> {\n    if (!select || select.length === 0) return data;\n    const result: Record<string, any> = {};\n    for (const field of select) {\n      if (field in data) {\n        result[field] = data[field];\n      }\n    }\n    result['id'] = data.id;\n    return result;\n  }\n\n  protected isRelationshipField(field: Field): field is RelationshipField {\n    return field.type === 'relationship';\n  }\n\n  protected isUploadField(field: Field): field is UploadField {\n    return field.type === 'upload';\n  }\n\n  protected getRelationshipFields(fields: Field[]): RelationshipField[] {\n    const result: RelationshipField[] = [];\n    for (const field of fields) {\n      if (field.type === 'relationship') {\n        result.push(field);\n      } else if ('fields' in field && field.fields) {\n        result.push(...this.getRelationshipFields(field.fields));\n      }\n    }\n    return result;\n  }\n\n  protected getUploadFields(fields: Field[]): UploadField[] {\n    const result: UploadField[] = [];\n    for (const field of fields) {\n      if (field.type === 'upload') {\n        result.push(field);\n      } else if ('fields' in field && field.fields) {\n        result.push(...this.getUploadFields(field.fields));\n      }\n    }\n    return result;\n  }\n}\n","import type { AuthUser } from \"../types.js\";\nimport { hasAnyRole } from \"../rbac/checker.js\";\n\nexport interface TenantContext {\n  tenantId: string;\n  userId: string;\n  role?: string;\n  roles?: string[];\n  permissions?: string[];\n  isSuperAdmin?: boolean;\n}\n\nexport interface OwnershipRule {\n  ownerField: string;\n  bypassRoles?: string[];\n}\n\nexport interface RLSConfig {\n  tenantEnabled: boolean;\n  tenantField: string;\n  ownershipRules: Record<string, OwnershipRule>;\n}\n\nexport const DEFAULT_RLS_CONFIG: RLSConfig = {\n  tenantEnabled: true,\n  tenantField: \"tenantId\",\n  ownershipRules: {\n    posts: {\n      ownerField: \"authorId\",\n      bypassRoles: [\"super_admin\", \"admin\", \"editor\"],\n    },\n    pages: {\n      ownerField: \"authorId\",\n      bypassRoles: [\"super_admin\", \"admin\", \"editor\"],\n    },\n    media: {\n      ownerField: \"uploadedBy\",\n      bypassRoles: [\"super_admin\", \"admin\", \"editor\"],\n    },\n    orders: {\n      ownerField: \"customerId\",\n      bypassRoles: [\"super_admin\", \"admin\", \"editor\"],\n    },\n    customers: { ownerField: \"id\", bypassRoles: [\"super_admin\", \"admin\"] },\n    navigation: { ownerField: \"id\", bypassRoles: [\"super_admin\", \"admin\"] },\n  },\n};\n\nexport function createTenantContext(user: AuthUser | undefined): TenantContext {\n  if (!user) {\n    return {\n      tenantId: \"public\",\n      userId: \"anonymous\",\n      role: \"guest\",\n      roles: [\"guest\"],\n      permissions: [],\n      isSuperAdmin: false,\n    };\n  }\n\n  const isSuperAdmin = user.role === \"super_admin\";\n\n  return {\n    tenantId: user.tenantId || \"default\",\n    userId: user.id,\n    role: user.role,\n    roles: [user.role],\n    permissions: [],\n    isSuperAdmin,\n  };\n}\n\nexport function addTenantFilter<T extends Record<string, any>>(\n  query: T,\n  context: TenantContext,\n  config: RLSConfig = DEFAULT_RLS_CONFIG,\n): T {\n  if (!config.tenantEnabled || context.isSuperAdmin) {\n    return query;\n  }\n\n  return {\n    ...query,\n    where: {\n      ...query.where,\n      [config.tenantField]: context.tenantId,\n    },\n  };\n}\n\nexport function applyOwnershipRule(\n  query: Record<string, any>,\n  collection: string,\n  context: TenantContext,\n  config: RLSConfig = DEFAULT_RLS_CONFIG,\n): Record<string, any> {\n  const rule = config.ownershipRules[collection];\n\n  if (!rule) {\n    return query;\n  }\n\n  if (\n    rule.bypassRoles &&\n    hasAnyRole({ role: context.role } as AuthUser, rule.bypassRoles)\n  ) {\n    return query;\n  }\n\n  if (rule.ownerField === \"id\" && context.userId) {\n    return {\n      ...query,\n      where: {\n        ...query.where,\n        id: context.userId,\n      },\n    };\n  }\n\n  if (rule.ownerField && context.userId) {\n    return {\n      ...query,\n      where: {\n        ...query.where,\n        [rule.ownerField]: context.userId,\n      },\n    };\n  }\n\n  return query;\n}\n\nexport function applyRLS<T extends Record<string, any>>(\n  query: T,\n  collection: string,\n  context: TenantContext,\n  config: RLSConfig = DEFAULT_RLS_CONFIG,\n): T {\n  let result = query;\n\n  result = addTenantFilter(result, context, config) as T;\n\n  result = applyOwnershipRule(result, collection, context, config) as T;\n\n  return result;\n}\n\nexport function canAccessDocument(\n  doc: Record<string, any>,\n  collection: string,\n  context: TenantContext,\n  config: RLSConfig = DEFAULT_RLS_CONFIG,\n): boolean {\n  if (context.isSuperAdmin) {\n    return true;\n  }\n\n  if (config.tenantEnabled && doc[config.tenantField] !== context.tenantId) {\n    return false;\n  }\n\n  const rule = config.ownershipRules[collection];\n\n  if (!rule) {\n    return true;\n  }\n\n  if (\n    rule.bypassRoles &&\n    hasAnyRole({ role: context.role } as AuthUser, rule.bypassRoles)\n  ) {\n    return true;\n  }\n\n  if (rule.ownerField === \"id\") {\n    return doc.id === context.userId;\n  }\n\n  if (rule.ownerField) {\n    return doc[rule.ownerField] === context.userId;\n  }\n\n  return true;\n}\n\nexport function filterDocumentsByRLS(\n  docs: Record<string, any>[],\n  collection: string,\n  context: TenantContext,\n  config: RLSConfig = DEFAULT_RLS_CONFIG,\n): Record<string, any>[] {\n  if (context.isSuperAdmin) {\n    return docs;\n  }\n\n  return docs.filter((doc) =>\n    canAccessDocument(doc, collection, context, config),\n  );\n}\n\nexport function sanitizeDocumentByRLS(\n  doc: Record<string, any>,\n  collection: string,\n  context: TenantContext,\n  config: RLSConfig = DEFAULT_RLS_CONFIG,\n): Record<string, any> | null {\n  if (!canAccessDocument(doc, collection, context, config)) {\n    return null;\n  }\n\n  if (config.tenantEnabled && !context.isSuperAdmin) {\n    const { [config.tenantField]: _, ...rest } = doc;\n    return rest;\n  }\n\n  return doc;\n}\n\nexport class RLSPolicy {\n  private config: RLSConfig;\n\n  constructor(config: RLSConfig = DEFAULT_RLS_CONFIG) {\n    this.config = config;\n  }\n\n  setConfig(config: RLSConfig): void {\n    this.config = config;\n  }\n\n  getConfig(): RLSConfig {\n    return this.config;\n  }\n\n  addOwnershipRule(collection: string, rule: OwnershipRule): void {\n    this.config.ownershipRules[collection] = rule;\n  }\n\n  removeOwnershipRule(collection: string): void {\n    delete this.config.ownershipRules[collection];\n  }\n\n  createContext(user: AuthUser | undefined): TenantContext {\n    return createTenantContext(user);\n  }\n\n  apply<T extends Record<string, any>>(\n    query: T,\n    collection: string,\n    context: TenantContext,\n  ): T {\n    return applyRLS(query, collection, context, this.config);\n  }\n\n  canAccess(\n    doc: Record<string, any>,\n    collection: string,\n    context: TenantContext,\n  ): boolean {\n    return canAccessDocument(doc, collection, context, this.config);\n  }\n\n  filter(\n    docs: Record<string, any>[],\n    collection: string,\n    context: TenantContext,\n  ): Record<string, any>[] {\n    return filterDocumentsByRLS(docs, collection, context, this.config);\n  }\n\n  sanitize(\n    doc: Record<string, any>,\n    collection: string,\n    context: TenantContext,\n  ): Record<string, any> | null {\n    return sanitizeDocumentByRLS(doc, collection, context, this.config);\n  }\n}\n"]}