@kyro-cms/core 0.9.7 → 0.9.9

package/dist/{chunk-HVCUIII2.cjs → chunk-TQG7G7YI.cjs}

@@ -1,11 +1,11 @@
 'use strict';
 
-var chunkQFLB4EIJ_cjs = require('./chunk-QFLB4EIJ.cjs');
-var chunkFKKQUMXR_cjs = require('./chunk-FKKQUMXR.cjs');
+var chunkLNTFRAHF_cjs = require('./chunk-LNTFRAHF.cjs');
+var chunk4OCMVGEY_cjs = require('./chunk-4OCMVGEY.cjs');
 
 // src/api/trpc/context.ts
 async function createContext(options) {
-  const webhookService = chunkQFLB4EIJ_cjs.createWebhookService(options.db);
+  const webhookService = chunkLNTFRAHF_cjs.createWebhookService(options.db);
   const baseContext = {
     db: options.db,
     registry: options.registry,
@@ -15,9 +15,9 @@ async function createContext(options) {
     webhookService,
     settings: options.settings
   };
-  const apiKeyRaw = chunkFKKQUMXR_cjs.extractApiKeyFromRequest(options.req);
+  const apiKeyRaw = chunk4OCMVGEY_cjs.extractApiKeyFromRequest(options.req);
   if (apiKeyRaw) {
-    const result = await chunkFKKQUMXR_cjs.validateApiKey(apiKeyRaw, options.db, async (userId) => {
+    const result = await chunk4OCMVGEY_cjs.validateApiKey(apiKeyRaw, options.db, async (userId) => {
       try {
         const user = await options.db.findByID({ collection: "users", id: userId });
         return user || null;
@@ -28,7 +28,7 @@ async function createContext(options) {
     if (result.valid) {
       baseContext.user = result.user || options.user;
       baseContext.tenantID = result.tenantId || options.tenantID;
-      baseContext.apiKey = chunkFKKQUMXR_cjs.createApiKeyContext(result);
+      baseContext.apiKey = chunk4OCMVGEY_cjs.createApiKeyContext(result);
     }
   }
   return baseContext;
@@ -37,9 +37,9 @@ async function createContext(options) {
 // src/api/trpc/procedures.ts
 var COLLECTION_EVENT_MAP = {
   _media: {
-    create: chunkQFLB4EIJ_cjs.WEBHOOK_EVENTS.MEDIA_UPLOAD,
-    update: chunkQFLB4EIJ_cjs.WEBHOOK_EVENTS.MEDIA_UPLOAD,
-    delete: chunkQFLB4EIJ_cjs.WEBHOOK_EVENTS.MEDIA_DELETE
+    create: chunkLNTFRAHF_cjs.WEBHOOK_EVENTS.MEDIA_UPLOAD,
+    update: chunkLNTFRAHF_cjs.WEBHOOK_EVENTS.MEDIA_UPLOAD,
+    delete: chunkLNTFRAHF_cjs.WEBHOOK_EVENTS.MEDIA_DELETE
   }
 };
 function getWebhookEvent(collection, operation) {
@@ -95,7 +95,7 @@ function normalizeEmptyStrings(data, fields) {
   }
 }
 async function checkTRPCAccess(config, operation, ctx) {
-  const result = await chunkFKKQUMXR_cjs.checkCollectionAccess(config, operation, {
+  const result = await chunkLNTFRAHF_cjs.checkCollectionAccess(config, operation, {
     user: ctx.user,
     req: ctx.req,
     tenantID: ctx.tenantID,
@@ -436,7 +436,7 @@ function createCountProcedure(ctx) {
 
 // src/api/trpc/router.ts
 async function checkGlobalAccessTRPC(global, operation, ctx) {
-  const result = await chunkFKKQUMXR_cjs.checkGlobalAccess(global, operation, {
+  const result = await chunkLNTFRAHF_cjs.checkGlobalAccess(global, operation, {
     user: ctx.user,
     req: ctx.req,
     tenantID: ctx.tenantID
@@ -522,5 +522,5 @@ exports.createFindByIDProcedure = createFindByIDProcedure;
 exports.createFindProcedure = createFindProcedure;
 exports.createKyroServer = createKyroServer;
 exports.createUpdateProcedure = createUpdateProcedure;
-//# sourceMappingURL=chunk-HVCUIII2.cjs.map
-//# sourceMappingURL=chunk-HVCUIII2.cjs.map
+//# sourceMappingURL=chunk-TQG7G7YI.cjs.map
+//# sourceMappingURL=chunk-TQG7G7YI.cjs.map

package/dist/{chunk-HVCUIII2.cjs.map → chunk-TQG7G7YI.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/api/trpc/context.ts","../src/api/trpc/procedures.ts","../src/api/trpc/router.ts"],"names":["createWebhookService","extractApiKeyFromRequest","validateApiKey","createApiKeyContext","WEBHOOK_EVENTS","checkCollectionAccess","checkGlobalAccess"],"mappings":";;;;;;AAsCA,eAAsB,cAAc,OAAA,EAOX;AACvB,EAAA,MAAM,cAAA,GAAiBA,sCAAA,CAAqB,OAAA,CAAQ,EAAE,CAAA;AAEtD,EAAA,MAAM,WAAA,GAA2B;AAAA,IAC/B,IAAI,OAAA,CAAQ,EAAA;AAAA,IACZ,UAAU,OAAA,CAAQ,QAAA;AAAA,IAClB,KAAK,OAAA,CAAQ,GAAA;AAAA,IACb,MAAM,OAAA,CAAQ,IAAA;AAAA,IACd,UAAU,OAAA,CAAQ,QAAA;AAAA,IAClB,cAAA;AAAA,IACA,UAAU,OAAA,CAAQ;AAAA,GACpB;AAEA,EAAA,MAAM,SAAA,GAAYC,0CAAA,CAAyB,OAAA,CAAQ,GAAU,CAAA;AAC7D,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,MAAM,SAAS,MAAMC,gCAAA,CAAe,WAAW,OAAA,CAAQ,EAAA,EAAI,OAAO,MAAA,KAAW;AAC3E,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAQ,EAAA,CAAG,QAAA,CAAS,EAAE,UAAA,EAAY,OAAA,EAAS,EAAA,EAAI,MAAA,EAAQ,CAAA;AAC1E,QAAA,OAAO,IAAA,IAAQ,IAAA;AAAA,MACjB,CAAA,CAAA,MAAQ;AACN,QAAA,OAAO,IAAA;AAAA,MACT;AAAA,IACF,CAAC,CAAA;AACD,IAAA,IAAI,OAAO,KAAA,EAAO;AAChB,MAAA,WAAA,CAAY,IAAA,GAAQ,MAAA,CAAO,IAAA,IAAiB,OAAA,CAAQ,IAAA;AACpD,MAAA,WAAA,CAAY,QAAA,GAAW,MAAA,CAAO,QAAA,IAAY,OAAA,CAAQ,QAAA;AAClD,MAAA,WAAA,CAAY,MAAA,GAASC,sCAAoB,MAAM,CAAA;AAAA,IACjD;AAAA,EACF;AAEA,EAAA,OAAO,WAAA;AACT;;;AChEA,IAAM,oBAAA,GAGF;AAAA,EACF,MAAA,EAAQ;AAAA,IACN,QAAQC,gCAAA,CAAe,YAAA;AAAA,IACvB,QAAQA,gCAAA,CAAe,YAAA;AAAA,IACvB,QAAQA,gCAAA,CAAe;AAAA;AAE3B,CAAA;AAEA,SAAS,eAAA,CACP,YACA,SAAA,EACc;AACd,EAAA,MAAM,MAAA,GAAS,qBAAqB,UAAU,CAAA;AAC9C,EAAA,IAAI,MAAA,EAAQ,OAAO,MAAA,CAAO,SAAS,CAAA;AACnC,EAAA,OAAO,cAAc,SAAS,CAAA,CAAA;AAChC;AAEA,eAAe,cAAA,CACb,GAAA,EACA,KAAA,EACA,OAAA,EAMA;AACA,EAAA,IAAI,CAAC,IAAI,cAAA,EAAgB;AACzB,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,CAAI,cAAA,CAAe,OAAA,CAAQ,KAAA,EAAO;AAAA,MACtC,YAAY,OAAA,CAAQ,UAAA;AAAA,MACpB,WAAW,OAAA,CAAQ,SAAA;AAAA,MACnB,MAAM,OAAA,CAAQ,IAAA;AAAA,MACd,cAAc,OAAA,CAAQ,YAAA;AAAA,MACtB,MAAM,GAAA,CAAI,IAAA,GACN,EAAE,EAAA,EAAI,IAAI,IAAA,CAAK,EAAA,EAAI,KAAA,EAAO,GAAA,CAAI,KAAK,KAAA,EAAO,IAAA,EAAM,GAAA,CAAI,IAAA,CAAK,MAAK,GAC9D,KAAA,CAAA;AAAA,MACJ,UAAU,GAAA,CAAI;AAAA,KACf,CAAA;AAAA,EACH,SAAS,GAAA,EAAK;AACZ,IAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,4BAAA,EAA+B,KAAK,CAAA,CAAA,CAAA,EAAK,GAAG,CAAA;AAAA,EAC5D;AACF;AAMA,SAAS,qBAAA,CAAsB,MAAW,MAAA,EAAuB;AAC/D,EAAA,IAAI,CAAC,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,EAAU;AACvC,EAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,IAAA,IAAI,CAAC,KAAA,CAAM,IAAA,IAAQ,EAAE,KAAA,CAAM,QAAQ,IAAA,CAAA,EAAO;AAC1C,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC3B,IAAA,IAAI,QAAQ,EAAA,EAAI;AACd,MAAA,MAAM,SAAA,GAAY,MAAM,IAAA,KAAS,MAAA,IAAU,MAAM,IAAA,KAAS,UAAA,IAAc,MAAM,IAAA,KAAS,MAAA,IAAU,MAAM,IAAA,KAAS,UAAA,IAAc,MAAM,IAAA,KAAS,OAAA,IAAW,MAAM,IAAA,KAAS,UAAA,IAAc,MAAM,IAAA,KAAS,OAAA;AACpM,MAAA,IAAI,CAAC,SAAA,EAAW,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA,GAAI,IAAA;AAAA,IACrC;AACA,IAAA,IAAI,MAAM,IAAA,KAAS,MAAA,IAAU,MAAM,IAAA,IAAQ,KAAA,CAAM,QAAS,KAAA,CAAc,IAAI,KAAK,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA,IAAK,OAAO,KAAK,KAAA,CAAM,IAAI,MAAM,QAAA,EAAU;AACzI,MAAA,KAAA,MAAW,GAAA,IAAQ,MAAc,IAAA,EAAM;AACrC,QAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,GAAA,CAAI,MAAM,CAAA,EAAG,qBAAA,CAAsB,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA,EAAG,GAAA,CAAI,MAAiB,CAAA;AAAA,MAC9F;AAAA,IACF,CAAA,MAAA,IAAA,CAAY,MAAM,IAAA,KAAS,OAAA,IAAW,MAAM,IAAA,KAAS,aAAA,KAAkB,KAAA,CAAM,IAAA,IAAQ,KAAA,CAAM,OAAA,CAAS,MAAc,MAAM,CAAA,IAAK,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA,IAAK,OAAO,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA,KAAM,QAAA,EAAU;AACrL,MAAA,qBAAA,CAAsB,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA,EAAI,MAAc,MAAiB,CAAA;AAAA,IAC1E,WAAW,KAAA,CAAM,IAAA,KAAS,OAAA,IAAW,KAAA,CAAM,QAAQ,KAAA,CAAM,OAAA,CAAS,KAAA,CAAc,MAAM,KAAK,KAAA,CAAM,OAAA,CAAQ,KAAK,KAAA,CAAM,IAAI,CAAC,CAAA,EAAG;AAC1H,MAAA,KAAA,MAAW,IAAA,IAAQ,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA,EAAG;AACnC,QAAA,IAAI,QAAQ,OAAO,IAAA,KAAS,UAAU,qBAAA,CAAsB,IAAA,EAAO,MAAc,MAAiB,CAAA;AAAA,MACpG;AAAA,IACF,WAAW,KAAA,CAAM,IAAA,KAAS,QAAA,IAAY,KAAA,CAAM,QAAQ,KAAA,CAAM,OAAA,CAAS,KAAA,CAAc,MAAM,KAAK,KAAA,CAAM,OAAA,CAAQ,KAAK,KAAA,CAAM,IAAI,CAAC,CAAA,EAAG;AAC3H,MAAA,KAAA,MAAW,IAAA,IAAQ,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA,EAAG;AACnC,QAAA,IAAI,CAAC,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,EAAU;AACvC,QAAA,MAAM,YAAA,GAAe,IAAA,CAAK,IAAA,IAAQ,IAAA,CAAK,SAAA;AACvC,QAAA,IAAI,CAAC,YAAA,EAAc;AACnB,QAAA,MAAM,QAAA,GAAY,MAAc,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,KAAW,CAAA,CAAE,SAAS,YAAY,CAAA;AAC/E,QAAA,IAAI,CAAC,QAAA,IAAY,CAAC,MAAM,OAAA,CAAQ,QAAA,CAAS,MAAM,CAAA,EAAG;AAClD,QAAA,MAAM,MAAA,GAAS,KAAK,IAAA,IAAQ,OAAO,KAAK,IAAA,KAAS,QAAA,GAAW,KAAK,IAAA,GAAO,IAAA;AACxE,QAAA,qBAAA,CAAsB,MAAA,EAAQ,SAAS,MAAiB,CAAA;AAAA,MAC1D;AAAA,IACF;AAAA,EACF;AACF;AAMA,eAAe,eAAA,CACb,MAAA,EACA,SAAA,EACA,GAAA,EACe;AACf,EAAA,MAAM,MAAA,GAAS,MAAMC,uCAAA,CAAsB,MAAA,EAAQ,SAAA,EAAW;AAAA,IAC5D,MAAM,GAAA,CAAI,IAAA;AAAA,IACV,KAAK,GAAA,CAAI,GAAA;AAAA,IACT,UAAU,GAAA,CAAI,QAAA;AAAA,IACd,QAAQ,GAAA,CAAI;AAAA,GACb,CAAA;AACD,EAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,IAAA,MAAM,IAAI,KAAA,CAAM,MAAA,CAAO,KAAA,IAAS,eAAe,CAAA;AAAA,EACjD;AAGA,EAAA,IAAI,IAAI,QAAA,EAAU;AAChB,IAAA,GAAA,CAAI,EAAA,CAAG,iBAAiB,EAAE,QAAA,EAAU,IAAI,QAAA,EAAU,MAAA,EAAQ,IAAI,IAAA,EAAM,EAAA,IAAM,IAAI,IAAA,EAAM,GAAA,CAAI,MAAM,IAAA,EAAM,YAAA,EAAc,IAAI,IAAA,EAAM,IAAA,KAAS,eAAe,CAAA;AAAA,EACtJ;AACF;AAMO,SAAS,oBAAoB,GAAA,EAAkB;AACpD,EAAA,OAAO,OAAO,KAAA,KASR;AACJ,IAAA,MAAM,EAAE,YAAY,KAAA,EAAO,IAAA,EAAM,OAAO,IAAA,EAAM,KAAA,EAAO,MAAA,EAAQ,KAAA,EAAM,GAAI,KAAA;AACvE,IAAA,MAAM,MAAA,GAAS,GAAA,CAAI,QAAA,CAAS,aAAA,CAAc,UAAU,CAAA;AAEpD,IAAA,MAAM,eAAA,CAAgB,MAAA,EAAQ,MAAA,EAAQ,GAAG,CAAA;AAGzC,IAAA,IAAI,MAAA,CAAO,OAAO,UAAA,EAAY;AAC5B,MAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,KAAA,CAAM,UAAA,EAAY;AAC1C,QAAA,MAAM,IAAA,CAAK;AAAA,UACT,UAAA;AAAA,UACA,KAAK,GAAA,CAAI,GAAA;AAAA,UACT,MAAM,GAAA,CAAI,IAAA;AAAA,UACV,UAAU,GAAA,CAAI,QAAA;AAAA,UACd,SAAA,EAAW,MAAA;AAAA,UACX;AAAA,SACD,CAAA;AAAA,MACH;AAAA,IACF;AAEA,IAAA,MAAM,OAAA,GAAU,KAAA,IAAS,CAAC,CAAC,GAAA,CAAI,IAAA;AAG/B,IAAA,MAAM,MAAA,GAAS,MAAM,GAAA,CAAI,EAAA,CAAG,IAAA,CAAK;AAAA,MAC/B,UAAA;AAAA,MACA,KAAA,EAAO,SAAS,EAAC;AAAA,MACjB,IAAA;AAAA,MACA,OAAO,KAAA,IAAS,EAAA;AAAA,MAChB,MAAM,IAAA,IAAQ,CAAA;AAAA,MACd,OAAO,KAAA,IAAS,CAAA;AAAA,MAChB,UAAU,GAAA,CAAI,QAAA;AAAA,MACd,MAAA;AAAA,MACA,KAAA,EAAO;AAAA,KACR,CAAA;AAGD,IAAA,IAAI,MAAA,CAAO,OAAO,SAAA,EAAW;AAC3B,MAAA,KAAA,MAAW,GAAA,IAAO,OAAO,IAAA,EAAM;AAC7B,QAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,KAAA,CAAM,SAAA,EAAW;AACzC,UAAA,MAAM,IAAA,CAAK;AAAA,YACT,UAAA;AAAA,YACA,GAAA;AAAA,YACA,KAAK,GAAA,CAAI,GAAA;AAAA,YACT,MAAM,GAAA,CAAI,IAAA;AAAA,YACV,UAAU,GAAA,CAAI,QAAA;AAAA,YACd,SAAA,EAAW;AAAA,WACZ,CAAA;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAEA,IAAA,OAAO,MAAA;AAAA,EACT,CAAA;AACF;AAEO,SAAS,wBAAwB,GAAA,EAAkB;AACxD,EAAA,OAAO,OAAO,KAAA,KAMR;AACJ,IAAA,MAAM,EAAE,UAAA,EAAY,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,OAAM,GAAI,KAAA;AACjD,IAAA,MAAM,MAAA,GAAS,GAAA,CAAI,QAAA,CAAS,aAAA,CAAc,UAAU,CAAA;AAEpD,IAAA,MAAM,eAAA,CAAgB,MAAA,EAAQ,MAAA,EAAQ,GAAG,CAAA;AAEzC,IAAA,MAAM,OAAA,GAAU,KAAA,IAAS,CAAC,CAAC,GAAA,CAAI,IAAA;AAE/B,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,CAAI,EAAA,CAAG,QAAA,CAAS;AAAA,MAChC,UAAA;AAAA,MACA,EAAA;AAAA,MACA,OAAO,KAAA,IAAS,CAAA;AAAA,MAChB,UAAU,GAAA,CAAI,QAAA;AAAA,MACd,MAAA;AAAA,MACA,KAAA,EAAO;AAAA,KACR,CAAA;AAED,IAAA,IAAI,CAAC,KAAK,MAAM,IAAI,MAAM,CAAA,oBAAA,EAAuB,UAAU,CAAA,CAAA,EAAI,EAAE,CAAA,CAAE,CAAA;AAGnE,IAAA,IAAI,MAAA,CAAO,OAAO,SAAA,EAAW;AAC3B,MAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,KAAA,CAAM,SAAA,EAAW;AACzC,QAAA,MAAM,IAAA,CAAK;AAAA,UACT,UAAA;AAAA,UACA,GAAA;AAAA,UACA,KAAK,GAAA,CAAI,GAAA;AAAA,UACT,MAAM,GAAA,CAAI,IAAA;AAAA,UACV,UAAU,GAAA,CAAI,QAAA;AAAA,UACd,SAAA,EAAW,MAAA;AAAA,UACX;AAAA,SACD,CAAA;AAAA,MACH;AAAA,IACF;AAEA,IAAA,OAAO,GAAA;AAAA,EACT,CAAA;AACF;AAEO,SAAS,sBAAsB,GAAA,EAAkB;AACtD,EAAA,OAAO,OAAO,KAAA,KAKR;AACJ,IAAA,MAAM,EAAE,UAAA,EAAY,IAAA,EAAM,KAAA,EAAO,QAAO,GAAI,KAAA;AAC5C,IAAA,MAAM,MAAA,GAAS,GAAA,CAAI,QAAA,CAAS,aAAA,CAAc,UAAU,CAAA;AAEpD,IAAA,MAAM,eAAA,CAAgB,MAAA,EAAQ,QAAA,EAAU,GAAG,CAAA;AAG3C,IAAA,MAAM,MAAA,GAAS,GAAA,CAAI,QAAA,CAAS,kBAAA,CAAmB,UAAU,CAAA;AACzD,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA;AAGnC,IAAA,IAAI,MAAA,CAAO,YAAA,IAAgB,GAAA,CAAI,QAAA,EAAU;AACvC,MAAA,SAAA,CAAU,WAAW,GAAA,CAAI,QAAA;AAAA,IAC3B;AAGA,IAAA,IAAI,MAAA,CAAO,OAAO,cAAA,EAAgB;AAChC,MAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,KAAA,CAAM,cAAA,EAAgB;AAC9C,QAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK;AAAA,UAC5B,UAAA;AAAA,UACA,IAAA,EAAM,SAAA;AAAA,UACN,KAAK,GAAA,CAAI,GAAA;AAAA,UACT,MAAM,GAAA,CAAI,IAAA;AAAA,UACV,UAAU,GAAA,CAAI,QAAA;AAAA,UACd,SAAA,EAAW;AAAA,SACZ,CAAA;AACD,QAAA,IAAI,UAAA,EAAY,MAAA,CAAO,MAAA,CAAO,SAAA,EAAW,UAAU,CAAA;AAAA,MACrD;AAAA,IACF;AAGA,IAAA,IAAI,MAAA,CAAO,OAAO,YAAA,EAAc;AAC9B,MAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,KAAA,CAAM,YAAA,EAAc;AAC5C,QAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK;AAAA,UAC5B,UAAA;AAAA,UACA,IAAA,EAAM,SAAA;AAAA,UACN,KAAK,GAAA,CAAI,GAAA;AAAA,UACT,MAAM,GAAA,CAAI,IAAA;AAAA,UACV,UAAU,GAAA,CAAI,QAAA;AAAA,UACd,SAAA,EAAW;AAAA,SACZ,CAAA;AACD,QAAA,IAAI,UAAA,EAAY,MAAA,CAAO,MAAA,CAAO,SAAA,EAAW,UAAU,CAAA;AAAA,MACrD;AAAA,IACF;AAGA,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,CAAI,EAAA,CAAG,MAAA,CAAO;AAAA,MAC9B,UAAA;AAAA,MACA,IAAA,EAAM,SAAA;AAAA,MACN,OAAO,KAAA,IAAS,CAAA;AAAA,MAChB,UAAU,GAAA,CAAI,QAAA;AAAA,MACd;AAAA,KACD,CAAA;AAGD,IAAA,IAAI,MAAA,CAAO,OAAO,WAAA,EAAa;AAC7B,MAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,KAAA,CAAM,WAAA,EAAa;AAC3C,QAAA,MAAM,IAAA,CAAK;AAAA,UACT,UAAA;AAAA,UACA,GAAA;AAAA,UACA,IAAA,EAAM,SAAA;AAAA,UACN,KAAK,GAAA,CAAI,GAAA;AAAA,UACT,MAAM,GAAA,CAAI,IAAA;AAAA,UACV,UAAU,GAAA,CAAI,QAAA;AAAA,UACd,SAAA,EAAW;AAAA,SACZ,CAAA;AAAA,MACH;AAAA,IACF;AAEA,IAAA,MAAM,cAAA,CAAe,GAAA,EAAK,eAAA,CAAgB,UAAA,EAAY,QAAQ,CAAA,EAAG;AAAA,MAC/D,UAAA;AAAA,MACA,IAAA,EAAM,GAAA;AAAA,MACN,SAAA,EAAW;AAAA,KACZ,CAAA;AAED,IAAA,OAAO,EAAE,GAAA,EAAI;AAAA,EACf,CAAA;AACF;AAEO,SAAS,sBAAsB,GAAA,EAAkB;AACtD,EAAA,OAAO,OAAO,KAAA,KAOR;AACJ,IAAA,MAAM,EAAE,UAAA,EAAY,EAAA,EAAI,MAAM,KAAA,EAAO,MAAA,EAAQ,eAAc,GAAI,KAAA;AAC/D,IAAA,MAAM,MAAA,GAAS,GAAA,CAAI,QAAA,CAAS,aAAA,CAAc,UAAU,CAAA;AAEpD,IAAA,MAAM,eAAA,CAAgB,MAAA,EAAQ,QAAA,EAAU,GAAG,CAAA;AAG3C,IAAA,MAAM,WAAA,GAAc,MAAM,GAAA,CAAI,EAAA,CAAG,QAAA,CAAS;AAAA,MACxC,UAAA;AAAA,MACA,EAAA;AAAA,MACA,UAAU,GAAA,CAAI,QAAA;AAAA,MACd,KAAA,EAAO;AAAA,KACR,CAAA;AAED,IAAA,IAAI,CAAC,WAAA;AACH,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,oBAAA,EAAuB,UAAU,CAAA,CAAA,EAAI,EAAE,CAAA,CAAE,CAAA;AAG3D,IAAA,IAAI,aAAA,IAAkB,WAAA,CAAoC,SAAA,IAAa,aAAA,KAAmB,YAAoC,SAAA,EAAW;AACvI,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,8CAAA,EAAiD,aAAa,CAAA,qBAAA,EAAyB,WAAA,CAAoC,SAAS,CAAA,CAAE,CAAA;AAAA,IACxJ;AAGA,IAAA,qBAAA,CAAsB,IAAA,EAAa,OAAO,MAAa,CAAA;AAGvD,IAAA,MAAM,MAAA,GAAS,GAAA,CAAI,QAAA,CAAS,kBAAA,CAAmB,UAAU,CAAA;AACzD,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA;AAGnC,IAAA,IAAI,MAAA,CAAO,YAAA,IAAgB,GAAA,CAAI,QAAA,EAAU;AACvC,MAAA,SAAA,CAAU,WAAW,GAAA,CAAI,QAAA;AAAA,IAC3B;AAGA,IAAA,IAAI,MAAA,CAAO,OAAO,cAAA,EAAgB;AAChC,MAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,KAAA,CAAM,cAAA,EAAgB;AAC9C,QAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK;AAAA,UAC5B,UAAA;AAAA,UACA,IAAA,EAAM,SAAA;AAAA,UACN,WAAA;AAAA,UACA,KAAK,GAAA,CAAI,GAAA;AAAA,UACT,MAAM,GAAA,CAAI,IAAA;AAAA,UACV,UAAU,GAAA,CAAI,QAAA;AAAA,UACd,SAAA,EAAW,QAAA;AAAA,UACX;AAAA,SACD,CAAA;AACD,QAAA,IAAI,UAAA,EAAY,MAAA,CAAO,MAAA,CAAO,SAAA,EAAW,UAAU,CAAA;AAAA,MACrD;AAAA,IACF;AAGA,IAAA,IAAI,MAAA,CAAO,OAAO,YAAA,EAAc;AAC9B,MAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,KAAA,CAAM,YAAA,EAAc;AAC5C,QAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK;AAAA,UAC5B,UAAA;AAAA,UACA,IAAA,EAAM,SAAA;AAAA,UACN,WAAA;AAAA,UACA,KAAK,GAAA,CAAI,GAAA;AAAA,UACT,MAAM,GAAA,CAAI,IAAA;AAAA,UACV,UAAU,GAAA,CAAI,QAAA;AAAA,UACd,SAAA,EAAW,QAAA;AAAA,UACX;AAAA,SACD,CAAA;AACD,QAAA,IAAI,UAAA,EAAY,MAAA,CAAO,MAAA,CAAO,SAAA,EAAW,UAAU,CAAA;AAAA,MACrD;AAAA,IACF;AAGA,IAAA,MAAM,UAAW,GAAA,CAAI,GAAA,IAAO,OAAQ,GAAA,CAAI,IAAY,OAAA,EAAS,GAAA,KAAQ,UAAA,IAAe,GAAA,CAAI,IAAY,OAAA,CAAQ,GAAA,CAAI,SAAS,CAAA,KAAM,MAAA,IAAY,MAAc,KAAA,KAAU,IAAA;AACnK,IAAA,MAAM,cAAA,GAAiB,MAAA,CAAO,QAAA,EAAU,MAAA,KAAW,IAAA;AACnD,IAAA,MAAM,UAAA,GAAe,GAAA,CAAI,GAAA,EAAa,KAAA,EAAO,QAAA,KAAa,MAAA,IAAa,GAAA,CAAI,GAAA,EAAa,GAAA,EAAK,QAAA,CAAS,eAAe,CAAA,IAAO,MAAc,QAAA,KAAa,IAAA;AAEvJ,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI,kBAAkB,OAAA,EAAS;AAG7B,MAAA,MAAM,GAAA,CAAI,GAAG,aAAA,CAAc;AAAA,QACzB,UAAA;AAAA,QACA,UAAA,EAAY,EAAA;AAAA,QACZ,IAAA,EAAM,SAAA;AAAA,QACN,MAAA,EAAQ,OAAA;AAAA,QACR,QAAA,EAAU,UAAA;AAAA,QACV,SAAA,EAAW,IAAI,IAAA,EAAM,EAAA;AAAA,QACrB,UAAU,GAAA,CAAI;AAAA,OACf,CAAA;AAED,MAAA,GAAA,GAAM,MAAM,GAAA,CAAI,EAAA,CAAG,QAAA,CAAS,EAAE,UAAA,EAAY,EAAA,EAAI,QAAA,EAAU,GAAA,CAAI,QAAA,EAAU,KAAA,EAAO,IAAA,EAAM,CAAA;AAAA,IACrF,WAAW,cAAA,EAAgB;AAEzB,MAAA,GAAA,GAAM,MAAM,GAAA,CAAI,EAAA,CAAG,MAAA,CAAO;AAAA,QACxB,UAAA;AAAA,QACA,EAAA;AAAA,QACA,IAAA,EAAM,EAAE,GAAG,SAAA,EAAW,QAAQ,WAAA,EAAY;AAAA,QAC1C,OAAO,KAAA,IAAS,CAAA;AAAA,QAChB,UAAU,GAAA,CAAI,QAAA;AAAA,QACd;AAAA,OACD,CAAA;AACD,MAAA,MAAM,GAAA,CAAI,GAAG,aAAA,CAAc;AAAA,QACzB,UAAA;AAAA,QACA,UAAA,EAAY,EAAA;AAAA,QACZ,IAAA,EAAM,SAAA;AAAA,QACN,MAAA,EAAQ,WAAA;AAAA,QACR,SAAA,EAAW,IAAI,IAAA,EAAM,EAAA;AAAA,QACrB,UAAU,GAAA,CAAI;AAAA,OACf,CAAA;AAAA,IACH,CAAA,MAAO;AAEL,MAAA,GAAA,GAAM,MAAM,GAAA,CAAI,EAAA,CAAG,MAAA,CAAO;AAAA,QACxB,UAAA;AAAA,QACA,EAAA;AAAA,QACA,IAAA,EAAM,SAAA;AAAA,QACN,OAAO,KAAA,IAAS,CAAA;AAAA,QAChB,UAAU,GAAA,CAAI,QAAA;AAAA,QACd;AAAA,OACD,CAAA;AAAA,IACH;AAGA,IAAA,IAAI,MAAA,CAAO,OAAO,WAAA,EAAa;AAC7B,MAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,KAAA,CAAM,WAAA,EAAa;AAC3C,QAAA,MAAM,IAAA,CAAK;AAAA,UACT,UAAA;AAAA,UACA,GAAA;AAAA,UACA,IAAA,EAAM,SAAA;AAAA,UACN,WAAA;AAAA,UACA,KAAK,GAAA,CAAI,GAAA;AAAA,UACT,MAAM,GAAA,CAAI,IAAA;AAAA,UACV,UAAU,GAAA,CAAI,QAAA;AAAA,UACd,SAAA,EAAW,QAAA;AAAA,UACX;AAAA,SACD,CAAA;AAAA,MACH;AAAA,IACF;AAEA,IAAA,MAAM,cAAA,CAAe,GAAA,EAAK,eAAA,CAAgB,UAAA,EAAY,QAAQ,CAAA,EAAG;AAAA,MAC/D,UAAA;AAAA,MACA,IAAA,EAAM,GAAA;AAAA,MACN,YAAA,EAAc,WAAA;AAAA,MACd,SAAA,EAAW;AAAA,KACZ,CAAA;AAED,IAAA,OAAO,EAAE,GAAA,EAAI;AAAA,EACf,CAAA;AACF;AAEO,SAAS,sBAAsB,GAAA,EAAkB;AACtD,EAAA,OAAO,OAAO,KAAA,KAA8C;AAC1D,IAAA,MAAM,EAAE,UAAA,EAAY,EAAA,EAAG,GAAI,KAAA;AAC3B,IAAA,MAAM,MAAA,GAAS,GAAA,CAAI,QAAA,CAAS,aAAA,CAAc,UAAU,CAAA;AAEpD,IAAA,MAAM,eAAA,CAAgB,MAAA,EAAQ,QAAA,EAAU,GAAG,CAAA;AAG3C,IAAA,MAAM,WAAA,GAAc,MAAM,GAAA,CAAI,EAAA,CAAG,QAAA,CAAS;AAAA,MACxC,UAAA;AAAA,MACA,EAAA;AAAA,MACA,UAAU,GAAA,CAAI,QAAA;AAAA,MACd,KAAA,EAAO;AAAA,KACR,CAAA;AAED,IAAA,IAAI,CAAC,WAAA;AACH,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,oBAAA,EAAuB,UAAU,CAAA,CAAA,EAAI,EAAE,CAAA,CAAE,CAAA;AAG3D,IAAA,IAAI,MAAA,CAAO,OAAO,YAAA,EAAc;AAC9B,MAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,KAAA,CAAM,YAAA,EAAc;AAC5C,QAAA,MAAM,IAAA,CAAK;AAAA,UACT,UAAA;AAAA,UACA,GAAA,EAAK,WAAA;AAAA,UACL,KAAK,GAAA,CAAI,GAAA;AAAA,UACT,MAAM,GAAA,CAAI,IAAA;AAAA,UACV,UAAU,GAAA,CAAI,QAAA;AAAA,UACd,SAAA,EAAW,QAAA;AAAA,UACX;AAAA,SACD,CAAA;AAAA,MACH;AAAA,IACF;AAGA,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,CAAI,EAAA,CAAG,MAAA,CAAO;AAAA,MAC9B,UAAA;AAAA,MACA,EAAA;AAAA,MACA,UAAU,GAAA,CAAI;AAAA,KACf,CAAA;AAGD,IAAA,IAAI,MAAA,CAAO,OAAO,WAAA,EAAa;AAC7B,MAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,KAAA,CAAM,WAAA,EAAa;AAC3C,QAAA,MAAM,IAAA,CAAK;AAAA,UACT,UAAA;AAAA,UACA,GAAA;AAAA,UACA,KAAK,GAAA,CAAI,GAAA;AAAA,UACT,MAAM,GAAA,CAAI,IAAA;AAAA,UACV,UAAU,GAAA,CAAI,QAAA;AAAA,UACd,SAAA,EAAW,QAAA;AAAA,UACX;AAAA,SACD,CAAA;AAAA,MACH;AAAA,IACF;AAEA,IAAA,MAAM,cAAA,CAAe,GAAA,EAAK,eAAA,CAAgB,UAAA,EAAY,QAAQ,CAAA,EAAG;AAAA,MAC/D,UAAA;AAAA,MACA,IAAA,EAAM,GAAA;AAAA,MACN,YAAA,EAAc,WAAA;AAAA,MACd,SAAA,EAAW;AAAA,KACZ,CAAA;AAED,IAAA,OAAO,EAAE,GAAA,EAAK,OAAA,EAAS,sBAAA,EAAuB;AAAA,EAChD,CAAA;AACF;AAEO,SAAS,qBAAqB,GAAA,EAAkB;AACrD,EAAA,OAAO,OAAO,KAAA,KAA+D;AAC3E,IAAA,MAAM,EAAE,UAAA,EAAY,KAAA,EAAM,GAAI,KAAA;AAC9B,IAAA,MAAM,MAAA,GAAS,GAAA,CAAI,QAAA,CAAS,aAAA,CAAc,UAAU,CAAA;AAEpD,IAAA,MAAM,eAAA,CAAgB,MAAA,EAAQ,MAAA,EAAQ,GAAG,CAAA;AAEzC,IAAA,MAAM,SAAA,GAAY,MAAM,GAAA,CAAI,EAAA,CAAG,KAAA,CAAM;AAAA,MACnC,UAAA;AAAA,MACA,KAAA,EAAO,SAAS,EAAC;AAAA,MACjB,UAAU,GAAA,CAAI;AAAA,KACf,CAAA;AAED,IAAA,OAAO,EAAE,SAAA,EAAU;AAAA,EACrB,CAAA;AACF;;;AC5hBA,eAAe,qBAAA,CACb,MAAA,EACA,SAAA,EACA,GAAA,EACe;AACf,EAAA,MAAM,MAAA,GAAS,MAAMC,mCAAA,CAAwB,MAAA,EAAQ,SAAA,EAAW;AAAA,IAC9D,MAAM,GAAA,CAAI,IAAA;AAAA,IACV,KAAK,GAAA,CAAI,GAAA;AAAA,IACT,UAAU,GAAA,CAAI;AAAA,GACf,CAAA;AACD,EAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,IAAA,MAAM,IAAI,KAAA,CAAM,MAAA,CAAO,KAAA,IAAS,eAAe,CAAA;AAAA,EACjD;AAEA,EAAA,IAAI,IAAI,QAAA,EAAU;AAChB,IAAA,GAAA,CAAI,EAAA,CAAG,iBAAiB,EAAE,QAAA,EAAU,IAAI,QAAA,EAAU,MAAA,EAAQ,IAAI,IAAA,EAAM,EAAA,IAAM,IAAI,IAAA,EAAM,GAAA,CAAI,MAAM,IAAA,EAAM,YAAA,EAAc,IAAI,IAAA,EAAM,IAAA,KAAS,eAAe,CAAA;AAAA,EACtJ;AACF;AAMO,SAAS,oBAAoB,GAAA,EAAkB;AACpD,EAAA,MAAM,SAA8B,EAAC;AACrC,EAAA,MAAM,WAAA,GAAc,GAAA,CAAI,QAAA,CAAS,cAAA,EAAe;AAEhD,EAAA,KAAA,MAAW,cAAc,WAAA,EAAa;AACpC,IAAA,MAAM,OAAO,UAAA,CAAW,IAAA;AAExB,IAAA,MAAA,CAAO,IAAI,CAAA,GAAI;AAAA,MACb,IAAA,EAAM,oBAAoB,GAAG,CAAA;AAAA,MAC7B,QAAA,EAAU,wBAAwB,GAAG,CAAA;AAAA,MACrC,MAAA,EAAQ,sBAAsB,GAAG,CAAA;AAAA,MACjC,MAAA,EAAQ,sBAAsB,GAAG,CAAA;AAAA,MACjC,MAAA,EAAQ,sBAAsB,GAAG,CAAA;AAAA,MACjC,KAAA,EAAO,qBAAqB,GAAG;AAAA,KACjC;AAAA,EACF;AAGA,EAAA,MAAM,OAAA,GAAU,GAAA,CAAI,QAAA,CAAS,UAAA,EAAW;AACxC,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,MAAM,OAAO,MAAA,CAAO,IAAA;AAEpB,IAAA,MAAA,CAAO,CAAA,SAAA,EAAY,IAAI,CAAA,CAAE,CAAA,GAAI;AAAA,MAC3B,KAAK,YAAY;AACf,QAAA,MAAM,qBAAA,CAAsB,MAAA,EAAQ,MAAA,EAAQ,GAAG,CAAA;AAE/C,QAAA,MAAM,GAAA,GAAM,MAAM,GAAA,CAAI,EAAA,CAAG,OAAA,CAAQ;AAAA,UAC/B,UAAA,EAAY,YAAY,IAAI,CAAA,CAAA;AAAA,UAC5B,OAAO,EAAC;AAAA,UACR,UAAU,GAAA,CAAI;AAAA,SACf,CAAA;AACD,QAAA,OAAO,GAAA;AAAA,MACT,CAAA;AAAA,MACA,MAAA,EAAQ,OAAO,KAAA,KAAyC;AACtD,QAAA,MAAM,qBAAA,CAAsB,MAAA,EAAQ,QAAA,EAAU,GAAG,CAAA;AAEjD,QAAA,MAAM,MAAA,GAAS,GAAA,CAAI,QAAA,CAAS,YAAA,CAAa,IAAI,CAAA;AAC7C,QAAA,MAAM,SAAA,GAAY,MAAA,CAAO,KAAA,CAAM,KAAA,CAAM,IAAI,CAAA;AAEzC,QAAA,MAAM,QAAA,GAAW,MAAM,GAAA,CAAI,EAAA,CAAG,OAAA,CAAQ;AAAA,UACpC,UAAA,EAAY,YAAY,IAAI,CAAA,CAAA;AAAA,UAC5B,OAAO,EAAC;AAAA,UACR,UAAU,GAAA,CAAI;AAAA,SACf,CAAA;AAED,QAAA,IAAI,GAAA;AACJ,QAAA,IAAI,QAAA,EAAU;AACZ,UAAA,GAAA,GAAM,MAAM,GAAA,CAAI,EAAA,CAAG,MAAA,CAAO;AAAA,YACxB,UAAA,EAAY,YAAY,IAAI,CAAA,CAAA;AAAA,YAC5B,IAAI,QAAA,CAAS,EAAA;AAAA,YACb,IAAA,EAAM,SAAA;AAAA,YACN,UAAU,GAAA,CAAI;AAAA,WACf,CAAA;AAAA,QACH,CAAA,MAAO;AACL,UAAA,GAAA,GAAM,MAAM,GAAA,CAAI,EAAA,CAAG,MAAA,CAAO;AAAA,YACxB,UAAA,EAAY,YAAY,IAAI,CAAA,CAAA;AAAA,YAC5B,IAAA,EAAM,EAAE,GAAG,SAAA,EAAW,IAAI,IAAA,EAAK;AAAA,YAC/B,UAAU,GAAA,CAAI;AAAA,WACf,CAAA;AAAA,QACH;AAEA,QAAA,OAAO,GAAA;AAAA,MACT;AAAA,KACF;AAAA,EACF;AAEA,EAAA,OAAO,MAAA;AACT;AAyDO,SAAS,iBAAiB,GAAA,EAA8B;AAE7D,EAAA,MAAM,SAAA,GAAY,GAAA,CAAI,QAAA,EAAU,MAAA,EAAQ,SAAA;AACxC,EAAA,IAAI,SAAA,EAAW,gBAAgB,KAAA,EAAO;AACpC,IAAA,MAAM,IAAI,MAAM,sBAAsB,CAAA;AAAA,EACxC;AAEA,EAAA,OAAO,oBAAoB,GAAG,CAAA;AAChC","file":"chunk-HVCUIII2.cjs","sourcesContent":["import type { BaseAdapter } from \"../../registry/types.js\";\nimport type { User, Request } from \"../../hooks/types.js\";\nimport {\n  validateApiKey,\n  extractApiKeyFromRequest,\n  createApiKeyContext,\n} from \"../../auth/api-key.js\";\nimport { createWebhookService } from \"../../webhooks/index.js\";\n\n// ============================================================================\n// Context Types\n// ============================================================================\n\nexport interface ApiKeyContext {\n  userId: string;\n  user: Partial<User>;\n  permissions: string[];\n  apiKeyId: string;\n  tenantId?: string;\n  role?: string;\n}\n\nexport interface KyroContext {\n  db: BaseAdapter;\n  registry: any;\n  user?: User;\n  tenantID?: string;\n  req: Request;\n  apiKey?: ApiKeyContext;\n  webhookService?: ReturnType<typeof createWebhookService>;\n  settings?: Record<string, any>;\n  [key: string]: any;\n}\n\n// ============================================================================\n// Context Factory\n// ============================================================================\n\nexport async function createContext(options: {\n  db: BaseAdapter;\n  registry: any;\n  req: Request;\n  user?: User;\n  tenantID?: string;\n  settings?: Record<string, any>;\n}): Promise<KyroContext> {\n  const webhookService = createWebhookService(options.db);\n\n  const baseContext: KyroContext = {\n    db: options.db,\n    registry: options.registry,\n    req: options.req,\n    user: options.user,\n    tenantID: options.tenantID,\n    webhookService,\n    settings: options.settings,\n  };\n\n  const apiKeyRaw = extractApiKeyFromRequest(options.req as any);\n  if (apiKeyRaw) {\n    const result = await validateApiKey(apiKeyRaw, options.db, async (userId) => {\n      try {\n        const user = await options.db.findByID({ collection: 'users', id: userId });\n        return user || null;\n      } catch {\n        return null;\n      }\n    });\n    if (result.valid) {\n      baseContext.user = (result.user as User) || options.user;\n      baseContext.tenantID = result.tenantId || options.tenantID;\n      baseContext.apiKey = createApiKeyContext(result) as ApiKeyContext;\n    }\n  }\n\n  return baseContext;\n}\n","import type {\n  FindArgs,\n  CreateArgs,\n  UpdateArgs,\n  DeleteArgs,\n} from \"../../registry/types.js\";\nimport { runHooks } from \"../../hooks/types.js\";\nimport { checkCollectionAccess, checkGlobalAccess } from \"../../access/checker.js\";\nimport type { KyroContext } from \"./context.js\";\nimport type { Field } from \"../../fields/types.js\";\nimport { WEBHOOK_EVENTS, type WebhookEvent } from \"../../webhooks/types.js\";\n\nconst COLLECTION_EVENT_MAP: Record<\n  string,\n  { create: WebhookEvent; update: WebhookEvent; delete: WebhookEvent }\n> = {\n  _media: {\n    create: WEBHOOK_EVENTS.MEDIA_UPLOAD,\n    update: WEBHOOK_EVENTS.MEDIA_UPLOAD,\n    delete: WEBHOOK_EVENTS.MEDIA_DELETE,\n  },\n};\n\nfunction getWebhookEvent(\n  collection: string,\n  operation: \"create\" | \"update\" | \"delete\",\n): WebhookEvent {\n  const mapped = COLLECTION_EVENT_MAP[collection];\n  if (mapped) return mapped[operation];\n  return `collection.${operation}` as WebhookEvent;\n}\n\nasync function triggerWebhook(\n  ctx: KyroContext,\n  event: WebhookEvent,\n  payload: {\n    collection: string;\n    data: unknown;\n    previousData?: unknown;\n    operation: \"create\" | \"update\" | \"delete\";\n  },\n) {\n  if (!ctx.webhookService) return;\n  try {\n    await ctx.webhookService.trigger(event, {\n      collection: payload.collection,\n      operation: payload.operation,\n      data: payload.data,\n      previousData: payload.previousData,\n      user: ctx.user\n        ? { id: ctx.user.id, email: ctx.user.email, role: ctx.user.role }\n        : undefined,\n      tenantId: ctx.tenantID,\n    });\n  } catch (err) {\n    console.error(`[Webhook] Failed to trigger ${event}:`, err);\n  }\n}\n\n// ============================================================================\n// Data normalization helpers\n// ============================================================================\n\nfunction normalizeEmptyStrings(data: any, fields: Field[]): void {\n  if (!data || typeof data !== 'object') return;\n  for (const field of fields) {\n    if (!field.name || !(field.name in data)) continue;\n    const val = data[field.name];\n    if (val === \"\") {\n      const isTextual = field.type === 'text' || field.type === 'textarea' || field.type === 'code' || field.type === 'markdown' || field.type === 'email' || field.type === 'password' || field.type === 'color';\n      if (!isTextual) data[field.name] = null;\n    }\n    if (field.type === 'tabs' && field.name && Array.isArray((field as any).tabs) && data[field.name] && typeof data[field.name] === 'object') {\n      for (const tab of (field as any).tabs) {\n        if (Array.isArray(tab.fields)) normalizeEmptyStrings(data[field.name], tab.fields as Field[]);\n      }\n    } else if ((field.type === 'group' || field.type === 'collapsible') && field.name && Array.isArray((field as any).fields) && data[field.name] && typeof data[field.name] === 'object') {\n      normalizeEmptyStrings(data[field.name], (field as any).fields as Field[]);\n    } else if (field.type === 'array' && field.name && Array.isArray((field as any).fields) && Array.isArray(data[field.name])) {\n      for (const item of data[field.name]) {\n        if (item && typeof item === 'object') normalizeEmptyStrings(item, (field as any).fields as Field[]);\n      }\n    } else if (field.type === 'blocks' && field.name && Array.isArray((field as any).blocks) && Array.isArray(data[field.name])) {\n      for (const item of data[field.name]) {\n        if (!item || typeof item !== 'object') continue;\n        const blockTypeStr = item.type || item.blockType;\n        if (!blockTypeStr) continue;\n        const blockDef = (field as any).blocks.find((b: any) => b.slug === blockTypeStr);\n        if (!blockDef || !Array.isArray(blockDef.fields)) continue;\n        const target = item.data && typeof item.data === 'object' ? item.data : item;\n        normalizeEmptyStrings(target, blockDef.fields as Field[]);\n      }\n    }\n  }\n}\n\n// ============================================================================\n// Access Check Helper\n// ============================================================================\n\nasync function checkTRPCAccess(\n  config: { access?: any; slug: string },\n  operation: \"read\" | \"create\" | \"update\" | \"delete\",\n  ctx: KyroContext,\n): Promise<void> {\n  const result = await checkCollectionAccess(config, operation, {\n    user: ctx.user,\n    req: ctx.req,\n    tenantID: ctx.tenantID,\n    apiKey: ctx.apiKey,\n  });\n  if (!result.allowed) {\n    throw new Error(result.error || \"Access denied\");\n  }\n\n  // Set tenant context\n  if (ctx.tenantID) {\n    ctx.db.setTenantContext({ tenantId: ctx.tenantID, userId: ctx.user?.id ?? '', role: ctx.user?.role, isSuperAdmin: ctx.user?.role === 'super_admin' });\n  }\n}\n\n// ============================================================================\n// CRUD Procedure Builders\n// ============================================================================\n\nexport function createFindProcedure(ctx: KyroContext) {\n  return async (input: {\n    collection: string;\n    where?: Record<string, any>;\n    sort?: string;\n    limit?: number;\n    page?: number;\n    depth?: number;\n    select?: string[];\n    draft?: boolean;\n  }) => {\n    const { collection, where, sort, limit, page, depth, select, draft } = input;\n    const config = ctx.registry.getCollection(collection);\n\n    await checkTRPCAccess(config, \"read\", ctx);\n\n    // Run beforeRead hooks\n    if (config.hooks?.beforeRead) {\n      for (const hook of config.hooks.beforeRead) {\n        await hook({\n          collection,\n          req: ctx.req,\n          user: ctx.user,\n          tenantID: ctx.tenantID,\n          operation: \"read\",\n          where,\n        });\n      }\n    }\n\n    const isDraft = draft ?? !!ctx.user;\n\n    // Execute query\n    const result = await ctx.db.find({\n      collection,\n      where: where || {},\n      sort,\n      limit: limit || 10,\n      page: page || 1,\n      depth: depth || 0,\n      tenantID: ctx.tenantID,\n      select,\n      draft: isDraft,\n    });\n\n    // Run afterRead hooks\n    if (config.hooks?.afterRead) {\n      for (const doc of result.docs) {\n        for (const hook of config.hooks.afterRead) {\n          await hook({\n            collection,\n            doc,\n            req: ctx.req,\n            user: ctx.user,\n            tenantID: ctx.tenantID,\n            operation: \"read\",\n          });\n        }\n      }\n    }\n\n    return result;\n  };\n}\n\nexport function createFindByIDProcedure(ctx: KyroContext) {\n  return async (input: {\n    collection: string;\n    id: string;\n    depth?: number;\n    select?: string[];\n    draft?: boolean;\n  }) => {\n    const { collection, id, depth, select, draft } = input;\n    const config = ctx.registry.getCollection(collection);\n\n    await checkTRPCAccess(config, \"read\", ctx);\n\n    const isDraft = draft ?? !!ctx.user;\n\n    const doc = await ctx.db.findByID({\n      collection,\n      id,\n      depth: depth || 0,\n      tenantID: ctx.tenantID,\n      select,\n      draft: isDraft,\n    });\n\n    if (!doc) throw new Error(`Document not found: ${collection}/${id}`);\n\n    // Run afterRead hooks\n    if (config.hooks?.afterRead) {\n      for (const hook of config.hooks.afterRead) {\n        await hook({\n          collection,\n          doc,\n          req: ctx.req,\n          user: ctx.user,\n          tenantID: ctx.tenantID,\n          operation: \"read\",\n          id,\n        });\n      }\n    }\n\n    return doc;\n  };\n}\n\nexport function createCreateProcedure(ctx: KyroContext) {\n  return async (input: {\n    collection: string;\n    data: Record<string, any>;\n    depth?: number;\n    select?: string[];\n  }) => {\n    const { collection, data, depth, select } = input;\n    const config = ctx.registry.getCollection(collection);\n\n    await checkTRPCAccess(config, \"create\", ctx);\n\n    // Validate with Zod\n    const schema = ctx.registry.getCreateZodSchema(collection);\n    const validated = schema.parse(data);\n\n    // Add tenantID if scoped\n    if (config.tenantScoped && ctx.tenantID) {\n      validated.tenantID = ctx.tenantID;\n    }\n\n    // Run beforeValidate hooks\n    if (config.hooks?.beforeValidate) {\n      for (const hook of config.hooks.beforeValidate) {\n        const hookResult = await hook({\n          collection,\n          data: validated,\n          req: ctx.req,\n          user: ctx.user,\n          tenantID: ctx.tenantID,\n          operation: \"create\",\n        });\n        if (hookResult) Object.assign(validated, hookResult);\n      }\n    }\n\n    // Run beforeChange hooks\n    if (config.hooks?.beforeChange) {\n      for (const hook of config.hooks.beforeChange) {\n        const hookResult = await hook({\n          collection,\n          data: validated,\n          req: ctx.req,\n          user: ctx.user,\n          tenantID: ctx.tenantID,\n          operation: \"create\",\n        });\n        if (hookResult) Object.assign(validated, hookResult);\n      }\n    }\n\n    // Execute create\n    const doc = await ctx.db.create({\n      collection,\n      data: validated,\n      depth: depth || 0,\n      tenantID: ctx.tenantID,\n      select,\n    });\n\n    // Run afterChange hooks\n    if (config.hooks?.afterChange) {\n      for (const hook of config.hooks.afterChange) {\n        await hook({\n          collection,\n          doc,\n          data: validated,\n          req: ctx.req,\n          user: ctx.user,\n          tenantID: ctx.tenantID,\n          operation: \"create\",\n        });\n      }\n    }\n\n    await triggerWebhook(ctx, getWebhookEvent(collection, \"create\"), {\n      collection,\n      data: doc,\n      operation: \"create\",\n    });\n\n    return { doc };\n  };\n}\n\nexport function createUpdateProcedure(ctx: KyroContext) {\n  return async (input: {\n    collection: string;\n    id: string;\n    data: Record<string, any>;\n    depth?: number;\n    select?: string[];\n    baseUpdatedAt?: string;\n  }) => {\n    const { collection, id, data, depth, select, baseUpdatedAt } = input;\n    const config = ctx.registry.getCollection(collection);\n\n    await checkTRPCAccess(config, \"update\", ctx);\n\n    // Get original doc for hooks + conflict detection\n    const originalDoc = await ctx.db.findByID({\n      collection,\n      id,\n      tenantID: ctx.tenantID,\n      draft: true,\n    });\n\n    if (!originalDoc)\n      throw new Error(`Document not found: ${collection}/${id}`);\n\n    // Revision conflict detection\n    if (baseUpdatedAt && (originalDoc as Record<string, any>).updatedAt && baseUpdatedAt !== (originalDoc as Record<string, any>).updatedAt) {\n      throw new Error(`Revision conflict: document has changed since ${baseUpdatedAt}. Current updatedAt: ${(originalDoc as Record<string, any>).updatedAt}`);\n    }\n\n    // Normalize empty strings for non-textual field types\n    normalizeEmptyStrings(data as any, config.fields as any);\n\n    // Validate with Zod\n    const schema = ctx.registry.getUpdateZodSchema(collection);\n    const validated = schema.parse(data);\n\n    // Add tenantID if scoped\n    if (config.tenantScoped && ctx.tenantID) {\n      validated.tenantID = ctx.tenantID;\n    }\n\n    // Run beforeValidate hooks\n    if (config.hooks?.beforeValidate) {\n      for (const hook of config.hooks.beforeValidate) {\n        const hookResult = await hook({\n          collection,\n          data: validated,\n          originalDoc,\n          req: ctx.req,\n          user: ctx.user,\n          tenantID: ctx.tenantID,\n          operation: \"update\",\n          id,\n        });\n        if (hookResult) Object.assign(validated, hookResult);\n      }\n    }\n\n    // Run beforeChange hooks\n    if (config.hooks?.beforeChange) {\n      for (const hook of config.hooks.beforeChange) {\n        const hookResult = await hook({\n          collection,\n          data: validated,\n          originalDoc,\n          req: ctx.req,\n          user: ctx.user,\n          tenantID: ctx.tenantID,\n          operation: \"update\",\n          id,\n        });\n        if (hookResult) Object.assign(validated, hookResult);\n      }\n    }\n\n    // Determine if this is a draft save vs publish\n    const isDraft = (ctx.req && typeof (ctx.req as any).headers?.get === \"function\" && (ctx.req as any).headers.get(\"x-draft\") === \"true\") || (input as any).draft === true;\n    const isDraftEnabled = config.versions?.drafts === true;\n    const isAutosave = ((ctx.req as any)?.query?.autosave === \"true\") || ((ctx.req as any)?.url?.includes(\"autosave=true\")) || (input as any).autosave === true;\n\n    let doc;\n    if (isDraftEnabled && isDraft) {\n      // Draft save: versions table only\n      // Autosave reuses a single version slot; manual draft creates a new version\n      await ctx.db.createVersion({\n        collection,\n        documentId: id,\n        data: validated,\n        status: 'draft',\n        autosave: isAutosave,\n        createdBy: ctx.user?.id,\n        tenantID: ctx.tenantID,\n      });\n      // Refetch merged doc\n      doc = await ctx.db.findByID({ collection, id, tenantID: ctx.tenantID, draft: true });\n    } else if (isDraftEnabled) {\n      // Publish: main doc + versions table\n      doc = await ctx.db.update({\n        collection,\n        id,\n        data: { ...validated, status: 'published' },\n        depth: depth || 0,\n        tenantID: ctx.tenantID,\n        select,\n      });\n      await ctx.db.createVersion({\n        collection,\n        documentId: id,\n        data: validated,\n        status: 'published',\n        createdBy: ctx.user?.id,\n        tenantID: ctx.tenantID,\n      });\n    } else {\n      // No versions: direct update\n      doc = await ctx.db.update({\n        collection,\n        id,\n        data: validated,\n        depth: depth || 0,\n        tenantID: ctx.tenantID,\n        select,\n      });\n    }\n\n    // Run afterChange hooks\n    if (config.hooks?.afterChange) {\n      for (const hook of config.hooks.afterChange) {\n        await hook({\n          collection,\n          doc,\n          data: validated,\n          originalDoc,\n          req: ctx.req,\n          user: ctx.user,\n          tenantID: ctx.tenantID,\n          operation: \"update\",\n          id,\n        });\n      }\n    }\n\n    await triggerWebhook(ctx, getWebhookEvent(collection, \"update\"), {\n      collection,\n      data: doc,\n      previousData: originalDoc,\n      operation: \"update\",\n    });\n\n    return { doc };\n  };\n}\n\nexport function createDeleteProcedure(ctx: KyroContext) {\n  return async (input: { collection: string; id: string }) => {\n    const { collection, id } = input;\n    const config = ctx.registry.getCollection(collection);\n\n    await checkTRPCAccess(config, \"delete\", ctx);\n\n    // Get original doc for hooks\n    const originalDoc = await ctx.db.findByID({\n      collection,\n      id,\n      tenantID: ctx.tenantID,\n      draft: true,\n    });\n\n    if (!originalDoc)\n      throw new Error(`Document not found: ${collection}/${id}`);\n\n    // Run beforeDelete hooks\n    if (config.hooks?.beforeDelete) {\n      for (const hook of config.hooks.beforeDelete) {\n        await hook({\n          collection,\n          doc: originalDoc,\n          req: ctx.req,\n          user: ctx.user,\n          tenantID: ctx.tenantID,\n          operation: \"delete\",\n          id,\n        });\n      }\n    }\n\n    // Execute delete\n    const doc = await ctx.db.delete({\n      collection,\n      id,\n      tenantID: ctx.tenantID,\n    });\n\n    // Run afterDelete hooks\n    if (config.hooks?.afterDelete) {\n      for (const hook of config.hooks.afterDelete) {\n        await hook({\n          collection,\n          doc,\n          req: ctx.req,\n          user: ctx.user,\n          tenantID: ctx.tenantID,\n          operation: \"delete\",\n          id,\n        });\n      }\n    }\n\n    await triggerWebhook(ctx, getWebhookEvent(collection, \"delete\"), {\n      collection,\n      data: doc,\n      previousData: originalDoc,\n      operation: \"delete\",\n    });\n\n    return { doc, message: \"Deleted successfully\" };\n  };\n}\n\nexport function createCountProcedure(ctx: KyroContext) {\n  return async (input: { collection: string; where?: Record<string, any> }) => {\n    const { collection, where } = input;\n    const config = ctx.registry.getCollection(collection);\n\n    await checkTRPCAccess(config, \"read\", ctx);\n\n    const totalDocs = await ctx.db.count({\n      collection,\n      where: where || {},\n      tenantID: ctx.tenantID,\n    });\n\n    return { totalDocs };\n  };\n}\n","import type { KyroContext } from \"./context.js\";\nimport {\n  createFindProcedure,\n  createFindByIDProcedure,\n  createCreateProcedure,\n  createUpdateProcedure,\n  createDeleteProcedure,\n  createCountProcedure,\n} from \"./procedures.js\";\nimport { checkGlobalAccess as checkGlobalAccessShared } from \"../../access/checker.js\";\n\n// ============================================================================\n// Global Access Check Helper\n// ============================================================================\n\nasync function checkGlobalAccessTRPC(\n  global: { access?: any; slug: string },\n  operation: \"read\" | \"update\",\n  ctx: KyroContext,\n): Promise<void> {\n  const result = await checkGlobalAccessShared(global, operation, {\n    user: ctx.user,\n    req: ctx.req,\n    tenantID: ctx.tenantID,\n  });\n  if (!result.allowed) {\n    throw new Error(result.error || \"Access denied\");\n  }\n\n  if (ctx.tenantID) {\n    ctx.db.setTenantContext({ tenantId: ctx.tenantID, userId: ctx.user?.id ?? '', role: ctx.user?.role, isSuperAdmin: ctx.user?.role === 'super_admin' });\n  }\n}\n\n// ============================================================================\n// Dynamic Router Generator\n// ============================================================================\n\nexport function createDynamicRouter(ctx: KyroContext) {\n  const router: Record<string, any> = {};\n  const collections = ctx.registry.getCollections();\n\n  for (const collection of collections) {\n    const slug = collection.slug;\n\n    router[slug] = {\n      find: createFindProcedure(ctx),\n      findByID: createFindByIDProcedure(ctx),\n      create: createCreateProcedure(ctx),\n      update: createUpdateProcedure(ctx),\n      delete: createDeleteProcedure(ctx),\n      count: createCountProcedure(ctx),\n    };\n  }\n\n  // Add globals\n  const globals = ctx.registry.getGlobals();\n  for (const global of globals) {\n    const slug = global.slug;\n\n    router[`_globals_${slug}`] = {\n      get: async () => {\n        await checkGlobalAccessTRPC(global, \"read\", ctx);\n\n        const doc = await ctx.db.findOne({\n          collection: `_globals_${slug}`,\n          where: {},\n          tenantID: ctx.tenantID,\n        });\n        return doc;\n      },\n      update: async (input: { data: Record<string, any> }) => {\n        await checkGlobalAccessTRPC(global, \"update\", ctx);\n\n        const schema = ctx.registry.getZodSchema(slug);\n        const validated = schema.parse(input.data);\n\n        const existing = await ctx.db.findOne({\n          collection: `_globals_${slug}`,\n          where: {},\n          tenantID: ctx.tenantID,\n        });\n\n        let doc;\n        if (existing) {\n          doc = await ctx.db.update({\n            collection: `_globals_${slug}`,\n            id: existing.id,\n            data: validated,\n            tenantID: ctx.tenantID,\n          });\n        } else {\n          doc = await ctx.db.create({\n            collection: `_globals_${slug}`,\n            data: { ...validated, id: slug },\n            tenantID: ctx.tenantID,\n          });\n        }\n\n        return doc;\n      },\n    };\n  }\n\n  return router;\n}\n\n// ============================================================================\n// Typed Router Interface\n// ============================================================================\n\nexport interface KyroRouter {\n  [collectionSlug: string]: {\n    find: (input: {\n      where?: Record<string, any>;\n      sort?: string;\n      limit?: number;\n      page?: number;\n      depth?: number;\n      select?: string[];\n      draft?: boolean;\n    }) => Promise<{\n      docs: any[];\n      totalDocs: number;\n      limit: number;\n      totalPages: number;\n      page: number;\n      pagingCounter: number;\n      hasPrevPage: boolean;\n      hasNextPage: boolean;\n      prevPage: number | null;\n      nextPage: number | null;\n    }>;\n    findByID: (input: {\n      id: string;\n      depth?: number;\n      select?: string[];\n      draft?: boolean;\n    }) => Promise<any>;\n    create: (input: {\n      data: Record<string, any>;\n      depth?: number;\n      select?: string[];\n    }) => Promise<{ doc: any }>;\n    update: (input: {\n      id: string;\n      data: Record<string, any>;\n      depth?: number;\n      select?: string[];\n      baseUpdatedAt?: string;\n    }) => Promise<{ doc: any }>;\n    delete: (input: { id: string }) => Promise<{ doc: any; message: string }>;\n    count: (input: {\n      where?: Record<string, any>;\n    }) => Promise<{ totalDocs: number }>;\n  };\n}\n\n// ============================================================================\n// Server Entry\n// ============================================================================\n\nexport function createKyroServer(ctx: KyroContext): KyroRouter {\n  // Check if tRPC is disabled in settings\n  const apiAccess = ctx.settings?.access?.apiAccess;\n  if (apiAccess?.trpcEnabled === false) {\n    throw new Error(\"tRPC API is disabled\");\n  }\n\n  return createDynamicRouter(ctx) as KyroRouter;\n}\n"]}
+{"version":3,"sources":["../src/api/trpc/context.ts","../src/api/trpc/procedures.ts","../src/api/trpc/router.ts"],"names":["createWebhookService","extractApiKeyFromRequest","validateApiKey","createApiKeyContext","WEBHOOK_EVENTS","checkCollectionAccess","checkGlobalAccess"],"mappings":";;;;;;AAsCA,eAAsB,cAAc,OAAA,EAOX;AACvB,EAAA,MAAM,cAAA,GAAiBA,sCAAA,CAAqB,OAAA,CAAQ,EAAE,CAAA;AAEtD,EAAA,MAAM,WAAA,GAA2B;AAAA,IAC/B,IAAI,OAAA,CAAQ,EAAA;AAAA,IACZ,UAAU,OAAA,CAAQ,QAAA;AAAA,IAClB,KAAK,OAAA,CAAQ,GAAA;AAAA,IACb,MAAM,OAAA,CAAQ,IAAA;AAAA,IACd,UAAU,OAAA,CAAQ,QAAA;AAAA,IAClB,cAAA;AAAA,IACA,UAAU,OAAA,CAAQ;AAAA,GACpB;AAEA,EAAA,MAAM,SAAA,GAAYC,0CAAA,CAAyB,OAAA,CAAQ,GAAU,CAAA;AAC7D,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,MAAM,SAAS,MAAMC,gCAAA,CAAe,WAAW,OAAA,CAAQ,EAAA,EAAI,OAAO,MAAA,KAAW;AAC3E,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAQ,EAAA,CAAG,QAAA,CAAS,EAAE,UAAA,EAAY,OAAA,EAAS,EAAA,EAAI,MAAA,EAAQ,CAAA;AAC1E,QAAA,OAAO,IAAA,IAAQ,IAAA;AAAA,MACjB,CAAA,CAAA,MAAQ;AACN,QAAA,OAAO,IAAA;AAAA,MACT;AAAA,IACF,CAAC,CAAA;AACD,IAAA,IAAI,OAAO,KAAA,EAAO;AAChB,MAAA,WAAA,CAAY,IAAA,GAAQ,MAAA,CAAO,IAAA,IAAiB,OAAA,CAAQ,IAAA;AACpD,MAAA,WAAA,CAAY,QAAA,GAAW,MAAA,CAAO,QAAA,IAAY,OAAA,CAAQ,QAAA;AAClD,MAAA,WAAA,CAAY,MAAA,GAASC,sCAAoB,MAAM,CAAA;AAAA,IACjD;AAAA,EACF;AAEA,EAAA,OAAO,WAAA;AACT;;;AChEA,IAAM,oBAAA,GAGF;AAAA,EACF,MAAA,EAAQ;AAAA,IACN,QAAQC,gCAAA,CAAe,YAAA;AAAA,IACvB,QAAQA,gCAAA,CAAe,YAAA;AAAA,IACvB,QAAQA,gCAAA,CAAe;AAAA;AAE3B,CAAA;AAEA,SAAS,eAAA,CACP,YACA,SAAA,EACc;AACd,EAAA,MAAM,MAAA,GAAS,qBAAqB,UAAU,CAAA;AAC9C,EAAA,IAAI,MAAA,EAAQ,OAAO,MAAA,CAAO,SAAS,CAAA;AACnC,EAAA,OAAO,cAAc,SAAS,CAAA,CAAA;AAChC;AAEA,eAAe,cAAA,CACb,GAAA,EACA,KAAA,EACA,OAAA,EAMA;AACA,EAAA,IAAI,CAAC,IAAI,cAAA,EAAgB;AACzB,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,CAAI,cAAA,CAAe,OAAA,CAAQ,KAAA,EAAO;AAAA,MACtC,YAAY,OAAA,CAAQ,UAAA;AAAA,MACpB,WAAW,OAAA,CAAQ,SAAA;AAAA,MACnB,MAAM,OAAA,CAAQ,IAAA;AAAA,MACd,cAAc,OAAA,CAAQ,YAAA;AAAA,MACtB,MAAM,GAAA,CAAI,IAAA,GACN,EAAE,EAAA,EAAI,IAAI,IAAA,CAAK,EAAA,EAAI,KAAA,EAAO,GAAA,CAAI,KAAK,KAAA,EAAO,IAAA,EAAM,GAAA,CAAI,IAAA,CAAK,MAAK,GAC9D,KAAA,CAAA;AAAA,MACJ,UAAU,GAAA,CAAI;AAAA,KACf,CAAA;AAAA,EACH,SAAS,GAAA,EAAK;AACZ,IAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,4BAAA,EAA+B,KAAK,CAAA,CAAA,CAAA,EAAK,GAAG,CAAA;AAAA,EAC5D;AACF;AAMA,SAAS,qBAAA,CAAsB,MAAW,MAAA,EAAuB;AAC/D,EAAA,IAAI,CAAC,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,EAAU;AACvC,EAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,IAAA,IAAI,CAAC,KAAA,CAAM,IAAA,IAAQ,EAAE,KAAA,CAAM,QAAQ,IAAA,CAAA,EAAO;AAC1C,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC3B,IAAA,IAAI,QAAQ,EAAA,EAAI;AACd,MAAA,MAAM,SAAA,GAAY,MAAM,IAAA,KAAS,MAAA,IAAU,MAAM,IAAA,KAAS,UAAA,IAAc,MAAM,IAAA,KAAS,MAAA,IAAU,MAAM,IAAA,KAAS,UAAA,IAAc,MAAM,IAAA,KAAS,OAAA,IAAW,MAAM,IAAA,KAAS,UAAA,IAAc,MAAM,IAAA,KAAS,OAAA;AACpM,MAAA,IAAI,CAAC,SAAA,EAAW,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA,GAAI,IAAA;AAAA,IACrC;AACA,IAAA,IAAI,MAAM,IAAA,KAAS,MAAA,IAAU,MAAM,IAAA,IAAQ,KAAA,CAAM,QAAS,KAAA,CAAc,IAAI,KAAK,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA,IAAK,OAAO,KAAK,KAAA,CAAM,IAAI,MAAM,QAAA,EAAU;AACzI,MAAA,KAAA,MAAW,GAAA,IAAQ,MAAc,IAAA,EAAM;AACrC,QAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,GAAA,CAAI,MAAM,CAAA,EAAG,qBAAA,CAAsB,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA,EAAG,GAAA,CAAI,MAAiB,CAAA;AAAA,MAC9F;AAAA,IACF,CAAA,MAAA,IAAA,CAAY,MAAM,IAAA,KAAS,OAAA,IAAW,MAAM,IAAA,KAAS,aAAA,KAAkB,KAAA,CAAM,IAAA,IAAQ,KAAA,CAAM,OAAA,CAAS,MAAc,MAAM,CAAA,IAAK,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA,IAAK,OAAO,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA,KAAM,QAAA,EAAU;AACrL,MAAA,qBAAA,CAAsB,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA,EAAI,MAAc,MAAiB,CAAA;AAAA,IAC1E,WAAW,KAAA,CAAM,IAAA,KAAS,OAAA,IAAW,KAAA,CAAM,QAAQ,KAAA,CAAM,OAAA,CAAS,KAAA,CAAc,MAAM,KAAK,KAAA,CAAM,OAAA,CAAQ,KAAK,KAAA,CAAM,IAAI,CAAC,CAAA,EAAG;AAC1H,MAAA,KAAA,MAAW,IAAA,IAAQ,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA,EAAG;AACnC,QAAA,IAAI,QAAQ,OAAO,IAAA,KAAS,UAAU,qBAAA,CAAsB,IAAA,EAAO,MAAc,MAAiB,CAAA;AAAA,MACpG;AAAA,IACF,WAAW,KAAA,CAAM,IAAA,KAAS,QAAA,IAAY,KAAA,CAAM,QAAQ,KAAA,CAAM,OAAA,CAAS,KAAA,CAAc,MAAM,KAAK,KAAA,CAAM,OAAA,CAAQ,KAAK,KAAA,CAAM,IAAI,CAAC,CAAA,EAAG;AAC3H,MAAA,KAAA,MAAW,IAAA,IAAQ,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA,EAAG;AACnC,QAAA,IAAI,CAAC,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,EAAU;AACvC,QAAA,MAAM,YAAA,GAAe,IAAA,CAAK,IAAA,IAAQ,IAAA,CAAK,SAAA;AACvC,QAAA,IAAI,CAAC,YAAA,EAAc;AACnB,QAAA,MAAM,QAAA,GAAY,MAAc,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,KAAW,CAAA,CAAE,SAAS,YAAY,CAAA;AAC/E,QAAA,IAAI,CAAC,QAAA,IAAY,CAAC,MAAM,OAAA,CAAQ,QAAA,CAAS,MAAM,CAAA,EAAG;AAClD,QAAA,MAAM,MAAA,GAAS,KAAK,IAAA,IAAQ,OAAO,KAAK,IAAA,KAAS,QAAA,GAAW,KAAK,IAAA,GAAO,IAAA;AACxE,QAAA,qBAAA,CAAsB,MAAA,EAAQ,SAAS,MAAiB,CAAA;AAAA,MAC1D;AAAA,IACF;AAAA,EACF;AACF;AAMA,eAAe,eAAA,CACb,MAAA,EACA,SAAA,EACA,GAAA,EACe;AACf,EAAA,MAAM,MAAA,GAAS,MAAMC,uCAAA,CAAsB,MAAA,EAAQ,SAAA,EAAW;AAAA,IAC5D,MAAM,GAAA,CAAI,IAAA;AAAA,IACV,KAAK,GAAA,CAAI,GAAA;AAAA,IACT,UAAU,GAAA,CAAI,QAAA;AAAA,IACd,QAAQ,GAAA,CAAI;AAAA,GACb,CAAA;AACD,EAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,IAAA,MAAM,IAAI,KAAA,CAAM,MAAA,CAAO,KAAA,IAAS,eAAe,CAAA;AAAA,EACjD;AAGA,EAAA,IAAI,IAAI,QAAA,EAAU;AAChB,IAAA,GAAA,CAAI,EAAA,CAAG,iBAAiB,EAAE,QAAA,EAAU,IAAI,QAAA,EAAU,MAAA,EAAQ,IAAI,IAAA,EAAM,EAAA,IAAM,IAAI,IAAA,EAAM,GAAA,CAAI,MAAM,IAAA,EAAM,YAAA,EAAc,IAAI,IAAA,EAAM,IAAA,KAAS,eAAe,CAAA;AAAA,EACtJ;AACF;AAMO,SAAS,oBAAoB,GAAA,EAAkB;AACpD,EAAA,OAAO,OAAO,KAAA,KASR;AACJ,IAAA,MAAM,EAAE,YAAY,KAAA,EAAO,IAAA,EAAM,OAAO,IAAA,EAAM,KAAA,EAAO,MAAA,EAAQ,KAAA,EAAM,GAAI,KAAA;AACvE,IAAA,MAAM,MAAA,GAAS,GAAA,CAAI,QAAA,CAAS,aAAA,CAAc,UAAU,CAAA;AAEpD,IAAA,MAAM,eAAA,CAAgB,MAAA,EAAQ,MAAA,EAAQ,GAAG,CAAA;AAGzC,IAAA,IAAI,MAAA,CAAO,OAAO,UAAA,EAAY;AAC5B,MAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,KAAA,CAAM,UAAA,EAAY;AAC1C,QAAA,MAAM,IAAA,CAAK;AAAA,UACT,UAAA;AAAA,UACA,KAAK,GAAA,CAAI,GAAA;AAAA,UACT,MAAM,GAAA,CAAI,IAAA;AAAA,UACV,UAAU,GAAA,CAAI,QAAA;AAAA,UACd,SAAA,EAAW,MAAA;AAAA,UACX;AAAA,SACD,CAAA;AAAA,MACH;AAAA,IACF;AAEA,IAAA,MAAM,OAAA,GAAU,KAAA,IAAS,CAAC,CAAC,GAAA,CAAI,IAAA;AAG/B,IAAA,MAAM,MAAA,GAAS,MAAM,GAAA,CAAI,EAAA,CAAG,IAAA,CAAK;AAAA,MAC/B,UAAA;AAAA,MACA,KAAA,EAAO,SAAS,EAAC;AAAA,MACjB,IAAA;AAAA,MACA,OAAO,KAAA,IAAS,EAAA;AAAA,MAChB,MAAM,IAAA,IAAQ,CAAA;AAAA,MACd,OAAO,KAAA,IAAS,CAAA;AAAA,MAChB,UAAU,GAAA,CAAI,QAAA;AAAA,MACd,MAAA;AAAA,MACA,KAAA,EAAO;AAAA,KACR,CAAA;AAGD,IAAA,IAAI,MAAA,CAAO,OAAO,SAAA,EAAW;AAC3B,MAAA,KAAA,MAAW,GAAA,IAAO,OAAO,IAAA,EAAM;AAC7B,QAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,KAAA,CAAM,SAAA,EAAW;AACzC,UAAA,MAAM,IAAA,CAAK;AAAA,YACT,UAAA;AAAA,YACA,GAAA;AAAA,YACA,KAAK,GAAA,CAAI,GAAA;AAAA,YACT,MAAM,GAAA,CAAI,IAAA;AAAA,YACV,UAAU,GAAA,CAAI,QAAA;AAAA,YACd,SAAA,EAAW;AAAA,WACZ,CAAA;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAEA,IAAA,OAAO,MAAA;AAAA,EACT,CAAA;AACF;AAEO,SAAS,wBAAwB,GAAA,EAAkB;AACxD,EAAA,OAAO,OAAO,KAAA,KAMR;AACJ,IAAA,MAAM,EAAE,UAAA,EAAY,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,OAAM,GAAI,KAAA;AACjD,IAAA,MAAM,MAAA,GAAS,GAAA,CAAI,QAAA,CAAS,aAAA,CAAc,UAAU,CAAA;AAEpD,IAAA,MAAM,eAAA,CAAgB,MAAA,EAAQ,MAAA,EAAQ,GAAG,CAAA;AAEzC,IAAA,MAAM,OAAA,GAAU,KAAA,IAAS,CAAC,CAAC,GAAA,CAAI,IAAA;AAE/B,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,CAAI,EAAA,CAAG,QAAA,CAAS;AAAA,MAChC,UAAA;AAAA,MACA,EAAA;AAAA,MACA,OAAO,KAAA,IAAS,CAAA;AAAA,MAChB,UAAU,GAAA,CAAI,QAAA;AAAA,MACd,MAAA;AAAA,MACA,KAAA,EAAO;AAAA,KACR,CAAA;AAED,IAAA,IAAI,CAAC,KAAK,MAAM,IAAI,MAAM,CAAA,oBAAA,EAAuB,UAAU,CAAA,CAAA,EAAI,EAAE,CAAA,CAAE,CAAA;AAGnE,IAAA,IAAI,MAAA,CAAO,OAAO,SAAA,EAAW;AAC3B,MAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,KAAA,CAAM,SAAA,EAAW;AACzC,QAAA,MAAM,IAAA,CAAK;AAAA,UACT,UAAA;AAAA,UACA,GAAA;AAAA,UACA,KAAK,GAAA,CAAI,GAAA;AAAA,UACT,MAAM,GAAA,CAAI,IAAA;AAAA,UACV,UAAU,GAAA,CAAI,QAAA;AAAA,UACd,SAAA,EAAW,MAAA;AAAA,UACX;AAAA,SACD,CAAA;AAAA,MACH;AAAA,IACF;AAEA,IAAA,OAAO,GAAA;AAAA,EACT,CAAA;AACF;AAEO,SAAS,sBAAsB,GAAA,EAAkB;AACtD,EAAA,OAAO,OAAO,KAAA,KAKR;AACJ,IAAA,MAAM,EAAE,UAAA,EAAY,IAAA,EAAM,KAAA,EAAO,QAAO,GAAI,KAAA;AAC5C,IAAA,MAAM,MAAA,GAAS,GAAA,CAAI,QAAA,CAAS,aAAA,CAAc,UAAU,CAAA;AAEpD,IAAA,MAAM,eAAA,CAAgB,MAAA,EAAQ,QAAA,EAAU,GAAG,CAAA;AAG3C,IAAA,MAAM,MAAA,GAAS,GAAA,CAAI,QAAA,CAAS,kBAAA,CAAmB,UAAU,CAAA;AACzD,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA;AAGnC,IAAA,IAAI,MAAA,CAAO,YAAA,IAAgB,GAAA,CAAI,QAAA,EAAU;AACvC,MAAA,SAAA,CAAU,WAAW,GAAA,CAAI,QAAA;AAAA,IAC3B;AAGA,IAAA,IAAI,MAAA,CAAO,OAAO,cAAA,EAAgB;AAChC,MAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,KAAA,CAAM,cAAA,EAAgB;AAC9C,QAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK;AAAA,UAC5B,UAAA;AAAA,UACA,IAAA,EAAM,SAAA;AAAA,UACN,KAAK,GAAA,CAAI,GAAA;AAAA,UACT,MAAM,GAAA,CAAI,IAAA;AAAA,UACV,UAAU,GAAA,CAAI,QAAA;AAAA,UACd,SAAA,EAAW;AAAA,SACZ,CAAA;AACD,QAAA,IAAI,UAAA,EAAY,MAAA,CAAO,MAAA,CAAO,SAAA,EAAW,UAAU,CAAA;AAAA,MACrD;AAAA,IACF;AAGA,IAAA,IAAI,MAAA,CAAO,OAAO,YAAA,EAAc;AAC9B,MAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,KAAA,CAAM,YAAA,EAAc;AAC5C,QAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK;AAAA,UAC5B,UAAA;AAAA,UACA,IAAA,EAAM,SAAA;AAAA,UACN,KAAK,GAAA,CAAI,GAAA;AAAA,UACT,MAAM,GAAA,CAAI,IAAA;AAAA,UACV,UAAU,GAAA,CAAI,QAAA;AAAA,UACd,SAAA,EAAW;AAAA,SACZ,CAAA;AACD,QAAA,IAAI,UAAA,EAAY,MAAA,CAAO,MAAA,CAAO,SAAA,EAAW,UAAU,CAAA;AAAA,MACrD;AAAA,IACF;AAGA,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,CAAI,EAAA,CAAG,MAAA,CAAO;AAAA,MAC9B,UAAA;AAAA,MACA,IAAA,EAAM,SAAA;AAAA,MACN,OAAO,KAAA,IAAS,CAAA;AAAA,MAChB,UAAU,GAAA,CAAI,QAAA;AAAA,MACd;AAAA,KACD,CAAA;AAGD,IAAA,IAAI,MAAA,CAAO,OAAO,WAAA,EAAa;AAC7B,MAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,KAAA,CAAM,WAAA,EAAa;AAC3C,QAAA,MAAM,IAAA,CAAK;AAAA,UACT,UAAA;AAAA,UACA,GAAA;AAAA,UACA,IAAA,EAAM,SAAA;AAAA,UACN,KAAK,GAAA,CAAI,GAAA;AAAA,UACT,MAAM,GAAA,CAAI,IAAA;AAAA,UACV,UAAU,GAAA,CAAI,QAAA;AAAA,UACd,SAAA,EAAW;AAAA,SACZ,CAAA;AAAA,MACH;AAAA,IACF;AAEA,IAAA,MAAM,cAAA,CAAe,GAAA,EAAK,eAAA,CAAgB,UAAA,EAAY,QAAQ,CAAA,EAAG;AAAA,MAC/D,UAAA;AAAA,MACA,IAAA,EAAM,GAAA;AAAA,MACN,SAAA,EAAW;AAAA,KACZ,CAAA;AAED,IAAA,OAAO,EAAE,GAAA,EAAI;AAAA,EACf,CAAA;AACF;AAEO,SAAS,sBAAsB,GAAA,EAAkB;AACtD,EAAA,OAAO,OAAO,KAAA,KAOR;AACJ,IAAA,MAAM,EAAE,UAAA,EAAY,EAAA,EAAI,MAAM,KAAA,EAAO,MAAA,EAAQ,eAAc,GAAI,KAAA;AAC/D,IAAA,MAAM,MAAA,GAAS,GAAA,CAAI,QAAA,CAAS,aAAA,CAAc,UAAU,CAAA;AAEpD,IAAA,MAAM,eAAA,CAAgB,MAAA,EAAQ,QAAA,EAAU,GAAG,CAAA;AAG3C,IAAA,MAAM,WAAA,GAAc,MAAM,GAAA,CAAI,EAAA,CAAG,QAAA,CAAS;AAAA,MACxC,UAAA;AAAA,MACA,EAAA;AAAA,MACA,UAAU,GAAA,CAAI,QAAA;AAAA,MACd,KAAA,EAAO;AAAA,KACR,CAAA;AAED,IAAA,IAAI,CAAC,WAAA;AACH,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,oBAAA,EAAuB,UAAU,CAAA,CAAA,EAAI,EAAE,CAAA,CAAE,CAAA;AAG3D,IAAA,IAAI,aAAA,IAAkB,WAAA,CAAoC,SAAA,IAAa,aAAA,KAAmB,YAAoC,SAAA,EAAW;AACvI,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,8CAAA,EAAiD,aAAa,CAAA,qBAAA,EAAyB,WAAA,CAAoC,SAAS,CAAA,CAAE,CAAA;AAAA,IACxJ;AAGA,IAAA,qBAAA,CAAsB,IAAA,EAAa,OAAO,MAAa,CAAA;AAGvD,IAAA,MAAM,MAAA,GAAS,GAAA,CAAI,QAAA,CAAS,kBAAA,CAAmB,UAAU,CAAA;AACzD,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA;AAGnC,IAAA,IAAI,MAAA,CAAO,YAAA,IAAgB,GAAA,CAAI,QAAA,EAAU;AACvC,MAAA,SAAA,CAAU,WAAW,GAAA,CAAI,QAAA;AAAA,IAC3B;AAGA,IAAA,IAAI,MAAA,CAAO,OAAO,cAAA,EAAgB;AAChC,MAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,KAAA,CAAM,cAAA,EAAgB;AAC9C,QAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK;AAAA,UAC5B,UAAA;AAAA,UACA,IAAA,EAAM,SAAA;AAAA,UACN,WAAA;AAAA,UACA,KAAK,GAAA,CAAI,GAAA;AAAA,UACT,MAAM,GAAA,CAAI,IAAA;AAAA,UACV,UAAU,GAAA,CAAI,QAAA;AAAA,UACd,SAAA,EAAW,QAAA;AAAA,UACX;AAAA,SACD,CAAA;AACD,QAAA,IAAI,UAAA,EAAY,MAAA,CAAO,MAAA,CAAO,SAAA,EAAW,UAAU,CAAA;AAAA,MACrD;AAAA,IACF;AAGA,IAAA,IAAI,MAAA,CAAO,OAAO,YAAA,EAAc;AAC9B,MAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,KAAA,CAAM,YAAA,EAAc;AAC5C,QAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK;AAAA,UAC5B,UAAA;AAAA,UACA,IAAA,EAAM,SAAA;AAAA,UACN,WAAA;AAAA,UACA,KAAK,GAAA,CAAI,GAAA;AAAA,UACT,MAAM,GAAA,CAAI,IAAA;AAAA,UACV,UAAU,GAAA,CAAI,QAAA;AAAA,UACd,SAAA,EAAW,QAAA;AAAA,UACX;AAAA,SACD,CAAA;AACD,QAAA,IAAI,UAAA,EAAY,MAAA,CAAO,MAAA,CAAO,SAAA,EAAW,UAAU,CAAA;AAAA,MACrD;AAAA,IACF;AAGA,IAAA,MAAM,UAAW,GAAA,CAAI,GAAA,IAAO,OAAQ,GAAA,CAAI,IAAY,OAAA,EAAS,GAAA,KAAQ,UAAA,IAAe,GAAA,CAAI,IAAY,OAAA,CAAQ,GAAA,CAAI,SAAS,CAAA,KAAM,MAAA,IAAY,MAAc,KAAA,KAAU,IAAA;AACnK,IAAA,MAAM,cAAA,GAAiB,MAAA,CAAO,QAAA,EAAU,MAAA,KAAW,IAAA;AACnD,IAAA,MAAM,UAAA,GAAe,GAAA,CAAI,GAAA,EAAa,KAAA,EAAO,QAAA,KAAa,MAAA,IAAa,GAAA,CAAI,GAAA,EAAa,GAAA,EAAK,QAAA,CAAS,eAAe,CAAA,IAAO,MAAc,QAAA,KAAa,IAAA;AAEvJ,IAAA,IAAI,GAAA;AACJ,IAAA,IAAI,kBAAkB,OAAA,EAAS;AAG7B,MAAA,MAAM,GAAA,CAAI,GAAG,aAAA,CAAc;AAAA,QACzB,UAAA;AAAA,QACA,UAAA,EAAY,EAAA;AAAA,QACZ,IAAA,EAAM,SAAA;AAAA,QACN,MAAA,EAAQ,OAAA;AAAA,QACR,QAAA,EAAU,UAAA;AAAA,QACV,SAAA,EAAW,IAAI,IAAA,EAAM,EAAA;AAAA,QACrB,UAAU,GAAA,CAAI;AAAA,OACf,CAAA;AAED,MAAA,GAAA,GAAM,MAAM,GAAA,CAAI,EAAA,CAAG,QAAA,CAAS,EAAE,UAAA,EAAY,EAAA,EAAI,QAAA,EAAU,GAAA,CAAI,QAAA,EAAU,KAAA,EAAO,IAAA,EAAM,CAAA;AAAA,IACrF,WAAW,cAAA,EAAgB;AAEzB,MAAA,GAAA,GAAM,MAAM,GAAA,CAAI,EAAA,CAAG,MAAA,CAAO;AAAA,QACxB,UAAA;AAAA,QACA,EAAA;AAAA,QACA,IAAA,EAAM,EAAE,GAAG,SAAA,EAAW,QAAQ,WAAA,EAAY;AAAA,QAC1C,OAAO,KAAA,IAAS,CAAA;AAAA,QAChB,UAAU,GAAA,CAAI,QAAA;AAAA,QACd;AAAA,OACD,CAAA;AACD,MAAA,MAAM,GAAA,CAAI,GAAG,aAAA,CAAc;AAAA,QACzB,UAAA;AAAA,QACA,UAAA,EAAY,EAAA;AAAA,QACZ,IAAA,EAAM,SAAA;AAAA,QACN,MAAA,EAAQ,WAAA;AAAA,QACR,SAAA,EAAW,IAAI,IAAA,EAAM,EAAA;AAAA,QACrB,UAAU,GAAA,CAAI;AAAA,OACf,CAAA;AAAA,IACH,CAAA,MAAO;AAEL,MAAA,GAAA,GAAM,MAAM,GAAA,CAAI,EAAA,CAAG,MAAA,CAAO;AAAA,QACxB,UAAA;AAAA,QACA,EAAA;AAAA,QACA,IAAA,EAAM,SAAA;AAAA,QACN,OAAO,KAAA,IAAS,CAAA;AAAA,QAChB,UAAU,GAAA,CAAI,QAAA;AAAA,QACd;AAAA,OACD,CAAA;AAAA,IACH;AAGA,IAAA,IAAI,MAAA,CAAO,OAAO,WAAA,EAAa;AAC7B,MAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,KAAA,CAAM,WAAA,EAAa;AAC3C,QAAA,MAAM,IAAA,CAAK;AAAA,UACT,UAAA;AAAA,UACA,GAAA;AAAA,UACA,IAAA,EAAM,SAAA;AAAA,UACN,WAAA;AAAA,UACA,KAAK,GAAA,CAAI,GAAA;AAAA,UACT,MAAM,GAAA,CAAI,IAAA;AAAA,UACV,UAAU,GAAA,CAAI,QAAA;AAAA,UACd,SAAA,EAAW,QAAA;AAAA,UACX;AAAA,SACD,CAAA;AAAA,MACH;AAAA,IACF;AAEA,IAAA,MAAM,cAAA,CAAe,GAAA,EAAK,eAAA,CAAgB,UAAA,EAAY,QAAQ,CAAA,EAAG;AAAA,MAC/D,UAAA;AAAA,MACA,IAAA,EAAM,GAAA;AAAA,MACN,YAAA,EAAc,WAAA;AAAA,MACd,SAAA,EAAW;AAAA,KACZ,CAAA;AAED,IAAA,OAAO,EAAE,GAAA,EAAI;AAAA,EACf,CAAA;AACF;AAEO,SAAS,sBAAsB,GAAA,EAAkB;AACtD,EAAA,OAAO,OAAO,KAAA,KAA8C;AAC1D,IAAA,MAAM,EAAE,UAAA,EAAY,EAAA,EAAG,GAAI,KAAA;AAC3B,IAAA,MAAM,MAAA,GAAS,GAAA,CAAI,QAAA,CAAS,aAAA,CAAc,UAAU,CAAA;AAEpD,IAAA,MAAM,eAAA,CAAgB,MAAA,EAAQ,QAAA,EAAU,GAAG,CAAA;AAG3C,IAAA,MAAM,WAAA,GAAc,MAAM,GAAA,CAAI,EAAA,CAAG,QAAA,CAAS;AAAA,MACxC,UAAA;AAAA,MACA,EAAA;AAAA,MACA,UAAU,GAAA,CAAI,QAAA;AAAA,MACd,KAAA,EAAO;AAAA,KACR,CAAA;AAED,IAAA,IAAI,CAAC,WAAA;AACH,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,oBAAA,EAAuB,UAAU,CAAA,CAAA,EAAI,EAAE,CAAA,CAAE,CAAA;AAG3D,IAAA,IAAI,MAAA,CAAO,OAAO,YAAA,EAAc;AAC9B,MAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,KAAA,CAAM,YAAA,EAAc;AAC5C,QAAA,MAAM,IAAA,CAAK;AAAA,UACT,UAAA;AAAA,UACA,GAAA,EAAK,WAAA;AAAA,UACL,KAAK,GAAA,CAAI,GAAA;AAAA,UACT,MAAM,GAAA,CAAI,IAAA;AAAA,UACV,UAAU,GAAA,CAAI,QAAA;AAAA,UACd,SAAA,EAAW,QAAA;AAAA,UACX;AAAA,SACD,CAAA;AAAA,MACH;AAAA,IACF;AAGA,IAAA,MAAM,GAAA,GAAM,MAAM,GAAA,CAAI,EAAA,CAAG,MAAA,CAAO;AAAA,MAC9B,UAAA;AAAA,MACA,EAAA;AAAA,MACA,UAAU,GAAA,CAAI;AAAA,KACf,CAAA;AAGD,IAAA,IAAI,MAAA,CAAO,OAAO,WAAA,EAAa;AAC7B,MAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,KAAA,CAAM,WAAA,EAAa;AAC3C,QAAA,MAAM,IAAA,CAAK;AAAA,UACT,UAAA;AAAA,UACA,GAAA;AAAA,UACA,KAAK,GAAA,CAAI,GAAA;AAAA,UACT,MAAM,GAAA,CAAI,IAAA;AAAA,UACV,UAAU,GAAA,CAAI,QAAA;AAAA,UACd,SAAA,EAAW,QAAA;AAAA,UACX;AAAA,SACD,CAAA;AAAA,MACH;AAAA,IACF;AAEA,IAAA,MAAM,cAAA,CAAe,GAAA,EAAK,eAAA,CAAgB,UAAA,EAAY,QAAQ,CAAA,EAAG;AAAA,MAC/D,UAAA;AAAA,MACA,IAAA,EAAM,GAAA;AAAA,MACN,YAAA,EAAc,WAAA;AAAA,MACd,SAAA,EAAW;AAAA,KACZ,CAAA;AAED,IAAA,OAAO,EAAE,GAAA,EAAK,OAAA,EAAS,sBAAA,EAAuB;AAAA,EAChD,CAAA;AACF;AAEO,SAAS,qBAAqB,GAAA,EAAkB;AACrD,EAAA,OAAO,OAAO,KAAA,KAA+D;AAC3E,IAAA,MAAM,EAAE,UAAA,EAAY,KAAA,EAAM,GAAI,KAAA;AAC9B,IAAA,MAAM,MAAA,GAAS,GAAA,CAAI,QAAA,CAAS,aAAA,CAAc,UAAU,CAAA;AAEpD,IAAA,MAAM,eAAA,CAAgB,MAAA,EAAQ,MAAA,EAAQ,GAAG,CAAA;AAEzC,IAAA,MAAM,SAAA,GAAY,MAAM,GAAA,CAAI,EAAA,CAAG,KAAA,CAAM;AAAA,MACnC,UAAA;AAAA,MACA,KAAA,EAAO,SAAS,EAAC;AAAA,MACjB,UAAU,GAAA,CAAI;AAAA,KACf,CAAA;AAED,IAAA,OAAO,EAAE,SAAA,EAAU;AAAA,EACrB,CAAA;AACF;;;AC5hBA,eAAe,qBAAA,CACb,MAAA,EACA,SAAA,EACA,GAAA,EACe;AACf,EAAA,MAAM,MAAA,GAAS,MAAMC,mCAAA,CAAwB,MAAA,EAAQ,SAAA,EAAW;AAAA,IAC9D,MAAM,GAAA,CAAI,IAAA;AAAA,IACV,KAAK,GAAA,CAAI,GAAA;AAAA,IACT,UAAU,GAAA,CAAI;AAAA,GACf,CAAA;AACD,EAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,IAAA,MAAM,IAAI,KAAA,CAAM,MAAA,CAAO,KAAA,IAAS,eAAe,CAAA;AAAA,EACjD;AAEA,EAAA,IAAI,IAAI,QAAA,EAAU;AAChB,IAAA,GAAA,CAAI,EAAA,CAAG,iBAAiB,EAAE,QAAA,EAAU,IAAI,QAAA,EAAU,MAAA,EAAQ,IAAI,IAAA,EAAM,EAAA,IAAM,IAAI,IAAA,EAAM,GAAA,CAAI,MAAM,IAAA,EAAM,YAAA,EAAc,IAAI,IAAA,EAAM,IAAA,KAAS,eAAe,CAAA;AAAA,EACtJ;AACF;AAMO,SAAS,oBAAoB,GAAA,EAAkB;AACpD,EAAA,MAAM,SAA8B,EAAC;AACrC,EAAA,MAAM,WAAA,GAAc,GAAA,CAAI,QAAA,CAAS,cAAA,EAAe;AAEhD,EAAA,KAAA,MAAW,cAAc,WAAA,EAAa;AACpC,IAAA,MAAM,OAAO,UAAA,CAAW,IAAA;AAExB,IAAA,MAAA,CAAO,IAAI,CAAA,GAAI;AAAA,MACb,IAAA,EAAM,oBAAoB,GAAG,CAAA;AAAA,MAC7B,QAAA,EAAU,wBAAwB,GAAG,CAAA;AAAA,MACrC,MAAA,EAAQ,sBAAsB,GAAG,CAAA;AAAA,MACjC,MAAA,EAAQ,sBAAsB,GAAG,CAAA;AAAA,MACjC,MAAA,EAAQ,sBAAsB,GAAG,CAAA;AAAA,MACjC,KAAA,EAAO,qBAAqB,GAAG;AAAA,KACjC;AAAA,EACF;AAGA,EAAA,MAAM,OAAA,GAAU,GAAA,CAAI,QAAA,CAAS,UAAA,EAAW;AACxC,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,MAAM,OAAO,MAAA,CAAO,IAAA;AAEpB,IAAA,MAAA,CAAO,CAAA,SAAA,EAAY,IAAI,CAAA,CAAE,CAAA,GAAI;AAAA,MAC3B,KAAK,YAAY;AACf,QAAA,MAAM,qBAAA,CAAsB,MAAA,EAAQ,MAAA,EAAQ,GAAG,CAAA;AAE/C,QAAA,MAAM,GAAA,GAAM,MAAM,GAAA,CAAI,EAAA,CAAG,OAAA,CAAQ;AAAA,UAC/B,UAAA,EAAY,YAAY,IAAI,CAAA,CAAA;AAAA,UAC5B,OAAO,EAAC;AAAA,UACR,UAAU,GAAA,CAAI;AAAA,SACf,CAAA;AACD,QAAA,OAAO,GAAA;AAAA,MACT,CAAA;AAAA,MACA,MAAA,EAAQ,OAAO,KAAA,KAAyC;AACtD,QAAA,MAAM,qBAAA,CAAsB,MAAA,EAAQ,QAAA,EAAU,GAAG,CAAA;AAEjD,QAAA,MAAM,MAAA,GAAS,GAAA,CAAI,QAAA,CAAS,YAAA,CAAa,IAAI,CAAA;AAC7C,QAAA,MAAM,SAAA,GAAY,MAAA,CAAO,KAAA,CAAM,KAAA,CAAM,IAAI,CAAA;AAEzC,QAAA,MAAM,QAAA,GAAW,MAAM,GAAA,CAAI,EAAA,CAAG,OAAA,CAAQ;AAAA,UACpC,UAAA,EAAY,YAAY,IAAI,CAAA,CAAA;AAAA,UAC5B,OAAO,EAAC;AAAA,UACR,UAAU,GAAA,CAAI;AAAA,SACf,CAAA;AAED,QAAA,IAAI,GAAA;AACJ,QAAA,IAAI,QAAA,EAAU;AACZ,UAAA,GAAA,GAAM,MAAM,GAAA,CAAI,EAAA,CAAG,MAAA,CAAO;AAAA,YACxB,UAAA,EAAY,YAAY,IAAI,CAAA,CAAA;AAAA,YAC5B,IAAI,QAAA,CAAS,EAAA;AAAA,YACb,IAAA,EAAM,SAAA;AAAA,YACN,UAAU,GAAA,CAAI;AAAA,WACf,CAAA;AAAA,QACH,CAAA,MAAO;AACL,UAAA,GAAA,GAAM,MAAM,GAAA,CAAI,EAAA,CAAG,MAAA,CAAO;AAAA,YACxB,UAAA,EAAY,YAAY,IAAI,CAAA,CAAA;AAAA,YAC5B,IAAA,EAAM,EAAE,GAAG,SAAA,EAAW,IAAI,IAAA,EAAK;AAAA,YAC/B,UAAU,GAAA,CAAI;AAAA,WACf,CAAA;AAAA,QACH;AAEA,QAAA,OAAO,GAAA;AAAA,MACT;AAAA,KACF;AAAA,EACF;AAEA,EAAA,OAAO,MAAA;AACT;AAyDO,SAAS,iBAAiB,GAAA,EAA8B;AAE7D,EAAA,MAAM,SAAA,GAAY,GAAA,CAAI,QAAA,EAAU,MAAA,EAAQ,SAAA;AACxC,EAAA,IAAI,SAAA,EAAW,gBAAgB,KAAA,EAAO;AACpC,IAAA,MAAM,IAAI,MAAM,sBAAsB,CAAA;AAAA,EACxC;AAEA,EAAA,OAAO,oBAAoB,GAAG,CAAA;AAChC","file":"chunk-TQG7G7YI.cjs","sourcesContent":["import type { BaseAdapter } from \"../../registry/types.js\";\nimport type { User, Request } from \"../../hooks/types.js\";\nimport {\n  validateApiKey,\n  extractApiKeyFromRequest,\n  createApiKeyContext,\n} from \"../../auth/api-key.js\";\nimport { createWebhookService } from \"../../webhooks/index.js\";\n\n// ============================================================================\n// Context Types\n// ============================================================================\n\nexport interface ApiKeyContext {\n  userId: string;\n  user: Partial<User>;\n  permissions: string[];\n  apiKeyId: string;\n  tenantId?: string;\n  role?: string;\n}\n\nexport interface KyroContext {\n  db: BaseAdapter;\n  registry: any;\n  user?: User;\n  tenantID?: string;\n  req: Request;\n  apiKey?: ApiKeyContext;\n  webhookService?: ReturnType<typeof createWebhookService>;\n  settings?: Record<string, any>;\n  [key: string]: any;\n}\n\n// ============================================================================\n// Context Factory\n// ============================================================================\n\nexport async function createContext(options: {\n  db: BaseAdapter;\n  registry: any;\n  req: Request;\n  user?: User;\n  tenantID?: string;\n  settings?: Record<string, any>;\n}): Promise<KyroContext> {\n  const webhookService = createWebhookService(options.db);\n\n  const baseContext: KyroContext = {\n    db: options.db,\n    registry: options.registry,\n    req: options.req,\n    user: options.user,\n    tenantID: options.tenantID,\n    webhookService,\n    settings: options.settings,\n  };\n\n  const apiKeyRaw = extractApiKeyFromRequest(options.req as any);\n  if (apiKeyRaw) {\n    const result = await validateApiKey(apiKeyRaw, options.db, async (userId) => {\n      try {\n        const user = await options.db.findByID({ collection: 'users', id: userId });\n        return user || null;\n      } catch {\n        return null;\n      }\n    });\n    if (result.valid) {\n      baseContext.user = (result.user as User) || options.user;\n      baseContext.tenantID = result.tenantId || options.tenantID;\n      baseContext.apiKey = createApiKeyContext(result) as ApiKeyContext;\n    }\n  }\n\n  return baseContext;\n}\n","import type {\n  FindArgs,\n  CreateArgs,\n  UpdateArgs,\n  DeleteArgs,\n} from \"../../registry/types.js\";\nimport { runHooks } from \"../../hooks/types.js\";\nimport { checkCollectionAccess, checkGlobalAccess } from \"../../access/checker.js\";\nimport type { KyroContext } from \"./context.js\";\nimport type { Field } from \"../../fields/types.js\";\nimport { WEBHOOK_EVENTS, type WebhookEvent } from \"../../webhooks/types.js\";\n\nconst COLLECTION_EVENT_MAP: Record<\n  string,\n  { create: WebhookEvent; update: WebhookEvent; delete: WebhookEvent }\n> = {\n  _media: {\n    create: WEBHOOK_EVENTS.MEDIA_UPLOAD,\n    update: WEBHOOK_EVENTS.MEDIA_UPLOAD,\n    delete: WEBHOOK_EVENTS.MEDIA_DELETE,\n  },\n};\n\nfunction getWebhookEvent(\n  collection: string,\n  operation: \"create\" | \"update\" | \"delete\",\n): WebhookEvent {\n  const mapped = COLLECTION_EVENT_MAP[collection];\n  if (mapped) return mapped[operation];\n  return `collection.${operation}` as WebhookEvent;\n}\n\nasync function triggerWebhook(\n  ctx: KyroContext,\n  event: WebhookEvent,\n  payload: {\n    collection: string;\n    data: unknown;\n    previousData?: unknown;\n    operation: \"create\" | \"update\" | \"delete\";\n  },\n) {\n  if (!ctx.webhookService) return;\n  try {\n    await ctx.webhookService.trigger(event, {\n      collection: payload.collection,\n      operation: payload.operation,\n      data: payload.data,\n      previousData: payload.previousData,\n      user: ctx.user\n        ? { id: ctx.user.id, email: ctx.user.email, role: ctx.user.role }\n        : undefined,\n      tenantId: ctx.tenantID,\n    });\n  } catch (err) {\n    console.error(`[Webhook] Failed to trigger ${event}:`, err);\n  }\n}\n\n// ============================================================================\n// Data normalization helpers\n// ============================================================================\n\nfunction normalizeEmptyStrings(data: any, fields: Field[]): void {\n  if (!data || typeof data !== 'object') return;\n  for (const field of fields) {\n    if (!field.name || !(field.name in data)) continue;\n    const val = data[field.name];\n    if (val === \"\") {\n      const isTextual = field.type === 'text' || field.type === 'textarea' || field.type === 'code' || field.type === 'markdown' || field.type === 'email' || field.type === 'password' || field.type === 'color';\n      if (!isTextual) data[field.name] = null;\n    }\n    if (field.type === 'tabs' && field.name && Array.isArray((field as any).tabs) && data[field.name] && typeof data[field.name] === 'object') {\n      for (const tab of (field as any).tabs) {\n        if (Array.isArray(tab.fields)) normalizeEmptyStrings(data[field.name], tab.fields as Field[]);\n      }\n    } else if ((field.type === 'group' || field.type === 'collapsible') && field.name && Array.isArray((field as any).fields) && data[field.name] && typeof data[field.name] === 'object') {\n      normalizeEmptyStrings(data[field.name], (field as any).fields as Field[]);\n    } else if (field.type === 'array' && field.name && Array.isArray((field as any).fields) && Array.isArray(data[field.name])) {\n      for (const item of data[field.name]) {\n        if (item && typeof item === 'object') normalizeEmptyStrings(item, (field as any).fields as Field[]);\n      }\n    } else if (field.type === 'blocks' && field.name && Array.isArray((field as any).blocks) && Array.isArray(data[field.name])) {\n      for (const item of data[field.name]) {\n        if (!item || typeof item !== 'object') continue;\n        const blockTypeStr = item.type || item.blockType;\n        if (!blockTypeStr) continue;\n        const blockDef = (field as any).blocks.find((b: any) => b.slug === blockTypeStr);\n        if (!blockDef || !Array.isArray(blockDef.fields)) continue;\n        const target = item.data && typeof item.data === 'object' ? item.data : item;\n        normalizeEmptyStrings(target, blockDef.fields as Field[]);\n      }\n    }\n  }\n}\n\n// ============================================================================\n// Access Check Helper\n// ============================================================================\n\nasync function checkTRPCAccess(\n  config: { access?: any; slug: string },\n  operation: \"read\" | \"create\" | \"update\" | \"delete\",\n  ctx: KyroContext,\n): Promise<void> {\n  const result = await checkCollectionAccess(config, operation, {\n    user: ctx.user,\n    req: ctx.req,\n    tenantID: ctx.tenantID,\n    apiKey: ctx.apiKey,\n  });\n  if (!result.allowed) {\n    throw new Error(result.error || \"Access denied\");\n  }\n\n  // Set tenant context\n  if (ctx.tenantID) {\n    ctx.db.setTenantContext({ tenantId: ctx.tenantID, userId: ctx.user?.id ?? '', role: ctx.user?.role, isSuperAdmin: ctx.user?.role === 'super_admin' });\n  }\n}\n\n// ============================================================================\n// CRUD Procedure Builders\n// ============================================================================\n\nexport function createFindProcedure(ctx: KyroContext) {\n  return async (input: {\n    collection: string;\n    where?: Record<string, any>;\n    sort?: string;\n    limit?: number;\n    page?: number;\n    depth?: number;\n    select?: string[];\n    draft?: boolean;\n  }) => {\n    const { collection, where, sort, limit, page, depth, select, draft } = input;\n    const config = ctx.registry.getCollection(collection);\n\n    await checkTRPCAccess(config, \"read\", ctx);\n\n    // Run beforeRead hooks\n    if (config.hooks?.beforeRead) {\n      for (const hook of config.hooks.beforeRead) {\n        await hook({\n          collection,\n          req: ctx.req,\n          user: ctx.user,\n          tenantID: ctx.tenantID,\n          operation: \"read\",\n          where,\n        });\n      }\n    }\n\n    const isDraft = draft ?? !!ctx.user;\n\n    // Execute query\n    const result = await ctx.db.find({\n      collection,\n      where: where || {},\n      sort,\n      limit: limit || 10,\n      page: page || 1,\n      depth: depth || 0,\n      tenantID: ctx.tenantID,\n      select,\n      draft: isDraft,\n    });\n\n    // Run afterRead hooks\n    if (config.hooks?.afterRead) {\n      for (const doc of result.docs) {\n        for (const hook of config.hooks.afterRead) {\n          await hook({\n            collection,\n            doc,\n            req: ctx.req,\n            user: ctx.user,\n            tenantID: ctx.tenantID,\n            operation: \"read\",\n          });\n        }\n      }\n    }\n\n    return result;\n  };\n}\n\nexport function createFindByIDProcedure(ctx: KyroContext) {\n  return async (input: {\n    collection: string;\n    id: string;\n    depth?: number;\n    select?: string[];\n    draft?: boolean;\n  }) => {\n    const { collection, id, depth, select, draft } = input;\n    const config = ctx.registry.getCollection(collection);\n\n    await checkTRPCAccess(config, \"read\", ctx);\n\n    const isDraft = draft ?? !!ctx.user;\n\n    const doc = await ctx.db.findByID({\n      collection,\n      id,\n      depth: depth || 0,\n      tenantID: ctx.tenantID,\n      select,\n      draft: isDraft,\n    });\n\n    if (!doc) throw new Error(`Document not found: ${collection}/${id}`);\n\n    // Run afterRead hooks\n    if (config.hooks?.afterRead) {\n      for (const hook of config.hooks.afterRead) {\n        await hook({\n          collection,\n          doc,\n          req: ctx.req,\n          user: ctx.user,\n          tenantID: ctx.tenantID,\n          operation: \"read\",\n          id,\n        });\n      }\n    }\n\n    return doc;\n  };\n}\n\nexport function createCreateProcedure(ctx: KyroContext) {\n  return async (input: {\n    collection: string;\n    data: Record<string, any>;\n    depth?: number;\n    select?: string[];\n  }) => {\n    const { collection, data, depth, select } = input;\n    const config = ctx.registry.getCollection(collection);\n\n    await checkTRPCAccess(config, \"create\", ctx);\n\n    // Validate with Zod\n    const schema = ctx.registry.getCreateZodSchema(collection);\n    const validated = schema.parse(data);\n\n    // Add tenantID if scoped\n    if (config.tenantScoped && ctx.tenantID) {\n      validated.tenantID = ctx.tenantID;\n    }\n\n    // Run beforeValidate hooks\n    if (config.hooks?.beforeValidate) {\n      for (const hook of config.hooks.beforeValidate) {\n        const hookResult = await hook({\n          collection,\n          data: validated,\n          req: ctx.req,\n          user: ctx.user,\n          tenantID: ctx.tenantID,\n          operation: \"create\",\n        });\n        if (hookResult) Object.assign(validated, hookResult);\n      }\n    }\n\n    // Run beforeChange hooks\n    if (config.hooks?.beforeChange) {\n      for (const hook of config.hooks.beforeChange) {\n        const hookResult = await hook({\n          collection,\n          data: validated,\n          req: ctx.req,\n          user: ctx.user,\n          tenantID: ctx.tenantID,\n          operation: \"create\",\n        });\n        if (hookResult) Object.assign(validated, hookResult);\n      }\n    }\n\n    // Execute create\n    const doc = await ctx.db.create({\n      collection,\n      data: validated,\n      depth: depth || 0,\n      tenantID: ctx.tenantID,\n      select,\n    });\n\n    // Run afterChange hooks\n    if (config.hooks?.afterChange) {\n      for (const hook of config.hooks.afterChange) {\n        await hook({\n          collection,\n          doc,\n          data: validated,\n          req: ctx.req,\n          user: ctx.user,\n          tenantID: ctx.tenantID,\n          operation: \"create\",\n        });\n      }\n    }\n\n    await triggerWebhook(ctx, getWebhookEvent(collection, \"create\"), {\n      collection,\n      data: doc,\n      operation: \"create\",\n    });\n\n    return { doc };\n  };\n}\n\nexport function createUpdateProcedure(ctx: KyroContext) {\n  return async (input: {\n    collection: string;\n    id: string;\n    data: Record<string, any>;\n    depth?: number;\n    select?: string[];\n    baseUpdatedAt?: string;\n  }) => {\n    const { collection, id, data, depth, select, baseUpdatedAt } = input;\n    const config = ctx.registry.getCollection(collection);\n\n    await checkTRPCAccess(config, \"update\", ctx);\n\n    // Get original doc for hooks + conflict detection\n    const originalDoc = await ctx.db.findByID({\n      collection,\n      id,\n      tenantID: ctx.tenantID,\n      draft: true,\n    });\n\n    if (!originalDoc)\n      throw new Error(`Document not found: ${collection}/${id}`);\n\n    // Revision conflict detection\n    if (baseUpdatedAt && (originalDoc as Record<string, any>).updatedAt && baseUpdatedAt !== (originalDoc as Record<string, any>).updatedAt) {\n      throw new Error(`Revision conflict: document has changed since ${baseUpdatedAt}. Current updatedAt: ${(originalDoc as Record<string, any>).updatedAt}`);\n    }\n\n    // Normalize empty strings for non-textual field types\n    normalizeEmptyStrings(data as any, config.fields as any);\n\n    // Validate with Zod\n    const schema = ctx.registry.getUpdateZodSchema(collection);\n    const validated = schema.parse(data);\n\n    // Add tenantID if scoped\n    if (config.tenantScoped && ctx.tenantID) {\n      validated.tenantID = ctx.tenantID;\n    }\n\n    // Run beforeValidate hooks\n    if (config.hooks?.beforeValidate) {\n      for (const hook of config.hooks.beforeValidate) {\n        const hookResult = await hook({\n          collection,\n          data: validated,\n          originalDoc,\n          req: ctx.req,\n          user: ctx.user,\n          tenantID: ctx.tenantID,\n          operation: \"update\",\n          id,\n        });\n        if (hookResult) Object.assign(validated, hookResult);\n      }\n    }\n\n    // Run beforeChange hooks\n    if (config.hooks?.beforeChange) {\n      for (const hook of config.hooks.beforeChange) {\n        const hookResult = await hook({\n          collection,\n          data: validated,\n          originalDoc,\n          req: ctx.req,\n          user: ctx.user,\n          tenantID: ctx.tenantID,\n          operation: \"update\",\n          id,\n        });\n        if (hookResult) Object.assign(validated, hookResult);\n      }\n    }\n\n    // Determine if this is a draft save vs publish\n    const isDraft = (ctx.req && typeof (ctx.req as any).headers?.get === \"function\" && (ctx.req as any).headers.get(\"x-draft\") === \"true\") || (input as any).draft === true;\n    const isDraftEnabled = config.versions?.drafts === true;\n    const isAutosave = ((ctx.req as any)?.query?.autosave === \"true\") || ((ctx.req as any)?.url?.includes(\"autosave=true\")) || (input as any).autosave === true;\n\n    let doc;\n    if (isDraftEnabled && isDraft) {\n      // Draft save: versions table only\n      // Autosave reuses a single version slot; manual draft creates a new version\n      await ctx.db.createVersion({\n        collection,\n        documentId: id,\n        data: validated,\n        status: 'draft',\n        autosave: isAutosave,\n        createdBy: ctx.user?.id,\n        tenantID: ctx.tenantID,\n      });\n      // Refetch merged doc\n      doc = await ctx.db.findByID({ collection, id, tenantID: ctx.tenantID, draft: true });\n    } else if (isDraftEnabled) {\n      // Publish: main doc + versions table\n      doc = await ctx.db.update({\n        collection,\n        id,\n        data: { ...validated, status: 'published' },\n        depth: depth || 0,\n        tenantID: ctx.tenantID,\n        select,\n      });\n      await ctx.db.createVersion({\n        collection,\n        documentId: id,\n        data: validated,\n        status: 'published',\n        createdBy: ctx.user?.id,\n        tenantID: ctx.tenantID,\n      });\n    } else {\n      // No versions: direct update\n      doc = await ctx.db.update({\n        collection,\n        id,\n        data: validated,\n        depth: depth || 0,\n        tenantID: ctx.tenantID,\n        select,\n      });\n    }\n\n    // Run afterChange hooks\n    if (config.hooks?.afterChange) {\n      for (const hook of config.hooks.afterChange) {\n        await hook({\n          collection,\n          doc,\n          data: validated,\n          originalDoc,\n          req: ctx.req,\n          user: ctx.user,\n          tenantID: ctx.tenantID,\n          operation: \"update\",\n          id,\n        });\n      }\n    }\n\n    await triggerWebhook(ctx, getWebhookEvent(collection, \"update\"), {\n      collection,\n      data: doc,\n      previousData: originalDoc,\n      operation: \"update\",\n    });\n\n    return { doc };\n  };\n}\n\nexport function createDeleteProcedure(ctx: KyroContext) {\n  return async (input: { collection: string; id: string }) => {\n    const { collection, id } = input;\n    const config = ctx.registry.getCollection(collection);\n\n    await checkTRPCAccess(config, \"delete\", ctx);\n\n    // Get original doc for hooks\n    const originalDoc = await ctx.db.findByID({\n      collection,\n      id,\n      tenantID: ctx.tenantID,\n      draft: true,\n    });\n\n    if (!originalDoc)\n      throw new Error(`Document not found: ${collection}/${id}`);\n\n    // Run beforeDelete hooks\n    if (config.hooks?.beforeDelete) {\n      for (const hook of config.hooks.beforeDelete) {\n        await hook({\n          collection,\n          doc: originalDoc,\n          req: ctx.req,\n          user: ctx.user,\n          tenantID: ctx.tenantID,\n          operation: \"delete\",\n          id,\n        });\n      }\n    }\n\n    // Execute delete\n    const doc = await ctx.db.delete({\n      collection,\n      id,\n      tenantID: ctx.tenantID,\n    });\n\n    // Run afterDelete hooks\n    if (config.hooks?.afterDelete) {\n      for (const hook of config.hooks.afterDelete) {\n        await hook({\n          collection,\n          doc,\n          req: ctx.req,\n          user: ctx.user,\n          tenantID: ctx.tenantID,\n          operation: \"delete\",\n          id,\n        });\n      }\n    }\n\n    await triggerWebhook(ctx, getWebhookEvent(collection, \"delete\"), {\n      collection,\n      data: doc,\n      previousData: originalDoc,\n      operation: \"delete\",\n    });\n\n    return { doc, message: \"Deleted successfully\" };\n  };\n}\n\nexport function createCountProcedure(ctx: KyroContext) {\n  return async (input: { collection: string; where?: Record<string, any> }) => {\n    const { collection, where } = input;\n    const config = ctx.registry.getCollection(collection);\n\n    await checkTRPCAccess(config, \"read\", ctx);\n\n    const totalDocs = await ctx.db.count({\n      collection,\n      where: where || {},\n      tenantID: ctx.tenantID,\n    });\n\n    return { totalDocs };\n  };\n}\n","import type { KyroContext } from \"./context.js\";\nimport {\n  createFindProcedure,\n  createFindByIDProcedure,\n  createCreateProcedure,\n  createUpdateProcedure,\n  createDeleteProcedure,\n  createCountProcedure,\n} from \"./procedures.js\";\nimport { checkGlobalAccess as checkGlobalAccessShared } from \"../../access/checker.js\";\n\n// ============================================================================\n// Global Access Check Helper\n// ============================================================================\n\nasync function checkGlobalAccessTRPC(\n  global: { access?: any; slug: string },\n  operation: \"read\" | \"update\",\n  ctx: KyroContext,\n): Promise<void> {\n  const result = await checkGlobalAccessShared(global, operation, {\n    user: ctx.user,\n    req: ctx.req,\n    tenantID: ctx.tenantID,\n  });\n  if (!result.allowed) {\n    throw new Error(result.error || \"Access denied\");\n  }\n\n  if (ctx.tenantID) {\n    ctx.db.setTenantContext({ tenantId: ctx.tenantID, userId: ctx.user?.id ?? '', role: ctx.user?.role, isSuperAdmin: ctx.user?.role === 'super_admin' });\n  }\n}\n\n// ============================================================================\n// Dynamic Router Generator\n// ============================================================================\n\nexport function createDynamicRouter(ctx: KyroContext) {\n  const router: Record<string, any> = {};\n  const collections = ctx.registry.getCollections();\n\n  for (const collection of collections) {\n    const slug = collection.slug;\n\n    router[slug] = {\n      find: createFindProcedure(ctx),\n      findByID: createFindByIDProcedure(ctx),\n      create: createCreateProcedure(ctx),\n      update: createUpdateProcedure(ctx),\n      delete: createDeleteProcedure(ctx),\n      count: createCountProcedure(ctx),\n    };\n  }\n\n  // Add globals\n  const globals = ctx.registry.getGlobals();\n  for (const global of globals) {\n    const slug = global.slug;\n\n    router[`_globals_${slug}`] = {\n      get: async () => {\n        await checkGlobalAccessTRPC(global, \"read\", ctx);\n\n        const doc = await ctx.db.findOne({\n          collection: `_globals_${slug}`,\n          where: {},\n          tenantID: ctx.tenantID,\n        });\n        return doc;\n      },\n      update: async (input: { data: Record<string, any> }) => {\n        await checkGlobalAccessTRPC(global, \"update\", ctx);\n\n        const schema = ctx.registry.getZodSchema(slug);\n        const validated = schema.parse(input.data);\n\n        const existing = await ctx.db.findOne({\n          collection: `_globals_${slug}`,\n          where: {},\n          tenantID: ctx.tenantID,\n        });\n\n        let doc;\n        if (existing) {\n          doc = await ctx.db.update({\n            collection: `_globals_${slug}`,\n            id: existing.id,\n            data: validated,\n            tenantID: ctx.tenantID,\n          });\n        } else {\n          doc = await ctx.db.create({\n            collection: `_globals_${slug}`,\n            data: { ...validated, id: slug },\n            tenantID: ctx.tenantID,\n          });\n        }\n\n        return doc;\n      },\n    };\n  }\n\n  return router;\n}\n\n// ============================================================================\n// Typed Router Interface\n// ============================================================================\n\nexport interface KyroRouter {\n  [collectionSlug: string]: {\n    find: (input: {\n      where?: Record<string, any>;\n      sort?: string;\n      limit?: number;\n      page?: number;\n      depth?: number;\n      select?: string[];\n      draft?: boolean;\n    }) => Promise<{\n      docs: any[];\n      totalDocs: number;\n      limit: number;\n      totalPages: number;\n      page: number;\n      pagingCounter: number;\n      hasPrevPage: boolean;\n      hasNextPage: boolean;\n      prevPage: number | null;\n      nextPage: number | null;\n    }>;\n    findByID: (input: {\n      id: string;\n      depth?: number;\n      select?: string[];\n      draft?: boolean;\n    }) => Promise<any>;\n    create: (input: {\n      data: Record<string, any>;\n      depth?: number;\n      select?: string[];\n    }) => Promise<{ doc: any }>;\n    update: (input: {\n      id: string;\n      data: Record<string, any>;\n      depth?: number;\n      select?: string[];\n      baseUpdatedAt?: string;\n    }) => Promise<{ doc: any }>;\n    delete: (input: { id: string }) => Promise<{ doc: any; message: string }>;\n    count: (input: {\n      where?: Record<string, any>;\n    }) => Promise<{ totalDocs: number }>;\n  };\n}\n\n// ============================================================================\n// Server Entry\n// ============================================================================\n\nexport function createKyroServer(ctx: KyroContext): KyroRouter {\n  // Check if tRPC is disabled in settings\n  const apiAccess = ctx.settings?.access?.apiAccess;\n  if (apiAccess?.trpcEnabled === false) {\n    throw new Error(\"tRPC API is disabled\");\n  }\n\n  return createDynamicRouter(ctx) as KyroRouter;\n}\n"]}

package/dist/{chunk-3UK5XBVJ.js → chunk-WDTTHKDS.js}

@@ -1,3 +1,5 @@
+import { evaluateAccess, hasApiKeyPermission } from './chunk-3AKCVYDB.js';
+import { hasPermission } from './chunk-L4EZKIEX.js';
 import { createHmac, randomBytes, randomUUID } from 'crypto';
 
 // src/webhooks/types.ts
@@ -163,7 +165,8 @@ var WebhookService = class {
       collection: WEBHOOK_COLLECTION,
       where: filters?.status ? { status: { equals: filters.status } } : {},
       limit: 100,
-      page: 1
+      page: 1,
+      draft: true
     });
     const webhooks = result.docs;
     if (filters?.event) {
@@ -176,7 +179,8 @@ var WebhookService = class {
   async getWebhookById(id) {
     return this.db.findByID({
       collection: WEBHOOK_COLLECTION,
-      id
+      id,
+      draft: true
     });
   }
   async createWebhook(data) {
@@ -224,11 +228,10 @@ var WebhookService = class {
     });
   }
   async trigger(event, payloadData) {
-    const webhooks = await this.getWebhooks();
-    const activeWebhooks = webhooks.filter((w) => w.status === "active");
-    const matchingWebhooks = activeWebhooks.filter(
-      (w) => w.events.includes(event)
-    );
+    const matchingWebhooks = await this.getWebhooks({
+      status: "active",
+      event
+    });
     if (matchingWebhooks.length === 0) {
       return [];
     }
@@ -346,6 +349,110 @@ function createWebhookService(db) {
   return new WebhookService(db);
 }
 
-export { ALL_WEBHOOK_EVENTS, WEBHOOK_COLLECTION, WEBHOOK_DELIVERY_COLLECTION, WEBHOOK_EVENTS, WebhookService, buildDeliveryRecord, createTestPayload, createWebhookService, deliverWebhook, deliverWithRetry, generateWebhookSecret, signPayload };
-//# sourceMappingURL=chunk-3UK5XBVJ.js.map
-//# sourceMappingURL=chunk-3UK5XBVJ.js.map
+// src/access/checker.ts
+function actionToPermission(operation) {
+  if (operation === "read") return "read";
+  if (operation === "create") return "create";
+  if (operation === "update") return "update";
+  return "delete";
+}
+function isDefaultAllowed(operation, defaultAccess) {
+  const levels = {
+    none: false,
+    read: operation === "read",
+    create: operation === "read" || operation === "create",
+    update: operation === "read" || operation === "create" || operation === "update",
+    delete: operation === "read" || operation === "create" || operation === "update" || operation === "delete",
+    admin: true
+  };
+  return levels[defaultAccess] || false;
+}
+async function checkCollectionAccess(config, operation, context, options = {}) {
+  const { user, req, tenantID, apiKey } = context;
+  const { enablePublicAccess = true, defaultAccess = "none" } = options;
+  const accessRule = config.access?.[operation];
+  if (accessRule) {
+    const allowed = await evaluateAccess(accessRule, {
+      req,
+      user,
+      tenantID
+    });
+    if (allowed === false) {
+      return { allowed: false, error: "Access denied", status: 403 };
+    }
+    if (typeof allowed === "object") {
+      return { allowed: true, extraWhere: allowed };
+    }
+    return { allowed: true };
+  }
+  if (apiKey?.permissions?.length > 0) {
+    const resource = config.slug;
+    const action = actionToPermission(operation);
+    const permission = `${resource}:${action}`;
+    if (!hasApiKeyPermission(apiKey.permissions, permission) && !hasApiKeyPermission(apiKey.permissions, `${resource}:admin`)) {
+      return { allowed: false, error: "Access denied: insufficient permissions", status: 403 };
+    }
+    return { allowed: true };
+  }
+  if (user) {
+    const resource = config.slug;
+    const action = actionToPermission(operation);
+    const permission = `${resource}:${action}`;
+    const userHas = hasPermission(
+      { id: user.id, email: user.email, role: user.role },
+      permission
+    );
+    const adminHas = hasPermission(
+      { id: user.id, email: user.email, role: user.role },
+      `${resource}:admin`
+    );
+    if (userHas || adminHas) {
+      return { allowed: true };
+    }
+    return { allowed: false, error: "Access denied: missing RBAC permission", status: 403 };
+  }
+  const defaultAllowed = isDefaultAllowed(operation, defaultAccess);
+  if (enablePublicAccess && defaultAllowed) {
+    return { allowed: true };
+  }
+  return { allowed: false, error: "Authentication required", status: 401 };
+}
+async function checkGlobalAccess(config, operation, context, options = {}) {
+  const { user, req, tenantID } = context;
+  const { enablePublicAccess = true } = options;
+  const accessRule = config.access?.[operation];
+  if (accessRule) {
+    const allowed = await evaluateAccess(accessRule, {
+      req,
+      user,
+      tenantID
+    });
+    if (allowed === false) {
+      return { allowed: false, error: "Access denied", status: 403 };
+    }
+    return { allowed: true };
+  }
+  if (user) {
+    const permission = `globals:${operation}`;
+    const userHas = hasPermission(
+      { id: user.id, email: user.email, role: user.role },
+      permission
+    );
+    const adminHas = hasPermission(
+      { id: user.id, email: user.email, role: user.role },
+      "globals:admin"
+    );
+    if (userHas || adminHas) {
+      return { allowed: true };
+    }
+    return { allowed: false, error: "Access denied: missing RBAC permission", status: 403 };
+  }
+  if (enablePublicAccess) {
+    return { allowed: true };
+  }
+  return { allowed: false, error: "Authentication required", status: 401 };
+}
+
+export { ALL_WEBHOOK_EVENTS, WEBHOOK_COLLECTION, WEBHOOK_DELIVERY_COLLECTION, WEBHOOK_EVENTS, WebhookService, buildDeliveryRecord, checkCollectionAccess, checkGlobalAccess, createTestPayload, createWebhookService, deliverWebhook, deliverWithRetry, generateWebhookSecret, signPayload };
+//# sourceMappingURL=chunk-WDTTHKDS.js.map
+//# sourceMappingURL=chunk-WDTTHKDS.js.map

package/dist/chunk-WDTTHKDS.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/webhooks/types.ts","../src/webhooks/delivery.ts","../src/webhooks/WebhookService.ts","../src/access/checker.ts"],"names":[],"mappings":";;;;;AAAO,IAAM,cAAA,GAAiB;AAAA,EAC5B,iBAAA,EAAmB,mBAAA;AAAA,EACnB,iBAAA,EAAmB,mBAAA;AAAA,EACnB,iBAAA,EAAmB,mBAAA;AAAA,EACnB,YAAA,EAAc,cAAA;AAAA,EACd,YAAA,EAAc,cAAA;AAAA,EACd,UAAA,EAAY,YAAA;AAAA,EACZ,aAAA,EAAe,eAAA;AAAA,EACf,WAAA,EAAa,aAAA;AAAA,EACb,aAAA,EAAe,eAAA;AAAA,EACf,UAAA,EAAY,YAAA;AAAA,EACZ,aAAA,EAAe,eAAA;AAAA,EACf,eAAA,EAAiB;AACnB;AAIO,IAAM,kBAAA,GAAqC,MAAA,CAAO,MAAA,CAAO,cAAc;AA+EvE,IAAM,kBAAA,GAAqB;AAC3B,IAAM,2BAAA,GAA8B;ACxEpC,SAAS,WAAA,CAAY,SAAiB,MAAA,EAAwB;AACnE,EAAA,OAAO,CAAA,OAAA,EAAU,UAAA,CAAW,QAAA,EAAU,MAAM,CAAA,CAAE,OAAO,OAAO,CAAA,CAAE,MAAA,CAAO,KAAK,CAAC,CAAA,CAAA;AAC7E;AAEO,SAAS,qBAAA,GAAgC;AAC9C,EAAA,OAAO,WAAA,CAAY,EAAE,CAAA,CAAE,QAAA,CAAS,KAAK,CAAA;AACvC;AAEA,eAAsB,cAAA,CACpB,OAAA,EACA,OAAA,EACA,OAAA,GAA2B,EAAC,EACH;AACzB,EAAA,MAAM,OAAA,GAAU,QAAQ,OAAA,IAAW,GAAA;AACnC,EAAA,MAAM,SAAA,GAAY,KAAK,GAAA,EAAI;AAE3B,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAEnC,EAAA,MAAM,OAAA,GAAkC;AAAA,IACtC,cAAA,EAAgB,kBAAA;AAAA,IAChB,YAAA,EAAc,sBAAA;AAAA,IACd,mBAAmB,OAAA,CAAQ,KAAA;AAAA,IAC3B,sBAAsB,OAAA,CAAQ,EAAA;AAAA,IAC9B,uBAAuB,OAAA,CAAQ,SAAA;AAAA,IAC/B,GAAI,OAAA,CAAQ,OAAA,IAAW;AAAC,GAC1B;AAEA,EAAA,IAAI,QAAQ,MAAA,EAAQ;AAClB,IAAA,MAAM,SAAA,GAAY,WAAA,CAAY,IAAA,EAAM,OAAA,CAAQ,MAAM,CAAA;AAClD,IAAA,OAAA,CAAQ,qBAAqB,CAAA,GAAI,SAAA;AAAA,EACnC;AAEA,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,YAAY,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,OAAO,CAAA;AAE9D,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,OAAA,CAAQ,GAAA,EAAK;AAAA,MACxC,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA;AAAA,MACA,IAAA;AAAA,MACA,QAAQ,UAAA,CAAW;AAAA,KACpB,CAAA;AAED,IAAA,YAAA,CAAa,SAAS,CAAA;AAEtB,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,GAAA,EAAI,GAAI,SAAA;AAC9B,IAAA,IAAI,YAAA;AAEJ,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,MAAA,YAAA,GAAe,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,GAAI,CAAA;AAAA,IACnC,CAAA,CAAA,MAAQ;AAAA,IAAC;AAET,IAAA,MAAM,MAAA,GAAyB;AAAA,MAC7B,SAAS,QAAA,CAAS,EAAA;AAAA,MAClB,QAAQ,QAAA,CAAS,MAAA;AAAA,MACjB,YAAY,QAAA,CAAS,UAAA;AAAA,MACrB,IAAA,EAAM,YAAA;AAAA,MACN;AAAA,KACF;AAEA,IAAA,IAAI,MAAA,CAAO,OAAA,IAAW,OAAA,CAAQ,SAAA,EAAW;AACvC,MAAA,OAAA,CAAQ,UAAU,MAAM,CAAA;AAAA,IAC1B,CAAA,MAAA,IAAW,CAAC,MAAA,CAAO,OAAA,IAAW,QAAQ,SAAA,EAAW;AAC/C,MAAA,OAAA,CAAQ,UAAU,CAAA,KAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,EAAA,EAAK,QAAA,CAAS,UAAU,CAAA,CAAE,CAAA;AAAA,IACrE;AAEA,IAAA,OAAO,MAAA;AAAA,EACT,SAAS,KAAA,EAAY;AACnB,IAAA,YAAA,CAAa,SAAS,CAAA;AACtB,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,GAAA,EAAI,GAAI,SAAA;AAC9B,IAAA,MAAM,YAAA,GACJ,MAAM,IAAA,KAAS,YAAA,GACX,2BAA2B,OAAO,CAAA,EAAA,CAAA,GAClC,MAAM,OAAA,IAAW,eAAA;AAEvB,IAAA,IAAI,QAAQ,SAAA,EAAW;AACrB,MAAA,OAAA,CAAQ,UAAU,YAAY,CAAA;AAAA,IAChC;AAEA,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,MAAA,EAAQ,CAAA;AAAA,MACR,QAAA;AAAA,MACA,KAAA,EAAO;AAAA,KACT;AAAA,EACF;AACF;AAEA,eAAsB,iBACpB,OAAA,EACA,OAAA,EACA,UAAA,EACA,OAAA,GAA2B,EAAC,EACH;AACzB,EAAA,MAAM,UAAA,GAAa,QAAQ,UAAA,IAAc,CAAA;AACzC,EAAA,MAAM,SAAA,GAAY,QAAQ,UAAA,IAAc,GAAA;AACxC,EAAA,IAAI,UAAA,GAAoC,IAAA;AAExC,EAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,IAAW,UAAA,EAAY,OAAA,EAAA,EAAW;AACtD,IAAA,IAAI,UAAU,CAAA,EAAG;AACf,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,GAAA,CAAI,SAAA,GAAY,IAAA,CAAK,IAAI,CAAA,EAAG,OAAA,GAAU,CAAC,CAAA,EAAG,GAAK,CAAA;AAClE,MAAA,IAAI,QAAQ,OAAA,EAAS;AACnB,QAAA,OAAA,CAAQ,OAAA,CAAQ,OAAA,EAAS,CAAA,YAAA,EAAe,KAAK,CAAA,KAAA,CAAO,CAAA;AAAA,MACtD;AACA,MAAA,MAAM,MAAM,KAAK,CAAA;AAAA,IACnB;AAEA,IAAA,IAAI,OAAA,CAAQ,OAAA,IAAW,OAAA,GAAU,CAAA,EAAG;AAClC,MAAA,OAAA,CAAQ,OAAA,CAAQ,SAAS,CAAA,QAAA,EAAW,OAAA,GAAU,CAAC,CAAA,CAAA,EAAI,UAAA,GAAa,CAAC,CAAA,CAAE,CAAA;AAAA,IACrE;AAEA,IAAA,UAAA,GAAa,MAAM,cAAA,CAAe,OAAA,EAAS,OAAA,EAAS;AAAA,MAClD,GAAG,OAAA;AAAA,MACH,OAAA,EAAS,MAAA;AAAA,MACT,SAAA,EAAW,MAAA;AAAA,MACX,SAAA,EAAW;AAAA,KACZ,CAAA;AAED,IAAA,IAAI,WAAW,OAAA,EAAS;AACtB,MAAA,OAAO,UAAA;AAAA,IACT;AAEA,IAAA,IAAI,WAAW,KAAA,EAAO,QAAA,CAAS,WAAW,CAAA,IAAK,UAAU,UAAA,EAAY;AACnE,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,UAAA,CAAW,MAAA,IAAU,GAAA,IAAO,UAAA,CAAW,SAAS,GAAA,EAAK;AACvD,MAAA,OAAO,UAAA;AAAA,IACT;AAAA,EACF;AAEA,EAAA,OACE,UAAA,IAAc;AAAA,IACZ,OAAA,EAAS,KAAA;AAAA,IACT,MAAA,EAAQ,CAAA;AAAA,IACR,QAAA,EAAU,CAAA;AAAA,IACV,KAAA,EAAO;AAAA,GACT;AAEJ;AAEO,SAAS,oBACd,UAAA,EACA,SAAA,EACA,KAAA,EACA,OAAA,EACA,SACA,MAAA,EACiB;AACjB,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,UAAA;AAAA,IACJ,SAAA;AAAA,IACA,KAAA;AAAA,IACA,OAAA;AAAA,IACA,OAAA;AAAA,IACA,MAAA,EAAQ,MAAA,CAAO,OAAA,GAAU,SAAA,GAAY,QAAA;AAAA,IACrC,cAAA,EAAgB,OAAO,MAAA,IAAU,MAAA;AAAA,IACjC,cAAc,MAAA,CAAO,IAAA;AAAA,IACrB,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,OAAO,MAAA,CAAO,KAAA;AAAA,IACd,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,IAClC,aAAa,MAAA,CAAO,OAAA,GAAA,qBAAc,IAAA,EAAK,EAAE,aAAY,GAAI;AAAA,GAC3D;AACF;AAEA,SAAS,MAAM,EAAA,EAA2B;AACxC,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AACzD;AAEO,SAAS,iBAAA,GAAoC;AAClD,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,CAAA,KAAA,EAAQ,IAAA,CAAK,GAAA,EAAK,CAAA,CAAA;AAAA,IACtB,KAAA,EAAO,mBAAA;AAAA,IACP,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,IAClC,UAAA,EAAY,MAAA;AAAA,IACZ,SAAA,EAAW,QAAA;AAAA,IACX,IAAA,EAAM,EAAE,OAAA,EAAS,iCAAA,EAAkC;AAAA,IACnD,MAAM,EAAE,EAAA,EAAI,UAAU,KAAA,EAAO,iBAAA,EAAmB,MAAM,aAAA;AAAc,GACtE;AACF;AC1LO,IAAM,iBAAN,MAAqB;AAAA,EAClB,EAAA;AAAA,EAER,YAAY,EAAA,EAAiB;AAC3B,IAAA,IAAA,CAAK,EAAA,GAAK,EAAA;AAAA,EACZ;AAAA,EAEA,MAAM,YAAY,OAAA,EAGW;AAC3B,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,EAAA,CAAG,IAAA,CAAK;AAAA,MAChC,UAAA,EAAY,kBAAA;AAAA,MACZ,KAAA,EAAO,OAAA,EAAS,MAAA,GAAS,EAAE,MAAA,EAAQ,EAAE,MAAA,EAAQ,OAAA,CAAQ,MAAA,EAAO,EAAE,GAAI,EAAC;AAAA,MACnE,KAAA,EAAO,GAAA;AAAA,MACP,IAAA,EAAM,CAAA;AAAA,MACN,KAAA,EAAO;AAAA,KACR,CAAA;AAED,IAAA,MAAM,WAAW,MAAA,CAAO,IAAA;AAExB,IAAA,IAAI,SAAS,KAAA,EAAO;AAClB,MAAA,OAAO,QAAA,CAAS,MAAA;AAAA,QAAO,CAAC,CAAA,KACtB,CAAA,CAAE,MAAA,CAAO,QAAA,CAAS,QAAQ,KAAqB;AAAA,OACjD;AAAA,IACF;AAEA,IAAA,OAAO,QAAA;AAAA,EACT;AAAA,EAEA,MAAM,eAAe,EAAA,EAA2C;AAC9D,IAAA,OAAO,IAAA,CAAK,GAAG,QAAA,CAAS;AAAA,MACtB,UAAA,EAAY,kBAAA;AAAA,MACZ,EAAA;AAAA,MACA,KAAA,EAAO;AAAA,KACR,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,cAAc,IAAA,EAAiD;AACnE,IAAA,MAAM,GAAA,GAAA,iBAAM,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AACnC,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,MAAA,IAAU,qBAAA,EAAsB;AAEpD,IAAA,MAAM,OAAA,GAAU;AAAA,MACd,IAAI,UAAA,EAAW;AAAA,MACf,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,KAAK,IAAA,CAAK,GAAA;AAAA,MACV,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,MAAA,EAAQ,KAAK,MAAA,IAAU,QAAA;AAAA,MACvB,MAAA;AAAA,MACA,OAAA,EAAS,IAAA,CAAK,OAAA,IAAW,EAAC;AAAA,MAC1B,SAAA,EAAW,GAAA;AAAA,MACX,SAAA,EAAW;AAAA,KACb;AAEA,IAAA,MAAM,IAAA,CAAK,GAAG,MAAA,CAAO;AAAA,MACnB,UAAA,EAAY,kBAAA;AAAA,MACZ,IAAA,EAAM;AAAA,KACP,CAAA;AAED,IAAA,OAAO,OAAA;AAAA,EACT;AAAA,EAEA,MAAM,aAAA,CACJ,EAAA,EACA,IAAA,EAC+B;AAC/B,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,cAAA,CAAe,EAAE,CAAA;AAC7C,IAAA,IAAI,CAAC,UAAU,OAAO,IAAA;AAEtB,IAAA,MAAM,OAAA,GAAU;AAAA,MACd,GAAG,QAAA;AAAA,MACH,GAAG,IAAA;AAAA,MACH,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,KACpC;AAEA,IAAA,IAAI,IAAA,CAAK,MAAA,KAAW,EAAA,IAAM,QAAA,IAAY,IAAA,EAAM;AAC1C,MAAA,OAAO,OAAA,CAAQ,MAAA;AAAA,IACjB;AAEA,IAAA,MAAM,IAAA,CAAK,GAAG,MAAA,CAAO;AAAA,MACnB,UAAA,EAAY,kBAAA;AAAA,MACZ,EAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAED,IAAA,OAAO,OAAA;AAAA,EACT;AAAA,EAEA,MAAM,cAAc,EAAA,EAA2B;AAC7C,IAAA,MAAM,IAAA,CAAK,GAAG,MAAA,CAAO;AAAA,MACnB,UAAA,EAAY,kBAAA;AAAA,MACZ;AAAA,KACD,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,OAAA,CACJ,KAAA,EACA,WAAA,EACiC;AACjC,IAAA,MAAM,gBAAA,GAAmB,MAAM,IAAA,CAAK,WAAA,CAAY;AAAA,MAC9C,MAAA,EAAQ,QAAA;AAAA,MACR;AAAA,KACD,CAAA;AAED,IAAA,IAAI,gBAAA,CAAiB,WAAW,CAAA,EAAG;AACjC,MAAA,OAAO,EAAC;AAAA,IACV;AAEA,IAAA,MAAM,OAAA,GAA0B;AAAA,MAC9B,EAAA,EAAI,CAAA,GAAA,EAAM,IAAA,CAAK,GAAA,EAAK,CAAA,CAAA,EAAI,UAAA,EAAW,CAAE,KAAA,CAAM,CAAA,EAAG,CAAC,CAAC,CAAA,CAAA;AAAA,MAChD,KAAA;AAAA,MACA,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,MAClC,GAAG;AAAA,KACL;AAEA,IAAA,MAAM,UAAkC,EAAC;AAEzC,IAAA,KAAA,MAAW,WAAW,gBAAA,EAAkB;AACtC,MAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,cAAA,CAAe,SAAS,OAAO,CAAA;AACzD,MAAA,OAAA,CAAQ,KAAK,MAAM,CAAA;AAAA,IACrB;AAEA,IAAA,OAAO,OAAA;AAAA,EACT;AAAA,EAEA,MAAM,cAAA,CACJ,OAAA,EACA,OAAA,EAC+B;AAC/B,IAAA,MAAM,UAAA,GAAa,CAAA,IAAA,EAAO,IAAA,CAAK,GAAA,EAAK,CAAA,CAAA,EAAI,UAAA,EAAW,CAAE,KAAA,CAAM,CAAA,EAAG,CAAC,CAAC,CAAA,CAAA;AAEhE,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,MAAM,gBAAA,CAAiB,OAAA,EAAS,SAAS,UAAA,EAAY;AAAA,QAClE,UAAA,EAAY,CAAA;AAAA,QACZ,UAAA,EAAY;AAAA,OACb,CAAA;AAED,MAAA,MAAM,cAAA,GAAiB,mBAAA;AAAA,QACrB,UAAA;AAAA,QACA,OAAA,CAAQ,EAAA;AAAA,QACR,OAAA,CAAQ,OAAO,CAAC,CAAA;AAAA,QAChB,OAAA;AAAA,QACA,CAAA;AAAA,QACA;AAAA,OACF;AAEA,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,CAAK,GAAG,MAAA,CAAO;AAAA,UACnB,UAAA,EAAY,2BAAA;AAAA,UACZ,IAAA,EAAM;AAAA,SACP,CAAA;AAAA,MACH,CAAA,CAAA,MAAQ;AACN,QAAA,OAAA,CAAQ,IAAA;AAAA,UACN,kDAAA;AAAA,UACA;AAAA,SACF;AAAA,MACF;AAEA,MAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,QAAA,MAAM,IAAA,CAAK,aAAA,CAAc,OAAA,CAAQ,EAAA,EAAI;AAAA,UACnC,MAAA,EAAQ,OAAA;AAAA,UACR,WAAW,MAAA,CAAO;AAAA,SACnB,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,QAAC,CAAC,CAAA;AAAA,MACnB,CAAA,MAAO;AACL,QAAA,MAAM,IAAA,CAAK,aAAA,CAAc,OAAA,CAAQ,EAAA,EAAI;AAAA,UACnC,MAAA,EAAQ,QAAA;AAAA,UACR,aAAA,EAAA,iBAAe,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,SACvC,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,QAAC,CAAC,CAAA;AAAA,MACnB;AAEA,MAAA,OAAO;AAAA,QACL,UAAA;AAAA,QACA,WAAW,OAAA,CAAQ,EAAA;AAAA,QACnB,KAAA,EAAO,OAAA,CAAQ,MAAA,CAAO,CAAC,CAAA;AAAA,QACvB,MAAA,EAAQ,MAAA,CAAO,OAAA,GAAU,SAAA,GAAY,QAAA;AAAA,QACrC,gBAAgB,MAAA,CAAO,MAAA;AAAA,QACvB,UAAU,MAAA,CAAO,QAAA;AAAA,QACjB,OAAO,MAAA,CAAO;AAAA,OAChB;AAAA,IACF,SAAS,KAAA,EAAY;AACnB,MAAA,OAAO;AAAA,QACL,UAAA;AAAA,QACA,WAAW,OAAA,CAAQ,EAAA;AAAA,QACnB,KAAA,EAAO,OAAA,CAAQ,MAAA,CAAO,CAAC,CAAA;AAAA,QACvB,MAAA,EAAQ,QAAA;AAAA,QACR,OAAO,KAAA,CAAM;AAAA,OACf;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,YAAY,SAAA,EAAyD;AACzE,IAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,cAAA,CAAe,SAAS,CAAA;AACnD,IAAA,IAAI,CAAC,SAAS,OAAO,IAAA;AAErB,IAAA,MAAM,OAAA,GAA0B;AAAA,MAC9B,EAAA,EAAI,CAAA,KAAA,EAAQ,IAAA,CAAK,GAAA,EAAK,CAAA,CAAA;AAAA,MACtB,KAAA,EAAO,OAAA,CAAQ,MAAA,CAAO,CAAC,CAAA,IAAK,mBAAA;AAAA,MAC5B,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,MAClC,UAAA,EAAY,MAAA;AAAA,MACZ,SAAA,EAAW,QAAA;AAAA,MACX,IAAA,EAAM,EAAE,OAAA,EAAS,+CAAA,EAAgD;AAAA,MACjE,IAAA,EAAM;AAAA,QACJ,EAAA,EAAI,QAAA;AAAA,QACJ,KAAA,EAAO,iBAAA;AAAA,QACP,IAAA,EAAM;AAAA;AACR,KACF;AAEA,IAAA,OAAO,IAAA,CAAK,cAAA,CAAe,OAAA,EAAS,OAAO,CAAA;AAAA,EAC7C;AAAA,EAEA,MAAM,kBAAA,CACJ,SAAA,EACA,KAAA,GAAgB,EAAA,EACY;AAC5B,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,EAAA,CAAG,IAAA,CAAK;AAAA,MAChC,UAAA,EAAY,2BAAA;AAAA,MACZ,OAAO,EAAE,SAAA,EAAW,EAAE,MAAA,EAAQ,WAAU,EAAE;AAAA,MAC1C,IAAA,EAAM,YAAA;AAAA,MACN,KAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAED,IAAA,OAAO,MAAA,CAAO,IAAA;AAAA,EAChB;AAAA,EAEA,MAAM,cACJ,UAAA,EACsC;AACtC,IAAA,MAAM,QAAA,GAAY,MAAM,IAAA,CAAK,EAAA,CAAG,QAAA,CAAS;AAAA,MACvC,UAAA,EAAY,2BAAA;AAAA,MACZ,EAAA,EAAI;AAAA,KACL,CAAA;AAED,IAAA,IAAI,CAAC,UAAU,OAAO,IAAA;AAEtB,IAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,cAAA,CAAe,SAAS,SAAS,CAAA;AAC5D,IAAA,IAAI,CAAC,SAAS,OAAO,IAAA;AAErB,IAAA,OAAO,IAAA,CAAK,cAAA,CAAe,OAAA,EAAS,QAAA,CAAS,OAAO,CAAA;AAAA,EACtD;AACF;AAEO,SAAS,qBAAqB,EAAA,EAAiC;AACpE,EAAA,OAAO,IAAI,eAAe,EAAE,CAAA;AAC9B;;;AChPA,SAAS,mBACP,SAAA,EACQ;AACR,EAAA,IAAI,SAAA,KAAc,QAAQ,OAAO,MAAA;AACjC,EAAA,IAAI,SAAA,KAAc,UAAU,OAAO,QAAA;AACnC,EAAA,IAAI,SAAA,KAAc,UAAU,OAAO,QAAA;AACnC,EAAA,OAAO,QAAA;AACT;AAEA,SAAS,gBAAA,CACP,WACA,aAAA,EACS;AACT,EAAA,MAAM,MAAA,GAAkC;AAAA,IACtC,IAAA,EAAM,KAAA;AAAA,IACN,MAAM,SAAA,KAAc,MAAA;AAAA,IACpB,MAAA,EAAQ,SAAA,KAAc,MAAA,IAAU,SAAA,KAAc,QAAA;AAAA,IAC9C,MAAA,EAAQ,SAAA,KAAc,MAAA,IAAU,SAAA,KAAc,YAAY,SAAA,KAAc,QAAA;AAAA,IACxE,QAAQ,SAAA,KAAc,MAAA,IAAU,cAAc,QAAA,IAAY,SAAA,KAAc,YAAY,SAAA,KAAc,QAAA;AAAA,IAClG,KAAA,EAAO;AAAA,GACT;AACA,EAAA,OAAO,MAAA,CAAO,aAAa,CAAA,IAAK,KAAA;AAClC;AAEA,eAAsB,sBACpB,MAAA,EACA,SAAA,EACA,OAAA,EACA,OAAA,GAAyB,EAAC,EACE;AAC5B,EAAA,MAAM,EAAE,IAAA,EAAM,GAAA,EAAK,QAAA,EAAU,QAAO,GAAI,OAAA;AACxC,EAAA,MAAM,EAAE,kBAAA,GAAqB,IAAA,EAAM,aAAA,GAAgB,QAAO,GAAI,OAAA;AAC9D,EAAA,MAAM,UAAA,GAAa,MAAA,CAAO,MAAA,GAAS,SAAS,CAAA;AAG5C,EAAA,IAAI,UAAA,EAAY;AACd,IAAA,MAAM,OAAA,GAAU,MAAM,cAAA,CAAe,UAAA,EAAY;AAAA,MAC/C,GAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA,KACD,CAAA;AACD,IAAA,IAAI,YAAY,KAAA,EAAO;AACrB,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,eAAA,EAAiB,QAAQ,GAAA,EAAI;AAAA,IAC/D;AACA,IAAA,IAAI,OAAO,YAAY,QAAA,EAAU;AAC/B,MAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,UAAA,EAAY,OAAA,EAAuB;AAAA,IAC7D;AACA,IAAA,OAAO,EAAE,SAAS,IAAA,EAAK;AAAA,EACzB;AAGA,EAAA,IAAI,MAAA,EAAQ,WAAA,EAAa,MAAA,GAAS,CAAA,EAAG;AACnC,IAAA,MAAM,WAAW,MAAA,CAAO,IAAA;AACxB,IAAA,MAAM,MAAA,GAAS,mBAAmB,SAAS,CAAA;AAC3C,IAAA,MAAM,UAAA,GAAa,CAAA,EAAG,QAAQ,CAAA,CAAA,EAAI,MAAM,CAAA,CAAA;AACxC,IAAA,IACE,CAAC,mBAAA,CAAoB,MAAA,CAAO,WAAA,EAAa,UAAU,CAAA,IACnD,CAAC,mBAAA,CAAoB,MAAA,CAAO,WAAA,EAAa,CAAA,EAAG,QAAQ,QAAQ,CAAA,EAC5D;AACA,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,yCAAA,EAA2C,QAAQ,GAAA,EAAI;AAAA,IACzF;AACA,IAAA,OAAO,EAAE,SAAS,IAAA,EAAK;AAAA,EACzB;AAGA,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,MAAM,WAAW,MAAA,CAAO,IAAA;AACxB,IAAA,MAAM,MAAA,GAAS,mBAAmB,SAAS,CAAA;AAC3C,IAAA,MAAM,UAAA,GAAa,CAAA,EAAG,QAAQ,CAAA,CAAA,EAAI,MAAM,CAAA,CAAA;AAExC,IAAA,MAAM,OAAA,GAAU,aAAA;AAAA,MACd,EAAE,IAAI,IAAA,CAAK,EAAA,EAAI,OAAO,IAAA,CAAK,KAAA,EAAO,IAAA,EAAM,IAAA,CAAK,IAAA,EAAK;AAAA,MAClD;AAAA,KACF;AACA,IAAA,MAAM,QAAA,GAAW,aAAA;AAAA,MACf,EAAE,IAAI,IAAA,CAAK,EAAA,EAAI,OAAO,IAAA,CAAK,KAAA,EAAO,IAAA,EAAM,IAAA,CAAK,IAAA,EAAK;AAAA,MAClD,GAAG,QAAQ,CAAA,MAAA;AAAA,KACb;AAEA,IAAA,IAAI,WAAW,QAAA,EAAU;AACvB,MAAA,OAAO,EAAE,SAAS,IAAA,EAAK;AAAA,IACzB;AACA,IAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,wCAAA,EAA0C,QAAQ,GAAA,EAAI;AAAA,EACxF;AAGA,EAAA,MAAM,cAAA,GAAiB,gBAAA,CAAiB,SAAA,EAAW,aAAa,CAAA;AAChE,EAAA,IAAI,sBAAsB,cAAA,EAAgB;AACxC,IAAA,OAAO,EAAE,SAAS,IAAA,EAAK;AAAA,EACzB;AAEA,EAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,yBAAA,EAA2B,QAAQ,GAAA,EAAI;AACzE;AAEA,eAAsB,kBACpB,MAAA,EACA,SAAA,EACA,OAAA,EACA,OAAA,GAAyB,EAAC,EACE;AAC5B,EAAA,MAAM,EAAE,IAAA,EAAM,GAAA,EAAK,QAAA,EAAS,GAAI,OAAA;AAChC,EAAA,MAAM,EAAE,kBAAA,GAAqB,IAAA,EAAK,GAAI,OAAA;AACtC,EAAA,MAAM,UAAA,GAAa,MAAA,CAAO,MAAA,GAAS,SAAS,CAAA;AAG5C,EAAA,IAAI,UAAA,EAAY;AACd,IAAA,MAAM,OAAA,GAAU,MAAM,cAAA,CAAe,UAAA,EAAY;AAAA,MAC/C,GAAA;AAAA,MACA,IAAA;AAAA,MACA;AAAA,KACD,CAAA;AACD,IAAA,IAAI,YAAY,KAAA,EAAO;AACrB,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,eAAA,EAAiB,QAAQ,GAAA,EAAI;AAAA,IAC/D;AACA,IAAA,OAAO,EAAE,SAAS,IAAA,EAAK;AAAA,EACzB;AAGA,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,MAAM,UAAA,GAAa,WAAW,SAAS,CAAA,CAAA;AACvC,IAAA,MAAM,OAAA,GAAU,aAAA;AAAA,MACd,EAAE,IAAI,IAAA,CAAK,EAAA,EAAI,OAAO,IAAA,CAAK,KAAA,EAAO,IAAA,EAAM,IAAA,CAAK,IAAA,EAAK;AAAA,MAClD;AAAA,KACF;AACA,IAAA,MAAM,QAAA,GAAW,aAAA;AAAA,MACf,EAAE,IAAI,IAAA,CAAK,EAAA,EAAI,OAAO,IAAA,CAAK,KAAA,EAAO,IAAA,EAAM,IAAA,CAAK,IAAA,EAAK;AAAA,MAClD;AAAA,KACF;AACA,IAAA,IAAI,WAAW,QAAA,EAAU;AACvB,MAAA,OAAO,EAAE,SAAS,IAAA,EAAK;AAAA,IACzB;AACA,IAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,wCAAA,EAA0C,QAAQ,GAAA,EAAI;AAAA,EACxF;AAGA,EAAA,IAAI,kBAAA,EAAoB;AACtB,IAAA,OAAO,EAAE,SAAS,IAAA,EAAK;AAAA,EACzB;AAEA,EAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,yBAAA,EAA2B,QAAQ,GAAA,EAAI;AACzE","file":"chunk-WDTTHKDS.js","sourcesContent":["export const WEBHOOK_EVENTS = {\n  COLLECTION_CREATE: \"collection.create\",\n  COLLECTION_UPDATE: \"collection.update\",\n  COLLECTION_DELETE: \"collection.delete\",\n  MEDIA_UPLOAD: \"media.upload\",\n  MEDIA_DELETE: \"media.delete\",\n  AUTH_LOGIN: \"auth.login\",\n  AUTH_REGISTER: \"auth.register\",\n  AUTH_LOGOUT: \"auth.logout\",\n  ORDER_CREATED: \"order.created\",\n  ORDER_PAID: \"order.paid\",\n  ORDER_SHIPPED: \"order.shipped\",\n  ORDER_DELIVERED: \"order.delivered\",\n} as const;\n\nexport type WebhookEvent = (typeof WEBHOOK_EVENTS)[keyof typeof WEBHOOK_EVENTS];\n\nexport const ALL_WEBHOOK_EVENTS: WebhookEvent[] = Object.values(WEBHOOK_EVENTS);\n\nexport interface WebhookConfig {\n  id: string;\n  name: string;\n  url: string;\n  events: WebhookEvent[];\n  status: \"active\" | \"inactive\" | \"error\";\n  secret?: string;\n  headers?: Record<string, string>;\n  lastTriggered?: string;\n  lastError?: string;\n  createdAt: string;\n  updatedAt: string;\n}\n\nexport interface CreateWebhookData {\n  name: string;\n  url: string;\n  events: WebhookEvent[];\n  status?: \"active\" | \"inactive\";\n  secret?: string;\n  headers?: Record<string, string>;\n}\n\nexport interface UpdateWebhookData {\n  name?: string;\n  url?: string;\n  events?: WebhookEvent[];\n  status?: \"active\" | \"inactive\" | \"error\";\n  secret?: string;\n  headers?: Record<string, string>;\n  lastTriggered?: string | null;\n  lastError?: string | null;\n}\n\nexport interface WebhookPayload {\n  id: string;\n  event: WebhookEvent;\n  timestamp: string;\n  collection?: string;\n  operation?: \"create\" | \"update\" | \"delete\";\n  data?: unknown;\n  previousData?: unknown;\n  user?: {\n    id: string;\n    email?: string;\n    role?: string;\n  };\n  tenantId?: string;\n  metadata?: Record<string, unknown>;\n}\n\nexport interface WebhookDelivery {\n  id: string;\n  webhookId: string;\n  event: WebhookEvent;\n  payload: WebhookPayload;\n  attempt: number;\n  status: \"pending\" | \"success\" | \"failed\" | \"retrying\";\n  responseStatus?: number;\n  responseBody?: string;\n  error?: string;\n  duration?: number;\n  createdAt: string;\n  deliveredAt?: string;\n  nextRetryAt?: string;\n}\n\nexport interface WebhookTriggerResult {\n  deliveryId: string;\n  webhookId: string;\n  event: WebhookEvent;\n  status: \"queued\" | \"success\" | \"failed\";\n  responseStatus?: number;\n  duration?: number;\n  error?: string;\n}\n\nexport const WEBHOOK_COLLECTION = \"_webhooks\";\nexport const WEBHOOK_DELIVERY_COLLECTION = \"_webhook_deliveries\";\n","import { createHmac, randomBytes } from \"crypto\";\nimport type {\n  WebhookConfig,\n  WebhookPayload,\n  WebhookDelivery,\n} from \"./types.js\";\n\nexport interface DeliveryResult {\n  success: boolean;\n  status: number;\n  statusText?: string;\n  body?: string;\n  duration: number;\n  error?: string;\n}\n\nexport interface DeliveryOptions {\n  timeout?: number;\n  maxRetries?: number;\n  retryDelay?: number;\n  onRetry?: (attempt: number, error: string) => void;\n  onSuccess?: (result: DeliveryResult) => void;\n  onFailure?: (error: string) => void;\n}\n\nexport function signPayload(payload: string, secret: string): string {\n  return `sha256=${createHmac(\"sha256\", secret).update(payload).digest(\"hex\")}`;\n}\n\nexport function generateWebhookSecret(): string {\n  return randomBytes(32).toString(\"hex\");\n}\n\nexport async function deliverWebhook(\n  webhook: WebhookConfig,\n  payload: WebhookPayload,\n  options: DeliveryOptions = {},\n): Promise<DeliveryResult> {\n  const timeout = options.timeout || 30000;\n  const startTime = Date.now();\n\n  const body = JSON.stringify(payload);\n\n  const headers: Record<string, string> = {\n    \"Content-Type\": \"application/json\",\n    \"User-Agent\": \"Kyro-CMS-Webhook/1.0\",\n    \"X-Webhook-Event\": payload.event,\n    \"X-Webhook-Delivery\": payload.id,\n    \"X-Webhook-Timestamp\": payload.timestamp,\n    ...(webhook.headers || {}),\n  };\n\n  if (webhook.secret) {\n    const signature = signPayload(body, webhook.secret);\n    headers[\"X-Webhook-Signature\"] = signature;\n  }\n\n  const controller = new AbortController();\n  const timeoutId = setTimeout(() => controller.abort(), timeout);\n\n  try {\n    const response = await fetch(webhook.url, {\n      method: \"POST\",\n      headers,\n      body,\n      signal: controller.signal,\n    });\n\n    clearTimeout(timeoutId);\n\n    const duration = Date.now() - startTime;\n    let responseBody: string | undefined;\n\n    try {\n      const text = await response.text();\n      responseBody = text.slice(0, 1000);\n    } catch {}\n\n    const result: DeliveryResult = {\n      success: response.ok,\n      status: response.status,\n      statusText: response.statusText,\n      body: responseBody,\n      duration,\n    };\n\n    if (result.success && options.onSuccess) {\n      options.onSuccess(result);\n    } else if (!result.success && options.onFailure) {\n      options.onFailure(`HTTP ${response.status}: ${response.statusText}`);\n    }\n\n    return result;\n  } catch (error: any) {\n    clearTimeout(timeoutId);\n    const duration = Date.now() - startTime;\n    const errorMessage =\n      error.name === \"AbortError\"\n        ? `Request timed out after ${timeout}ms`\n        : error.message || \"Unknown error\";\n\n    if (options.onFailure) {\n      options.onFailure(errorMessage);\n    }\n\n    return {\n      success: false,\n      status: 0,\n      duration,\n      error: errorMessage,\n    };\n  }\n}\n\nexport async function deliverWithRetry(\n  webhook: WebhookConfig,\n  payload: WebhookPayload,\n  deliveryId: string,\n  options: DeliveryOptions = {},\n): Promise<DeliveryResult> {\n  const maxRetries = options.maxRetries ?? 5;\n  const baseDelay = options.retryDelay ?? 1000;\n  let lastResult: DeliveryResult | null = null;\n\n  for (let attempt = 0; attempt <= maxRetries; attempt++) {\n    if (attempt > 0) {\n      const delay = Math.min(baseDelay * Math.pow(2, attempt - 1), 30000);\n      if (options.onRetry) {\n        options.onRetry(attempt, `Retrying in ${delay}ms...`);\n      }\n      await sleep(delay);\n    }\n\n    if (options.onRetry && attempt > 0) {\n      options.onRetry(attempt, `Attempt ${attempt + 1}/${maxRetries + 1}`);\n    }\n\n    lastResult = await deliverWebhook(webhook, payload, {\n      ...options,\n      onRetry: undefined,\n      onSuccess: undefined,\n      onFailure: undefined,\n    });\n\n    if (lastResult.success) {\n      return lastResult;\n    }\n\n    if (lastResult.error?.includes(\"timed out\") && attempt < maxRetries) {\n      continue;\n    }\n\n    if (lastResult.status >= 400 && lastResult.status < 500) {\n      return lastResult;\n    }\n  }\n\n  return (\n    lastResult || {\n      success: false,\n      status: 0,\n      duration: 0,\n      error: \"All delivery attempts failed\",\n    }\n  );\n}\n\nexport function buildDeliveryRecord(\n  deliveryId: string,\n  webhookId: string,\n  event: string,\n  payload: WebhookPayload,\n  attempt: number,\n  result: DeliveryResult,\n): WebhookDelivery {\n  return {\n    id: deliveryId,\n    webhookId,\n    event: event as any,\n    payload,\n    attempt,\n    status: result.success ? \"success\" : \"failed\",\n    responseStatus: result.status || undefined,\n    responseBody: result.body,\n    duration: result.duration,\n    error: result.error,\n    createdAt: new Date().toISOString(),\n    deliveredAt: result.success ? new Date().toISOString() : undefined,\n  };\n}\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\nexport function createTestPayload(): WebhookPayload {\n  return {\n    id: `test_${Date.now()}`,\n    event: \"collection.create\",\n    timestamp: new Date().toISOString(),\n    collection: \"test\",\n    operation: \"create\",\n    data: { message: \"This is a test webhook delivery\" },\n    user: { id: \"system\", email: \"system@kyro.dev\", role: \"super_admin\" },\n  };\n}\n","import { randomUUID } from \"crypto\";\nimport type { BaseAdapter } from \"../registry/types.js\";\nimport {\n  type WebhookConfig,\n  type CreateWebhookData,\n  type UpdateWebhookData,\n  type WebhookPayload,\n  type WebhookDelivery,\n  type WebhookEvent,\n  type WebhookTriggerResult,\n  WEBHOOK_COLLECTION,\n  WEBHOOK_DELIVERY_COLLECTION,\n} from \"./types.js\";\nimport {\n  deliverWithRetry,\n  buildDeliveryRecord,\n  generateWebhookSecret,\n} from \"./delivery.js\";\n\nexport class WebhookService {\n  private db: BaseAdapter;\n\n  constructor(db: BaseAdapter) {\n    this.db = db;\n  }\n\n  async getWebhooks(filters?: {\n    status?: string;\n    event?: WebhookEvent;\n  }): Promise<WebhookConfig[]> {\n    const result = await this.db.find({\n      collection: WEBHOOK_COLLECTION,\n      where: filters?.status ? { status: { equals: filters.status } } : {},\n      limit: 100,\n      page: 1,\n      draft: true,\n    });\n\n    const webhooks = result.docs as unknown as WebhookConfig[];\n\n    if (filters?.event) {\n      return webhooks.filter((w) =>\n        w.events.includes(filters.event as WebhookEvent),\n      );\n    }\n\n    return webhooks;\n  }\n\n  async getWebhookById(id: string): Promise<WebhookConfig | null> {\n    return this.db.findByID({\n      collection: WEBHOOK_COLLECTION,\n      id,\n      draft: true,\n    }) as Promise<WebhookConfig | null>;\n  }\n\n  async createWebhook(data: CreateWebhookData): Promise<WebhookConfig> {\n    const now = new Date().toISOString();\n    const secret = data.secret || generateWebhookSecret();\n\n    const webhook = {\n      id: randomUUID(),\n      name: data.name,\n      url: data.url,\n      events: data.events,\n      status: data.status || \"active\",\n      secret,\n      headers: data.headers || {},\n      createdAt: now,\n      updatedAt: now,\n    };\n\n    await this.db.create({\n      collection: WEBHOOK_COLLECTION,\n      data: webhook,\n    });\n\n    return webhook as WebhookConfig;\n  }\n\n  async updateWebhook(\n    id: string,\n    data: UpdateWebhookData,\n  ): Promise<WebhookConfig | null> {\n    const existing = await this.getWebhookById(id);\n    if (!existing) return null;\n\n    const updated = {\n      ...existing,\n      ...data,\n      updatedAt: new Date().toISOString(),\n    };\n\n    if (data.secret === \"\" && \"secret\" in data) {\n      delete updated.secret;\n    }\n\n    await this.db.update({\n      collection: WEBHOOK_COLLECTION,\n      id,\n      data: updated,\n    });\n\n    return updated as WebhookConfig;\n  }\n\n  async deleteWebhook(id: string): Promise<void> {\n    await this.db.delete({\n      collection: WEBHOOK_COLLECTION,\n      id,\n    });\n  }\n\n  async trigger(\n    event: WebhookEvent,\n    payloadData: Omit<WebhookPayload, \"id\" | \"event\" | \"timestamp\">,\n  ): Promise<WebhookTriggerResult[]> {\n    const matchingWebhooks = await this.getWebhooks({\n      status: \"active\",\n      event,\n    });\n\n    if (matchingWebhooks.length === 0) {\n      return [];\n    }\n\n    const payload: WebhookPayload = {\n      id: `wh_${Date.now()}_${randomUUID().slice(0, 8)}`,\n      event,\n      timestamp: new Date().toISOString(),\n      ...payloadData,\n    };\n\n    const results: WebhookTriggerResult[] = [];\n\n    for (const webhook of matchingWebhooks) {\n      const result = await this.triggerWebhook(webhook, payload);\n      results.push(result);\n    }\n\n    return results;\n  }\n\n  async triggerWebhook(\n    webhook: WebhookConfig,\n    payload: WebhookPayload,\n  ): Promise<WebhookTriggerResult> {\n    const deliveryId = `dlv_${Date.now()}_${randomUUID().slice(0, 8)}`;\n\n    try {\n      const result = await deliverWithRetry(webhook, payload, deliveryId, {\n        maxRetries: 5,\n        retryDelay: 1000,\n      });\n\n      const deliveryRecord = buildDeliveryRecord(\n        deliveryId,\n        webhook.id,\n        webhook.events[0],\n        payload,\n        1,\n        result,\n      );\n\n      try {\n        await this.db.create({\n          collection: WEBHOOK_DELIVERY_COLLECTION,\n          data: deliveryRecord,\n        });\n      } catch {\n        console.warn(\n          \"[WebhookService] Failed to save delivery record:\",\n          deliveryId,\n        );\n      }\n\n      if (!result.success) {\n        await this.updateWebhook(webhook.id, {\n          status: \"error\",\n          lastError: result.error,\n        }).catch(() => {});\n      } else {\n        await this.updateWebhook(webhook.id, {\n          status: \"active\",\n          lastTriggered: new Date().toISOString(),\n        }).catch(() => {});\n      }\n\n      return {\n        deliveryId,\n        webhookId: webhook.id,\n        event: webhook.events[0],\n        status: result.success ? \"success\" : \"failed\",\n        responseStatus: result.status,\n        duration: result.duration,\n        error: result.error,\n      };\n    } catch (error: any) {\n      return {\n        deliveryId,\n        webhookId: webhook.id,\n        event: webhook.events[0],\n        status: \"failed\",\n        error: error.message,\n      };\n    }\n  }\n\n  async testWebhook(webhookId: string): Promise<WebhookTriggerResult | null> {\n    const webhook = await this.getWebhookById(webhookId);\n    if (!webhook) return null;\n\n    const payload: WebhookPayload = {\n      id: `test_${Date.now()}`,\n      event: webhook.events[0] || \"collection.create\",\n      timestamp: new Date().toISOString(),\n      collection: \"test\",\n      operation: \"create\",\n      data: { message: \"This is a test webhook delivery from Kyro CMS\" },\n      user: {\n        id: \"system\",\n        email: \"system@kyro.dev\",\n        role: \"super_admin\",\n      },\n    };\n\n    return this.triggerWebhook(webhook, payload);\n  }\n\n  async getDeliveryHistory(\n    webhookId: string,\n    limit: number = 50,\n  ): Promise<WebhookDelivery[]> {\n    const result = await this.db.find({\n      collection: WEBHOOK_DELIVERY_COLLECTION,\n      where: { webhookId: { equals: webhookId } },\n      sort: \"-createdAt\",\n      limit,\n      page: 1,\n    });\n\n    return result.docs as unknown as WebhookDelivery[];\n  }\n\n  async retryDelivery(\n    deliveryId: string,\n  ): Promise<WebhookTriggerResult | null> {\n    const delivery = (await this.db.findByID({\n      collection: WEBHOOK_DELIVERY_COLLECTION,\n      id: deliveryId,\n    })) as WebhookDelivery | null;\n\n    if (!delivery) return null;\n\n    const webhook = await this.getWebhookById(delivery.webhookId);\n    if (!webhook) return null;\n\n    return this.triggerWebhook(webhook, delivery.payload);\n  }\n}\n\nexport function createWebhookService(db: BaseAdapter): WebhookService {\n  return new WebhookService(db);\n}\n","import type { User, Request } from '../hooks/types.js';\nimport { evaluateAccess, type WhereClause } from './types.js';\nimport { hasPermission } from '../auth/rbac/checker.js';\nimport { hasApiKeyPermission } from '../auth/api-key.js';\n\nexport interface AccessCheckResult {\n  allowed: boolean;\n  extraWhere?: WhereClause;\n  error?: string;\n  status?: number;\n}\n\nexport interface AccessContext {\n  user?: User;\n  req?: Request;\n  tenantID?: string;\n  apiKey?: any;\n}\n\nexport interface AccessOptions {\n  enablePublicAccess?: boolean;\n  defaultAccess?: string;\n}\n\nfunction actionToPermission(\n  operation: \"read\" | \"create\" | \"update\" | \"delete\",\n): string {\n  if (operation === \"read\") return \"read\";\n  if (operation === \"create\") return \"create\";\n  if (operation === \"update\") return \"update\";\n  return \"delete\";\n}\n\nfunction isDefaultAllowed(\n  operation: \"read\" | \"create\" | \"update\" | \"delete\",\n  defaultAccess: string,\n): boolean {\n  const levels: Record<string, boolean> = {\n    none: false,\n    read: operation === \"read\",\n    create: operation === \"read\" || operation === \"create\",\n    update: operation === \"read\" || operation === \"create\" || operation === \"update\",\n    delete: operation === \"read\" || operation === \"create\" || operation === \"update\" || operation === \"delete\",\n    admin: true,\n  };\n  return levels[defaultAccess] || false;\n}\n\nexport async function checkCollectionAccess(\n  config: { access?: any; slug: string },\n  operation: \"read\" | \"create\" | \"update\" | \"delete\",\n  context: AccessContext,\n  options: AccessOptions = {},\n): Promise<AccessCheckResult> {\n  const { user, req, tenantID, apiKey } = context;\n  const { enablePublicAccess = true, defaultAccess = \"none\" } = options;\n  const accessRule = config.access?.[operation];\n\n  // Custom access function (highest priority)\n  if (accessRule) {\n    const allowed = await evaluateAccess(accessRule, {\n      req: req!,\n      user,\n      tenantID,\n    });\n    if (allowed === false) {\n      return { allowed: false, error: \"Access denied\", status: 403 };\n    }\n    if (typeof allowed === \"object\") {\n      return { allowed: true, extraWhere: allowed as WhereClause };\n    }\n    return { allowed: true };\n  }\n\n  // API key permission check\n  if (apiKey?.permissions?.length > 0) {\n    const resource = config.slug;\n    const action = actionToPermission(operation);\n    const permission = `${resource}:${action}`;\n    if (\n      !hasApiKeyPermission(apiKey.permissions, permission) &&\n      !hasApiKeyPermission(apiKey.permissions, `${resource}:admin`)\n    ) {\n      return { allowed: false, error: \"Access denied: insufficient permissions\", status: 403 };\n    }\n    return { allowed: true };\n  }\n\n  // No accessRule, no apiKey — authenticated user RBAC\n  if (user) {\n    const resource = config.slug;\n    const action = actionToPermission(operation);\n    const permission = `${resource}:${action}`;\n\n    const userHas = hasPermission(\n      { id: user.id, email: user.email, role: user.role } as any,\n      permission,\n    );\n    const adminHas = hasPermission(\n      { id: user.id, email: user.email, role: user.role } as any,\n      `${resource}:admin`,\n    );\n\n    if (userHas || adminHas) {\n      return { allowed: true };\n    }\n    return { allowed: false, error: \"Access denied: missing RBAC permission\", status: 403 };\n  }\n\n  // Unauthenticated — check public access\n  const defaultAllowed = isDefaultAllowed(operation, defaultAccess);\n  if (enablePublicAccess && defaultAllowed) {\n    return { allowed: true };\n  }\n\n  return { allowed: false, error: \"Authentication required\", status: 401 };\n}\n\nexport async function checkGlobalAccess(\n  config: { access?: any; slug: string },\n  operation: \"read\" | \"update\",\n  context: AccessContext,\n  options: AccessOptions = {},\n): Promise<AccessCheckResult> {\n  const { user, req, tenantID } = context;\n  const { enablePublicAccess = true } = options;\n  const accessRule = config.access?.[operation];\n\n  // Custom access function\n  if (accessRule) {\n    const allowed = await evaluateAccess(accessRule, {\n      req: req!,\n      user,\n      tenantID,\n    });\n    if (allowed === false) {\n      return { allowed: false, error: \"Access denied\", status: 403 };\n    }\n    return { allowed: true };\n  }\n\n  // Authenticated user RBAC\n  if (user) {\n    const permission = `globals:${operation}`;\n    const userHas = hasPermission(\n      { id: user.id, email: user.email, role: user.role } as any,\n      permission,\n    );\n    const adminHas = hasPermission(\n      { id: user.id, email: user.email, role: user.role } as any,\n      \"globals:admin\",\n    );\n    if (userHas || adminHas) {\n      return { allowed: true };\n    }\n    return { allowed: false, error: \"Access denied: missing RBAC permission\", status: 403 };\n  }\n\n  // Unauthenticated\n  if (enablePublicAccess) {\n    return { allowed: true };\n  }\n\n  return { allowed: false, error: \"Authentication required\", status: 401 };\n}\n"]}