@kyro-cms/core 0.9.7 → 0.9.9

package/dist/chunk-FIAMXNTH.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/fields/types.ts","../src/fields/richtext.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAoVO,SAAS,YAAY,KAAA,EAAkC;AAC5D,EAAA,OAAO,MAAM,IAAA,KAAS,MAAA;AACxB;AAEO,SAAS,cAAc,KAAA,EAAoC;AAChE,EAAA,OAAO,MAAM,IAAA,KAAS,QAAA;AACxB;AAEO,SAAS,oBAAoB,KAAA,EAA0C;AAC5E,EAAA,OAAO,MAAM,IAAA,KAAS,cAAA;AACxB;AAEO,SAAS,aAAa,KAAA,EAAmC;AAC9D,EAAA,OAAO,MAAM,IAAA,KAAS,OAAA;AACxB;AAEO,SAAS,aAAa,KAAA,EAAmC;AAC9D,EAAA,OAAO,MAAM,IAAA,KAAS,OAAA;AACxB;AAEO,SAAS,cAAc,KAAA,EAAoC;AAChE,EAAA,OAAO,MAAM,IAAA,KAAS,QAAA;AACxB;AAEO,SAAS,cAAc,KAAA,EAAoC;AAChE,EAAA,OAAO,MAAM,IAAA,KAAS,QAAA;AACxB;AAEO,SAAS,aAAa,KAAA,EAAmC;AAC9D,EAAA,OAAO,MAAM,IAAA,KAAS,OAAA;AACxB;AAEO,SAAS,gBAAgB,KAAA,EAAsC;AACpE,EAAA,OAAO,MAAM,IAAA,KAAS,UAAA;AACxB;AAEO,SAAS,cAAc,KAAA,EAAoC;AAChE,EAAA,OAAO,MAAM,IAAA,KAAS,QAAA;AACxB;AAEO,SAAS,cACd,KAAA,EACkD;AAClD,EAAA,OACE,MAAM,IAAA,KAAS,KAAA,IACf,MAAM,IAAA,KAAS,aAAA,IACf,MAAM,IAAA,KAAS,MAAA;AAEnB;AAMO,IAAM,qBAAA,GAAwB;AAAA,EACnC,MAAA;AAAA,EACA,QAAA;AAAA,EACA,UAAA;AAAA,EACA,MAAA;AAAA,EACA,OAAA;AAAA,EACA,UAAA;AAAA,EACA,UAAA;AAAA,EACA,QAAA;AAAA,EACA,OAAA;AAAA,EACA;AACF;AAEO,IAAM,mBAAA,GAAsB;AAAA,EACjC,UAAA;AAAA,EACA,MAAA;AAAA,EACA,MAAA;AAAA,EACA,QAAA;AAAA,EACA,OAAA;AAAA,EACA;AACF;AAEO,IAAM,sBAAA,GAAyB;AAAA,EACpC,cAAA;AAAA,EACA,OAAA;AAAA,EACA,OAAA;AAAA,EACA;AACF;AAEO,IAAM,kBAAA,GAAqB,CAAC,KAAA,EAAO,aAAA,EAAe,MAAM;AAExD,IAAM,eAAA,GAAkB;AAAA,EAC7B,GAAG,qBAAA;AAAA,EACH,GAAG,mBAAA;AAAA,EACH,GAAG,sBAAA;AAAA,EACH,GAAG;AACL;AAMO,SAAS,6BAAA,CACd,IAAA,EACA,UAAA,EACA,OAAA,EACmB;AACnB,EAAA,OAAO;AAAA,IACL,IAAA;AAAA,IACA,IAAA,EAAM,cAAA;AAAA,IACN,UAAA;AAAA,IACA,GAAG,OAAA;AAAA,IACH,QAAA,EAAU,SAAS,QAAA,IAAY;AAAA,GACjC;AACF;ACpbO,IAAM,cAAA,GAAiB;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA,CAyF5B,IAAA;AAEF,IAAM,UAAA,GAAa;AAAA,EACjB,UAAA;AAAA,EACA,KAAK,SAAA,CAAU;AAAA,IACb,WAAA,EAAa;AAAA,GACd,CAAA;AAAA,EACD,KAAA;AAAA,EACA,UAAU,SAAA,CAAU;AAAA,IAClB,KAAA,EAAO,CAAC,SAAA,EAAW,WAAW;AAAA,GAC/B,CAAA;AAAA,EACD,SAAA;AAAA,EACA,UAAU,SAAA,CAAU;AAAA,IAClB,UAAA,EAAY;AAAA,GACb,CAAA;AAAA,EACD,QAAA;AAAA,EACA,SAAS,SAAA,CAAU;AAAA,IACjB,MAAA,EAAQ;AAAA,GACT,CAAA;AAAA,EACD,SAAA;AAAA,EACA;AACF,CAAA;AAEO,SAAS,uBAA0B,KAAA,EAAa;AAErD,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,IAAA,EAAM;AAC/C,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,EAAC;AACV;AAEO,SAAS,eAAe,KAAA,EAAwB;AACrD,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,IAAA,EAAM;AAC/C,IAAA,OAAO,EAAA;AAAA,EACT;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAO,YAAA,CAAa,KAAA,EAA8B,UAAU,CAAA;AAClE,IAAA,OAAO,8BAA8B,IAAI,CAAA,MAAA,CAAA;AAAA,EAC3C,SAAS,KAAA,EAAO;AACd,IAAA,OAAA,CAAQ,KAAA,CAAM,+BAA+B,KAAK,CAAA;AAClD,IAAA,OAAO,EAAA;AAAA,EACT;AACF","file":"chunk-FIAMXNTH.js","sourcesContent":["\n\n// ============================================================================\n// Base Field Interface\n// ============================================================================\n\n/**\n * Serializable condition for conditional field visibility.\n * Unlike function conditions, these survive JSON serialization\n * and can be used in admin configs that are built at compile time.\n */\nexport interface DeclarativeCondition {\n  /** The field name to evaluate (resolved from root form data) */\n  field: string;\n  /** Show the field when the target field equals this value */\n  equals?: string | number | boolean;\n  /** Show the field when the target field does NOT equal this value */\n  notEquals?: string | number | boolean;\n  /** Show the field when the target field's value is one of these */\n  in?: (string | number | boolean)[];\n}\n\nexport interface FieldAdmin {\n  description?: string;\n  placeholder?: string;\n  readOnly?: boolean | ((\n    data: Record<string, unknown>,\n    siblingData: Record<string, unknown>,\n  ) => boolean);\n  hidden?: boolean | ((\n    data: Record<string, unknown>,\n    siblingData: Record<string, unknown>,\n  ) => boolean);\n  width?: string;\n  position?: \"sidebar\" | \"main\";\n  autoGenerate?: string;\n  action?: string;\n  method?: string;\n  inline?: boolean;\n  pickerMode?: \"drawer\" | \"dropdown\";\n  condition?:\n    | ((\n        data: Record<string, unknown>,\n        siblingData: Record<string, unknown>,\n      ) => boolean)\n    | DeclarativeCondition;\n}\n\nexport interface BaseField {\n  name: string;\n  label?: string;\n  required?: boolean;\n  unique?: boolean;\n  indexed?: boolean;\n  defaultValue?: any;\n  admin?: FieldAdmin;\n  validate?: (\n    value: any,\n    options: ValidateOptions,\n  ) => string | true | Promise<string | true>;\n  hooks?: {\n    beforeValidate?: Hook[];\n    beforeChange?: Hook[];\n    afterChange?: Hook[];\n    afterRead?: Hook[];\n  };\n}\n\nexport interface ValidateOptions {\n  data?: Record<string, any>;\n  siblingData?: Record<string, any>;\n  user?: unknown;\n  operation?: string;\n  required?: boolean;\n}\n\nexport type Hook = (args: any) => Promise<any> | any;\n\n// ============================================================================\n// Primitive Fields\n// ============================================================================\n\nexport type TextFieldVariant = \"text\" | \"email\" | \"password\" | \"url\" | \"id\";\n\nexport interface TextField extends BaseField {\n  type: \"text\";\n  variant?: TextFieldVariant;\n  minLength?: number;\n  maxLength?: number;\n  pattern?: string;\n  hasMany?: boolean;\n  localized?: boolean;\n}\n\nexport interface NumberField extends BaseField {\n  type: \"number\";\n  min?: number;\n  max?: number;\n  step?: number;\n  integer?: boolean;\n  hasMany?: boolean;\n}\n\nexport interface CheckboxField extends BaseField {\n  type: \"checkbox\";\n}\n\nexport interface DateField extends BaseField {\n  type: \"date\";\n  minDate?: string;\n  maxDate?: string;\n  time?: boolean;\n}\n\nexport interface EmailField extends BaseField {\n  type: \"email\";\n}\n\nexport interface PasswordField extends BaseField {\n  type: \"password\";\n}\n\nexport interface TextareaField extends BaseField {\n  type: \"textarea\";\n  minLength?: number;\n  maxLength?: number;\n  rows?: number;\n  localized?: boolean;\n}\n\nexport interface SelectField extends BaseField {\n  type: \"select\";\n  options?: Array<{ label: string; value: string }>;\n  dynamicOptions?: string;\n  hasMany?: boolean;\n  defaultValue?: string | string[];\n}\n\nexport interface RadioField extends BaseField {\n  type: \"radio\";\n  options: Array<{ label: string; value: string }>;\n  defaultValue?: string;\n}\n\nexport interface ColorField extends BaseField {\n  type: \"color\";\n  format?: \"hex\" | \"rgb\" | \"hsl\";\n  defaultValue?: string;\n}\n\nexport interface ImageField extends BaseField {\n  type: \"image\";\n  minCount?: number;\n  maxCount?: number;\n  allowedTypes?: string[];\n  maxSize?: number;\n}\n\n// ============================================================================\n// Complex Fields\n// ============================================================================\n\nexport type RichTextBlock = Record<string, any>; // TipTap JSONContent\n\nexport interface RichTextField extends BaseField {\n  type: \"richtext\";\n  defaultValue?: Record<string, any>;\n  localized?: boolean;\n}\n\nexport interface JSONField extends BaseField {\n  type: \"json\";\n  defaultValue?: Record<string, any>;\n}\n\nexport interface CodeField extends BaseField {\n  type: \"code\";\n  language?: string;\n  defaultValue?: string;\n}\n\nexport interface UploadField extends BaseField {\n  type: \"upload\";\n  relationTo: string;\n  hasMany?: boolean;\n  maxDepth?: number;\n  defaultValue?: string;\n}\n\nexport interface MarkdownField extends BaseField {\n  type: \"markdown\";\n  localized?: boolean;\n  defaultValue?: string;\n}\n\n// ============================================================================\n// Relational Fields\n// ============================================================================\n\nexport interface RelationshipField extends BaseField {\n  type: \"relationship\";\n  relationTo: string | string[];\n  hasMany?: boolean;\n  maxDepth?: number;\n  filterOptions?: (args: { data: any; user: any }) => Record<string, any>;\n  defaultValue?: string | string[];\n}\n\nexport interface ArrayField extends BaseField {\n  type: \"array\";\n  fields: Field[];\n  minRows?: number;\n  maxRows?: number;\n  labels?: { singular?: string; plural?: string };\n  defaultValue?: Record<string, any>[];\n}\n\nexport interface ListField extends BaseField {\n  type: \"list\";\n  defaultValue?: string[];\n}\n\nexport interface GroupField extends BaseField {\n  type: \"group\";\n  fields: Field[];\n  defaultValue?: Record<string, any>;\n}\n\nexport interface BlockImage {\n  url: string;\n  alt?: string;\n}\n\nexport interface BlockAdmin {\n  group?: string;\n  description?: string;\n  images?: {\n    icon?: BlockImage | string;\n    thumbnail?: BlockImage | string;\n  };\n}\n\nexport interface Block {\n  slug: string;\n  label: string;\n  fields: Field[];\n  imageURL?: string;\n  admin?: BlockAdmin;\n}\n\nexport interface BlocksField extends BaseField {\n  type: \"blocks\";\n  blocks?: Block[];\n  minRows?: number;\n  maxRows?: number;\n  defaultValue?: Array<{ blockType: string; [key: string]: any }>;\n}\n\nexport interface RowField extends Omit<BaseField, \"name\"> {\n  type: \"row\";\n  fields: Field[];\n  name?: string;\n}\n\nexport interface CollapsibleField extends Omit<BaseField, \"name\"> {\n  type: \"collapsible\";\n  fields: Field[];\n  label: string;\n  name?: string;\n}\n\nexport interface TabsField extends Omit<BaseField, \"name\"> {\n  type: \"tabs\";\n  tabs: Array<{\n    label: string;\n    fields: Field[];\n    name?: string;\n  }>;\n  name?: string;\n}\n\nexport interface ButtonField extends BaseField {\n  type: \"button\";\n  label: string;\n  action?: string;\n  method?: string;\n  inline?: boolean;\n}\n\nexport interface ActionField extends BaseField {\n  type: \"action\";\n  label: string;\n  action?: string;\n  method?: string;\n  inline?: boolean;\n}\n\nexport interface SecretField extends BaseField {\n  type: \"secret\";\n}\n\n// ============================================================================\n// Union Type\n// ============================================================================\n\nexport type Field =\n  | TextField\n  | NumberField\n  | CheckboxField\n  | DateField\n  | EmailField\n  | PasswordField\n  | TextareaField\n  | SelectField\n  | RadioField\n  | ColorField\n  | ImageField\n  | RichTextField\n  | JSONField\n  | CodeField\n  | UploadField\n  | MarkdownField\n  | RelationshipField\n  | ArrayField\n  | ListField\n  | GroupField\n  | BlocksField\n  | RowField\n  | CollapsibleField\n  | TabsField\n  | ButtonField\n  | ActionField\n  | SecretField;\n\nexport type FieldType = Field[\"type\"];\n\n// ============================================================================\n// Field Type Guards\n// ============================================================================\n\nexport function isTextField(field: Field): field is TextField {\n  return field.type === \"text\";\n}\n\nexport function isNumberField(field: Field): field is NumberField {\n  return field.type === \"number\";\n}\n\nexport function isRelationshipField(field: Field): field is RelationshipField {\n  return field.type === \"relationship\";\n}\n\nexport function isArrayField(field: Field): field is ArrayField {\n  return field.type === \"array\";\n}\n\nexport function isGroupField(field: Field): field is GroupField {\n  return field.type === \"group\";\n}\n\nexport function isBlocksField(field: Field): field is BlocksField {\n  return field.type === \"blocks\";\n}\n\nexport function isUploadField(field: Field): field is UploadField {\n  return field.type === \"upload\";\n}\n\nexport function isImageField(field: Field): field is ImageField {\n  return field.type === \"image\";\n}\n\nexport function isRichTextField(field: Field): field is RichTextField {\n  return field.type === \"richtext\";\n}\n\nexport function isSelectField(field: Field): field is SelectField {\n  return field.type === \"select\";\n}\n\nexport function isLayoutField(\n  field: Field,\n): field is RowField | CollapsibleField | TabsField {\n  return (\n    field.type === \"row\" ||\n    field.type === \"collapsible\" ||\n    field.type === \"tabs\"\n  );\n}\n\n// ============================================================================\n// Field Type List\n// ============================================================================\n\nexport const PRIMITIVE_FIELD_TYPES = [\n  \"text\",\n  \"number\",\n  \"checkbox\",\n  \"date\",\n  \"email\",\n  \"password\",\n  \"textarea\",\n  \"select\",\n  \"radio\",\n  \"color\",\n] as const;\n\nexport const COMPLEX_FIELD_TYPES = [\n  \"richtext\",\n  \"json\",\n  \"code\",\n  \"upload\",\n  \"image\",\n  \"markdown\",\n] as const;\n\nexport const RELATIONAL_FIELD_TYPES = [\n  \"relationship\",\n  \"array\",\n  \"group\",\n  \"blocks\",\n] as const;\n\nexport const LAYOUT_FIELD_TYPES = [\"row\", \"collapsible\", \"tabs\"] as const;\n\nexport const ALL_FIELD_TYPES = [\n  ...PRIMITIVE_FIELD_TYPES,\n  ...COMPLEX_FIELD_TYPES,\n  ...RELATIONAL_FIELD_TYPES,\n  ...LAYOUT_FIELD_TYPES,\n] as const;\n\n// ============================================================================\n// Field Factory Functions\n// ============================================================================\n\nexport function createRelationshipFieldConfig(\n  name: string,\n  relationTo: string | string[],\n  options?: Partial<Omit<RelationshipField, \"type\" | \"name\" | \"relationTo\">>,\n): RelationshipField {\n  return {\n    name,\n    type: \"relationship\",\n    relationTo,\n    ...options,\n    required: options?.required ?? false,\n  };\n}\n","import { generateHTML } from \"@tiptap/html\";\nimport StarterKit from \"@tiptap/starter-kit\";\nimport Link from \"@tiptap/extension-link\";\nimport Image from \"@tiptap/extension-image\";\nimport TextAlign from \"@tiptap/extension-text-align\";\nimport Underline from \"@tiptap/extension-underline\";\nimport Highlight from \"@tiptap/extension-highlight\";\nimport TaskList from \"@tiptap/extension-task-list\";\nimport TaskItem from \"@tiptap/extension-task-item\";\nimport { TextStyle } from \"@tiptap/extension-text-style\";\nimport Color from \"@tiptap/extension-color\";\n\nexport const richTextStyles = `\n.kyro-richtext {\n  color: inherit;\n  line-height: 1.7;\n}\n\n.kyro-richtext > *:first-child {\n  margin-top: 0;\n}\n\n.kyro-richtext > *:last-child {\n  margin-bottom: 0;\n}\n\n.kyro-richtext p,\n.kyro-richtext ul,\n.kyro-richtext ol,\n.kyro-richtext blockquote,\n.kyro-richtext pre {\n  margin: 0 0 1rem;\n}\n\n.kyro-richtext h1,\n.kyro-richtext h2,\n.kyro-richtext h3,\n.kyro-richtext h4,\n.kyro-richtext h5,\n.kyro-richtext h6 {\n  margin: 0 0 0.75rem;\n  line-height: 1.2;\n}\n\n.kyro-richtext ul,\n.kyro-richtext ol {\n  padding-left: 1.5rem;\n}\n\n.kyro-richtext blockquote {\n  border-left: 4px solid rgba(148, 163, 184, 0.5);\n  margin-left: 0;\n  padding-left: 1rem;\n  font-style: italic;\n}\n\n.kyro-richtext pre {\n  overflow-x: auto;\n  border-radius: 0.75rem;\n  background: rgba(15, 23, 42, 0.92);\n  color: #f8fafc;\n  padding: 1rem;\n}\n\n.kyro-richtext code {\n  font-family: ui-monospace, SFMono-Regular, Menlo, monospace;\n}\n\n.kyro-richtext img {\n  display: block;\n  max-width: 100%;\n  height: auto;\n  border-radius: 0.75rem;\n}\n\n.kyro-richtext ul[data-type=\"taskList\"] {\n  list-style: none;\n  padding: 0;\n}\n\n.kyro-richtext li[data-type=\"taskItem\"] {\n  display: flex;\n  align-items: flex-start;\n  gap: 0.5rem;\n}\n\n.kyro-richtext li[data-type=\"taskItem\"] > label {\n  user-select: none;\n  pointer-events: none;\n  margin-top: 0.2rem;\n}\n\n.kyro-richtext li[data-type=\"taskItem\"] > div {\n  flex: 1;\n}\n\n.kyro-richtext mark {\n  background-color: #fef08a;\n  border-radius: 0.25rem;\n  padding: 0.125rem 0.25rem;\n}\n`.trim();\n\nconst extensions = [\n  StarterKit,\n  Link.configure({\n    openOnClick: false,\n  }),\n  Image,\n  TextAlign.configure({\n    types: [\"heading\", \"paragraph\"],\n  }),\n  Underline,\n  Highlight.configure({\n    multicolor: true,\n  }),\n  TaskList,\n  TaskItem.configure({\n    nested: true,\n  }),\n  TextStyle,\n  Color,\n];\n\nexport function normalizeRichTextValue<T>(value: T): T {\n  // TipTap JSON is already standard JSON, so we just ensure it's an object.\n  if (typeof value === \"object\" && value !== null) {\n    return value;\n  }\n  return {} as T;\n}\n\nexport function renderRichText(value: unknown): string {\n  if (typeof value !== \"object\" || value === null) {\n    return \"\";\n  }\n  \n  try {\n    const html = generateHTML(value as Record<string, any>, extensions);\n    return `<div class=\"kyro-richtext\">${html}</div>`;\n  } catch (error) {\n    console.error(\"Failed to render rich text:\", error);\n    return \"\";\n  }\n}\n"]}

package/dist/{chunk-QVJNSAQL.cjs → chunk-IEIHABVR.cjs}

@@ -4,8 +4,8 @@ var chunkY7AQK4R4_cjs = require('./chunk-Y7AQK4R4.cjs');
 var chunkKC2GDBLS_cjs = require('./chunk-KC2GDBLS.cjs');
 var chunkIDVRRRAK_cjs = require('./chunk-IDVRRRAK.cjs');
 var chunkADLJSJSN_cjs = require('./chunk-ADLJSJSN.cjs');
-var chunkQFLB4EIJ_cjs = require('./chunk-QFLB4EIJ.cjs');
-var chunkFKKQUMXR_cjs = require('./chunk-FKKQUMXR.cjs');
+var chunkLNTFRAHF_cjs = require('./chunk-LNTFRAHF.cjs');
+var chunk4OCMVGEY_cjs = require('./chunk-4OCMVGEY.cjs');
 var chunkRFFSZSCL_cjs = require('./chunk-RFFSZSCL.cjs');
 var chunk7OS7TX2Q_cjs = require('./chunk-7OS7TX2Q.cjs');
 var chunkQ23GAMLE_cjs = require('./chunk-Q23GAMLE.cjs');
@@ -391,14 +391,14 @@ function createAuthMiddleware(config) {
     userLookup
   } = config;
   return async function authMiddleware(req) {
-    const apiKeyRaw = chunkFKKQUMXR_cjs.extractApiKeyFromRequest(req);
+    const apiKeyRaw = chunk4OCMVGEY_cjs.extractApiKeyFromRequest(req);
     if (apiKeyRaw && db) {
-      const result = await chunkFKKQUMXR_cjs.validateApiKey(apiKeyRaw, db, userLookup);
+      const result = await chunk4OCMVGEY_cjs.validateApiKey(apiKeyRaw, db, userLookup);
       if (result.valid && result.user) {
         return {
           user: result.user,
           tenantContext: createTenantContextFromUser(result.user),
-          apiKeyContext: chunkFKKQUMXR_cjs.createApiKeyContext(result),
+          apiKeyContext: chunk4OCMVGEY_cjs.createApiKeyContext(result),
           status: 200,
           authType: "apikey"
         };
@@ -1681,22 +1681,11 @@ function createLocalStorage(config) {
     }
   };
 }
-
-// src/storage/imgix.ts
 function createImgixStorage(config) {
   const signUrl = (path3, params) => {
     if (!config.signKey) return path3;
-    const signer = new TextEncoder();
-    const key = signer.encode(config.signKey);
-    const data = signer.encode(path3 + params.toString());
-    let hash = 0;
-    const combined = new Uint8Array(key.length + data.length);
-    combined.set(key);
-    combined.set(data, key.length);
-    for (let i = 0; i < combined.length; i++) {
-      hash = (hash << 5) - hash + combined[i] | 0;
-    }
-    params.set("s", Math.abs(hash).toString(16));
+    const signature = crypto.createHmac("sha256", config.signKey).update(path3 + params.toString()).digest("hex");
+    params.set("s", signature);
     return path3;
   };
   return {
@@ -2969,7 +2958,7 @@ var MediaService = class _MediaService {
     const where = conditions.length > 0 ? `WHERE ${conditions.join(" AND ")}` : "";
     return { where, params: p, orderBy: sortDir, sortCol };
   }
-  rowToMedia(row) {
+  rowToMedia(row, origin) {
     return {
       id: row.id,
       filename: row.filename,
@@ -2979,8 +2968,8 @@ var MediaService = class _MediaService {
       fileSize: row.file_size ?? row.fileSize,
       width: row.width ?? null,
       height: row.height ?? null,
-      url: row.url,
-      thumbnailUrl: row.thumbnail_url ?? row.thumbnailUrl ?? null,
+      url: _MediaService.resolveMediaUrl(row.url, origin),
+      thumbnailUrl: _MediaService.resolveMediaUrl(row.thumbnail_url ?? row.thumbnailUrl ?? null, origin),
       folder: row.folder ?? null,
       provider: row.provider,
       alt: row.alt ?? null,
@@ -2990,6 +2979,12 @@ var MediaService = class _MediaService {
       updatedAt: row.updated_at ?? row.updatedAt
     };
   }
+  static resolveMediaUrl(url, origin) {
+    if (!url) return null;
+    if (url.startsWith("http://") || url.startsWith("https://") || url.startsWith("blob:") || url.startsWith("data:")) return url;
+    const base = (process.env.KYRO_BASE_URL || origin || "http://localhost:4321").replace(/\/+$/, "");
+    return `${base}${url.startsWith("/") ? "" : "/"}${url}`;
+  }
   async sqliteRun(sql, params = []) {
     const stmt = this.db.prepare(sql);
     const sqlLower = sql.trim().toLowerCase();
@@ -3117,17 +3112,19 @@ var MediaService = class _MediaService {
     const file = new File([blob], originalName, { type: mimeType });
     return this.upload(file, folder);
   }
-  async delete(id) {
+  async delete(id, origin) {
     let item = null;
     if (this.dialect === "sqlite") {
-      item = this.sqliteGet(`SELECT * FROM ${this.mediaTable} WHERE id = ?`, [
-        id
-      ]);
+      const row = this.sqliteGet(
+        `SELECT * FROM ${this.mediaTable} WHERE id = ?`,
+        [id]
+      );
+      if (row) item = this.rowToMedia(row, origin);
     } else {
       const { media: mediaSchema } = await import('./media-TUSLVRQ6.cjs');
       const { eq } = await import('drizzle-orm');
       const [row] = await this.db.select().from(mediaSchema).where(eq(mediaSchema.id, id));
-      if (row) item = this.rowToMedia(row);
+      if (row) item = this.rowToMedia(row, origin);
     }
     if (!item) return;
     await this.deleteFile(item.url);
@@ -3148,7 +3145,7 @@ var MediaService = class _MediaService {
   async deleteFile(url) {
     await this.storage.delete(url);
   }
-  async rename(id, newKey) {
+  async rename(id, newKey, origin) {
     let item = null;
     if (this.dialect === "sqlite") {
       item = this.sqliteGet(`SELECT * FROM ${this.mediaTable} WHERE id = ?`, [
@@ -3158,7 +3155,7 @@ var MediaService = class _MediaService {
       const { media: mediaSchema } = await import('./media-TUSLVRQ6.cjs');
       const { eq } = await import('drizzle-orm');
       const [row] = await this.db.select().from(mediaSchema).where(eq(mediaSchema.id, id));
-      if (row) item = this.rowToMedia(row);
+      if (row) item = this.rowToMedia(row, origin);
     }
     if (!item) return null;
     const newUrl = await this.storage.rename(item.url, newKey);
@@ -3201,20 +3198,20 @@ var MediaService = class _MediaService {
       thumbnailUrl: updateData.thumbnailUrl ?? null
     };
   }
-  async findById(id) {
+  async findById(id, origin) {
     if (this.dialect === "sqlite") {
       const row2 = this.sqliteGet(
         `SELECT * FROM ${this.mediaTable} WHERE id = ?`,
         [id]
       );
-      return row2 ? this.rowToMedia(row2) : null;
+      return row2 ? this.rowToMedia(row2, origin) : null;
     }
     const { media: mediaSchema } = await import('./media-TUSLVRQ6.cjs');
     const { eq } = await import('drizzle-orm');
     const [row] = await this.db.select().from(mediaSchema).where(eq(mediaSchema.id, id));
-    return row ? this.rowToMedia(row) : null;
+    return row ? this.rowToMedia(row, origin) : null;
   }
-  async find(params = {}) {
+  async find(params = {}, origin) {
     const {
       page = 1,
       limit = 30,
@@ -3250,7 +3247,7 @@ var MediaService = class _MediaService {
         [...p, limit, offset]
       );
       return {
-        docs: rows.map((r) => this.rowToMedia(r)),
+        docs: rows.map((r) => this.rowToMedia(r, origin)),
         totalDocs: totalDocs2,
         page,
         limit,
@@ -3297,14 +3294,14 @@ var MediaService = class _MediaService {
     const [{ count }] = await this.db.select({ count: sql`count(*)` }).from(mediaSchema).where(whereClause);
     const totalDocs = Number(count);
     return {
-      docs: docs.map((r) => this.rowToMedia(r)),
+      docs: docs.map((r) => this.rowToMedia(r, origin)),
       totalDocs,
       page,
       limit,
       totalPages: Math.ceil(totalDocs / limit)
     };
   }
-  async update(id, data) {
+  async update(id, data, origin) {
     const now = this.now();
     if (this.dialect === "sqlite") {
       const sets = ["updated_at = ?"];
@@ -3323,7 +3320,7 @@ var MediaService = class _MediaService {
       }
       if (data.folder !== void 0) {
         sets.push("folder = ?");
-        p.push(data.folder || null);
+        p.push(data.folder);
       }
       p.push(id);
       await this.sqliteRun(
@@ -3334,12 +3331,12 @@ var MediaService = class _MediaService {
         `SELECT * FROM ${this.mediaTable} WHERE id = ?`,
         [id]
       );
-      return row ? this.rowToMedia(row) : null;
+      return row ? this.rowToMedia(row, origin) : null;
     }
     const { media: mediaSchema } = await import('./media-TUSLVRQ6.cjs');
     const { eq } = await import('drizzle-orm');
     const [updated] = await this.db.update(mediaSchema).set({ ...data, updatedAt: /* @__PURE__ */ new Date() }).where(eq(mediaSchema.id, id)).returning();
-    return updated ? this.rowToMedia(updated) : null;
+    return updated ? this.rowToMedia(updated, origin) : null;
   }
   async updateMany(ids, data) {
     const now = this.now();
@@ -3496,9 +3493,9 @@ function convertRichtextFields(fields, data) {
 }
 var COLLECTION_EVENT_MAP = {
   _media: {
-    create: chunkQFLB4EIJ_cjs.WEBHOOK_EVENTS.MEDIA_UPLOAD,
-    update: chunkQFLB4EIJ_cjs.WEBHOOK_EVENTS.MEDIA_UPLOAD,
-    delete: chunkQFLB4EIJ_cjs.WEBHOOK_EVENTS.MEDIA_DELETE
+    create: chunkLNTFRAHF_cjs.WEBHOOK_EVENTS.MEDIA_UPLOAD,
+    update: chunkLNTFRAHF_cjs.WEBHOOK_EVENTS.MEDIA_UPLOAD,
+    delete: chunkLNTFRAHF_cjs.WEBHOOK_EVENTS.MEDIA_DELETE
   }
 };
 function getWebhookEvent(collection, operation) {
@@ -3546,7 +3543,7 @@ function buildConflictResponse(expectedUpdatedAt, currentDoc) {
   };
 }
 async function checkCollectionAccess2(collection, operation, req, ctxUser, ctxTenantID, apiKeyContext, enablePublicAccess = true, defaultCollectionAccess = "none") {
-  const result = await chunkFKKQUMXR_cjs.checkCollectionAccess(collection, operation, {
+  const result = await chunkLNTFRAHF_cjs.checkCollectionAccess(collection, operation, {
     user: ctxUser,
     req,
     tenantID: ctxTenantID,
@@ -3558,7 +3555,7 @@ async function checkCollectionAccess2(collection, operation, req, ctxUser, ctxTe
   return result;
 }
 async function checkGlobalAccess2(global, operation, req, ctxUser, ctxTenantID, enablePublicAccess = true) {
-  const result = await chunkFKKQUMXR_cjs.checkGlobalAccess(global, operation, {
+  const result = await chunkLNTFRAHF_cjs.checkGlobalAccess(global, operation, {
     user: ctxUser,
     req,
     tenantID: ctxTenantID
@@ -4126,12 +4123,13 @@ function createHonoApp(options) {
       const { user: ctxUser } = await resolveAuthContext(c.req.raw, authMw, user, tenantID);
       if (!ctxUser) return c.json({ error: "Authentication required" }, 401);
       const service = await getMedia();
+      const origin = new URL(c.req.url).origin;
       const page = parseInt(c.req.query("page") || "1");
       const limit = parseInt(c.req.query("limit") || "30");
       const search = c.req.query("search") || "";
       const type = c.req.query("type") || "";
       const folder = c.req.query("folder") || "";
-      const result = await service.find({ page, limit, search, type, folder });
+      const result = await service.find({ page, limit, search, type, folder }, origin);
       return c.json(result);
     } catch (error) {
       console.error("[Media] find error:", error);
@@ -4215,7 +4213,8 @@ function createHonoApp(options) {
       if (!ctxUser) return c.json({ error: "Authentication required" }, 401);
       const service = await getMedia();
       const id = c.req.param("id");
-      await service.delete(id);
+      const origin = new URL(c.req.url).origin;
+      await service.delete(id, origin);
       return c.json({ success: true });
     } catch (error) {
       console.error("[Media] delete error:", error);
@@ -4271,7 +4270,8 @@ function createHonoApp(options) {
       if (!ctxUser) return c.json({ error: "Authentication required" }, 401);
       const service = await getMedia();
       const id = c.req.param("id");
-      const doc = await service.findById(id);
+      const origin = new URL(c.req.url).origin;
+      const doc = await service.findById(id, origin);
       if (!doc) return c.json({ error: "Media not found" }, 404);
       return c.json(doc);
     } catch (error) {
@@ -4286,8 +4286,9 @@ function createHonoApp(options) {
       const service = await getMedia();
       const id = c.req.param("id");
       const body = await c.req.json();
+      const origin = new URL(c.req.url).origin;
       if (body.folder !== void 0) {
-        const updated = await service.update(id, { folder: body.folder });
+        const updated = await service.update(id, { folder: body.folder }, origin);
         return c.json({ doc: updated });
       }
       return c.json({ error: "No valid fields to update" }, 400);
@@ -4793,7 +4794,7 @@ function createHonoApp(options) {
       }
       const page = parseInt(c.req.query("page") || "1");
       const limit = Math.min(parseInt(c.req.query("limit") || "50"), 100);
-      const result = await db.find({ collection: chunkFKKQUMXR_cjs.API_KEY_COLLECTION, where: {}, page, limit, tenantID: ctxTenantID });
+      const result = await db.find({ collection: chunk4OCMVGEY_cjs.API_KEY_COLLECTION, where: {}, page, limit, tenantID: ctxTenantID });
       const docs = (result.docs || []).map((doc) => ({
         id: doc.id,
         name: doc.name,
@@ -4818,14 +4819,14 @@ function createHonoApp(options) {
       if (!body.name || typeof body.name !== "string") {
         return c.json({ error: "name is required" }, 400);
       }
-      const rawKey = chunkFKKQUMXR_cjs.generateApiKey();
+      const rawKey = chunk4OCMVGEY_cjs.generateApiKey();
       const doc = await db.create({
-        collection: chunkFKKQUMXR_cjs.API_KEY_COLLECTION,
+        collection: chunk4OCMVGEY_cjs.API_KEY_COLLECTION,
         data: {
           userId: ctxUser.id,
           name: body.name,
           key: rawKey,
-          keyPrefix: chunkFKKQUMXR_cjs.generateApiKeyPrefix(rawKey),
+          keyPrefix: chunk4OCMVGEY_cjs.generateApiKeyPrefix(rawKey),
           permissions: Array.isArray(body.permissions) ? body.permissions : ["*"],
           expiresAt: body.expiresAt || null,
           createdAt: (/* @__PURE__ */ new Date()).toISOString()
@@ -4856,9 +4857,9 @@ function createHonoApp(options) {
         return c.json({ error: "Forbidden" }, 403);
       }
       const id = c.req.param("id");
-      const existing = await db.findByID({ collection: chunkFKKQUMXR_cjs.API_KEY_COLLECTION, id });
+      const existing = await db.findByID({ collection: chunk4OCMVGEY_cjs.API_KEY_COLLECTION, id });
       if (!existing) return c.json({ error: "API key not found" }, 404);
-      await db.delete({ collection: chunkFKKQUMXR_cjs.API_KEY_COLLECTION, id });
+      await db.delete({ collection: chunk4OCMVGEY_cjs.API_KEY_COLLECTION, id });
       await sessionAuthAdapter?.createAuditLog({
         action: "api_key_delete",
         userId: ctxUser.id,
@@ -4881,14 +4882,14 @@ function createHonoApp(options) {
       }
       const id = c.req.param("id");
       const body = await c.req.json();
-      const existing = await db.findByID({ collection: chunkFKKQUMXR_cjs.API_KEY_COLLECTION, id });
+      const existing = await db.findByID({ collection: chunk4OCMVGEY_cjs.API_KEY_COLLECTION, id });
       if (!existing) return c.json({ error: "API key not found" }, 404);
       const updateData = {};
       if (typeof body.name === "string" && body.name.trim()) updateData.name = body.name.trim();
       if (Array.isArray(body.permissions)) updateData.permissions = body.permissions;
       if (body.expiresAt !== void 0) updateData.expiresAt = body.expiresAt || null;
       if (Object.keys(updateData).length === 0) return c.json({ error: "Nothing to update" }, 400);
-      const updated = await db.update({ collection: chunkFKKQUMXR_cjs.API_KEY_COLLECTION, id, data: updateData });
+      const updated = await db.update({ collection: chunk4OCMVGEY_cjs.API_KEY_COLLECTION, id, data: updateData });
       return c.json({ ...updated, keyPrefix: existing.keyPrefix });
     } catch (error) {
       console.error("[ApiKeys] PATCH error:", error);
@@ -4902,15 +4903,15 @@ function createHonoApp(options) {
         return c.json({ error: "Forbidden" }, 403);
       }
       const id = c.req.param("id");
-      const existing = await db.findByID({ collection: chunkFKKQUMXR_cjs.API_KEY_COLLECTION, id });
+      const existing = await db.findByID({ collection: chunk4OCMVGEY_cjs.API_KEY_COLLECTION, id });
       if (!existing) return c.json({ error: "API key not found" }, 404);
-      const rawKey = chunkFKKQUMXR_cjs.generateApiKey();
+      const rawKey = chunk4OCMVGEY_cjs.generateApiKey();
       const updated = await db.update({
-        collection: chunkFKKQUMXR_cjs.API_KEY_COLLECTION,
+        collection: chunk4OCMVGEY_cjs.API_KEY_COLLECTION,
         id,
         data: {
           key: rawKey,
-          keyPrefix: chunkFKKQUMXR_cjs.generateApiKeyPrefix(rawKey),
+          keyPrefix: chunk4OCMVGEY_cjs.generateApiKeyPrefix(rawKey),
           lastUsedAt: null
         }
       });
@@ -5068,6 +5069,75 @@ function createHonoApp(options) {
       return c.json({ error: error.message }, 500);
     }
   });
+  function serializeField(field) {
+    const safe = {};
+    const keys = [
+      "name",
+      "type",
+      "required",
+      "hasMany",
+      "relationTo",
+      "options",
+      "min",
+      "max",
+      "minLength",
+      "maxLength",
+      "defaultValue",
+      "label",
+      "localized",
+      "admin",
+      "unique",
+      "index",
+      "hidden",
+      "readOnly",
+      "deprecated"
+    ];
+    for (const k of keys) {
+      if (k in field) safe[k] = field[k];
+    }
+    if (field.fields) {
+      safe.fields = field.fields.map(serializeField);
+    }
+    if (field.tabs) {
+      safe.tabs = field.tabs.map((t) => ({
+        label: t.label,
+        name: t.name,
+        fields: t.fields.map(serializeField)
+      }));
+    }
+    return safe;
+  }
+  app.get("/api/__schema", async (c) => {
+    try {
+      const { user: ctxUser, apiKeyContext } = await resolveAuthContext(
+        c.req.raw,
+        authMw,
+        user,
+        tenantID
+      );
+      if (!ctxUser && !apiKeyContext) {
+        return c.json({ error: "Unauthorized" }, 401);
+      }
+      const cols = registry.getCollections().filter(
+        (col) => col.slug !== "users" && col.slug !== "audit_logs"
+      );
+      const serialized = cols.map((col) => ({
+        slug: col.slug,
+        label: col.label,
+        labelPlural: col.labelPlural,
+        singularLabel: col.singularLabel,
+        timestamps: col.timestamps,
+        auth: !!col.auth,
+        tenantScoped: !!col.tenantScoped,
+        upload: col.upload ? { staticDir: col.upload.staticDir, imageSizes: col.upload.imageSizes, mimeTypes: col.upload.mimeTypes } : void 0,
+        fields: col.fields.map(serializeField)
+      }));
+      return c.json(serialized);
+    } catch (error) {
+      console.error("[Schema] error:", error);
+      return c.json({ error: error.message }, 500);
+    }
+  });
   const collections = registry.getCollections();
   for (const collection of collections) {
     let computeDiff2 = function(a, b) {
@@ -5113,10 +5183,20 @@ function createHonoApp(options) {
         const sort = url.searchParams.get("sort") || void 0;
         const depth = parseInt(url.searchParams.get("depth") || "0");
         const select = url.searchParams.get("select")?.split(",") || void 0;
-        const isDraftRequest = !!ctxUser;
+        const draftParam = url.searchParams.get("draft");
+        const isDraftRequest = draftParam === "true" ? true : draftParam === "false" ? false : !!ctxUser;
+        let where = {};
+        const whereRaw = url.searchParams.get("where");
+        if (whereRaw) {
+          try {
+            where = JSON.parse(whereRaw);
+          } catch {
+            return c.json({ error: "Invalid JSON in where parameter" }, 400);
+          }
+        }
         const result = await db.find({
           collection: slug,
-          where: {},
+          where,
           sort,
           limit,
           page,
@@ -5305,7 +5385,8 @@ function createHonoApp(options) {
         const url = new URL(c.req.url);
         const depth = parseInt(url.searchParams.get("depth") || "0");
         const select = url.searchParams.get("select")?.split(",") || void 0;
-        const isDraftRequest = !!ctxUser;
+        const draftParam = url.searchParams.get("draft");
+        const isDraftRequest = draftParam === "true" ? true : draftParam === "false" ? false : !!ctxUser;
         let doc = await db.findByID({
           collection: slug,
           id,
@@ -6292,7 +6373,6 @@ function createHonoApp(options) {
           data: doc,
           message: "Version restored successfully"
         });
-        return c.json({ data: doc, message: "Restored successfully" });
       } catch (error) {
         return c.json({ error: error.message }, 500);
       }
@@ -6378,6 +6458,13 @@ Sent at: ${(/* @__PURE__ */ new Date()).toLocaleString()}`
       });
     }
   }
+  app.onError((err, c) => {
+    console.error(`[API Error] ${c.req.method} ${c.req.path}:`, err);
+    return c.json(
+      { error: err.message || "Internal server error", code: "INTERNAL_ERROR" },
+      500
+    );
+  });
   return app;
 }
 function createRESTAPI(registry, db, options) {
@@ -6413,5 +6500,5 @@ exports.init_secret = init_secret;
 exports.loadSecrets = loadSecrets;
 exports.resolveProvider = resolveProvider;
 exports.setDbAdapter = setDbAdapter;
-//# sourceMappingURL=chunk-QVJNSAQL.cjs.map
-//# sourceMappingURL=chunk-QVJNSAQL.cjs.map
+//# sourceMappingURL=chunk-IEIHABVR.cjs.map
+//# sourceMappingURL=chunk-IEIHABVR.cjs.map