@magnet-cms/core 2.0.0 → 3.0.0

package/dist/{chunk-LK4NYP67.js → chunk-BLOJL7F5.js}

@@ -1,4 +1,4 @@
-import { init_constants, PLUGIN_METADATA, PLUGIN_FRONTEND_MANIFEST, PLUGIN_MODULE, getPluginOptionsToken } from './chunk-5HGRFVWS.js';
+import { init_constants, PLUGIN_METADATA, PLUGIN_FRONTEND_MANIFEST, PLUGIN_MODULE, getPluginOptionsToken } from './chunk-L5S66O2C.js';
 import { __name } from './chunk-6EUZQHAF.js';
 import { Injectable, Inject } from '@nestjs/common';
 

package/dist/{chunk-QYK4424N.js → chunk-D3C3IDJE.js}

@@ -1,4 +1,4 @@
-import { require_src, require_supports_color, require_safe_buffer, require_ms, init_restricted_route, RestrictedRoute, init_database, init_settings, DatabaseModule, SettingsModule, RBACModule, PluginModule, NotificationModule, HistoryModule, DocumentModule, ContentModule, CacheModule, ApiKeysModule, StorageModule, AuthModule, ActivityModule, AdminModule, EmailModule, EnvironmentModule, GeneralModule, WebhookModule, ViewConfigModule, init_activity_module, init_admin_module, init_api_keys_module, init_auth_module, init_cache_module, init_content_module, init_document_module, init_email_module, init_environment_module, init_general_module, init_history_module, init_notification_module, init_plugin_module, init_rbac_module, init_settings_module, init_storage_module, init_view_config_module, init_webhook_module } from './chunk-5HGRFVWS.js';
+import { require_src, require_supports_color, require_safe_buffer, require_ms, init_restricted_route, RestrictedRoute, init_database, init_settings, DatabaseModule, SettingsModule, RBACModule, PluginModule, NotificationModule, HistoryModule, DocumentModule, ContentModule, CacheModule, ApiKeysModule, StorageModule, AuthModule, ActivityModule, AdminModule, EmailModule, EnvironmentModule, GeneralModule, WebhookModule, ViewConfigModule, init_activity_module, init_admin_module, init_api_keys_module, init_auth_module, init_cache_module, init_content_module, init_document_module, init_email_module, init_environment_module, init_general_module, init_history_module, init_notification_module, init_plugin_module, init_rbac_module, init_settings_module, init_storage_module, init_view_config_module, init_webhook_module } from './chunk-L5S66O2C.js';
 import { __commonJS, __require, __name, __esm, __toESM, __export } from './chunk-6EUZQHAF.js';
 import { existsSync, readFileSync } from 'node:fs';
 import { extname, join, resolve } from 'node:path';

package/dist/{chunk-5HGRFVWS.js → chunk-L5S66O2C.js}

@@ -16,7 +16,7 @@ import { __esm, __name, __commonJS, __toESM, __export, __toCommonJS, __require }
 import { Injectable, Scope, NotFoundException, HttpException, HttpStatus, Get, Param, Put, Body, Controller, Logger, Module, forwardRef, Global, Optional, Inject, Post, Query, Delete, UseGuards, BadRequestException, RequestMethod, All, Req, Res, Next, createParamDecorator, UnauthorizedException, ForbiddenException, ConflictException, UseInterceptors, Patch, HttpCode, UploadedFile, UploadedFiles, SetMetadata } from '@nestjs/common';
 import { AsyncLocalStorage } from 'node:async_hooks';
 import { randomUUID, randomBytes as randomBytes$1, createHash, createHmac } from 'node:crypto';
-import { SettingField, Settings, Field, Prop, Mixed, Schema, getSettingFields, PROP_METADATA_KEY, ValidationException, getSettingsOptions, InjectModel, getModelToken, getSchemaToken, registerModel, EVENT_HANDLER_METADATA, isUserExtension, getExtendUserOptions, FIELD_METADATA_KEY, UI_METADATA_KEY, EXTEND_USER_METADATA_KEY, Resolve, OnEvent, RESOLVE_METADATA_KEY, SETTING_FIELD_METADATA_KEY, isFieldMetadata, isSettingFieldMetadata, getSchemaOptions, SETTINGS_OPTIONS_METADATA_KEY, DESIGN_TYPE, SCHEMA_METADATA_KEY, SETTING_METADATA_KEY, ResourceNotFoundError, InvalidCredentialsError, UserNotFoundError, DuplicateKeyError, Model as Model$1, MagnetModuleOptions, Setting as Setting$1, PERMISSION_METADATA_KEY, RoleNotFoundError, PermissionNotFoundError, PermissionDeniedError, RESOLVED_PERMISSION_KEY, getRegisteredModel, RequirePermission, EmailAdapter, UI } from '@magnet-cms/common';
+import { SettingField, Settings, Field, Prop, Mixed, Schema, getSettingFields, PROP_METADATA_KEY, ValidationException, getSettingsOptions, InjectModel, getDatabaseAdapterSingletonForFeature, getModelToken, getSchemaToken, registerModel, EVENT_HANDLER_METADATA, isUserExtension, getExtendUserOptions, FIELD_METADATA_KEY, UI_METADATA_KEY, EXTEND_USER_METADATA_KEY, Resolve, OnEvent, RESOLVE_METADATA_KEY, SETTING_FIELD_METADATA_KEY, isFieldMetadata, isSettingFieldMetadata, getSchemaOptions, SETTINGS_OPTIONS_METADATA_KEY, DESIGN_TYPE, SCHEMA_METADATA_KEY, SETTING_METADATA_KEY, ResourceNotFoundError, InvalidCredentialsError, UserNotFoundError, DuplicateKeyError, Model as Model$1, MagnetModuleOptions, Setting as Setting$1, PERMISSION_METADATA_KEY, RoleNotFoundError, PermissionNotFoundError, PermissionDeniedError, RESOLVED_PERMISSION_KEY, getRegisteredModel, RequirePermission, EmailAdapter, UI } from '@magnet-cms/common';
 export { HasPermission, PermissionMeta, RequirePermission, getPermissionMetadata, hasPermissionDecorator } from '@magnet-cms/common';
 import { ModuleRef, DiscoveryModule, DiscoveryService, ModulesContainer, MetadataScanner, Reflector } from '@nestjs/core';
 import nodeCrypto from 'crypto';
@@ -15987,14 +15987,16 @@ var init_database_module = __esm({
       /**
       * Register schemas for database access.
       *
-      * IMPORTANT: Feature modules that call forFeature() must be loaded AFTER
-      * MagnetModule.forRoot() has run (which calls register()). Use a FeaturesModule
-      * with require() to defer loading. See apps/examples for the pattern.
+      * Nest’s compiled CJS output often `require()`s feature modules before the
+      * `AppModule` decorator runs `MagnetModule.forRoot()`, so `register()` may
+      * not have run yet. In that case we fall back to the adapter singleton
+      * registered by the official DB packages via
+      * `registerDatabaseAdapterSingletonForFeature()` (same instance as `forRoot()`).
       */
       static forFeature(schemas) {
-        const adapter = getSharedAdapter();
+        const adapter = getSharedAdapter() ?? getDatabaseAdapterSingletonForFeature();
         if (!adapter) {
-          throw new Error("DatabaseModule.register() must be called before DatabaseModule.forFeature(). Ensure MagnetModule.forRoot() includes a database provider.");
+          throw new Error("DatabaseModule.register() must be called before DatabaseModule.forFeature(), or the active DB adapter package must call registerDatabaseAdapterSingletonForFeature() on import. Ensure MagnetModule.forRoot() includes a database provider.");
         }
         const schemasArray = Array.isArray(schemas) ? schemas : [
           schemas
@@ -19486,7 +19488,7 @@ function _ts_decorate16(decorators, target, key, desc) {
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var import_passport, DynamicAuthGuard;
+var import_passport, DynamicAuthGuard, OptionalDynamicAuthGuard;
 var init_dynamic_auth_guard = __esm({
   "src/modules/auth/guards/dynamic-auth.guard.ts"() {
     import_passport = __toESM(require_passport(), 1);
@@ -19505,6 +19507,22 @@ var init_dynamic_auth_guard = __esm({
     DynamicAuthGuard = _ts_decorate16([
       Injectable()
     ], DynamicAuthGuard);
+    OptionalDynamicAuthGuard = class {
+      static {
+        __name(this, "OptionalDynamicAuthGuard");
+      }
+      async canActivate(context) {
+        const guard = new ((0, import_passport.AuthGuard)(DynamicAuthGuard.strategyName))();
+        try {
+          await guard.canActivate(context);
+        } catch {
+        }
+        return true;
+      }
+    };
+    OptionalDynamicAuthGuard = _ts_decorate16([
+      Injectable()
+    ], OptionalDynamicAuthGuard);
   }
 });
 
@@ -40086,6 +40104,7 @@ function _ts_param14(paramIndex, decorator) {
 var AuthController;
 var init_auth_controller = __esm({
   "src/modules/auth/auth.controller.ts"() {
+    init_settings_service();
     init_auth_service();
     init_change_password_dto();
     init_forgot_password_dto();
@@ -40103,8 +40122,10 @@ var init_auth_controller = __esm({
         __name(this, "AuthController");
       }
       authService;
-      constructor(authService) {
+      settingsService;
+      constructor(authService, settingsService) {
         this.authService = authService;
+        this.settingsService = settingsService;
       }
       // ============================================================================
       // Authentication
@@ -40171,9 +40192,10 @@ var init_auth_controller = __esm({
         }
       }
       /**
-      * Get auth status (public endpoint).
+      * Get auth status (public endpoint with optional auth).
       * Returns authentication state, setup requirement, the list of
       * enabled OAuth providers, and the active auth strategy info.
+      * When a valid token is present, also returns onboardingCompleted.
       */
       async status(req) {
         const [providers, authInfo] = await Promise.all([
@@ -40187,8 +40209,10 @@ var init_auth_controller = __esm({
           } : {}
         };
         if (req.user) {
+          const onboardingCompleted = await this.checkOnboardingCompleted();
           return {
             authenticated: true,
+            onboardingCompleted,
             user: req.user,
             providers,
             ...base2
@@ -40203,6 +40227,22 @@ var init_auth_controller = __esm({
           ...base2
         };
       }
+      /**
+      * Check if the project onboarding has been completed by verifying
+      * whether general settings differ from their defaults.
+      */
+      async checkOnboardingCompleted() {
+        try {
+          const settings = await this.settingsService.getSettingsByGroup("general");
+          const siteNameSetting = settings.find((s) => s.key === "siteName");
+          const baseUrlSetting = settings.find((s) => s.key === "baseUrl");
+          const siteName = siteNameSetting?.value ?? "Magnet CMS";
+          const baseUrl = baseUrlSetting?.value ?? "http://localhost:3000";
+          return siteName !== "Magnet CMS" || baseUrl !== "http://localhost:3000";
+        } catch {
+          return false;
+        }
+      }
       // ============================================================================
       // Sessions
       // ============================================================================
@@ -40337,6 +40377,7 @@ var init_auth_controller = __esm({
       _ts_metadata45("design:returntype", Promise)
     ], AuthController.prototype, "me", null);
     _ts_decorate61([
+      UseGuards(OptionalDynamicAuthGuard),
       Get("status"),
       _ts_param14(0, Req()),
       _ts_metadata45("design:type", Function),
@@ -40413,7 +40454,8 @@ var init_auth_controller = __esm({
       Controller("auth"),
       _ts_metadata45("design:type", Function),
       _ts_metadata45("design:paramtypes", [
-        typeof AuthService === "undefined" ? Object : AuthService
+        typeof AuthService === "undefined" ? Object : AuthService,
+        typeof SettingsService === "undefined" ? Object : SettingsService
       ])
     ], AuthController);
   }
@@ -122908,4 +122950,4 @@ mongoose/lib/index.js:
    *)
 */
 
-export { API_KEY_PERMISSION_KEY, API_KEY_SCHEMA_KEY, AUTH_CONFIG, AUTH_STRATEGY, Activity, ActivityController, ActivityModule, ActivityService, ActivitySettings, AdminController, AdminModule, AdminService, ApiKey, ApiKeyGuard, ApiKeyService, ApiKeySettings, ApiKeyUsage, ApiKeysModule, AssignRoleDto, AuthModule, AuthSettings, AuthStrategyFactory, CACHE_ADAPTER_TOKEN, CACHE_METADATA_KEY, CACHE_TTL_KEY, CRUD_ACTIONS, CacheModule, CacheService, ContentController, ContentModule, ContentService, ContentSettings, CreateApiKeyDto, CreateRoleDto, CreateUserDto, CurrentApiKey, DEFAULT_ROLES, DatabaseModule, DiscoveryModule2 as DiscoveryModule, DocumentModule, DocumentService, DuplicateRoleDto, DynamicAuthGuard, DynamicPermissionInterceptor, EmailModule, EmailService, EmailVerificationService, EnvironmentController, EnvironmentModule, EnvironmentService, Environments, EventContextInterceptor, EventHandlerDiscoveryService, EventService, EventsModule, GeneralModule, GeneralSettings, HistoryController, HistoryModule, HistoryService, IS_RESTRICTED_ROUTE, IsIn, IsNotEmpty, IsNumber, IsOptional, IsString, JwtAuthStrategy, LocalStorageAdapter, MagnetLogger, Media, MediaFolder, MediaSettings, MemoryCacheAdapter, Min, NOTIFICATION_MODULE_OPTIONS, Notification, NotificationController, NotificationModule, NotificationService, NotificationSettings, PERMISSION_CATEGORIES, PLUGIN_FRONTEND_MANIFEST, PLUGIN_METADATA, PLUGIN_MODULE, PermissionDiscoveryService, PermissionGuard, PermissionService, PluginController, PluginLifecycleService, PluginModule, PluginRegistryService, PluginService, RBACModule, RBACSettings, RBAC_CONFIG, ROLE_MODEL, RequireApiKeyPermission, RequireApiKeySchema, RestrictedRoute, Role, RoleService, STORAGE_ADAPTER, STORAGE_CONFIG, SettingsModule, SettingsService, StorageModule, StorageService, TemplateService, USER_EXTENSION_TOKEN, UpdateApiKeyDto, UpdatePermissionsDto, UpdateRoleDto, User, UserController, UserExtensionService, UserModule, UserService, ValidationError, ViewConfig, ViewConfigModule, ViewConfigService, WILDCARD_PERMISSION, WebhookListenerService, WebhookModule, WebhookService, WebhookSettings, createEventContext, eventContextStorage, generateDocumentId, getEventContext, getPluginOptionsToken, init_activity_controller, init_activity_module, init_activity_schema, init_activity_service, init_activity_settings, init_admin_controller, init_admin_module, init_admin_service, init_api_key_decorator, init_api_key_guard, init_api_key_schema, init_api_key_usage_schema, init_api_keys_module, init_api_keys_service, init_api_keys_settings, init_assign_role_dto, init_auth_constants, init_auth_module, init_auth_settings, init_auth_strategy_factory, init_cache_constants, init_cache_module, init_cache_service, init_constants2 as init_constants, init_content_controller, init_content_module, init_content_service, init_content_settings, init_create_api_key_dto, init_create_role_dto, init_database, init_database_module, init_discovery, init_document_id_util, init_document_module, init_document_service, init_duplicate_role_dto, init_dynamic_auth_guard, init_dynamic_permission_interceptor, init_email_module, init_email_service, init_email_verification_service, init_environment_controller, init_environment_module, init_environment_service, init_environment_setting, init_esm52 as init_esm5, init_event_context_interceptor, init_events, init_events_module, init_general_module, init_general_settings, init_history_controller, init_history_module, init_history_service, init_jwt_auth_strategy, init_local_storage_adapter, init_logger_service, init_media_schema, init_memory_cache_adapter, init_notification_constants, init_notification_controller, init_notification_module, init_notification_schema, init_notification_service, init_notification_settings, init_permission_discovery_service, init_permission_guard, init_permission_service, init_plugin_controller, init_plugin_lifecycle_service, init_plugin_module, init_plugin_registry_service, init_plugin_service, init_rbac_constants, init_rbac_decorators, init_rbac_module, init_rbac_settings, init_restricted_route, init_role_schema, init_role_service, init_settings, init_settings_module, init_storage_constants, init_storage_module, init_storage_service, init_storage_settings, init_template_service, init_update_api_key_dto, init_update_permissions_dto, init_update_role_dto, init_user, init_view_config_module, init_view_config_schema, init_view_config_service, init_webhook_listener, init_webhook_module, init_webhook_service, init_webhook_settings, isValidDocumentId, locales, require_argsOrArgArray, require_audit, require_auditTime, require_buffer, require_bufferCount, require_bufferTime, require_bufferToggle, require_bufferWhen, require_catchError, require_cjs, require_combineAll, require_combineLatest2 as require_combineLatest, require_combineLatestAll, require_combineLatestWith, require_concat2 as require_concat, require_concatAll, require_concatMap, require_concatMapTo, require_concatWith, require_connect, require_count, require_debounce, require_debounceTime, require_defaultIfEmpty, require_delay, require_delayWhen, require_dematerialize, require_distinct, require_distinctUntilChanged, require_distinctUntilKeyChanged, require_elementAt, require_endWith, require_every, require_exhaust, require_exhaustAll, require_exhaustMap, require_expand, require_filter, require_finalize, require_find, require_findIndex, require_first, require_flatMap, require_follow_redirects, require_groupBy, require_ignoreElements, require_isEmpty, require_last, require_map, require_mapTo, require_materialize, require_max, require_merge2 as require_merge, require_mergeAll, require_mergeMap, require_mergeMapTo, require_mergeScan, require_mergeWith, require_min, require_ms, require_multicast, require_not, require_observeOn, require_onErrorResumeNextWith, require_pairwise, require_passport, require_pluck, require_publish, require_publishBehavior, require_publishLast, require_publishReplay, require_raceWith, require_reduce, require_refCount, require_repeat, require_repeatWhen, require_retry, require_retryWhen, require_safe_buffer, require_sample, require_sampleTime, require_scan, require_sequenceEqual, require_share, require_shareReplay, require_single, require_skip, require_skipLast, require_skipUntil, require_skipWhile, require_src, require_startWith, require_subscribeOn, require_supports_color, require_switchAll, require_switchMap, require_switchMapTo, require_switchScan, require_take, require_takeLast, require_takeUntil, require_takeWhile, require_tap, require_throttle, require_throttleTime, require_throwIfEmpty, require_timeInterval, require_timeout, require_timeoutWith, require_timestamp, require_toArray, require_window, require_windowCount, require_windowTime, require_windowToggle, require_windowWhen, require_withLatestFrom, require_zip2 as require_zip, require_zipAll, require_zipWith, timezones };
+export { API_KEY_PERMISSION_KEY, API_KEY_SCHEMA_KEY, AUTH_CONFIG, AUTH_STRATEGY, Activity, ActivityController, ActivityModule, ActivityService, ActivitySettings, AdminController, AdminModule, AdminService, ApiKey, ApiKeyGuard, ApiKeyService, ApiKeySettings, ApiKeyUsage, ApiKeysModule, AssignRoleDto, AuthModule, AuthSettings, AuthStrategyFactory, CACHE_ADAPTER_TOKEN, CACHE_METADATA_KEY, CACHE_TTL_KEY, CRUD_ACTIONS, CacheModule, CacheService, ContentController, ContentModule, ContentService, ContentSettings, CreateApiKeyDto, CreateRoleDto, CreateUserDto, CurrentApiKey, DEFAULT_ROLES, DatabaseModule, DiscoveryModule2 as DiscoveryModule, DocumentModule, DocumentService, DuplicateRoleDto, DynamicAuthGuard, DynamicPermissionInterceptor, EmailModule, EmailService, EmailVerificationService, EnvironmentController, EnvironmentModule, EnvironmentService, Environments, EventContextInterceptor, EventHandlerDiscoveryService, EventService, EventsModule, GeneralModule, GeneralSettings, HistoryController, HistoryModule, HistoryService, IS_RESTRICTED_ROUTE, IsIn, IsNotEmpty, IsNumber, IsOptional, IsString, JwtAuthStrategy, LocalStorageAdapter, MagnetLogger, Media, MediaFolder, MediaSettings, MemoryCacheAdapter, Min, NOTIFICATION_MODULE_OPTIONS, Notification, NotificationController, NotificationModule, NotificationService, NotificationSettings, OptionalDynamicAuthGuard, PERMISSION_CATEGORIES, PLUGIN_FRONTEND_MANIFEST, PLUGIN_METADATA, PLUGIN_MODULE, PermissionDiscoveryService, PermissionGuard, PermissionService, PluginController, PluginLifecycleService, PluginModule, PluginRegistryService, PluginService, RBACModule, RBACSettings, RBAC_CONFIG, ROLE_MODEL, RequireApiKeyPermission, RequireApiKeySchema, RestrictedRoute, Role, RoleService, STORAGE_ADAPTER, STORAGE_CONFIG, SettingsModule, SettingsService, StorageModule, StorageService, TemplateService, USER_EXTENSION_TOKEN, UpdateApiKeyDto, UpdatePermissionsDto, UpdateRoleDto, User, UserController, UserExtensionService, UserModule, UserService, ValidationError, ViewConfig, ViewConfigModule, ViewConfigService, WILDCARD_PERMISSION, WebhookListenerService, WebhookModule, WebhookService, WebhookSettings, createEventContext, eventContextStorage, generateDocumentId, getEventContext, getPluginOptionsToken, init_activity_controller, init_activity_module, init_activity_schema, init_activity_service, init_activity_settings, init_admin_controller, init_admin_module, init_admin_service, init_api_key_decorator, init_api_key_guard, init_api_key_schema, init_api_key_usage_schema, init_api_keys_module, init_api_keys_service, init_api_keys_settings, init_assign_role_dto, init_auth_constants, init_auth_module, init_auth_settings, init_auth_strategy_factory, init_cache_constants, init_cache_module, init_cache_service, init_constants2 as init_constants, init_content_controller, init_content_module, init_content_service, init_content_settings, init_create_api_key_dto, init_create_role_dto, init_database, init_database_module, init_discovery, init_document_id_util, init_document_module, init_document_service, init_duplicate_role_dto, init_dynamic_auth_guard, init_dynamic_permission_interceptor, init_email_module, init_email_service, init_email_verification_service, init_environment_controller, init_environment_module, init_environment_service, init_environment_setting, init_esm52 as init_esm5, init_event_context_interceptor, init_events, init_events_module, init_general_module, init_general_settings, init_history_controller, init_history_module, init_history_service, init_jwt_auth_strategy, init_local_storage_adapter, init_logger_service, init_media_schema, init_memory_cache_adapter, init_notification_constants, init_notification_controller, init_notification_module, init_notification_schema, init_notification_service, init_notification_settings, init_permission_discovery_service, init_permission_guard, init_permission_service, init_plugin_controller, init_plugin_lifecycle_service, init_plugin_module, init_plugin_registry_service, init_plugin_service, init_rbac_constants, init_rbac_decorators, init_rbac_module, init_rbac_settings, init_restricted_route, init_role_schema, init_role_service, init_settings, init_settings_module, init_storage_constants, init_storage_module, init_storage_service, init_storage_settings, init_template_service, init_update_api_key_dto, init_update_permissions_dto, init_update_role_dto, init_user, init_view_config_module, init_view_config_schema, init_view_config_service, init_webhook_listener, init_webhook_module, init_webhook_service, init_webhook_settings, isValidDocumentId, locales, require_argsOrArgArray, require_audit, require_auditTime, require_buffer, require_bufferCount, require_bufferTime, require_bufferToggle, require_bufferWhen, require_catchError, require_cjs, require_combineAll, require_combineLatest2 as require_combineLatest, require_combineLatestAll, require_combineLatestWith, require_concat2 as require_concat, require_concatAll, require_concatMap, require_concatMapTo, require_concatWith, require_connect, require_count, require_debounce, require_debounceTime, require_defaultIfEmpty, require_delay, require_delayWhen, require_dematerialize, require_distinct, require_distinctUntilChanged, require_distinctUntilKeyChanged, require_elementAt, require_endWith, require_every, require_exhaust, require_exhaustAll, require_exhaustMap, require_expand, require_filter, require_finalize, require_find, require_findIndex, require_first, require_flatMap, require_follow_redirects, require_groupBy, require_ignoreElements, require_isEmpty, require_last, require_map, require_mapTo, require_materialize, require_max, require_merge2 as require_merge, require_mergeAll, require_mergeMap, require_mergeMapTo, require_mergeScan, require_mergeWith, require_min, require_ms, require_multicast, require_not, require_observeOn, require_onErrorResumeNextWith, require_pairwise, require_passport, require_pluck, require_publish, require_publishBehavior, require_publishLast, require_publishReplay, require_raceWith, require_reduce, require_refCount, require_repeat, require_repeatWhen, require_retry, require_retryWhen, require_safe_buffer, require_sample, require_sampleTime, require_scan, require_sequenceEqual, require_share, require_shareReplay, require_single, require_skip, require_skipLast, require_skipUntil, require_skipWhile, require_src, require_startWith, require_subscribeOn, require_supports_color, require_switchAll, require_switchMap, require_switchMapTo, require_switchScan, require_take, require_takeLast, require_takeUntil, require_takeWhile, require_tap, require_throttle, require_throttleTime, require_throwIfEmpty, require_timeInterval, require_timeout, require_timeoutWith, require_timestamp, require_toArray, require_window, require_windowCount, require_windowTime, require_windowToggle, require_windowWhen, require_withLatestFrom, require_zip2 as require_zip, require_zipAll, require_zipWith, timezones };

package/dist/index.cjs

@@ -69922,14 +69922,16 @@ var init_database_module = __esm({
       /**
       * Register schemas for database access.
       *
-      * IMPORTANT: Feature modules that call forFeature() must be loaded AFTER
-      * MagnetModule.forRoot() has run (which calls register()). Use a FeaturesModule
-      * with require() to defer loading. See apps/examples for the pattern.
+      * Nest’s compiled CJS output often `require()`s feature modules before the
+      * `AppModule` decorator runs `MagnetModule.forRoot()`, so `register()` may
+      * not have run yet. In that case we fall back to the adapter singleton
+      * registered by the official DB packages via
+      * `registerDatabaseAdapterSingletonForFeature()` (same instance as `forRoot()`).
       */
       static forFeature(schemas) {
-        const adapter = getSharedAdapter();
+        const adapter = getSharedAdapter() ?? common$1.getDatabaseAdapterSingletonForFeature();
         if (!adapter) {
-          throw new Error("DatabaseModule.register() must be called before DatabaseModule.forFeature(). Ensure MagnetModule.forRoot() includes a database provider.");
+          throw new Error("DatabaseModule.register() must be called before DatabaseModule.forFeature(), or the active DB adapter package must call registerDatabaseAdapterSingletonForFeature() on import. Ensure MagnetModule.forRoot() includes a database provider.");
         }
         const schemasArray = Array.isArray(schemas) ? schemas : [
           schemas
@@ -88844,7 +88846,7 @@ function _ts_decorate22(decorators, target, key, desc) {
   else for (var i6 = decorators.length - 1; i6 >= 0; i6--) if (d6 = decorators[i6]) r6 = (c6 < 3 ? d6(r6) : c6 > 3 ? d6(target, key, r6) : d6(target, key)) || r6;
   return c6 > 3 && r6 && Object.defineProperty(target, key, r6), r6;
 }
-var import_passport, DynamicAuthGuard;
+var import_passport, DynamicAuthGuard, OptionalDynamicAuthGuard;
 var init_dynamic_auth_guard = __esm({
   "src/modules/auth/guards/dynamic-auth.guard.ts"() {
     import_passport = __toESM(require_passport(), 1);
@@ -88863,6 +88865,22 @@ var init_dynamic_auth_guard = __esm({
     DynamicAuthGuard = _ts_decorate22([
       common.Injectable()
     ], DynamicAuthGuard);
+    OptionalDynamicAuthGuard = class {
+      static {
+        __name(this, "OptionalDynamicAuthGuard");
+      }
+      async canActivate(context2) {
+        const guard = new ((0, import_passport.AuthGuard)(DynamicAuthGuard.strategyName))();
+        try {
+          await guard.canActivate(context2);
+        } catch {
+        }
+        return true;
+      }
+    };
+    OptionalDynamicAuthGuard = _ts_decorate22([
+      common.Injectable()
+    ], OptionalDynamicAuthGuard);
   }
 });
 
@@ -162052,6 +162070,7 @@ function _ts_param14(paramIndex, decorator) {
 var AuthController;
 var init_auth_controller = __esm({
   "src/modules/auth/auth.controller.ts"() {
+    init_settings_service();
     init_auth_service();
     init_change_password_dto();
     init_forgot_password_dto();
@@ -162069,8 +162088,10 @@ var init_auth_controller = __esm({
         __name(this, "AuthController");
       }
       authService;
-      constructor(authService) {
+      settingsService;
+      constructor(authService, settingsService) {
         this.authService = authService;
+        this.settingsService = settingsService;
       }
       // ============================================================================
       // Authentication
@@ -162137,9 +162158,10 @@ var init_auth_controller = __esm({
         }
       }
       /**
-      * Get auth status (public endpoint).
+      * Get auth status (public endpoint with optional auth).
       * Returns authentication state, setup requirement, the list of
       * enabled OAuth providers, and the active auth strategy info.
+      * When a valid token is present, also returns onboardingCompleted.
       */
       async status(req) {
         const [providers, authInfo] = await Promise.all([
@@ -162153,8 +162175,10 @@ var init_auth_controller = __esm({
           } : {}
         };
         if (req.user) {
+          const onboardingCompleted = await this.checkOnboardingCompleted();
           return {
             authenticated: true,
+            onboardingCompleted,
             user: req.user,
             providers,
             ...base2
@@ -162169,6 +162193,22 @@ var init_auth_controller = __esm({
           ...base2
         };
       }
+      /**
+      * Check if the project onboarding has been completed by verifying
+      * whether general settings differ from their defaults.
+      */
+      async checkOnboardingCompleted() {
+        try {
+          const settings = await this.settingsService.getSettingsByGroup("general");
+          const siteNameSetting = settings.find((s6) => s6.key === "siteName");
+          const baseUrlSetting = settings.find((s6) => s6.key === "baseUrl");
+          const siteName = siteNameSetting?.value ?? "Magnet CMS";
+          const baseUrl = baseUrlSetting?.value ?? "http://localhost:3000";
+          return siteName !== "Magnet CMS" || baseUrl !== "http://localhost:3000";
+        } catch {
+          return false;
+        }
+      }
       // ============================================================================
       // Sessions
       // ============================================================================
@@ -162303,6 +162343,7 @@ var init_auth_controller = __esm({
       _ts_metadata49("design:returntype", Promise)
     ], AuthController.prototype, "me", null);
     _ts_decorate68([
+      common.UseGuards(OptionalDynamicAuthGuard),
       common.Get("status"),
       _ts_param14(0, common.Req()),
       _ts_metadata49("design:type", Function),
@@ -162379,7 +162420,8 @@ var init_auth_controller = __esm({
       common.Controller("auth"),
       _ts_metadata49("design:type", Function),
       _ts_metadata49("design:paramtypes", [
-        typeof AuthService === "undefined" ? Object : AuthService
+        typeof AuthService === "undefined" ? Object : AuthService,
+        typeof SettingsService === "undefined" ? Object : SettingsService
       ])
     ], AuthController);
   }

package/dist/index.d.cts

@@ -48,9 +48,11 @@ declare class DatabaseModule {
     /**
      * Register schemas for database access.
      *
-     * IMPORTANT: Feature modules that call forFeature() must be loaded AFTER
-     * MagnetModule.forRoot() has run (which calls register()). Use a FeaturesModule
-     * with require() to defer loading. See apps/examples for the pattern.
+     * Nest’s compiled CJS output often `require()`s feature modules before the
+     * `AppModule` decorator runs `MagnetModule.forRoot()`, so `register()` may
+     * not have run yet. In that case we fall back to the adapter singleton
+     * registered by the official DB packages via
+     * `registerDatabaseAdapterSingletonForFeature()` (same instance as `forRoot()`).
      */
     static forFeature(schemas: Type | Type[]): DynamicModule;
 }

package/dist/index.d.ts

@@ -48,9 +48,11 @@ declare class DatabaseModule {
     /**
      * Register schemas for database access.
      *
-     * IMPORTANT: Feature modules that call forFeature() must be loaded AFTER
-     * MagnetModule.forRoot() has run (which calls register()). Use a FeaturesModule
-     * with require() to defer loading. See apps/examples for the pattern.
+     * Nest’s compiled CJS output often `require()`s feature modules before the
+     * `AppModule` decorator runs `MagnetModule.forRoot()`, so `register()` may
+     * not have run yet. In that case we fall back to the adapter singleton
+     * registered by the official DB packages via
+     * `registerDatabaseAdapterSingletonForFeature()` (same instance as `forRoot()`).
      */
     static forFeature(schemas: Type | Type[]): DynamicModule;
 }

package/dist/index.js

@@ -1,7 +1,7 @@
-import { require_hasown, require_shams, require_get_intrinsic, require_type, require_mime_types, init_magnet_module_imports, magnet_module_imports_exports } from './chunk-QYK4424N.js';
-export { Hook, InjectPluginOptions, Plugin } from './chunk-LK4NYP67.js';
-import { require_src, require_follow_redirects, require_cjs, require_not, require_filter, require_argsOrArgArray, require_raceWith, require_audit, require_auditTime, require_buffer, require_bufferCount, require_bufferTime, require_bufferToggle, require_bufferWhen, require_catchError, require_combineAll, require_combineLatestAll, require_combineLatest, require_combineLatestWith, require_concat, require_concatAll, require_concatMap, require_concatMapTo, require_concatWith, require_connect, require_count, require_debounce, require_debounceTime, require_defaultIfEmpty, require_delay, require_delayWhen, require_dematerialize, require_distinct, require_distinctUntilChanged, require_distinctUntilKeyChanged, require_elementAt, require_endWith, require_every, require_exhaust, require_exhaustAll, require_exhaustMap, require_expand, require_finalize, require_find, require_findIndex, require_first, require_groupBy, require_ignoreElements, require_isEmpty, require_last, require_map, require_mapTo, require_materialize, require_max, require_merge, require_mergeAll, require_flatMap, require_mergeMap, require_mergeMapTo, require_mergeScan, require_mergeWith, require_min, require_multicast, require_observeOn, require_onErrorResumeNextWith, require_pairwise, require_pluck, require_publish, require_publishBehavior, require_publishLast, require_publishReplay, require_reduce, require_repeat, require_repeatWhen, require_retry, require_retryWhen, require_refCount, require_sample, require_sampleTime, require_scan, require_sequenceEqual, require_share, require_shareReplay, require_single, require_skip, require_skipLast, require_skipUntil, require_skipWhile, require_startWith, require_subscribeOn, require_switchAll, require_switchMap, require_switchMapTo, require_switchScan, require_take, require_takeLast, require_takeUntil, require_takeWhile, require_tap, require_throttle, require_throttleTime, require_throwIfEmpty, require_timeInterval, require_timeout, require_timeoutWith, require_timestamp, require_toArray, require_window, require_windowCount, require_windowTime, require_windowToggle, require_windowWhen, require_withLatestFrom, require_zip, require_zipAll, require_zipWith, init_restricted_route, IS_RESTRICTED_ROUTE, init_esm5, init_logger_service, ValidationError, init_database_module, init_event_context_interceptor, init_events_module, MagnetLogger, DatabaseModule, EventsModule, EventContextInterceptor, init_database, init_discovery, init_events, init_auth_strategy_factory, require_passport, init_permission_guard } from './chunk-5HGRFVWS.js';
-export { AuthStrategyFactory, DatabaseModule, DiscoveryModule, EventContextInterceptor, EventHandlerDiscoveryService, EventService, EventsModule, IS_RESTRICTED_ROUTE, MagnetLogger, PermissionGuard, RestrictedRoute, createEventContext, eventContextStorage, getEventContext } from './chunk-5HGRFVWS.js';
+import { require_hasown, require_shams, require_get_intrinsic, require_type, require_mime_types, init_magnet_module_imports, magnet_module_imports_exports } from './chunk-D3C3IDJE.js';
+export { Hook, InjectPluginOptions, Plugin } from './chunk-BLOJL7F5.js';
+import { require_src, require_follow_redirects, require_cjs, require_not, require_filter, require_argsOrArgArray, require_raceWith, require_audit, require_auditTime, require_buffer, require_bufferCount, require_bufferTime, require_bufferToggle, require_bufferWhen, require_catchError, require_combineAll, require_combineLatestAll, require_combineLatest, require_combineLatestWith, require_concat, require_concatAll, require_concatMap, require_concatMapTo, require_concatWith, require_connect, require_count, require_debounce, require_debounceTime, require_defaultIfEmpty, require_delay, require_delayWhen, require_dematerialize, require_distinct, require_distinctUntilChanged, require_distinctUntilKeyChanged, require_elementAt, require_endWith, require_every, require_exhaust, require_exhaustAll, require_exhaustMap, require_expand, require_finalize, require_find, require_findIndex, require_first, require_groupBy, require_ignoreElements, require_isEmpty, require_last, require_map, require_mapTo, require_materialize, require_max, require_merge, require_mergeAll, require_flatMap, require_mergeMap, require_mergeMapTo, require_mergeScan, require_mergeWith, require_min, require_multicast, require_observeOn, require_onErrorResumeNextWith, require_pairwise, require_pluck, require_publish, require_publishBehavior, require_publishLast, require_publishReplay, require_reduce, require_repeat, require_repeatWhen, require_retry, require_retryWhen, require_refCount, require_sample, require_sampleTime, require_scan, require_sequenceEqual, require_share, require_shareReplay, require_single, require_skip, require_skipLast, require_skipUntil, require_skipWhile, require_startWith, require_subscribeOn, require_switchAll, require_switchMap, require_switchMapTo, require_switchScan, require_take, require_takeLast, require_takeUntil, require_takeWhile, require_tap, require_throttle, require_throttleTime, require_throwIfEmpty, require_timeInterval, require_timeout, require_timeoutWith, require_timestamp, require_toArray, require_window, require_windowCount, require_windowTime, require_windowToggle, require_windowWhen, require_withLatestFrom, require_zip, require_zipAll, require_zipWith, init_restricted_route, IS_RESTRICTED_ROUTE, init_esm5, init_logger_service, ValidationError, init_database_module, init_event_context_interceptor, init_events_module, MagnetLogger, DatabaseModule, EventsModule, EventContextInterceptor, init_database, init_discovery, init_events, init_auth_strategy_factory, require_passport, init_permission_guard } from './chunk-L5S66O2C.js';
+export { AuthStrategyFactory, DatabaseModule, DiscoveryModule, EventContextInterceptor, EventHandlerDiscoveryService, EventService, EventsModule, IS_RESTRICTED_ROUTE, MagnetLogger, PermissionGuard, RestrictedRoute, createEventContext, eventContextStorage, getEventContext } from './chunk-L5S66O2C.js';
 import './chunk-4KTI5N3Y.js';
 import './chunk-63OQXC3R.js';
 import './chunk-K5CAAMIC.js';

package/dist/magnet-module-imports.cjs

@@ -16027,14 +16027,16 @@ var init_database_module = __esm({
       /**
       * Register schemas for database access.
       *
-      * IMPORTANT: Feature modules that call forFeature() must be loaded AFTER
-      * MagnetModule.forRoot() has run (which calls register()). Use a FeaturesModule
-      * with require() to defer loading. See apps/examples for the pattern.
+      * Nest’s compiled CJS output often `require()`s feature modules before the
+      * `AppModule` decorator runs `MagnetModule.forRoot()`, so `register()` may
+      * not have run yet. In that case we fall back to the adapter singleton
+      * registered by the official DB packages via
+      * `registerDatabaseAdapterSingletonForFeature()` (same instance as `forRoot()`).
       */
       static forFeature(schemas) {
-        const adapter = getSharedAdapter();
+        const adapter = getSharedAdapter() ?? common.getDatabaseAdapterSingletonForFeature();
         if (!adapter) {
-          throw new Error("DatabaseModule.register() must be called before DatabaseModule.forFeature(). Ensure MagnetModule.forRoot() includes a database provider.");
+          throw new Error("DatabaseModule.register() must be called before DatabaseModule.forFeature(), or the active DB adapter package must call registerDatabaseAdapterSingletonForFeature() on import. Ensure MagnetModule.forRoot() includes a database provider.");
         }
         const schemasArray = Array.isArray(schemas) ? schemas : [
           schemas
@@ -189921,6 +189923,22 @@ var DynamicAuthGuard = class _DynamicAuthGuard {
 DynamicAuthGuard = _ts_decorate13([
   common$1.Injectable()
 ], DynamicAuthGuard);
+var OptionalDynamicAuthGuard = class {
+  static {
+    __name(this, "OptionalDynamicAuthGuard");
+  }
+  async canActivate(context) {
+    const guard = new ((0, import_passport.AuthGuard)(DynamicAuthGuard.strategyName))();
+    try {
+      await guard.canActivate(context);
+    } catch {
+    }
+    return true;
+  }
+};
+OptionalDynamicAuthGuard = _ts_decorate13([
+  common$1.Injectable()
+], OptionalDynamicAuthGuard);
 
 // src/modules/user/dto/create-user.dto.ts
 init_esm52();
@@ -194610,6 +194628,9 @@ var AuthStrategyFactory = class _AuthStrategyFactory {
 var AUTH_STRATEGY = "AUTH_STRATEGY";
 var AUTH_CONFIG = "AUTH_CONFIG";
 
+// src/modules/auth/auth.controller.ts
+init_settings_service();
+
 // src/modules/auth/auth.service.ts
 var import_jwt = __toESM(require_jwt(), 1);
 init_bcryptjs();
@@ -196793,8 +196814,10 @@ var AuthController = class {
     __name(this, "AuthController");
   }
   authService;
-  constructor(authService) {
+  settingsService;
+  constructor(authService, settingsService) {
     this.authService = authService;
+    this.settingsService = settingsService;
   }
   // ============================================================================
   // Authentication
@@ -196861,9 +196884,10 @@ var AuthController = class {
     }
   }
   /**
-  * Get auth status (public endpoint).
+  * Get auth status (public endpoint with optional auth).
   * Returns authentication state, setup requirement, the list of
   * enabled OAuth providers, and the active auth strategy info.
+  * When a valid token is present, also returns onboardingCompleted.
   */
   async status(req) {
     const [providers, authInfo] = await Promise.all([
@@ -196877,8 +196901,10 @@ var AuthController = class {
       } : {}
     };
     if (req.user) {
+      const onboardingCompleted = await this.checkOnboardingCompleted();
       return {
         authenticated: true,
+        onboardingCompleted,
         user: req.user,
         providers,
         ...base2
@@ -196893,6 +196919,22 @@ var AuthController = class {
       ...base2
     };
   }
+  /**
+  * Check if the project onboarding has been completed by verifying
+  * whether general settings differ from their defaults.
+  */
+  async checkOnboardingCompleted() {
+    try {
+      const settings = await this.settingsService.getSettingsByGroup("general");
+      const siteNameSetting = settings.find((s6) => s6.key === "siteName");
+      const baseUrlSetting = settings.find((s6) => s6.key === "baseUrl");
+      const siteName = siteNameSetting?.value ?? "Magnet CMS";
+      const baseUrl = baseUrlSetting?.value ?? "http://localhost:3000";
+      return siteName !== "Magnet CMS" || baseUrl !== "http://localhost:3000";
+    } catch {
+      return false;
+    }
+  }
   // ============================================================================
   // Sessions
   // ============================================================================
@@ -197027,6 +197069,7 @@ _ts_decorate62([
   _ts_metadata45("design:returntype", Promise)
 ], AuthController.prototype, "me", null);
 _ts_decorate62([
+  common$1.UseGuards(OptionalDynamicAuthGuard),
   common$1.Get("status"),
   _ts_param14(0, common$1.Req()),
   _ts_metadata45("design:type", Function),
@@ -197103,7 +197146,8 @@ AuthController = _ts_decorate62([
   common$1.Controller("auth"),
   _ts_metadata45("design:type", Function),
   _ts_metadata45("design:paramtypes", [
-    typeof AuthService === "undefined" ? Object : AuthService
+    typeof AuthService === "undefined" ? Object : AuthService,
+    typeof SettingsService === "undefined" ? Object : SettingsService
   ])
 ], AuthController);
 

package/dist/magnet-module-imports.js

@@ -1,6 +1,6 @@
-import { init_magnet_module_imports } from './chunk-QYK4424N.js';
-export { buildMagnetImports } from './chunk-QYK4424N.js';
-export { ApiKeysModule, CacheModule, ContentModule, DocumentModule, HistoryModule, NotificationModule, PluginModule, RBACModule, SettingsModule } from './chunk-5HGRFVWS.js';
+import { init_magnet_module_imports } from './chunk-D3C3IDJE.js';
+export { buildMagnetImports } from './chunk-D3C3IDJE.js';
+export { ApiKeysModule, CacheModule, ContentModule, DocumentModule, HistoryModule, NotificationModule, PluginModule, RBACModule, SettingsModule } from './chunk-L5S66O2C.js';
 import './chunk-4KTI5N3Y.js';
 import './chunk-63OQXC3R.js';
 import './chunk-K5CAAMIC.js';

package/dist/modules.cjs

@@ -16027,14 +16027,16 @@ var init_database_module = __esm({
       /**
       * Register schemas for database access.
       *
-      * IMPORTANT: Feature modules that call forFeature() must be loaded AFTER
-      * MagnetModule.forRoot() has run (which calls register()). Use a FeaturesModule
-      * with require() to defer loading. See apps/examples for the pattern.
+      * Nest’s compiled CJS output often `require()`s feature modules before the
+      * `AppModule` decorator runs `MagnetModule.forRoot()`, so `register()` may
+      * not have run yet. In that case we fall back to the adapter singleton
+      * registered by the official DB packages via
+      * `registerDatabaseAdapterSingletonForFeature()` (same instance as `forRoot()`).
       */
       static forFeature(schemas) {
-        const adapter = getSharedAdapter();
+        const adapter = getSharedAdapter() ?? common.getDatabaseAdapterSingletonForFeature();
         if (!adapter) {
-          throw new Error("DatabaseModule.register() must be called before DatabaseModule.forFeature(). Ensure MagnetModule.forRoot() includes a database provider.");
+          throw new Error("DatabaseModule.register() must be called before DatabaseModule.forFeature(), or the active DB adapter package must call registerDatabaseAdapterSingletonForFeature() on import. Ensure MagnetModule.forRoot() includes a database provider.");
         }
         const schemasArray = Array.isArray(schemas) ? schemas : [
           schemas
@@ -126556,6 +126558,22 @@ exports.DynamicAuthGuard = class _DynamicAuthGuard {
 exports.DynamicAuthGuard = _ts_decorate14([
   common$1.Injectable()
 ], exports.DynamicAuthGuard);
+exports.OptionalDynamicAuthGuard = class OptionalDynamicAuthGuard {
+  static {
+    __name(this, "OptionalDynamicAuthGuard");
+  }
+  async canActivate(context) {
+    const guard = new ((0, import_passport.AuthGuard)(exports.DynamicAuthGuard.strategyName))();
+    try {
+      await guard.canActivate(context);
+    } catch {
+    }
+    return true;
+  }
+};
+exports.OptionalDynamicAuthGuard = _ts_decorate14([
+  common$1.Injectable()
+], exports.OptionalDynamicAuthGuard);
 init_logger_service();
 init_settings();
 function _ts_decorate15(decorators, target, key, desc) {
@@ -129505,6 +129523,9 @@ var AuthStrategyFactory = class _AuthStrategyFactory {
   }
 };
 
+// src/modules/auth/auth.controller.ts
+init_settings_service();
+
 // src/modules/auth/auth.service.ts
 var import_jwt = __toESM(require_jwt(), 1);
 init_bcryptjs();
@@ -131688,8 +131709,10 @@ var AuthController = class {
     __name(this, "AuthController");
   }
   authService;
-  constructor(authService) {
+  settingsService;
+  constructor(authService, settingsService) {
     this.authService = authService;
+    this.settingsService = settingsService;
   }
   // ============================================================================
   // Authentication
@@ -131756,9 +131779,10 @@ var AuthController = class {
     }
   }
   /**
-  * Get auth status (public endpoint).
+  * Get auth status (public endpoint with optional auth).
   * Returns authentication state, setup requirement, the list of
   * enabled OAuth providers, and the active auth strategy info.
+  * When a valid token is present, also returns onboardingCompleted.
   */
   async status(req) {
     const [providers, authInfo] = await Promise.all([
@@ -131772,8 +131796,10 @@ var AuthController = class {
       } : {}
     };
     if (req.user) {
+      const onboardingCompleted = await this.checkOnboardingCompleted();
       return {
         authenticated: true,
+        onboardingCompleted,
         user: req.user,
         providers,
         ...base2
@@ -131788,6 +131814,22 @@ var AuthController = class {
       ...base2
     };
   }
+  /**
+  * Check if the project onboarding has been completed by verifying
+  * whether general settings differ from their defaults.
+  */
+  async checkOnboardingCompleted() {
+    try {
+      const settings = await this.settingsService.getSettingsByGroup("general");
+      const siteNameSetting = settings.find((s6) => s6.key === "siteName");
+      const baseUrlSetting = settings.find((s6) => s6.key === "baseUrl");
+      const siteName = siteNameSetting?.value ?? "Magnet CMS";
+      const baseUrl = baseUrlSetting?.value ?? "http://localhost:3000";
+      return siteName !== "Magnet CMS" || baseUrl !== "http://localhost:3000";
+    } catch {
+      return false;
+    }
+  }
   // ============================================================================
   // Sessions
   // ============================================================================
@@ -131922,6 +131964,7 @@ _ts_decorate51([
   _ts_metadata38("design:returntype", Promise)
 ], AuthController.prototype, "me", null);
 _ts_decorate51([
+  common$1.UseGuards(exports.OptionalDynamicAuthGuard),
   common$1.Get("status"),
   _ts_param11(0, common$1.Req()),
   _ts_metadata38("design:type", Function),
@@ -131998,7 +132041,8 @@ AuthController = _ts_decorate51([
   common$1.Controller("auth"),
   _ts_metadata38("design:type", Function),
   _ts_metadata38("design:paramtypes", [
-    typeof AuthService === "undefined" ? Object : AuthService
+    typeof AuthService === "undefined" ? Object : AuthService,
+    typeof exports.SettingsService === "undefined" ? Object : exports.SettingsService
   ])
 ], AuthController);
 

package/dist/modules.d.cts

@@ -1292,6 +1292,16 @@ declare class DynamicAuthGuard implements CanActivate {
     static strategyName: string;
     canActivate(context: ExecutionContext): Promise<boolean> | boolean;
 }
+/**
+ * OptionalDynamicAuthGuard populates req.user when a valid token is present
+ * but allows the request through even without authentication.
+ *
+ * Use this for endpoints that behave differently when authenticated
+ * (e.g., /auth/status returns onboardingCompleted only for authenticated users).
+ */
+declare class OptionalDynamicAuthGuard implements CanActivate {
+    canActivate(context: ExecutionContext): Promise<boolean>;
+}
 
 declare const JwtAuthGuard_base: _nestjs_passport.Type<_nestjs_passport.IAuthGuard>;
 declare class JwtAuthGuard extends JwtAuthGuard_base {
@@ -3565,4 +3575,4 @@ declare class GeneralSettings {
     fallbackToDefaultLocale: boolean;
 }
 
-export { API_KEY_PERMISSION_KEY, API_KEY_SCHEMA_KEY, AUTH_CONFIG, AUTH_STRATEGY, Activity, ActivityController, ActivityModule, type ActivitySearchQuery, ActivityService, ActivitySettings, AdminController, AdminModule, AdminService, ApiKey, ApiKeyGuard, type ApiKeyPermissionScope, type ApiKeyRequest, ApiKeyService, ApiKeySettings, type ApiKeyStats, ApiKeyUsage, AssignRoleDto, AuthModule, AuthSettings, CACHE_ADAPTER_TOKEN, CACHE_METADATA_KEY, CACHE_TTL_KEY, CRUD_ACTIONS, CacheEvict, type CacheEvictOptions, CacheInterceptor, CachePut, type CachePutOptions, CacheService, CacheSettings, CacheTTL, Cacheable, type CacheableOptions, ContentController, ContentService, ContentSettings, type CreateActivityDto, CreateApiKeyDto, type CreateApiKeyResult, type CreateDocumentOptions, CreateUserDto, type CrudAction, CurrentApiKey, DEFAULT_ROLES, type DeliveryResult, type Document, type DocumentGroup, type DocumentMetadata, DocumentService, type DocumentStatus, DynamicAuthGuard, DynamicPermissionInterceptor, EmailModule, EmailService, EmailVerificationService, EnvironmentController, type EnvironmentItem, EnvironmentModule, EnvironmentService, Environments, type FindDocumentOptions, type FolderInfo, GeneralModule, GeneralSettings, HistoryController, HistoryService, type HttpMethod, JwtAuthGuard, JwtAuthStrategy, type ListDocumentOptions, LocalStorageAdapter, LogUsageDto, Media, MediaFolder, MediaSettings, MemoryCacheAdapter, type MemoryCacheAdapterOptions, NOTIFICATION_MODULE_OPTIONS, Notification, NotificationController, NotificationModuleOptions, NotificationService, NotificationSettings, PERMISSION_CATEGORIES, PLUGIN_FRONTEND_MANIFEST, PLUGIN_METADATA, PLUGIN_MODULE, type PaginatedActivities, type PaginatedDeliveries, PaginatedUserResult, PluginController, PluginLifecycleService, PluginRegistryService, PluginService, type PublishDocumentOptions, RBACSettings, RBAC_CONFIG, ROLE_MODEL, type RateLimitResult, RequireApiKeyPermission, RequireApiKeySchema, STORAGE_ADAPTER, STORAGE_CONFIG, SettingsService, StorageModule, StorageService, TemplateService, USER_EXTENSION_TOKEN, UpdateApiKeyDto, type UpdateDocumentOptions, UpdatePermissionsDto, UpsertViewConfigDto, User, UserController, UserExtensionService, UserModule, UserService, type VersionDiff, type VersionFieldChange, type VersionSummary, ViewConfig, type ViewConfigColumn, ViewConfigModule, ViewConfigService, WILDCARD_PERMISSION, WebhookListenerService, WebhookModule, WebhookService, WebhookSettings, generateDocumentId, getPluginOptionsToken, isValidDocumentId, locales, timezones };
+export { API_KEY_PERMISSION_KEY, API_KEY_SCHEMA_KEY, AUTH_CONFIG, AUTH_STRATEGY, Activity, ActivityController, ActivityModule, type ActivitySearchQuery, ActivityService, ActivitySettings, AdminController, AdminModule, AdminService, ApiKey, ApiKeyGuard, type ApiKeyPermissionScope, type ApiKeyRequest, ApiKeyService, ApiKeySettings, type ApiKeyStats, ApiKeyUsage, AssignRoleDto, AuthModule, AuthSettings, CACHE_ADAPTER_TOKEN, CACHE_METADATA_KEY, CACHE_TTL_KEY, CRUD_ACTIONS, CacheEvict, type CacheEvictOptions, CacheInterceptor, CachePut, type CachePutOptions, CacheService, CacheSettings, CacheTTL, Cacheable, type CacheableOptions, ContentController, ContentService, ContentSettings, type CreateActivityDto, CreateApiKeyDto, type CreateApiKeyResult, type CreateDocumentOptions, CreateUserDto, type CrudAction, CurrentApiKey, DEFAULT_ROLES, type DeliveryResult, type Document, type DocumentGroup, type DocumentMetadata, DocumentService, type DocumentStatus, DynamicAuthGuard, DynamicPermissionInterceptor, EmailModule, EmailService, EmailVerificationService, EnvironmentController, type EnvironmentItem, EnvironmentModule, EnvironmentService, Environments, type FindDocumentOptions, type FolderInfo, GeneralModule, GeneralSettings, HistoryController, HistoryService, type HttpMethod, JwtAuthGuard, JwtAuthStrategy, type ListDocumentOptions, LocalStorageAdapter, LogUsageDto, Media, MediaFolder, MediaSettings, MemoryCacheAdapter, type MemoryCacheAdapterOptions, NOTIFICATION_MODULE_OPTIONS, Notification, NotificationController, NotificationModuleOptions, NotificationService, NotificationSettings, OptionalDynamicAuthGuard, PERMISSION_CATEGORIES, PLUGIN_FRONTEND_MANIFEST, PLUGIN_METADATA, PLUGIN_MODULE, type PaginatedActivities, type PaginatedDeliveries, PaginatedUserResult, PluginController, PluginLifecycleService, PluginRegistryService, PluginService, type PublishDocumentOptions, RBACSettings, RBAC_CONFIG, ROLE_MODEL, type RateLimitResult, RequireApiKeyPermission, RequireApiKeySchema, STORAGE_ADAPTER, STORAGE_CONFIG, SettingsService, StorageModule, StorageService, TemplateService, USER_EXTENSION_TOKEN, UpdateApiKeyDto, type UpdateDocumentOptions, UpdatePermissionsDto, UpsertViewConfigDto, User, UserController, UserExtensionService, UserModule, UserService, type VersionDiff, type VersionFieldChange, type VersionSummary, ViewConfig, type ViewConfigColumn, ViewConfigModule, ViewConfigService, WILDCARD_PERMISSION, WebhookListenerService, WebhookModule, WebhookService, WebhookSettings, generateDocumentId, getPluginOptionsToken, isValidDocumentId, locales, timezones };

package/dist/modules.d.ts

@@ -1292,6 +1292,16 @@ declare class DynamicAuthGuard implements CanActivate {
     static strategyName: string;
     canActivate(context: ExecutionContext): Promise<boolean> | boolean;
 }
+/**
+ * OptionalDynamicAuthGuard populates req.user when a valid token is present
+ * but allows the request through even without authentication.
+ *
+ * Use this for endpoints that behave differently when authenticated
+ * (e.g., /auth/status returns onboardingCompleted only for authenticated users).
+ */
+declare class OptionalDynamicAuthGuard implements CanActivate {
+    canActivate(context: ExecutionContext): Promise<boolean>;
+}
 
 declare const JwtAuthGuard_base: _nestjs_passport.Type<_nestjs_passport.IAuthGuard>;
 declare class JwtAuthGuard extends JwtAuthGuard_base {
@@ -3565,4 +3575,4 @@ declare class GeneralSettings {
     fallbackToDefaultLocale: boolean;
 }
 
-export { API_KEY_PERMISSION_KEY, API_KEY_SCHEMA_KEY, AUTH_CONFIG, AUTH_STRATEGY, Activity, ActivityController, ActivityModule, type ActivitySearchQuery, ActivityService, ActivitySettings, AdminController, AdminModule, AdminService, ApiKey, ApiKeyGuard, type ApiKeyPermissionScope, type ApiKeyRequest, ApiKeyService, ApiKeySettings, type ApiKeyStats, ApiKeyUsage, AssignRoleDto, AuthModule, AuthSettings, CACHE_ADAPTER_TOKEN, CACHE_METADATA_KEY, CACHE_TTL_KEY, CRUD_ACTIONS, CacheEvict, type CacheEvictOptions, CacheInterceptor, CachePut, type CachePutOptions, CacheService, CacheSettings, CacheTTL, Cacheable, type CacheableOptions, ContentController, ContentService, ContentSettings, type CreateActivityDto, CreateApiKeyDto, type CreateApiKeyResult, type CreateDocumentOptions, CreateUserDto, type CrudAction, CurrentApiKey, DEFAULT_ROLES, type DeliveryResult, type Document, type DocumentGroup, type DocumentMetadata, DocumentService, type DocumentStatus, DynamicAuthGuard, DynamicPermissionInterceptor, EmailModule, EmailService, EmailVerificationService, EnvironmentController, type EnvironmentItem, EnvironmentModule, EnvironmentService, Environments, type FindDocumentOptions, type FolderInfo, GeneralModule, GeneralSettings, HistoryController, HistoryService, type HttpMethod, JwtAuthGuard, JwtAuthStrategy, type ListDocumentOptions, LocalStorageAdapter, LogUsageDto, Media, MediaFolder, MediaSettings, MemoryCacheAdapter, type MemoryCacheAdapterOptions, NOTIFICATION_MODULE_OPTIONS, Notification, NotificationController, NotificationModuleOptions, NotificationService, NotificationSettings, PERMISSION_CATEGORIES, PLUGIN_FRONTEND_MANIFEST, PLUGIN_METADATA, PLUGIN_MODULE, type PaginatedActivities, type PaginatedDeliveries, PaginatedUserResult, PluginController, PluginLifecycleService, PluginRegistryService, PluginService, type PublishDocumentOptions, RBACSettings, RBAC_CONFIG, ROLE_MODEL, type RateLimitResult, RequireApiKeyPermission, RequireApiKeySchema, STORAGE_ADAPTER, STORAGE_CONFIG, SettingsService, StorageModule, StorageService, TemplateService, USER_EXTENSION_TOKEN, UpdateApiKeyDto, type UpdateDocumentOptions, UpdatePermissionsDto, UpsertViewConfigDto, User, UserController, UserExtensionService, UserModule, UserService, type VersionDiff, type VersionFieldChange, type VersionSummary, ViewConfig, type ViewConfigColumn, ViewConfigModule, ViewConfigService, WILDCARD_PERMISSION, WebhookListenerService, WebhookModule, WebhookService, WebhookSettings, generateDocumentId, getPluginOptionsToken, isValidDocumentId, locales, timezones };
+export { API_KEY_PERMISSION_KEY, API_KEY_SCHEMA_KEY, AUTH_CONFIG, AUTH_STRATEGY, Activity, ActivityController, ActivityModule, type ActivitySearchQuery, ActivityService, ActivitySettings, AdminController, AdminModule, AdminService, ApiKey, ApiKeyGuard, type ApiKeyPermissionScope, type ApiKeyRequest, ApiKeyService, ApiKeySettings, type ApiKeyStats, ApiKeyUsage, AssignRoleDto, AuthModule, AuthSettings, CACHE_ADAPTER_TOKEN, CACHE_METADATA_KEY, CACHE_TTL_KEY, CRUD_ACTIONS, CacheEvict, type CacheEvictOptions, CacheInterceptor, CachePut, type CachePutOptions, CacheService, CacheSettings, CacheTTL, Cacheable, type CacheableOptions, ContentController, ContentService, ContentSettings, type CreateActivityDto, CreateApiKeyDto, type CreateApiKeyResult, type CreateDocumentOptions, CreateUserDto, type CrudAction, CurrentApiKey, DEFAULT_ROLES, type DeliveryResult, type Document, type DocumentGroup, type DocumentMetadata, DocumentService, type DocumentStatus, DynamicAuthGuard, DynamicPermissionInterceptor, EmailModule, EmailService, EmailVerificationService, EnvironmentController, type EnvironmentItem, EnvironmentModule, EnvironmentService, Environments, type FindDocumentOptions, type FolderInfo, GeneralModule, GeneralSettings, HistoryController, HistoryService, type HttpMethod, JwtAuthGuard, JwtAuthStrategy, type ListDocumentOptions, LocalStorageAdapter, LogUsageDto, Media, MediaFolder, MediaSettings, MemoryCacheAdapter, type MemoryCacheAdapterOptions, NOTIFICATION_MODULE_OPTIONS, Notification, NotificationController, NotificationModuleOptions, NotificationService, NotificationSettings, OptionalDynamicAuthGuard, PERMISSION_CATEGORIES, PLUGIN_FRONTEND_MANIFEST, PLUGIN_METADATA, PLUGIN_MODULE, type PaginatedActivities, type PaginatedDeliveries, PaginatedUserResult, PluginController, PluginLifecycleService, PluginRegistryService, PluginService, type PublishDocumentOptions, RBACSettings, RBAC_CONFIG, ROLE_MODEL, type RateLimitResult, RequireApiKeyPermission, RequireApiKeySchema, STORAGE_ADAPTER, STORAGE_CONFIG, SettingsService, StorageModule, StorageService, TemplateService, USER_EXTENSION_TOKEN, UpdateApiKeyDto, type UpdateDocumentOptions, UpdatePermissionsDto, UpsertViewConfigDto, User, UserController, UserExtensionService, UserModule, UserService, type VersionDiff, type VersionFieldChange, type VersionSummary, ViewConfig, type ViewConfigColumn, ViewConfigModule, ViewConfigService, WILDCARD_PERMISSION, WebhookListenerService, WebhookModule, WebhookService, WebhookSettings, generateDocumentId, getPluginOptionsToken, isValidDocumentId, locales, timezones };

package/dist/modules.js

@@ -1,6 +1,6 @@
-export { Hook, InjectPluginOptions, Plugin } from './chunk-LK4NYP67.js';
-import { init_api_keys_module, init_api_keys_service, init_api_keys_settings, init_api_key_schema, init_api_key_usage_schema, init_create_api_key_dto, init_update_api_key_dto, init_esm5, IsString, IsNotEmpty, IsIn, IsNumber, Min, IsOptional, init_api_key_guard, init_api_key_decorator, init_cache_module, init_cache_service, init_cache_constants, init_memory_cache_adapter, require_cjs, CACHE_METADATA_KEY, CACHE_TTL_KEY, init_auth_constants, init_auth_module, init_auth_settings, init_auth_strategy_factory, init_dynamic_auth_guard, require_passport, init_jwt_auth_strategy, init_content_module, init_content_service, init_content_settings, init_content_controller, init_document_module, init_document_service, init_document_id_util, init_email_module, init_email_service, init_email_verification_service, init_template_service, init_environment_controller, init_environment_module, init_environment_service, init_environment_setting, init_history_controller, init_history_module, init_history_service, init_notification_constants, init_notification_controller, init_notification_module, init_notification_service, init_notification_settings, init_notification_schema, init_constants, init_plugin_controller, init_plugin_module, init_plugin_lifecycle_service, init_plugin_registry_service, init_plugin_service, init_rbac_module, init_permission_discovery_service, init_permission_service, init_role_service, init_permission_guard, init_dynamic_permission_interceptor, init_assign_role_dto, init_create_role_dto, init_duplicate_role_dto, init_update_permissions_dto, init_update_role_dto, init_role_schema, init_rbac_constants, init_rbac_settings, init_rbac_decorators, init_settings, init_storage_module, init_storage_service, init_storage_settings, init_storage_constants, init_local_storage_adapter, init_media_schema, init_user, init_webhook_module, init_webhook_service, init_webhook_settings, init_webhook_listener, init_view_config_module, init_view_config_service, init_view_config_schema, init_activity_controller, init_activity_module, init_activity_service, init_activity_settings, init_activity_schema, init_admin_module, init_admin_controller, init_admin_service, init_general_module, init_general_settings, CacheService } from './chunk-5HGRFVWS.js';
-export { API_KEY_PERMISSION_KEY, API_KEY_SCHEMA_KEY, AUTH_CONFIG, AUTH_STRATEGY, Activity, ActivityController, ActivityModule, ActivityService, ActivitySettings, AdminController, AdminModule, AdminService, ApiKey, ApiKeyGuard, ApiKeyService, ApiKeySettings, ApiKeyUsage, ApiKeysModule, AssignRoleDto, AuthModule, AuthSettings, AuthStrategyFactory, CACHE_ADAPTER_TOKEN, CACHE_METADATA_KEY, CACHE_TTL_KEY, CRUD_ACTIONS, CacheModule, CacheService, ContentController, ContentModule, ContentService, ContentSettings, CreateApiKeyDto, CreateRoleDto, CreateUserDto, CurrentApiKey, DEFAULT_ROLES, DocumentModule, DocumentService, DuplicateRoleDto, DynamicAuthGuard, DynamicPermissionInterceptor, EmailModule, EmailService, EmailVerificationService, EnvironmentController, EnvironmentModule, EnvironmentService, Environments, GeneralModule, GeneralSettings, HasPermission, HistoryController, HistoryModule, HistoryService, JwtAuthStrategy, LocalStorageAdapter, Media, MediaFolder, MediaSettings, MemoryCacheAdapter, NOTIFICATION_MODULE_OPTIONS, Notification, NotificationController, NotificationModule, NotificationService, NotificationSettings, PERMISSION_CATEGORIES, PLUGIN_FRONTEND_MANIFEST, PLUGIN_METADATA, PLUGIN_MODULE, PermissionDiscoveryService, PermissionGuard, PermissionMeta, PermissionService, PluginController, PluginLifecycleService, PluginModule, PluginRegistryService, PluginService, RBACModule, RBACSettings, RBAC_CONFIG, ROLE_MODEL, RequireApiKeyPermission, RequireApiKeySchema, RequirePermission, Role, RoleService, STORAGE_ADAPTER, STORAGE_CONFIG, SettingsModule, SettingsService, StorageModule, StorageService, TemplateService, USER_EXTENSION_TOKEN, UpdateApiKeyDto, UpdatePermissionsDto, UpdateRoleDto, User, UserController, UserExtensionService, UserModule, UserService, ViewConfig, ViewConfigModule, ViewConfigService, WILDCARD_PERMISSION, WebhookListenerService, WebhookModule, WebhookService, WebhookSettings, generateDocumentId, getPermissionMetadata, getPluginOptionsToken, hasPermissionDecorator, isValidDocumentId, locales, timezones } from './chunk-5HGRFVWS.js';
+export { Hook, InjectPluginOptions, Plugin } from './chunk-BLOJL7F5.js';
+import { init_api_keys_module, init_api_keys_service, init_api_keys_settings, init_api_key_schema, init_api_key_usage_schema, init_create_api_key_dto, init_update_api_key_dto, init_esm5, IsString, IsNotEmpty, IsIn, IsNumber, Min, IsOptional, init_api_key_guard, init_api_key_decorator, init_cache_module, init_cache_service, init_cache_constants, init_memory_cache_adapter, require_cjs, CACHE_METADATA_KEY, CACHE_TTL_KEY, init_auth_constants, init_auth_module, init_auth_settings, init_auth_strategy_factory, init_dynamic_auth_guard, require_passport, init_jwt_auth_strategy, init_content_module, init_content_service, init_content_settings, init_content_controller, init_document_module, init_document_service, init_document_id_util, init_email_module, init_email_service, init_email_verification_service, init_template_service, init_environment_controller, init_environment_module, init_environment_service, init_environment_setting, init_history_controller, init_history_module, init_history_service, init_notification_constants, init_notification_controller, init_notification_module, init_notification_service, init_notification_settings, init_notification_schema, init_constants, init_plugin_controller, init_plugin_module, init_plugin_lifecycle_service, init_plugin_registry_service, init_plugin_service, init_rbac_module, init_permission_discovery_service, init_permission_service, init_role_service, init_permission_guard, init_dynamic_permission_interceptor, init_assign_role_dto, init_create_role_dto, init_duplicate_role_dto, init_update_permissions_dto, init_update_role_dto, init_role_schema, init_rbac_constants, init_rbac_settings, init_rbac_decorators, init_settings, init_storage_module, init_storage_service, init_storage_settings, init_storage_constants, init_local_storage_adapter, init_media_schema, init_user, init_webhook_module, init_webhook_service, init_webhook_settings, init_webhook_listener, init_view_config_module, init_view_config_service, init_view_config_schema, init_activity_controller, init_activity_module, init_activity_service, init_activity_settings, init_activity_schema, init_admin_module, init_admin_controller, init_admin_service, init_general_module, init_general_settings, CacheService } from './chunk-L5S66O2C.js';
+export { API_KEY_PERMISSION_KEY, API_KEY_SCHEMA_KEY, AUTH_CONFIG, AUTH_STRATEGY, Activity, ActivityController, ActivityModule, ActivityService, ActivitySettings, AdminController, AdminModule, AdminService, ApiKey, ApiKeyGuard, ApiKeyService, ApiKeySettings, ApiKeyUsage, ApiKeysModule, AssignRoleDto, AuthModule, AuthSettings, AuthStrategyFactory, CACHE_ADAPTER_TOKEN, CACHE_METADATA_KEY, CACHE_TTL_KEY, CRUD_ACTIONS, CacheModule, CacheService, ContentController, ContentModule, ContentService, ContentSettings, CreateApiKeyDto, CreateRoleDto, CreateUserDto, CurrentApiKey, DEFAULT_ROLES, DocumentModule, DocumentService, DuplicateRoleDto, DynamicAuthGuard, DynamicPermissionInterceptor, EmailModule, EmailService, EmailVerificationService, EnvironmentController, EnvironmentModule, EnvironmentService, Environments, GeneralModule, GeneralSettings, HasPermission, HistoryController, HistoryModule, HistoryService, JwtAuthStrategy, LocalStorageAdapter, Media, MediaFolder, MediaSettings, MemoryCacheAdapter, NOTIFICATION_MODULE_OPTIONS, Notification, NotificationController, NotificationModule, NotificationService, NotificationSettings, OptionalDynamicAuthGuard, PERMISSION_CATEGORIES, PLUGIN_FRONTEND_MANIFEST, PLUGIN_METADATA, PLUGIN_MODULE, PermissionDiscoveryService, PermissionGuard, PermissionMeta, PermissionService, PluginController, PluginLifecycleService, PluginModule, PluginRegistryService, PluginService, RBACModule, RBACSettings, RBAC_CONFIG, ROLE_MODEL, RequireApiKeyPermission, RequireApiKeySchema, RequirePermission, Role, RoleService, STORAGE_ADAPTER, STORAGE_CONFIG, SettingsModule, SettingsService, StorageModule, StorageService, TemplateService, USER_EXTENSION_TOKEN, UpdateApiKeyDto, UpdatePermissionsDto, UpdateRoleDto, User, UserController, UserExtensionService, UserModule, UserService, ViewConfig, ViewConfigModule, ViewConfigService, WILDCARD_PERMISSION, WebhookListenerService, WebhookModule, WebhookService, WebhookSettings, generateDocumentId, getPermissionMetadata, getPluginOptionsToken, hasPermissionDecorator, isValidDocumentId, locales, timezones } from './chunk-L5S66O2C.js';
 import './chunk-4KTI5N3Y.js';
 import './chunk-63OQXC3R.js';
 import './chunk-K5CAAMIC.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@magnet-cms/core",
-  "version": "2.0.0",
+  "version": "3.0.0",
   "description": "Core NestJS module for Magnet CMS",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -72,7 +72,7 @@
     "sharp": "^0.33.5"
   },
   "peerDependencies": {
-    "@magnet-cms/common": "^0.2.0",
+    "@magnet-cms/common": "^0.3.0",
     "@magnet-cms/utils": "^0.1.1",
     "@nestjs/common": "^11.1.12",
     "@nestjs/config": "^4.0.0",