@rebasepro/server 0.16.0 → 0.16.1-canary.g701140a

package/dist/{schema-editor-routes-CV9k0w3G.js.map → schema-editor-routes-Cax2XTRj.js.map}

@@ -1 +1 @@
-{"version":3,"file":"schema-editor-routes-CV9k0w3G.js","names":[],"sources":["../src/api/ast-schema-editor.ts","../src/api/schema-editor-routes.ts"],"sourcesContent":["import { Project, SyntaxKind, Node, ObjectLiteralExpression, ObjectLiteralElementLike, PropertyAssignment, SourceFile, IndentationText } from \"ts-morph\";\nimport { nestAdminCollectionKeys, nestAdminPropertyKeys } from \"@rebasepro/types\";\nimport * as path from \"path\";\nimport * as fs from \"fs\";\n\n/**\n * The helpers a collection file may be wrapped in.\n *\n * `rebase init` scaffolds every collection as\n * `const postsCollection = defineCollection({ … })` — a call expression, not the\n * bare object literal `rebase introspect` emits. An editor that only understood\n * the bare form found nothing to patch in any stock project, and then rewrote the\n * file from the panel's JSON: no wrapper, no imports, no relation thunks.\n */\nconst COLLECTION_FACTORIES = new Set([\"defineCollection\"]);\n\n/**\n * A value that must be emitted as source code rather than as JSON.\n *\n * Everything reaching the writer has been through `JSON.stringify` on the wire,\n * so a function-valued key arrives either missing or as a string. A relation's\n * `target` is a thunk in the file and a slug in the payload; this is how the\n * thunk gets written back.\n */\nclass RawExpression {\n    constructor(public readonly text: string) {\n    }\n}\n\n/**\n * Move presentation keys into the `admin` block.\n *\n * The rule itself lives in `@rebasepro/types`, next to `ADMIN_COLLECTION_KEYS`,\n * because `@rebasepro/admin-types` has to apply the identical one on the panel's\n * side and this package cannot import that one. Two copies used to exist and\n * they disagreed about precedence, which decided whether a presentation edit was\n * saved or silently reverted to the value the user had just changed away from.\n */\nexport function nestAdminKeys(collectionData: Record<string, unknown>): Record<string, unknown> {\n    return nestAdminCollectionKeys(collectionData);\n}\n\nexport class AstSchemaEditor {\n    private project: Project;\n    private collectionsDir: string;\n\n    constructor(collectionsDir: string) {\n        this.project = new Project({\n            manipulationSettings: {\n                indentationText: IndentationText.FourSpaces\n            }\n        });\n        if (fs.existsSync(collectionsDir)) {\n            this.project.addSourceFilesAtPaths(`${collectionsDir}/**/*.ts`);\n        }\n        this.collectionsDir = path.resolve(collectionsDir);\n    }\n\n    /**\n     * Sanitize collectionId to prevent path traversal attacks.\n     * Only allows alphanumeric characters, underscores, and hyphens.\n     */\n    private sanitizeCollectionId(collectionId: string): string {\n        const sanitized = collectionId.replace(/[^a-zA-Z0-9_-]/g, \"\");\n        if (!sanitized || sanitized !== collectionId) {\n            throw new Error(`Invalid collection ID: \"${collectionId}\". Only alphanumeric characters, underscores, and hyphens are allowed.`);\n        }\n        return sanitized;\n    }\n\n    /**\n     * Resolve a file path and ensure it falls within the collectionsDir.\n     */\n    private safePath(filename: string): string {\n        const resolved = path.resolve(this.collectionsDir, filename);\n        if (!resolved.startsWith(this.collectionsDir + path.sep) && resolved !== this.collectionsDir) {\n            throw new Error(\"Path traversal detected: resolved path is outside the collections directory.\");\n        }\n        return resolved;\n    }\n\n    private getCollectionFile(collectionId: string) {\n        const safeId = this.sanitizeCollectionId(collectionId);\n        const filePath = this.safePath(`${safeId}.ts`);\n        let file = this.project.getSourceFile(filePath);\n        if (!file && fs.existsSync(filePath)) {\n            this.project.addSourceFilesAtPaths(`${this.collectionsDir}/**/*.ts`);\n            file = this.project.getSourceFile(filePath);\n        }\n        return file;\n    }\n\n    /**\n     * Find the object literal a collection is declared with, through whatever\n     * wraps it.\n     *\n     * `defineCollection({ … })` is the shape `rebase init` writes and the one the\n     * docs recommend; `satisfies` / `as` / parentheses are the other ways an\n     * author can dress the same literal. Returning `null` for any of them meant\n     * the three callers below each failed differently, and the worst of them\n     * overwrote the file.\n     */\n    private unwrapCollectionObject(node: Node | undefined): ObjectLiteralExpression | null {\n        if (!node) return null;\n        if (Node.isObjectLiteralExpression(node)) return node;\n        if (Node.isParenthesizedExpression(node) ||\n            Node.isAsExpression(node) ||\n            Node.isSatisfiesExpression(node) ||\n            Node.isTypeAssertion(node) ||\n            Node.isNonNullExpression(node)) {\n            return this.unwrapCollectionObject(node.getExpression());\n        }\n        if (Node.isCallExpression(node)) {\n            // `defineCollection`, `admin.defineCollection`, `defineCollection<Post>`\n            const callee = node.getExpression().getText().split(\".\").pop();\n            if (callee && COLLECTION_FACTORIES.has(callee)) {\n                return this.unwrapCollectionObject(node.getArguments()[0]);\n            }\n        }\n        return null;\n    }\n\n    private getCollectionObject(collectionId: string): ObjectLiteralExpression | null {\n        const file = this.getCollectionFile(collectionId);\n        if (!file) return null;\n\n        const defaultExport = file.getDefaultExportSymbol();\n        if (defaultExport) {\n            const declaration = defaultExport.getDeclarations()[0];\n            if (declaration && declaration.getKind() === SyntaxKind.ExportAssignment) {\n                const expr = declaration.asKind(SyntaxKind.ExportAssignment)?.getExpression();\n                if (expr && expr.getKind() === SyntaxKind.Identifier) {\n                    const varName = expr.getText();\n                    const varDecl = file.getVariableDeclaration(varName);\n                    const unwrapped = this.unwrapCollectionObject(varDecl?.getInitializer());\n                    if (unwrapped) return unwrapped;\n                } else {\n                    // `export default defineCollection({ … })`\n                    const unwrapped = this.unwrapCollectionObject(expr);\n                    if (unwrapped) return unwrapped;\n                }\n            }\n        }\n        // Fallback: the first VariableDeclaration that holds a collection literal\n        for (const varDecl of file.getVariableDeclarations()) {\n            const init = this.unwrapCollectionObject(varDecl.getInitializer());\n            if (init) return init;\n        }\n        return null;\n    }\n\n    /**\n     * The collection's object literal, or a refusal that says what to do.\n     *\n     * Every caller needs this to be all-or-nothing: a missing object literal used\n     * to mean \"throw\", \"report success and do nothing\" and \"recreate the file\n     * from scratch\" depending on which method you called.\n     */\n    private requireCollectionObject(collectionId: string): ObjectLiteralExpression {\n        const file = this.getCollectionFile(collectionId);\n        if (!file) {\n            throw new Error(`Collection \"${collectionId}\" has no file at ${path.join(this.collectionsDir, `${collectionId}.ts`)}.`);\n        }\n        const collectionObj = this.getCollectionObject(collectionId);\n        if (!collectionObj) {\n            throw new Error(this.unreadableFileMessage(collectionId, file));\n        }\n        return collectionObj;\n    }\n\n    private unreadableFileMessage(collectionId: string, file: SourceFile): string {\n        return `Could not find the collection object in ${file.getFilePath()}. ` +\n            \"The schema editor can only edit a collection declared as `const x = defineCollection({ … })` \" +\n            \"or `const x: CollectionConfig = { … }` and exported as the file's default. \" +\n            `Edit \"${collectionId}\" in code instead.`;\n    }\n\n    /** Look a key up on an object literal, quoted or not. */\n    private findProperty(obj: ObjectLiteralExpression, name: string): ObjectLiteralElementLike | undefined {\n        return obj.getProperty((p: ObjectLiteralElementLike) =>\n            \"getName\" in p &&\n            typeof (p as PropertyAssignment).getName === \"function\" &&\n            ((p as PropertyAssignment).getName() === name ||\n                (p as PropertyAssignment).getName() === `\"${name}\"` ||\n                (p as PropertyAssignment).getName() === `'${name}'`));\n    }\n\n    private static quoteKey(key: string): string {\n        return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(key) ? key : JSON.stringify(key);\n    }\n\n    private static isPlainObject(value: unknown): value is Record<string, unknown> {\n        return typeof value === \"object\" && value !== null && !Array.isArray(value) && !(value instanceof RawExpression);\n    }\n\n    private convertJsonToAstString(obj: unknown, indentLevel = 0, oldAstNode?: ObjectLiteralExpression): string {\n        // Base TS-morph parses arrays as 2 levels deep from the property key:\n        // PropertiesObject = level 1, PropertyConfig = level 2.\n        // We calibrate the spacing multiples to keep the items flush with standard TS format.\n        const indentStr = \"    \";\n        const indent = indentStr.repeat(indentLevel);\n        const innerIndent = indentStr.repeat(indentLevel + 1);\n\n        if (obj instanceof RawExpression) {\n            return obj.text;\n        }\n        if (obj === null || obj === undefined) {\n            return \"undefined\";\n        }\n        if (typeof obj === \"string\") {\n            return JSON.stringify(obj);\n        }\n        if (typeof obj === \"number\" || typeof obj === \"boolean\") {\n            return String(obj);\n        }\n        if (Array.isArray(obj)) {\n            if (obj.length === 0) return \"[]\";\n            const items = obj.map(item => this.convertJsonToAstString(item, indentLevel + 1));\n            return `[\\n${innerIndent}${items.join(`,\\n${innerIndent}`)}\\n${indent}]`;\n        }\n        if (typeof obj === \"object\") {\n            const record = obj as Record<string, unknown>;\n            const keys = Object.keys(record);\n\n            // Collect preserved AST properties\n            const preservedProps: string[] = [];\n            if (oldAstNode) {\n                const oldProps = oldAstNode.getProperties();\n                for (const oldProp of oldProps) {\n                    if (oldProp.isKind(SyntaxKind.PropertyAssignment)) {\n                        const nameNode = oldProp.getNameNode();\n                        let name = nameNode.getText();\n                        if (name.startsWith('\"') && name.endsWith('\"')) name = name.slice(1, -1);\n                        if (name.startsWith(\"'\") && name.endsWith(\"'\")) name = name.slice(1, -1);\n\n                        // If the JSON object doesn't have this key, check if we should preserve it\n                        if (!(name in record)) {\n                            const init = oldProp.getInitializer();\n                            if (init) {\n                                const kind = init.getKind();\n                                const isCode = kind === SyntaxKind.ArrowFunction ||\n                                    kind === SyntaxKind.FunctionExpression ||\n                                    kind === SyntaxKind.Identifier ||\n                                    kind === SyntaxKind.CallExpression ||\n                                    kind === SyntaxKind.JsxElement;\n\n                                if (isCode || name === \"target\" || name === \"callbacks\" || name === \"permissions\" || name === \"securityRules\") {\n                                    // Preserve this property exactly as it was\n                                    preservedProps.push(`${AstSchemaEditor.quoteKey(name)}: ${init.getText()}`);\n                                }\n                            }\n                        }\n                    }\n                }\n            }\n\n            if (keys.length === 0 && preservedProps.length === 0) return \"{}\";\n\n            const props = keys.map(key => {\n                const keyStr = AstSchemaEditor.quoteKey(key);\n\n                // If the value is an object, pass the old AST node to recurse\n                let childAstNode: ObjectLiteralExpression | undefined;\n                if (oldAstNode && AstSchemaEditor.isPlainObject(record[key])) {\n                    const oldProp = this.findProperty(oldAstNode, key);\n                    if (oldProp && oldProp.isKind(SyntaxKind.PropertyAssignment)) {\n                        childAstNode = oldProp.getInitializerIfKind(SyntaxKind.ObjectLiteralExpression);\n                    }\n                }\n\n                return `${keyStr}: ${this.convertJsonToAstString(record[key], indentLevel + 1, childAstNode)}`;\n            });\n\n            const allProps = [...props, ...preservedProps];\n            return `{\\n${innerIndent}${allProps.join(`,\\n${innerIndent}`)}\\n${indent}}`;\n        }\n        return \"undefined\";\n    }\n\n    /**\n     * Write only the keys the patch names, leaving every sibling alone.\n     *\n     * A patch says what changed, not what the collection is. The panel sends one\n     * — `{ propertiesOrder }` is what adding a column posts — and rewriting the\n     * `admin` block from it deleted the collection's icon, group, list columns\n     * and kanban config in the same write.\n     */\n    private mergeIntoObjectLiteral(target: ObjectLiteralExpression, data: Record<string, unknown>, indentLevel: number): void {\n        for (const [key, value] of Object.entries(data)) {\n            const existing = this.findProperty(target, key);\n            const existingObj = existing && existing.isKind(SyntaxKind.PropertyAssignment)\n                ? existing.getInitializerIfKind(SyntaxKind.ObjectLiteralExpression)\n                : undefined;\n\n            if (existingObj && AstSchemaEditor.isPlainObject(value)) {\n                this.mergeIntoObjectLiteral(existingObj, value, indentLevel + 1);\n                continue;\n            }\n\n            const initializer = this.convertJsonToAstString(value, indentLevel, existingObj);\n            if (existing && existing.isKind(SyntaxKind.PropertyAssignment)) {\n                existing.setInitializer(initializer);\n            } else {\n                target.addPropertyAssignment({\n                    name: AstSchemaEditor.quoteKey(key),\n                    initializer\n                });\n            }\n        }\n    }\n\n    public async saveProperty(collectionId: string, propertyKey: string, propertyConfig: Record<string, unknown>) {\n        const collectionObj = this.requireCollectionObject(collectionId);\n\n        // The panel's property forms bind to the flat names — `readOnly`,\n        // `hideFromCollection` — while on disk they belong inside the property's\n        // own `admin` block. Written flat they are not merely ignored: the boot\n        // validator treats a moved key as fatal.\n        const nestedConfig = nestAdminPropertyKeys(propertyConfig);\n\n        let propertiesProp = collectionObj.getProperty(\"properties\") as PropertyAssignment;\n        if (!propertiesProp) {\n            propertiesProp = collectionObj.addPropertyAssignment({\n                name: \"properties\",\n                initializer: \"{}\"\n            });\n        }\n\n        const propsObj = propertiesProp.getInitializerIfKind(SyntaxKind.ObjectLiteralExpression);\n        if (propsObj) {\n            const existingProp = this.findProperty(propsObj, propertyKey);\n\n            let oldPropAstNode: ObjectLiteralExpression | undefined;\n            if (existingProp && existingProp.isKind(SyntaxKind.PropertyAssignment)) {\n                oldPropAstNode = existingProp.getInitializerIfKind(SyntaxKind.ObjectLiteralExpression);\n            }\n\n            const newInitializer = this.convertJsonToAstString(nestedConfig, 2, oldPropAstNode);\n\n            if (existingProp) {\n                if (existingProp.isKind(SyntaxKind.PropertyAssignment)) {\n                    existingProp.setInitializer(newInitializer);\n                }\n            } else {\n                propsObj.addPropertyAssignment({\n                    name: AstSchemaEditor.quoteKey(propertyKey),\n                    initializer: newInitializer\n                });\n            }\n\n            const file = this.getCollectionFile(collectionId);\n            if (file) {\n                file.formatText();\n            }\n            await this.project.save();\n        }\n    }\n\n    public async deleteProperty(collectionId: string, propertyKey: string) {\n        const collectionObj = this.requireCollectionObject(collectionId);\n\n        const propertiesProp = collectionObj.getProperty(\"properties\") as PropertyAssignment;\n        if (propertiesProp) {\n            const propsObj = propertiesProp.getInitializerIfKind(SyntaxKind.ObjectLiteralExpression);\n            if (propsObj) {\n                const existingProp = this.findProperty(propsObj, propertyKey);\n                if (existingProp) {\n                    existingProp.remove();\n                    const file = this.getCollectionFile(collectionId);\n                    if (file) {\n                        file.formatText();\n                    }\n                    await this.project.save();\n                }\n            }\n        }\n    }\n\n    /**\n     * Write a collection back to its file.\n     *\n     * `partial` is the difference between \"this is the collection\" and \"this is\n     * what changed about it\". The panel sends both — a full save from the editor\n     * dialog, and a one-key patch whenever a property is added, deleted or\n     * reordered — and they cannot be told apart by looking at the payload. Read\n     * as a full save, a patch deletes everything it does not mention, including\n     * `securityRules`; the loader then hands the collection the directory\n     * default, which in the scaffold is `access: \"public\"`.\n     */\n    public async saveCollection(collectionId: string, collectionData: Record<string, unknown>, options: { partial?: boolean } = {}) {\n        const partial = options.partial === true;\n        let file = this.getCollectionFile(collectionId);\n        const collectionObj = file ? this.getCollectionObject(collectionId) : null;\n\n        if (file && !collectionObj) {\n            // The file is there and we could not read it. Recreating it from the\n            // panel's JSON would drop the imports, the callbacks and the relation\n            // thunks that JSON cannot carry.\n            throw new Error(this.unreadableFileMessage(collectionId, file));\n        }\n\n        if (!file || !collectionObj) {\n            if (partial) {\n                throw new Error(`Cannot apply a partial update to \"${collectionId}\": it has no collection file yet.`);\n            }\n            // Create a new file\n            const safeId = this.sanitizeCollectionId(collectionId);\n            const newFilePath = this.safePath(`${safeId}.ts`);\n            if (fs.existsSync(newFilePath)) {\n                throw new Error(`Refusing to overwrite ${newFilePath}: a file for \"${collectionId}\" already exists but could not be parsed.`);\n            }\n            file = this.project.createSourceFile(newFilePath, `import { CollectionConfig } from \"@rebasepro/types\";\\n\\nconst ${safeId}Collection: CollectionConfig = ${this.convertJsonToAstString(nestAdminKeys(collectionData))};\\n\\nexport default ${safeId}Collection;\\n`);\n        } else {\n            // Update root level properties gracefully\n\n            if (!partial) {\n                // Force delete securityRules if empty or undefined to handle Formex / serialization stripping\n                if (!(\"securityRules\" in collectionData) || collectionData.securityRules === undefined || (Array.isArray(collectionData.securityRules) && collectionData.securityRules.length === 0)) {\n                    const srProp = collectionObj.getProperty(\"securityRules\");\n                    if (srProp) {\n                        srProp.remove();\n                    }\n\n                    // If it was in collectionData as an empty array, delete it so the loop below doesn't add it back as \"[]\"\n                    // Actually, if it's \"[]\", omitting it entirely from the TS file achieves the same logical effect (no RLS rules)\n                    // and correctly triggers \"unmapped policies\" if the DB still has them.\n                    delete collectionData[\"securityRules\"];\n                }\n            }\n\n            // The panel works with a flat view model — presentation merged onto the\n            // collection — so what arrives here has `icon` and `listProperties` at\n            // the top level. On disk they belong inside `admin`. Writing them flat\n            // would produce a file the backend loads and ignores and the panel\n            // never reads back, which looks exactly like the edit not saving.\n            collectionData = nestAdminKeys(collectionData);\n\n            for (const key of Object.keys(collectionData)) {\n                if (key === \"relations\") {\n                    this.writeRelations(collectionId, file, collectionObj, collectionData[key]);\n                    continue;\n                }\n\n                const prop = collectionObj.getProperty(key) as PropertyAssignment;\n\n                let oldAstNode: ObjectLiteralExpression | undefined;\n                if (prop && prop.isKind(SyntaxKind.PropertyAssignment)) {\n                    oldAstNode = prop.getInitializerIfKind(SyntaxKind.ObjectLiteralExpression);\n                }\n\n                if (partial && oldAstNode && AstSchemaEditor.isPlainObject(collectionData[key])) {\n                    this.mergeIntoObjectLiteral(oldAstNode, collectionData[key] as Record<string, unknown>, 2);\n                    continue;\n                }\n\n                const newInit = this.convertJsonToAstString(collectionData[key], 1, oldAstNode);\n                if (prop) {\n                    prop.setInitializer(newInit);\n                } else {\n                    collectionObj.addPropertyAssignment({\n                        name: key,\n                        initializer: newInit\n                    });\n                }\n            }\n        }\n        if (file) {\n            file.formatText();\n        }\n        await this.project.save();\n    }\n\n    /**\n     * Write the collection-level `relations` array.\n     *\n     * Relations are the one key whose values are not all data: `target` is a\n     * thunk in the file, and the panel sends the target collection's slug (or,\n     * for a relation it did not touch, nothing at all — `JSON.stringify` drops\n     * the function). So each entry's target is resolved in that order: a slug\n     * becomes `() => xCollection` plus the import it needs, and anything else\n     * falls back to the thunk already in the file.\n     *\n     * This used to be a `continue` with a comment saying relations were handled\n     * elsewhere. Nothing handled them; every edit in the Relations tab was\n     * dropped without a word.\n     */\n    private writeRelations(collectionId: string, file: SourceFile, collectionObj: ObjectLiteralExpression, value: unknown): void {\n        if (!Array.isArray(value)) return;\n\n        const existing = this.findProperty(collectionObj, \"relations\");\n        const oldArray = existing && existing.isKind(SyntaxKind.PropertyAssignment)\n            ? existing.getInitializerIfKind(SyntaxKind.ArrayLiteralExpression)\n            : undefined;\n\n        const oldElements = oldArray?.getElements() ?? [];\n        const oldTargetsByName = new Map<string, string>();\n        // Only for entries the file left unnamed — `relationName` is optional, and\n        // those cannot be matched any other way. Positional matching is off the\n        // moment the array's length changes, because then a position no longer\n        // means the same relation.\n        const anonymousTargetsByIndex: (string | undefined)[] = [];\n        oldElements.forEach((element, index) => {\n            const elementObj = element.asKind(SyntaxKind.ObjectLiteralExpression);\n            if (!elementObj) return;\n            const targetProp = this.findProperty(elementObj, \"target\");\n            const targetInit = targetProp && targetProp.isKind(SyntaxKind.PropertyAssignment)\n                ? targetProp.getInitializer()\n                : undefined;\n            if (!targetInit) return;\n\n            const nameProp = this.findProperty(elementObj, \"relationName\");\n            const nameInit = nameProp && nameProp.isKind(SyntaxKind.PropertyAssignment)\n                ? nameProp.getInitializerIfKind(SyntaxKind.StringLiteral)\n                : undefined;\n            if (nameInit) oldTargetsByName.set(nameInit.getLiteralValue(), targetInit.getText());\n            else anonymousTargetsByIndex[index] = targetInit.getText();\n        });\n\n        const items = value.map((entry, index) => {\n            if (!AstSchemaEditor.isPlainObject(entry)) return entry;\n            const relation: Record<string, unknown> = { ...entry };\n            const relationName = typeof relation.relationName === \"string\" ? relation.relationName : undefined;\n            const rawTarget = relation.target;\n\n            let targetText: string | undefined;\n            if (typeof rawTarget === \"string\" && rawTarget.trim().length > 0) {\n                targetText = rawTarget.includes(\"=>\")\n                    ? rawTarget.trim()\n                    : this.targetThunk(file, rawTarget.trim());\n            } else if (relationName && oldTargetsByName.has(relationName)) {\n                targetText = oldTargetsByName.get(relationName);\n            } else if (value.length === oldElements.length) {\n                targetText = anonymousTargetsByIndex[index];\n            }\n\n            if (!targetText) {\n                throw new Error(`Relation \"${relationName ?? `#${index}`}\" on collection \"${collectionId}\" has no target collection. Pick one before saving.`);\n            }\n\n            relation.target = new RawExpression(targetText);\n            return relation;\n        });\n\n        const initializer = this.convertJsonToAstString(items, 1);\n        if (existing && existing.isKind(SyntaxKind.PropertyAssignment)) {\n            existing.setInitializer(initializer);\n        } else {\n            collectionObj.addPropertyAssignment({ name: \"relations\", initializer });\n        }\n    }\n\n    /**\n     * `() => targetCollection` for a target named by its slug, importing it if\n     * the file does not already.\n     */\n    private targetThunk(file: SourceFile, targetSlug: string): string {\n        const targetFile = this.getCollectionFile(targetSlug);\n        if (!targetFile) {\n            throw new Error(`Cannot link to collection \"${targetSlug}\": no file for it in ${this.collectionsDir}.`);\n        }\n\n        const identifier = this.getDefaultExportName(targetFile);\n        if (!identifier) {\n            throw new Error(`Cannot link to collection \"${targetSlug}\": ${targetFile.getFilePath()} has no default export to import.`);\n        }\n\n        if (targetFile.getFilePath() !== file.getFilePath() && !this.hasDefaultImport(file, identifier)) {\n            const relative = path.relative(path.dirname(file.getFilePath()), targetFile.getFilePath())\n                .split(path.sep)\n                .join(\"/\")\n                .replace(/\\.tsx?$/, \".js\");\n            file.addImportDeclaration({\n                defaultImport: identifier,\n                moduleSpecifier: relative.startsWith(\".\") ? relative : `./${relative}`\n            });\n        }\n\n        return `() => ${identifier}`;\n    }\n\n    private hasDefaultImport(file: SourceFile, identifier: string): boolean {\n        return file.getImportDeclarations().some(decl => decl.getDefaultImport()?.getText() === identifier);\n    }\n\n    private getDefaultExportName(file: SourceFile): string | undefined {\n        const declaration = file.getDefaultExportSymbol()?.getDeclarations()[0];\n        const expr = declaration?.asKind(SyntaxKind.ExportAssignment)?.getExpression();\n        if (expr && expr.getKind() === SyntaxKind.Identifier) return expr.getText();\n\n        for (const varDecl of file.getVariableDeclarations()) {\n            if (this.unwrapCollectionObject(varDecl.getInitializer())) return varDecl.getName();\n        }\n        return undefined;\n    }\n\n    public async deleteCollection(collectionId: string) {\n        const file = this.getCollectionFile(collectionId);\n        if (file) {\n            file.deleteImmediatelySync();\n        }\n    }\n}\n","import { Hono } from \"hono\";\nimport { AstSchemaEditor } from \"./ast-schema-editor\";\nimport { errorHandler } from \"./errors\";\nimport { HonoEnv } from \"./types\";\n\nexport function createSchemaEditorRoutes(collectionsDir: string): Hono<HonoEnv> {\n    const router = new Hono<HonoEnv>();\n    router.onError(errorHandler);\n    const editor = new AstSchemaEditor(collectionsDir);\n\n    router.post(\"/property/save\", async (c) => {\n        const body = await c.req.json();\n        const { collectionId, propertyKey, propertyConfig } = body;\n        await editor.saveProperty(collectionId, propertyKey, propertyConfig);\n        return c.json({ success: true });\n    });\n\n    router.post(\"/property/delete\", async (c) => {\n        const body = await c.req.json();\n        const { collectionId, propertyKey } = body;\n        await editor.deleteProperty(collectionId, propertyKey);\n        return c.json({ success: true });\n    });\n\n    /**\n     * `partial: true` means \"this payload is what changed\", not \"this is the\n     * collection\". Without it a one-key patch — which is what adding a column\n     * posts — is read as a whole-collection save and deletes everything it does\n     * not mention, `securityRules` included. Absent, it defaults to a full save,\n     * so an older panel keeps the behaviour it was written against.\n     */\n    router.post(\"/collection/save\", async (c) => {\n        const body = await c.req.json();\n        const { collectionId, collectionData, partial } = body;\n        await editor.saveCollection(collectionId, collectionData, { partial: partial === true });\n        return c.json({ success: true });\n    });\n\n    router.post(\"/collection/delete\", async (c) => {\n        const body = await c.req.json();\n        const { collectionId } = body;\n        await editor.deleteCollection(collectionId);\n        return c.json({ success: true });\n    });\n\n    return router;\n}\n\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAcA,IAAM,uCAAuB,IAAI,IAAI,CAAC,kBAAkB,CAAC;;;;;;;;;AAUzD,IAAM,gBAAN,MAAoB;CACY;CAA5B,YAAY,MAA8B;EAAd,KAAA,OAAA;CAC5B;AACJ;;;;;;;;;;AAWA,SAAgB,cAAc,gBAAkE;CAC5F,OAAO,wBAAwB,cAAc;AACjD;AAEA,IAAa,kBAAb,MAAa,gBAAgB;CACzB;CACA;CAEA,YAAY,gBAAwB;EAChC,KAAK,UAAU,IAAI,QAAQ,EACvB,sBAAsB,EAClB,iBAAiB,gBAAgB,WACrC,EACJ,CAAC;EACD,IAAI,KAAG,WAAW,cAAc,GAC5B,KAAK,QAAQ,sBAAsB,GAAG,eAAe,SAAS;EAElE,KAAK,iBAAiB,OAAK,QAAQ,cAAc;CACrD;;;;;CAMA,qBAA6B,cAA8B;EACvD,MAAM,YAAY,aAAa,QAAQ,mBAAmB,EAAE;EAC5D,IAAI,CAAC,aAAa,cAAc,cAC5B,MAAM,IAAI,MAAM,2BAA2B,aAAa,uEAAuE;EAEnI,OAAO;CACX;;;;CAKA,SAAiB,UAA0B;EACvC,MAAM,WAAW,OAAK,QAAQ,KAAK,gBAAgB,QAAQ;EAC3D,IAAI,CAAC,SAAS,WAAW,KAAK,iBAAiB,OAAK,GAAG,KAAK,aAAa,KAAK,gBAC1E,MAAM,IAAI,MAAM,8EAA8E;EAElG,OAAO;CACX;CAEA,kBAA0B,cAAsB;EAC5C,MAAM,SAAS,KAAK,qBAAqB,YAAY;EACrD,MAAM,WAAW,KAAK,SAAS,GAAG,OAAO,IAAI;EAC7C,IAAI,OAAO,KAAK,QAAQ,cAAc,QAAQ;EAC9C,IAAI,CAAC,QAAQ,KAAG,WAAW,QAAQ,GAAG;GAClC,KAAK,QAAQ,sBAAsB,GAAG,KAAK,eAAe,SAAS;GACnE,OAAO,KAAK,QAAQ,cAAc,QAAQ;EAC9C;EACA,OAAO;CACX;;;;;;;;;;;CAYA,uBAA+B,MAAwD;EACnF,IAAI,CAAC,MAAM,OAAO;EAClB,IAAI,KAAK,0BAA0B,IAAI,GAAG,OAAO;EACjD,IAAI,KAAK,0BAA0B,IAAI,KACnC,KAAK,eAAe,IAAI,KACxB,KAAK,sBAAsB,IAAI,KAC/B,KAAK,gBAAgB,IAAI,KACzB,KAAK,oBAAoB,IAAI,GAC7B,OAAO,KAAK,uBAAuB,KAAK,cAAc,CAAC;EAE3D,IAAI,KAAK,iBAAiB,IAAI,GAAG;GAE7B,MAAM,SAAS,KAAK,cAAc,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI;GAC7D,IAAI,UAAU,qBAAqB,IAAI,MAAM,GACzC,OAAO,KAAK,uBAAuB,KAAK,aAAa,CAAC,CAAC,EAAE;EAEjE;EACA,OAAO;CACX;CAEA,oBAA4B,cAAsD;EAC9E,MAAM,OAAO,KAAK,kBAAkB,YAAY;EAChD,IAAI,CAAC,MAAM,OAAO;EAElB,MAAM,gBAAgB,KAAK,uBAAuB;EAClD,IAAI,eAAe;GACf,MAAM,cAAc,cAAc,gBAAgB,CAAC,CAAC;GACpD,IAAI,eAAe,YAAY,QAAQ,MAAM,WAAW,kBAAkB;IACtE,MAAM,OAAO,YAAY,OAAO,WAAW,gBAAgB,CAAC,EAAE,cAAc;IAC5E,IAAI,QAAQ,KAAK,QAAQ,MAAM,WAAW,YAAY;KAClD,MAAM,UAAU,KAAK,QAAQ;KAC7B,MAAM,UAAU,KAAK,uBAAuB,OAAO;KACnD,MAAM,YAAY,KAAK,uBAAuB,SAAS,eAAe,CAAC;KACvE,IAAI,WAAW,OAAO;IAC1B,OAAO;KAEH,MAAM,YAAY,KAAK,uBAAuB,IAAI;KAClD,IAAI,WAAW,OAAO;IAC1B;GACJ;EACJ;EAEA,KAAK,MAAM,WAAW,KAAK,wBAAwB,GAAG;GAClD,MAAM,OAAO,KAAK,uBAAuB,QAAQ,eAAe,CAAC;GACjE,IAAI,MAAM,OAAO;EACrB;EACA,OAAO;CACX;;;;;;;;CASA,wBAAgC,cAA+C;EAC3E,MAAM,OAAO,KAAK,kBAAkB,YAAY;EAChD,IAAI,CAAC,MACD,MAAM,IAAI,MAAM,eAAe,aAAa,mBAAmB,OAAK,KAAK,KAAK,gBAAgB,GAAG,aAAa,IAAI,EAAE,EAAE;EAE1H,MAAM,gBAAgB,KAAK,oBAAoB,YAAY;EAC3D,IAAI,CAAC,eACD,MAAM,IAAI,MAAM,KAAK,sBAAsB,cAAc,IAAI,CAAC;EAElE,OAAO;CACX;CAEA,sBAA8B,cAAsB,MAA0B;EAC1E,OAAO,2CAA2C,KAAK,YAAY,EAAE,sLAGxD,aAAa;CAC9B;;CAGA,aAAqB,KAA8B,MAAoD;EACnG,OAAO,IAAI,aAAa,MACpB,aAAa,KACb,OAAQ,EAAyB,YAAY,eAC3C,EAAyB,QAAQ,MAAM,QACpC,EAAyB,QAAQ,MAAM,IAAI,KAAK,MAChD,EAAyB,QAAQ,MAAM,IAAI,KAAK,GAAG;CAChE;CAEA,OAAe,SAAS,KAAqB;EACzC,OAAO,6BAA6B,KAAK,GAAG,IAAI,MAAM,KAAK,UAAU,GAAG;CAC5E;CAEA,OAAe,cAAc,OAAkD;EAC3E,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK,KAAK,EAAE,iBAAiB;CACtG;CAEA,uBAA+B,KAAc,cAAc,GAAG,YAA8C;EAIxG,MAAM,YAAY;EAClB,MAAM,SAAS,UAAU,OAAO,WAAW;EAC3C,MAAM,cAAc,UAAU,OAAO,cAAc,CAAC;EAEpD,IAAI,eAAe,eACf,OAAO,IAAI;EAEf,IAAI,QAAQ,QAAQ,QAAQ,KAAA,GACxB,OAAO;EAEX,IAAI,OAAO,QAAQ,UACf,OAAO,KAAK,UAAU,GAAG;EAE7B,IAAI,OAAO,QAAQ,YAAY,OAAO,QAAQ,WAC1C,OAAO,OAAO,GAAG;EAErB,IAAI,MAAM,QAAQ,GAAG,GAAG;GACpB,IAAI,IAAI,WAAW,GAAG,OAAO;GAE7B,OAAO,MAAM,cADC,IAAI,KAAI,SAAQ,KAAK,uBAAuB,MAAM,cAAc,CAAC,CACpD,CAAA,CAAM,KAAK,MAAM,aAAa,EAAE,IAAI,OAAO;EAC1E;EACA,IAAI,OAAO,QAAQ,UAAU;GACzB,MAAM,SAAS;GACf,MAAM,OAAO,OAAO,KAAK,MAAM;GAG/B,MAAM,iBAA2B,CAAC;GAClC,IAAI,YAAY;IACZ,MAAM,WAAW,WAAW,cAAc;IAC1C,KAAK,MAAM,WAAW,UAClB,IAAI,QAAQ,OAAO,WAAW,kBAAkB,GAAG;KAE/C,IAAI,OADa,QAAQ,YACd,CAAA,CAAS,QAAQ;KAC5B,IAAI,KAAK,WAAW,IAAG,KAAK,KAAK,SAAS,IAAG,GAAG,OAAO,KAAK,MAAM,GAAG,EAAE;KACvE,IAAI,KAAK,WAAW,GAAG,KAAK,KAAK,SAAS,GAAG,GAAG,OAAO,KAAK,MAAM,GAAG,EAAE;KAGvE,IAAI,EAAE,QAAQ,SAAS;MACnB,MAAM,OAAO,QAAQ,eAAe;MACpC,IAAI,MAAM;OACN,MAAM,OAAO,KAAK,QAAQ;OAO1B,IANe,SAAS,WAAW,iBAC/B,SAAS,WAAW,sBACpB,SAAS,WAAW,cACpB,SAAS,WAAW,kBACpB,SAAS,WAAW,cAEV,SAAS,YAAY,SAAS,eAAe,SAAS,iBAAiB,SAAS,iBAE1F,eAAe,KAAK,GAAG,gBAAgB,SAAS,IAAI,EAAE,IAAI,KAAK,QAAQ,GAAG;MAElF;KACJ;IACJ;GAER;GAEA,IAAI,KAAK,WAAW,KAAK,eAAe,WAAW,GAAG,OAAO;GAkB7D,OAAO,MAAM,cAAc,CADT,GAfJ,KAAK,KAAI,QAAO;IAC1B,MAAM,SAAS,gBAAgB,SAAS,GAAG;IAG3C,IAAI;IACJ,IAAI,cAAc,gBAAgB,cAAc,OAAO,IAAI,GAAG;KAC1D,MAAM,UAAU,KAAK,aAAa,YAAY,GAAG;KACjD,IAAI,WAAW,QAAQ,OAAO,WAAW,kBAAkB,GACvD,eAAe,QAAQ,qBAAqB,WAAW,uBAAuB;IAEtF;IAEA,OAAO,GAAG,OAAO,IAAI,KAAK,uBAAuB,OAAO,MAAM,cAAc,GAAG,YAAY;GAC/F,CAEqB,GAAO,GAAG,cACJ,CAAA,CAAS,KAAK,MAAM,aAAa,EAAE,IAAI,OAAO;EAC7E;EACA,OAAO;CACX;;;;;;;;;CAUA,uBAA+B,QAAiC,MAA+B,aAA2B;EACtH,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,IAAI,GAAG;GAC7C,MAAM,WAAW,KAAK,aAAa,QAAQ,GAAG;GAC9C,MAAM,cAAc,YAAY,SAAS,OAAO,WAAW,kBAAkB,IACvE,SAAS,qBAAqB,WAAW,uBAAuB,IAChE,KAAA;GAEN,IAAI,eAAe,gBAAgB,cAAc,KAAK,GAAG;IACrD,KAAK,uBAAuB,aAAa,OAAO,cAAc,CAAC;IAC/D;GACJ;GAEA,MAAM,cAAc,KAAK,uBAAuB,OAAO,aAAa,WAAW;GAC/E,IAAI,YAAY,SAAS,OAAO,WAAW,kBAAkB,GACzD,SAAS,eAAe,WAAW;QAEnC,OAAO,sBAAsB;IACzB,MAAM,gBAAgB,SAAS,GAAG;IAClC;GACJ,CAAC;EAET;CACJ;CAEA,MAAa,aAAa,cAAsB,aAAqB,gBAAyC;EAC1G,MAAM,gBAAgB,KAAK,wBAAwB,YAAY;EAM/D,MAAM,eAAe,sBAAsB,cAAc;EAEzD,IAAI,iBAAiB,cAAc,YAAY,YAAY;EAC3D,IAAI,CAAC,gBACD,iBAAiB,cAAc,sBAAsB;GACjD,MAAM;GACN,aAAa;EACjB,CAAC;EAGL,MAAM,WAAW,eAAe,qBAAqB,WAAW,uBAAuB;EACvF,IAAI,UAAU;GACV,MAAM,eAAe,KAAK,aAAa,UAAU,WAAW;GAE5D,IAAI;GACJ,IAAI,gBAAgB,aAAa,OAAO,WAAW,kBAAkB,GACjE,iBAAiB,aAAa,qBAAqB,WAAW,uBAAuB;GAGzF,MAAM,iBAAiB,KAAK,uBAAuB,cAAc,GAAG,cAAc;GAElF,IAAI;QACI,aAAa,OAAO,WAAW,kBAAkB,GACjD,aAAa,eAAe,cAAc;GAAA,OAG9C,SAAS,sBAAsB;IAC3B,MAAM,gBAAgB,SAAS,WAAW;IAC1C,aAAa;GACjB,CAAC;GAGL,MAAM,OAAO,KAAK,kBAAkB,YAAY;GAChD,IAAI,MACA,KAAK,WAAW;GAEpB,MAAM,KAAK,QAAQ,KAAK;EAC5B;CACJ;CAEA,MAAa,eAAe,cAAsB,aAAqB;EAGnE,MAAM,iBAFgB,KAAK,wBAAwB,YAE5B,CAAA,CAAc,YAAY,YAAY;EAC7D,IAAI,gBAAgB;GAChB,MAAM,WAAW,eAAe,qBAAqB,WAAW,uBAAuB;GACvF,IAAI,UAAU;IACV,MAAM,eAAe,KAAK,aAAa,UAAU,WAAW;IAC5D,IAAI,cAAc;KACd,aAAa,OAAO;KACpB,MAAM,OAAO,KAAK,kBAAkB,YAAY;KAChD,IAAI,MACA,KAAK,WAAW;KAEpB,MAAM,KAAK,QAAQ,KAAK;IAC5B;GACJ;EACJ;CACJ;;;;;;;;;;;;CAaA,MAAa,eAAe,cAAsB,gBAAyC,UAAiC,CAAC,GAAG;EAC5H,MAAM,UAAU,QAAQ,YAAY;EACpC,IAAI,OAAO,KAAK,kBAAkB,YAAY;EAC9C,MAAM,gBAAgB,OAAO,KAAK,oBAAoB,YAAY,IAAI;EAEtE,IAAI,QAAQ,CAAC,eAIT,MAAM,IAAI,MAAM,KAAK,sBAAsB,cAAc,IAAI,CAAC;EAGlE,IAAI,CAAC,QAAQ,CAAC,eAAe;GACzB,IAAI,SACA,MAAM,IAAI,MAAM,qCAAqC,aAAa,kCAAkC;GAGxG,MAAM,SAAS,KAAK,qBAAqB,YAAY;GACrD,MAAM,cAAc,KAAK,SAAS,GAAG,OAAO,IAAI;GAChD,IAAI,KAAG,WAAW,WAAW,GACzB,MAAM,IAAI,MAAM,yBAAyB,YAAY,gBAAgB,aAAa,0CAA0C;GAEhI,OAAO,KAAK,QAAQ,iBAAiB,aAAa,iEAAiE,OAAO,iCAAiC,KAAK,uBAAuB,cAAc,cAAc,CAAC,EAAE,sBAAsB,OAAO,cAAc;EACrQ,OAAO;GAGH,IAAI,CAAC;QAEG,EAAE,mBAAmB,mBAAmB,eAAe,kBAAkB,KAAA,KAAc,MAAM,QAAQ,eAAe,aAAa,KAAK,eAAe,cAAc,WAAW,GAAI;KAClL,MAAM,SAAS,cAAc,YAAY,eAAe;KACxD,IAAI,QACA,OAAO,OAAO;KAMlB,OAAO,eAAe;IAC1B;;GAQJ,iBAAiB,cAAc,cAAc;GAE7C,KAAK,MAAM,OAAO,OAAO,KAAK,cAAc,GAAG;IAC3C,IAAI,QAAQ,aAAa;KACrB,KAAK,eAAe,cAAc,MAAM,eAAe,eAAe,IAAI;KAC1E;IACJ;IAEA,MAAM,OAAO,cAAc,YAAY,GAAG;IAE1C,IAAI;IACJ,IAAI,QAAQ,KAAK,OAAO,WAAW,kBAAkB,GACjD,aAAa,KAAK,qBAAqB,WAAW,uBAAuB;IAG7E,IAAI,WAAW,cAAc,gBAAgB,cAAc,eAAe,IAAI,GAAG;KAC7E,KAAK,uBAAuB,YAAY,eAAe,MAAiC,CAAC;KACzF;IACJ;IAEA,MAAM,UAAU,KAAK,uBAAuB,eAAe,MAAM,GAAG,UAAU;IAC9E,IAAI,MACA,KAAK,eAAe,OAAO;SAE3B,cAAc,sBAAsB;KAChC,MAAM;KACN,aAAa;IACjB,CAAC;GAET;EACJ;EACA,IAAI,MACA,KAAK,WAAW;EAEpB,MAAM,KAAK,QAAQ,KAAK;CAC5B;;;;;;;;;;;;;;;CAgBA,eAAuB,cAAsB,MAAkB,eAAwC,OAAsB;EACzH,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;EAE3B,MAAM,WAAW,KAAK,aAAa,eAAe,WAAW;EAK7D,MAAM,eAJW,YAAY,SAAS,OAAO,WAAW,kBAAkB,IACpE,SAAS,qBAAqB,WAAW,sBAAsB,IAC/D,KAAA,EAAA,EAEwB,YAAY,KAAK,CAAC;EAChD,MAAM,mCAAmB,IAAI,IAAoB;EAKjD,MAAM,0BAAkD,CAAC;EACzD,YAAY,SAAS,SAAS,UAAU;GACpC,MAAM,aAAa,QAAQ,OAAO,WAAW,uBAAuB;GACpE,IAAI,CAAC,YAAY;GACjB,MAAM,aAAa,KAAK,aAAa,YAAY,QAAQ;GACzD,MAAM,aAAa,cAAc,WAAW,OAAO,WAAW,kBAAkB,IAC1E,WAAW,eAAe,IAC1B,KAAA;GACN,IAAI,CAAC,YAAY;GAEjB,MAAM,WAAW,KAAK,aAAa,YAAY,cAAc;GAC7D,MAAM,WAAW,YAAY,SAAS,OAAO,WAAW,kBAAkB,IACpE,SAAS,qBAAqB,WAAW,aAAa,IACtD,KAAA;GACN,IAAI,UAAU,iBAAiB,IAAI,SAAS,gBAAgB,GAAG,WAAW,QAAQ,CAAC;QAC9E,wBAAwB,SAAS,WAAW,QAAQ;EAC7D,CAAC;EAED,MAAM,QAAQ,MAAM,KAAK,OAAO,UAAU;GACtC,IAAI,CAAC,gBAAgB,cAAc,KAAK,GAAG,OAAO;GAClD,MAAM,WAAoC,EAAE,GAAG,MAAM;GACrD,MAAM,eAAe,OAAO,SAAS,iBAAiB,WAAW,SAAS,eAAe,KAAA;GACzF,MAAM,YAAY,SAAS;GAE3B,IAAI;GACJ,IAAI,OAAO,cAAc,YAAY,UAAU,KAAK,CAAC,CAAC,SAAS,GAC3D,aAAa,UAAU,SAAS,IAAI,IAC9B,UAAU,KAAK,IACf,KAAK,YAAY,MAAM,UAAU,KAAK,CAAC;QAC1C,IAAI,gBAAgB,iBAAiB,IAAI,YAAY,GACxD,aAAa,iBAAiB,IAAI,YAAY;QAC3C,IAAI,MAAM,WAAW,YAAY,QACpC,aAAa,wBAAwB;GAGzC,IAAI,CAAC,YACD,MAAM,IAAI,MAAM,aAAa,gBAAgB,IAAI,QAAQ,mBAAmB,aAAa,oDAAoD;GAGjJ,SAAS,SAAS,IAAI,cAAc,UAAU;GAC9C,OAAO;EACX,CAAC;EAED,MAAM,cAAc,KAAK,uBAAuB,OAAO,CAAC;EACxD,IAAI,YAAY,SAAS,OAAO,WAAW,kBAAkB,GACzD,SAAS,eAAe,WAAW;OAEnC,cAAc,sBAAsB;GAAE,MAAM;GAAa;EAAY,CAAC;CAE9E;;;;;CAMA,YAAoB,MAAkB,YAA4B;EAC9D,MAAM,aAAa,KAAK,kBAAkB,UAAU;EACpD,IAAI,CAAC,YACD,MAAM,IAAI,MAAM,8BAA8B,WAAW,uBAAuB,KAAK,eAAe,EAAE;EAG1G,MAAM,aAAa,KAAK,qBAAqB,UAAU;EACvD,IAAI,CAAC,YACD,MAAM,IAAI,MAAM,8BAA8B,WAAW,KAAK,WAAW,YAAY,EAAE,kCAAkC;EAG7H,IAAI,WAAW,YAAY,MAAM,KAAK,YAAY,KAAK,CAAC,KAAK,iBAAiB,MAAM,UAAU,GAAG;GAC7F,MAAM,WAAW,OAAK,SAAS,OAAK,QAAQ,KAAK,YAAY,CAAC,GAAG,WAAW,YAAY,CAAC,CAAC,CACrF,MAAM,OAAK,GAAG,CAAC,CACf,KAAK,GAAG,CAAC,CACT,QAAQ,WAAW,KAAK;GAC7B,KAAK,qBAAqB;IACtB,eAAe;IACf,iBAAiB,SAAS,WAAW,GAAG,IAAI,WAAW,KAAK;GAChE,CAAC;EACL;EAEA,OAAO,SAAS;CACpB;CAEA,iBAAyB,MAAkB,YAA6B;EACpE,OAAO,KAAK,sBAAsB,CAAC,CAAC,MAAK,SAAQ,KAAK,iBAAiB,CAAC,EAAE,QAAQ,MAAM,UAAU;CACtG;CAEA,qBAA6B,MAAsC;EAE/D,MAAM,QADc,KAAK,uBAAuB,CAAC,EAAE,gBAAgB,CAAC,CAAC,GAAA,EAC3C,OAAO,WAAW,gBAAgB,CAAC,EAAE,cAAc;EAC7E,IAAI,QAAQ,KAAK,QAAQ,MAAM,WAAW,YAAY,OAAO,KAAK,QAAQ;EAE1E,KAAK,MAAM,WAAW,KAAK,wBAAwB,GAC/C,IAAI,KAAK,uBAAuB,QAAQ,eAAe,CAAC,GAAG,OAAO,QAAQ,QAAQ;CAG1F;CAEA,MAAa,iBAAiB,cAAsB;EAChD,MAAM,OAAO,KAAK,kBAAkB,YAAY;EAChD,IAAI,MACA,KAAK,sBAAsB;CAEnC;AACJ;;;ACplBA,SAAgB,yBAAyB,gBAAuC;CAC5E,MAAM,SAAS,IAAI,KAAc;CACjC,OAAO,QAAQ,YAAY;CAC3B,MAAM,SAAS,IAAI,gBAAgB,cAAc;CAEjD,OAAO,KAAK,kBAAkB,OAAO,MAAM;EAEvC,MAAM,EAAE,cAAc,aAAa,mBAAmB,MADnC,EAAE,IAAI,KAAK;EAE9B,MAAM,OAAO,aAAa,cAAc,aAAa,cAAc;EACnE,OAAO,EAAE,KAAK,EAAE,SAAS,KAAK,CAAC;CACnC,CAAC;CAED,OAAO,KAAK,oBAAoB,OAAO,MAAM;EAEzC,MAAM,EAAE,cAAc,gBAAgB,MADnB,EAAE,IAAI,KAAK;EAE9B,MAAM,OAAO,eAAe,cAAc,WAAW;EACrD,OAAO,EAAE,KAAK,EAAE,SAAS,KAAK,CAAC;CACnC,CAAC;;;;;;;;CASD,OAAO,KAAK,oBAAoB,OAAO,MAAM;EAEzC,MAAM,EAAE,cAAc,gBAAgB,YAAY,MAD/B,EAAE,IAAI,KAAK;EAE9B,MAAM,OAAO,eAAe,cAAc,gBAAgB,EAAE,SAAS,YAAY,KAAK,CAAC;EACvF,OAAO,EAAE,KAAK,EAAE,SAAS,KAAK,CAAC;CACnC,CAAC;CAED,OAAO,KAAK,sBAAsB,OAAO,MAAM;EAE3C,MAAM,EAAE,iBAAiB,MADN,EAAE,IAAI,KAAK;EAE9B,MAAM,OAAO,iBAAiB,YAAY;EAC1C,OAAO,EAAE,KAAK,EAAE,SAAS,KAAK,CAAC;CACnC,CAAC;CAED,OAAO;AACX"}
+{"version":3,"file":"schema-editor-routes-Cax2XTRj.js","names":[],"sources":["../src/api/ast-schema-editor.ts","../src/api/schema-editor-routes.ts"],"sourcesContent":["import { Project, SyntaxKind, Node, ObjectLiteralExpression, ObjectLiteralElementLike, PropertyAssignment, SourceFile, IndentationText } from \"ts-morph\";\nimport { nestAdminCollectionKeys, nestAdminPropertyKeys } from \"@rebasepro/types\";\nimport * as path from \"path\";\nimport * as fs from \"fs\";\n\n/**\n * The helpers a collection file may be wrapped in.\n *\n * `rebase init` scaffolds every collection as\n * `const postsCollection = defineCollection({ … })` — a call expression, not the\n * bare object literal `rebase introspect` emits. An editor that only understood\n * the bare form found nothing to patch in any stock project, and then rewrote the\n * file from the panel's JSON: no wrapper, no imports, no relation thunks.\n */\nconst COLLECTION_FACTORIES = new Set([\"defineCollection\"]);\n\n/**\n * A value that must be emitted as source code rather than as JSON.\n *\n * Everything reaching the writer has been through `JSON.stringify` on the wire,\n * so a function-valued key arrives either missing or as a string. A relation's\n * `target` is a thunk in the file and a slug in the payload; this is how the\n * thunk gets written back.\n */\nclass RawExpression {\n    constructor(public readonly text: string) {\n    }\n}\n\n/**\n * Move presentation keys into the `admin` block.\n *\n * The rule itself lives in `@rebasepro/types`, next to `ADMIN_COLLECTION_KEYS`,\n * because `@rebasepro/admin-types` has to apply the identical one on the panel's\n * side and this package cannot import that one. Two copies used to exist and\n * they disagreed about precedence, which decided whether a presentation edit was\n * saved or silently reverted to the value the user had just changed away from.\n */\nexport function nestAdminKeys(collectionData: Record<string, unknown>): Record<string, unknown> {\n    return nestAdminCollectionKeys(collectionData);\n}\n\nexport class AstSchemaEditor {\n    private project: Project;\n    private collectionsDir: string;\n\n    constructor(collectionsDir: string) {\n        this.project = new Project({\n            manipulationSettings: {\n                indentationText: IndentationText.FourSpaces\n            }\n        });\n        if (fs.existsSync(collectionsDir)) {\n            this.project.addSourceFilesAtPaths(`${collectionsDir}/**/*.ts`);\n        }\n        this.collectionsDir = path.resolve(collectionsDir);\n    }\n\n    /**\n     * Sanitize collectionId to prevent path traversal attacks.\n     * Only allows alphanumeric characters, underscores, and hyphens.\n     */\n    private sanitizeCollectionId(collectionId: string): string {\n        const sanitized = collectionId.replace(/[^a-zA-Z0-9_-]/g, \"\");\n        if (!sanitized || sanitized !== collectionId) {\n            throw new Error(`Invalid collection ID: \"${collectionId}\". Only alphanumeric characters, underscores, and hyphens are allowed.`);\n        }\n        return sanitized;\n    }\n\n    /**\n     * Resolve a file path and ensure it falls within the collectionsDir.\n     */\n    private safePath(filename: string): string {\n        const resolved = path.resolve(this.collectionsDir, filename);\n        if (!resolved.startsWith(this.collectionsDir + path.sep) && resolved !== this.collectionsDir) {\n            throw new Error(\"Path traversal detected: resolved path is outside the collections directory.\");\n        }\n        return resolved;\n    }\n\n    private getCollectionFile(collectionId: string) {\n        const safeId = this.sanitizeCollectionId(collectionId);\n        const filePath = this.safePath(`${safeId}.ts`);\n        let file = this.project.getSourceFile(filePath);\n        if (!file && fs.existsSync(filePath)) {\n            this.project.addSourceFilesAtPaths(`${this.collectionsDir}/**/*.ts`);\n            file = this.project.getSourceFile(filePath);\n        }\n        return file;\n    }\n\n    /**\n     * Find the object literal a collection is declared with, through whatever\n     * wraps it.\n     *\n     * `defineCollection({ … })` is the shape `rebase init` writes and the one the\n     * docs recommend; `satisfies` / `as` / parentheses are the other ways an\n     * author can dress the same literal. Returning `null` for any of them meant\n     * the three callers below each failed differently, and the worst of them\n     * overwrote the file.\n     */\n    private unwrapCollectionObject(node: Node | undefined): ObjectLiteralExpression | null {\n        if (!node) return null;\n        if (Node.isObjectLiteralExpression(node)) return node;\n        if (Node.isParenthesizedExpression(node) ||\n            Node.isAsExpression(node) ||\n            Node.isSatisfiesExpression(node) ||\n            Node.isTypeAssertion(node) ||\n            Node.isNonNullExpression(node)) {\n            return this.unwrapCollectionObject(node.getExpression());\n        }\n        if (Node.isCallExpression(node)) {\n            // `defineCollection`, `admin.defineCollection`, `defineCollection<Post>`\n            const callee = node.getExpression().getText().split(\".\").pop();\n            if (callee && COLLECTION_FACTORIES.has(callee)) {\n                return this.unwrapCollectionObject(node.getArguments()[0]);\n            }\n        }\n        return null;\n    }\n\n    private getCollectionObject(collectionId: string): ObjectLiteralExpression | null {\n        const file = this.getCollectionFile(collectionId);\n        if (!file) return null;\n\n        const defaultExport = file.getDefaultExportSymbol();\n        if (defaultExport) {\n            const declaration = defaultExport.getDeclarations()[0];\n            if (declaration && declaration.getKind() === SyntaxKind.ExportAssignment) {\n                const expr = declaration.asKind(SyntaxKind.ExportAssignment)?.getExpression();\n                if (expr && expr.getKind() === SyntaxKind.Identifier) {\n                    const varName = expr.getText();\n                    const varDecl = file.getVariableDeclaration(varName);\n                    const unwrapped = this.unwrapCollectionObject(varDecl?.getInitializer());\n                    if (unwrapped) return unwrapped;\n                } else {\n                    // `export default defineCollection({ … })`\n                    const unwrapped = this.unwrapCollectionObject(expr);\n                    if (unwrapped) return unwrapped;\n                }\n            }\n        }\n        // Fallback: the first VariableDeclaration that holds a collection literal\n        for (const varDecl of file.getVariableDeclarations()) {\n            const init = this.unwrapCollectionObject(varDecl.getInitializer());\n            if (init) return init;\n        }\n        return null;\n    }\n\n    /**\n     * The collection's object literal, or a refusal that says what to do.\n     *\n     * Every caller needs this to be all-or-nothing: a missing object literal used\n     * to mean \"throw\", \"report success and do nothing\" and \"recreate the file\n     * from scratch\" depending on which method you called.\n     */\n    private requireCollectionObject(collectionId: string): ObjectLiteralExpression {\n        const file = this.getCollectionFile(collectionId);\n        if (!file) {\n            throw new Error(`Collection \"${collectionId}\" has no file at ${path.join(this.collectionsDir, `${collectionId}.ts`)}.`);\n        }\n        const collectionObj = this.getCollectionObject(collectionId);\n        if (!collectionObj) {\n            throw new Error(this.unreadableFileMessage(collectionId, file));\n        }\n        return collectionObj;\n    }\n\n    private unreadableFileMessage(collectionId: string, file: SourceFile): string {\n        return `Could not find the collection object in ${file.getFilePath()}. ` +\n            \"The schema editor can only edit a collection declared as `const x = defineCollection({ … })` \" +\n            \"or `const x: CollectionConfig = { … }` and exported as the file's default. \" +\n            `Edit \"${collectionId}\" in code instead.`;\n    }\n\n    /** Look a key up on an object literal, quoted or not. */\n    private findProperty(obj: ObjectLiteralExpression, name: string): ObjectLiteralElementLike | undefined {\n        return obj.getProperty((p: ObjectLiteralElementLike) =>\n            \"getName\" in p &&\n            typeof (p as PropertyAssignment).getName === \"function\" &&\n            ((p as PropertyAssignment).getName() === name ||\n                (p as PropertyAssignment).getName() === `\"${name}\"` ||\n                (p as PropertyAssignment).getName() === `'${name}'`));\n    }\n\n    private static quoteKey(key: string): string {\n        return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(key) ? key : JSON.stringify(key);\n    }\n\n    private static isPlainObject(value: unknown): value is Record<string, unknown> {\n        return typeof value === \"object\" && value !== null && !Array.isArray(value) && !(value instanceof RawExpression);\n    }\n\n    private convertJsonToAstString(obj: unknown, indentLevel = 0, oldAstNode?: ObjectLiteralExpression): string {\n        // Base TS-morph parses arrays as 2 levels deep from the property key:\n        // PropertiesObject = level 1, PropertyConfig = level 2.\n        // We calibrate the spacing multiples to keep the items flush with standard TS format.\n        const indentStr = \"    \";\n        const indent = indentStr.repeat(indentLevel);\n        const innerIndent = indentStr.repeat(indentLevel + 1);\n\n        if (obj instanceof RawExpression) {\n            return obj.text;\n        }\n        if (obj === null || obj === undefined) {\n            return \"undefined\";\n        }\n        if (typeof obj === \"string\") {\n            return JSON.stringify(obj);\n        }\n        if (typeof obj === \"number\" || typeof obj === \"boolean\") {\n            return String(obj);\n        }\n        if (Array.isArray(obj)) {\n            if (obj.length === 0) return \"[]\";\n            const items = obj.map(item => this.convertJsonToAstString(item, indentLevel + 1));\n            return `[\\n${innerIndent}${items.join(`,\\n${innerIndent}`)}\\n${indent}]`;\n        }\n        if (typeof obj === \"object\") {\n            const record = obj as Record<string, unknown>;\n            const keys = Object.keys(record);\n\n            // Collect preserved AST properties\n            const preservedProps: string[] = [];\n            if (oldAstNode) {\n                const oldProps = oldAstNode.getProperties();\n                for (const oldProp of oldProps) {\n                    if (oldProp.isKind(SyntaxKind.PropertyAssignment)) {\n                        const nameNode = oldProp.getNameNode();\n                        let name = nameNode.getText();\n                        if (name.startsWith('\"') && name.endsWith('\"')) name = name.slice(1, -1);\n                        if (name.startsWith(\"'\") && name.endsWith(\"'\")) name = name.slice(1, -1);\n\n                        // If the JSON object doesn't have this key, check if we should preserve it\n                        if (!(name in record)) {\n                            const init = oldProp.getInitializer();\n                            if (init) {\n                                const kind = init.getKind();\n                                const isCode = kind === SyntaxKind.ArrowFunction ||\n                                    kind === SyntaxKind.FunctionExpression ||\n                                    kind === SyntaxKind.Identifier ||\n                                    kind === SyntaxKind.CallExpression ||\n                                    kind === SyntaxKind.JsxElement;\n\n                                if (isCode || name === \"target\" || name === \"callbacks\" || name === \"permissions\" || name === \"securityRules\") {\n                                    // Preserve this property exactly as it was\n                                    preservedProps.push(`${AstSchemaEditor.quoteKey(name)}: ${init.getText()}`);\n                                }\n                            }\n                        }\n                    }\n                }\n            }\n\n            if (keys.length === 0 && preservedProps.length === 0) return \"{}\";\n\n            const props = keys.map(key => {\n                const keyStr = AstSchemaEditor.quoteKey(key);\n\n                // If the value is an object, pass the old AST node to recurse\n                let childAstNode: ObjectLiteralExpression | undefined;\n                if (oldAstNode && AstSchemaEditor.isPlainObject(record[key])) {\n                    const oldProp = this.findProperty(oldAstNode, key);\n                    if (oldProp && oldProp.isKind(SyntaxKind.PropertyAssignment)) {\n                        childAstNode = oldProp.getInitializerIfKind(SyntaxKind.ObjectLiteralExpression);\n                    }\n                }\n\n                return `${keyStr}: ${this.convertJsonToAstString(record[key], indentLevel + 1, childAstNode)}`;\n            });\n\n            const allProps = [...props, ...preservedProps];\n            return `{\\n${innerIndent}${allProps.join(`,\\n${innerIndent}`)}\\n${indent}}`;\n        }\n        return \"undefined\";\n    }\n\n    /**\n     * Write only the keys the patch names, leaving every sibling alone.\n     *\n     * A patch says what changed, not what the collection is. The panel sends one\n     * — `{ propertiesOrder }` is what adding a column posts — and rewriting the\n     * `admin` block from it deleted the collection's icon, group, list columns\n     * and kanban config in the same write.\n     */\n    private mergeIntoObjectLiteral(target: ObjectLiteralExpression, data: Record<string, unknown>, indentLevel: number): void {\n        for (const [key, value] of Object.entries(data)) {\n            const existing = this.findProperty(target, key);\n            const existingObj = existing && existing.isKind(SyntaxKind.PropertyAssignment)\n                ? existing.getInitializerIfKind(SyntaxKind.ObjectLiteralExpression)\n                : undefined;\n\n            if (existingObj && AstSchemaEditor.isPlainObject(value)) {\n                this.mergeIntoObjectLiteral(existingObj, value, indentLevel + 1);\n                continue;\n            }\n\n            const initializer = this.convertJsonToAstString(value, indentLevel, existingObj);\n            if (existing && existing.isKind(SyntaxKind.PropertyAssignment)) {\n                existing.setInitializer(initializer);\n            } else {\n                target.addPropertyAssignment({\n                    name: AstSchemaEditor.quoteKey(key),\n                    initializer\n                });\n            }\n        }\n    }\n\n    public async saveProperty(collectionId: string, propertyKey: string, propertyConfig: Record<string, unknown>) {\n        const collectionObj = this.requireCollectionObject(collectionId);\n\n        // The panel's property forms bind to the flat names — `readOnly`,\n        // `hideFromCollection` — while on disk they belong inside the property's\n        // own `admin` block. Written flat they are not merely ignored: the boot\n        // validator treats a moved key as fatal.\n        const nestedConfig = nestAdminPropertyKeys(propertyConfig);\n\n        let propertiesProp = collectionObj.getProperty(\"properties\") as PropertyAssignment;\n        if (!propertiesProp) {\n            propertiesProp = collectionObj.addPropertyAssignment({\n                name: \"properties\",\n                initializer: \"{}\"\n            });\n        }\n\n        const propsObj = propertiesProp.getInitializerIfKind(SyntaxKind.ObjectLiteralExpression);\n        if (propsObj) {\n            const existingProp = this.findProperty(propsObj, propertyKey);\n\n            let oldPropAstNode: ObjectLiteralExpression | undefined;\n            if (existingProp && existingProp.isKind(SyntaxKind.PropertyAssignment)) {\n                oldPropAstNode = existingProp.getInitializerIfKind(SyntaxKind.ObjectLiteralExpression);\n            }\n\n            const newInitializer = this.convertJsonToAstString(nestedConfig, 2, oldPropAstNode);\n\n            if (existingProp) {\n                if (existingProp.isKind(SyntaxKind.PropertyAssignment)) {\n                    existingProp.setInitializer(newInitializer);\n                }\n            } else {\n                propsObj.addPropertyAssignment({\n                    name: AstSchemaEditor.quoteKey(propertyKey),\n                    initializer: newInitializer\n                });\n            }\n\n            const file = this.getCollectionFile(collectionId);\n            if (file) {\n                file.formatText();\n            }\n            await this.project.save();\n        }\n    }\n\n    public async deleteProperty(collectionId: string, propertyKey: string) {\n        const collectionObj = this.requireCollectionObject(collectionId);\n\n        const propertiesProp = collectionObj.getProperty(\"properties\") as PropertyAssignment;\n        if (propertiesProp) {\n            const propsObj = propertiesProp.getInitializerIfKind(SyntaxKind.ObjectLiteralExpression);\n            if (propsObj) {\n                const existingProp = this.findProperty(propsObj, propertyKey);\n                if (existingProp) {\n                    existingProp.remove();\n                    const file = this.getCollectionFile(collectionId);\n                    if (file) {\n                        file.formatText();\n                    }\n                    await this.project.save();\n                }\n            }\n        }\n    }\n\n    /**\n     * Write a collection back to its file.\n     *\n     * `partial` is the difference between \"this is the collection\" and \"this is\n     * what changed about it\". The panel sends both — a full save from the editor\n     * dialog, and a one-key patch whenever a property is added, deleted or\n     * reordered — and they cannot be told apart by looking at the payload. Read\n     * as a full save, a patch deletes everything it does not mention, including\n     * `securityRules`; the loader then hands the collection the directory\n     * default, which in the scaffold is `access: \"public\"`.\n     */\n    public async saveCollection(collectionId: string, collectionData: Record<string, unknown>, options: { partial?: boolean } = {}) {\n        const partial = options.partial === true;\n        let file = this.getCollectionFile(collectionId);\n        const collectionObj = file ? this.getCollectionObject(collectionId) : null;\n\n        if (file && !collectionObj) {\n            // The file is there and we could not read it. Recreating it from the\n            // panel's JSON would drop the imports, the callbacks and the relation\n            // thunks that JSON cannot carry.\n            throw new Error(this.unreadableFileMessage(collectionId, file));\n        }\n\n        if (!file || !collectionObj) {\n            if (partial) {\n                throw new Error(`Cannot apply a partial update to \"${collectionId}\": it has no collection file yet.`);\n            }\n            // Create a new file\n            const safeId = this.sanitizeCollectionId(collectionId);\n            const newFilePath = this.safePath(`${safeId}.ts`);\n            if (fs.existsSync(newFilePath)) {\n                throw new Error(`Refusing to overwrite ${newFilePath}: a file for \"${collectionId}\" already exists but could not be parsed.`);\n            }\n            file = this.project.createSourceFile(newFilePath, `import { CollectionConfig } from \"@rebasepro/types\";\\n\\nconst ${safeId}Collection: CollectionConfig = ${this.convertJsonToAstString(nestAdminKeys(collectionData))};\\n\\nexport default ${safeId}Collection;\\n`);\n        } else {\n            // Update root level properties gracefully\n\n            if (!partial) {\n                // Force delete securityRules if empty or undefined to handle Formex / serialization stripping\n                if (!(\"securityRules\" in collectionData) || collectionData.securityRules === undefined || (Array.isArray(collectionData.securityRules) && collectionData.securityRules.length === 0)) {\n                    const srProp = collectionObj.getProperty(\"securityRules\");\n                    if (srProp) {\n                        srProp.remove();\n                    }\n\n                    // If it was in collectionData as an empty array, delete it so the loop below doesn't add it back as \"[]\"\n                    // Actually, if it's \"[]\", omitting it entirely from the TS file achieves the same logical effect (no RLS rules)\n                    // and correctly triggers \"unmapped policies\" if the DB still has them.\n                    delete collectionData[\"securityRules\"];\n                }\n            }\n\n            // The panel works with a flat view model — presentation merged onto the\n            // collection — so what arrives here has `icon` and `listProperties` at\n            // the top level. On disk they belong inside `admin`. Writing them flat\n            // would produce a file the backend loads and ignores and the panel\n            // never reads back, which looks exactly like the edit not saving.\n            collectionData = nestAdminKeys(collectionData);\n\n            for (const key of Object.keys(collectionData)) {\n                if (key === \"relations\") {\n                    this.writeRelations(collectionId, file, collectionObj, collectionData[key]);\n                    continue;\n                }\n\n                const prop = collectionObj.getProperty(key) as PropertyAssignment;\n\n                let oldAstNode: ObjectLiteralExpression | undefined;\n                if (prop && prop.isKind(SyntaxKind.PropertyAssignment)) {\n                    oldAstNode = prop.getInitializerIfKind(SyntaxKind.ObjectLiteralExpression);\n                }\n\n                if (partial && oldAstNode && AstSchemaEditor.isPlainObject(collectionData[key])) {\n                    this.mergeIntoObjectLiteral(oldAstNode, collectionData[key] as Record<string, unknown>, 2);\n                    continue;\n                }\n\n                const newInit = this.convertJsonToAstString(collectionData[key], 1, oldAstNode);\n                if (prop) {\n                    prop.setInitializer(newInit);\n                } else {\n                    collectionObj.addPropertyAssignment({\n                        name: key,\n                        initializer: newInit\n                    });\n                }\n            }\n        }\n        if (file) {\n            file.formatText();\n        }\n        await this.project.save();\n    }\n\n    /**\n     * Write the collection-level `relations` array.\n     *\n     * Relations are the one key whose values are not all data: `target` is a\n     * thunk in the file, and the panel sends the target collection's slug (or,\n     * for a relation it did not touch, nothing at all — `JSON.stringify` drops\n     * the function). So each entry's target is resolved in that order: a slug\n     * becomes `() => xCollection` plus the import it needs, and anything else\n     * falls back to the thunk already in the file.\n     *\n     * This used to be a `continue` with a comment saying relations were handled\n     * elsewhere. Nothing handled them; every edit in the Relations tab was\n     * dropped without a word.\n     */\n    private writeRelations(collectionId: string, file: SourceFile, collectionObj: ObjectLiteralExpression, value: unknown): void {\n        if (!Array.isArray(value)) return;\n\n        const existing = this.findProperty(collectionObj, \"relations\");\n        const oldArray = existing && existing.isKind(SyntaxKind.PropertyAssignment)\n            ? existing.getInitializerIfKind(SyntaxKind.ArrayLiteralExpression)\n            : undefined;\n\n        const oldElements = oldArray?.getElements() ?? [];\n        const oldTargetsByName = new Map<string, string>();\n        // Only for entries the file left unnamed — `relationName` is optional, and\n        // those cannot be matched any other way. Positional matching is off the\n        // moment the array's length changes, because then a position no longer\n        // means the same relation.\n        const anonymousTargetsByIndex: (string | undefined)[] = [];\n        oldElements.forEach((element, index) => {\n            const elementObj = element.asKind(SyntaxKind.ObjectLiteralExpression);\n            if (!elementObj) return;\n            const targetProp = this.findProperty(elementObj, \"target\");\n            const targetInit = targetProp && targetProp.isKind(SyntaxKind.PropertyAssignment)\n                ? targetProp.getInitializer()\n                : undefined;\n            if (!targetInit) return;\n\n            const nameProp = this.findProperty(elementObj, \"relationName\");\n            const nameInit = nameProp && nameProp.isKind(SyntaxKind.PropertyAssignment)\n                ? nameProp.getInitializerIfKind(SyntaxKind.StringLiteral)\n                : undefined;\n            if (nameInit) oldTargetsByName.set(nameInit.getLiteralValue(), targetInit.getText());\n            else anonymousTargetsByIndex[index] = targetInit.getText();\n        });\n\n        const items = value.map((entry, index) => {\n            if (!AstSchemaEditor.isPlainObject(entry)) return entry;\n            const relation: Record<string, unknown> = { ...entry };\n            const relationName = typeof relation.relationName === \"string\" ? relation.relationName : undefined;\n            const rawTarget = relation.target;\n\n            let targetText: string | undefined;\n            if (typeof rawTarget === \"string\" && rawTarget.trim().length > 0) {\n                targetText = rawTarget.includes(\"=>\")\n                    ? rawTarget.trim()\n                    : this.targetThunk(file, rawTarget.trim());\n            } else if (relationName && oldTargetsByName.has(relationName)) {\n                targetText = oldTargetsByName.get(relationName);\n            } else if (value.length === oldElements.length) {\n                targetText = anonymousTargetsByIndex[index];\n            }\n\n            if (!targetText) {\n                throw new Error(`Relation \"${relationName ?? `#${index}`}\" on collection \"${collectionId}\" has no target collection. Pick one before saving.`);\n            }\n\n            relation.target = new RawExpression(targetText);\n            return relation;\n        });\n\n        const initializer = this.convertJsonToAstString(items, 1);\n        if (existing && existing.isKind(SyntaxKind.PropertyAssignment)) {\n            existing.setInitializer(initializer);\n        } else {\n            collectionObj.addPropertyAssignment({ name: \"relations\", initializer });\n        }\n    }\n\n    /**\n     * `() => targetCollection` for a target named by its slug, importing it if\n     * the file does not already.\n     */\n    private targetThunk(file: SourceFile, targetSlug: string): string {\n        const targetFile = this.getCollectionFile(targetSlug);\n        if (!targetFile) {\n            throw new Error(`Cannot link to collection \"${targetSlug}\": no file for it in ${this.collectionsDir}.`);\n        }\n\n        const identifier = this.getDefaultExportName(targetFile);\n        if (!identifier) {\n            throw new Error(`Cannot link to collection \"${targetSlug}\": ${targetFile.getFilePath()} has no default export to import.`);\n        }\n\n        if (targetFile.getFilePath() !== file.getFilePath() && !this.hasDefaultImport(file, identifier)) {\n            const relative = path.relative(path.dirname(file.getFilePath()), targetFile.getFilePath())\n                .split(path.sep)\n                .join(\"/\")\n                .replace(/\\.tsx?$/, \".js\");\n            file.addImportDeclaration({\n                defaultImport: identifier,\n                moduleSpecifier: relative.startsWith(\".\") ? relative : `./${relative}`\n            });\n        }\n\n        return `() => ${identifier}`;\n    }\n\n    private hasDefaultImport(file: SourceFile, identifier: string): boolean {\n        return file.getImportDeclarations().some(decl => decl.getDefaultImport()?.getText() === identifier);\n    }\n\n    private getDefaultExportName(file: SourceFile): string | undefined {\n        const declaration = file.getDefaultExportSymbol()?.getDeclarations()[0];\n        const expr = declaration?.asKind(SyntaxKind.ExportAssignment)?.getExpression();\n        if (expr && expr.getKind() === SyntaxKind.Identifier) return expr.getText();\n\n        for (const varDecl of file.getVariableDeclarations()) {\n            if (this.unwrapCollectionObject(varDecl.getInitializer())) return varDecl.getName();\n        }\n        return undefined;\n    }\n\n    public async deleteCollection(collectionId: string) {\n        const file = this.getCollectionFile(collectionId);\n        if (file) {\n            file.deleteImmediatelySync();\n        }\n    }\n}\n","import { Hono } from \"hono\";\nimport { AstSchemaEditor } from \"./ast-schema-editor\";\nimport { errorHandler } from \"./errors\";\nimport { HonoEnv } from \"./types\";\n\nexport function createSchemaEditorRoutes(collectionsDir: string): Hono<HonoEnv> {\n    const router = new Hono<HonoEnv>();\n    router.onError(errorHandler);\n    const editor = new AstSchemaEditor(collectionsDir);\n\n    router.post(\"/property/save\", async (c) => {\n        const body = await c.req.json();\n        const { collectionId, propertyKey, propertyConfig } = body;\n        await editor.saveProperty(collectionId, propertyKey, propertyConfig);\n        return c.json({ success: true });\n    });\n\n    router.post(\"/property/delete\", async (c) => {\n        const body = await c.req.json();\n        const { collectionId, propertyKey } = body;\n        await editor.deleteProperty(collectionId, propertyKey);\n        return c.json({ success: true });\n    });\n\n    /**\n     * `partial: true` means \"this payload is what changed\", not \"this is the\n     * collection\". Without it a one-key patch — which is what adding a column\n     * posts — is read as a whole-collection save and deletes everything it does\n     * not mention, `securityRules` included. Absent, it defaults to a full save,\n     * so an older panel keeps the behaviour it was written against.\n     */\n    router.post(\"/collection/save\", async (c) => {\n        const body = await c.req.json();\n        const { collectionId, collectionData, partial } = body;\n        await editor.saveCollection(collectionId, collectionData, { partial: partial === true });\n        return c.json({ success: true });\n    });\n\n    router.post(\"/collection/delete\", async (c) => {\n        const body = await c.req.json();\n        const { collectionId } = body;\n        await editor.deleteCollection(collectionId);\n        return c.json({ success: true });\n    });\n\n    return router;\n}\n\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAcA,IAAM,uCAAuB,IAAI,IAAI,CAAC,kBAAkB,CAAC;;;;;;;;;AAUzD,IAAM,gBAAN,MAAoB;CACY;CAA5B,YAAY,MAA8B;EAAd,KAAA,OAAA;CAC5B;AACJ;;;;;;;;;;AAWA,SAAgB,cAAc,gBAAkE;CAC5F,OAAO,wBAAwB,cAAc;AACjD;AAEA,IAAa,kBAAb,MAAa,gBAAgB;CACzB;CACA;CAEA,YAAY,gBAAwB;EAChC,KAAK,UAAU,IAAI,QAAQ,EACvB,sBAAsB,EAClB,iBAAiB,gBAAgB,WACrC,EACJ,CAAC;EACD,IAAI,KAAG,WAAW,cAAc,GAC5B,KAAK,QAAQ,sBAAsB,GAAG,eAAe,SAAS;EAElE,KAAK,iBAAiB,OAAK,QAAQ,cAAc;CACrD;;;;;CAMA,qBAA6B,cAA8B;EACvD,MAAM,YAAY,aAAa,QAAQ,mBAAmB,EAAE;EAC5D,IAAI,CAAC,aAAa,cAAc,cAC5B,MAAM,IAAI,MAAM,2BAA2B,aAAa,uEAAuE;EAEnI,OAAO;CACX;;;;CAKA,SAAiB,UAA0B;EACvC,MAAM,WAAW,OAAK,QAAQ,KAAK,gBAAgB,QAAQ;EAC3D,IAAI,CAAC,SAAS,WAAW,KAAK,iBAAiB,OAAK,GAAG,KAAK,aAAa,KAAK,gBAC1E,MAAM,IAAI,MAAM,8EAA8E;EAElG,OAAO;CACX;CAEA,kBAA0B,cAAsB;EAC5C,MAAM,SAAS,KAAK,qBAAqB,YAAY;EACrD,MAAM,WAAW,KAAK,SAAS,GAAG,OAAO,IAAI;EAC7C,IAAI,OAAO,KAAK,QAAQ,cAAc,QAAQ;EAC9C,IAAI,CAAC,QAAQ,KAAG,WAAW,QAAQ,GAAG;GAClC,KAAK,QAAQ,sBAAsB,GAAG,KAAK,eAAe,SAAS;GACnE,OAAO,KAAK,QAAQ,cAAc,QAAQ;EAC9C;EACA,OAAO;CACX;;;;;;;;;;;CAYA,uBAA+B,MAAwD;EACnF,IAAI,CAAC,MAAM,OAAO;EAClB,IAAI,KAAK,0BAA0B,IAAI,GAAG,OAAO;EACjD,IAAI,KAAK,0BAA0B,IAAI,KACnC,KAAK,eAAe,IAAI,KACxB,KAAK,sBAAsB,IAAI,KAC/B,KAAK,gBAAgB,IAAI,KACzB,KAAK,oBAAoB,IAAI,GAC7B,OAAO,KAAK,uBAAuB,KAAK,cAAc,CAAC;EAE3D,IAAI,KAAK,iBAAiB,IAAI,GAAG;GAE7B,MAAM,SAAS,KAAK,cAAc,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI;GAC7D,IAAI,UAAU,qBAAqB,IAAI,MAAM,GACzC,OAAO,KAAK,uBAAuB,KAAK,aAAa,CAAC,CAAC,EAAE;EAEjE;EACA,OAAO;CACX;CAEA,oBAA4B,cAAsD;EAC9E,MAAM,OAAO,KAAK,kBAAkB,YAAY;EAChD,IAAI,CAAC,MAAM,OAAO;EAElB,MAAM,gBAAgB,KAAK,uBAAuB;EAClD,IAAI,eAAe;GACf,MAAM,cAAc,cAAc,gBAAgB,CAAC,CAAC;GACpD,IAAI,eAAe,YAAY,QAAQ,MAAM,WAAW,kBAAkB;IACtE,MAAM,OAAO,YAAY,OAAO,WAAW,gBAAgB,CAAC,EAAE,cAAc;IAC5E,IAAI,QAAQ,KAAK,QAAQ,MAAM,WAAW,YAAY;KAClD,MAAM,UAAU,KAAK,QAAQ;KAC7B,MAAM,UAAU,KAAK,uBAAuB,OAAO;KACnD,MAAM,YAAY,KAAK,uBAAuB,SAAS,eAAe,CAAC;KACvE,IAAI,WAAW,OAAO;IAC1B,OAAO;KAEH,MAAM,YAAY,KAAK,uBAAuB,IAAI;KAClD,IAAI,WAAW,OAAO;IAC1B;GACJ;EACJ;EAEA,KAAK,MAAM,WAAW,KAAK,wBAAwB,GAAG;GAClD,MAAM,OAAO,KAAK,uBAAuB,QAAQ,eAAe,CAAC;GACjE,IAAI,MAAM,OAAO;EACrB;EACA,OAAO;CACX;;;;;;;;CASA,wBAAgC,cAA+C;EAC3E,MAAM,OAAO,KAAK,kBAAkB,YAAY;EAChD,IAAI,CAAC,MACD,MAAM,IAAI,MAAM,eAAe,aAAa,mBAAmB,OAAK,KAAK,KAAK,gBAAgB,GAAG,aAAa,IAAI,EAAE,EAAE;EAE1H,MAAM,gBAAgB,KAAK,oBAAoB,YAAY;EAC3D,IAAI,CAAC,eACD,MAAM,IAAI,MAAM,KAAK,sBAAsB,cAAc,IAAI,CAAC;EAElE,OAAO;CACX;CAEA,sBAA8B,cAAsB,MAA0B;EAC1E,OAAO,2CAA2C,KAAK,YAAY,EAAE,sLAGxD,aAAa;CAC9B;;CAGA,aAAqB,KAA8B,MAAoD;EACnG,OAAO,IAAI,aAAa,MACpB,aAAa,KACb,OAAQ,EAAyB,YAAY,eAC3C,EAAyB,QAAQ,MAAM,QACpC,EAAyB,QAAQ,MAAM,IAAI,KAAK,MAChD,EAAyB,QAAQ,MAAM,IAAI,KAAK,GAAG;CAChE;CAEA,OAAe,SAAS,KAAqB;EACzC,OAAO,6BAA6B,KAAK,GAAG,IAAI,MAAM,KAAK,UAAU,GAAG;CAC5E;CAEA,OAAe,cAAc,OAAkD;EAC3E,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK,KAAK,EAAE,iBAAiB;CACtG;CAEA,uBAA+B,KAAc,cAAc,GAAG,YAA8C;EAIxG,MAAM,YAAY;EAClB,MAAM,SAAS,UAAU,OAAO,WAAW;EAC3C,MAAM,cAAc,UAAU,OAAO,cAAc,CAAC;EAEpD,IAAI,eAAe,eACf,OAAO,IAAI;EAEf,IAAI,QAAQ,QAAQ,QAAQ,KAAA,GACxB,OAAO;EAEX,IAAI,OAAO,QAAQ,UACf,OAAO,KAAK,UAAU,GAAG;EAE7B,IAAI,OAAO,QAAQ,YAAY,OAAO,QAAQ,WAC1C,OAAO,OAAO,GAAG;EAErB,IAAI,MAAM,QAAQ,GAAG,GAAG;GACpB,IAAI,IAAI,WAAW,GAAG,OAAO;GAE7B,OAAO,MAAM,cADC,IAAI,KAAI,SAAQ,KAAK,uBAAuB,MAAM,cAAc,CAAC,CACpD,CAAA,CAAM,KAAK,MAAM,aAAa,EAAE,IAAI,OAAO;EAC1E;EACA,IAAI,OAAO,QAAQ,UAAU;GACzB,MAAM,SAAS;GACf,MAAM,OAAO,OAAO,KAAK,MAAM;GAG/B,MAAM,iBAA2B,CAAC;GAClC,IAAI,YAAY;IACZ,MAAM,WAAW,WAAW,cAAc;IAC1C,KAAK,MAAM,WAAW,UAClB,IAAI,QAAQ,OAAO,WAAW,kBAAkB,GAAG;KAE/C,IAAI,OADa,QAAQ,YACd,CAAA,CAAS,QAAQ;KAC5B,IAAI,KAAK,WAAW,IAAG,KAAK,KAAK,SAAS,IAAG,GAAG,OAAO,KAAK,MAAM,GAAG,EAAE;KACvE,IAAI,KAAK,WAAW,GAAG,KAAK,KAAK,SAAS,GAAG,GAAG,OAAO,KAAK,MAAM,GAAG,EAAE;KAGvE,IAAI,EAAE,QAAQ,SAAS;MACnB,MAAM,OAAO,QAAQ,eAAe;MACpC,IAAI,MAAM;OACN,MAAM,OAAO,KAAK,QAAQ;OAO1B,IANe,SAAS,WAAW,iBAC/B,SAAS,WAAW,sBACpB,SAAS,WAAW,cACpB,SAAS,WAAW,kBACpB,SAAS,WAAW,cAEV,SAAS,YAAY,SAAS,eAAe,SAAS,iBAAiB,SAAS,iBAE1F,eAAe,KAAK,GAAG,gBAAgB,SAAS,IAAI,EAAE,IAAI,KAAK,QAAQ,GAAG;MAElF;KACJ;IACJ;GAER;GAEA,IAAI,KAAK,WAAW,KAAK,eAAe,WAAW,GAAG,OAAO;GAkB7D,OAAO,MAAM,cAAc,CADT,GAfJ,KAAK,KAAI,QAAO;IAC1B,MAAM,SAAS,gBAAgB,SAAS,GAAG;IAG3C,IAAI;IACJ,IAAI,cAAc,gBAAgB,cAAc,OAAO,IAAI,GAAG;KAC1D,MAAM,UAAU,KAAK,aAAa,YAAY,GAAG;KACjD,IAAI,WAAW,QAAQ,OAAO,WAAW,kBAAkB,GACvD,eAAe,QAAQ,qBAAqB,WAAW,uBAAuB;IAEtF;IAEA,OAAO,GAAG,OAAO,IAAI,KAAK,uBAAuB,OAAO,MAAM,cAAc,GAAG,YAAY;GAC/F,CAEqB,GAAO,GAAG,cACJ,CAAA,CAAS,KAAK,MAAM,aAAa,EAAE,IAAI,OAAO;EAC7E;EACA,OAAO;CACX;;;;;;;;;CAUA,uBAA+B,QAAiC,MAA+B,aAA2B;EACtH,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,IAAI,GAAG;GAC7C,MAAM,WAAW,KAAK,aAAa,QAAQ,GAAG;GAC9C,MAAM,cAAc,YAAY,SAAS,OAAO,WAAW,kBAAkB,IACvE,SAAS,qBAAqB,WAAW,uBAAuB,IAChE,KAAA;GAEN,IAAI,eAAe,gBAAgB,cAAc,KAAK,GAAG;IACrD,KAAK,uBAAuB,aAAa,OAAO,cAAc,CAAC;IAC/D;GACJ;GAEA,MAAM,cAAc,KAAK,uBAAuB,OAAO,aAAa,WAAW;GAC/E,IAAI,YAAY,SAAS,OAAO,WAAW,kBAAkB,GACzD,SAAS,eAAe,WAAW;QAEnC,OAAO,sBAAsB;IACzB,MAAM,gBAAgB,SAAS,GAAG;IAClC;GACJ,CAAC;EAET;CACJ;CAEA,MAAa,aAAa,cAAsB,aAAqB,gBAAyC;EAC1G,MAAM,gBAAgB,KAAK,wBAAwB,YAAY;EAM/D,MAAM,eAAe,sBAAsB,cAAc;EAEzD,IAAI,iBAAiB,cAAc,YAAY,YAAY;EAC3D,IAAI,CAAC,gBACD,iBAAiB,cAAc,sBAAsB;GACjD,MAAM;GACN,aAAa;EACjB,CAAC;EAGL,MAAM,WAAW,eAAe,qBAAqB,WAAW,uBAAuB;EACvF,IAAI,UAAU;GACV,MAAM,eAAe,KAAK,aAAa,UAAU,WAAW;GAE5D,IAAI;GACJ,IAAI,gBAAgB,aAAa,OAAO,WAAW,kBAAkB,GACjE,iBAAiB,aAAa,qBAAqB,WAAW,uBAAuB;GAGzF,MAAM,iBAAiB,KAAK,uBAAuB,cAAc,GAAG,cAAc;GAElF,IAAI;QACI,aAAa,OAAO,WAAW,kBAAkB,GACjD,aAAa,eAAe,cAAc;GAAA,OAG9C,SAAS,sBAAsB;IAC3B,MAAM,gBAAgB,SAAS,WAAW;IAC1C,aAAa;GACjB,CAAC;GAGL,MAAM,OAAO,KAAK,kBAAkB,YAAY;GAChD,IAAI,MACA,KAAK,WAAW;GAEpB,MAAM,KAAK,QAAQ,KAAK;EAC5B;CACJ;CAEA,MAAa,eAAe,cAAsB,aAAqB;EAGnE,MAAM,iBAFgB,KAAK,wBAAwB,YAE5B,CAAA,CAAc,YAAY,YAAY;EAC7D,IAAI,gBAAgB;GAChB,MAAM,WAAW,eAAe,qBAAqB,WAAW,uBAAuB;GACvF,IAAI,UAAU;IACV,MAAM,eAAe,KAAK,aAAa,UAAU,WAAW;IAC5D,IAAI,cAAc;KACd,aAAa,OAAO;KACpB,MAAM,OAAO,KAAK,kBAAkB,YAAY;KAChD,IAAI,MACA,KAAK,WAAW;KAEpB,MAAM,KAAK,QAAQ,KAAK;IAC5B;GACJ;EACJ;CACJ;;;;;;;;;;;;CAaA,MAAa,eAAe,cAAsB,gBAAyC,UAAiC,CAAC,GAAG;EAC5H,MAAM,UAAU,QAAQ,YAAY;EACpC,IAAI,OAAO,KAAK,kBAAkB,YAAY;EAC9C,MAAM,gBAAgB,OAAO,KAAK,oBAAoB,YAAY,IAAI;EAEtE,IAAI,QAAQ,CAAC,eAIT,MAAM,IAAI,MAAM,KAAK,sBAAsB,cAAc,IAAI,CAAC;EAGlE,IAAI,CAAC,QAAQ,CAAC,eAAe;GACzB,IAAI,SACA,MAAM,IAAI,MAAM,qCAAqC,aAAa,kCAAkC;GAGxG,MAAM,SAAS,KAAK,qBAAqB,YAAY;GACrD,MAAM,cAAc,KAAK,SAAS,GAAG,OAAO,IAAI;GAChD,IAAI,KAAG,WAAW,WAAW,GACzB,MAAM,IAAI,MAAM,yBAAyB,YAAY,gBAAgB,aAAa,0CAA0C;GAEhI,OAAO,KAAK,QAAQ,iBAAiB,aAAa,iEAAiE,OAAO,iCAAiC,KAAK,uBAAuB,cAAc,cAAc,CAAC,EAAE,sBAAsB,OAAO,cAAc;EACrQ,OAAO;GAGH,IAAI,CAAC;QAEG,EAAE,mBAAmB,mBAAmB,eAAe,kBAAkB,KAAA,KAAc,MAAM,QAAQ,eAAe,aAAa,KAAK,eAAe,cAAc,WAAW,GAAI;KAClL,MAAM,SAAS,cAAc,YAAY,eAAe;KACxD,IAAI,QACA,OAAO,OAAO;KAMlB,OAAO,eAAe;IAC1B;;GAQJ,iBAAiB,cAAc,cAAc;GAE7C,KAAK,MAAM,OAAO,OAAO,KAAK,cAAc,GAAG;IAC3C,IAAI,QAAQ,aAAa;KACrB,KAAK,eAAe,cAAc,MAAM,eAAe,eAAe,IAAI;KAC1E;IACJ;IAEA,MAAM,OAAO,cAAc,YAAY,GAAG;IAE1C,IAAI;IACJ,IAAI,QAAQ,KAAK,OAAO,WAAW,kBAAkB,GACjD,aAAa,KAAK,qBAAqB,WAAW,uBAAuB;IAG7E,IAAI,WAAW,cAAc,gBAAgB,cAAc,eAAe,IAAI,GAAG;KAC7E,KAAK,uBAAuB,YAAY,eAAe,MAAiC,CAAC;KACzF;IACJ;IAEA,MAAM,UAAU,KAAK,uBAAuB,eAAe,MAAM,GAAG,UAAU;IAC9E,IAAI,MACA,KAAK,eAAe,OAAO;SAE3B,cAAc,sBAAsB;KAChC,MAAM;KACN,aAAa;IACjB,CAAC;GAET;EACJ;EACA,IAAI,MACA,KAAK,WAAW;EAEpB,MAAM,KAAK,QAAQ,KAAK;CAC5B;;;;;;;;;;;;;;;CAgBA,eAAuB,cAAsB,MAAkB,eAAwC,OAAsB;EACzH,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;EAE3B,MAAM,WAAW,KAAK,aAAa,eAAe,WAAW;EAK7D,MAAM,eAJW,YAAY,SAAS,OAAO,WAAW,kBAAkB,IACpE,SAAS,qBAAqB,WAAW,sBAAsB,IAC/D,KAAA,EAAA,EAEwB,YAAY,KAAK,CAAC;EAChD,MAAM,mCAAmB,IAAI,IAAoB;EAKjD,MAAM,0BAAkD,CAAC;EACzD,YAAY,SAAS,SAAS,UAAU;GACpC,MAAM,aAAa,QAAQ,OAAO,WAAW,uBAAuB;GACpE,IAAI,CAAC,YAAY;GACjB,MAAM,aAAa,KAAK,aAAa,YAAY,QAAQ;GACzD,MAAM,aAAa,cAAc,WAAW,OAAO,WAAW,kBAAkB,IAC1E,WAAW,eAAe,IAC1B,KAAA;GACN,IAAI,CAAC,YAAY;GAEjB,MAAM,WAAW,KAAK,aAAa,YAAY,cAAc;GAC7D,MAAM,WAAW,YAAY,SAAS,OAAO,WAAW,kBAAkB,IACpE,SAAS,qBAAqB,WAAW,aAAa,IACtD,KAAA;GACN,IAAI,UAAU,iBAAiB,IAAI,SAAS,gBAAgB,GAAG,WAAW,QAAQ,CAAC;QAC9E,wBAAwB,SAAS,WAAW,QAAQ;EAC7D,CAAC;EAED,MAAM,QAAQ,MAAM,KAAK,OAAO,UAAU;GACtC,IAAI,CAAC,gBAAgB,cAAc,KAAK,GAAG,OAAO;GAClD,MAAM,WAAoC,EAAE,GAAG,MAAM;GACrD,MAAM,eAAe,OAAO,SAAS,iBAAiB,WAAW,SAAS,eAAe,KAAA;GACzF,MAAM,YAAY,SAAS;GAE3B,IAAI;GACJ,IAAI,OAAO,cAAc,YAAY,UAAU,KAAK,CAAC,CAAC,SAAS,GAC3D,aAAa,UAAU,SAAS,IAAI,IAC9B,UAAU,KAAK,IACf,KAAK,YAAY,MAAM,UAAU,KAAK,CAAC;QAC1C,IAAI,gBAAgB,iBAAiB,IAAI,YAAY,GACxD,aAAa,iBAAiB,IAAI,YAAY;QAC3C,IAAI,MAAM,WAAW,YAAY,QACpC,aAAa,wBAAwB;GAGzC,IAAI,CAAC,YACD,MAAM,IAAI,MAAM,aAAa,gBAAgB,IAAI,QAAQ,mBAAmB,aAAa,oDAAoD;GAGjJ,SAAS,SAAS,IAAI,cAAc,UAAU;GAC9C,OAAO;EACX,CAAC;EAED,MAAM,cAAc,KAAK,uBAAuB,OAAO,CAAC;EACxD,IAAI,YAAY,SAAS,OAAO,WAAW,kBAAkB,GACzD,SAAS,eAAe,WAAW;OAEnC,cAAc,sBAAsB;GAAE,MAAM;GAAa;EAAY,CAAC;CAE9E;;;;;CAMA,YAAoB,MAAkB,YAA4B;EAC9D,MAAM,aAAa,KAAK,kBAAkB,UAAU;EACpD,IAAI,CAAC,YACD,MAAM,IAAI,MAAM,8BAA8B,WAAW,uBAAuB,KAAK,eAAe,EAAE;EAG1G,MAAM,aAAa,KAAK,qBAAqB,UAAU;EACvD,IAAI,CAAC,YACD,MAAM,IAAI,MAAM,8BAA8B,WAAW,KAAK,WAAW,YAAY,EAAE,kCAAkC;EAG7H,IAAI,WAAW,YAAY,MAAM,KAAK,YAAY,KAAK,CAAC,KAAK,iBAAiB,MAAM,UAAU,GAAG;GAC7F,MAAM,WAAW,OAAK,SAAS,OAAK,QAAQ,KAAK,YAAY,CAAC,GAAG,WAAW,YAAY,CAAC,CAAC,CACrF,MAAM,OAAK,GAAG,CAAC,CACf,KAAK,GAAG,CAAC,CACT,QAAQ,WAAW,KAAK;GAC7B,KAAK,qBAAqB;IACtB,eAAe;IACf,iBAAiB,SAAS,WAAW,GAAG,IAAI,WAAW,KAAK;GAChE,CAAC;EACL;EAEA,OAAO,SAAS;CACpB;CAEA,iBAAyB,MAAkB,YAA6B;EACpE,OAAO,KAAK,sBAAsB,CAAC,CAAC,MAAK,SAAQ,KAAK,iBAAiB,CAAC,EAAE,QAAQ,MAAM,UAAU;CACtG;CAEA,qBAA6B,MAAsC;EAE/D,MAAM,QADc,KAAK,uBAAuB,CAAC,EAAE,gBAAgB,CAAC,CAAC,GAAA,EAC3C,OAAO,WAAW,gBAAgB,CAAC,EAAE,cAAc;EAC7E,IAAI,QAAQ,KAAK,QAAQ,MAAM,WAAW,YAAY,OAAO,KAAK,QAAQ;EAE1E,KAAK,MAAM,WAAW,KAAK,wBAAwB,GAC/C,IAAI,KAAK,uBAAuB,QAAQ,eAAe,CAAC,GAAG,OAAO,QAAQ,QAAQ;CAG1F;CAEA,MAAa,iBAAiB,cAAsB;EAChD,MAAM,OAAO,KAAK,kBAAkB,YAAY;EAChD,IAAI,MACA,KAAK,sBAAsB;CAEnC;AACJ;;;ACplBA,SAAgB,yBAAyB,gBAAuC;CAC5E,MAAM,SAAS,IAAI,KAAc;CACjC,OAAO,QAAQ,YAAY;CAC3B,MAAM,SAAS,IAAI,gBAAgB,cAAc;CAEjD,OAAO,KAAK,kBAAkB,OAAO,MAAM;EAEvC,MAAM,EAAE,cAAc,aAAa,mBAAmB,MADnC,EAAE,IAAI,KAAK;EAE9B,MAAM,OAAO,aAAa,cAAc,aAAa,cAAc;EACnE,OAAO,EAAE,KAAK,EAAE,SAAS,KAAK,CAAC;CACnC,CAAC;CAED,OAAO,KAAK,oBAAoB,OAAO,MAAM;EAEzC,MAAM,EAAE,cAAc,gBAAgB,MADnB,EAAE,IAAI,KAAK;EAE9B,MAAM,OAAO,eAAe,cAAc,WAAW;EACrD,OAAO,EAAE,KAAK,EAAE,SAAS,KAAK,CAAC;CACnC,CAAC;;;;;;;;CASD,OAAO,KAAK,oBAAoB,OAAO,MAAM;EAEzC,MAAM,EAAE,cAAc,gBAAgB,YAAY,MAD/B,EAAE,IAAI,KAAK;EAE9B,MAAM,OAAO,eAAe,cAAc,gBAAgB,EAAE,SAAS,YAAY,KAAK,CAAC;EACvF,OAAO,EAAE,KAAK,EAAE,SAAS,KAAK,CAAC;CACnC,CAAC;CAED,OAAO,KAAK,sBAAsB,OAAO,MAAM;EAE3C,MAAM,EAAE,iBAAiB,MADN,EAAE,IAAI,KAAK;EAE9B,MAAM,OAAO,iBAAiB,YAAY;EAC1C,OAAO,EAAE,KAAK,EAAE,SAAS,KAAK,CAAC;CACnC,CAAC;CAED,OAAO;AACX"}

package/dist/services/webhook-service.d.ts

@@ -1,4 +1,4 @@
-import type { JobQueueClient } from "../jobs/types";
+import type { JobQueueClient } from "../jobs/types.js";
 /**
  * The task name a queued webhook delivery is stored under.
  *

package/dist/singleton.d.ts

@@ -1,4 +1,11 @@
 import type { RebaseServerClient } from "@rebasepro/types";
+/**
+ * @internal Register the per-call resolver described on {@link RESOLVER_SLOT}.
+ *
+ * For runtime adapters, not for application code. Pass `null` to unregister.
+ * Returns the previous resolver so an adapter can restore it.
+ */
+export declare function _setRebaseResolver(resolve: (() => RebaseServerClient | null) | null): (() => RebaseServerClient | null) | null;
 /**
  * @internal Called once during server initialization to set the backing instance.
  * This is invoked by `initializeRebaseBackend()` — never call it manually.

package/dist/storage/GCSStorageController.d.ts

@@ -5,7 +5,7 @@
  * optional peer dependency — users who don't need GCS never pay for the
  * import cost or need it installed.
  */
-import { StorageController, GCSStorageConfig } from "./types";
+import { StorageController, GCSStorageConfig } from "./types.js";
 import { UploadFileProps, UploadFileResult, DownloadConfig, StorageListResult } from "@rebasepro/types";
 /**
  * Google Cloud Storage implementation of `StorageController`.

package/dist/storage/LocalStorageController.d.ts

@@ -1,7 +1,7 @@
 /**
  * Local filesystem storage controller
  */
-import { StorageController, LocalStorageConfig } from "./types";
+import { StorageController, LocalStorageConfig } from "./types.js";
 import { UploadFileProps, UploadFileResult, DownloadConfig, StorageListResult } from "@rebasepro/types";
 /**
  * Bucket used when a call names none.

package/dist/storage/S3StorageController.d.ts

@@ -1,7 +1,7 @@
 /**
  * S3-compatible storage controller (works with AWS S3 and MinIO)
  */
-import { S3StorageConfig, StorageController } from "./types";
+import { S3StorageConfig, StorageController } from "./types.js";
 import { DownloadConfig, StorageListResult, UploadFileProps, UploadFileResult } from "@rebasepro/types";
 /**
  * S3-compatible storage implementation

package/dist/storage/cache-headers.d.ts

@@ -0,0 +1,87 @@
+/**
+ * Cache and revalidation headers for served objects.
+ *
+ * ## Why every byte still goes through the process
+ *
+ * `routes.ts` deliberately proxies rather than redirecting to a signed URL —
+ * mixed content and unreachable VPC endpoints, both documented there. That
+ * decision stands. What it cost was caching: a proxied response only caches as
+ * well as its headers say, and the local path sent none at all, so every load
+ * of every image re-read the file and re-sent the body.
+ *
+ * This module is the headers. It does not change where bytes come from; it
+ * lets the client stop asking for them.
+ *
+ * ## Why `immutable` is wrong here, and was
+ *
+ * The remote path sent `public, max-age=3600, immutable`, and the transform
+ * paths sent it with `max-age=31536000`. `immutable` is a promise that the body
+ * at this URL will never change. A storage key can be overwritten — `putObject`
+ * on an existing key is an ordinary operation — so the promise is false for
+ * every object this server serves, and the symptom is an upload that replaces a
+ * file which then does not visibly change for an hour, or a year.
+ *
+ * Revalidation replaces it. With a validator the client asks "still this one?"
+ * and gets a 304 with no body, which costs a round trip instead of a transfer.
+ *
+ * ## Why `public` was a leak
+ *
+ * The same header said `public` for every object, including one that required
+ * authentication to fetch. `public` is explicit permission for a *shared* cache
+ * — a CDN, a corporate proxy — to store the response and serve it to somebody
+ * else. Private objects are now `private`, which is the directive that says a
+ * browser may keep it but a shared cache may not.
+ */
+import type { Context } from "hono";
+/**
+ * A weak validator built from size and modification time.
+ *
+ * Weak (`W/`) because it is not a digest of the body: two different bodies of
+ * the same length written in the same millisecond would collide. That is the
+ * same trade nginx makes for static files, and the alternative — hashing every
+ * object on every request — costs more than it saves for content this server is
+ * already streaming from somewhere else.
+ */
+export declare function buildEntityTag(size: number, lastModifiedMs: number): string;
+export interface ObjectValidators {
+    etag: string;
+    /** RFC 9110 date, second-resolution. */
+    lastModified: string;
+    lastModifiedMs: number;
+}
+export declare function objectValidators(size: number, lastModifiedMs: number): ObjectValidators;
+export interface CacheControlOptions {
+    /**
+     * Whether a *shared* cache may store this. True only for objects that need
+     * no credentials to fetch.
+     */
+    isPublic: boolean;
+    /**
+     * How long a client may reuse the response without asking. Short by
+     * default, because the object behind it is mutable.
+     */
+    maxAgeSeconds: number;
+    /**
+     * Public responses only: how long a stale copy may be served while a
+     * revalidation happens in the background. Shared caches honour it; it turns
+     * the revalidation round trip into something the user does not wait for.
+     */
+    staleWhileRevalidateSeconds?: number;
+}
+export declare function cacheControl(options: CacheControlOptions): string;
+/**
+ * Whether the request already holds this exact representation.
+ *
+ * `If-None-Match` wins outright when present: it is an exact validator, whereas
+ * `If-Modified-Since` has second resolution and is only consulted in its
+ * absence — again the order RFC 9110 requires.
+ */
+export declare function isNotModified(c: Context, validators: ObjectValidators): boolean;
+/**
+ * Put the validators and the cache policy on a response.
+ *
+ * Applied to the 304 as well as the 200: a 304 that omits them tells the client
+ * nothing about how long the answer holds, so the next load revalidates again
+ * immediately and the round trip repeats forever.
+ */
+export declare function applyCacheHeaders(c: Context, validators: ObjectValidators, options: CacheControlOptions): void;

package/dist/storage/index.d.ts

@@ -11,17 +11,17 @@
  * For other providers (Azure Blob, etc.), implement the
  * `StorageController` interface and pass the instance directly to the `storage` config.
  */
-export * from "./types";
-export { LocalStorageController } from "./LocalStorageController";
-export { S3StorageController } from "./S3StorageController";
-export { GCSStorageController } from "./GCSStorageController";
-export { createStorageRoutes } from "./routes";
-export type { StorageRoutesConfig } from "./routes";
-export * from "./storage-registry";
-export { parseTransformOptions, transformImage, isTransformableImage, TransformCache } from "./image-transform";
-export type { ImageTransformOptions } from "./image-transform";
-export { TusHandler } from "./tus-handler";
-import { BackendStorageConfig, StorageController } from "./types";
+export * from "./types.js";
+export { LocalStorageController } from "./LocalStorageController.js";
+export { S3StorageController } from "./S3StorageController.js";
+export { GCSStorageController } from "./GCSStorageController.js";
+export { createStorageRoutes } from "./routes.js";
+export type { StorageRoutesConfig } from "./routes.js";
+export * from "./storage-registry.js";
+export { parseTransformOptions, transformImage, isTransformableImage, TransformCache } from "./image-transform.js";
+export type { ImageTransformOptions } from "./image-transform.js";
+export { TusHandler } from "./tus-handler.js";
+import { BackendStorageConfig, StorageController } from "./types.js";
 /**
  * Create a storage controller from a config object.
  *

package/dist/storage/policies.d.ts

@@ -0,0 +1,88 @@
+/**
+ * Declarative access control for storage.
+ *
+ * Storage is not under row-level security, so `storageAuthorize` — a hook, a
+ * piece of imperative code — was the whole access-control model. That is the one
+ * place the claim "security lives in the database" does not hold, and it shows
+ * in the shape of the alternative: without a hook, **any authenticated caller
+ * may read, overwrite, delete or list any key they can name**, because storage
+ * keys share one flat namespace.
+ *
+ * A policy list says the same things declaratively, and can be read without
+ * running it:
+ *
+ * ```ts
+ * storagePolicies: [
+ *     { path: "public/**", operations: ["read"], allow: "public" },
+ *     { path: "users/:uid/**", allow: ({ params, user }) => user?.uid === params.uid }
+ * ]
+ * ```
+ *
+ * ## Deny by default, and why that is the whole design
+ *
+ * A key matched by no policy is refused. That makes every widening an explicit,
+ * reviewable line, and it makes a mistake in this module fail *closed* — a
+ * pattern that fails to match denies access rather than granting it. Authz code
+ * that fails open is worth more to an attacker than the feature is to anyone
+ * else, so the bias is deliberate and absolute.
+ *
+ * ## The hook remains, as an escape hatch and not as a fallback
+ *
+ * Ownership frequently lives in a row rather than in a key, which no pattern can
+ * express. So when policies match nothing, an explicit `storageAuthorize` is
+ * consulted before the request is refused. Present, it can widen; absent, the
+ * answer is no. Policies never *narrow* what the hook allowed and the hook never
+ * overrides a policy denial — each can only say yes, which keeps "who allowed
+ * this?" answerable by reading either one alone.
+ */
+import type { StorageAuthorize, StorageAuthorizeContext, StorageOperation } from "@rebasepro/types";
+/** Everything a predicate is told, plus whatever the path captured. */
+export interface StoragePolicyContext extends StorageAuthorizeContext {
+    /** Segments captured by `:name` placeholders in the matched path. */
+    params: Record<string, string>;
+}
+export type StoragePolicyPredicate = (ctx: StoragePolicyContext) => boolean | Promise<boolean>;
+export interface StoragePolicy {
+    /**
+     * A key pattern, matched segment by segment against the sanitized key.
+     *
+     * - a literal segment matches itself
+     * - `*` matches exactly one segment
+     * - `:name` matches one segment and captures it
+     * - `**` matches the rest of the key, including nothing, and is only
+     *   allowed as the final segment
+     */
+    path: string;
+    /** Which operations this grants. Defaults to every one of them. */
+    operations?: StorageOperation[];
+    /**
+     * Who it grants to.
+     *
+     * - `"public"` — anyone, signed in or not
+     * - `"authenticated"` — any caller with a uid
+     * - a predicate — anything else, given the captured params and the user
+     */
+    allow: "public" | "authenticated" | StoragePolicyPredicate;
+}
+export declare class StoragePolicyError extends Error {
+    constructor(message: string);
+}
+/**
+ * Compile a policy list into a {@link StorageAuthorize}.
+ *
+ * Compiled once, at boot, so a malformed pattern fails the start rather than the
+ * first upload. `fallback` is an explicit `storageAuthorize`, consulted only
+ * when no policy matched.
+ */
+export declare function compileStoragePolicies(policies: StoragePolicy[], fallback?: StorageAuthorize): StorageAuthorize;
+/**
+ * The access-control function for a configuration, or `undefined` when it
+ * declares none.
+ *
+ * Kept separate from {@link compileStoragePolicies} so `init` has one call to
+ * make and one thing to reason about: policies, a hook, both, or neither.
+ */
+export declare function resolveStorageAccessControl(config: {
+    storagePolicies?: StoragePolicy[];
+    storageAuthorize?: StorageAuthorize;
+}): StorageAuthorize | undefined;

package/dist/storage/range.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Byte-range requests for served objects.
+ *
+ * Without `Accept-Ranges`, a browser will not offer to seek in an audio or
+ * video element served from here: it has no way to ask for the middle of a file,
+ * so scrubbing means fetching the whole thing from the start, and on a long
+ * recording it means fetching it again for every seek. Safari goes further and
+ * refuses to play a `<video>` at all unless the first response is a `206`.
+ *
+ * So this is not a performance nicety. For media it is the difference between a
+ * player that works and one that does not.
+ *
+ * ## What is implemented, and what is refused
+ *
+ * A single range — `bytes=0-499`, `bytes=500-`, `bytes=-500`. That is what every
+ * browser sends for media playback.
+ *
+ * Multiple ranges in one request (`bytes=0-99,200-299`) are **not** served.
+ * Answering them means composing a `multipart/byteranges` body, and nothing that
+ * matters sends them; a server may always answer a range request with the whole
+ * `200` instead, which is what happens here. Refusing to guess is better than a
+ * half-implemented multipart encoder.
+ *
+ * An unsatisfiable range — one starting past the end of the object — is a `416`
+ * with a `Content-Range: bytes /<size>`, as RFC 9110 requires. Answering `200`
+ * there would hand a player the whole file when it asked for a byte that does
+ * not exist, and it would never notice.
+ */
+/** A resolved, inclusive byte range within an object of known size. */
+export interface ByteRange {
+    start: number;
+    /** Inclusive, as the header is. */
+    end: number;
+    /** `end - start + 1`. */
+    length: number;
+}
+export type RangeParse = 
+/** No `Range` header, or one this server declines to honour. Serve `200`. */
+{
+    kind: "none";
+}
+/** Serve `206` with this range. */
+ | {
+    kind: "range";
+    range: ByteRange;
+}
+/** Serve `416`. The range cannot be satisfied for an object of this size. */
+ | {
+    kind: "unsatisfiable";
+};
+/**
+ * Parse a `Range` header against an object of `size` bytes.
+ *
+ * Deliberately conservative: anything malformed, multi-range, or in a unit other
+ * than bytes resolves to `none`, which serves the whole object. A range request
+ * answered with `200` is always legal; a range answered wrongly is a corrupted
+ * download.
+ */
+export declare function parseRange(header: string | undefined, size: number): RangeParse;
+/** The `Content-Range` for a served range. */
+export declare function contentRange(range: ByteRange, size: number): string;
+/** The `Content-Range` for a `416`, which names the size and no range. */
+export declare function unsatisfiableContentRange(size: number): string;

package/dist/storage/routes.d.ts

@@ -7,10 +7,10 @@
  * is used.
  */
 import { Hono } from "hono";
-import { StorageController, type StorageAuthorize, type StorageAuthorizeData } from "./types";
-import { type StorageRegistry } from "./storage-registry";
+import { StorageController, type StorageAuthorize, type StorageAuthorizeData } from "./types.js";
+import { type StorageRegistry } from "./storage-registry.js";
 import { type StorageSourceDefinition, type AuthAdapter } from "@rebasepro/types";
-import { HonoEnv } from "../api/types";
+import { HonoEnv } from "../api/types.js";
 /**
  * Decide what to actually serve for a stored content type.
  *

package/dist/storage/storage-registry.d.ts

@@ -10,7 +10,7 @@
  * - String properties use `storageId` in their config to specify which storage to use
  * - Properties without `storageId` fallback to "(default)"
  */
-import { StorageController } from "./types";
+import { StorageController } from "./types.js";
 /**
  * The default storage identifier used when:
  * - A single storage controller is provided (not a map)

package/dist/storage/tus-handler.d.ts

@@ -8,8 +8,8 @@
  * @see https://tus.io/protocols/resumable-upload
  */
 import type { Context } from "hono";
-import type { StorageController } from "./types";
-import { type StorageRegistry } from "./storage-registry";
+import type { StorageController } from "./types.js";
+import { type StorageRegistry } from "./storage-registry.js";
 /**
  * TUS resumable upload handler.
  *

package/dist/utils/host.d.ts

@@ -0,0 +1,58 @@
+/**
+ * The host globals this package reads, behind functions that do not assume Node.
+ *
+ * `process` is not defined on workerd, on Deno Deploy without the compat flag,
+ * or in a browser. That matters here for one specific reason: the portable
+ * authoring surface (`@rebasepro/server/functions`) reaches the logger and the
+ * error handler, and a bare `process.env.NODE_ENV` inside either of them turns
+ * the first log line of a request into a `ReferenceError` on a runtime that has
+ * no `process` — a failure that reads as "the framework crashed" rather than
+ * "this runtime has no process object".
+ *
+ * Nothing here throws and nothing here is async. A runtime that cannot answer
+ * gets the empty answer, because every caller in this file's blast radius is
+ * choosing a log level or a format, and the safe default for both is the
+ * development one.
+ *
+ * @module
+ */
+/**
+ * The process environment, or the closest thing this runtime has to one.
+ *
+ * Order: a bag published by {@link setHostEnv} first, because an adapter that
+ * set one knows more than the ambient globals do; then `process.env`; then
+ * nothing.
+ */
+export declare function hostEnv(): Record<string, string | undefined>;
+/**
+ * Read one environment variable without touching `process` directly.
+ *
+ * Trimmed, and blank is treated as absent — a variable declared with no value
+ * is the ordinary way to write a compose file or a `.env` line, and every
+ * caller in this package means "unset" by it. See `resolveFunctionsTimeoutMs`,
+ * which learned that the hard way.
+ */
+export declare function hostEnvVar(name: string): string | undefined;
+/**
+ * Publish an environment bag for contextless readers.
+ *
+ * Called by an adapter for a runtime whose environment is not ambient. Merges
+ * rather than replaces, so two adapters (or an adapter plus a test) do not
+ * silently erase each other's variables.
+ */
+export declare function setHostEnv(env: Record<string, string | undefined>): void;
+/** @internal Test seam — drops anything {@link setHostEnv} published. */
+export declare function _clearHostEnv(): void;
+/**
+ * Write one already-formatted line to the process's output.
+ *
+ * `process.stdout.write` is preferred where it exists because it is the only
+ * one of the two that does not append its own formatting to a line that is
+ * already a complete JSON document — `console.log` on Node is
+ * `process.stdout.write` plus `util.format`, and `util.format` will happily
+ * reinterpret a `%s` that appeared inside a user's log message.
+ *
+ * Where it does not exist, `console` is the runtime's log sink and is what its
+ * platform collects.
+ */
+export declare function writeLine(stream: "out" | "err", line: string): void;

package/dist/utils/logger.d.ts

@@ -1,18 +1,3 @@
-/**
- * Structured Logger for Rebase Backend
- *
- * Outputs JSON lines when `NODE_ENV=production`, human-readable prefixed
- * lines otherwise.  Designed to work with Google Cloud Logging severity levels.
- *
- * Every line — message and data, at any depth — passes through the redaction
- * below, which strips Drizzle's `Failed query: … / params: …` wrapper and the
- * values of secret-looking keys. See the block above `serialiseError`.
- *
- * Usage:
- *   import { logger } from "./utils/logger";
- *   logger.info("Server started", { port: 3001 });
- *   logger.error("Request failed", { path: "/api/test", error: err });
- */
 export type LogLevel = "debug" | "info" | "warn" | "error";
 export interface LogEntry {
     severity: string;