@sonicjs-cms/core 2.0.2 → 2.0.4

package/dist/{chunk-SGGHTIWV.js → chunk-CQ2VMJQO.js}

@@ -1,8 +1,8 @@
 import { getCacheService, CACHE_CONFIGS, getLogger } from './chunk-LH4Z7QID.js';
-import { requireAuth, isPluginActive, requireRole, AuthManager, logActivity, requirePermission } from './chunk-M6FPVS7E.js';
+import { requireAuth, isPluginActive, requireRole, AuthManager, logActivity } from './chunk-M6FPVS7E.js';
 import { PluginService, MigrationService } from './chunk-CDBVZEWR.js';
-import { init_admin_layout_catalyst_template, renderDesignPage, renderCheckboxPage, renderFAQList, renderTestimonialsList, renderCodeExamplesList, renderAlert, renderTable, renderPagination, renderConfirmationDialog, getConfirmationDialogScript, renderAdminLayoutCatalyst, renderAdminLayout, adminLayoutV2, renderForm } from './chunk-O46XKBFM.js';
-import { QueryFilterBuilder, sanitizeInput, getCoreVersion, escapeHtml } from './chunk-XJETEIRU.js';
+import { init_admin_layout_catalyst_template, renderDesignPage, renderCheckboxPage, renderFAQList, renderTestimonialsList, renderCodeExamplesList, renderAlert, renderTable, renderPagination, renderConfirmationDialog, getConfirmationDialogScript, renderAdminLayoutCatalyst, renderAdminLayout, adminLayoutV2, renderForm } from './chunk-3LZ6TLPC.js';
+import { QueryFilterBuilder, sanitizeInput, getCoreVersion, escapeHtml } from './chunk-WKGONLHK.js';
 import { metricsTracker } from './chunk-FICTAGD4.js';
 import { Hono } from 'hono';
 import { cors } from 'hono/cors';
@@ -916,10 +916,17 @@ apiMediaRoutes.post("/create-folder", async (c) => {
     }
     const checkStmt = c.env.DB.prepare("SELECT COUNT(*) as count FROM media WHERE folder = ? AND deleted_at IS NULL");
     const existingFolder = await checkStmt.bind(folderName).first();
+    if (existingFolder && existingFolder.count > 0) {
+      return c.json({
+        success: false,
+        error: `Folder "${folderName}" already exists`
+      }, 400);
+    }
     return c.json({
       success: true,
-      message: `Folder "${folderName}" created successfully`,
-      folder: folderName
+      message: `Folder "${folderName}" is ready. Upload files to this folder to make it appear in the media library.`,
+      folder: folderName,
+      note: "Folders appear automatically when you upload files to them"
     });
   } catch (error) {
     console.error("Create folder error:", error);
@@ -2031,9 +2038,36 @@ function renderRegisterPage(data) {
     </html>
   `;
 }
-
-// src/services/auth-validation.ts
-var authValidationService = {};
+var authValidationService = {
+  /**
+   * Build registration schema dynamically based on auth settings
+   * For now, returns a static schema with standard fields
+   */
+  async buildRegistrationSchema(_db) {
+    return z.object({
+      email: z.string().email("Valid email is required"),
+      password: z.string().min(8, "Password must be at least 8 characters"),
+      username: z.string().min(3, "Username must be at least 3 characters").optional(),
+      firstName: z.string().min(1, "First name is required").optional(),
+      lastName: z.string().min(1, "Last name is required").optional()
+    });
+  },
+  /**
+   * Generate default values for optional fields
+   */
+  generateDefaultValue(field, data) {
+    switch (field) {
+      case "username":
+        return data.email ? data.email.split("@")[0] : `user${Date.now()}`;
+      case "firstName":
+        return "User";
+      case "lastName":
+        return data.email ? data.email.split("@")[0] : "Account";
+      default:
+        return "";
+    }
+  }
+};
 
 // src/routes/auth.ts
 var authRoutes = new Hono();
@@ -2317,7 +2351,7 @@ authRoutes.post("/register/form", async (c) => {
         Account created successfully! Redirecting to admin dashboard...
         <script>
           setTimeout(() => {
-            window.location.href = '/admin/content';
+            window.location.href = '/admin/dashboard';
           }, 2000);
         </script>
       </div>
@@ -2385,7 +2419,7 @@ authRoutes.post("/login/form", async (c) => {
           </div>
           <script>
             setTimeout(() => {
-              window.location.href = '/admin/content';
+              window.location.href = '/admin/dashboard';
             }, 2000);
           </script>
         </div>
@@ -2678,7 +2712,7 @@ authRoutes.post("/accept-invitation", async (c) => {
       maxAge: 60 * 60 * 24
       // 24 hours
     });
-    return c.redirect("/admin/content?welcome=true");
+    return c.redirect("/admin/dashboard?welcome=true");
   } catch (error) {
     console.error("Accept invitation error:", error);
     return c.json({ error: "Failed to accept invitation" }, 500);
@@ -7987,7 +8021,7 @@ userRoutes.post("/profile/password", async (c) => {
     }));
   }
 });
-userRoutes.get("/users", requirePermission("users.read"), async (c) => {
+userRoutes.get("/users", async (c) => {
   const db = c.env.DB;
   const user = c.get("user");
   try {
@@ -8106,7 +8140,7 @@ userRoutes.get("/users", requirePermission("users.read"), async (c) => {
     }), 500);
   }
 });
-userRoutes.get("/users/new", requirePermission("users.create"), async (c) => {
+userRoutes.get("/users/new", async (c) => {
   const user = c.get("user");
   try {
     const pageData = {
@@ -8127,7 +8161,7 @@ userRoutes.get("/users/new", requirePermission("users.create"), async (c) => {
     }), 500);
   }
 });
-userRoutes.post("/users/new", requirePermission("users.create"), async (c) => {
+userRoutes.post("/users/new", async (c) => {
   const db = c.env.DB;
   const user = c.get("user");
   try {
@@ -8227,7 +8261,7 @@ userRoutes.post("/users/new", requirePermission("users.create"), async (c) => {
     }));
   }
 });
-userRoutes.get("/users/:id", requirePermission("users.read"), async (c) => {
+userRoutes.get("/users/:id", async (c) => {
   if (c.req.path.endsWith("/edit")) {
     return c.notFound();
   }
@@ -8278,7 +8312,7 @@ userRoutes.get("/users/:id", requirePermission("users.read"), async (c) => {
     return c.json({ error: "Failed to fetch user" }, 500);
   }
 });
-userRoutes.get("/users/:id/edit", requirePermission("users.update"), async (c) => {
+userRoutes.get("/users/:id/edit", async (c) => {
   const db = c.env.DB;
   const user = c.get("user");
   const userId = c.req.param("id");
@@ -8332,7 +8366,7 @@ userRoutes.get("/users/:id/edit", requirePermission("users.update"), async (c) =
     }), 500);
   }
 });
-userRoutes.put("/users/:id", requirePermission("users.update"), async (c) => {
+userRoutes.put("/users/:id", async (c) => {
   const db = c.env.DB;
   const user = c.get("user");
   const userId = c.req.param("id");
@@ -8418,7 +8452,7 @@ userRoutes.put("/users/:id", requirePermission("users.update"), async (c) => {
     }));
   }
 });
-userRoutes.delete("/users/:id", requirePermission("users.delete"), async (c) => {
+userRoutes.delete("/users/:id", async (c) => {
   const db = c.env.DB;
   const user = c.get("user");
   const userId = c.req.param("id");
@@ -8479,7 +8513,7 @@ userRoutes.delete("/users/:id", requirePermission("users.delete"), async (c) =>
     return c.json({ error: "Failed to delete user" }, 500);
   }
 });
-userRoutes.post("/invite-user", requirePermission("users.create"), async (c) => {
+userRoutes.post("/invite-user", async (c) => {
   const db = c.env.DB;
   const user = c.get("user");
   try {
@@ -8555,7 +8589,7 @@ userRoutes.post("/invite-user", requirePermission("users.create"), async (c) =>
     return c.json({ error: "Failed to send user invitation" }, 500);
   }
 });
-userRoutes.post("/resend-invitation/:id", requirePermission("users.create"), async (c) => {
+userRoutes.post("/resend-invitation/:id", async (c) => {
   const db = c.env.DB;
   const user = c.get("user");
   const userId = c.req.param("id");
@@ -8604,7 +8638,7 @@ userRoutes.post("/resend-invitation/:id", requirePermission("users.create"), asy
     return c.json({ error: "Failed to resend invitation" }, 500);
   }
 });
-userRoutes.delete("/cancel-invitation/:id", requirePermission("users.delete"), async (c) => {
+userRoutes.delete("/cancel-invitation/:id", async (c) => {
   const db = c.env.DB;
   const user = c.get("user");
   const userId = c.req.param("id");
@@ -8638,7 +8672,7 @@ userRoutes.delete("/cancel-invitation/:id", requirePermission("users.delete"), a
     return c.json({ error: "Failed to cancel invitation" }, 500);
   }
 });
-userRoutes.get("/activity-logs", requirePermission("activity.read"), async (c) => {
+userRoutes.get("/activity-logs", async (c) => {
   const db = c.env.DB;
   const user = c.get("user");
   try {
@@ -8744,7 +8778,7 @@ userRoutes.get("/activity-logs", requirePermission("activity.read"), async (c) =
     return c.html(renderActivityLogsPage(pageData));
   }
 });
-userRoutes.get("/activity-logs/export", requirePermission("activity.read"), async (c) => {
+userRoutes.get("/activity-logs/export", async (c) => {
   const db = c.env.DB;
   const user = c.get("user");
   try {
@@ -9302,11 +9336,12 @@ function renderMediaLibraryPage(data) {
         </div>
         
         <!-- Upload Form -->
-        <form 
+        <form
           id="upload-form"
           hx-post="/admin/media/upload"
           hx-encoding="multipart/form-data"
           hx-target="#upload-results"
+          hx-on::after-request="if(event.detail.successful) { setTimeout(() => { window.location.href = '/admin/media?t=' + Date.now(); }, 1500); }"
           class="space-y-4"
         >
           <!-- Drag and Drop Zone -->
@@ -10189,21 +10224,23 @@ adminMediaRoutes.get("/", async (c) => {
     const { results } = await stmt.bind(...params).all();
     const foldersStmt = db.prepare(`
       SELECT folder, COUNT(*) as count, SUM(size) as totalSize
-      FROM media 
-      GROUP BY folder 
+      FROM media
+      WHERE deleted_at IS NULL
+      GROUP BY folder
       ORDER BY folder
     `);
     const { results: folders } = await foldersStmt.all();
     const typesStmt = db.prepare(`
-      SELECT 
-        CASE 
+      SELECT
+        CASE
           WHEN mime_type LIKE 'image/%' THEN 'images'
           WHEN mime_type LIKE 'video/%' THEN 'videos'
           WHEN mime_type IN ('application/pdf', 'text/plain') THEN 'documents'
           ELSE 'other'
         END as type,
         COUNT(*) as count
-      FROM media 
+      FROM media
+      WHERE deleted_at IS NULL
       GROUP BY type
     `);
     const { results: types } = await typesStmt.all();
@@ -10479,6 +10516,18 @@ adminMediaRoutes.post("/upload", async (c) => {
     }
     const uploadResults = [];
     const errors = [];
+    console.log("[MEDIA UPLOAD] c.env keys:", Object.keys(c.env));
+    console.log("[MEDIA UPLOAD] MEDIA_BUCKET defined?", !!c.env.MEDIA_BUCKET);
+    console.log("[MEDIA UPLOAD] MEDIA_BUCKET type:", typeof c.env.MEDIA_BUCKET);
+    if (!c.env.MEDIA_BUCKET) {
+      console.error("[MEDIA UPLOAD] MEDIA_BUCKET is not available! Available env keys:", Object.keys(c.env));
+      return c.html(html`
+        <div class="bg-red-100 border border-red-400 text-red-700 px-4 py-3 rounded">
+          Media storage (R2) is not configured. Please check your wrangler.toml configuration.
+          <br><small>Debug: Available bindings: ${Object.keys(c.env).join(", ")}</small>
+        </div>
+      `);
+    }
     for (const file of files) {
       try {
         const validation = fileValidationSchema2.safeParse({
@@ -16249,7 +16298,7 @@ router.get("/stats", async (c) => {
     }
     let contentCount = 0;
     try {
-      const contentStmt = db.prepare("SELECT COUNT(*) as count FROM content WHERE deleted_at IS NULL");
+      const contentStmt = db.prepare("SELECT COUNT(*) as count FROM content");
       const contentResult = await contentStmt.first();
       contentCount = contentResult?.count || 0;
     } catch (error) {
@@ -17845,11 +17894,13 @@ adminCollectionsRoutes.post("/", async (c) => {
       now,
       now
     ).run();
-    try {
-      await c.env.CACHE_KV.delete("cache:collections:all");
-      await c.env.CACHE_KV.delete(`cache:collection:${name}`);
-    } catch (e) {
-      console.error("Error clearing cache:", e);
+    if (c.env.CACHE_KV) {
+      try {
+        await c.env.CACHE_KV.delete("cache:collections:all");
+        await c.env.CACHE_KV.delete(`cache:collection:${name}`);
+      } catch (e) {
+        console.error("Error clearing cache:", e);
+      }
     }
     if (isHtmx) {
       return c.html(html`
@@ -18222,7 +18273,7 @@ function renderSettingsPage(data) {
       // Migration functions
       window.refreshMigrationStatus = async function() {
         try {
-          const response = await fetch('/admin/api/migrations/status');
+          const response = await fetch('/admin/settings/api/migrations/status');
           const result = await response.json();
           
           if (result.success) {
@@ -18250,7 +18301,7 @@ function renderSettingsPage(data) {
         btn.innerHTML = 'Running...';
 
         try {
-          const response = await fetch('/admin/api/migrations/run', {
+          const response = await fetch('/admin/settings/api/migrations/run', {
             method: 'POST'
           });
           const result = await response.json();
@@ -18271,7 +18322,7 @@ function renderSettingsPage(data) {
 
       window.validateSchema = async function() {
         try {
-          const response = await fetch('/admin/api/migrations/validate');
+          const response = await fetch('/admin/settings/api/migrations/validate');
           const result = await response.json();
           
           if (result.success) {
@@ -18349,7 +18400,7 @@ function renderSettingsPage(data) {
       // Database Tools functions
       window.refreshDatabaseStats = async function() {
         try {
-          const response = await fetch('/admin/database-tools/api/stats');
+          const response = await fetch('/admin/settings/api/database-tools/stats');
           const result = await response.json();
           
           if (result.success) {
@@ -18370,7 +18421,7 @@ function renderSettingsPage(data) {
         btn.innerHTML = 'Creating Backup...';
         
         try {
-          const response = await fetch('/admin/database-tools/api/backup', {
+          const response = await fetch('/admin/settings/api/database-tools/backup', {
             method: 'POST'
           });
           const result = await response.json();
@@ -18409,7 +18460,7 @@ function renderSettingsPage(data) {
         btn.innerHTML = 'Truncating...';
         
         try {
-          const response = await fetch('/admin/database-tools/api/truncate', {
+          const response = await fetch('/admin/settings/api/database-tools/truncate', {
             method: 'POST',
             headers: {
               'Content-Type': 'application/json'
@@ -18440,7 +18491,7 @@ function renderSettingsPage(data) {
 
       window.validateDatabase = async function() {
         try {
-          const response = await fetch('/admin/database-tools/api/validate');
+          const response = await fetch('/admin/settings/api/database-tools/validate');
           const result = await response.json();
           
           if (result.success) {
@@ -19294,7 +19345,7 @@ function renderMigrationSettings(settings) {
       if (typeof refreshMigrationStatus === 'undefined') {
         window.refreshMigrationStatus = async function() {
           try {
-            const response = await fetch('/admin/api/migrations/status');
+            const response = await fetch('/admin/settings/api/migrations/status');
             const result = await response.json();
             
             if (result.success) {
@@ -19767,6 +19818,138 @@ adminSettingsRoutes.get("/api/migrations/validate", async (c) => {
     }, 500);
   }
 });
+adminSettingsRoutes.get("/api/database-tools/stats", async (c) => {
+  try {
+    const db = c.env.DB;
+    const tablesQuery = await db.prepare(`
+      SELECT name FROM sqlite_master
+      WHERE type='table'
+      AND name NOT LIKE 'sqlite_%'
+      AND name NOT LIKE '_cf_%'
+      ORDER BY name
+    `).all();
+    const tables = tablesQuery.results || [];
+    let totalRows = 0;
+    const tableStats = await Promise.all(
+      tables.map(async (table) => {
+        try {
+          const countResult = await db.prepare(`SELECT COUNT(*) as count FROM ${table.name}`).first();
+          const rowCount = countResult?.count || 0;
+          totalRows += rowCount;
+          return {
+            name: table.name,
+            rowCount
+          };
+        } catch (error) {
+          console.error(`Error counting rows in ${table.name}:`, error);
+          return {
+            name: table.name,
+            rowCount: 0
+          };
+        }
+      })
+    );
+    const estimatedSizeBytes = totalRows * 1024;
+    const databaseSizeMB = (estimatedSizeBytes / (1024 * 1024)).toFixed(2);
+    return c.json({
+      success: true,
+      data: {
+        totalTables: tables.length,
+        totalRows,
+        databaseSize: `${databaseSizeMB} MB (estimated)`,
+        tables: tableStats
+      }
+    });
+  } catch (error) {
+    console.error("Error fetching database stats:", error);
+    return c.json({
+      success: false,
+      error: "Failed to fetch database statistics"
+    }, 500);
+  }
+});
+adminSettingsRoutes.get("/api/database-tools/validate", async (c) => {
+  try {
+    const db = c.env.DB;
+    const integrityResult = await db.prepare("PRAGMA integrity_check").first();
+    const isValid = integrityResult?.integrity_check === "ok";
+    return c.json({
+      success: true,
+      data: {
+        valid: isValid,
+        message: isValid ? "Database integrity check passed" : "Database integrity check failed"
+      }
+    });
+  } catch (error) {
+    console.error("Error validating database:", error);
+    return c.json({
+      success: false,
+      error: "Failed to validate database"
+    }, 500);
+  }
+});
+adminSettingsRoutes.post("/api/database-tools/backup", async (c) => {
+  try {
+    const user = c.get("user");
+    if (!user || user.role !== "admin") {
+      return c.json({
+        success: false,
+        error: "Unauthorized. Admin access required."
+      }, 403);
+    }
+    return c.json({
+      success: true,
+      message: "Database backup feature coming soon. Use Cloudflare Dashboard for backups."
+    });
+  } catch (error) {
+    console.error("Error creating backup:", error);
+    return c.json({
+      success: false,
+      error: "Failed to create backup"
+    }, 500);
+  }
+});
+adminSettingsRoutes.post("/api/database-tools/truncate", async (c) => {
+  try {
+    const user = c.get("user");
+    if (!user || user.role !== "admin") {
+      return c.json({
+        success: false,
+        error: "Unauthorized. Admin access required."
+      }, 403);
+    }
+    const body = await c.req.json();
+    const tablesToTruncate = body.tables || [];
+    if (!Array.isArray(tablesToTruncate) || tablesToTruncate.length === 0) {
+      return c.json({
+        success: false,
+        error: "No tables specified for truncation"
+      }, 400);
+    }
+    const db = c.env.DB;
+    const results = [];
+    for (const tableName of tablesToTruncate) {
+      try {
+        await db.prepare(`DELETE FROM ${tableName}`).run();
+        results.push({ table: tableName, success: true });
+      } catch (error) {
+        console.error(`Error truncating ${tableName}:`, error);
+        results.push({ table: tableName, success: false, error: String(error) });
+      }
+    }
+    return c.json({
+      success: true,
+      message: `Truncated ${results.filter((r) => r.success).length} of ${tablesToTruncate.length} tables`,
+      results
+    });
+  } catch (error) {
+    console.error("Error truncating tables:", error);
+    return c.json({
+      success: false,
+      error: "Failed to truncate tables"
+    }, 500);
+  }
+});
 adminSettingsRoutes.post("/", async (c) => {
   try {
     const formData = await c.req.formData();
@@ -19819,5 +20002,5 @@ var ROUTES_INFO = {
 };
 
 export { ROUTES_INFO, adminCheckboxRoutes, adminCollectionsRoutes, adminDesignRoutes, adminLogsRoutes, adminMediaRoutes, adminPluginRoutes, adminSettingsRoutes, admin_api_default, admin_code_examples_default, admin_content_default, admin_faq_default, admin_testimonials_default, api_content_crud_default, api_default, api_media_default, api_system_default, auth_default, router, userRoutes };
-//# sourceMappingURL=chunk-SGGHTIWV.js.map
-//# sourceMappingURL=chunk-SGGHTIWV.js.map
+//# sourceMappingURL=chunk-CQ2VMJQO.js.map
+//# sourceMappingURL=chunk-CQ2VMJQO.js.map