@sonicjs-cms/core 2.10.1 → 2.11.0

package/dist/{chunk-HGKBMUYY.cjs → chunk-ASAEJ4B7.cjs}

@@ -1,12 +1,12 @@
 'use strict';
 
 var chunkLFAQUR7P_cjs = require('./chunk-LFAQUR7P.cjs');
-var chunk5GO3AMON_cjs = require('./chunk-5GO3AMON.cjs');
-var chunkTWCQVJ6M_cjs = require('./chunk-TWCQVJ6M.cjs');
-var chunkEAJJHE5F_cjs = require('./chunk-EAJJHE5F.cjs');
+var chunkB2ASV5RD_cjs = require('./chunk-B2ASV5RD.cjs');
+var chunk6BVLPACH_cjs = require('./chunk-6BVLPACH.cjs');
+var chunkDE5YTNCD_cjs = require('./chunk-DE5YTNCD.cjs');
 var chunkLTKV7AE5_cjs = require('./chunk-LTKV7AE5.cjs');
 var chunk6FHNRRJ3_cjs = require('./chunk-6FHNRRJ3.cjs');
-var chunkE2GKK5HX_cjs = require('./chunk-E2GKK5HX.cjs');
+var chunkQLPFENZ2_cjs = require('./chunk-QLPFENZ2.cjs');
 var chunkRCQ2HIQD_cjs = require('./chunk-RCQ2HIQD.cjs');
 var chunkMNWKYY5E_cjs = require('./chunk-MNWKYY5E.cjs');
 var hono = require('hono');
@@ -61,6 +61,69 @@ function normalizePublicContentFilter(filter, userRole) {
   });
   return normalizedFilter;
 }
+
+// src/plugins/core-plugins/global-variables-plugin/variable-resolver.ts
+var TOKEN_PATTERN = /\{([a-z0-9_]+)\}/g;
+function resolveVariables(text, variables) {
+  if (!text || variables.size === 0) return text;
+  return text.replace(TOKEN_PATTERN, (match, key) => {
+    const value = variables.get(key);
+    return value !== void 0 ? value : match;
+  });
+}
+function resolveVariablesInObject(obj, variables) {
+  if (!obj || variables.size === 0) return obj;
+  if (typeof obj === "string") {
+    return resolveVariables(obj, variables);
+  }
+  if (Array.isArray(obj)) {
+    return obj.map((item) => resolveVariablesInObject(item, variables));
+  }
+  if (typeof obj === "object") {
+    const result = {};
+    for (const [key, value] of Object.entries(obj)) {
+      result[key] = resolveVariablesInObject(value, variables);
+    }
+    return result;
+  }
+  return obj;
+}
+var variableCache = null;
+var cacheTimestamp = 0;
+var CACHE_TTL_MS = 3e5;
+function getVariablesCached() {
+  const now = Date.now();
+  if (variableCache && now - cacheTimestamp < CACHE_TTL_MS) {
+    return variableCache;
+  }
+  return null;
+}
+function setVariablesCache(map) {
+  variableCache = map;
+  cacheTimestamp = Date.now();
+}
+async function resolveContentVariables(contentData, db) {
+  if (!db || !contentData) return contentData;
+  try {
+    let variables = getVariablesCached();
+    if (!variables) {
+      const { results } = await db.prepare(
+        "SELECT key, value FROM global_variables WHERE is_active = 1"
+      ).all();
+      variables = /* @__PURE__ */ new Map();
+      for (const row of results || []) {
+        variables.set(row.key, row.value);
+      }
+      setVariablesCache(variables);
+    }
+    if (variables.size === 0) return contentData;
+    return resolveVariablesInObject(contentData, variables);
+  } catch {
+    return contentData;
+  }
+}
+
+// src/routes/api-content-crud.ts
 var apiContentCrudRoutes = new hono.Hono();
 apiContentCrudRoutes.get("/check-slug", async (c) => {
   try {
@@ -112,6 +175,10 @@ apiContentCrudRoutes.get("/:id", async (c) => {
       created_at: content.created_at,
       updated_at: content.updated_at
     };
+    const resolveVars = c.req.query("resolve_variables") !== "false";
+    if (resolveVars) {
+      transformedContent.data = await resolveContentVariables(transformedContent.data, db);
+    }
     return c.json({ data: transformedContent });
   } catch (error) {
     console.error("Error fetching content:", error);
@@ -121,7 +188,7 @@ apiContentCrudRoutes.get("/:id", async (c) => {
     }, 500);
   }
 });
-apiContentCrudRoutes.post("/", chunk5GO3AMON_cjs.requireAuth(), chunk5GO3AMON_cjs.requireRole(["admin", "editor", "author"]), async (c) => {
+apiContentCrudRoutes.post("/", chunkB2ASV5RD_cjs.requireAuth(), chunkB2ASV5RD_cjs.requireRole(["admin", "editor", "author"]), async (c) => {
   try {
     const db = c.env.DB;
     const user = c.get("user");
@@ -187,7 +254,7 @@ apiContentCrudRoutes.post("/", chunk5GO3AMON_cjs.requireAuth(), chunk5GO3AMON_cj
     }, 500);
   }
 });
-apiContentCrudRoutes.put("/:id", chunk5GO3AMON_cjs.requireAuth(), chunk5GO3AMON_cjs.requireRole(["admin", "editor", "author"]), async (c) => {
+apiContentCrudRoutes.put("/:id", chunkB2ASV5RD_cjs.requireAuth(), chunkB2ASV5RD_cjs.requireRole(["admin", "editor", "author"]), async (c) => {
   try {
     const id = c.req.param("id");
     const db = c.env.DB;
@@ -251,7 +318,7 @@ apiContentCrudRoutes.put("/:id", chunk5GO3AMON_cjs.requireAuth(), chunk5GO3AMON_
     }, 500);
   }
 });
-apiContentCrudRoutes.delete("/:id", chunk5GO3AMON_cjs.requireAuth(), chunk5GO3AMON_cjs.requireRole(["admin", "editor", "author"]), async (c) => {
+apiContentCrudRoutes.delete("/:id", chunkB2ASV5RD_cjs.requireAuth(), chunkB2ASV5RD_cjs.requireRole(["admin", "editor", "author"]), async (c) => {
   try {
     const id = c.req.param("id");
     const db = c.env.DB;
@@ -287,7 +354,7 @@ apiRoutes.use("*", async (c, next) => {
   c.header("X-Response-Time", `${totalTime}ms`);
 });
 apiRoutes.use("*", async (c, next) => {
-  const cacheEnabled = await chunk5GO3AMON_cjs.isPluginActive(c.env.DB, "core-cache");
+  const cacheEnabled = await chunkB2ASV5RD_cjs.isPluginActive(c.env.DB, "core-cache");
   c.set("cacheEnabled", cacheEnabled);
   await next();
 });
@@ -778,7 +845,7 @@ apiRoutes.get("/collections", async (c) => {
     return c.json({ error: "Failed to fetch collections" }, 500);
   }
 });
-apiRoutes.get("/content", chunk5GO3AMON_cjs.optionalAuth(), async (c) => {
+apiRoutes.get("/content", chunkB2ASV5RD_cjs.optionalAuth(), async (c) => {
   const executionStart = Date.now();
   try {
     const db = c.env.DB;
@@ -801,13 +868,13 @@ apiRoutes.get("/content", chunk5GO3AMON_cjs.optionalAuth(), async (c) => {
         });
       }
     }
-    const filter = chunkE2GKK5HX_cjs.QueryFilterBuilder.parseFromQuery(queryParams);
+    const filter = chunkQLPFENZ2_cjs.QueryFilterBuilder.parseFromQuery(queryParams);
     const normalizedFilter = normalizePublicContentFilter(filter, c.get("user")?.role);
     if (!normalizedFilter.limit) {
       normalizedFilter.limit = 50;
     }
     normalizedFilter.limit = Math.min(normalizedFilter.limit, 1e3);
-    const builder3 = new chunkE2GKK5HX_cjs.QueryFilterBuilder();
+    const builder3 = new chunkQLPFENZ2_cjs.QueryFilterBuilder();
     const queryResult = builder3.build("content", normalizedFilter);
     if (queryResult.errors.length > 0) {
       return c.json({
@@ -879,7 +946,7 @@ apiRoutes.get("/content", chunk5GO3AMON_cjs.optionalAuth(), async (c) => {
     }, 500);
   }
 });
-apiRoutes.get("/collections/:collection/content", chunk5GO3AMON_cjs.optionalAuth(), async (c) => {
+apiRoutes.get("/collections/:collection/content", chunkB2ASV5RD_cjs.optionalAuth(), async (c) => {
   const executionStart = Date.now();
   try {
     const collection = c.req.param("collection");
@@ -890,7 +957,7 @@ apiRoutes.get("/collections/:collection/content", chunk5GO3AMON_cjs.optionalAuth
     if (!collectionResult) {
       return c.json({ error: "Collection not found" }, 404);
     }
-    const filter = chunkE2GKK5HX_cjs.QueryFilterBuilder.parseFromQuery(queryParams);
+    const filter = chunkQLPFENZ2_cjs.QueryFilterBuilder.parseFromQuery(queryParams);
     const normalizedFilter = normalizePublicContentFilter(filter, c.get("user")?.role);
     if (!normalizedFilter.where) {
       normalizedFilter.where = { and: [] };
@@ -907,7 +974,7 @@ apiRoutes.get("/collections/:collection/content", chunk5GO3AMON_cjs.optionalAuth
       normalizedFilter.limit = 50;
     }
     normalizedFilter.limit = Math.min(normalizedFilter.limit, 1e3);
-    const builder3 = new chunkE2GKK5HX_cjs.QueryFilterBuilder();
+    const builder3 = new chunkQLPFENZ2_cjs.QueryFilterBuilder();
     const queryResult = builder3.build("content", normalizedFilter);
     if (queryResult.errors.length > 0) {
       return c.json({
@@ -1028,7 +1095,7 @@ var fileValidationSchema = zod.z.object({
   // 50MB max
 });
 var apiMediaRoutes = new hono.Hono();
-apiMediaRoutes.use("*", chunk5GO3AMON_cjs.requireAuth());
+apiMediaRoutes.use("*", chunkB2ASV5RD_cjs.requireAuth());
 apiMediaRoutes.post("/upload", async (c) => {
   try {
     const user = c.get("user");
@@ -1772,8 +1839,8 @@ apiSystemRoutes.get("/env", (c) => {
 });
 var api_system_default = apiSystemRoutes;
 var adminApiRoutes = new hono.Hono();
-adminApiRoutes.use("*", chunk5GO3AMON_cjs.requireAuth());
-adminApiRoutes.use("*", chunk5GO3AMON_cjs.requireRole(["admin", "editor"]));
+adminApiRoutes.use("*", chunkB2ASV5RD_cjs.requireAuth());
+adminApiRoutes.use("*", chunkB2ASV5RD_cjs.requireRole(["admin", "editor"]));
 adminApiRoutes.get("/stats", async (c) => {
   try {
     const db = c.env.DB;
@@ -2285,7 +2352,7 @@ adminApiRoutes.delete("/collections/:id", async (c) => {
 });
 adminApiRoutes.get("/migrations/status", async (c) => {
   try {
-    const { MigrationService: MigrationService2 } = await import('./migrations-EM2D6EG2.cjs');
+    const { MigrationService: MigrationService2 } = await import('./migrations-VNYOSUNE.cjs');
     const db = c.env.DB;
     const migrationService = new MigrationService2(db);
     const status = await migrationService.getMigrationStatus();
@@ -2310,7 +2377,7 @@ adminApiRoutes.post("/migrations/run", async (c) => {
         error: "Unauthorized. Admin access required."
       }, 403);
     }
-    const { MigrationService: MigrationService2 } = await import('./migrations-EM2D6EG2.cjs');
+    const { MigrationService: MigrationService2 } = await import('./migrations-VNYOSUNE.cjs');
     const db = c.env.DB;
     const migrationService = new MigrationService2(db);
     const result = await migrationService.runPendingMigrations();
@@ -2329,7 +2396,7 @@ adminApiRoutes.post("/migrations/run", async (c) => {
 });
 adminApiRoutes.get("/migrations/validate", async (c) => {
   try {
-    const { MigrationService: MigrationService2 } = await import('./migrations-EM2D6EG2.cjs');
+    const { MigrationService: MigrationService2 } = await import('./migrations-VNYOSUNE.cjs');
     const db = c.env.DB;
     const migrationService = new MigrationService2(db);
     const validation = await migrationService.validateSchema();
@@ -2740,7 +2807,7 @@ var JWT_SECRET_FALLBACK = "your-super-secret-jwt-key-change-in-production";
 async function setCsrfCookie(c) {
   const secret = c.env?.JWT_SECRET || JWT_SECRET_FALLBACK;
   const isDev = c.env?.ENVIRONMENT === "development" || !c.env?.ENVIRONMENT;
-  const csrfToken = await chunk5GO3AMON_cjs.generateCsrfToken(secret);
+  const csrfToken = await chunkB2ASV5RD_cjs.generateCsrfToken(secret);
   cookie.setCookie(c, "csrf_token", csrfToken, {
     httpOnly: false,
     secure: !isDev,
@@ -2797,7 +2864,7 @@ var loginSchema = zod.z.object({
 });
 authRoutes.post(
   "/register",
-  chunk5GO3AMON_cjs.rateLimit({ max: 3, windowMs: 60 * 1e3, keyPrefix: "register" }),
+  chunkB2ASV5RD_cjs.rateLimit({ max: 3, windowMs: 60 * 1e3, keyPrefix: "register" }),
   async (c) => {
     try {
       const db = c.env.DB;
@@ -2834,7 +2901,7 @@ authRoutes.post(
       if (existingUser) {
         return c.json({ error: "User with this email or username already exists" }, 400);
       }
-      const passwordHash = await chunk5GO3AMON_cjs.AuthManager.hashPassword(password);
+      const passwordHash = await chunkB2ASV5RD_cjs.AuthManager.hashPassword(password);
       const userId = crypto.randomUUID();
       const now = /* @__PURE__ */ new Date();
       await db.prepare(`
@@ -2854,7 +2921,7 @@ authRoutes.post(
         now.getTime(),
         now.getTime()
       ).run();
-      const token = await chunk5GO3AMON_cjs.AuthManager.generateToken(userId, normalizedEmail, "viewer", c.env.JWT_SECRET);
+      const token = await chunkB2ASV5RD_cjs.AuthManager.generateToken(userId, normalizedEmail, "viewer", c.env.JWT_SECRET);
       cookie.setCookie(c, "auth_token", token, {
         httpOnly: true,
         secure: true,
@@ -2888,7 +2955,7 @@ authRoutes.post(
 );
 authRoutes.post(
   "/login",
-  chunk5GO3AMON_cjs.rateLimit({ max: 5, windowMs: 60 * 1e3, keyPrefix: "login" }),
+  chunkB2ASV5RD_cjs.rateLimit({ max: 5, windowMs: 60 * 1e3, keyPrefix: "login" }),
   async (c) => {
     try {
       const body = await c.req.json();
@@ -2911,19 +2978,19 @@ authRoutes.post(
       if (!user) {
         return c.json({ error: "Invalid email or password" }, 401);
       }
-      const isValidPassword = await chunk5GO3AMON_cjs.AuthManager.verifyPassword(password, user.password_hash);
+      const isValidPassword = await chunkB2ASV5RD_cjs.AuthManager.verifyPassword(password, user.password_hash);
       if (!isValidPassword) {
         return c.json({ error: "Invalid email or password" }, 401);
       }
-      if (chunk5GO3AMON_cjs.AuthManager.isLegacyHash(user.password_hash)) {
+      if (chunkB2ASV5RD_cjs.AuthManager.isLegacyHash(user.password_hash)) {
         try {
-          const newHash = await chunk5GO3AMON_cjs.AuthManager.hashPassword(password);
+          const newHash = await chunkB2ASV5RD_cjs.AuthManager.hashPassword(password);
           await db.prepare("UPDATE users SET password_hash = ?, updated_at = ? WHERE id = ?").bind(newHash, Date.now(), user.id).run();
         } catch (rehashError) {
           console.error("Password rehash failed (non-fatal):", rehashError);
         }
       }
-      const token = await chunk5GO3AMON_cjs.AuthManager.generateToken(user.id, user.email, user.role, c.env.JWT_SECRET);
+      const token = await chunkB2ASV5RD_cjs.AuthManager.generateToken(user.id, user.email, user.role, c.env.JWT_SECRET);
       cookie.setCookie(c, "auth_token", token, {
         httpOnly: true,
         secure: true,
@@ -2976,7 +3043,7 @@ authRoutes.get("/logout", (c) => {
   clearCsrfCookie(c);
   return c.redirect("/auth/login?message=You have been logged out successfully");
 });
-authRoutes.get("/me", chunk5GO3AMON_cjs.requireAuth(), async (c) => {
+authRoutes.get("/me", chunkB2ASV5RD_cjs.requireAuth(), async (c) => {
   try {
     const user = c.get("user");
     if (!user) {
@@ -2993,13 +3060,13 @@ authRoutes.get("/me", chunk5GO3AMON_cjs.requireAuth(), async (c) => {
     return c.json({ error: "Failed to get user" }, 500);
   }
 });
-authRoutes.post("/refresh", chunk5GO3AMON_cjs.requireAuth(), async (c) => {
+authRoutes.post("/refresh", chunkB2ASV5RD_cjs.requireAuth(), async (c) => {
   try {
     const user = c.get("user");
     if (!user) {
       return c.json({ error: "Not authenticated" }, 401);
     }
-    const token = await chunk5GO3AMON_cjs.AuthManager.generateToken(user.userId, user.email, user.role, c.env.JWT_SECRET);
+    const token = await chunkB2ASV5RD_cjs.AuthManager.generateToken(user.userId, user.email, user.role, c.env.JWT_SECRET);
     cookie.setCookie(c, "auth_token", token, {
       httpOnly: true,
       secure: true,
@@ -3016,7 +3083,7 @@ authRoutes.post("/refresh", chunk5GO3AMON_cjs.requireAuth(), async (c) => {
 });
 authRoutes.post(
   "/register/form",
-  chunk5GO3AMON_cjs.rateLimit({ max: 3, windowMs: 60 * 1e3, keyPrefix: "register" }),
+  chunkB2ASV5RD_cjs.rateLimit({ max: 3, windowMs: 60 * 1e3, keyPrefix: "register" }),
   async (c) => {
     try {
       const db = c.env.DB;
@@ -3063,7 +3130,7 @@ authRoutes.post(
         </div>
       `);
       }
-      const passwordHash = await chunk5GO3AMON_cjs.AuthManager.hashPassword(password);
+      const passwordHash = await chunkB2ASV5RD_cjs.AuthManager.hashPassword(password);
       const role = isFirstUser ? "admin" : "viewer";
       const userId = crypto.randomUUID();
       const now = /* @__PURE__ */ new Date();
@@ -3083,7 +3150,7 @@ authRoutes.post(
         now.getTime(),
         now.getTime()
       ).run();
-      const token = await chunk5GO3AMON_cjs.AuthManager.generateToken(userId, normalizedEmail, role, c.env.JWT_SECRET);
+      const token = await chunkB2ASV5RD_cjs.AuthManager.generateToken(userId, normalizedEmail, role, c.env.JWT_SECRET);
       cookie.setCookie(c, "auth_token", token, {
         httpOnly: true,
         secure: false,
@@ -3116,7 +3183,7 @@ authRoutes.post(
 );
 authRoutes.post(
   "/login/form",
-  chunk5GO3AMON_cjs.rateLimit({ max: 5, windowMs: 60 * 1e3, keyPrefix: "login" }),
+  chunkB2ASV5RD_cjs.rateLimit({ max: 5, windowMs: 60 * 1e3, keyPrefix: "login" }),
   async (c) => {
     try {
       const formData = await c.req.formData();
@@ -3140,7 +3207,7 @@ authRoutes.post(
         </div>
       `);
       }
-      const isValidPassword = await chunk5GO3AMON_cjs.AuthManager.verifyPassword(password, user.password_hash);
+      const isValidPassword = await chunkB2ASV5RD_cjs.AuthManager.verifyPassword(password, user.password_hash);
       if (!isValidPassword) {
         return c.html(html.html`
         <div class="bg-red-100 border border-red-400 text-red-700 px-4 py-3 rounded">
@@ -3148,15 +3215,15 @@ authRoutes.post(
         </div>
       `);
       }
-      if (chunk5GO3AMON_cjs.AuthManager.isLegacyHash(user.password_hash)) {
+      if (chunkB2ASV5RD_cjs.AuthManager.isLegacyHash(user.password_hash)) {
         try {
-          const newHash = await chunk5GO3AMON_cjs.AuthManager.hashPassword(password);
+          const newHash = await chunkB2ASV5RD_cjs.AuthManager.hashPassword(password);
           await db.prepare("UPDATE users SET password_hash = ?, updated_at = ? WHERE id = ?").bind(newHash, Date.now(), user.id).run();
         } catch (rehashError) {
           console.error("Password rehash failed (non-fatal):", rehashError);
         }
       }
-      const token = await chunk5GO3AMON_cjs.AuthManager.generateToken(user.id, user.email, user.role, c.env.JWT_SECRET);
+      const token = await chunkB2ASV5RD_cjs.AuthManager.generateToken(user.id, user.email, user.role, c.env.JWT_SECRET);
       cookie.setCookie(c, "auth_token", token, {
         httpOnly: true,
         secure: false,
@@ -3198,7 +3265,7 @@ authRoutes.post(
 );
 authRoutes.post(
   "/seed-admin",
-  chunk5GO3AMON_cjs.rateLimit({ max: 2, windowMs: 60 * 1e3, keyPrefix: "seed-admin" }),
+  chunkB2ASV5RD_cjs.rateLimit({ max: 2, windowMs: 60 * 1e3, keyPrefix: "seed-admin" }),
   async (c) => {
     try {
       const db = c.env.DB;
@@ -3220,7 +3287,7 @@ authRoutes.post(
     `).run();
       const existingAdmin = await db.prepare("SELECT id FROM users WHERE email = ? OR username = ?").bind("admin@sonicjs.com", "admin").first();
       if (existingAdmin) {
-        const passwordHash2 = await chunk5GO3AMON_cjs.AuthManager.hashPassword("sonicjs!");
+        const passwordHash2 = await chunkB2ASV5RD_cjs.AuthManager.hashPassword("sonicjs!");
         await db.prepare("UPDATE users SET password_hash = ?, updated_at = ? WHERE id = ?").bind(passwordHash2, Date.now(), existingAdmin.id).run();
         return c.json({
           message: "Admin user already exists (password updated)",
@@ -3232,7 +3299,7 @@ authRoutes.post(
           }
         });
       }
-      const passwordHash = await chunk5GO3AMON_cjs.AuthManager.hashPassword("sonicjs!");
+      const passwordHash = await chunkB2ASV5RD_cjs.AuthManager.hashPassword("sonicjs!");
       const userId = "admin-user-id";
       const now = Date.now();
       const adminEmail = "admin@sonicjs.com".toLowerCase();
@@ -3453,7 +3520,7 @@ authRoutes.post("/accept-invitation", async (c) => {
     if (existingUsername) {
       return c.json({ error: "Username is already taken" }, 400);
     }
-    const passwordHash = await chunk5GO3AMON_cjs.AuthManager.hashPassword(password);
+    const passwordHash = await chunkB2ASV5RD_cjs.AuthManager.hashPassword(password);
     const updateStmt = db.prepare(`
       UPDATE users SET 
         username = ?,
@@ -3472,7 +3539,7 @@ authRoutes.post("/accept-invitation", async (c) => {
       Date.now(),
       invitedUser.id
     ).run();
-    const authToken = await chunk5GO3AMON_cjs.AuthManager.generateToken(invitedUser.id, invitedUser.email, invitedUser.role, c.env.JWT_SECRET);
+    const authToken = await chunkB2ASV5RD_cjs.AuthManager.generateToken(invitedUser.id, invitedUser.email, invitedUser.role, c.env.JWT_SECRET);
     cookie.setCookie(c, "auth_token", authToken, {
       httpOnly: true,
       secure: true,
@@ -3489,7 +3556,7 @@ authRoutes.post("/accept-invitation", async (c) => {
 });
 authRoutes.post(
   "/request-password-reset",
-  chunk5GO3AMON_cjs.rateLimit({ max: 3, windowMs: 15 * 60 * 1e3, keyPrefix: "password-reset" }),
+  chunkB2ASV5RD_cjs.rateLimit({ max: 3, windowMs: 15 * 60 * 1e3, keyPrefix: "password-reset" }),
   async (c) => {
     try {
       const formData = await c.req.formData();
@@ -3707,7 +3774,7 @@ authRoutes.post("/reset-password", async (c) => {
     if (Date.now() > user.password_reset_expires) {
       return c.json({ error: "Reset token has expired" }, 400);
     }
-    const newPasswordHash = await chunk5GO3AMON_cjs.AuthManager.hashPassword(password);
+    const newPasswordHash = await chunkB2ASV5RD_cjs.AuthManager.hashPassword(password);
     try {
       const historyStmt = db.prepare(`
         INSERT INTO password_history (id, user_id, password_hash, created_at)
@@ -8141,7 +8208,15 @@ function renderContentFormPage(data) {
         fetch(\`/admin/content/\${contentId}/versions\`)
         .then(response => response.text())
         .then(html => {
-          document.getElementById('version-history-content').innerHTML = html;
+          const container = document.getElementById('version-history-content');
+          container.innerHTML = html;
+          // Script tags inserted via innerHTML are not executed by the browser,
+          // so we need to manually create and append them for execution.
+          container.querySelectorAll('script').forEach(oldScript => {
+            const newScript = document.createElement('script');
+            newScript.textContent = oldScript.textContent;
+            oldScript.replaceWith(newScript);
+          });
         })
         .catch(error => {
           console.error('Error loading version history:', error);
@@ -9170,9 +9245,9 @@ function parseFieldValue(field, formData, options = {}) {
   const { skipValidation = false } = options;
   const value = formData.get(field.field_name);
   const errors = [];
-  const blocksConfig = chunkE2GKK5HX_cjs.getBlocksFieldConfig(field.field_options);
+  const blocksConfig = chunkQLPFENZ2_cjs.getBlocksFieldConfig(field.field_options);
   if (blocksConfig) {
-    const parsed = chunkE2GKK5HX_cjs.parseBlocksValue(value, blocksConfig);
+    const parsed = chunkQLPFENZ2_cjs.parseBlocksValue(value, blocksConfig);
     if (!skipValidation && field.is_required && parsed.value.length === 0) {
       parsed.errors.push(`${field.field_label} is required`);
     }
@@ -9282,7 +9357,7 @@ function extractFieldData(fields, formData, options = {}) {
   }
   return { data, errors };
 }
-adminContentRoutes.use("*", chunk5GO3AMON_cjs.requireAuth());
+adminContentRoutes.use("*", chunkB2ASV5RD_cjs.requireAuth());
 async function getCollectionFields(db, collectionId) {
   const cache = chunkLFAQUR7P_cjs.getCacheService(chunkLFAQUR7P_cjs.CACHE_CONFIGS.collection);
   return cache.getOrSet(
@@ -9559,21 +9634,21 @@ adminContentRoutes.get("/new", async (c) => {
     const tinymceEnabled = await isPluginActive2(db, "tinymce-plugin");
     let tinymceSettings;
     if (tinymceEnabled) {
-      const pluginService = new chunkTWCQVJ6M_cjs.PluginService(db);
+      const pluginService = new chunk6BVLPACH_cjs.PluginService(db);
       const tinymcePlugin2 = await pluginService.getPlugin("tinymce-plugin");
       tinymceSettings = tinymcePlugin2?.settings;
     }
     const quillEnabled = await isPluginActive2(db, "quill-editor");
     let quillSettings;
     if (quillEnabled) {
-      const pluginService = new chunkTWCQVJ6M_cjs.PluginService(db);
+      const pluginService = new chunk6BVLPACH_cjs.PluginService(db);
       const quillPlugin = await pluginService.getPlugin("quill-editor");
       quillSettings = quillPlugin?.settings;
     }
     const mdxeditorEnabled = await isPluginActive2(db, "easy-mdx");
     let mdxeditorSettings;
     if (mdxeditorEnabled) {
-      const pluginService = new chunkTWCQVJ6M_cjs.PluginService(db);
+      const pluginService = new chunk6BVLPACH_cjs.PluginService(db);
       const mdxeditorPlugin = await pluginService.getPlugin("easy-mdx");
       mdxeditorSettings = mdxeditorPlugin?.settings;
     }
@@ -9664,21 +9739,21 @@ adminContentRoutes.get("/:id/edit", async (c) => {
     const tinymceEnabled = await isPluginActive2(db, "tinymce-plugin");
     let tinymceSettings;
     if (tinymceEnabled) {
-      const pluginService = new chunkTWCQVJ6M_cjs.PluginService(db);
+      const pluginService = new chunk6BVLPACH_cjs.PluginService(db);
       const tinymcePlugin2 = await pluginService.getPlugin("tinymce-plugin");
       tinymceSettings = tinymcePlugin2?.settings;
     }
     const quillEnabled = await isPluginActive2(db, "quill-editor");
     let quillSettings;
     if (quillEnabled) {
-      const pluginService = new chunkTWCQVJ6M_cjs.PluginService(db);
+      const pluginService = new chunk6BVLPACH_cjs.PluginService(db);
       const quillPlugin = await pluginService.getPlugin("quill-editor");
       quillSettings = quillPlugin?.settings;
     }
     const mdxeditorEnabled = await isPluginActive2(db, "easy-mdx");
     let mdxeditorSettings;
     if (mdxeditorEnabled) {
-      const pluginService = new chunkTWCQVJ6M_cjs.PluginService(db);
+      const pluginService = new chunk6BVLPACH_cjs.PluginService(db);
       const mdxeditorPlugin = await pluginService.getPlugin("easy-mdx");
       mdxeditorSettings = mdxeditorPlugin?.settings;
     }
@@ -9973,7 +10048,7 @@ adminContentRoutes.put("/:id", async (c) => {
     `);
   }
 });
-adminContentRoutes.post("/preview", chunk5GO3AMON_cjs.requireRole(["admin", "editor", "author"]), async (c) => {
+adminContentRoutes.post("/preview", chunkB2ASV5RD_cjs.requireRole(["admin", "editor", "author"]), async (c) => {
   try {
     const formData = await c.req.formData();
     const collectionId = formData.get("collection_id");
@@ -10351,7 +10426,7 @@ adminContentRoutes.post("/:id/restore/:version", async (c) => {
     return c.json({ success: false, error: "Failed to restore version" });
   }
 });
-adminContentRoutes.get("/:id/version/:version/preview", chunk5GO3AMON_cjs.requireRole(["admin", "editor", "author"]), async (c) => {
+adminContentRoutes.get("/:id/version/:version/preview", chunkB2ASV5RD_cjs.requireRole(["admin", "editor", "author"]), async (c) => {
   try {
     const id = c.req.param("id");
     const version = parseInt(c.req.param("version") || "0");
@@ -11422,6 +11497,36 @@ function renderUserEditPage(data) {
                 </div>
               </div>
 
+              <!-- Set Password -->
+              <div class="mb-8">
+                <h3 class="text-base font-semibold text-zinc-950 dark:text-white mb-4">Set Password</h3>
+                <p class="text-sm text-zinc-500 dark:text-zinc-400 mb-4">Leave blank to keep the current password</p>
+                <div class="grid grid-cols-1 md:grid-cols-2 gap-6">
+                  <div>
+                    <label class="block text-sm font-medium text-zinc-950 dark:text-white mb-2">New Password</label>
+                    <input
+                      type="password"
+                      name="new_password"
+                      minlength="8"
+                      placeholder="Minimum 8 characters"
+                      autocomplete="new-password"
+                      class="w-full rounded-lg bg-white dark:bg-zinc-800 px-3 py-2 text-sm text-zinc-950 dark:text-white shadow-sm ring-1 ring-inset ring-zinc-950/10 dark:ring-white/10 placeholder:text-zinc-400 dark:placeholder:text-zinc-500 focus:outline-none focus:ring-2 focus:ring-zinc-950 dark:focus:ring-white transition-shadow"
+                    />
+                  </div>
+                  <div>
+                    <label class="block text-sm font-medium text-zinc-950 dark:text-white mb-2">Confirm Password</label>
+                    <input
+                      type="password"
+                      name="confirm_password"
+                      minlength="8"
+                      placeholder="Repeat new password"
+                      autocomplete="new-password"
+                      class="w-full rounded-lg bg-white dark:bg-zinc-800 px-3 py-2 text-sm text-zinc-950 dark:text-white shadow-sm ring-1 ring-inset ring-zinc-950/10 dark:ring-white/10 placeholder:text-zinc-400 dark:placeholder:text-zinc-500 focus:outline-none focus:ring-2 focus:ring-zinc-950 dark:focus:ring-white transition-shadow"
+                    />
+                  </div>
+                </div>
+              </div>
+
               <!-- Account Status -->
               <div class="mb-8">
                 <h3 class="text-base font-semibold text-zinc-950 dark:text-white mb-4">Account Status</h3>
@@ -12318,14 +12423,14 @@ function renderUsersListPage(data) {
 
 // src/routes/admin-users.ts
 var userRoutes = new hono.Hono();
-userRoutes.use("*", chunk5GO3AMON_cjs.requireAuth());
-userRoutes.use("/users/*", chunk5GO3AMON_cjs.requireRole(["admin"]));
-userRoutes.use("/users", chunk5GO3AMON_cjs.requireRole(["admin"]));
-userRoutes.use("/invite-user", chunk5GO3AMON_cjs.requireRole(["admin"]));
-userRoutes.use("/resend-invitation/*", chunk5GO3AMON_cjs.requireRole(["admin"]));
-userRoutes.use("/cancel-invitation/*", chunk5GO3AMON_cjs.requireRole(["admin"]));
-userRoutes.use("/activity-logs", chunk5GO3AMON_cjs.requireRole(["admin"]));
-userRoutes.use("/activity-logs/*", chunk5GO3AMON_cjs.requireRole(["admin"]));
+userRoutes.use("*", chunkB2ASV5RD_cjs.requireAuth());
+userRoutes.use("/users/*", chunkB2ASV5RD_cjs.requireRole(["admin"]));
+userRoutes.use("/users", chunkB2ASV5RD_cjs.requireRole(["admin"]));
+userRoutes.use("/invite-user", chunkB2ASV5RD_cjs.requireRole(["admin"]));
+userRoutes.use("/resend-invitation/*", chunkB2ASV5RD_cjs.requireRole(["admin"]));
+userRoutes.use("/cancel-invitation/*", chunkB2ASV5RD_cjs.requireRole(["admin"]));
+userRoutes.use("/activity-logs", chunkB2ASV5RD_cjs.requireRole(["admin"]));
+userRoutes.use("/activity-logs/*", chunkB2ASV5RD_cjs.requireRole(["admin"]));
 userRoutes.get("/", (c) => {
   return c.redirect("/admin/dashboard");
 });
@@ -12480,7 +12585,7 @@ userRoutes.put("/profile", async (c) => {
       Date.now(),
       user.userId
     ).run();
-    await chunk5GO3AMON_cjs.logActivity(
+    await chunkB2ASV5RD_cjs.logActivity(
       db,
       user.userId,
       "profile.update",
@@ -12543,7 +12648,7 @@ userRoutes.post("/profile/avatar", async (c) => {
       SELECT first_name, last_name FROM users WHERE id = ?
     `);
     const userData = await userStmt.bind(user.userId).first();
-    await chunk5GO3AMON_cjs.logActivity(
+    await chunkB2ASV5RD_cjs.logActivity(
       db,
       user.userId,
       "profile.avatar_update",
@@ -12614,7 +12719,7 @@ userRoutes.post("/profile/password", async (c) => {
         dismissible: true
       }));
     }
-    const validPassword = await chunk5GO3AMON_cjs.AuthManager.verifyPassword(currentPassword, userData.password_hash);
+    const validPassword = await chunkB2ASV5RD_cjs.AuthManager.verifyPassword(currentPassword, userData.password_hash);
     if (!validPassword) {
       return c.html(renderAlert2({
         type: "error",
@@ -12622,7 +12727,7 @@ userRoutes.post("/profile/password", async (c) => {
         dismissible: true
       }));
     }
-    const newPasswordHash = await chunk5GO3AMON_cjs.AuthManager.hashPassword(newPassword);
+    const newPasswordHash = await chunkB2ASV5RD_cjs.AuthManager.hashPassword(newPassword);
     const historyStmt = db.prepare(`
       INSERT INTO password_history (id, user_id, password_hash, created_at)
       VALUES (?, ?, ?, ?)
@@ -12638,7 +12743,7 @@ userRoutes.post("/profile/password", async (c) => {
       WHERE id = ?
     `);
     await updateStmt.bind(newPasswordHash, Date.now(), user.userId).run();
-    await chunk5GO3AMON_cjs.logActivity(
+    await chunkB2ASV5RD_cjs.logActivity(
       db,
       user.userId,
       "profile.password_change",
@@ -12705,7 +12810,7 @@ userRoutes.get("/users", async (c) => {
     `);
     const countResult = await countStmt.bind(...params).first();
     const totalUsers = countResult?.total || 0;
-    await chunk5GO3AMON_cjs.logActivity(
+    await chunkB2ASV5RD_cjs.logActivity(
       db,
       user.userId,
       "users.list_view",
@@ -12743,6 +12848,7 @@ userRoutes.get("/users", async (c) => {
       formattedLastLogin: u.last_login_at ? new Date(u.last_login_at).toLocaleDateString() : void 0,
       formattedCreatedAt: new Date(u.created_at).toLocaleDateString()
     }));
+    const successMessage = c.req.query("success") || void 0;
     const pageData = {
       users,
       currentPage: page,
@@ -12751,6 +12857,7 @@ userRoutes.get("/users", async (c) => {
       searchFilter: search,
       roleFilter,
       statusFilter,
+      success: successMessage,
       pagination: {
         currentPage: page,
         totalPages: Math.ceil(totalUsers / limit),
@@ -12861,7 +12968,7 @@ userRoutes.post("/users/new", async (c) => {
         dismissible: true
       }));
     }
-    const passwordHash = await chunk5GO3AMON_cjs.AuthManager.hashPassword(password);
+    const passwordHash = await chunkB2ASV5RD_cjs.AuthManager.hashPassword(password);
     const userId = crypto.randomUUID();
     const createStmt = db.prepare(`
       INSERT INTO users (
@@ -12884,7 +12991,7 @@ userRoutes.post("/users/new", async (c) => {
       Date.now(),
       Date.now()
     ).run();
-    await chunk5GO3AMON_cjs.logActivity(
+    await chunkB2ASV5RD_cjs.logActivity(
       db,
       user.userId,
       "user!.create",
@@ -12894,7 +13001,8 @@ userRoutes.post("/users/new", async (c) => {
       c.req.header("x-forwarded-for") || c.req.header("cf-connecting-ip"),
       c.req.header("user-agent")
     );
-    return c.redirect(`/admin/users/${userId}/edit?success=User created successfully`);
+    c.header("HX-Redirect", "/admin/users?success=User created successfully");
+    return c.body(null, 200);
   } catch (error) {
     console.error("User creation error:", error);
     return c.html(renderAlert2({
@@ -12922,7 +13030,7 @@ userRoutes.get("/users/:id", async (c) => {
     if (!userRecord) {
       return c.json({ error: "User not found" }, 404);
     }
-    await chunk5GO3AMON_cjs.logActivity(
+    await chunkB2ASV5RD_cjs.logActivity(
       db,
       user.userId,
       "user!.view",
@@ -13040,6 +13148,8 @@ userRoutes.put("/users/:id", async (c) => {
     const role = validRoles.includes(roleInput) ? roleInput : "viewer";
     const isActive = formData.get("is_active") === "1";
     const emailVerified = formData.get("email_verified") === "1";
+    const newPassword = formData.get("new_password")?.toString() || "";
+    const confirmPassword = formData.get("confirm_password")?.toString() || "";
     const profileDisplayName = chunkMNWKYY5E_cjs.sanitizeInput(formData.get("profile_display_name")?.toString()) || null;
     const profileBio = chunkMNWKYY5E_cjs.sanitizeInput(formData.get("profile_bio")?.toString()) || null;
     const profileCompany = chunkMNWKYY5E_cjs.sanitizeInput(formData.get("profile_company")?.toString()) || null;
@@ -13063,6 +13173,22 @@ userRoutes.put("/users/:id", async (c) => {
         dismissible: true
       }));
     }
+    if (newPassword) {
+      if (newPassword.length < 8) {
+        return c.html(renderAlert2({
+          type: "error",
+          message: "Password must be at least 8 characters long.",
+          dismissible: true
+        }));
+      }
+      if (newPassword !== confirmPassword) {
+        return c.html(renderAlert2({
+          type: "error",
+          message: "Passwords do not match.",
+          dismissible: true
+        }));
+      }
+    }
     if (profileWebsite) {
       try {
         new URL(profileWebsite);
@@ -13105,6 +13231,13 @@ userRoutes.put("/users/:id", async (c) => {
       Date.now(),
       userId
     ).run();
+    if (newPassword) {
+      const passwordHash = await chunkB2ASV5RD_cjs.AuthManager.hashPassword(newPassword);
+      const updatePasswordStmt = db.prepare(`
+        UPDATE users SET password_hash = ?, updated_at = ? WHERE id = ?
+      `);
+      await updatePasswordStmt.bind(passwordHash, Date.now(), userId).run();
+    }
     const hasProfileData = profileDisplayName || profileBio || profileCompany || profileJobTitle || profileWebsite || profileLocation || profileDateOfBirth;
     if (hasProfileData) {
       const now = Date.now();
@@ -13149,13 +13282,13 @@ userRoutes.put("/users/:id", async (c) => {
         ).run();
       }
     }
-    await chunk5GO3AMON_cjs.logActivity(
+    await chunkB2ASV5RD_cjs.logActivity(
       db,
       user.userId,
       "user.update",
       "users",
       userId,
-      { fields: ["first_name", "last_name", "username", "email", "phone", "role", "is_active", "email_verified", "profile"] },
+      { fields: ["first_name", "last_name", "username", "email", "phone", "role", "is_active", "email_verified", "profile", ...newPassword ? ["password"] : []] },
       c.req.header("x-forwarded-for") || c.req.header("cf-connecting-ip"),
       c.req.header("user-agent")
     );
@@ -13194,7 +13327,7 @@ userRoutes.post("/users/:id/toggle", async (c) => {
       UPDATE users SET is_active = ?, updated_at = ? WHERE id = ?
     `);
     await toggleStmt.bind(active ? 1 : 0, Date.now(), userId).run();
-    await chunk5GO3AMON_cjs.logActivity(
+    await chunkB2ASV5RD_cjs.logActivity(
       db,
       user.userId,
       active ? "user.activate" : "user.deactivate",
@@ -13235,7 +13368,7 @@ userRoutes.delete("/users/:id", async (c) => {
         DELETE FROM users WHERE id = ?
       `);
       await deleteStmt.bind(userId).run();
-      await chunk5GO3AMON_cjs.logActivity(
+      await chunkB2ASV5RD_cjs.logActivity(
         db,
         user.userId,
         "user!.hard_delete",
@@ -13254,7 +13387,7 @@ userRoutes.delete("/users/:id", async (c) => {
         UPDATE users SET is_active = 0, updated_at = ? WHERE id = ?
       `);
       await deleteStmt.bind(Date.now(), userId).run();
-      await chunk5GO3AMON_cjs.logActivity(
+      await chunkB2ASV5RD_cjs.logActivity(
         db,
         user.userId,
         "user!.soft_delete",
@@ -13320,7 +13453,7 @@ userRoutes.post("/invite-user", async (c) => {
       Date.now(),
       Date.now()
     ).run();
-    await chunk5GO3AMON_cjs.logActivity(
+    await chunkB2ASV5RD_cjs.logActivity(
       db,
       user.userId,
       "user!.invite_sent",
@@ -13377,7 +13510,7 @@ userRoutes.post("/resend-invitation/:id", async (c) => {
       Date.now(),
       userId
     ).run();
-    await chunk5GO3AMON_cjs.logActivity(
+    await chunkB2ASV5RD_cjs.logActivity(
       db,
       user.userId,
       "user!.invitation_resent",
@@ -13413,7 +13546,7 @@ userRoutes.delete("/cancel-invitation/:id", async (c) => {
     }
     const deleteStmt = db.prepare(`DELETE FROM users WHERE id = ?`);
     await deleteStmt.bind(userId).run();
-    await chunk5GO3AMON_cjs.logActivity(
+    await chunkB2ASV5RD_cjs.logActivity(
       db,
       user.userId,
       "user!.invitation_cancelled",
@@ -13496,7 +13629,7 @@ userRoutes.get("/activity-logs", async (c) => {
       ...log,
       details: log.details ? JSON.parse(log.details) : null
     }));
-    await chunk5GO3AMON_cjs.logActivity(
+    await chunkB2ASV5RD_cjs.logActivity(
       db,
       user.userId,
       "activity.logs_viewed",
@@ -13603,7 +13736,7 @@ userRoutes.get("/activity-logs/export", async (c) => {
       csvRows.push(row.join(","));
     }
     const csvContent = csvRows.join("\n");
-    await chunk5GO3AMON_cjs.logActivity(
+    await chunkB2ASV5RD_cjs.logActivity(
       db,
       user.userId,
       "activity.logs_exported",
@@ -14942,7 +15075,7 @@ var fileValidationSchema2 = zod.z.object({
   // 50MB max
 });
 var adminMediaRoutes = new hono.Hono();
-adminMediaRoutes.use("*", chunk5GO3AMON_cjs.requireAuth());
+adminMediaRoutes.use("*", chunkB2ASV5RD_cjs.requireAuth());
 adminMediaRoutes.get("/", async (c) => {
   try {
     const user = c.get("user");
@@ -15528,7 +15661,7 @@ adminMediaRoutes.put("/:id", async (c) => {
     `);
   }
 });
-adminMediaRoutes.delete("/cleanup", chunk5GO3AMON_cjs.requireRole("admin"), async (c) => {
+adminMediaRoutes.delete("/cleanup", chunkB2ASV5RD_cjs.requireRole("admin"), async (c) => {
   try {
     const db = c.env.DB;
     const allMediaStmt = db.prepare("SELECT id, r2_key, filename FROM media WHERE deleted_at IS NULL");
@@ -17255,6 +17388,7 @@ function renderOTPLoginSettingsContent(plugin, settings) {
   const maxAttempts = settings.maxAttempts || 3;
   const rateLimitPerHour = settings.rateLimitPerHour || 5;
   const allowNewUserRegistration = settings.allowNewUserRegistration || false;
+  const logoUrl = settings.logoUrl || "";
   return `
     <div class="space-y-6">
       <!-- Test OTP Section -->
@@ -17438,6 +17572,7 @@ function renderOTPLoginSettingsContent(plugin, settings) {
 
         <div class="bg-white rounded-lg overflow-hidden shadow-lg">
           <div style="background: linear-gradient(135deg, #667eea 0%, #764ba2 100%); color: white; padding: 30px 20px; text-align: center;">
+            ${logoUrl ? `<img src="${logoUrl}" alt="Logo" style="max-width: 150px; height: auto; margin: 0 auto 16px;">` : ""}
             <h3 style="margin: 0 0 8px 0; font-size: 24px; font-weight: 600;">Your Login Code</h3>
             <p style="margin: 0; opacity: 0.95; font-size: 14px;">Enter this code to sign in to ${siteName}</p>
           </div>
@@ -17751,7 +17886,7 @@ function renderEmailSettingsContent(plugin, settings) {
 
 // src/routes/admin-plugins.ts
 var adminPluginRoutes = new hono.Hono();
-adminPluginRoutes.use("*", chunk5GO3AMON_cjs.requireAuth());
+adminPluginRoutes.use("*", chunkB2ASV5RD_cjs.requireAuth());
 var AVAILABLE_PLUGINS = [
   {
     id: "third-party-faq",
@@ -17878,7 +18013,7 @@ adminPluginRoutes.get("/", async (c) => {
     if (user?.role !== "admin") {
       return c.text("Access denied", 403);
     }
-    const pluginService = new chunkTWCQVJ6M_cjs.PluginService(db);
+    const pluginService = new chunk6BVLPACH_cjs.PluginService(db);
     let installedPlugins = [];
     let stats = { total: 0, active: 0, inactive: 0, errors: 0, uninstalled: 0 };
     try {
@@ -17954,7 +18089,7 @@ adminPluginRoutes.get("/:id", async (c) => {
     if (user?.role !== "admin") {
       return c.redirect("/admin/plugins");
     }
-    const pluginService = new chunkTWCQVJ6M_cjs.PluginService(db);
+    const pluginService = new chunk6BVLPACH_cjs.PluginService(db);
     const plugin = await pluginService.getPlugin(pluginId);
     if (!plugin) {
       return c.text("Plugin not found", 404);
@@ -17962,17 +18097,9 @@ adminPluginRoutes.get("/:id", async (c) => {
     const activity = await pluginService.getPluginActivity(pluginId, 20);
     let enrichedSettings = plugin.settings || {};
     if (pluginId === "otp-login") {
-      const generalSettings = await db.prepare(`
-        SELECT value FROM settings WHERE key = 'general'
-      `).first();
-      let siteName = "SonicJS";
-      if (generalSettings?.value) {
-        try {
-          const parsed = JSON.parse(generalSettings.value);
-          siteName = parsed.siteName || "SonicJS";
-        } catch (e) {
-        }
-      }
+      const settingsService = new chunkLFAQUR7P_cjs.SettingsService(db);
+      const generalSettings = await settingsService.getGeneralSettings();
+      const siteName = generalSettings.siteName || "SonicJS";
       const emailPlugin = await db.prepare(`
         SELECT settings FROM plugins WHERE id = 'email'
       `).first();
@@ -18038,7 +18165,7 @@ adminPluginRoutes.post("/:id/activate", async (c) => {
     if (user?.role !== "admin") {
       return c.json({ error: "Access denied" }, 403);
     }
-    const pluginService = new chunkTWCQVJ6M_cjs.PluginService(db);
+    const pluginService = new chunk6BVLPACH_cjs.PluginService(db);
     await pluginService.activatePlugin(pluginId);
     return c.json({ success: true });
   } catch (error) {
@@ -18055,7 +18182,7 @@ adminPluginRoutes.post("/:id/deactivate", async (c) => {
     if (user?.role !== "admin") {
       return c.json({ error: "Access denied" }, 403);
     }
-    const pluginService = new chunkTWCQVJ6M_cjs.PluginService(db);
+    const pluginService = new chunk6BVLPACH_cjs.PluginService(db);
     await pluginService.deactivatePlugin(pluginId);
     return c.json({ success: true });
   } catch (error) {
@@ -18072,7 +18199,7 @@ adminPluginRoutes.post("/install", async (c) => {
       return c.json({ error: "Access denied" }, 403);
     }
     const body = await c.req.json();
-    const pluginService = new chunkTWCQVJ6M_cjs.PluginService(db);
+    const pluginService = new chunk6BVLPACH_cjs.PluginService(db);
     if (body.name === "faq-plugin") {
       const faqPlugin = await pluginService.installPlugin({
         id: "third-party-faq",
@@ -18342,7 +18469,7 @@ adminPluginRoutes.post("/:id/uninstall", async (c) => {
     if (user?.role !== "admin") {
       return c.json({ error: "Access denied" }, 403);
     }
-    const pluginService = new chunkTWCQVJ6M_cjs.PluginService(db);
+    const pluginService = new chunk6BVLPACH_cjs.PluginService(db);
     await pluginService.uninstallPlugin(pluginId);
     return c.json({ success: true });
   } catch (error) {
@@ -18360,7 +18487,7 @@ adminPluginRoutes.post("/:id/settings", async (c) => {
       return c.json({ error: "Access denied" }, 403);
     }
     const settings = await c.req.json();
-    const pluginService = new chunkTWCQVJ6M_cjs.PluginService(db);
+    const pluginService = new chunk6BVLPACH_cjs.PluginService(db);
     await pluginService.updatePluginSettings(pluginId, settings);
     if (pluginId === "core-auth") {
       try {
@@ -19168,7 +19295,7 @@ function renderLogConfigPage(data) {
 
 // src/routes/admin-logs.ts
 var adminLogsRoutes = new hono.Hono();
-adminLogsRoutes.use("*", chunk5GO3AMON_cjs.requireAuth());
+adminLogsRoutes.use("*", chunkB2ASV5RD_cjs.requireAuth());
 adminLogsRoutes.get("/", async (c) => {
   try {
     const user = c.get("user");
@@ -21496,9 +21623,9 @@ function renderStorageUsage(databaseSizeBytes, mediaSizeBytes) {
 }
 
 // src/routes/admin-dashboard.ts
-var VERSION = chunkE2GKK5HX_cjs.getCoreVersion();
+var VERSION = chunkQLPFENZ2_cjs.getCoreVersion();
 var router = new hono.Hono();
-router.use("*", chunk5GO3AMON_cjs.requireAuth());
+router.use("*", chunkB2ASV5RD_cjs.requireAuth());
 router.get("/", async (c) => {
   const user = c.get("user");
   try {
@@ -23317,10 +23444,10 @@ function renderCollectionFormPage(data) {
 
 // src/routes/admin-collections.ts
 var adminCollectionsRoutes = new hono.Hono();
-adminCollectionsRoutes.use("*", chunk5GO3AMON_cjs.requireAuth());
-adminCollectionsRoutes.post("*", chunk5GO3AMON_cjs.requireRole(["admin"]));
-adminCollectionsRoutes.put("*", chunk5GO3AMON_cjs.requireRole(["admin"]));
-adminCollectionsRoutes.delete("*", chunk5GO3AMON_cjs.requireRole(["admin"]));
+adminCollectionsRoutes.use("*", chunkB2ASV5RD_cjs.requireAuth());
+adminCollectionsRoutes.post("*", chunkB2ASV5RD_cjs.requireRole(["admin"]));
+adminCollectionsRoutes.put("*", chunkB2ASV5RD_cjs.requireRole(["admin"]));
+adminCollectionsRoutes.delete("*", chunkB2ASV5RD_cjs.requireRole(["admin"]));
 adminCollectionsRoutes.get("/", async (c) => {
   try {
     const user = c.get("user");
@@ -25516,7 +25643,7 @@ function renderDatabaseToolsSettings(settings) {
 
 // src/routes/admin-settings.ts
 var adminSettingsRoutes = new hono.Hono();
-adminSettingsRoutes.use("*", chunk5GO3AMON_cjs.requireAuth());
+adminSettingsRoutes.use("*", chunkB2ASV5RD_cjs.requireAuth());
 function getMockSettings(user) {
   return {
     general: {
@@ -25684,7 +25811,7 @@ adminSettingsRoutes.get("/database-tools", (c) => {
 adminSettingsRoutes.get("/api/migrations/status", async (c) => {
   try {
     const db = c.env.DB;
-    const migrationService = new chunkEAJJHE5F_cjs.MigrationService(db);
+    const migrationService = new chunkDE5YTNCD_cjs.MigrationService(db);
     const status = await migrationService.getMigrationStatus();
     return c.json({
       success: true,
@@ -25708,7 +25835,7 @@ adminSettingsRoutes.post("/api/migrations/run", async (c) => {
       }, 403);
     }
     const db = c.env.DB;
-    const migrationService = new chunkEAJJHE5F_cjs.MigrationService(db);
+    const migrationService = new chunkDE5YTNCD_cjs.MigrationService(db);
     const result = await migrationService.runPendingMigrations();
     return c.json({
       success: result.success,
@@ -25726,7 +25853,7 @@ adminSettingsRoutes.post("/api/migrations/run", async (c) => {
 adminSettingsRoutes.get("/api/migrations/validate", async (c) => {
   try {
     const db = c.env.DB;
-    const migrationService = new chunkEAJJHE5F_cjs.MigrationService(db);
+    const migrationService = new chunkDE5YTNCD_cjs.MigrationService(db);
     const validation = await migrationService.validateSchema();
     return c.json({
       success: true,
@@ -27616,7 +27743,7 @@ function renderFormCreatePage(data) {
 
 // src/routes/admin-forms.ts
 var adminFormsRoutes = new hono.Hono();
-adminFormsRoutes.use("*", chunk5GO3AMON_cjs.requireAuth());
+adminFormsRoutes.use("*", chunkB2ASV5RD_cjs.requireAuth());
 adminFormsRoutes.get("/", async (c) => {
   try {
     const user = c.get("user");
@@ -28421,7 +28548,7 @@ publicFormsRoutes.post("/:identifier/submit", async (c) => {
     `).bind(now, form.id).run();
     let contentId = null;
     try {
-      contentId = await chunkTWCQVJ6M_cjs.createContentFromSubmission(
+      contentId = await chunk6BVLPACH_cjs.createContentFromSubmission(
         db,
         sanitizedData,
         { id: form.id, name: form.name, display_name: form.display_name },
@@ -28789,9 +28916,9 @@ function renderAPIReferencePage(data) {
 }
 
 // src/routes/admin-api-reference.ts
-var VERSION2 = chunkE2GKK5HX_cjs.getCoreVersion();
+var VERSION2 = chunkQLPFENZ2_cjs.getCoreVersion();
 var router2 = new hono.Hono();
-router2.use("*", chunk5GO3AMON_cjs.requireAuth());
+router2.use("*", chunkB2ASV5RD_cjs.requireAuth());
 router2.get("/", async (c) => {
   const user = c.get("user");
   try {
@@ -28878,5 +29005,5 @@ exports.router = router;
 exports.router2 = router2;
 exports.test_cleanup_default = test_cleanup_default;
 exports.userRoutes = userRoutes;
-//# sourceMappingURL=chunk-HGKBMUYY.cjs.map
-//# sourceMappingURL=chunk-HGKBMUYY.cjs.map
+//# sourceMappingURL=chunk-ASAEJ4B7.cjs.map
+//# sourceMappingURL=chunk-ASAEJ4B7.cjs.map