@sonicjs-cms/core 2.14.0 → 2.15.0

package/dist/{chunk-I6FFGQIT.cjs → chunk-43AB4EH4.cjs}

@@ -908,225 +908,737 @@ var PluginService = class {
   }
 };
 
-// src/services/plugin-bootstrap.ts
-var PluginBootstrapService = class {
-  constructor(db) {
-    this.db = db;
-    this.pluginService = new PluginService(db);
-  }
-  pluginService;
-  /**
-   * Core plugins that should always be available in the system
-   */
-  CORE_PLUGINS = [
-    {
-      id: "core-auth",
-      name: "core-auth",
-      display_name: "Authentication System",
-      description: "Core authentication and user management system",
-      version: "1.0.0",
-      author: "SonicJS Team",
-      category: "security",
-      icon: "\u{1F510}",
-      permissions: ["manage:users", "manage:roles", "manage:permissions"],
-      dependencies: [],
-      settings: {
-        requiredFields: {
-          email: { required: true, minLength: 5, label: "Email", type: "email" },
-          password: { required: true, minLength: 8, label: "Password", type: "password" },
-          username: { required: true, minLength: 3, label: "Username", type: "text" },
-          firstName: { required: true, minLength: 1, label: "First Name", type: "text" },
-          lastName: { required: true, minLength: 1, label: "Last Name", type: "text" }
+// src/plugins/manifest-registry.ts
+var PLUGIN_REGISTRY = {
+  "ai-search": {
+    "id": "ai-search",
+    "codeName": "ai-search-plugin",
+    "displayName": "AI Search",
+    "description": "Advanced search with Cloudflare AI Search. Full-text search, semantic search, and advanced filtering across all content collections.",
+    "version": "1.0.0",
+    "author": "SonicJS",
+    "category": "content",
+    "iconEmoji": "\u{1F50D}",
+    "is_core": true,
+    "permissions": [
+      "settings:write",
+      "admin:access",
+      "content:read"
+    ],
+    "dependencies": [],
+    "defaultSettings": {
+      "enabled": true,
+      "ai_mode_enabled": true,
+      "selected_collections": [],
+      "dismissed_collections": [],
+      "autocomplete_enabled": true,
+      "cache_duration": 1,
+      "results_limit": 20,
+      "index_media": false
+    },
+    "adminMenu": {
+      "label": "AI Search",
+      "icon": "magnifying-glass",
+      "path": "/admin/plugins/ai-search",
+      "order": 50
+    }
+  },
+  "code-examples-plugin": {
+    "id": "code-examples-plugin",
+    "codeName": "code-examples-plugin",
+    "displayName": "Code Examples",
+    "description": "Code snippets and examples library with syntax highlighting and categorization",
+    "version": "1.0.0-beta.1",
+    "author": "SonicJS Team",
+    "category": "content",
+    "iconEmoji": "\u{1F4BB}",
+    "is_core": false,
+    "permissions": [
+      "code-examples:manage"
+    ],
+    "dependencies": [],
+    "defaultSettings": {},
+    "adminMenu": null
+  },
+  "core-analytics": {
+    "id": "core-analytics",
+    "codeName": "core-analytics",
+    "displayName": "Analytics & Insights",
+    "description": "Core analytics system for tracking page views, user behavior, and content performance. Provides dashboards and reports with real-time metrics",
+    "version": "1.0.0-beta.1",
+    "author": "SonicJS Team",
+    "category": "seo",
+    "iconEmoji": "\u{1F4CA}",
+    "is_core": true,
+    "permissions": [
+      "analytics:view",
+      "analytics:export"
+    ],
+    "dependencies": [],
+    "defaultSettings": {},
+    "adminMenu": {
+      "label": "Analytics",
+      "icon": "chart-bar",
+      "path": "/admin/analytics",
+      "order": 50
+    }
+  },
+  "core-auth": {
+    "id": "core-auth",
+    "codeName": "core-auth",
+    "displayName": "Authentication System",
+    "description": "Core authentication and user management system with role-based access control, session management, and security features",
+    "version": "1.0.0-beta.1",
+    "author": "SonicJS Team",
+    "category": "security",
+    "iconEmoji": "\u{1F510}",
+    "is_core": true,
+    "permissions": [
+      "manage:users",
+      "manage:roles",
+      "manage:permissions"
+    ],
+    "dependencies": [],
+    "defaultSettings": {
+      "requiredFields": {
+        "email": {
+          "required": true,
+          "minLength": 5,
+          "label": "Email",
+          "type": "email"
         },
-        validation: {
-          emailFormat: true,
-          allowDuplicateUsernames: false,
-          passwordRequirements: {
-            requireUppercase: false,
-            requireLowercase: false,
-            requireNumbers: false,
-            requireSpecialChars: false
-          }
+        "password": {
+          "required": true,
+          "minLength": 8,
+          "label": "Password",
+          "type": "password"
+        },
+        "username": {
+          "required": true,
+          "minLength": 3,
+          "label": "Username",
+          "type": "text"
         },
-        registration: {
-          enabled: true,
-          requireEmailVerification: false,
-          defaultRole: "viewer"
+        "firstName": {
+          "required": true,
+          "minLength": 1,
+          "label": "First Name",
+          "type": "text"
+        },
+        "lastName": {
+          "required": true,
+          "minLength": 1,
+          "label": "Last Name",
+          "type": "text"
+        }
+      },
+      "validation": {
+        "emailFormat": true,
+        "allowDuplicateUsernames": false,
+        "passwordRequirements": {
+          "requireUppercase": false,
+          "requireLowercase": false,
+          "requireNumbers": false,
+          "requireSpecialChars": false
         }
+      },
+      "registration": {
+        "enabled": true,
+        "requireEmailVerification": false,
+        "defaultRole": "viewer"
       }
     },
-    {
-      id: "core-media",
-      name: "core-media",
-      display_name: "Media Manager",
-      description: "Core media upload and management system",
-      version: "1.0.0",
-      author: "SonicJS Team",
-      category: "media",
-      icon: "\u{1F4F8}",
-      permissions: ["manage:media", "upload:files"],
-      dependencies: [],
-      settings: {}
+    "adminMenu": null
+  },
+  "core-cache": {
+    "id": "core-cache",
+    "codeName": "core-cache",
+    "displayName": "Cache System",
+    "description": "Three-tiered caching system with in-memory and KV storage. Provides automatic caching for content, users, media, and API responses with configurable TTL and invalidation patterns.",
+    "version": "1.0.0-beta.1",
+    "author": "SonicJS",
+    "category": "system",
+    "iconEmoji": "\u26A1",
+    "is_core": true,
+    "permissions": [
+      "cache.view",
+      "cache.clear",
+      "cache.invalidate"
+    ],
+    "dependencies": [],
+    "defaultSettings": {
+      "enableMemoryCache": true,
+      "enableKVCache": true,
+      "enableDatabaseCache": true,
+      "defaultTTL": 3600
     },
-    {
-      id: "database-tools",
-      name: "database-tools",
-      display_name: "Database Tools",
-      description: "Database management tools including truncate, backup, and validation",
-      version: "1.0.0",
-      author: "SonicJS Team",
-      category: "system",
-      icon: "\u{1F5C4}\uFE0F",
-      permissions: ["manage:database", "admin"],
-      dependencies: [],
-      settings: {
-        enableTruncate: true,
-        enableBackup: true,
-        enableValidation: true,
-        requireConfirmation: true
-      }
+    "adminMenu": null
+  },
+  "core-media": {
+    "id": "core-media",
+    "codeName": "core-media",
+    "displayName": "Media Manager",
+    "description": "Core media upload and management system with support for images, videos, and documents. Includes automatic optimization, thumbnail generation, and cloud storage integration",
+    "version": "1.0.0-beta.1",
+    "author": "SonicJS Team",
+    "category": "media",
+    "iconEmoji": "\u{1F4F8}",
+    "is_core": true,
+    "permissions": [
+      "manage:media",
+      "upload:files"
+    ],
+    "dependencies": [],
+    "defaultSettings": {},
+    "adminMenu": {
+      "label": "Media",
+      "icon": "image",
+      "path": "/admin/media",
+      "order": 30
+    }
+  },
+  "database-tools": {
+    "id": "database-tools",
+    "codeName": "database-tools",
+    "displayName": "Database Tools",
+    "description": "Database management and administration tools including migrations, backups, and query execution",
+    "version": "1.0.0-beta.1",
+    "author": "SonicJS Team",
+    "category": "development",
+    "iconEmoji": "\u{1F5C4}\uFE0F",
+    "is_core": false,
+    "permissions": [
+      "database:admin"
+    ],
+    "dependencies": [],
+    "defaultSettings": {
+      "enableTruncate": true,
+      "enableBackup": true,
+      "enableValidation": true,
+      "requireConfirmation": true
     },
-    {
-      id: "seed-data",
-      name: "seed-data",
-      display_name: "Seed Data",
-      description: "Generate realistic example users and content for testing and development",
-      version: "1.0.0",
-      author: "SonicJS Team",
-      category: "development",
-      icon: "\u{1F331}",
-      permissions: ["admin"],
-      dependencies: [],
-      settings: {
-        userCount: 20,
-        contentCount: 200,
-        defaultPassword: "password123"
-      }
+    "adminMenu": null
+  },
+  "demo-login-plugin": {
+    "id": "demo-login-plugin",
+    "codeName": "demo-login-plugin",
+    "displayName": "Demo Login",
+    "description": "Quick demo login functionality for testing and demonstrations",
+    "version": "1.0.0-beta.1",
+    "author": "SonicJS Team",
+    "category": "utilities",
+    "iconEmoji": "\u{1F3AF}",
+    "is_core": false,
+    "permissions": [],
+    "dependencies": [
+      "core-auth"
+    ],
+    "defaultSettings": {
+      "enableNotice": true,
+      "demoEmail": "admin@sonicjs.com",
+      "demoPassword": "sonicjs!"
     },
-    {
-      id: "core-cache",
-      name: "core-cache",
-      display_name: "Cache System",
-      description: "Three-tiered caching system with memory, KV, and database layers",
-      version: "1.0.0",
-      author: "SonicJS Team",
-      category: "performance",
-      icon: "\u26A1",
-      permissions: ["manage:cache", "view:stats"],
-      dependencies: [],
-      settings: {
-        enableMemoryCache: true,
-        enableKVCache: true,
-        enableDatabaseCache: true,
-        defaultTTL: 3600
-      }
+    "adminMenu": null
+  },
+  "design": {
+    "id": "design",
+    "codeName": "design",
+    "displayName": "Design System",
+    "description": "Design system management including themes, components, and UI customization. Provides a visual interface for managing design tokens, typography, colors, and component library.",
+    "version": "1.0.0-beta.1",
+    "author": "SonicJS",
+    "category": "utilities",
+    "iconEmoji": "\u{1F3A8}",
+    "is_core": false,
+    "permissions": [
+      "design.view",
+      "design.edit"
+    ],
+    "dependencies": [],
+    "defaultSettings": {
+      "defaultTheme": "light",
+      "customCSS": ""
     },
-    {
-      id: "workflow-plugin",
-      name: "workflow-plugin",
-      display_name: "Workflow Management",
-      description: "Content workflow management with approval chains, scheduling, and automation",
-      version: "1.0.0-beta.1",
-      author: "SonicJS Team",
-      category: "content",
-      icon: "\u{1F504}",
-      permissions: ["manage:workflows", "view:workflows", "transition:content"],
-      dependencies: ["content-plugin"],
-      settings: {
-        enableApprovalChains: true,
-        enableScheduling: true,
-        enableAutomation: true,
-        enableNotifications: true
-      }
+    "adminMenu": {
+      "label": "Design",
+      "icon": "palette",
+      "path": "/admin/design",
+      "order": 80
+    }
+  },
+  "easy-mdx": {
+    "id": "easy-mdx",
+    "codeName": "easy-mdx",
+    "displayName": "EasyMDE Markdown Editor",
+    "description": "Lightweight markdown editor with live preview. Provides a simple and efficient editor with markdown support for richtext fields.",
+    "version": "1.0.0",
+    "author": "SonicJS Team",
+    "category": "editor",
+    "iconEmoji": "\u{1F4DD}",
+    "is_core": false,
+    "permissions": [],
+    "dependencies": [],
+    "defaultSettings": {
+      "defaultHeight": 400,
+      "theme": "dark",
+      "toolbar": "full",
+      "placeholder": "Start writing your content..."
     },
-    {
-      id: "easy-mdx",
-      name: "easy-mdx",
-      display_name: "EasyMDE Editor",
-      description: "Lightweight markdown editor with live preview for richtext fields",
-      version: "1.0.0",
-      author: "SonicJS Team",
-      category: "editor",
-      icon: "\u270D\uFE0F",
-      permissions: [],
-      dependencies: [],
-      settings: {
-        defaultHeight: 400,
-        toolbar: "full",
-        placeholder: "Start writing your content..."
-      }
+    "adminMenu": null
+  },
+  "email": {
+    "id": "email",
+    "codeName": "email",
+    "displayName": "Email",
+    "description": "Send transactional emails using Resend",
+    "version": "1.0.0-beta.1",
+    "author": "SonicJS Team",
+    "category": "utilities",
+    "iconEmoji": "\u{1F4E7}",
+    "is_core": false,
+    "permissions": [
+      "email:manage",
+      "email:send",
+      "email:view-logs"
+    ],
+    "dependencies": [],
+    "defaultSettings": {
+      "apiKey": "",
+      "fromEmail": "",
+      "fromName": "",
+      "replyTo": "",
+      "logoUrl": ""
     },
-    {
-      id: "ai-search",
-      name: "ai-search-plugin",
-      display_name: "AI Search",
-      description: "Advanced search with Cloudflare AI Search. Full-text search, semantic search, and advanced filtering across all content collections.",
-      version: "1.0.0",
-      author: "SonicJS Team",
-      category: "search",
-      icon: "\u{1F50D}",
-      permissions: ["settings:write", "admin:access", "content:read"],
-      dependencies: [],
-      settings: {
-        enabled: false,
-        ai_mode_enabled: true,
-        selected_collections: [],
-        dismissed_collections: [],
-        autocomplete_enabled: true,
-        cache_duration: 1,
-        results_limit: 20,
-        index_media: false
-      }
+    "adminMenu": {
+      "label": "Email",
+      "icon": "envelope",
+      "path": "/admin/plugins/email/settings",
+      "order": 80
+    }
+  },
+  "global-variables": {
+    "id": "global-variables",
+    "codeName": "global-variables",
+    "displayName": "Global Variables",
+    "description": "Dynamic content variables that can be referenced as inline tokens in rich text fields. Supports {variable_key} syntax with server-side resolution.",
+    "version": "1.0.0-beta.1",
+    "author": "SonicJS Team",
+    "category": "content",
+    "iconEmoji": "\u{1F524}",
+    "is_core": false,
+    "permissions": [
+      "global-variables:manage",
+      "global-variables:view"
+    ],
+    "dependencies": [],
+    "defaultSettings": {
+      "enableResolution": true,
+      "cacheEnabled": true,
+      "cacheTTL": 300
+    },
+    "adminMenu": null
+  },
+  "hello-world": {
+    "id": "hello-world",
+    "codeName": "hello-world",
+    "displayName": "Hello World",
+    "description": "A simple Hello World plugin demonstration",
+    "version": "1.0.0-beta.1",
+    "author": "SonicJS Team",
+    "category": "utilities",
+    "iconEmoji": "\u{1F44B}",
+    "is_core": false,
+    "permissions": [
+      "hello-world:view"
+    ],
+    "dependencies": [],
+    "defaultSettings": {},
+    "adminMenu": {
+      "label": "Hello World",
+      "icon": "hand-raised",
+      "path": "/admin/hello-world",
+      "order": 90
+    }
+  },
+  "magic-link-auth": {
+    "id": "magic-link-auth",
+    "codeName": "magic-link-auth",
+    "displayName": "Magic Link Authentication",
+    "description": "Passwordless authentication via email magic links. Users receive a secure one-time link to sign in without entering a password.",
+    "version": "1.0.0",
+    "author": "SonicJS Team",
+    "category": "security",
+    "iconEmoji": "\u{1F517}",
+    "is_core": false,
+    "permissions": [],
+    "dependencies": [
+      "email"
+    ],
+    "defaultSettings": {
+      "linkExpiryMinutes": 15,
+      "rateLimitPerHour": 5,
+      "allowNewUsers": true
     },
-    {
-      id: "oauth-providers",
-      name: "oauth-providers",
-      display_name: "OAuth Providers",
-      description: "OAuth2/OIDC social login with GitHub, Google, and more",
-      version: "1.0.0-beta.1",
-      author: "SonicJS Team",
-      category: "authentication",
-      icon: "\u{1F511}",
-      permissions: ["oauth:manage"],
-      dependencies: [],
-      settings: {
-        providers: {
-          github: { clientId: "", clientSecret: "", enabled: false },
-          google: { clientId: "", clientSecret: "", enabled: false }
+    "adminMenu": null
+  },
+  "oauth-providers": {
+    "id": "oauth-providers",
+    "codeName": "oauth-providers",
+    "displayName": "OAuth Providers",
+    "description": "OAuth2/OIDC social login with GitHub, Google, and more",
+    "version": "1.0.0-beta.1",
+    "author": "SonicJS Team",
+    "category": "authentication",
+    "iconEmoji": "\u{1F511}",
+    "is_core": true,
+    "permissions": [],
+    "dependencies": [],
+    "defaultSettings": {
+      "providers": {
+        "github": {
+          "clientId": "",
+          "clientSecret": "",
+          "enabled": false
+        },
+        "google": {
+          "clientId": "",
+          "clientSecret": "",
+          "enabled": false
         }
       }
     },
-    {
-      id: "global-variables",
-      name: "global-variables",
-      display_name: "Global Variables",
-      description: "Dynamic content variables with inline token support. Use {variable_key} syntax in rich text fields for server-side resolution.",
-      version: "1.0.0-beta.1",
-      author: "SonicJS Team",
-      category: "content",
-      icon: "\u{1F524}",
-      permissions: ["global-variables:manage", "global-variables:view"],
-      dependencies: [],
-      settings: {
-        enableResolution: true,
-        cacheEnabled: true,
-        cacheTTL: 300
+    "adminMenu": null
+  },
+  "otp-login": {
+    "id": "otp-login",
+    "codeName": "otp-login",
+    "displayName": "OTP Login",
+    "description": "Passwordless authentication via email one-time codes",
+    "version": "1.0.0-beta.1",
+    "author": "SonicJS Team",
+    "category": "security",
+    "iconEmoji": "\u{1F522}",
+    "is_core": false,
+    "permissions": [
+      "otp:manage",
+      "otp:request",
+      "otp:verify"
+    ],
+    "dependencies": [
+      "email"
+    ],
+    "defaultSettings": {
+      "codeLength": 6,
+      "codeExpiryMinutes": 10,
+      "maxAttempts": 3,
+      "rateLimitPerHour": 5,
+      "allowNewUserRegistration": false
+    },
+    "adminMenu": {
+      "label": "OTP Login",
+      "icon": "key",
+      "path": "/admin/plugins/otp-login/settings",
+      "order": 85
+    }
+  },
+  "quill-editor": {
+    "id": "quill-editor",
+    "codeName": "quill-editor",
+    "displayName": "Quill Rich Text Editor",
+    "description": "Quill WYSIWYG editor integration for rich text editing. Lightweight, modern editor with customizable toolbars and dark mode support.",
+    "version": "1.0.0",
+    "author": "SonicJS Team",
+    "category": "editor",
+    "iconEmoji": "\u270D\uFE0F",
+    "is_core": true,
+    "permissions": [],
+    "dependencies": [],
+    "defaultSettings": {
+      "version": "2.0.2",
+      "defaultHeight": 300,
+      "defaultToolbar": "full",
+      "theme": "snow"
+    },
+    "adminMenu": null
+  },
+  "redirect-management": {
+    "id": "redirect-management",
+    "codeName": "redirect-management",
+    "displayName": "Redirect Management",
+    "description": "URL redirect management with exact, partial, and regex matching",
+    "version": "1.0.0",
+    "author": "ahaas",
+    "category": "utilities",
+    "iconEmoji": "\u21AA\uFE0F",
+    "is_core": false,
+    "permissions": [
+      "redirect.manage",
+      "redirect.view"
+    ],
+    "dependencies": [],
+    "defaultSettings": {
+      "enabled": true,
+      "autoOffloadEnabled": false
+    },
+    "adminMenu": {
+      "label": "Redirects",
+      "icon": "arrow-right",
+      "path": "/admin/redirects",
+      "order": 85
+    }
+  },
+  "security-audit": {
+    "id": "security-audit",
+    "codeName": "security-audit",
+    "displayName": "Security Audit",
+    "description": "Security event logging, brute-force detection, and analytics dashboard. Monitors login attempts, registrations, lockouts, and suspicious activity.",
+    "version": "1.0.0-beta.1",
+    "author": "SonicJS Team",
+    "category": "security",
+    "iconEmoji": "\u{1F6E1}\uFE0F",
+    "is_core": false,
+    "permissions": [
+      "security-audit:view",
+      "security-audit:manage"
+    ],
+    "dependencies": [],
+    "defaultSettings": {
+      "retention": {
+        "daysToKeep": 90,
+        "maxEvents": 1e5,
+        "autoPurge": true
+      },
+      "bruteForce": {
+        "enabled": true,
+        "maxFailedAttemptsPerIP": 10,
+        "maxFailedAttemptsPerEmail": 5,
+        "windowMinutes": 15,
+        "lockoutDurationMinutes": 30,
+        "alertThreshold": 20
+      },
+      "logging": {
+        "logSuccessfulLogins": true,
+        "logLogouts": true,
+        "logRegistrations": true,
+        "logPasswordResets": true,
+        "logPermissionDenied": true
       }
     },
-    {
-      id: "user-profiles",
-      name: "user-profiles",
-      display_name: "User Profiles",
-      description: "Configurable custom profile fields for users",
-      version: "1.0.0-beta.1",
-      author: "SonicJS Team",
-      category: "users",
-      icon: "\u{1F464}",
-      permissions: ["user-profiles:manage"],
-      dependencies: [],
-      settings: {}
+    "adminMenu": {
+      "label": "Security Audit",
+      "icon": "shield-check",
+      "path": "/admin/plugins/security-audit",
+      "order": 85
+    }
+  },
+  "seed-data": {
+    "id": "seed-data",
+    "codeName": "seed-data",
+    "displayName": "Seed Data Generator",
+    "description": "Development tool for generating sample data and testing content. Useful for demos and development environments",
+    "version": "1.0.0-beta.1",
+    "author": "SonicJS Team",
+    "category": "development",
+    "iconEmoji": "\u{1F331}",
+    "is_core": false,
+    "permissions": [
+      "seed-data:generate"
+    ],
+    "dependencies": [],
+    "defaultSettings": {
+      "userCount": 20,
+      "contentCount": 200,
+      "defaultPassword": "password123"
+    },
+    "adminMenu": null
+  },
+  "stripe": {
+    "id": "stripe",
+    "codeName": "stripe",
+    "displayName": "Stripe Subscriptions",
+    "description": "Stripe subscription management with webhook handling, checkout sessions, and subscription gating",
+    "version": "1.0.0-beta.1",
+    "author": "SonicJS Team",
+    "category": "payments",
+    "iconEmoji": "\u{1F4B3}",
+    "is_core": true,
+    "permissions": [
+      "stripe:manage",
+      "stripe:view"
+    ],
+    "dependencies": [],
+    "defaultSettings": {
+      "stripeSecretKey": "",
+      "stripeWebhookSecret": "",
+      "stripePriceId": "",
+      "successUrl": "/admin/dashboard",
+      "cancelUrl": "/admin/dashboard"
+    },
+    "adminMenu": {
+      "label": "Stripe",
+      "icon": "credit-card",
+      "path": "/admin/plugins/stripe",
+      "order": 90
     }
-  ];
+  },
+  "testimonials-plugin": {
+    "id": "testimonials-plugin",
+    "codeName": "testimonials-plugin",
+    "displayName": "Testimonials",
+    "description": "Customer testimonials and reviews management with display widgets and ratings",
+    "version": "1.0.0-beta.1",
+    "author": "SonicJS Team",
+    "category": "content",
+    "iconEmoji": "\u{1F4AC}",
+    "is_core": false,
+    "permissions": [
+      "testimonials:manage"
+    ],
+    "dependencies": [],
+    "defaultSettings": {},
+    "adminMenu": null
+  },
+  "tinymce-plugin": {
+    "id": "tinymce-plugin",
+    "codeName": "tinymce-plugin",
+    "displayName": "TinyMCE Rich Text Editor",
+    "description": "Powerful WYSIWYG rich text editor for content creation. Provides a full-featured editor with formatting, media embedding, and customizable toolbars for richtext fields.",
+    "version": "1.0.0",
+    "author": "SonicJS Team",
+    "category": "editor",
+    "iconEmoji": "\u{1F4DD}",
+    "is_core": false,
+    "permissions": [],
+    "dependencies": [],
+    "defaultSettings": {
+      "apiKey": "no-api-key",
+      "defaultHeight": 300,
+      "defaultToolbar": "full",
+      "skin": "oxide-dark"
+    },
+    "adminMenu": null
+  },
+  "turnstile": {
+    "id": "turnstile",
+    "codeName": "turnstile-plugin",
+    "displayName": "Cloudflare Turnstile",
+    "description": "CAPTCHA-free bot protection using Cloudflare Turnstile. Provides reusable verification for any form.",
+    "version": "1.0.0",
+    "author": "SonicJS",
+    "category": "security",
+    "iconEmoji": "\u{1F6E1}\uFE0F",
+    "is_core": true,
+    "permissions": [
+      "settings:write",
+      "admin:access"
+    ],
+    "dependencies": [],
+    "defaultSettings": {
+      "siteKey": "",
+      "secretKey": "",
+      "theme": "auto",
+      "size": "normal",
+      "mode": "managed",
+      "appearance": "always",
+      "preClearanceEnabled": false,
+      "preClearanceLevel": "managed",
+      "enabled": false
+    },
+    "adminMenu": {
+      "label": "Turnstile",
+      "icon": "shield-check",
+      "path": "/admin/plugins/turnstile/settings",
+      "order": 100
+    }
+  },
+  "user-profiles": {
+    "id": "user-profiles",
+    "codeName": "user-profiles",
+    "displayName": "User Profiles",
+    "description": "Configurable custom profile fields for users",
+    "version": "1.0.0-beta.1",
+    "author": "SonicJS Team",
+    "category": "users",
+    "iconEmoji": "\u{1F464}",
+    "is_core": true,
+    "permissions": [],
+    "dependencies": [],
+    "defaultSettings": {},
+    "adminMenu": null
+  },
+  "workflow-plugin": {
+    "id": "workflow-plugin",
+    "codeName": "workflow-plugin",
+    "displayName": "Workflow Engine",
+    "description": "Content workflow and approval system with customizable states, transitions, and review processes",
+    "version": "1.0.0-beta.1",
+    "author": "SonicJS Team",
+    "category": "content",
+    "iconEmoji": "\u{1F504}",
+    "is_core": false,
+    "permissions": [
+      "workflow:manage",
+      "workflow:approve"
+    ],
+    "dependencies": [],
+    "defaultSettings": {
+      "enableApprovalChains": true,
+      "enableScheduling": true,
+      "enableAutomation": true,
+      "enableNotifications": true
+    },
+    "adminMenu": null
+  }
+};
+var ALL_PLUGIN_IDS = Object.keys(PLUGIN_REGISTRY);
+ALL_PLUGIN_IDS.filter(
+  (id) => PLUGIN_REGISTRY[id]?.adminMenu !== null
+);
+function findPluginByCodeName(codeName) {
+  return Object.values(PLUGIN_REGISTRY).find((p) => p.codeName === codeName) || PLUGIN_REGISTRY[codeName];
+}
+
+// src/services/plugin-bootstrap.ts
+var BOOTSTRAP_PLUGIN_IDS = [
+  "core-auth",
+  "core-media",
+  "database-tools",
+  "seed-data",
+  "core-cache",
+  "workflow-plugin",
+  "easy-mdx",
+  "ai-search",
+  "oauth-providers",
+  "global-variables",
+  "user-profiles",
+  "stripe"
+];
+function registryToCorePlugin(entry) {
+  return {
+    id: entry.id,
+    name: entry.codeName,
+    display_name: entry.displayName,
+    description: entry.description,
+    version: entry.version,
+    author: entry.author,
+    category: entry.category,
+    icon: entry.iconEmoji,
+    permissions: entry.permissions,
+    dependencies: entry.dependencies,
+    settings: entry.defaultSettings
+  };
+}
+var PluginBootstrapService = class {
+  constructor(db) {
+    this.db = db;
+    this.pluginService = new PluginService(db);
+  }
+  pluginService;
+  /**
+   * Core plugins derived from the auto-generated plugin registry.
+   * Only plugins listed in BOOTSTRAP_PLUGIN_IDS are included.
+   */
+  CORE_PLUGINS = BOOTSTRAP_PLUGIN_IDS.filter((id) => PLUGIN_REGISTRY[id] !== void 0).map((id) => registryToCorePlugin(PLUGIN_REGISTRY[id]));
   /**
    * Bootstrap all core plugins - install them if they don't exist
    */
@@ -1174,12 +1686,10 @@ var PluginBootstrapService = class {
           ...plugin,
           is_core: plugin.name.startsWith("core-")
         });
-        if (plugin.name.startsWith("core-")) {
-          console.log(
-            `[PluginBootstrap] Activating newly installed core plugin: ${plugin.display_name}`
-          );
-          await this.pluginService.activatePlugin(plugin.id);
-        }
+        console.log(
+          `[PluginBootstrap] Activating newly installed plugin: ${plugin.display_name}`
+        );
+        await this.pluginService.activatePlugin(plugin.id);
       }
     } catch (error) {
       console.error(
@@ -1194,8 +1704,8 @@ var PluginBootstrapService = class {
   async updatePlugin(plugin) {
     const now = Math.floor(Date.now() / 1e3);
     const stmt = this.db.prepare(`
-      UPDATE plugins 
-      SET 
+      UPDATE plugins
+      SET
         version = ?,
         description = ?,
         permissions = ?,
@@ -1236,6 +1746,7 @@ var PluginBootstrapService = class {
   }
 };
 
+exports.PLUGIN_REGISTRY = PLUGIN_REGISTRY;
 exports.PluginBootstrapService = PluginBootstrapService;
 exports.PluginService = PluginService;
 exports.backfillFormSubmissions = backfillFormSubmissions;
@@ -1243,6 +1754,7 @@ exports.cleanupRemovedCollections = cleanupRemovedCollections;
 exports.createContentFromSubmission = createContentFromSubmission;
 exports.deriveCollectionSchemaFromFormio = deriveCollectionSchemaFromFormio;
 exports.deriveSubmissionTitle = deriveSubmissionTitle;
+exports.findPluginByCodeName = findPluginByCodeName;
 exports.fullCollectionSync = fullCollectionSync;
 exports.getAvailableCollectionNames = getAvailableCollectionNames;
 exports.getManagedCollections = getManagedCollections;
@@ -1256,5 +1768,5 @@ exports.syncCollection = syncCollection;
 exports.syncCollections = syncCollections;
 exports.syncFormCollection = syncFormCollection;
 exports.validateCollectionConfig = validateCollectionConfig;
-//# sourceMappingURL=chunk-I6FFGQIT.cjs.map
-//# sourceMappingURL=chunk-I6FFGQIT.cjs.map
+//# sourceMappingURL=chunk-43AB4EH4.cjs.map
+//# sourceMappingURL=chunk-43AB4EH4.cjs.map