@sonicjs-cms/core 2.16.0 → 2.16.1

package/dist/index.cjs

@@ -1,16 +1,16 @@
 'use strict';
 
-var chunk6ENX7QSA_cjs = require('./chunk-6ENX7QSA.cjs');
+var chunkMZS33LLH_cjs = require('./chunk-MZS33LLH.cjs');
 var chunkNZWFCUDA_cjs = require('./chunk-NZWFCUDA.cjs');
-var chunkCZ6BVQZX_cjs = require('./chunk-CZ6BVQZX.cjs');
-var chunkQ5VFZUXV_cjs = require('./chunk-Q5VFZUXV.cjs');
-var chunkOCLUXJ7E_cjs = require('./chunk-OCLUXJ7E.cjs');
+var chunk7HHIZQNE_cjs = require('./chunk-7HHIZQNE.cjs');
+var chunkU6FOL6EO_cjs = require('./chunk-U6FOL6EO.cjs');
+var chunkHU4MN74Q_cjs = require('./chunk-HU4MN74Q.cjs');
 var chunk4ZSNJDLS_cjs = require('./chunk-4ZSNJDLS.cjs');
 var chunkOHYBNCVL_cjs = require('./chunk-OHYBNCVL.cjs');
 var chunkUYJ6TJHX_cjs = require('./chunk-UYJ6TJHX.cjs');
 var chunkABB34XUS_cjs = require('./chunk-ABB34XUS.cjs');
 var chunk635JAMSE_cjs = require('./chunk-635JAMSE.cjs');
-var chunkYQW2GCJ3_cjs = require('./chunk-YQW2GCJ3.cjs');
+var chunkV76ERLX6_cjs = require('./chunk-V76ERLX6.cjs');
 require('./chunk-P3XDZL6Q.cjs');
 var chunkRCQ2HIQD_cjs = require('./chunk-RCQ2HIQD.cjs');
 var chunkMNWKYY5E_cjs = require('./chunk-MNWKYY5E.cjs');
@@ -560,7 +560,7 @@ function formatCellValue(value) {
 // src/plugins/core-plugins/database-tools-plugin/admin-routes.ts
 function createDatabaseToolsAdminRoutes() {
   const router3 = new hono.Hono();
-  router3.use("*", chunkCZ6BVQZX_cjs.requireAuth());
+  router3.use("*", chunk7HHIZQNE_cjs.requireAuth());
   router3.get("/api/stats", async (c) => {
     try {
       const user = c.get("user");
@@ -1939,7 +1939,7 @@ function createOTPLoginPlugin() {
           error: "Account is deactivated"
         }, 403);
       }
-      const token = await chunkCZ6BVQZX_cjs.AuthManager.generateToken(user.id, user.email, user.role, c.env.JWT_SECRET);
+      const token = await chunk7HHIZQNE_cjs.AuthManager.generateToken(user.id, user.email, user.role, c.env.JWT_SECRET);
       cookie.setCookie(c, "auth_token", token, {
         httpOnly: true,
         secure: true,
@@ -2409,13 +2409,13 @@ function createOAuthProvidersPlugin() {
         if (!user || !user.is_active) {
           return c.redirect("/auth/login?error=Account is deactivated");
         }
-        const jwt2 = await chunkCZ6BVQZX_cjs.AuthManager.generateToken(
+        const jwt2 = await chunk7HHIZQNE_cjs.AuthManager.generateToken(
           user.id,
           user.email,
           user.role,
           c.env.JWT_SECRET
         );
-        chunkCZ6BVQZX_cjs.AuthManager.setAuthCookie(c, jwt2, { sameSite: "Lax" });
+        chunk7HHIZQNE_cjs.AuthManager.setAuthCookie(c, jwt2, { sameSite: "Lax" });
         return c.redirect("/admin");
       }
       const existingUser = await oauthService.findUserByEmail(profile.email);
@@ -2432,13 +2432,13 @@ function createOAuthProvidersPlugin() {
           tokenExpiresAt: tokenExpiresAt ?? void 0,
           profileData: JSON.stringify(profile)
         });
-        const jwt2 = await chunkCZ6BVQZX_cjs.AuthManager.generateToken(
+        const jwt2 = await chunk7HHIZQNE_cjs.AuthManager.generateToken(
           existingUser.id,
           existingUser.email,
           existingUser.role,
           c.env.JWT_SECRET
         );
-        chunkCZ6BVQZX_cjs.AuthManager.setAuthCookie(c, jwt2, { sameSite: "Lax" });
+        chunk7HHIZQNE_cjs.AuthManager.setAuthCookie(c, jwt2, { sameSite: "Lax" });
         return c.redirect("/admin");
       }
       const newUserId = await oauthService.createUserFromOAuth(profile);
@@ -2451,13 +2451,13 @@ function createOAuthProvidersPlugin() {
         tokenExpiresAt: tokenExpiresAt ?? void 0,
         profileData: JSON.stringify(profile)
       });
-      const jwt = await chunkCZ6BVQZX_cjs.AuthManager.generateToken(
+      const jwt = await chunk7HHIZQNE_cjs.AuthManager.generateToken(
         newUserId,
         profile.email.toLowerCase(),
         "viewer",
         c.env.JWT_SECRET
       );
-      chunkCZ6BVQZX_cjs.AuthManager.setAuthCookie(c, jwt, { sameSite: "Lax" });
+      chunk7HHIZQNE_cjs.AuthManager.setAuthCookie(c, jwt, { sameSite: "Lax" });
       return c.redirect("/admin");
     } catch (error) {
       console.error("OAuth callback error:", error);
@@ -4150,7 +4150,7 @@ function renderSettingsPage(data) {
 
 // src/plugins/core-plugins/ai-search-plugin/routes/admin.ts
 var adminRoutes = new hono.Hono();
-adminRoutes.use("*", chunkCZ6BVQZX_cjs.requireAuth());
+adminRoutes.use("*", chunk7HHIZQNE_cjs.requireAuth());
 adminRoutes.get("/", async (c) => {
   try {
     const user = c.get("user");
@@ -4551,13 +4551,13 @@ function createMagicLinkAuthPlugin() {
         SET used = 1, used_at = ?
         WHERE id = ?
       `).bind(Date.now(), magicLink.id).run();
-      const jwtToken = await chunkCZ6BVQZX_cjs.AuthManager.generateToken(
+      const jwtToken = await chunk7HHIZQNE_cjs.AuthManager.generateToken(
         user.id,
         user.email,
         user.role,
         c.env.JWT_SECRET
       );
-      chunkCZ6BVQZX_cjs.AuthManager.setAuthCookie(c, jwtToken);
+      chunk7HHIZQNE_cjs.AuthManager.setAuthCookie(c, jwtToken);
       await db.prepare(`
         UPDATE users SET last_login_at = ? WHERE id = ?
       `).bind(Date.now(), user.id).run();
@@ -5567,7 +5567,7 @@ function renderSecuritySettingsPage(data) {
 
 // src/plugins/core-plugins/security-audit-plugin/routes/admin.ts
 var adminRoutes2 = new hono.Hono();
-adminRoutes2.use("*", chunkCZ6BVQZX_cjs.requireAuth());
+adminRoutes2.use("*", chunk7HHIZQNE_cjs.requireAuth());
 adminRoutes2.use("*", async (c, next) => {
   const user = c.get("user");
   if (user?.role !== "admin") {
@@ -5577,7 +5577,7 @@ adminRoutes2.use("*", async (c, next) => {
 });
 async function getSettings(db) {
   try {
-    const pluginService = new chunkQ5VFZUXV_cjs.PluginService(db);
+    const pluginService = new chunkU6FOL6EO_cjs.PluginService(db);
     const plugin2 = await pluginService.getPlugin("security-audit");
     if (plugin2?.settings) {
       const settings = typeof plugin2.settings === "string" ? JSON.parse(plugin2.settings) : plugin2.settings;
@@ -5682,7 +5682,7 @@ adminRoutes2.post("/settings", async (c) => {
       autoPurge: body["retention.autoPurge"] === "true"
     }
   };
-  const pluginService = new chunkQ5VFZUXV_cjs.PluginService(db);
+  const pluginService = new chunkU6FOL6EO_cjs.PluginService(db);
   await pluginService.updatePluginSettings("security-audit", settings);
   if (c.req.header("HX-Request")) {
     return c.json({ success: true });
@@ -5843,7 +5843,7 @@ var BruteForceDetector = class {
 
 // src/plugins/core-plugins/security-audit-plugin/routes/api.ts
 var apiRoutes2 = new hono.Hono();
-apiRoutes2.use("*", chunkCZ6BVQZX_cjs.requireAuth());
+apiRoutes2.use("*", chunk7HHIZQNE_cjs.requireAuth());
 apiRoutes2.use("*", async (c, next) => {
   const user = c.get("user");
   if (user?.role !== "admin") {
@@ -5853,7 +5853,7 @@ apiRoutes2.use("*", async (c, next) => {
 });
 async function getSettings2(db) {
   try {
-    const pluginService = new chunkQ5VFZUXV_cjs.PluginService(db);
+    const pluginService = new chunkU6FOL6EO_cjs.PluginService(db);
     const plugin2 = await pluginService.getPlugin("security-audit");
     if (plugin2?.settings) {
       const settings = typeof plugin2.settings === "string" ? JSON.parse(plugin2.settings) : plugin2.settings;
@@ -6001,7 +6001,7 @@ function generateFingerprint(ip, userAgent) {
 }
 async function getPluginSettings(db) {
   try {
-    const pluginService = new chunkQ5VFZUXV_cjs.PluginService(db);
+    const pluginService = new chunkU6FOL6EO_cjs.PluginService(db);
     const plugin2 = await pluginService.getPlugin("security-audit");
     if (plugin2?.settings) {
       const settings = typeof plugin2.settings === "string" ? JSON.parse(plugin2.settings) : plugin2.settings;
@@ -6889,7 +6889,7 @@ function renderEventsPage(data) {
             <tr>
               <th class="px-6 py-3 text-left text-xs font-medium text-zinc-500 dark:text-zinc-400 uppercase tracking-wider">Time</th>
               <th class="px-6 py-3 text-left text-xs font-medium text-zinc-500 dark:text-zinc-400 uppercase tracking-wider">Type</th>
-              <th class="px-6 py-3 text-left text-xs font-medium text-zinc-500 dark:text-zinc-400 uppercase tracking-wider">Object</th>
+              <th class="px-6 py-3 text-left text-xs font-medium text-zinc-500 dark:text-zinc-400 uppercase tracking-wider">Object / User</th>
               <th class="px-6 py-3 text-left text-xs font-medium text-zinc-500 dark:text-zinc-400 uppercase tracking-wider">Status</th>
               <th class="px-6 py-3 text-left text-xs font-medium text-zinc-500 dark:text-zinc-400 uppercase tracking-wider">Event ID</th>
             </tr>
@@ -6948,8 +6948,20 @@ function formatTimestamp3(timestamp) {
     second: "2-digit"
   });
 }
+function extractUserInfo(event) {
+  try {
+    const data = typeof event.data === "string" ? JSON.parse(event.data) : event.data;
+    const userId = data?.metadata?.sonicjs_user_id || data?.sonicjs_user_id;
+    const email = data?.customer_email || data?.customerEmail || data?.receipt_email;
+    return { userId: userId || void 0, email: email || void 0 };
+  } catch {
+    return {};
+  }
+}
 function renderEventRow(event) {
   const errorTooltip = event.error ? ` title="${event.error.replace(/"/g, "&quot;")}"` : "";
+  const userInfo = extractUserInfo(event);
+  const userLink = userInfo.userId ? `<a href="/admin/users/${userInfo.userId}" class="text-sm text-blue-600 dark:text-blue-400 hover:underline">${userInfo.email || userInfo.userId}</a>` : userInfo.email ? `<span class="text-sm text-zinc-500 dark:text-zinc-400">${userInfo.email}</span>` : "";
   return `
     <tr class="hover:bg-zinc-950/[0.025] dark:hover:bg-white/[0.025]"${errorTooltip}>
       <td class="px-6 py-4 whitespace-nowrap text-sm text-zinc-500 dark:text-zinc-400">
@@ -6961,6 +6973,7 @@ function renderEventRow(event) {
       <td class="px-6 py-4 whitespace-nowrap">
         <div class="text-sm font-mono text-zinc-500 dark:text-zinc-400">${event.objectId || "-"}</div>
         <div class="text-xs text-zinc-400 dark:text-zinc-500">${event.objectType}</div>
+        ${userLink ? `<div class="mt-1">${userLink}</div>` : ""}
       </td>
       <td class="px-6 py-4 whitespace-nowrap">${eventStatusBadge(event.status)}</td>
       <td class="px-6 py-4 whitespace-nowrap text-xs font-mono text-zinc-400 dark:text-zinc-500">${event.stripeEventId}</td>
@@ -6998,7 +7011,7 @@ var DEFAULT_SETTINGS3 = {
 
 // src/plugins/core-plugins/stripe-plugin/routes/admin.ts
 var adminRoutes3 = new hono.Hono();
-adminRoutes3.use("*", chunkCZ6BVQZX_cjs.requireAuth());
+adminRoutes3.use("*", chunk7HHIZQNE_cjs.requireAuth());
 adminRoutes3.use("*", async (c, next) => {
   const user = c.get("user");
   if (user?.role !== "admin") {
@@ -7008,7 +7021,7 @@ adminRoutes3.use("*", async (c, next) => {
 });
 async function getSettings3(db) {
   try {
-    const pluginService = new chunkQ5VFZUXV_cjs.PluginService(db);
+    const pluginService = new chunkU6FOL6EO_cjs.PluginService(db);
     const plugin2 = await pluginService.getPlugin("stripe");
     if (plugin2?.settings) {
       const settings = typeof plugin2.settings === "string" ? JSON.parse(plugin2.settings) : plugin2.settings;
@@ -7330,7 +7343,7 @@ function timingSafeEqual(a, b) {
 var apiRoutes3 = new hono.Hono();
 async function getSettings4(db) {
   try {
-    const pluginService = new chunkQ5VFZUXV_cjs.PluginService(db);
+    const pluginService = new chunkU6FOL6EO_cjs.PluginService(db);
     const plugin2 = await pluginService.getPlugin("stripe");
     if (plugin2?.settings) {
       const settings = typeof plugin2.settings === "string" ? JSON.parse(plugin2.settings) : plugin2.settings;
@@ -7481,7 +7494,7 @@ apiRoutes3.post("/webhook", async (c) => {
   }
   return c.json({ received: true });
 });
-apiRoutes3.post("/create-checkout-session", chunkCZ6BVQZX_cjs.requireAuth(), async (c) => {
+apiRoutes3.post("/create-checkout-session", chunk7HHIZQNE_cjs.requireAuth(), async (c) => {
   const db = c.env.DB;
   const user = c.get("user");
   if (!user) return c.json({ error: "Unauthorized" }, 401);
@@ -7521,7 +7534,7 @@ apiRoutes3.post("/create-checkout-session", chunkCZ6BVQZX_cjs.requireAuth(), asy
   });
   return c.json({ sessionId: session.id, url: session.url });
 });
-apiRoutes3.get("/subscription", chunkCZ6BVQZX_cjs.requireAuth(), async (c) => {
+apiRoutes3.get("/subscription", chunk7HHIZQNE_cjs.requireAuth(), async (c) => {
   const user = c.get("user");
   if (!user) return c.json({ error: "Unauthorized" }, 401);
   const db = c.env.DB;
@@ -7533,7 +7546,7 @@ apiRoutes3.get("/subscription", chunkCZ6BVQZX_cjs.requireAuth(), async (c) => {
   }
   return c.json({ subscription });
 });
-apiRoutes3.get("/subscriptions", chunkCZ6BVQZX_cjs.requireAuth(), async (c) => {
+apiRoutes3.get("/subscriptions", chunk7HHIZQNE_cjs.requireAuth(), async (c) => {
   const user = c.get("user");
   if (user?.role !== "admin") return c.json({ error: "Access denied" }, 403);
   const db = c.env.DB;
@@ -7549,7 +7562,7 @@ apiRoutes3.get("/subscriptions", chunkCZ6BVQZX_cjs.requireAuth(), async (c) => {
   const result = await subscriptionService.list(filters);
   return c.json(result);
 });
-apiRoutes3.get("/stats", chunkCZ6BVQZX_cjs.requireAuth(), async (c) => {
+apiRoutes3.get("/stats", chunk7HHIZQNE_cjs.requireAuth(), async (c) => {
   const user = c.get("user");
   if (user?.role !== "admin") return c.json({ error: "Access denied" }, 403);
   const db = c.env.DB;
@@ -7558,7 +7571,7 @@ apiRoutes3.get("/stats", chunkCZ6BVQZX_cjs.requireAuth(), async (c) => {
   const stats = await subscriptionService.getStats();
   return c.json(stats);
 });
-apiRoutes3.post("/sync-subscriptions", chunkCZ6BVQZX_cjs.requireAuth(), async (c) => {
+apiRoutes3.post("/sync-subscriptions", chunk7HHIZQNE_cjs.requireAuth(), async (c) => {
   const user = c.get("user");
   if (user?.role !== "admin") return c.json({ error: "Access denied" }, 403);
   const db = c.env.DB;
@@ -7606,7 +7619,7 @@ apiRoutes3.post("/sync-subscriptions", chunkCZ6BVQZX_cjs.requireAuth(), async (c
     }, 500);
   }
 });
-apiRoutes3.get("/events", chunkCZ6BVQZX_cjs.requireAuth(), async (c) => {
+apiRoutes3.get("/events", chunk7HHIZQNE_cjs.requireAuth(), async (c) => {
   const user = c.get("user");
   if (user?.role !== "admin") return c.json({ error: "Access denied" }, 403);
   const db = c.env.DB;
@@ -7672,7 +7685,7 @@ function createStripePlugin() {
 var stripePlugin = createStripePlugin();
 
 // src/middleware/plugin-menu.ts
-var REGISTRY_MENU_PLUGINS = Object.values(chunkQ5VFZUXV_cjs.PLUGIN_REGISTRY).filter((p) => p.adminMenu !== null).map((p) => ({
+var REGISTRY_MENU_PLUGINS = Object.values(chunkU6FOL6EO_cjs.PLUGIN_REGISTRY).filter((p) => p.adminMenu !== null).map((p) => ({
   codeName: p.codeName,
   label: p.adminMenu.label,
   path: p.adminMenu.path,
@@ -7771,7 +7784,7 @@ var HOOKS2 = {
   USER_LOGIN: "user:login"};
 chunkUYJ6TJHX_cjs.init_admin_layout_catalyst_template();
 var adminRoutes4 = new hono.Hono();
-adminRoutes4.use("*", chunkCZ6BVQZX_cjs.requireAuth());
+adminRoutes4.use("*", chunk7HHIZQNE_cjs.requireAuth());
 adminRoutes4.use("*", async (c, next) => {
   const user = c.get("user");
   if (user?.role !== "admin") {
@@ -9570,7 +9583,7 @@ function renderCacheDashboard(data) {
     </script>
 
     <!-- Confirmation Dialogs -->
-    ${chunk6ENX7QSA_cjs.renderConfirmationDialog({
+    ${chunkMZS33LLH_cjs.renderConfirmationDialog({
     id: "clear-all-cache-confirm",
     title: "Clear All Cache",
     message: "Are you sure you want to clear all cache entries? This cannot be undone.",
@@ -9581,7 +9594,7 @@ function renderCacheDashboard(data) {
     onConfirm: "performClearAllCaches()"
   })}
 
-    ${chunk6ENX7QSA_cjs.renderConfirmationDialog({
+    ${chunkMZS33LLH_cjs.renderConfirmationDialog({
     id: "clear-namespace-cache-confirm",
     title: "Clear Namespace Cache",
     message: "Clear cache for this namespace?",
@@ -9592,7 +9605,7 @@ function renderCacheDashboard(data) {
     onConfirm: "performClearNamespaceCache()"
   })}
 
-    ${chunk6ENX7QSA_cjs.getConfirmationDialogScript()}
+    ${chunkMZS33LLH_cjs.getConfirmationDialogScript()}
   `;
   const layoutData = {
     title: "Cache System",
@@ -10278,14 +10291,14 @@ var faviconSvg = `<?xml version="1.0" encoding="UTF-8" standalone="no"?>
 // src/app.ts
 function createSonicJSApp(config = {}) {
   const app2 = new hono.Hono();
-  const appVersion = config.version || chunkYQW2GCJ3_cjs.getCoreVersion();
+  const appVersion = config.version || chunkV76ERLX6_cjs.getCoreVersion();
   const appName = config.name || "SonicJS AI";
   app2.use("*", async (c, next) => {
     c.set("appVersion", appVersion);
     await next();
   });
-  app2.use("*", chunkCZ6BVQZX_cjs.metricsMiddleware());
-  app2.use("*", chunkCZ6BVQZX_cjs.bootstrapMiddleware(config));
+  app2.use("*", chunk7HHIZQNE_cjs.metricsMiddleware());
+  app2.use("*", chunk7HHIZQNE_cjs.bootstrapMiddleware(config));
   if (config.middleware?.beforeAuth) {
     for (const middleware of config.middleware.beforeAuth) {
       app2.use("*", middleware);
@@ -10294,29 +10307,32 @@ function createSonicJSApp(config = {}) {
   app2.use("*", async (_c, next) => {
     await next();
   });
-  app2.use("*", chunkCZ6BVQZX_cjs.securityHeadersMiddleware());
-  app2.use("*", chunkCZ6BVQZX_cjs.csrfProtection());
+  app2.use("*", chunk7HHIZQNE_cjs.securityHeadersMiddleware());
+  app2.use("*", chunk7HHIZQNE_cjs.csrfProtection());
   if (config.middleware?.afterAuth) {
     for (const middleware of config.middleware.afterAuth) {
       app2.use("*", middleware);
     }
   }
+  const adminRoles = config.adminAccessRoles || ["admin"];
+  app2.use("/admin/*", chunk7HHIZQNE_cjs.requireAuth());
+  app2.use("/admin/*", chunk7HHIZQNE_cjs.requireRole(adminRoles));
   app2.use("/admin/*", pluginMenuMiddleware());
-  app2.route("/api", chunk6ENX7QSA_cjs.api_default);
-  app2.route("/api/media", chunk6ENX7QSA_cjs.api_media_default);
-  app2.route("/api/system", chunk6ENX7QSA_cjs.api_system_default);
-  app2.route("/admin/api", chunk6ENX7QSA_cjs.admin_api_default);
-  app2.route("/admin/dashboard", chunk6ENX7QSA_cjs.router);
-  app2.route("/admin/collections", chunk6ENX7QSA_cjs.adminCollectionsRoutes);
-  app2.route("/admin/forms", chunk6ENX7QSA_cjs.adminFormsRoutes);
-  app2.route("/admin/settings", chunk6ENX7QSA_cjs.adminSettingsRoutes);
-  app2.route("/forms", chunk6ENX7QSA_cjs.public_forms_default);
-  app2.route("/api/forms", chunk6ENX7QSA_cjs.public_forms_default);
-  app2.route("/admin/api-reference", chunk6ENX7QSA_cjs.router2);
+  app2.route("/api", chunkMZS33LLH_cjs.api_default);
+  app2.route("/api/media", chunkMZS33LLH_cjs.api_media_default);
+  app2.route("/api/system", chunkMZS33LLH_cjs.api_system_default);
+  app2.route("/admin/api", chunkMZS33LLH_cjs.admin_api_default);
+  app2.route("/admin/dashboard", chunkMZS33LLH_cjs.router);
+  app2.route("/admin/collections", chunkMZS33LLH_cjs.adminCollectionsRoutes);
+  app2.route("/admin/forms", chunkMZS33LLH_cjs.adminFormsRoutes);
+  app2.route("/admin/settings", chunkMZS33LLH_cjs.adminSettingsRoutes);
+  app2.route("/forms", chunkMZS33LLH_cjs.public_forms_default);
+  app2.route("/api/forms", chunkMZS33LLH_cjs.public_forms_default);
+  app2.route("/admin/api-reference", chunkMZS33LLH_cjs.router2);
   app2.route("/admin/database-tools", createDatabaseToolsAdminRoutes());
   app2.route("/admin/seed-data", createSeedDataAdminRoutes());
-  app2.route("/admin/content", chunk6ENX7QSA_cjs.admin_content_default);
-  app2.route("/admin/media", chunk6ENX7QSA_cjs.adminMediaRoutes);
+  app2.route("/admin/content", chunkMZS33LLH_cjs.admin_content_default);
+  app2.route("/admin/media", chunkMZS33LLH_cjs.adminMediaRoutes);
   app2.use("/auth/*", securityAuditMiddleware());
   if (securityAuditPlugin.routes && securityAuditPlugin.routes.length > 0) {
     for (const route of securityAuditPlugin.routes) {
@@ -10334,8 +10350,8 @@ function createSonicJSApp(config = {}) {
       app2.route(route.path, route.handler);
     }
   }
-  if (chunk6ENX7QSA_cjs.userProfilesPlugin.routes && chunk6ENX7QSA_cjs.userProfilesPlugin.routes.length > 0) {
-    for (const route of chunk6ENX7QSA_cjs.userProfilesPlugin.routes) {
+  if (chunkMZS33LLH_cjs.userProfilesPlugin.routes && chunkMZS33LLH_cjs.userProfilesPlugin.routes.length > 0) {
+    for (const route of chunkMZS33LLH_cjs.userProfilesPlugin.routes) {
       app2.route(route.path, route.handler);
     }
   }
@@ -10355,11 +10371,11 @@ function createSonicJSApp(config = {}) {
       app2.route(route.path, route.handler);
     }
   }
-  app2.route("/admin/plugins", chunk6ENX7QSA_cjs.adminPluginRoutes);
-  app2.route("/admin/logs", chunk6ENX7QSA_cjs.adminLogsRoutes);
-  app2.route("/admin", chunk6ENX7QSA_cjs.userRoutes);
-  app2.route("/auth", chunk6ENX7QSA_cjs.auth_default);
-  app2.route("/", chunk6ENX7QSA_cjs.test_cleanup_default);
+  app2.route("/admin/plugins", chunkMZS33LLH_cjs.adminPluginRoutes);
+  app2.route("/admin/logs", chunkMZS33LLH_cjs.adminLogsRoutes);
+  app2.route("/admin", chunkMZS33LLH_cjs.userRoutes);
+  app2.route("/auth", chunkMZS33LLH_cjs.auth_default);
+  app2.route("/", chunkMZS33LLH_cjs.test_cleanup_default);
   if (emailPlugin.routes && emailPlugin.routes.length > 0) {
     for (const route of emailPlugin.routes) {
       app2.route(route.path, route.handler);
@@ -10443,99 +10459,99 @@ function createDb(d1$1) {
 }
 
 // src/index.ts
-var VERSION = chunkYQW2GCJ3_cjs.package_default.version;
+var VERSION = chunkV76ERLX6_cjs.package_default.version;
 
 Object.defineProperty(exports, "ROUTES_INFO", {
   enumerable: true,
-  get: function () { return chunk6ENX7QSA_cjs.ROUTES_INFO; }
+  get: function () { return chunkMZS33LLH_cjs.ROUTES_INFO; }
 });
 Object.defineProperty(exports, "adminApiRoutes", {
   enumerable: true,
-  get: function () { return chunk6ENX7QSA_cjs.admin_api_default; }
+  get: function () { return chunkMZS33LLH_cjs.admin_api_default; }
 });
 Object.defineProperty(exports, "adminCheckboxRoutes", {
   enumerable: true,
-  get: function () { return chunk6ENX7QSA_cjs.adminCheckboxRoutes; }
+  get: function () { return chunkMZS33LLH_cjs.adminCheckboxRoutes; }
 });
 Object.defineProperty(exports, "adminCodeExamplesRoutes", {
   enumerable: true,
-  get: function () { return chunk6ENX7QSA_cjs.admin_code_examples_default; }
+  get: function () { return chunkMZS33LLH_cjs.admin_code_examples_default; }
 });
 Object.defineProperty(exports, "adminCollectionsRoutes", {
   enumerable: true,
-  get: function () { return chunk6ENX7QSA_cjs.adminCollectionsRoutes; }
+  get: function () { return chunkMZS33LLH_cjs.adminCollectionsRoutes; }
 });
 Object.defineProperty(exports, "adminContentRoutes", {
   enumerable: true,
-  get: function () { return chunk6ENX7QSA_cjs.admin_content_default; }
+  get: function () { return chunkMZS33LLH_cjs.admin_content_default; }
 });
 Object.defineProperty(exports, "adminDashboardRoutes", {
   enumerable: true,
-  get: function () { return chunk6ENX7QSA_cjs.router; }
+  get: function () { return chunkMZS33LLH_cjs.router; }
 });
 Object.defineProperty(exports, "adminDesignRoutes", {
   enumerable: true,
-  get: function () { return chunk6ENX7QSA_cjs.adminDesignRoutes; }
+  get: function () { return chunkMZS33LLH_cjs.adminDesignRoutes; }
 });
 Object.defineProperty(exports, "adminLogsRoutes", {
   enumerable: true,
-  get: function () { return chunk6ENX7QSA_cjs.adminLogsRoutes; }
+  get: function () { return chunkMZS33LLH_cjs.adminLogsRoutes; }
 });
 Object.defineProperty(exports, "adminMediaRoutes", {
   enumerable: true,
-  get: function () { return chunk6ENX7QSA_cjs.adminMediaRoutes; }
+  get: function () { return chunkMZS33LLH_cjs.adminMediaRoutes; }
 });
 Object.defineProperty(exports, "adminPluginRoutes", {
   enumerable: true,
-  get: function () { return chunk6ENX7QSA_cjs.adminPluginRoutes; }
+  get: function () { return chunkMZS33LLH_cjs.adminPluginRoutes; }
 });
 Object.defineProperty(exports, "adminSettingsRoutes", {
   enumerable: true,
-  get: function () { return chunk6ENX7QSA_cjs.adminSettingsRoutes; }
+  get: function () { return chunkMZS33LLH_cjs.adminSettingsRoutes; }
 });
 Object.defineProperty(exports, "adminTestimonialsRoutes", {
   enumerable: true,
-  get: function () { return chunk6ENX7QSA_cjs.admin_testimonials_default; }
+  get: function () { return chunkMZS33LLH_cjs.admin_testimonials_default; }
 });
 Object.defineProperty(exports, "adminUsersRoutes", {
   enumerable: true,
-  get: function () { return chunk6ENX7QSA_cjs.userRoutes; }
+  get: function () { return chunkMZS33LLH_cjs.userRoutes; }
 });
 Object.defineProperty(exports, "apiContentCrudRoutes", {
   enumerable: true,
-  get: function () { return chunk6ENX7QSA_cjs.api_content_crud_default; }
+  get: function () { return chunkMZS33LLH_cjs.api_content_crud_default; }
 });
 Object.defineProperty(exports, "apiMediaRoutes", {
   enumerable: true,
-  get: function () { return chunk6ENX7QSA_cjs.api_media_default; }
+  get: function () { return chunkMZS33LLH_cjs.api_media_default; }
 });
 Object.defineProperty(exports, "apiRoutes", {
   enumerable: true,
-  get: function () { return chunk6ENX7QSA_cjs.api_default; }
+  get: function () { return chunkMZS33LLH_cjs.api_default; }
 });
 Object.defineProperty(exports, "apiSystemRoutes", {
   enumerable: true,
-  get: function () { return chunk6ENX7QSA_cjs.api_system_default; }
+  get: function () { return chunkMZS33LLH_cjs.api_system_default; }
 });
 Object.defineProperty(exports, "authRoutes", {
   enumerable: true,
-  get: function () { return chunk6ENX7QSA_cjs.auth_default; }
+  get: function () { return chunkMZS33LLH_cjs.auth_default; }
 });
 Object.defineProperty(exports, "createUserProfilesPlugin", {
   enumerable: true,
-  get: function () { return chunk6ENX7QSA_cjs.createUserProfilesPlugin; }
+  get: function () { return chunkMZS33LLH_cjs.createUserProfilesPlugin; }
 });
 Object.defineProperty(exports, "defineUserProfile", {
   enumerable: true,
-  get: function () { return chunk6ENX7QSA_cjs.defineUserProfile; }
+  get: function () { return chunkMZS33LLH_cjs.defineUserProfile; }
 });
 Object.defineProperty(exports, "getUserProfileConfig", {
   enumerable: true,
-  get: function () { return chunk6ENX7QSA_cjs.getUserProfileConfig; }
+  get: function () { return chunkMZS33LLH_cjs.getUserProfileConfig; }
 });
 Object.defineProperty(exports, "userProfilesPlugin", {
   enumerable: true,
-  get: function () { return chunk6ENX7QSA_cjs.userProfilesPlugin; }
+  get: function () { return chunkMZS33LLH_cjs.userProfilesPlugin; }
 });
 Object.defineProperty(exports, "Logger", {
   enumerable: true,
@@ -10703,167 +10719,167 @@ Object.defineProperty(exports, "workflowHistory", {
 });
 Object.defineProperty(exports, "AuthManager", {
   enumerable: true,
-  get: function () { return chunkCZ6BVQZX_cjs.AuthManager; }
+  get: function () { return chunk7HHIZQNE_cjs.AuthManager; }
 });
 Object.defineProperty(exports, "PermissionManager", {
   enumerable: true,
-  get: function () { return chunkCZ6BVQZX_cjs.PermissionManager; }
+  get: function () { return chunk7HHIZQNE_cjs.PermissionManager; }
 });
 Object.defineProperty(exports, "bootstrapMiddleware", {
   enumerable: true,
-  get: function () { return chunkCZ6BVQZX_cjs.bootstrapMiddleware; }
+  get: function () { return chunk7HHIZQNE_cjs.bootstrapMiddleware; }
 });
 Object.defineProperty(exports, "cacheHeaders", {
   enumerable: true,
-  get: function () { return chunkCZ6BVQZX_cjs.cacheHeaders; }
+  get: function () { return chunk7HHIZQNE_cjs.cacheHeaders; }
 });
 Object.defineProperty(exports, "compressionMiddleware", {
   enumerable: true,
-  get: function () { return chunkCZ6BVQZX_cjs.compressionMiddleware; }
+  get: function () { return chunk7HHIZQNE_cjs.compressionMiddleware; }
 });
 Object.defineProperty(exports, "detailedLoggingMiddleware", {
   enumerable: true,
-  get: function () { return chunkCZ6BVQZX_cjs.detailedLoggingMiddleware; }
+  get: function () { return chunk7HHIZQNE_cjs.detailedLoggingMiddleware; }
 });
 Object.defineProperty(exports, "getActivePlugins", {
   enumerable: true,
-  get: function () { return chunkCZ6BVQZX_cjs.getActivePlugins; }
+  get: function () { return chunk7HHIZQNE_cjs.getActivePlugins; }
 });
 Object.defineProperty(exports, "isPluginActive", {
   enumerable: true,
-  get: function () { return chunkCZ6BVQZX_cjs.isPluginActive; }
+  get: function () { return chunk7HHIZQNE_cjs.isPluginActive; }
 });
 Object.defineProperty(exports, "logActivity", {
   enumerable: true,
-  get: function () { return chunkCZ6BVQZX_cjs.logActivity; }
+  get: function () { return chunk7HHIZQNE_cjs.logActivity; }
 });
 Object.defineProperty(exports, "loggingMiddleware", {
   enumerable: true,
-  get: function () { return chunkCZ6BVQZX_cjs.loggingMiddleware; }
+  get: function () { return chunk7HHIZQNE_cjs.loggingMiddleware; }
 });
 Object.defineProperty(exports, "optionalAuth", {
   enumerable: true,
-  get: function () { return chunkCZ6BVQZX_cjs.optionalAuth; }
+  get: function () { return chunk7HHIZQNE_cjs.optionalAuth; }
 });
 Object.defineProperty(exports, "performanceLoggingMiddleware", {
   enumerable: true,
-  get: function () { return chunkCZ6BVQZX_cjs.performanceLoggingMiddleware; }
+  get: function () { return chunk7HHIZQNE_cjs.performanceLoggingMiddleware; }
 });
 Object.defineProperty(exports, "requireActivePlugin", {
   enumerable: true,
-  get: function () { return chunkCZ6BVQZX_cjs.requireActivePlugin; }
+  get: function () { return chunk7HHIZQNE_cjs.requireActivePlugin; }
 });
 Object.defineProperty(exports, "requireActivePlugins", {
   enumerable: true,
-  get: function () { return chunkCZ6BVQZX_cjs.requireActivePlugins; }
+  get: function () { return chunk7HHIZQNE_cjs.requireActivePlugins; }
 });
 Object.defineProperty(exports, "requireAnyPermission", {
   enumerable: true,
-  get: function () { return chunkCZ6BVQZX_cjs.requireAnyPermission; }
+  get: function () { return chunk7HHIZQNE_cjs.requireAnyPermission; }
 });
 Object.defineProperty(exports, "requireAuth", {
   enumerable: true,
-  get: function () { return chunkCZ6BVQZX_cjs.requireAuth; }
+  get: function () { return chunk7HHIZQNE_cjs.requireAuth; }
 });
 Object.defineProperty(exports, "requirePermission", {
   enumerable: true,
-  get: function () { return chunkCZ6BVQZX_cjs.requirePermission; }
+  get: function () { return chunk7HHIZQNE_cjs.requirePermission; }
 });
 Object.defineProperty(exports, "requireRole", {
   enumerable: true,
-  get: function () { return chunkCZ6BVQZX_cjs.requireRole; }
+  get: function () { return chunk7HHIZQNE_cjs.requireRole; }
 });
 Object.defineProperty(exports, "securityHeaders", {
   enumerable: true,
-  get: function () { return chunkCZ6BVQZX_cjs.securityHeadersMiddleware; }
+  get: function () { return chunk7HHIZQNE_cjs.securityHeadersMiddleware; }
 });
 Object.defineProperty(exports, "securityLoggingMiddleware", {
   enumerable: true,
-  get: function () { return chunkCZ6BVQZX_cjs.securityLoggingMiddleware; }
+  get: function () { return chunk7HHIZQNE_cjs.securityLoggingMiddleware; }
 });
 Object.defineProperty(exports, "PluginBootstrapService", {
   enumerable: true,
-  get: function () { return chunkQ5VFZUXV_cjs.PluginBootstrapService; }
+  get: function () { return chunkU6FOL6EO_cjs.PluginBootstrapService; }
 });
 Object.defineProperty(exports, "PluginServiceClass", {
   enumerable: true,
-  get: function () { return chunkQ5VFZUXV_cjs.PluginService; }
+  get: function () { return chunkU6FOL6EO_cjs.PluginService; }
 });
 Object.defineProperty(exports, "backfillFormSubmissions", {
   enumerable: true,
-  get: function () { return chunkQ5VFZUXV_cjs.backfillFormSubmissions; }
+  get: function () { return chunkU6FOL6EO_cjs.backfillFormSubmissions; }
 });
 Object.defineProperty(exports, "cleanupRemovedCollections", {
   enumerable: true,
-  get: function () { return chunkQ5VFZUXV_cjs.cleanupRemovedCollections; }
+  get: function () { return chunkU6FOL6EO_cjs.cleanupRemovedCollections; }
 });
 Object.defineProperty(exports, "createContentFromSubmission", {
   enumerable: true,
-  get: function () { return chunkQ5VFZUXV_cjs.createContentFromSubmission; }
+  get: function () { return chunkU6FOL6EO_cjs.createContentFromSubmission; }
 });
 Object.defineProperty(exports, "deriveCollectionSchemaFromFormio", {
   enumerable: true,
-  get: function () { return chunkQ5VFZUXV_cjs.deriveCollectionSchemaFromFormio; }
+  get: function () { return chunkU6FOL6EO_cjs.deriveCollectionSchemaFromFormio; }
 });
 Object.defineProperty(exports, "deriveSubmissionTitle", {
   enumerable: true,
-  get: function () { return chunkQ5VFZUXV_cjs.deriveSubmissionTitle; }
+  get: function () { return chunkU6FOL6EO_cjs.deriveSubmissionTitle; }
 });
 Object.defineProperty(exports, "fullCollectionSync", {
   enumerable: true,
-  get: function () { return chunkQ5VFZUXV_cjs.fullCollectionSync; }
+  get: function () { return chunkU6FOL6EO_cjs.fullCollectionSync; }
 });
 Object.defineProperty(exports, "getAvailableCollectionNames", {
   enumerable: true,
-  get: function () { return chunkQ5VFZUXV_cjs.getAvailableCollectionNames; }
+  get: function () { return chunkU6FOL6EO_cjs.getAvailableCollectionNames; }
 });
 Object.defineProperty(exports, "getManagedCollections", {
   enumerable: true,
-  get: function () { return chunkQ5VFZUXV_cjs.getManagedCollections; }
+  get: function () { return chunkU6FOL6EO_cjs.getManagedCollections; }
 });
 Object.defineProperty(exports, "isCollectionManaged", {
   enumerable: true,
-  get: function () { return chunkQ5VFZUXV_cjs.isCollectionManaged; }
+  get: function () { return chunkU6FOL6EO_cjs.isCollectionManaged; }
 });
 Object.defineProperty(exports, "loadCollectionConfig", {
   enumerable: true,
-  get: function () { return chunkQ5VFZUXV_cjs.loadCollectionConfig; }
+  get: function () { return chunkU6FOL6EO_cjs.loadCollectionConfig; }
 });
 Object.defineProperty(exports, "loadCollectionConfigs", {
   enumerable: true,
-  get: function () { return chunkQ5VFZUXV_cjs.loadCollectionConfigs; }
+  get: function () { return chunkU6FOL6EO_cjs.loadCollectionConfigs; }
 });
 Object.defineProperty(exports, "mapFormStatusToContentStatus", {
   enumerable: true,
-  get: function () { return chunkQ5VFZUXV_cjs.mapFormStatusToContentStatus; }
+  get: function () { return chunkU6FOL6EO_cjs.mapFormStatusToContentStatus; }
 });
 Object.defineProperty(exports, "registerCollections", {
   enumerable: true,
-  get: function () { return chunkQ5VFZUXV_cjs.registerCollections; }
+  get: function () { return chunkU6FOL6EO_cjs.registerCollections; }
 });
 Object.defineProperty(exports, "syncAllFormCollections", {
   enumerable: true,
-  get: function () { return chunkQ5VFZUXV_cjs.syncAllFormCollections; }
+  get: function () { return chunkU6FOL6EO_cjs.syncAllFormCollections; }
 });
 Object.defineProperty(exports, "syncCollection", {
   enumerable: true,
-  get: function () { return chunkQ5VFZUXV_cjs.syncCollection; }
+  get: function () { return chunkU6FOL6EO_cjs.syncCollection; }
 });
 Object.defineProperty(exports, "syncCollections", {
   enumerable: true,
-  get: function () { return chunkQ5VFZUXV_cjs.syncCollections; }
+  get: function () { return chunkU6FOL6EO_cjs.syncCollections; }
 });
 Object.defineProperty(exports, "syncFormCollection", {
   enumerable: true,
-  get: function () { return chunkQ5VFZUXV_cjs.syncFormCollection; }
+  get: function () { return chunkU6FOL6EO_cjs.syncFormCollection; }
 });
 Object.defineProperty(exports, "validateCollectionConfig", {
   enumerable: true,
-  get: function () { return chunkQ5VFZUXV_cjs.validateCollectionConfig; }
+  get: function () { return chunkU6FOL6EO_cjs.validateCollectionConfig; }
 });
 Object.defineProperty(exports, "MigrationService", {
   enumerable: true,
-  get: function () { return chunkOCLUXJ7E_cjs.MigrationService; }
+  get: function () { return chunkHU4MN74Q_cjs.MigrationService; }
 });
 Object.defineProperty(exports, "renderFilterBar", {
   enumerable: true,
@@ -10931,31 +10947,31 @@ Object.defineProperty(exports, "PluginHelpers", {
 });
 Object.defineProperty(exports, "QueryFilterBuilder", {
   enumerable: true,
-  get: function () { return chunkYQW2GCJ3_cjs.QueryFilterBuilder; }
+  get: function () { return chunkV76ERLX6_cjs.QueryFilterBuilder; }
 });
 Object.defineProperty(exports, "SONICJS_VERSION", {
   enumerable: true,
-  get: function () { return chunkYQW2GCJ3_cjs.SONICJS_VERSION; }
+  get: function () { return chunkV76ERLX6_cjs.SONICJS_VERSION; }
 });
 Object.defineProperty(exports, "TemplateRenderer", {
   enumerable: true,
-  get: function () { return chunkYQW2GCJ3_cjs.TemplateRenderer; }
+  get: function () { return chunkV76ERLX6_cjs.TemplateRenderer; }
 });
 Object.defineProperty(exports, "buildQuery", {
   enumerable: true,
-  get: function () { return chunkYQW2GCJ3_cjs.buildQuery; }
+  get: function () { return chunkV76ERLX6_cjs.buildQuery; }
 });
 Object.defineProperty(exports, "getCoreVersion", {
   enumerable: true,
-  get: function () { return chunkYQW2GCJ3_cjs.getCoreVersion; }
+  get: function () { return chunkV76ERLX6_cjs.getCoreVersion; }
 });
 Object.defineProperty(exports, "renderTemplate", {
   enumerable: true,
-  get: function () { return chunkYQW2GCJ3_cjs.renderTemplate; }
+  get: function () { return chunkV76ERLX6_cjs.renderTemplate; }
 });
 Object.defineProperty(exports, "templateRenderer", {
   enumerable: true,
-  get: function () { return chunkYQW2GCJ3_cjs.templateRenderer; }
+  get: function () { return chunkV76ERLX6_cjs.templateRenderer; }
 });
 Object.defineProperty(exports, "metricsTracker", {
   enumerable: true,