@sonicjs-cms/core 2.8.0 → 2.8.1

package/dist/{chunk-YE2MU7CN.cjs → chunk-JVRRG36J.cjs}

@@ -1,12 +1,12 @@
 'use strict';
 
 var chunkVNLR35GO_cjs = require('./chunk-VNLR35GO.cjs');
-var chunkGPTMGUFN_cjs = require('./chunk-GPTMGUFN.cjs');
+var chunkGIWIJNBH_cjs = require('./chunk-GIWIJNBH.cjs');
 var chunkMPT5PA6U_cjs = require('./chunk-MPT5PA6U.cjs');
-var chunk5CENPGR2_cjs = require('./chunk-5CENPGR2.cjs');
+var chunkSKLRRFJJ_cjs = require('./chunk-SKLRRFJJ.cjs');
 var chunkSHCYIZAN_cjs = require('./chunk-SHCYIZAN.cjs');
 var chunk6FHNRRJ3_cjs = require('./chunk-6FHNRRJ3.cjs');
-var chunk5HMR2SJW_cjs = require('./chunk-5HMR2SJW.cjs');
+var chunkWDQZYCQO_cjs = require('./chunk-WDQZYCQO.cjs');
 var chunkRCQ2HIQD_cjs = require('./chunk-RCQ2HIQD.cjs');
 var hono = require('hono');
 var cors = require('hono/cors');
@@ -16,6 +16,50 @@ var html = require('hono/html');
 
 // src/schemas/index.ts
 var schemaDefinitions = [];
+
+// src/routes/api-content-access-policy.ts
+function canReadNonPublicContent(userRole) {
+  return userRole === "admin" || userRole === "editor";
+}
+function isStatusCondition(condition) {
+  return condition.field === "status";
+}
+function stripStatusConditions(group) {
+  if (!group) {
+    return void 0;
+  }
+  const and = group.and?.filter((condition) => !isStatusCondition(condition));
+  const or = group.or?.filter((condition) => !isStatusCondition(condition));
+  const normalizedGroup = {};
+  if (and && and.length > 0) {
+    normalizedGroup.and = and;
+  }
+  if (or && or.length > 0) {
+    normalizedGroup.or = or;
+  }
+  return normalizedGroup;
+}
+function normalizePublicContentFilter(filter, userRole) {
+  if (canReadNonPublicContent(userRole)) {
+    return filter;
+  }
+  const normalizedFilter = {
+    ...filter,
+    where: stripStatusConditions(filter.where)
+  };
+  if (!normalizedFilter.where) {
+    normalizedFilter.where = { and: [] };
+  }
+  if (!normalizedFilter.where.and) {
+    normalizedFilter.where.and = [];
+  }
+  normalizedFilter.where.and.push({
+    field: "status",
+    operator: "equals",
+    value: "published"
+  });
+  return normalizedFilter;
+}
 var apiContentCrudRoutes = new hono.Hono();
 apiContentCrudRoutes.get("/check-slug", async (c) => {
   try {
@@ -76,7 +120,7 @@ apiContentCrudRoutes.get("/:id", async (c) => {
     }, 500);
   }
 });
-apiContentCrudRoutes.post("/", chunkGPTMGUFN_cjs.requireAuth(), async (c) => {
+apiContentCrudRoutes.post("/", chunkGIWIJNBH_cjs.requireAuth(), async (c) => {
   try {
     const db = c.env.DB;
     const user = c.get("user");
@@ -142,7 +186,7 @@ apiContentCrudRoutes.post("/", chunkGPTMGUFN_cjs.requireAuth(), async (c) => {
     }, 500);
   }
 });
-apiContentCrudRoutes.put("/:id", chunkGPTMGUFN_cjs.requireAuth(), async (c) => {
+apiContentCrudRoutes.put("/:id", chunkGIWIJNBH_cjs.requireAuth(), async (c) => {
   try {
     const id = c.req.param("id");
     const db = c.env.DB;
@@ -206,7 +250,7 @@ apiContentCrudRoutes.put("/:id", chunkGPTMGUFN_cjs.requireAuth(), async (c) => {
     }, 500);
   }
 });
-apiContentCrudRoutes.delete("/:id", chunkGPTMGUFN_cjs.requireAuth(), async (c) => {
+apiContentCrudRoutes.delete("/:id", chunkGIWIJNBH_cjs.requireAuth(), async (c) => {
   try {
     const id = c.req.param("id");
     const db = c.env.DB;
@@ -242,7 +286,7 @@ apiRoutes.use("*", async (c, next) => {
   c.header("X-Response-Time", `${totalTime}ms`);
 });
 apiRoutes.use("*", async (c, next) => {
-  const cacheEnabled = await chunkGPTMGUFN_cjs.isPluginActive(c.env.DB, "core-cache");
+  const cacheEnabled = await chunkGIWIJNBH_cjs.isPluginActive(c.env.DB, "core-cache");
   c.set("cacheEnabled", cacheEnabled);
   await next();
 });
@@ -371,7 +415,7 @@ apiRoutes.get("/", (c) => {
       "/api/collections/{collection}/content": {
         get: {
           summary: "Get Collection Content",
-          description: "Returns content items from a specific collection with filtering support",
+          description: "Returns content items from a specific collection with filtering support. Anonymous, viewer, and author requests are restricted to published content; admin and editor requests may query other statuses.",
           operationId: "getCollectionContent",
           tags: ["Content"],
           parameters: [
@@ -398,7 +442,7 @@ apiRoutes.get("/", (c) => {
               name: "status",
               in: "query",
               schema: { type: "string", enum: ["draft", "published", "archived"] },
-              description: "Filter by content status"
+              description: "Filter by content status. Anonymous, viewer, and author requests are limited to published content."
             }
           ],
           responses: {
@@ -425,7 +469,7 @@ apiRoutes.get("/", (c) => {
       "/api/content": {
         get: {
           summary: "List Content",
-          description: "Returns content items with advanced filtering support",
+          description: "Returns content items with advanced filtering support. Anonymous, viewer, and author requests are restricted to published content; admin and editor requests may query other statuses.",
           operationId: "getContent",
           tags: ["Content"],
           parameters: [
@@ -446,6 +490,12 @@ apiRoutes.get("/", (c) => {
               in: "query",
               schema: { type: "integer", default: 0 },
               description: "Number of items to skip"
+            },
+            {
+              name: "status",
+              in: "query",
+              schema: { type: "string", enum: ["draft", "published", "archived"] },
+              description: "Filter by content status. Anonymous, viewer, and author requests are limited to published content."
             }
           ],
           responses: {
@@ -722,7 +772,7 @@ apiRoutes.get("/collections", async (c) => {
     return c.json({ error: "Failed to fetch collections" }, 500);
   }
 });
-apiRoutes.get("/content", async (c) => {
+apiRoutes.get("/content", chunkGIWIJNBH_cjs.optionalAuth(), async (c) => {
   const executionStart = Date.now();
   try {
     const db = c.env.DB;
@@ -745,13 +795,14 @@ apiRoutes.get("/content", async (c) => {
         });
       }
     }
-    const filter = chunk5HMR2SJW_cjs.QueryFilterBuilder.parseFromQuery(queryParams);
-    if (!filter.limit) {
-      filter.limit = 50;
+    const filter = chunkWDQZYCQO_cjs.QueryFilterBuilder.parseFromQuery(queryParams);
+    const normalizedFilter = normalizePublicContentFilter(filter, c.get("user")?.role);
+    if (!normalizedFilter.limit) {
+      normalizedFilter.limit = 50;
     }
-    filter.limit = Math.min(filter.limit, 1e3);
-    const builder3 = new chunk5HMR2SJW_cjs.QueryFilterBuilder();
-    const queryResult = builder3.build("content", filter);
+    normalizedFilter.limit = Math.min(normalizedFilter.limit, 1e3);
+    const builder3 = new chunkWDQZYCQO_cjs.QueryFilterBuilder();
+    const queryResult = builder3.build("content", normalizedFilter);
     if (queryResult.errors.length > 0) {
       return c.json({
         error: "Invalid filter parameters",
@@ -760,7 +811,7 @@ apiRoutes.get("/content", async (c) => {
     }
     const cacheEnabled = c.get("cacheEnabled");
     const cache = chunkVNLR35GO_cjs.getCacheService(chunkVNLR35GO_cjs.CACHE_CONFIGS.api);
-    const cacheKey = cache.generateKey("content-filtered", JSON.stringify({ filter, query: queryResult.sql }));
+    const cacheKey = cache.generateKey("content-filtered", JSON.stringify({ filter: normalizedFilter, query: queryResult.sql }));
     if (cacheEnabled) {
       const cacheResult = await cache.getWithSource(cacheKey);
       if (cacheResult.hit && cacheResult.data) {
@@ -803,7 +854,7 @@ apiRoutes.get("/content", async (c) => {
       meta: addTimingMeta(c, {
         count: results.length,
         timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-        filter,
+        filter: normalizedFilter,
         query: {
           sql: queryResult.sql,
           params: queryResult.params
@@ -826,7 +877,7 @@ apiRoutes.get("/content", async (c) => {
     }, 500);
   }
 });
-apiRoutes.get("/collections/:collection/content", async (c) => {
+apiRoutes.get("/collections/:collection/content", chunkGIWIJNBH_cjs.optionalAuth(), async (c) => {
   const executionStart = Date.now();
   try {
     const collection = c.req.param("collection");
@@ -837,24 +888,25 @@ apiRoutes.get("/collections/:collection/content", async (c) => {
     if (!collectionResult) {
       return c.json({ error: "Collection not found" }, 404);
     }
-    const filter = chunk5HMR2SJW_cjs.QueryFilterBuilder.parseFromQuery(queryParams);
-    if (!filter.where) {
-      filter.where = { and: [] };
+    const filter = chunkWDQZYCQO_cjs.QueryFilterBuilder.parseFromQuery(queryParams);
+    const normalizedFilter = normalizePublicContentFilter(filter, c.get("user")?.role);
+    if (!normalizedFilter.where) {
+      normalizedFilter.where = { and: [] };
     }
-    if (!filter.where.and) {
-      filter.where.and = [];
+    if (!normalizedFilter.where.and) {
+      normalizedFilter.where.and = [];
     }
-    filter.where.and.push({
+    normalizedFilter.where.and.push({
       field: "collection_id",
       operator: "equals",
       value: collectionResult.id
     });
-    if (!filter.limit) {
-      filter.limit = 50;
+    if (!normalizedFilter.limit) {
+      normalizedFilter.limit = 50;
     }
-    filter.limit = Math.min(filter.limit, 1e3);
-    const builder3 = new chunk5HMR2SJW_cjs.QueryFilterBuilder();
-    const queryResult = builder3.build("content", filter);
+    normalizedFilter.limit = Math.min(normalizedFilter.limit, 1e3);
+    const builder3 = new chunkWDQZYCQO_cjs.QueryFilterBuilder();
+    const queryResult = builder3.build("content", normalizedFilter);
     if (queryResult.errors.length > 0) {
       return c.json({
         error: "Invalid filter parameters",
@@ -863,7 +915,7 @@ apiRoutes.get("/collections/:collection/content", async (c) => {
     }
     const cacheEnabled = c.get("cacheEnabled");
     const cache = chunkVNLR35GO_cjs.getCacheService(chunkVNLR35GO_cjs.CACHE_CONFIGS.api);
-    const cacheKey = cache.generateKey("collection-content-filtered", `${collection}:${JSON.stringify({ filter, query: queryResult.sql })}`);
+    const cacheKey = cache.generateKey("collection-content-filtered", `${collection}:${JSON.stringify({ filter: normalizedFilter, query: queryResult.sql })}`);
     if (cacheEnabled) {
       const cacheResult = await cache.getWithSource(cacheKey);
       if (cacheResult.hit && cacheResult.data) {
@@ -910,7 +962,7 @@ apiRoutes.get("/collections/:collection/content", async (c) => {
         },
         count: results.length,
         timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-        filter,
+        filter: normalizedFilter,
         query: {
           sql: queryResult.sql,
           params: queryResult.params
@@ -978,7 +1030,7 @@ var fileValidationSchema = zod.z.object({
   // 50MB max
 });
 var apiMediaRoutes = new hono.Hono();
-apiMediaRoutes.use("*", chunkGPTMGUFN_cjs.requireAuth());
+apiMediaRoutes.use("*", chunkGIWIJNBH_cjs.requireAuth());
 apiMediaRoutes.post("/upload", async (c) => {
   try {
     const user = c.get("user");
@@ -1722,8 +1774,8 @@ apiSystemRoutes.get("/env", (c) => {
 });
 var api_system_default = apiSystemRoutes;
 var adminApiRoutes = new hono.Hono();
-adminApiRoutes.use("*", chunkGPTMGUFN_cjs.requireAuth());
-adminApiRoutes.use("*", chunkGPTMGUFN_cjs.requireRole(["admin", "editor"]));
+adminApiRoutes.use("*", chunkGIWIJNBH_cjs.requireAuth());
+adminApiRoutes.use("*", chunkGIWIJNBH_cjs.requireRole(["admin", "editor"]));
 adminApiRoutes.get("/stats", async (c) => {
   try {
     const db = c.env.DB;
@@ -2233,7 +2285,7 @@ adminApiRoutes.delete("/collections/:id", async (c) => {
 });
 adminApiRoutes.get("/migrations/status", async (c) => {
   try {
-    const { MigrationService: MigrationService2 } = await import('./migrations-7JGSFOCM.cjs');
+    const { MigrationService: MigrationService2 } = await import('./migrations-76NR5BVF.cjs');
     const db = c.env.DB;
     const migrationService = new MigrationService2(db);
     const status = await migrationService.getMigrationStatus();
@@ -2258,7 +2310,7 @@ adminApiRoutes.post("/migrations/run", async (c) => {
         error: "Unauthorized. Admin access required."
       }, 403);
     }
-    const { MigrationService: MigrationService2 } = await import('./migrations-7JGSFOCM.cjs');
+    const { MigrationService: MigrationService2 } = await import('./migrations-76NR5BVF.cjs');
     const db = c.env.DB;
     const migrationService = new MigrationService2(db);
     const result = await migrationService.runPendingMigrations();
@@ -2277,7 +2329,7 @@ adminApiRoutes.post("/migrations/run", async (c) => {
 });
 adminApiRoutes.get("/migrations/validate", async (c) => {
   try {
-    const { MigrationService: MigrationService2 } = await import('./migrations-7JGSFOCM.cjs');
+    const { MigrationService: MigrationService2 } = await import('./migrations-76NR5BVF.cjs');
     const db = c.env.DB;
     const migrationService = new MigrationService2(db);
     const validation = await migrationService.validateSchema();
@@ -2759,7 +2811,7 @@ authRoutes.post(
       if (existingUser) {
         return c.json({ error: "User with this email or username already exists" }, 400);
       }
-      const passwordHash = await chunkGPTMGUFN_cjs.AuthManager.hashPassword(password);
+      const passwordHash = await chunkGIWIJNBH_cjs.AuthManager.hashPassword(password);
       const userId = crypto.randomUUID();
       const now = /* @__PURE__ */ new Date();
       await db.prepare(`
@@ -2779,7 +2831,7 @@ authRoutes.post(
         now.getTime(),
         now.getTime()
       ).run();
-      const token = await chunkGPTMGUFN_cjs.AuthManager.generateToken(userId, normalizedEmail, "viewer");
+      const token = await chunkGIWIJNBH_cjs.AuthManager.generateToken(userId, normalizedEmail, "viewer");
       cookie.setCookie(c, "auth_token", token, {
         httpOnly: true,
         secure: true,
@@ -2832,11 +2884,11 @@ authRoutes.post("/login", async (c) => {
     if (!user) {
       return c.json({ error: "Invalid email or password" }, 401);
     }
-    const isValidPassword = await chunkGPTMGUFN_cjs.AuthManager.verifyPassword(password, user.password_hash);
+    const isValidPassword = await chunkGIWIJNBH_cjs.AuthManager.verifyPassword(password, user.password_hash);
     if (!isValidPassword) {
       return c.json({ error: "Invalid email or password" }, 401);
     }
-    const token = await chunkGPTMGUFN_cjs.AuthManager.generateToken(user.id, user.email, user.role);
+    const token = await chunkGIWIJNBH_cjs.AuthManager.generateToken(user.id, user.email, user.role);
     cookie.setCookie(c, "auth_token", token, {
       httpOnly: true,
       secure: true,
@@ -2885,7 +2937,7 @@ authRoutes.get("/logout", (c) => {
   });
   return c.redirect("/auth/login?message=You have been logged out successfully");
 });
-authRoutes.get("/me", chunkGPTMGUFN_cjs.requireAuth(), async (c) => {
+authRoutes.get("/me", chunkGIWIJNBH_cjs.requireAuth(), async (c) => {
   try {
     const user = c.get("user");
     if (!user) {
@@ -2902,13 +2954,13 @@ authRoutes.get("/me", chunkGPTMGUFN_cjs.requireAuth(), async (c) => {
     return c.json({ error: "Failed to get user" }, 500);
   }
 });
-authRoutes.post("/refresh", chunkGPTMGUFN_cjs.requireAuth(), async (c) => {
+authRoutes.post("/refresh", chunkGIWIJNBH_cjs.requireAuth(), async (c) => {
   try {
     const user = c.get("user");
     if (!user) {
       return c.json({ error: "Not authenticated" }, 401);
     }
-    const token = await chunkGPTMGUFN_cjs.AuthManager.generateToken(user.userId, user.email, user.role);
+    const token = await chunkGIWIJNBH_cjs.AuthManager.generateToken(user.userId, user.email, user.role);
     cookie.setCookie(c, "auth_token", token, {
       httpOnly: true,
       secure: true,
@@ -2968,7 +3020,7 @@ authRoutes.post("/register/form", async (c) => {
         </div>
       `);
     }
-    const passwordHash = await chunkGPTMGUFN_cjs.AuthManager.hashPassword(password);
+    const passwordHash = await chunkGIWIJNBH_cjs.AuthManager.hashPassword(password);
     const role = isFirstUser ? "admin" : "viewer";
     const userId = crypto.randomUUID();
     const now = /* @__PURE__ */ new Date();
@@ -2988,7 +3040,7 @@ authRoutes.post("/register/form", async (c) => {
       now.getTime(),
       now.getTime()
     ).run();
-    const token = await chunkGPTMGUFN_cjs.AuthManager.generateToken(userId, normalizedEmail, role);
+    const token = await chunkGIWIJNBH_cjs.AuthManager.generateToken(userId, normalizedEmail, role);
     cookie.setCookie(c, "auth_token", token, {
       httpOnly: true,
       secure: false,
@@ -3040,7 +3092,7 @@ authRoutes.post("/login/form", async (c) => {
         </div>
       `);
     }
-    const isValidPassword = await chunkGPTMGUFN_cjs.AuthManager.verifyPassword(password, user.password_hash);
+    const isValidPassword = await chunkGIWIJNBH_cjs.AuthManager.verifyPassword(password, user.password_hash);
     if (!isValidPassword) {
       return c.html(html.html`
         <div class="bg-red-100 border border-red-400 text-red-700 px-4 py-3 rounded">
@@ -3048,7 +3100,7 @@ authRoutes.post("/login/form", async (c) => {
         </div>
       `);
     }
-    const token = await chunkGPTMGUFN_cjs.AuthManager.generateToken(user.id, user.email, user.role);
+    const token = await chunkGIWIJNBH_cjs.AuthManager.generateToken(user.id, user.email, user.role);
     cookie.setCookie(c, "auth_token", token, {
       httpOnly: true,
       secure: false,
@@ -3107,7 +3159,7 @@ authRoutes.post("/seed-admin", async (c) => {
     `).run();
     const existingAdmin = await db.prepare("SELECT id FROM users WHERE email = ? OR username = ?").bind("admin@sonicjs.com", "admin").first();
     if (existingAdmin) {
-      const passwordHash2 = await chunkGPTMGUFN_cjs.AuthManager.hashPassword("sonicjs!");
+      const passwordHash2 = await chunkGIWIJNBH_cjs.AuthManager.hashPassword("sonicjs!");
       await db.prepare("UPDATE users SET password_hash = ?, updated_at = ? WHERE id = ?").bind(passwordHash2, Date.now(), existingAdmin.id).run();
       return c.json({
         message: "Admin user already exists (password updated)",
@@ -3119,7 +3171,7 @@ authRoutes.post("/seed-admin", async (c) => {
         }
       });
     }
-    const passwordHash = await chunkGPTMGUFN_cjs.AuthManager.hashPassword("sonicjs!");
+    const passwordHash = await chunkGIWIJNBH_cjs.AuthManager.hashPassword("sonicjs!");
     const userId = "admin-user-id";
     const now = Date.now();
     const adminEmail = "admin@sonicjs.com".toLowerCase();
@@ -3339,7 +3391,7 @@ authRoutes.post("/accept-invitation", async (c) => {
     if (existingUsername) {
       return c.json({ error: "Username is already taken" }, 400);
     }
-    const passwordHash = await chunkGPTMGUFN_cjs.AuthManager.hashPassword(password);
+    const passwordHash = await chunkGIWIJNBH_cjs.AuthManager.hashPassword(password);
     const updateStmt = db.prepare(`
       UPDATE users SET 
         username = ?,
@@ -3358,7 +3410,7 @@ authRoutes.post("/accept-invitation", async (c) => {
       Date.now(),
       invitedUser.id
     ).run();
-    const authToken = await chunkGPTMGUFN_cjs.AuthManager.generateToken(invitedUser.id, invitedUser.email, invitedUser.role);
+    const authToken = await chunkGIWIJNBH_cjs.AuthManager.generateToken(invitedUser.id, invitedUser.email, invitedUser.role);
     cookie.setCookie(c, "auth_token", authToken, {
       httpOnly: true,
       secure: true,
@@ -3588,7 +3640,7 @@ authRoutes.post("/reset-password", async (c) => {
     if (Date.now() > user.password_reset_expires) {
       return c.json({ error: "Reset token has expired" }, 400);
     }
-    const newPasswordHash = await chunkGPTMGUFN_cjs.AuthManager.hashPassword(password);
+    const newPasswordHash = await chunkGIWIJNBH_cjs.AuthManager.hashPassword(password);
     try {
       const historyStmt = db.prepare(`
         INSERT INTO password_history (id, user_id, password_hash, created_at)
@@ -8015,9 +8067,9 @@ function parseFieldValue(field, formData, options = {}) {
   const { skipValidation = false } = options;
   const value = formData.get(field.field_name);
   const errors = [];
-  const blocksConfig = chunk5HMR2SJW_cjs.getBlocksFieldConfig(field.field_options);
+  const blocksConfig = chunkWDQZYCQO_cjs.getBlocksFieldConfig(field.field_options);
   if (blocksConfig) {
-    const parsed = chunk5HMR2SJW_cjs.parseBlocksValue(value, blocksConfig);
+    const parsed = chunkWDQZYCQO_cjs.parseBlocksValue(value, blocksConfig);
     if (!skipValidation && field.is_required && parsed.value.length === 0) {
       parsed.errors.push(`${field.field_label} is required`);
     }
@@ -8127,7 +8179,7 @@ function extractFieldData(fields, formData, options = {}) {
   }
   return { data, errors };
 }
-adminContentRoutes.use("*", chunkGPTMGUFN_cjs.requireAuth());
+adminContentRoutes.use("*", chunkGIWIJNBH_cjs.requireAuth());
 async function getCollectionFields(db, collectionId) {
   const cache = chunkVNLR35GO_cjs.getCacheService(chunkVNLR35GO_cjs.CACHE_CONFIGS.collection);
   return cache.getOrSet(
@@ -10110,7 +10162,7 @@ function renderUserEditPage(data) {
                     <input
                       type="text"
                       name="first_name"
-                      value="${chunk5HMR2SJW_cjs.escapeHtml(data.userToEdit.firstName || "")}"
+                      value="${chunkWDQZYCQO_cjs.escapeHtml(data.userToEdit.firstName || "")}"
                       required
                       class="w-full rounded-lg bg-white dark:bg-zinc-800 px-3 py-2 text-sm text-zinc-950 dark:text-white shadow-sm ring-1 ring-inset ring-zinc-950/10 dark:ring-white/10 placeholder:text-zinc-400 dark:placeholder:text-zinc-500 focus:outline-none focus:ring-2 focus:ring-zinc-950 dark:focus:ring-white transition-shadow"
                     />
@@ -10121,7 +10173,7 @@ function renderUserEditPage(data) {
                     <input
                       type="text"
                       name="last_name"
-                      value="${chunk5HMR2SJW_cjs.escapeHtml(data.userToEdit.lastName || "")}"
+                      value="${chunkWDQZYCQO_cjs.escapeHtml(data.userToEdit.lastName || "")}"
                       required
                       class="w-full rounded-lg bg-white dark:bg-zinc-800 px-3 py-2 text-sm text-zinc-950 dark:text-white shadow-sm ring-1 ring-inset ring-zinc-950/10 dark:ring-white/10 placeholder:text-zinc-400 dark:placeholder:text-zinc-500 focus:outline-none focus:ring-2 focus:ring-zinc-950 dark:focus:ring-white transition-shadow"
                     />
@@ -10132,7 +10184,7 @@ function renderUserEditPage(data) {
                     <input
                       type="text"
                       name="username"
-                      value="${chunk5HMR2SJW_cjs.escapeHtml(data.userToEdit.username || "")}"
+                      value="${chunkWDQZYCQO_cjs.escapeHtml(data.userToEdit.username || "")}"
                       required
                       class="w-full rounded-lg bg-white dark:bg-zinc-800 px-3 py-2 text-sm text-zinc-950 dark:text-white shadow-sm ring-1 ring-inset ring-zinc-950/10 dark:ring-white/10 placeholder:text-zinc-400 dark:placeholder:text-zinc-500 focus:outline-none focus:ring-2 focus:ring-zinc-950 dark:focus:ring-white transition-shadow"
                     />
@@ -10143,7 +10195,7 @@ function renderUserEditPage(data) {
                     <input
                       type="email"
                       name="email"
-                      value="${chunk5HMR2SJW_cjs.escapeHtml(data.userToEdit.email || "")}"
+                      value="${chunkWDQZYCQO_cjs.escapeHtml(data.userToEdit.email || "")}"
                       required
                       class="w-full rounded-lg bg-white dark:bg-zinc-800 px-3 py-2 text-sm text-zinc-950 dark:text-white shadow-sm ring-1 ring-inset ring-zinc-950/10 dark:ring-white/10 placeholder:text-zinc-400 dark:placeholder:text-zinc-500 focus:outline-none focus:ring-2 focus:ring-zinc-950 dark:focus:ring-white transition-shadow"
                     />
@@ -10154,7 +10206,7 @@ function renderUserEditPage(data) {
                     <input
                       type="tel"
                       name="phone"
-                      value="${chunk5HMR2SJW_cjs.escapeHtml(data.userToEdit.phone || "")}"
+                      value="${chunkWDQZYCQO_cjs.escapeHtml(data.userToEdit.phone || "")}"
                       class="w-full rounded-lg bg-white dark:bg-zinc-800 px-3 py-2 text-sm text-zinc-950 dark:text-white shadow-sm ring-1 ring-inset ring-zinc-950/10 dark:ring-white/10 placeholder:text-zinc-400 dark:placeholder:text-zinc-500 focus:outline-none focus:ring-2 focus:ring-zinc-950 dark:focus:ring-white transition-shadow"
                     />
                   </div>
@@ -10168,7 +10220,7 @@ function renderUserEditPage(data) {
                         class="col-start-1 row-start-1 w-full appearance-none rounded-md bg-white/5 dark:bg-white/5 py-1.5 pl-3 pr-8 text-base text-zinc-950 dark:text-white outline outline-1 -outline-offset-1 outline-zinc-500/30 dark:outline-zinc-400/30 *:bg-white dark:*:bg-zinc-800 focus-visible:outline focus-visible:outline-2 focus-visible:-outline-offset-2 focus-visible:outline-zinc-500 dark:focus-visible:outline-zinc-400 sm:text-sm/6"
                       >
                         ${data.roles.map((role) => `
-                          <option value="${chunk5HMR2SJW_cjs.escapeHtml(role.value)}" ${data.userToEdit.role === role.value ? "selected" : ""}>${chunk5HMR2SJW_cjs.escapeHtml(role.label)}</option>
+                          <option value="${chunkWDQZYCQO_cjs.escapeHtml(role.value)}" ${data.userToEdit.role === role.value ? "selected" : ""}>${chunkWDQZYCQO_cjs.escapeHtml(role.label)}</option>
                         `).join("")}
                       </select>
                       <svg viewBox="0 0 16 16" fill="currentColor" data-slot="icon" aria-hidden="true" class="pointer-events-none col-start-1 row-start-1 mr-2 size-5 self-center justify-self-end text-zinc-600 dark:text-zinc-400 sm:size-4">
@@ -10189,7 +10241,7 @@ function renderUserEditPage(data) {
                     <input
                       type="text"
                       name="profile_display_name"
-                      value="${chunk5HMR2SJW_cjs.escapeHtml(data.userToEdit.profile?.displayName || "")}"
+                      value="${chunkWDQZYCQO_cjs.escapeHtml(data.userToEdit.profile?.displayName || "")}"
                       placeholder="Public display name"
                       class="w-full rounded-lg bg-white dark:bg-zinc-800 px-3 py-2 text-sm text-zinc-950 dark:text-white shadow-sm ring-1 ring-inset ring-zinc-950/10 dark:ring-white/10 placeholder:text-zinc-400 dark:placeholder:text-zinc-500 focus:outline-none focus:ring-2 focus:ring-zinc-950 dark:focus:ring-white transition-shadow"
                     />
@@ -10200,7 +10252,7 @@ function renderUserEditPage(data) {
                     <input
                       type="text"
                       name="profile_company"
-                      value="${chunk5HMR2SJW_cjs.escapeHtml(data.userToEdit.profile?.company || "")}"
+                      value="${chunkWDQZYCQO_cjs.escapeHtml(data.userToEdit.profile?.company || "")}"
                       placeholder="Company or organization"
                       class="w-full rounded-lg bg-white dark:bg-zinc-800 px-3 py-2 text-sm text-zinc-950 dark:text-white shadow-sm ring-1 ring-inset ring-zinc-950/10 dark:ring-white/10 placeholder:text-zinc-400 dark:placeholder:text-zinc-500 focus:outline-none focus:ring-2 focus:ring-zinc-950 dark:focus:ring-white transition-shadow"
                     />
@@ -10211,7 +10263,7 @@ function renderUserEditPage(data) {
                     <input
                       type="text"
                       name="profile_job_title"
-                      value="${chunk5HMR2SJW_cjs.escapeHtml(data.userToEdit.profile?.jobTitle || "")}"
+                      value="${chunkWDQZYCQO_cjs.escapeHtml(data.userToEdit.profile?.jobTitle || "")}"
                       placeholder="Job title or role"
                       class="w-full rounded-lg bg-white dark:bg-zinc-800 px-3 py-2 text-sm text-zinc-950 dark:text-white shadow-sm ring-1 ring-inset ring-zinc-950/10 dark:ring-white/10 placeholder:text-zinc-400 dark:placeholder:text-zinc-500 focus:outline-none focus:ring-2 focus:ring-zinc-950 dark:focus:ring-white transition-shadow"
                     />
@@ -10222,7 +10274,7 @@ function renderUserEditPage(data) {
                     <input
                       type="url"
                       name="profile_website"
-                      value="${chunk5HMR2SJW_cjs.escapeHtml(data.userToEdit.profile?.website || "")}"
+                      value="${chunkWDQZYCQO_cjs.escapeHtml(data.userToEdit.profile?.website || "")}"
                       placeholder="https://example.com"
                       class="w-full rounded-lg bg-white dark:bg-zinc-800 px-3 py-2 text-sm text-zinc-950 dark:text-white shadow-sm ring-1 ring-inset ring-zinc-950/10 dark:ring-white/10 placeholder:text-zinc-400 dark:placeholder:text-zinc-500 focus:outline-none focus:ring-2 focus:ring-zinc-950 dark:focus:ring-white transition-shadow"
                     />
@@ -10233,7 +10285,7 @@ function renderUserEditPage(data) {
                     <input
                       type="text"
                       name="profile_location"
-                      value="${chunk5HMR2SJW_cjs.escapeHtml(data.userToEdit.profile?.location || "")}"
+                      value="${chunkWDQZYCQO_cjs.escapeHtml(data.userToEdit.profile?.location || "")}"
                       placeholder="City, Country"
                       class="w-full rounded-lg bg-white dark:bg-zinc-800 px-3 py-2 text-sm text-zinc-950 dark:text-white shadow-sm ring-1 ring-inset ring-zinc-950/10 dark:ring-white/10 placeholder:text-zinc-400 dark:placeholder:text-zinc-500 focus:outline-none focus:ring-2 focus:ring-zinc-950 dark:focus:ring-white transition-shadow"
                     />
@@ -10257,7 +10309,7 @@ function renderUserEditPage(data) {
                     rows="3"
                     placeholder="Short bio or description"
                     class="w-full rounded-lg bg-white dark:bg-zinc-800 px-3 py-2 text-sm text-zinc-950 dark:text-white shadow-sm ring-1 ring-inset ring-zinc-950/10 dark:ring-white/10 placeholder:text-zinc-400 dark:placeholder:text-zinc-500 focus:outline-none focus:ring-2 focus:ring-zinc-950 dark:focus:ring-white transition-shadow"
-                  >${chunk5HMR2SJW_cjs.escapeHtml(data.userToEdit.profile?.bio || "")}</textarea>
+                  >${chunkWDQZYCQO_cjs.escapeHtml(data.userToEdit.profile?.bio || "")}</textarea>
                 </div>
               </div>
 
@@ -11157,7 +11209,7 @@ function renderUsersListPage(data) {
 
 // src/routes/admin-users.ts
 var userRoutes = new hono.Hono();
-userRoutes.use("*", chunkGPTMGUFN_cjs.requireAuth());
+userRoutes.use("*", chunkGIWIJNBH_cjs.requireAuth());
 userRoutes.get("/", (c) => {
   return c.redirect("/admin/dashboard");
 });
@@ -11256,12 +11308,12 @@ userRoutes.put("/profile", async (c) => {
   const db = c.env.DB;
   try {
     const formData = await c.req.formData();
-    const firstName = chunk5HMR2SJW_cjs.sanitizeInput(formData.get("first_name")?.toString());
-    const lastName = chunk5HMR2SJW_cjs.sanitizeInput(formData.get("last_name")?.toString());
-    const username = chunk5HMR2SJW_cjs.sanitizeInput(formData.get("username")?.toString());
+    const firstName = chunkWDQZYCQO_cjs.sanitizeInput(formData.get("first_name")?.toString());
+    const lastName = chunkWDQZYCQO_cjs.sanitizeInput(formData.get("last_name")?.toString());
+    const username = chunkWDQZYCQO_cjs.sanitizeInput(formData.get("username")?.toString());
     const email = formData.get("email")?.toString()?.trim().toLowerCase() || "";
-    const phone = chunk5HMR2SJW_cjs.sanitizeInput(formData.get("phone")?.toString()) || null;
-    const bio = chunk5HMR2SJW_cjs.sanitizeInput(formData.get("bio")?.toString()) || null;
+    const phone = chunkWDQZYCQO_cjs.sanitizeInput(formData.get("phone")?.toString()) || null;
+    const bio = chunkWDQZYCQO_cjs.sanitizeInput(formData.get("bio")?.toString()) || null;
     const timezone = formData.get("timezone")?.toString() || "UTC";
     const language = formData.get("language")?.toString() || "en";
     const emailNotifications = formData.get("email_notifications") === "1";
@@ -11312,7 +11364,7 @@ userRoutes.put("/profile", async (c) => {
       Date.now(),
       user.userId
     ).run();
-    await chunkGPTMGUFN_cjs.logActivity(
+    await chunkGIWIJNBH_cjs.logActivity(
       db,
       user.userId,
       "profile.update",
@@ -11375,7 +11427,7 @@ userRoutes.post("/profile/avatar", async (c) => {
       SELECT first_name, last_name FROM users WHERE id = ?
     `);
     const userData = await userStmt.bind(user.userId).first();
-    await chunkGPTMGUFN_cjs.logActivity(
+    await chunkGIWIJNBH_cjs.logActivity(
       db,
       user.userId,
       "profile.avatar_update",
@@ -11446,7 +11498,7 @@ userRoutes.post("/profile/password", async (c) => {
         dismissible: true
       }));
     }
-    const validPassword = await chunkGPTMGUFN_cjs.AuthManager.verifyPassword(currentPassword, userData.password_hash);
+    const validPassword = await chunkGIWIJNBH_cjs.AuthManager.verifyPassword(currentPassword, userData.password_hash);
     if (!validPassword) {
       return c.html(renderAlert2({
         type: "error",
@@ -11454,7 +11506,7 @@ userRoutes.post("/profile/password", async (c) => {
         dismissible: true
       }));
     }
-    const newPasswordHash = await chunkGPTMGUFN_cjs.AuthManager.hashPassword(newPassword);
+    const newPasswordHash = await chunkGIWIJNBH_cjs.AuthManager.hashPassword(newPassword);
     const historyStmt = db.prepare(`
       INSERT INTO password_history (id, user_id, password_hash, created_at)
       VALUES (?, ?, ?, ?)
@@ -11470,7 +11522,7 @@ userRoutes.post("/profile/password", async (c) => {
       WHERE id = ?
     `);
     await updateStmt.bind(newPasswordHash, Date.now(), user.userId).run();
-    await chunkGPTMGUFN_cjs.logActivity(
+    await chunkGIWIJNBH_cjs.logActivity(
       db,
       user.userId,
       "profile.password_change",
@@ -11537,7 +11589,7 @@ userRoutes.get("/users", async (c) => {
     `);
     const countResult = await countStmt.bind(...params).first();
     const totalUsers = countResult?.total || 0;
-    await chunkGPTMGUFN_cjs.logActivity(
+    await chunkGIWIJNBH_cjs.logActivity(
       db,
       user.userId,
       "users.list_view",
@@ -11639,12 +11691,12 @@ userRoutes.post("/users/new", async (c) => {
   const user = c.get("user");
   try {
     const formData = await c.req.formData();
-    const firstName = chunk5HMR2SJW_cjs.sanitizeInput(formData.get("first_name")?.toString());
-    const lastName = chunk5HMR2SJW_cjs.sanitizeInput(formData.get("last_name")?.toString());
-    const username = chunk5HMR2SJW_cjs.sanitizeInput(formData.get("username")?.toString());
+    const firstName = chunkWDQZYCQO_cjs.sanitizeInput(formData.get("first_name")?.toString());
+    const lastName = chunkWDQZYCQO_cjs.sanitizeInput(formData.get("last_name")?.toString());
+    const username = chunkWDQZYCQO_cjs.sanitizeInput(formData.get("username")?.toString());
     const email = formData.get("email")?.toString()?.trim().toLowerCase() || "";
-    const phone = chunk5HMR2SJW_cjs.sanitizeInput(formData.get("phone")?.toString()) || null;
-    const bio = chunk5HMR2SJW_cjs.sanitizeInput(formData.get("bio")?.toString()) || null;
+    const phone = chunkWDQZYCQO_cjs.sanitizeInput(formData.get("phone")?.toString()) || null;
+    const bio = chunkWDQZYCQO_cjs.sanitizeInput(formData.get("bio")?.toString()) || null;
     const role = formData.get("role")?.toString() || "viewer";
     const password = formData.get("password")?.toString() || "";
     const confirmPassword = formData.get("confirm_password")?.toString() || "";
@@ -11691,7 +11743,7 @@ userRoutes.post("/users/new", async (c) => {
         dismissible: true
       }));
     }
-    const passwordHash = await chunkGPTMGUFN_cjs.AuthManager.hashPassword(password);
+    const passwordHash = await chunkGIWIJNBH_cjs.AuthManager.hashPassword(password);
     const userId = crypto.randomUUID();
     const createStmt = db.prepare(`
       INSERT INTO users (
@@ -11714,7 +11766,7 @@ userRoutes.post("/users/new", async (c) => {
       Date.now(),
       Date.now()
     ).run();
-    await chunkGPTMGUFN_cjs.logActivity(
+    await chunkGIWIJNBH_cjs.logActivity(
       db,
       user.userId,
       "user!.create",
@@ -11752,7 +11804,7 @@ userRoutes.get("/users/:id", async (c) => {
     if (!userRecord) {
       return c.json({ error: "User not found" }, 404);
     }
-    await chunkGPTMGUFN_cjs.logActivity(
+    await chunkGIWIJNBH_cjs.logActivity(
       db,
       user.userId,
       "user!.view",
@@ -11860,20 +11912,20 @@ userRoutes.put("/users/:id", async (c) => {
   const userId = c.req.param("id");
   try {
     const formData = await c.req.formData();
-    const firstName = chunk5HMR2SJW_cjs.sanitizeInput(formData.get("first_name")?.toString());
-    const lastName = chunk5HMR2SJW_cjs.sanitizeInput(formData.get("last_name")?.toString());
-    const username = chunk5HMR2SJW_cjs.sanitizeInput(formData.get("username")?.toString());
+    const firstName = chunkWDQZYCQO_cjs.sanitizeInput(formData.get("first_name")?.toString());
+    const lastName = chunkWDQZYCQO_cjs.sanitizeInput(formData.get("last_name")?.toString());
+    const username = chunkWDQZYCQO_cjs.sanitizeInput(formData.get("username")?.toString());
     const email = formData.get("email")?.toString()?.trim().toLowerCase() || "";
-    const phone = chunk5HMR2SJW_cjs.sanitizeInput(formData.get("phone")?.toString()) || null;
+    const phone = chunkWDQZYCQO_cjs.sanitizeInput(formData.get("phone")?.toString()) || null;
     const role = formData.get("role")?.toString() || "viewer";
     const isActive = formData.get("is_active") === "1";
     const emailVerified = formData.get("email_verified") === "1";
-    const profileDisplayName = chunk5HMR2SJW_cjs.sanitizeInput(formData.get("profile_display_name")?.toString()) || null;
-    const profileBio = chunk5HMR2SJW_cjs.sanitizeInput(formData.get("profile_bio")?.toString()) || null;
-    const profileCompany = chunk5HMR2SJW_cjs.sanitizeInput(formData.get("profile_company")?.toString()) || null;
-    const profileJobTitle = chunk5HMR2SJW_cjs.sanitizeInput(formData.get("profile_job_title")?.toString()) || null;
+    const profileDisplayName = chunkWDQZYCQO_cjs.sanitizeInput(formData.get("profile_display_name")?.toString()) || null;
+    const profileBio = chunkWDQZYCQO_cjs.sanitizeInput(formData.get("profile_bio")?.toString()) || null;
+    const profileCompany = chunkWDQZYCQO_cjs.sanitizeInput(formData.get("profile_company")?.toString()) || null;
+    const profileJobTitle = chunkWDQZYCQO_cjs.sanitizeInput(formData.get("profile_job_title")?.toString()) || null;
     const profileWebsite = formData.get("profile_website")?.toString()?.trim() || null;
-    const profileLocation = chunk5HMR2SJW_cjs.sanitizeInput(formData.get("profile_location")?.toString()) || null;
+    const profileLocation = chunkWDQZYCQO_cjs.sanitizeInput(formData.get("profile_location")?.toString()) || null;
     const profileDateOfBirthStr = formData.get("profile_date_of_birth")?.toString()?.trim() || null;
     const profileDateOfBirth = profileDateOfBirthStr ? new Date(profileDateOfBirthStr).getTime() : null;
     if (!firstName || !lastName || !username || !email) {
@@ -11977,7 +12029,7 @@ userRoutes.put("/users/:id", async (c) => {
         ).run();
       }
     }
-    await chunkGPTMGUFN_cjs.logActivity(
+    await chunkGIWIJNBH_cjs.logActivity(
       db,
       user.userId,
       "user.update",
@@ -12022,7 +12074,7 @@ userRoutes.post("/users/:id/toggle", async (c) => {
       UPDATE users SET is_active = ?, updated_at = ? WHERE id = ?
     `);
     await toggleStmt.bind(active ? 1 : 0, Date.now(), userId).run();
-    await chunkGPTMGUFN_cjs.logActivity(
+    await chunkGIWIJNBH_cjs.logActivity(
       db,
       user.userId,
       active ? "user.activate" : "user.deactivate",
@@ -12063,7 +12115,7 @@ userRoutes.delete("/users/:id", async (c) => {
         DELETE FROM users WHERE id = ?
       `);
       await deleteStmt.bind(userId).run();
-      await chunkGPTMGUFN_cjs.logActivity(
+      await chunkGIWIJNBH_cjs.logActivity(
         db,
         user.userId,
         "user!.hard_delete",
@@ -12082,7 +12134,7 @@ userRoutes.delete("/users/:id", async (c) => {
         UPDATE users SET is_active = 0, updated_at = ? WHERE id = ?
       `);
       await deleteStmt.bind(Date.now(), userId).run();
-      await chunkGPTMGUFN_cjs.logActivity(
+      await chunkGIWIJNBH_cjs.logActivity(
         db,
         user.userId,
         "user!.soft_delete",
@@ -12109,8 +12161,8 @@ userRoutes.post("/invite-user", async (c) => {
     const formData = await c.req.formData();
     const email = formData.get("email")?.toString()?.trim().toLowerCase() || "";
     const role = formData.get("role")?.toString()?.trim() || "viewer";
-    const firstName = chunk5HMR2SJW_cjs.sanitizeInput(formData.get("first_name")?.toString());
-    const lastName = chunk5HMR2SJW_cjs.sanitizeInput(formData.get("last_name")?.toString());
+    const firstName = chunkWDQZYCQO_cjs.sanitizeInput(formData.get("first_name")?.toString());
+    const lastName = chunkWDQZYCQO_cjs.sanitizeInput(formData.get("last_name")?.toString());
     if (!email || !firstName || !lastName) {
       return c.json({ error: "Email, first name, and last name are required" }, 400);
     }
@@ -12148,7 +12200,7 @@ userRoutes.post("/invite-user", async (c) => {
       Date.now(),
       Date.now()
     ).run();
-    await chunkGPTMGUFN_cjs.logActivity(
+    await chunkGIWIJNBH_cjs.logActivity(
       db,
       user.userId,
       "user!.invite_sent",
@@ -12205,7 +12257,7 @@ userRoutes.post("/resend-invitation/:id", async (c) => {
       Date.now(),
       userId
     ).run();
-    await chunkGPTMGUFN_cjs.logActivity(
+    await chunkGIWIJNBH_cjs.logActivity(
       db,
       user.userId,
       "user!.invitation_resent",
@@ -12241,7 +12293,7 @@ userRoutes.delete("/cancel-invitation/:id", async (c) => {
     }
     const deleteStmt = db.prepare(`DELETE FROM users WHERE id = ?`);
     await deleteStmt.bind(userId).run();
-    await chunkGPTMGUFN_cjs.logActivity(
+    await chunkGIWIJNBH_cjs.logActivity(
       db,
       user.userId,
       "user!.invitation_cancelled",
@@ -12324,7 +12376,7 @@ userRoutes.get("/activity-logs", async (c) => {
       ...log,
       details: log.details ? JSON.parse(log.details) : null
     }));
-    await chunkGPTMGUFN_cjs.logActivity(
+    await chunkGIWIJNBH_cjs.logActivity(
       db,
       user.userId,
       "activity.logs_viewed",
@@ -12431,7 +12483,7 @@ userRoutes.get("/activity-logs/export", async (c) => {
       csvRows.push(row.join(","));
     }
     const csvContent = csvRows.join("\n");
-    await chunkGPTMGUFN_cjs.logActivity(
+    await chunkGIWIJNBH_cjs.logActivity(
       db,
       user.userId,
       "activity.logs_exported",
@@ -13770,7 +13822,7 @@ var fileValidationSchema2 = zod.z.object({
   // 50MB max
 });
 var adminMediaRoutes = new hono.Hono();
-adminMediaRoutes.use("*", chunkGPTMGUFN_cjs.requireAuth());
+adminMediaRoutes.use("*", chunkGIWIJNBH_cjs.requireAuth());
 adminMediaRoutes.get("/", async (c) => {
   try {
     const user = c.get("user");
@@ -14356,7 +14408,7 @@ adminMediaRoutes.put("/:id", async (c) => {
     `);
   }
 });
-adminMediaRoutes.delete("/cleanup", chunkGPTMGUFN_cjs.requireRole("admin"), async (c) => {
+adminMediaRoutes.delete("/cleanup", chunkGIWIJNBH_cjs.requireRole("admin"), async (c) => {
   try {
     const db = c.env.DB;
     const allMediaStmt = db.prepare("SELECT id, r2_key, filename FROM media WHERE deleted_at IS NULL");
@@ -16579,7 +16631,7 @@ function renderEmailSettingsContent(plugin, settings) {
 
 // src/routes/admin-plugins.ts
 var adminPluginRoutes = new hono.Hono();
-adminPluginRoutes.use("*", chunkGPTMGUFN_cjs.requireAuth());
+adminPluginRoutes.use("*", chunkGIWIJNBH_cjs.requireAuth());
 var AVAILABLE_PLUGINS = [
   {
     id: "third-party-faq",
@@ -17984,7 +18036,7 @@ function renderLogConfigPage(data) {
 
 // src/routes/admin-logs.ts
 var adminLogsRoutes = new hono.Hono();
-adminLogsRoutes.use("*", chunkGPTMGUFN_cjs.requireAuth());
+adminLogsRoutes.use("*", chunkGIWIJNBH_cjs.requireAuth());
 adminLogsRoutes.get("/", async (c) => {
   try {
     const user = c.get("user");
@@ -20312,9 +20364,9 @@ function renderStorageUsage(databaseSizeBytes, mediaSizeBytes) {
 }
 
 // src/routes/admin-dashboard.ts
-var VERSION = chunk5HMR2SJW_cjs.getCoreVersion();
+var VERSION = chunkWDQZYCQO_cjs.getCoreVersion();
 var router = new hono.Hono();
-router.use("*", chunkGPTMGUFN_cjs.requireAuth());
+router.use("*", chunkGIWIJNBH_cjs.requireAuth());
 router.get("/", async (c) => {
   const user = c.get("user");
   try {
@@ -22094,7 +22146,7 @@ function renderCollectionFormPage(data) {
 
 // src/routes/admin-collections.ts
 var adminCollectionsRoutes = new hono.Hono();
-adminCollectionsRoutes.use("*", chunkGPTMGUFN_cjs.requireAuth());
+adminCollectionsRoutes.use("*", chunkGIWIJNBH_cjs.requireAuth());
 adminCollectionsRoutes.get("/", async (c) => {
   try {
     const user = c.get("user");
@@ -24283,7 +24335,7 @@ function renderDatabaseToolsSettings(settings) {
 
 // src/routes/admin-settings.ts
 var adminSettingsRoutes = new hono.Hono();
-adminSettingsRoutes.use("*", chunkGPTMGUFN_cjs.requireAuth());
+adminSettingsRoutes.use("*", chunkGIWIJNBH_cjs.requireAuth());
 function getMockSettings(user) {
   return {
     general: {
@@ -24451,7 +24503,7 @@ adminSettingsRoutes.get("/database-tools", (c) => {
 adminSettingsRoutes.get("/api/migrations/status", async (c) => {
   try {
     const db = c.env.DB;
-    const migrationService = new chunk5CENPGR2_cjs.MigrationService(db);
+    const migrationService = new chunkSKLRRFJJ_cjs.MigrationService(db);
     const status = await migrationService.getMigrationStatus();
     return c.json({
       success: true,
@@ -24475,7 +24527,7 @@ adminSettingsRoutes.post("/api/migrations/run", async (c) => {
       }, 403);
     }
     const db = c.env.DB;
-    const migrationService = new chunk5CENPGR2_cjs.MigrationService(db);
+    const migrationService = new chunkSKLRRFJJ_cjs.MigrationService(db);
     const result = await migrationService.runPendingMigrations();
     return c.json({
       success: result.success,
@@ -24493,7 +24545,7 @@ adminSettingsRoutes.post("/api/migrations/run", async (c) => {
 adminSettingsRoutes.get("/api/migrations/validate", async (c) => {
   try {
     const db = c.env.DB;
-    const migrationService = new chunk5CENPGR2_cjs.MigrationService(db);
+    const migrationService = new chunkSKLRRFJJ_cjs.MigrationService(db);
     const validation = await migrationService.validateSchema();
     return c.json({
       success: true,
@@ -26371,7 +26423,7 @@ function renderFormCreatePage(data) {
 
 // src/routes/admin-forms.ts
 var adminFormsRoutes = new hono.Hono();
-adminFormsRoutes.use("*", chunkGPTMGUFN_cjs.requireAuth());
+adminFormsRoutes.use("*", chunkGIWIJNBH_cjs.requireAuth());
 adminFormsRoutes.get("/", async (c) => {
   try {
     const user = c.get("user");
@@ -27501,9 +27553,9 @@ function renderAPIReferencePage(data) {
 }
 
 // src/routes/admin-api-reference.ts
-var VERSION2 = chunk5HMR2SJW_cjs.getCoreVersion();
+var VERSION2 = chunkWDQZYCQO_cjs.getCoreVersion();
 var router2 = new hono.Hono();
-router2.use("*", chunkGPTMGUFN_cjs.requireAuth());
+router2.use("*", chunkGIWIJNBH_cjs.requireAuth());
 var apiEndpoints = [
   // Auth endpoints
   {
@@ -27784,5 +27836,5 @@ exports.router = router;
 exports.router2 = router2;
 exports.test_cleanup_default = test_cleanup_default;
 exports.userRoutes = userRoutes;
-//# sourceMappingURL=chunk-YE2MU7CN.cjs.map
-//# sourceMappingURL=chunk-YE2MU7CN.cjs.map
+//# sourceMappingURL=chunk-JVRRG36J.cjs.map
+//# sourceMappingURL=chunk-JVRRG36J.cjs.map