@sonicjs-cms/core 3.0.0-beta.11 → 3.0.0-beta.12

package/dist/index.js

@@ -1,6 +1,6 @@
 import { createAuth } from './chunk-IVPRUGTY.js';
-import { getEmailService, hasEmailService, setEmailService, invalidateVariablesCache, resolveVariablesInObject, resolveDocScope, denyIfNotAllowed, DocumentRepository, dispatchHookEvent, getCustomData, renderTable, getVariablesCached, setVariablesCache, TenantService, isValidMemberRole, renderConfirmationDialog, getConfirmationDialogScript, VALID_MEMBER_ROLES, userProfilesPlugin, lexicalEditorPlugin, api_media_default, api_system_default, apiDocumentsRoutes, api_default, adminDocumentsRoutes, admin_api_default, adminCollectionsRoutes, adminSettingsRoutes, router2, admin_content_default, adminMediaRoutes, router, adminPluginRoutes, adminLogsRoutes, userRoutes, auth_default, test_cleanup_default } from './chunk-SXLVXD2X.js';
-export { ROUTES_INFO, admin_api_default as adminApiRoutes, adminCheckboxRoutes, adminCollectionsRoutes, admin_content_default as adminContentRoutes, router as adminDashboardRoutes, adminLogsRoutes, adminMediaRoutes, adminPluginRoutes, adminSettingsRoutes, userRoutes as adminUsersRoutes, api_content_crud_default as apiContentCrudRoutes, api_media_default as apiMediaRoutes, api_default as apiRoutes, api_system_default as apiSystemRoutes, auth_default as authRoutes, createUserProfilesPlugin, defineUserProfile, getUserProfileConfig, userProfilesPlugin } from './chunk-SXLVXD2X.js';
+import { getEmailService, hasEmailService, setEmailService, invalidateVariablesCache, resolveVariablesInObject, resolveDocScope, denyIfNotAllowed, DocumentRepository, dispatchHookEvent, getCustomData, renderTable, getVariablesCached, setVariablesCache, TenantService, isValidMemberRole, renderConfirmationDialog, getConfirmationDialogScript, VALID_MEMBER_ROLES, userProfilesPlugin, lexicalEditorPlugin, api_media_default, api_system_default, apiDocumentsRoutes, api_default, adminDocumentsRoutes, admin_api_default, adminCollectionsRoutes, adminSettingsRoutes, router2, admin_content_default, adminMediaRoutes, router, adminPluginRoutes, adminLogsRoutes, userRoutes, auth_default, test_cleanup_default } from './chunk-R2O6TTQS.js';
+export { ROUTES_INFO, admin_api_default as adminApiRoutes, adminCheckboxRoutes, adminCollectionsRoutes, admin_content_default as adminContentRoutes, router as adminDashboardRoutes, adminLogsRoutes, adminMediaRoutes, adminPluginRoutes, adminSettingsRoutes, userRoutes as adminUsersRoutes, api_content_crud_default as apiContentCrudRoutes, api_media_default as apiMediaRoutes, api_default as apiRoutes, api_system_default as apiSystemRoutes, auth_default as authRoutes, createUserProfilesPlugin, defineUserProfile, getUserProfileConfig, userProfilesPlugin } from './chunk-R2O6TTQS.js';
 import './chunk-IESEVHXL.js';
 import './chunk-RMRJGMDE.js';
 import { SettingsService, setAppInstance } from './chunk-RQ6N3FTV.js';
@@ -8,35 +8,36 @@ export { Logger, getLogger, initLogger } from './chunk-RQ6N3FTV.js';
 import { getAllCacheStats, CACHE_CONFIGS, getCacheService, clearAllCaches, parseCacheKey } from './chunk-K25XHMM3.js';
 import { schema_exports } from './chunk-AI663NBO.js';
 export { apiTokens, content, contentVersions, insertContentSchema, insertLogConfigSchema, insertMediaSchema, insertPluginActivityLogSchema, insertPluginAssetSchema, insertPluginHookSchema, insertPluginRouteSchema, insertPluginSchema, insertSystemLogSchema, insertUserSchema, insertWorkflowHistorySchema, logConfig, media, pluginActivityLog, pluginAssets, pluginHooks, pluginRoutes, plugins, selectContentSchema, selectLogConfigSchema, selectMediaSchema, selectPluginActivityLogSchema, selectPluginAssetSchema, selectPluginHookSchema, selectPluginRouteSchema, selectPluginSchema, selectSystemLogSchema, selectUserSchema, selectWorkflowHistorySchema, systemLogs, users, workflowHistory } from './chunk-AI663NBO.js';
-import { requireAuth, DocumentTypeRegistry, requireRbac, requireRole, getJwtExpirySecondsFromDb, AuthManager, metricsMiddleware, bootstrapMiddleware, securityHeadersMiddleware, csrfProtection } from './chunk-3PU4WVU6.js';
-export { AuthManager, PermissionManager, bootstrapDocumentTypes, bootstrapMiddleware, cacheHeaders, compressionMiddleware, detailedLoggingMiddleware, getActivePlugins, isPluginActive, logActivity, loggingMiddleware, optionalAuth, performanceLoggingMiddleware, requireActivePlugin, requireActivePlugins, requireAnyPermission, requireAuth, requirePermission, requireRole, securityHeadersMiddleware as securityHeaders, securityLoggingMiddleware } from './chunk-3PU4WVU6.js';
+import { requireAuth, DocumentTypeRegistry, requireRbac, requireRole, getJwtExpirySecondsFromDb, AuthManager, metricsMiddleware, bootstrapMiddleware, securityHeadersMiddleware, csrfProtection } from './chunk-DMXDQ5YI.js';
+export { AuthManager, PermissionManager, bootstrapDocumentTypes, bootstrapMiddleware, cacheHeaders, compressionMiddleware, detailedLoggingMiddleware, getActivePlugins, isPluginActive, logActivity, loggingMiddleware, optionalAuth, performanceLoggingMiddleware, requireActivePlugin, requireActivePlugins, requireAnyPermission, requireAuth, requirePermission, requireRole, securityHeadersMiddleware as securityHeaders, securityLoggingMiddleware } from './chunk-DMXDQ5YI.js';
 import { RbacService, DocumentsService } from './chunk-BLMTL57B.js';
 export { RbacService } from './chunk-BLMTL57B.js';
 import { nanoid } from './chunk-GCDZZNIN.js';
-import { PluginService, PLUGIN_REGISTRY, invalidateTenantCache, getCollectionRegistry, TENANT_COOKIE, MULTI_TENANT_PLUGIN_ID, collectionRecordToRow, tenantMiddleware } from './chunk-QLFTG3QJ.js';
-export { PluginBootstrapService, PluginService as PluginServiceClass, getAvailableCollectionNames, loadCollectionConfig, loadCollectionConfigs, registerCollections, validateCollectionConfig } from './chunk-QLFTG3QJ.js';
-export { MigrationService } from './chunk-6H66MSSL.js';
+import { PluginService, PLUGIN_REGISTRY, invalidateTenantCache, getCollectionRegistry, TENANT_COOKIE, MULTI_TENANT_PLUGIN_ID, collectionRecordToRow, tenantMiddleware } from './chunk-SUHGXAII.js';
+export { PluginBootstrapService, PluginService as PluginServiceClass, getAvailableCollectionNames, loadCollectionConfig, loadCollectionConfigs, registerCollections, validateCollectionConfig } from './chunk-SUHGXAII.js';
+export { MigrationService } from './chunk-INKP2WNU.js';
 export { renderFilterBar } from './chunk-JQISFW6U.js';
 import { renderAdminLayout } from './chunk-OBA2RYZN.js';
 export { getConfirmationDialogScript, renderAlert, renderConfirmationDialog, renderForm, renderFormField, renderPagination, renderTable } from './chunk-OBA2RYZN.js';
 import { init_admin_layout_catalyst_template, renderAdminLayoutCatalyst } from './chunk-5V62WT6M.js';
 export { renderAdminLayoutCatalyst } from './chunk-5V62WT6M.js';
-import { TurnstileService, HookSystemImpl, createPluginWirer, registerPluginRoutes, setPluginMenu } from './chunk-PDYRDYXI.js';
-export { HookSystemImpl, HookUtils, PluginDependencyCycleError, PluginManager as PluginManagerClass, PluginRegistryImpl, PluginValidator as PluginValidatorClass, RegisterPluginsError, ScopedHookSystem as ScopedHookSystemClass, collectCronSchedules, collectCrons, createScheduledHandler, dispatchCronTick, getPluginMenu, registerPlugins, resetPluginMenu, resolvePluginMenuItems, setPluginMenu, topoSort } from './chunk-PDYRDYXI.js';
-import { definePlugin, setPluginDefinitions } from './chunk-HPAJKZAQ.js';
-export { applySchemaDefaults, definePlugin, isDefinedPlugin, parseConfigSchema, parseFormDataToSettings, renderSchemaFields } from './chunk-HPAJKZAQ.js';
+import { TurnstileService, HookSystemImpl, createPluginWirer, registerPluginRoutes, setPluginMenu } from './chunk-Q3P7Y5VO.js';
+export { HookSystemImpl, HookUtils, PluginDependencyCycleError, PluginManager as PluginManagerClass, PluginRegistryImpl, PluginValidator as PluginValidatorClass, RegisterPluginsError, ScopedHookSystem as ScopedHookSystemClass, collectCronSchedules, collectCrons, createScheduledHandler, dispatchCronTick, getPluginMenu, registerPlugins, resetPluginMenu, resolvePluginMenuItems, setPluginMenu, topoSort } from './chunk-Q3P7Y5VO.js';
+import { definePlugin, setPluginDefinitions } from './chunk-XHBEFQJ3.js';
+export { applySchemaDefaults, definePlugin, isDefinedPlugin, parseConfigSchema, parseFormDataToSettings, renderSchemaFields } from './chunk-XHBEFQJ3.js';
 import { setHookSystem } from './chunk-RNZFGN4R.js';
 export { getHookSystem, getTypedHooks, hasHookSystem, resetHookSystem, setHookSystem } from './chunk-RNZFGN4R.js';
 export { QueryFilterBuilder, TemplateRenderer, buildQuery, renderTemplate, templateRenderer } from './chunk-QZGABF2M.js';
 export { metricsTracker } from './chunk-FICTAGD4.js';
 import './chunk-X7ZAEI5S.js';
-import { getCoreVersion, package_default } from './chunk-ZUEIQFE5.js';
-export { SONICJS_VERSION, getCoreVersion } from './chunk-ZUEIQFE5.js';
+import { getCoreVersion, package_default } from './chunk-ALNODOY4.js';
+export { SONICJS_VERSION, getCoreVersion } from './chunk-ALNODOY4.js';
 import { escapeHtml, sanitizeInput } from './chunk-TQABQWOP.js';
 export { escapeHtml, sanitizeInput, sanitizeObject } from './chunk-TQABQWOP.js';
 export { HOOKS } from './chunk-QXOZI5Q2.js';
 import './chunk-V4OQ3NZ2.js';
 import { Hono } from 'hono';
+import { cors } from 'hono/cors';
 import { z } from 'zod';
 import { setCookie, getCookie } from 'hono/cookie';
 import { html } from 'hono/html';
@@ -9715,6 +9716,7 @@ function renderFormCreatePage(data) {
 }
 
 // src/routes/admin-forms.ts
+var isTableMissing = (err) => String(err?.message ?? err?.cause?.message ?? "").includes("no such table: forms");
 var adminFormsRoutes = new Hono();
 adminFormsRoutes.use("*", requireAuth());
 adminFormsRoutes.get("/", async (c) => {
@@ -9756,6 +9758,14 @@ adminFormsRoutes.get("/", async (c) => {
     };
     return c.html(renderFormsListPage(pageData));
   } catch (error) {
+    if (isTableMissing(error)) {
+      const user = c.get("user");
+      return c.html(renderFormsListPage({
+        forms: [],
+        user: user ? { name: user.email, email: user.email, role: user.role } : void 0,
+        version: c.get("appVersion")
+      }));
+    }
     console.error("Error listing forms:", error);
     return c.html("<p>Error loading forms</p>", 500);
   }
@@ -9866,6 +9876,7 @@ adminFormsRoutes.post("/", async (c) => {
     ).run();
     return c.redirect(`/admin/forms/${formId}/builder`);
   } catch (error) {
+    if (isTableMissing(error)) return c.json({ error: "Forms storage not configured \u2014 run database migrations" }, 503);
     console.error("Error creating form:", error);
     return c.json({ error: "Failed to create form" }, 500);
   }
@@ -9903,6 +9914,7 @@ adminFormsRoutes.get("/:id/builder", async (c) => {
     };
     return c.html(renderFormBuilderPage(pageData));
   } catch (error) {
+    if (isTableMissing(error)) return c.html("<p>Forms storage not configured \u2014 run database migrations</p>", 503);
     console.error("Error showing form builder:", error);
     return c.html("<p>Error loading form builder</p>", 500);
   }
@@ -9932,6 +9944,7 @@ adminFormsRoutes.put("/:id", async (c) => {
     ).run();
     return c.json({ success: true, message: "Form saved successfully" });
   } catch (error) {
+    if (isTableMissing(error)) return c.json({ error: "Forms storage not configured \u2014 run database migrations" }, 503);
     console.error("Error updating form:", error);
     return c.json({ error: "Failed to save form" }, 500);
   }
@@ -9953,6 +9966,7 @@ adminFormsRoutes.delete("/:id", async (c) => {
     await db.prepare("DELETE FROM forms WHERE id = ?").bind(formId).run();
     return c.json({ success: true, message: "Form deleted successfully" });
   } catch (error) {
+    if (isTableMissing(error)) return c.json({ error: "Forms storage not configured \u2014 run database migrations" }, 503);
     console.error("Error deleting form:", error);
     return c.json({ error: "Failed to delete form" }, 500);
   }
@@ -10013,6 +10027,7 @@ adminFormsRoutes.get("/:id/submissions", async (c) => {
     `;
     return c.html(html4);
   } catch (error) {
+    if (isTableMissing(error)) return c.html("<p>Forms storage not configured \u2014 run database migrations</p>", 503);
     console.error("Error loading submissions:", error);
     return c.html("<p>Error loading submissions</p>", 500);
   }
@@ -10033,6 +10048,7 @@ function sanitizeDeep(value) {
   }
   return value;
 }
+var isTableMissing2 = (err) => String(err?.message ?? err?.cause?.message ?? "").includes("no such table: form");
 var publicFormsRoutes = new Hono();
 publicFormsRoutes.get("/:identifier/turnstile-config", async (c) => {
   try {
@@ -10060,6 +10076,7 @@ publicFormsRoutes.get("/:identifier/turnstile-config", async (c) => {
       appearance: formSettings.appearance || globalSettings.appearance || "always"
     });
   } catch (error) {
+    if (isTableMissing2(error)) return c.json({ enabled: false });
     console.error("Error fetching Turnstile config:", error);
     return c.json({ error: "Failed to fetch config" }, 500);
   }
@@ -10087,6 +10104,7 @@ publicFormsRoutes.get("/:identifier/schema", async (c) => {
       submitUrl: `/api/forms/${form.id}/submit`
     });
   } catch (error) {
+    if (isTableMissing2(error)) return c.json({ error: "Form not found" }, 404);
     console.error("Error fetching form schema:", error);
     return c.json({ error: "Failed to fetch form schema" }, 500);
   }
@@ -10453,6 +10471,7 @@ publicFormsRoutes.get("/:name", async (c) => {
     `;
     return c.html(html4);
   } catch (error) {
+    if (isTableMissing2(error)) return c.html("<h1>Form not found</h1><p>This form does not exist or is not publicly available.</p>", 404);
     console.error("Error rendering form:", error);
     return c.html("<p>Error loading form</p>", 500);
   }
@@ -10526,6 +10545,7 @@ publicFormsRoutes.post("/:identifier/submit", async (c) => {
       message: "Form submitted successfully"
     });
   } catch (error) {
+    if (isTableMissing2(error)) return c.json({ error: "Form not found" }, 404);
     console.error("Error submitting form:", error);
     return c.json({ error: "Failed to submit form" }, 500);
   }
@@ -16156,6 +16176,17 @@ function createSonicJSApp(config = {}) {
   app2.use("*", async (_c, next) => {
     await next();
   });
+  app2.use("*", cors({
+    origin: (origin, c) => {
+      const allowed = c.env?.CORS_ORIGINS;
+      if (!allowed) return null;
+      const list = allowed.split(",").map((s) => s.trim());
+      return list.includes(origin) ? origin : null;
+    },
+    allowMethods: ["GET", "POST", "PUT", "DELETE", "OPTIONS"],
+    allowHeaders: ["Content-Type", "Authorization", "X-API-Key"],
+    credentials: true
+  }));
   app2.use("*", securityHeadersMiddleware());
   app2.use("*", csrfProtection());
   app2.use("*", async (c, next) => {