@sonicjs-cms/core 3.0.0-beta.14 → 3.0.0-beta.15

package/dist/routes.d.cts

@@ -1,6 +1,6 @@
 import * as hono_types from 'hono/types';
 import { Hono } from 'hono';
-import { B as Bindings$5, V as Variables$6 } from './app-Do66yCcV.cjs';
+import { B as Bindings$5, V as Variables$6 } from './app-aj39TGHB.cjs';
 import { D1Database as D1Database$1, KVNamespace as KVNamespace$1, R2Bucket as R2Bucket$1 } from '@cloudflare/workers-types';
 import 'better-auth/client';
 import 'better-auth/plugins/email-otp';
@@ -9,7 +9,7 @@ import 'better-auth/plugins/magic-link';
 import 'better-call';
 import 'zod/v4/core';
 import 'zod';
-import './types-Dea1eNxU.cjs';
+import './types-DT7XN5TX.cjs';
 
 declare const apiDocumentsRoutes: Hono<{
     Bindings: Bindings$5;

package/dist/routes.d.ts

@@ -1,6 +1,6 @@
 import * as hono_types from 'hono/types';
 import { Hono } from 'hono';
-import { B as Bindings$5, V as Variables$6 } from './app-Bo0X1OWX.js';
+import { B as Bindings$5, V as Variables$6 } from './app-01M0dIwt.js';
 import { D1Database as D1Database$1, KVNamespace as KVNamespace$1, R2Bucket as R2Bucket$1 } from '@cloudflare/workers-types';
 import 'better-auth/client';
 import 'better-auth/plugins/email-otp';
@@ -9,7 +9,7 @@ import 'better-auth/plugins/magic-link';
 import 'better-call';
 import 'zod/v4/core';
 import 'zod';
-import './types-Dea1eNxU.js';
+import './types-DT7XN5TX.js';
 
 declare const apiDocumentsRoutes: Hono<{
     Bindings: Bindings$5;

package/dist/routes.js

@@ -1,22 +1,22 @@
-export { ROUTES_INFO, router2 as adminApiReferenceRoutes, admin_api_default as adminApiRoutes, adminCheckboxRoutes, adminCollectionsRoutes, admin_content_default as adminContentRoutes, router as adminDashboardRoutes, adminDocumentsRoutes, adminLogsRoutes, adminMediaRoutes, adminPluginRoutes, adminSettingsRoutes, userRoutes as adminUsersRoutes, api_content_crud_default as apiContentCrudRoutes, apiDocumentsRoutes, api_media_default as apiMediaRoutes, api_default as apiRoutes, api_system_default as apiSystemRoutes, auth_default as authRoutes, test_cleanup_default as testCleanupRoutes } from './chunk-HNUGMALL.js';
-import './chunk-IESEVHXL.js';
+export { ROUTES_INFO, router2 as adminApiReferenceRoutes, admin_api_default as adminApiRoutes, adminCheckboxRoutes, adminCollectionsRoutes, admin_content_default as adminContentRoutes, router as adminDashboardRoutes, adminDocumentsRoutes, adminLogsRoutes, adminMediaRoutes, adminPluginRoutes, adminSettingsRoutes, userRoutes as adminUsersRoutes, api_content_crud_default as apiContentCrudRoutes, apiDocumentsRoutes, api_media_default as apiMediaRoutes, api_default as apiRoutes, api_system_default as apiSystemRoutes, auth_default as authRoutes, test_cleanup_default as testCleanupRoutes } from './chunk-L3VIH6U4.js';
+import './chunk-VVYVFCML.js';
 import './chunk-RMRJGMDE.js';
 import './chunk-RQ6N3FTV.js';
 import './chunk-K25XHMM3.js';
 import './chunk-AI663NBO.js';
-import './chunk-O32IZ6JS.js';
+import './chunk-GQXVDFIG.js';
 import './chunk-PDC7DLOV.js';
 import './chunk-GCDZZNIN.js';
-import './chunk-INE5E3SL.js';
-import './chunk-32SDMKZ7.js';
+import './chunk-4ENXIP4M.js';
+import './chunk-VOAP3KFU.js';
 import './chunk-OBA2RYZN.js';
 import './chunk-5V62WT6M.js';
-import './chunk-QNPT6BQP.js';
+import './chunk-JRLADH5B.js';
 import './chunk-RNZFGN4R.js';
 import './chunk-QZGABF2M.js';
 import './chunk-FICTAGD4.js';
 import './chunk-X7ZAEI5S.js';
-import './chunk-U7T5EOHJ.js';
+import './chunk-CE6POA7A.js';
 import './chunk-TQABQWOP.js';
 import './chunk-V4OQ3NZ2.js';
 //# sourceMappingURL=routes.js.map

package/dist/services.cjs

@@ -3,8 +3,8 @@
 var chunk4BTBSXMR_cjs = require('./chunk-4BTBSXMR.cjs');
 require('./chunk-YA3TJ65D.cjs');
 require('./chunk-YP7GW2G5.cjs');
-var chunkWIV3R2MJ_cjs = require('./chunk-WIV3R2MJ.cjs');
-var chunkH5FB6GKR_cjs = require('./chunk-H5FB6GKR.cjs');
+var chunkFXZSZ7C7_cjs = require('./chunk-FXZSZ7C7.cjs');
+var chunk4AB3PQHF_cjs = require('./chunk-4AB3PQHF.cjs');
 require('./chunk-P3XDZL6Q.cjs');
 require('./chunk-MNWKYY5E.cjs');
 require('./chunk-IGJUBJBW.cjs');
@@ -57,67 +57,67 @@ Object.defineProperty(exports, "setAppInstance", {
 });
 Object.defineProperty(exports, "CollectionRegistry", {
   enumerable: true,
-  get: function () { return chunkWIV3R2MJ_cjs.CollectionRegistry; }
+  get: function () { return chunkFXZSZ7C7_cjs.CollectionRegistry; }
 });
 Object.defineProperty(exports, "PluginBootstrapService", {
   enumerable: true,
-  get: function () { return chunkWIV3R2MJ_cjs.PluginBootstrapService; }
+  get: function () { return chunkFXZSZ7C7_cjs.PluginBootstrapService; }
 });
 Object.defineProperty(exports, "PluginService", {
   enumerable: true,
-  get: function () { return chunkWIV3R2MJ_cjs.PluginService; }
+  get: function () { return chunkFXZSZ7C7_cjs.PluginService; }
 });
 Object.defineProperty(exports, "TelemetryService", {
   enumerable: true,
-  get: function () { return chunkWIV3R2MJ_cjs.TelemetryService; }
+  get: function () { return chunkFXZSZ7C7_cjs.TelemetryService; }
 });
 Object.defineProperty(exports, "collectionRecordToRow", {
   enumerable: true,
-  get: function () { return chunkWIV3R2MJ_cjs.collectionRecordToRow; }
+  get: function () { return chunkFXZSZ7C7_cjs.collectionRecordToRow; }
 });
 Object.defineProperty(exports, "createInstallationIdentity", {
   enumerable: true,
-  get: function () { return chunkWIV3R2MJ_cjs.createInstallationIdentity; }
+  get: function () { return chunkFXZSZ7C7_cjs.createInstallationIdentity; }
 });
 Object.defineProperty(exports, "getAvailableCollectionNames", {
   enumerable: true,
-  get: function () { return chunkWIV3R2MJ_cjs.getAvailableCollectionNames; }
+  get: function () { return chunkFXZSZ7C7_cjs.getAvailableCollectionNames; }
 });
 Object.defineProperty(exports, "getCollectionRegistry", {
   enumerable: true,
-  get: function () { return chunkWIV3R2MJ_cjs.getCollectionRegistry; }
+  get: function () { return chunkFXZSZ7C7_cjs.getCollectionRegistry; }
 });
 Object.defineProperty(exports, "getTelemetryService", {
   enumerable: true,
-  get: function () { return chunkWIV3R2MJ_cjs.getTelemetryService; }
+  get: function () { return chunkFXZSZ7C7_cjs.getTelemetryService; }
 });
 Object.defineProperty(exports, "initTelemetry", {
   enumerable: true,
-  get: function () { return chunkWIV3R2MJ_cjs.initTelemetry; }
+  get: function () { return chunkFXZSZ7C7_cjs.initTelemetry; }
 });
 Object.defineProperty(exports, "loadCollectionConfig", {
   enumerable: true,
-  get: function () { return chunkWIV3R2MJ_cjs.loadCollectionConfig; }
+  get: function () { return chunkFXZSZ7C7_cjs.loadCollectionConfig; }
 });
 Object.defineProperty(exports, "loadCollectionConfigs", {
   enumerable: true,
-  get: function () { return chunkWIV3R2MJ_cjs.loadCollectionConfigs; }
+  get: function () { return chunkFXZSZ7C7_cjs.loadCollectionConfigs; }
 });
 Object.defineProperty(exports, "registerCollections", {
   enumerable: true,
-  get: function () { return chunkWIV3R2MJ_cjs.registerCollections; }
+  get: function () { return chunkFXZSZ7C7_cjs.registerCollections; }
 });
 Object.defineProperty(exports, "resetCollectionRegistry", {
   enumerable: true,
-  get: function () { return chunkWIV3R2MJ_cjs.resetCollectionRegistry; }
+  get: function () { return chunkFXZSZ7C7_cjs.resetCollectionRegistry; }
 });
 Object.defineProperty(exports, "validateCollectionConfig", {
   enumerable: true,
-  get: function () { return chunkWIV3R2MJ_cjs.validateCollectionConfig; }
+  get: function () { return chunkFXZSZ7C7_cjs.validateCollectionConfig; }
 });
 Object.defineProperty(exports, "MigrationService", {
   enumerable: true,
-  get: function () { return chunkH5FB6GKR_cjs.MigrationService; }
+  get: function () { return chunk4AB3PQHF_cjs.MigrationService; }
 });
 //# sourceMappingURL=services.cjs.map
 //# sourceMappingURL=services.cjs.map

package/dist/services.js

@@ -1,8 +1,8 @@
 export { CACHE_CONFIGS, CATEGORY_INFO, CacheService, Logger, SettingsService, buildRouteList, getAppInstance, getCacheService, getLogger, initLogger, setAppInstance } from './chunk-RQ6N3FTV.js';
 import './chunk-K25XHMM3.js';
 import './chunk-AI663NBO.js';
-export { CollectionRegistry, PluginBootstrapService, PluginService, TelemetryService, collectionRecordToRow, createInstallationIdentity, getAvailableCollectionNames, getCollectionRegistry, getTelemetryService, initTelemetry, loadCollectionConfig, loadCollectionConfigs, registerCollections, resetCollectionRegistry, validateCollectionConfig } from './chunk-INE5E3SL.js';
-export { MigrationService } from './chunk-32SDMKZ7.js';
+export { CollectionRegistry, PluginBootstrapService, PluginService, TelemetryService, collectionRecordToRow, createInstallationIdentity, getAvailableCollectionNames, getCollectionRegistry, getTelemetryService, initTelemetry, loadCollectionConfig, loadCollectionConfigs, registerCollections, resetCollectionRegistry, validateCollectionConfig } from './chunk-4ENXIP4M.js';
+export { MigrationService } from './chunk-VOAP3KFU.js';
 import './chunk-X7ZAEI5S.js';
 import './chunk-TQABQWOP.js';
 import './chunk-V4OQ3NZ2.js';

package/dist/{types-Dea1eNxU.d.cts → types-DT7XN5TX.d.cts}

@@ -283,4 +283,4 @@ interface EmailProvider {
     }>>;
 }
 
-export { type AuthMagicLinkConsumedPayload as A, type ContentEventPayload as C, type EmailProvider as E, HOOK_EVENT_NAMES as H, LEGACY_EVENT_ALIASES as L, type NormalizedEmailMessage as N, type PayloadForEvent as P, type SubscribableEvent as S, type TypedHookContext as T, type AuthOtpVerifiedPayload as a, type AuthPasswordResetCompletedPayload as b, type AuthPasswordResetRequestedPayload as c, type AuthRegistrationCompletedPayload as d, type HookActor as e, type HookEventName as f, type HookEventPayloads as g, type HookPayload as h, type HookSystemLike as i, type LegacyHookEventName as j, type LegacyHookEventPayloads as k, type TypedHookHandler as l, type TypedHooks as m, createTypedHooks as n, isKnownHookEvent as o, isLegacyHookEvent as p, type SendResult as q, resolveHookEventName as r, type EmailLogRow as s, type EmailMessage as t };
+export { type AuthMagicLinkConsumedPayload as A, type ContentEventPayload as C, type EmailProvider as E, HOOK_EVENT_NAMES as H, LEGACY_EVENT_ALIASES as L, type NormalizedEmailMessage as N, type PayloadForEvent as P, type SubscribableEvent as S, type TypedHookContext as T, type AuthOtpVerifiedPayload as a, type AuthPasswordResetCompletedPayload as b, type AuthPasswordResetRequestedPayload as c, type AuthRegistrationCompletedPayload as d, type HookActor as e, type HookEventName as f, type HookEventPayloads as g, type HookPayload as h, type HookSystemLike as i, type LegacyHookEventName as j, type LegacyHookEventPayloads as k, type TypedHookHandler as l, type TypedHooks as m, createTypedHooks as n, isKnownHookEvent as o, isLegacyHookEvent as p, type EmailLogRow as q, resolveHookEventName as r, type EmailMessage as s, type SendResult as t };

package/dist/{types-Dea1eNxU.d.ts → types-DT7XN5TX.d.ts}

@@ -283,4 +283,4 @@ interface EmailProvider {
     }>>;
 }
 
-export { type AuthMagicLinkConsumedPayload as A, type ContentEventPayload as C, type EmailProvider as E, HOOK_EVENT_NAMES as H, LEGACY_EVENT_ALIASES as L, type NormalizedEmailMessage as N, type PayloadForEvent as P, type SubscribableEvent as S, type TypedHookContext as T, type AuthOtpVerifiedPayload as a, type AuthPasswordResetCompletedPayload as b, type AuthPasswordResetRequestedPayload as c, type AuthRegistrationCompletedPayload as d, type HookActor as e, type HookEventName as f, type HookEventPayloads as g, type HookPayload as h, type HookSystemLike as i, type LegacyHookEventName as j, type LegacyHookEventPayloads as k, type TypedHookHandler as l, type TypedHooks as m, createTypedHooks as n, isKnownHookEvent as o, isLegacyHookEvent as p, type SendResult as q, resolveHookEventName as r, type EmailLogRow as s, type EmailMessage as t };
+export { type AuthMagicLinkConsumedPayload as A, type ContentEventPayload as C, type EmailProvider as E, HOOK_EVENT_NAMES as H, LEGACY_EVENT_ALIASES as L, type NormalizedEmailMessage as N, type PayloadForEvent as P, type SubscribableEvent as S, type TypedHookContext as T, type AuthOtpVerifiedPayload as a, type AuthPasswordResetCompletedPayload as b, type AuthPasswordResetRequestedPayload as c, type AuthRegistrationCompletedPayload as d, type HookActor as e, type HookEventName as f, type HookEventPayloads as g, type HookPayload as h, type HookSystemLike as i, type LegacyHookEventName as j, type LegacyHookEventPayloads as k, type TypedHookHandler as l, type TypedHooks as m, createTypedHooks as n, isKnownHookEvent as o, isLegacyHookEvent as p, type EmailLogRow as q, resolveHookEventName as r, type EmailMessage as s, type SendResult as t };

package/dist/utils.cjs

@@ -3,7 +3,7 @@
 var chunkIXUHXTHW_cjs = require('./chunk-IXUHXTHW.cjs');
 var chunkRCQ2HIQD_cjs = require('./chunk-RCQ2HIQD.cjs');
 var chunkP3XDZL6Q_cjs = require('./chunk-P3XDZL6Q.cjs');
-var chunkSIPBHWMG_cjs = require('./chunk-SIPBHWMG.cjs');
+var chunkPK3ODTAL_cjs = require('./chunk-PK3ODTAL.cjs');
 var chunkMNWKYY5E_cjs = require('./chunk-MNWKYY5E.cjs');
 require('./chunk-IGJUBJBW.cjs');
 
@@ -79,11 +79,11 @@ Object.defineProperty(exports, "shouldSkipEvent", {
 });
 Object.defineProperty(exports, "SONICJS_VERSION", {
   enumerable: true,
-  get: function () { return chunkSIPBHWMG_cjs.SONICJS_VERSION; }
+  get: function () { return chunkPK3ODTAL_cjs.SONICJS_VERSION; }
 });
 Object.defineProperty(exports, "getCoreVersion", {
   enumerable: true,
-  get: function () { return chunkSIPBHWMG_cjs.getCoreVersion; }
+  get: function () { return chunkPK3ODTAL_cjs.getCoreVersion; }
 });
 Object.defineProperty(exports, "escapeHtml", {
   enumerable: true,

package/dist/utils.js

@@ -1,7 +1,7 @@
 export { QueryFilterBuilder, TemplateRenderer, buildQuery, generateSlug, getBlocksFieldConfig, parseBlocksValue, renderTemplate, templateRenderer } from './chunk-QZGABF2M.js';
 export { metricsTracker } from './chunk-FICTAGD4.js';
 export { generateInstallationId, generateProjectId, getDefaultTelemetryConfig, getTelemetryConfig, isTelemetryEnabled, sanitizeErrorMessage, sanitizeRoute, shouldSkipEvent } from './chunk-X7ZAEI5S.js';
-export { SONICJS_VERSION, getCoreVersion } from './chunk-U7T5EOHJ.js';
+export { SONICJS_VERSION, getCoreVersion } from './chunk-CE6POA7A.js';
 export { escapeHtml, sanitizeInput, sanitizeObject } from './chunk-TQABQWOP.js';
 import './chunk-V4OQ3NZ2.js';
 //# sourceMappingURL=utils.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sonicjs-cms/core",
-  "version": "3.0.0-beta.14",
+  "version": "3.0.0-beta.15",
   "description": "Core framework for SonicJS headless CMS - Edge-first, TypeScript-native CMS built for Cloudflare Workers",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -104,7 +104,7 @@
   },
   "dependencies": {
     "@cf-wasm/resvg": "^0.3.3",
-    "better-auth": "^1.6.20",
+    "better-auth": "^1.6.13",
     "better-auth-cloudflare": "^0.3.0",
     "csv-parse": "^6.2.1",
     "drizzle-zod": "^0.8.3",

package/dist/chunk-HIKBY7MS.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/services/auth-validation.ts"],"names":["z"],"mappings":";;;;;AAyBA,eAAsB,sBAAsB,EAAA,EAAkC;AAK5E,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,EAAA,CACf,OAAA;AAAA,MACC;AAAA,MAED,KAAA,EAAM;AACT,IAAA,IAAI,KAAK,IAAA,EAAM;AACb,MAAA,MAAM,IAAA,GAAO,OAAO,GAAA,CAAI,IAAA,KAAS,QAAA,GAAW,KAAK,KAAA,CAAM,GAAA,CAAI,IAAI,CAAA,GAAI,GAAA,CAAI,IAAA;AACvE,MAAA,MAAM,OAAA,GAAU,IAAA,EAAM,QAAA,EAAU,YAAA,EAAc,OAAA;AAC9C,MAAA,OAAO,OAAA,KAAY,SAAS,OAAA,KAAY,CAAA;AAAA,IAC1C;AAAA,EACF,CAAA,CAAA,MAAQ;AAAA,EAER;AAGA,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,MAAM,EAAA,CAAG,OAAA,CAAQ,2CAA2C,CAAA,CACxE,IAAA,CAAK,WAAW,CAAA,CAChB,KAAA,EAAM;AACT,IAAA,IAAI,QAAQ,QAAA,EAAU;AAEpB,MAAA,MAAM,QAAA,GAAW,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,QAAQ,CAAA;AAC3C,MAAA,MAAM,OAAA,GAAU,UAAU,YAAA,EAAc,OAAA;AACxC,MAAA,OAAO,OAAA,KAAY,SAAS,OAAA,KAAY,CAAA;AAAA,IAC1C;AAAA,EACF,CAAA,CAAA,MAAQ;AAAA,EAER;AAEA,EAAA,OAAO,IAAA;AACT;AAQA,eAAsB,wBAAwB,EAAA,EAAkC;AAC9E,EAAA,IAAI;AACF,IAAA,MAAM,SAAS,MAAM,EAAA,CAAG,OAAA,CAAQ,yCAAyC,EAAE,KAAA,EAAM;AACjF,IAAA,OAAO,QAAQ,KAAA,KAAU,CAAA;AAAA,EAC3B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AA6CA,IAAM,sBAAA,GAAyBA,MAAE,MAAA,CAAO;AAAA,EACtC,KAAA,EAAOA,KAAA,CAAE,MAAA,EAAO,CAAE,MAAM,yBAAyB,CAAA;AAAA,EACjD,UAAUA,KAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,wCAAwC,CAAA;AAAA,EACpE,SAAA,EAAWA,MAAE,MAAA,EAAO,CAAE,IAAI,CAAA,EAAG,wBAAwB,EAAE,QAAA,EAAS;AAAA,EAChE,QAAA,EAAUA,MAAE,MAAA,EAAO,CAAE,IAAI,CAAA,EAAG,uBAAuB,EAAE,QAAA;AACvD,CAAC,CAAA;AAKM,IAAM,qBAAA,GAAwB;AAAA;AAAA;AAAA;AAAA;AAAA,EAKnC,MAAM,wBAAwB,GAAA,EAA8C;AAG1E,IAAA,OAAO,sBAAA;AAAA,EACT,CAAA;AAAA;AAAA;AAAA;AAAA,EAKA,oBAAA,CAAqB,OAAe,IAAA,EAAmB;AACrD,IAAA,QAAQ,KAAA;AAAO,MACb,KAAK,WAAA;AACH,QAAA,OAAO,MAAA;AAAA,MACT,KAAK,UAAA;AACH,QAAA,OAAO,IAAA,CAAK,QAAQ,IAAA,CAAK,KAAA,CAAM,MAAM,GAAG,CAAA,CAAE,CAAC,CAAA,GAAI,SAAA;AAAA,MACjD;AACE,QAAA,OAAO,EAAA;AAAA;AACX,EACF;AACF","file":"chunk-HIKBY7MS.cjs","sourcesContent":["/**\n * Auth Validation Service\n *\n * Provides validation schemas for authentication operations\n */\n\nimport { z } from 'zod'\nimport type { D1Database } from '@cloudflare/workers-types'\n\n// In-memory cache for admin existence check (lazy initialization pattern)\nlet adminExistsCache: boolean | null = null\n\nexport interface AuthSettings {\n  enablePasswordLogin?: boolean\n  enableOAuthLogin?: boolean\n  requireEmailVerification?: boolean\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  [key: string]: any\n}\n\n/**\n * Check if user registration is enabled in the auth plugin settings\n * @param db - D1 database instance\n * @returns true if registration is enabled, false if disabled\n */\nexport async function isRegistrationEnabled(db: D1Database): Promise<boolean> {\n  // Plugin settings live on the plugin's document (type_id='plugin', slug=pluginId) since the\n  // document-model migration — the legacy `plugins` table no longer exists on greenfield. The\n  // /admin/plugins/core-auth/settings write goes through PluginService.updatePluginSettings (doc model),\n  // so the read must come from the same place or \"disable registration\" silently no-ops.\n  try {\n    const row = await db\n      .prepare(\n        \"SELECT data FROM documents WHERE slug = 'core-auth' AND type_id = 'plugin' AND tenant_id = 'default' AND is_current_draft = 1 AND deleted_at IS NULL\",\n      )\n      .first() as { data: string } | null\n    if (row?.data) {\n      const data = typeof row.data === 'string' ? JSON.parse(row.data) : row.data\n      const enabled = data?.settings?.registration?.enabled\n      return enabled !== false && enabled !== 0\n    }\n  } catch {\n    // fall through to the legacy table for installs that still have it\n  }\n\n  // Legacy fallback: the dropped `plugins` table (guarded — absent on greenfield).\n  try {\n    const plugin = await db.prepare('SELECT settings FROM plugins WHERE id = ?')\n      .bind('core-auth')\n      .first() as { settings: string } | null\n    if (plugin?.settings) {\n      // SQLite stores booleans as 0/1, so check for both false and 0.\n      const settings = JSON.parse(plugin.settings)\n      const enabled = settings?.registration?.enabled\n      return enabled !== false && enabled !== 0\n    }\n  } catch {\n    // no legacy table either\n  }\n\n  return true // Default to enabled when no setting is found\n}\n\n/**\n * Check if this would be the first user registration (bootstrap scenario)\n * The first user should always be allowed to register even if registration is disabled\n * @param db - D1 database instance\n * @returns true if no users exist in the database\n */\nexport async function isFirstUserRegistration(db: D1Database): Promise<boolean> {\n  try {\n    const result = await db.prepare('SELECT COUNT(*) as count FROM auth_user').first() as { count: number } | null\n    return result?.count === 0\n  } catch {\n    return false // Default to not first user on error\n  }\n}\n\n/**\n * Check if an admin user exists in the database (with in-memory caching)\n * Uses lazy initialization - only queries DB on first call, then caches result\n * @param db - D1 database instance\n * @returns true if an admin user exists\n */\nexport async function checkAdminUserExists(db: D1Database): Promise<boolean> {\n  // Return cached value if already checked\n  if (adminExistsCache !== null) {\n    return adminExistsCache\n  }\n\n  try {\n    const result = await db.prepare('SELECT id FROM auth_user WHERE role = ?')\n      .bind('admin')\n      .first()\n    adminExistsCache = !!result\n    return adminExistsCache\n  } catch {\n    // On error (e.g., table doesn't exist yet), assume no admin exists\n    return false\n  }\n}\n\n/**\n * Set the admin exists cache to true\n * Call this after successfully creating the first admin user\n */\nexport function setAdminExists(): void {\n  adminExistsCache = true\n}\n\n/**\n * Reset the admin exists cache (for testing purposes)\n */\nexport function resetAdminExistsCache(): void {\n  adminExistsCache = null\n}\n\n/**\n * Auth Validation Service\n * Provides dynamic validation schemas for registration based on database settings\n */\nconst baseRegistrationSchema = z.object({\n  email: z.string().email('Valid email is required'),\n  password: z.string().min(8, 'Password must be at least 8 characters'),\n  firstName: z.string().min(1, 'First name is required').optional(),\n  lastName: z.string().min(1, 'Last name is required').optional()\n})\n\nexport type RegistrationSchema = typeof baseRegistrationSchema\nexport type RegistrationData = z.infer<RegistrationSchema>\n\nexport const authValidationService = {\n  /**\n   * Build registration schema dynamically based on auth settings\n   * For now, returns a static schema with standard fields\n   */\n  async buildRegistrationSchema(_db: D1Database): Promise<RegistrationSchema> {\n    // TODO: Load settings from database to make fields optional/required dynamically\n    // For now, use a static schema with common registration fields\n    return baseRegistrationSchema\n  },\n\n  /**\n   * Generate default values for optional fields\n   */\n  generateDefaultValue(field: string, data: any): string {\n    switch (field) {\n      case 'firstName':\n        return 'User'\n      case 'lastName':\n        return data.email ? data.email.split('@')[0] : 'Account'\n      default:\n        return ''\n    }\n  }\n}\n"]}