@sonicjs-cms/core 3.0.0-beta.15 → 3.0.0-beta.17

package/dist/index.d.cts

@@ -2,6 +2,7 @@ export { B as Bindings, a as BootIsolateFn, b as SonicJSApp, S as SonicJSConfig,
 import { o as DefinedPlugin } from './define-plugin-DsKiGu1q.cjs';
 export { B as BooleanField, e as ConfigSchema, f as ConfigSchemaField, h as CronContext, i as CronDeclaration, j as CronDispatchResult, k as CronTickEvent, l as CronablePlugin, H as HookSystemImpl, r as HookUtils, N as NumberField, P as ParsedField, v as PluginManagerClass, an as PluginMenuEntry, x as PluginRegistryImpl, y as PluginValidatorClass, z as PluginsRegistry, A as RegisterPluginsError, G as RegisterPluginsErrorReason, I as RegisterPluginsHostContext, J as RegisterablePlugin, K as RegistryEntry, ao as ResolvedPluginMenuEntry, L as ScopedHookSystemClass, O as SelectField, Q as SettingsFor, U as StringField, Y as applySchemaDefaults, _ as collectCronSchedules, $ as collectCrons, a2 as createScheduledHandler, a3 as definePlugin, a4 as dispatchCronTick, a5 as getHookSystem, ap as getPluginMenu, a6 as getTypedHooks, a8 as hasHookSystem, a9 as isDefinedPlugin, ae as parseConfigSchema, af as parseFormDataToSettings, ah as registerPlugins, ai as renderSchemaFields, aj as resetHookSystem, aq as resetPluginMenu, ar as resolvePluginMenuItems, ak as setHookSystem, as as setPluginMenu } from './define-plugin-DsKiGu1q.cjs';
 import { D1Database as D1Database$1 } from '@cloudflare/workers-types';
+import { z } from 'zod';
 import { E as EmailProvider, N as NormalizedEmailMessage, t as SendResult } from './types-DT7XN5TX.cjs';
 export { q as EmailLogRow } from './types-DT7XN5TX.cjs';
 import { s as schema } from './plugin-bootstrap-BHWQ2df8.cjs';
@@ -21,7 +22,6 @@ import 'better-auth';
 import 'better-auth/plugins/magic-link';
 import 'better-call';
 import 'zod/v4/core';
-import 'zod';
 import 'hono';
 import 'drizzle-zod';
 import 'drizzle-orm/sqlite-core';
@@ -213,6 +213,182 @@ declare class RbacService {
 
 declare function bootstrapDocumentTypes(db: D1Database$1): Promise<void>;
 
+type Permission = 'read' | 'create' | 'update' | 'delete' | 'publish' | 'manage';
+type PrincipalType = 'user' | 'role' | 'group' | 'public' | 'token';
+type RefStrength = 'strong' | 'weak';
+type QueryableFieldKind = 'scalar' | 'facet' | 'reference';
+type DocumentStatus = 'draft' | 'published' | 'archived';
+interface QueryableField {
+    name: string;
+    path?: string;
+    kind: QueryableFieldKind;
+    type?: 'text' | 'number' | 'integer' | 'boolean' | 'date';
+    column?: string;
+    refStrength?: RefStrength;
+}
+interface DocumentTypeSettings {
+    baseGrants?: Record<string, Permission[]>;
+    maxVersionsPerRoot?: number;
+    pii?: boolean;
+    /** Hide this type from the admin content list and all-view (e.g. internal system types like 'plugin'). */
+    internal?: boolean;
+    /**
+     * Shared/global type: its documents are NOT tenant-scoped — they live in one shared pool and are
+     * visible from every tenant. Opt-in (default false). When false, the type is tenant-isolated like
+     * everything else. See `effectiveTenantForType` (services/document-request-context.ts).
+     */
+    global?: boolean;
+    /**
+     * Retain historical version rows for this type. Default false.
+     * When false: saveDraft updates the working draft row in place and publish deletes the
+     * superseded published row (at most ~2 rows per root, no history accumulation).
+     * When true: new row per saveDraft + prune to maxVersionsPerRoot (the versioning-plugin opts types in).
+     */
+    versioning?: boolean;
+}
+interface Document {
+    id: string;
+    rootId: string;
+    typeId: string;
+    typeVersion: number;
+    versionOfId: string | null;
+    versionNumber: number;
+    isCurrentDraft: boolean;
+    isPublished: boolean;
+    status: DocumentStatus;
+    parentRootId: string;
+    slug: string | null;
+    path: string | null;
+    title: string | null;
+    zone: string | null;
+    sortOrder: number;
+    visible: boolean;
+    publishedAt: number | null;
+    scheduledAt: number | null;
+    expiresAt: number | null;
+    deletedAt: number | null;
+    tenantId: string;
+    locale: string;
+    translationGroupId: string;
+    data: Record<string, unknown>;
+    metadata: Record<string, unknown>;
+    ownerId: string | null;
+    createdBy: string | null;
+    updatedBy: string | null;
+    createdAt: number;
+    updatedAt: number;
+}
+interface PrincipalRef {
+    type: PrincipalType;
+    id: string;
+}
+declare const createDocumentSchema: z.ZodObject<{
+    typeId: z.ZodString;
+    tenantId: z.ZodDefault<z.ZodString>;
+    locale: z.ZodDefault<z.ZodString>;
+    parentRootId: z.ZodDefault<z.ZodString>;
+    slug: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    title: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    zone: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    sortOrder: z.ZodDefault<z.ZodNumber>;
+    visible: z.ZodDefault<z.ZodBoolean>;
+    scheduledAt: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    expiresAt: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    data: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    ownerId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    publishOnCreate: z.ZodDefault<z.ZodBoolean>;
+    createdAt: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    updatedAt: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+}, z.core.$strip>;
+declare const updateDocumentSchema: z.ZodObject<{
+    title: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    slug: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    zone: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    sortOrder: z.ZodOptional<z.ZodNumber>;
+    visible: z.ZodOptional<z.ZodBoolean>;
+    scheduledAt: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    expiresAt: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    data: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    updatedBy: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>;
+type CreateDocumentInput = z.infer<typeof createDocumentSchema>;
+type UpdateDocumentInput = z.infer<typeof updateDocumentSchema>;
+
+type ListStatus = 'published' | 'draft' | 'all';
+interface ListDocumentsOptions {
+    typeId?: string;
+    /** Which lifecycle axis to list: published row, current-draft row, or either. */
+    status?: ListStatus;
+    locale?: string;
+    parentRootId?: string;
+    limit?: number;
+    cursorUpdatedAt?: number;
+    cursorId?: string;
+    now?: number;
+    /** Resolved generated-column filters, e.g. { column: 'q_tst_rating', value: 4 }. Caller maps
+     *  field→column via the type's queryableFields; column names are format-guarded here too. */
+    scalarFilters?: Array<{
+        column: string;
+        value: string | number;
+    }>;
+    /** Multi-valued facet filter, e.g. { field: 'tags', value: 'homepage' }. Bound as params. */
+    facetFilter?: {
+        field: string;
+        value: string;
+    };
+    /** Generated-column to sort by (else keyset on updated_at). Format-guarded. */
+    sortColumn?: string | null;
+    sortDir?: 'ASC' | 'DESC';
+    /** Apply the schedule window (scheduled_at/expires_at) — public reads only. */
+    timeWindow?: boolean;
+}
+declare class DocumentRepository {
+    private db;
+    private tenantId;
+    private permissions;
+    constructor(db: D1Database$1, tenantId: string);
+    getById(id: string): Promise<Document | null>;
+    getCurrentDraft(rootId: string): Promise<Document | null>;
+    getPublished(rootId: string): Promise<Document | null>;
+    list(opts?: ListDocumentsOptions): Promise<Document[]>;
+    listPublished(opts?: ListDocumentsOptions): Promise<Document[]>;
+    listDrafts(opts?: ListDocumentsOptions): Promise<Document[]>;
+    getVersionHistory(rootId: string): Promise<Document[]>;
+    getInboundReferences(toRootId: string): Promise<Array<{
+        fromDocumentId: string;
+        fieldName: string;
+        refStrength: string;
+    }>>;
+    isAllowed(principalSet: PrincipalRef[], rootId: string, permission: Permission, typeSettings: DocumentTypeSettings): Promise<boolean>;
+}
+
+interface DocumentsServiceOptions {
+    queryableFields?: QueryableField[];
+    typeSchemaVersion?: number;
+    maxVersionsPerRoot?: number;
+    /** Tenant this service operates within. Every root-keyed lookup is scoped to it (R3). POC default: 'default'. */
+    tenantId?: string;
+    /** Retain version history (new row per saveDraft, supersede-as-history). Default false (in-place). */
+    versioning?: boolean;
+}
+declare class DocumentsService {
+    private db;
+    private opts;
+    private projection;
+    private tenantId;
+    private versioning;
+    constructor(db: D1Database$1, opts?: DocumentsServiceOptions);
+    create(input: CreateDocumentInput, createdBy?: string): Promise<Document>;
+    saveDraft(rootId: string, input: UpdateDocumentInput, updatedBy?: string): Promise<Document>;
+    private updateInPlace;
+    publish(documentId: string, publishedBy?: string): Promise<Document>;
+    unpublish(documentId: string): Promise<Document>;
+    softDelete(documentId: string): Promise<void>;
+    erase(rootId: string, tenantId: string): Promise<void>;
+}
+
 /**
  * Cloudflare Email binding provider (MailChannels / send_email binding)
  *
@@ -553,4 +729,4 @@ declare function createUserProfilesPlugin(): DefinedPlugin;
 
 declare const VERSION: string;
 
-export { BUILT_IN_PROVIDERS, type CFSendEmailBinding, CloudflareEmailProvider, type CloudflareEmailProviderOptions, FieldType, OAuthService, PluginDependencyCycleError, type ProfileFieldDefinition, RbacService, type SortablePlugin, type TopoSortOptions, type UserProfileConfig, VERSION, bootstrapDocumentTypes, createDb, createHelloWorldPlugin, createOAuthProvidersPlugin, createRedirectPlugin, createUserProfilesPlugin, defineUserProfile, emailReconciliationPlugin, generateTriggersComment, getUserProfileConfig, helloWorldPlugin, oauthProvidersPlugin, parseCronTriggers, redirectPlugin, _default as siteSettingsCollection, topoSort, updateWranglerTriggers, userProfilesPlugin };
+export { BUILT_IN_PROVIDERS, type CFSendEmailBinding, CloudflareEmailProvider, type CloudflareEmailProviderOptions, DocumentRepository, DocumentsService, FieldType, OAuthService, PluginDependencyCycleError, type ProfileFieldDefinition, RbacService, type SortablePlugin, type TopoSortOptions, type UserProfileConfig, VERSION, bootstrapDocumentTypes, createDb, createHelloWorldPlugin, createOAuthProvidersPlugin, createRedirectPlugin, createUserProfilesPlugin, defineUserProfile, emailReconciliationPlugin, generateTriggersComment, getUserProfileConfig, helloWorldPlugin, oauthProvidersPlugin, parseCronTriggers, redirectPlugin, _default as siteSettingsCollection, topoSort, updateWranglerTriggers, userProfilesPlugin };

package/dist/index.d.ts

@@ -2,6 +2,7 @@ export { B as Bindings, a as BootIsolateFn, b as SonicJSApp, S as SonicJSConfig,
 import { o as DefinedPlugin } from './define-plugin-BYIey6sp.js';
 export { B as BooleanField, e as ConfigSchema, f as ConfigSchemaField, h as CronContext, i as CronDeclaration, j as CronDispatchResult, k as CronTickEvent, l as CronablePlugin, H as HookSystemImpl, r as HookUtils, N as NumberField, P as ParsedField, v as PluginManagerClass, an as PluginMenuEntry, x as PluginRegistryImpl, y as PluginValidatorClass, z as PluginsRegistry, A as RegisterPluginsError, G as RegisterPluginsErrorReason, I as RegisterPluginsHostContext, J as RegisterablePlugin, K as RegistryEntry, ao as ResolvedPluginMenuEntry, L as ScopedHookSystemClass, O as SelectField, Q as SettingsFor, U as StringField, Y as applySchemaDefaults, _ as collectCronSchedules, $ as collectCrons, a2 as createScheduledHandler, a3 as definePlugin, a4 as dispatchCronTick, a5 as getHookSystem, ap as getPluginMenu, a6 as getTypedHooks, a8 as hasHookSystem, a9 as isDefinedPlugin, ae as parseConfigSchema, af as parseFormDataToSettings, ah as registerPlugins, ai as renderSchemaFields, aj as resetHookSystem, aq as resetPluginMenu, ar as resolvePluginMenuItems, ak as setHookSystem, as as setPluginMenu } from './define-plugin-BYIey6sp.js';
 import { D1Database as D1Database$1 } from '@cloudflare/workers-types';
+import { z } from 'zod';
 import { E as EmailProvider, N as NormalizedEmailMessage, t as SendResult } from './types-DT7XN5TX.js';
 export { q as EmailLogRow } from './types-DT7XN5TX.js';
 import { s as schema } from './plugin-bootstrap-Bj4fxX1q.js';
@@ -21,7 +22,6 @@ import 'better-auth';
 import 'better-auth/plugins/magic-link';
 import 'better-call';
 import 'zod/v4/core';
-import 'zod';
 import 'hono';
 import 'drizzle-zod';
 import 'drizzle-orm/sqlite-core';
@@ -213,6 +213,182 @@ declare class RbacService {
 
 declare function bootstrapDocumentTypes(db: D1Database$1): Promise<void>;
 
+type Permission = 'read' | 'create' | 'update' | 'delete' | 'publish' | 'manage';
+type PrincipalType = 'user' | 'role' | 'group' | 'public' | 'token';
+type RefStrength = 'strong' | 'weak';
+type QueryableFieldKind = 'scalar' | 'facet' | 'reference';
+type DocumentStatus = 'draft' | 'published' | 'archived';
+interface QueryableField {
+    name: string;
+    path?: string;
+    kind: QueryableFieldKind;
+    type?: 'text' | 'number' | 'integer' | 'boolean' | 'date';
+    column?: string;
+    refStrength?: RefStrength;
+}
+interface DocumentTypeSettings {
+    baseGrants?: Record<string, Permission[]>;
+    maxVersionsPerRoot?: number;
+    pii?: boolean;
+    /** Hide this type from the admin content list and all-view (e.g. internal system types like 'plugin'). */
+    internal?: boolean;
+    /**
+     * Shared/global type: its documents are NOT tenant-scoped — they live in one shared pool and are
+     * visible from every tenant. Opt-in (default false). When false, the type is tenant-isolated like
+     * everything else. See `effectiveTenantForType` (services/document-request-context.ts).
+     */
+    global?: boolean;
+    /**
+     * Retain historical version rows for this type. Default false.
+     * When false: saveDraft updates the working draft row in place and publish deletes the
+     * superseded published row (at most ~2 rows per root, no history accumulation).
+     * When true: new row per saveDraft + prune to maxVersionsPerRoot (the versioning-plugin opts types in).
+     */
+    versioning?: boolean;
+}
+interface Document {
+    id: string;
+    rootId: string;
+    typeId: string;
+    typeVersion: number;
+    versionOfId: string | null;
+    versionNumber: number;
+    isCurrentDraft: boolean;
+    isPublished: boolean;
+    status: DocumentStatus;
+    parentRootId: string;
+    slug: string | null;
+    path: string | null;
+    title: string | null;
+    zone: string | null;
+    sortOrder: number;
+    visible: boolean;
+    publishedAt: number | null;
+    scheduledAt: number | null;
+    expiresAt: number | null;
+    deletedAt: number | null;
+    tenantId: string;
+    locale: string;
+    translationGroupId: string;
+    data: Record<string, unknown>;
+    metadata: Record<string, unknown>;
+    ownerId: string | null;
+    createdBy: string | null;
+    updatedBy: string | null;
+    createdAt: number;
+    updatedAt: number;
+}
+interface PrincipalRef {
+    type: PrincipalType;
+    id: string;
+}
+declare const createDocumentSchema: z.ZodObject<{
+    typeId: z.ZodString;
+    tenantId: z.ZodDefault<z.ZodString>;
+    locale: z.ZodDefault<z.ZodString>;
+    parentRootId: z.ZodDefault<z.ZodString>;
+    slug: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    title: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    zone: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    sortOrder: z.ZodDefault<z.ZodNumber>;
+    visible: z.ZodDefault<z.ZodBoolean>;
+    scheduledAt: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    expiresAt: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    data: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    ownerId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    publishOnCreate: z.ZodDefault<z.ZodBoolean>;
+    createdAt: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    updatedAt: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+}, z.core.$strip>;
+declare const updateDocumentSchema: z.ZodObject<{
+    title: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    slug: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    zone: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    sortOrder: z.ZodOptional<z.ZodNumber>;
+    visible: z.ZodOptional<z.ZodBoolean>;
+    scheduledAt: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    expiresAt: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    data: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    updatedBy: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>;
+type CreateDocumentInput = z.infer<typeof createDocumentSchema>;
+type UpdateDocumentInput = z.infer<typeof updateDocumentSchema>;
+
+type ListStatus = 'published' | 'draft' | 'all';
+interface ListDocumentsOptions {
+    typeId?: string;
+    /** Which lifecycle axis to list: published row, current-draft row, or either. */
+    status?: ListStatus;
+    locale?: string;
+    parentRootId?: string;
+    limit?: number;
+    cursorUpdatedAt?: number;
+    cursorId?: string;
+    now?: number;
+    /** Resolved generated-column filters, e.g. { column: 'q_tst_rating', value: 4 }. Caller maps
+     *  field→column via the type's queryableFields; column names are format-guarded here too. */
+    scalarFilters?: Array<{
+        column: string;
+        value: string | number;
+    }>;
+    /** Multi-valued facet filter, e.g. { field: 'tags', value: 'homepage' }. Bound as params. */
+    facetFilter?: {
+        field: string;
+        value: string;
+    };
+    /** Generated-column to sort by (else keyset on updated_at). Format-guarded. */
+    sortColumn?: string | null;
+    sortDir?: 'ASC' | 'DESC';
+    /** Apply the schedule window (scheduled_at/expires_at) — public reads only. */
+    timeWindow?: boolean;
+}
+declare class DocumentRepository {
+    private db;
+    private tenantId;
+    private permissions;
+    constructor(db: D1Database$1, tenantId: string);
+    getById(id: string): Promise<Document | null>;
+    getCurrentDraft(rootId: string): Promise<Document | null>;
+    getPublished(rootId: string): Promise<Document | null>;
+    list(opts?: ListDocumentsOptions): Promise<Document[]>;
+    listPublished(opts?: ListDocumentsOptions): Promise<Document[]>;
+    listDrafts(opts?: ListDocumentsOptions): Promise<Document[]>;
+    getVersionHistory(rootId: string): Promise<Document[]>;
+    getInboundReferences(toRootId: string): Promise<Array<{
+        fromDocumentId: string;
+        fieldName: string;
+        refStrength: string;
+    }>>;
+    isAllowed(principalSet: PrincipalRef[], rootId: string, permission: Permission, typeSettings: DocumentTypeSettings): Promise<boolean>;
+}
+
+interface DocumentsServiceOptions {
+    queryableFields?: QueryableField[];
+    typeSchemaVersion?: number;
+    maxVersionsPerRoot?: number;
+    /** Tenant this service operates within. Every root-keyed lookup is scoped to it (R3). POC default: 'default'. */
+    tenantId?: string;
+    /** Retain version history (new row per saveDraft, supersede-as-history). Default false (in-place). */
+    versioning?: boolean;
+}
+declare class DocumentsService {
+    private db;
+    private opts;
+    private projection;
+    private tenantId;
+    private versioning;
+    constructor(db: D1Database$1, opts?: DocumentsServiceOptions);
+    create(input: CreateDocumentInput, createdBy?: string): Promise<Document>;
+    saveDraft(rootId: string, input: UpdateDocumentInput, updatedBy?: string): Promise<Document>;
+    private updateInPlace;
+    publish(documentId: string, publishedBy?: string): Promise<Document>;
+    unpublish(documentId: string): Promise<Document>;
+    softDelete(documentId: string): Promise<void>;
+    erase(rootId: string, tenantId: string): Promise<void>;
+}
+
 /**
  * Cloudflare Email binding provider (MailChannels / send_email binding)
  *
@@ -553,4 +729,4 @@ declare function createUserProfilesPlugin(): DefinedPlugin;
 
 declare const VERSION: string;
 
-export { BUILT_IN_PROVIDERS, type CFSendEmailBinding, CloudflareEmailProvider, type CloudflareEmailProviderOptions, FieldType, OAuthService, PluginDependencyCycleError, type ProfileFieldDefinition, RbacService, type SortablePlugin, type TopoSortOptions, type UserProfileConfig, VERSION, bootstrapDocumentTypes, createDb, createHelloWorldPlugin, createOAuthProvidersPlugin, createRedirectPlugin, createUserProfilesPlugin, defineUserProfile, emailReconciliationPlugin, generateTriggersComment, getUserProfileConfig, helloWorldPlugin, oauthProvidersPlugin, parseCronTriggers, redirectPlugin, _default as siteSettingsCollection, topoSort, updateWranglerTriggers, userProfilesPlugin };
+export { BUILT_IN_PROVIDERS, type CFSendEmailBinding, CloudflareEmailProvider, type CloudflareEmailProviderOptions, DocumentRepository, DocumentsService, FieldType, OAuthService, PluginDependencyCycleError, type ProfileFieldDefinition, RbacService, type SortablePlugin, type TopoSortOptions, type UserProfileConfig, VERSION, bootstrapDocumentTypes, createDb, createHelloWorldPlugin, createOAuthProvidersPlugin, createRedirectPlugin, createUserProfilesPlugin, defineUserProfile, emailReconciliationPlugin, generateTriggersComment, getUserProfileConfig, helloWorldPlugin, oauthProvidersPlugin, parseCronTriggers, redirectPlugin, _default as siteSettingsCollection, topoSort, updateWranglerTriggers, userProfilesPlugin };

package/dist/index.js

@@ -1,6 +1,6 @@
 import { createAuth } from './chunk-IQZA2OY5.js';
-import { getEmailService, hasEmailService, setEmailService, invalidateVariablesCache, resolveVariablesInObject, resolveDocScope, denyIfNotAllowed, DocumentRepository, dispatchHookEvent, getCustomData, createDocumentSchema, renderTable, getVariablesCached, setVariablesCache, TenantService, isValidMemberRole, renderConfirmationDialog, getConfirmationDialogScript, VALID_MEMBER_ROLES, userProfilesPlugin, lexicalEditorPlugin, api_media_default, api_system_default, apiDocumentsRoutes, api_default, adminDocumentsRoutes, admin_api_default, adminCollectionsRoutes, adminSettingsRoutes, router2, admin_content_default, adminMediaRoutes, router, adminPluginRoutes, adminLogsRoutes, userRoutes, auth_default, test_cleanup_default } from './chunk-L3VIH6U4.js';
-export { ROUTES_INFO, admin_api_default as adminApiRoutes, adminCheckboxRoutes, adminCollectionsRoutes, admin_content_default as adminContentRoutes, router as adminDashboardRoutes, adminLogsRoutes, adminMediaRoutes, adminPluginRoutes, adminSettingsRoutes, userRoutes as adminUsersRoutes, api_content_crud_default as apiContentCrudRoutes, api_media_default as apiMediaRoutes, api_default as apiRoutes, api_system_default as apiSystemRoutes, auth_default as authRoutes, createUserProfilesPlugin, defineUserProfile, getUserProfileConfig, userProfilesPlugin } from './chunk-L3VIH6U4.js';
+import { getEmailService, hasEmailService, setEmailService, invalidateVariablesCache, resolveVariablesInObject, resolveDocScope, denyIfNotAllowed, DocumentRepository, dispatchHookEvent, getCustomData, createDocumentSchema, renderTable, getVariablesCached, setVariablesCache, TenantService, isValidMemberRole, renderConfirmationDialog, getConfirmationDialogScript, VALID_MEMBER_ROLES, userProfilesPlugin, lexicalEditorPlugin, api_media_default, api_system_default, apiDocumentsRoutes, api_default, adminDocumentsRoutes, admin_api_default, adminCollectionsRoutes, adminSettingsRoutes, router2, admin_content_default, adminMediaRoutes, router, adminPluginRoutes, adminLogsRoutes, userRoutes, auth_default, test_cleanup_default } from './chunk-CYDEM6SY.js';
+export { DocumentRepository, ROUTES_INFO, admin_api_default as adminApiRoutes, adminCheckboxRoutes, adminCollectionsRoutes, admin_content_default as adminContentRoutes, router as adminDashboardRoutes, adminLogsRoutes, adminMediaRoutes, adminPluginRoutes, adminSettingsRoutes, userRoutes as adminUsersRoutes, api_content_crud_default as apiContentCrudRoutes, api_media_default as apiMediaRoutes, api_default as apiRoutes, api_system_default as apiSystemRoutes, auth_default as authRoutes, createUserProfilesPlugin, defineUserProfile, getUserProfileConfig, userProfilesPlugin } from './chunk-CYDEM6SY.js';
 import './chunk-VVYVFCML.js';
 import './chunk-RMRJGMDE.js';
 import { SettingsService, setAppInstance } from './chunk-RQ6N3FTV.js';
@@ -8,30 +8,30 @@ export { Logger, getLogger, initLogger } from './chunk-RQ6N3FTV.js';
 import { getAllCacheStats, CACHE_CONFIGS, getCacheService, clearAllCaches, parseCacheKey } from './chunk-K25XHMM3.js';
 import { schema_exports } from './chunk-AI663NBO.js';
 export { apiTokens, content, contentVersions, insertContentSchema, insertLogConfigSchema, insertMediaSchema, insertPluginActivityLogSchema, insertPluginAssetSchema, insertPluginHookSchema, insertPluginRouteSchema, insertPluginSchema, insertSystemLogSchema, insertUserSchema, insertWorkflowHistorySchema, logConfig, media, pluginActivityLog, pluginAssets, pluginHooks, pluginRoutes, plugins, selectContentSchema, selectLogConfigSchema, selectMediaSchema, selectPluginActivityLogSchema, selectPluginAssetSchema, selectPluginHookSchema, selectPluginRouteSchema, selectPluginSchema, selectSystemLogSchema, selectUserSchema, selectWorkflowHistorySchema, systemLogs, users, workflowHistory } from './chunk-AI663NBO.js';
-import { requireAuth, DocumentTypeRegistry, requireRbac, requireRole, getJwtExpirySecondsFromDb, AuthManager, metricsMiddleware, bootstrapMiddleware, securityHeadersMiddleware, csrfProtection } from './chunk-GQXVDFIG.js';
-export { AuthManager, PermissionManager, bootstrapDocumentTypes, bootstrapMiddleware, cacheHeaders, compressionMiddleware, detailedLoggingMiddleware, getActivePlugins, isPluginActive, logActivity, loggingMiddleware, optionalAuth, performanceLoggingMiddleware, requireActivePlugin, requireActivePlugins, requireAnyPermission, requireAuth, requirePermission, requireRole, securityHeadersMiddleware as securityHeaders, securityLoggingMiddleware } from './chunk-GQXVDFIG.js';
+import { requireAuth, DocumentTypeRegistry, requireRbac, requireRole, getJwtExpirySecondsFromDb, AuthManager, metricsMiddleware, bootstrapMiddleware, securityHeadersMiddleware, csrfProtection } from './chunk-OSMPF3PU.js';
+export { AuthManager, PermissionManager, bootstrapDocumentTypes, bootstrapMiddleware, cacheHeaders, compressionMiddleware, detailedLoggingMiddleware, getActivePlugins, isPluginActive, logActivity, loggingMiddleware, optionalAuth, performanceLoggingMiddleware, requireActivePlugin, requireActivePlugins, requireAnyPermission, requireAuth, requirePermission, requireRole, securityHeadersMiddleware as securityHeaders, securityLoggingMiddleware } from './chunk-OSMPF3PU.js';
 import { RbacService, DocumentsService } from './chunk-PDC7DLOV.js';
-export { RbacService } from './chunk-PDC7DLOV.js';
+export { DocumentsService, RbacService } from './chunk-PDC7DLOV.js';
 import { nanoid } from './chunk-GCDZZNIN.js';
-import { PluginService, PLUGIN_REGISTRY, invalidateTenantCache, getCollectionRegistry, TENANT_COOKIE, MULTI_TENANT_PLUGIN_ID, collectionRecordToRow, tenantMiddleware } from './chunk-4ENXIP4M.js';
-export { PluginBootstrapService, PluginService as PluginServiceClass, getAvailableCollectionNames, loadCollectionConfig, loadCollectionConfigs, registerCollections, validateCollectionConfig } from './chunk-4ENXIP4M.js';
-export { MigrationService } from './chunk-VOAP3KFU.js';
+import { PluginService, PLUGIN_REGISTRY, invalidateTenantCache, getCollectionRegistry, TENANT_COOKIE, MULTI_TENANT_PLUGIN_ID, collectionRecordToRow, tenantMiddleware } from './chunk-YA4V4Y5U.js';
+export { PluginBootstrapService, PluginService as PluginServiceClass, getAvailableCollectionNames, loadCollectionConfig, loadCollectionConfigs, registerCollections, validateCollectionConfig } from './chunk-YA4V4Y5U.js';
+export { MigrationService } from './chunk-73KSHGOT.js';
 export { renderFilterBar } from './chunk-JQISFW6U.js';
 import { renderAdminLayout } from './chunk-OBA2RYZN.js';
 export { getConfirmationDialogScript, renderAlert, renderConfirmationDialog, renderForm, renderFormField, renderPagination, renderTable } from './chunk-OBA2RYZN.js';
 import { init_admin_layout_catalyst_template, renderAdminLayoutCatalyst } from './chunk-5V62WT6M.js';
 export { renderAdminLayoutCatalyst } from './chunk-5V62WT6M.js';
-import { TurnstileService, HookSystemImpl, createPluginWirer, registerPluginRoutes, setPluginMenu } from './chunk-75WXXLAU.js';
-export { HookSystemImpl, HookUtils, PluginDependencyCycleError, PluginManager as PluginManagerClass, PluginRegistryImpl, PluginValidator as PluginValidatorClass, RegisterPluginsError, ScopedHookSystem as ScopedHookSystemClass, collectCronSchedules, collectCrons, createScheduledHandler, dispatchCronTick, getPluginMenu, registerPlugins, resetPluginMenu, resolvePluginMenuItems, setPluginMenu, topoSort } from './chunk-75WXXLAU.js';
-import { definePlugin, setPluginDefinitions } from './chunk-JRLADH5B.js';
-export { applySchemaDefaults, definePlugin, isDefinedPlugin, parseConfigSchema, parseFormDataToSettings, renderSchemaFields } from './chunk-JRLADH5B.js';
+import { TurnstileService, HookSystemImpl, createPluginWirer, registerPluginRoutes, setPluginMenu, resolvePluginMenuItems } from './chunk-KXTGLSFY.js';
+export { HookSystemImpl, HookUtils, PluginDependencyCycleError, PluginManager as PluginManagerClass, PluginRegistryImpl, PluginValidator as PluginValidatorClass, RegisterPluginsError, ScopedHookSystem as ScopedHookSystemClass, collectCronSchedules, collectCrons, createScheduledHandler, dispatchCronTick, getPluginMenu, registerPlugins, resetPluginMenu, resolvePluginMenuItems, setPluginMenu, topoSort } from './chunk-KXTGLSFY.js';
+import { definePlugin, setPluginDefinitions } from './chunk-Y34TG4TF.js';
+export { applySchemaDefaults, definePlugin, isDefinedPlugin, parseConfigSchema, parseFormDataToSettings, renderSchemaFields } from './chunk-Y34TG4TF.js';
 import { setHookSystem } from './chunk-RNZFGN4R.js';
 export { getHookSystem, getTypedHooks, hasHookSystem, resetHookSystem, setHookSystem } from './chunk-RNZFGN4R.js';
 export { QueryFilterBuilder, TemplateRenderer, buildQuery, renderTemplate, templateRenderer } from './chunk-QZGABF2M.js';
 export { metricsTracker } from './chunk-FICTAGD4.js';
 import './chunk-X7ZAEI5S.js';
-import { getCoreVersion, package_default } from './chunk-CE6POA7A.js';
-export { SONICJS_VERSION, getCoreVersion } from './chunk-CE6POA7A.js';
+import { getCoreVersion, package_default } from './chunk-RIFCRZYC.js';
+export { SONICJS_VERSION, getCoreVersion } from './chunk-RIFCRZYC.js';
 import { escapeHtml, sanitizeInput } from './chunk-TQABQWOP.js';
 export { escapeHtml, sanitizeInput, sanitizeObject } from './chunk-TQABQWOP.js';
 export { HOOKS } from './chunk-QXOZI5Q2.js';
@@ -11546,7 +11546,16 @@ function pluginMenuMiddleware() {
       }
     } catch {
     }
-    c.set("pluginMenuItems", activeMenuItems.map((m) => ({ label: m.label, path: m.path, icon: resolveIcon(m.icon) || "" })));
+    const user = c.get("user");
+    const singletonItems = resolvePluginMenuItems(user ? { role: user.role } : void 0);
+    const existingPaths = new Set(activeMenuItems.map((i) => i.path));
+    for (const item of singletonItems) {
+      if (!existingPaths.has(item.path)) {
+        activeMenuItems.push({ label: item.label, path: item.path, icon: item.icon, order: item.order });
+      }
+    }
+    activeMenuItems.sort((a, b) => a.order - b.order);
+    c.set("pluginMenuItems", activeMenuItems.map((m) => ({ label: m.label, path: m.path, icon: resolveIcon(m.icon) || m.icon || "" })));
     await next();
     const finalItems = c.get("pluginMenuItems") ?? [];
     if (finalItems.length > 0 && c.res.headers.get("content-type")?.includes("text/html")) {
@@ -16774,7 +16783,10 @@ function createSonicJSApp(config = {}) {
       ...corePluginsAfterCatchAll,
       ...config.plugins?.register ?? []
     ];
-    setPluginMenu(allMountedPlugins.flatMap((p) => p.menu ?? []));
+    const userPlugins = (config.plugins?.register ?? []).filter(
+      (p) => !PLUGIN_REGISTRY[p.id]
+    );
+    setPluginMenu(userPlugins.flatMap((p) => p.menu ?? []));
     setPluginDefinitions(allMountedPlugins);
   }
   app2.get("/favicon.svg", (c) => {