@sonicjs-cms/core 3.0.0-beta.17 → 3.0.0-beta.19

package/dist/{chunk-NOBU34HS.cjs → chunk-JJ6HE4J4.cjs}

@@ -2,19 +2,19 @@
 
 var chunkXWVDSM2L_cjs = require('./chunk-XWVDSM2L.cjs');
 var chunkN32OWET6_cjs = require('./chunk-N32OWET6.cjs');
-var chunk4BTBSXMR_cjs = require('./chunk-4BTBSXMR.cjs');
-var chunkZHQP75SR_cjs = require('./chunk-ZHQP75SR.cjs');
-var chunkW36OZTJ5_cjs = require('./chunk-W36OZTJ5.cjs');
-var chunkJEQ7FLOD_cjs = require('./chunk-JEQ7FLOD.cjs');
-var chunkC3KSTUEA_cjs = require('./chunk-C3KSTUEA.cjs');
-var chunk7YMMCIWY_cjs = require('./chunk-7YMMCIWY.cjs');
+var chunk36Z3AKX3_cjs = require('./chunk-36Z3AKX3.cjs');
+var chunkSYAUCKSD_cjs = require('./chunk-SYAUCKSD.cjs');
+var chunkLTZ5WYOK_cjs = require('./chunk-LTZ5WYOK.cjs');
+var chunkKIGVVO6N_cjs = require('./chunk-KIGVVO6N.cjs');
+var chunk2DSRS3VA_cjs = require('./chunk-2DSRS3VA.cjs');
+var chunkIDMHRCZS_cjs = require('./chunk-IDMHRCZS.cjs');
 var chunkPXNTCCPE_cjs = require('./chunk-PXNTCCPE.cjs');
 var chunkK623Q6WD_cjs = require('./chunk-K623Q6WD.cjs');
-var chunk3RNDJAZ5_cjs = require('./chunk-3RNDJAZ5.cjs');
+var chunkEHTBXFTA_cjs = require('./chunk-EHTBXFTA.cjs');
 var chunkJ6JTWD2A_cjs = require('./chunk-J6JTWD2A.cjs');
 var chunkIXUHXTHW_cjs = require('./chunk-IXUHXTHW.cjs');
 var chunkRCQ2HIQD_cjs = require('./chunk-RCQ2HIQD.cjs');
-var chunkKDRHGEUF_cjs = require('./chunk-KDRHGEUF.cjs');
+var chunkNZF3THNY_cjs = require('./chunk-NZF3THNY.cjs');
 var chunkMNWKYY5E_cjs = require('./chunk-MNWKYY5E.cjs');
 var hono = require('hono');
 var zod = require('zod');
@@ -26,6 +26,7 @@ var DocumentPermissionsService = class {
   constructor(db) {
     this.db = db;
   }
+  db;
   // Deny wins. Overrides beat base grants. Empty ACL falls back to base grants.
   async isAllowed(principalSet, rootId, permission, typeSettings, tenantId) {
     const overrides = await this.getDocumentPermissions(rootId, principalSet, permission, tenantId);
@@ -73,7 +74,7 @@ var DocumentPermissionsService = class {
   async grantPermission(opts) {
     const { tenantId, rootId, principalType, principalId, permission, effect = "allow", createdBy } = opts;
     const now = Math.floor(Date.now() / 1e3);
-    const id = chunkJEQ7FLOD_cjs.nanoid();
+    const id = chunkKIGVVO6N_cjs.nanoid();
     await this.db.prepare(
       `INSERT INTO document_permissions (id, tenant_id, root_id, principal_type, principal_id, permission, effect, inherited, created_at, created_by)
          VALUES (?, ?, ?, ?, ?, ?, ?, 0, ?, ?)
@@ -134,6 +135,8 @@ var DocumentRepository = class {
     this.tenantId = tenantId;
     this.permissions = new DocumentPermissionsService(db);
   }
+  db;
+  tenantId;
   permissions;
   // ─── Reads ───────────────────────────────────────────────────────────────
   async getById(id) {
@@ -256,7 +259,7 @@ function getDocumentRequestContext(c) {
 
 // src/routes/api-documents.ts
 async function aclAllowsRead(db, tenantId, principalSet, row, preloadedType) {
-  const docType = preloadedType ?? await new chunkZHQP75SR_cjs.DocumentTypeRegistry(db).findById(row.type_id);
+  const docType = preloadedType ?? await new chunkSYAUCKSD_cjs.DocumentTypeRegistry(db).findById(row.type_id);
   if (!docType) return false;
   return new DocumentRepository(db, tenantId).isAllowed(principalSet, row.root_id, "read", docType.settings);
 }
@@ -274,7 +277,7 @@ apiDocumentsRoutes.get("/", async (c) => {
     if (!typeId) {
       return c.json({ error: "type query parameter is required" }, 400);
     }
-    const registry = new chunkZHQP75SR_cjs.DocumentTypeRegistry(db);
+    const registry = new chunkSYAUCKSD_cjs.DocumentTypeRegistry(db);
     const docType = await registry.findById(typeId);
     if (!docType || !docType.isActive) {
       return c.json({ error: "Unknown document type" }, 400);
@@ -356,7 +359,7 @@ apiDocumentsRoutes.get("/root/:rootId", async (c) => {
          AND (expires_at IS NULL OR expires_at > ?) LIMIT 1`
     ).bind(rootId, now, now).first();
     if (!row) return c.json({ error: "Not found" }, 404);
-    const docType = await new chunkZHQP75SR_cjs.DocumentTypeRegistry(db).findById(row.type_id);
+    const docType = await new chunkSYAUCKSD_cjs.DocumentTypeRegistry(db).findById(row.type_id);
     const effTenant = effectiveTenantForType(tenantId, docType?.settings);
     if (row.tenant_id !== effTenant) return c.json({ error: "Not found" }, 404);
     if (!await aclAllowsRead(db, effTenant, principalSet, row, docType)) {
@@ -392,7 +395,7 @@ apiDocumentsRoutes.get("/:id", async (c) => {
          AND (expires_at IS NULL OR expires_at > ?) LIMIT 1`
     ).bind(id, now, now).first();
     if (!row) return c.json({ error: "Not found" }, 404);
-    const docType = await new chunkZHQP75SR_cjs.DocumentTypeRegistry(db).findById(row.type_id);
+    const docType = await new chunkSYAUCKSD_cjs.DocumentTypeRegistry(db).findById(row.type_id);
     const effTenant = effectiveTenantForType(tenantId, docType?.settings);
     if (row.tenant_id !== effTenant) return c.json({ error: "Not found" }, 404);
     if (!await aclAllowsRead(db, effTenant, principalSet, row, docType)) {
@@ -462,17 +465,17 @@ async function resolveDocScope(c, db, by, opts = {}) {
   const draft = opts.currentDraftOnly ? " AND is_current_draft = 1" : "";
   const row = await db.prepare(`SELECT type_id, root_id, tenant_id FROM documents WHERE ${col} = ?${draft} LIMIT 1`).bind(val).first();
   if (!row) return null;
-  const docType = await new chunkZHQP75SR_cjs.DocumentTypeRegistry(db).findById(row.type_id);
+  const docType = await new chunkSYAUCKSD_cjs.DocumentTypeRegistry(db).findById(row.type_id);
   const tenantId = effectiveTenantForType(getRequestTenant(c), docType?.settings);
   if (row.tenant_id !== tenantId) return null;
   return { typeId: row.type_id, rootId: row.root_id, tenantId, docType };
 }
 var adminDocumentsRoutes = new hono.Hono();
-adminDocumentsRoutes.use("*", chunkZHQP75SR_cjs.requireAuth());
-adminDocumentsRoutes.use("*", chunkZHQP75SR_cjs.requireRole(["admin", "editor"]));
+adminDocumentsRoutes.use("*", chunkSYAUCKSD_cjs.requireAuth());
+adminDocumentsRoutes.use("*", chunkSYAUCKSD_cjs.requireRole(["admin", "editor"]));
 adminDocumentsRoutes.get("/types", async (c) => {
   try {
-    const registry = new chunkZHQP75SR_cjs.DocumentTypeRegistry(c.env.DB);
+    const registry = new chunkSYAUCKSD_cjs.DocumentTypeRegistry(c.env.DB);
     const types = await registry.findAll();
     return c.json({ data: types });
   } catch (error) {
@@ -500,7 +503,7 @@ adminDocumentsRoutes.get("/", async (c) => {
     if (!typeId) {
       return c.json({ error: "type query parameter is required" }, 400);
     }
-    const registry = new chunkZHQP75SR_cjs.DocumentTypeRegistry(db);
+    const registry = new chunkSYAUCKSD_cjs.DocumentTypeRegistry(db);
     const docType = await registry.findById(typeId);
     if (!docType || !docType.isActive) {
       return c.json({ error: "Unknown document type" }, 400);
@@ -611,7 +614,7 @@ adminDocumentsRoutes.post("/", async (c) => {
     const input = validation.data;
     const db = c.env.DB;
     const user = c.get("user");
-    const registry = new chunkZHQP75SR_cjs.DocumentTypeRegistry(db);
+    const registry = new chunkSYAUCKSD_cjs.DocumentTypeRegistry(db);
     const docType = await registry.findById(input.typeId);
     if (!docType || !docType.isActive) {
       return c.json({ error: "Unknown document type" }, 400);
@@ -619,7 +622,7 @@ adminDocumentsRoutes.post("/", async (c) => {
     const createDenied = await denyIfNotAllowed(c, db, "", "create", docType.settings);
     if (createDenied) return createDenied;
     const tenantId = effectiveTenantForType(getRequestTenant(c), docType.settings);
-    const svc = new chunkW36OZTJ5_cjs.DocumentsService(db, {
+    const svc = new chunkLTZ5WYOK_cjs.DocumentsService(db, {
       queryableFields: docType.queryableFields,
       typeSchemaVersion: docType.schemaVersion,
       maxVersionsPerRoot: docType.settings.maxVersionsPerRoot,
@@ -657,7 +660,7 @@ adminDocumentsRoutes.put("/:rootId", async (c) => {
     const docType = scope.docType;
     const updateDenied = await denyIfNotAllowed(c, db, rootId, "update", docType?.settings, scope.tenantId);
     if (updateDenied) return updateDenied;
-    const svc = new chunkW36OZTJ5_cjs.DocumentsService(db, {
+    const svc = new chunkLTZ5WYOK_cjs.DocumentsService(db, {
       queryableFields: docType?.queryableFields ?? [],
       typeSchemaVersion: docType?.schemaVersion,
       maxVersionsPerRoot: docType?.settings.maxVersionsPerRoot,
@@ -682,7 +685,7 @@ adminDocumentsRoutes.post("/:id/publish", async (c) => {
     const docType = scope.docType;
     const publishDenied = await denyIfNotAllowed(c, db, scope.rootId, "publish", docType?.settings, scope.tenantId);
     if (publishDenied) return publishDenied;
-    const svc = new chunkW36OZTJ5_cjs.DocumentsService(db, {
+    const svc = new chunkLTZ5WYOK_cjs.DocumentsService(db, {
       queryableFields: docType?.queryableFields ?? [],
       typeSchemaVersion: docType?.schemaVersion,
       tenantId: scope.tenantId,
@@ -705,7 +708,7 @@ adminDocumentsRoutes.post("/:id/unpublish", async (c) => {
     const docType = scope.docType;
     const unpublishDenied = await denyIfNotAllowed(c, db, scope.rootId, "publish", docType?.settings, scope.tenantId);
     if (unpublishDenied) return unpublishDenied;
-    const svc = new chunkW36OZTJ5_cjs.DocumentsService(db, {
+    const svc = new chunkLTZ5WYOK_cjs.DocumentsService(db, {
       queryableFields: docType?.queryableFields ?? [],
       tenantId: scope.tenantId
     });
@@ -727,7 +730,7 @@ adminDocumentsRoutes.delete("/:id", async (c) => {
     const docType = scope.docType;
     const deleteDenied = await denyIfNotAllowed(c, db, scope.rootId, "delete", docType?.settings, scope.tenantId);
     if (deleteDenied) return deleteDenied;
-    const svc = new chunkW36OZTJ5_cjs.DocumentsService(db, { queryableFields: docType?.queryableFields ?? [], tenantId: scope.tenantId });
+    const svc = new chunkLTZ5WYOK_cjs.DocumentsService(db, { queryableFields: docType?.queryableFields ?? [], tenantId: scope.tenantId });
     if (docType?.settings.pii) {
       if (scope.rootId) await svc.erase(scope.rootId, scope.tenantId);
     } else {
@@ -743,13 +746,13 @@ adminDocumentsRoutes.post("/types/:typeId/reindex", async (c) => {
   try {
     const { typeId } = c.req.param();
     const db = c.env.DB;
-    const registry = new chunkZHQP75SR_cjs.DocumentTypeRegistry(db);
+    const registry = new chunkSYAUCKSD_cjs.DocumentTypeRegistry(db);
     const docType = await registry.findById(typeId);
     if (!docType) return c.json({ error: "Unknown document type" }, 400);
     const reindexTenant = effectiveTenantForType(getRequestTenant(c), docType.settings);
     const reindexDenied = await denyIfNotAllowed(c, db, "", "manage", docType.settings, reindexTenant);
     if (reindexDenied) return reindexDenied;
-    const { DocumentProjection } = await import('./document-projection-TDWRJX3Z.cjs');
+    const { DocumentProjection } = await import('./document-projection-JQHSTSFD.cjs');
     const projection = new DocumentProjection(db);
     const rebuilt = await projection.reindexType(typeId, reindexTenant, docType.queryableFields);
     return c.json({ rebuilt });
@@ -897,13 +900,13 @@ async function resolveContentVariables(contentData, db) {
 // src/routes/api-content-crud.ts
 var apiContentCrudRoutes = new hono.Hono();
 async function resolveDocBacking(db, collectionIdOrName) {
-  const registry = chunkC3KSTUEA_cjs.getCollectionRegistry();
+  const registry = chunk2DSRS3VA_cjs.getCollectionRegistry();
   const record = registry.getBySlugOrName(collectionIdOrName) ?? registry.getById(collectionIdOrName);
   if (record) {
-    const docType2 = await new chunkZHQP75SR_cjs.DocumentTypeRegistry(db).findById(record.name);
+    const docType2 = await new chunkSYAUCKSD_cjs.DocumentTypeRegistry(db).findById(record.name);
     return docType2 ? { coll: { id: record.id, name: record.name }, docType: docType2 } : null;
   }
-  const docType = await new chunkZHQP75SR_cjs.DocumentTypeRegistry(db).findById(collectionIdOrName);
+  const docType = await new chunkSYAUCKSD_cjs.DocumentTypeRegistry(db).findById(collectionIdOrName);
   if (docType) {
     return { coll: { id: collectionIdOrName, name: collectionIdOrName }, docType };
   }
@@ -946,7 +949,7 @@ apiContentCrudRoutes.get("/check-slug", async (c) => {
     }, 500);
   }
 });
-apiContentCrudRoutes.get("/:id", chunkZHQP75SR_cjs.optionalAuth(), async (c) => {
+apiContentCrudRoutes.get("/:id", chunkSYAUCKSD_cjs.optionalAuth(), async (c) => {
   try {
     const id = c.req.param("id");
     const db = c.env.DB;
@@ -956,7 +959,7 @@ apiContentCrudRoutes.get("/:id", chunkZHQP75SR_cjs.optionalAuth(), async (c) =>
     ).bind(id, getRequestTenant(c)).first();
     let transformedContent;
     if (docRow) {
-      const coll = chunkC3KSTUEA_cjs.getCollectionRegistry().getByName(docRow.type_id);
+      const coll = chunk2DSRS3VA_cjs.getCollectionRegistry().getByName(docRow.type_id);
       transformedContent = {
         id: docRow.root_id,
         title: docRow.title,
@@ -965,8 +968,8 @@ apiContentCrudRoutes.get("/:id", chunkZHQP75SR_cjs.optionalAuth(), async (c) =>
         collectionId: coll?.id ?? docRow.type_id,
         data: docRow.data ? JSON.parse(docRow.data) : {},
         // D29: document timestamps are SECONDS; legacy `content` API contract is MILLISECONDS.
-        created_at: chunkW36OZTJ5_cjs.documentSecondsToMs(docRow.created_at),
-        updated_at: chunkW36OZTJ5_cjs.documentSecondsToMs(docRow.updated_at)
+        created_at: chunkLTZ5WYOK_cjs.documentSecondsToMs(docRow.created_at),
+        updated_at: chunkLTZ5WYOK_cjs.documentSecondsToMs(docRow.updated_at)
       };
     } else {
       return c.json({ error: "Content not found" }, 404);
@@ -990,7 +993,7 @@ apiContentCrudRoutes.get("/:id", chunkZHQP75SR_cjs.optionalAuth(), async (c) =>
     }, 500);
   }
 });
-apiContentCrudRoutes.post("/", chunkZHQP75SR_cjs.requireAuth(), chunkZHQP75SR_cjs.requireRole(["admin", "editor", "author"]), async (c) => {
+apiContentCrudRoutes.post("/", chunkSYAUCKSD_cjs.requireAuth(), chunkSYAUCKSD_cjs.requireRole(["admin", "editor", "author"]), async (c) => {
   try {
     const db = c.env.DB;
     const user = c.get("user");
@@ -1024,7 +1027,7 @@ apiContentCrudRoutes.post("/", chunkZHQP75SR_cjs.requireAuth(), chunkZHQP75SR_cj
         return c.json({ error: "Write cancelled by plugin", details: String(err) }, 400);
       }
       const tenantId = getRequestTenant(c);
-      const svc = new chunkW36OZTJ5_cjs.DocumentsService(db, {
+      const svc = new chunkLTZ5WYOK_cjs.DocumentsService(db, {
         queryableFields: backing.docType.queryableFields ?? [],
         typeSchemaVersion: backing.docType.schemaVersion ?? 1,
         maxVersionsPerRoot: backing.docType.settings?.maxVersionsPerRoot ?? 50,
@@ -1043,7 +1046,7 @@ apiContentCrudRoutes.post("/", chunkZHQP75SR_cjs.requireAuth(), chunkZHQP75SR_cj
         }),
         user?.userId
       );
-      const cache = chunk4BTBSXMR_cjs.getCacheService(chunk4BTBSXMR_cjs.CACHE_CONFIGS.api);
+      const cache = chunk36Z3AKX3_cjs.getCacheService(chunk36Z3AKX3_cjs.CACHE_CONFIGS.api);
       await cache.invalidate("content-filtered:*");
       await cache.invalidate("collection-content-filtered:*");
       dispatchHookEvent(
@@ -1053,7 +1056,7 @@ apiContentCrudRoutes.post("/", chunkZHQP75SR_cjs.requireAuth(), chunkZHQP75SR_cj
         "fire-and-forget"
       );
       return c.json({
-        data: { id: doc.rootId, title: doc.title, slug: doc.slug, status: doc.status, collectionId: backing.coll.id, data: doc.data, created_at: chunkW36OZTJ5_cjs.documentSecondsToMs(doc.createdAt), updated_at: chunkW36OZTJ5_cjs.documentSecondsToMs(doc.updatedAt) }
+        data: { id: doc.rootId, title: doc.title, slug: doc.slug, status: doc.status, collectionId: backing.coll.id, data: doc.data, created_at: chunkLTZ5WYOK_cjs.documentSecondsToMs(doc.createdAt), updated_at: chunkLTZ5WYOK_cjs.documentSecondsToMs(doc.updatedAt) }
       }, 201);
     }
     return c.json({ error: "Collection is not document-backed" }, 400);
@@ -1065,7 +1068,7 @@ apiContentCrudRoutes.post("/", chunkZHQP75SR_cjs.requireAuth(), chunkZHQP75SR_cj
     }, 500);
   }
 });
-apiContentCrudRoutes.put("/:id", chunkZHQP75SR_cjs.requireAuth(), chunkZHQP75SR_cjs.requireRole(["admin", "editor", "author"]), async (c) => {
+apiContentCrudRoutes.put("/:id", chunkSYAUCKSD_cjs.requireAuth(), chunkSYAUCKSD_cjs.requireRole(["admin", "editor", "author"]), async (c) => {
   try {
     const id = c.req.param("id");
     const db = c.env.DB;
@@ -1087,8 +1090,8 @@ apiContentCrudRoutes.put("/:id", chunkZHQP75SR_cjs.requireAuth(), chunkZHQP75SR_
       } catch (err) {
         return c.json({ error: "Write cancelled by plugin", details: String(err) }, 400);
       }
-      const docType = await new chunkZHQP75SR_cjs.DocumentTypeRegistry(db).findById(docRow.type_id);
-      const svc = new chunkW36OZTJ5_cjs.DocumentsService(db, {
+      const docType = await new chunkSYAUCKSD_cjs.DocumentTypeRegistry(db).findById(docRow.type_id);
+      const svc = new chunkLTZ5WYOK_cjs.DocumentsService(db, {
         queryableFields: docType?.queryableFields ?? [],
         typeSchemaVersion: docType?.schemaVersion ?? 1,
         maxVersionsPerRoot: docType?.settings?.maxVersionsPerRoot ?? 50,
@@ -1107,10 +1110,10 @@ apiContentCrudRoutes.put("/:id", chunkZHQP75SR_cjs.requireAuth(), chunkZHQP75SR_
       } else if (body.status === "draft" && pub) {
         await svc.unpublish(pub.id);
       }
-      const cache = chunk4BTBSXMR_cjs.getCacheService(chunk4BTBSXMR_cjs.CACHE_CONFIGS.api);
+      const cache = chunk36Z3AKX3_cjs.getCacheService(chunk36Z3AKX3_cjs.CACHE_CONFIGS.api);
       await cache.invalidate("content-filtered:*");
       await cache.invalidate("collection-content-filtered:*");
-      const coll = chunkC3KSTUEA_cjs.getCollectionRegistry().getByName(docRow.type_id);
+      const coll = chunk2DSRS3VA_cjs.getCollectionRegistry().getByName(docRow.type_id);
       const saved = await db.prepare("SELECT * FROM documents WHERE id = ?").bind(newDraft.id).first();
       const savedData = saved?.data ? JSON.parse(saved.data) : {};
       dispatchHookEvent(c, "content:after:update", { collection: docRow.type_id, id, data: savedData, user: actor }, "fire-and-forget");
@@ -1119,7 +1122,7 @@ apiContentCrudRoutes.put("/:id", chunkZHQP75SR_cjs.requireAuth(), chunkZHQP75SR_
         dispatchHookEvent(c, "content:after:publish", { collection: docRow.type_id, id, data: savedData, user: actor }, "fire-and-forget");
       }
       return c.json({
-        data: { id: saved.root_id, title: saved.title, slug: saved.slug, status: saved.status, collectionId: coll?.id ?? docRow.type_id, data: savedData, created_at: chunkW36OZTJ5_cjs.documentSecondsToMs(saved.created_at), updated_at: chunkW36OZTJ5_cjs.documentSecondsToMs(saved.updated_at) }
+        data: { id: saved.root_id, title: saved.title, slug: saved.slug, status: saved.status, collectionId: coll?.id ?? docRow.type_id, data: savedData, created_at: chunkLTZ5WYOK_cjs.documentSecondsToMs(saved.created_at), updated_at: chunkLTZ5WYOK_cjs.documentSecondsToMs(saved.updated_at) }
       });
     }
     return c.json({ error: "Content not found" }, 404);
@@ -1131,7 +1134,7 @@ apiContentCrudRoutes.put("/:id", chunkZHQP75SR_cjs.requireAuth(), chunkZHQP75SR_
     }, 500);
   }
 });
-apiContentCrudRoutes.delete("/:id", chunkZHQP75SR_cjs.requireAuth(), chunkZHQP75SR_cjs.requireRole(["admin", "editor", "author"]), async (c) => {
+apiContentCrudRoutes.delete("/:id", chunkSYAUCKSD_cjs.requireAuth(), chunkSYAUCKSD_cjs.requireRole(["admin", "editor", "author"]), async (c) => {
   try {
     const id = c.req.param("id");
     const db = c.env.DB;
@@ -1147,7 +1150,7 @@ apiContentCrudRoutes.delete("/:id", chunkZHQP75SR_cjs.requireAuth(), chunkZHQP75
       }
       const now = Math.floor(Date.now() / 1e3);
       await db.prepare("UPDATE documents SET deleted_at = ?, updated_at = ? WHERE root_id = ? AND tenant_id = ?").bind(now, now, id, tenantId).run();
-      const cache = chunk4BTBSXMR_cjs.getCacheService(chunk4BTBSXMR_cjs.CACHE_CONFIGS.api);
+      const cache = chunk36Z3AKX3_cjs.getCacheService(chunk36Z3AKX3_cjs.CACHE_CONFIGS.api);
       await cache.invalidate("content-filtered:*");
       await cache.invalidate("collection-content-filtered:*");
       dispatchHookEvent(c, "content:after:delete", { collection: docRow.type_id, id, data: {}, user: actor }, "fire-and-forget");
@@ -1244,8 +1247,8 @@ function mapDocRowToContent(row, collectionId) {
     collectionId,
     data: row.data ? JSON.parse(row.data) : {},
     // D29: document timestamps are SECONDS; the legacy `content` API contract is MILLISECONDS.
-    created_at: chunkW36OZTJ5_cjs.documentSecondsToMs(row.created_at),
-    updated_at: chunkW36OZTJ5_cjs.documentSecondsToMs(row.updated_at)
+    created_at: chunkLTZ5WYOK_cjs.documentSecondsToMs(row.created_at),
+    updated_at: chunkLTZ5WYOK_cjs.documentSecondsToMs(row.updated_at)
   };
 }
 var apiRoutes = new hono.Hono();
@@ -1257,7 +1260,7 @@ apiRoutes.use("*", async (c, next) => {
   c.header("X-Response-Time", `${totalTime}ms`);
 });
 apiRoutes.use("*", async (c, next) => {
-  const cacheEnabled = await chunkZHQP75SR_cjs.isPluginActive(c.env.DB, "core-cache");
+  const cacheEnabled = await chunkSYAUCKSD_cjs.isPluginActive(c.env.DB, "core-cache");
   c.set("cacheEnabled", cacheEnabled);
   await next();
 });
@@ -1280,7 +1283,7 @@ apiRoutes.get("/", (c) => {
     openapi: "3.0.0",
     info: {
       title: "SonicJS AI API",
-      version: chunkKDRHGEUF_cjs.getCoreVersion(),
+      version: chunkNZF3THNY_cjs.getCoreVersion(),
       description: "RESTful API for SonicJS headless CMS - a modern, AI-powered content management system built on Cloudflare Workers",
       contact: {
         name: "SonicJS Support",
@@ -1684,7 +1687,7 @@ apiRoutes.get("/collections", async (c) => {
   try {
     const db = c.env.DB;
     const cacheEnabled = c.get("cacheEnabled");
-    const cache = chunk4BTBSXMR_cjs.getCacheService(chunk4BTBSXMR_cjs.CACHE_CONFIGS.api);
+    const cache = chunk36Z3AKX3_cjs.getCacheService(chunk36Z3AKX3_cjs.CACHE_CONFIGS.api);
     const cacheKey = cache.generateKey("collections", "all");
     if (cacheEnabled) {
       const cacheResult = await cache.getWithSource(cacheKey);
@@ -1710,8 +1713,8 @@ apiRoutes.get("/collections", async (c) => {
     }
     c.header("X-Cache-Status", "MISS");
     c.header("X-Cache-Source", "registry");
-    const records = chunkC3KSTUEA_cjs.getCollectionRegistry().listActive().filter((r) => !r.internal);
-    const transformedResults = records.map(chunkC3KSTUEA_cjs.collectionRecordToRow);
+    const records = chunk2DSRS3VA_cjs.getCollectionRegistry().listActive().filter((r) => !r.internal);
+    const transformedResults = records.map(chunk2DSRS3VA_cjs.collectionRecordToRow);
     const responseData = {
       data: transformedResults,
       meta: addTimingMeta(c, {
@@ -1732,7 +1735,7 @@ apiRoutes.get("/collections", async (c) => {
     return c.json({ error: "Failed to fetch collections" }, 500);
   }
 });
-apiRoutes.get("/content", chunkZHQP75SR_cjs.optionalAuth(), async (c) => {
+apiRoutes.get("/content", chunkSYAUCKSD_cjs.optionalAuth(), async (c) => {
   const executionStart = Date.now();
   try {
     const db = c.env.DB;
@@ -1741,7 +1744,7 @@ apiRoutes.get("/content", chunkZHQP75SR_cjs.optionalAuth(), async (c) => {
     const collIdByName = /* @__PURE__ */ new Map();
     let typeId;
     let typeIds;
-    const registry = chunkC3KSTUEA_cjs.getCollectionRegistry();
+    const registry = chunk2DSRS3VA_cjs.getCollectionRegistry();
     if (queryParams.collection) {
       const collectionName = queryParams.collection;
       const record = registry.getByName(collectionName);
@@ -1784,7 +1787,7 @@ apiRoutes.get("/content", chunkZHQP75SR_cjs.optionalAuth(), async (c) => {
       }, 400);
     }
     const cacheEnabled = c.get("cacheEnabled");
-    const cache = chunk4BTBSXMR_cjs.getCacheService(chunk4BTBSXMR_cjs.CACHE_CONFIGS.api);
+    const cache = chunk36Z3AKX3_cjs.getCacheService(chunk36Z3AKX3_cjs.CACHE_CONFIGS.api);
     const cacheKey = cache.generateKey("content-filtered", JSON.stringify({ filter: normalizedFilter, query: queryResult.sql }));
     if (cacheEnabled) {
       const cacheResult = await cache.getWithSource(cacheKey);
@@ -1840,13 +1843,13 @@ apiRoutes.get("/content", chunkZHQP75SR_cjs.optionalAuth(), async (c) => {
     }, 500);
   }
 });
-apiRoutes.get("/collections/:collection/content", chunkZHQP75SR_cjs.optionalAuth(), async (c) => {
+apiRoutes.get("/collections/:collection/content", chunkSYAUCKSD_cjs.optionalAuth(), async (c) => {
   const executionStart = Date.now();
   try {
     const collection = c.req.param("collection");
     const db = c.env.DB;
     const queryParams = c.req.query();
-    const record = chunkC3KSTUEA_cjs.getCollectionRegistry().getBySlugOrName(collection);
+    const record = chunk2DSRS3VA_cjs.getCollectionRegistry().getBySlugOrName(collection);
     if (!record || record.isActive === false) {
       return c.json({ error: "Collection not found" }, 404);
     }
@@ -1868,7 +1871,7 @@ apiRoutes.get("/collections/:collection/content", chunkZHQP75SR_cjs.optionalAuth
       }, 400);
     }
     const cacheEnabled = c.get("cacheEnabled");
-    const cache = chunk4BTBSXMR_cjs.getCacheService(chunk4BTBSXMR_cjs.CACHE_CONFIGS.api);
+    const cache = chunk36Z3AKX3_cjs.getCacheService(chunk36Z3AKX3_cjs.CACHE_CONFIGS.api);
     const includeCollection = queryParams.include?.split(",").map((s) => s.trim()).includes("collection");
     const cacheKey = cache.generateKey("collection-content-filtered", `${collection}:${JSON.stringify({ filter: normalizedFilter, query: queryResult.sql, includeCollection })}`);
     if (cacheEnabled) {
@@ -1902,7 +1905,7 @@ apiRoutes.get("/collections/:collection/content", chunkZHQP75SR_cjs.optionalAuth
     const responseData = {
       data: transformedResults,
       meta: addTimingMeta(c, {
-        ...includeCollection ? { collection: chunkC3KSTUEA_cjs.collectionRecordToRow(record) } : {},
+        ...includeCollection ? { collection: chunk2DSRS3VA_cjs.collectionRecordToRow(record) } : {},
         count: results.length,
         timestamp: (/* @__PURE__ */ new Date()).toISOString(),
         // D44: echo the caller's filter with the access policy applied (status=published forced for
@@ -1927,13 +1930,13 @@ apiRoutes.get("/collections/:collection/content", chunkZHQP75SR_cjs.optionalAuth
   }
 });
 apiRoutes.route("/content", api_content_crud_default);
-apiRoutes.get("/:collection", chunkZHQP75SR_cjs.optionalAuth(), async (c) => {
+apiRoutes.get("/:collection", chunkSYAUCKSD_cjs.optionalAuth(), async (c) => {
   const executionStart = Date.now();
   try {
     const collection = c.req.param("collection");
     const db = c.env.DB;
     const queryParams = c.req.query();
-    const record = chunkC3KSTUEA_cjs.getCollectionRegistry().getBySlugOrName(collection);
+    const record = chunk2DSRS3VA_cjs.getCollectionRegistry().getBySlugOrName(collection);
     if (!record || record.isActive === false) {
       return c.json({ error: "Collection not found" }, 404);
     }
@@ -1952,7 +1955,7 @@ apiRoutes.get("/:collection", chunkZHQP75SR_cjs.optionalAuth(), async (c) => {
     const collectionCache = record.cache;
     const collectionCacheDisabled = collectionCache?.enabled === false;
     const cacheEnabled = c.get("cacheEnabled") && !collectionCacheDisabled;
-    const cache = chunk4BTBSXMR_cjs.getCacheService(chunk4BTBSXMR_cjs.CACHE_CONFIGS.api);
+    const cache = chunk36Z3AKX3_cjs.getCacheService(chunk36Z3AKX3_cjs.CACHE_CONFIGS.api);
     const includeCollection = queryParams.include?.split(",").map((s) => s.trim()).includes("collection");
     const cacheKey = cache.generateKey("collection-content-filtered", `${collection}:${JSON.stringify({ filter: normalizedFilter, query: queryResult.sql, includeCollection })}`);
     if (cacheEnabled) {
@@ -1973,7 +1976,7 @@ apiRoutes.get("/:collection", chunkZHQP75SR_cjs.optionalAuth(), async (c) => {
     const responseData = {
       data: transformedResults,
       meta: addTimingMeta(c, {
-        ...includeCollection ? { collection: chunkC3KSTUEA_cjs.collectionRecordToRow(record) } : {},
+        ...includeCollection ? { collection: chunk2DSRS3VA_cjs.collectionRecordToRow(record) } : {},
         count: results.length,
         timestamp: (/* @__PURE__ */ new Date()).toISOString(),
         filter: normalizePublicContentFilter(filter, role),
@@ -1991,12 +1994,12 @@ apiRoutes.get("/:collection", chunkZHQP75SR_cjs.optionalAuth(), async (c) => {
     return c.json({ error: "Failed to fetch content", details: error instanceof Error ? error.message : String(error) }, 500);
   }
 });
-apiRoutes.get("/:collection/:id", chunkZHQP75SR_cjs.optionalAuth(), async (c) => {
+apiRoutes.get("/:collection/:id", chunkSYAUCKSD_cjs.optionalAuth(), async (c) => {
   try {
     const collection = c.req.param("collection");
     const id = c.req.param("id");
     const db = c.env.DB;
-    const record = chunkC3KSTUEA_cjs.getCollectionRegistry().getBySlugOrName(collection);
+    const record = chunk2DSRS3VA_cjs.getCollectionRegistry().getBySlugOrName(collection);
     if (!record || record.isActive === false) {
       return c.json({ error: "Collection not found" }, 404);
     }
@@ -2005,7 +2008,7 @@ apiRoutes.get("/:collection/:id", chunkZHQP75SR_cjs.optionalAuth(), async (c) =>
       privileged ? "SELECT * FROM documents WHERE root_id = ? AND type_id = ? AND tenant_id = 'default' AND is_current_draft = 1 AND deleted_at IS NULL" : "SELECT * FROM documents WHERE root_id = ? AND type_id = ? AND tenant_id = 'default' AND is_published = 1 AND deleted_at IS NULL"
     ).bind(id, record.name).first();
     if (!docRow) return c.json({ error: "Content not found" }, 404);
-    const coll = chunkC3KSTUEA_cjs.getCollectionRegistry().getByName(docRow.type_id);
+    const coll = chunk2DSRS3VA_cjs.getCollectionRegistry().getByName(docRow.type_id);
     const transformedContent = {
       id: docRow.root_id,
       title: docRow.title,
@@ -2013,8 +2016,8 @@ apiRoutes.get("/:collection/:id", chunkZHQP75SR_cjs.optionalAuth(), async (c) =>
       status: docRow.status,
       collectionId: coll?.id ?? docRow.type_id,
       data: docRow.data ? JSON.parse(docRow.data) : {},
-      created_at: chunkW36OZTJ5_cjs.documentSecondsToMs(docRow.created_at),
-      updated_at: chunkW36OZTJ5_cjs.documentSecondsToMs(docRow.updated_at)
+      created_at: chunkLTZ5WYOK_cjs.documentSecondsToMs(docRow.created_at),
+      updated_at: chunkLTZ5WYOK_cjs.documentSecondsToMs(docRow.updated_at)
     };
     dispatchHookEvent(c, "content:read", { collection: docRow.type_id, id: docRow.root_id, data: transformedContent.data }, "fire-and-forget");
     return c.json({ data: transformedContent });
@@ -2023,7 +2026,7 @@ apiRoutes.get("/:collection/:id", chunkZHQP75SR_cjs.optionalAuth(), async (c) =>
     return c.json({ error: "Failed to fetch content", details: error instanceof Error ? error.message : String(error) }, 500);
   }
 });
-apiRoutes.post("/:collection", chunkZHQP75SR_cjs.requireAuth(), chunkZHQP75SR_cjs.requireRole(["admin", "editor", "author"]), async (c) => {
+apiRoutes.post("/:collection", chunkSYAUCKSD_cjs.requireAuth(), chunkSYAUCKSD_cjs.requireRole(["admin", "editor", "author"]), async (c) => {
   try {
     const collection = c.req.param("collection");
     const db = c.env.DB;
@@ -2044,26 +2047,26 @@ apiRoutes.post("/:collection", chunkZHQP75SR_cjs.requireAuth(), chunkZHQP75SR_cj
     } catch (err) {
       return c.json({ error: "Write cancelled by plugin", details: String(err) }, 400);
     }
-    const svc = new chunkW36OZTJ5_cjs.DocumentsService(db, { queryableFields: backing.docType.queryableFields ?? [], typeSchemaVersion: backing.docType.schemaVersion ?? 1, maxVersionsPerRoot: backing.docType.settings?.maxVersionsPerRoot ?? 50, tenantId: "default", versioning: backing.docType.settings?.versioning ?? false });
+    const svc = new chunkLTZ5WYOK_cjs.DocumentsService(db, { queryableFields: backing.docType.queryableFields ?? [], typeSchemaVersion: backing.docType.schemaVersion ?? 1, maxVersionsPerRoot: backing.docType.settings?.maxVersionsPerRoot ?? 50, tenantId: "default", versioning: backing.docType.settings?.versioning ?? false });
     const doc = await svc.create(createDocumentSchema.parse({ typeId: backing.coll.name, tenantId: "default", locale: "default", title, slug: finalSlug, data: hookData, publishOnCreate: (status || "draft") === "published" }), user?.userId);
-    const cache = chunk4BTBSXMR_cjs.getCacheService(chunk4BTBSXMR_cjs.CACHE_CONFIGS.api);
+    const cache = chunk36Z3AKX3_cjs.getCacheService(chunk36Z3AKX3_cjs.CACHE_CONFIGS.api);
     await cache.invalidate("content-filtered:*");
     await cache.invalidate("collection-content-filtered:*");
     dispatchHookEvent(c, "content:after:create", { collection: backing.coll.name, id: doc.rootId, data: doc.data ?? {}, user: actor }, "fire-and-forget");
-    return c.json({ data: { id: doc.rootId, title: doc.title, slug: doc.slug, status: doc.status, collectionId: backing.coll.id, data: doc.data, created_at: chunkW36OZTJ5_cjs.documentSecondsToMs(doc.createdAt), updated_at: chunkW36OZTJ5_cjs.documentSecondsToMs(doc.updatedAt) } }, 201);
+    return c.json({ data: { id: doc.rootId, title: doc.title, slug: doc.slug, status: doc.status, collectionId: backing.coll.id, data: doc.data, created_at: chunkLTZ5WYOK_cjs.documentSecondsToMs(doc.createdAt), updated_at: chunkLTZ5WYOK_cjs.documentSecondsToMs(doc.updatedAt) } }, 201);
   } catch (error) {
     console.error("Error creating content:", error);
     return c.json({ error: "Failed to create content", details: error instanceof Error ? error.message : String(error) }, 500);
   }
 });
-apiRoutes.put("/:collection/:id", chunkZHQP75SR_cjs.requireAuth(), chunkZHQP75SR_cjs.requireRole(["admin", "editor", "author"]), async (c) => {
+apiRoutes.put("/:collection/:id", chunkSYAUCKSD_cjs.requireAuth(), chunkSYAUCKSD_cjs.requireRole(["admin", "editor", "author"]), async (c) => {
   try {
     const collection = c.req.param("collection");
     const id = c.req.param("id");
     const db = c.env.DB;
     const user = c.get("user");
     const body = await c.req.json();
-    const collRecord = chunkC3KSTUEA_cjs.getCollectionRegistry().getBySlugOrName(collection);
+    const collRecord = chunk2DSRS3VA_cjs.getCollectionRegistry().getBySlugOrName(collection);
     const typeName = collRecord?.name ?? collection;
     const docRow = await db.prepare("SELECT root_id, type_id FROM documents WHERE root_id = ? AND type_id = ? AND tenant_id = 'default' AND is_current_draft = 1 AND deleted_at IS NULL").bind(id, typeName).first();
     if (!docRow) return c.json({ error: "Content not found" }, 404);
@@ -2075,8 +2078,8 @@ apiRoutes.put("/:collection/:id", chunkZHQP75SR_cjs.requireAuth(), chunkZHQP75SR
     } catch (err) {
       return c.json({ error: "Write cancelled by plugin", details: String(err) }, 400);
     }
-    const docType = await new chunkZHQP75SR_cjs.DocumentTypeRegistry(db).findById(docRow.type_id);
-    const svc = new chunkW36OZTJ5_cjs.DocumentsService(db, { queryableFields: docType?.queryableFields ?? [], typeSchemaVersion: docType?.schemaVersion ?? 1, maxVersionsPerRoot: docType?.settings?.maxVersionsPerRoot ?? 50, tenantId: "default", versioning: docType?.settings?.versioning ?? false });
+    const docType = await new chunkSYAUCKSD_cjs.DocumentTypeRegistry(db).findById(docRow.type_id);
+    const svc = new chunkLTZ5WYOK_cjs.DocumentsService(db, { queryableFields: docType?.queryableFields ?? [], typeSchemaVersion: docType?.schemaVersion ?? 1, maxVersionsPerRoot: docType?.settings?.maxVersionsPerRoot ?? 50, tenantId: "default", versioning: docType?.settings?.versioning ?? false });
     const input = {};
     if (body.title !== void 0) input.title = body.title;
     if (body.slug !== void 0) input.slug = slugify(body.slug);
@@ -2089,28 +2092,28 @@ apiRoutes.put("/:collection/:id", chunkZHQP75SR_cjs.requireAuth(), chunkZHQP75SR
     } else if (body.status === "draft" && pub) {
       await svc.unpublish(pub.id);
     }
-    const cache = chunk4BTBSXMR_cjs.getCacheService(chunk4BTBSXMR_cjs.CACHE_CONFIGS.api);
+    const cache = chunk36Z3AKX3_cjs.getCacheService(chunk36Z3AKX3_cjs.CACHE_CONFIGS.api);
     await cache.invalidate("content-filtered:*");
     await cache.invalidate("collection-content-filtered:*");
-    const coll = chunkC3KSTUEA_cjs.getCollectionRegistry().getByName(docRow.type_id);
+    const coll = chunk2DSRS3VA_cjs.getCollectionRegistry().getByName(docRow.type_id);
     const saved = await db.prepare("SELECT * FROM documents WHERE id = ?").bind(newDraft.id).first();
     const savedData = saved?.data ? JSON.parse(saved.data) : {};
     dispatchHookEvent(c, "content:after:update", { collection: docRow.type_id, id, data: savedData, user: actor }, "fire-and-forget");
     const nowPublished = body.status === "published" || body.status === void 0 && wasPublished;
     if (nowPublished && !wasPublished) dispatchHookEvent(c, "content:after:publish", { collection: docRow.type_id, id, data: savedData, user: actor }, "fire-and-forget");
-    return c.json({ data: { id: saved.root_id, title: saved.title, slug: saved.slug, status: saved.status, collectionId: coll?.id ?? docRow.type_id, data: savedData, created_at: chunkW36OZTJ5_cjs.documentSecondsToMs(saved.created_at), updated_at: chunkW36OZTJ5_cjs.documentSecondsToMs(saved.updated_at) } });
+    return c.json({ data: { id: saved.root_id, title: saved.title, slug: saved.slug, status: saved.status, collectionId: coll?.id ?? docRow.type_id, data: savedData, created_at: chunkLTZ5WYOK_cjs.documentSecondsToMs(saved.created_at), updated_at: chunkLTZ5WYOK_cjs.documentSecondsToMs(saved.updated_at) } });
   } catch (error) {
     console.error("Error updating content:", error);
     return c.json({ error: "Failed to update content", details: error instanceof Error ? error.message : String(error) }, 500);
   }
 });
-apiRoutes.delete("/:collection/:id", chunkZHQP75SR_cjs.requireAuth(), chunkZHQP75SR_cjs.requireRole(["admin", "editor", "author"]), async (c) => {
+apiRoutes.delete("/:collection/:id", chunkSYAUCKSD_cjs.requireAuth(), chunkSYAUCKSD_cjs.requireRole(["admin", "editor", "author"]), async (c) => {
   try {
     const collection = c.req.param("collection");
     const id = c.req.param("id");
     const db = c.env.DB;
     const user = c.get("user");
-    const collRecord = chunkC3KSTUEA_cjs.getCollectionRegistry().getBySlugOrName(collection);
+    const collRecord = chunk2DSRS3VA_cjs.getCollectionRegistry().getBySlugOrName(collection);
     const typeName = collRecord?.name ?? collection;
     const docRow = await db.prepare("SELECT type_id FROM documents WHERE root_id = ? AND type_id = ? AND tenant_id = 'default' AND deleted_at IS NULL LIMIT 1").bind(id, typeName).first();
     if (!docRow) return c.json({ error: "Content not found" }, 404);
@@ -2122,7 +2125,7 @@ apiRoutes.delete("/:collection/:id", chunkZHQP75SR_cjs.requireAuth(), chunkZHQP7
     }
     const now = Math.floor(Date.now() / 1e3);
     await db.prepare("UPDATE documents SET deleted_at = ?, updated_at = ? WHERE root_id = ? AND tenant_id = 'default'").bind(now, now, id).run();
-    const cache = chunk4BTBSXMR_cjs.getCacheService(chunk4BTBSXMR_cjs.CACHE_CONFIGS.api);
+    const cache = chunk36Z3AKX3_cjs.getCacheService(chunk36Z3AKX3_cjs.CACHE_CONFIGS.api);
     await cache.invalidate("content-filtered:*");
     await cache.invalidate("collection-content-filtered:*");
     dispatchHookEvent(c, "content:after:delete", { collection: docRow.type_id, id, data: {}, user: actor }, "fire-and-forget");
@@ -2193,9 +2196,11 @@ var MediaDocumentService = class {
     this.db = db;
     this.tenantId = tenantId;
   }
+  db;
+  tenantId;
   /** Create a media_asset document from R2 upload metadata. Published-on-create (immediately usable). */
   async createFromUpload(meta, createdBy) {
-    const svc = new chunkW36OZTJ5_cjs.DocumentsService(this.db, { queryableFields: MEDIA_QUERYABLE, tenantId: this.tenantId, maxVersionsPerRoot: 5 });
+    const svc = new chunkLTZ5WYOK_cjs.DocumentsService(this.db, { queryableFields: MEDIA_QUERYABLE, tenantId: this.tenantId, maxVersionsPerRoot: 5 });
     return svc.create(
       createDocumentSchema.parse({
         typeId: "media_asset",
@@ -2268,7 +2273,7 @@ var MediaDocumentService = class {
   }
   /** Update alt/caption/tags on a media_asset document (saveDraft + publish atomically). */
   async updateMetadata(rootId, meta, updatedBy) {
-    const svc = new chunkW36OZTJ5_cjs.DocumentsService(this.db, { queryableFields: MEDIA_QUERYABLE, tenantId: this.tenantId, maxVersionsPerRoot: 5 });
+    const svc = new chunkLTZ5WYOK_cjs.DocumentsService(this.db, { queryableFields: MEDIA_QUERYABLE, tenantId: this.tenantId, maxVersionsPerRoot: 5 });
     const newDraft = await svc.saveDraft(rootId, { data: meta }, updatedBy);
     return svc.publish(newDraft.id, updatedBy);
   }
@@ -2325,7 +2330,7 @@ var fileValidationSchema = zod.z.object({
   // 50MB max
 });
 var apiMediaRoutes = new hono.Hono();
-apiMediaRoutes.use("*", chunkZHQP75SR_cjs.requireAuth());
+apiMediaRoutes.use("*", chunkSYAUCKSD_cjs.requireAuth());
 apiMediaRoutes.post("/upload", async (c) => {
   try {
     const user = c.get("user");
@@ -3023,7 +3028,7 @@ apiSystemRoutes.get("/info", (c) => {
 apiSystemRoutes.get("/stats", async (c) => {
   try {
     const db = c.env.DB;
-    const typeIds = chunkC3KSTUEA_cjs.getCollectionRegistry().listActive().filter((r) => !r.internal).map((r) => r.name);
+    const typeIds = chunk2DSRS3VA_cjs.getCollectionRegistry().listActive().filter((r) => !r.internal).map((r) => r.name);
     let contentStats = null;
     if (typeIds.length > 0) {
       const placeholders = typeIds.map(() => "?").join(",");
@@ -3098,12 +3103,12 @@ apiSystemRoutes.get("/env", (c) => {
 });
 var api_system_default = apiSystemRoutes;
 var adminApiRoutes = new hono.Hono();
-adminApiRoutes.use("*", chunkZHQP75SR_cjs.requireAuth());
-adminApiRoutes.use("*", chunkZHQP75SR_cjs.requireRole(["admin", "editor"]));
+adminApiRoutes.use("*", chunkSYAUCKSD_cjs.requireAuth());
+adminApiRoutes.use("*", chunkSYAUCKSD_cjs.requireRole(["admin", "editor"]));
 adminApiRoutes.get("/stats", async (c) => {
   try {
     const db = c.env.DB;
-    const userCollections = chunkC3KSTUEA_cjs.getCollectionRegistry().listActive().filter((r) => !r.internal);
+    const userCollections = chunk2DSRS3VA_cjs.getCollectionRegistry().listActive().filter((r) => !r.internal);
     const collectionsCount = userCollections.length;
     let contentCount = 0;
     if (userCollections.length > 0) {
@@ -3194,7 +3199,7 @@ adminApiRoutes.get("/collections", async (c) => {
   try {
     const search = c.req.query("search") || "";
     const includeInactive = c.req.query("includeInactive") === "true";
-    let records = chunkC3KSTUEA_cjs.getCollectionRegistry().list().filter((r) => !r.internal);
+    let records = chunk2DSRS3VA_cjs.getCollectionRegistry().list().filter((r) => !r.internal);
     if (!includeInactive) records = records.filter((r) => r.isActive !== false);
     if (search) {
       const needle = search.toLowerCase();
@@ -3226,7 +3231,7 @@ adminApiRoutes.get("/collections", async (c) => {
 adminApiRoutes.get("/collections/:id", async (c) => {
   try {
     const id = c.req.param("id");
-    const registry = chunkC3KSTUEA_cjs.getCollectionRegistry();
+    const registry = chunk2DSRS3VA_cjs.getCollectionRegistry();
     const record = registry.getById(id) ?? registry.getByName(id);
     if (!record) {
       return c.json({ error: "Collection not found" }, 404);
@@ -3276,7 +3281,7 @@ adminApiRoutes.get("/references", async (c) => {
     if (collectionParams.length === 0) {
       return c.json({ error: "Collection is required" }, 400);
     }
-    const registry = chunkC3KSTUEA_cjs.getCollectionRegistry();
+    const registry = chunk2DSRS3VA_cjs.getCollectionRegistry();
     const matched = collectionParams.map((param) => registry.getById(param) ?? registry.getByName(param)).filter((r) => !!r);
     const seen = /* @__PURE__ */ new Set();
     const collections = matched.filter((r) => {
@@ -3391,7 +3396,7 @@ adminApiRoutes.patch("/collections/:id", collectionsReadOnly);
 adminApiRoutes.delete("/collections/:id", collectionsReadOnly);
 adminApiRoutes.get("/migrations/status", async (c) => {
   try {
-    const { MigrationService: MigrationService2 } = await import('./migrations-QIRBSVJJ.cjs');
+    const { MigrationService: MigrationService2 } = await import('./migrations-RYH2MGG4.cjs');
     const db = c.env.DB;
     const migrationService = new MigrationService2(db);
     const status = await migrationService.getMigrationStatus();
@@ -3434,7 +3439,7 @@ adminApiRoutes.post("/migrations/run", async (c) => {
 });
 adminApiRoutes.get("/migrations/validate", async (c) => {
   try {
-    const { MigrationService: MigrationService2 } = await import('./migrations-QIRBSVJJ.cjs');
+    const { MigrationService: MigrationService2 } = await import('./migrations-RYH2MGG4.cjs');
     const db = c.env.DB;
     const migrationService = new MigrationService2(db);
     const validation = await migrationService.validateSchema();
@@ -3849,7 +3854,7 @@ function renderRegisterPage(data) {
 }
 
 // src/services/email/email-service-singleton.ts
-var singleton = chunk3RNDJAZ5_cjs.createServiceSingleton("EmailService");
+var singleton = chunkEHTBXFTA_cjs.createServiceSingleton("EmailService");
 function setEmailService(service2) {
   singleton.set(service2);
 }
@@ -3893,7 +3898,7 @@ function emptyProfile() {
   return { custom: {} };
 }
 function service(db) {
-  return new chunkW36OZTJ5_cjs.DocumentsService(db, { tenantId: "default", maxVersionsPerRoot: 1, queryableFields: [] });
+  return new chunkLTZ5WYOK_cjs.DocumentsService(db, { tenantId: "default", maxVersionsPerRoot: 1, queryableFields: [] });
 }
 async function readProfileData(db, userId) {
   const row = await db.prepare(
@@ -4657,7 +4662,7 @@ function getLexicalInitScript(settings = {}) {
     </script>
   `;
 }
-var lexicalEditorPlugin = chunk3RNDJAZ5_cjs.definePlugin({
+var lexicalEditorPlugin = chunkEHTBXFTA_cjs.definePlugin({
   id: "lexical-editor",
   version: "1.0.0",
   name: "Lexical Editor",
@@ -7063,7 +7068,7 @@ api.put("/:userId", async (c) => {
   await saveCustomData(db, userId, sanitized);
   return c.json({ success: true });
 });
-var userProfilesPlugin = chunk3RNDJAZ5_cjs.definePlugin({
+var userProfilesPlugin = chunkEHTBXFTA_cjs.definePlugin({
   id: "user-profiles",
   version: "1.0.0",
   name: "User Profiles",
@@ -7101,8 +7106,8 @@ function renderPasswordResetEmail(resetLink, firstName) {
 async function setCsrfCookie(c, maxAge) {
   const secret = c.env?.JWT_SECRET || JWT_SECRET_FALLBACK;
   const isDev = c.env?.ENVIRONMENT === "development" || !c.env?.ENVIRONMENT;
-  const csrfToken = await chunkZHQP75SR_cjs.generateCsrfToken(secret);
-  const cookieMaxAge = await chunkZHQP75SR_cjs.getJwtExpirySecondsFromDb(c.env?.DB, c.env);
+  const csrfToken = await chunkSYAUCKSD_cjs.generateCsrfToken(secret);
+  const cookieMaxAge = await chunkSYAUCKSD_cjs.getJwtExpirySecondsFromDb(c.env?.DB, c.env);
   cookie.setCookie(c, "csrf_token", csrfToken, {
     httpOnly: false,
     secure: !isDev,
@@ -7161,7 +7166,7 @@ var loginSchema = zod.z.object({
 });
 authRoutes.post(
   "/register",
-  chunkZHQP75SR_cjs.rateLimit({ max: 30, windowMs: 60 * 1e3, keyPrefix: "register" }),
+  chunkSYAUCKSD_cjs.rateLimit({ max: 30, windowMs: 60 * 1e3, keyPrefix: "register" }),
   async (c) => {
     try {
       const db = c.env.DB;
@@ -7197,7 +7202,7 @@ authRoutes.post(
       if (existingUser) {
         return c.json({ error: "User with this email already exists" }, 400);
       }
-      const passwordHash = await chunkZHQP75SR_cjs.AuthManager.hashPassword(password);
+      const passwordHash = await chunkSYAUCKSD_cjs.AuthManager.hashPassword(password);
       const userId = crypto.randomUUID();
       const now = /* @__PURE__ */ new Date();
       const nowSec = Math.floor(now.getTime() / 1e3);
@@ -7230,8 +7235,8 @@ authRoutes.post(
         { user: { id: userId, email: normalizedEmail, role: "viewer" } },
         "fire-and-forget"
       );
-      const tokenTtl = await chunkZHQP75SR_cjs.getJwtExpirySecondsFromDb(c.env.DB, c.env);
-      const token = await chunkZHQP75SR_cjs.AuthManager.generateToken(userId, normalizedEmail, "viewer", c.env.JWT_SECRET, tokenTtl);
+      const tokenTtl = await chunkSYAUCKSD_cjs.getJwtExpirySecondsFromDb(c.env.DB, c.env);
+      const token = await chunkSYAUCKSD_cjs.AuthManager.generateToken(userId, normalizedEmail, "viewer", c.env.JWT_SECRET, tokenTtl);
       cookie.setCookie(c, "auth_token", token, {
         httpOnly: true,
         secure: true,
@@ -7263,7 +7268,7 @@ authRoutes.post(
 );
 authRoutes.post(
   "/login",
-  chunkZHQP75SR_cjs.rateLimit({ max: 30, windowMs: 60 * 1e3, keyPrefix: "login" }),
+  chunkSYAUCKSD_cjs.rateLimit({ max: 30, windowMs: 60 * 1e3, keyPrefix: "login" }),
   async (c) => {
     try {
       const body = await c.req.json();
@@ -7273,7 +7278,7 @@ authRoutes.post(
       }
       const { email, password } = validation.data;
       const normalizedEmail = email.toLowerCase();
-      const { createAuth } = await import('./config-YCRSU7ZP.cjs');
+      const { createAuth } = await import('./config-OCH7S4WK.cjs');
       const auth = createAuth(c.env);
       const baReq = new Request(new URL("/auth/sign-in/email", c.req.url).href, {
         method: "POST",
@@ -7295,8 +7300,8 @@ authRoutes.post(
       await setCsrfCookie(c);
       const baBody = await baRes.json();
       const user = baBody.user ?? {};
-      const tokenTtl = await chunkZHQP75SR_cjs.getJwtExpirySecondsFromDb(c.env.DB, c.env);
-      const token = await chunkZHQP75SR_cjs.AuthManager.generateToken(
+      const tokenTtl = await chunkSYAUCKSD_cjs.getJwtExpirySecondsFromDb(c.env.DB, c.env);
+      const token = await chunkSYAUCKSD_cjs.AuthManager.generateToken(
         user.id,
         user.email,
         user.role ?? "viewer",
@@ -7327,7 +7332,7 @@ authRoutes.post(
 );
 authRoutes.post("/logout", async (c) => {
   try {
-    const { createAuth } = await import('./config-YCRSU7ZP.cjs');
+    const { createAuth } = await import('./config-OCH7S4WK.cjs');
     const auth = createAuth(c.env);
     const baReq = new Request(new URL("/auth/sign-out", c.req.url).href, {
       method: "POST",
@@ -7343,7 +7348,7 @@ authRoutes.post("/logout", async (c) => {
 });
 authRoutes.get("/logout", async (c) => {
   try {
-    const { createAuth } = await import('./config-YCRSU7ZP.cjs');
+    const { createAuth } = await import('./config-OCH7S4WK.cjs');
     const auth = createAuth(c.env);
     const baReq = new Request(new URL("/auth/sign-out", c.req.url).href, {
       method: "POST",
@@ -7357,7 +7362,7 @@ authRoutes.get("/logout", async (c) => {
   clearCsrfCookie(c);
   return c.redirect("/auth/login?message=You have been logged out successfully");
 });
-authRoutes.get("/me", chunkZHQP75SR_cjs.requireAuth(), async (c) => {
+authRoutes.get("/me", chunkSYAUCKSD_cjs.requireAuth(), async (c) => {
   try {
     const user = c.get("user");
     if (!user) {
@@ -7377,7 +7382,7 @@ authRoutes.get("/me", chunkZHQP75SR_cjs.requireAuth(), async (c) => {
 });
 authRoutes.post(
   "/refresh",
-  chunkZHQP75SR_cjs.rateLimit({ max: 60, windowMs: 60 * 1e3, keyPrefix: "refresh" }),
+  chunkSYAUCKSD_cjs.rateLimit({ max: 60, windowMs: 60 * 1e3, keyPrefix: "refresh" }),
   async (c) => {
     try {
       let token = c.req.header("Authorization")?.replace("Bearer ", "");
@@ -7386,8 +7391,8 @@ authRoutes.post(
         return c.json({ error: "Authentication required" }, 401);
       }
       const db = c.env.DB;
-      const grace = await chunkZHQP75SR_cjs.getJwtRefreshGraceSecondsFromDb(db, c.env);
-      const payload = await chunkZHQP75SR_cjs.AuthManager.verifyToken(token, c.env.JWT_SECRET, grace);
+      const grace = await chunkSYAUCKSD_cjs.getJwtRefreshGraceSecondsFromDb(db, c.env);
+      const payload = await chunkSYAUCKSD_cjs.AuthManager.verifyToken(token, c.env.JWT_SECRET, grace);
       if (!payload) {
         return c.json({ error: "Invalid or expired token" }, 401);
       }
@@ -7395,8 +7400,8 @@ authRoutes.post(
       if (!row || !row.is_active) {
         return c.json({ error: "User is not active" }, 401);
       }
-      const tokenTtl = await chunkZHQP75SR_cjs.getJwtExpirySecondsFromDb(db, c.env);
-      const newToken = await chunkZHQP75SR_cjs.AuthManager.generateToken(row.id, row.email, row.role, c.env.JWT_SECRET, tokenTtl);
+      const tokenTtl = await chunkSYAUCKSD_cjs.getJwtExpirySecondsFromDb(db, c.env);
+      const newToken = await chunkSYAUCKSD_cjs.AuthManager.generateToken(row.id, row.email, row.role, c.env.JWT_SECRET, tokenTtl);
       cookie.setCookie(c, "auth_token", newToken, {
         httpOnly: true,
         secure: true,
@@ -7416,7 +7421,7 @@ authRoutes.post(
 );
 authRoutes.post(
   "/register/form",
-  chunkZHQP75SR_cjs.rateLimit({ max: 30, windowMs: 60 * 1e3, keyPrefix: "register" }),
+  chunkSYAUCKSD_cjs.rateLimit({ max: 30, windowMs: 60 * 1e3, keyPrefix: "register" }),
   async (c) => {
     try {
       const db = c.env.DB;
@@ -7461,7 +7466,7 @@ authRoutes.post(
         </div>
       `);
       }
-      const passwordHash = await chunkZHQP75SR_cjs.AuthManager.hashPassword(password);
+      const passwordHash = await chunkSYAUCKSD_cjs.AuthManager.hashPassword(password);
       const role = isFirstUser ? "admin" : "viewer";
       const userId = crypto.randomUUID();
       const now = /* @__PURE__ */ new Date();
@@ -7495,7 +7500,7 @@ authRoutes.post(
           await saveCustomData(db, userId, sanitized);
         }
       }
-      const rbacService = new chunkW36OZTJ5_cjs.RbacService(db);
+      const rbacService = new chunkLTZ5WYOK_cjs.RbacService(db);
       await rbacService.addUserRoleByName(userId, role);
       dispatchHookEvent(
         c,
@@ -7503,8 +7508,8 @@ authRoutes.post(
         { user: { id: userId, email: normalizedEmail, role } },
         "fire-and-forget"
       );
-      const tokenTtl = await chunkZHQP75SR_cjs.getJwtExpirySecondsFromDb(c.env.DB, c.env);
-      const token = await chunkZHQP75SR_cjs.AuthManager.generateToken(userId, normalizedEmail, role, c.env.JWT_SECRET, tokenTtl);
+      const tokenTtl = await chunkSYAUCKSD_cjs.getJwtExpirySecondsFromDb(c.env.DB, c.env);
+      const token = await chunkSYAUCKSD_cjs.AuthManager.generateToken(userId, normalizedEmail, role, c.env.JWT_SECRET, tokenTtl);
       cookie.setCookie(c, "auth_token", token, {
         httpOnly: true,
         secure: false,
@@ -7536,7 +7541,7 @@ authRoutes.post(
 );
 authRoutes.post(
   "/login/form",
-  chunkZHQP75SR_cjs.rateLimit({ max: 30, windowMs: 60 * 1e3, keyPrefix: "login" }),
+  chunkSYAUCKSD_cjs.rateLimit({ max: 30, windowMs: 60 * 1e3, keyPrefix: "login" }),
   async (c) => {
     try {
       const formData = await c.req.formData();
@@ -7550,7 +7555,7 @@ authRoutes.post(
         </div>
       `);
       }
-      const { createAuth } = await import('./config-YCRSU7ZP.cjs');
+      const { createAuth } = await import('./config-OCH7S4WK.cjs');
       const auth = createAuth(c.env);
       const baReq = new Request(new URL("/auth/sign-in/email", c.req.url).href, {
         method: "POST",
@@ -7605,14 +7610,14 @@ authRoutes.post(
 );
 authRoutes.post(
   "/seed-admin",
-  chunkZHQP75SR_cjs.rateLimit({ max: 10, windowMs: 60 * 1e3, keyPrefix: "seed-admin" }),
+  chunkSYAUCKSD_cjs.rateLimit({ max: 10, windowMs: 60 * 1e3, keyPrefix: "seed-admin" }),
   async (c) => {
     try {
       const db = c.env.DB;
-      const rbac = new chunkW36OZTJ5_cjs.RbacService(db);
+      const rbac = new chunkLTZ5WYOK_cjs.RbacService(db);
       const results = [];
       const upsertSeedUser = async (opts) => {
-        const passwordHash = await chunkZHQP75SR_cjs.AuthManager.hashPassword(opts.password);
+        const passwordHash = await chunkSYAUCKSD_cjs.AuthManager.hashPassword(opts.password);
         const nowMs = Date.now();
         const nowSec = Math.floor(nowMs / 1e3);
         const existing = await db.prepare("SELECT id FROM auth_user WHERE email = ?").bind(opts.email).first();
@@ -7837,7 +7842,7 @@ authRoutes.post("/accept-invitation", async (c) => {
     if (invitationAge > maxAge) {
       return c.json({ error: "Invitation has expired" }, 400);
     }
-    const passwordHash = await chunkZHQP75SR_cjs.AuthManager.hashPassword(password);
+    const passwordHash = await chunkSYAUCKSD_cjs.AuthManager.hashPassword(password);
     const updateStmt = db.prepare(`
       UPDATE auth_user SET
         password_hash = ?,
@@ -7854,8 +7859,8 @@ authRoutes.post("/accept-invitation", async (c) => {
       Date.now(),
       invitedUser.id
     ).run();
-    const tokenTtl = await chunkZHQP75SR_cjs.getJwtExpirySecondsFromDb(c.env.DB, c.env);
-    const authToken = await chunkZHQP75SR_cjs.AuthManager.generateToken(invitedUser.id, invitedUser.email, invitedUser.role, c.env.JWT_SECRET, tokenTtl);
+    const tokenTtl = await chunkSYAUCKSD_cjs.getJwtExpirySecondsFromDb(c.env.DB, c.env);
+    const authToken = await chunkSYAUCKSD_cjs.AuthManager.generateToken(invitedUser.id, invitedUser.email, invitedUser.role, c.env.JWT_SECRET, tokenTtl);
     cookie.setCookie(c, "auth_token", authToken, {
       httpOnly: true,
       secure: true,
@@ -7871,7 +7876,7 @@ authRoutes.post("/accept-invitation", async (c) => {
 });
 authRoutes.post(
   "/request-password-reset",
-  chunkZHQP75SR_cjs.rateLimit({ max: 3, windowMs: 15 * 60 * 1e3, keyPrefix: "password-reset" }),
+  chunkSYAUCKSD_cjs.rateLimit({ max: 3, windowMs: 15 * 60 * 1e3, keyPrefix: "password-reset" }),
   async (c) => {
     try {
       const formData = await c.req.formData();
@@ -8108,7 +8113,7 @@ authRoutes.post("/reset-password", async (c) => {
     if (Date.now() > user.password_reset_expires) {
       return c.json({ error: "Reset token has expired" }, 400);
     }
-    const newPasswordHash = await chunkZHQP75SR_cjs.AuthManager.hashPassword(password);
+    const newPasswordHash = await chunkSYAUCKSD_cjs.AuthManager.hashPassword(password);
     try {
       const historyStmt = db.prepare(`
         INSERT INTO auth_password_history (id, user_id, password_hash, created_at)
@@ -8322,7 +8327,7 @@ app.post("/test-seed-defaults", async (c) => {
 var test_cleanup_default = app;
 
 // src/plugins/available/easy-mdx/index.ts
-chunk3RNDJAZ5_cjs.definePlugin({
+chunkEHTBXFTA_cjs.definePlugin({
   id: "easy-mdx",
   version: "1.0.0",
   name: "EasyMDE Markdown Editor",
@@ -8522,7 +8527,7 @@ function getMDXEditorInitScript(config) {
 }
 
 // src/plugins/available/tinymce-plugin/index.ts
-chunk3RNDJAZ5_cjs.definePlugin({
+chunkEHTBXFTA_cjs.definePlugin({
   id: "tinymce-plugin",
   version: "1.0.0",
   name: "TinyMCE",
@@ -8792,7 +8797,7 @@ function getQuillCDN(version = "2.0.2") {
     </style>
   `;
 }
-chunk3RNDJAZ5_cjs.definePlugin({
+chunkEHTBXFTA_cjs.definePlugin({
   id: "quill-editor",
   version: "1.0.0",
   name: "Quill Editor",
@@ -11366,7 +11371,7 @@ function extractFieldData(fields, formData, options = {}) {
   }
   return { data, errors };
 }
-adminContentRoutes.use("*", chunkZHQP75SR_cjs.requireAuth());
+adminContentRoutes.use("*", chunkSYAUCKSD_cjs.requireAuth());
 async function getCollectionFields(db, collectionId) {
   console.log(`[getCollectionFields] Loading fields for collection: ${collectionId}`);
   const collectionStmt = db.prepare("SELECT schema, queryable_fields FROM document_types WHERE id = ?");
@@ -11393,7 +11398,7 @@ async function getCollectionFields(db, collectionId) {
           };
         });
       }
-      const codeCollections2 = await chunkC3KSTUEA_cjs.loadCollectionConfigs();
+      const codeCollections2 = await chunk2DSRS3VA_cjs.loadCollectionConfigs();
       const codeMatch = codeCollections2.find((c) => c.name === collectionId);
       if (codeMatch && codeMatch.schema?.properties) {
         console.log(`[getCollectionFields] DB doc type has no properties \u2014 using code collection schema`);
@@ -11425,7 +11430,7 @@ async function getCollectionFields(db, collectionId) {
     }
   }
   console.log(`[getCollectionFields] Not in database, checking code collections`);
-  const codeCollections = await chunkC3KSTUEA_cjs.loadCollectionConfigs();
+  const codeCollections = await chunk2DSRS3VA_cjs.loadCollectionConfigs();
   console.log(`[getCollectionFields] Found ${codeCollections.length} code collections`);
   const codeCollection = codeCollections.find((c) => c.name === collectionId);
   if (codeCollection && codeCollection.schema) {
@@ -11461,7 +11466,7 @@ async function getCollectionFields(db, collectionId) {
 }
 async function getCollection(db, collectionId) {
   console.log(`[getCollection] Loading collection by ID: ${collectionId}`);
-  const cache = chunk4BTBSXMR_cjs.getCacheService(chunk4BTBSXMR_cjs.CACHE_CONFIGS.collection);
+  const cache = chunk36Z3AKX3_cjs.getCacheService(chunk36Z3AKX3_cjs.CACHE_CONFIGS.collection);
   return cache.getOrSet(
     cache.generateKey("collection", collectionId),
     async () => {
@@ -11479,7 +11484,7 @@ async function getCollection(db, collectionId) {
         };
       }
       console.log(`[getCollection] Not in database, checking code collections`);
-      const codeCollections = await chunkC3KSTUEA_cjs.loadCollectionConfigs();
+      const codeCollections = await chunk2DSRS3VA_cjs.loadCollectionConfigs();
       const codeCollection = codeCollections.find((c) => c.name === collectionId);
       if (codeCollection) {
         console.log(`[getCollection] Found code collection: ${collectionId}`);
@@ -11498,7 +11503,7 @@ async function getCollection(db, collectionId) {
 }
 async function getDocBackingType(db, collectionName) {
   if (!collectionName) return null;
-  const dt = await new chunkZHQP75SR_cjs.DocumentTypeRegistry(db).findById(collectionName);
+  const dt = await new chunkSYAUCKSD_cjs.DocumentTypeRegistry(db).findById(collectionName);
   return dt && dt.isActive ? dt : null;
 }
 async function getCollectionByName(db, name) {
@@ -11515,7 +11520,7 @@ async function getCollectionByName(db, name) {
     };
   }
   console.log(`[getCollectionByName] Not in database, checking code collections`);
-  const codeCollections = await chunkC3KSTUEA_cjs.loadCollectionConfigs();
+  const codeCollections = await chunk2DSRS3VA_cjs.loadCollectionConfigs();
   const codeCollection = codeCollections.find((c) => c.name === name);
   if (codeCollection) {
     console.log(`[getCollectionByName] Found code collection: ${name}`);
@@ -11531,7 +11536,7 @@ async function getCollectionByName(db, name) {
   return null;
 }
 async function loadContentEditorFlags(db) {
-  const flags = { workflowEnabled: await chunkZHQP75SR_cjs.isPluginActive(db, "workflow") };
+  const flags = { workflowEnabled: await chunkSYAUCKSD_cjs.isPluginActive(db, "workflow") };
   const editors = [
     ["tinymce-plugin", "tinymce"],
     ["quill-editor", "quill"],
@@ -11539,10 +11544,10 @@ async function loadContentEditorFlags(db) {
     ["lexical-editor", "lexical"]
   ];
   for (const [plugin, key] of editors) {
-    const enabled = await chunkZHQP75SR_cjs.isPluginActive(db, plugin);
+    const enabled = await chunkSYAUCKSD_cjs.isPluginActive(db, plugin);
     flags[`${key}Enabled`] = enabled;
     if (enabled) {
-      const ps = new chunkC3KSTUEA_cjs.PluginService(db);
+      const ps = new chunk2DSRS3VA_cjs.PluginService(db);
       const p = await ps.getPlugin(plugin);
       flags[`${key}Settings`] = p?.settings;
     }
@@ -11550,7 +11555,7 @@ async function loadContentEditorFlags(db) {
   return flags;
 }
 function makeDocService(db, docType, tenantId) {
-  return new chunkW36OZTJ5_cjs.DocumentsService(db, {
+  return new chunkLTZ5WYOK_cjs.DocumentsService(db, {
     queryableFields: docType.queryableFields ?? [],
     typeSchemaVersion: docType.schemaVersion ?? 1,
     maxVersionsPerRoot: docType.settings?.maxVersionsPerRoot ?? 50,
@@ -11578,9 +11583,9 @@ adminContentRoutes.get("/", async (c) => {
     const offset = (page - 1) * limit;
     const collectionsStmt = db.prepare("SELECT id, name, display_name FROM document_types WHERE is_active = 1 ORDER BY display_name");
     const { results: collectionsResults } = await collectionsStmt.all();
-    const codeCollections = await chunkC3KSTUEA_cjs.loadCollectionConfigs();
+    const codeCollections = await chunk2DSRS3VA_cjs.loadCollectionConfigs();
     const codeCollectionMap = new Map(codeCollections.map((c2) => [c2.name, c2]));
-    const docTypeRegistry = new chunkZHQP75SR_cjs.DocumentTypeRegistry(db);
+    const docTypeRegistry = new chunkSYAUCKSD_cjs.DocumentTypeRegistry(db);
     const docTypes = (await docTypeRegistry.findAll()).filter((dt) => !dt.settings?.internal && !dt.isAuth);
     const visibleTypeIds = new Set(docTypes.map((dt) => dt.id));
     const allCollections = [
@@ -11592,7 +11597,7 @@ adminContentRoutes.get("/", async (c) => {
       ...allCollections.map((c2) => ({ name: c2.name, displayName: c2.displayName })),
       ...docTypes.filter((dt) => !collectionNames.has(dt.id)).map((dt) => ({ name: `doc:${dt.id}`, displayName: dt.displayName }))
     ];
-    const newContentCollections = await chunkC3KSTUEA_cjs.getVisibleCollections(db);
+    const newContentCollections = await chunk2DSRS3VA_cjs.getVisibleCollections(db);
     const docBackedCollection = !modelName.startsWith("doc:") && modelName !== "all" ? docTypes.find((dt) => dt.id === modelName) : void 0;
     const isDocModel = modelName.startsWith("doc:") || !!docBackedCollection;
     if (isDocModel) {
@@ -11869,9 +11874,9 @@ adminContentRoutes.get("/new", async (c) => {
       const collectionsStmt = db2.prepare("SELECT id, name, display_name, description FROM document_types WHERE is_active = 1 ORDER BY display_name");
       const { results } = await collectionsStmt.all();
       const visibleTypeIds = new Set(
-        (await new chunkZHQP75SR_cjs.DocumentTypeRegistry(db2).findAll()).filter((dt) => !dt.settings?.internal && !dt.isAuth).map((dt) => dt.id)
+        (await new chunkSYAUCKSD_cjs.DocumentTypeRegistry(db2).findAll()).filter((dt) => !dt.settings?.internal && !dt.isAuth).map((dt) => dt.id)
       );
-      const codeCollections = await chunkC3KSTUEA_cjs.loadCollectionConfigs();
+      const codeCollections = await chunk2DSRS3VA_cjs.loadCollectionConfigs();
       const dbCollectionNames = new Set((results || []).map((r) => r.name));
       const allCollections = [
         ...codeCollections.filter((c2) => !dbCollectionNames.has(c2.name)).map((c2) => ({
@@ -11937,32 +11942,32 @@ adminContentRoutes.get("/new", async (c) => {
       return c.html(renderContentFormPage(formData2));
     }
     const fields = await getCollectionFields(db, collection.id);
-    const workflowEnabled = await chunkZHQP75SR_cjs.isPluginActive(db, "workflow");
-    const tinymceEnabled = await chunkZHQP75SR_cjs.isPluginActive(db, "tinymce-plugin");
+    const workflowEnabled = await chunkSYAUCKSD_cjs.isPluginActive(db, "workflow");
+    const tinymceEnabled = await chunkSYAUCKSD_cjs.isPluginActive(db, "tinymce-plugin");
     let tinymceSettings;
     if (tinymceEnabled) {
-      const pluginService = new chunkC3KSTUEA_cjs.PluginService(db);
+      const pluginService = new chunk2DSRS3VA_cjs.PluginService(db);
       const tinymcePlugin2 = await pluginService.getPlugin("tinymce-plugin");
       tinymceSettings = tinymcePlugin2?.settings;
     }
-    const quillEnabled = await chunkZHQP75SR_cjs.isPluginActive(db, "quill-editor");
+    const quillEnabled = await chunkSYAUCKSD_cjs.isPluginActive(db, "quill-editor");
     let quillSettings;
     if (quillEnabled) {
-      const pluginService = new chunkC3KSTUEA_cjs.PluginService(db);
+      const pluginService = new chunk2DSRS3VA_cjs.PluginService(db);
       const quillPlugin = await pluginService.getPlugin("quill-editor");
       quillSettings = quillPlugin?.settings;
     }
-    const mdxeditorEnabled = await chunkZHQP75SR_cjs.isPluginActive(db, "easy-mdx");
+    const mdxeditorEnabled = await chunkSYAUCKSD_cjs.isPluginActive(db, "easy-mdx");
     let mdxeditorSettings;
     if (mdxeditorEnabled) {
-      const pluginService = new chunkC3KSTUEA_cjs.PluginService(db);
+      const pluginService = new chunk2DSRS3VA_cjs.PluginService(db);
       const mdxeditorPlugin = await pluginService.getPlugin("easy-mdx");
       mdxeditorSettings = mdxeditorPlugin?.settings;
     }
-    const lexicalEnabled = await chunkZHQP75SR_cjs.isPluginActive(db, "lexical-editor");
+    const lexicalEnabled = await chunkSYAUCKSD_cjs.isPluginActive(db, "lexical-editor");
     let lexicalSettings;
     if (lexicalEnabled) {
-      const pluginService = new chunkC3KSTUEA_cjs.PluginService(db);
+      const pluginService = new chunk2DSRS3VA_cjs.PluginService(db);
       const lexicalPlugin = await pluginService.getPlugin("lexical-editor");
       lexicalSettings = lexicalPlugin?.settings;
     }
@@ -12053,7 +12058,7 @@ adminContentRoutes.get("/:id/edit", async (c) => {
       } : void 0
     };
     return c.html(renderContentFormPage(notFoundData));
-    const cache = chunk4BTBSXMR_cjs.getCacheService(chunk4BTBSXMR_cjs.CACHE_CONFIGS.content);
+    const cache = chunk36Z3AKX3_cjs.getCacheService(chunk36Z3AKX3_cjs.CACHE_CONFIGS.content);
     const content = await cache.getOrSet(
       cache.generateKey("content", id),
       async () => {
@@ -12090,32 +12095,32 @@ adminContentRoutes.get("/:id/edit", async (c) => {
     };
     const fields = await getCollectionFields(db, content.collection_id);
     const contentData = content.data ? JSON.parse(content.data) : {};
-    const workflowEnabled = await chunkZHQP75SR_cjs.isPluginActive(db, "workflow");
-    const tinymceEnabled = await chunkZHQP75SR_cjs.isPluginActive(db, "tinymce-plugin");
+    const workflowEnabled = await chunkSYAUCKSD_cjs.isPluginActive(db, "workflow");
+    const tinymceEnabled = await chunkSYAUCKSD_cjs.isPluginActive(db, "tinymce-plugin");
     let tinymceSettings;
     if (tinymceEnabled) {
-      const pluginService = new chunkC3KSTUEA_cjs.PluginService(db);
+      const pluginService = new chunk2DSRS3VA_cjs.PluginService(db);
       const tinymcePlugin2 = await pluginService.getPlugin("tinymce-plugin");
       tinymceSettings = tinymcePlugin2?.settings;
     }
-    const quillEnabled = await chunkZHQP75SR_cjs.isPluginActive(db, "quill-editor");
+    const quillEnabled = await chunkSYAUCKSD_cjs.isPluginActive(db, "quill-editor");
     let quillSettings;
     if (quillEnabled) {
-      const pluginService = new chunkC3KSTUEA_cjs.PluginService(db);
+      const pluginService = new chunk2DSRS3VA_cjs.PluginService(db);
       const quillPlugin = await pluginService.getPlugin("quill-editor");
       quillSettings = quillPlugin?.settings;
     }
-    const mdxeditorEnabled = await chunkZHQP75SR_cjs.isPluginActive(db, "easy-mdx");
+    const mdxeditorEnabled = await chunkSYAUCKSD_cjs.isPluginActive(db, "easy-mdx");
     let mdxeditorSettings;
     if (mdxeditorEnabled) {
-      const pluginService = new chunkC3KSTUEA_cjs.PluginService(db);
+      const pluginService = new chunk2DSRS3VA_cjs.PluginService(db);
       const mdxeditorPlugin = await pluginService.getPlugin("easy-mdx");
       mdxeditorSettings = mdxeditorPlugin?.settings;
     }
-    const lexicalEnabled = await chunkZHQP75SR_cjs.isPluginActive(db, "lexical-editor");
+    const lexicalEnabled = await chunkSYAUCKSD_cjs.isPluginActive(db, "lexical-editor");
     let lexicalSettings;
     if (lexicalEnabled) {
-      const pluginService = new chunkC3KSTUEA_cjs.PluginService(db);
+      const pluginService = new chunk2DSRS3VA_cjs.PluginService(db);
       const lexicalPlugin = await pluginService.getPlugin("lexical-editor");
       lexicalSettings = lexicalPlugin?.settings;
     }
@@ -12236,7 +12241,7 @@ adminContentRoutes.post("/", async (c) => {
         data,
         publishOnCreate: status === "published"
       }), user?.userId);
-      const cache2 = chunk4BTBSXMR_cjs.getCacheService(chunk4BTBSXMR_cjs.CACHE_CONFIGS.content);
+      const cache2 = chunk36Z3AKX3_cjs.getCacheService(chunk36Z3AKX3_cjs.CACHE_CONFIGS.content);
       await cache2.invalidate(`content:list:${collectionId}:*`);
       const redirectUrl2 = `/admin/content/${doc.rootId}/edit?success=Content created successfully!`;
       return c.req.header("HX-Request") === "true" ? c.text("", 200, { "HX-Redirect": redirectUrl2 }) : c.redirect(redirectUrl2);
@@ -12266,7 +12271,7 @@ adminContentRoutes.post("/", async (c) => {
       now,
       now
     ).run();
-    const cache = chunk4BTBSXMR_cjs.getCacheService(chunk4BTBSXMR_cjs.CACHE_CONFIGS.content);
+    const cache = chunk36Z3AKX3_cjs.getCacheService(chunk36Z3AKX3_cjs.CACHE_CONFIGS.content);
     await cache.invalidate(`content:list:${collectionId}:*`);
     const versionStmt = db.prepare(`
       INSERT INTO content_versions (id, content_id, version, data, author_id, created_at)
@@ -12355,7 +12360,7 @@ adminContentRoutes.put("/:id", async (c) => {
         const pub = await db.prepare("SELECT id FROM documents WHERE root_id = ? AND is_published = 1 AND tenant_id = ?").bind(id, tenantId).first();
         if (status2 === "published") await svc.publish(newDraft.id, user?.userId);
         else if (pub) await svc.unpublish(pub.id);
-        await chunk4BTBSXMR_cjs.getCacheService(chunk4BTBSXMR_cjs.CACHE_CONFIGS.content).invalidate(`content:list:*`);
+        await chunk36Z3AKX3_cjs.getCacheService(chunk36Z3AKX3_cjs.CACHE_CONFIGS.content).invalidate(`content:list:*`);
         const redirectUrl2 = `/admin/content/${id}/edit?success=Content updated successfully!`;
         return c.req.header("HX-Request") === "true" ? c.text("", 200, { "HX-Redirect": redirectUrl2 }) : c.redirect(redirectUrl2);
       }
@@ -12436,7 +12441,7 @@ adminContentRoutes.put("/:id", async (c) => {
       now,
       id
     ).run();
-    const cache = chunk4BTBSXMR_cjs.getCacheService(chunk4BTBSXMR_cjs.CACHE_CONFIGS.content);
+    const cache = chunk36Z3AKX3_cjs.getCacheService(chunk36Z3AKX3_cjs.CACHE_CONFIGS.content);
     await cache.delete(cache.generateKey("content", id));
     await cache.invalidate(`content:list:${existingContent.collection_id}:*`);
     const existingData = JSON.parse(existingContent.data || "{}");
@@ -12488,7 +12493,7 @@ adminContentRoutes.put("/:id", async (c) => {
     `);
   }
 });
-adminContentRoutes.post("/preview", chunkZHQP75SR_cjs.requireRole(["admin", "editor", "author"]), async (c) => {
+adminContentRoutes.post("/preview", chunkSYAUCKSD_cjs.requireRole(["admin", "editor", "author"]), async (c) => {
   try {
     const formData = await c.req.formData();
     const collectionId = formData.get("collection_id");
@@ -12743,12 +12748,12 @@ adminContentRoutes.post("/bulk-action", async (c) => {
         }
       }
     }
-    const cache = chunk4BTBSXMR_cjs.getCacheService(chunk4BTBSXMR_cjs.CACHE_CONFIGS.content);
+    const cache = chunk36Z3AKX3_cjs.getCacheService(chunk36Z3AKX3_cjs.CACHE_CONFIGS.content);
     for (const contentId of ids) {
       await cache.delete(cache.generateKey("content", contentId));
     }
     await cache.invalidate("content:list:*");
-    const apiCache = chunk4BTBSXMR_cjs.getCacheService(chunk4BTBSXMR_cjs.CACHE_CONFIGS.api);
+    const apiCache = chunk36Z3AKX3_cjs.getCacheService(chunk36Z3AKX3_cjs.CACHE_CONFIGS.api);
     await apiCache.invalidate("content-filtered:*");
     await apiCache.invalidate("collection-content-filtered:*");
     return c.json({ success: true, count: ids.length });
@@ -12767,7 +12772,7 @@ adminContentRoutes.delete("/:id", async (c) => {
     if (docDel && await getDocBackingType(db, docDel.type_id)) {
       const now2 = Math.floor(Date.now() / 1e3);
       await db.prepare("UPDATE documents SET deleted_at = ?, updated_at = ? WHERE root_id = ? AND tenant_id = ?").bind(now2, now2, id, tenantId).run();
-      await chunk4BTBSXMR_cjs.getCacheService(chunk4BTBSXMR_cjs.CACHE_CONFIGS.content).invalidate("content:list:*");
+      await chunk36Z3AKX3_cjs.getCacheService(chunk36Z3AKX3_cjs.CACHE_CONFIGS.content).invalidate("content:list:*");
       return c.html(`
         <div id="content-list" hx-get="/admin/content?model=${docDel.type_id}" hx-trigger="load" hx-swap="outerHTML">
           <div class="flex items-center justify-center p-8"><span class="text-zinc-500">Deleting\u2026</span></div>
@@ -12787,7 +12792,7 @@ adminContentRoutes.delete("/:id", async (c) => {
       WHERE id = ?
     `);
     await deleteStmt.bind(now, id).run();
-    const cache = chunk4BTBSXMR_cjs.getCacheService(chunk4BTBSXMR_cjs.CACHE_CONFIGS.content);
+    const cache = chunk36Z3AKX3_cjs.getCacheService(chunk36Z3AKX3_cjs.CACHE_CONFIGS.content);
     await cache.delete(cache.generateKey("content", id));
     await cache.invalidate("content:list:*");
     return c.html(`
@@ -12807,7 +12812,7 @@ adminContentRoutes.delete("/:id", async (c) => {
     return c.json({ success: false, error: "Failed to delete content" }, 500);
   }
 });
-adminContentRoutes.get("/:id/version/:version/preview", chunkZHQP75SR_cjs.requireRole(["admin", "editor", "author"]), async (c) => {
+adminContentRoutes.get("/:id/version/:version/preview", chunkSYAUCKSD_cjs.requireRole(["admin", "editor", "author"]), async (c) => {
   try {
     const id = c.req.param("id");
     const version = parseInt(c.req.param("version") || "0");
@@ -12903,9 +12908,9 @@ function parseDocFormData(formData, queryableFields = []) {
   return { title, slug, data };
 }
 async function getDocService(db, typeId, tenantId) {
-  const registry = new chunkZHQP75SR_cjs.DocumentTypeRegistry(db);
+  const registry = new chunkSYAUCKSD_cjs.DocumentTypeRegistry(db);
   const docType = await registry.findById(typeId);
-  const svc = new chunkW36OZTJ5_cjs.DocumentsService(db, {
+  const svc = new chunkLTZ5WYOK_cjs.DocumentsService(db, {
     queryableFields: docType?.queryableFields ?? [],
     typeSchemaVersion: docType?.schemaVersion ?? 1,
     maxVersionsPerRoot: docType?.settings?.maxVersionsPerRoot ?? 50,
@@ -12916,7 +12921,7 @@ async function getDocService(db, typeId, tenantId) {
 }
 adminContentRoutes.get("/documents/:typeId/new", async (c) => {
   const { typeId } = c.req.param();
-  const registry = new chunkZHQP75SR_cjs.DocumentTypeRegistry(c.env.DB);
+  const registry = new chunkSYAUCKSD_cjs.DocumentTypeRegistry(c.env.DB);
   const docType = await registry.findById(typeId);
   if (!docType) return c.html("<p>Unknown document type.</p>", 404);
   return c.html(chunkN32OWET6_cjs.renderDocumentFormPage({ docType, isEdit: false, user: userCtx(c) }));
@@ -12941,7 +12946,7 @@ adminContentRoutes.post("/documents/:typeId/new", async (c) => {
     }), user?.userId);
     return c.redirect(`/admin/content/documents/${typeId}/${doc.rootId}/edit?message=Created+successfully`);
   } catch (err) {
-    const registry = new chunkZHQP75SR_cjs.DocumentTypeRegistry(c.env.DB);
+    const registry = new chunkSYAUCKSD_cjs.DocumentTypeRegistry(c.env.DB);
     const docType = await registry.findById(typeId);
     if (!docType) return c.html("<p>Unknown document type.</p>", 404);
     return c.html(chunkN32OWET6_cjs.renderDocumentFormPage({ docType, isEdit: false, user: userCtx(c), message: err?.message ?? "Failed to create", messageType: "error" }));
@@ -12951,7 +12956,7 @@ adminContentRoutes.get("/documents/:typeId/:rootId/edit", async (c) => {
   const { typeId, rootId } = c.req.param();
   const db = c.env.DB;
   const message = c.req.query("message");
-  const registry = new chunkZHQP75SR_cjs.DocumentTypeRegistry(db);
+  const registry = new chunkSYAUCKSD_cjs.DocumentTypeRegistry(db);
   const docType = await registry.findById(typeId);
   if (!docType) return c.html("<p>Unknown document type.</p>", 404);
   const tenantId = reqTenant(c);
@@ -13064,7 +13069,7 @@ adminContentRoutes.get("/documents/:typeId/:rootId/versions", async (c) => {
   const { typeId, rootId } = c.req.param();
   const db = c.env.DB;
   const { renderVersionHistoryFragment } = await import('./admin-documents-form.template-LSZKGA5J.cjs');
-  const registry = new chunkZHQP75SR_cjs.DocumentTypeRegistry(db);
+  const registry = new chunkSYAUCKSD_cjs.DocumentTypeRegistry(db);
   const docType = await registry.findById(typeId);
   if (!docType) return c.html("<div>Unknown type.</div>", 404);
   const result = await db.prepare(
@@ -14936,6 +14941,7 @@ var TenantService = class {
   constructor(db) {
     this.db = db;
   }
+  db;
   async listTenants() {
     const { results } = await this.db.prepare(`
       SELECT * FROM auth_tenant
@@ -14996,7 +15002,7 @@ var TenantService = class {
       SET name = ?, domain = ?, status = ?, notes = ?, updated_at = ?
       WHERE slug = ?
     `).bind(name, domain, status, notes, now, slug).run();
-    chunkC3KSTUEA_cjs.invalidateTenantCache();
+    chunk2DSRS3VA_cjs.invalidateTenantCache();
     const updated = await this.getTenantBySlug(slug);
     if (!updated) throw new Error("Tenant not found");
     return updated;
@@ -15014,7 +15020,7 @@ var TenantService = class {
       throw new Error(`Tenant '${slug}' still owns ${docCount} document(s). Delete or migrate its content first.`);
     }
     await this.db.prepare(`DELETE FROM auth_tenant WHERE slug = ?`).bind(slug).run();
-    chunkC3KSTUEA_cjs.invalidateTenantCache();
+    chunk2DSRS3VA_cjs.invalidateTenantCache();
   }
   // ─── Membership (auth_tenant_member) ───────────────────────────────────────
   // Tenant resolution and the admin switcher are gated on membership: an authed user may only
@@ -15258,7 +15264,7 @@ var TenantService = class {
       INSERT INTO auth_tenant (id, name, slug, status, domain, notes, metadata, created_at, updated_at)
       VALUES (?, ?, ?, 'active', ?, ?, '{}', ?, ?)
     `).bind(id, input.name, input.slug, input.domain, input.notes, now, now).run();
-    chunkC3KSTUEA_cjs.invalidateTenantCache();
+    chunk2DSRS3VA_cjs.invalidateTenantCache();
     const created = await this.getTenantBySlug(input.slug);
     if (!created) throw new Error("Failed to create tenant");
     return created;
@@ -15282,14 +15288,14 @@ function mapRowToTenant(row) {
 
 // src/routes/admin-users.ts
 var userRoutes = new hono.Hono();
-userRoutes.use("*", chunkZHQP75SR_cjs.requireAuth());
-userRoutes.use("/users/*", chunkZHQP75SR_cjs.requireRole(["admin"]));
-userRoutes.use("/users", chunkZHQP75SR_cjs.requireRole(["admin"]));
-userRoutes.use("/invite-user", chunkZHQP75SR_cjs.requireRole(["admin"]));
-userRoutes.use("/resend-invitation/*", chunkZHQP75SR_cjs.requireRole(["admin"]));
-userRoutes.use("/cancel-invitation/*", chunkZHQP75SR_cjs.requireRole(["admin"]));
-userRoutes.use("/activity-logs", chunkZHQP75SR_cjs.requireRole(["admin"]));
-userRoutes.use("/activity-logs/*", chunkZHQP75SR_cjs.requireRole(["admin"]));
+userRoutes.use("*", chunkSYAUCKSD_cjs.requireAuth());
+userRoutes.use("/users/*", chunkSYAUCKSD_cjs.requireRole(["admin"]));
+userRoutes.use("/users", chunkSYAUCKSD_cjs.requireRole(["admin"]));
+userRoutes.use("/invite-user", chunkSYAUCKSD_cjs.requireRole(["admin"]));
+userRoutes.use("/resend-invitation/*", chunkSYAUCKSD_cjs.requireRole(["admin"]));
+userRoutes.use("/cancel-invitation/*", chunkSYAUCKSD_cjs.requireRole(["admin"]));
+userRoutes.use("/activity-logs", chunkSYAUCKSD_cjs.requireRole(["admin"]));
+userRoutes.use("/activity-logs/*", chunkSYAUCKSD_cjs.requireRole(["admin"]));
 userRoutes.get("/", (c) => {
   return c.redirect("/admin/dashboard");
 });
@@ -15456,7 +15462,7 @@ userRoutes.put("/profile", async (c) => {
       }
       await saveCustomData(db, user.userId, sanitized);
     }
-    await chunkZHQP75SR_cjs.logActivity(
+    await chunkSYAUCKSD_cjs.logActivity(
       db,
       user.userId,
       "profile.update",
@@ -15519,7 +15525,7 @@ userRoutes.post("/profile/avatar", async (c) => {
       SELECT first_name, last_name FROM auth_user WHERE id = ?
     `);
     const userData = await userStmt.bind(user.userId).first();
-    await chunkZHQP75SR_cjs.logActivity(
+    await chunkSYAUCKSD_cjs.logActivity(
       db,
       user.userId,
       "profile.avatar_update",
@@ -15590,7 +15596,7 @@ userRoutes.post("/profile/password", async (c) => {
         dismissible: true
       }));
     }
-    const validPassword = await chunkZHQP75SR_cjs.AuthManager.verifyPassword(currentPassword, userData.password_hash);
+    const validPassword = await chunkSYAUCKSD_cjs.AuthManager.verifyPassword(currentPassword, userData.password_hash);
     if (!validPassword) {
       return c.html(chunkN32OWET6_cjs.renderAlert({
         type: "error",
@@ -15598,7 +15604,7 @@ userRoutes.post("/profile/password", async (c) => {
         dismissible: true
       }));
     }
-    const newPasswordHash = await chunkZHQP75SR_cjs.AuthManager.hashPassword(newPassword);
+    const newPasswordHash = await chunkSYAUCKSD_cjs.AuthManager.hashPassword(newPassword);
     const historyStmt = db.prepare(`
       INSERT INTO auth_password_history (id, user_id, password_hash, created_at)
       VALUES (?, ?, ?, ?)
@@ -15614,7 +15620,7 @@ userRoutes.post("/profile/password", async (c) => {
       WHERE id = ?
     `);
     await updateStmt.bind(newPasswordHash, Date.now(), user.userId).run();
-    await chunkZHQP75SR_cjs.logActivity(
+    await chunkSYAUCKSD_cjs.logActivity(
       db,
       user.userId,
       "profile.password_change",
@@ -15681,7 +15687,7 @@ userRoutes.get("/users", async (c) => {
     `);
     const countResult = await countStmt.bind(...params).first();
     const totalUsers = countResult?.total || 0;
-    await chunkZHQP75SR_cjs.logActivity(
+    await chunkSYAUCKSD_cjs.logActivity(
       db,
       user.userId,
       "users.list_view",
@@ -15862,7 +15868,7 @@ userRoutes.post("/users/new", async (c) => {
         dismissible: true
       }));
     }
-    const passwordHash = await chunkZHQP75SR_cjs.AuthManager.hashPassword(password);
+    const passwordHash = await chunkSYAUCKSD_cjs.AuthManager.hashPassword(password);
     const userId = crypto.randomUUID();
     const createStmt = db.prepare(`
       INSERT INTO auth_user (
@@ -15887,7 +15893,7 @@ userRoutes.post("/users/new", async (c) => {
     if (sanitizedRegistrationCustom !== null && Object.keys(sanitizedRegistrationCustom).length > 0) {
       await writeProfileData(db, userId, { custom: sanitizedRegistrationCustom }, user.userId);
     }
-    await chunkZHQP75SR_cjs.logActivity(
+    await chunkSYAUCKSD_cjs.logActivity(
       db,
       user.userId,
       "user!.create",
@@ -15926,7 +15932,7 @@ userRoutes.get("/users/:id", async (c) => {
     if (!userRecord) {
       return c.json({ error: "User not found" }, 404);
     }
-    await chunkZHQP75SR_cjs.logActivity(
+    await chunkSYAUCKSD_cjs.logActivity(
       db,
       user.userId,
       "user!.view",
@@ -16140,7 +16146,7 @@ userRoutes.put("/users/:id", async (c) => {
       userId
     ).run();
     if (newPassword) {
-      const passwordHash = await chunkZHQP75SR_cjs.AuthManager.hashPassword(newPassword);
+      const passwordHash = await chunkSYAUCKSD_cjs.AuthManager.hashPassword(newPassword);
       const updatePasswordStmt = db.prepare(`
         UPDATE auth_user SET password_hash = ?, updated_at = ? WHERE id = ?
       `);
@@ -16153,7 +16159,7 @@ userRoutes.put("/users/:id", async (c) => {
         ...sanitizedCustom !== null ? { custom: sanitizedCustom } : {}
       }, user.userId);
     }
-    await chunkZHQP75SR_cjs.logActivity(
+    await chunkSYAUCKSD_cjs.logActivity(
       db,
       user.userId,
       "user.update",
@@ -16199,7 +16205,7 @@ userRoutes.post("/users/:id/toggle", async (c) => {
       UPDATE auth_user SET is_active = ?, updated_at = ? WHERE id = ?
     `);
     await toggleStmt.bind(active ? 1 : 0, Date.now(), userId).run();
-    await chunkZHQP75SR_cjs.logActivity(
+    await chunkSYAUCKSD_cjs.logActivity(
       db,
       user.userId,
       active ? "user.activate" : "user.deactivate",
@@ -16240,7 +16246,7 @@ userRoutes.delete("/users/:id", async (c) => {
         DELETE FROM auth_user WHERE id = ?
       `);
       await deleteStmt.bind(userId).run();
-      await chunkZHQP75SR_cjs.logActivity(
+      await chunkSYAUCKSD_cjs.logActivity(
         db,
         user.userId,
         "user!.hard_delete",
@@ -16259,7 +16265,7 @@ userRoutes.delete("/users/:id", async (c) => {
         UPDATE auth_user SET is_active = 0, updated_at = ? WHERE id = ?
       `);
       await deleteStmt.bind(Date.now(), userId).run();
-      await chunkZHQP75SR_cjs.logActivity(
+      await chunkSYAUCKSD_cjs.logActivity(
         db,
         user.userId,
         "user!.soft_delete",
@@ -16325,7 +16331,7 @@ userRoutes.post("/invite-user", async (c) => {
       Date.now(),
       Date.now()
     ).run();
-    await chunkZHQP75SR_cjs.logActivity(
+    await chunkSYAUCKSD_cjs.logActivity(
       db,
       user.userId,
       "user!.invite_sent",
@@ -16382,7 +16388,7 @@ userRoutes.post("/resend-invitation/:id", async (c) => {
       Date.now(),
       userId
     ).run();
-    await chunkZHQP75SR_cjs.logActivity(
+    await chunkSYAUCKSD_cjs.logActivity(
       db,
       user.userId,
       "user!.invitation_resent",
@@ -16418,7 +16424,7 @@ userRoutes.delete("/cancel-invitation/:id", async (c) => {
     }
     const deleteStmt = db.prepare(`DELETE FROM auth_user WHERE id = ?`);
     await deleteStmt.bind(userId).run();
-    await chunkZHQP75SR_cjs.logActivity(
+    await chunkSYAUCKSD_cjs.logActivity(
       db,
       user.userId,
       "user!.invitation_cancelled",
@@ -17799,7 +17805,7 @@ var fileValidationSchema2 = zod.z.object({
   // 50MB max
 });
 var adminMediaRoutes = new hono.Hono();
-adminMediaRoutes.use("*", chunkZHQP75SR_cjs.requireAuth());
+adminMediaRoutes.use("*", chunkSYAUCKSD_cjs.requireAuth());
 adminMediaRoutes.get("/", async (c) => {
   try {
     const user = c.get("user");
@@ -17841,7 +17847,7 @@ adminMediaRoutes.get("/selector", async (c) => {
     const { searchParams } = new URL(c.req.url);
     const search = searchParams.get("search") || "";
     const db = c.env.DB;
-    const pluginService = new chunkC3KSTUEA_cjs.PluginService(db);
+    const pluginService = new chunk2DSRS3VA_cjs.PluginService(db);
     const mediaPlugin = await pluginService.getPlugin("core-media");
     if (!mediaPlugin || mediaPlugin.status !== "active") {
       return c.html(html.html`
@@ -18215,7 +18221,7 @@ adminMediaRoutes.put("/:id", async (c) => {
     `);
   }
 });
-adminMediaRoutes.delete("/cleanup", chunkZHQP75SR_cjs.requireRole("admin"), async (c) => {
+adminMediaRoutes.delete("/cleanup", chunkSYAUCKSD_cjs.requireRole("admin"), async (c) => {
   try {
     const db = c.env.DB;
     const allMediaStmt = db.prepare("SELECT id, r2_key, filename FROM media WHERE deleted_at IS NULL");
@@ -20711,8 +20717,8 @@ defineUserProfile({
 
 // src/routes/admin-plugins.ts
 var adminPluginRoutes = new hono.Hono();
-adminPluginRoutes.use("*", chunkZHQP75SR_cjs.requireAuth());
-var AVAILABLE_PLUGINS = Object.values(chunkC3KSTUEA_cjs.PLUGIN_REGISTRY).map((p) => ({
+adminPluginRoutes.use("*", chunkSYAUCKSD_cjs.requireAuth());
+var AVAILABLE_PLUGINS = Object.values(chunk2DSRS3VA_cjs.PLUGIN_REGISTRY).map((p) => ({
   id: p.id,
   name: p.codeName,
   display_name: p.displayName,
@@ -20732,7 +20738,7 @@ adminPluginRoutes.get("/", async (c) => {
     if (user?.role !== "admin") {
       return c.text("Access denied", 403);
     }
-    const pluginService = new chunkC3KSTUEA_cjs.PluginService(db);
+    const pluginService = new chunk2DSRS3VA_cjs.PluginService(db);
     let installedPlugins = [];
     let stats = { total: 0, active: 0, inactive: 0, errors: 0, uninstalled: 0 };
     try {
@@ -20804,10 +20810,10 @@ adminPluginRoutes.get("/:id", async (c) => {
     if (user?.role !== "admin") {
       return c.redirect("/admin/plugins");
     }
-    const pluginService = new chunkC3KSTUEA_cjs.PluginService(db);
+    const pluginService = new chunk2DSRS3VA_cjs.PluginService(db);
     let plugin = await pluginService.getPlugin(pluginId);
     if (!plugin) {
-      const def = chunk3RNDJAZ5_cjs.getPluginDefinition(pluginId);
+      const def = chunkEHTBXFTA_cjs.getPluginDefinition(pluginId);
       if (!def) return c.text("Plugin not found", 404);
       plugin = await pluginService.ensurePlugin(pluginId, {
         displayName: def.displayName ?? pluginId,
@@ -20819,7 +20825,7 @@ adminPluginRoutes.get("/:id", async (c) => {
     const activity = await pluginService.getPluginActivity(pluginId, 20);
     let enrichedSettings = plugin.settings || {};
     if (pluginId === "otp-login") {
-      const settingsService = new chunk4BTBSXMR_cjs.SettingsService(db);
+      const settingsService = new chunk36Z3AKX3_cjs.SettingsService(db);
       const generalSettings = await settingsService.getGeneralSettings();
       const siteName = generalSettings.siteName || "SonicJS";
       const emailPlugin = await db.prepare(`
@@ -20898,14 +20904,14 @@ adminPluginRoutes.get("/:id/configure", async (c) => {
     const user = c.get("user");
     const pluginId = c.req.param("id");
     if (user?.role !== "admin") return c.redirect("/admin/plugins");
-    const def = chunk3RNDJAZ5_cjs.getPluginDefinition(pluginId);
+    const def = chunkEHTBXFTA_cjs.getPluginDefinition(pluginId);
     if (!def?.configSchema) return c.text("No schema-driven settings for this plugin", 404);
     const db = c.env.DB;
-    const pluginService = new chunkC3KSTUEA_cjs.PluginService(db);
+    const pluginService = new chunk2DSRS3VA_cjs.PluginService(db);
     const plugin = await pluginService.getPlugin(pluginId);
     const stored = plugin?.settings ?? {};
-    const values = chunk3RNDJAZ5_cjs.applySchemaDefaults(def.configSchema, stored);
-    const fieldsHtml = chunk3RNDJAZ5_cjs.renderSchemaFields(def.configSchema, values);
+    const values = chunkEHTBXFTA_cjs.applySchemaDefaults(def.configSchema, stored);
+    const fieldsHtml = chunkEHTBXFTA_cjs.renderSchemaFields(def.configSchema, values);
     const displayName = plugin?.display_name ?? def.displayName ?? def.id;
     return c.html(`<!DOCTYPE html>
 <html lang="en"><head>
@@ -20932,12 +20938,12 @@ adminPluginRoutes.post("/:id/configure", async (c) => {
     const user = c.get("user");
     const pluginId = c.req.param("id");
     if (user?.role !== "admin") return c.json({ error: "Access denied" }, 403);
-    const def = chunk3RNDJAZ5_cjs.getPluginDefinition(pluginId);
+    const def = chunkEHTBXFTA_cjs.getPluginDefinition(pluginId);
     if (!def?.configSchema) return c.text("No schema-driven settings for this plugin", 404);
     const form = await c.req.formData();
-    const parsed = chunk3RNDJAZ5_cjs.parseFormDataToSettings(def.configSchema, form);
+    const parsed = chunkEHTBXFTA_cjs.parseFormDataToSettings(def.configSchema, form);
     const db = c.env.DB;
-    const pluginService = new chunkC3KSTUEA_cjs.PluginService(db);
+    const pluginService = new chunk2DSRS3VA_cjs.PluginService(db);
     await pluginService.ensurePlugin(pluginId, {
       displayName: def.displayName ?? pluginId,
       version: def.version,
@@ -20961,7 +20967,7 @@ adminPluginRoutes.post("/:id/activate", async (c) => {
     if (user?.role !== "admin") {
       return c.json({ error: "Access denied" }, 403);
     }
-    const pluginService = new chunkC3KSTUEA_cjs.PluginService(db);
+    const pluginService = new chunk2DSRS3VA_cjs.PluginService(db);
     await pluginService.activatePlugin(pluginId);
     return c.json({ success: true });
   } catch (error) {
@@ -20978,7 +20984,7 @@ adminPluginRoutes.post("/:id/deactivate", async (c) => {
     if (user?.role !== "admin") {
       return c.json({ error: "Access denied" }, 403);
     }
-    const pluginService = new chunkC3KSTUEA_cjs.PluginService(db);
+    const pluginService = new chunk2DSRS3VA_cjs.PluginService(db);
     await pluginService.deactivatePlugin(pluginId);
     return c.json({ success: true });
   } catch (error) {
@@ -20995,8 +21001,8 @@ adminPluginRoutes.post("/install", async (c) => {
       return c.json({ error: "Access denied" }, 403);
     }
     const body = await c.req.json();
-    const pluginService = new chunkC3KSTUEA_cjs.PluginService(db);
-    const registryEntry = chunkC3KSTUEA_cjs.findPluginByCodeName(body.name) || chunkC3KSTUEA_cjs.PLUGIN_REGISTRY[body.name] || chunkC3KSTUEA_cjs.PLUGIN_REGISTRY[body.id];
+    const pluginService = new chunk2DSRS3VA_cjs.PluginService(db);
+    const registryEntry = chunk2DSRS3VA_cjs.findPluginByCodeName(body.name) || chunk2DSRS3VA_cjs.PLUGIN_REGISTRY[body.name] || chunk2DSRS3VA_cjs.PLUGIN_REGISTRY[body.id];
     if (!registryEntry) {
       return c.json({ error: "Plugin not found in registry" }, 404);
     }
@@ -21029,7 +21035,7 @@ adminPluginRoutes.post("/:id/uninstall", async (c) => {
     if (user?.role !== "admin") {
       return c.json({ error: "Access denied" }, 403);
     }
-    const pluginService = new chunkC3KSTUEA_cjs.PluginService(db);
+    const pluginService = new chunk2DSRS3VA_cjs.PluginService(db);
     await pluginService.uninstallPlugin(pluginId);
     return c.json({ success: true });
   } catch (error) {
@@ -21047,7 +21053,7 @@ adminPluginRoutes.post("/:id/settings", async (c) => {
       return c.json({ error: "Access denied" }, 403);
     }
     const settings = await c.req.json();
-    const pluginService = new chunkC3KSTUEA_cjs.PluginService(db);
+    const pluginService = new chunk2DSRS3VA_cjs.PluginService(db);
     await pluginService.updatePluginSettings(pluginId, settings);
     if (pluginId === "core-auth") {
       try {
@@ -21855,11 +21861,11 @@ function renderLogConfigPage(data) {
 
 // src/routes/admin-logs.ts
 var adminLogsRoutes = new hono.Hono();
-adminLogsRoutes.use("*", chunkZHQP75SR_cjs.requireAuth());
+adminLogsRoutes.use("*", chunkSYAUCKSD_cjs.requireAuth());
 adminLogsRoutes.get("/", async (c) => {
   try {
     const user = c.get("user");
-    const logger = chunk4BTBSXMR_cjs.getLogger(c.env.DB);
+    const logger = chunk36Z3AKX3_cjs.getLogger(c.env.DB);
     const query = c.req.query();
     const page = parseInt(query.page || "1");
     const limit = parseInt(query.limit || "50");
@@ -21939,7 +21945,7 @@ adminLogsRoutes.get("/:id", async (c) => {
   try {
     const id = c.req.param("id");
     const user = c.get("user");
-    const logger = chunk4BTBSXMR_cjs.getLogger(c.env.DB);
+    const logger = chunk36Z3AKX3_cjs.getLogger(c.env.DB);
     const { logs } = await logger.getLogs({
       limit: 1,
       offset: 0,
@@ -21976,7 +21982,7 @@ adminLogsRoutes.get("/:id", async (c) => {
 adminLogsRoutes.get("/config", async (c) => {
   try {
     const user = c.get("user");
-    const logger = chunk4BTBSXMR_cjs.getLogger(c.env.DB);
+    const logger = chunk36Z3AKX3_cjs.getLogger(c.env.DB);
     const configs = await logger.getAllConfigs();
     const pageData = {
       configs,
@@ -22000,7 +22006,7 @@ adminLogsRoutes.post("/config/:category", async (c) => {
     const level = formData.get("level");
     const retention = parseInt(formData.get("retention"));
     const maxSize = parseInt(formData.get("max_size"));
-    const logger = chunk4BTBSXMR_cjs.getLogger(c.env.DB);
+    const logger = chunk36Z3AKX3_cjs.getLogger(c.env.DB);
     await logger.updateConfig(category, {
       enabled,
       level,
@@ -22029,7 +22035,7 @@ adminLogsRoutes.get("/export", async (c) => {
     const category = query.category;
     const startDate = query.start_date;
     const endDate = query.end_date;
-    const logger = chunk4BTBSXMR_cjs.getLogger(c.env.DB);
+    const logger = chunk36Z3AKX3_cjs.getLogger(c.env.DB);
     const filter = {
       limit: 1e4,
       // Export up to 10k logs
@@ -22110,7 +22116,7 @@ adminLogsRoutes.post("/cleanup", async (c) => {
         error: "Unauthorized. Admin access required."
       }, 403);
     }
-    const logger = chunk4BTBSXMR_cjs.getLogger(c.env.DB);
+    const logger = chunk36Z3AKX3_cjs.getLogger(c.env.DB);
     await logger.cleanupByRetention();
     return c.html(html.html`
       <div class="bg-green-100 border border-green-400 text-green-700 px-4 py-3 rounded">
@@ -22132,7 +22138,7 @@ adminLogsRoutes.post("/search", async (c) => {
     const search = formData.get("search");
     const level = formData.get("level");
     const category = formData.get("category");
-    const logger = chunk4BTBSXMR_cjs.getLogger(c.env.DB);
+    const logger = chunk36Z3AKX3_cjs.getLogger(c.env.DB);
     const filter = {
       limit: 20,
       offset: 0,
@@ -22847,9 +22853,9 @@ function renderStorageUsage(databaseSizeBytes, mediaSizeBytes) {
 }
 
 // src/routes/admin-dashboard.ts
-var VERSION = chunkKDRHGEUF_cjs.getCoreVersion();
+var VERSION = chunkNZF3THNY_cjs.getCoreVersion();
 var router = new hono.Hono();
-router.use("*", chunkZHQP75SR_cjs.requireAuth());
+router.use("*", chunkSYAUCKSD_cjs.requireAuth());
 router.get("/", async (c) => {
   const user = c.get("user");
   try {
@@ -24814,7 +24820,7 @@ function renderCollectionFormPage(data) {
 // src/routes/admin-collections.ts
 chunkK623Q6WD_cjs.init_admin_layout_catalyst_template();
 var adminCollectionsRoutes = new hono.Hono();
-adminCollectionsRoutes.use("*", chunkZHQP75SR_cjs.requireAuth());
+adminCollectionsRoutes.use("*", chunkSYAUCKSD_cjs.requireAuth());
 adminCollectionsRoutes.get("/", async (c) => {
   try {
     const user = c.get("user");
@@ -24831,7 +24837,7 @@ adminCollectionsRoutes.get("/", async (c) => {
       results = queryResults.results ?? [];
     } catch (e) {
     }
-    const codeCollections = chunkC3KSTUEA_cjs.getCollectionRegistry().list();
+    const codeCollections = chunk2DSRS3VA_cjs.getCollectionRegistry().list();
     const codeCollectionsMap = new Map(
       codeCollections.map((cfg) => {
         const fieldCount = cfg.schema?.properties ? Object.keys(cfg.schema.properties).length : 0;
@@ -24845,7 +24851,7 @@ adminCollectionsRoutes.get("/", async (c) => {
           field_count: fieldCount,
           managed: cfg.managed !== false,
           source_type: "code",
-          internal: chunkC3KSTUEA_cjs.isCodeCollectionInternal(cfg),
+          internal: chunk2DSRS3VA_cjs.isCodeCollectionInternal(cfg),
           versioning: cfg.versioning === true
         }];
       })
@@ -24884,7 +24890,7 @@ adminCollectionsRoutes.get("/", async (c) => {
         field_count: fieldCount,
         managed: false,
         source_type: row.source === "code" || row.source === "system" || row.source === "plugin" ? "code" : "user",
-        internal: chunkC3KSTUEA_cjs.isDbDocTypeInternal(row.source),
+        internal: chunk2DSRS3VA_cjs.isDbDocTypeInternal(row.source),
         versioning: dbVersioning
       };
     });
@@ -25045,7 +25051,7 @@ export const myPlugin = definePlugin({
       title: "Add a Collection",
       pageTitle: "Add a Collection",
       currentPath: "/admin/collections",
-      version: chunkKDRHGEUF_cjs.getCoreVersion(),
+      version: chunkNZF3THNY_cjs.getCoreVersion(),
       user: u ? { name: u.email ?? "Admin", email: u.email ?? "", role: u.role ?? "admin" } : void 0,
       content
     })
@@ -25062,7 +25068,7 @@ adminCollectionsRoutes.get("/:id", async (c) => {
       collection = await stmt.bind(id).first();
     } catch {
     }
-    const registryRecord = chunkC3KSTUEA_cjs.getCollectionRegistry().getById(id) ?? chunkC3KSTUEA_cjs.getCollectionRegistry().getByName(id);
+    const registryRecord = chunk2DSRS3VA_cjs.getCollectionRegistry().getById(id) ?? chunk2DSRS3VA_cjs.getCollectionRegistry().getByName(id);
     if (!collection && !registryRecord) {
       const formData2 = {
         isEdit: true,
@@ -25109,9 +25115,9 @@ adminCollectionsRoutes.get("/:id", async (c) => {
       isCodeDriven = true;
     }
     const [tinymceActive, quillActive, mdxeditorActive] = await Promise.all([
-      chunkZHQP75SR_cjs.isPluginActive(db, "tinymce-plugin"),
-      chunkZHQP75SR_cjs.isPluginActive(db, "quill-editor"),
-      chunkZHQP75SR_cjs.isPluginActive(db, "easy-mdx")
+      chunkSYAUCKSD_cjs.isPluginActive(db, "tinymce-plugin"),
+      chunkSYAUCKSD_cjs.isPluginActive(db, "quill-editor"),
+      chunkSYAUCKSD_cjs.isPluginActive(db, "easy-mdx")
     ]);
     const displayName = collection?.display_name ?? registryRecord?.displayName ?? id;
     const formData = {
@@ -25131,9 +25137,9 @@ adminCollectionsRoutes.get("/:id", async (c) => {
     console.error("Error fetching collection:", error);
     const user = c.get("user");
     const [tinymceActive, quillActive, mdxeditorActive] = await Promise.all([
-      chunkZHQP75SR_cjs.isPluginActive(db, "tinymce-plugin"),
-      chunkZHQP75SR_cjs.isPluginActive(db, "quill-editor"),
-      chunkZHQP75SR_cjs.isPluginActive(db, "easy-mdx")
+      chunkSYAUCKSD_cjs.isPluginActive(db, "tinymce-plugin"),
+      chunkSYAUCKSD_cjs.isPluginActive(db, "quill-editor"),
+      chunkSYAUCKSD_cjs.isPluginActive(db, "easy-mdx")
     ]);
     const formData = {
       isEdit: true,
@@ -26082,7 +26088,7 @@ function renderDatabaseToolsSettings(settings) {
 
 // src/routes/admin-settings.ts
 var adminSettingsRoutes = new hono.Hono();
-adminSettingsRoutes.use("*", chunkZHQP75SR_cjs.requireAuth());
+adminSettingsRoutes.use("*", chunkSYAUCKSD_cjs.requireAuth());
 function getMockSettings(user) {
   return {
     general: {
@@ -26116,7 +26122,7 @@ adminSettingsRoutes.get("/", (c) => {
 adminSettingsRoutes.get("/general", async (c) => {
   const user = c.get("user");
   const db = c.env.DB;
-  const settingsService = new chunk4BTBSXMR_cjs.SettingsService(db);
+  const settingsService = new chunk36Z3AKX3_cjs.SettingsService(db);
   const generalSettings = await settingsService.getGeneralSettings(user?.email);
   const mockSettings = getMockSettings(user);
   mockSettings.general = generalSettings;
@@ -26135,7 +26141,7 @@ adminSettingsRoutes.get("/general", async (c) => {
 adminSettingsRoutes.get("/security", async (c) => {
   const user = c.get("user");
   const db = c.env.DB;
-  const settingsService = new chunk4BTBSXMR_cjs.SettingsService(db);
+  const settingsService = new chunk36Z3AKX3_cjs.SettingsService(db);
   const persisted = await settingsService.getSecuritySettings();
   const mockSettings = getMockSettings(user);
   mockSettings.security = {
@@ -26185,7 +26191,7 @@ adminSettingsRoutes.get("/database-tools", (c) => {
 adminSettingsRoutes.get("/api/migrations/status", async (c) => {
   try {
     const db = c.env.DB;
-    const migrationService = new chunk7YMMCIWY_cjs.MigrationService(db);
+    const migrationService = new chunkIDMHRCZS_cjs.MigrationService(db);
     const status = await migrationService.getMigrationStatus();
     return c.json({
       success: true,
@@ -26225,7 +26231,7 @@ adminSettingsRoutes.post("/api/migrations/run", async (c) => {
 adminSettingsRoutes.get("/api/migrations/validate", async (c) => {
   try {
     const db = c.env.DB;
-    const migrationService = new chunk7YMMCIWY_cjs.MigrationService(db);
+    const migrationService = new chunkIDMHRCZS_cjs.MigrationService(db);
     const validation = await migrationService.validateSchema();
     return c.json({
       success: true,
@@ -26394,7 +26400,7 @@ adminSettingsRoutes.post("/general", async (c) => {
     }
     const formData = await c.req.formData();
     const db = c.env.DB;
-    const settingsService = new chunk4BTBSXMR_cjs.SettingsService(db);
+    const settingsService = new chunk36Z3AKX3_cjs.SettingsService(db);
     const settings = {
       siteName: formData.get("siteName"),
       siteDescription: formData.get("siteDescription"),
@@ -26440,7 +26446,7 @@ adminSettingsRoutes.post("/security", async (c) => {
     }
     const formData = await c.req.formData();
     const db = c.env.DB;
-    const settingsService = new chunk4BTBSXMR_cjs.SettingsService(db);
+    const settingsService = new chunk36Z3AKX3_cjs.SettingsService(db);
     const jwtExpiresInRaw = formData.get("jwtExpiresIn")?.trim() || "";
     const graceRaw = formData.get("jwtRefreshGraceSeconds")?.trim() || "";
     if (!/^\d+(?:s|m|h|d)?$/i.test(jwtExpiresInRaw)) {
@@ -26624,7 +26630,7 @@ function renderAPIReferencePage(data) {
                 >
                   <option value="">All Categories</option>
                   ${categories.map((category) => {
-    const info = chunk4BTBSXMR_cjs.CATEGORY_INFO[category];
+    const info = chunk36Z3AKX3_cjs.CATEGORY_INFO[category];
     const title = info ? info.title : category;
     return `<option value="${category}">${title}</option>`;
   }).join("\n                  ")}
@@ -26641,7 +26647,7 @@ function renderAPIReferencePage(data) {
       <!-- API Categories -->
       <div class="space-y-6">
         ${Object.entries(endpointsByCategory).map(([category, endpoints]) => {
-    const info = chunk4BTBSXMR_cjs.CATEGORY_INFO[category] || { title: category, description: "", icon: "&#x1f4cb;" };
+    const info = chunk36Z3AKX3_cjs.CATEGORY_INFO[category] || { title: category, description: "", icon: "&#x1f4cb;" };
     return `
             <div class="api-category" data-category="${category}">
               <div class="rounded-lg bg-white dark:bg-zinc-900 shadow-sm ring-1 ring-zinc-950/5 dark:ring-white/10 overflow-hidden">
@@ -26818,16 +26824,16 @@ function renderAPIReferencePage(data) {
 }
 
 // src/routes/admin-api-reference.ts
-var VERSION2 = chunkKDRHGEUF_cjs.getCoreVersion();
+var VERSION2 = chunkNZF3THNY_cjs.getCoreVersion();
 var router2 = new hono.Hono();
-router2.use("*", chunkZHQP75SR_cjs.requireAuth());
+router2.use("*", chunkSYAUCKSD_cjs.requireAuth());
 router2.get("/", async (c) => {
   const user = c.get("user");
   try {
-    const app2 = chunk4BTBSXMR_cjs.getAppInstance();
-    const baseEndpoints = chunk4BTBSXMR_cjs.buildRouteList(app2);
+    const app2 = chunk36Z3AKX3_cjs.getAppInstance();
+    const baseEndpoints = chunk36Z3AKX3_cjs.buildRouteList(app2);
     const collectionRoutes = [];
-    const collections = chunkC3KSTUEA_cjs.getCollectionRegistry().listActive().filter((r) => !r.internal);
+    const collections = chunk2DSRS3VA_cjs.getCollectionRegistry().listActive().filter((r) => !r.internal);
     const methodOrder = { GET: 0, POST: 1, PUT: 2, PATCH: 3, DELETE: 4 };
     for (const col of collections) {
       const displayName = col.displayName || col.name;
@@ -26944,5 +26950,5 @@ exports.setVariablesCache = setVariablesCache;
 exports.test_cleanup_default = test_cleanup_default;
 exports.userProfilesPlugin = userProfilesPlugin;
 exports.userRoutes = userRoutes;
-//# sourceMappingURL=chunk-NOBU34HS.cjs.map
-//# sourceMappingURL=chunk-NOBU34HS.cjs.map
+//# sourceMappingURL=chunk-JJ6HE4J4.cjs.map
+//# sourceMappingURL=chunk-JJ6HE4J4.cjs.map