@sonicjs-cms/core 3.0.0-beta.22 → 3.0.0-beta.24

package/dist/index.cjs

@@ -1,27 +1,27 @@
 'use strict';
 
 var chunkGMMCCIQO_cjs = require('./chunk-GMMCCIQO.cjs');
-var chunkJFLZHOQP_cjs = require('./chunk-JFLZHOQP.cjs');
+var chunkI767LVN7_cjs = require('./chunk-I767LVN7.cjs');
 require('./chunk-XWVDSM2L.cjs');
-require('./chunk-N32OWET6.cjs');
+require('./chunk-JMJM7DMM.cjs');
 var chunk36Z3AKX3_cjs = require('./chunk-36Z3AKX3.cjs');
 var chunkYA3TJ65D_cjs = require('./chunk-YA3TJ65D.cjs');
 var chunkYP7GW2G5_cjs = require('./chunk-YP7GW2G5.cjs');
-var chunkFTXGZ3BF_cjs = require('./chunk-FTXGZ3BF.cjs');
+var chunk37V3RET3_cjs = require('./chunk-37V3RET3.cjs');
 var chunkLTZ5WYOK_cjs = require('./chunk-LTZ5WYOK.cjs');
 var chunkKIGVVO6N_cjs = require('./chunk-KIGVVO6N.cjs');
-var chunkPYZYU7EK_cjs = require('./chunk-PYZYU7EK.cjs');
-var chunk3CT3SUR4_cjs = require('./chunk-3CT3SUR4.cjs');
-var chunkCRGUD4KC_cjs = require('./chunk-CRGUD4KC.cjs');
-var chunkPXNTCCPE_cjs = require('./chunk-PXNTCCPE.cjs');
-var chunkK623Q6WD_cjs = require('./chunk-K623Q6WD.cjs');
-var chunkMGHHPNJN_cjs = require('./chunk-MGHHPNJN.cjs');
-var chunkEUJAEB6W_cjs = require('./chunk-EUJAEB6W.cjs');
+var chunkQCJHCSOK_cjs = require('./chunk-QCJHCSOK.cjs');
+var chunkA2SN3RVL_cjs = require('./chunk-A2SN3RVL.cjs');
+var chunkBBEKHLTW_cjs = require('./chunk-BBEKHLTW.cjs');
+var chunkE66UVONV_cjs = require('./chunk-E66UVONV.cjs');
+var chunkUYJQDDEE_cjs = require('./chunk-UYJQDDEE.cjs');
+var chunkQJUJNTIU_cjs = require('./chunk-QJUJNTIU.cjs');
+var chunkBP52BFIV_cjs = require('./chunk-BP52BFIV.cjs');
 var chunkJ6JTWD2A_cjs = require('./chunk-J6JTWD2A.cjs');
 var chunkIXUHXTHW_cjs = require('./chunk-IXUHXTHW.cjs');
 var chunkRCQ2HIQD_cjs = require('./chunk-RCQ2HIQD.cjs');
 require('./chunk-P3XDZL6Q.cjs');
-var chunkQWSR4THH_cjs = require('./chunk-QWSR4THH.cjs');
+var chunkKKNEYIZJ_cjs = require('./chunk-KKNEYIZJ.cjs');
 var chunkMNWKYY5E_cjs = require('./chunk-MNWKYY5E.cjs');
 var chunkQTFKZBLC_cjs = require('./chunk-QTFKZBLC.cjs');
 require('./chunk-IGJUBJBW.cjs');
@@ -263,7 +263,7 @@ var DatabaseToolsService = class {
 };
 
 // src/templates/pages/admin-database-table.template.ts
-chunkK623Q6WD_cjs.init_admin_layout_catalyst_template();
+chunkUYJQDDEE_cjs.init_admin_layout_catalyst_template();
 function renderDatabaseTablePage(data) {
   const totalPages = Math.ceil(data.totalRows / data.pageSize);
   const startRow = (data.currentPage - 1) * data.pageSize + 1;
@@ -613,7 +613,7 @@ function renderDatabaseTablePage(data) {
     user: data.user,
     content: pageContent
   };
-  return chunkK623Q6WD_cjs.renderAdminLayoutCatalyst(layoutData);
+  return chunkUYJQDDEE_cjs.renderAdminLayoutCatalyst(layoutData);
 }
 function generatePageNumbers(currentPage, totalPages) {
   const pages = [];
@@ -701,7 +701,7 @@ function formatCellValue(value, colName) {
 // src/plugins/core-plugins/database-tools-plugin/admin-routes.ts
 function createDatabaseToolsAdminRoutes() {
   const router3 = new hono.Hono();
-  router3.use("*", chunkFTXGZ3BF_cjs.requireAuth());
+  router3.use("*", chunk37V3RET3_cjs.requireAuth());
   router3.get("/api/stats", async (c) => {
     try {
       const user = c.get("user");
@@ -1110,7 +1110,7 @@ var SiteConfigService = class {
 
 // src/plugins/core-plugins/email-plugin/routes/admin.ts
 var adminRoutes = new hono.Hono();
-adminRoutes.use("*", chunkFTXGZ3BF_cjs.requireAuth());
+adminRoutes.use("*", chunk37V3RET3_cjs.requireAuth());
 adminRoutes.post("/settings", async (c) => {
   if (c.get("user")?.role !== "admin") {
     return c.json({ error: "admin role required" }, 403);
@@ -1148,7 +1148,7 @@ adminRoutes.post("/test", async (c) => {
   const { subject, html: html4, text } = renderTestEmail({ siteName });
   try {
     const settingsLoaded = await settings.load();
-    const result = await chunkJFLZHOQP_cjs.getEmailService().send({
+    const result = await chunkI767LVN7_cjs.getEmailService().send({
       to,
       subject,
       html: html4,
@@ -1230,7 +1230,7 @@ function makeOnRegistrationCompleted(env) {
       siteName,
       loginUrl: siteConfig.buildLoginUrl(siteUrl)
     });
-    const result = await chunkJFLZHOQP_cjs.getEmailService().send({
+    const result = await chunkI767LVN7_cjs.getEmailService().send({
       to: user.email,
       subject,
       html: html4,
@@ -1304,7 +1304,7 @@ function makeOnPasswordResetRequested(env) {
       expiresAt: Date.now() + DEFAULT_EXPIRY_MS,
       siteName
     });
-    const result = await chunkJFLZHOQP_cjs.getEmailService().send({
+    const result = await chunkI767LVN7_cjs.getEmailService().send({
       to: user.email,
       subject,
       html: html4,
@@ -1372,7 +1372,7 @@ function makeOnPasswordResetCompleted(env) {
       supportEmail,
       when: Date.now()
     });
-    const result = await chunkJFLZHOQP_cjs.getEmailService().send({
+    const result = await chunkI767LVN7_cjs.getEmailService().send({
       to: user.email,
       subject,
       html: html4,
@@ -2113,7 +2113,7 @@ var CloudflareEmailProvider = class {
     }
   }
 };
-var emailPluginV3 = chunkEUJAEB6W_cjs.definePlugin({
+var emailPluginV3 = chunkBP52BFIV_cjs.definePlugin({
   id: "email",
   version: "1.0.0",
   name: "Email",
@@ -2127,7 +2127,7 @@ var emailPluginV3 = chunkEUJAEB6W_cjs.definePlugin({
     const db = env.DB;
     if (db) {
       try {
-        const typeRegistry = new chunkFTXGZ3BF_cjs.DocumentTypeRegistry(db);
+        const typeRegistry = new chunk37V3RET3_cjs.DocumentTypeRegistry(db);
         await typeRegistry.register({
           id: "email_log",
           name: "email_log",
@@ -2142,7 +2142,7 @@ var emailPluginV3 = chunkEUJAEB6W_cjs.definePlugin({
       } catch {
       }
     }
-    if (!chunkJFLZHOQP_cjs.hasEmailService()) {
+    if (!chunkI767LVN7_cjs.hasEmailService()) {
       const settings = db ? await new EmailSettingsService(db).load() : {};
       const envResendKey = typeof env.RESEND_API_KEY === "string" && env.RESEND_API_KEY ? env.RESEND_API_KEY : void 0;
       const cfEmailBinding = env.EMAIL;
@@ -2160,7 +2160,7 @@ var emailPluginV3 = chunkEUJAEB6W_cjs.definePlugin({
       } else {
         provider = resolveEmailProvider({ env });
       }
-      chunkJFLZHOQP_cjs.setEmailService(new EmailService({ ...serviceOpts, provider }));
+      chunkI767LVN7_cjs.setEmailService(new EmailService({ ...serviceOpts, provider }));
     }
     ctx.hooks.on("auth:registration:completed", makeOnRegistrationCompleted(env));
     ctx.hooks.on("auth:password-reset:requested", makeOnPasswordResetRequested(env));
@@ -2171,7 +2171,7 @@ var emailPluginV3 = chunkEUJAEB6W_cjs.definePlugin({
 var BATCH_SIZE = 100;
 ({
   schema: zod.z.record(zod.z.string(), zod.z.unknown())});
-var emailReconciliationPlugin = chunkEUJAEB6W_cjs.definePlugin({
+var emailReconciliationPlugin = chunkBP52BFIV_cjs.definePlugin({
   id: "email-reconciliation",
   version: "1.0.0",
   description: "Hourly cron that backfills email delivery state from provider status APIs. Only active for providers that implement EmailProvider.reconcile().",
@@ -2192,11 +2192,11 @@ var emailReconciliationPlugin = chunkEUJAEB6W_cjs.definePlugin({
       console.warn("[email-reconciliation] No DB binding in cron env \u2014 skipping.");
       return;
     }
-    if (!chunkJFLZHOQP_cjs.hasEmailService()) {
+    if (!chunkI767LVN7_cjs.hasEmailService()) {
       console.warn("[email-reconciliation] EmailService not initialized \u2014 skipping.");
       return;
     }
-    const emailService = chunkJFLZHOQP_cjs.getEmailService();
+    const emailService = chunkI767LVN7_cjs.getEmailService();
     let rows = [];
     try {
       const result = await db.prepare(
@@ -2683,8 +2683,8 @@ function buildOtpApi() {
           loginUrl: settings.loginUrl || "",
           loginButtonText: settings.loginButtonText || ""
         });
-        if (chunkJFLZHOQP_cjs.hasEmailService()) {
-          const sent = await chunkJFLZHOQP_cjs.getEmailService().send({
+        if (chunkI767LVN7_cjs.hasEmailService()) {
+          const sent = await chunkI767LVN7_cjs.getEmailService().send({
             to: normalizedEmail,
             subject: `Your login code for ${siteName}`,
             flow: "otp",
@@ -2786,21 +2786,21 @@ function buildOtpApi() {
           error: "Account is deactivated"
         }, 403);
       }
-      const tokenTtl = await chunkFTXGZ3BF_cjs.getJwtExpirySecondsFromDb(db, c.env);
-      const token = await chunkFTXGZ3BF_cjs.AuthManager.generateToken(user.id, user.email, user.role, c.env.JWT_SECRET, tokenTtl);
+      const tokenTtl = await chunk37V3RET3_cjs.getJwtExpirySecondsFromDb(db, c.env);
+      const token = await chunk37V3RET3_cjs.AuthManager.generateToken(user.id, user.email, user.role, c.env.JWT_SECRET, tokenTtl);
       cookie.setCookie(c, "auth_token", token, {
         httpOnly: true,
         secure: true,
         sameSite: "Strict",
         maxAge: tokenTtl
       });
-      chunkJFLZHOQP_cjs.dispatchHookEvent(
+      chunkI767LVN7_cjs.dispatchHookEvent(
         c,
         "auth:otp:verified",
         { user: { id: user.id, email: user.email, role: user.role } },
         "fire-and-forget"
       );
-      const customData = await chunkJFLZHOQP_cjs.getCustomData(db, user.id);
+      const customData = await chunkI767LVN7_cjs.getCustomData(db, user.id);
       const { is_active: _isActive, ...publicUser } = user;
       return c.json({
         success: true,
@@ -2845,7 +2845,7 @@ function buildOtpApi() {
   });
   return otpAPI;
 }
-var otpLoginPlugin = chunkEUJAEB6W_cjs.definePlugin({
+var otpLoginPlugin = chunkBP52BFIV_cjs.definePlugin({
   id: "otp-login",
   version: "1.0.0",
   name: "OTP Login",
@@ -3243,15 +3243,15 @@ function buildOauthApi() {
         if (!user || !user.is_active) {
           return c.redirect("/auth/login?error=Account is deactivated");
         }
-        const tokenTtl2 = await chunkFTXGZ3BF_cjs.getJwtExpirySecondsFromDb(c.env.DB, c.env);
-        const jwt2 = await chunkFTXGZ3BF_cjs.AuthManager.generateToken(
+        const tokenTtl2 = await chunk37V3RET3_cjs.getJwtExpirySecondsFromDb(c.env.DB, c.env);
+        const jwt2 = await chunk37V3RET3_cjs.AuthManager.generateToken(
           user.id,
           user.email,
           user.role,
           c.env.JWT_SECRET,
           tokenTtl2
         );
-        chunkFTXGZ3BF_cjs.AuthManager.setAuthCookie(c, jwt2, { sameSite: "Lax", maxAge: tokenTtl2 });
+        chunk37V3RET3_cjs.AuthManager.setAuthCookie(c, jwt2, { sameSite: "Lax", maxAge: tokenTtl2 });
         return c.redirect("/admin");
       }
       const existingUser = await oauthService.findUserByEmail(profile.email);
@@ -3268,15 +3268,15 @@ function buildOauthApi() {
           tokenExpiresAt: tokenExpiresAt ?? void 0,
           profileData: JSON.stringify(profile)
         });
-        const tokenTtl2 = await chunkFTXGZ3BF_cjs.getJwtExpirySecondsFromDb(c.env.DB, c.env);
-        const jwt2 = await chunkFTXGZ3BF_cjs.AuthManager.generateToken(
+        const tokenTtl2 = await chunk37V3RET3_cjs.getJwtExpirySecondsFromDb(c.env.DB, c.env);
+        const jwt2 = await chunk37V3RET3_cjs.AuthManager.generateToken(
           existingUser.id,
           existingUser.email,
           existingUser.role,
           c.env.JWT_SECRET,
           tokenTtl2
         );
-        chunkFTXGZ3BF_cjs.AuthManager.setAuthCookie(c, jwt2, { sameSite: "Lax", maxAge: tokenTtl2 });
+        chunk37V3RET3_cjs.AuthManager.setAuthCookie(c, jwt2, { sameSite: "Lax", maxAge: tokenTtl2 });
         return c.redirect("/admin");
       }
       const newUserId = await oauthService.createUserFromOAuth(profile);
@@ -3289,15 +3289,15 @@ function buildOauthApi() {
         tokenExpiresAt: tokenExpiresAt ?? void 0,
         profileData: JSON.stringify(profile)
       });
-      const tokenTtl = await chunkFTXGZ3BF_cjs.getJwtExpirySecondsFromDb(c.env.DB, c.env);
-      const jwt = await chunkFTXGZ3BF_cjs.AuthManager.generateToken(
+      const tokenTtl = await chunk37V3RET3_cjs.getJwtExpirySecondsFromDb(c.env.DB, c.env);
+      const jwt = await chunk37V3RET3_cjs.AuthManager.generateToken(
         newUserId,
         profile.email.toLowerCase(),
         "viewer",
         c.env.JWT_SECRET,
         tokenTtl
       );
-      chunkFTXGZ3BF_cjs.AuthManager.setAuthCookie(c, jwt, { sameSite: "Lax", maxAge: tokenTtl });
+      chunk37V3RET3_cjs.AuthManager.setAuthCookie(c, jwt, { sameSite: "Lax", maxAge: tokenTtl });
       return c.redirect("/admin");
     } catch (error) {
       console.error("OAuth callback error:", error);
@@ -3392,7 +3392,7 @@ function buildOauthApi() {
   });
   return oauthAPI;
 }
-var oauthProvidersPlugin = chunkEUJAEB6W_cjs.definePlugin({
+var oauthProvidersPlugin = chunkBP52BFIV_cjs.definePlugin({
   id: "oauth-providers",
   version: "1.0.0",
   name: "OAuth Providers",
@@ -3976,7 +3976,7 @@ var AISearchService = class {
    */
   async detectNewCollections() {
     try {
-      const allCollections = chunkPYZYU7EK_cjs.getCollectionRegistry().listActive().filter((r) => !r.internal).map((r) => ({
+      const allCollections = chunkQCJHCSOK_cjs.getCollectionRegistry().listActive().filter((r) => !r.internal).map((r) => ({
         id: r.id,
         name: r.name,
         display_name: r.displayName,
@@ -4028,7 +4028,7 @@ var AISearchService = class {
    */
   async getAllCollections() {
     try {
-      const allCollections = chunkPYZYU7EK_cjs.getCollectionRegistry().listActive().filter((r) => !r.internal).sort((a, b) => a.displayName.localeCompare(b.displayName)).map((r) => ({
+      const allCollections = chunkQCJHCSOK_cjs.getCollectionRegistry().listActive().filter((r) => !r.internal).sort((a, b) => a.displayName.localeCompare(b.displayName)).map((r) => ({
         id: r.id,
         name: r.name,
         display_name: r.displayName,
@@ -4367,7 +4367,7 @@ var IndexManager = class {
    */
   async indexCollection(collectionId) {
     try {
-      const registry = chunkPYZYU7EK_cjs.getCollectionRegistry();
+      const registry = chunkQCJHCSOK_cjs.getCollectionRegistry();
       const record = registry.getById(collectionId) ?? registry.getByName(collectionId);
       if (!record) {
         throw new Error(`Collection ${collectionId} not found`);
@@ -4983,7 +4983,7 @@ function renderSettingsPage(data) {
       }, 30000);
     </script>
   `;
-  return chunkPXNTCCPE_cjs.renderAdminLayout({
+  return chunkE66UVONV_cjs.renderAdminLayout({
     title: "AI Search Settings",
     pageTitle: "AI Search Settings",
     currentPath: "/admin/plugins/ai-search/settings",
@@ -4994,7 +4994,7 @@ function renderSettingsPage(data) {
 
 // src/plugins/core-plugins/ai-search-plugin/routes/admin.ts
 var adminRoutes2 = new hono.Hono();
-adminRoutes2.use("*", chunkFTXGZ3BF_cjs.requireAuth());
+adminRoutes2.use("*", chunk37V3RET3_cjs.requireAuth());
 adminRoutes2.get("/", async (c) => {
   try {
     const user = c.get("user");
@@ -5235,7 +5235,7 @@ var manifest_default = {
   author: "SonicJS"};
 
 // src/plugins/core-plugins/ai-search-plugin/index.ts
-var aiSearchPlugin = chunkEUJAEB6W_cjs.definePlugin({
+var aiSearchPlugin = chunkBP52BFIV_cjs.definePlugin({
   id: manifest_default.id,
   version: manifest_default.version,
   name: manifest_default.name,
@@ -5536,7 +5536,7 @@ function rowToEvent(row) {
 }
 
 // src/plugins/core-plugins/security-audit-plugin/components/dashboard-page.ts
-chunkK623Q6WD_cjs.init_admin_layout_catalyst_template();
+chunkUYJQDDEE_cjs.init_admin_layout_catalyst_template();
 function formatTimestamp(ts) {
   const date = new Date(ts);
   const now = Date.now();
@@ -5735,11 +5735,11 @@ function renderSecurityDashboard(data) {
     version,
     dynamicMenuItems
   };
-  return chunkK623Q6WD_cjs.renderAdminLayoutCatalyst(layoutData);
+  return chunkUYJQDDEE_cjs.renderAdminLayoutCatalyst(layoutData);
 }
 
 // src/plugins/core-plugins/security-audit-plugin/components/event-log-page.ts
-chunkK623Q6WD_cjs.init_admin_layout_catalyst_template();
+chunkUYJQDDEE_cjs.init_admin_layout_catalyst_template();
 function formatTimestamp2(ts) {
   const date = new Date(ts);
   return date.toLocaleDateString("en-US", {
@@ -5946,11 +5946,11 @@ function renderEventLogPage(data) {
     version,
     dynamicMenuItems
   };
-  return chunkK623Q6WD_cjs.renderAdminLayoutCatalyst(layoutData);
+  return chunkUYJQDDEE_cjs.renderAdminLayoutCatalyst(layoutData);
 }
 
 // src/plugins/core-plugins/security-audit-plugin/components/settings-page.ts
-chunkK623Q6WD_cjs.init_admin_layout_catalyst_template();
+chunkUYJQDDEE_cjs.init_admin_layout_catalyst_template();
 function renderSecuritySettingsPage(data) {
   const { settings, user, version, message, dynamicMenuItems } = data;
   const content2 = `
@@ -6103,12 +6103,12 @@ function renderSecuritySettingsPage(data) {
     version,
     dynamicMenuItems
   };
-  return chunkK623Q6WD_cjs.renderAdminLayoutCatalyst(layoutData);
+  return chunkUYJQDDEE_cjs.renderAdminLayoutCatalyst(layoutData);
 }
 
 // src/plugins/core-plugins/security-audit-plugin/routes/admin.ts
 var adminRoutes3 = new hono.Hono();
-adminRoutes3.use("*", chunkFTXGZ3BF_cjs.requireAuth());
+adminRoutes3.use("*", chunk37V3RET3_cjs.requireAuth());
 adminRoutes3.use("*", async (c, next) => {
   const user = c.get("user");
   if (user?.role !== "admin") {
@@ -6118,7 +6118,7 @@ adminRoutes3.use("*", async (c, next) => {
 });
 async function getSettings(db) {
   try {
-    const pluginService = new chunkPYZYU7EK_cjs.PluginService(db);
+    const pluginService = new chunkQCJHCSOK_cjs.PluginService(db);
     const plugin2 = await pluginService.getPlugin("security-audit");
     if (plugin2?.settings) {
       const settings = typeof plugin2.settings === "string" ? JSON.parse(plugin2.settings) : plugin2.settings;
@@ -6223,7 +6223,7 @@ adminRoutes3.post("/settings", async (c) => {
       autoPurge: body["retention.autoPurge"] === "true"
     }
   };
-  const pluginService = new chunkPYZYU7EK_cjs.PluginService(db);
+  const pluginService = new chunkQCJHCSOK_cjs.PluginService(db);
   await pluginService.updatePluginSettings("security-audit", settings);
   if (c.req.header("HX-Request")) {
     return c.json({ success: true });
@@ -6385,7 +6385,7 @@ var BruteForceDetector = class {
 
 // src/plugins/core-plugins/security-audit-plugin/routes/api.ts
 var apiRoutes2 = new hono.Hono();
-apiRoutes2.use("*", chunkFTXGZ3BF_cjs.requireAuth());
+apiRoutes2.use("*", chunk37V3RET3_cjs.requireAuth());
 apiRoutes2.use("*", async (c, next) => {
   const user = c.get("user");
   if (user?.role !== "admin") {
@@ -6395,7 +6395,7 @@ apiRoutes2.use("*", async (c, next) => {
 });
 async function getSettings2(db) {
   try {
-    const pluginService = new chunkPYZYU7EK_cjs.PluginService(db);
+    const pluginService = new chunkQCJHCSOK_cjs.PluginService(db);
     const plugin2 = await pluginService.getPlugin("security-audit");
     if (plugin2?.settings) {
       const settings = typeof plugin2.settings === "string" ? JSON.parse(plugin2.settings) : plugin2.settings;
@@ -6543,7 +6543,7 @@ function generateFingerprint(ip, userAgent) {
 }
 async function getPluginSettings(db) {
   try {
-    const pluginService = new chunkPYZYU7EK_cjs.PluginService(db);
+    const pluginService = new chunkQCJHCSOK_cjs.PluginService(db);
     const plugin2 = await pluginService.getPlugin("security-audit");
     if (plugin2?.settings) {
       const settings = typeof plugin2.settings === "string" ? JSON.parse(plugin2.settings) : plugin2.settings;
@@ -6774,7 +6774,7 @@ async function logAuthEvent(c, db, settings, ip, userAgent, countryCode, fingerp
 
 // src/plugins/core-plugins/security-audit-plugin/index.ts
 var SECURITY_ICON = `<svg class="h-5 w-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 12l2 2 4-4m5.618-4.016A11.955 11.955 0 0112 2.944a11.955 11.955 0 01-8.618 3.04A12.02 12.02 0 003 9c0 5.591 3.824 10.29 9 11.622 5.176-1.332 9-6.03 9-11.622 0-1.042-.133-2.052-.382-3.016z"/></svg>`;
-var securityAuditPlugin = chunkEUJAEB6W_cjs.definePlugin({
+var securityAuditPlugin = chunkBP52BFIV_cjs.definePlugin({
   id: "security-audit",
   version: "1.0.0",
   name: "Security Audit",
@@ -6850,7 +6850,7 @@ var ApiKeyService = class {
     const prefix = secret.slice(0, DISPLAY_PREFIX_LEN);
     const expiresAt = input.expiresAt ?? null;
     const doc = await this.docService().create(
-      chunkJFLZHOQP_cjs.createDocumentSchema.parse({
+      chunkI767LVN7_cjs.createDocumentSchema.parse({
         typeId: "api_key",
         tenantId: this.tenantId,
         title: name,
@@ -6943,7 +6943,7 @@ var ApiKeyService = class {
 };
 
 // src/plugins/core-plugins/api-keys-plugin/components/keys-page.ts
-chunkK623Q6WD_cjs.init_admin_layout_catalyst_template();
+chunkUYJQDDEE_cjs.init_admin_layout_catalyst_template();
 function fmtDate(ms) {
   if (!ms) return "\u2014";
   try {
@@ -7144,7 +7144,7 @@ function renderApiKeysPage(data) {
     version,
     dynamicMenuItems
   };
-  return chunkK623Q6WD_cjs.renderAdminLayoutCatalyst(layoutData);
+  return chunkUYJQDDEE_cjs.renderAdminLayoutCatalyst(layoutData);
 }
 
 // src/plugins/core-plugins/api-keys-plugin/types.ts
@@ -7163,7 +7163,7 @@ var createSchema = zod.z.object({
 });
 async function getSettings3(db) {
   try {
-    const plugin2 = await new chunkPYZYU7EK_cjs.PluginService(db).getPlugin("api-keys");
+    const plugin2 = await new chunkQCJHCSOK_cjs.PluginService(db).getPlugin("api-keys");
     if (plugin2?.settings) {
       const s = typeof plugin2.settings === "string" ? JSON.parse(plugin2.settings) : plugin2.settings;
       return { ...DEFAULT_SETTINGS3, ...s };
@@ -7172,7 +7172,7 @@ async function getSettings3(db) {
   }
   return DEFAULT_SETTINGS3;
 }
-adminRoutes4.use("*", chunkFTXGZ3BF_cjs.requireAuth());
+adminRoutes4.use("*", chunk37V3RET3_cjs.requireAuth());
 adminRoutes4.use("*", async (c, next) => {
   const user = c.get("user");
   if (user?.role !== "admin") {
@@ -7257,7 +7257,7 @@ function apiKeyAuthMiddleware() {
 
 // src/plugins/core-plugins/api-keys-plugin/index.ts
 var KEY_ICON = `<svg class="h-5 w-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M15 7a2 2 0 012 2m4 0a6 6 0 01-7.743 5.743L11 17H9v2H7v2H4a1 1 0 01-1-1v-2.586a1 1 0 01.293-.707l5.964-5.964A6 6 0 1121 9z"/></svg>`;
-var apiKeysPlugin = chunkEUJAEB6W_cjs.definePlugin({
+var apiKeysPlugin = chunkBP52BFIV_cjs.definePlugin({
   id: "api-keys",
   version: "1.0.0-beta.1",
   name: "API Keys",
@@ -7643,7 +7643,7 @@ var StripeEventService = class {
 };
 
 // src/plugins/core-plugins/stripe-plugin/components/subscriptions-page.ts
-chunkK623Q6WD_cjs.init_admin_layout_catalyst_template();
+chunkUYJQDDEE_cjs.init_admin_layout_catalyst_template();
 
 // src/plugins/core-plugins/stripe-plugin/components/tab-bar.ts
 var TABS = [
@@ -7776,7 +7776,7 @@ function renderSubscriptionsPage(data) {
     version,
     dynamicMenuItems
   };
-  return chunkK623Q6WD_cjs.renderAdminLayoutCatalyst(layoutData);
+  return chunkUYJQDDEE_cjs.renderAdminLayoutCatalyst(layoutData);
 }
 function statsCard(label, value, colorClass) {
   return `
@@ -7856,7 +7856,7 @@ function renderPagination2(page, totalPages, status) {
 }
 
 // src/plugins/core-plugins/stripe-plugin/components/events-page.ts
-chunkK623Q6WD_cjs.init_admin_layout_catalyst_template();
+chunkUYJQDDEE_cjs.init_admin_layout_catalyst_template();
 function renderEventsPage(data) {
   const { events, stats, types, filters, user, version, dynamicMenuItems } = data;
   const content2 = `
@@ -7929,7 +7929,7 @@ function renderEventsPage(data) {
     version,
     dynamicMenuItems
   };
-  return chunkK623Q6WD_cjs.renderAdminLayoutCatalyst(layoutData);
+  return chunkUYJQDDEE_cjs.renderAdminLayoutCatalyst(layoutData);
 }
 function eventStatsCard(label, value, colorClass) {
   return `
@@ -8028,7 +8028,7 @@ var DEFAULT_SETTINGS4 = {
 
 // src/plugins/core-plugins/stripe-plugin/routes/admin.ts
 var adminRoutes5 = new hono.Hono();
-adminRoutes5.use("*", chunkFTXGZ3BF_cjs.requireAuth());
+adminRoutes5.use("*", chunk37V3RET3_cjs.requireAuth());
 adminRoutes5.use("*", async (c, next) => {
   const user = c.get("user");
   if (user?.role !== "admin") {
@@ -8038,7 +8038,7 @@ adminRoutes5.use("*", async (c, next) => {
 });
 async function getSettings4(db) {
   try {
-    const pluginService = new chunkPYZYU7EK_cjs.PluginService(db);
+    const pluginService = new chunkQCJHCSOK_cjs.PluginService(db);
     const plugin2 = await pluginService.getPlugin("stripe");
     if (plugin2?.settings) {
       const settings = typeof plugin2.settings === "string" ? JSON.parse(plugin2.settings) : plugin2.settings;
@@ -8101,7 +8101,7 @@ adminRoutes5.get("/settings", async (c) => {
   const db = c.env.DB;
   const user = c.get("user");
   const settings = await getSettings4(db);
-  const { renderAdminLayoutCatalyst: renderAdminLayoutCatalyst2 } = await import('./admin-layout-catalyst.template-KDHKVLXR.cjs');
+  const { renderAdminLayoutCatalyst: renderAdminLayoutCatalyst2 } = await import('./admin-layout-catalyst.template-3XZXDGF7.cjs');
   const content2 = `
     <div>
       <div class="mb-6">
@@ -8361,7 +8361,7 @@ function timingSafeEqual(a, b) {
 var apiRoutes3 = new hono.Hono();
 async function getSettings5(db) {
   try {
-    const pluginService = new chunkPYZYU7EK_cjs.PluginService(db);
+    const pluginService = new chunkQCJHCSOK_cjs.PluginService(db);
     const plugin2 = await pluginService.getPlugin("stripe");
     if (plugin2?.settings) {
       const settings = typeof plugin2.settings === "string" ? JSON.parse(plugin2.settings) : plugin2.settings;
@@ -8512,7 +8512,7 @@ apiRoutes3.post("/webhook", async (c) => {
   }
   return c.json({ received: true });
 });
-apiRoutes3.post("/create-checkout-session", chunkFTXGZ3BF_cjs.requireAuth(), async (c) => {
+apiRoutes3.post("/create-checkout-session", chunk37V3RET3_cjs.requireAuth(), async (c) => {
   const db = c.env.DB;
   const user = c.get("user");
   if (!user) return c.json({ error: "Unauthorized" }, 401);
@@ -8552,7 +8552,7 @@ apiRoutes3.post("/create-checkout-session", chunkFTXGZ3BF_cjs.requireAuth(), asy
   });
   return c.json({ sessionId: session.id, url: session.url });
 });
-apiRoutes3.get("/subscription", chunkFTXGZ3BF_cjs.requireAuth(), async (c) => {
+apiRoutes3.get("/subscription", chunk37V3RET3_cjs.requireAuth(), async (c) => {
   const user = c.get("user");
   if (!user) return c.json({ error: "Unauthorized" }, 401);
   const db = c.env.DB;
@@ -8564,7 +8564,7 @@ apiRoutes3.get("/subscription", chunkFTXGZ3BF_cjs.requireAuth(), async (c) => {
   }
   return c.json({ subscription });
 });
-apiRoutes3.get("/subscriptions", chunkFTXGZ3BF_cjs.requireAuth(), async (c) => {
+apiRoutes3.get("/subscriptions", chunk37V3RET3_cjs.requireAuth(), async (c) => {
   const user = c.get("user");
   if (user?.role !== "admin") return c.json({ error: "Access denied" }, 403);
   const db = c.env.DB;
@@ -8580,7 +8580,7 @@ apiRoutes3.get("/subscriptions", chunkFTXGZ3BF_cjs.requireAuth(), async (c) => {
   const result = await subscriptionService.list(filters);
   return c.json(result);
 });
-apiRoutes3.get("/stats", chunkFTXGZ3BF_cjs.requireAuth(), async (c) => {
+apiRoutes3.get("/stats", chunk37V3RET3_cjs.requireAuth(), async (c) => {
   const user = c.get("user");
   if (user?.role !== "admin") return c.json({ error: "Access denied" }, 403);
   const db = c.env.DB;
@@ -8589,7 +8589,7 @@ apiRoutes3.get("/stats", chunkFTXGZ3BF_cjs.requireAuth(), async (c) => {
   const stats = await subscriptionService.getStats();
   return c.json(stats);
 });
-apiRoutes3.post("/sync-subscriptions", chunkFTXGZ3BF_cjs.requireAuth(), async (c) => {
+apiRoutes3.post("/sync-subscriptions", chunk37V3RET3_cjs.requireAuth(), async (c) => {
   const user = c.get("user");
   if (user?.role !== "admin") return c.json({ error: "Access denied" }, 403);
   const db = c.env.DB;
@@ -8637,7 +8637,7 @@ apiRoutes3.post("/sync-subscriptions", chunkFTXGZ3BF_cjs.requireAuth(), async (c
     }, 500);
   }
 });
-apiRoutes3.get("/events", chunkFTXGZ3BF_cjs.requireAuth(), async (c) => {
+apiRoutes3.get("/events", chunk37V3RET3_cjs.requireAuth(), async (c) => {
   const user = c.get("user");
   if (user?.role !== "admin") return c.json({ error: "Access denied" }, 403);
   const db = c.env.DB;
@@ -8660,7 +8660,7 @@ apiRoutes3.get("/events", chunkFTXGZ3BF_cjs.requireAuth(), async (c) => {
 
 // src/plugins/core-plugins/stripe-plugin/index.ts
 var STRIPE_ICON = `<svg class="h-5 w-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M3 10h18M7 15h1m4 0h1m-7 4h12a3 3 0 003-3V8a3 3 0 00-3-3H6a3 3 0 00-3 3v8a3 3 0 003 3z"/></svg>`;
-var stripePlugin = chunkEUJAEB6W_cjs.definePlugin({
+var stripePlugin = chunkBP52BFIV_cjs.definePlugin({
   id: "stripe",
   version: "1.0.0",
   name: "Stripe",
@@ -8681,7 +8681,7 @@ var stripePlugin = chunkEUJAEB6W_cjs.definePlugin({
 });
 
 // src/templates/pages/admin-forms-list.template.ts
-chunkK623Q6WD_cjs.init_admin_layout_catalyst_template();
+chunkUYJQDDEE_cjs.init_admin_layout_catalyst_template();
 function renderFormsListPage(data) {
   const tableData = {
     tableId: "forms-table",
@@ -8933,7 +8933,7 @@ function renderFormsListPage(data) {
 
       <!-- Forms Table -->
       <div class="bg-white dark:bg-zinc-900 rounded-lg border border-zinc-950/5 dark:border-white/10 overflow-hidden">
-        ${chunkJFLZHOQP_cjs.renderTable(tableData)}
+        ${chunkI767LVN7_cjs.renderTable(tableData)}
       </div>
     </div>
   `;
@@ -8943,11 +8943,11 @@ function renderFormsListPage(data) {
     user: data.user,
     version: data.version
   };
-  return chunkK623Q6WD_cjs.renderAdminLayoutCatalyst(layoutData);
+  return chunkUYJQDDEE_cjs.renderAdminLayoutCatalyst(layoutData);
 }
 
 // src/templates/pages/admin-forms-builder.template.ts
-chunkK623Q6WD_cjs.init_admin_layout_catalyst_template();
+chunkUYJQDDEE_cjs.init_admin_layout_catalyst_template();
 function getTurnstileComponentScript() {
   return `
     (function() {
@@ -10160,11 +10160,11 @@ ${getTurnstileComponentScript()}
     user: data.user,
     version: data.version
   };
-  return chunkK623Q6WD_cjs.renderAdminLayoutCatalyst(layoutData);
+  return chunkUYJQDDEE_cjs.renderAdminLayoutCatalyst(layoutData);
 }
 
 // src/templates/pages/admin-forms-create.template.ts
-chunkK623Q6WD_cjs.init_admin_layout_catalyst_template();
+chunkUYJQDDEE_cjs.init_admin_layout_catalyst_template();
 function renderFormCreatePage(data) {
   const pageContent = `
     <div class="max-w-3xl mx-auto">
@@ -10357,13 +10357,13 @@ function renderFormCreatePage(data) {
     user: data.user,
     version: data.version
   };
-  return chunkK623Q6WD_cjs.renderAdminLayoutCatalyst(layoutData);
+  return chunkUYJQDDEE_cjs.renderAdminLayoutCatalyst(layoutData);
 }
 
 // src/routes/admin-forms.ts
 var isTableMissing = (err) => String(err?.message ?? err?.cause?.message ?? "").includes("no such table: forms");
 var adminFormsRoutes = new hono.Hono();
-adminFormsRoutes.use("*", chunkFTXGZ3BF_cjs.requireAuth());
+adminFormsRoutes.use("*", chunk37V3RET3_cjs.requireAuth());
 adminFormsRoutes.get("/", async (c) => {
   try {
     const user = c.get("user");
@@ -10536,7 +10536,7 @@ adminFormsRoutes.get("/:id/builder", async (c) => {
     if (!form) {
       return c.html("<p>Form not found</p>", 404);
     }
-    const turnstileService = new chunkMGHHPNJN_cjs.TurnstileService(db);
+    const turnstileService = new chunkQJUJNTIU_cjs.TurnstileService(db);
     const turnstileSettings = await turnstileService.getSettings();
     const pageData = {
       id: form.id,
@@ -10705,7 +10705,7 @@ publicFormsRoutes.get("/:identifier/turnstile-config", async (c) => {
     if (!form) {
       return c.json({ error: "Form not found" }, 404);
     }
-    const turnstileService = new chunkMGHHPNJN_cjs.TurnstileService(db);
+    const turnstileService = new chunkQJUJNTIU_cjs.TurnstileService(db);
     const globalSettings = await turnstileService.getSettings();
     const formSettings = form.turnstile_settings ? JSON.parse(form.turnstile_settings) : { inherit: true };
     const enabled = form.turnstile_enabled === 1 || formSettings.inherit && globalSettings?.enabled;
@@ -11135,7 +11135,7 @@ publicFormsRoutes.post("/:identifier/submit", async (c) => {
     const turnstileEnabled = form.turnstile_enabled === 1;
     const turnstileSettings = form.turnstile_settings ? JSON.parse(form.turnstile_settings) : { inherit: true };
     if (turnstileEnabled || turnstileSettings.inherit) {
-      const turnstileService = new chunkMGHHPNJN_cjs.TurnstileService(db);
+      const turnstileService = new chunkQJUJNTIU_cjs.TurnstileService(db);
       const globalEnabled = await turnstileService.isEnabled();
       if (globalEnabled || turnstileEnabled) {
         const turnstileToken = body.data?.turnstile || body.turnstile;
@@ -11197,7 +11197,7 @@ publicFormsRoutes.post("/:identifier/submit", async (c) => {
 });
 
 // src/plugins/core-plugins/forms-plugin/index.ts
-var formsPlugin = chunkEUJAEB6W_cjs.definePlugin({
+var formsPlugin = chunkBP52BFIV_cjs.definePlugin({
   id: "forms",
   version: "1.0.0",
   name: "Forms",
@@ -11215,9 +11215,9 @@ var formsPlugin = chunkEUJAEB6W_cjs.definePlugin({
   activate: async () => console.info("\u2705 Forms plugin activated"),
   deactivate: async () => console.info("\u274C Forms plugin deactivated")
 });
-chunkK623Q6WD_cjs.init_admin_layout_catalyst_template();
+chunkUYJQDDEE_cjs.init_admin_layout_catalyst_template();
 var adminRbacRoutes = new hono.Hono();
-adminRbacRoutes.use("*", chunkFTXGZ3BF_cjs.requireRbac("rbac", "manage"));
+adminRbacRoutes.use("*", chunk37V3RET3_cjs.requireRbac("rbac", "manage"));
 var esc = (s) => String(s).replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
 var TABS2 = `
   <div class="border-b border-zinc-950/10 dark:border-white/10 mb-6">
@@ -11521,11 +11521,11 @@ adminRbacRoutes.get("/", async (c) => {
   </script>`;
   const u = c.get("user");
   return c.html(
-    chunkK623Q6WD_cjs.renderAdminLayoutCatalyst({
+    chunkUYJQDDEE_cjs.renderAdminLayoutCatalyst({
       title: "Roles & Permissions",
       pageTitle: "Roles & Permissions",
       currentPath: "/admin/users",
-      version: chunkQWSR4THH_cjs.getCoreVersion(),
+      version: chunkKKNEYIZJ_cjs.getCoreVersion(),
       user: u ? { name: u.email || "Admin", email: u.email || "", role: u.role || "admin" } : void 0,
       content: content2
     })
@@ -11662,7 +11662,7 @@ adminRbacRoutes.get("/check", async (c) => {
 });
 
 // src/middleware/plugin-menu.ts
-var REGISTRY_MENU_PLUGINS = Object.values(chunkPYZYU7EK_cjs.PLUGIN_REGISTRY).filter((p) => p.adminMenu !== null).map((p) => ({
+var REGISTRY_MENU_PLUGINS = Object.values(chunkQCJHCSOK_cjs.PLUGIN_REGISTRY).filter((p) => p.adminMenu !== null).map((p) => ({
   id: p.id,
   label: p.adminMenu.label,
   path: p.adminMenu.path,
@@ -11741,7 +11741,7 @@ function pluginMenuMiddleware() {
     } catch {
     }
     const user = c.get("user");
-    const singletonItems = chunkMGHHPNJN_cjs.resolvePluginMenuItems(user ? { role: user.role } : void 0);
+    const singletonItems = chunkBP52BFIV_cjs.resolvePluginMenuItems(user ? { role: user.role } : void 0);
     const existingPaths = new Set(activeMenuItems.map((i) => i.path));
     for (const item of singletonItems) {
       if (!existingPaths.has(item.path)) {
@@ -11766,9 +11766,1439 @@ function pluginMenuMiddleware() {
     }
   };
 }
-chunkK623Q6WD_cjs.init_admin_layout_catalyst_template();
+
+// src/plugins/core-plugins/menu-plugin/services/menu-repository.ts
+async function listMenuItems(db, opts) {
+  try {
+    let sql = `
+      SELECT id, slug, sort_order, data
+      FROM documents
+      WHERE type_id = 'menu_item'
+        AND tenant_id = 'default'
+        AND is_current_draft = 1
+        AND deleted_at IS NULL
+    `;
+    const binds = [];
+    if (opts?.source) ;
+    sql += ` ORDER BY sort_order ASC`;
+    const stmt = db.prepare(sql);
+    const result = await (binds.length ? stmt.bind(...binds) : stmt).all();
+    return (result.results ?? []).map((row) => {
+      const data = JSON.parse(row.data);
+      return {
+        ...data,
+        id: row.id,
+        slug: row.slug,
+        sortOrder: row.sort_order,
+        tenantId: "default"
+      };
+    });
+  } catch {
+    return [];
+  }
+}
+async function fetchPluginStatuses(db, pluginIds) {
+  if (pluginIds.length === 0) return {};
+  try {
+    const rows = await db.prepare(
+      `SELECT slug, json_extract(data, '$.status') AS status
+         FROM documents
+         WHERE type_id = 'plugin' AND tenant_id = 'default'
+           AND is_current_draft = 1 AND deleted_at IS NULL`
+    ).all();
+    const statusMap = /* @__PURE__ */ new Map();
+    for (const row of rows.results ?? []) {
+      statusMap.set(row.slug, row.status ?? "inactive");
+    }
+    const result = {};
+    for (const id of pluginIds) {
+      const s = statusMap.get(id);
+      result[id] = s === "active" ? "active" : "inactive";
+    }
+    return result;
+  } catch {
+    return {};
+  }
+}
+function buildSidebarTree(items) {
+  const visible = items.filter((i) => i.visible);
+  visible.sort((a, b) => a.sortOrder - b.sortOrder);
+  const byId = /* @__PURE__ */ new Map();
+  const roots = [];
+  for (const item of visible) {
+    byId.set(item.id, {
+      id: item.id,
+      label: item.label,
+      url: item.url,
+      icon: item.icon,
+      target: item.target,
+      isExternal: item.isExternal,
+      visible: item.visible,
+      source: item.source,
+      sortOrder: item.sortOrder,
+      children: []
+    });
+  }
+  for (const item of visible) {
+    const node = byId.get(item.id);
+    if (item.parent && byId.has(item.parent)) {
+      byId.get(item.parent).children.push(node);
+    } else {
+      roots.push(node);
+    }
+  }
+  for (const node of byId.values()) {
+    node.children.sort((a, b) => a.sortOrder - b.sortOrder);
+  }
+  return roots;
+}
+async function upsertSystemItem(db, slug, data, sortOrder) {
+  const now = Math.floor(Date.now() / 1e3);
+  const existing = await db.prepare(
+    `SELECT id FROM documents WHERE slug = ? AND type_id = 'menu_item' AND tenant_id = 'default' AND is_current_draft = 1 AND deleted_at IS NULL`
+  ).bind(slug).first();
+  if (existing) {
+    return;
+  }
+  const id = chunkKIGVVO6N_cjs.nanoid();
+  await db.prepare(
+    `INSERT INTO documents (
+        id, root_id, type_id, type_version, version_of_id, version_number,
+        is_current_draft, is_published, status, parent_root_id,
+        slug, path, title, zone, sort_order, visible,
+        published_at, scheduled_at, expires_at, deleted_at,
+        tenant_id, locale, translation_group_id,
+        data, metadata, owner_id, created_by, updated_by, created_at, updated_at
+      ) VALUES (
+        ?, ?, ?, ?, ?, ?,
+        ?, ?, ?, ?,
+        ?, ?, ?, ?, ?, ?,
+        ?, ?, ?, ?,
+        ?, ?, ?,
+        ?, ?, ?, ?, ?, ?, ?
+      )`
+  ).bind(
+    id,
+    // id
+    id,
+    // root_id
+    "menu_item",
+    // type_id
+    1,
+    // type_version
+    null,
+    // version_of_id
+    1,
+    // version_number
+    1,
+    // is_current_draft
+    1,
+    // is_published
+    "published",
+    // status
+    "",
+    // parent_root_id
+    slug,
+    // slug
+    null,
+    // path
+    data.label,
+    // title
+    null,
+    // zone
+    sortOrder,
+    // sort_order
+    data.visible ? 1 : 0,
+    // visible
+    now,
+    // published_at
+    null,
+    // scheduled_at
+    null,
+    // expires_at
+    null,
+    // deleted_at
+    "default",
+    // tenant_id
+    "default",
+    // locale
+    "",
+    // translation_group_id
+    JSON.stringify(data),
+    // data
+    "{}",
+    // metadata
+    null,
+    // owner_id
+    "system",
+    // created_by
+    "system",
+    // updated_by
+    now,
+    // created_at
+    now
+    // updated_at
+  ).run();
+}
+async function reorderItems(db, items) {
+  if (items.length === 0) return;
+  const now = Math.floor(Date.now() / 1e3);
+  const stmts = items.map(
+    (item) => db.prepare(
+      `UPDATE documents SET
+          sort_order = ?,
+          data = json_set(data, '$.parent', ?),
+          updated_at = ?
+        WHERE id = ? AND tenant_id = 'default'`
+    ).bind(item.sortOrder, item.parent ?? null, now, item.id)
+  );
+  await db.batch(stmts);
+}
+async function toggleVisibility(db, id, visible) {
+  const now = Math.floor(Date.now() / 1e3);
+  const visInt = visible ? 1 : 0;
+  await db.prepare(
+    `UPDATE documents SET
+        data = json_set(data, '$.visible', ?),
+        visible = ?,
+        updated_at = ?
+      WHERE id = ? AND tenant_id = 'default' AND type_id = 'menu_item'`
+  ).bind(visInt, visInt, now, id).run();
+}
+async function updateItem(db, id, changes, lockedFields) {
+  const lockedKeys = new Set(lockedFields.filter((f) => f !== "parent"));
+  for (const key of Object.keys(changes)) {
+    if (lockedKeys.has(key)) {
+      return false;
+    }
+  }
+  const now = Math.floor(Date.now() / 1e3);
+  const jsonSetParts = [];
+  const binds = [];
+  const dataFields = ["label", "icon", "target", "permissions", "url", "parent", "visible"];
+  for (const field of dataFields) {
+    if (field in changes) {
+      jsonSetParts.push(`'$.${field}'`, "?");
+      binds.push(
+        field === "permissions" ? JSON.stringify(changes[field]) : changes[field] ?? null
+      );
+    }
+  }
+  const setParts = [];
+  if (jsonSetParts.length > 0) {
+    setParts.push(`data = json_set(data, ${jsonSetParts.join(", ")})`);
+  }
+  if ("sortOrder" in changes && changes.sortOrder !== void 0) {
+    setParts.push(`sort_order = ?`);
+    binds.push(changes.sortOrder);
+  }
+  if ("visible" in changes && changes.visible !== void 0) {
+    setParts.push(`visible = ?`);
+    binds.push(changes.visible ? 1 : 0);
+  }
+  if (setParts.length === 0) {
+    return true;
+  }
+  setParts.push(`updated_at = ?`);
+  binds.push(now);
+  binds.push(id);
+  const sql = `UPDATE documents SET ${setParts.join(", ")} WHERE id = ? AND tenant_id = 'default' AND type_id = 'menu_item'`;
+  await db.prepare(sql).bind(...binds).run();
+  return true;
+}
+async function deleteItem(db, id) {
+  try {
+    const row = await db.prepare(
+      `SELECT data FROM documents WHERE id = ? AND tenant_id = 'default' AND is_current_draft = 1 AND deleted_at IS NULL`
+    ).bind(id).first();
+    if (!row) {
+      return { ok: false, reason: "Item not found" };
+    }
+    const data = JSON.parse(row.data);
+    if (data.source === "system" || data.source === "plugin") {
+      return { ok: false, reason: "Cannot delete system or plugin items" };
+    }
+    const now = Math.floor(Date.now() / 1e3);
+    await db.prepare(
+      `UPDATE documents SET deleted_at = ? WHERE id = ? AND tenant_id = 'default'`
+    ).bind(now, id).run();
+    return { ok: true };
+  } catch (err) {
+    return { ok: false, reason: err instanceof Error ? err.message : "Unknown error" };
+  }
+}
+
+// src/services/menu-icons.ts
+var MENU_ICON_MAP = {
+  "puzzle-piece": `<svg class="h-5 w-5" fill="currentColor" viewBox="0 0 20 20"><path d="M14.5 2A1.5 1.5 0 0013 3.5V4H8.5A1.5 1.5 0 007 5.5V10h-.5a1.5 1.5 0 100 3H7v4.5A1.5 1.5 0 008.5 19H13v-.5a1.5 1.5 0 113 0V19h.5a1.5 1.5 0 001.5-1.5V13h-.5a1.5 1.5 0 110-3h.5V5.5A1.5 1.5 0 0017 4h-.5v-.5A1.5 1.5 0 0014.5 2z"/></svg>`,
+  envelope: `<svg class="h-5 w-5" fill="currentColor" viewBox="0 0 20 20"><path d="M2.003 5.884L10 9.882l7.997-3.998A2 2 0 0016 4H4a2 2 0 00-1.997 1.884z"/><path d="M18 8.118l-8 4-8-4V14a2 2 0 002 2h12a2 2 0 002-2V8.118z"/></svg>`,
+  cog: `<svg class="h-5 w-5" fill="currentColor" viewBox="0 0 20 20"><path fill-rule="evenodd" d="M11.49 3.17c-.38-1.56-2.6-1.56-2.98 0a1.532 1.532 0 01-2.286.948c-1.372-.836-2.942.734-2.106 2.106.54.886.061 2.042-.947 2.287-1.561.379-1.561 2.6 0 2.978a1.532 1.532 0 01.947 2.287c-.836 1.372.734 2.942 2.106 2.106a1.532 1.532 0 012.287.947c.379 1.561 2.6 1.561 2.978 0a1.533 1.533 0 012.287-.947c1.372.836 2.942-.734 2.106-2.106a1.533 1.533 0 01.947-2.287c1.561-.379 1.561-2.6 0-2.978a1.532 1.532 0 01-.947-2.287c.836-1.372-.734-2.942-2.106-2.106a1.532 1.532 0 01-2.287-.947zM10 13a3 3 0 100-6 3 3 0 000 6z" clip-rule="evenodd"/></svg>`,
+  chart: `<svg class="h-5 w-5" fill="currentColor" viewBox="0 0 20 20"><path d="M2 11a1 1 0 011-1h2a1 1 0 011 1v5a1 1 0 01-1 1H3a1 1 0 01-1-1v-5zM8 7a1 1 0 011-1h2a1 1 0 011 1v9a1 1 0 01-1 1H9a1 1 0 01-1-1V7zM14 4a1 1 0 011-1h2a1 1 0 011 1v12a1 1 0 01-1 1h-2a1 1 0 01-1-1V4z"/></svg>`,
+  sparkles: `<svg class="h-5 w-5" fill="currentColor" viewBox="0 0 20 20"><path d="M9 4.804A7.968 7.968 0 005.5 4c-1.255 0-2.443.29-3.5.804v10A7.969 7.969 0 015.5 14c1.669 0 3.218.51 4.5 1.385A7.962 7.962 0 0114.5 14c1.255 0 2.443.29 3.5.804v-10A7.968 7.968 0 0014.5 4c-1.255 0-2.443.29-3.5.804V12a1 1 0 11-2 0V4.804z"/></svg>`,
+  bolt: `<svg class="h-5 w-5" fill="currentColor" viewBox="0 0 20 20"><path fill-rule="evenodd" d="M11.3 1.046A1 1 0 0112 2v5h4a1 1 0 01.82 1.573l-7 10A1 1 0 018 18v-5H4a1 1 0 01-.82-1.573l7-10a1 1 0 011.12-.38z" clip-rule="evenodd"/></svg>`,
+  document: `<svg class="h-5 w-5" fill="currentColor" viewBox="0 0 20 20"><path fill-rule="evenodd" d="M4 4a2 2 0 012-2h8a2 2 0 012 2v12a2 2 0 01-2 2H6a2 2 0 01-2-2V4zm3 1h6v2H7V5zm0 4h6v2H7V9zm0 4h4v2H7v-2z" clip-rule="evenodd"/></svg>`,
+  lock: `<svg class="h-5 w-5" fill="currentColor" viewBox="0 0 20 20"><path fill-rule="evenodd" d="M5 9V7a5 5 0 0110 0v2a2 2 0 012 2v5a2 2 0 01-2 2H5a2 2 0 01-2-2v-5a2 2 0 012-2zm8-2v2H7V7a3 3 0 016 0z" clip-rule="evenodd"/></svg>`,
+  photo: `<svg class="h-5 w-5" fill="currentColor" viewBox="0 0 20 20"><path fill-rule="evenodd" d="M4 3a2 2 0 00-2 2v10a2 2 0 002 2h12a2 2 0 002-2V5a2 2 0 00-2-2H4zm12 12H4l4-8 3 6 2-4 3 6z" clip-rule="evenodd"/></svg>`,
+  "magnifying-glass": `<svg class="h-5 w-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m21 21-5.197-5.197m0 0A7.5 7.5 0 1 0 5.196 5.196a7.5 7.5 0 0 0 10.607 10.607Z"/></svg>`,
+  "chart-bar": `<svg class="h-5 w-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M3 13.125C3 12.504 3.504 12 4.125 12h2.25c.621 0 1.125.504 1.125 1.125v6.75C7.5 20.496 6.996 21 6.375 21h-2.25A1.125 1.125 0 0 1 3 19.875v-6.75ZM9.75 8.625c0-.621.504-1.125 1.125-1.125h2.25c.621 0 1.125.504 1.125 1.125v11.25c0 .621-.504 1.125-1.125 1.125h-2.25a1.125 1.125 0 0 1-1.125-1.125V8.625ZM16.5 4.125c0-.621.504-1.125 1.125-1.125h2.25C20.496 3 21 3.504 21 4.125v15.75c0 .621-.504 1.125-1.125 1.125h-2.25a1.125 1.125 0 0 1-1.125-1.125V4.125Z"/></svg>`,
+  image: `<svg class="h-5 w-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m2.25 15.75 5.159-5.159a2.25 2.25 0 0 1 3.182 0l5.159 5.159m-1.5-1.5 1.409-1.409a2.25 2.25 0 0 1 3.182 0l2.909 2.909m-18 3.75h16.5a1.5 1.5 0 0 0 1.5-1.5V6a1.5 1.5 0 0 0-1.5-1.5H3.75A1.5 1.5 0 0 0 2.25 6v12a1.5 1.5 0 0 0 1.5 1.5Zm10.5-11.25h.008v.008h-.008V8.25Zm.375 0a.375.375 0 1 1-.75 0 .375.375 0 0 1 .75 0Z"/></svg>`,
+  palette: `<svg class="h-5 w-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M4.098 19.902a3.75 3.75 0 0 0 5.304 0l6.401-6.402M6.75 21A3.75 3.75 0 0 1 3 17.25V4.125C3 3.504 3.504 3 4.125 3h5.25c.621 0 1.125.504 1.125 1.125v4.072M6.75 21a3.75 3.75 0 0 0 3.75-3.75V8.197M6.75 21h13.125c.621 0 1.125-.504 1.125-1.125v-5.25c0-.621-.504-1.125-1.125-1.125h-4.072M10.5 8.197l2.88-2.88c.438-.439 1.15-.439 1.59 0l3.712 3.713c.44.44.44 1.152 0 1.59l-2.879 2.88M6.75 17.25h.008v.008H6.75v-.008Z"/></svg>`,
+  "hand-raised": `<svg class="h-5 w-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M10.05 4.575a1.575 1.575 0 1 0-3.15 0v3m3.15-3v-1.5a1.575 1.575 0 0 1 3.15 0v1.5m-3.15 0 .075 5.925m3.075-5.925v2.925m0-2.925a1.575 1.575 0 0 1 3.15 0V9.9m-3.15-2.4v5.325M16.5 9.9a1.575 1.575 0 0 1 3.15 0V15a6.15 6.15 0 0 1-6.15 6.15H12A6.15 6.15 0 0 1 5.85 15V9.525"/></svg>`,
+  key: `<svg class="h-5 w-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M15.75 5.25a3 3 0 0 1 3 3m3 0a6 6 0 0 1-7.029 5.912c-.563-.097-1.159.026-1.563.43L10.5 17.25H8.25v2.25H6v2.25H2.25v-2.818c0-.597.237-1.17.659-1.591l6.499-6.499c.404-.404.527-1 .43-1.563A6 6 0 1 1 21.75 8.25Z"/></svg>`,
+  "arrow-right": `<svg class="h-5 w-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M13.5 4.5 21 12m0 0-7.5 7.5M21 12H3"/></svg>`,
+  "shield-check": `<svg class="h-5 w-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 12l2 2 4-4m5.618-4.016A11.955 11.955 0 0112 2.944a11.955 11.955 0 01-8.618 3.04A12.02 12.02 0 003 9c0 5.591 3.824 10.29 9 11.622 5.176-1.332 9-6.03 9-11.622 0-1.042-.133-2.052-.382-3.016z"/></svg>`,
+  "credit-card": `<svg class="h-5 w-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M2.25 8.25h19.5M2.25 9h19.5m-16.5 5.25h6m-6 2.25h3m-3.75 3h15a2.25 2.25 0 0 0 2.25-2.25V6.75A2.25 2.25 0 0 0 19.5 4.5h-15a2.25 2.25 0 0 0-2.25 2.25v10.5A2.25 2.25 0 0 0 4.5 19.5Z"/></svg>`,
+  "document-text": `<svg class="h-5 w-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 12h6m-6 4h6m2 5H7a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2h5.586a1 1 0 0 1 .707.293l5.414 5.414a1 1 0 0 1 .293.707V19a2 2 0 0 1-2 2z"/></svg>`,
+  "pencil-square": `<svg class="h-5 w-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m16.862 4.487 1.687-1.688a1.875 1.875 0 1 1 2.652 2.652L10.582 16.07a4.5 4.5 0 0 1-1.897 1.13L6 18l.8-2.685a4.5 4.5 0 0 1 1.13-1.897l8.932-8.931Zm0 0L19.5 7.125M18 14v4.75A2.25 2.25 0 0 1 15.75 21H5.25A2.25 2.25 0 0 1 3 18.75V8.25A2.25 2.25 0 0 1 5.25 6H10"/></svg>`,
+  server: `<svg class="h-5 w-5" fill="currentColor" viewBox="0 0 20 20"><path fill-rule="evenodd" d="M2 5a2 2 0 012-2h12a2 2 0 012 2v2a2 2 0 01-2 2H4a2 2 0 01-2-2V5zm14 1a1 1 0 11-2 0 1 1 0 012 0zM2 13a2 2 0 012-2h12a2 2 0 012 2v2a2 2 0 01-2 2H4a2 2 0 01-2-2v-2zm14 1a1 1 0 11-2 0 1 1 0 012 0z" clip-rule="evenodd"/></svg>`,
+  "building-office": `<svg class="h-5 w-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M3.75 21h16.5M4.5 3h15M5.25 3v18m13.5-18v18M9 6.75h1.5m-1.5 3h1.5m-1.5 3h1.5m3-6H15m-1.5 3H15m-1.5 3H15M9 21v-3.375c0-.621.504-1.125 1.125-1.125h3.75c.621 0 1.125.504 1.125 1.125V21"/></svg>`,
+  home: `<svg class="h-5 w-5" fill="currentColor" viewBox="0 0 20 20"><path d="M10.707 2.293a1 1 0 00-1.414 0l-7 7a1 1 0 001.414 1.414L4 10.414V17a1 1 0 001 1h2a1 1 0 001-1v-2a1 1 0 011-1h2a1 1 0 011 1v2a1 1 0 001 1h2a1 1 0 001-1v-6.586l.293.293a1 1 0 001.414-1.414l-7-7z"/></svg>`,
+  users: `<svg class="h-5 w-5" fill="currentColor" viewBox="0 0 20 20"><path d="M9 6a3 3 0 11-6 0 3 3 0 016 0zM17 6a3 3 0 11-6 0 3 3 0 016 0zM12.93 17c.046-.327.07-.66.07-1a6.97 6.97 0 00-1.5-4.33A5 5 0 0119 16v1h-6.07zM6 11a5 5 0 015 5v1H1v-1a5 5 0 015-5z"/></svg>`,
+  collection: `<svg class="h-5 w-5" fill="currentColor" viewBox="0 0 20 20"><path d="M7 3a1 1 0 000 2h6a1 1 0 100-2H7zM4 7a1 1 0 011-1h10a1 1 0 110 2H5a1 1 0 01-1-1zM2 11a2 2 0 012-2h12a2 2 0 012 2v4a2 2 0 01-2 2H4a2 2 0 01-2-2v-4z"/></svg>`,
+  "bars-3": `<svg class="h-5 w-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M3.75 6.75h16.5M3.75 12h16.5m-16.5 5.25h16.5"/></svg>`,
+  "cog-6-tooth": `<svg class="h-5 w-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9.594 3.94c.09-.542.56-.94 1.11-.94h2.593c.55 0 1.02.398 1.11.94l.213 1.281c.063.374.313.686.645.87.074.04.147.083.22.127.325.196.72.257 1.075.124l1.217-.456a1.125 1.125 0 0 1 1.37.49l1.296 2.247a1.125 1.125 0 0 1-.26 1.431l-1.003.827c-.293.241-.438.613-.43.992a7.723 7.723 0 0 1 0 .255c-.008.378.137.75.43.991l1.004.827c.424.35.534.955.26 1.43l-1.298 2.247a1.125 1.125 0 0 1-1.369.491l-1.217-.456c-.355-.133-.75-.072-1.076.124a6.47 6.47 0 0 1-.22.128c-.331.183-.581.495-.644.869l-.213 1.281c-.09.543-.56.94-1.11.94h-2.594c-.55 0-1.019-.398-1.11-.94l-.213-1.281c-.062-.374-.312-.686-.644-.87a6.52 6.52 0 0 1-.22-.127c-.325-.196-.72-.257-1.076-.124l-1.217.456a1.125 1.125 0 0 1-1.369-.49l-1.297-2.247a1.125 1.125 0 0 1 .26-1.431l1.004-.827c.292-.24.437-.613.43-.991a6.932 6.932 0 0 1 0-.255c.007-.38-.138-.751-.43-.992l-1.004-.827a1.125 1.125 0 0 1-.26-1.43l1.297-2.247a1.125 1.125 0 0 1 1.37-.491l1.216.456c.356.133.751.072 1.076-.124.072-.044.146-.086.22-.128.332-.183.582-.495.644-.869l.214-1.28Z"/><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M15 12a3 3 0 1 1-6 0 3 3 0 0 1 6 0Z"/></svg>`,
+  star: `<svg class="h-5 w-5" fill="currentColor" viewBox="0 0 20 20"><path d="M9.049 2.927c.3-.921 1.603-.921 1.902 0l1.07 3.292a1 1 0 00.95.69h3.462c.969 0 1.371 1.24.588 1.81l-2.8 2.034a1 1 0 00-.364 1.118l1.07 3.292c.3.921-.755 1.688-1.54 1.118l-2.8-2.034a1 1 0 00-1.175 0l-2.8 2.034c-.784.57-1.838-.197-1.539-1.118l1.07-3.292a1 1 0 00-.364-1.118L2.98 8.72c-.783-.57-.38-1.81.588-1.81h3.461a1 1 0 00.951-.69l1.07-3.292z"/></svg>`,
+  tag: `<svg class="h-5 w-5" fill="currentColor" viewBox="0 0 20 20"><path fill-rule="evenodd" d="M17.707 9.293a1 1 0 010 1.414l-7 7a1 1 0 01-1.414 0l-7-7A.997.997 0 012 10V5a3 3 0 013-3h5c.256 0 .512.098.707.293l7 7zM5 6a1 1 0 100-2 1 1 0 000 2z" clip-rule="evenodd"/></svg>`,
+  link: `<svg class="h-5 w-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M13.828 10.172a4 4 0 00-5.656 0l-4 4a4 4 0 105.656 5.656l1.102-1.101m-.758-4.899a4 4 0 005.656 0l4-4a4 4 0 00-5.656-5.656l-1.1 1.1"/></svg>`,
+  "external-link": `<svg class="h-5 w-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M10 6H6a2 2 0 00-2 2v10a2 2 0 002 2h10a2 2 0 002-2v-4M14 4h6m0 0v6m0-6L10 14"/></svg>`,
+  eye: `<svg class="h-5 w-5" fill="currentColor" viewBox="0 0 20 20"><path d="M10 12a2 2 0 100-4 2 2 0 000 4z"/><path fill-rule="evenodd" d="M.458 10C1.732 5.943 5.522 3 10 3s8.268 2.943 9.542 7c-1.274 4.057-5.064 7-9.542 7S1.732 14.057.458 10zM14 10a4 4 0 11-8 0 4 4 0 018 0z" clip-rule="evenodd"/></svg>`,
+  "eye-slash": `<svg class="h-5 w-5" fill="currentColor" viewBox="0 0 20 20"><path fill-rule="evenodd" d="M3.707 2.293a1 1 0 00-1.414 1.414l14 14a1 1 0 001.414-1.414l-1.473-1.473A10.014 10.014 0 0019.542 10C18.268 5.943 14.478 3 10 3a9.958 9.958 0 00-4.512 1.074l-1.78-1.781zm4.261 4.26l1.514 1.515a2.003 2.003 0 012.45 2.45l1.514 1.514a4 4 0 00-5.478-5.478z" clip-rule="evenodd"/><path d="M12.454 16.697L9.75 13.992a4 4 0 01-3.742-3.741L2.335 6.578A9.98 9.98 0 00.458 10c1.274 4.057 5.065 7 9.542 7 .847 0 1.669-.105 2.454-.303z"/></svg>`
+};
+var FALLBACK = `<svg class="h-5 w-5" fill="currentColor" viewBox="0 0 20 20"><path d="M14.5 2A1.5 1.5 0 0013 3.5V4H8.5A1.5 1.5 0 007 5.5V10h-.5a1.5 1.5 0 100 3H7v4.5A1.5 1.5 0 008.5 19H13v-.5a1.5 1.5 0 113 0V19h.5a1.5 1.5 0 001.5-1.5V13h-.5a1.5 1.5 0 110-3h.5V5.5A1.5 1.5 0 0017 4h-.5v-.5A1.5 1.5 0 0014.5 2z"/></svg>`;
+function resolveIcon2(nameOrSvg) {
+  if (!nameOrSvg) return FALLBACK;
+  if (nameOrSvg.startsWith("<svg")) return nameOrSvg;
+  return MENU_ICON_MAP[nameOrSvg] ?? FALLBACK;
+}
+
+// src/middleware/menu.ts
+var EXTERNAL_ICON = `<svg class="h-3 w-3 ml-1 shrink-0 opacity-60" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M10 6H6a2 2 0 00-2 2v10a2 2 0 002 2h10a2 2 0 002-2v-4M14 4h6m0 0v6m0-6L10 14"/></svg>`;
+var CHEVRON = `<svg data-menu-chevron class="h-4 w-4 rotate-180 transition-transform duration-200" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M19 9l-7 7-7-7"/></svg>`;
+function renderTopLevelItem(item, currentPath) {
+  const isActive = currentPath === item.url || item.url !== "/admin" && currentPath.startsWith(item.url);
+  const icon = resolveIcon2(item.icon);
+  const label = chunkMNWKYY5E_cjs.escapeHtml(item.label);
+  const targetAttr = item.target === "_blank" ? ' target="_blank" rel="noopener noreferrer"' : "";
+  const externalAffordance = item.isExternal ? EXTERNAL_ICON : "";
+  if (item.children.length > 0) {
+    const accordionId = `acc-${item.id.replace(/[^a-z0-9]/gi, "-")}`;
+    const isChildActive = item.children.some(
+      (c) => currentPath === c.url || currentPath.startsWith(c.url)
+    );
+    const accordionActive = isActive || isChildActive;
+    return `
+      <div data-menu-accordion class="relative">
+        ${accordionActive ? '<span class="absolute inset-y-2 -left-4 w-0.5 rounded-full bg-cyan-500 dark:bg-cyan-400"></span>' : ""}
+        <div class="flex w-full items-center">
+          <a href="${item.url}"${targetAttr}
+            class="flex flex-1 items-center gap-3 rounded-lg px-2 py-2.5 text-left text-sm/5 font-medium ${accordionActive ? "text-zinc-950 dark:text-white" : "text-zinc-950 hover:bg-zinc-950/5 dark:text-white dark:hover:bg-white/5"}"
+            ${accordionActive ? 'data-current="true"' : ""}
+          >
+            <span class="shrink-0 ${accordionActive ? "fill-zinc-950 dark:fill-white" : "fill-zinc-500 dark:fill-zinc-400"}">${icon}</span>
+            <span class="truncate">${label}</span>${externalAffordance}
+          </a>
+          <button
+            onclick="toggleMenuAccordion('${accordionId}')"
+            class="flex items-center justify-center rounded-lg p-2 text-zinc-500 hover:bg-zinc-950/5 dark:text-zinc-400 dark:hover:bg-white/5 flex-shrink-0"
+            aria-label="Toggle ${label} submenu"
+          >
+            ${CHEVRON}
+          </button>
+        </div>
+        <div id="${accordionId}" class="pl-6 mt-0.5 flex flex-col gap-0.5">
+          ${item.children.map((child) => renderChildItem(child, currentPath)).join("")}
+        </div>
+      </div>`;
+  }
+  return `
+    <span class="relative">
+      ${isActive ? '<span class="absolute inset-y-2 -left-4 w-0.5 rounded-full bg-cyan-500 dark:bg-cyan-400"></span>' : ""}
+      <a href="${item.url}"${targetAttr}
+        class="flex w-full items-center gap-3 rounded-lg px-2 py-2.5 text-left text-sm/5 font-medium ${isActive ? "text-zinc-950 dark:text-white" : "text-zinc-950 hover:bg-zinc-950/5 dark:text-white dark:hover:bg-white/5"}"
+        ${isActive ? 'data-current="true"' : ""}
+      >
+        <span class="shrink-0 ${isActive ? "fill-zinc-950 dark:fill-white" : "fill-zinc-500 dark:fill-zinc-400"}">${icon}</span>
+        <span class="truncate">${label}</span>${externalAffordance}
+      </a>
+    </span>`;
+}
+function renderChildItem(item, currentPath) {
+  const isActive = currentPath === item.url || item.url !== "/admin" && currentPath.startsWith(item.url);
+  const icon = resolveIcon2(item.icon);
+  const label = chunkMNWKYY5E_cjs.escapeHtml(item.label);
+  const targetAttr = item.target === "_blank" ? ' target="_blank" rel="noopener noreferrer"' : "";
+  const externalAffordance = item.isExternal ? EXTERNAL_ICON : "";
+  return `
+    <span class="relative">
+      ${isActive ? '<span class="absolute inset-y-2 -left-4 w-0.5 rounded-full bg-cyan-500 dark:bg-cyan-400"></span>' : ""}
+      <a href="${item.url}"${targetAttr}
+        class="flex w-full items-center gap-3 rounded-lg px-2 py-2 text-left text-sm/5 font-medium ${isActive ? "text-zinc-950 dark:text-white" : "text-zinc-600 hover:bg-zinc-950/5 dark:text-zinc-400 dark:hover:bg-white/5"}"
+        ${isActive ? 'data-current="true"' : ""}
+      >
+        <span class="shrink-0 ${isActive ? "fill-zinc-950 dark:fill-white" : "fill-zinc-500 dark:fill-zinc-400"}">${icon}</span>
+        <span class="truncate">${label}</span>${externalAffordance}
+      </a>
+    </span>`;
+}
+var ACCORDION_SCRIPT = `
+<script>
+  function toggleMenuAccordion(id) {
+    var el = document.getElementById(id)
+    if (!el) return
+    var chevrons = el.parentElement ? el.parentElement.querySelectorAll('[data-menu-chevron]') : []
+    if (el.style.display === 'none' || el.style.display === '') {
+      el.style.display = 'flex'
+      el.style.flexDirection = 'column'
+      chevrons.forEach(function(c) { c.style.transform = 'rotate(180deg)' })
+    } else {
+      el.style.display = 'none'
+      chevrons.forEach(function(c) { c.style.transform = 'rotate(0deg)' })
+    }
+  }
+  // Open active accordions on load
+  document.addEventListener('DOMContentLoaded', function() {
+    document.querySelectorAll('[data-menu-accordion]').forEach(function(acc) {
+      if (acc.querySelector('[data-current]')) {
+        var sub = acc.querySelector('[id^="acc-"]')
+        if (sub) { sub.style.display = 'flex'; sub.style.flexDirection = 'column' }
+      }
+    })
+  })
+</script>`;
+async function isMenuPluginActive(db) {
+  try {
+    const row = await db.prepare(
+      `SELECT json_extract(data, '$.status') AS status
+         FROM documents
+         WHERE slug = 'menu' AND type_id = 'plugin' AND tenant_id = 'default'
+           AND is_current_draft = 1 AND deleted_at IS NULL
+         LIMIT 1`
+    ).first();
+    if (!row) return false;
+    return row.status === "active";
+  } catch {
+    return false;
+  }
+}
+function menuMiddleware() {
+  return async (c, next) => {
+    const path = new URL(c.req.url).pathname;
+    if (!path.startsWith("/admin")) {
+      return next();
+    }
+    await next();
+    if (!c.res.headers.get("content-type")?.includes("text/html")) return;
+    if (!await isMenuPluginActive(c.env.DB)) return;
+    let items = [];
+    try {
+      items = await listMenuItems(c.env.DB);
+    } catch {
+      return;
+    }
+    if (items.length === 0) return;
+    const tree = buildSidebarTree(items);
+    const renderedItems = tree.map((item) => renderTopLevelItem(item, path)).join("");
+    const navItemsHtml = renderedItems + ACCORDION_SCRIPT;
+    const status = c.res.status;
+    const headers = new Headers(c.res.headers);
+    const html4 = await c.res.text();
+    const markerRegex = /<!-- ADMIN_SIDEBAR_NAV_ITEMS -->[\s\S]*?<!-- \/ADMIN_SIDEBAR_NAV_ITEMS -->/g;
+    if (markerRegex.test(html4)) {
+      const newHtml = html4.replace(
+        /<!-- ADMIN_SIDEBAR_NAV_ITEMS -->[\s\S]*?<!-- \/ADMIN_SIDEBAR_NAV_ITEMS -->/g,
+        navItemsHtml
+      );
+      c.res = new Response(newHtml, { status, headers });
+    } else {
+      c.res = new Response(html4, { status, headers });
+    }
+  };
+}
+
+// src/plugins/core-plugins/menu-plugin/services/menu-defaults.ts
+var SYSTEM_MENU_ITEMS = [
+  {
+    id: "menu:system:content",
+    label: "Content",
+    url: "/admin/content",
+    icon: "document",
+    target: "_self",
+    isExternal: false,
+    visible: true,
+    parent: null,
+    source: "system",
+    pluginId: null,
+    permissions: [],
+    lockedFields: ["url"],
+    sortOrder: 10
+  },
+  {
+    id: "menu:system:collections",
+    label: "Collections",
+    url: "/admin/collections",
+    icon: "collection",
+    target: "_self",
+    isExternal: false,
+    visible: true,
+    parent: null,
+    source: "system",
+    pluginId: null,
+    permissions: [],
+    lockedFields: ["url"],
+    sortOrder: 20
+  },
+  {
+    id: "menu:system:users",
+    label: "Users",
+    url: "/admin/users",
+    icon: "users",
+    target: "_self",
+    isExternal: false,
+    visible: true,
+    parent: null,
+    source: "system",
+    pluginId: null,
+    permissions: [],
+    lockedFields: ["url"],
+    sortOrder: 30
+  },
+  {
+    id: "menu:system:settings",
+    label: "Settings",
+    url: "/admin/settings",
+    icon: "cog",
+    target: "_self",
+    isExternal: false,
+    visible: true,
+    parent: null,
+    source: "system",
+    pluginId: null,
+    permissions: [],
+    lockedFields: ["url"],
+    sortOrder: 40
+  },
+  {
+    id: "menu:system:plugins",
+    label: "Plugins",
+    url: "/admin/plugins",
+    icon: "collection",
+    target: "_self",
+    isExternal: false,
+    visible: true,
+    parent: null,
+    source: "system",
+    pluginId: null,
+    permissions: [],
+    lockedFields: ["url"],
+    sortOrder: 50
+  },
+  {
+    id: "menu:system:menu",
+    label: "Menu",
+    url: "/admin/menu",
+    icon: "bars-3",
+    target: "_self",
+    isExternal: false,
+    visible: true,
+    parent: null,
+    source: "system",
+    pluginId: null,
+    permissions: [],
+    lockedFields: ["url"],
+    sortOrder: 60
+  }
+];
+
+// src/plugins/core-plugins/menu-plugin/templates/admin-menu-list.template.ts
+chunkUYJQDDEE_cjs.init_admin_layout_catalyst_template();
+function pluginStatusBadge(status) {
+  if (status === "inactive") {
+    return `<span class="inline-flex items-center rounded-md px-2 py-0.5 text-xs font-medium bg-red-50 dark:bg-red-500/10 text-red-700 dark:text-red-400 ring-1 ring-inset ring-red-600/20 dark:ring-red-500/20 ml-1">disabled</span>`;
+  }
+  return `<span class="inline-flex items-center rounded-md px-2 py-0.5 text-xs font-medium bg-green-50 dark:bg-green-500/10 text-green-700 dark:text-green-400 ring-1 ring-inset ring-green-600/20 dark:ring-green-500/20 ml-1">enabled</span>`;
+}
+function sourceBadge(source) {
+  switch (source) {
+    case "system":
+      return `<span class="inline-flex items-center rounded-md px-2 py-0.5 text-xs font-medium bg-zinc-100 dark:bg-zinc-700/50 text-zinc-600 dark:text-zinc-300 ring-1 ring-inset ring-zinc-300/50 dark:ring-zinc-600/50">system</span>`;
+    case "plugin":
+      return `<span class="inline-flex items-center rounded-md px-2 py-0.5 text-xs font-medium bg-blue-50 dark:bg-blue-500/10 text-blue-700 dark:text-blue-300 ring-1 ring-inset ring-blue-700/10 dark:ring-blue-400/20">plugin</span>`;
+    default:
+      return `<span class="inline-flex items-center rounded-md px-2 py-0.5 text-xs font-medium bg-green-50 dark:bg-green-500/10 text-green-700 dark:text-green-300 ring-1 ring-inset ring-green-700/10 dark:ring-green-400/20">user</span>`;
+  }
+}
+function iconPreview(icon) {
+  if (!icon) return '<span class="text-zinc-400 dark:text-zinc-500">\u2014</span>';
+  if (icon.trim().startsWith("<")) {
+    return `<span class="w-5 h-5 inline-flex items-center justify-center">${icon}</span>`;
+  }
+  return `<span class="text-xs font-mono text-zinc-500 dark:text-zinc-400 truncate max-w-[80px]">${chunkMNWKYY5E_cjs.escapeHtml(icon)}</span>`;
+}
+function renderMenuListPage(data) {
+  const messageBanner = data.message ? `<div class="mb-6 rounded-lg bg-cyan-50 dark:bg-cyan-900/20 border border-cyan-200 dark:border-cyan-700 px-4 py-3 text-sm text-cyan-800 dark:text-cyan-200">
+        ${chunkMNWKYY5E_cjs.escapeHtml(data.message)}
+      </div>` : "";
+  const pluginStatuses = data.pluginStatuses ?? {};
+  const rows = data.items.map((item, index) => {
+    const isFirst = index === 0;
+    const isLast = index === data.items.length - 1;
+    const moveUpForm = !isFirst ? `<form method="POST" action="/admin/menu/${chunkMNWKYY5E_cjs.escapeHtml(item.id)}/move-up" class="inline">
+          <button type="submit" class="p-1 rounded hover:bg-zinc-100 dark:hover:bg-zinc-700 text-zinc-400 hover:text-zinc-700 dark:hover:text-zinc-200 transition-colors" title="Move up">
+            <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+              <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M5 15l7-7 7 7"/>
+            </svg>
+          </button>
+        </form>` : `<span class="w-6 inline-block"></span>`;
+    const moveDownForm = !isLast ? `<form method="POST" action="/admin/menu/${chunkMNWKYY5E_cjs.escapeHtml(item.id)}/move-down" class="inline">
+          <button type="submit" class="p-1 rounded hover:bg-zinc-100 dark:hover:bg-zinc-700 text-zinc-400 hover:text-zinc-700 dark:hover:text-zinc-200 transition-colors" title="Move down">
+            <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+              <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M19 9l-7 7-7-7"/>
+            </svg>
+          </button>
+        </form>` : `<span class="w-6 inline-block"></span>`;
+    const deleteButton = item.source === "user" ? `<form method="POST" action="/admin/menu/${chunkMNWKYY5E_cjs.escapeHtml(item.id)}/delete" onsubmit="return confirm('Delete this item?')" class="inline">
+          <button type="submit" class="inline-flex items-center px-2.5 py-1.5 text-xs font-medium rounded-md text-red-700 dark:text-red-400 bg-red-50 dark:bg-red-500/10 hover:bg-red-100 dark:hover:bg-red-500/20 ring-1 ring-inset ring-red-600/20 dark:ring-red-500/20 transition-colors">
+            Delete
+          </button>
+        </form>` : "";
+    return `
+      <tr class="border-b border-zinc-100 dark:border-zinc-800 hover:bg-zinc-50/50 dark:hover:bg-zinc-800/30 transition-colors cursor-pointer" onclick="if(!event.target.closest('a,button,input,form')){window.location='/admin/menu/${chunkMNWKYY5E_cjs.escapeHtml(item.id)}'}">
+        <td class="px-4 py-3 w-16">
+          <div class="flex items-center gap-0.5">
+            ${moveUpForm}
+            ${moveDownForm}
+          </div>
+        </td>
+        <td class="px-4 py-3 w-16">
+          ${iconPreview(item.icon)}
+        </td>
+        <td class="px-4 py-3">
+          <span class="text-sm font-medium text-zinc-900 dark:text-zinc-100">${chunkMNWKYY5E_cjs.escapeHtml(item.label)}</span>
+          ${item.parent ? `<span class="ml-2 text-xs text-zinc-400 dark:text-zinc-500">child</span>` : ""}
+        </td>
+        <td class="px-4 py-3 max-w-[200px]">
+          <span class="text-sm text-zinc-500 dark:text-zinc-400 truncate block">${chunkMNWKYY5E_cjs.escapeHtml(item.url)}</span>
+        </td>
+        <td class="px-4 py-3">
+          ${sourceBadge(item.source)}
+          ${item.source === "plugin" && item.pluginId ? pluginStatusBadge(pluginStatuses[item.pluginId] ?? "active") : ""}
+        </td>
+        <td class="px-4 py-3">
+          <form method="POST" action="/admin/menu/${chunkMNWKYY5E_cjs.escapeHtml(item.id)}/visibility" class="inline">
+            <label class="relative inline-flex items-center cursor-pointer">
+              <input
+                type="checkbox"
+                name="visible"
+                value="true"
+                ${item.visible ? "checked" : ""}
+                onchange="this.form.requestSubmit()"
+                class="sr-only peer"
+              >
+              <div class="w-9 h-5 bg-zinc-200 dark:bg-zinc-700 peer-focus:outline-none peer-focus:ring-2 peer-focus:ring-cyan-500 rounded-full peer peer-checked:after:translate-x-full peer-checked:after:border-white after:content-[''] after:absolute after:top-[2px] after:left-[2px] after:bg-white after:border-zinc-300 after:border after:rounded-full after:h-4 after:w-4 after:transition-all peer-checked:bg-cyan-600"></div>
+            </label>
+          </form>
+        </td>
+        <td class="px-4 py-3">
+          <div class="flex items-center gap-2">
+            <a href="/admin/menu/${chunkMNWKYY5E_cjs.escapeHtml(item.id)}" class="inline-flex items-center px-2.5 py-1.5 text-xs font-medium rounded-md text-zinc-700 dark:text-zinc-300 bg-zinc-100 dark:bg-zinc-700 hover:bg-zinc-200 dark:hover:bg-zinc-600 ring-1 ring-inset ring-zinc-300/50 dark:ring-zinc-600/50 transition-colors">
+              Edit
+            </a>
+            ${deleteButton}
+          </div>
+        </td>
+      </tr>`;
+  }).join("\n");
+  const emptyState = data.items.length === 0 ? `<tr>
+        <td colspan="7" class="px-4 py-12 text-center text-sm text-zinc-400 dark:text-zinc-500">
+          No menu items yet. <a href="/admin/menu/new" class="text-cyan-600 dark:text-cyan-400 underline hover:no-underline">Add a link</a> to get started.
+        </td>
+      </tr>` : "";
+  const pageContent = `
+    <div>
+      <div class="flex flex-col sm:flex-row sm:items-center sm:justify-between mb-6">
+        <div>
+          <h1 class="text-2xl/8 font-semibold text-zinc-950 dark:text-white sm:text-xl/8">Menu Manager</h1>
+          <p class="mt-1 text-sm/6 text-zinc-500 dark:text-zinc-400">Manage navigation links and their order</p>
+        </div>
+        <div class="mt-4 sm:mt-0">
+          <a href="/admin/menu/new" class="inline-flex items-center justify-center rounded-lg bg-zinc-950 dark:bg-white px-3.5 py-2.5 text-sm font-semibold text-white dark:text-zinc-950 hover:bg-zinc-800 dark:hover:bg-zinc-100 transition-colors shadow-sm">
+            <svg class="-ml-0.5 mr-1.5 h-5 w-5" viewBox="0 0 20 20" fill="currentColor">
+              <path d="M10.75 4.75a.75.75 0 00-1.5 0v4.5h-4.5a.75.75 0 000 1.5h4.5v4.5a.75.75 0 001.5 0v-4.5h4.5a.75.75 0 000-1.5h-4.5v-4.5z"/>
+            </svg>
+            Add Link
+          </a>
+        </div>
+      </div>
+
+      ${messageBanner}
+
+      <div class="rounded-xl overflow-hidden bg-white dark:bg-zinc-900 shadow-sm ring-1 ring-zinc-950/5 dark:ring-white/10">
+        <table class="min-w-full divide-y divide-zinc-200 dark:divide-zinc-800">
+          <thead>
+            <tr class="bg-zinc-50 dark:bg-zinc-800/50">
+              <th class="px-4 py-3 text-left text-xs font-medium text-zinc-500 dark:text-zinc-400 uppercase tracking-wider w-16">Order</th>
+              <th class="px-4 py-3 text-left text-xs font-medium text-zinc-500 dark:text-zinc-400 uppercase tracking-wider w-16">Icon</th>
+              <th class="px-4 py-3 text-left text-xs font-medium text-zinc-500 dark:text-zinc-400 uppercase tracking-wider">Label</th>
+              <th class="px-4 py-3 text-left text-xs font-medium text-zinc-500 dark:text-zinc-400 uppercase tracking-wider">URL</th>
+              <th class="px-4 py-3 text-left text-xs font-medium text-zinc-500 dark:text-zinc-400 uppercase tracking-wider">Source</th>
+              <th class="px-4 py-3 text-left text-xs font-medium text-zinc-500 dark:text-zinc-400 uppercase tracking-wider">Visible</th>
+              <th class="px-4 py-3 text-left text-xs font-medium text-zinc-500 dark:text-zinc-400 uppercase tracking-wider">Actions</th>
+            </tr>
+          </thead>
+          <tbody class="divide-y divide-zinc-100 dark:divide-zinc-800">
+            ${rows}
+            ${emptyState}
+          </tbody>
+        </table>
+      </div>
+    </div>
+  `;
+  const layoutData = {
+    title: "Menu Manager",
+    pageTitle: "Menu Manager",
+    currentPath: data.currentPath ?? "/admin/menu",
+    user: data.user,
+    version: data.version,
+    dynamicMenuItems: data.dynamicMenuItems,
+    content: pageContent
+  };
+  return chunkUYJQDDEE_cjs.renderAdminLayoutCatalyst(layoutData);
+}
+function renderMenuSettingsContent(items, pluginStatuses = {}, message) {
+  const messageBanner = "";
+  const rows = items.map((item, index) => {
+    const isFirst = index === 0;
+    const isLast = index === items.length - 1;
+    const moveUpForm = !isFirst ? `<form method="POST" action="/admin/menu/${chunkMNWKYY5E_cjs.escapeHtml(item.id)}/move-up" class="inline">
+          <button type="submit" class="p-1 rounded hover:bg-zinc-100 dark:hover:bg-zinc-700 text-zinc-400 hover:text-zinc-700 dark:hover:text-zinc-200 transition-colors" title="Move up">
+            <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M5 15l7-7 7 7"/></svg>
+          </button>
+        </form>` : `<span class="w-6 inline-block"></span>`;
+    const moveDownForm = !isLast ? `<form method="POST" action="/admin/menu/${chunkMNWKYY5E_cjs.escapeHtml(item.id)}/move-down" class="inline">
+          <button type="submit" class="p-1 rounded hover:bg-zinc-100 dark:hover:bg-zinc-700 text-zinc-400 hover:text-zinc-700 dark:hover:text-zinc-200 transition-colors" title="Move down">
+            <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M19 9l-7 7-7-7"/></svg>
+          </button>
+        </form>` : `<span class="w-6 inline-block"></span>`;
+    const deleteButton = item.source === "user" ? `<form method="POST" action="/admin/menu/${chunkMNWKYY5E_cjs.escapeHtml(item.id)}/delete" onsubmit="return confirm('Delete this item?')" class="inline">
+          <button type="submit" class="inline-flex items-center px-2.5 py-1.5 text-xs font-medium rounded-md text-red-700 dark:text-red-400 bg-red-50 dark:bg-red-500/10 hover:bg-red-100 dark:hover:bg-red-500/20 ring-1 ring-inset ring-red-600/20 dark:ring-red-500/20 transition-colors">Delete</button>
+        </form>` : "";
+    return `
+      <tr class="border-b border-zinc-100 dark:border-zinc-800 hover:bg-zinc-50/50 dark:hover:bg-zinc-800/30 transition-colors cursor-pointer" onclick="if(!event.target.closest('a,button,input,form')){window.location='/admin/menu/${chunkMNWKYY5E_cjs.escapeHtml(item.id)}'}">
+        <td class="px-4 py-3 w-16">
+          <div class="flex items-center gap-0.5">${moveUpForm}${moveDownForm}</div>
+        </td>
+        <td class="px-4 py-3 w-16">${iconPreview(item.icon)}</td>
+        <td class="px-4 py-3">
+          <span class="text-sm font-medium text-zinc-900 dark:text-zinc-100">${chunkMNWKYY5E_cjs.escapeHtml(item.label)}</span>
+          ${item.parent ? `<span class="ml-2 text-xs text-zinc-400 dark:text-zinc-500">child</span>` : ""}
+        </td>
+        <td class="px-4 py-3 max-w-[200px]">
+          <span class="text-sm text-zinc-500 dark:text-zinc-400 truncate block">${chunkMNWKYY5E_cjs.escapeHtml(item.url)}</span>
+        </td>
+        <td class="px-4 py-3">${sourceBadge(item.source)}${item.source === "plugin" && item.pluginId ? pluginStatusBadge(pluginStatuses[item.pluginId] ?? "active") : ""}</td>
+        <td class="px-4 py-3">
+          <form method="POST" action="/admin/menu/${chunkMNWKYY5E_cjs.escapeHtml(item.id)}/visibility" class="inline">
+            <label class="relative inline-flex items-center cursor-pointer">
+              <input type="checkbox" name="visible" value="true" ${item.visible ? "checked" : ""} onchange="this.form.requestSubmit()" class="sr-only peer">
+              <div class="w-9 h-5 bg-zinc-200 dark:bg-zinc-700 peer-focus:outline-none peer-focus:ring-2 peer-focus:ring-cyan-500 rounded-full peer peer-checked:after:translate-x-full peer-checked:after:border-white after:content-[''] after:absolute after:top-[2px] after:left-[2px] after:bg-white after:border-zinc-300 after:border after:rounded-full after:h-4 after:w-4 after:transition-all peer-checked:bg-cyan-600"></div>
+            </label>
+          </form>
+        </td>
+        <td class="px-4 py-3">
+          <div class="flex items-center gap-2">
+            <a href="/admin/menu/${chunkMNWKYY5E_cjs.escapeHtml(item.id)}" class="inline-flex items-center px-2.5 py-1.5 text-xs font-medium rounded-md text-zinc-700 dark:text-zinc-300 bg-zinc-100 dark:bg-zinc-700 hover:bg-zinc-200 dark:hover:bg-zinc-600 ring-1 ring-inset ring-zinc-300/50 dark:ring-zinc-600/50 transition-colors">Edit</a>
+            ${deleteButton}
+          </div>
+        </td>
+      </tr>`;
+  }).join("\n");
+  const emptyState = items.length === 0 ? `<tr><td colspan="7" class="px-4 py-12 text-center text-sm text-zinc-400 dark:text-zinc-500">No menu items yet. <a href="/admin/menu/new" class="text-cyan-600 dark:text-cyan-400 underline hover:no-underline">Add a link</a> to get started.</td></tr>` : "";
+  return `
+    <script>
+      (function() {
+        function getCsrfToken() {
+          var c = document.cookie.split('; ').find(function(r) { return r.startsWith('csrf_token='); });
+          return c ? c.substring(c.indexOf('=') + 1) : '';
+        }
+        document.addEventListener('submit', function(e) {
+          var form = e.target;
+          if (!form || form.tagName !== 'FORM') return;
+          if ((form.method || 'GET').toUpperCase() === 'GET') return;
+          if (!form.querySelector('input[name="_csrf"]')) {
+            var input = document.createElement('input');
+            input.type = 'hidden';
+            input.name = '_csrf';
+            input.value = getCsrfToken();
+            form.appendChild(input);
+          }
+        });
+      })();
+    </script>
+    <div>
+      <div class="flex items-center justify-between mb-4">
+        <p class="text-sm text-zinc-500 dark:text-zinc-400">Manage navigation links and their order in the sidebar.</p>
+        <a href="/admin/menu/new" class="inline-flex items-center justify-center rounded-lg bg-zinc-950 dark:bg-white px-3 py-2 text-sm font-semibold text-white dark:text-zinc-950 hover:bg-zinc-800 dark:hover:bg-zinc-100 transition-colors shadow-sm">
+          <svg class="-ml-0.5 mr-1.5 h-4 w-4" viewBox="0 0 20 20" fill="currentColor"><path d="M10.75 4.75a.75.75 0 00-1.5 0v4.5h-4.5a.75.75 0 000 1.5h4.5v4.5a.75.75 0 001.5 0v-4.5h4.5a.75.75 0 000-1.5h-4.5v-4.5z"/></svg>
+          Add Link
+        </a>
+      </div>
+      ${messageBanner}
+      <div class="rounded-xl overflow-hidden bg-white dark:bg-zinc-900 shadow-sm ring-1 ring-zinc-950/5 dark:ring-white/10">
+        <table class="min-w-full divide-y divide-zinc-200 dark:divide-zinc-800">
+          <thead>
+            <tr class="bg-zinc-50 dark:bg-zinc-800/50">
+              <th class="px-4 py-3 text-left text-xs font-medium text-zinc-500 dark:text-zinc-400 uppercase tracking-wider w-16">Order</th>
+              <th class="px-4 py-3 text-left text-xs font-medium text-zinc-500 dark:text-zinc-400 uppercase tracking-wider w-16">Icon</th>
+              <th class="px-4 py-3 text-left text-xs font-medium text-zinc-500 dark:text-zinc-400 uppercase tracking-wider">Label</th>
+              <th class="px-4 py-3 text-left text-xs font-medium text-zinc-500 dark:text-zinc-400 uppercase tracking-wider">URL</th>
+              <th class="px-4 py-3 text-left text-xs font-medium text-zinc-500 dark:text-zinc-400 uppercase tracking-wider">Source</th>
+              <th class="px-4 py-3 text-left text-xs font-medium text-zinc-500 dark:text-zinc-400 uppercase tracking-wider">Visible</th>
+              <th class="px-4 py-3 text-left text-xs font-medium text-zinc-500 dark:text-zinc-400 uppercase tracking-wider">Actions</th>
+            </tr>
+          </thead>
+          <tbody class="divide-y divide-zinc-100 dark:divide-zinc-800">
+            ${rows}
+            ${emptyState}
+          </tbody>
+        </table>
+      </div>
+    </div>
+  `;
+}
+
+// src/plugins/core-plugins/menu-plugin/templates/admin-menu-form.template.ts
+chunkUYJQDDEE_cjs.init_admin_layout_catalyst_template();
+
+// src/plugins/core-plugins/menu-plugin/templates/icon-picker.template.ts
+var ICONS = [
+  {
+    name: "puzzle-piece",
+    svg: '<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M11 4a2 2 0 114 0v1a1 1 0 001 1h3a1 1 0 011 1v3a1 1 0 01-1 1h-1a2 2 0 100 4h1a1 1 0 011 1v3a1 1 0 01-1 1h-3a1 1 0 01-1-1v-1a2 2 0 10-4 0v1a1 1 0 01-1 1H7a1 1 0 01-1-1v-3a1 1 0 00-1-1H4a2 2 0 110-4h1a1 1 0 001-1V7a1 1 0 011-1h3a1 1 0 001-1V4z"/>'
+  },
+  {
+    name: "document",
+    svg: '<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M7 21h10a2 2 0 002-2V9.414a1 1 0 00-.293-.707l-5.414-5.414A1 1 0 0012.586 3H7a2 2 0 00-2 2v14a2 2 0 002 2z"/>'
+  },
+  {
+    name: "collection",
+    svg: '<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M19 11H5m14 0a2 2 0 012 2v6a2 2 0 01-2 2H5a2 2 0 01-2-2v-6a2 2 0 012-2m14 0V9a2 2 0 00-2-2M5 11V9a2 2 0 012-2m0 0V5a2 2 0 012-2h6a2 2 0 012 2v2M7 7h10"/>'
+  },
+  {
+    name: "users",
+    svg: '<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 4.354a4 4 0 110 5.292M15 21H3v-1a6 6 0 0112 0v1zm0 0h6v-1a6 6 0 00-9-5.197M13 7a4 4 0 11-8 0 4 4 0 018 0z"/>'
+  },
+  {
+    name: "cog",
+    svg: '<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M10.325 4.317c.426-1.756 2.924-1.756 3.35 0a1.724 1.724 0 002.573 1.066c1.543-.94 3.31.826 2.37 2.37a1.724 1.724 0 001.065 2.572c1.756.426 1.756 2.924 0 3.35a1.724 1.724 0 00-1.066 2.573c.94 1.543-.826 3.31-2.37 2.37a1.724 1.724 0 00-2.572 1.065c-.426 1.756-2.924 1.756-3.35 0a1.724 1.724 0 00-2.573-1.066c-1.543.94-3.31-.826-2.37-2.37a1.724 1.724 0 00-1.065-2.572c-1.756-.426-1.756-2.924 0-3.35a1.724 1.724 0 001.066-2.573c-.94-1.543.826-3.31 2.37-2.37.996.608 2.296.07 2.572-1.065z"/><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M15 12a3 3 0 11-6 0 3 3 0 016 0z"/>'
+  },
+  {
+    name: "envelope",
+    svg: '<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M3 8l7.89 5.26a2 2 0 002.22 0L21 8M5 19h14a2 2 0 002-2V7a2 2 0 00-2-2H5a2 2 0 00-2 2v10a2 2 0 002 2z"/>'
+  },
+  {
+    name: "chart",
+    svg: '<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 19v-6a2 2 0 00-2-2H5a2 2 0 00-2 2v6a2 2 0 002 2h2a2 2 0 002-2zm0 0V9a2 2 0 012-2h2a2 2 0 012 2v10m-6 0a2 2 0 002 2h2a2 2 0 002-2m0 0V5a2 2 0 012-2h2a2 2 0 012 2v14a2 2 0 01-2 2h-2a2 2 0 01-2-2z"/>'
+  },
+  {
+    name: "bolt",
+    svg: '<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M13 10V3L4 14h7v7l9-11h-7z"/>'
+  },
+  {
+    name: "sparkles",
+    svg: '<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M5 3v4M3 5h4M6 17v4m-2-2h4m5-16l2.286 6.857L21 12l-5.714 2.143L13 21l-2.286-6.857L5 12l5.714-2.143L13 3z"/>'
+  },
+  {
+    name: "photo",
+    svg: '<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M4 16l4.586-4.586a2 2 0 012.828 0L16 16m-2-2l1.586-1.586a2 2 0 012.828 0L20 14m-6-6h.01M6 20h12a2 2 0 002-2V6a2 2 0 00-2-2H6a2 2 0 00-2 2v12a2 2 0 002 2z"/>'
+  },
+  {
+    name: "lock",
+    svg: '<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 15v2m-6 4h12a2 2 0 002-2v-6a2 2 0 00-2-2H6a2 2 0 00-2 2v6a2 2 0 002 2zm10-10V7a4 4 0 00-8 0v4h8z"/>'
+  },
+  {
+    name: "magnifying-glass",
+    svg: '<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M21 21l-6-6m2-5a7 7 0 11-14 0 7 7 0 0114 0z"/>'
+  },
+  {
+    name: "chart-bar",
+    svg: '<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 19v-6a2 2 0 00-2-2H5a2 2 0 00-2 2v6a2 2 0 002 2h2a2 2 0 002-2zm0 0V9a2 2 0 012-2h2a2 2 0 012 2v10m-6 0a2 2 0 002 2h2a2 2 0 002-2m0 0V5a2 2 0 012-2h2a2 2 0 012 2v14a2 2 0 01-2 2h-2a2 2 0 01-2-2z"/>'
+  },
+  {
+    name: "image",
+    svg: '<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M4 16l4.586-4.586a2 2 0 012.828 0L16 16m-2-2l1.586-1.586a2 2 0 012.828 0L20 14m-6-6h.01M6 20h12a2 2 0 002-2V6a2 2 0 00-2-2H6a2 2 0 00-2 2v12a2 2 0 002 2z"/>'
+  },
+  {
+    name: "key",
+    svg: '<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M15 7a2 2 0 012 2m4 0a6 6 0 01-7.743 5.743L11 17H9v2H7v2H4a1 1 0 01-1-1v-2.586a1 1 0 01.293-.707l5.964-5.964A6 6 0 1121 9z"/>'
+  },
+  {
+    name: "shield-check",
+    svg: '<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 12l2 2 4-4m5.618-4.016A11.955 11.955 0 0112 2.944a11.955 11.955 0 01-8.618 3.04A12.02 12.02 0 003 9c0 5.591 3.824 10.29 9 11.622 5.176-1.332 9-6.03 9-11.622 0-1.042-.133-2.052-.382-3.016z"/>'
+  },
+  {
+    name: "credit-card",
+    svg: '<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M3 10h18M7 15h1m4 0h1m-7 4h12a3 3 0 003-3V8a3 3 0 00-3-3H6a3 3 0 00-3 3v8a3 3 0 003 3z"/>'
+  },
+  {
+    name: "document-text",
+    svg: '<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 12h6m-6 4h6m2 5H7a2 2 0 01-2-2V5a2 2 0 012-2h5.586a1 1 0 01.707.293l5.414 5.414a1 1 0 01.293.707V19a2 2 0 01-2 2z"/>'
+  },
+  {
+    name: "pencil-square",
+    svg: '<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M11 5H6a2 2 0 00-2 2v11a2 2 0 002 2h11a2 2 0 002-2v-5m-1.414-9.414a2 2 0 112.828 2.828L11.828 15H9v-2.828l8.586-8.586z"/>'
+  },
+  {
+    name: "server",
+    svg: '<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M5 12h14M5 12a2 2 0 01-2-2V6a2 2 0 012-2h14a2 2 0 012 2v4a2 2 0 01-2 2M5 12a2 2 0 00-2 2v4a2 2 0 002 2h14a2 2 0 002-2v-4a2 2 0 00-2-2m-2-4h.01M17 16h.01"/>'
+  },
+  {
+    name: "building-office",
+    svg: '<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M19 21V5a2 2 0 00-2-2H7a2 2 0 00-2 2v16m14 0h2m-2 0h-5m-9 0H3m2 0h5M9 7h1m-1 4h1m4-4h1m-1 4h1m-5 10v-5a1 1 0 011-1h2a1 1 0 011 1v5m-4 0h4"/>'
+  },
+  {
+    name: "home",
+    svg: '<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M3 12l2-2m0 0l7-7 7 7M5 10v10a1 1 0 001 1h3m10-11l2 2m-2-2v10a1 1 0 01-1 1h-3m-6 0a1 1 0 001-1v-4a1 1 0 011-1h2a1 1 0 011 1v4a1 1 0 001 1m-6 0h6"/>'
+  },
+  {
+    name: "star",
+    svg: '<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M11.049 2.927c.3-.921 1.603-.921 1.902 0l1.519 4.674a1 1 0 00.95.69h4.915c.969 0 1.371 1.24.588 1.81l-3.976 2.888a1 1 0 00-.363 1.118l1.518 4.674c.3.922-.755 1.688-1.538 1.118l-3.976-2.888a1 1 0 00-1.176 0l-3.976 2.888c-.783.57-1.838-.197-1.538-1.118l1.518-4.674a1 1 0 00-.363-1.118l-3.976-2.888c-.784-.57-.38-1.81.588-1.81h4.914a1 1 0 00.951-.69l1.519-4.674z"/>'
+  },
+  {
+    name: "tag",
+    svg: '<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M7 7h.01M7 3h5c.512 0 1.024.195 1.414.586l7 7a2 2 0 010 2.828l-7 7a2 2 0 01-2.828 0l-7-7A1.994 1.994 0 013 12V7a4 4 0 014-4z"/>'
+  },
+  {
+    name: "link",
+    svg: '<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M13.828 10.172a4 4 0 00-5.656 0l-4 4a4 4 0 105.656 5.656l1.102-1.101m-.758-4.899a4 4 0 005.656 0l4-4a4 4 0 00-5.656-5.656l-1.1 1.1"/>'
+  },
+  {
+    name: "external-link",
+    svg: '<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M10 6H6a2 2 0 00-2 2v10a2 2 0 002 2h10a2 2 0 002-2v-4M14 4h6m0 0v6m0-6L10 14"/>'
+  },
+  {
+    name: "eye",
+    svg: '<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M15 12a3 3 0 11-6 0 3 3 0 016 0z"/><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M2.458 12C3.732 7.943 7.523 5 12 5c4.478 0 8.268 2.943 9.542 7-1.274 4.057-5.064 7-9.542 7-4.477 0-8.268-2.943-9.542-7z"/>'
+  },
+  {
+    name: "bars-3",
+    svg: '<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M4 6h16M4 12h16M4 18h16"/>'
+  },
+  {
+    name: "arrow-right",
+    svg: '<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M14 5l7 7m0 0l-7 7m7-7H3"/>'
+  }
+];
+function renderIconPicker(selectedIcon) {
+  const safeSelected = chunkMNWKYY5E_cjs.escapeHtml(selectedIcon);
+  const iconButtons = ICONS.map(({ name, svg }) => {
+    const isSelected = name === selectedIcon;
+    const selectedClasses = isSelected ? "ring-2 ring-cyan-500 bg-cyan-50 dark:bg-cyan-900/30" : "ring-1 ring-zinc-200 dark:ring-zinc-700 hover:ring-cyan-300 dark:hover:ring-cyan-600 hover:bg-zinc-50 dark:hover:bg-zinc-800";
+    return `
+      <button
+        type="button"
+        data-icon-name="${name}"
+        onclick="selectIcon('${name}')"
+        class="icon-btn flex flex-col items-center gap-1 p-2 rounded-lg transition-all duration-150 ${selectedClasses}"
+        title="${name}"
+      >
+        <svg class="w-6 h-6 text-zinc-700 dark:text-zinc-300" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+          ${svg}
+        </svg>
+        <span class="text-[10px] text-zinc-500 dark:text-zinc-400 truncate max-w-[56px] text-center leading-tight">${name}</span>
+      </button>`;
+  }).join("\n");
+  return `
+    <div class="space-y-4">
+      <input type="hidden" name="icon" id="icon-input" value="${safeSelected}">
+
+      <div>
+        <p class="text-sm font-medium text-zinc-700 dark:text-zinc-300 mb-2">Choose an icon</p>
+        <div class="grid grid-cols-6 sm:grid-cols-8 md:grid-cols-10 gap-2 max-h-64 overflow-y-auto p-1 rounded-lg border border-zinc-200 dark:border-zinc-700 bg-white dark:bg-zinc-900">
+          ${iconButtons}
+        </div>
+      </div>
+
+      <div>
+        <label class="text-sm font-medium text-zinc-700 dark:text-zinc-300 block mb-1">Custom SVG (overrides selection above)</label>
+        <textarea
+          id="custom-svg-input"
+          rows="3"
+          placeholder='<svg xmlns="http://www.w3.org/2000/svg" ...>...</svg>'
+          oninput="handleCustomSvg(this.value)"
+          class="w-full rounded-lg border border-zinc-300 dark:border-zinc-600 bg-white dark:bg-zinc-800 px-3 py-2 text-sm text-zinc-900 dark:text-zinc-100 placeholder:text-zinc-400 dark:placeholder:text-zinc-500 focus:outline-none focus:ring-2 focus:ring-cyan-500 font-mono"
+        ></textarea>
+        <p class="mt-1 text-xs text-zinc-400 dark:text-zinc-500">Paste raw SVG markup to use a custom icon.</p>
+      </div>
+    </div>
+
+    <script>
+      (function () {
+        function selectIcon(name) {
+          document.getElementById('icon-input').value = name;
+          document.getElementById('custom-svg-input').value = '';
+          document.querySelectorAll('.icon-btn').forEach(function (btn) {
+            var isSelected = btn.getAttribute('data-icon-name') === name;
+            btn.className = btn.className
+              .replace(/ring-2 ring-cyan-500 bg-cyan-50 dark:bg-cyan-900\\/30/g, '')
+              .replace(/ring-1 ring-zinc-200 dark:ring-zinc-700 hover:ring-cyan-300 dark:hover:ring-cyan-600 hover:bg-zinc-50 dark:hover:bg-zinc-800/g, '')
+              .trim();
+            if (isSelected) {
+              btn.className += ' ring-2 ring-cyan-500 bg-cyan-50 dark:bg-cyan-900/30';
+            } else {
+              btn.className += ' ring-1 ring-zinc-200 dark:ring-zinc-700 hover:ring-cyan-300 dark:hover:ring-cyan-600 hover:bg-zinc-50 dark:hover:bg-zinc-800';
+            }
+          });
+        }
+
+        function handleCustomSvg(value) {
+          var trimmed = value.trim();
+          if (trimmed) {
+            document.getElementById('icon-input').value = trimmed;
+            document.querySelectorAll('.icon-btn').forEach(function (btn) {
+              btn.className = btn.className
+                .replace(/ring-2 ring-cyan-500 bg-cyan-50 dark:bg-cyan-900\\/30/g, '')
+                .replace(/ring-1 ring-zinc-200 dark:ring-zinc-700 hover:ring-cyan-300 dark:hover:ring-cyan-600 hover:bg-zinc-50 dark:hover:bg-zinc-800/g, '')
+                .trim();
+              btn.className += ' ring-1 ring-zinc-200 dark:ring-zinc-700 hover:ring-cyan-300 dark:hover:ring-cyan-600 hover:bg-zinc-50 dark:hover:bg-zinc-800';
+            });
+          }
+        }
+
+        window.selectIcon = selectIcon;
+        window.handleCustomSvg = handleCustomSvg;
+      })();
+    </script>
+  `;
+}
+
+// src/plugins/core-plugins/menu-plugin/templates/admin-menu-form.template.ts
+function renderMenuFormPage(data) {
+  const { item, topLevelItems } = data;
+  const isEdit = item !== null;
+  const errorBanner = data.error ? `<div class="mb-6 rounded-lg bg-red-50 dark:bg-red-900/20 border border-red-200 dark:border-red-700 px-4 py-3 text-sm text-red-800 dark:text-red-300">
+        ${chunkMNWKYY5E_cjs.escapeHtml(data.error)}
+      </div>` : "";
+  const parentOptions = topLevelItems.filter((t) => !isEdit || t.id !== item?.id).sort((a, b) => a.label.localeCompare(b.label)).map((t) => {
+    const selected = item?.parent === t.id ? "selected" : "";
+    return `<option value="${chunkMNWKYY5E_cjs.escapeHtml(t.id)}" ${selected}>${chunkMNWKYY5E_cjs.escapeHtml(t.label)}</option>`;
+  }).join("\n");
+  const targetSelfSelected = !item || item.target === "_self" ? "selected" : "";
+  const targetBlankSelected = item?.target === "_blank" ? "selected" : "";
+  const visibleChecked = item ? item.visible ? "checked" : "" : "checked";
+  const formAttrs = isEdit ? `method="POST" action="/admin/menu/${chunkMNWKYY5E_cjs.escapeHtml(item.id)}/update"` : `method="POST" action="/admin/menu"`;
+  const submitLabel = isEdit ? "Save Changes" : "Add Item";
+  const pageTitle = isEdit ? `Edit: ${chunkMNWKYY5E_cjs.escapeHtml(item.label)}` : "Add Menu Item";
+  const pageContent = `
+    <div class="max-w-2xl">
+      <div class="mb-6">
+        <a href="/admin/menu" class="inline-flex items-center gap-1.5 text-sm text-zinc-500 dark:text-zinc-400 hover:text-zinc-700 dark:hover:text-zinc-200 transition-colors">
+          <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+            <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M15 19l-7-7 7-7"/>
+          </svg>
+          Back to Menu Manager
+        </a>
+        <h1 class="mt-3 text-2xl/8 font-semibold text-zinc-950 dark:text-white sm:text-xl/8">${pageTitle}</h1>
+      </div>
+
+      ${errorBanner}
+
+      <div class="rounded-xl bg-white dark:bg-zinc-900 shadow-sm ring-1 ring-zinc-950/5 dark:ring-white/10 p-6">
+        <form ${formAttrs} class="space-y-6">
+
+          <div>
+            <label for="menu-label" class="block text-sm font-medium text-zinc-700 dark:text-zinc-300 mb-1">
+              Label <span class="text-red-500">*</span>
+            </label>
+            <input
+              id="menu-label"
+              type="text"
+              name="label"
+              required
+              value="${isEdit ? chunkMNWKYY5E_cjs.escapeHtml(item.label) : ""}"
+              placeholder="e.g. Documentation"
+              class="w-full rounded-lg border border-zinc-300 dark:border-zinc-600 bg-white dark:bg-zinc-800 px-3 py-2 text-sm text-zinc-900 dark:text-zinc-100 placeholder:text-zinc-400 dark:placeholder:text-zinc-500 focus:outline-none focus:ring-2 focus:ring-cyan-500 transition-shadow"
+            >
+          </div>
+
+          <div>
+            <label for="menu-url" class="block text-sm font-medium text-zinc-700 dark:text-zinc-300 mb-1">URL</label>
+            <input
+              id="menu-url"
+              type="text"
+              name="url"
+              value="${isEdit ? chunkMNWKYY5E_cjs.escapeHtml(item.url) : ""}"
+              placeholder="/path/to/page or https://example.com"
+              class="w-full rounded-lg border border-zinc-300 dark:border-zinc-600 bg-white dark:bg-zinc-800 px-3 py-2 text-sm text-zinc-900 dark:text-zinc-100 placeholder:text-zinc-400 dark:placeholder:text-zinc-500 focus:outline-none focus:ring-2 focus:ring-cyan-500 transition-shadow"
+            >
+          </div>
+
+          <div class="grid grid-cols-2 gap-4">
+            <div>
+              <label for="menu-target" class="block text-sm font-medium text-zinc-700 dark:text-zinc-300 mb-1">Open in</label>
+              <select
+                id="menu-target"
+                name="target"
+                class="w-full rounded-lg border border-zinc-300 dark:border-zinc-600 bg-white dark:bg-zinc-800 px-3 py-2 text-sm text-zinc-900 dark:text-zinc-100 focus:outline-none focus:ring-2 focus:ring-cyan-500 transition-shadow"
+              >
+                <option value="_self" ${targetSelfSelected}>Same tab</option>
+                <option value="_blank" ${targetBlankSelected}>New tab</option>
+              </select>
+            </div>
+
+            <div>
+              <label for="menu-parent" class="block text-sm font-medium text-zinc-700 dark:text-zinc-300 mb-1">Parent</label>
+              <select
+                id="menu-parent"
+                name="parent"
+                class="w-full rounded-lg border border-zinc-300 dark:border-zinc-600 bg-white dark:bg-zinc-800 px-3 py-2 text-sm text-zinc-900 dark:text-zinc-100 focus:outline-none focus:ring-2 focus:ring-cyan-500 transition-shadow"
+              >
+                <option value="">Top level (none)</option>
+                ${parentOptions}
+              </select>
+            </div>
+          </div>
+
+          <div class="flex items-center gap-3">
+            <label class="relative inline-flex items-center cursor-pointer">
+              <input
+                id="menu-visible"
+                type="checkbox"
+                name="visible"
+                value="1"
+                ${visibleChecked}
+                class="sr-only peer"
+              >
+              <div class="w-9 h-5 bg-zinc-200 dark:bg-zinc-700 peer-focus:outline-none peer-focus:ring-2 peer-focus:ring-cyan-500 rounded-full peer peer-checked:after:translate-x-full peer-checked:after:border-white after:content-[''] after:absolute after:top-[2px] after:left-[2px] after:bg-white after:border-zinc-300 after:border after:rounded-full after:h-4 after:w-4 after:transition-all peer-checked:bg-cyan-600"></div>
+            </label>
+            <label for="menu-visible" class="text-sm font-medium text-zinc-700 dark:text-zinc-300 cursor-pointer">Visible in navigation</label>
+          </div>
+
+          <div>
+            <p class="block text-sm font-medium text-zinc-700 dark:text-zinc-300 mb-2">Icon</p>
+            ${renderIconPicker(item?.icon ?? "link")}
+          </div>
+
+          <div class="flex items-center justify-end gap-3 pt-2 border-t border-zinc-100 dark:border-zinc-800">
+            <a href="/admin/menu" class="inline-flex items-center px-3.5 py-2 text-sm font-medium rounded-lg text-zinc-700 dark:text-zinc-300 bg-zinc-100 dark:bg-zinc-700 hover:bg-zinc-200 dark:hover:bg-zinc-600 transition-colors">
+              Cancel
+            </a>
+            <button
+              type="submit"
+              class="inline-flex items-center px-3.5 py-2 text-sm font-semibold rounded-lg bg-zinc-950 dark:bg-white text-white dark:text-zinc-950 hover:bg-zinc-800 dark:hover:bg-zinc-100 transition-colors shadow-sm"
+            >
+              ${submitLabel}
+            </button>
+          </div>
+
+        </form>
+      </div>
+    </div>
+  `;
+  const layoutData = {
+    title: isEdit ? "Edit Menu Item" : "Add Menu Item",
+    pageTitle: isEdit ? "Edit Menu Item" : "Add Menu Item",
+    currentPath: data.currentPath ?? "/admin/menu",
+    user: data.user,
+    version: data.version,
+    dynamicMenuItems: data.dynamicMenuItems,
+    content: pageContent
+  };
+  return chunkUYJQDDEE_cjs.renderAdminLayoutCatalyst(layoutData);
+}
+
+// src/plugins/core-plugins/menu-plugin/routes/admin-menu.ts
+function sanitizeUrl(url) {
+  const trimmed = url.trim();
+  if (/^javascript:/i.test(trimmed) || /^data:/i.test(trimmed)) return "";
+  return trimmed;
+}
+var adminMenuRoutes = new hono.Hono();
+adminMenuRoutes.use("*", chunk37V3RET3_cjs.requireAuth());
+adminMenuRoutes.use("*", chunk37V3RET3_cjs.requireRole(["admin"]));
+adminMenuRoutes.get("/", async (c) => {
+  const db = c.env.DB;
+  const user = c.get("user");
+  const items = await listMenuItems(db);
+  buildSidebarTree(items);
+  const pluginIds = [...new Set(items.filter((i) => i.pluginId).map((i) => i.pluginId))];
+  const pluginStatuses = await fetchPluginStatuses(db, pluginIds);
+  return c.html(renderMenuListPage({
+    items,
+    pluginStatuses,
+    user,
+    currentPath: "/admin/menu",
+    version: c.get("appVersion"),
+    dynamicMenuItems: c.get("pluginMenuItems"),
+    message: c.req.query("message")
+  }));
+});
+adminMenuRoutes.get("/new", async (c) => {
+  const db = c.env.DB;
+  const topLevelItems = await listMenuItems(db);
+  return c.html(renderMenuFormPage({
+    item: null,
+    topLevelItems: topLevelItems.filter((i) => !i.parent),
+    user: c.get("user"),
+    currentPath: "/admin/menu",
+    version: c.get("appVersion"),
+    dynamicMenuItems: c.get("pluginMenuItems")
+  }));
+});
+adminMenuRoutes.get("/:id", async (c) => {
+  const db = c.env.DB;
+  const id = c.req.param("id");
+  const items = await listMenuItems(db);
+  const item = items.find((i) => i.id === id);
+  if (!item) return c.notFound();
+  const topLevelItems = items.filter((i) => !i.parent && i.id !== id);
+  return c.html(renderMenuFormPage({
+    item,
+    topLevelItems,
+    user: c.get("user"),
+    currentPath: "/admin/menu",
+    version: c.get("appVersion"),
+    dynamicMenuItems: c.get("pluginMenuItems")
+  }));
+});
+adminMenuRoutes.post("/", async (c) => {
+  const db = c.env.DB;
+  const form = await c.req.formData();
+  const label = String(form.get("label") ?? "").trim();
+  const url = String(form.get("url") ?? "").trim();
+  const icon = String(form.get("icon") ?? "link").trim();
+  const target = form.get("target") === "_blank" ? "_blank" : "_self";
+  const parent = String(form.get("parent") ?? "").trim() || null;
+  const visible = form.has("visible");
+  if (!label) {
+    return c.html(renderMenuFormPage({
+      item: null,
+      topLevelItems: [],
+      user: c.get("user"),
+      currentPath: "/admin/menu",
+      version: c.get("appVersion"),
+      dynamicMenuItems: c.get("pluginMenuItems"),
+      error: "Label is required"
+    }), 400);
+  }
+  const now = Math.floor(Date.now() / 1e3);
+  const id = chunkKIGVVO6N_cjs.nanoid();
+  const slug = `menu:user:${id}`;
+  const safeUrl = sanitizeUrl(url);
+  const isExternal = /^https?:\/\//.test(safeUrl);
+  const data = JSON.stringify({
+    label,
+    url: safeUrl,
+    icon,
+    target,
+    isExternal,
+    visible,
+    parent,
+    source: "user",
+    pluginId: null,
+    permissions: [],
+    lockedFields: []
+  });
+  const items = await listMenuItems(db);
+  const maxSort = items.reduce((m, i) => Math.max(m, i.sortOrder), 0);
+  const sortOrder = maxSort + 10;
+  await db.prepare(
+    `INSERT INTO documents (id, root_id, type_id, type_version, version_of_id, version_number,
+       is_current_draft, is_published, status, parent_root_id, slug, path, title, zone,
+       sort_order, visible, published_at, scheduled_at, expires_at, deleted_at,
+       tenant_id, locale, translation_group_id, data, metadata,
+       owner_id, created_by, updated_by, created_at, updated_at)
+     VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)`
+  ).bind(
+    id,
+    id,
+    "menu_item",
+    1,
+    null,
+    1,
+    1,
+    1,
+    "published",
+    "",
+    slug,
+    null,
+    label,
+    null,
+    sortOrder,
+    visible ? 1 : 0,
+    now,
+    null,
+    null,
+    null,
+    "default",
+    "default",
+    "",
+    data,
+    "{}",
+    null,
+    c.get("user")?.userId ?? "system",
+    c.get("user")?.userId ?? "system",
+    now,
+    now
+  ).run();
+  return c.redirect("/admin/menu?message=Item+created");
+});
+adminMenuRoutes.put("/reorder", async (c) => {
+  const db = c.env.DB;
+  const body = await c.req.json();
+  if (!Array.isArray(body)) return c.json({ error: "Invalid body" }, 400);
+  await reorderItems(db, body);
+  return c.json({ ok: true });
+});
+adminMenuRoutes.post("/:id/visibility", async (c) => {
+  const db = c.env.DB;
+  const id = c.req.param("id");
+  const form = await c.req.formData();
+  const visible = form.get("visible") === "true";
+  await toggleVisibility(db, id, visible);
+  return c.redirect("/admin/menu?message=Visibility+updated");
+});
+async function handleMenuItemUpdate(c) {
+  const db = c.env.DB;
+  const id = c.req.param("id");
+  const form = await c.req.formData();
+  const items = await listMenuItems(db);
+  const item = items.find((i) => i.id === id);
+  if (!item) return c.json({ error: "Not found" }, 404);
+  const locked = new Set(item.lockedFields);
+  const changes = {};
+  if (form.has("label") && !locked.has("label")) changes.label = String(form.get("label")).trim();
+  if (form.has("icon") && !locked.has("icon")) changes.icon = String(form.get("icon")).trim();
+  if (form.has("target") && !locked.has("target")) changes.target = form.get("target") === "_blank" ? "_blank" : "_self";
+  if (form.has("url") && !locked.has("url")) changes.url = sanitizeUrl(String(form.get("url")));
+  if (form.has("parent")) changes.parent = String(form.get("parent")).trim() || null;
+  changes.visible = form.has("visible");
+  const ok = await updateItem(db, id, changes, item.lockedFields);
+  if (!ok) return c.json({ error: "Cannot modify locked fields" }, 403);
+  return c.redirect("/admin/menu?message=Item+updated");
+}
+adminMenuRoutes.put("/:id", handleMenuItemUpdate);
+adminMenuRoutes.post("/:id/update", handleMenuItemUpdate);
+adminMenuRoutes.delete("/:id", async (c) => {
+  const db = c.env.DB;
+  const id = c.req.param("id");
+  const result = await deleteItem(db, id);
+  if (!result.ok) return c.json({ error: result.reason }, 403);
+  return c.redirect("/admin/menu?message=Item+deleted");
+});
+adminMenuRoutes.post("/:id/delete", async (c) => {
+  const db = c.env.DB;
+  const id = c.req.param("id");
+  const result = await deleteItem(db, id);
+  if (!result.ok) return c.json({ error: result.reason }, 403);
+  return c.redirect("/admin/menu?message=Item+deleted");
+});
+adminMenuRoutes.post("/:id/move-up", async (c) => {
+  const db = c.env.DB;
+  const id = c.req.param("id");
+  const allItems = await listMenuItems(db);
+  const cur = allItems.find((i) => i.id === id);
+  if (!cur) return c.redirect("/admin/menu");
+  const siblings = allItems.filter((i) => i.parent === cur.parent);
+  const idx = siblings.findIndex((i) => i.id === id);
+  const prev = siblings[idx - 1];
+  if (idx > 0 && prev) {
+    await reorderItems(db, [
+      { id: cur.id, sortOrder: prev.sortOrder, parent: cur.parent },
+      { id: prev.id, sortOrder: cur.sortOrder, parent: prev.parent }
+    ]);
+    return c.redirect("/admin/menu?message=Reordered");
+  }
+  return c.redirect("/admin/menu");
+});
+adminMenuRoutes.post("/:id/move-down", async (c) => {
+  const db = c.env.DB;
+  const id = c.req.param("id");
+  const allItems = await listMenuItems(db);
+  const cur = allItems.find((i) => i.id === id);
+  if (!cur) return c.redirect("/admin/menu");
+  const siblings = allItems.filter((i) => i.parent === cur.parent);
+  const idx = siblings.findIndex((i) => i.id === id);
+  const next = siblings[idx + 1];
+  if (idx !== -1 && idx < siblings.length - 1 && next) {
+    await reorderItems(db, [
+      { id: cur.id, sortOrder: next.sortOrder, parent: cur.parent },
+      { id: next.id, sortOrder: cur.sortOrder, parent: next.parent }
+    ]);
+    return c.redirect("/admin/menu?message=Reordered");
+  }
+  return c.redirect("/admin/menu");
+});
+var menuPlugin = chunkBP52BFIV_cjs.definePlugin({
+  id: "menu",
+  version: "1.0.0",
+  name: "Menu Manager",
+  description: "Admin sidebar navigation manager.",
+  sonicjsVersionRange: "^3.0.0",
+  author: { name: "SonicJS Team", email: "team@sonicjs.com" },
+  register(app2) {
+    app2.route("/admin/menu", adminMenuRoutes);
+  },
+  async onBoot(ctx) {
+    const env = ctx.env ?? {};
+    const db = env.DB;
+    if (!db) return;
+    try {
+      const typeRegistry = new chunk37V3RET3_cjs.DocumentTypeRegistry(db);
+      await typeRegistry.register({
+        id: "menu_item",
+        name: "menu_item",
+        displayName: "Menu Item",
+        description: "Admin sidebar navigation item",
+        schema: zod.z.object({}),
+        pluginId: "menu",
+        source: "plugin",
+        queryableFields: [
+          { name: "parent", path: "$.parent", kind: "scalar", type: "text", column: "q_menu_parent" },
+          { name: "visible", path: "$.visible", kind: "scalar", type: "boolean", column: "q_menu_visible" },
+          { name: "source", path: "$.source", kind: "scalar", type: "text", column: "q_menu_source" },
+          { name: "pluginId", path: "$.pluginId", kind: "scalar", type: "text", column: "q_menu_plugin_id" }
+        ],
+        settings: {
+          baseGrants: { admin: ["read", "create", "update", "delete", "manage"] },
+          internal: true
+        }
+      });
+      for (const item of SYSTEM_MENU_ITEMS) {
+        await upsertSystemItem(db, item.id, {
+          label: item.label,
+          url: item.url,
+          icon: item.icon,
+          target: item.target,
+          isExternal: item.isExternal,
+          visible: item.visible,
+          parent: item.parent,
+          source: item.source,
+          pluginId: item.pluginId,
+          permissions: [...item.permissions],
+          lockedFields: [...item.lockedFields]
+        }, item.sortOrder);
+      }
+      await chunkI767LVN7_cjs.reconcileMenuFromPlugins(db);
+    } catch {
+    }
+  },
+  settingsTabContent: {
+    async loadData(db) {
+      const items = await listMenuItems(db);
+      const pluginIds = [...new Set(items.filter((i) => i.pluginId).map((i) => i.pluginId))];
+      const pluginStatuses = await fetchPluginStatuses(db, pluginIds);
+      return { items, pluginStatuses };
+    },
+    render({ data }) {
+      const items = data?.items ?? [];
+      const pluginStatuses = data?.pluginStatuses ?? {};
+      return renderMenuSettingsContent(items, pluginStatuses);
+    }
+  }
+});
+chunkUYJQDDEE_cjs.init_admin_layout_catalyst_template();
 var adminRoutes6 = new hono.Hono();
-adminRoutes6.use("*", chunkFTXGZ3BF_cjs.requireAuth());
+adminRoutes6.use("*", chunk37V3RET3_cjs.requireAuth());
 adminRoutes6.use("*", async (c, next) => {
   const user = c.get("user");
   if (user?.role !== "admin") {
@@ -11884,7 +13314,7 @@ adminRoutes6.get("/", async (c) => {
       </div>
     </div>
   `;
-  return c.html(chunkK623Q6WD_cjs.renderAdminLayoutCatalyst({
+  return c.html(chunkUYJQDDEE_cjs.renderAdminLayoutCatalyst({
     title: "Analytics",
     pageTitle: "Analytics Dashboard",
     currentPath: "/admin/analytics",
@@ -12124,7 +13554,7 @@ apiRoutes4.get("/stats", async (c) => {
 });
 
 // src/plugins/core-plugins/analytics/index.ts
-var analyticsPlugin = chunkEUJAEB6W_cjs.definePlugin({
+var analyticsPlugin = chunkBP52BFIV_cjs.definePlugin({
   id: "core-analytics",
   version: "1.0.0",
   name: "Analytics",
@@ -12271,7 +13701,7 @@ function esc2(s) {
   return (s || "").replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
 }
 async function getVariablesMap(db) {
-  let variables = chunkJFLZHOQP_cjs.getVariablesCached();
+  let variables = chunkI767LVN7_cjs.getVariablesCached();
   if (variables) return variables;
   try {
     const { results } = await db.prepare(
@@ -12281,7 +13711,7 @@ async function getVariablesMap(db) {
     for (const row of results || []) {
       variables.set(row.key, row.value);
     }
-    chunkJFLZHOQP_cjs.setVariablesCache(variables);
+    chunkI767LVN7_cjs.setVariablesCache(variables);
     return variables;
   } catch {
     return /* @__PURE__ */ new Map();
@@ -12350,7 +13780,7 @@ apiRoutes5.post("/", async (c) => {
     await db.prepare(
       "INSERT INTO global_variables (key, value, description, category, is_active) VALUES (?, ?, ?, ?, ?)"
     ).bind(key, value || "", description || "", category || "general", isActive !== false ? 1 : 0).run();
-    chunkJFLZHOQP_cjs.invalidateVariablesCache();
+    chunkI767LVN7_cjs.invalidateVariablesCache();
     const created = await db.prepare("SELECT * FROM global_variables WHERE key = ?").bind(key).first();
     return c.json({ success: true, data: formatVariable(created) }, 201);
   } catch {
@@ -12395,7 +13825,7 @@ apiRoutes5.put("/:id", async (c) => {
     updates.push("updated_at = strftime('%s', 'now')");
     params.push(id);
     await db.prepare(`UPDATE global_variables SET ${updates.join(", ")} WHERE id = ?`).bind(...params).run();
-    chunkJFLZHOQP_cjs.invalidateVariablesCache();
+    chunkI767LVN7_cjs.invalidateVariablesCache();
     const updated = await db.prepare("SELECT * FROM global_variables WHERE id = ?").bind(id).first();
     return c.json({ success: true, data: formatVariable(updated) });
   } catch {
@@ -12409,7 +13839,7 @@ apiRoutes5.delete("/:id", async (c) => {
     const existing = await db.prepare("SELECT id FROM global_variables WHERE id = ?").bind(id).first();
     if (!existing) return c.json({ error: "Variable not found" }, 404);
     await db.prepare("DELETE FROM global_variables WHERE id = ?").bind(id).run();
-    chunkJFLZHOQP_cjs.invalidateVariablesCache();
+    chunkI767LVN7_cjs.invalidateVariablesCache();
     return c.json({ success: true });
   } catch {
     return c.json({ success: false, error: "Failed to delete variable" }, 500);
@@ -12469,7 +13899,7 @@ adminRoutes7.put("/:id", async (c) => {
   const value = body.value;
   if (value !== void 0) {
     await db.prepare("UPDATE global_variables SET value = ?, updated_at = strftime('%s', 'now') WHERE id = ?").bind(value, id).run();
-    chunkJFLZHOQP_cjs.invalidateVariablesCache();
+    chunkI767LVN7_cjs.invalidateVariablesCache();
   }
   return c.html('<span class="text-green-400 text-xs">Saved</span>');
 });
@@ -12477,7 +13907,7 @@ adminRoutes7.post("/:id/toggle", async (c) => {
   const db = c.env.DB;
   const id = c.req.param("id");
   await db.prepare("UPDATE global_variables SET is_active = CASE WHEN is_active = 1 THEN 0 ELSE 1 END, updated_at = strftime('%s', 'now') WHERE id = ?").bind(id).run();
-  chunkJFLZHOQP_cjs.invalidateVariablesCache();
+  chunkI767LVN7_cjs.invalidateVariablesCache();
   c.header("HX-Redirect", "/admin/global-variables");
   return c.body(null, 204);
 });
@@ -12498,7 +13928,7 @@ adminRoutes7.post("/", async (c) => {
   await db.prepare(
     "INSERT INTO global_variables (key, value, description, category) VALUES (?, ?, ?, ?)"
   ).bind(key, value, description, category).run();
-  chunkJFLZHOQP_cjs.invalidateVariablesCache();
+  chunkI767LVN7_cjs.invalidateVariablesCache();
   c.header("HX-Redirect", "/admin/global-variables");
   return c.body(null, 204);
 });
@@ -12517,7 +13947,7 @@ adminRoutes7.post("/settings/editor-integration", async (c) => {
 adminRoutes7.delete("/:id", async (c) => {
   const db = c.env.DB;
   await db.prepare("DELETE FROM global_variables WHERE id = ?").bind(c.req.param("id")).run();
-  chunkJFLZHOQP_cjs.invalidateVariablesCache();
+  chunkI767LVN7_cjs.invalidateVariablesCache();
   return c.html("");
 });
 function renderAdminPage(variables, editorStatus = { editorActive: false, activeEditorName: "", enableEditorIntegration: true }) {
@@ -12835,7 +14265,7 @@ function renderAdminPage(variables, editorStatus = { editorActive: false, active
   </div>
   ` });
 }
-var globalVariablesPlugin = chunkEUJAEB6W_cjs.definePlugin({
+var globalVariablesPlugin = chunkBP52BFIV_cjs.definePlugin({
   id: "global-variables",
   version: "1.1.0",
   name: "Global Variables",
@@ -12858,7 +14288,7 @@ var globalVariablesPlugin = chunkEUJAEB6W_cjs.definePlugin({
         if (!db || !data) return data;
         const variables = await getVariablesMap(db);
         if (variables.size === 0) return data;
-        return chunkJFLZHOQP_cjs.resolveVariablesInObject(data, variables);
+        return chunkI767LVN7_cjs.resolveVariablesInObject(data, variables);
       } catch {
         return data;
       }
@@ -12876,7 +14306,7 @@ var globalVariablesPlugin = chunkEUJAEB6W_cjs.definePlugin({
   },
   activate: async () => console.info("[GlobalVariables] Plugin activated"),
   deactivate: async () => {
-    chunkJFLZHOQP_cjs.invalidateVariablesCache();
+    chunkI767LVN7_cjs.invalidateVariablesCache();
     console.info("[GlobalVariables] Plugin deactivated, cache cleared");
   },
   uninstall: async (ctx) => {
@@ -13442,7 +14872,7 @@ function renderAdminPage2(shortcodes, editorStatus = { editorActive: false, acti
   </div>
   ` });
 }
-var shortcodesPlugin = chunkEUJAEB6W_cjs.definePlugin({
+var shortcodesPlugin = chunkBP52BFIV_cjs.definePlugin({
   id: "shortcodes",
   version: "1.0.0",
   name: "Shortcodes",
@@ -13526,7 +14956,7 @@ helloWorldRoutes.get("/", async (c) => {
     </html>
   `);
 });
-var helloWorldPlugin = chunkEUJAEB6W_cjs.definePlugin({
+var helloWorldPlugin = chunkBP52BFIV_cjs.definePlugin({
   id: "hello-world",
   version: "1.0.0",
   name: "Hello World",
@@ -13573,7 +15003,7 @@ var manifest_default2 = {
   author: "SonicJS Team"};
 
 // src/plugins/core-plugins/multi-tenant-plugin/templates/tenants-list.template.ts
-chunkK623Q6WD_cjs.init_admin_layout_catalyst_template();
+chunkUYJQDDEE_cjs.init_admin_layout_catalyst_template();
 function statusBadge2(status) {
   return status === "active" ? '<span class="inline-flex items-center rounded-md bg-emerald-500/10 px-2 py-1 text-xs font-medium text-emerald-600 dark:text-emerald-400">Active</span>' : '<span class="inline-flex items-center rounded-md bg-zinc-500/10 px-2 py-1 text-xs font-medium text-zinc-600 dark:text-zinc-400">Inactive</span>';
 }
@@ -13646,7 +15076,7 @@ function renderTenantsList(data) {
         </table>
       </div>
     </div>`;
-  return chunkK623Q6WD_cjs.renderAdminLayoutCatalyst({
+  return chunkUYJQDDEE_cjs.renderAdminLayoutCatalyst({
     title: "Tenants - SonicJS",
     pageTitle: "Tenants",
     currentPath: "/admin/tenants",
@@ -13665,7 +15095,7 @@ function renderTenantsInactive(data) {
         <a href="/admin/plugins" class="mt-6 inline-flex items-center rounded-lg bg-zinc-950 px-3.5 py-2 text-sm font-semibold text-white hover:bg-zinc-800 dark:bg-white dark:text-zinc-950 dark:hover:bg-zinc-200">Go to Plugins</a>
       </div>
     </div>`;
-  return chunkK623Q6WD_cjs.renderAdminLayoutCatalyst({
+  return chunkUYJQDDEE_cjs.renderAdminLayoutCatalyst({
     title: "Tenants - SonicJS",
     pageTitle: "Tenants",
     currentPath: "/admin/tenants",
@@ -13676,7 +15106,7 @@ function renderTenantsInactive(data) {
 }
 
 // src/plugins/core-plugins/multi-tenant-plugin/templates/tenant-form.template.ts
-chunkK623Q6WD_cjs.init_admin_layout_catalyst_template();
+chunkUYJQDDEE_cjs.init_admin_layout_catalyst_template();
 function fieldErrors(errors, field) {
   const list = errors?.[field];
   if (!list || list.length === 0) return "";
@@ -13744,7 +15174,7 @@ function renderTenantForm(data) {
         </form>
       </div>
     </div>`;
-  return chunkK623Q6WD_cjs.renderAdminLayoutCatalyst({
+  return chunkUYJQDDEE_cjs.renderAdminLayoutCatalyst({
     title: `${data.isEdit ? "Edit Tenant" : "New Tenant"} - SonicJS`,
     pageTitle: data.isEdit ? "Edit Tenant" : "New Tenant",
     currentPath: "/admin/tenants",
@@ -13755,9 +15185,9 @@ function renderTenantForm(data) {
 }
 
 // src/plugins/core-plugins/multi-tenant-plugin/templates/tenant-members.template.ts
-chunkK623Q6WD_cjs.init_admin_layout_catalyst_template();
+chunkUYJQDDEE_cjs.init_admin_layout_catalyst_template();
 function roleOptions(selected) {
-  return chunkJFLZHOQP_cjs.VALID_MEMBER_ROLES.map(
+  return chunkI767LVN7_cjs.VALID_MEMBER_ROLES.map(
     (r) => `<option value="${r}" ${r === selected ? "selected" : ""}>${r}</option>`
   ).join("");
 }
@@ -13819,7 +15249,7 @@ function renderInvitations(slug, invitations) {
           <div>
             <label for="invite-role" class="mb-1 block text-xs font-medium text-zinc-500 dark:text-zinc-400">Role</label>
             <select id="invite-role" name="role" class="rounded-lg border border-zinc-950/10 bg-white px-2 py-2 text-sm text-zinc-950 dark:border-white/10 dark:bg-zinc-800 dark:text-white">
-              ${chunkJFLZHOQP_cjs.VALID_MEMBER_ROLES.map((r) => `<option value="${r}" ${r === "viewer" ? "selected" : ""}>${r}</option>`).join("")}
+              ${chunkI767LVN7_cjs.VALID_MEMBER_ROLES.map((r) => `<option value="${r}" ${r === "viewer" ? "selected" : ""}>${r}</option>`).join("")}
             </select>
           </div>
           <button type="submit" data-send-invite class="rounded-lg bg-zinc-950 px-3.5 py-2 text-sm font-semibold text-white hover:bg-zinc-800 dark:bg-white dark:text-zinc-950 dark:hover:bg-zinc-200">Invite</button>
@@ -13902,7 +15332,7 @@ function renderTenantMembers(data) {
 
       ${renderInvitations(data.slug, data.invitations)}
     </div>`;
-  return chunkK623Q6WD_cjs.renderAdminLayoutCatalyst({
+  return chunkUYJQDDEE_cjs.renderAdminLayoutCatalyst({
     title: `Members - ${data.tenantName} - SonicJS`,
     pageTitle: "Tenant Members",
     currentPath: "/admin/tenants",
@@ -13913,9 +15343,9 @@ function renderTenantMembers(data) {
 }
 
 // src/plugins/core-plugins/multi-tenant-plugin/templates/user-memberships.template.ts
-chunkK623Q6WD_cjs.init_admin_layout_catalyst_template();
+chunkUYJQDDEE_cjs.init_admin_layout_catalyst_template();
 function roleOptions2(selected) {
-  return chunkJFLZHOQP_cjs.VALID_MEMBER_ROLES.map(
+  return chunkI767LVN7_cjs.VALID_MEMBER_ROLES.map(
     (r) => `<option value="${r}" ${r === selected ? "selected" : ""}>${r}</option>`
   ).join("");
 }
@@ -13988,7 +15418,7 @@ function renderUserMemberships(data) {
         </table>
       </div>
     </div>`;
-  return chunkK623Q6WD_cjs.renderAdminLayoutCatalyst({
+  return chunkUYJQDDEE_cjs.renderAdminLayoutCatalyst({
     title: `Tenant memberships - ${data.userEmail} - SonicJS`,
     pageTitle: "Tenant memberships",
     currentPath: "/admin/users",
@@ -13999,7 +15429,7 @@ function renderUserMemberships(data) {
 }
 
 // src/plugins/core-plugins/multi-tenant-plugin/templates/role-usage.template.ts
-chunkK623Q6WD_cjs.init_admin_layout_catalyst_template();
+chunkUYJQDDEE_cjs.init_admin_layout_catalyst_template();
 function renderRoleUsage(data) {
   const role = chunkMNWKYY5E_cjs.escapeHtml(data.roleName);
   const rows = data.assignments.length ? data.assignments.map((a) => `
@@ -14034,7 +15464,7 @@ function renderRoleUsage(data) {
         </table>
       </div>
     </div>`;
-  return chunkK623Q6WD_cjs.renderAdminLayoutCatalyst({
+  return chunkUYJQDDEE_cjs.renderAdminLayoutCatalyst({
     title: `Role usage - ${data.roleName} - SonicJS`,
     pageTitle: "Role usage",
     currentPath: "/admin/tenants",
@@ -14077,7 +15507,7 @@ function zodToFieldErrors(error) {
 }
 async function isMultiTenantActive(db) {
   try {
-    const plugin2 = await new chunkPYZYU7EK_cjs.PluginService(db).getPlugin(chunkPYZYU7EK_cjs.MULTI_TENANT_PLUGIN_ID);
+    const plugin2 = await new chunkQCJHCSOK_cjs.PluginService(db).getPlugin(chunkQCJHCSOK_cjs.MULTI_TENANT_PLUGIN_ID);
     return plugin2?.status === "active";
   } catch {
     return false;
@@ -14085,7 +15515,7 @@ async function isMultiTenantActive(db) {
 }
 function createTenantAdminRoutes() {
   const routes2 = new hono.Hono();
-  routes2.use("*", chunkFTXGZ3BF_cjs.requireAuth());
+  routes2.use("*", chunk37V3RET3_cjs.requireAuth());
   routes2.use("*", async (c, next) => {
     const user = c.get("user");
     if (user?.role !== "admin") {
@@ -14099,7 +15529,7 @@ function createTenantAdminRoutes() {
     const form = await c.req.formData();
     const slug = String(form.get("tenant") ?? "").trim().toLowerCase();
     const redirect = String(form.get("redirect") ?? "");
-    const svc = new chunkJFLZHOQP_cjs.TenantService(db);
+    const svc = new chunkI767LVN7_cjs.TenantService(db);
     const tenant = await svc.getTenantBySlug(slug);
     if (!tenant || tenant.status !== "active") {
       return c.json({ error: "Unknown or inactive tenant" }, 400);
@@ -14109,7 +15539,7 @@ function createTenantAdminRoutes() {
     if (!user.isSuperAdmin && !await svc.isMember(user.userId, slug)) {
       return c.json({ error: "You are not a member of this tenant" }, 403);
     }
-    cookie.setCookie(c, chunkPYZYU7EK_cjs.TENANT_COOKIE, slug, {
+    cookie.setCookie(c, chunkQCJHCSOK_cjs.TENANT_COOKIE, slug, {
       path: "/",
       httpOnly: true,
       sameSite: "Lax",
@@ -14126,7 +15556,7 @@ function createTenantAdminRoutes() {
     if (!user) return c.redirect("/auth/login");
     const token = c.req.query("token") ?? "";
     try {
-      const { slug } = await new chunkJFLZHOQP_cjs.TenantService(db).acceptInvitation(token, user.userId, user.email);
+      const { slug } = await new chunkI767LVN7_cjs.TenantService(db).acceptInvitation(token, user.userId, user.email);
       return c.redirect(`/admin/tenants/${slug}/members?message=Invitation accepted`);
     } catch (error) {
       const message = error instanceof Error ? error.message : "Failed to accept invitation";
@@ -14154,7 +15584,7 @@ function createTenantAdminRoutes() {
     const userId = c.req.param("userId");
     const target = await db.prepare("SELECT id, email FROM auth_user WHERE id = ?").bind(userId).first();
     if (!target?.id) return c.redirect("/admin/users?message=User not found&type=error");
-    const svc = new chunkJFLZHOQP_cjs.TenantService(db);
+    const svc = new chunkI767LVN7_cjs.TenantService(db);
     const [memberships, allTenants] = await Promise.all([svc.listUserMemberships(userId), svc.listTenants()]);
     const memberSlugs = new Set(memberships.map((m) => m.slug));
     const availableTenants = allTenants.filter((t) => t.status === "active" && !memberSlugs.has(t.slug)).map((t) => ({ slug: t.slug, name: t.name }));
@@ -14179,10 +15609,10 @@ function createTenantAdminRoutes() {
       const slug = String(form.get("slug") ?? "").trim().toLowerCase();
       const role = String(form.get("role") ?? "viewer");
       const redirectTo = String(form.get("_redirect") ?? "") || `/admin/tenants/users/${userId}`;
-      if (!chunkJFLZHOQP_cjs.isValidMemberRole(role)) throw new Error(`Invalid role '${role}'`);
+      if (!chunkI767LVN7_cjs.isValidMemberRole(role)) throw new Error(`Invalid role '${role}'`);
       const target = await db.prepare("SELECT email FROM auth_user WHERE id = ?").bind(userId).first();
       if (!target) throw new Error("User not found");
-      const svc = new chunkJFLZHOQP_cjs.TenantService(db);
+      const svc = new chunkI767LVN7_cjs.TenantService(db);
       if (!await svc.getTenantBySlug(slug)) throw new Error("Tenant not found");
       if (await svc.isMember(userId, slug)) throw new Error(`Already a member of '${slug}'`);
       await svc.addMember(slug, userId, role, target.email ?? null);
@@ -14201,7 +15631,7 @@ function createTenantAdminRoutes() {
       const form = await c.req.formData();
       const role = String(form.get("role") ?? "");
       const redirectTo = String(form.get("_redirect") ?? "") || `/admin/tenants/users/${userId}`;
-      await new chunkJFLZHOQP_cjs.TenantService(db).setMemberRole(slug, userId, role);
+      await new chunkI767LVN7_cjs.TenantService(db).setMemberRole(slug, userId, role);
       return c.redirect(`${redirectTo}?message=Role updated`);
     } catch (error) {
       const message = error instanceof Error ? error.message : "Failed to update role";
@@ -14216,7 +15646,7 @@ function createTenantAdminRoutes() {
     try {
       const form = await c.req.formData();
       const redirectTo = String(form.get("_redirect") ?? "") || `/admin/tenants/users/${userId}`;
-      await new chunkJFLZHOQP_cjs.TenantService(db).removeMember(slug, userId);
+      await new chunkI767LVN7_cjs.TenantService(db).removeMember(slug, userId);
       return c.redirect(`${redirectTo}?message=Removed from ${encodeURIComponent(slug)}`);
     } catch (error) {
       const message = error instanceof Error ? error.message : "Failed to remove membership";
@@ -14231,7 +15661,7 @@ function createTenantAdminRoutes() {
       return c.html(renderTenantsInactive({ user: userShape(cur), version }));
     }
     const roleName = c.req.param("roleName");
-    const assignments = await new chunkJFLZHOQP_cjs.TenantService(db).listAssignmentsByRole(roleName);
+    const assignments = await new chunkI767LVN7_cjs.TenantService(db).listAssignmentsByRole(roleName);
     return c.html(renderRoleUsage({ roleName, assignments, user: userShape(cur), version }));
   });
   routes2.get("/", async (c) => {
@@ -14241,7 +15671,7 @@ function createTenantAdminRoutes() {
     if (!await isMultiTenantActive(db)) {
       return c.html(renderTenantsInactive({ user: userShape(user), version }));
     }
-    const svc = new chunkJFLZHOQP_cjs.TenantService(db);
+    const svc = new chunkI767LVN7_cjs.TenantService(db);
     await svc.ensureDefaultTenant();
     const tenants = await svc.listTenants();
     const [docRes, memberRes] = await db.batch([
@@ -14280,7 +15710,7 @@ function createTenantAdminRoutes() {
       formEntries = Object.fromEntries(form.entries());
       const validated = tenantFormSchema.parse(formEntries);
       if (!validated.slug) throw new zod.z.ZodError([{ code: "custom", message: "Slug is required", path: ["slug"] }]);
-      const svc = new chunkJFLZHOQP_cjs.TenantService(db);
+      const svc = new chunkI767LVN7_cjs.TenantService(db);
       await svc.createTenant({
         name: validated.name,
         slug: validated.slug,
@@ -14305,7 +15735,7 @@ function createTenantAdminRoutes() {
     if (!await isMultiTenantActive(db)) {
       return c.html(renderTenantsInactive({ user: userShape(user), version }));
     }
-    const tenant = await new chunkJFLZHOQP_cjs.TenantService(db).getTenantBySlug(c.req.param("slug"));
+    const tenant = await new chunkI767LVN7_cjs.TenantService(db).getTenantBySlug(c.req.param("slug"));
     if (!tenant) return c.redirect("/admin/tenants?message=Tenant not found&type=error");
     return c.html(renderTenantForm({ tenant, isEdit: true, user: userShape(user), version }));
   });
@@ -14315,7 +15745,7 @@ function createTenantAdminRoutes() {
     const version = c.get("appVersion");
     const slug = c.req.param("slug");
     if (!await isMultiTenantActive(db)) return c.json({ error: "Multi-tenant plugin is not active" }, 403);
-    const svc = new chunkJFLZHOQP_cjs.TenantService(db);
+    const svc = new chunkI767LVN7_cjs.TenantService(db);
     try {
       const form = await c.req.formData();
       const validated = tenantFormSchema.parse(Object.fromEntries(form.entries()));
@@ -14340,7 +15770,7 @@ function createTenantAdminRoutes() {
     const slug = c.req.param("slug");
     if (!await isMultiTenantActive(db)) return c.json({ error: "Multi-tenant plugin is not active" }, 403);
     try {
-      await new chunkJFLZHOQP_cjs.TenantService(db).deleteTenant(slug);
+      await new chunkI767LVN7_cjs.TenantService(db).deleteTenant(slug);
       return c.redirect("/admin/tenants?message=Tenant deleted successfully");
     } catch (error) {
       const message = error instanceof Error ? error.message : "Failed to delete tenant";
@@ -14355,7 +15785,7 @@ function createTenantAdminRoutes() {
       return c.html(renderTenantsInactive({ user: userShape(user), version }));
     }
     const slug = c.req.param("slug");
-    const svc = new chunkJFLZHOQP_cjs.TenantService(db);
+    const svc = new chunkI767LVN7_cjs.TenantService(db);
     const tenant = await svc.getTenantBySlug(slug);
     if (!tenant) return c.redirect("/admin/tenants?message=Tenant not found&type=error");
     const [members, invitations] = await Promise.all([svc.listMembers(slug), svc.listInvitations(slug)]);
@@ -14381,7 +15811,7 @@ function createTenantAdminRoutes() {
       const form = await c.req.formData();
       const email = String(form.get("email") ?? "");
       const role = String(form.get("role") ?? "viewer");
-      await new chunkJFLZHOQP_cjs.TenantService(db).addMemberByEmail(slug, email, role);
+      await new chunkI767LVN7_cjs.TenantService(db).addMemberByEmail(slug, email, role);
       return c.redirect(`/admin/tenants/${slug}/members?message=Member added`);
     } catch (error) {
       const message = error instanceof Error ? error.message : "Failed to add member";
@@ -14396,7 +15826,7 @@ function createTenantAdminRoutes() {
     try {
       const form = await c.req.formData();
       const role = String(form.get("role") ?? "");
-      await new chunkJFLZHOQP_cjs.TenantService(db).setMemberRole(slug, userId, role);
+      await new chunkI767LVN7_cjs.TenantService(db).setMemberRole(slug, userId, role);
       return c.redirect(`/admin/tenants/${slug}/members?message=Role updated`);
     } catch (error) {
       const message = error instanceof Error ? error.message : "Failed to update role";
@@ -14409,7 +15839,7 @@ function createTenantAdminRoutes() {
     const userId = c.req.param("userId");
     if (!await isMultiTenantActive(db)) return c.json({ error: "Multi-tenant plugin is not active" }, 403);
     try {
-      await new chunkJFLZHOQP_cjs.TenantService(db).removeMember(slug, userId);
+      await new chunkI767LVN7_cjs.TenantService(db).removeMember(slug, userId);
       return c.redirect(`/admin/tenants/${slug}/members?message=Member removed`);
     } catch (error) {
       const message = error instanceof Error ? error.message : "Failed to remove member";
@@ -14425,12 +15855,12 @@ function createTenantAdminRoutes() {
       const form = await c.req.formData();
       const email = String(form.get("email") ?? "");
       const role = String(form.get("role") ?? "viewer");
-      const token = await new chunkJFLZHOQP_cjs.TenantService(db).createInvitation(slug, email, role, user?.userId ?? null);
+      const token = await new chunkI767LVN7_cjs.TenantService(db).createInvitation(slug, email, role, user?.userId ?? null);
       const origin = c.req.header("origin") || new URL(c.req.url).origin;
       const acceptUrl = `${origin}/join/invite?token=${encodeURIComponent(token)}`;
       let note;
       let noteType = "";
-      const svc2 = chunkJFLZHOQP_cjs.hasEmailService() ? chunkJFLZHOQP_cjs.getEmailService() : null;
+      const svc2 = chunkI767LVN7_cjs.hasEmailService() ? chunkI767LVN7_cjs.getEmailService() : null;
       const hasRealProvider = !!svc2 && svc2.getProviderName() !== "console";
       if (hasRealProvider) {
         const result = await svc2.send({
@@ -14471,7 +15901,7 @@ function createTenantAdminRoutes() {
          WHERE i.id = ? AND t.slug = ? AND i.status = 'pending'`
       ).bind(id, slug).first();
       if (!inv) throw new Error("Invitation not found or already used");
-      const svc2 = chunkJFLZHOQP_cjs.hasEmailService() ? chunkJFLZHOQP_cjs.getEmailService() : null;
+      const svc2 = chunkI767LVN7_cjs.hasEmailService() ? chunkI767LVN7_cjs.getEmailService() : null;
       const hasRealProvider = !!svc2 && svc2.getProviderName() !== "console";
       if (!hasRealProvider) throw new Error("No email plugin active");
       const origin = c.req.header("origin") || new URL(c.req.url).origin;
@@ -14496,7 +15926,7 @@ function createTenantAdminRoutes() {
     const id = c.req.param("id");
     if (!await isMultiTenantActive(db)) return c.json({ error: "Multi-tenant plugin is not active" }, 403);
     try {
-      await new chunkJFLZHOQP_cjs.TenantService(db).revokeInvitation(slug, id);
+      await new chunkI767LVN7_cjs.TenantService(db).revokeInvitation(slug, id);
       return c.redirect(`/admin/tenants/${slug}/members?message=Invitation revoked`);
     } catch (error) {
       const message = error instanceof Error ? error.message : "Failed to revoke invitation";
@@ -14726,7 +16156,7 @@ function createJoinRoutes() {
     if (existing) return rerender("An account with this email already exists. Please sign in instead.");
     try {
       const userId = crypto.randomUUID();
-      const passwordHash = await chunkFTXGZ3BF_cjs.AuthManager.hashPassword(password);
+      const passwordHash = await chunk37V3RET3_cjs.AuthManager.hashPassword(password);
       const now = Date.now();
       const nowSec = Math.floor(now / 1e3);
       await db.batch([
@@ -14739,7 +16169,7 @@ function createJoinRoutes() {
            VALUES (?, ?, ?, 'credential', ?, ?, ?)`
         ).bind(`cred-${userId}`, userId, userId, passwordHash, nowSec, nowSec)
       ]);
-      await new chunkJFLZHOQP_cjs.TenantService(db).acceptInvitation(token, userId, inv.email);
+      await new chunkI767LVN7_cjs.TenantService(db).acceptInvitation(token, userId, inv.email);
       const auth = chunkGMMCCIQO_cjs.createAuth(c.env);
       const origin = new URL(c.req.url).origin;
       const baReq = new Request(`${origin}/auth/sign-in/email`, {
@@ -14807,7 +16237,7 @@ function createJoinRoutes() {
       const baBody = await baRes.json();
       const userId = baBody?.user?.id;
       if (!userId) return rerender("Sign-in succeeded but could not read user ID.");
-      await new chunkJFLZHOQP_cjs.TenantService(db).acceptInvitation(token, userId, inv.email);
+      await new chunkI767LVN7_cjs.TenantService(db).acceptInvitation(token, userId, inv.email);
       const headers = new Headers({ Location: "/admin?message=Welcome! You have joined " + encodeURIComponent(inv.tenantName) });
       copyBaCookies(baRes, headers);
       return new Response(null, { status: 302, headers });
@@ -14821,7 +16251,7 @@ function createJoinRoutes() {
 
 // src/plugins/core-plugins/multi-tenant-plugin/index.ts
 var TENANT_ICON = `<svg class="h-5 w-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M3.75 21h16.5M4.5 3h15M5.25 3v18m13.5-18v18M9 6.75h1.5m-1.5 3h1.5m-1.5 3h1.5m3-6H15m-1.5 3H15m-1.5 3H15M9 21v-3.375c0-.621.504-1.125 1.125-1.125h3.75c.621 0 1.125.504 1.125 1.125V21"/></svg>`;
-var multiTenantPlugin = chunkEUJAEB6W_cjs.definePlugin({
+var multiTenantPlugin = chunkBP52BFIV_cjs.definePlugin({
   id: manifest_default2.id,
   version: "1.0.0",
   name: manifest_default2.name,
@@ -14836,30 +16266,30 @@ var multiTenantPlugin = chunkEUJAEB6W_cjs.definePlugin({
     { label: "Tenants", path: "/admin/tenants", icon: TENANT_ICON, order: 80 }
   ],
   activate: async () => {
-    chunkPYZYU7EK_cjs.invalidateTenantCache();
+    chunkQCJHCSOK_cjs.invalidateTenantCache();
     console.info("\u2705 Multi-Tenant plugin activated");
   },
   deactivate: async () => {
-    chunkPYZYU7EK_cjs.invalidateTenantCache();
+    chunkQCJHCSOK_cjs.invalidateTenantCache();
     console.info("\u274C Multi-Tenant plugin deactivated");
   }
 });
 var routes = new hono.Hono();
-routes.use("*", chunkFTXGZ3BF_cjs.requireAuth());
-routes.use("*", chunkFTXGZ3BF_cjs.requireRole(["admin", "editor"]));
+routes.use("*", chunk37V3RET3_cjs.requireAuth());
+routes.use("*", chunk37V3RET3_cjs.requireRole(["admin", "editor"]));
 routes.get("/:rootId", async (c) => {
   const { rootId } = c.req.param();
   const db = c.env.DB;
-  const scope = await chunkJFLZHOQP_cjs.resolveDocScope(c, db, { rootId });
+  const scope = await chunkI767LVN7_cjs.resolveDocScope(c, db, { rootId });
   if (!scope) {
     return c.html('<p class="text-zinc-500 dark:text-zinc-400 p-4">Document not found.</p>', 404);
   }
   if (!scope.docType?.settings?.versioning) {
     return c.html('<p class="text-zinc-500 dark:text-zinc-400 p-4">Versioning not enabled for this type.</p>', 404);
   }
-  const denied = await chunkJFLZHOQP_cjs.denyIfNotAllowed(c, db, rootId, "read", scope.docType?.settings, scope.tenantId);
+  const denied = await chunkI767LVN7_cjs.denyIfNotAllowed(c, db, rootId, "read", scope.docType?.settings, scope.tenantId);
   if (denied) return denied;
-  const repo = new chunkJFLZHOQP_cjs.DocumentRepository(db, scope.tenantId);
+  const repo = new chunkI767LVN7_cjs.DocumentRepository(db, scope.tenantId);
   const versions = await repo.getVersionHistory(rootId);
   const safeRootIdAttr = chunkMNWKYY5E_cjs.escapeHtml(rootId);
   const rows = versions.map((v) => {
@@ -14952,14 +16382,14 @@ routes.post("/:rootId/restore/:versionNumber", async (c) => {
   const { rootId, versionNumber } = c.req.param();
   const db = c.env.DB;
   const user = c.get("user");
-  const scope = await chunkJFLZHOQP_cjs.resolveDocScope(c, db, { rootId });
+  const scope = await chunkI767LVN7_cjs.resolveDocScope(c, db, { rootId });
   if (!scope) {
     return c.json({ error: "Document not found" }, 404);
   }
   if (!scope.docType?.settings?.versioning) {
     return c.json({ error: "Versioning not enabled for this type" }, 404);
   }
-  const denied = await chunkJFLZHOQP_cjs.denyIfNotAllowed(c, db, rootId, "update", scope.docType?.settings, scope.tenantId);
+  const denied = await chunkI767LVN7_cjs.denyIfNotAllowed(c, db, rootId, "update", scope.docType?.settings, scope.tenantId);
   if (denied) return denied;
   const row = await db.prepare("SELECT * FROM documents WHERE root_id = ? AND tenant_id = ? AND version_number = ? LIMIT 1").bind(rootId, scope.tenantId, Number(versionNumber)).first();
   if (!row) {
@@ -14982,7 +16412,7 @@ routes.post("/:rootId/restore/:versionNumber", async (c) => {
 var routes_default = routes;
 
 // src/plugins/core-plugins/versioning-plugin/index.ts
-var versioningPlugin = chunkEUJAEB6W_cjs.definePlugin({
+var versioningPlugin = chunkBP52BFIV_cjs.definePlugin({
   id: "versioning",
   version: "1.0.0",
   name: "Versioning",
@@ -15059,8 +16489,8 @@ function createMagicLinkAuthPlugin() {
       const baseUrl = new URL(c.req.url).origin;
       const magicLink = `${baseUrl}/auth/magic-link/verify?token=${token}`;
       try {
-        if (chunkJFLZHOQP_cjs.hasEmailService()) {
-          await chunkJFLZHOQP_cjs.getEmailService().send({
+        if (chunkI767LVN7_cjs.hasEmailService()) {
+          await chunkI767LVN7_cjs.getEmailService().send({
             to: normalizedEmail,
             subject: "Your Magic Link to Sign In",
             flow: "magic-link",
@@ -15137,19 +16567,19 @@ function createMagicLinkAuthPlugin() {
         SET used = 1, used_at = ?
         WHERE id = ?
       `).bind(Date.now(), magicLink.id).run();
-      const tokenTtl = await chunkFTXGZ3BF_cjs.getJwtExpirySecondsFromDb(c.env.DB, c.env);
-      const jwtToken = await chunkFTXGZ3BF_cjs.AuthManager.generateToken(
+      const tokenTtl = await chunk37V3RET3_cjs.getJwtExpirySecondsFromDb(c.env.DB, c.env);
+      const jwtToken = await chunk37V3RET3_cjs.AuthManager.generateToken(
         user.id,
         user.email,
         user.role,
         c.env.JWT_SECRET,
         tokenTtl
       );
-      chunkFTXGZ3BF_cjs.AuthManager.setAuthCookie(c, jwtToken, { maxAge: tokenTtl });
+      chunk37V3RET3_cjs.AuthManager.setAuthCookie(c, jwtToken, { maxAge: tokenTtl });
       await db.prepare(`
         UPDATE auth_user SET last_login_at = ? WHERE id = ?
       `).bind(Date.now(), user.id).run();
-      chunkJFLZHOQP_cjs.dispatchHookEvent(
+      chunkI767LVN7_cjs.dispatchHookEvent(
         c,
         "auth:magic-link:consumed",
         { user: { id: user.id, email: user.email, role: user.role } },
@@ -15634,7 +17064,7 @@ async function warmCollections(db) {
   const collectionCache = chunkYA3TJ65D_cjs.getCacheService(config);
   let count = 0;
   try {
-    const results = chunkPYZYU7EK_cjs.getCollectionRegistry().listActive().map(chunkPYZYU7EK_cjs.collectionRecordToRow);
+    const results = chunkQCJHCSOK_cjs.getCollectionRegistry().listActive().map(chunkQCJHCSOK_cjs.collectionRecordToRow);
     for (const collection of results) {
       const key = collectionCache.generateKey("item", collection.id);
       await collectionCache.set(key, collection);
@@ -15701,7 +17131,7 @@ async function warmNamespace(namespace, entries) {
 }
 
 // src/templates/pages/admin-cache.template.ts
-chunkK623Q6WD_cjs.init_admin_layout_catalyst_template();
+chunkUYJQDDEE_cjs.init_admin_layout_catalyst_template();
 function renderCacheDashboard(data) {
   const pageContent = `
     <div class="space-y-6">
@@ -15905,7 +17335,7 @@ function renderCacheDashboard(data) {
     </script>
 
     <!-- Confirmation Dialogs -->
-    ${chunkJFLZHOQP_cjs.renderConfirmationDialog({
+    ${chunkI767LVN7_cjs.renderConfirmationDialog({
     id: "clear-all-cache-confirm",
     title: "Clear All Cache",
     message: "Are you sure you want to clear all cache entries? This cannot be undone.",
@@ -15916,7 +17346,7 @@ function renderCacheDashboard(data) {
     onConfirm: "performClearAllCaches()"
   })}
 
-    ${chunkJFLZHOQP_cjs.renderConfirmationDialog({
+    ${chunkI767LVN7_cjs.renderConfirmationDialog({
     id: "clear-namespace-cache-confirm",
     title: "Clear Namespace Cache",
     message: "Clear cache for this namespace?",
@@ -15927,7 +17357,7 @@ function renderCacheDashboard(data) {
     onConfirm: "performClearNamespaceCache()"
   })}
 
-    ${chunkJFLZHOQP_cjs.getConfirmationDialogScript()}
+    ${chunkI767LVN7_cjs.getConfirmationDialogScript()}
   `;
   const layoutData = {
     title: "Cache System",
@@ -15937,7 +17367,7 @@ function renderCacheDashboard(data) {
     version: data.version,
     content: pageContent
   };
-  return chunkK623Q6WD_cjs.renderAdminLayoutCatalyst(layoutData);
+  return chunkUYJQDDEE_cjs.renderAdminLayoutCatalyst(layoutData);
 }
 function renderCollectionSettingsTab(collections) {
   if (collections.length === 0) {
@@ -16193,7 +17623,7 @@ app.get("/", async (c) => {
   const totalRequests = totalHits + totalMisses;
   const overallHitRate = totalRequests > 0 ? totalHits / totalRequests * 100 : 0;
   const DEFAULT_TTL = chunkYA3TJ65D_cjs.CACHE_CONFIGS.api?.ttl ?? 300;
-  const collections = chunkPYZYU7EK_cjs.getCollectionRegistry().listActive().filter((r) => !r.internal).map((r) => {
+  const collections = chunkQCJHCSOK_cjs.getCollectionRegistry().listActive().filter((r) => !r.internal).map((r) => {
     const cacheOverride = r.cache;
     const cacheEnabled = cacheOverride?.enabled !== false;
     const hasCustomTtl = typeof cacheOverride?.ttl === "number";
@@ -16730,9 +18160,9 @@ var faviconSvg = `<?xml version="1.0" encoding="UTF-8" standalone="no"?>
 // src/app.ts
 function createSonicJSApp(config = {}) {
   const app2 = new hono.Hono();
-  const appVersion = config.version || chunkQWSR4THH_cjs.getCoreVersion();
+  const appVersion = config.version || chunkKKNEYIZJ_cjs.getCoreVersion();
   const appName = config.name || "SonicJS AI";
-  const hookSystem = new chunkMGHHPNJN_cjs.HookSystemImpl();
+  const hookSystem = new chunkQJUJNTIU_cjs.HookSystemImpl();
   chunkJ6JTWD2A_cjs.setHookSystem(hookSystem);
   const magicLinkPlugin = createMagicLinkAuthPlugin();
   const corePluginsBeforeCatchAll = [
@@ -16740,7 +18170,7 @@ function createSonicJSApp(config = {}) {
     apiKeysPlugin,
     aiSearchPlugin,
     oauthProvidersPlugin,
-    chunkJFLZHOQP_cjs.userProfilesPlugin,
+    chunkI767LVN7_cjs.userProfilesPlugin,
     otpLoginPlugin,
     analyticsPlugin,
     stripePlugin,
@@ -16750,23 +18180,24 @@ function createSonicJSApp(config = {}) {
     shortcodesPlugin,
     helloWorldPlugin,
     multiTenantPlugin,
-    chunkJFLZHOQP_cjs.lexicalEditorPlugin,
-    versioningPlugin
+    chunkI767LVN7_cjs.lexicalEditorPlugin,
+    versioningPlugin,
+    menuPlugin
   ];
   const corePluginsAfterCatchAll = [emailPluginV3, magicLinkPlugin, emailReconciliationPlugin];
-  const wirePlugins = chunkMGHHPNJN_cjs.createPluginWirer(
+  const wirePlugins = chunkQJUJNTIU_cjs.createPluginWirer(
     () => [...corePluginsBeforeCatchAll, ...corePluginsAfterCatchAll, ...config.plugins?.register ?? []],
     // The capability-gated `ctx.cap.email` resolves to the app EmailService, which
     // is initialized (below) just before wiring on the first request.
     () => ({
       hooks: hookSystem,
       env: firstRequestEnv,
-      providers: { email: () => chunkJFLZHOQP_cjs.getEmailService() }
+      providers: { email: () => chunkI767LVN7_cjs.getEmailService() }
     })
   );
   let firstRequestEnv;
   const initEmailService = async (env = {}) => {
-    if (chunkJFLZHOQP_cjs.hasEmailService()) return;
+    if (chunkI767LVN7_cjs.hasEmailService()) return;
     let provider;
     let defaultFrom = config.email?.from;
     let defaultReplyTo;
@@ -16801,14 +18232,14 @@ function createSonicJSApp(config = {}) {
       }
     }
     defaultFrom = defaultFrom || env.DEFAULT_FROM_EMAIL || "noreply@sonicjs.local";
-    chunkJFLZHOQP_cjs.setEmailService(new EmailService({ provider, defaultFrom, defaultReplyTo, db: env.DB }));
+    chunkI767LVN7_cjs.setEmailService(new EmailService({ provider, defaultFrom, defaultReplyTo, db: env.DB }));
   };
   app2.use("*", async (c, next) => {
     c.set("appVersion", appVersion);
     await next();
   });
-  app2.use("*", chunkFTXGZ3BF_cjs.metricsMiddleware());
-  app2.use("*", chunkFTXGZ3BF_cjs.bootstrapMiddleware(config));
+  app2.use("*", chunk37V3RET3_cjs.metricsMiddleware());
+  app2.use("*", chunk37V3RET3_cjs.bootstrapMiddleware(config));
   const boot = async (env) => {
     if (config.plugins?.disableAll) return;
     firstRequestEnv = env;
@@ -16846,8 +18277,8 @@ function createSonicJSApp(config = {}) {
     allowHeaders: ["Content-Type", "Authorization", "X-API-Key"],
     credentials: true
   }));
-  app2.use("*", chunkFTXGZ3BF_cjs.securityHeadersMiddleware());
-  app2.use("*", chunkFTXGZ3BF_cjs.csrfProtection());
+  app2.use("*", chunk37V3RET3_cjs.securityHeadersMiddleware());
+  app2.use("*", chunk37V3RET3_cjs.csrfProtection());
   app2.use("*", async (c, next) => {
     try {
       const reqUrl = new URL(c.req.url);
@@ -16885,10 +18316,11 @@ function createSonicJSApp(config = {}) {
       app2.use("*", middleware);
     }
   }
-  app2.use("*", chunkPYZYU7EK_cjs.tenantMiddleware());
-  app2.use("/admin/*", chunkFTXGZ3BF_cjs.requireAuth());
-  app2.use("/admin/*", chunkFTXGZ3BF_cjs.requireRbac("portal", "access"));
+  app2.use("*", chunkQCJHCSOK_cjs.tenantMiddleware());
+  app2.use("/admin/*", chunk37V3RET3_cjs.requireAuth());
+  app2.use("/admin/*", chunk37V3RET3_cjs.requireRbac("portal", "access"));
   app2.use("/admin/*", pluginMenuMiddleware());
+  app2.use("/admin/*", menuMiddleware());
   const NAV_LANDING = [
     { path: "/admin/content", perm: "content:read" },
     { path: "/admin/media", perm: "media:read" },
@@ -16933,43 +18365,43 @@ function createSonicJSApp(config = {}) {
   });
   app2.route("/api/security-audit", apiRoutes2);
   app2.route("/admin/plugins/security-audit", adminRoutes3);
-  app2.route("/api/media", chunkJFLZHOQP_cjs.api_media_default);
-  app2.route("/api/system", chunkJFLZHOQP_cjs.api_system_default);
-  app2.route("/api/documents", chunkJFLZHOQP_cjs.apiDocumentsRoutes);
-  app2.route("/api", chunkJFLZHOQP_cjs.api_default);
-  app2.route("/admin/documents", chunkJFLZHOQP_cjs.adminDocumentsRoutes);
-  chunkMGHHPNJN_cjs.registerPluginRoutes(app2, [formsPlugin], { source: "core" });
-  app2.route("/admin/api", chunkJFLZHOQP_cjs.admin_api_default);
-  app2.route("/admin/collections", chunkJFLZHOQP_cjs.adminCollectionsRoutes);
-  app2.route("/admin/settings", chunkJFLZHOQP_cjs.adminSettingsRoutes);
-  app2.route("/admin/api-reference", chunkJFLZHOQP_cjs.router2);
+  app2.route("/api/media", chunkI767LVN7_cjs.api_media_default);
+  app2.route("/api/system", chunkI767LVN7_cjs.api_system_default);
+  app2.route("/api/documents", chunkI767LVN7_cjs.apiDocumentsRoutes);
+  app2.route("/api", chunkI767LVN7_cjs.api_default);
+  app2.route("/admin/documents", chunkI767LVN7_cjs.adminDocumentsRoutes);
+  chunkQJUJNTIU_cjs.registerPluginRoutes(app2, [formsPlugin], { source: "core" });
+  app2.route("/admin/api", chunkI767LVN7_cjs.admin_api_default);
+  app2.route("/admin/collections", chunkI767LVN7_cjs.adminCollectionsRoutes);
+  app2.route("/admin/settings", chunkI767LVN7_cjs.adminSettingsRoutes);
+  app2.route("/admin/api-reference", chunkI767LVN7_cjs.router2);
   app2.route("/admin/database-tools", createDatabaseToolsAdminRoutes());
-  app2.route("/admin/content", chunkJFLZHOQP_cjs.admin_content_default);
-  app2.route("/admin/media", chunkJFLZHOQP_cjs.adminMediaRoutes);
+  app2.route("/admin/content", chunkI767LVN7_cjs.admin_content_default);
+  app2.route("/admin/media", chunkI767LVN7_cjs.adminMediaRoutes);
   app2.use("/auth/*", securityAuditMiddleware());
   if (!config.plugins?.disableAll) {
-    chunkMGHHPNJN_cjs.registerPluginRoutes(app2, corePluginsBeforeCatchAll, { source: "core" });
+    chunkQJUJNTIU_cjs.registerPluginRoutes(app2, corePluginsBeforeCatchAll, { source: "core" });
     app2.route("/admin/cache", cache_default.getRoutes());
     if (config.plugins?.register && config.plugins.register.length > 0) {
-      chunkMGHHPNJN_cjs.registerPluginRoutes(app2, config.plugins.register, { source: "user" });
+      chunkQJUJNTIU_cjs.registerPluginRoutes(app2, config.plugins.register, { source: "user" });
     }
   }
   app2.route("/api/events", apiRoutes4);
-  app2.route("/admin/dashboard", chunkJFLZHOQP_cjs.router);
-  app2.route("/admin/plugins", chunkJFLZHOQP_cjs.adminPluginRoutes);
-  app2.route("/admin/logs", chunkJFLZHOQP_cjs.adminLogsRoutes);
+  app2.route("/admin/dashboard", chunkI767LVN7_cjs.router);
+  app2.route("/admin/plugins", chunkI767LVN7_cjs.adminPluginRoutes);
+  app2.route("/admin/logs", chunkI767LVN7_cjs.adminLogsRoutes);
   app2.route("/admin/rbac", adminRbacRoutes);
-  app2.route("/admin", chunkJFLZHOQP_cjs.userRoutes);
-  app2.route("/auth", chunkJFLZHOQP_cjs.auth_default);
+  app2.route("/admin", chunkI767LVN7_cjs.userRoutes);
+  app2.route("/auth", chunkI767LVN7_cjs.auth_default);
   app2.on(["GET", "POST"], "/auth/*", (c) => {
     const reqUrl = new URL(c.req.url);
     const requestBaseURL = `${reqUrl.protocol}//${reqUrl.host}`;
     const auth = chunkGMMCCIQO_cjs.createAuth(c.env, config.auth?.extendBetterAuth, requestBaseURL);
     return auth.handler(c.req.raw);
   });
-  app2.route("/", chunkJFLZHOQP_cjs.test_cleanup_default);
+  app2.route("/", chunkI767LVN7_cjs.test_cleanup_default);
   if (!config.plugins?.disableAll) {
-    chunkMGHHPNJN_cjs.registerPluginRoutes(app2, corePluginsAfterCatchAll, { source: "core" });
+    chunkQJUJNTIU_cjs.registerPluginRoutes(app2, corePluginsAfterCatchAll, { source: "core" });
   }
   if (!config.plugins?.disableAll) {
     const allMountedPlugins = [
@@ -16979,10 +18411,10 @@ function createSonicJSApp(config = {}) {
       ...config.plugins?.register ?? []
     ];
     const userPlugins = (config.plugins?.register ?? []).filter(
-      (p) => !chunkPYZYU7EK_cjs.PLUGIN_REGISTRY[p.id]
+      (p) => !chunkQCJHCSOK_cjs.PLUGIN_REGISTRY[p.id]
     );
-    chunkMGHHPNJN_cjs.setPluginMenu(userPlugins.flatMap((p) => p.menu ?? []));
-    chunkEUJAEB6W_cjs.setPluginDefinitions(allMountedPlugins);
+    chunkBP52BFIV_cjs.setPluginMenu(userPlugins.flatMap((p) => p.menu ?? []));
+    chunkBP52BFIV_cjs.setPluginDefinitions(allMountedPlugins);
   }
   app2.get("/favicon.svg", (c) => {
     return new Response(faviconSvg, {
@@ -19153,7 +20585,7 @@ function renderLayout(title, content2) {
       }
     </style>
   `;
-  return chunkK623Q6WD_cjs.renderAdminLayoutCatalyst({
+  return chunkUYJQDDEE_cjs.renderAdminLayoutCatalyst({
     title,
     currentPath: "/admin/redirects",
     content: customStyles + content2.toString()
@@ -19518,7 +20950,7 @@ function getFormScripts() {
   `;
 }
 function renderLayout2(title, content2) {
-  return chunkK623Q6WD_cjs.renderAdminLayoutCatalyst({
+  return chunkUYJQDDEE_cjs.renderAdminLayoutCatalyst({
     title,
     currentPath: "/admin/redirects",
     content: content2.toString()
@@ -20476,7 +21908,7 @@ function createRedirectApiRoutes() {
   });
   return api;
 }
-var redirectPlugin = chunkEUJAEB6W_cjs.definePlugin({
+var redirectPlugin = chunkBP52BFIV_cjs.definePlugin({
   id: manifest_default3.id,
   version: manifest_default3.version,
   name: manifest_default3.name,
@@ -20494,7 +21926,7 @@ var redirectPlugin = chunkEUJAEB6W_cjs.definePlugin({
   async onBoot(ctx) {
     const db = ctx.env?.DB;
     if (!db) return;
-    const registry = new chunkFTXGZ3BF_cjs.DocumentTypeRegistry(db);
+    const registry = new chunk37V3RET3_cjs.DocumentTypeRegistry(db);
     await registry.register({
       id: "redirect",
       name: "redirect",
@@ -20608,93 +22040,920 @@ var site_settings_collection_default = {
 function createDb(d1$1) {
   return d1.drizzle(d1$1, { schema: chunkYP7GW2G5_cjs.schema_exports });
 }
+var mcpTypeConfigSchema = zod.z.object({
+  read: zod.z.boolean().default(true),
+  write: zod.z.boolean().default(true)
+});
+var mcpConfigSchema = zod.z.object({
+  /** Collections exposed over MCP. Omitted → every active collection. */
+  expose: zod.z.array(zod.z.string()).optional(),
+  /** Per-collection read/write overrides, keyed by collection name. */
+  types: zod.z.record(zod.z.string(), mcpTypeConfigSchema).default({}),
+  /** Field names stripped from every tool response + write schema. */
+  redactFields: zod.z.array(zod.z.string()).default([]),
+  /** Max documents returned by list_* tools and document resources. */
+  listLimit: zod.z.number().int().positive().max(200).default(50)
+});
+function resolveMcpConfig(raw, collections) {
+  const cfg = mcpConfigSchema.parse(raw ?? {});
+  const exposeSet = cfg.expose ? new Set(cfg.expose) : null;
+  const types = collections.filter((c) => exposeSet ? exposeSet.has(c.name) : true).map((c) => {
+    const override = cfg.types[c.name];
+    return {
+      typeId: c.name,
+      displayName: c.displayName ?? c.name,
+      read: override?.read ?? true,
+      write: override?.write ?? true
+    };
+  });
+  return { types, redactFields: cfg.redactFields, listLimit: cfg.listLimit };
+}
+
+// src/plugins/core-plugins/mcp-plugin/schema/field-to-jsonschema.ts
+var SYSTEM_FIELDS = /* @__PURE__ */ new Set([
+  "id",
+  "root_id",
+  "rootId",
+  "created_at",
+  "createdAt",
+  "updated_at",
+  "updatedAt",
+  "version_number",
+  "versionNumber"
+]);
+function fieldToJsonSchema(field) {
+  const base = {};
+  if (field.title) base.title = field.title;
+  if (field.description) base.description = field.description;
+  switch (field.type) {
+    case "number":
+      return {
+        ...base,
+        type: "number",
+        ...field.min != null ? { minimum: field.min } : {},
+        ...field.max != null ? { maximum: field.max } : {}
+      };
+    case "boolean":
+    case "checkbox":
+      return { ...base, type: "boolean" };
+    case "date":
+    case "datetime":
+      return { ...base, type: "string", format: "date-time" };
+    case "select":
+    case "radio":
+      return { ...base, type: "string", ...field.enum ? { enum: field.enum } : {} };
+    case "multiselect":
+      return {
+        ...base,
+        type: "array",
+        items: { type: "string", ...field.enum ? { enum: field.enum } : {} }
+      };
+    case "array":
+      return {
+        ...base,
+        type: "array",
+        items: field.items ? fieldToJsonSchema(field.items) : {}
+      };
+    case "object":
+      return {
+        ...base,
+        type: "object",
+        ...field.properties ? { properties: mapProperties(field.properties) } : {}
+      };
+    case "json":
+      return { ...base };
+    // string-like: string, slug, email, url, richtext, markdown, textarea, editors,
+    // reference, media, color, file, user
+    default: {
+      const node = { ...base, type: "string" };
+      if (field.minLength != null) node.minLength = field.minLength;
+      if (field.maxLength != null) node.maxLength = field.maxLength;
+      if (field.pattern) node.pattern = field.pattern;
+      if (field.format) node.format = field.format;
+      return node;
+    }
+  }
+}
+function mapProperties(props) {
+  const out = {};
+  for (const [name, field] of Object.entries(props)) {
+    out[name] = fieldToJsonSchema(field);
+  }
+  return out;
+}
+function collectionToJsonSchema(schema, opts = {}) {
+  const properties = {};
+  const required = [];
+  const redact2 = new Set(opts.redactFields ?? []);
+  const schemaRequired = new Set(schema.required ?? []);
+  for (const [name, field] of Object.entries(schema.properties ?? {})) {
+    if (redact2.has(name)) continue;
+    if (opts.forWrite && SYSTEM_FIELDS.has(name)) continue;
+    properties[name] = fieldToJsonSchema(field);
+    if (field.required || schemaRequired.has(name)) required.push(name);
+  }
+  return { type: "object", properties, ...required.length ? { required } : {} };
+}
+
+// src/plugins/core-plugins/mcp-plugin/tools/registry.ts
+var PHASE_FLAGS = { includeWrite: true, includeSearch: false };
+var EMPTY_OBJECT_SCHEMA = { type: "object", properties: {} };
+function buildToolRegistry(cfg, collections, opts = {}) {
+  const tools = [];
+  tools.push({
+    name: "list_collections",
+    description: "List every content collection exposed over MCP, with its read/write access.",
+    inputSchema: EMPTY_OBJECT_SCHEMA,
+    op: "list_collections"
+  });
+  if (opts.includeSearch) {
+    tools.push({
+      name: "search_content",
+      description: "Search content across exposed collections by title or slug.",
+      inputSchema: {
+        type: "object",
+        properties: { query: { type: "string", description: "Text matched against document title and slug." } },
+        required: ["query"]
+      },
+      op: "search_content"
+    });
+  }
+  for (const t of cfg.types) {
+    const col = collections.get(t.typeId);
+    const writeSchema = col ? collectionToJsonSchema(col.schema, { forWrite: true, redactFields: cfg.redactFields }) : EMPTY_OBJECT_SCHEMA;
+    if (t.read) {
+      tools.push({
+        name: `list_${t.typeId}`,
+        description: `List ${t.displayName} documents.`,
+        inputSchema: {
+          type: "object",
+          properties: {
+            status: {
+              type: "string",
+              enum: ["published", "draft"],
+              description: "Lifecycle to list. Defaults to published."
+            },
+            limit: { type: "number", description: `Max documents to return (capped at ${cfg.listLimit}).` }
+          }
+        },
+        op: "list",
+        typeId: t.typeId
+      });
+      tools.push({
+        name: `get_${t.typeId}`,
+        description: `Get one ${t.displayName} document by id or slug.`,
+        inputSchema: {
+          type: "object",
+          properties: {
+            id: { type: "string", description: "Document id or root id." },
+            slug: { type: "string", description: "Document slug (alternative to id)." }
+          }
+        },
+        op: "get",
+        typeId: t.typeId
+      });
+    }
+    if (opts.includeWrite && t.write) {
+      tools.push({
+        name: `create_${t.typeId}`,
+        description: `Create a ${t.displayName} document.`,
+        inputSchema: {
+          type: "object",
+          properties: {
+            title: { type: "string" },
+            slug: { type: "string" },
+            data: writeSchema,
+            publish: { type: "boolean", description: "Publish immediately. Defaults to false (draft)." }
+          }
+        },
+        op: "create",
+        typeId: t.typeId
+      });
+      tools.push({
+        name: `update_${t.typeId}`,
+        description: `Update a ${t.displayName} document (saves a new draft).`,
+        inputSchema: {
+          type: "object",
+          properties: {
+            id: { type: "string", description: "Root id of the document to update." },
+            title: { type: "string" },
+            slug: { type: "string" },
+            data: writeSchema
+          },
+          required: ["id"]
+        },
+        op: "update",
+        typeId: t.typeId
+      });
+      tools.push({
+        name: `publish_${t.typeId}`,
+        description: `Publish a ${t.displayName} document.`,
+        inputSchema: {
+          type: "object",
+          properties: { id: { type: "string", description: "Root id of the document to publish." } },
+          required: ["id"]
+        },
+        op: "publish",
+        typeId: t.typeId
+      });
+      tools.push({
+        name: `delete_${t.typeId}`,
+        description: `Delete a ${t.displayName} document.`,
+        inputSchema: {
+          type: "object",
+          properties: { id: { type: "string", description: "Root id of the document to delete." } },
+          required: ["id"]
+        },
+        op: "delete",
+        typeId: t.typeId
+      });
+    }
+  }
+  return tools;
+}
+
+// src/plugins/core-plugins/mcp-plugin/jsonrpc.ts
+var JSON_RPC = {
+  PARSE_ERROR: -32700,
+  INVALID_REQUEST: -32600,
+  METHOD_NOT_FOUND: -32601,
+  INVALID_PARAMS: -32602,
+  INTERNAL_ERROR: -32603,
+  /** Custom: no valid API key on the request. */
+  UNAUTHORIZED: -32001
+};
+var McpToolError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "McpToolError";
+  }
+};
+function rpcResult(id, result) {
+  return { jsonrpc: "2.0", id: id ?? null, result };
+}
+function rpcError(id, code, message, data) {
+  return { jsonrpc: "2.0", id: id ?? null, error: { code, message, ...{} } };
+}
+function parseJsonRpc(body) {
+  if (!body || typeof body !== "object" || Array.isArray(body)) {
+    return { error: { code: JSON_RPC.INVALID_REQUEST, message: "Request must be a JSON object" } };
+  }
+  const b = body;
+  if (b.jsonrpc !== "2.0") {
+    return { error: { code: JSON_RPC.INVALID_REQUEST, message: 'jsonrpc must be "2.0"' } };
+  }
+  if (typeof b.method !== "string" || b.method.length === 0) {
+    return { error: { code: JSON_RPC.INVALID_REQUEST, message: "method must be a non-empty string" } };
+  }
+  const id = b.id === void 0 ? null : b.id;
+  const params = b.params && typeof b.params === "object" && !Array.isArray(b.params) ? b.params : {};
+  return { jsonrpc: "2.0", id, method: b.method, params };
+}
+
+// src/plugins/core-plugins/mcp-plugin/tools/documents.ts
+function redact(data, fields) {
+  if (!fields.length) return data;
+  const out = { ...data };
+  for (const f of fields) delete out[f];
+  return out;
+}
+function shapeDocument(doc, redactFields) {
+  return {
+    id: doc.id,
+    rootId: doc.rootId,
+    typeId: doc.typeId,
+    title: doc.title,
+    slug: doc.slug,
+    status: doc.status,
+    isPublished: doc.isPublished,
+    publishedAt: doc.publishedAt,
+    updatedAt: doc.updatedAt,
+    data: redact(doc.data, redactFields)
+  };
+}
+async function resolveType(ctx, typeId) {
+  const docType = await new chunk37V3RET3_cjs.DocumentTypeRegistry(ctx.db).findById(typeId);
+  if (!docType || !docType.isActive) throw new McpToolError(`Unknown document type: ${typeId}`);
+  const effTenant = chunkI767LVN7_cjs.effectiveTenantForType(ctx.tenantId, docType.settings);
+  const repo = new chunkI767LVN7_cjs.DocumentRepository(ctx.db, effTenant);
+  return { docType, repo };
+}
+async function execList(ctx, typeId, args) {
+  const { docType, repo } = await resolveType(ctx, typeId);
+  const status = args.status === "draft" ? "draft" : "published";
+  const limit = Math.min(Math.max(1, args.limit ?? ctx.listLimit), ctx.listLimit);
+  const now = Math.floor(Date.now() / 1e3);
+  const docs = await repo.list({
+    typeId,
+    status,
+    timeWindow: status === "published",
+    now,
+    limit
+  });
+  const allowed = await Promise.all(
+    docs.map((d) => repo.isAllowed(ctx.principalSet, d.rootId, "read", docType.settings))
+  );
+  return docs.filter((_, i) => allowed[i]).map((d) => shapeDocument(d, ctx.redactFields));
+}
+async function execGet(ctx, typeId, args) {
+  const { docType, repo } = await resolveType(ctx, typeId);
+  let doc = null;
+  if (args.id) {
+    doc = await repo.getById(args.id) ?? await repo.getPublished(args.id) ?? await repo.getCurrentDraft(args.id);
+  } else if (args.slug) {
+    doc = await repo.getBySlug(typeId, args.slug);
+  } else {
+    throw new McpToolError('get requires an "id" or "slug" argument');
+  }
+  if (!doc || doc.typeId !== typeId) throw new McpToolError("Document not found");
+  const ok = await repo.isAllowed(ctx.principalSet, doc.rootId, "read", docType.settings);
+  if (!ok) throw new McpToolError("Document not found");
+  return shapeDocument(doc, ctx.redactFields);
+}
+
+// src/plugins/core-plugins/mcp-plugin/tools/mutations.ts
+async function resolveWriteScope(ctx, typeId) {
+  const docType = await new chunk37V3RET3_cjs.DocumentTypeRegistry(ctx.db).findById(typeId);
+  if (!docType || !docType.isActive) throw new McpToolError(`Unknown document type: ${typeId}`);
+  const effTenant = chunkI767LVN7_cjs.effectiveTenantForType(ctx.tenantId, docType.settings);
+  const repo = new chunkI767LVN7_cjs.DocumentRepository(ctx.db, effTenant);
+  const svc = new chunkLTZ5WYOK_cjs.DocumentsService(ctx.db, {
+    queryableFields: docType.queryableFields ?? [],
+    typeSchemaVersion: docType.schemaVersion,
+    maxVersionsPerRoot: docType.settings?.maxVersionsPerRoot,
+    tenantId: effTenant,
+    versioning: docType.settings?.versioning ?? false
+  });
+  return { docType, effTenant, repo, svc };
+}
+async function assertAllowed(scope, ctx, rootId, permission) {
+  const ok = await scope.repo.isAllowed(ctx.principalSet, rootId, permission, scope.docType.settings ?? {});
+  if (!ok) throw new McpToolError(`Permission denied: cannot ${permission} ${scope.docType.id}`);
+}
+function applyUserFieldDefaults(data, typeId, userId) {
+  const col = chunkQCJHCSOK_cjs.getCollectionRegistry().getByName(typeId);
+  if (!col?.schema?.properties) return data;
+  const props = col.schema.properties;
+  const patched = { ...data };
+  for (const [name, field] of Object.entries(props)) {
+    if (field.type === "user" && !patched[name]) patched[name] = userId;
+  }
+  return patched;
+}
+async function execCreate(ctx, typeId, args) {
+  const scope = await resolveWriteScope(ctx, typeId);
+  await assertAllowed(scope, ctx, "", "create");
+  const data = redact(applyUserFieldDefaults(args.data ?? {}, typeId, ctx.userId), ctx.redactFields);
+  const input = chunkI767LVN7_cjs.createDocumentSchema.parse({
+    typeId,
+    tenantId: scope.effTenant,
+    title: args.title ?? null,
+    slug: args.slug ?? null,
+    data,
+    ownerId: ctx.userId,
+    publishOnCreate: Boolean(args.publish)
+  });
+  const doc = await scope.svc.create(input, ctx.userId);
+  return shapeDocument(doc, ctx.redactFields);
+}
+async function execUpdate(ctx, typeId, args) {
+  if (!args.id) throw new McpToolError('update requires an "id" (root id)');
+  const scope = await resolveWriteScope(ctx, typeId);
+  const current = await scope.repo.getCurrentDraft(args.id);
+  if (!current || current.typeId !== typeId) throw new McpToolError("Document not found");
+  await assertAllowed(scope, ctx, args.id, "update");
+  const patch = chunkI767LVN7_cjs.updateDocumentSchema.parse({
+    ...args.title !== void 0 ? { title: args.title } : {},
+    ...args.slug !== void 0 ? { slug: args.slug } : {},
+    ...args.data !== void 0 ? { data: redact(args.data, ctx.redactFields) } : {}
+  });
+  const doc = await scope.svc.saveDraft(args.id, patch, ctx.userId);
+  return shapeDocument(doc, ctx.redactFields);
+}
+async function execPublish(ctx, typeId, args) {
+  if (!args.id) throw new McpToolError('publish requires an "id" (root id)');
+  const scope = await resolveWriteScope(ctx, typeId);
+  const current = await scope.repo.getCurrentDraft(args.id);
+  if (!current || current.typeId !== typeId) throw new McpToolError("Document not found");
+  await assertAllowed(scope, ctx, args.id, "publish");
+  const doc = await scope.svc.publish(current.id, ctx.userId);
+  return shapeDocument(doc, ctx.redactFields);
+}
+async function execDelete(ctx, typeId, args) {
+  if (!args.id) throw new McpToolError('delete requires an "id" (root id)');
+  const scope = await resolveWriteScope(ctx, typeId);
+  const current = await scope.repo.getCurrentDraft(args.id) ?? await scope.repo.getPublished(args.id);
+  if (!current || current.typeId !== typeId) throw new McpToolError("Document not found");
+  await assertAllowed(scope, ctx, args.id, "delete");
+  if (scope.docType.settings?.pii) {
+    await scope.svc.erase(args.id, scope.effTenant);
+    return { rootId: args.id, deleted: true, erased: true };
+  }
+  const ids = /* @__PURE__ */ new Set();
+  ids.add(current.id);
+  if (current.isCurrentDraft) {
+    const published = await scope.repo.getPublished(args.id);
+    if (published) ids.add(published.id);
+  } else {
+    const draft = await scope.repo.getCurrentDraft(args.id);
+    if (draft) ids.add(draft.id);
+  }
+  for (const id of ids) await scope.svc.softDelete(id);
+  return { rootId: args.id, deleted: true, erased: false };
+}
+
+// src/plugins/core-plugins/mcp-plugin/tools/static.ts
+function execListCollections(types) {
+  return types.map((t) => ({ typeId: t.typeId, displayName: t.displayName, read: t.read, write: t.write }));
+}
+
+// src/plugins/core-plugins/mcp-plugin/resources/schemas.ts
+function buildResourceList(cfg) {
+  const out = [
+    { uri: "sonicjs://collections", name: "All collections", mimeType: "application/json" }
+  ];
+  for (const t of cfg.types) {
+    out.push({
+      uri: `sonicjs://collections/${t.typeId}/schema`,
+      name: `${t.displayName} schema`,
+      mimeType: "application/json"
+    });
+  }
+  return out;
+}
+var SCHEMA_URI = /^sonicjs:\/\/collections\/([^/]+)\/schema$/;
+function readResource(uri, cfg, collections) {
+  if (uri === "sonicjs://collections") {
+    const list = cfg.types.map((t) => ({
+      typeId: t.typeId,
+      displayName: t.displayName,
+      read: t.read,
+      write: t.write
+    }));
+    return { uri, mimeType: "application/json", text: JSON.stringify(list, null, 2) };
+  }
+  const m = uri.match(SCHEMA_URI);
+  if (m) {
+    const typeId = m[1];
+    const exposed = cfg.types.find((t) => t.typeId === typeId);
+    const col = collections.get(typeId);
+    if (!exposed || !col) throw new McpToolError(`Unknown collection: ${typeId}`);
+    const schema = collectionToJsonSchema(col.schema, { redactFields: cfg.redactFields });
+    return { uri, mimeType: "application/json", text: JSON.stringify(schema, null, 2) };
+  }
+  throw new McpToolError(`Unknown resource URI: ${uri}`);
+}
+
+// src/plugins/core-plugins/mcp-plugin/routes/mcp.ts
+var SERVER_INFO = { name: "sonicjs-mcp", version: "1.0.0" };
+var PROTOCOL_VERSION = "2024-11-05";
+function createMcpRoutes(options = {}) {
+  const app2 = new hono.Hono();
+  app2.post("/", async (c) => {
+    let body;
+    try {
+      body = await c.req.json();
+    } catch {
+      return c.json(rpcError(null, JSON_RPC.PARSE_ERROR, "Invalid JSON"));
+    }
+    const parsed = parseJsonRpc(body);
+    if ("error" in parsed) {
+      const id2 = body && typeof body === "object" ? body.id ?? null : null;
+      return c.json(rpcError(id2, parsed.error.code, parsed.error.message));
+    }
+    const { id, method, params } = parsed;
+    const user = c.get("user");
+    if (!user) {
+      return c.json(
+        rpcError(id, JSON_RPC.UNAUTHORIZED, "Unauthorized: provide a valid API key via Authorization: Bearer sk_...")
+      );
+    }
+    const { tenantId, principalSet, userId } = chunkI767LVN7_cjs.getDocumentRequestContext(c);
+    const registry = chunkQCJHCSOK_cjs.getCollectionRegistry();
+    const active = registry.listActive();
+    const collections = new Map(active.map((col) => [col.name, col]));
+    const cfg = resolveMcpConfig(options, active);
+    const tools = buildToolRegistry(cfg, collections, PHASE_FLAGS);
+    try {
+      switch (method) {
+        case "initialize":
+          return c.json(
+            rpcResult(id, {
+              protocolVersion: PROTOCOL_VERSION,
+              serverInfo: SERVER_INFO,
+              capabilities: { tools: {}, resources: {} }
+            })
+          );
+        case "tools/list":
+          return c.json(
+            rpcResult(id, {
+              tools: tools.map((t) => ({ name: t.name, description: t.description, inputSchema: t.inputSchema }))
+            })
+          );
+        case "tools/call": {
+          const name = typeof params.name === "string" ? params.name : "";
+          const args = params.arguments && typeof params.arguments === "object" ? params.arguments : {};
+          const tool = tools.find((t) => t.name === name);
+          if (!tool) return c.json(rpcError(id, JSON_RPC.METHOD_NOT_FOUND, `Unknown tool: ${name}`));
+          const readCtx = {
+            db: c.env.DB,
+            tenantId,
+            principalSet,
+            listLimit: cfg.listLimit,
+            redactFields: cfg.redactFields
+          };
+          const writeCtx = {
+            db: c.env.DB,
+            tenantId,
+            principalSet,
+            userId: userId ?? "",
+            redactFields: cfg.redactFields
+          };
+          try {
+            let result;
+            switch (tool.op) {
+              case "list_collections":
+                result = execListCollections(cfg.types);
+                break;
+              case "list":
+                result = await execList(readCtx, tool.typeId, args);
+                break;
+              case "get":
+                result = await execGet(readCtx, tool.typeId, args);
+                break;
+              case "create":
+                result = await execCreate(writeCtx, tool.typeId, args);
+                break;
+              case "update":
+                result = await execUpdate(writeCtx, tool.typeId, args);
+                break;
+              case "publish":
+                result = await execPublish(writeCtx, tool.typeId, args);
+                break;
+              case "delete":
+                result = await execDelete(writeCtx, tool.typeId, args);
+                break;
+              default:
+                return c.json(rpcError(id, JSON_RPC.METHOD_NOT_FOUND, `Tool not available: ${name}`));
+            }
+            return c.json(rpcResult(id, { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] }));
+          } catch (e) {
+            if (e instanceof McpToolError) {
+              return c.json(rpcResult(id, { content: [{ type: "text", text: e.message }], isError: true }));
+            }
+            throw e;
+          }
+        }
+        case "resources/list":
+          return c.json(rpcResult(id, { resources: buildResourceList(cfg) }));
+        case "resources/read": {
+          const uri = typeof params.uri === "string" ? params.uri : "";
+          if (!uri) return c.json(rpcError(id, JSON_RPC.INVALID_PARAMS, 'resources/read requires a "uri" param'));
+          try {
+            const contents = readResource(uri, cfg, collections);
+            return c.json(rpcResult(id, { contents: [contents] }));
+          } catch (e) {
+            if (e instanceof McpToolError) return c.json(rpcError(id, JSON_RPC.INVALID_PARAMS, e.message));
+            throw e;
+          }
+        }
+        default:
+          return c.json(rpcError(id, JSON_RPC.METHOD_NOT_FOUND, `Method not found: ${method}`));
+      }
+    } catch (e) {
+      console.error("[mcp] handler error:", e);
+      return c.json(rpcError(id, JSON_RPC.INTERNAL_ERROR, "Internal error"));
+    }
+  });
+  return app2;
+}
+
+// src/plugins/core-plugins/mcp-plugin/admin/templates.ts
+chunkUYJQDDEE_cjs.init_admin_layout_catalyst_template();
+function accessBadge(ok) {
+  return ok ? `<span class="inline-flex items-center rounded-full bg-emerald-50 dark:bg-emerald-900/20 px-2 py-0.5 text-xs font-medium text-emerald-700 dark:text-emerald-400 ring-1 ring-emerald-600/20 dark:ring-emerald-400/20">Yes</span>` : `<span class="inline-flex items-center rounded-full bg-zinc-100 dark:bg-zinc-800 px-2 py-0.5 text-xs font-medium text-zinc-500 dark:text-zinc-400 ring-1 ring-zinc-200 dark:ring-zinc-700">No</span>`;
+}
+function toolNamesForType(typeId, tools) {
+  const names = tools.filter((t) => t.typeId === typeId).map((t) => `<code class="text-xs font-mono text-zinc-500 dark:text-zinc-400">${chunkMNWKYY5E_cjs.escapeHtml(t.name)}</code>`);
+  return names.length ? names.join('<span class="text-zinc-300 dark:text-zinc-600 mx-1">,</span>') : "\u2014";
+}
+function buildClaudeJson(endpointUrl) {
+  return JSON.stringify(
+    {
+      mcpServers: {
+        sonicjs: {
+          type: "http",
+          url: endpointUrl,
+          headers: { Authorization: "Bearer sk_YOUR_API_KEY" }
+        }
+      }
+    },
+    null,
+    2
+  );
+}
+function buildCursorJson(endpointUrl) {
+  return JSON.stringify(
+    {
+      mcpServers: {
+        sonicjs: {
+          url: endpointUrl,
+          headers: { Authorization: "Bearer sk_YOUR_API_KEY" }
+        }
+      }
+    },
+    null,
+    2
+  );
+}
+function renderMcpDashboardPage(data) {
+  const { endpointUrl, types, tools, user, version, dynamicMenuItems } = data;
+  const safeEndpoint = chunkMNWKYY5E_cjs.escapeHtml(endpointUrl);
+  const typeCount = types.length;
+  const toolCount = tools.length;
+  const typeRows = types.length ? types.map(
+    (t) => `
+      <tr class="border-t border-zinc-950/5 dark:border-white/10">
+        <td class="py-3 pr-4 text-sm font-mono text-zinc-950 dark:text-white">${chunkMNWKYY5E_cjs.escapeHtml(t.typeId)}</td>
+        <td class="py-3 pr-4 text-sm text-zinc-500 dark:text-zinc-400">${chunkMNWKYY5E_cjs.escapeHtml(t.displayName)}</td>
+        <td class="py-3 pr-4">${accessBadge(t.read)}</td>
+        <td class="py-3 pr-4">${accessBadge(t.write)}</td>
+        <td class="py-3 text-sm">${toolNamesForType(t.typeId, tools)}</td>
+      </tr>`
+  ).join("") : `<tr><td colspan="5" class="py-8 text-center text-sm text-zinc-500 dark:text-zinc-400">No collections exposed. Register collections via <code class="font-mono">registerCollections()</code> in your app entry point.</td></tr>`;
+  const claudeJson = chunkMNWKYY5E_cjs.escapeHtml(buildClaudeJson(endpointUrl));
+  const cursorJson = chunkMNWKYY5E_cjs.escapeHtml(buildCursorJson(endpointUrl));
+  const content2 = `
+    <div class="space-y-8">
+
+      <!-- Header -->
+      <div class="sm:flex sm:items-center sm:justify-between">
+        <div class="sm:flex-auto">
+          <h1 class="text-2xl/8 font-semibold text-zinc-950 dark:text-white sm:text-xl/8">MCP Server</h1>
+          <p class="mt-2 text-sm/6 text-zinc-500 dark:text-zinc-400">
+            Model Context Protocol endpoint for AI agents (Claude Code, Cursor, VS Code). Requests are authenticated with API keys.
+          </p>
+        </div>
+        <div class="mt-4 sm:mt-0 sm:ml-16">
+          <a href="/admin/plugins/api-keys"
+            class="inline-flex items-center justify-center rounded-lg bg-cyan-600 px-4 py-2.5 text-sm font-semibold text-white hover:bg-cyan-500 transition-colors shadow-sm">
+            Mint API Key
+          </a>
+        </div>
+      </div>
+
+      <!-- Status -->
+      <div class="rounded-xl bg-white/80 dark:bg-zinc-900/80 backdrop-blur-xl p-6 ring-1 ring-zinc-950/5 dark:ring-white/10 shadow-sm">
+        <h2 class="text-sm font-semibold text-zinc-950 dark:text-white mb-4">Endpoint</h2>
+        <div class="flex items-center gap-3">
+          <code id="endpoint-url" class="flex-1 rounded-lg bg-zinc-50 dark:bg-zinc-800 px-3 py-2 text-sm font-mono text-zinc-950 dark:text-white ring-1 ring-zinc-950/5 dark:ring-white/5 break-all">${safeEndpoint}</code>
+          <button type="button" onclick="copyEndpoint()"
+            class="shrink-0 rounded-lg bg-zinc-100 dark:bg-zinc-800 px-3 py-2 text-sm font-medium text-zinc-700 dark:text-zinc-300 hover:bg-zinc-200 dark:hover:bg-zinc-700 ring-1 ring-zinc-950/5 dark:ring-white/10 transition-colors">
+            Copy
+          </button>
+        </div>
+        <div class="mt-4 flex flex-wrap gap-4 text-sm text-zinc-500 dark:text-zinc-400">
+          <span>
+            <span class="font-semibold text-zinc-950 dark:text-white">${typeCount}</span>
+            collection${typeCount === 1 ? "" : "s"} exposed
+          </span>
+          <span class="text-zinc-300 dark:text-zinc-600">&middot;</span>
+          <span>
+            <span class="font-semibold text-zinc-950 dark:text-white">${toolCount}</span>
+            tool${toolCount === 1 ? "" : "s"} available
+          </span>
+          <span class="text-zinc-300 dark:text-zinc-600">&middot;</span>
+          <span>Auth via <a href="/admin/plugins/api-keys" class="text-cyan-600 dark:text-cyan-400 hover:underline">API Keys</a></span>
+        </div>
+      </div>
+
+      <!-- Exposed collections table -->
+      <div class="rounded-xl bg-white/80 dark:bg-zinc-900/80 backdrop-blur-xl p-6 ring-1 ring-zinc-950/5 dark:ring-white/10 shadow-sm overflow-x-auto">
+        <h2 class="text-sm font-semibold text-zinc-950 dark:text-white mb-4">Exposed collections</h2>
+        <table class="w-full text-left">
+          <thead>
+            <tr class="text-xs font-semibold uppercase tracking-wide text-zinc-500 dark:text-zinc-400">
+              <th class="pb-2 pr-4">ID</th>
+              <th class="pb-2 pr-4">Display name</th>
+              <th class="pb-2 pr-4">Read</th>
+              <th class="pb-2 pr-4">Write</th>
+              <th class="pb-2">Tools</th>
+            </tr>
+          </thead>
+          <tbody>${typeRows}</tbody>
+        </table>
+      </div>
+
+      <!-- Integration guide -->
+      <div class="rounded-xl bg-white/80 dark:bg-zinc-900/80 backdrop-blur-xl p-6 ring-1 ring-zinc-950/5 dark:ring-white/10 shadow-sm space-y-6">
+        <div>
+          <h2 class="text-sm font-semibold text-zinc-950 dark:text-white mb-1">Integration guide</h2>
+          <p class="text-sm text-zinc-500 dark:text-zinc-400">
+            <a href="/admin/plugins/api-keys" class="text-cyan-600 dark:text-cyan-400 hover:underline">Mint an API key</a>,
+            then paste one of the configs below into your MCP client.
+            Replace <code class="font-mono text-xs">sk_YOUR_API_KEY</code> with the key.
+          </p>
+        </div>
+
+        <!-- Claude Code -->
+        <div>
+          <div class="flex items-center justify-between mb-2">
+            <h3 class="text-sm font-medium text-zinc-700 dark:text-zinc-300">
+              Claude Code &mdash; <code class="font-mono text-xs">~/.claude/mcp.json</code>
+            </h3>
+            <button type="button" onclick="copyConfig('claude-config')"
+              class="text-xs text-zinc-500 dark:text-zinc-400 hover:text-zinc-700 dark:hover:text-zinc-200 transition-colors">
+              Copy
+            </button>
+          </div>
+          <pre id="claude-config" class="rounded-lg bg-zinc-950 dark:bg-zinc-800 px-4 py-3 text-sm font-mono text-zinc-100 overflow-x-auto ring-1 ring-zinc-700 dark:ring-zinc-600 whitespace-pre">${claudeJson}</pre>
+        </div>
+
+        <!-- Cursor -->
+        <div>
+          <div class="flex items-center justify-between mb-2">
+            <h3 class="text-sm font-medium text-zinc-700 dark:text-zinc-300">
+              Cursor &mdash; <code class="font-mono text-xs">~/.cursor/mcp.json</code>
+            </h3>
+            <button type="button" onclick="copyConfig('cursor-config')"
+              class="text-xs text-zinc-500 dark:text-zinc-400 hover:text-zinc-700 dark:hover:text-zinc-200 transition-colors">
+              Copy
+            </button>
+          </div>
+          <pre id="cursor-config" class="rounded-lg bg-zinc-950 dark:bg-zinc-800 px-4 py-3 text-sm font-mono text-zinc-100 overflow-x-auto ring-1 ring-zinc-700 dark:ring-zinc-600 whitespace-pre">${cursorJson}</pre>
+        </div>
+
+        <p class="text-xs text-zinc-400 dark:text-zinc-500">
+          MCP v1 = HTTP POST only (no SSE stream). Clients that require stdio transport can use
+          <code class="font-mono">npx mcp-remote ${safeEndpoint}</code> as a local bridge.
+        </p>
+      </div>
+
+    </div>
+
+    <script>
+      function copyEndpoint() {
+        navigator.clipboard.writeText(document.getElementById('endpoint-url').textContent.trim()).then(() => {
+          window.showNotification && window.showNotification('Endpoint URL copied', 'success')
+        })
+      }
+      function copyConfig(id) {
+        navigator.clipboard.writeText(document.getElementById(id).textContent).then(() => {
+          window.showNotification && window.showNotification('Config copied', 'success')
+        })
+      }
+    </script>`;
+  const layoutData = {
+    title: "MCP Server",
+    pageTitle: "MCP Server",
+    currentPath: "/admin/mcp",
+    user,
+    content: content2,
+    version,
+    dynamicMenuItems
+  };
+  return chunkUYJQDDEE_cjs.renderAdminLayoutCatalyst(layoutData);
+}
+
+// src/plugins/core-plugins/mcp-plugin/admin/routes.ts
+function createMcpAdminRoutes(options = {}) {
+  const routes2 = new hono.Hono();
+  routes2.use("*", chunk37V3RET3_cjs.requireAuth());
+  routes2.use("*", async (c, next) => {
+    const user = c.get("user");
+    if (user?.role !== "admin") return c.json({ error: "Access denied" }, 403);
+    return next();
+  });
+  routes2.get("/", async (c) => {
+    const url = new URL(c.req.url);
+    const endpointUrl = `${url.protocol}//${url.host}/mcp`;
+    const registry = chunkQCJHCSOK_cjs.getCollectionRegistry();
+    const active = registry.listActive();
+    const collections = new Map(active.map((col) => [col.name, col]));
+    const cfg = resolveMcpConfig(options, active);
+    const tools = buildToolRegistry(cfg, collections, PHASE_FLAGS);
+    const user = c.get("user");
+    return c.html(
+      renderMcpDashboardPage({
+        endpointUrl,
+        types: cfg.types,
+        tools,
+        user: { name: user.email, email: user.email, role: user.role },
+        version: c.get("appVersion"),
+        dynamicMenuItems: c.get("pluginMenuItems")
+      })
+    );
+  });
+  return routes2;
+}
+
+// src/plugins/core-plugins/mcp-plugin/index.ts
+var MCP_ICON = `<svg class="h-5 w-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M8 9l3 3-3 3m5 0h3M5 20h14a2 2 0 002-2V6a2 2 0 00-2-2H5a2 2 0 00-2 2v12a2 2 0 002 2z"/></svg>`;
+function mcpPlugin(options = {}) {
+  return chunkBP52BFIV_cjs.definePlugin({
+    id: "mcp",
+    version: "1.0.0",
+    name: "MCP Server",
+    description: "Exposes SonicJS content as Model Context Protocol tools for AI agents (Claude Code, Cursor, \u2026).",
+    sonicjsVersionRange: "^3.0.0",
+    author: { name: "SonicJS Team" },
+    register(app2) {
+      app2.route("/mcp", createMcpRoutes(options));
+      app2.route("/admin/mcp", createMcpAdminRoutes(options));
+    },
+    menu: [{ label: "MCP Server", path: "/admin/mcp", icon: MCP_ICON, order: 87 }]
+  });
+}
+function createMcpPlugin(options) {
+  return mcpPlugin(options);
+}
 
 // src/index.ts
-var VERSION = chunkQWSR4THH_cjs.package_default.version;
+var VERSION = chunkKKNEYIZJ_cjs.package_default.version;
 
 Object.defineProperty(exports, "DocumentRepository", {
   enumerable: true,
-  get: function () { return chunkJFLZHOQP_cjs.DocumentRepository; }
+  get: function () { return chunkI767LVN7_cjs.DocumentRepository; }
 });
 Object.defineProperty(exports, "ROUTES_INFO", {
   enumerable: true,
-  get: function () { return chunkJFLZHOQP_cjs.ROUTES_INFO; }
+  get: function () { return chunkI767LVN7_cjs.ROUTES_INFO; }
 });
 Object.defineProperty(exports, "adminApiRoutes", {
   enumerable: true,
-  get: function () { return chunkJFLZHOQP_cjs.admin_api_default; }
+  get: function () { return chunkI767LVN7_cjs.admin_api_default; }
 });
 Object.defineProperty(exports, "adminCheckboxRoutes", {
   enumerable: true,
-  get: function () { return chunkJFLZHOQP_cjs.adminCheckboxRoutes; }
+  get: function () { return chunkI767LVN7_cjs.adminCheckboxRoutes; }
 });
 Object.defineProperty(exports, "adminCollectionsRoutes", {
   enumerable: true,
-  get: function () { return chunkJFLZHOQP_cjs.adminCollectionsRoutes; }
+  get: function () { return chunkI767LVN7_cjs.adminCollectionsRoutes; }
 });
 Object.defineProperty(exports, "adminContentRoutes", {
   enumerable: true,
-  get: function () { return chunkJFLZHOQP_cjs.admin_content_default; }
+  get: function () { return chunkI767LVN7_cjs.admin_content_default; }
 });
 Object.defineProperty(exports, "adminDashboardRoutes", {
   enumerable: true,
-  get: function () { return chunkJFLZHOQP_cjs.router; }
+  get: function () { return chunkI767LVN7_cjs.router; }
 });
 Object.defineProperty(exports, "adminLogsRoutes", {
   enumerable: true,
-  get: function () { return chunkJFLZHOQP_cjs.adminLogsRoutes; }
+  get: function () { return chunkI767LVN7_cjs.adminLogsRoutes; }
 });
 Object.defineProperty(exports, "adminMediaRoutes", {
   enumerable: true,
-  get: function () { return chunkJFLZHOQP_cjs.adminMediaRoutes; }
+  get: function () { return chunkI767LVN7_cjs.adminMediaRoutes; }
 });
 Object.defineProperty(exports, "adminPluginRoutes", {
   enumerable: true,
-  get: function () { return chunkJFLZHOQP_cjs.adminPluginRoutes; }
+  get: function () { return chunkI767LVN7_cjs.adminPluginRoutes; }
 });
 Object.defineProperty(exports, "adminSettingsRoutes", {
   enumerable: true,
-  get: function () { return chunkJFLZHOQP_cjs.adminSettingsRoutes; }
+  get: function () { return chunkI767LVN7_cjs.adminSettingsRoutes; }
 });
 Object.defineProperty(exports, "adminUsersRoutes", {
   enumerable: true,
-  get: function () { return chunkJFLZHOQP_cjs.userRoutes; }
+  get: function () { return chunkI767LVN7_cjs.userRoutes; }
 });
 Object.defineProperty(exports, "apiContentCrudRoutes", {
   enumerable: true,
-  get: function () { return chunkJFLZHOQP_cjs.api_content_crud_default; }
+  get: function () { return chunkI767LVN7_cjs.api_content_crud_default; }
 });
 Object.defineProperty(exports, "apiMediaRoutes", {
   enumerable: true,
-  get: function () { return chunkJFLZHOQP_cjs.api_media_default; }
+  get: function () { return chunkI767LVN7_cjs.api_media_default; }
 });
 Object.defineProperty(exports, "apiRoutes", {
   enumerable: true,
-  get: function () { return chunkJFLZHOQP_cjs.api_default; }
+  get: function () { return chunkI767LVN7_cjs.api_default; }
 });
 Object.defineProperty(exports, "apiSystemRoutes", {
   enumerable: true,
-  get: function () { return chunkJFLZHOQP_cjs.api_system_default; }
+  get: function () { return chunkI767LVN7_cjs.api_system_default; }
 });
 Object.defineProperty(exports, "authRoutes", {
   enumerable: true,
-  get: function () { return chunkJFLZHOQP_cjs.auth_default; }
+  get: function () { return chunkI767LVN7_cjs.auth_default; }
 });
 Object.defineProperty(exports, "createUserProfilesPlugin", {
   enumerable: true,
-  get: function () { return chunkJFLZHOQP_cjs.createUserProfilesPlugin; }
+  get: function () { return chunkI767LVN7_cjs.createUserProfilesPlugin; }
 });
 Object.defineProperty(exports, "defineUserProfile", {
   enumerable: true,
-  get: function () { return chunkJFLZHOQP_cjs.defineUserProfile; }
+  get: function () { return chunkI767LVN7_cjs.defineUserProfile; }
 });
 Object.defineProperty(exports, "getUserProfileConfig", {
   enumerable: true,
-  get: function () { return chunkJFLZHOQP_cjs.getUserProfileConfig; }
+  get: function () { return chunkI767LVN7_cjs.getUserProfileConfig; }
 });
 Object.defineProperty(exports, "userProfilesPlugin", {
   enumerable: true,
-  get: function () { return chunkJFLZHOQP_cjs.userProfilesPlugin; }
+  get: function () { return chunkI767LVN7_cjs.userProfilesPlugin; }
 });
 Object.defineProperty(exports, "Logger", {
   enumerable: true,
@@ -20850,87 +23109,87 @@ Object.defineProperty(exports, "workflowHistory", {
 });
 Object.defineProperty(exports, "AuthManager", {
   enumerable: true,
-  get: function () { return chunkFTXGZ3BF_cjs.AuthManager; }
+  get: function () { return chunk37V3RET3_cjs.AuthManager; }
 });
 Object.defineProperty(exports, "PermissionManager", {
   enumerable: true,
-  get: function () { return chunkFTXGZ3BF_cjs.PermissionManager; }
+  get: function () { return chunk37V3RET3_cjs.PermissionManager; }
 });
 Object.defineProperty(exports, "bootstrapDocumentTypes", {
   enumerable: true,
-  get: function () { return chunkFTXGZ3BF_cjs.bootstrapDocumentTypes; }
+  get: function () { return chunk37V3RET3_cjs.bootstrapDocumentTypes; }
 });
 Object.defineProperty(exports, "bootstrapMiddleware", {
   enumerable: true,
-  get: function () { return chunkFTXGZ3BF_cjs.bootstrapMiddleware; }
+  get: function () { return chunk37V3RET3_cjs.bootstrapMiddleware; }
 });
 Object.defineProperty(exports, "cacheHeaders", {
   enumerable: true,
-  get: function () { return chunkFTXGZ3BF_cjs.cacheHeaders; }
+  get: function () { return chunk37V3RET3_cjs.cacheHeaders; }
 });
 Object.defineProperty(exports, "compressionMiddleware", {
   enumerable: true,
-  get: function () { return chunkFTXGZ3BF_cjs.compressionMiddleware; }
+  get: function () { return chunk37V3RET3_cjs.compressionMiddleware; }
 });
 Object.defineProperty(exports, "detailedLoggingMiddleware", {
   enumerable: true,
-  get: function () { return chunkFTXGZ3BF_cjs.detailedLoggingMiddleware; }
+  get: function () { return chunk37V3RET3_cjs.detailedLoggingMiddleware; }
 });
 Object.defineProperty(exports, "getActivePlugins", {
   enumerable: true,
-  get: function () { return chunkFTXGZ3BF_cjs.getActivePlugins; }
+  get: function () { return chunk37V3RET3_cjs.getActivePlugins; }
 });
 Object.defineProperty(exports, "isPluginActive", {
   enumerable: true,
-  get: function () { return chunkFTXGZ3BF_cjs.isPluginActive; }
+  get: function () { return chunk37V3RET3_cjs.isPluginActive; }
 });
 Object.defineProperty(exports, "logActivity", {
   enumerable: true,
-  get: function () { return chunkFTXGZ3BF_cjs.logActivity; }
+  get: function () { return chunk37V3RET3_cjs.logActivity; }
 });
 Object.defineProperty(exports, "loggingMiddleware", {
   enumerable: true,
-  get: function () { return chunkFTXGZ3BF_cjs.loggingMiddleware; }
+  get: function () { return chunk37V3RET3_cjs.loggingMiddleware; }
 });
 Object.defineProperty(exports, "optionalAuth", {
   enumerable: true,
-  get: function () { return chunkFTXGZ3BF_cjs.optionalAuth; }
+  get: function () { return chunk37V3RET3_cjs.optionalAuth; }
 });
 Object.defineProperty(exports, "performanceLoggingMiddleware", {
   enumerable: true,
-  get: function () { return chunkFTXGZ3BF_cjs.performanceLoggingMiddleware; }
+  get: function () { return chunk37V3RET3_cjs.performanceLoggingMiddleware; }
 });
 Object.defineProperty(exports, "requireActivePlugin", {
   enumerable: true,
-  get: function () { return chunkFTXGZ3BF_cjs.requireActivePlugin; }
+  get: function () { return chunk37V3RET3_cjs.requireActivePlugin; }
 });
 Object.defineProperty(exports, "requireActivePlugins", {
   enumerable: true,
-  get: function () { return chunkFTXGZ3BF_cjs.requireActivePlugins; }
+  get: function () { return chunk37V3RET3_cjs.requireActivePlugins; }
 });
 Object.defineProperty(exports, "requireAnyPermission", {
   enumerable: true,
-  get: function () { return chunkFTXGZ3BF_cjs.requireAnyPermission; }
+  get: function () { return chunk37V3RET3_cjs.requireAnyPermission; }
 });
 Object.defineProperty(exports, "requireAuth", {
   enumerable: true,
-  get: function () { return chunkFTXGZ3BF_cjs.requireAuth; }
+  get: function () { return chunk37V3RET3_cjs.requireAuth; }
 });
 Object.defineProperty(exports, "requirePermission", {
   enumerable: true,
-  get: function () { return chunkFTXGZ3BF_cjs.requirePermission; }
+  get: function () { return chunk37V3RET3_cjs.requirePermission; }
 });
 Object.defineProperty(exports, "requireRole", {
   enumerable: true,
-  get: function () { return chunkFTXGZ3BF_cjs.requireRole; }
+  get: function () { return chunk37V3RET3_cjs.requireRole; }
 });
 Object.defineProperty(exports, "securityHeaders", {
   enumerable: true,
-  get: function () { return chunkFTXGZ3BF_cjs.securityHeadersMiddleware; }
+  get: function () { return chunk37V3RET3_cjs.securityHeadersMiddleware; }
 });
 Object.defineProperty(exports, "securityLoggingMiddleware", {
   enumerable: true,
-  get: function () { return chunkFTXGZ3BF_cjs.securityLoggingMiddleware; }
+  get: function () { return chunk37V3RET3_cjs.securityLoggingMiddleware; }
 });
 Object.defineProperty(exports, "DocumentsService", {
   enumerable: true,
@@ -20942,167 +23201,167 @@ Object.defineProperty(exports, "RbacService", {
 });
 Object.defineProperty(exports, "PluginBootstrapService", {
   enumerable: true,
-  get: function () { return chunkPYZYU7EK_cjs.PluginBootstrapService; }
+  get: function () { return chunkQCJHCSOK_cjs.PluginBootstrapService; }
 });
 Object.defineProperty(exports, "PluginServiceClass", {
   enumerable: true,
-  get: function () { return chunkPYZYU7EK_cjs.PluginService; }
+  get: function () { return chunkQCJHCSOK_cjs.PluginService; }
 });
 Object.defineProperty(exports, "getAvailableCollectionNames", {
   enumerable: true,
-  get: function () { return chunkPYZYU7EK_cjs.getAvailableCollectionNames; }
+  get: function () { return chunkQCJHCSOK_cjs.getAvailableCollectionNames; }
 });
 Object.defineProperty(exports, "loadCollectionConfig", {
   enumerable: true,
-  get: function () { return chunkPYZYU7EK_cjs.loadCollectionConfig; }
+  get: function () { return chunkQCJHCSOK_cjs.loadCollectionConfig; }
 });
 Object.defineProperty(exports, "loadCollectionConfigs", {
   enumerable: true,
-  get: function () { return chunkPYZYU7EK_cjs.loadCollectionConfigs; }
+  get: function () { return chunkQCJHCSOK_cjs.loadCollectionConfigs; }
 });
 Object.defineProperty(exports, "registerCollections", {
   enumerable: true,
-  get: function () { return chunkPYZYU7EK_cjs.registerCollections; }
+  get: function () { return chunkQCJHCSOK_cjs.registerCollections; }
 });
 Object.defineProperty(exports, "validateCollectionConfig", {
   enumerable: true,
-  get: function () { return chunkPYZYU7EK_cjs.validateCollectionConfig; }
+  get: function () { return chunkQCJHCSOK_cjs.validateCollectionConfig; }
 });
 Object.defineProperty(exports, "MigrationService", {
   enumerable: true,
-  get: function () { return chunk3CT3SUR4_cjs.MigrationService; }
+  get: function () { return chunkA2SN3RVL_cjs.MigrationService; }
 });
 Object.defineProperty(exports, "renderFilterBar", {
   enumerable: true,
-  get: function () { return chunkCRGUD4KC_cjs.renderFilterBar; }
+  get: function () { return chunkBBEKHLTW_cjs.renderFilterBar; }
 });
 Object.defineProperty(exports, "getConfirmationDialogScript", {
   enumerable: true,
-  get: function () { return chunkPXNTCCPE_cjs.getConfirmationDialogScript; }
+  get: function () { return chunkE66UVONV_cjs.getConfirmationDialogScript; }
 });
 Object.defineProperty(exports, "renderAlert", {
   enumerable: true,
-  get: function () { return chunkPXNTCCPE_cjs.renderAlert; }
+  get: function () { return chunkE66UVONV_cjs.renderAlert; }
 });
 Object.defineProperty(exports, "renderConfirmationDialog", {
   enumerable: true,
-  get: function () { return chunkPXNTCCPE_cjs.renderConfirmationDialog; }
+  get: function () { return chunkE66UVONV_cjs.renderConfirmationDialog; }
 });
 Object.defineProperty(exports, "renderForm", {
   enumerable: true,
-  get: function () { return chunkPXNTCCPE_cjs.renderForm; }
+  get: function () { return chunkE66UVONV_cjs.renderForm; }
 });
 Object.defineProperty(exports, "renderFormField", {
   enumerable: true,
-  get: function () { return chunkPXNTCCPE_cjs.renderFormField; }
+  get: function () { return chunkE66UVONV_cjs.renderFormField; }
 });
 Object.defineProperty(exports, "renderPagination", {
   enumerable: true,
-  get: function () { return chunkPXNTCCPE_cjs.renderPagination; }
+  get: function () { return chunkE66UVONV_cjs.renderPagination; }
 });
 Object.defineProperty(exports, "renderTable", {
   enumerable: true,
-  get: function () { return chunkPXNTCCPE_cjs.renderTable; }
+  get: function () { return chunkE66UVONV_cjs.renderTable; }
 });
 Object.defineProperty(exports, "renderAdminLayoutCatalyst", {
   enumerable: true,
-  get: function () { return chunkK623Q6WD_cjs.renderAdminLayoutCatalyst; }
+  get: function () { return chunkUYJQDDEE_cjs.renderAdminLayoutCatalyst; }
 });
 Object.defineProperty(exports, "HookSystemImpl", {
   enumerable: true,
-  get: function () { return chunkMGHHPNJN_cjs.HookSystemImpl; }
+  get: function () { return chunkQJUJNTIU_cjs.HookSystemImpl; }
 });
 Object.defineProperty(exports, "HookUtils", {
   enumerable: true,
-  get: function () { return chunkMGHHPNJN_cjs.HookUtils; }
+  get: function () { return chunkQJUJNTIU_cjs.HookUtils; }
 });
 Object.defineProperty(exports, "PluginDependencyCycleError", {
   enumerable: true,
-  get: function () { return chunkMGHHPNJN_cjs.PluginDependencyCycleError; }
+  get: function () { return chunkQJUJNTIU_cjs.PluginDependencyCycleError; }
 });
 Object.defineProperty(exports, "PluginManagerClass", {
   enumerable: true,
-  get: function () { return chunkMGHHPNJN_cjs.PluginManager; }
+  get: function () { return chunkQJUJNTIU_cjs.PluginManager; }
 });
 Object.defineProperty(exports, "PluginRegistryImpl", {
   enumerable: true,
-  get: function () { return chunkMGHHPNJN_cjs.PluginRegistryImpl; }
+  get: function () { return chunkQJUJNTIU_cjs.PluginRegistryImpl; }
 });
 Object.defineProperty(exports, "PluginValidatorClass", {
   enumerable: true,
-  get: function () { return chunkMGHHPNJN_cjs.PluginValidator; }
+  get: function () { return chunkQJUJNTIU_cjs.PluginValidator; }
 });
 Object.defineProperty(exports, "RegisterPluginsError", {
   enumerable: true,
-  get: function () { return chunkMGHHPNJN_cjs.RegisterPluginsError; }
+  get: function () { return chunkQJUJNTIU_cjs.RegisterPluginsError; }
 });
 Object.defineProperty(exports, "ScopedHookSystemClass", {
   enumerable: true,
-  get: function () { return chunkMGHHPNJN_cjs.ScopedHookSystem; }
+  get: function () { return chunkQJUJNTIU_cjs.ScopedHookSystem; }
 });
 Object.defineProperty(exports, "collectCronSchedules", {
   enumerable: true,
-  get: function () { return chunkMGHHPNJN_cjs.collectCronSchedules; }
+  get: function () { return chunkQJUJNTIU_cjs.collectCronSchedules; }
 });
 Object.defineProperty(exports, "collectCrons", {
   enumerable: true,
-  get: function () { return chunkMGHHPNJN_cjs.collectCrons; }
+  get: function () { return chunkQJUJNTIU_cjs.collectCrons; }
 });
 Object.defineProperty(exports, "createScheduledHandler", {
   enumerable: true,
-  get: function () { return chunkMGHHPNJN_cjs.createScheduledHandler; }
+  get: function () { return chunkQJUJNTIU_cjs.createScheduledHandler; }
 });
 Object.defineProperty(exports, "dispatchCronTick", {
   enumerable: true,
-  get: function () { return chunkMGHHPNJN_cjs.dispatchCronTick; }
-});
-Object.defineProperty(exports, "getPluginMenu", {
-  enumerable: true,
-  get: function () { return chunkMGHHPNJN_cjs.getPluginMenu; }
+  get: function () { return chunkQJUJNTIU_cjs.dispatchCronTick; }
 });
 Object.defineProperty(exports, "registerPlugins", {
   enumerable: true,
-  get: function () { return chunkMGHHPNJN_cjs.registerPlugins; }
-});
-Object.defineProperty(exports, "resetPluginMenu", {
-  enumerable: true,
-  get: function () { return chunkMGHHPNJN_cjs.resetPluginMenu; }
-});
-Object.defineProperty(exports, "resolvePluginMenuItems", {
-  enumerable: true,
-  get: function () { return chunkMGHHPNJN_cjs.resolvePluginMenuItems; }
-});
-Object.defineProperty(exports, "setPluginMenu", {
-  enumerable: true,
-  get: function () { return chunkMGHHPNJN_cjs.setPluginMenu; }
+  get: function () { return chunkQJUJNTIU_cjs.registerPlugins; }
 });
 Object.defineProperty(exports, "topoSort", {
   enumerable: true,
-  get: function () { return chunkMGHHPNJN_cjs.topoSort; }
+  get: function () { return chunkQJUJNTIU_cjs.topoSort; }
 });
 Object.defineProperty(exports, "applySchemaDefaults", {
   enumerable: true,
-  get: function () { return chunkEUJAEB6W_cjs.applySchemaDefaults; }
+  get: function () { return chunkBP52BFIV_cjs.applySchemaDefaults; }
 });
 Object.defineProperty(exports, "definePlugin", {
   enumerable: true,
-  get: function () { return chunkEUJAEB6W_cjs.definePlugin; }
+  get: function () { return chunkBP52BFIV_cjs.definePlugin; }
+});
+Object.defineProperty(exports, "getPluginMenu", {
+  enumerable: true,
+  get: function () { return chunkBP52BFIV_cjs.getPluginMenu; }
 });
 Object.defineProperty(exports, "isDefinedPlugin", {
   enumerable: true,
-  get: function () { return chunkEUJAEB6W_cjs.isDefinedPlugin; }
+  get: function () { return chunkBP52BFIV_cjs.isDefinedPlugin; }
 });
 Object.defineProperty(exports, "parseConfigSchema", {
   enumerable: true,
-  get: function () { return chunkEUJAEB6W_cjs.parseConfigSchema; }
+  get: function () { return chunkBP52BFIV_cjs.parseConfigSchema; }
 });
 Object.defineProperty(exports, "parseFormDataToSettings", {
   enumerable: true,
-  get: function () { return chunkEUJAEB6W_cjs.parseFormDataToSettings; }
+  get: function () { return chunkBP52BFIV_cjs.parseFormDataToSettings; }
 });
 Object.defineProperty(exports, "renderSchemaFields", {
   enumerable: true,
-  get: function () { return chunkEUJAEB6W_cjs.renderSchemaFields; }
+  get: function () { return chunkBP52BFIV_cjs.renderSchemaFields; }
+});
+Object.defineProperty(exports, "resetPluginMenu", {
+  enumerable: true,
+  get: function () { return chunkBP52BFIV_cjs.resetPluginMenu; }
+});
+Object.defineProperty(exports, "resolvePluginMenuItems", {
+  enumerable: true,
+  get: function () { return chunkBP52BFIV_cjs.resolvePluginMenuItems; }
+});
+Object.defineProperty(exports, "setPluginMenu", {
+  enumerable: true,
+  get: function () { return chunkBP52BFIV_cjs.setPluginMenu; }
 });
 Object.defineProperty(exports, "getHookSystem", {
   enumerable: true,
@@ -21150,11 +23409,11 @@ Object.defineProperty(exports, "metricsTracker", {
 });
 Object.defineProperty(exports, "SONICJS_VERSION", {
   enumerable: true,
-  get: function () { return chunkQWSR4THH_cjs.SONICJS_VERSION; }
+  get: function () { return chunkKKNEYIZJ_cjs.SONICJS_VERSION; }
 });
 Object.defineProperty(exports, "getCoreVersion", {
   enumerable: true,
-  get: function () { return chunkQWSR4THH_cjs.getCoreVersion; }
+  get: function () { return chunkKKNEYIZJ_cjs.getCoreVersion; }
 });
 Object.defineProperty(exports, "escapeHtml", {
   enumerable: true,
@@ -21178,12 +23437,14 @@ exports.OAuthService = OAuthService;
 exports.VERSION = VERSION;
 exports.createDb = createDb;
 exports.createHelloWorldPlugin = createHelloWorldPlugin;
+exports.createMcpPlugin = createMcpPlugin;
 exports.createOAuthProvidersPlugin = createOAuthProvidersPlugin;
 exports.createRedirectPlugin = createRedirectPlugin;
 exports.createSonicJSApp = createSonicJSApp;
 exports.emailReconciliationPlugin = emailReconciliationPlugin;
 exports.generateTriggersComment = generateTriggersComment;
 exports.helloWorldPlugin = helloWorldPlugin;
+exports.mcpPlugin = mcpPlugin;
 exports.oauthProvidersPlugin = oauthProvidersPlugin;
 exports.parseCronTriggers = parseCronTriggers;
 exports.redirectPlugin = redirectPlugin;