@sonicjs-cms/core 3.0.0-beta.25 → 3.0.0-beta.26

package/dist/index.cjs

@@ -1,27 +1,28 @@
 'use strict';
 
-var chunkRSBZITK3_cjs = require('./chunk-RSBZITK3.cjs');
-var chunk6OA77UM7_cjs = require('./chunk-6OA77UM7.cjs');
-require('./chunk-XWVDSM2L.cjs');
+var chunk6UAI4SGN_cjs = require('./chunk-6UAI4SGN.cjs');
+var chunkS2QN4LFD_cjs = require('./chunk-S2QN4LFD.cjs');
 require('./chunk-TT3TQSCZ.cjs');
-var chunk36Z3AKX3_cjs = require('./chunk-36Z3AKX3.cjs');
+var chunkFZGIU5AZ_cjs = require('./chunk-FZGIU5AZ.cjs');
+require('./chunk-XWVDSM2L.cjs');
+var chunkC5LDQ3SH_cjs = require('./chunk-C5LDQ3SH.cjs');
 var chunkYA3TJ65D_cjs = require('./chunk-YA3TJ65D.cjs');
 var chunkYP7GW2G5_cjs = require('./chunk-YP7GW2G5.cjs');
-var chunkE7E3NL3Y_cjs = require('./chunk-E7E3NL3Y.cjs');
-var chunkJCBDXEY2_cjs = require('./chunk-JCBDXEY2.cjs');
+var chunkBRKXMRMB_cjs = require('./chunk-BRKXMRMB.cjs');
+var chunkOLEOKHDX_cjs = require('./chunk-OLEOKHDX.cjs');
 var chunkKIGVVO6N_cjs = require('./chunk-KIGVVO6N.cjs');
-var chunkYAURVGUK_cjs = require('./chunk-YAURVGUK.cjs');
-var chunkMOGK3U4A_cjs = require('./chunk-MOGK3U4A.cjs');
+var chunk4DHPR7KR_cjs = require('./chunk-4DHPR7KR.cjs');
+var chunkPAS7GZBS_cjs = require('./chunk-PAS7GZBS.cjs');
 var chunkCN3T3TDI_cjs = require('./chunk-CN3T3TDI.cjs');
 var chunkOUBUS74I_cjs = require('./chunk-OUBUS74I.cjs');
 var chunkMI2YXCK4_cjs = require('./chunk-MI2YXCK4.cjs');
-var chunkI7MIRRFJ_cjs = require('./chunk-I7MIRRFJ.cjs');
-var chunkD6FWEYQE_cjs = require('./chunk-D6FWEYQE.cjs');
+var chunkA22RBHO7_cjs = require('./chunk-A22RBHO7.cjs');
+var chunkKWQNB6UM_cjs = require('./chunk-KWQNB6UM.cjs');
 var chunkJ6JTWD2A_cjs = require('./chunk-J6JTWD2A.cjs');
-var chunkDLTT7QZU_cjs = require('./chunk-DLTT7QZU.cjs');
+var chunkSFGYZUWU_cjs = require('./chunk-SFGYZUWU.cjs');
 var chunkRCQ2HIQD_cjs = require('./chunk-RCQ2HIQD.cjs');
 require('./chunk-P3XDZL6Q.cjs');
-var chunkBJ6NJL2E_cjs = require('./chunk-BJ6NJL2E.cjs');
+var chunkXZUEGFXE_cjs = require('./chunk-XZUEGFXE.cjs');
 var chunkMNWKYY5E_cjs = require('./chunk-MNWKYY5E.cjs');
 var chunkQTFKZBLC_cjs = require('./chunk-QTFKZBLC.cjs');
 require('./chunk-IGJUBJBW.cjs');
@@ -701,7 +702,7 @@ function formatCellValue(value, colName) {
 // src/plugins/core-plugins/database-tools-plugin/admin-routes.ts
 function createDatabaseToolsAdminRoutes() {
   const router3 = new hono.Hono();
-  router3.use("*", chunkE7E3NL3Y_cjs.requireAuth());
+  router3.use("*", chunkBRKXMRMB_cjs.requireAuth());
   router3.get("/api/stats", async (c) => {
     try {
       const user = c.get("user");
@@ -1060,7 +1061,7 @@ var SiteConfigService = class {
   db;
   env;
   async load() {
-    const settings = new chunk36Z3AKX3_cjs.SettingsService(this.db);
+    const settings = new chunkC5LDQ3SH_cjs.SettingsService(this.db);
     const general = await settings.getGeneralSettings();
     const siteUrl = this.env.PUBLIC_URL || "http://localhost:8787";
     return {
@@ -1110,7 +1111,7 @@ var SiteConfigService = class {
 
 // src/plugins/core-plugins/email-plugin/routes/admin.ts
 var adminRoutes = new hono.Hono();
-adminRoutes.use("*", chunkE7E3NL3Y_cjs.requireAuth());
+adminRoutes.use("*", chunkBRKXMRMB_cjs.requireAuth());
 adminRoutes.post("/settings", async (c) => {
   if (c.get("user")?.role !== "admin") {
     return c.json({ error: "admin role required" }, 403);
@@ -1148,7 +1149,7 @@ adminRoutes.post("/test", async (c) => {
   const { subject, html: html4, text } = renderTestEmail({ siteName });
   try {
     const settingsLoaded = await settings.load();
-    const result = await chunk6OA77UM7_cjs.getEmailService().send({
+    const result = await chunkS2QN4LFD_cjs.getEmailService().send({
       to,
       subject,
       html: html4,
@@ -1230,7 +1231,7 @@ function makeOnRegistrationCompleted(env) {
       siteName,
       loginUrl: siteConfig.buildLoginUrl(siteUrl)
     });
-    const result = await chunk6OA77UM7_cjs.getEmailService().send({
+    const result = await chunkS2QN4LFD_cjs.getEmailService().send({
       to: user.email,
       subject,
       html: html4,
@@ -1304,7 +1305,7 @@ function makeOnPasswordResetRequested(env) {
       expiresAt: Date.now() + DEFAULT_EXPIRY_MS,
       siteName
     });
-    const result = await chunk6OA77UM7_cjs.getEmailService().send({
+    const result = await chunkS2QN4LFD_cjs.getEmailService().send({
       to: user.email,
       subject,
       html: html4,
@@ -1372,7 +1373,7 @@ function makeOnPasswordResetCompleted(env) {
       supportEmail,
       when: Date.now()
     });
-    const result = await chunk6OA77UM7_cjs.getEmailService().send({
+    const result = await chunkS2QN4LFD_cjs.getEmailService().send({
       to: user.email,
       subject,
       html: html4,
@@ -2113,7 +2114,7 @@ var CloudflareEmailProvider = class {
     }
   }
 };
-var emailPluginV3 = chunkD6FWEYQE_cjs.definePlugin({
+var emailPluginV3 = chunkKWQNB6UM_cjs.definePlugin({
   id: "email",
   version: "1.0.0",
   name: "Email",
@@ -2127,7 +2128,7 @@ var emailPluginV3 = chunkD6FWEYQE_cjs.definePlugin({
     const db = env.DB;
     if (db) {
       try {
-        const typeRegistry = new chunkE7E3NL3Y_cjs.DocumentTypeRegistry(db);
+        const typeRegistry = new chunkBRKXMRMB_cjs.DocumentTypeRegistry(db);
         await typeRegistry.register({
           id: "email_log",
           name: "email_log",
@@ -2142,7 +2143,7 @@ var emailPluginV3 = chunkD6FWEYQE_cjs.definePlugin({
       } catch {
       }
     }
-    if (!chunk6OA77UM7_cjs.hasEmailService()) {
+    if (!chunkS2QN4LFD_cjs.hasEmailService()) {
       const settings = db ? await new EmailSettingsService(db).load() : {};
       const envResendKey = typeof env.RESEND_API_KEY === "string" && env.RESEND_API_KEY ? env.RESEND_API_KEY : void 0;
       const cfEmailBinding = env.EMAIL;
@@ -2160,7 +2161,7 @@ var emailPluginV3 = chunkD6FWEYQE_cjs.definePlugin({
       } else {
         provider = resolveEmailProvider({ env });
       }
-      chunk6OA77UM7_cjs.setEmailService(new EmailService({ ...serviceOpts, provider }));
+      chunkS2QN4LFD_cjs.setEmailService(new EmailService({ ...serviceOpts, provider }));
     }
     ctx.hooks.on("auth:registration:completed", makeOnRegistrationCompleted(env));
     ctx.hooks.on("auth:password-reset:requested", makeOnPasswordResetRequested(env));
@@ -2171,7 +2172,7 @@ var emailPluginV3 = chunkD6FWEYQE_cjs.definePlugin({
 var BATCH_SIZE = 100;
 ({
   schema: zod.z.record(zod.z.string(), zod.z.unknown())});
-var emailReconciliationPlugin = chunkD6FWEYQE_cjs.definePlugin({
+var emailReconciliationPlugin = chunkKWQNB6UM_cjs.definePlugin({
   id: "email-reconciliation",
   version: "1.0.0",
   description: "Hourly cron that backfills email delivery state from provider status APIs. Only active for providers that implement EmailProvider.reconcile().",
@@ -2192,11 +2193,11 @@ var emailReconciliationPlugin = chunkD6FWEYQE_cjs.definePlugin({
       console.warn("[email-reconciliation] No DB binding in cron env \u2014 skipping.");
       return;
     }
-    if (!chunk6OA77UM7_cjs.hasEmailService()) {
+    if (!chunkS2QN4LFD_cjs.hasEmailService()) {
       console.warn("[email-reconciliation] EmailService not initialized \u2014 skipping.");
       return;
     }
-    const emailService = chunk6OA77UM7_cjs.getEmailService();
+    const emailService = chunkS2QN4LFD_cjs.getEmailService();
     let rows = [];
     try {
       const result = await db.prepare(
@@ -2629,7 +2630,7 @@ function buildOtpApi() {
           console.warn("Failed to parse OTP plugin settings, using defaults");
         }
       }
-      const settingsService = new chunk36Z3AKX3_cjs.SettingsService(db);
+      const settingsService = new chunkC5LDQ3SH_cjs.SettingsService(db);
       const generalSettings = await settingsService.getGeneralSettings();
       const siteName = generalSettings.siteName;
       const canRequest = await otpService.checkRateLimit(normalizedEmail, settings);
@@ -2683,8 +2684,8 @@ function buildOtpApi() {
           loginUrl: settings.loginUrl || "",
           loginButtonText: settings.loginButtonText || ""
         });
-        if (chunk6OA77UM7_cjs.hasEmailService()) {
-          const sent = await chunk6OA77UM7_cjs.getEmailService().send({
+        if (chunkS2QN4LFD_cjs.hasEmailService()) {
+          const sent = await chunkS2QN4LFD_cjs.getEmailService().send({
             to: normalizedEmail,
             subject: `Your login code for ${siteName}`,
             flow: "otp",
@@ -2786,21 +2787,21 @@ function buildOtpApi() {
           error: "Account is deactivated"
         }, 403);
       }
-      const tokenTtl = await chunkE7E3NL3Y_cjs.getJwtExpirySecondsFromDb(db, c.env);
-      const token = await chunkE7E3NL3Y_cjs.AuthManager.generateToken(user.id, user.email, user.role, c.env.JWT_SECRET, tokenTtl);
+      const tokenTtl = await chunkBRKXMRMB_cjs.getJwtExpirySecondsFromDb(db, c.env);
+      const token = await chunkBRKXMRMB_cjs.AuthManager.generateToken(user.id, user.email, user.role, c.env.JWT_SECRET, tokenTtl);
       cookie.setCookie(c, "auth_token", token, {
         httpOnly: true,
         secure: true,
         sameSite: "Strict",
         maxAge: tokenTtl
       });
-      chunk6OA77UM7_cjs.dispatchHookEvent(
+      chunkS2QN4LFD_cjs.dispatchHookEvent(
         c,
         "auth:otp:verified",
         { user: { id: user.id, email: user.email, role: user.role } },
         "fire-and-forget"
       );
-      const customData = await chunk6OA77UM7_cjs.getCustomData(db, user.id);
+      const customData = await chunkS2QN4LFD_cjs.getCustomData(db, user.id);
       const { is_active: _isActive, ...publicUser } = user;
       return c.json({
         success: true,
@@ -2845,7 +2846,7 @@ function buildOtpApi() {
   });
   return otpAPI;
 }
-var otpLoginPlugin = chunkD6FWEYQE_cjs.definePlugin({
+var otpLoginPlugin = chunkKWQNB6UM_cjs.definePlugin({
   id: "otp-login",
   version: "1.0.0",
   name: "OTP Login",
@@ -3243,15 +3244,15 @@ function buildOauthApi() {
         if (!user || !user.is_active) {
           return c.redirect("/auth/login?error=Account is deactivated");
         }
-        const tokenTtl2 = await chunkE7E3NL3Y_cjs.getJwtExpirySecondsFromDb(c.env.DB, c.env);
-        const jwt2 = await chunkE7E3NL3Y_cjs.AuthManager.generateToken(
+        const tokenTtl2 = await chunkBRKXMRMB_cjs.getJwtExpirySecondsFromDb(c.env.DB, c.env);
+        const jwt2 = await chunkBRKXMRMB_cjs.AuthManager.generateToken(
           user.id,
           user.email,
           user.role,
           c.env.JWT_SECRET,
           tokenTtl2
         );
-        chunkE7E3NL3Y_cjs.AuthManager.setAuthCookie(c, jwt2, { sameSite: "Lax", maxAge: tokenTtl2 });
+        chunkBRKXMRMB_cjs.AuthManager.setAuthCookie(c, jwt2, { sameSite: "Lax", maxAge: tokenTtl2 });
         return c.redirect("/admin");
       }
       const existingUser = await oauthService.findUserByEmail(profile.email);
@@ -3268,15 +3269,15 @@ function buildOauthApi() {
           tokenExpiresAt: tokenExpiresAt ?? void 0,
           profileData: JSON.stringify(profile)
         });
-        const tokenTtl2 = await chunkE7E3NL3Y_cjs.getJwtExpirySecondsFromDb(c.env.DB, c.env);
-        const jwt2 = await chunkE7E3NL3Y_cjs.AuthManager.generateToken(
+        const tokenTtl2 = await chunkBRKXMRMB_cjs.getJwtExpirySecondsFromDb(c.env.DB, c.env);
+        const jwt2 = await chunkBRKXMRMB_cjs.AuthManager.generateToken(
           existingUser.id,
           existingUser.email,
           existingUser.role,
           c.env.JWT_SECRET,
           tokenTtl2
         );
-        chunkE7E3NL3Y_cjs.AuthManager.setAuthCookie(c, jwt2, { sameSite: "Lax", maxAge: tokenTtl2 });
+        chunkBRKXMRMB_cjs.AuthManager.setAuthCookie(c, jwt2, { sameSite: "Lax", maxAge: tokenTtl2 });
         return c.redirect("/admin");
       }
       const newUserId = await oauthService.createUserFromOAuth(profile);
@@ -3289,15 +3290,15 @@ function buildOauthApi() {
         tokenExpiresAt: tokenExpiresAt ?? void 0,
         profileData: JSON.stringify(profile)
       });
-      const tokenTtl = await chunkE7E3NL3Y_cjs.getJwtExpirySecondsFromDb(c.env.DB, c.env);
-      const jwt = await chunkE7E3NL3Y_cjs.AuthManager.generateToken(
+      const tokenTtl = await chunkBRKXMRMB_cjs.getJwtExpirySecondsFromDb(c.env.DB, c.env);
+      const jwt = await chunkBRKXMRMB_cjs.AuthManager.generateToken(
         newUserId,
         profile.email.toLowerCase(),
         "viewer",
         c.env.JWT_SECRET,
         tokenTtl
       );
-      chunkE7E3NL3Y_cjs.AuthManager.setAuthCookie(c, jwt, { sameSite: "Lax", maxAge: tokenTtl });
+      chunkBRKXMRMB_cjs.AuthManager.setAuthCookie(c, jwt, { sameSite: "Lax", maxAge: tokenTtl });
       return c.redirect("/admin");
     } catch (error) {
       console.error("OAuth callback error:", error);
@@ -3392,7 +3393,7 @@ function buildOauthApi() {
   });
   return oauthAPI;
 }
-var oauthProvidersPlugin = chunkD6FWEYQE_cjs.definePlugin({
+var oauthProvidersPlugin = chunkKWQNB6UM_cjs.definePlugin({
   id: "oauth-providers",
   version: "1.0.0",
   name: "OAuth Providers",
@@ -3976,7 +3977,7 @@ var AISearchService = class {
    */
   async detectNewCollections() {
     try {
-      const allCollections = chunkYAURVGUK_cjs.getCollectionRegistry().listActive().filter((r) => !r.internal).map((r) => ({
+      const allCollections = chunk4DHPR7KR_cjs.getCollectionRegistry().listActive().filter((r) => !r.internal).map((r) => ({
         id: r.id,
         name: r.name,
         display_name: r.displayName,
@@ -4028,7 +4029,7 @@ var AISearchService = class {
    */
   async getAllCollections() {
     try {
-      const allCollections = chunkYAURVGUK_cjs.getCollectionRegistry().listActive().filter((r) => !r.internal).sort((a, b) => a.displayName.localeCompare(b.displayName)).map((r) => ({
+      const allCollections = chunk4DHPR7KR_cjs.getCollectionRegistry().listActive().filter((r) => !r.internal).sort((a, b) => a.displayName.localeCompare(b.displayName)).map((r) => ({
         id: r.id,
         name: r.name,
         display_name: r.displayName,
@@ -4367,7 +4368,7 @@ var IndexManager = class {
    */
   async indexCollection(collectionId) {
     try {
-      const registry = chunkYAURVGUK_cjs.getCollectionRegistry();
+      const registry = chunk4DHPR7KR_cjs.getCollectionRegistry();
       const record = registry.getById(collectionId) ?? registry.getByName(collectionId);
       if (!record) {
         throw new Error(`Collection ${collectionId} not found`);
@@ -4994,7 +4995,7 @@ function renderSettingsPage(data) {
 
 // src/plugins/core-plugins/ai-search-plugin/routes/admin.ts
 var adminRoutes2 = new hono.Hono();
-adminRoutes2.use("*", chunkE7E3NL3Y_cjs.requireAuth());
+adminRoutes2.use("*", chunkBRKXMRMB_cjs.requireAuth());
 adminRoutes2.get("/", async (c) => {
   try {
     const user = c.get("user");
@@ -5235,7 +5236,7 @@ var manifest_default = {
   author: "SonicJS"};
 
 // src/plugins/core-plugins/ai-search-plugin/index.ts
-var aiSearchPlugin = chunkD6FWEYQE_cjs.definePlugin({
+var aiSearchPlugin = chunkKWQNB6UM_cjs.definePlugin({
   id: manifest_default.id,
   version: manifest_default.version,
   name: manifest_default.name,
@@ -5288,7 +5289,7 @@ var SecurityAuditService = class {
   constructor(db, settings = DEFAULT_SETTINGS2) {
     this.db = db;
     this.settings = settings;
-    this.docsService = new chunkJCBDXEY2_cjs.DocumentsService(db, {
+    this.docsService = new chunkOLEOKHDX_cjs.DocumentsService(db, {
       queryableFields: QUERYABLE_FIELDS,
       maxVersionsPerRoot: 1,
       tenantId: TENANT
@@ -6108,7 +6109,7 @@ function renderSecuritySettingsPage(data) {
 
 // src/plugins/core-plugins/security-audit-plugin/routes/admin.ts
 var adminRoutes3 = new hono.Hono();
-adminRoutes3.use("*", chunkE7E3NL3Y_cjs.requireAuth());
+adminRoutes3.use("*", chunkBRKXMRMB_cjs.requireAuth());
 adminRoutes3.use("*", async (c, next) => {
   const user = c.get("user");
   if (user?.role !== "admin") {
@@ -6118,7 +6119,7 @@ adminRoutes3.use("*", async (c, next) => {
 });
 async function getSettings(db) {
   try {
-    const pluginService = new chunkYAURVGUK_cjs.PluginService(db);
+    const pluginService = new chunk4DHPR7KR_cjs.PluginService(db);
     const plugin2 = await pluginService.getPlugin("security-audit");
     if (plugin2?.settings) {
       const settings = typeof plugin2.settings === "string" ? JSON.parse(plugin2.settings) : plugin2.settings;
@@ -6223,7 +6224,7 @@ adminRoutes3.post("/settings", async (c) => {
       autoPurge: body["retention.autoPurge"] === "true"
     }
   };
-  const pluginService = new chunkYAURVGUK_cjs.PluginService(db);
+  const pluginService = new chunk4DHPR7KR_cjs.PluginService(db);
   await pluginService.updatePluginSettings("security-audit", settings);
   if (c.req.header("HX-Request")) {
     return c.json({ success: true });
@@ -6385,7 +6386,7 @@ var BruteForceDetector = class {
 
 // src/plugins/core-plugins/security-audit-plugin/routes/api.ts
 var apiRoutes2 = new hono.Hono();
-apiRoutes2.use("*", chunkE7E3NL3Y_cjs.requireAuth());
+apiRoutes2.use("*", chunkBRKXMRMB_cjs.requireAuth());
 apiRoutes2.use("*", async (c, next) => {
   const user = c.get("user");
   if (user?.role !== "admin") {
@@ -6395,7 +6396,7 @@ apiRoutes2.use("*", async (c, next) => {
 });
 async function getSettings2(db) {
   try {
-    const pluginService = new chunkYAURVGUK_cjs.PluginService(db);
+    const pluginService = new chunk4DHPR7KR_cjs.PluginService(db);
     const plugin2 = await pluginService.getPlugin("security-audit");
     if (plugin2?.settings) {
       const settings = typeof plugin2.settings === "string" ? JSON.parse(plugin2.settings) : plugin2.settings;
@@ -6543,7 +6544,7 @@ function generateFingerprint(ip, userAgent) {
 }
 async function getPluginSettings(db) {
   try {
-    const pluginService = new chunkYAURVGUK_cjs.PluginService(db);
+    const pluginService = new chunk4DHPR7KR_cjs.PluginService(db);
     const plugin2 = await pluginService.getPlugin("security-audit");
     if (plugin2?.settings) {
       const settings = typeof plugin2.settings === "string" ? JSON.parse(plugin2.settings) : plugin2.settings;
@@ -6774,7 +6775,7 @@ async function logAuthEvent(c, db, settings, ip, userAgent, countryCode, fingerp
 
 // src/plugins/core-plugins/security-audit-plugin/index.ts
 var SECURITY_ICON = `<svg class="h-5 w-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 12l2 2 4-4m5.618-4.016A11.955 11.955 0 0112 2.944a11.955 11.955 0 01-8.618 3.04A12.02 12.02 0 003 9c0 5.591 3.824 10.29 9 11.622 5.176-1.332 9-6.03 9-11.622 0-1.042-.133-2.052-.382-3.016z"/></svg>`;
-var securityAuditPlugin = chunkD6FWEYQE_cjs.definePlugin({
+var securityAuditPlugin = chunkKWQNB6UM_cjs.definePlugin({
   id: "security-audit",
   version: "1.0.0",
   name: "Security Audit",
@@ -6824,7 +6825,7 @@ var ApiKeyService = class {
   db;
   tenantId;
   docService() {
-    return new chunkJCBDXEY2_cjs.DocumentsService(this.db, {
+    return new chunkOLEOKHDX_cjs.DocumentsService(this.db, {
       queryableFields: API_KEY_QUERYABLE,
       tenantId: this.tenantId,
       maxVersionsPerRoot: 1
@@ -6850,7 +6851,7 @@ var ApiKeyService = class {
     const prefix = secret.slice(0, DISPLAY_PREFIX_LEN);
     const expiresAt = input.expiresAt ?? null;
     const doc = await this.docService().create(
-      chunk6OA77UM7_cjs.createDocumentSchema.parse({
+      chunkS2QN4LFD_cjs.createDocumentSchema.parse({
         typeId: "api_key",
         tenantId: this.tenantId,
         title: name,
@@ -7163,7 +7164,7 @@ var createSchema = zod.z.object({
 });
 async function getSettings3(db) {
   try {
-    const plugin2 = await new chunkYAURVGUK_cjs.PluginService(db).getPlugin("api-keys");
+    const plugin2 = await new chunk4DHPR7KR_cjs.PluginService(db).getPlugin("api-keys");
     if (plugin2?.settings) {
       const s = typeof plugin2.settings === "string" ? JSON.parse(plugin2.settings) : plugin2.settings;
       return { ...DEFAULT_SETTINGS3, ...s };
@@ -7172,7 +7173,7 @@ async function getSettings3(db) {
   }
   return DEFAULT_SETTINGS3;
 }
-adminRoutes4.use("*", chunkE7E3NL3Y_cjs.requireAuth());
+adminRoutes4.use("*", chunkBRKXMRMB_cjs.requireAuth());
 adminRoutes4.use("*", async (c, next) => {
   const user = c.get("user");
   if (user?.role !== "admin") {
@@ -7257,7 +7258,7 @@ function apiKeyAuthMiddleware() {
 
 // src/plugins/core-plugins/api-keys-plugin/index.ts
 var KEY_ICON = `<svg class="h-5 w-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M15 7a2 2 0 012 2m4 0a6 6 0 01-7.743 5.743L11 17H9v2H7v2H4a1 1 0 01-1-1v-2.586a1 1 0 01.293-.707l5.964-5.964A6 6 0 1121 9z"/></svg>`;
-var apiKeysPlugin = chunkD6FWEYQE_cjs.definePlugin({
+var apiKeysPlugin = chunkKWQNB6UM_cjs.definePlugin({
   id: "api-keys",
   version: "1.0.0-beta.1",
   name: "API Keys",
@@ -8028,7 +8029,7 @@ var DEFAULT_SETTINGS4 = {
 
 // src/plugins/core-plugins/stripe-plugin/routes/admin.ts
 var adminRoutes5 = new hono.Hono();
-adminRoutes5.use("*", chunkE7E3NL3Y_cjs.requireAuth());
+adminRoutes5.use("*", chunkBRKXMRMB_cjs.requireAuth());
 adminRoutes5.use("*", async (c, next) => {
   const user = c.get("user");
   if (user?.role !== "admin") {
@@ -8038,7 +8039,7 @@ adminRoutes5.use("*", async (c, next) => {
 });
 async function getSettings4(db) {
   try {
-    const pluginService = new chunkYAURVGUK_cjs.PluginService(db);
+    const pluginService = new chunk4DHPR7KR_cjs.PluginService(db);
     const plugin2 = await pluginService.getPlugin("stripe");
     if (plugin2?.settings) {
       const settings = typeof plugin2.settings === "string" ? JSON.parse(plugin2.settings) : plugin2.settings;
@@ -8361,7 +8362,7 @@ function timingSafeEqual(a, b) {
 var apiRoutes3 = new hono.Hono();
 async function getSettings5(db) {
   try {
-    const pluginService = new chunkYAURVGUK_cjs.PluginService(db);
+    const pluginService = new chunk4DHPR7KR_cjs.PluginService(db);
     const plugin2 = await pluginService.getPlugin("stripe");
     if (plugin2?.settings) {
       const settings = typeof plugin2.settings === "string" ? JSON.parse(plugin2.settings) : plugin2.settings;
@@ -8512,7 +8513,7 @@ apiRoutes3.post("/webhook", async (c) => {
   }
   return c.json({ received: true });
 });
-apiRoutes3.post("/create-checkout-session", chunkE7E3NL3Y_cjs.requireAuth(), async (c) => {
+apiRoutes3.post("/create-checkout-session", chunkBRKXMRMB_cjs.requireAuth(), async (c) => {
   const db = c.env.DB;
   const user = c.get("user");
   if (!user) return c.json({ error: "Unauthorized" }, 401);
@@ -8552,7 +8553,7 @@ apiRoutes3.post("/create-checkout-session", chunkE7E3NL3Y_cjs.requireAuth(), asy
   });
   return c.json({ sessionId: session.id, url: session.url });
 });
-apiRoutes3.get("/subscription", chunkE7E3NL3Y_cjs.requireAuth(), async (c) => {
+apiRoutes3.get("/subscription", chunkBRKXMRMB_cjs.requireAuth(), async (c) => {
   const user = c.get("user");
   if (!user) return c.json({ error: "Unauthorized" }, 401);
   const db = c.env.DB;
@@ -8564,7 +8565,7 @@ apiRoutes3.get("/subscription", chunkE7E3NL3Y_cjs.requireAuth(), async (c) => {
   }
   return c.json({ subscription });
 });
-apiRoutes3.get("/subscriptions", chunkE7E3NL3Y_cjs.requireAuth(), async (c) => {
+apiRoutes3.get("/subscriptions", chunkBRKXMRMB_cjs.requireAuth(), async (c) => {
   const user = c.get("user");
   if (user?.role !== "admin") return c.json({ error: "Access denied" }, 403);
   const db = c.env.DB;
@@ -8580,7 +8581,7 @@ apiRoutes3.get("/subscriptions", chunkE7E3NL3Y_cjs.requireAuth(), async (c) => {
   const result = await subscriptionService.list(filters);
   return c.json(result);
 });
-apiRoutes3.get("/stats", chunkE7E3NL3Y_cjs.requireAuth(), async (c) => {
+apiRoutes3.get("/stats", chunkBRKXMRMB_cjs.requireAuth(), async (c) => {
   const user = c.get("user");
   if (user?.role !== "admin") return c.json({ error: "Access denied" }, 403);
   const db = c.env.DB;
@@ -8589,7 +8590,7 @@ apiRoutes3.get("/stats", chunkE7E3NL3Y_cjs.requireAuth(), async (c) => {
   const stats = await subscriptionService.getStats();
   return c.json(stats);
 });
-apiRoutes3.post("/sync-subscriptions", chunkE7E3NL3Y_cjs.requireAuth(), async (c) => {
+apiRoutes3.post("/sync-subscriptions", chunkBRKXMRMB_cjs.requireAuth(), async (c) => {
   const user = c.get("user");
   if (user?.role !== "admin") return c.json({ error: "Access denied" }, 403);
   const db = c.env.DB;
@@ -8637,7 +8638,7 @@ apiRoutes3.post("/sync-subscriptions", chunkE7E3NL3Y_cjs.requireAuth(), async (c
     }, 500);
   }
 });
-apiRoutes3.get("/events", chunkE7E3NL3Y_cjs.requireAuth(), async (c) => {
+apiRoutes3.get("/events", chunkBRKXMRMB_cjs.requireAuth(), async (c) => {
   const user = c.get("user");
   if (user?.role !== "admin") return c.json({ error: "Access denied" }, 403);
   const db = c.env.DB;
@@ -8660,7 +8661,7 @@ apiRoutes3.get("/events", chunkE7E3NL3Y_cjs.requireAuth(), async (c) => {
 
 // src/plugins/core-plugins/stripe-plugin/index.ts
 var STRIPE_ICON = `<svg class="h-5 w-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M3 10h18M7 15h1m4 0h1m-7 4h12a3 3 0 003-3V8a3 3 0 00-3-3H6a3 3 0 00-3 3v8a3 3 0 003 3z"/></svg>`;
-var stripePlugin = chunkD6FWEYQE_cjs.definePlugin({
+var stripePlugin = chunkKWQNB6UM_cjs.definePlugin({
   id: "stripe",
   version: "1.0.0",
   name: "Stripe",
@@ -8933,7 +8934,7 @@ function renderFormsListPage(data) {
 
       <!-- Forms Table -->
       <div class="bg-white dark:bg-zinc-900 rounded-lg border border-zinc-950/5 dark:border-white/10 overflow-hidden">
-        ${chunk6OA77UM7_cjs.renderTable(tableData)}
+        ${chunkS2QN4LFD_cjs.renderTable(tableData)}
       </div>
     </div>
   `;
@@ -10363,7 +10364,7 @@ function renderFormCreatePage(data) {
 // src/routes/admin-forms.ts
 var isTableMissing = (err) => String(err?.message ?? err?.cause?.message ?? "").includes("no such table: forms");
 var adminFormsRoutes = new hono.Hono();
-adminFormsRoutes.use("*", chunkE7E3NL3Y_cjs.requireAuth());
+adminFormsRoutes.use("*", chunkBRKXMRMB_cjs.requireAuth());
 adminFormsRoutes.get("/", async (c) => {
   try {
     const user = c.get("user");
@@ -10536,7 +10537,7 @@ adminFormsRoutes.get("/:id/builder", async (c) => {
     if (!form) {
       return c.html("<p>Form not found</p>", 404);
     }
-    const turnstileService = new chunkI7MIRRFJ_cjs.TurnstileService(db);
+    const turnstileService = new chunkA22RBHO7_cjs.TurnstileService(db);
     const turnstileSettings = await turnstileService.getSettings();
     const pageData = {
       id: form.id,
@@ -10705,7 +10706,7 @@ publicFormsRoutes.get("/:identifier/turnstile-config", async (c) => {
     if (!form) {
       return c.json({ error: "Form not found" }, 404);
     }
-    const turnstileService = new chunkI7MIRRFJ_cjs.TurnstileService(db);
+    const turnstileService = new chunkA22RBHO7_cjs.TurnstileService(db);
     const globalSettings = await turnstileService.getSettings();
     const formSettings = form.turnstile_settings ? JSON.parse(form.turnstile_settings) : { inherit: true };
     const enabled = form.turnstile_enabled === 1 || formSettings.inherit && globalSettings?.enabled;
@@ -11135,7 +11136,7 @@ publicFormsRoutes.post("/:identifier/submit", async (c) => {
     const turnstileEnabled = form.turnstile_enabled === 1;
     const turnstileSettings = form.turnstile_settings ? JSON.parse(form.turnstile_settings) : { inherit: true };
     if (turnstileEnabled || turnstileSettings.inherit) {
-      const turnstileService = new chunkI7MIRRFJ_cjs.TurnstileService(db);
+      const turnstileService = new chunkA22RBHO7_cjs.TurnstileService(db);
       const globalEnabled = await turnstileService.isEnabled();
       if (globalEnabled || turnstileEnabled) {
         const turnstileToken = body.data?.turnstile || body.turnstile;
@@ -11197,7 +11198,7 @@ publicFormsRoutes.post("/:identifier/submit", async (c) => {
 });
 
 // src/plugins/core-plugins/forms-plugin/index.ts
-var formsPlugin = chunkD6FWEYQE_cjs.definePlugin({
+var formsPlugin = chunkKWQNB6UM_cjs.definePlugin({
   id: "forms",
   version: "1.0.0",
   name: "Forms",
@@ -11217,7 +11218,7 @@ var formsPlugin = chunkD6FWEYQE_cjs.definePlugin({
 });
 chunkMI2YXCK4_cjs.init_admin_layout_catalyst_template();
 var adminRbacRoutes = new hono.Hono();
-adminRbacRoutes.use("*", chunkE7E3NL3Y_cjs.requireRbac("rbac", "manage"));
+adminRbacRoutes.use("*", chunkBRKXMRMB_cjs.requireRbac("rbac", "manage"));
 var esc = (s) => String(s).replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
 var TABS2 = `
   <div class="border-b border-zinc-950/10 dark:border-white/10 mb-6">
@@ -11227,7 +11228,7 @@ var TABS2 = `
     </nav>
   </div>`;
 adminRbacRoutes.get("/", async (c) => {
-  const rbac = new chunkJCBDXEY2_cjs.RbacService(c.env.DB);
+  const rbac = new chunkOLEOKHDX_cjs.RbacService(c.env.DB);
   const [roles, verbs, resources, grants] = await Promise.all([
     rbac.getRoles(),
     rbac.getVerbs(),
@@ -11525,7 +11526,7 @@ adminRbacRoutes.get("/", async (c) => {
       title: "Roles & Permissions",
       pageTitle: "Roles & Permissions",
       currentPath: "/admin/users",
-      version: chunkBJ6NJL2E_cjs.getCoreVersion(),
+      version: chunkXZUEGFXE_cjs.getCoreVersion(),
       user: u ? { name: u.email || "Admin", email: u.email || "", role: u.role || "admin" } : void 0,
       content: content2
     })
@@ -11549,7 +11550,7 @@ adminRbacRoutes.post("/grants", async (c) => {
       pairsByRole.get(roleId).push({ resource, verb, scope });
     }
   }
-  const rbac = new chunkJCBDXEY2_cjs.RbacService(c.env.DB);
+  const rbac = new chunkOLEOKHDX_cjs.RbacService(c.env.DB);
   for (const id of saveRoleIds) {
     await rbac.setRoleGrants(id, pairsByRole.get(id) || []);
   }
@@ -11570,7 +11571,7 @@ adminRbacRoutes.post("/grants", async (c) => {
 adminRbacRoutes.post("/roles/bulk", async (c) => {
   const form = await c.req.formData();
   const roleIds = String(form.get("role_ids") || "").split(",").filter(Boolean);
-  const rbac = new chunkJCBDXEY2_cjs.RbacService(c.env.DB);
+  const rbac = new chunkOLEOKHDX_cjs.RbacService(c.env.DB);
   for (const roleId of roleIds) {
     const displayName = String(form.get(`display_name_${roleId}`) || "").trim();
     const nameVal = form.get(`name_${roleId}`) ? String(form.get(`name_${roleId}`)).trim() : void 0;
@@ -11595,7 +11596,7 @@ adminRbacRoutes.post("/roles", async (c) => {
   const displayName = String(form.get("display_name") || "").trim();
   if (name && displayName) {
     try {
-      await new chunkJCBDXEY2_cjs.RbacService(c.env.DB).createRole(name, displayName);
+      await new chunkOLEOKHDX_cjs.RbacService(c.env.DB).createRole(name, displayName);
     } catch {
     }
   }
@@ -11610,7 +11611,7 @@ adminRbacRoutes.post("/roles/:id", async (c) => {
   const portalAccess = form.get("portal_access") === "1";
   if (displayName) {
     try {
-      const rbac = new chunkJCBDXEY2_cjs.RbacService(c.env.DB);
+      const rbac = new chunkOLEOKHDX_cjs.RbacService(c.env.DB);
       if (roleId !== "role-admin") {
         await rbac.updateRoleAndPortalAccess(roleId, displayName, name, portalAccess, description);
       } else {
@@ -11622,7 +11623,7 @@ adminRbacRoutes.post("/roles/:id", async (c) => {
   return c.redirect(`/admin/rbac#roles-verbs`);
 });
 adminRbacRoutes.post("/roles/:id/delete", async (c) => {
-  await new chunkJCBDXEY2_cjs.RbacService(c.env.DB).deleteRole(c.req.param("id"));
+  await new chunkOLEOKHDX_cjs.RbacService(c.env.DB).deleteRole(c.req.param("id"));
   return c.redirect("/admin/rbac#roles-verbs");
 });
 adminRbacRoutes.post("/verbs", async (c) => {
@@ -11630,18 +11631,18 @@ adminRbacRoutes.post("/verbs", async (c) => {
   const name = String(form.get("name") || "").trim();
   if (name) {
     try {
-      await new chunkJCBDXEY2_cjs.RbacService(c.env.DB).createVerb(name);
+      await new chunkOLEOKHDX_cjs.RbacService(c.env.DB).createVerb(name);
     } catch {
     }
   }
   return c.redirect("/admin/rbac#roles-verbs");
 });
 adminRbacRoutes.post("/verbs/:id/delete", async (c) => {
-  await new chunkJCBDXEY2_cjs.RbacService(c.env.DB).deleteVerb(c.req.param("id"));
+  await new chunkOLEOKHDX_cjs.RbacService(c.env.DB).deleteVerb(c.req.param("id"));
   return c.redirect("/admin/rbac#roles-verbs");
 });
 adminRbacRoutes.get("/check", async (c) => {
-  const rbac = new chunkJCBDXEY2_cjs.RbacService(c.env.DB);
+  const rbac = new chunkOLEOKHDX_cjs.RbacService(c.env.DB);
   const resource = c.req.query("resource") || "";
   const verb = c.req.query("verb") || "";
   const roleId = c.req.query("role");
@@ -11662,7 +11663,7 @@ adminRbacRoutes.get("/check", async (c) => {
 });
 
 // src/middleware/plugin-menu.ts
-var REGISTRY_MENU_PLUGINS = Object.values(chunkYAURVGUK_cjs.PLUGIN_REGISTRY).filter((p) => p.adminMenu !== null).map((p) => ({
+var REGISTRY_MENU_PLUGINS = Object.values(chunk4DHPR7KR_cjs.PLUGIN_REGISTRY).filter((p) => p.adminMenu !== null).map((p) => ({
   id: p.id,
   label: p.adminMenu.label,
   path: p.adminMenu.path,
@@ -11741,7 +11742,7 @@ function pluginMenuMiddleware() {
     } catch {
     }
     const user = c.get("user");
-    const singletonItems = chunkD6FWEYQE_cjs.resolvePluginMenuItems(user ? { role: user.role } : void 0);
+    const singletonItems = chunkKWQNB6UM_cjs.resolvePluginMenuItems(user ? { role: user.role } : void 0);
     const singletonPluginIds = [...new Set(
       singletonItems.map((i) => i.pluginId).filter((id) => !!id)
     )];
@@ -12928,8 +12929,8 @@ function sanitizeUrl(url) {
   return trimmed;
 }
 var adminMenuRoutes = new hono.Hono();
-adminMenuRoutes.use("*", chunkE7E3NL3Y_cjs.requireAuth());
-adminMenuRoutes.use("*", chunkE7E3NL3Y_cjs.requireRole(["admin"]));
+adminMenuRoutes.use("*", chunkBRKXMRMB_cjs.requireAuth());
+adminMenuRoutes.use("*", chunkBRKXMRMB_cjs.requireRole(["admin"]));
 adminMenuRoutes.get("/", async (c) => {
   const db = c.env.DB;
   const user = c.get("user");
@@ -13143,7 +13144,7 @@ adminMenuRoutes.post("/:id/move-down", async (c) => {
   }
   return c.redirect("/admin/menu");
 });
-var menuPlugin = chunkD6FWEYQE_cjs.definePlugin({
+var menuPlugin = chunkKWQNB6UM_cjs.definePlugin({
   id: "menu",
   version: "1.0.0",
   name: "Menu Manager",
@@ -13158,7 +13159,7 @@ var menuPlugin = chunkD6FWEYQE_cjs.definePlugin({
     const db = env.DB;
     if (!db) return;
     try {
-      const typeRegistry = new chunkE7E3NL3Y_cjs.DocumentTypeRegistry(db);
+      const typeRegistry = new chunkBRKXMRMB_cjs.DocumentTypeRegistry(db);
       await typeRegistry.register({
         id: "menu_item",
         name: "menu_item",
@@ -13193,7 +13194,7 @@ var menuPlugin = chunkD6FWEYQE_cjs.definePlugin({
           lockedFields: [...item.lockedFields]
         }, item.sortOrder);
       }
-      await chunk6OA77UM7_cjs.reconcileMenuFromPlugins(db);
+      await chunkS2QN4LFD_cjs.reconcileMenuFromPlugins(db);
     } catch {
     }
   },
@@ -13213,7 +13214,7 @@ var menuPlugin = chunkD6FWEYQE_cjs.definePlugin({
 });
 chunkMI2YXCK4_cjs.init_admin_layout_catalyst_template();
 var adminRoutes6 = new hono.Hono();
-adminRoutes6.use("*", chunkE7E3NL3Y_cjs.requireAuth());
+adminRoutes6.use("*", chunkBRKXMRMB_cjs.requireAuth());
 adminRoutes6.use("*", async (c, next) => {
   const user = c.get("user");
   if (user?.role !== "admin") {
@@ -13360,7 +13361,7 @@ var QUERYABLE_FIELDS2 = [
 var EventTrackingService = class {
   constructor(db) {
     this.db = db;
-    this.docsService = new chunkJCBDXEY2_cjs.DocumentsService(db, {
+    this.docsService = new chunkOLEOKHDX_cjs.DocumentsService(db, {
       queryableFields: QUERYABLE_FIELDS2,
       maxVersionsPerRoot: 1,
       tenantId: TENANT2
@@ -13569,7 +13570,7 @@ apiRoutes4.get("/stats", async (c) => {
 });
 
 // src/plugins/core-plugins/analytics/index.ts
-var analyticsPlugin = chunkD6FWEYQE_cjs.definePlugin({
+var analyticsPlugin = chunkKWQNB6UM_cjs.definePlugin({
   id: "core-analytics",
   version: "1.0.0",
   name: "Analytics",
@@ -13716,7 +13717,7 @@ function esc2(s) {
   return (s || "").replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
 }
 async function getVariablesMap(db) {
-  let variables = chunk6OA77UM7_cjs.getVariablesCached();
+  let variables = chunkS2QN4LFD_cjs.getVariablesCached();
   if (variables) return variables;
   try {
     const { results } = await db.prepare(
@@ -13726,7 +13727,7 @@ async function getVariablesMap(db) {
     for (const row of results || []) {
       variables.set(row.key, row.value);
     }
-    chunk6OA77UM7_cjs.setVariablesCache(variables);
+    chunkS2QN4LFD_cjs.setVariablesCache(variables);
     return variables;
   } catch {
     return /* @__PURE__ */ new Map();
@@ -13795,7 +13796,7 @@ apiRoutes5.post("/", async (c) => {
     await db.prepare(
       "INSERT INTO global_variables (key, value, description, category, is_active) VALUES (?, ?, ?, ?, ?)"
     ).bind(key, value || "", description || "", category || "general", isActive !== false ? 1 : 0).run();
-    chunk6OA77UM7_cjs.invalidateVariablesCache();
+    chunkS2QN4LFD_cjs.invalidateVariablesCache();
     const created = await db.prepare("SELECT * FROM global_variables WHERE key = ?").bind(key).first();
     return c.json({ success: true, data: formatVariable(created) }, 201);
   } catch {
@@ -13840,7 +13841,7 @@ apiRoutes5.put("/:id", async (c) => {
     updates.push("updated_at = strftime('%s', 'now')");
     params.push(id);
     await db.prepare(`UPDATE global_variables SET ${updates.join(", ")} WHERE id = ?`).bind(...params).run();
-    chunk6OA77UM7_cjs.invalidateVariablesCache();
+    chunkS2QN4LFD_cjs.invalidateVariablesCache();
     const updated = await db.prepare("SELECT * FROM global_variables WHERE id = ?").bind(id).first();
     return c.json({ success: true, data: formatVariable(updated) });
   } catch {
@@ -13854,7 +13855,7 @@ apiRoutes5.delete("/:id", async (c) => {
     const existing = await db.prepare("SELECT id FROM global_variables WHERE id = ?").bind(id).first();
     if (!existing) return c.json({ error: "Variable not found" }, 404);
     await db.prepare("DELETE FROM global_variables WHERE id = ?").bind(id).run();
-    chunk6OA77UM7_cjs.invalidateVariablesCache();
+    chunkS2QN4LFD_cjs.invalidateVariablesCache();
     return c.json({ success: true });
   } catch {
     return c.json({ success: false, error: "Failed to delete variable" }, 500);
@@ -13914,7 +13915,7 @@ adminRoutes7.put("/:id", async (c) => {
   const value = body.value;
   if (value !== void 0) {
     await db.prepare("UPDATE global_variables SET value = ?, updated_at = strftime('%s', 'now') WHERE id = ?").bind(value, id).run();
-    chunk6OA77UM7_cjs.invalidateVariablesCache();
+    chunkS2QN4LFD_cjs.invalidateVariablesCache();
   }
   return c.html('<span class="text-green-400 text-xs">Saved</span>');
 });
@@ -13922,7 +13923,7 @@ adminRoutes7.post("/:id/toggle", async (c) => {
   const db = c.env.DB;
   const id = c.req.param("id");
   await db.prepare("UPDATE global_variables SET is_active = CASE WHEN is_active = 1 THEN 0 ELSE 1 END, updated_at = strftime('%s', 'now') WHERE id = ?").bind(id).run();
-  chunk6OA77UM7_cjs.invalidateVariablesCache();
+  chunkS2QN4LFD_cjs.invalidateVariablesCache();
   c.header("HX-Redirect", "/admin/global-variables");
   return c.body(null, 204);
 });
@@ -13943,7 +13944,7 @@ adminRoutes7.post("/", async (c) => {
   await db.prepare(
     "INSERT INTO global_variables (key, value, description, category) VALUES (?, ?, ?, ?)"
   ).bind(key, value, description, category).run();
-  chunk6OA77UM7_cjs.invalidateVariablesCache();
+  chunkS2QN4LFD_cjs.invalidateVariablesCache();
   c.header("HX-Redirect", "/admin/global-variables");
   return c.body(null, 204);
 });
@@ -13962,7 +13963,7 @@ adminRoutes7.post("/settings/editor-integration", async (c) => {
 adminRoutes7.delete("/:id", async (c) => {
   const db = c.env.DB;
   await db.prepare("DELETE FROM global_variables WHERE id = ?").bind(c.req.param("id")).run();
-  chunk6OA77UM7_cjs.invalidateVariablesCache();
+  chunkS2QN4LFD_cjs.invalidateVariablesCache();
   return c.html("");
 });
 function renderAdminPage(variables, editorStatus = { editorActive: false, activeEditorName: "", enableEditorIntegration: true }) {
@@ -14280,7 +14281,7 @@ function renderAdminPage(variables, editorStatus = { editorActive: false, active
   </div>
   ` });
 }
-var globalVariablesPlugin = chunkD6FWEYQE_cjs.definePlugin({
+var globalVariablesPlugin = chunkKWQNB6UM_cjs.definePlugin({
   id: "global-variables",
   version: "1.1.0",
   name: "Global Variables",
@@ -14303,7 +14304,7 @@ var globalVariablesPlugin = chunkD6FWEYQE_cjs.definePlugin({
         if (!db || !data) return data;
         const variables = await getVariablesMap(db);
         if (variables.size === 0) return data;
-        return chunk6OA77UM7_cjs.resolveVariablesInObject(data, variables);
+        return chunkS2QN4LFD_cjs.resolveVariablesInObject(data, variables);
       } catch {
         return data;
       }
@@ -14321,7 +14322,7 @@ var globalVariablesPlugin = chunkD6FWEYQE_cjs.definePlugin({
   },
   activate: async () => console.info("[GlobalVariables] Plugin activated"),
   deactivate: async () => {
-    chunk6OA77UM7_cjs.invalidateVariablesCache();
+    chunkS2QN4LFD_cjs.invalidateVariablesCache();
     console.info("[GlobalVariables] Plugin deactivated, cache cleared");
   },
   uninstall: async (ctx) => {
@@ -14887,7 +14888,7 @@ function renderAdminPage2(shortcodes, editorStatus = { editorActive: false, acti
   </div>
   ` });
 }
-var shortcodesPlugin = chunkD6FWEYQE_cjs.definePlugin({
+var shortcodesPlugin = chunkKWQNB6UM_cjs.definePlugin({
   id: "shortcodes",
   version: "1.0.0",
   name: "Shortcodes",
@@ -14971,7 +14972,7 @@ helloWorldRoutes.get("/", async (c) => {
     </html>
   `);
 });
-var helloWorldPlugin = chunkD6FWEYQE_cjs.definePlugin({
+var helloWorldPlugin = chunkKWQNB6UM_cjs.definePlugin({
   id: "hello-world",
   version: "1.0.0",
   name: "Hello World",
@@ -15202,7 +15203,7 @@ function renderTenantForm(data) {
 // src/plugins/core-plugins/multi-tenant-plugin/templates/tenant-members.template.ts
 chunkMI2YXCK4_cjs.init_admin_layout_catalyst_template();
 function roleOptions(selected) {
-  return chunk6OA77UM7_cjs.VALID_MEMBER_ROLES.map(
+  return chunkS2QN4LFD_cjs.VALID_MEMBER_ROLES.map(
     (r) => `<option value="${r}" ${r === selected ? "selected" : ""}>${r}</option>`
   ).join("");
 }
@@ -15264,7 +15265,7 @@ function renderInvitations(slug, invitations) {
           <div>
             <label for="invite-role" class="mb-1 block text-xs font-medium text-zinc-500 dark:text-zinc-400">Role</label>
             <select id="invite-role" name="role" class="rounded-lg border border-zinc-950/10 bg-white px-2 py-2 text-sm text-zinc-950 dark:border-white/10 dark:bg-zinc-800 dark:text-white">
-              ${chunk6OA77UM7_cjs.VALID_MEMBER_ROLES.map((r) => `<option value="${r}" ${r === "viewer" ? "selected" : ""}>${r}</option>`).join("")}
+              ${chunkS2QN4LFD_cjs.VALID_MEMBER_ROLES.map((r) => `<option value="${r}" ${r === "viewer" ? "selected" : ""}>${r}</option>`).join("")}
             </select>
           </div>
           <button type="submit" data-send-invite class="rounded-lg bg-zinc-950 px-3.5 py-2 text-sm font-semibold text-white hover:bg-zinc-800 dark:bg-white dark:text-zinc-950 dark:hover:bg-zinc-200">Invite</button>
@@ -15360,7 +15361,7 @@ function renderTenantMembers(data) {
 // src/plugins/core-plugins/multi-tenant-plugin/templates/user-memberships.template.ts
 chunkMI2YXCK4_cjs.init_admin_layout_catalyst_template();
 function roleOptions2(selected) {
-  return chunk6OA77UM7_cjs.VALID_MEMBER_ROLES.map(
+  return chunkS2QN4LFD_cjs.VALID_MEMBER_ROLES.map(
     (r) => `<option value="${r}" ${r === selected ? "selected" : ""}>${r}</option>`
   ).join("");
 }
@@ -15522,7 +15523,7 @@ function zodToFieldErrors(error) {
 }
 async function isMultiTenantActive(db) {
   try {
-    const plugin2 = await new chunkYAURVGUK_cjs.PluginService(db).getPlugin(chunkYAURVGUK_cjs.MULTI_TENANT_PLUGIN_ID);
+    const plugin2 = await new chunk4DHPR7KR_cjs.PluginService(db).getPlugin(chunk4DHPR7KR_cjs.MULTI_TENANT_PLUGIN_ID);
     return plugin2?.status === "active";
   } catch {
     return false;
@@ -15530,7 +15531,7 @@ async function isMultiTenantActive(db) {
 }
 function createTenantAdminRoutes() {
   const routes2 = new hono.Hono();
-  routes2.use("*", chunkE7E3NL3Y_cjs.requireAuth());
+  routes2.use("*", chunkBRKXMRMB_cjs.requireAuth());
   routes2.use("*", async (c, next) => {
     const user = c.get("user");
     if (user?.role !== "admin") {
@@ -15544,7 +15545,7 @@ function createTenantAdminRoutes() {
     const form = await c.req.formData();
     const slug = String(form.get("tenant") ?? "").trim().toLowerCase();
     const redirect = String(form.get("redirect") ?? "");
-    const svc = new chunk6OA77UM7_cjs.TenantService(db);
+    const svc = new chunkS2QN4LFD_cjs.TenantService(db);
     const tenant = await svc.getTenantBySlug(slug);
     if (!tenant || tenant.status !== "active") {
       return c.json({ error: "Unknown or inactive tenant" }, 400);
@@ -15554,7 +15555,7 @@ function createTenantAdminRoutes() {
     if (!user.isSuperAdmin && !await svc.isMember(user.userId, slug)) {
       return c.json({ error: "You are not a member of this tenant" }, 403);
     }
-    cookie.setCookie(c, chunkYAURVGUK_cjs.TENANT_COOKIE, slug, {
+    cookie.setCookie(c, chunk4DHPR7KR_cjs.TENANT_COOKIE, slug, {
       path: "/",
       httpOnly: true,
       sameSite: "Lax",
@@ -15571,7 +15572,7 @@ function createTenantAdminRoutes() {
     if (!user) return c.redirect("/auth/login");
     const token = c.req.query("token") ?? "";
     try {
-      const { slug } = await new chunk6OA77UM7_cjs.TenantService(db).acceptInvitation(token, user.userId, user.email);
+      const { slug } = await new chunkS2QN4LFD_cjs.TenantService(db).acceptInvitation(token, user.userId, user.email);
       return c.redirect(`/admin/tenants/${slug}/members?message=Invitation accepted`);
     } catch (error) {
       const message = error instanceof Error ? error.message : "Failed to accept invitation";
@@ -15599,7 +15600,7 @@ function createTenantAdminRoutes() {
     const userId = c.req.param("userId");
     const target = await db.prepare("SELECT id, email FROM auth_user WHERE id = ?").bind(userId).first();
     if (!target?.id) return c.redirect("/admin/users?message=User not found&type=error");
-    const svc = new chunk6OA77UM7_cjs.TenantService(db);
+    const svc = new chunkS2QN4LFD_cjs.TenantService(db);
     const [memberships, allTenants] = await Promise.all([svc.listUserMemberships(userId), svc.listTenants()]);
     const memberSlugs = new Set(memberships.map((m) => m.slug));
     const availableTenants = allTenants.filter((t) => t.status === "active" && !memberSlugs.has(t.slug)).map((t) => ({ slug: t.slug, name: t.name }));
@@ -15624,10 +15625,10 @@ function createTenantAdminRoutes() {
       const slug = String(form.get("slug") ?? "").trim().toLowerCase();
       const role = String(form.get("role") ?? "viewer");
       const redirectTo = String(form.get("_redirect") ?? "") || `/admin/tenants/users/${userId}`;
-      if (!chunk6OA77UM7_cjs.isValidMemberRole(role)) throw new Error(`Invalid role '${role}'`);
+      if (!chunkS2QN4LFD_cjs.isValidMemberRole(role)) throw new Error(`Invalid role '${role}'`);
       const target = await db.prepare("SELECT email FROM auth_user WHERE id = ?").bind(userId).first();
       if (!target) throw new Error("User not found");
-      const svc = new chunk6OA77UM7_cjs.TenantService(db);
+      const svc = new chunkS2QN4LFD_cjs.TenantService(db);
       if (!await svc.getTenantBySlug(slug)) throw new Error("Tenant not found");
       if (await svc.isMember(userId, slug)) throw new Error(`Already a member of '${slug}'`);
       await svc.addMember(slug, userId, role, target.email ?? null);
@@ -15646,7 +15647,7 @@ function createTenantAdminRoutes() {
       const form = await c.req.formData();
       const role = String(form.get("role") ?? "");
       const redirectTo = String(form.get("_redirect") ?? "") || `/admin/tenants/users/${userId}`;
-      await new chunk6OA77UM7_cjs.TenantService(db).setMemberRole(slug, userId, role);
+      await new chunkS2QN4LFD_cjs.TenantService(db).setMemberRole(slug, userId, role);
       return c.redirect(`${redirectTo}?message=Role updated`);
     } catch (error) {
       const message = error instanceof Error ? error.message : "Failed to update role";
@@ -15661,7 +15662,7 @@ function createTenantAdminRoutes() {
     try {
       const form = await c.req.formData();
       const redirectTo = String(form.get("_redirect") ?? "") || `/admin/tenants/users/${userId}`;
-      await new chunk6OA77UM7_cjs.TenantService(db).removeMember(slug, userId);
+      await new chunkS2QN4LFD_cjs.TenantService(db).removeMember(slug, userId);
       return c.redirect(`${redirectTo}?message=Removed from ${encodeURIComponent(slug)}`);
     } catch (error) {
       const message = error instanceof Error ? error.message : "Failed to remove membership";
@@ -15676,7 +15677,7 @@ function createTenantAdminRoutes() {
       return c.html(renderTenantsInactive({ user: userShape(cur), version }));
     }
     const roleName = c.req.param("roleName");
-    const assignments = await new chunk6OA77UM7_cjs.TenantService(db).listAssignmentsByRole(roleName);
+    const assignments = await new chunkS2QN4LFD_cjs.TenantService(db).listAssignmentsByRole(roleName);
     return c.html(renderRoleUsage({ roleName, assignments, user: userShape(cur), version }));
   });
   routes2.get("/", async (c) => {
@@ -15686,7 +15687,7 @@ function createTenantAdminRoutes() {
     if (!await isMultiTenantActive(db)) {
       return c.html(renderTenantsInactive({ user: userShape(user), version }));
     }
-    const svc = new chunk6OA77UM7_cjs.TenantService(db);
+    const svc = new chunkS2QN4LFD_cjs.TenantService(db);
     await svc.ensureDefaultTenant();
     const tenants = await svc.listTenants();
     const [docRes, memberRes] = await db.batch([
@@ -15725,7 +15726,7 @@ function createTenantAdminRoutes() {
       formEntries = Object.fromEntries(form.entries());
       const validated = tenantFormSchema.parse(formEntries);
       if (!validated.slug) throw new zod.z.ZodError([{ code: "custom", message: "Slug is required", path: ["slug"] }]);
-      const svc = new chunk6OA77UM7_cjs.TenantService(db);
+      const svc = new chunkS2QN4LFD_cjs.TenantService(db);
       await svc.createTenant({
         name: validated.name,
         slug: validated.slug,
@@ -15750,7 +15751,7 @@ function createTenantAdminRoutes() {
     if (!await isMultiTenantActive(db)) {
       return c.html(renderTenantsInactive({ user: userShape(user), version }));
     }
-    const tenant = await new chunk6OA77UM7_cjs.TenantService(db).getTenantBySlug(c.req.param("slug"));
+    const tenant = await new chunkS2QN4LFD_cjs.TenantService(db).getTenantBySlug(c.req.param("slug"));
     if (!tenant) return c.redirect("/admin/tenants?message=Tenant not found&type=error");
     return c.html(renderTenantForm({ tenant, isEdit: true, user: userShape(user), version }));
   });
@@ -15760,7 +15761,7 @@ function createTenantAdminRoutes() {
     const version = c.get("appVersion");
     const slug = c.req.param("slug");
     if (!await isMultiTenantActive(db)) return c.json({ error: "Multi-tenant plugin is not active" }, 403);
-    const svc = new chunk6OA77UM7_cjs.TenantService(db);
+    const svc = new chunkS2QN4LFD_cjs.TenantService(db);
     try {
       const form = await c.req.formData();
       const validated = tenantFormSchema.parse(Object.fromEntries(form.entries()));
@@ -15785,7 +15786,7 @@ function createTenantAdminRoutes() {
     const slug = c.req.param("slug");
     if (!await isMultiTenantActive(db)) return c.json({ error: "Multi-tenant plugin is not active" }, 403);
     try {
-      await new chunk6OA77UM7_cjs.TenantService(db).deleteTenant(slug);
+      await new chunkS2QN4LFD_cjs.TenantService(db).deleteTenant(slug);
       return c.redirect("/admin/tenants?message=Tenant deleted successfully");
     } catch (error) {
       const message = error instanceof Error ? error.message : "Failed to delete tenant";
@@ -15800,7 +15801,7 @@ function createTenantAdminRoutes() {
       return c.html(renderTenantsInactive({ user: userShape(user), version }));
     }
     const slug = c.req.param("slug");
-    const svc = new chunk6OA77UM7_cjs.TenantService(db);
+    const svc = new chunkS2QN4LFD_cjs.TenantService(db);
     const tenant = await svc.getTenantBySlug(slug);
     if (!tenant) return c.redirect("/admin/tenants?message=Tenant not found&type=error");
     const [members, invitations] = await Promise.all([svc.listMembers(slug), svc.listInvitations(slug)]);
@@ -15826,7 +15827,7 @@ function createTenantAdminRoutes() {
       const form = await c.req.formData();
       const email = String(form.get("email") ?? "");
       const role = String(form.get("role") ?? "viewer");
-      await new chunk6OA77UM7_cjs.TenantService(db).addMemberByEmail(slug, email, role);
+      await new chunkS2QN4LFD_cjs.TenantService(db).addMemberByEmail(slug, email, role);
       return c.redirect(`/admin/tenants/${slug}/members?message=Member added`);
     } catch (error) {
       const message = error instanceof Error ? error.message : "Failed to add member";
@@ -15841,7 +15842,7 @@ function createTenantAdminRoutes() {
     try {
       const form = await c.req.formData();
       const role = String(form.get("role") ?? "");
-      await new chunk6OA77UM7_cjs.TenantService(db).setMemberRole(slug, userId, role);
+      await new chunkS2QN4LFD_cjs.TenantService(db).setMemberRole(slug, userId, role);
       return c.redirect(`/admin/tenants/${slug}/members?message=Role updated`);
     } catch (error) {
       const message = error instanceof Error ? error.message : "Failed to update role";
@@ -15854,7 +15855,7 @@ function createTenantAdminRoutes() {
     const userId = c.req.param("userId");
     if (!await isMultiTenantActive(db)) return c.json({ error: "Multi-tenant plugin is not active" }, 403);
     try {
-      await new chunk6OA77UM7_cjs.TenantService(db).removeMember(slug, userId);
+      await new chunkS2QN4LFD_cjs.TenantService(db).removeMember(slug, userId);
       return c.redirect(`/admin/tenants/${slug}/members?message=Member removed`);
     } catch (error) {
       const message = error instanceof Error ? error.message : "Failed to remove member";
@@ -15870,12 +15871,12 @@ function createTenantAdminRoutes() {
       const form = await c.req.formData();
       const email = String(form.get("email") ?? "");
       const role = String(form.get("role") ?? "viewer");
-      const token = await new chunk6OA77UM7_cjs.TenantService(db).createInvitation(slug, email, role, user?.userId ?? null);
+      const token = await new chunkS2QN4LFD_cjs.TenantService(db).createInvitation(slug, email, role, user?.userId ?? null);
       const origin = c.req.header("origin") || new URL(c.req.url).origin;
       const acceptUrl = `${origin}/join/invite?token=${encodeURIComponent(token)}`;
       let note;
       let noteType = "";
-      const svc2 = chunk6OA77UM7_cjs.hasEmailService() ? chunk6OA77UM7_cjs.getEmailService() : null;
+      const svc2 = chunkS2QN4LFD_cjs.hasEmailService() ? chunkS2QN4LFD_cjs.getEmailService() : null;
       const hasRealProvider = !!svc2 && svc2.getProviderName() !== "console";
       if (hasRealProvider) {
         const result = await svc2.send({
@@ -15916,7 +15917,7 @@ function createTenantAdminRoutes() {
          WHERE i.id = ? AND t.slug = ? AND i.status = 'pending'`
       ).bind(id, slug).first();
       if (!inv) throw new Error("Invitation not found or already used");
-      const svc2 = chunk6OA77UM7_cjs.hasEmailService() ? chunk6OA77UM7_cjs.getEmailService() : null;
+      const svc2 = chunkS2QN4LFD_cjs.hasEmailService() ? chunkS2QN4LFD_cjs.getEmailService() : null;
       const hasRealProvider = !!svc2 && svc2.getProviderName() !== "console";
       if (!hasRealProvider) throw new Error("No email plugin active");
       const origin = c.req.header("origin") || new URL(c.req.url).origin;
@@ -15941,7 +15942,7 @@ function createTenantAdminRoutes() {
     const id = c.req.param("id");
     if (!await isMultiTenantActive(db)) return c.json({ error: "Multi-tenant plugin is not active" }, 403);
     try {
-      await new chunk6OA77UM7_cjs.TenantService(db).revokeInvitation(slug, id);
+      await new chunkS2QN4LFD_cjs.TenantService(db).revokeInvitation(slug, id);
       return c.redirect(`/admin/tenants/${slug}/members?message=Invitation revoked`);
     } catch (error) {
       const message = error instanceof Error ? error.message : "Failed to revoke invitation";
@@ -16171,7 +16172,7 @@ function createJoinRoutes() {
     if (existing) return rerender("An account with this email already exists. Please sign in instead.");
     try {
       const userId = crypto.randomUUID();
-      const passwordHash = await chunkE7E3NL3Y_cjs.AuthManager.hashPassword(password);
+      const passwordHash = await chunkBRKXMRMB_cjs.AuthManager.hashPassword(password);
       const now = Date.now();
       const nowSec = Math.floor(now / 1e3);
       await db.batch([
@@ -16184,8 +16185,8 @@ function createJoinRoutes() {
            VALUES (?, ?, ?, 'credential', ?, ?, ?)`
         ).bind(`cred-${userId}`, userId, userId, passwordHash, nowSec, nowSec)
       ]);
-      await new chunk6OA77UM7_cjs.TenantService(db).acceptInvitation(token, userId, inv.email);
-      const auth = chunkRSBZITK3_cjs.createAuth(c.env);
+      await new chunkS2QN4LFD_cjs.TenantService(db).acceptInvitation(token, userId, inv.email);
+      const auth = chunk6UAI4SGN_cjs.createAuth(c.env);
       const origin = new URL(c.req.url).origin;
       const baReq = new Request(`${origin}/auth/sign-in/email`, {
         method: "POST",
@@ -16240,7 +16241,7 @@ function createJoinRoutes() {
       version
     }), 400);
     try {
-      const auth = chunkRSBZITK3_cjs.createAuth(c.env);
+      const auth = chunk6UAI4SGN_cjs.createAuth(c.env);
       const origin = new URL(c.req.url).origin;
       const baReq = new Request(`${origin}/auth/sign-in/email`, {
         method: "POST",
@@ -16252,7 +16253,7 @@ function createJoinRoutes() {
       const baBody = await baRes.json();
       const userId = baBody?.user?.id;
       if (!userId) return rerender("Sign-in succeeded but could not read user ID.");
-      await new chunk6OA77UM7_cjs.TenantService(db).acceptInvitation(token, userId, inv.email);
+      await new chunkS2QN4LFD_cjs.TenantService(db).acceptInvitation(token, userId, inv.email);
       const headers = new Headers({ Location: "/admin?message=Welcome! You have joined " + encodeURIComponent(inv.tenantName) });
       copyBaCookies(baRes, headers);
       return new Response(null, { status: 302, headers });
@@ -16266,7 +16267,7 @@ function createJoinRoutes() {
 
 // src/plugins/core-plugins/multi-tenant-plugin/index.ts
 var TENANT_ICON = `<svg class="h-5 w-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M3.75 21h16.5M4.5 3h15M5.25 3v18m13.5-18v18M9 6.75h1.5m-1.5 3h1.5m-1.5 3h1.5m3-6H15m-1.5 3H15m-1.5 3H15M9 21v-3.375c0-.621.504-1.125 1.125-1.125h3.75c.621 0 1.125.504 1.125 1.125V21"/></svg>`;
-var multiTenantPlugin = chunkD6FWEYQE_cjs.definePlugin({
+var multiTenantPlugin = chunkKWQNB6UM_cjs.definePlugin({
   id: manifest_default2.id,
   version: "1.0.0",
   name: manifest_default2.name,
@@ -16281,30 +16282,30 @@ var multiTenantPlugin = chunkD6FWEYQE_cjs.definePlugin({
     { label: "Tenants", path: "/admin/tenants", icon: TENANT_ICON, order: 80 }
   ],
   activate: async () => {
-    chunkYAURVGUK_cjs.invalidateTenantCache();
+    chunk4DHPR7KR_cjs.invalidateTenantCache();
     console.info("\u2705 Multi-Tenant plugin activated");
   },
   deactivate: async () => {
-    chunkYAURVGUK_cjs.invalidateTenantCache();
+    chunk4DHPR7KR_cjs.invalidateTenantCache();
     console.info("\u274C Multi-Tenant plugin deactivated");
   }
 });
 var routes = new hono.Hono();
-routes.use("*", chunkE7E3NL3Y_cjs.requireAuth());
-routes.use("*", chunkE7E3NL3Y_cjs.requireRole(["admin", "editor"]));
+routes.use("*", chunkBRKXMRMB_cjs.requireAuth());
+routes.use("*", chunkBRKXMRMB_cjs.requireRole(["admin", "editor"]));
 routes.get("/:rootId", async (c) => {
   const { rootId } = c.req.param();
   const db = c.env.DB;
-  const scope = await chunk6OA77UM7_cjs.resolveDocScope(c, db, { rootId });
+  const scope = await chunkS2QN4LFD_cjs.resolveDocScope(c, db, { rootId });
   if (!scope) {
     return c.html('<p class="text-zinc-500 dark:text-zinc-400 p-4">Document not found.</p>', 404);
   }
   if (!scope.docType?.settings?.versioning) {
     return c.html('<p class="text-zinc-500 dark:text-zinc-400 p-4">Versioning not enabled for this type.</p>', 404);
   }
-  const denied = await chunk6OA77UM7_cjs.denyIfNotAllowed(c, db, rootId, "read", scope.docType?.settings, scope.tenantId);
+  const denied = await chunkS2QN4LFD_cjs.denyIfNotAllowed(c, db, rootId, "read", scope.docType?.settings, scope.tenantId);
   if (denied) return denied;
-  const repo = new chunk6OA77UM7_cjs.DocumentRepository(db, scope.tenantId);
+  const repo = new chunkS2QN4LFD_cjs.DocumentRepository(db, scope.tenantId);
   const versions = await repo.getVersionHistory(rootId);
   const safeRootIdAttr = chunkMNWKYY5E_cjs.escapeHtml(rootId);
   const rows = versions.map((v) => {
@@ -16397,14 +16398,14 @@ routes.post("/:rootId/restore/:versionNumber", async (c) => {
   const { rootId, versionNumber } = c.req.param();
   const db = c.env.DB;
   const user = c.get("user");
-  const scope = await chunk6OA77UM7_cjs.resolveDocScope(c, db, { rootId });
+  const scope = await chunkS2QN4LFD_cjs.resolveDocScope(c, db, { rootId });
   if (!scope) {
     return c.json({ error: "Document not found" }, 404);
   }
   if (!scope.docType?.settings?.versioning) {
     return c.json({ error: "Versioning not enabled for this type" }, 404);
   }
-  const denied = await chunk6OA77UM7_cjs.denyIfNotAllowed(c, db, rootId, "update", scope.docType?.settings, scope.tenantId);
+  const denied = await chunkS2QN4LFD_cjs.denyIfNotAllowed(c, db, rootId, "update", scope.docType?.settings, scope.tenantId);
   if (denied) return denied;
   const row = await db.prepare("SELECT * FROM documents WHERE root_id = ? AND tenant_id = ? AND version_number = ? LIMIT 1").bind(rootId, scope.tenantId, Number(versionNumber)).first();
   if (!row) {
@@ -16414,7 +16415,7 @@ routes.post("/:rootId/restore/:versionNumber", async (c) => {
   const title = row.title ?? null;
   const slug = row.slug ?? null;
   const docType = scope.docType;
-  const svc = new chunkJCBDXEY2_cjs.DocumentsService(db, {
+  const svc = new chunkOLEOKHDX_cjs.DocumentsService(db, {
     queryableFields: docType?.queryableFields ?? [],
     typeSchemaVersion: docType?.schemaVersion ?? 1,
     maxVersionsPerRoot: docType?.settings?.maxVersionsPerRoot ?? 50,
@@ -16427,7 +16428,7 @@ routes.post("/:rootId/restore/:versionNumber", async (c) => {
 var routes_default = routes;
 
 // src/plugins/core-plugins/versioning-plugin/index.ts
-var versioningPlugin = chunkD6FWEYQE_cjs.definePlugin({
+var versioningPlugin = chunkKWQNB6UM_cjs.definePlugin({
   id: "versioning",
   version: "1.0.0",
   name: "Versioning",
@@ -16504,8 +16505,8 @@ function createMagicLinkAuthPlugin() {
       const baseUrl = new URL(c.req.url).origin;
       const magicLink = `${baseUrl}/auth/magic-link/verify?token=${token}`;
       try {
-        if (chunk6OA77UM7_cjs.hasEmailService()) {
-          await chunk6OA77UM7_cjs.getEmailService().send({
+        if (chunkS2QN4LFD_cjs.hasEmailService()) {
+          await chunkS2QN4LFD_cjs.getEmailService().send({
             to: normalizedEmail,
             subject: "Your Magic Link to Sign In",
             flow: "magic-link",
@@ -16582,19 +16583,19 @@ function createMagicLinkAuthPlugin() {
         SET used = 1, used_at = ?
         WHERE id = ?
       `).bind(Date.now(), magicLink.id).run();
-      const tokenTtl = await chunkE7E3NL3Y_cjs.getJwtExpirySecondsFromDb(c.env.DB, c.env);
-      const jwtToken = await chunkE7E3NL3Y_cjs.AuthManager.generateToken(
+      const tokenTtl = await chunkBRKXMRMB_cjs.getJwtExpirySecondsFromDb(c.env.DB, c.env);
+      const jwtToken = await chunkBRKXMRMB_cjs.AuthManager.generateToken(
         user.id,
         user.email,
         user.role,
         c.env.JWT_SECRET,
         tokenTtl
       );
-      chunkE7E3NL3Y_cjs.AuthManager.setAuthCookie(c, jwtToken, { maxAge: tokenTtl });
+      chunkBRKXMRMB_cjs.AuthManager.setAuthCookie(c, jwtToken, { maxAge: tokenTtl });
       await db.prepare(`
         UPDATE auth_user SET last_login_at = ? WHERE id = ?
       `).bind(Date.now(), user.id).run();
-      chunk6OA77UM7_cjs.dispatchHookEvent(
+      chunkS2QN4LFD_cjs.dispatchHookEvent(
         c,
         "auth:magic-link:consumed",
         { user: { id: user.id, email: user.email, role: user.role } },
@@ -17079,7 +17080,7 @@ async function warmCollections(db) {
   const collectionCache = chunkYA3TJ65D_cjs.getCacheService(config);
   let count = 0;
   try {
-    const results = chunkYAURVGUK_cjs.getCollectionRegistry().listActive().map(chunkYAURVGUK_cjs.collectionRecordToRow);
+    const results = chunk4DHPR7KR_cjs.getCollectionRegistry().listActive().map(chunk4DHPR7KR_cjs.collectionRecordToRow);
     for (const collection of results) {
       const key = collectionCache.generateKey("item", collection.id);
       await collectionCache.set(key, collection);
@@ -17197,6 +17198,14 @@ function renderCacheDashboard(data) {
           >
             Collection Settings
           </button>
+          <button
+            onclick="switchTab('url-catalog')"
+            id="tab-url-catalog"
+            class="cache-tab border-b-2 border-transparent py-3 px-1 text-sm font-medium text-zinc-500 dark:text-zinc-400 hover:text-zinc-700 dark:hover:text-zinc-300 hover:border-zinc-300 dark:hover:border-zinc-600 whitespace-nowrap"
+          >
+            URL Catalog
+            ${data.catalog.stats.totalEntries > 0 ? `<span class="ml-1.5 inline-flex items-center rounded-full px-1.5 py-0.5 text-xs font-medium bg-sky-100 dark:bg-sky-500/20 text-sky-700 dark:text-sky-300">${data.catalog.stats.totalEntries}</span>` : ""}
+          </button>
         </nav>
       </div>
 
@@ -17277,10 +17286,18 @@ function renderCacheDashboard(data) {
       <div id="tab-panel-collection-settings" class="hidden space-y-6">
         ${renderCollectionSettingsTab(data.collections)}
       </div>
+
+      <!-- Tab: URL Catalog -->
+      <div id="tab-panel-url-catalog" class="hidden space-y-6">
+        ${renderUrlCatalogTab(data.catalog)}
+      </div>
     </div>
 
     <script>
-      function switchTab(tab) {
+      const VALID_TABS = ['overview', 'collection-settings', 'url-catalog']
+
+      function switchTab(tab, pushHash) {
+        if (!VALID_TABS.includes(tab)) tab = 'overview'
         // Update tab button styles
         document.querySelectorAll('.cache-tab').forEach(btn => {
           btn.classList.remove('border-zinc-950', 'dark:border-white', 'text-zinc-950', 'dark:text-white')
@@ -17298,8 +17315,21 @@ function renderCacheDashboard(data) {
         })
         const activePanel = document.getElementById('tab-panel-' + tab)
         if (activePanel) activePanel.classList.remove('hidden')
+
+        // Sync URL hash (pushHash=false when called from hashchange to avoid loop)
+        if (pushHash !== false) location.hash = tab
       }
 
+      document.addEventListener('DOMContentLoaded', function () {
+        const hash = location.hash.slice(1)
+        switchTab(VALID_TABS.includes(hash) ? hash : 'overview', false)
+      })
+
+      window.addEventListener('hashchange', function () {
+        const hash = location.hash.slice(1)
+        switchTab(VALID_TABS.includes(hash) ? hash : 'overview', false)
+      })
+
       async function refreshStats() {
         window.location.reload()
       }
@@ -17323,6 +17353,21 @@ function renderCacheDashboard(data) {
         }
       }
 
+      async function clearUrlCatalog() {
+        try {
+          const response = await fetch('/admin/cache/catalog/clear', { method: 'POST' })
+          const result = await response.json()
+          if (result.success) {
+            alert('URL catalog cleared')
+            window.location.reload()
+          } else {
+            alert('Error: ' + result.error)
+          }
+        } catch (error) {
+          alert('Error: ' + error.message)
+        }
+      }
+
       let namespaceToDelete = null
 
       async function clearNamespaceCache(namespace) {
@@ -17350,7 +17395,7 @@ function renderCacheDashboard(data) {
     </script>
 
     <!-- Confirmation Dialogs -->
-    ${chunk6OA77UM7_cjs.renderConfirmationDialog({
+    ${chunkS2QN4LFD_cjs.renderConfirmationDialog({
     id: "clear-all-cache-confirm",
     title: "Clear All Cache",
     message: "Are you sure you want to clear all cache entries? This cannot be undone.",
@@ -17361,7 +17406,7 @@ function renderCacheDashboard(data) {
     onConfirm: "performClearAllCaches()"
   })}
 
-    ${chunk6OA77UM7_cjs.renderConfirmationDialog({
+    ${chunkS2QN4LFD_cjs.renderConfirmationDialog({
     id: "clear-namespace-cache-confirm",
     title: "Clear Namespace Cache",
     message: "Clear cache for this namespace?",
@@ -17372,7 +17417,7 @@ function renderCacheDashboard(data) {
     onConfirm: "performClearNamespaceCache()"
   })}
 
-    ${chunk6OA77UM7_cjs.getConfirmationDialogScript()}
+    ${chunkS2QN4LFD_cjs.getConfirmationDialogScript()}
   `;
   const layoutData = {
     title: "Cache System",
@@ -17384,6 +17429,130 @@ function renderCacheDashboard(data) {
   };
   return chunkMI2YXCK4_cjs.renderAdminLayoutCatalyst(layoutData);
 }
+function renderUrlCatalogTab(catalog) {
+  const { entries, stats, swrPending } = catalog;
+  const statCards = `
+    <div class="grid grid-cols-2 gap-4 sm:grid-cols-4">
+      ${renderMiniStatCard("Tracked URLs", stats.totalEntries.toLocaleString(), "sky")}
+      ${renderMiniStatCard("Cache Hits", stats.totalHits.toLocaleString(), "lime")}
+      ${renderMiniStatCard("Cache Misses", stats.totalMisses.toLocaleString(), "amber")}
+      ${renderMiniStatCard("Stale Serves", stats.totalStale.toLocaleString(), "purple")}
+    </div>
+  `;
+  const swrBadge = swrPending > 0 ? `<span class="ml-2 inline-flex items-center rounded-full px-2 py-0.5 text-xs font-medium bg-amber-100 dark:bg-amber-500/20 text-amber-700 dark:text-amber-300">${swrPending} stale pending</span>` : "";
+  if (entries.length === 0) {
+    return `
+      ${statCards}
+      <div class="overflow-hidden rounded-xl bg-white dark:bg-zinc-900 ring-1 ring-zinc-950/5 dark:ring-white/10">
+        <div class="p-12 text-center">
+          <svg class="mx-auto h-8 w-8 text-zinc-400 dark:text-zinc-500 mb-3" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+            <path stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5" d="M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2"/>
+          </svg>
+          <p class="text-sm font-medium text-zinc-900 dark:text-zinc-100">No entries yet</p>
+          <p class="mt-1 text-sm text-zinc-500 dark:text-zinc-400">Cache-eligible API requests will appear here after the first page load.</p>
+        </div>
+      </div>
+    `;
+  }
+  const rows = entries.map((entry) => {
+    const totalReqs = entry.hits + entry.misses + entry.staleServes;
+    const hitRate = totalReqs > 0 ? Math.round(entry.hits / totalReqs * 100) : 0;
+    const hitRateColor = hitRate > 70 ? "text-lime-600 dark:text-lime-400" : hitRate > 40 ? "text-amber-600 dark:text-amber-400" : "text-red-600 dark:text-red-400";
+    const pathDisplay = entry.queryString ? `${entry.path}?${entry.queryString}` : entry.path;
+    const truncatedPath = pathDisplay.length > 80 ? pathDisplay.slice(0, 77) + "\u2026" : pathDisplay;
+    const collBadge = entry.collection ? `<span class="inline-flex items-center rounded-md px-1.5 py-0.5 text-xs font-medium bg-sky-50 dark:bg-sky-500/10 text-sky-700 dark:text-sky-400 ring-1 ring-inset ring-sky-600/20">${entry.collection}</span>` : `<span class="text-xs text-zinc-400 dark:text-zinc-600">\u2014</span>`;
+    const timeAgo = formatTimeAgo(entry.lastSeen);
+    return `
+      <tr class="hover:bg-zinc-50 dark:hover:bg-zinc-800/50">
+        <td class="px-4 py-3 max-w-xs">
+          <code class="text-xs text-zinc-700 dark:text-zinc-300 break-all" title="${pathDisplay}">${truncatedPath}</code>
+        </td>
+        <td class="px-4 py-3 whitespace-nowrap">${collBadge}</td>
+        <td class="px-4 py-3 whitespace-nowrap text-sm text-zinc-900 dark:text-zinc-100 text-right">${totalReqs.toLocaleString()}</td>
+        <td class="px-4 py-3 whitespace-nowrap text-right">
+          <span class="text-sm font-medium ${hitRateColor}">${hitRate}%</span>
+        </td>
+        <td class="px-4 py-3 whitespace-nowrap text-sm text-zinc-600 dark:text-zinc-400 text-right">${entry.hits.toLocaleString()}</td>
+        <td class="px-4 py-3 whitespace-nowrap text-sm text-zinc-600 dark:text-zinc-400 text-right">${entry.misses.toLocaleString()}</td>
+        <td class="px-4 py-3 whitespace-nowrap text-sm text-zinc-500 dark:text-zinc-500 text-right">${entry.staleServes > 0 ? entry.staleServes.toLocaleString() : "\u2014"}</td>
+        <td class="px-4 py-3 whitespace-nowrap text-xs text-zinc-400 dark:text-zinc-500 text-right">${timeAgo}</td>
+      </tr>
+    `;
+  }).join("");
+  return `
+    ${statCards}
+
+    <div class="overflow-hidden rounded-xl bg-white dark:bg-zinc-900 ring-1 ring-zinc-950/5 dark:ring-white/10">
+      <div class="px-6 py-4 border-b border-zinc-950/5 dark:border-white/10 flex items-center justify-between">
+        <div>
+          <h2 class="text-lg font-semibold text-zinc-950 dark:text-white">
+            Cache-Eligible API URLs${swrBadge}
+          </h2>
+          <p class="mt-1 text-sm text-zinc-500 dark:text-zinc-400">
+            Ranked by total requests. Resets on isolate eviction. Scoped to public/privileged (non-ACL) requests only.
+          </p>
+        </div>
+        <button
+          onclick="clearUrlCatalog()"
+          class="inline-flex items-center gap-2 rounded-lg bg-white dark:bg-zinc-900 px-3 py-1.5 text-sm font-medium text-zinc-700 dark:text-zinc-300 ring-1 ring-inset ring-zinc-950/10 dark:ring-white/10 hover:bg-zinc-50 dark:hover:bg-zinc-800"
+        >
+          Clear
+        </button>
+      </div>
+      <div class="overflow-x-auto">
+        <table class="min-w-full divide-y divide-zinc-950/5 dark:divide-white/10">
+          <thead class="bg-zinc-50 dark:bg-zinc-800/50">
+            <tr>
+              <th class="px-4 py-3 text-left text-xs font-medium text-zinc-500 dark:text-zinc-400 uppercase tracking-wider">URL</th>
+              <th class="px-4 py-3 text-left text-xs font-medium text-zinc-500 dark:text-zinc-400 uppercase tracking-wider">Collection</th>
+              <th class="px-4 py-3 text-right text-xs font-medium text-zinc-500 dark:text-zinc-400 uppercase tracking-wider">Requests</th>
+              <th class="px-4 py-3 text-right text-xs font-medium text-zinc-500 dark:text-zinc-400 uppercase tracking-wider">Hit Rate</th>
+              <th class="px-4 py-3 text-right text-xs font-medium text-zinc-500 dark:text-zinc-400 uppercase tracking-wider">Hits</th>
+              <th class="px-4 py-3 text-right text-xs font-medium text-zinc-500 dark:text-zinc-400 uppercase tracking-wider">Misses</th>
+              <th class="px-4 py-3 text-right text-xs font-medium text-zinc-500 dark:text-zinc-400 uppercase tracking-wider">Stale</th>
+              <th class="px-4 py-3 text-right text-xs font-medium text-zinc-500 dark:text-zinc-400 uppercase tracking-wider">Last Seen</th>
+            </tr>
+          </thead>
+          <tbody class="divide-y divide-zinc-950/5 dark:divide-white/10">
+            ${rows}
+          </tbody>
+        </table>
+      </div>
+    </div>
+
+    <div class="overflow-hidden rounded-xl bg-white dark:bg-zinc-900 ring-1 ring-zinc-950/5 dark:ring-white/10">
+      <div class="px-6 py-5">
+        <h3 class="text-sm font-semibold text-zinc-950 dark:text-white mb-2">About this catalog</h3>
+        <ul class="text-sm text-zinc-600 dark:text-zinc-400 space-y-1 list-disc list-inside">
+          <li><strong>Phase 1 (done):</strong> Collection-scoped cache invalidation \u2014 content changes only purge the affected collection's keys.</li>
+          <li><strong>Phase 2 (this view):</strong> URL catalog tracks every cache-eligible API request. Use to identify hot URLs for targeted pre-warming.</li>
+          <li><strong>Phase 3 (SWR):</strong> Stale-While-Revalidate \u2014 on invalidation, the previous response is kept for 30 s so the first post-edit request is served from cache instantly. Stale serves are counted above.</li>
+          <li>Catalog is per-isolate and resets on cold start. For persistent tracking, sink data to Analytics Engine.</li>
+        </ul>
+      </div>
+    </div>
+  `;
+}
+function renderMiniStatCard(label, value, color) {
+  const colorClasses = {
+    sky: "bg-sky-50 dark:bg-sky-500/10 text-sky-600 dark:text-sky-400",
+    lime: "bg-lime-50 dark:bg-lime-500/10 text-lime-600 dark:text-lime-400",
+    amber: "bg-amber-50 dark:bg-amber-500/10 text-amber-600 dark:text-amber-400",
+    purple: "bg-purple-50 dark:bg-purple-500/10 text-purple-600 dark:text-purple-400"
+  };
+  return `
+    <div class="overflow-hidden rounded-xl bg-white dark:bg-zinc-900 ring-1 ring-zinc-950/5 dark:ring-white/10 p-4">
+      <p class="text-xs text-zinc-500 dark:text-zinc-400">${label}</p>
+      <p class="mt-1 text-xl font-semibold ${colorClasses[color] ?? colorClasses.sky}">${value}</p>
+    </div>
+  `;
+}
+function formatTimeAgo(ts) {
+  const secs = Math.floor((Date.now() - ts) / 1e3);
+  if (secs < 60) return `${secs}s ago`;
+  if (secs < 3600) return `${Math.floor(secs / 60)}m ago`;
+  return `${Math.floor(secs / 3600)}h ago`;
+}
 function renderCollectionSettingsTab(collections) {
   if (collections.length === 0) {
     return `
@@ -17638,7 +17807,7 @@ app.get("/", async (c) => {
   const totalRequests = totalHits + totalMisses;
   const overallHitRate = totalRequests > 0 ? totalHits / totalRequests * 100 : 0;
   const DEFAULT_TTL = chunkYA3TJ65D_cjs.CACHE_CONFIGS.api?.ttl ?? 300;
-  const collections = chunkYAURVGUK_cjs.getCollectionRegistry().listActive().filter((r) => !r.internal).map((r) => {
+  const collections = chunk4DHPR7KR_cjs.getCollectionRegistry().listActive().filter((r) => !r.internal).map((r) => {
     const cacheOverride = r.cache;
     const cacheEnabled = cacheOverride?.enabled !== false;
     const hasCustomTtl = typeof cacheOverride?.ttl === "number";
@@ -17651,6 +17820,9 @@ app.get("/", async (c) => {
       ttlSource: hasCustomTtl ? "collection" : "default"
     };
   });
+  await chunkFZGIU5AZ_cjs.loadKvCatalog();
+  const catalogEntries = chunkFZGIU5AZ_cjs.getCatalog({ limit: 100 });
+  const catalogSummary = chunkFZGIU5AZ_cjs.getCatalogStats();
   const dashboardData = {
     stats,
     totals: {
@@ -17663,6 +17835,11 @@ app.get("/", async (c) => {
     },
     namespaces: Object.keys(stats),
     collections,
+    catalog: {
+      entries: catalogEntries,
+      stats: catalogSummary,
+      swrPending: chunkS2QN4LFD_cjs.swrStats().count
+    },
     user: user ? {
       name: user.email,
       email: user.email,
@@ -18009,6 +18186,24 @@ app.post("/warm/:namespace", async (c) => {
     }, 500);
   }
 });
+app.get("/catalog", async (c) => {
+  const collection = c.req.query("collection") || void 0;
+  const sortBy = c.req.query("sort") || "requests";
+  const limit = parseInt(c.req.query("limit") || "100");
+  await chunkFZGIU5AZ_cjs.loadKvCatalog();
+  const entries = chunkFZGIU5AZ_cjs.getCatalog({ collection, sortBy, limit });
+  const stats = chunkFZGIU5AZ_cjs.getCatalogStats();
+  return c.json({
+    success: true,
+    data: { entries, stats, swrPending: chunkS2QN4LFD_cjs.swrStats().count },
+    timestamp: (/* @__PURE__ */ new Date()).toISOString()
+  });
+});
+app.post("/catalog/clear", async (_c) => {
+  chunkFZGIU5AZ_cjs.clearCatalog();
+  await chunkFZGIU5AZ_cjs.clearKvCatalog();
+  return _c.json({ success: true, message: "URL catalog cleared", timestamp: (/* @__PURE__ */ new Date()).toISOString() });
+});
 var routes_default2 = app;
 
 // src/plugins/cache/index.ts
@@ -18175,9 +18370,9 @@ var faviconSvg = `<?xml version="1.0" encoding="UTF-8" standalone="no"?>
 // src/app.ts
 function createSonicJSApp(config = {}) {
   const app2 = new hono.Hono();
-  const appVersion = config.version || chunkBJ6NJL2E_cjs.getCoreVersion();
+  const appVersion = config.version || chunkXZUEGFXE_cjs.getCoreVersion();
   const appName = config.name || "SonicJS AI";
-  const hookSystem = new chunkI7MIRRFJ_cjs.HookSystemImpl();
+  const hookSystem = new chunkA22RBHO7_cjs.HookSystemImpl();
   chunkJ6JTWD2A_cjs.setHookSystem(hookSystem);
   const magicLinkPlugin = createMagicLinkAuthPlugin();
   const corePluginsBeforeCatchAll = [
@@ -18185,7 +18380,7 @@ function createSonicJSApp(config = {}) {
     apiKeysPlugin,
     aiSearchPlugin,
     oauthProvidersPlugin,
-    chunk6OA77UM7_cjs.userProfilesPlugin,
+    chunkS2QN4LFD_cjs.userProfilesPlugin,
     otpLoginPlugin,
     analyticsPlugin,
     stripePlugin,
@@ -18195,24 +18390,24 @@ function createSonicJSApp(config = {}) {
     shortcodesPlugin,
     helloWorldPlugin,
     multiTenantPlugin,
-    chunk6OA77UM7_cjs.lexicalEditorPlugin,
+    chunkS2QN4LFD_cjs.lexicalEditorPlugin,
     versioningPlugin,
     menuPlugin
   ];
   const corePluginsAfterCatchAll = [emailPluginV3, magicLinkPlugin, emailReconciliationPlugin];
-  const wirePlugins = chunkI7MIRRFJ_cjs.createPluginWirer(
+  const wirePlugins = chunkA22RBHO7_cjs.createPluginWirer(
     () => [...corePluginsBeforeCatchAll, ...corePluginsAfterCatchAll, ...config.plugins?.register ?? []],
     // The capability-gated `ctx.cap.email` resolves to the app EmailService, which
     // is initialized (below) just before wiring on the first request.
     () => ({
       hooks: hookSystem,
       env: firstRequestEnv,
-      providers: { email: () => chunk6OA77UM7_cjs.getEmailService() }
+      providers: { email: () => chunkS2QN4LFD_cjs.getEmailService() }
     })
   );
   let firstRequestEnv;
   const initEmailService = async (env = {}) => {
-    if (chunk6OA77UM7_cjs.hasEmailService()) return;
+    if (chunkS2QN4LFD_cjs.hasEmailService()) return;
     let provider;
     let defaultFrom = config.email?.from;
     let defaultReplyTo;
@@ -18247,14 +18442,14 @@ function createSonicJSApp(config = {}) {
       }
     }
     defaultFrom = defaultFrom || env.DEFAULT_FROM_EMAIL || "noreply@sonicjs.local";
-    chunk6OA77UM7_cjs.setEmailService(new EmailService({ provider, defaultFrom, defaultReplyTo, db: env.DB }));
+    chunkS2QN4LFD_cjs.setEmailService(new EmailService({ provider, defaultFrom, defaultReplyTo, db: env.DB }));
   };
   app2.use("*", async (c, next) => {
     c.set("appVersion", appVersion);
     await next();
   });
-  app2.use("*", chunkE7E3NL3Y_cjs.metricsMiddleware());
-  app2.use("*", chunkE7E3NL3Y_cjs.bootstrapMiddleware(config, [...corePluginsBeforeCatchAll, ...corePluginsAfterCatchAll, ...config.plugins?.register ?? []]));
+  app2.use("*", chunkBRKXMRMB_cjs.metricsMiddleware());
+  app2.use("*", chunkBRKXMRMB_cjs.bootstrapMiddleware(config, [...corePluginsBeforeCatchAll, ...corePluginsAfterCatchAll, ...config.plugins?.register ?? []]));
   const boot = async (env) => {
     if (config.plugins?.disableAll) return;
     firstRequestEnv = env;
@@ -18286,19 +18481,28 @@ function createSonicJSApp(config = {}) {
       const allowed = c.env?.CORS_ORIGINS;
       if (!allowed) return null;
       const list = allowed.split(",").map((s) => s.trim());
-      return list.includes(origin) ? origin : null;
+      const match = list.some((pattern) => {
+        if (pattern === origin) return true;
+        if (pattern.startsWith("*.")) {
+          const suffix = pattern.slice(1);
+          return origin.endsWith(suffix);
+        }
+        return false;
+      });
+      return match ? origin : null;
     },
     allowMethods: ["GET", "POST", "PUT", "DELETE", "OPTIONS"],
-    allowHeaders: ["Content-Type", "Authorization", "X-API-Key"],
+    allowHeaders: ["Content-Type", "Authorization", "X-API-Key", "Cache-Control"],
+    exposeHeaders: ["X-Cache-Status", "X-Cache-Source", "X-Cache-TTL", "X-Response-Time"],
     credentials: true
   }));
-  app2.use("*", chunkE7E3NL3Y_cjs.securityHeadersMiddleware());
-  app2.use("*", chunkE7E3NL3Y_cjs.csrfProtection());
+  app2.use("*", chunkBRKXMRMB_cjs.securityHeadersMiddleware());
+  app2.use("*", chunkBRKXMRMB_cjs.csrfProtection());
   app2.use("*", async (c, next) => {
     try {
       const reqUrl = new URL(c.req.url);
       const requestBaseURL = `${reqUrl.protocol}//${reqUrl.host}`;
-      const auth = chunkRSBZITK3_cjs.createAuth(c.env, config.auth?.extendBetterAuth, requestBaseURL);
+      const auth = chunk6UAI4SGN_cjs.createAuth(c.env, config.auth?.extendBetterAuth, requestBaseURL);
       const session = await auth.api.getSession({ headers: c.req.raw.headers });
       if (session?.user) {
         const u = session.user;
@@ -18333,7 +18537,7 @@ function createSonicJSApp(config = {}) {
         const token = authHeader.slice(7);
         try {
           const secret = c.env?.JWT_SECRET;
-          const payload = await chunkE7E3NL3Y_cjs.AuthManager.verifyToken(token, secret);
+          const payload = await chunkBRKXMRMB_cjs.AuthManager.verifyToken(token, secret);
           if (payload) {
             c.set("user", {
               userId: payload.userId,
@@ -18354,9 +18558,9 @@ function createSonicJSApp(config = {}) {
       app2.use("*", middleware);
     }
   }
-  app2.use("*", chunkYAURVGUK_cjs.tenantMiddleware());
-  app2.use("/admin/*", chunkE7E3NL3Y_cjs.requireAuth());
-  app2.use("/admin/*", chunkE7E3NL3Y_cjs.requireRbac("portal", "access"));
+  app2.use("*", chunk4DHPR7KR_cjs.tenantMiddleware());
+  app2.use("/admin/*", chunkBRKXMRMB_cjs.requireAuth());
+  app2.use("/admin/*", chunkBRKXMRMB_cjs.requireRbac("portal", "access"));
   app2.use("/admin/*", pluginMenuMiddleware());
   app2.use("/admin/*", menuMiddleware());
   const NAV_LANDING = [
@@ -18374,7 +18578,7 @@ function createSonicJSApp(config = {}) {
     if (!user?.userId) return next();
     let perms = [];
     try {
-      const { RbacService: RbacService2 } = await import('./rbac-AORZ6O3N.cjs');
+      const { RbacService: RbacService2 } = await import('./rbac-TFUOYIVN.cjs');
       perms = await new RbacService2(c.env.DB, c.env.CACHE_KV).permissionsForUser(user.userId);
     } catch {
       return next();
@@ -18403,43 +18607,43 @@ function createSonicJSApp(config = {}) {
   });
   app2.route("/api/security-audit", apiRoutes2);
   app2.route("/admin/plugins/security-audit", adminRoutes3);
-  app2.route("/api/media", chunk6OA77UM7_cjs.api_media_default);
-  app2.route("/api/system", chunk6OA77UM7_cjs.api_system_default);
-  app2.route("/api/documents", chunk6OA77UM7_cjs.apiDocumentsRoutes);
-  app2.route("/api", chunk6OA77UM7_cjs.api_default);
-  app2.route("/admin/documents", chunk6OA77UM7_cjs.adminDocumentsRoutes);
-  chunkI7MIRRFJ_cjs.registerPluginRoutes(app2, [formsPlugin], { source: "core" });
-  app2.route("/admin/api", chunk6OA77UM7_cjs.admin_api_default);
-  app2.route("/admin/collections", chunk6OA77UM7_cjs.adminCollectionsRoutes);
-  app2.route("/admin/settings", chunk6OA77UM7_cjs.adminSettingsRoutes);
-  app2.route("/admin/api-reference", chunk6OA77UM7_cjs.router2);
+  app2.route("/api/media", chunkS2QN4LFD_cjs.api_media_default);
+  app2.route("/api/system", chunkS2QN4LFD_cjs.api_system_default);
+  app2.route("/api/documents", chunkS2QN4LFD_cjs.apiDocumentsRoutes);
+  app2.route("/api", chunkS2QN4LFD_cjs.api_default);
+  app2.route("/admin/documents", chunkS2QN4LFD_cjs.adminDocumentsRoutes);
+  chunkA22RBHO7_cjs.registerPluginRoutes(app2, [formsPlugin], { source: "core" });
+  app2.route("/admin/api", chunkS2QN4LFD_cjs.admin_api_default);
+  app2.route("/admin/collections", chunkS2QN4LFD_cjs.adminCollectionsRoutes);
+  app2.route("/admin/settings", chunkS2QN4LFD_cjs.adminSettingsRoutes);
+  app2.route("/admin/api-reference", chunkS2QN4LFD_cjs.router2);
   app2.route("/admin/database-tools", createDatabaseToolsAdminRoutes());
-  app2.route("/admin/content", chunk6OA77UM7_cjs.admin_content_default);
-  app2.route("/admin/media", chunk6OA77UM7_cjs.adminMediaRoutes);
+  app2.route("/admin/content", chunkS2QN4LFD_cjs.admin_content_default);
+  app2.route("/admin/media", chunkS2QN4LFD_cjs.adminMediaRoutes);
   app2.use("/auth/*", securityAuditMiddleware());
   if (!config.plugins?.disableAll) {
-    chunkI7MIRRFJ_cjs.registerPluginRoutes(app2, corePluginsBeforeCatchAll, { source: "core" });
+    chunkA22RBHO7_cjs.registerPluginRoutes(app2, corePluginsBeforeCatchAll, { source: "core" });
     app2.route("/admin/cache", cache_default.getRoutes());
     if (config.plugins?.register && config.plugins.register.length > 0) {
-      chunkI7MIRRFJ_cjs.registerPluginRoutes(app2, config.plugins.register, { source: "user" });
+      chunkA22RBHO7_cjs.registerPluginRoutes(app2, config.plugins.register, { source: "user" });
     }
   }
   app2.route("/api/events", apiRoutes4);
-  app2.route("/admin/dashboard", chunk6OA77UM7_cjs.router);
-  app2.route("/admin/plugins", chunk6OA77UM7_cjs.adminPluginRoutes);
-  app2.route("/admin/logs", chunk6OA77UM7_cjs.adminLogsRoutes);
+  app2.route("/admin/dashboard", chunkS2QN4LFD_cjs.router);
+  app2.route("/admin/plugins", chunkS2QN4LFD_cjs.adminPluginRoutes);
+  app2.route("/admin/logs", chunkS2QN4LFD_cjs.adminLogsRoutes);
   app2.route("/admin/rbac", adminRbacRoutes);
-  app2.route("/admin", chunk6OA77UM7_cjs.userRoutes);
-  app2.route("/auth", chunk6OA77UM7_cjs.auth_default);
+  app2.route("/admin", chunkS2QN4LFD_cjs.userRoutes);
+  app2.route("/auth", chunkS2QN4LFD_cjs.auth_default);
   app2.on(["GET", "POST"], "/auth/*", (c) => {
     const reqUrl = new URL(c.req.url);
     const requestBaseURL = `${reqUrl.protocol}//${reqUrl.host}`;
-    const auth = chunkRSBZITK3_cjs.createAuth(c.env, config.auth?.extendBetterAuth, requestBaseURL);
+    const auth = chunk6UAI4SGN_cjs.createAuth(c.env, config.auth?.extendBetterAuth, requestBaseURL);
     return auth.handler(c.req.raw);
   });
-  app2.route("/", chunk6OA77UM7_cjs.test_cleanup_default);
+  app2.route("/", chunkS2QN4LFD_cjs.test_cleanup_default);
   if (!config.plugins?.disableAll) {
-    chunkI7MIRRFJ_cjs.registerPluginRoutes(app2, corePluginsAfterCatchAll, { source: "core" });
+    chunkA22RBHO7_cjs.registerPluginRoutes(app2, corePluginsAfterCatchAll, { source: "core" });
   }
   if (!config.plugins?.disableAll) {
     const allMountedPlugins = [
@@ -18449,10 +18653,10 @@ function createSonicJSApp(config = {}) {
       ...config.plugins?.register ?? []
     ];
     const userPlugins = (config.plugins?.register ?? []).filter(
-      (p) => !chunkYAURVGUK_cjs.PLUGIN_REGISTRY[p.id]
+      (p) => !chunk4DHPR7KR_cjs.PLUGIN_REGISTRY[p.id]
     );
-    chunkD6FWEYQE_cjs.setPluginMenu(userPlugins.flatMap((p) => (p.menu ?? []).map((m) => ({ ...m, pluginId: p.id }))));
-    chunkD6FWEYQE_cjs.setPluginDefinitions(allMountedPlugins);
+    chunkKWQNB6UM_cjs.setPluginMenu(userPlugins.flatMap((p) => (p.menu ?? []).map((m) => ({ ...m, pluginId: p.id }))));
+    chunkKWQNB6UM_cjs.setPluginDefinitions(allMountedPlugins);
   }
   app2.get("/favicon.svg", (c) => {
     return new Response(faviconSvg, {
@@ -18505,7 +18709,7 @@ function createSonicJSApp(config = {}) {
       timestamp: (/* @__PURE__ */ new Date()).toISOString()
     });
   });
-  chunk36Z3AKX3_cjs.setAppInstance(app2);
+  chunkC5LDQ3SH_cjs.setAppInstance(app2);
   app2.notFound((c) => {
     return c.json({ error: "Not Found", status: 404 }, 404);
   });
@@ -19320,7 +19524,7 @@ var RedirectService = class {
   env;
   cloudflareService = null;
   getDocService() {
-    return new chunkJCBDXEY2_cjs.DocumentsService(this.db, {
+    return new chunkOLEOKHDX_cjs.DocumentsService(this.db, {
       queryableFields: REDIRECT_QUERYABLE_FIELDS,
       maxVersionsPerRoot: 1,
       tenantId: TENANT3
@@ -21946,7 +22150,7 @@ function createRedirectApiRoutes() {
   });
   return api;
 }
-var redirectPlugin = chunkD6FWEYQE_cjs.definePlugin({
+var redirectPlugin = chunkKWQNB6UM_cjs.definePlugin({
   id: manifest_default3.id,
   version: manifest_default3.version,
   name: manifest_default3.name,
@@ -21964,7 +22168,7 @@ var redirectPlugin = chunkD6FWEYQE_cjs.definePlugin({
   async onBoot(ctx) {
     const db = ctx.env?.DB;
     if (!db) return;
-    const registry = new chunkE7E3NL3Y_cjs.DocumentTypeRegistry(db);
+    const registry = new chunkBRKXMRMB_cjs.DocumentTypeRegistry(db);
     await registry.register({
       id: "redirect",
       name: "redirect",
@@ -21988,6 +22192,69 @@ function createRedirectPlugin() {
   return redirectPlugin;
 }
 
+// src/plugins/core-plugins/demo-login/index.ts
+var demoLoginJs = `
+  // Demo Login Prefill Script
+  (function() {
+    'use strict';
+
+    function prefillLoginForm() {
+      const emailInput = document.getElementById('email');
+      const passwordInput = document.getElementById('password');
+
+      if (emailInput && passwordInput) {
+        emailInput.value = 'admin@sonicjs.com';
+        passwordInput.value = 'sonicjs!';
+
+        const form = emailInput.closest('form');
+        if (form) {
+          const notice = document.createElement('div');
+          notice.className = 'mb-4 p-3 bg-blue-50 border border-blue-200 rounded-lg text-blue-800 text-sm';
+          notice.innerHTML = '\u{1F3AF} <strong>Demo Mode:</strong> Login form prefilled with demo credentials';
+          form.insertBefore(notice, form.firstChild);
+        }
+      }
+    }
+
+    if (document.readyState === 'loading') {
+      document.addEventListener('DOMContentLoaded', prefillLoginForm);
+    } else {
+      prefillLoginForm();
+    }
+
+    document.addEventListener('htmx:afterSwap', function(event) {
+      if (event.detail.target.id === 'main-content' ||
+          document.getElementById('email')) {
+        setTimeout(prefillLoginForm, 100);
+      }
+    });
+  })();
+`;
+var loginPrefillHandler = async (data) => {
+  if (data.pageType === "auth-login" || data.template?.includes("login")) {
+    data.scripts = data.scripts ?? [];
+    data.inlineScripts = data.inlineScripts ?? [];
+    data.inlineScripts.push(demoLoginJs);
+  }
+  return data;
+};
+var demoLoginPlugin = chunkKWQNB6UM_cjs.definePlugin({
+  id: "demo-login-plugin",
+  version: "1.0.0",
+  name: "Demo Login",
+  description: "Prefills login form with demo credentials (admin@sonicjs.com/sonicjs!) for easy site demonstration.",
+  sonicjsVersionRange: "^3.0.0",
+  author: { name: "SonicJS" },
+  async onBoot(ctx) {
+    chunkS2QN4LFD_cjs.setDemoModeActive();
+    const hooks = ctx.raw?.hooks;
+    if (hooks?.register) {
+      hooks.register("template:render", loginPrefillHandler);
+      hooks.register("page:before-render", loginPrefillHandler);
+    }
+  }
+});
+
 // src/collections/site-settings.collection.ts
 var site_settings_collection_default = {
   name: "site_settings",
@@ -22370,10 +22637,10 @@ function shapeDocument(doc, redactFields) {
   };
 }
 async function resolveType(ctx, typeId) {
-  const docType = await new chunkE7E3NL3Y_cjs.DocumentTypeRegistry(ctx.db).findById(typeId);
+  const docType = await new chunkBRKXMRMB_cjs.DocumentTypeRegistry(ctx.db).findById(typeId);
   if (!docType || !docType.isActive) throw new McpToolError(`Unknown document type: ${typeId}`);
-  const effTenant = chunk6OA77UM7_cjs.effectiveTenantForType(ctx.tenantId, docType.settings);
-  const repo = new chunk6OA77UM7_cjs.DocumentRepository(ctx.db, effTenant);
+  const effTenant = chunkS2QN4LFD_cjs.effectiveTenantForType(ctx.tenantId, docType.settings);
+  const repo = new chunkS2QN4LFD_cjs.DocumentRepository(ctx.db, effTenant);
   return { docType, repo };
 }
 async function execList(ctx, typeId, args) {
@@ -22411,11 +22678,11 @@ async function execGet(ctx, typeId, args) {
 
 // src/plugins/core-plugins/mcp-plugin/tools/mutations.ts
 async function resolveWriteScope(ctx, typeId) {
-  const docType = await new chunkE7E3NL3Y_cjs.DocumentTypeRegistry(ctx.db).findById(typeId);
+  const docType = await new chunkBRKXMRMB_cjs.DocumentTypeRegistry(ctx.db).findById(typeId);
   if (!docType || !docType.isActive) throw new McpToolError(`Unknown document type: ${typeId}`);
-  const effTenant = chunk6OA77UM7_cjs.effectiveTenantForType(ctx.tenantId, docType.settings);
-  const repo = new chunk6OA77UM7_cjs.DocumentRepository(ctx.db, effTenant);
-  const svc = new chunkJCBDXEY2_cjs.DocumentsService(ctx.db, {
+  const effTenant = chunkS2QN4LFD_cjs.effectiveTenantForType(ctx.tenantId, docType.settings);
+  const repo = new chunkS2QN4LFD_cjs.DocumentRepository(ctx.db, effTenant);
+  const svc = new chunkOLEOKHDX_cjs.DocumentsService(ctx.db, {
     queryableFields: docType.queryableFields ?? [],
     typeSchemaVersion: docType.schemaVersion,
     maxVersionsPerRoot: docType.settings?.maxVersionsPerRoot,
@@ -22429,7 +22696,7 @@ async function assertAllowed(scope, ctx, rootId, permission) {
   if (!ok) throw new McpToolError(`Permission denied: cannot ${permission} ${scope.docType.id}`);
 }
 function applyUserFieldDefaults(data, typeId, userId) {
-  const col = chunkYAURVGUK_cjs.getCollectionRegistry().getByName(typeId);
+  const col = chunk4DHPR7KR_cjs.getCollectionRegistry().getByName(typeId);
   if (!col?.schema?.properties) return data;
   const props = col.schema.properties;
   const patched = { ...data };
@@ -22442,7 +22709,7 @@ async function execCreate(ctx, typeId, args) {
   const scope = await resolveWriteScope(ctx, typeId);
   await assertAllowed(scope, ctx, "", "create");
   const data = redact(applyUserFieldDefaults(args.data ?? {}, typeId, ctx.userId), ctx.redactFields);
-  const input = chunk6OA77UM7_cjs.createDocumentSchema.parse({
+  const input = chunkS2QN4LFD_cjs.createDocumentSchema.parse({
     typeId,
     tenantId: scope.effTenant,
     title: args.title ?? null,
@@ -22460,7 +22727,7 @@ async function execUpdate(ctx, typeId, args) {
   const current = await scope.repo.getCurrentDraft(args.id);
   if (!current || current.typeId !== typeId) throw new McpToolError("Document not found");
   await assertAllowed(scope, ctx, args.id, "update");
-  const patch = chunk6OA77UM7_cjs.updateDocumentSchema.parse({
+  const patch = chunkS2QN4LFD_cjs.updateDocumentSchema.parse({
     ...args.title !== void 0 ? { title: args.title } : {},
     ...args.slug !== void 0 ? { slug: args.slug } : {},
     ...args.data !== void 0 ? { data: redact(args.data, ctx.redactFields) } : {}
@@ -22566,8 +22833,8 @@ function createMcpRoutes(options = {}) {
         rpcError(id, JSON_RPC.UNAUTHORIZED, "Unauthorized: provide a valid API key via Authorization: Bearer sk_...")
       );
     }
-    const { tenantId, principalSet, userId } = chunk6OA77UM7_cjs.getDocumentRequestContext(c);
-    const registry = chunkYAURVGUK_cjs.getCollectionRegistry();
+    const { tenantId, principalSet, userId } = chunkS2QN4LFD_cjs.getDocumentRequestContext(c);
+    const registry = chunk4DHPR7KR_cjs.getCollectionRegistry();
     const active = registry.listActive();
     const collections = new Map(active.map((col) => [col.name, col]));
     const cfg = resolveMcpConfig(options, active);
@@ -22856,7 +23123,7 @@ function renderMcpDashboardPage(data) {
 // src/plugins/core-plugins/mcp-plugin/admin/routes.ts
 function createMcpAdminRoutes(options = {}) {
   const routes2 = new hono.Hono();
-  routes2.use("*", chunkE7E3NL3Y_cjs.requireAuth());
+  routes2.use("*", chunkBRKXMRMB_cjs.requireAuth());
   routes2.use("*", async (c, next) => {
     const user = c.get("user");
     if (user?.role !== "admin") return c.json({ error: "Access denied" }, 403);
@@ -22865,7 +23132,7 @@ function createMcpAdminRoutes(options = {}) {
   routes2.get("/", async (c) => {
     const url = new URL(c.req.url);
     const endpointUrl = `${url.protocol}//${url.host}/mcp`;
-    const registry = chunkYAURVGUK_cjs.getCollectionRegistry();
+    const registry = chunk4DHPR7KR_cjs.getCollectionRegistry();
     const active = registry.listActive();
     const collections = new Map(active.map((col) => [col.name, col]));
     const cfg = resolveMcpConfig(options, active);
@@ -22888,7 +23155,7 @@ function createMcpAdminRoutes(options = {}) {
 // src/plugins/core-plugins/mcp-plugin/index.ts
 var MCP_ICON = `<svg class="h-5 w-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M8 9l3 3-3 3m5 0h3M5 20h14a2 2 0 002-2V6a2 2 0 00-2-2H5a2 2 0 00-2 2v12a2 2 0 002 2z"/></svg>`;
 function mcpPlugin(options = {}) {
-  return chunkD6FWEYQE_cjs.definePlugin({
+  return chunkKWQNB6UM_cjs.definePlugin({
     id: "mcp",
     version: "1.0.0",
     name: "MCP Server",
@@ -22907,103 +23174,103 @@ function createMcpPlugin(options) {
 }
 
 // src/index.ts
-var VERSION = chunkBJ6NJL2E_cjs.package_default.version;
+var VERSION = chunkXZUEGFXE_cjs.package_default.version;
 
 Object.defineProperty(exports, "DocumentRepository", {
   enumerable: true,
-  get: function () { return chunk6OA77UM7_cjs.DocumentRepository; }
+  get: function () { return chunkS2QN4LFD_cjs.DocumentRepository; }
 });
 Object.defineProperty(exports, "ROUTES_INFO", {
   enumerable: true,
-  get: function () { return chunk6OA77UM7_cjs.ROUTES_INFO; }
+  get: function () { return chunkS2QN4LFD_cjs.ROUTES_INFO; }
 });
 Object.defineProperty(exports, "adminApiRoutes", {
   enumerable: true,
-  get: function () { return chunk6OA77UM7_cjs.admin_api_default; }
+  get: function () { return chunkS2QN4LFD_cjs.admin_api_default; }
 });
 Object.defineProperty(exports, "adminCheckboxRoutes", {
   enumerable: true,
-  get: function () { return chunk6OA77UM7_cjs.adminCheckboxRoutes; }
+  get: function () { return chunkS2QN4LFD_cjs.adminCheckboxRoutes; }
 });
 Object.defineProperty(exports, "adminCollectionsRoutes", {
   enumerable: true,
-  get: function () { return chunk6OA77UM7_cjs.adminCollectionsRoutes; }
+  get: function () { return chunkS2QN4LFD_cjs.adminCollectionsRoutes; }
 });
 Object.defineProperty(exports, "adminContentRoutes", {
   enumerable: true,
-  get: function () { return chunk6OA77UM7_cjs.admin_content_default; }
+  get: function () { return chunkS2QN4LFD_cjs.admin_content_default; }
 });
 Object.defineProperty(exports, "adminDashboardRoutes", {
   enumerable: true,
-  get: function () { return chunk6OA77UM7_cjs.router; }
+  get: function () { return chunkS2QN4LFD_cjs.router; }
 });
 Object.defineProperty(exports, "adminLogsRoutes", {
   enumerable: true,
-  get: function () { return chunk6OA77UM7_cjs.adminLogsRoutes; }
+  get: function () { return chunkS2QN4LFD_cjs.adminLogsRoutes; }
 });
 Object.defineProperty(exports, "adminMediaRoutes", {
   enumerable: true,
-  get: function () { return chunk6OA77UM7_cjs.adminMediaRoutes; }
+  get: function () { return chunkS2QN4LFD_cjs.adminMediaRoutes; }
 });
 Object.defineProperty(exports, "adminPluginRoutes", {
   enumerable: true,
-  get: function () { return chunk6OA77UM7_cjs.adminPluginRoutes; }
+  get: function () { return chunkS2QN4LFD_cjs.adminPluginRoutes; }
 });
 Object.defineProperty(exports, "adminSettingsRoutes", {
   enumerable: true,
-  get: function () { return chunk6OA77UM7_cjs.adminSettingsRoutes; }
+  get: function () { return chunkS2QN4LFD_cjs.adminSettingsRoutes; }
 });
 Object.defineProperty(exports, "adminUsersRoutes", {
   enumerable: true,
-  get: function () { return chunk6OA77UM7_cjs.userRoutes; }
+  get: function () { return chunkS2QN4LFD_cjs.userRoutes; }
 });
 Object.defineProperty(exports, "apiContentCrudRoutes", {
   enumerable: true,
-  get: function () { return chunk6OA77UM7_cjs.api_content_crud_default; }
+  get: function () { return chunkS2QN4LFD_cjs.api_content_crud_default; }
 });
 Object.defineProperty(exports, "apiMediaRoutes", {
   enumerable: true,
-  get: function () { return chunk6OA77UM7_cjs.api_media_default; }
+  get: function () { return chunkS2QN4LFD_cjs.api_media_default; }
 });
 Object.defineProperty(exports, "apiRoutes", {
   enumerable: true,
-  get: function () { return chunk6OA77UM7_cjs.api_default; }
+  get: function () { return chunkS2QN4LFD_cjs.api_default; }
 });
 Object.defineProperty(exports, "apiSystemRoutes", {
   enumerable: true,
-  get: function () { return chunk6OA77UM7_cjs.api_system_default; }
+  get: function () { return chunkS2QN4LFD_cjs.api_system_default; }
 });
 Object.defineProperty(exports, "authRoutes", {
   enumerable: true,
-  get: function () { return chunk6OA77UM7_cjs.auth_default; }
+  get: function () { return chunkS2QN4LFD_cjs.auth_default; }
 });
 Object.defineProperty(exports, "createUserProfilesPlugin", {
   enumerable: true,
-  get: function () { return chunk6OA77UM7_cjs.createUserProfilesPlugin; }
+  get: function () { return chunkS2QN4LFD_cjs.createUserProfilesPlugin; }
 });
 Object.defineProperty(exports, "defineUserProfile", {
   enumerable: true,
-  get: function () { return chunk6OA77UM7_cjs.defineUserProfile; }
+  get: function () { return chunkS2QN4LFD_cjs.defineUserProfile; }
 });
 Object.defineProperty(exports, "getUserProfileConfig", {
   enumerable: true,
-  get: function () { return chunk6OA77UM7_cjs.getUserProfileConfig; }
+  get: function () { return chunkS2QN4LFD_cjs.getUserProfileConfig; }
 });
 Object.defineProperty(exports, "userProfilesPlugin", {
   enumerable: true,
-  get: function () { return chunk6OA77UM7_cjs.userProfilesPlugin; }
+  get: function () { return chunkS2QN4LFD_cjs.userProfilesPlugin; }
 });
 Object.defineProperty(exports, "Logger", {
   enumerable: true,
-  get: function () { return chunk36Z3AKX3_cjs.Logger; }
+  get: function () { return chunkC5LDQ3SH_cjs.Logger; }
 });
 Object.defineProperty(exports, "getLogger", {
   enumerable: true,
-  get: function () { return chunk36Z3AKX3_cjs.getLogger; }
+  get: function () { return chunkC5LDQ3SH_cjs.getLogger; }
 });
 Object.defineProperty(exports, "initLogger", {
   enumerable: true,
-  get: function () { return chunk36Z3AKX3_cjs.initLogger; }
+  get: function () { return chunkC5LDQ3SH_cjs.initLogger; }
 });
 Object.defineProperty(exports, "apiTokens", {
   enumerable: true,
@@ -23147,127 +23414,127 @@ Object.defineProperty(exports, "workflowHistory", {
 });
 Object.defineProperty(exports, "AuthManager", {
   enumerable: true,
-  get: function () { return chunkE7E3NL3Y_cjs.AuthManager; }
+  get: function () { return chunkBRKXMRMB_cjs.AuthManager; }
 });
 Object.defineProperty(exports, "PermissionManager", {
   enumerable: true,
-  get: function () { return chunkE7E3NL3Y_cjs.PermissionManager; }
+  get: function () { return chunkBRKXMRMB_cjs.PermissionManager; }
 });
 Object.defineProperty(exports, "bootstrapDocumentTypes", {
   enumerable: true,
-  get: function () { return chunkE7E3NL3Y_cjs.bootstrapDocumentTypes; }
+  get: function () { return chunkBRKXMRMB_cjs.bootstrapDocumentTypes; }
 });
 Object.defineProperty(exports, "bootstrapMiddleware", {
   enumerable: true,
-  get: function () { return chunkE7E3NL3Y_cjs.bootstrapMiddleware; }
+  get: function () { return chunkBRKXMRMB_cjs.bootstrapMiddleware; }
 });
 Object.defineProperty(exports, "cacheHeaders", {
   enumerable: true,
-  get: function () { return chunkE7E3NL3Y_cjs.cacheHeaders; }
+  get: function () { return chunkBRKXMRMB_cjs.cacheHeaders; }
 });
 Object.defineProperty(exports, "compressionMiddleware", {
   enumerable: true,
-  get: function () { return chunkE7E3NL3Y_cjs.compressionMiddleware; }
+  get: function () { return chunkBRKXMRMB_cjs.compressionMiddleware; }
 });
 Object.defineProperty(exports, "detailedLoggingMiddleware", {
   enumerable: true,
-  get: function () { return chunkE7E3NL3Y_cjs.detailedLoggingMiddleware; }
-});
-Object.defineProperty(exports, "getActivePlugins", {
-  enumerable: true,
-  get: function () { return chunkE7E3NL3Y_cjs.getActivePlugins; }
-});
-Object.defineProperty(exports, "isPluginActive", {
-  enumerable: true,
-  get: function () { return chunkE7E3NL3Y_cjs.isPluginActive; }
+  get: function () { return chunkBRKXMRMB_cjs.detailedLoggingMiddleware; }
 });
 Object.defineProperty(exports, "logActivity", {
   enumerable: true,
-  get: function () { return chunkE7E3NL3Y_cjs.logActivity; }
+  get: function () { return chunkBRKXMRMB_cjs.logActivity; }
 });
 Object.defineProperty(exports, "loggingMiddleware", {
   enumerable: true,
-  get: function () { return chunkE7E3NL3Y_cjs.loggingMiddleware; }
+  get: function () { return chunkBRKXMRMB_cjs.loggingMiddleware; }
 });
 Object.defineProperty(exports, "optionalAuth", {
   enumerable: true,
-  get: function () { return chunkE7E3NL3Y_cjs.optionalAuth; }
+  get: function () { return chunkBRKXMRMB_cjs.optionalAuth; }
 });
 Object.defineProperty(exports, "performanceLoggingMiddleware", {
   enumerable: true,
-  get: function () { return chunkE7E3NL3Y_cjs.performanceLoggingMiddleware; }
-});
-Object.defineProperty(exports, "requireActivePlugin", {
-  enumerable: true,
-  get: function () { return chunkE7E3NL3Y_cjs.requireActivePlugin; }
-});
-Object.defineProperty(exports, "requireActivePlugins", {
-  enumerable: true,
-  get: function () { return chunkE7E3NL3Y_cjs.requireActivePlugins; }
+  get: function () { return chunkBRKXMRMB_cjs.performanceLoggingMiddleware; }
 });
 Object.defineProperty(exports, "requireAnyPermission", {
   enumerable: true,
-  get: function () { return chunkE7E3NL3Y_cjs.requireAnyPermission; }
+  get: function () { return chunkBRKXMRMB_cjs.requireAnyPermission; }
 });
 Object.defineProperty(exports, "requireAuth", {
   enumerable: true,
-  get: function () { return chunkE7E3NL3Y_cjs.requireAuth; }
+  get: function () { return chunkBRKXMRMB_cjs.requireAuth; }
 });
 Object.defineProperty(exports, "requirePermission", {
   enumerable: true,
-  get: function () { return chunkE7E3NL3Y_cjs.requirePermission; }
+  get: function () { return chunkBRKXMRMB_cjs.requirePermission; }
 });
 Object.defineProperty(exports, "requireRole", {
   enumerable: true,
-  get: function () { return chunkE7E3NL3Y_cjs.requireRole; }
+  get: function () { return chunkBRKXMRMB_cjs.requireRole; }
 });
 Object.defineProperty(exports, "securityHeaders", {
   enumerable: true,
-  get: function () { return chunkE7E3NL3Y_cjs.securityHeadersMiddleware; }
+  get: function () { return chunkBRKXMRMB_cjs.securityHeadersMiddleware; }
 });
 Object.defineProperty(exports, "securityLoggingMiddleware", {
   enumerable: true,
-  get: function () { return chunkE7E3NL3Y_cjs.securityLoggingMiddleware; }
+  get: function () { return chunkBRKXMRMB_cjs.securityLoggingMiddleware; }
 });
 Object.defineProperty(exports, "DocumentsService", {
   enumerable: true,
-  get: function () { return chunkJCBDXEY2_cjs.DocumentsService; }
+  get: function () { return chunkOLEOKHDX_cjs.DocumentsService; }
 });
 Object.defineProperty(exports, "RbacService", {
   enumerable: true,
-  get: function () { return chunkJCBDXEY2_cjs.RbacService; }
+  get: function () { return chunkOLEOKHDX_cjs.RbacService; }
 });
 Object.defineProperty(exports, "PluginBootstrapService", {
   enumerable: true,
-  get: function () { return chunkYAURVGUK_cjs.PluginBootstrapService; }
+  get: function () { return chunk4DHPR7KR_cjs.PluginBootstrapService; }
 });
 Object.defineProperty(exports, "PluginServiceClass", {
   enumerable: true,
-  get: function () { return chunkYAURVGUK_cjs.PluginService; }
+  get: function () { return chunk4DHPR7KR_cjs.PluginService; }
+});
+Object.defineProperty(exports, "getActivePlugins", {
+  enumerable: true,
+  get: function () { return chunk4DHPR7KR_cjs.getActivePlugins; }
 });
 Object.defineProperty(exports, "getAvailableCollectionNames", {
   enumerable: true,
-  get: function () { return chunkYAURVGUK_cjs.getAvailableCollectionNames; }
+  get: function () { return chunk4DHPR7KR_cjs.getAvailableCollectionNames; }
+});
+Object.defineProperty(exports, "isPluginActive", {
+  enumerable: true,
+  get: function () { return chunk4DHPR7KR_cjs.isPluginActive; }
 });
 Object.defineProperty(exports, "loadCollectionConfig", {
   enumerable: true,
-  get: function () { return chunkYAURVGUK_cjs.loadCollectionConfig; }
+  get: function () { return chunk4DHPR7KR_cjs.loadCollectionConfig; }
 });
 Object.defineProperty(exports, "loadCollectionConfigs", {
   enumerable: true,
-  get: function () { return chunkYAURVGUK_cjs.loadCollectionConfigs; }
+  get: function () { return chunk4DHPR7KR_cjs.loadCollectionConfigs; }
 });
 Object.defineProperty(exports, "registerCollections", {
   enumerable: true,
-  get: function () { return chunkYAURVGUK_cjs.registerCollections; }
+  get: function () { return chunk4DHPR7KR_cjs.registerCollections; }
+});
+Object.defineProperty(exports, "requireActivePlugin", {
+  enumerable: true,
+  get: function () { return chunk4DHPR7KR_cjs.requireActivePlugin; }
+});
+Object.defineProperty(exports, "requireActivePlugins", {
+  enumerable: true,
+  get: function () { return chunk4DHPR7KR_cjs.requireActivePlugins; }
 });
 Object.defineProperty(exports, "validateCollectionConfig", {
   enumerable: true,
-  get: function () { return chunkYAURVGUK_cjs.validateCollectionConfig; }
+  get: function () { return chunk4DHPR7KR_cjs.validateCollectionConfig; }
 });
 Object.defineProperty(exports, "MigrationService", {
   enumerable: true,
-  get: function () { return chunkMOGK3U4A_cjs.MigrationService; }
+  get: function () { return chunkPAS7GZBS_cjs.MigrationService; }
 });
 Object.defineProperty(exports, "renderFilterBar", {
   enumerable: true,
@@ -23307,99 +23574,99 @@ Object.defineProperty(exports, "renderAdminLayoutCatalyst", {
 });
 Object.defineProperty(exports, "HookSystemImpl", {
   enumerable: true,
-  get: function () { return chunkI7MIRRFJ_cjs.HookSystemImpl; }
+  get: function () { return chunkA22RBHO7_cjs.HookSystemImpl; }
 });
 Object.defineProperty(exports, "HookUtils", {
   enumerable: true,
-  get: function () { return chunkI7MIRRFJ_cjs.HookUtils; }
+  get: function () { return chunkA22RBHO7_cjs.HookUtils; }
 });
 Object.defineProperty(exports, "PluginDependencyCycleError", {
   enumerable: true,
-  get: function () { return chunkI7MIRRFJ_cjs.PluginDependencyCycleError; }
+  get: function () { return chunkA22RBHO7_cjs.PluginDependencyCycleError; }
 });
 Object.defineProperty(exports, "PluginManagerClass", {
   enumerable: true,
-  get: function () { return chunkI7MIRRFJ_cjs.PluginManager; }
+  get: function () { return chunkA22RBHO7_cjs.PluginManager; }
 });
 Object.defineProperty(exports, "PluginRegistryImpl", {
   enumerable: true,
-  get: function () { return chunkI7MIRRFJ_cjs.PluginRegistryImpl; }
+  get: function () { return chunkA22RBHO7_cjs.PluginRegistryImpl; }
 });
 Object.defineProperty(exports, "PluginValidatorClass", {
   enumerable: true,
-  get: function () { return chunkI7MIRRFJ_cjs.PluginValidator; }
+  get: function () { return chunkA22RBHO7_cjs.PluginValidator; }
 });
 Object.defineProperty(exports, "RegisterPluginsError", {
   enumerable: true,
-  get: function () { return chunkI7MIRRFJ_cjs.RegisterPluginsError; }
+  get: function () { return chunkA22RBHO7_cjs.RegisterPluginsError; }
 });
 Object.defineProperty(exports, "ScopedHookSystemClass", {
   enumerable: true,
-  get: function () { return chunkI7MIRRFJ_cjs.ScopedHookSystem; }
+  get: function () { return chunkA22RBHO7_cjs.ScopedHookSystem; }
 });
 Object.defineProperty(exports, "collectCronSchedules", {
   enumerable: true,
-  get: function () { return chunkI7MIRRFJ_cjs.collectCronSchedules; }
+  get: function () { return chunkA22RBHO7_cjs.collectCronSchedules; }
 });
 Object.defineProperty(exports, "collectCrons", {
   enumerable: true,
-  get: function () { return chunkI7MIRRFJ_cjs.collectCrons; }
+  get: function () { return chunkA22RBHO7_cjs.collectCrons; }
 });
 Object.defineProperty(exports, "createScheduledHandler", {
   enumerable: true,
-  get: function () { return chunkI7MIRRFJ_cjs.createScheduledHandler; }
+  get: function () { return chunkA22RBHO7_cjs.createScheduledHandler; }
 });
 Object.defineProperty(exports, "dispatchCronTick", {
   enumerable: true,
-  get: function () { return chunkI7MIRRFJ_cjs.dispatchCronTick; }
+  get: function () { return chunkA22RBHO7_cjs.dispatchCronTick; }
 });
 Object.defineProperty(exports, "registerPlugins", {
   enumerable: true,
-  get: function () { return chunkI7MIRRFJ_cjs.registerPlugins; }
+  get: function () { return chunkA22RBHO7_cjs.registerPlugins; }
 });
 Object.defineProperty(exports, "topoSort", {
   enumerable: true,
-  get: function () { return chunkI7MIRRFJ_cjs.topoSort; }
+  get: function () { return chunkA22RBHO7_cjs.topoSort; }
 });
 Object.defineProperty(exports, "applySchemaDefaults", {
   enumerable: true,
-  get: function () { return chunkD6FWEYQE_cjs.applySchemaDefaults; }
+  get: function () { return chunkKWQNB6UM_cjs.applySchemaDefaults; }
 });
 Object.defineProperty(exports, "definePlugin", {
   enumerable: true,
-  get: function () { return chunkD6FWEYQE_cjs.definePlugin; }
+  get: function () { return chunkKWQNB6UM_cjs.definePlugin; }
 });
 Object.defineProperty(exports, "getPluginMenu", {
   enumerable: true,
-  get: function () { return chunkD6FWEYQE_cjs.getPluginMenu; }
+  get: function () { return chunkKWQNB6UM_cjs.getPluginMenu; }
 });
 Object.defineProperty(exports, "isDefinedPlugin", {
   enumerable: true,
-  get: function () { return chunkD6FWEYQE_cjs.isDefinedPlugin; }
+  get: function () { return chunkKWQNB6UM_cjs.isDefinedPlugin; }
 });
 Object.defineProperty(exports, "parseConfigSchema", {
   enumerable: true,
-  get: function () { return chunkD6FWEYQE_cjs.parseConfigSchema; }
+  get: function () { return chunkKWQNB6UM_cjs.parseConfigSchema; }
 });
 Object.defineProperty(exports, "parseFormDataToSettings", {
   enumerable: true,
-  get: function () { return chunkD6FWEYQE_cjs.parseFormDataToSettings; }
+  get: function () { return chunkKWQNB6UM_cjs.parseFormDataToSettings; }
 });
 Object.defineProperty(exports, "renderSchemaFields", {
   enumerable: true,
-  get: function () { return chunkD6FWEYQE_cjs.renderSchemaFields; }
+  get: function () { return chunkKWQNB6UM_cjs.renderSchemaFields; }
 });
 Object.defineProperty(exports, "resetPluginMenu", {
   enumerable: true,
-  get: function () { return chunkD6FWEYQE_cjs.resetPluginMenu; }
+  get: function () { return chunkKWQNB6UM_cjs.resetPluginMenu; }
 });
 Object.defineProperty(exports, "resolvePluginMenuItems", {
   enumerable: true,
-  get: function () { return chunkD6FWEYQE_cjs.resolvePluginMenuItems; }
+  get: function () { return chunkKWQNB6UM_cjs.resolvePluginMenuItems; }
 });
 Object.defineProperty(exports, "setPluginMenu", {
   enumerable: true,
-  get: function () { return chunkD6FWEYQE_cjs.setPluginMenu; }
+  get: function () { return chunkKWQNB6UM_cjs.setPluginMenu; }
 });
 Object.defineProperty(exports, "getHookSystem", {
   enumerable: true,
@@ -23423,23 +23690,23 @@ Object.defineProperty(exports, "setHookSystem", {
 });
 Object.defineProperty(exports, "QueryFilterBuilder", {
   enumerable: true,
-  get: function () { return chunkDLTT7QZU_cjs.QueryFilterBuilder; }
+  get: function () { return chunkSFGYZUWU_cjs.QueryFilterBuilder; }
 });
 Object.defineProperty(exports, "TemplateRenderer", {
   enumerable: true,
-  get: function () { return chunkDLTT7QZU_cjs.TemplateRenderer; }
+  get: function () { return chunkSFGYZUWU_cjs.TemplateRenderer; }
 });
 Object.defineProperty(exports, "buildQuery", {
   enumerable: true,
-  get: function () { return chunkDLTT7QZU_cjs.buildQuery; }
+  get: function () { return chunkSFGYZUWU_cjs.buildQuery; }
 });
 Object.defineProperty(exports, "renderTemplate", {
   enumerable: true,
-  get: function () { return chunkDLTT7QZU_cjs.renderTemplate; }
+  get: function () { return chunkSFGYZUWU_cjs.renderTemplate; }
 });
 Object.defineProperty(exports, "templateRenderer", {
   enumerable: true,
-  get: function () { return chunkDLTT7QZU_cjs.templateRenderer; }
+  get: function () { return chunkSFGYZUWU_cjs.templateRenderer; }
 });
 Object.defineProperty(exports, "metricsTracker", {
   enumerable: true,
@@ -23447,11 +23714,11 @@ Object.defineProperty(exports, "metricsTracker", {
 });
 Object.defineProperty(exports, "SONICJS_VERSION", {
   enumerable: true,
-  get: function () { return chunkBJ6NJL2E_cjs.SONICJS_VERSION; }
+  get: function () { return chunkXZUEGFXE_cjs.SONICJS_VERSION; }
 });
 Object.defineProperty(exports, "getCoreVersion", {
   enumerable: true,
-  get: function () { return chunkBJ6NJL2E_cjs.getCoreVersion; }
+  get: function () { return chunkXZUEGFXE_cjs.getCoreVersion; }
 });
 Object.defineProperty(exports, "escapeHtml", {
   enumerable: true,
@@ -23479,6 +23746,7 @@ exports.createMcpPlugin = createMcpPlugin;
 exports.createOAuthProvidersPlugin = createOAuthProvidersPlugin;
 exports.createRedirectPlugin = createRedirectPlugin;
 exports.createSonicJSApp = createSonicJSApp;
+exports.demoLoginPlugin = demoLoginPlugin;
 exports.emailReconciliationPlugin = emailReconciliationPlugin;
 exports.generateTriggersComment = generateTriggersComment;
 exports.helloWorldPlugin = helloWorldPlugin;