@velora-cms/server 0.11.0 → 0.12.0

package/dist/admin-bundle/assets/{mf-entry-bootstrap-0-aef015cd.js → mf-entry-bootstrap-0-7b0ce2fe.js}

@@ -27,7 +27,7 @@ const __mfImport = (src) =>
 
 
 (async () => {
-  const __mfHostInit = await __mfImport("./hostInit--C4xK6nj.js");
+  const __mfHostInit = await __mfImport("./hostInit-B-6-34XY.js");
   await __mfHostInit.__tla;
   const { initHost } = __mfHostInit;
   await initHost();
@@ -38,4 +38,4 @@ const __mfImport = (src) =>
   if (__mfReactServerModuleCache?.pendingShareLoads) {
     await Promise.all(__mfReactServerModuleCache.pendingShareLoads);
   }
-})().then(() => __mfImport("./index-BIAF0ShP.js"));
+})().then(() => __mfImport("./index-DYO7-IK8.js"));

package/dist/admin-bundle/assets/{remoteEntry-CNyN68bc.js → remoteEntry-J2yJXsGB.js}

@@ -1,9 +1,9 @@
 const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/index-Do71v6NZ.js"])))=>i.map(i=>d[i]);
-import{_ as xe}from"./vite-preload-helper-Cgledu0r.js";import{h as ct,i as lt}from"./index-Do71v6NZ.js";const dt=ct.share;typeof __VUE_HMR_RUNTIME__>"u"&&(globalThis.__VUE_HMR_RUNTIME__={createRecord(){},rerender(){},reload(){}});const Ne="__mf_init__virtual:mf:__mfe_internal__velora_admin__mf_owner__1__mf_v__runtimeInit__mf_v__.js__";let de=globalThis[Ne];if(!de){let s,f;const u=new Promise((h,C)=>{s=h,f=C});de=globalThis[Ne]={initPromise:u,initResolve:s,initReject:f}}const ut=de.initResolve,re="__mf_module_cache__";globalThis[re]||={share:{},remote:{}};globalThis[re].share||={};globalThis[re].remote||={};const d=globalThis[re];for(const s of Object.keys(d.share))if(s.startsWith("default:")){const f=s.slice(8);d.share[f]===void 0&&(d.share[f]=d.share[s])}else if(!s.includes(":")){const f="default:"+s;d.share[f]===void 0&&(d.share[f]=d.share[s])}const Te={},mt=Array.isArray("default")?"default":["default"],Fe="default",A="velora_admin",ce=[["react"],["react/jsx-runtime","react-dom","@velora-cms/plugin-sdk"],["react-dom/client"]];let ee,te,ue;async function _e(s){for(let f=0;;f++)try{return await s()}catch(u){throw u}}const Le=Symbol("mf.originalSharedProvider"),_t={emit:s=>s},ht=(s,f)=>{if(f!=="version-first")return s;const u={};for(const[h,C]of Object.entries(s))u[h]=Object.assign({},C,{[Le]:C});return u},le=(s,f)=>{if(!f)return;const u=Object.entries(s||{}),h=u.find(([,p])=>p===f);if(h)return{version:h[0],provider:f,registered:!0};if(typeof f.version=="string"&&f.version)return{version:f.version,provider:f,registered:!1};const C=u.filter(([,p])=>p===f||!!(f.from&&(p==null?void 0:p.from)===f.from));if(C.length===1)return{version:C[0][0],provider:f,registered:!1}},me=(s,f,u,h)=>{var E;if(!s||!u)return;const C=Array.isArray(u.scope)?u.scope:[u.scope||"default"],p=ht(s,h),x={};for(const D of C)x[D||"default"]={[f]:p};const P=(E=dt.getRegisteredShare(x,f,{...u,scope:C,strategy:h},_t))==null?void 0:E.shared;return(P==null?void 0:P[Le])||P},U=(s,f,u,h)=>{var P;const C=E=>k(E,u),p=Object.fromEntries(Object.entries(s||{}).filter(([,E])=>!C(E)));u!=null&&u.version&&((P=u.shareConfig)==null?void 0:P.import)!==!1&&(p[u.version]||(p[u.version]=u));const x=me(p,f,u,h);return C(x)?void 0:x},k=(s,f)=>s===f||!!(f!=null&&f.from&&(s==null?void 0:s.from)===f.from),gt=(s,f,u,h,C,p,x,P,E)=>{var B,J,W;if(!P)return;const D=(J=(B=f==null?void 0:f.options)==null?void 0:B.shared)==null?void 0:J[C],K=Array.isArray(D)?D.find(N=>(N==null?void 0:N.version)===p):void 0,V=((P==null?void 0:P.from)===((W=f==null?void 0:f.options)==null?void 0:W.name)?P:void 0)||(k(K,P)?K:f?void 0:P);return V&&s.some(N=>{var q,M;return N!==f&&((q=N==null?void 0:N.options)==null?void 0:q.name)===(x==null?void 0:x.from)&&((M=N==null?void 0:N.shareScopeMap)==null?void 0:M[h])===u})?V:void 0},vt=(s,f,u,h,C,p,x,P,E)=>{const D=p.registered?gt(s,f,u,h,C,p.version,p.provider,P):void 0,K=D||x;if(K&&!(p.registered&&!k(K,P)))return{provider:K,scopeRootProvider:D}};async function bt(){return ee||(ee=_e(()=>xe(()=>import("./_virtual_mf-localSharedImportMap___mfe_internal__velora_admin__mf_owner__1-DOKdWYyj.js"),__vite__mapDeps([0]))).catch(s=>{throw ee=void 0,s})),ee}async function yt(){return te||(te=_e(()=>xe(()=>import("./virtualExposes-BDCSo5OS.js"),[])).then(s=>s.default??s).catch(s=>{throw te=void 0,s})),te}async function Pt(s={},f=[]){var we,je,Re,Ce,Ee;const u=(t,e,r,n)=>{const o=(Array.isArray(n)?n[0]:n)||"default",c=e||!r?t:t+"@"+r,a={canonical:o+":"+c};return o==="default"&&(a.aliases=[c]),a},h=(t,e)=>{const r=t[e.canonical];if(r!==void 0)return r;const n=e.aliases||[];for(const i of n){if(!Object.prototype.hasOwnProperty.call(t,i))continue;const o=t[i];if(o!==void 0)return t[e.canonical]=o,o}},C=Symbol.for("module-federation.shared-cache-listeners"),p=Symbol.for("module-federation.shared-cache-owners"),x=t=>{let e=t[p];return e===void 0&&(e=Object.create(null),Object.defineProperty(t,p,{value:e,enumerable:!1,configurable:!1,writable:!1})),e},P=(t,e)=>{var r;return(r=t[p])==null?void 0:r[e.canonical]},E=(t,e,r,n)=>{var a;t[e.canonical]=r;const i=e.aliases||[];for(const l of i)Object.defineProperty(t,l,{value:r,enumerable:!0,configurable:!0,writable:!0});const o=t[p];n===void 0?o&&delete o[e.canonical]:x(t)[e.canonical]=n;const c=(a=t[C])==null?void 0:a[e.canonical];if(c)for(const l of c)l(r);return r},D=Symbol.for("module-federation.tree-shaking-shared-cache"),K=t=>{let e=t[D];return e===void 0&&(e=Object.create(null),Object.defineProperty(t,D,{value:e,enumerable:!1,configurable:!1,writable:!1})),e},he=(t,e,r,n)=>{if(!Array.isArray(r))return n;const i=[...new Set(r)].sort(),o=K(t),c=o[e.canonical]||=[],a=c.find(l=>l.providedExports.length===i.length&&l.providedExports.every((b,m)=>b===i[m]));return a?a.value=n:c.push({providedExports:i,value:n}),n},V=Symbol.for("module-federation.tree-shaking-shared-selection-cache"),ge=t=>{let e=t[V];return e===void 0&&(e=Object.create(null),Object.defineProperty(t,V,{value:e,enumerable:!1,configurable:!1,writable:!1})),e},B=(t,e,r)=>{var i,o;const n=h(t,e);return n!==void 0?n:(o=(i=t[V])==null?void 0:i[e.canonical])==null?void 0:o[r]},J=(t,e,r,n)=>{const i=ge(t),o=i[e.canonical]||=Object.create(null);return o[r]=n,n},W=((we=globalThis.__FEDERATION__)==null?void 0:we.__INSTANCES__)||[],N=(je=f.find(t=>t==null?void 0:t.from))==null?void 0:je.from,q=W.find(t=>{var e,r;return((e=t==null?void 0:t.options)==null?void 0:e.name)===N&&((r=t==null?void 0:t.shareScopeMap)==null?void 0:r.default)===s})||W.find(t=>{var e,r;return((e=t==null?void 0:t.options)==null?void 0:e.name)!==A&&((r=t==null?void 0:t.shareScopeMap)==null?void 0:r.default)===s}),M=Object.create(null),Ae=t=>{const e=Object.create(null);for(const[r,n]of Object.entries(t||{}))e[r]=Object.assign(Object.create(null),n);return e},ke=(t,e)=>{const r=!q&&Object.values(e||{}).some(i=>Object.values(i||{}).some(Q)),n=r?Ae(e):e;return M[t]={host:e,runtime:n,isWebpackScope:r},n},De=()=>{const t=Object.values(M).filter(({isWebpackScope:e})=>e);if(t.length!==0)for(const{host:e,runtime:r}of t)for(const[n,i]of Object.entries(e||{})){const o=r[n]||=Object.create(null);for(const[c,a]of Object.entries(i||{}))o[c]=a}},z=Object.create(null);for(const[t,e]of Object.entries(s)){const r=z[t]=Object.create(null);for(const[n,i]of Object.entries(e))r[n]=Object.assign({},i)}const{usedShared:I,usedRemotes:ze}=await bt();function Q(t){if(typeof(t==null?void 0:t.get)!="function")return!1;const e=Function.prototype.toString.call(t.get);return e.includes("__webpack_require__")||/\.\s*e\s*\([^)]*\)\s*\.then\s*\(/.test(e)}const Ke=Object.values(z).some(t=>Object.values(t||{}).some(Q)),Be=t=>{const e=t.split("/");return t.startsWith("@")?e.slice(0,2).join("/"):e[0]},ne=(t,e,r)=>{if(typeof U!="function")return;const n=Be(t),i=n===t?[[t,e]]:[[t,e],[n,I[n]]];for(const[o,c]of i){if(!c)continue;const a=r?o===t?r:z[o]:s[o],l=U(a,o,c,"version-first");if(l&&Q(l)&&!l.lib&&!l.loaded)return l}};var X=Te[Fe];if(X||(X=Te[Fe]={from:A}),f.indexOf(X)>=0)return;f.push(X);const ve=t=>{let e=t;for(let r=0;r<5;r++){const n=e==null?void 0:e.default;if(!n||typeof n!="object"||Object.keys(n).length===0)break;const i=Object.keys(e).filter(o=>o!=="default").map(o=>e[o]);if(i.length>0&&i.some(o=>o!==void 0))break;e=n}return e},Ge=[],Ve=typeof globalThis.window>"u"?await Promise.all([]):[],oe="__mf_vite_runtime_share_load_id__";let We=0;const ie=new Map,se=new Map,H=lt({name:A,remotes:ze,shared:I,plugins:[He(),Ue(),...Ge,...Ve],shareStrategy:"version-first"});H.initShareScopeMap("default",ke("default",s));function He(){return{name:"vite-share-pin-lifecycle-plugin",resolveShare(t){var i;const e=(i=t.shareInfo)==null?void 0:i[oe],r=e===void 0?void 0:se.get(e);if(!r)return t;const n=t.resolver;return t.resolver=(...o)=>(r.pinned.reapply(),n(...o)),r.pinned.reveal(),t}}}function Ue(){return{name:"vite-real-name-snapshot-plugin",afterLoadSnapshot(t){const e=t&&t.remoteSnapshot,r=e&&e.globalName,n=e&&e.version;if(!r||!n||!e.remoteEntry)return t;const i=globalThis.__FEDERATION__&&globalThis.__FEDERATION__.moduleInfo,o=r+":"+n;return i&&!i[o]&&(i[o]=e),t}}}const qe=H.sharedHandler.hooks.lifecycle.resolveShare,Y=new WeakMap;qe.on(t=>{var i;const e=(i=t.shareInfo)==null?void 0:i[oe],r=t.resolver;if(typeof r!="function")return t;const n=(...o)=>{const c=r(...o),a=c==null?void 0:c.shared;return a&&(typeof a=="object"||typeof a=="function")&&!Y.has(a)&&Y.set(a,{from:a.from}),e!==void 0&&a&&ie.set(e,a),c};return t.resolver=n,t});const Me=(t,e,r,n)=>{if(!t||t[e]!==r)return;const i=Object.assign({},n,{version:n.version??e,scope:n.scope??(r==null?void 0:r.scope)??["default"],strategy:"loaded-first"}),o=n.from;t[e]=i;const c=()=>r===void 0?t[e]===void 0:t[e]===r;return{provider:i,reveal(){return t[e]!==i?!1:(r===void 0?delete t[e]:t[e]=r,!0)},reapply(){return c()?(t[e]=i,!0):!1},release(a,l=!0){return n.from=o,t[e]!==i?!l&&c():l?a?(i.from=o,a&&i.lib&&(i.loaded=!0),n.strategy===void 0?delete i.strategy:i.strategy=n.strategy,!0):(r===void 0?delete t[e]:t[e]=r,!1):(r===void 0?delete t[e]:t[e]=r,!0)}}},Je=t=>Object.entries(t||{}).map(([e,r])=>({provider:r,version:e,from:r.from,registered:!0})),Qe=(t,e)=>{if(e===void 0)return;let r;for(const n of t){const i=n.provider,o=i.treeShaking||i;if(!(n.loadedFactory!==e&&i.lib!==e&&o.lib!==e)){if(r)return;r=n}}return r},Xe=async(t,e,r)=>{const n=++We;se.set(n,{pinned:r});try{const i=await H.loadShare(t,{customShareInfo:{shareConfig:e,[oe]:n}});return{factory:i===!1?void 0:i,selectedProvider:ie.get(n)}}finally{ie.delete(n),se.delete(n)}},be=async(t,e,r,n,i,o,c=!0)=>{const a=o.from,l=Me(r,n,i,o);if(!l)return;let b;try{b=await Xe(t,e,l)}catch(j){throw l.release(!1),j}const m=b==null?void 0:b.factory;if(m===void 0){l.release(!1);return}const _=Je(r),g=l.provider.treeShaking||l.provider,R=l.provider.lib===m||g.lib===m;if(!c&&R){const j=_.findIndex(S=>S.provider===l.provider);j!==-1&&_.splice(j,1)}!c&&!_.some(j=>j.provider===o)&&_.push({provider:o,version:n,from:a,registered:!1,loadedFactory:R?m:void 0});const O=!c&&b.selectedProvider===l.provider&&R?o:b.selectedProvider;if(O&&!_.some(j=>j.provider===O)){const j=Y.get(O),S=typeof O.version=="string"&&O.version?O.version:n;_.push({provider:O,version:S,from:j?j.from:O.from,registered:(r==null?void 0:r[S])===O,loadedFactory:m})}const v=_.find(j=>j.provider===O)??Qe(_,m);if(!l.release(!0,(v==null?void 0:v.provider)===l.provider)||!v)return;const y=Y.get(v.provider);v.from=v.provider===o?a:y?y.from:v.provider.from,y&&(v.provider.from=y.from);const L=typeof m=="function"?m():m,w=await Promise.resolve(L);if(!(v.registered&&(r==null?void 0:r[v.version])!==v.provider))return{provider:v.provider,selection:v,resolved:w}},fe=new Set,ae=new Map,Ye=async(t,e,r)=>{var i;const n=!!((i=e.shareConfig)!=null&&i.singleton);if(!n&&e.canLiveRebind!==!1)try{const o=U(r,t,e,"version-first"),c=le(r,o);if(!c)return;const{version:a}=c;if(!n&&a!==e.version||!o.lib&&!o.loading&&!(o.loaded&&typeof o.get=="function"))return;const l=u(t,n,e.version,e.scope);if(h(d.share,l)!==void 0)return;const b=s[t],m=b==null?void 0:b[a];if(c.registered&&!k(m,o))return;let _,g=o.lib;if(!g&&Q(o)||(!g&&o.loading&&(g=await o.loading),!g&&o.loaded&&typeof o.get=="function"&&(g=await o.get()),!g))return;const R=typeof g=="function"?g():g,O=await Promise.resolve(R),v=c.registered?m:o;_={provider:v,selection:{provider:v,version:a,from:o.from,registered:c.registered},resolved:O};const T=_==null?void 0:_.provider,y=_==null?void 0:_.selection;if(!y)return;const L=_==null?void 0:_.resolved;if(L===void 0||h(d.share,l)!==void 0||y.registered&&(b==null?void 0:b[y.version])!==T)return;E(d.share,l,ve(L),y.from),fe.add(T)}catch(o){console.error('[Module Federation] Failed to bridge materialized shared module "'+t+'"',o)}},ye=async(t,e,r,n,i)=>{var o,c;try{const a=u(t,(o=e.shareConfig)==null?void 0:o.singleton,e.version,e.scope),l=h(d.share,a),b=P(d.share,a),m=U(r,t,e,"version-first"),_=m||me(r,t,e,"version-first")||e,g=le(r,_);if(!g)return;const R=k(_,e),{version:O}=g;if(!((c=e.shareConfig)!=null&&c.singleton)&&O!==e.version)return;const v=n==null?void 0:n[O],T=vt(W,q,s,"default",t,g,m,v,"version-first");if(!T&&!R)return;const{provider:y,scopeRootProvider:L}=T||{provider:_,scopeRootProvider:void 0};if(e.canLiveRebind===!1||l!==void 0&&b!==A)return;const w=s[t],j=w==null?void 0:w[O];if(g.registered&&!L&&!k(j,y))return;const S=await be(t,e.shareConfig,w,O,j,y,g.registered&&!R),G=S==null?void 0:S.provider,F=S==null?void 0:S.selection;if(!F||k(G,e)||i&&(i.version!==F.version||!k({from:F.from},i.provider))||fe.has(G))return;const Ie=S==null?void 0:S.resolved;if(Ie===void 0)return;const st=h(d.share,a),ft=P(d.share,a);if(st!==void 0&&ft!==A||F.registered&&(w==null?void 0:w[F.version])!==G)return;i||ae.set(t,{version:F.version,provider:{from:F.from}}),fe.add(G);const at=ve(Ie);E(d.share,a,at,F.from)}catch(a){console.error('[Module Federation] Failed to bridge external shared module "'+t+'"',a)}};for(const t of ce)await Promise.all(t.map(async e=>{const r=I[e];!r||r.materialize===!1||r.treeShaking||await Ye(e,r,z[e])}));for(const[t,e]of Object.entries(I)){if(e.treeShaking)continue;const r=u(t,(Re=e.shareConfig)==null?void 0:Re.singleton,e.version,e.scope);if(h(d.share,r)!==void 0)continue;const n=u(t,!0,e.version,e.scope),i=h(d.share,n);i!==void 0&&E(d.share,r,i,P(d.share,n))}const Ze=["react","react/jsx-runtime","react-dom","@velora-cms/plugin-sdk","react-dom/client"],$e=[["react"],["react/jsx-runtime","react-dom","@velora-cms/plugin-sdk"],["react-dom/client"]],Z=Ze.filter(t=>{var e;return I[t]&&(I[t].materialize!==!1||((e=I[t].shareConfig)==null?void 0:e.import)===!1)});d.providerInit||=new Map;const et=(t,e)=>{const r=d.providerInit.get(t);if(r)return r;const n=Promise.resolve().then(e);return d.providerInit.set(t,n),n.catch(()=>d.providerInit.delete(t)),n};var Se=async t=>{const e=new Set(t);for(const r of $e)await Promise.all(r.filter(n=>e.has(n)).map(async n=>{var O,v;const i=I[n],o=u(n,(O=i.shareConfig)==null?void 0:O.singleton,i.version,i.scope);if(((v=i.shareConfig)==null?void 0:v.import)===!1||i.treeShaking||h(d.share,o)!==void 0)return;const c=u(n,!0,i.version,i.scope),a=h(d.share,c);if(a!==void 0){E(d.share,o,a,P(d.share,c));return}const l=typeof ne=="function"?ne(n,i):void 0;if(l&&!l.lib&&!l.loaded)return;const b=o.canonical,m=await et(b,async()=>{const T=await i.get(),y=typeof T=="function"?T():T;return Promise.resolve(y)}),g=(T=>{let y=T;for(let L=0;L<5;L++){const w=y==null?void 0:y.default;if(!w||typeof w!="object"||Object.keys(w).length===0)break;const j=Object.keys(y).filter(S=>S!=="default").map(S=>y[S]);if(j.length>0&&j.some(S=>S!==void 0))break;y=w}return y})(m),R=g===m?{...m}:g;R.__esModule!==!0&&Object.defineProperty(R,"__esModule",{value:!0,enumerable:!1}),E(d.share,o,R,A)}))};const pe=t=>{var n,i;const e=I[t];if(!e.treeShaking&&((n=e.shareConfig)==null?void 0:n.import)!==!1)return!1;const r=u(t,(i=e.shareConfig)==null?void 0:i.singleton,e.version,e.scope);return e.treeShaking?B(d.share,r,A)===void 0&&h(d.share,r)===void 0:h(d.share,r)===void 0},tt=t=>{var i,o;const e=I[t],r=u(t,(i=e.shareConfig)==null?void 0:i.singleton,e.version,e.scope);return(e.treeShaking?B(d.share,r,A)??h(d.share,r):h(d.share,r))!==void 0?!1:e.treeShaking||((o=e.shareConfig)==null?void 0:o.import)===!1?!0:typeof U!="function"?!1:!!U(z[t],t,e,"version-first")},$=Z.findIndex(tt),rt=$===-1?Z:Z.slice(0,$);var nt=$===-1?[]:Z.slice($);await Se(rt);try{await _e(async()=>{await Promise.all(await H.initializeSharing("default",{strategy:"version-first",from:"build",initScope:f}))})}catch(t){console.error("[Module Federation]",t)}De();const Pe=async()=>{for(const t of ce)await Promise.all(t.map(async e=>{const r=I[e];!r||r.materialize===!1||r.treeShaking||await ye(e,r,s[e],z[e],void 0)}))};await Pe(),Ke&&(ue=Pe);try{const t=(Ce=globalThis.__FEDERATION__)==null?void 0:Ce.__SHARE__,e=Object.create(null);if(t)for(const[,r]of Object.entries(t))for(const n of mt){const i=r==null?void 0:r[n];if(i)for(const[o,c]of Object.entries(i)){const a=I==null?void 0:I[o],l=z[o],b=ae.get(o);if(!a||!l||!b||a.treeShaking)continue;const m=e[o]||(e[o]=Object.create(null));for(const[_,g]of Object.entries(c)){if(!g.lib||b.version!==_||!k(g,b.provider))continue;const R=l[_];(g===R||R!=null&&R.from&&g.from===R.from)&&(g===a||a.from&&g.from===a.from||m[_]===void 0&&(m[_]=g))}}}for(const r of ce)await Promise.all(r.map(async n=>{const i=e[n];i&&await ye(n,I[n],i,z[n],ae.get(n))}))}catch(t){console.error("[Module Federation] Failed to bridge external shared modules",t)}const ot=async()=>{},it=async(t,e)=>{var T,y;const r=u(t,(T=e.shareConfig)==null?void 0:T.singleton,e.version,e.scope),n=e.treeShaking?B(d.share,r,A):h(d.share,r);if(((y=e.shareConfig)==null?void 0:y.import)!==!1||n!==void 0||ne(t,e,z[t]))return;const i=L=>{let w=L;for(let j=0;j<5;j++){const S=w==null?void 0:w.default;if(!S||typeof S!="object"||Object.keys(S).length===0)break;const G=Object.keys(w).filter(F=>F!=="default").map(F=>w[F]);if(G.length>0&&G.some(F=>F!==void 0))break;w=S}return w},o=s==null?void 0:s[t],c=me(o,t,e,"version-first")||e,a=le(o,c);if(!a)return;const{version:l}=a,b=o==null?void 0:o[l],m=await be(t,e.shareConfig,o,l,b,c,a.registered&&!k(c,e)),_=m==null?void 0:m.selection,g=m==null?void 0:m.provider,R=m==null?void 0:m.resolved;if(!_||k(g,e)||R===void 0||(e.treeShaking?B(d.share,r,A):h(d.share,r))!==void 0||_.registered&&(o==null?void 0:o[_.version])!==g)return;const v=i(R);if(e.treeShaking){const L=e.treeShaking.providedExports??e.treeShaking.usedExports??[];he(d.share,r,L,v),J(d.share,r,A,v)}else E(d.share,r,v,_.from)},Oe=[];for(const t of nt){const e=I[t];if(pe(t))try{e.treeShaking?await ot(t,e):((Ee=e.shareConfig)==null?void 0:Ee.import)===!1&&await it(t,e)}catch(r){console.error(`[Module Federation] Failed to resolve runtime-only shared module "${t}"`,r);break}if(pe(t))break;Oe.push(t)}return await Se(Oe),ut(H),H}async function Ot(s){const f=await yt();if(!(s in f))throw new Error(`[Module Federation] Module ${s} does not exist in container.`);return ue&&await ue(),d.pendingShareLoads&&await Promise.all(d.pendingShareLoads),f[s]().then(u=>()=>u)}export{Ot as get,Pt as init};
+import{_ as xe}from"./vite-preload-helper-Cgledu0r.js";import{h as ct,i as lt}from"./index-Do71v6NZ.js";const dt=ct.share;typeof __VUE_HMR_RUNTIME__>"u"&&(globalThis.__VUE_HMR_RUNTIME__={createRecord(){},rerender(){},reload(){}});const Ne="__mf_init__virtual:mf:__mfe_internal__velora_admin__mf_owner__1__mf_v__runtimeInit__mf_v__.js__";let de=globalThis[Ne];if(!de){let s,f;const u=new Promise((h,C)=>{s=h,f=C});de=globalThis[Ne]={initPromise:u,initResolve:s,initReject:f}}const ut=de.initResolve,re="__mf_module_cache__";globalThis[re]||={share:{},remote:{}};globalThis[re].share||={};globalThis[re].remote||={};const d=globalThis[re];for(const s of Object.keys(d.share))if(s.startsWith("default:")){const f=s.slice(8);d.share[f]===void 0&&(d.share[f]=d.share[s])}else if(!s.includes(":")){const f="default:"+s;d.share[f]===void 0&&(d.share[f]=d.share[s])}const Te={},mt=Array.isArray("default")?"default":["default"],Fe="default",A="velora_admin",ce=[["react"],["react/jsx-runtime","react-dom","@velora-cms/plugin-sdk"],["react-dom/client"]];let ee,te,ue;async function _e(s){for(let f=0;;f++)try{return await s()}catch(u){throw u}}const Le=Symbol("mf.originalSharedProvider"),_t={emit:s=>s},ht=(s,f)=>{if(f!=="version-first")return s;const u={};for(const[h,C]of Object.entries(s))u[h]=Object.assign({},C,{[Le]:C});return u},le=(s,f)=>{if(!f)return;const u=Object.entries(s||{}),h=u.find(([,p])=>p===f);if(h)return{version:h[0],provider:f,registered:!0};if(typeof f.version=="string"&&f.version)return{version:f.version,provider:f,registered:!1};const C=u.filter(([,p])=>p===f||!!(f.from&&(p==null?void 0:p.from)===f.from));if(C.length===1)return{version:C[0][0],provider:f,registered:!1}},me=(s,f,u,h)=>{var E;if(!s||!u)return;const C=Array.isArray(u.scope)?u.scope:[u.scope||"default"],p=ht(s,h),x={};for(const D of C)x[D||"default"]={[f]:p};const P=(E=dt.getRegisteredShare(x,f,{...u,scope:C,strategy:h},_t))==null?void 0:E.shared;return(P==null?void 0:P[Le])||P},U=(s,f,u,h)=>{var P;const C=E=>k(E,u),p=Object.fromEntries(Object.entries(s||{}).filter(([,E])=>!C(E)));u!=null&&u.version&&((P=u.shareConfig)==null?void 0:P.import)!==!1&&(p[u.version]||(p[u.version]=u));const x=me(p,f,u,h);return C(x)?void 0:x},k=(s,f)=>s===f||!!(f!=null&&f.from&&(s==null?void 0:s.from)===f.from),gt=(s,f,u,h,C,p,x,P,E)=>{var B,J,W;if(!P)return;const D=(J=(B=f==null?void 0:f.options)==null?void 0:B.shared)==null?void 0:J[C],K=Array.isArray(D)?D.find(N=>(N==null?void 0:N.version)===p):void 0,V=((P==null?void 0:P.from)===((W=f==null?void 0:f.options)==null?void 0:W.name)?P:void 0)||(k(K,P)?K:f?void 0:P);return V&&s.some(N=>{var q,M;return N!==f&&((q=N==null?void 0:N.options)==null?void 0:q.name)===(x==null?void 0:x.from)&&((M=N==null?void 0:N.shareScopeMap)==null?void 0:M[h])===u})?V:void 0},vt=(s,f,u,h,C,p,x,P,E)=>{const D=p.registered?gt(s,f,u,h,C,p.version,p.provider,P):void 0,K=D||x;if(K&&!(p.registered&&!k(K,P)))return{provider:K,scopeRootProvider:D}};async function bt(){return ee||(ee=_e(()=>xe(()=>import("./_virtual_mf-localSharedImportMap___mfe_internal__velora_admin__mf_owner__1-DlIgIuFP.js"),__vite__mapDeps([0]))).catch(s=>{throw ee=void 0,s})),ee}async function yt(){return te||(te=_e(()=>xe(()=>import("./virtualExposes-BDCSo5OS.js"),[])).then(s=>s.default??s).catch(s=>{throw te=void 0,s})),te}async function Pt(s={},f=[]){var we,je,Re,Ce,Ee;const u=(t,e,r,n)=>{const o=(Array.isArray(n)?n[0]:n)||"default",c=e||!r?t:t+"@"+r,a={canonical:o+":"+c};return o==="default"&&(a.aliases=[c]),a},h=(t,e)=>{const r=t[e.canonical];if(r!==void 0)return r;const n=e.aliases||[];for(const i of n){if(!Object.prototype.hasOwnProperty.call(t,i))continue;const o=t[i];if(o!==void 0)return t[e.canonical]=o,o}},C=Symbol.for("module-federation.shared-cache-listeners"),p=Symbol.for("module-federation.shared-cache-owners"),x=t=>{let e=t[p];return e===void 0&&(e=Object.create(null),Object.defineProperty(t,p,{value:e,enumerable:!1,configurable:!1,writable:!1})),e},P=(t,e)=>{var r;return(r=t[p])==null?void 0:r[e.canonical]},E=(t,e,r,n)=>{var a;t[e.canonical]=r;const i=e.aliases||[];for(const l of i)Object.defineProperty(t,l,{value:r,enumerable:!0,configurable:!0,writable:!0});const o=t[p];n===void 0?o&&delete o[e.canonical]:x(t)[e.canonical]=n;const c=(a=t[C])==null?void 0:a[e.canonical];if(c)for(const l of c)l(r);return r},D=Symbol.for("module-federation.tree-shaking-shared-cache"),K=t=>{let e=t[D];return e===void 0&&(e=Object.create(null),Object.defineProperty(t,D,{value:e,enumerable:!1,configurable:!1,writable:!1})),e},he=(t,e,r,n)=>{if(!Array.isArray(r))return n;const i=[...new Set(r)].sort(),o=K(t),c=o[e.canonical]||=[],a=c.find(l=>l.providedExports.length===i.length&&l.providedExports.every((b,m)=>b===i[m]));return a?a.value=n:c.push({providedExports:i,value:n}),n},V=Symbol.for("module-federation.tree-shaking-shared-selection-cache"),ge=t=>{let e=t[V];return e===void 0&&(e=Object.create(null),Object.defineProperty(t,V,{value:e,enumerable:!1,configurable:!1,writable:!1})),e},B=(t,e,r)=>{var i,o;const n=h(t,e);return n!==void 0?n:(o=(i=t[V])==null?void 0:i[e.canonical])==null?void 0:o[r]},J=(t,e,r,n)=>{const i=ge(t),o=i[e.canonical]||=Object.create(null);return o[r]=n,n},W=((we=globalThis.__FEDERATION__)==null?void 0:we.__INSTANCES__)||[],N=(je=f.find(t=>t==null?void 0:t.from))==null?void 0:je.from,q=W.find(t=>{var e,r;return((e=t==null?void 0:t.options)==null?void 0:e.name)===N&&((r=t==null?void 0:t.shareScopeMap)==null?void 0:r.default)===s})||W.find(t=>{var e,r;return((e=t==null?void 0:t.options)==null?void 0:e.name)!==A&&((r=t==null?void 0:t.shareScopeMap)==null?void 0:r.default)===s}),M=Object.create(null),Ae=t=>{const e=Object.create(null);for(const[r,n]of Object.entries(t||{}))e[r]=Object.assign(Object.create(null),n);return e},ke=(t,e)=>{const r=!q&&Object.values(e||{}).some(i=>Object.values(i||{}).some(Q)),n=r?Ae(e):e;return M[t]={host:e,runtime:n,isWebpackScope:r},n},De=()=>{const t=Object.values(M).filter(({isWebpackScope:e})=>e);if(t.length!==0)for(const{host:e,runtime:r}of t)for(const[n,i]of Object.entries(e||{})){const o=r[n]||=Object.create(null);for(const[c,a]of Object.entries(i||{}))o[c]=a}},z=Object.create(null);for(const[t,e]of Object.entries(s)){const r=z[t]=Object.create(null);for(const[n,i]of Object.entries(e))r[n]=Object.assign({},i)}const{usedShared:I,usedRemotes:ze}=await bt();function Q(t){if(typeof(t==null?void 0:t.get)!="function")return!1;const e=Function.prototype.toString.call(t.get);return e.includes("__webpack_require__")||/\.\s*e\s*\([^)]*\)\s*\.then\s*\(/.test(e)}const Ke=Object.values(z).some(t=>Object.values(t||{}).some(Q)),Be=t=>{const e=t.split("/");return t.startsWith("@")?e.slice(0,2).join("/"):e[0]},ne=(t,e,r)=>{if(typeof U!="function")return;const n=Be(t),i=n===t?[[t,e]]:[[t,e],[n,I[n]]];for(const[o,c]of i){if(!c)continue;const a=r?o===t?r:z[o]:s[o],l=U(a,o,c,"version-first");if(l&&Q(l)&&!l.lib&&!l.loaded)return l}};var X=Te[Fe];if(X||(X=Te[Fe]={from:A}),f.indexOf(X)>=0)return;f.push(X);const ve=t=>{let e=t;for(let r=0;r<5;r++){const n=e==null?void 0:e.default;if(!n||typeof n!="object"||Object.keys(n).length===0)break;const i=Object.keys(e).filter(o=>o!=="default").map(o=>e[o]);if(i.length>0&&i.some(o=>o!==void 0))break;e=n}return e},Ge=[],Ve=typeof globalThis.window>"u"?await Promise.all([]):[],oe="__mf_vite_runtime_share_load_id__";let We=0;const ie=new Map,se=new Map,H=lt({name:A,remotes:ze,shared:I,plugins:[He(),Ue(),...Ge,...Ve],shareStrategy:"version-first"});H.initShareScopeMap("default",ke("default",s));function He(){return{name:"vite-share-pin-lifecycle-plugin",resolveShare(t){var i;const e=(i=t.shareInfo)==null?void 0:i[oe],r=e===void 0?void 0:se.get(e);if(!r)return t;const n=t.resolver;return t.resolver=(...o)=>(r.pinned.reapply(),n(...o)),r.pinned.reveal(),t}}}function Ue(){return{name:"vite-real-name-snapshot-plugin",afterLoadSnapshot(t){const e=t&&t.remoteSnapshot,r=e&&e.globalName,n=e&&e.version;if(!r||!n||!e.remoteEntry)return t;const i=globalThis.__FEDERATION__&&globalThis.__FEDERATION__.moduleInfo,o=r+":"+n;return i&&!i[o]&&(i[o]=e),t}}}const qe=H.sharedHandler.hooks.lifecycle.resolveShare,Y=new WeakMap;qe.on(t=>{var i;const e=(i=t.shareInfo)==null?void 0:i[oe],r=t.resolver;if(typeof r!="function")return t;const n=(...o)=>{const c=r(...o),a=c==null?void 0:c.shared;return a&&(typeof a=="object"||typeof a=="function")&&!Y.has(a)&&Y.set(a,{from:a.from}),e!==void 0&&a&&ie.set(e,a),c};return t.resolver=n,t});const Me=(t,e,r,n)=>{if(!t||t[e]!==r)return;const i=Object.assign({},n,{version:n.version??e,scope:n.scope??(r==null?void 0:r.scope)??["default"],strategy:"loaded-first"}),o=n.from;t[e]=i;const c=()=>r===void 0?t[e]===void 0:t[e]===r;return{provider:i,reveal(){return t[e]!==i?!1:(r===void 0?delete t[e]:t[e]=r,!0)},reapply(){return c()?(t[e]=i,!0):!1},release(a,l=!0){return n.from=o,t[e]!==i?!l&&c():l?a?(i.from=o,a&&i.lib&&(i.loaded=!0),n.strategy===void 0?delete i.strategy:i.strategy=n.strategy,!0):(r===void 0?delete t[e]:t[e]=r,!1):(r===void 0?delete t[e]:t[e]=r,!0)}}},Je=t=>Object.entries(t||{}).map(([e,r])=>({provider:r,version:e,from:r.from,registered:!0})),Qe=(t,e)=>{if(e===void 0)return;let r;for(const n of t){const i=n.provider,o=i.treeShaking||i;if(!(n.loadedFactory!==e&&i.lib!==e&&o.lib!==e)){if(r)return;r=n}}return r},Xe=async(t,e,r)=>{const n=++We;se.set(n,{pinned:r});try{const i=await H.loadShare(t,{customShareInfo:{shareConfig:e,[oe]:n}});return{factory:i===!1?void 0:i,selectedProvider:ie.get(n)}}finally{ie.delete(n),se.delete(n)}},be=async(t,e,r,n,i,o,c=!0)=>{const a=o.from,l=Me(r,n,i,o);if(!l)return;let b;try{b=await Xe(t,e,l)}catch(j){throw l.release(!1),j}const m=b==null?void 0:b.factory;if(m===void 0){l.release(!1);return}const _=Je(r),g=l.provider.treeShaking||l.provider,R=l.provider.lib===m||g.lib===m;if(!c&&R){const j=_.findIndex(S=>S.provider===l.provider);j!==-1&&_.splice(j,1)}!c&&!_.some(j=>j.provider===o)&&_.push({provider:o,version:n,from:a,registered:!1,loadedFactory:R?m:void 0});const O=!c&&b.selectedProvider===l.provider&&R?o:b.selectedProvider;if(O&&!_.some(j=>j.provider===O)){const j=Y.get(O),S=typeof O.version=="string"&&O.version?O.version:n;_.push({provider:O,version:S,from:j?j.from:O.from,registered:(r==null?void 0:r[S])===O,loadedFactory:m})}const v=_.find(j=>j.provider===O)??Qe(_,m);if(!l.release(!0,(v==null?void 0:v.provider)===l.provider)||!v)return;const y=Y.get(v.provider);v.from=v.provider===o?a:y?y.from:v.provider.from,y&&(v.provider.from=y.from);const L=typeof m=="function"?m():m,w=await Promise.resolve(L);if(!(v.registered&&(r==null?void 0:r[v.version])!==v.provider))return{provider:v.provider,selection:v,resolved:w}},fe=new Set,ae=new Map,Ye=async(t,e,r)=>{var i;const n=!!((i=e.shareConfig)!=null&&i.singleton);if(!n&&e.canLiveRebind!==!1)try{const o=U(r,t,e,"version-first"),c=le(r,o);if(!c)return;const{version:a}=c;if(!n&&a!==e.version||!o.lib&&!o.loading&&!(o.loaded&&typeof o.get=="function"))return;const l=u(t,n,e.version,e.scope);if(h(d.share,l)!==void 0)return;const b=s[t],m=b==null?void 0:b[a];if(c.registered&&!k(m,o))return;let _,g=o.lib;if(!g&&Q(o)||(!g&&o.loading&&(g=await o.loading),!g&&o.loaded&&typeof o.get=="function"&&(g=await o.get()),!g))return;const R=typeof g=="function"?g():g,O=await Promise.resolve(R),v=c.registered?m:o;_={provider:v,selection:{provider:v,version:a,from:o.from,registered:c.registered},resolved:O};const T=_==null?void 0:_.provider,y=_==null?void 0:_.selection;if(!y)return;const L=_==null?void 0:_.resolved;if(L===void 0||h(d.share,l)!==void 0||y.registered&&(b==null?void 0:b[y.version])!==T)return;E(d.share,l,ve(L),y.from),fe.add(T)}catch(o){console.error('[Module Federation] Failed to bridge materialized shared module "'+t+'"',o)}},ye=async(t,e,r,n,i)=>{var o,c;try{const a=u(t,(o=e.shareConfig)==null?void 0:o.singleton,e.version,e.scope),l=h(d.share,a),b=P(d.share,a),m=U(r,t,e,"version-first"),_=m||me(r,t,e,"version-first")||e,g=le(r,_);if(!g)return;const R=k(_,e),{version:O}=g;if(!((c=e.shareConfig)!=null&&c.singleton)&&O!==e.version)return;const v=n==null?void 0:n[O],T=vt(W,q,s,"default",t,g,m,v,"version-first");if(!T&&!R)return;const{provider:y,scopeRootProvider:L}=T||{provider:_,scopeRootProvider:void 0};if(e.canLiveRebind===!1||l!==void 0&&b!==A)return;const w=s[t],j=w==null?void 0:w[O];if(g.registered&&!L&&!k(j,y))return;const S=await be(t,e.shareConfig,w,O,j,y,g.registered&&!R),G=S==null?void 0:S.provider,F=S==null?void 0:S.selection;if(!F||k(G,e)||i&&(i.version!==F.version||!k({from:F.from},i.provider))||fe.has(G))return;const Ie=S==null?void 0:S.resolved;if(Ie===void 0)return;const st=h(d.share,a),ft=P(d.share,a);if(st!==void 0&&ft!==A||F.registered&&(w==null?void 0:w[F.version])!==G)return;i||ae.set(t,{version:F.version,provider:{from:F.from}}),fe.add(G);const at=ve(Ie);E(d.share,a,at,F.from)}catch(a){console.error('[Module Federation] Failed to bridge external shared module "'+t+'"',a)}};for(const t of ce)await Promise.all(t.map(async e=>{const r=I[e];!r||r.materialize===!1||r.treeShaking||await Ye(e,r,z[e])}));for(const[t,e]of Object.entries(I)){if(e.treeShaking)continue;const r=u(t,(Re=e.shareConfig)==null?void 0:Re.singleton,e.version,e.scope);if(h(d.share,r)!==void 0)continue;const n=u(t,!0,e.version,e.scope),i=h(d.share,n);i!==void 0&&E(d.share,r,i,P(d.share,n))}const Ze=["react","react/jsx-runtime","react-dom","@velora-cms/plugin-sdk","react-dom/client"],$e=[["react"],["react/jsx-runtime","react-dom","@velora-cms/plugin-sdk"],["react-dom/client"]],Z=Ze.filter(t=>{var e;return I[t]&&(I[t].materialize!==!1||((e=I[t].shareConfig)==null?void 0:e.import)===!1)});d.providerInit||=new Map;const et=(t,e)=>{const r=d.providerInit.get(t);if(r)return r;const n=Promise.resolve().then(e);return d.providerInit.set(t,n),n.catch(()=>d.providerInit.delete(t)),n};var Se=async t=>{const e=new Set(t);for(const r of $e)await Promise.all(r.filter(n=>e.has(n)).map(async n=>{var O,v;const i=I[n],o=u(n,(O=i.shareConfig)==null?void 0:O.singleton,i.version,i.scope);if(((v=i.shareConfig)==null?void 0:v.import)===!1||i.treeShaking||h(d.share,o)!==void 0)return;const c=u(n,!0,i.version,i.scope),a=h(d.share,c);if(a!==void 0){E(d.share,o,a,P(d.share,c));return}const l=typeof ne=="function"?ne(n,i):void 0;if(l&&!l.lib&&!l.loaded)return;const b=o.canonical,m=await et(b,async()=>{const T=await i.get(),y=typeof T=="function"?T():T;return Promise.resolve(y)}),g=(T=>{let y=T;for(let L=0;L<5;L++){const w=y==null?void 0:y.default;if(!w||typeof w!="object"||Object.keys(w).length===0)break;const j=Object.keys(y).filter(S=>S!=="default").map(S=>y[S]);if(j.length>0&&j.some(S=>S!==void 0))break;y=w}return y})(m),R=g===m?{...m}:g;R.__esModule!==!0&&Object.defineProperty(R,"__esModule",{value:!0,enumerable:!1}),E(d.share,o,R,A)}))};const pe=t=>{var n,i;const e=I[t];if(!e.treeShaking&&((n=e.shareConfig)==null?void 0:n.import)!==!1)return!1;const r=u(t,(i=e.shareConfig)==null?void 0:i.singleton,e.version,e.scope);return e.treeShaking?B(d.share,r,A)===void 0&&h(d.share,r)===void 0:h(d.share,r)===void 0},tt=t=>{var i,o;const e=I[t],r=u(t,(i=e.shareConfig)==null?void 0:i.singleton,e.version,e.scope);return(e.treeShaking?B(d.share,r,A)??h(d.share,r):h(d.share,r))!==void 0?!1:e.treeShaking||((o=e.shareConfig)==null?void 0:o.import)===!1?!0:typeof U!="function"?!1:!!U(z[t],t,e,"version-first")},$=Z.findIndex(tt),rt=$===-1?Z:Z.slice(0,$);var nt=$===-1?[]:Z.slice($);await Se(rt);try{await _e(async()=>{await Promise.all(await H.initializeSharing("default",{strategy:"version-first",from:"build",initScope:f}))})}catch(t){console.error("[Module Federation]",t)}De();const Pe=async()=>{for(const t of ce)await Promise.all(t.map(async e=>{const r=I[e];!r||r.materialize===!1||r.treeShaking||await ye(e,r,s[e],z[e],void 0)}))};await Pe(),Ke&&(ue=Pe);try{const t=(Ce=globalThis.__FEDERATION__)==null?void 0:Ce.__SHARE__,e=Object.create(null);if(t)for(const[,r]of Object.entries(t))for(const n of mt){const i=r==null?void 0:r[n];if(i)for(const[o,c]of Object.entries(i)){const a=I==null?void 0:I[o],l=z[o],b=ae.get(o);if(!a||!l||!b||a.treeShaking)continue;const m=e[o]||(e[o]=Object.create(null));for(const[_,g]of Object.entries(c)){if(!g.lib||b.version!==_||!k(g,b.provider))continue;const R=l[_];(g===R||R!=null&&R.from&&g.from===R.from)&&(g===a||a.from&&g.from===a.from||m[_]===void 0&&(m[_]=g))}}}for(const r of ce)await Promise.all(r.map(async n=>{const i=e[n];i&&await ye(n,I[n],i,z[n],ae.get(n))}))}catch(t){console.error("[Module Federation] Failed to bridge external shared modules",t)}const ot=async()=>{},it=async(t,e)=>{var T,y;const r=u(t,(T=e.shareConfig)==null?void 0:T.singleton,e.version,e.scope),n=e.treeShaking?B(d.share,r,A):h(d.share,r);if(((y=e.shareConfig)==null?void 0:y.import)!==!1||n!==void 0||ne(t,e,z[t]))return;const i=L=>{let w=L;for(let j=0;j<5;j++){const S=w==null?void 0:w.default;if(!S||typeof S!="object"||Object.keys(S).length===0)break;const G=Object.keys(w).filter(F=>F!=="default").map(F=>w[F]);if(G.length>0&&G.some(F=>F!==void 0))break;w=S}return w},o=s==null?void 0:s[t],c=me(o,t,e,"version-first")||e,a=le(o,c);if(!a)return;const{version:l}=a,b=o==null?void 0:o[l],m=await be(t,e.shareConfig,o,l,b,c,a.registered&&!k(c,e)),_=m==null?void 0:m.selection,g=m==null?void 0:m.provider,R=m==null?void 0:m.resolved;if(!_||k(g,e)||R===void 0||(e.treeShaking?B(d.share,r,A):h(d.share,r))!==void 0||_.registered&&(o==null?void 0:o[_.version])!==g)return;const v=i(R);if(e.treeShaking){const L=e.treeShaking.providedExports??e.treeShaking.usedExports??[];he(d.share,r,L,v),J(d.share,r,A,v)}else E(d.share,r,v,_.from)},Oe=[];for(const t of nt){const e=I[t];if(pe(t))try{e.treeShaking?await ot(t,e):((Ee=e.shareConfig)==null?void 0:Ee.import)===!1&&await it(t,e)}catch(r){console.error(`[Module Federation] Failed to resolve runtime-only shared module "${t}"`,r);break}if(pe(t))break;Oe.push(t)}return await Se(Oe),ut(H),H}async function Ot(s){const f=await yt();if(!(s in f))throw new Error(`[Module Federation] Module ${s} does not exist in container.`);return ue&&await ue(),d.pendingShareLoads&&await Promise.all(d.pendingShareLoads),f[s]().then(u=>()=>u)}export{Ot as get,Pt as init};
 
 if (typeof document !== 'undefined' && document.head) {
   try {
-    for (const __mfWarmupPath of ["./virtualExposes-BDCSo5OS.js","./_virtual_mf-localSharedImportMap___mfe_internal__velora_admin__mf_owner__1-DOKdWYyj.js","./vite-preload-helper-Cgledu0r.js","./index-Do71v6NZ.js"]) {
+    for (const __mfWarmupPath of ["./virtualExposes-BDCSo5OS.js","./_virtual_mf-localSharedImportMap___mfe_internal__velora_admin__mf_owner__1-DlIgIuFP.js","./vite-preload-helper-Cgledu0r.js","./index-Do71v6NZ.js"]) {
       const __mfWarmupLink = document.createElement('link');
       __mfWarmupLink.rel = 'modulepreload';
       __mfWarmupLink.crossOrigin = '';

package/dist/admin-bundle/index.html

@@ -4,12 +4,12 @@
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>Velora Admin</title>
-    <script type="module" crossorigin src="/velora/assets/mf-entry-bootstrap-0-aef015cd.js"></script>
+    <script type="module" crossorigin src="/velora/assets/mf-entry-bootstrap-0-7b0ce2fe.js"></script>
     <link rel="modulepreload" crossorigin href="/velora/assets/index-Do71v6NZ.js">
-    <link rel="modulepreload" crossorigin href="/velora/assets/remoteEntry-CNyN68bc.js">
-    <link rel="modulepreload" crossorigin href="/velora/assets/content-trash.schema-DfXHkC-w.js">
+    <link rel="modulepreload" crossorigin href="/velora/assets/remoteEntry-J2yJXsGB.js">
+    <link rel="modulepreload" crossorigin href="/velora/assets/content-trash.schema-tvJ4Lbos.js">
     <link rel="stylesheet" crossorigin href="/velora/assets/index-DnZV_gsg.css">
-  <link rel="modulepreload" crossorigin href="/velora/assets/_virtual_mf___mfe_internal__velora_admin__mf_owner__1__loadShare__react_mf_1_jsx_mf_2_runtime__loadShare__.js-DMaku-HC.js"><link rel="modulepreload" crossorigin href="/velora/assets/_virtual_mf___mfe_internal__velora_admin__mf_owner__1__loadShare__react__loadShare__.js-BuUBskgj.js"><link rel="modulepreload" crossorigin href="/velora/assets/__virtual_mf___mfe_internal__velora_admin__mf_owner__1__loadShare__react__loadShare__.js_commonjs-proxy-Ng0fOpdU.js"><link rel="modulepreload" crossorigin href="/velora/assets/__virtual_mf___mfe_internal__velora_admin__mf_owner__1__loadShare__react_mf_2_dom__loadShare__.js_commonjs-proxy-oc1i_iBU.js"><link rel="modulepreload" crossorigin href="/velora/assets/_virtual_mf___mfe_internal__velora_admin__mf_owner__1__loadShare__react_mf_2_dom_mf_1_client__loadShare__.js-BPoj3DC9.js"><link rel="modulepreload" crossorigin href="/velora/assets/_virtual_mf___mfe_internal__velora_admin__mf_owner__1__loadShare___mf_0_velora_mf_2_cms_mf_1_plugin_mf_2_sdk__loadShare__.js-C1-ZAxwO.js"><link rel="modulepreload" crossorigin href="/velora/assets/_virtual_mf___mfe_internal__velora_admin__mf_owner__1__loadShare__react_mf_2_dom__loadShare__.js-DYfqn12F.js"><link rel="modulepreload" crossorigin href="/velora/assets/hostInit--C4xK6nj.js"><link rel="modulepreload" crossorigin href="/velora/assets/index-BIAF0ShP.js"><link rel="modulepreload" crossorigin href="/velora/assets/virtualExposes-BDCSo5OS.js"><link rel="modulepreload" crossorigin href="/velora/assets/_virtual_mf-localSharedImportMap___mfe_internal__velora_admin__mf_owner__1-DOKdWYyj.js"><link rel="modulepreload" crossorigin href="/velora/assets/index-DhMY-0sC.js"><link rel="modulepreload" crossorigin href="/velora/assets/vite-preload-helper-Cgledu0r.js"></head>
+  <link rel="modulepreload" crossorigin href="/velora/assets/_virtual_mf___mfe_internal__velora_admin__mf_owner__1__loadShare__react_mf_1_jsx_mf_2_runtime__loadShare__.js-DMaku-HC.js"><link rel="modulepreload" crossorigin href="/velora/assets/_virtual_mf___mfe_internal__velora_admin__mf_owner__1__loadShare__react__loadShare__.js-BuUBskgj.js"><link rel="modulepreload" crossorigin href="/velora/assets/__virtual_mf___mfe_internal__velora_admin__mf_owner__1__loadShare__react__loadShare__.js_commonjs-proxy-Ng0fOpdU.js"><link rel="modulepreload" crossorigin href="/velora/assets/__virtual_mf___mfe_internal__velora_admin__mf_owner__1__loadShare__react_mf_2_dom__loadShare__.js_commonjs-proxy-oc1i_iBU.js"><link rel="modulepreload" crossorigin href="/velora/assets/_virtual_mf___mfe_internal__velora_admin__mf_owner__1__loadShare__react_mf_2_dom_mf_1_client__loadShare__.js-BPoj3DC9.js"><link rel="modulepreload" crossorigin href="/velora/assets/_virtual_mf___mfe_internal__velora_admin__mf_owner__1__loadShare___mf_0_velora_mf_2_cms_mf_1_plugin_mf_2_sdk__loadShare__.js-Bm9EahCG.js"><link rel="modulepreload" crossorigin href="/velora/assets/_virtual_mf___mfe_internal__velora_admin__mf_owner__1__loadShare__react_mf_2_dom__loadShare__.js-DYfqn12F.js"><link rel="modulepreload" crossorigin href="/velora/assets/hostInit-B-6-34XY.js"><link rel="modulepreload" crossorigin href="/velora/assets/index-DYO7-IK8.js"><link rel="modulepreload" crossorigin href="/velora/assets/virtualExposes-BDCSo5OS.js"><link rel="modulepreload" crossorigin href="/velora/assets/_virtual_mf-localSharedImportMap___mfe_internal__velora_admin__mf_owner__1-DlIgIuFP.js"><link rel="modulepreload" crossorigin href="/velora/assets/index-CHCGuSbb.js"><link rel="modulepreload" crossorigin href="/velora/assets/vite-preload-helper-Cgledu0r.js"></head>
   <body>
     <div id="root"></div>
   </body>

package/dist/app.d.ts

@@ -1,8 +1,23 @@
-import { type FastifyInstance } from "fastify";
+import { type FastifyInstance, type FastifyRequest } from "fastify";
 import { PluginRegistryService } from "./plugins/plugin-registry-service.js";
 declare module "fastify" {
     interface FastifyInstance {
         pluginRegistry: PluginRegistryService;
     }
 }
+export declare function redactSensitiveQueryParams(url: string): string;
+declare function redactingReqSerializer(request: FastifyRequest): {
+    method: string;
+    url: string;
+    version: string | undefined;
+    host: string;
+    remoteAddress: string;
+    remotePort: number | undefined;
+};
+export declare const requestLoggerOptions: {
+    serializers: {
+        req: typeof redactingReqSerializer;
+    };
+};
 export declare function buildApp(): Promise<FastifyInstance>;
+export {};

package/dist/app.js

@@ -15,7 +15,7 @@ import { prisma, resolvePrismaDialect } from "./db/prisma.js";
 import { resolveClientDir } from "./db/resolve-client-dir.js";
 import { filterPublicApiSpec } from "./docs/filter-public-api-spec.js";
 import { startLicenseRevalidation } from "./marketplace/license-revalidation-job.js";
-import { MediaService, mediaStorageConfigFromEnv } from "./media/media-service.js";
+import { MediaService, resolveMediaStorage } from "./media/media-service.js";
 import { bootInstalledPlugins } from "./plugins/boot-plugin-loader.js";
 import { createHookDispatcher } from "./plugins/hook-dispatcher.js";
 import { PluginRegistryService } from "./plugins/plugin-registry-service.js";
@@ -33,6 +33,7 @@ import { createFrameworkErrorHandler, registerHeadlessBridge } from "./routes/he
 import { healthRoutes } from "./routes/health.js";
 import { marketplaceProxyRoutes } from "./routes/marketplace-proxy.js";
 import { mediaRoutes } from "./routes/media.js";
+import { mediaPublicRoutes } from "./routes/media-public.js";
 import { dataTypeRoutes } from "./routes/data-types.js";
 import { pluginRoutes } from "./routes/plugins.js";
 import { themeRoutes } from "./routes/themes.js";
@@ -45,6 +46,54 @@ import { snapshotRoutes } from "./routes/snapshots.js";
 import { setupRoutes } from "./routes/setup.js";
 import { usersRoutes } from "./routes/users.js";
 import { templateRoutes } from "./routes/templates.js";
+// S186c Task 3 fix wave, M2: signed media/preview links (media-tokens.ts's
+// `?token=`, preview-tokens.ts's `?previewToken=`) ride in the URL, and
+// Fastify's request logging (logger: true below) logs `req.url` verbatim
+// on every single request — meaning both land in cleartext in the access
+// log, a persistent, usually-shipped-off-box artifact, even though each
+// token is itself short-lived and scoped. Only the VALUE is masked; the
+// param NAME stays visible (worth keeping for triage — "was a token even
+// presented" is still answerable from the log line).
+const REDACTED_QUERY_PARAMS = new Set(["token", "previewToken"]);
+export function redactSensitiveQueryParams(url) {
+    const [path, query] = url.split("?", 2);
+    if (!query)
+        return url;
+    const redactedQuery = query
+        .split("&")
+        .map((pair) => {
+        const eqIndex = pair.indexOf("=");
+        const key = eqIndex === -1 ? pair : pair.slice(0, eqIndex);
+        return REDACTED_QUERY_PARAMS.has(key) ? `${key}=[redacted]` : pair;
+    })
+        .join("&");
+    return `${path}?${redactedQuery}`;
+}
+// Field-for-field the same shape as Fastify's own default req serializer
+// (fastify/lib/logger-pino.js's `serializers.req`) — method, url, version,
+// host, remoteAddress, remotePort — with `url` swapped for the redacted
+// version above. Fastify calls this with the real (decorated) request
+// object, not the raw Node one, hence `.host`/`.ip`/`.socket` rather than
+// header-parsing by hand here.
+function redactingReqSerializer(request) {
+    // accept-version, like any header, can legally repeat (string[]) — the
+    // default serializer this mirrors (fastify/lib/logger-pino.js) doesn't
+    // account for that either, so this narrows to Fastify's own declared
+    // `string | undefined` serializer shape rather than widening it.
+    const acceptVersion = request.headers?.["accept-version"];
+    return {
+        method: request.method,
+        url: redactSensitiveQueryParams(request.url),
+        version: typeof acceptVersion === "string" ? acceptVersion : undefined,
+        host: request.host,
+        remoteAddress: request.ip,
+        remotePort: request.socket ? request.socket.remotePort : undefined,
+    };
+}
+// Exported so a test can wire this exact serializer into its own minimal
+// Fastify instance (with a capturable `stream`) rather than duplicating
+// the redaction logic or standing up the full buildApp() + database.
+export const requestLoggerOptions = { serializers: { req: redactingReqSerializer } };
 export async function buildApp() {
     // frameworkErrors (S156): the only hook into find-my-way's own
     // pre-routing FST_ERR_BAD_URL/FST_ERR_ASYNC_CONSTRAINT responses — it's
@@ -63,7 +112,13 @@ export async function buildApp() {
     // byte-for-byte for every deployment that hasn't opted in.
     const trustProxy = trustProxyFromEnv();
     const app = Fastify({
-        logger: true,
+        // M2 (S186c Task 3 fix wave): logger: true previously used Fastify's
+        // default req serializer verbatim, which logs req.url unredacted —
+        // requestLoggerOptions above swaps in the one field that needs
+        // masking and otherwise matches the default exactly, so this is
+        // still "logger: true" in every other respect (level, timestamps,
+        // etc. all default).
+        logger: requestLoggerOptions,
         frameworkErrors: createFrameworkErrorHandler(),
         ...(trustProxy !== undefined ? { trustProxy } : {}),
     }).withTypeProvider();
@@ -133,7 +188,7 @@ export async function buildApp() {
     app.addHook("onClose", async () => {
         await contentDb.adapter.disconnect();
     });
-    const mediaService = new MediaService(prisma, mediaStorageConfigFromEnv(), 
+    const mediaService = new MediaService(prisma, resolveMediaStorage(), 
     // Routed through resolveClientDir() rather than reading
     // VELORA_PRISMA_CLIENT_DIR directly, so there's one channel deciding
     // "which generated client dir" instead of two (db/prisma.ts's own
@@ -143,7 +198,7 @@ export async function buildApp() {
     // branch untouched, so resolvePrismaDialect still falls through to the
     // DATABASE_URL-scheme branch for it exactly as before.
     resolvePrismaDialect(resolveClientDir(), process.env.DATABASE_URL));
-    await mediaService.ensureBucket();
+    await mediaService.ensureReady();
     // The registry's dialect gate follows the content database's resolved
     // dialect — contentDb.dialect is the resolved postgresql|mysql|sqlite
     // union (Session 122), so 'mock' is excluded by construction and no
@@ -195,6 +250,10 @@ export async function buildApp() {
     // 404-with-cause there, not a bare unmatched-route 404), while leaving
     // GET / on its pre-S184 headless-bridge behaviour.
     await app.register(adminStaticRoutes);
+    // The stable media route (S186c §3) — full app only, same as
+    // adminStaticRoutes above; buildSetupOnlyApp() (setup-app.ts) has no
+    // MediaService/Prisma to serve from and never registers this.
+    await app.register(mediaPublicRoutes, { mediaService });
     await app.register(pluginAssetsRoutes);
     await app.register(authRoutes);
     await app.register(usersRoutes);

package/dist/auth/api-keys.d.ts

@@ -1,5 +1,6 @@
 import type { FastifyReply, FastifyRequest } from "fastify";
 import type { ApiKeyScope } from "@velora-cms/api-schemas";
+export declare const KEY_PREFIX = "vk_";
 export declare function generateApiKey(): string;
 export declare function hashApiKey(key: string): string;
 export declare function isApiKeyHashValid(hash: string): Promise<boolean>;

package/dist/auth/api-keys.js

@@ -3,7 +3,11 @@ import { prisma } from "../db/prisma.js";
 // Public Content API keys (Month 9, Session 101). A deliberately separate
 // code path from the admin JWT/cookie session (api-design.md: never
 // conflate headless consumers with logged-in admin sessions).
-const KEY_PREFIX = "vk_";
+// Exported so any other caller that must recognize a "this even looks like
+// one of ours" key (e.g. media-public.ts's hasReadApiKey, L2 fix wave)
+// checks against the exact same literal rather than a second, potentially
+// drifting copy of it.
+export const KEY_PREFIX = "vk_";
 // High-entropy random secret, so sha256 (fast) is the right hash — same
 // reasoning as hashRefreshToken in tokens.ts, NOT bcrypt like passwords.
 export function generateApiKey() {

package/dist/auth/route-rate-limits.d.ts

@@ -16,6 +16,10 @@ export declare const ADMIN_RATE_LIMIT: {
     max: () => number;
     timeWindow: () => string;
 };
+export declare const MEDIA_RATE_LIMIT: {
+    max: () => number;
+    timeWindow: () => string;
+};
 export declare function ipOnlyKeyGenerator(request: FastifyRequest): Promise<string>;
 export declare function ipOnlyRateLimitConfig(): {
     max: number;

package/dist/auth/route-rate-limits.js

@@ -65,6 +65,19 @@ export const ADMIN_RATE_LIMIT = {
     max: () => parsePositiveInt(process.env.VELORA_RATE_LIMIT_ADMIN, 120),
     timeWindow: () => parseWindow(process.env.VELORA_RATE_LIMIT_ADMIN_WINDOW, "1 minute"),
 };
+// The stable media route (S186c §3), GET /media/:id/:filename —
+// registered in media-public.ts, plugin-level, IP-only (same shape as
+// ADMIN_RATE_LIMIT/DOCS_RATE_LIMIT above): a public bandwidth endpoint
+// that both anonymous public-image requests and headless consumers hit
+// directly (not behind an API key or JWT for public items), so it cannot
+// bucket on the three-lane rateLimitConfig's jwt:/apiKey: lanes — IP is
+// the only key every caller has. Generous ceiling: this serves actual
+// bytes (images, downloads) embedded in ordinary pages, so a real page
+// load can fire many requests against it in a burst.
+export const MEDIA_RATE_LIMIT = {
+    max: () => parsePositiveInt(process.env.VELORA_RATE_LIMIT_MEDIA, 300),
+    timeWindow: () => parseWindow(process.env.VELORA_RATE_LIMIT_MEDIA_WINDOW, "1 minute"),
+};
 // The shared rateLimitKey puts a VERIFIED JWT into the jwt: lane, which is
 // Number.MAX_SAFE_INTEGER — effectively unlimited. Login must never inherit
 // that, or anyone holding one valid session could brute-force passwords

package/dist/bin-sync-admin.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/bin-sync-admin.js

@@ -0,0 +1,39 @@
+#!/usr/bin/env node
+// The `velora-sync-admin` command (S186b): re-copies the installed admin
+// bundle into the scaffold's public/velora-admin (or VELORA_ADMIN_DIR),
+// rewriting its version stamp — the drift-control half of the visible
+// scaffold, run after `npm update @velora-cms/server`. Runs with cwd set to
+// the USER's project, never this package, which is exactly what
+// syncAdminBundle resolves targetDir against.
+import { resolve } from "node:path";
+import { syncAdminBundle } from "./admin/sync-admin-bundle.js";
+import { loadEnvFile } from "./config/load-env.js";
+// Review finding I2: spec §3 puts VELORA_ADMIN_DIR in the scaffold's
+// `.env`, but this bin used to read process.env directly and never loaded
+// it — so the override only ever worked if it happened to already be in
+// the shell's real environment. Same loader index.ts/lib.ts use, called
+// with defaults (process.env, process.cwd()) since this bin, like them,
+// runs with cwd set to the scaffold, not this package.
+loadEnvFile();
+// Review finding C1: --force bypasses syncAdminBundle's dangerous-target
+// guard, for the rare case where a caller genuinely wants to replace a
+// directory that doesn't look like a prior admin bundle.
+const force = process.argv.slice(2).includes("--force");
+const targetDir = process.env.VELORA_ADMIN_DIR || "public/velora-admin";
+// Resolved up front so every line this bin prints — success or failure —
+// names the actual absolute path being acted on, not the raw (possibly
+// relative) override string.
+const resolvedTarget = resolve(targetDir);
+try {
+    const { version, copied } = await syncAdminBundle(targetDir, { force });
+    console.log(`Synced admin UI ${version} into ${resolvedTarget} (${copied} files).`);
+}
+catch (err) {
+    // Review finding M1: every failure — including syncAdminBundle's own
+    // missing-source and dangerous-target messages — is wrapped with a
+    // consistent "what were we trying to do" prefix naming the resolved
+    // target, rather than printing the bare underlying message.
+    const message = err instanceof Error ? err.message : String(err);
+    console.error(`Could not sync the admin UI into ${resolvedTarget}: ${message}`);
+    process.exit(1);
+}

package/dist/config/public-url.d.ts

@@ -0,0 +1,3 @@
+import type { FastifyRequest } from "fastify";
+export declare function configuredPublicUrl(): string | null;
+export declare function resolvePublicBaseUrl(request: FastifyRequest): string;

package/dist/config/public-url.js

@@ -0,0 +1,45 @@
+// S186c Task 3 fix wave, L1: extracted out of published-item.ts's
+// resolvePublicBaseUrl (which still re-exports it for its existing call
+// sites) so this base-resolution logic lives in `config/` beside every
+// other env-derived base URL, and mirrors config/preview.ts's
+// previewBaseUrl idiom exactly: read fresh at call time (not frozen at
+// module-import time, so a test's env override always takes effect),
+// empty/whitespace-only treated as unset, trailing slashes stripped.
+// Configured public base URL override — production behind a reverse
+// proxy/CDN, where the request's own Host/proto may not be the
+// public-facing one. Unset (or blank) means "derive from the request"
+// (see resolvePublicBaseUrl below).
+export function configuredPublicUrl() {
+    const raw = process.env.VELORA_PUBLIC_URL;
+    if (!raw) {
+        return null;
+    }
+    const trimmed = raw.trim();
+    if (!trimmed) {
+        return null;
+    }
+    return trimmed.replace(/\/+$/, "");
+}
+// S186c Task 3, mandate 1: the PUBLIC surface (REST /api/v1/media* and
+// GraphQL) is consumed cross-origin by design — a headless frontend's own
+// server fetches `downloadUrl` directly, so a path-relative URL there
+// resolves against the wrong origin.
+//
+// Base resolution: VELORA_PUBLIC_URL when the operator has set one;
+// otherwise derived from THIS request's protocol + `request.host` — NOT
+// `request.hostname`, which strips the port in Fastify 5 (H2 fix: a
+// non-default-port deployment, e.g. the blog starter's default
+// http://localhost:3000, was getting handed back
+// http://localhost/media/... with the port silently dropped).
+// `request.host`/`request.protocol` both honor trustProxyFromEnv() the
+// same way every other host-derived value in this app does (they read
+// X-Forwarded-Host/-Proto once trustProxy is configured). Never cached —
+// re-derived per request, since two requests can legitimately arrive with
+// different hosts (multiple domains pointed at one instance).
+export function resolvePublicBaseUrl(request) {
+    const configured = configuredPublicUrl();
+    if (configured) {
+        return configured;
+    }
+    return `${request.protocol}://${request.host}`;
+}

package/dist/db/core-migrations/steps.js

@@ -1,3 +1,43 @@
+// Shared probe for every additive step below. NEVER probe by running a
+// statement that's expected to fail on a pre-column database and catching
+// the error — `applyMigrations` (packages/db-adapter) wraps each step's
+// up() in a single BEGIN/COMMIT. On postgresql, one failed statement
+// (`SELECT <missing column>`) leaves that transaction in error state
+// 25P02 ("current transaction is aborted, commands ignored until end of
+// transaction block"); every statement issued afterwards on the SAME
+// transaction — including the ALTER meant to fix things — fails too, and
+// the whole step throws. A pre-column postgres database can then never
+// get the column added: the boot gate refuses the site forever. MySQL and
+// SQLite don't poison the transaction this way, but postgres is Tier 1
+// and this idiom is banned everywhere for consistency — no step body may
+// contain a try/catch around a statement expected to fail.
+//
+// Instead, ask the schema catalog directly — a query that ALWAYS
+// succeeds, column present or not:
+//   - mysql: information_schema.columns, scoped to the current database.
+//   - sqlite: the pragma_table_info() table-valued function.
+//   - postgresql: not used by this helper — see the comment on each
+//     postgres branch below, `ADD COLUMN IF NOT EXISTS` makes the probe
+//     unnecessary there and this helper is never called with "postgresql".
+async function columnExists(tx, dialect, table, column) {
+    if (dialect === "postgresql") {
+        // ADD COLUMN IF NOT EXISTS makes probing unnecessary on postgres —
+        // no step should ever call this helper with "postgresql".
+        throw new Error("columnExists: postgresql steps use ADD COLUMN IF NOT EXISTS instead of probing");
+    }
+    if (dialect === "sqlite") {
+        const row = await tx.queryOne({
+            sql: "SELECT COUNT(*) AS n FROM pragma_table_info(?) WHERE name = ?",
+            params: [table, column],
+        });
+        return Number(row?.n ?? 0) > 0;
+    }
+    const row = await tx.queryOne({
+        sql: "SELECT COUNT(*) AS n FROM information_schema.columns WHERE table_schema = DATABASE() AND table_name = ? AND column_name = ?",
+        params: [table, column],
+    });
+    return Number(row?.n ?? 0) > 0;
+}
 // The Prisma-owned schema's upgrade ledger. 0001 is a pure baseline: it
 // marks "the 0.10.0-release db-push shape" and carries no SQL. Every schema
 // change that ships AFTER that release becomes its own numbered step here —
@@ -26,27 +66,66 @@ const coreBaseline = {
 // demo box after S182 shipped) already has the column, and this step must
 // run harmlessly against it too. Rather than branch on "has 0001 already
 // run without this column" (which the ledger can't tell apart from "db
-// push already included it"), probe directly — try a SELECT of the column
-// and only ALTER if that probe fails. The probe is dialect-free (the same
-// SELECT works identically against all three), so only the ALTER itself
-// needs the per-dialect branch below.
+// push already included it"), check the schema catalog first via the
+// shared columnExists() helper and only ALTER if it's missing — see that
+// helper's comment for why this can never be a try/catch-of-a-failing-
+// probe (it poisons the whole step's transaction on postgres). Postgres
+// skips the check entirely: `ADD COLUMN IF NOT EXISTS` is natively
+// idempotent and transaction-safe, so there's nothing to probe for.
 function apiKeyScopeStep(dialect) {
     return {
         id: "0002_api_key_scope",
         name: "api_keys.scope column (S182)",
         up: async (tx) => {
-            try {
-                await tx.query({ sql: "SELECT scope FROM api_keys LIMIT 1" });
+            if (dialect === "postgresql") {
+                await tx.execute({
+                    sql: "ALTER TABLE api_keys ADD COLUMN IF NOT EXISTS scope TEXT NOT NULL DEFAULT 'read'",
+                });
+                return;
+            }
+            if (await columnExists(tx, dialect, "api_keys", "scope")) {
                 return; // column already present — nothing to do
             }
-            catch {
-                // column missing — pre-S182 database, fall through and add it
+            const alter = dialect === "mysql"
+                ? "ALTER TABLE api_keys ADD COLUMN scope VARCHAR(191) NOT NULL DEFAULT 'read'"
+                : "ALTER TABLE api_keys ADD COLUMN scope TEXT NOT NULL DEFAULT 'read'";
+            await tx.execute({ sql: alter });
+        },
+        // No-op, same as the baseline: additive steps never need to undo
+        // anything (house pattern — this ledger only ever moves forward).
+        down: async () => { },
+    };
+}
+// media_files.visibility (S186c §2): `TEXT NOT NULL DEFAULT 'public'` on
+// postgresql/sqlite, `VARCHAR(191) NOT NULL DEFAULT 'public'` on mysql —
+// matching schema.prisma's `visibility String @default("public")`, which
+// Prisma maps to VARCHAR(191) on mysql by its own default (same reasoning
+// as 0002_api_key_scope above: no `@db.VarChar` override in either
+// schema.prisma or .prisma-variant-mysql.schema.prisma).
+//
+// Same columnExists()-then-ALTER idiom as 0002 above (see its comment,
+// and columnExists' own comment, for why a try/catch-of-a-failing-probe
+// is banned): a post-S186c database (fresh db-push, or any deployment
+// that boots after this ships) already has the column, and up() must run
+// harmlessly against it too. Postgres again skips the check — ADD COLUMN
+// IF NOT EXISTS is already idempotent and transaction-safe.
+function mediaVisibilityStep(dialect) {
+    return {
+        id: "0003_media_visibility",
+        name: "media_files.visibility column (S186c)",
+        up: async (tx) => {
+            if (dialect === "postgresql") {
+                await tx.execute({
+                    sql: "ALTER TABLE media_files ADD COLUMN IF NOT EXISTS visibility TEXT NOT NULL DEFAULT 'public'",
+                });
+                return;
+            }
+            if (await columnExists(tx, dialect, "media_files", "visibility")) {
+                return; // column already present — nothing to do
             }
-            const alter = dialect === "postgresql"
-                ? "ALTER TABLE api_keys ADD COLUMN IF NOT EXISTS scope TEXT NOT NULL DEFAULT 'read'"
-                : dialect === "mysql"
-                    ? "ALTER TABLE api_keys ADD COLUMN scope VARCHAR(191) NOT NULL DEFAULT 'read'"
-                    : "ALTER TABLE api_keys ADD COLUMN scope TEXT NOT NULL DEFAULT 'read'";
+            const alter = dialect === "mysql"
+                ? "ALTER TABLE media_files ADD COLUMN visibility VARCHAR(191) NOT NULL DEFAULT 'public'"
+                : "ALTER TABLE media_files ADD COLUMN visibility TEXT NOT NULL DEFAULT 'public'";
             await tx.execute({ sql: alter });
         },
         // No-op, same as the baseline: additive steps never need to undo
@@ -54,13 +133,13 @@ function apiKeyScopeStep(dialect) {
         down: async () => { },
     };
 }
-// A factory, not a plain array: 0002's up() needs to know which dialect
-// it's running against (TransactionContext carries no dialect field, only
+// A factory, not a plain array: 0002/0003's up() need to know which dialect
+// they're running against (TransactionContext carries no dialect field, only
 // DatabaseAdapter does), so the registry is built per-dialect at the call
 // site instead of threading dialect through the shared Migration type.
 // CORE_MIGRATION_IDS below stays dialect-independent — ids never vary by
 // dialect — so it's fine to read off of any one dialect's build.
 export function buildCoreMigrations(dialect) {
-    return [coreBaseline, apiKeyScopeStep(dialect)];
+    return [coreBaseline, apiKeyScopeStep(dialect), mediaVisibilityStep(dialect)];
 }
 export const CORE_MIGRATION_IDS = buildCoreMigrations("sqlite").map((m) => m.id);

package/dist/docs-bundle/pagefind/pagefind-entry.json

@@ -1 +1 @@
-{"version":"1.5.2","languages":{"en":{"hash":"en_1e94abd852","wasm":"en","page_count":11}},"include_characters":["_","‿","⁀","⁔","︳","︴","﹍","﹎","﹏","＿"]}
+{"version":"1.5.2","languages":{"en":{"hash":"en_57d2f8922f","wasm":"en","page_count":11}},"include_characters":["_","‿","⁀","⁔","︳","︴","﹍","﹎","﹏","＿"]}