\n \n
\n\n ${demoLoginActive ? `\n \n ` : ''}\n \n \n `\n}","import { renderAlert } from '../alert.template'\n\nexport interface RegisterPageData {\n error?: string\n}\n\nexport function renderRegisterPage(data: RegisterPageData): string {\n return `\n \n \n \n \n \n \n
\n\n \n \n \n
\n Welcome Back
\nSign in to your account to continue
\n\n
\n \n \n ${data.error ? `\n \n \n Sign In\n \n \n\n \n
\n\n \n ${renderAlert({ type: 'error', message: data.error })}
` : ''}\n ${data.message ? `${renderAlert({ type: 'success', message: data.message })}
` : ''}\n\n \n \n\n \n \n \n \n
\n\n \n \n \n \n
\n\n \n \n
\n \n Don't have an account?\n Create one here\n
\n\n \n v${data.version || '0.1.0'}\n \n
\n \n \n
\n \n \n `\n}","/**\n * Auth Validation Service\n *\n * Provides validation schemas for authentication operations\n */\n\nimport { z } from 'zod'\nimport type { D1Database } from '@cloudflare/workers-types'\n\n// In-memory cache for admin existence check (lazy initialization pattern)\nlet adminExistsCache: boolean | null = null\n\nexport interface AuthSettings {\n enablePasswordLogin?: boolean\n enableOAuthLogin?: boolean\n requireEmailVerification?: boolean\n // eslint-disable-next-line @typescript-eslint/no-explicit-any\n [key: string]: any\n}\n\n/**\n * Check if user registration is enabled in the auth plugin settings\n * @param db - D1 database instance\n * @returns true if registration is enabled, false if disabled\n */\nexport async function isRegistrationEnabled(db: D1Database): Promise\n
\n\n \n \n \n
\n SonicJS AI
\nCreate your account and get started
\n\n
\n \n \n ${data.error ? `\n \n \n Create Account\n \n \n\n \n
\n ${renderAlert({ type: 'error', message: data.error })}
` : ''}\n\n \n \n
\n\n \n \n \n \n
\n \n \n \n
\n \n \n \n
\n\n \n \n \n \n
\n\n \n \n \n \n
\n\n \n \n
\n\n \n \n Already have an account?\n Sign in here\n
\n\n Registration is currently disabled. Please contact an administrator.\n
\n `)\n }\n }\n\n const formData = await c.req.formData()\n\n // Extract form data\n const requestData = {\n email: formData.get('email') as string,\n password: formData.get('password') as string,\n username: formData.get('username') as string,\n firstName: formData.get('firstName') as string,\n lastName: formData.get('lastName') as string,\n }\n\n // Normalize email to lowercase\n const normalizedEmail = requestData.email?.toLowerCase()\n requestData.email = normalizedEmail\n\n // Build and validate using dynamic schema\n const validationSchema = await authValidationService.buildRegistrationSchema(db)\n const validation = await validationSchema.safeParseAsync(requestData)\n\n if (!validation.success) {\n return c.html(html`\n \n ${validation.error.issues.map((err: { message: string }) => err.message).join(', ')}\n
\n `)\n }\n\n const validatedData: RegistrationData = validation.data\n\n // Extract fields with defaults for optional ones\n // const email = validatedData.email\n const password = validatedData.password\n const username = validatedData.username || authValidationService.generateDefaultValue('username', validatedData)\n const firstName = validatedData.firstName || authValidationService.generateDefaultValue('firstName', validatedData)\n const lastName = validatedData.lastName || authValidationService.generateDefaultValue('lastName', validatedData)\n \n // Check if user already exists\n const existingUser = await db.prepare('SELECT id FROM users WHERE email = ? OR username = ?')\n .bind(normalizedEmail, username)\n .first()\n \n if (existingUser) {\n return c.html(html`\n \n User with this email or username already exists\n
\n `)\n }\n \n // Hash password\n const passwordHash = await AuthManager.hashPassword(password)\n\n // Determine role: first user gets admin, others get viewer\n const role = isFirstUser ? 'admin' : 'viewer'\n\n // Create user\n const userId = crypto.randomUUID()\n const now = new Date()\n\n await db.prepare(`\n INSERT INTO users (id, email, username, first_name, last_name, password_hash, role, is_active, created_at, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n `).bind(\n userId,\n normalizedEmail,\n username,\n firstName,\n lastName,\n passwordHash,\n role,\n 1, // is_active\n now.getTime(),\n now.getTime()\n ).run()\n\n // Generate JWT token\n const token = await AuthManager.generateToken(userId, normalizedEmail, role)\n\n // Set HTTP-only cookie\n setCookie(c, 'auth_token', token, {\n httpOnly: true,\n secure: false, // Set to true in production with HTTPS\n sameSite: 'Strict',\n maxAge: 60 * 60 * 24 // 24 hours\n })\n\n // Redirect based on role\n const redirectUrl = role === 'admin' ? '/admin/dashboard' : '/admin/dashboard'\n\n return c.html(html`\n \n Account created successfully! Redirecting...\n \n
\n `)\n } catch (error) {\n console.error('Registration error:', error)\n return c.html(html`\n \n Registration failed. Please try again.\n
\n `)\n }\n})\n\n// Form-based login handler (for HTML forms)\nauthRoutes.post('/login/form', async (c) => {\n try {\n const formData = await c.req.formData()\n const email = formData.get('email') as string\n const password = formData.get('password') as string\n\n // Normalize email to lowercase\n const normalizedEmail = email.toLowerCase()\n\n // Validate the data\n const validation = loginSchema.safeParse({ email: normalizedEmail, password })\n\n if (!validation.success) {\n return c.html(html`\n \n ${validation.error.issues.map((err: { message: string }) => err.message).join(', ')}\n
\n `)\n }\n\n const db = c.env.DB\n \n // Find user\n const user = await db.prepare('SELECT * FROM users WHERE email = ? AND is_active = 1')\n .bind(normalizedEmail)\n .first() as any\n \n if (!user) {\n return c.html(html`\n \n Invalid email or password\n
\n `)\n }\n \n // Verify password\n const isValidPassword = await AuthManager.verifyPassword(password, user.password_hash)\n if (!isValidPassword) {\n return c.html(html`\n \n Invalid email or password\n
\n `)\n }\n \n // Generate JWT token\n const token = await AuthManager.generateToken(user.id, user.email, user.role)\n \n // Set HTTP-only cookie\n setCookie(c, 'auth_token', token, {\n httpOnly: true,\n secure: false, // Set to true in production with HTTPS\n sameSite: 'Strict',\n maxAge: 60 * 60 * 24 // 24 hours\n })\n \n // Update last login\n await db.prepare('UPDATE users SET last_login_at = ? WHERE id = ?')\n .bind(new Date().getTime(), user.id)\n .run()\n \n return c.html(html`\n \n
\n `)\n } catch (error) {\n console.error('Login error:', error)\n return c.html(html`\n \n
\n \n \n
\n \n \n
\n Login successful! Redirecting to admin dashboard...
\n\n Login failed. Please try again.\n
\n `)\n }\n})\n\n// Test seeding endpoint (only for development/testing)\nauthRoutes.post('/seed-admin', async (c) => {\n try {\n const db = c.env.DB\n \n // First ensure the users table exists\n await db.prepare(`\n CREATE TABLE IF NOT EXISTS users (\n id TEXT PRIMARY KEY,\n email TEXT NOT NULL UNIQUE,\n username TEXT NOT NULL UNIQUE,\n first_name TEXT NOT NULL,\n last_name TEXT NOT NULL,\n password_hash TEXT,\n role TEXT NOT NULL DEFAULT 'viewer',\n avatar TEXT,\n is_active INTEGER NOT NULL DEFAULT 1,\n last_login_at INTEGER,\n created_at INTEGER NOT NULL,\n updated_at INTEGER NOT NULL\n )\n `).run()\n \n // Check if admin user already exists\n const existingAdmin = await db.prepare('SELECT id FROM users WHERE email = ? OR username = ?')\n .bind('admin@sonicjs.com', 'admin')\n .first()\n\n if (existingAdmin) {\n // Update the password to ensure it's correct for testing\n const passwordHash = await AuthManager.hashPassword('sonicjs!')\n await db.prepare('UPDATE users SET password_hash = ?, updated_at = ? WHERE id = ?')\n .bind(passwordHash, Date.now(), existingAdmin.id)\n .run()\n\n return c.json({\n message: 'Admin user already exists (password updated)',\n user: {\n id: existingAdmin.id,\n email: 'admin@sonicjs.com',\n username: 'admin',\n role: 'admin'\n }\n })\n }\n\n // Hash password\n const passwordHash = await AuthManager.hashPassword('sonicjs!')\n \n // Create admin user\n const userId = 'admin-user-id'\n const now = Date.now()\n const adminEmail = 'admin@sonicjs.com'.toLowerCase()\n \n await db.prepare(`\n INSERT INTO users (id, email, username, first_name, last_name, password_hash, role, is_active, created_at, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n `).bind(\n userId,\n adminEmail,\n 'admin',\n 'Admin',\n 'User',\n passwordHash,\n 'admin',\n 1, // is_active\n now,\n now\n ).run()\n \n return c.json({ \n message: 'Admin user created successfully',\n user: {\n id: userId,\n email: adminEmail,\n username: 'admin',\n role: 'admin'\n },\n passwordHash: passwordHash // For debugging\n })\n } catch (error) {\n console.error('Seed admin error:', error)\n return c.json({ error: 'Failed to create admin user', details: error instanceof Error ? error.message : String(error) }, 500)\n }\n})\n\n\n// Accept invitation page\nauthRoutes.get('/accept-invitation', async (c) => {\n try {\n const token = c.req.query('token')\n \n if (!token) {\n return c.html(`\n \n Invalid Invitation
\nThe invitation link is invalid or has expired.
\n Go to Login\n \n \n `)\n }\n\n const db = c.env.DB\n \n // Check if invitation token is valid\n const userStmt = db.prepare(`\n SELECT id, email, first_name, last_name, role, invited_at\n FROM users \n WHERE invitation_token = ? AND is_active = 0\n `)\n const invitedUser = await userStmt.bind(token).first() as any\n\n if (!invitedUser) {\n return c.html(`\n \nInvalid Invitation
\nThe invitation link is invalid or has expired.
\n Go to Login\n \n \n `)\n }\n\n // Check if invitation is expired (7 days)\n const invitationAge = Date.now() - invitedUser.invited_at\n const maxAge = 7 * 24 * 60 * 60 * 1000 // 7 days\n \n if (invitationAge > maxAge) {\n return c.html(`\n \nInvitation Expired
\nThis invitation has expired. Please contact your administrator for a new invitation.
\n Go to Login\n \n \n `)\n }\n\n // Show invitation acceptance form\n return c.html(`\n \n \n \n \n \n\n
\n \n \n `)\n\n } catch (error) {\n console.error('Accept invitation page error:', error)\n return c.html(`\n \n \n
\n \n
\n\n \n \n \n
\n Accept Invitation
\nComplete your account setup
\n\n You've been invited as ${invitedUser.first_name} ${invitedUser.last_name}
\n ${invitedUser.email}
\n ${invitedUser.role}\n
Error
\nAn error occurred while processing your invitation.
\n Go to Login\n \n \n `)\n }\n})\n\n// Process invitation acceptance\nauthRoutes.post('/accept-invitation', async (c) => {\n try {\n const formData = await c.req.formData()\n const token = formData.get('token')?.toString()\n const username = formData.get('username')?.toString()?.trim()\n const password = formData.get('password')?.toString()\n const confirmPassword = formData.get('confirm_password')?.toString()\n\n if (!token || !username || !password || !confirmPassword) {\n return c.json({ error: 'All fields are required' }, 400)\n }\n\n if (password !== confirmPassword) {\n return c.json({ error: 'Passwords do not match' }, 400)\n }\n\n if (password.length < 8) {\n return c.json({ error: 'Password must be at least 8 characters long' }, 400)\n }\n\n const db = c.env.DB\n\n // Check if invitation token is valid\n const userStmt = db.prepare(`\n SELECT id, email, first_name, last_name, role, invited_at\n FROM users \n WHERE invitation_token = ? AND is_active = 0\n `)\n const invitedUser = await userStmt.bind(token).first() as any\n\n if (!invitedUser) {\n return c.json({ error: 'Invalid or expired invitation' }, 400)\n }\n\n // Check if invitation is expired (7 days)\n const invitationAge = Date.now() - invitedUser.invited_at\n const maxAge = 7 * 24 * 60 * 60 * 1000 // 7 days\n \n if (invitationAge > maxAge) {\n return c.json({ error: 'Invitation has expired' }, 400)\n }\n\n // Check if username is available\n const existingUsernameStmt = db.prepare(`\n SELECT id FROM users WHERE username = ? AND id != ?\n `)\n const existingUsername = await existingUsernameStmt.bind(username, invitedUser.id).first()\n\n if (existingUsername) {\n return c.json({ error: 'Username is already taken' }, 400)\n }\n\n // Hash password\n const passwordHash = await AuthManager.hashPassword(password)\n\n // Activate user account\n const updateStmt = db.prepare(`\n UPDATE users SET \n username = ?,\n password_hash = ?,\n is_active = 1,\n email_verified = 1,\n invitation_token = NULL,\n accepted_invitation_at = ?,\n updated_at = ?\n WHERE id = ?\n `)\n\n await updateStmt.bind(\n username,\n passwordHash,\n Date.now(),\n Date.now(),\n invitedUser.id\n ).run()\n\n // Generate JWT token for auto-login\n const authToken = await AuthManager.generateToken(invitedUser.id, invitedUser.email, invitedUser.role)\n \n // Set HTTP-only cookie\n setCookie(c, 'auth_token', authToken, {\n httpOnly: true,\n secure: true,\n sameSite: 'Strict',\n maxAge: 60 * 60 * 24 // 24 hours\n })\n\n // Log the activity (TODO: implement activity logging)\n // Activity logging is deferred until utils/log-activity is implemented\n\n // Redirect to admin dashboard\n return c.redirect('/admin/dashboard?welcome=true')\n\n } catch (error) {\n console.error('Accept invitation error:', error)\n return c.json({ error: 'Failed to accept invitation' }, 500)\n }\n})\n\n// Request password reset\nauthRoutes.post('/request-password-reset', async (c) => {\n try {\n const formData = await c.req.formData()\n const email = formData.get('email')?.toString()?.trim()?.toLowerCase()\n\n if (!email) {\n return c.json({ error: 'Email is required' }, 400)\n }\n\n // Validate email format\n const emailRegex = /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/\n if (!emailRegex.test(email)) {\n return c.json({ error: 'Please enter a valid email address' }, 400)\n }\n\n const db = c.env.DB\n\n // Check if user exists and is active\n const userStmt = db.prepare(`\n SELECT id, email, first_name, last_name FROM users \n WHERE email = ? AND is_active = 1\n `)\n const user = await userStmt.bind(email).first() as any\n\n // Always return success to prevent email enumeration\n if (!user) {\n return c.json({\n success: true,\n message: 'If an account with this email exists, a password reset link has been sent.'\n })\n }\n\n // Generate password reset token (expires in 1 hour)\n const resetToken = crypto.randomUUID()\n const resetExpires = Date.now() + (60 * 60 * 1000) // 1 hour\n\n // Update user with reset token\n const updateStmt = db.prepare(`\n UPDATE users SET \n password_reset_token = ?,\n password_reset_expires = ?,\n updated_at = ?\n WHERE id = ?\n `)\n\n await updateStmt.bind(\n resetToken,\n resetExpires,\n Date.now(),\n user.id\n ).run()\n\n // Log the activity (TODO: implement activity logging)\n // Activity logging is deferred until utils/log-activity is implemented\n\n // In a real implementation, you would send an email here\n // For now, we'll return the reset link for development\n const resetLink = `${c.req.header('origin') || 'http://localhost:8787'}/auth/reset-password?token=${resetToken}`\n\n return c.json({\n success: true,\n message: 'If an account with this email exists, a password reset link has been sent.',\n reset_link: resetLink // In production, this would be sent via email\n })\n\n } catch (error) {\n console.error('Password reset request error:', error)\n return c.json({ error: 'Failed to process password reset request' }, 500)\n }\n})\n\n// Show password reset form\nauthRoutes.get('/reset-password', async (c) => {\n try {\n const token = c.req.query('token')\n \n if (!token) {\n return c.html(`\n \nInvalid Reset Link
\nThe password reset link is invalid or has expired.
\n Go to Login\n \n \n `)\n }\n\n const db = c.env.DB\n \n // Check if reset token is valid and not expired\n const userStmt = db.prepare(`\n SELECT id, email, first_name, last_name, password_reset_expires\n FROM users \n WHERE password_reset_token = ? AND is_active = 1\n `)\n const user = await userStmt.bind(token).first() as any\n\n if (!user) {\n return c.html(`\n \nInvalid Reset Link
\nThe password reset link is invalid or has already been used.
\n Go to Login\n \n \n `)\n }\n\n // Check if token is expired\n if (Date.now() > user.password_reset_expires) {\n return c.html(`\n \nReset Link Expired
\nThe password reset link has expired. Please request a new one.
\n Go to Login\n \n \n `)\n }\n\n // Show password reset form\n return c.html(`\n \n \n \n \n \n\n
\n \n \n `)\n\n } catch (error) {\n console.error('Password reset page error:', error)\n return c.html(`\n \n \n
\n \n
\n\n \n\n \n \n
\n Reset Password
\nChoose a new password for your account
\n\n Reset password for ${user.first_name} ${user.last_name}
\n ${user.email}\n
\n \n Back to Login\n \n
\n Error
\nAn error occurred while processing your password reset.
\n Go to Login\n \n \n `)\n }\n})\n\n// Process password reset\nauthRoutes.post('/reset-password', async (c) => {\n try {\n const formData = await c.req.formData()\n const token = formData.get('token')?.toString()\n const password = formData.get('password')?.toString()\n const confirmPassword = formData.get('confirm_password')?.toString()\n\n if (!token || !password || !confirmPassword) {\n return c.json({ error: 'All fields are required' }, 400)\n }\n\n if (password !== confirmPassword) {\n return c.json({ error: 'Passwords do not match' }, 400)\n }\n\n if (password.length < 8) {\n return c.json({ error: 'Password must be at least 8 characters long' }, 400)\n }\n\n const db = c.env.DB\n\n // Check if reset token is valid and not expired\n const userStmt = db.prepare(`\n SELECT id, email, password_hash, password_reset_expires\n FROM users\n WHERE password_reset_token = ? AND is_active = 1\n `)\n const user = await userStmt.bind(token).first() as any\n\n if (!user) {\n return c.json({ error: 'Invalid or expired reset token' }, 400)\n }\n\n // Check if token is expired\n if (Date.now() > user.password_reset_expires) {\n return c.json({ error: 'Reset token has expired' }, 400)\n }\n\n // Hash new password\n const newPasswordHash = await AuthManager.hashPassword(password)\n\n // Store old password in history (skip if table doesn't exist)\n try {\n const historyStmt = db.prepare(`\n INSERT INTO password_history (id, user_id, password_hash, created_at)\n VALUES (?, ?, ?, ?)\n `)\n await historyStmt.bind(\n crypto.randomUUID(),\n user.id,\n user.password_hash,\n Date.now()\n ).run()\n } catch (historyError) {\n // Password history table may not exist yet\n console.warn('Could not store password history:', historyError)\n }\n\n // Update user password and clear reset token\n const updateStmt = db.prepare(`\n UPDATE users SET\n password_hash = ?,\n password_reset_token = NULL,\n password_reset_expires = NULL,\n updated_at = ?\n WHERE id = ?\n `)\n\n await updateStmt.bind(\n newPasswordHash,\n Date.now(),\n user.id\n ).run()\n\n // Log the activity (TODO: implement activity logging)\n // Activity logging is deferred until utils/log-activity is implemented\n\n // Redirect to login with success message\n return c.redirect('/auth/login?message=Password reset successfully. Please log in with your new password.')\n\n } catch (error) {\n console.error('Password reset error:', error)\n return c.json({ error: 'Failed to reset password' }, 500)\n }\n})\n\nexport default authRoutes\n","/**\n * Test Cleanup Routes\n *\n * Provides endpoints to clean up test data after e2e tests\n * WARNING: These endpoints should only be available in development/test environments\n */\n\nimport { Hono } from 'hono'\nimport type { Context } from 'hono'\nimport type { D1Database } from '@cloudflare/workers-types'\n\nconst app = new Hono()\n\n/**\n * Clean up all test data (collections, content, users except admin)\n * POST /test-cleanup\n */\napp.post('/test-cleanup', async (c: Context) => {\n const db = c.env.DB as D1Database\n\n // Only allow in development/test environments\n if (c.env.ENVIRONMENT === 'production') {\n return c.json({ error: 'Cleanup endpoint not available in production' }, 403)\n }\n\n try {\n let deletedCount = 0\n\n // Use pattern-based deletes to avoid SQL variable limits\n // This approach uses subqueries instead of building large IN lists\n\n // Step 1: Delete child data for test content (by pattern)\n await db.prepare(`\n DELETE FROM content_versions\n WHERE content_id IN (\n SELECT id FROM content\n WHERE title LIKE 'Test %' OR title LIKE '%E2E%' OR title LIKE '%Playwright%' OR title LIKE '%Sample%'\n )\n `).run()\n\n await db.prepare(`\n DELETE FROM workflow_history\n WHERE content_id IN (\n SELECT id FROM content\n WHERE title LIKE 'Test %' OR title LIKE '%E2E%' OR title LIKE '%Playwright%' OR title LIKE '%Sample%'\n )\n `).run()\n\n // Note: content_data table may not exist in all schemas\n try {\n await db.prepare(`\n DELETE FROM content_data\n WHERE content_id IN (\n SELECT id FROM content\n WHERE title LIKE 'Test %' OR title LIKE '%E2E%' OR title LIKE '%Playwright%' OR title LIKE '%Sample%'\n )\n `).run()\n } catch (e) {\n // Table doesn't exist, skip\n }\n\n // Step 2: Delete test content by pattern\n const contentResult = await db.prepare(`\n DELETE FROM content\n WHERE title LIKE 'Test %' OR title LIKE '%E2E%' OR title LIKE '%Playwright%' OR title LIKE '%Sample%'\n `).run()\n deletedCount += contentResult.meta?.changes || 0\n\n // Step 3: Delete child data for test users\n await db.prepare(`\n DELETE FROM api_tokens\n WHERE user_id IN (\n SELECT id FROM users\n WHERE email != 'admin@sonicjs.com' AND (email LIKE '%test%' OR email LIKE '%example.com%')\n )\n `).run()\n\n await db.prepare(`\n DELETE FROM media\n WHERE uploaded_by IN (\n SELECT id FROM users\n WHERE email != 'admin@sonicjs.com' AND (email LIKE '%test%' OR email LIKE '%example.com%')\n )\n `).run()\n\n // Step 4: Delete test users\n const usersResult = await db.prepare(`\n DELETE FROM users\n WHERE email != 'admin@sonicjs.com' AND (email LIKE '%test%' OR email LIKE '%example.com%')\n `).run()\n deletedCount += usersResult.meta?.changes || 0\n\n // Step 5: Delete child data for test collections\n try {\n await db.prepare(`\n DELETE FROM collection_fields\n WHERE collection_id IN (\n SELECT id FROM collections\n WHERE name LIKE 'test_%' OR name IN ('blog_posts', 'test_collection', 'products', 'articles')\n )\n `).run()\n } catch (e) {\n // Table doesn't exist\n }\n\n // Delete remaining content from test collections\n await db.prepare(`\n DELETE FROM content\n WHERE collection_id IN (\n SELECT id FROM collections\n WHERE name LIKE 'test_%' OR name IN ('blog_posts', 'test_collection', 'products', 'articles')\n )\n `).run()\n\n // Step 6: Delete test collections\n const collectionsResult = await db.prepare(`\n DELETE FROM collections\n WHERE name LIKE 'test_%' OR name IN ('blog_posts', 'test_collection', 'products', 'articles')\n `).run()\n deletedCount += collectionsResult.meta?.changes || 0\n\n // Step 7: Clean up orphaned data (skip if tables don't exist)\n try {\n await db.prepare(`\n DELETE FROM content_data WHERE content_id NOT IN (SELECT id FROM content)\n `).run()\n } catch (e) {\n // Table doesn't exist\n }\n\n try {\n await db.prepare(`\n DELETE FROM collection_fields WHERE collection_id NOT IN (SELECT id FROM collections)\n `).run()\n } catch (e) {\n // Table doesn't exist\n }\n\n try {\n await db.prepare(`\n DELETE FROM content_versions WHERE content_id NOT IN (SELECT id FROM content)\n `).run()\n } catch (e) {\n // Table doesn't exist\n }\n\n try {\n await db.prepare(`\n DELETE FROM workflow_history WHERE content_id NOT IN (SELECT id FROM content)\n `).run()\n } catch (e) {\n // Table doesn't exist\n }\n\n // Step 8: Delete old activity logs (keep only last 100)\n await db.prepare(`\n DELETE FROM activity_logs\n WHERE id NOT IN (\n SELECT id FROM activity_logs\n ORDER BY created_at DESC\n LIMIT 100\n )\n `).run()\n\n return c.json({\n success: true,\n deletedCount,\n message: 'Test data cleaned up successfully'\n })\n } catch (error) {\n console.error('Test cleanup error:', error)\n return c.json({\n success: false,\n error: error instanceof Error ? error.message : 'Unknown error'\n }, 500)\n }\n})\n\n/**\n * Clean up test users only\n * POST /test-cleanup/users\n */\napp.post('/test-cleanup/users', async (c: Context) => {\n const db = c.env.DB as D1Database\n\n // Only allow in development/test environments\n if (c.env.ENVIRONMENT === 'production') {\n return c.json({ error: 'Cleanup endpoint not available in production' }, 403)\n }\n\n try {\n // Delete test users (preserve admin)\n const result = await db.prepare(`\n DELETE FROM users\n WHERE email != 'admin@sonicjs.com'\n AND (\n email LIKE '%test%'\n OR email LIKE '%example.com%'\n OR first_name = 'Test'\n )\n `).run()\n\n return c.json({\n success: true,\n deletedCount: result.meta?.changes || 0,\n message: 'Test users cleaned up successfully'\n })\n } catch (error) {\n console.error('User cleanup error:', error)\n return c.json({\n success: false,\n error: error instanceof Error ? error.message : 'Unknown error'\n }, 500)\n }\n})\n\n/**\n * Clean up test collections only\n * POST /test-cleanup/collections\n */\napp.post('/test-cleanup/collections', async (c: Context) => {\n const db = c.env.DB as D1Database\n\n // Only allow in development/test environments\n if (c.env.ENVIRONMENT === 'production') {\n return c.json({ error: 'Cleanup endpoint not available in production' }, 403)\n }\n\n try {\n let deletedCount = 0\n\n // Get test collection IDs first\n const collections = await db.prepare(`\n SELECT id FROM collections\n WHERE name LIKE 'test_%'\n OR name IN ('blog_posts', 'test_collection', 'products', 'articles')\n `).all()\n\n if (collections.results && collections.results.length > 0) {\n const collectionIds = collections.results.map((c: any) => c.id)\n\n // Delete associated fields\n for (const id of collectionIds) {\n await db.prepare('DELETE FROM collection_fields WHERE collection_id = ?').bind(id).run()\n }\n\n // Delete associated content\n for (const id of collectionIds) {\n await db.prepare('DELETE FROM content WHERE collection_id = ?').bind(id).run()\n }\n\n // Delete the collections\n const result = await db.prepare(`\n DELETE FROM collections\n WHERE id IN (${collectionIds.map(() => '?').join(',')})\n `).bind(...collectionIds).run()\n\n deletedCount = result.meta?.changes || 0\n }\n\n return c.json({\n success: true,\n deletedCount,\n message: 'Test collections cleaned up successfully'\n })\n } catch (error) {\n console.error('Collection cleanup error:', error)\n return c.json({\n success: false,\n error: error instanceof Error ? error.message : 'Unknown error'\n }, 500)\n }\n})\n\n/**\n * Clean up test content only\n * POST /test-cleanup/content\n */\napp.post('/test-cleanup/content', async (c: Context) => {\n const db = c.env.DB as D1Database\n\n // Only allow in development/test environments\n if (c.env.ENVIRONMENT === 'production') {\n return c.json({ error: 'Cleanup endpoint not available in production' }, 403)\n }\n\n try {\n // Delete test content\n const result = await db.prepare(`\n DELETE FROM content\n WHERE title LIKE 'Test %'\n OR title LIKE '%E2E%'\n OR title LIKE '%Playwright%'\n OR title LIKE '%Sample%'\n `).run()\n\n // Clean up orphaned content_data\n await db.prepare(`\n DELETE FROM content_data\n WHERE content_id NOT IN (SELECT id FROM content)\n `).run()\n\n return c.json({\n success: true,\n deletedCount: result.meta?.changes || 0,\n message: 'Test content cleaned up successfully'\n })\n } catch (error) {\n console.error('Content cleanup error:', error)\n return c.json({\n success: false,\n error: error instanceof Error ? error.message : 'Unknown error'\n }, 500)\n }\n})\n\nexport default app\n","import { renderAdminLayoutCatalyst, AdminLayoutCatalystData } from '../layouts/admin-layout-catalyst.template'\nimport { renderAlert } from '../alert.template'\nimport { renderDynamicField, renderFieldGroup, FieldDefinition } from '../components/dynamic-field.template'\nimport { renderConfirmationDialog, getConfirmationDialogScript } from '../confirmation-dialog.template'\nimport { getTinyMCEScript, getTinyMCEInitScript } from '../../plugins/available/tinymce-plugin'\nimport { getQuillCDN, getQuillInitScript } from '../../plugins/core-plugins/quill-editor'\nimport { getMDXEditorScripts, getMDXEditorInitScript } from '../../plugins/available/easy-mdx'\n\nexport interface Collection {\n id: string\n name: string\n display_name: string\n description?: string\n schema: any\n}\n\nexport interface ContentFormData {\n id?: string\n title?: string\n slug?: string\n data?: any\n status?: string\n scheduled_publish_at?: number\n scheduled_unpublish_at?: number\n review_status?: string\n meta_title?: string\n meta_description?: string\n collection: Collection\n fields: FieldDefinition[]\n isEdit?: boolean\n error?: string\n success?: string\n validationErrors?: Record\n \n ${escapeHtml(value)}\n `\n break\n\n case 'richtext':\n fieldHTML = `\n \n
\n `\n break\n\n case 'mdxeditor':\n // MDXEditor Rich Text Editor - renders same container as richtext\n // The MDXEditor plugin initialization script will handle the editor initialization\n fieldHTML = `\n \n
\n\n \n \n
\n ${isEdit ? 'Edit Content' : 'New Content'}
\n\n ${data.collection.description || `Manage ${data.collection.display_name.toLowerCase()} content`}\n
\n\n \n \n Back to Content\n \n
\n \n \n
\n\n \n ${renderConfirmationDialog({\n id: 'duplicate-content-confirm',\n title: 'Duplicate Content',\n message: 'Create a copy of this content?',\n confirmText: 'Duplicate',\n cancelText: 'Cancel',\n iconColor: 'blue',\n confirmClass: 'bg-blue-500 hover:bg-blue-400',\n onConfirm: 'performDuplicateContent()'\n })}\n\n ${renderConfirmationDialog({\n id: 'delete-content-confirm',\n title: 'Delete Content',\n message: 'Are you sure you want to delete this content? This action cannot be undone.',\n confirmText: 'Delete',\n cancelText: 'Cancel',\n iconColor: 'red',\n confirmClass: 'bg-red-500 hover:bg-red-400',\n onConfirm: `performDeleteContent('${data.id}')`\n })}\n\n ${getConfirmationDialogScript()}\n\n ${data.tinymceEnabled ? getTinyMCEScript(data.tinymceSettings?.apiKey) : ''}\n\n ${data.quillEnabled ? getQuillCDN(data.quillSettings?.version) : ''}\n\n ${data.quillEnabled ? getQuillInitScript() : ''}\n\n ${data.mdxeditorEnabled ? getMDXEditorScripts() : ''}\n\n \n \n `\n\n const layoutData: AdminLayoutCatalystData = {\n title: title,\n pageTitle: 'Content Management',\n currentPath: '/admin/content',\n user: data.user,\n content: pageContent,\n version: data.version\n }\n\n return renderAdminLayoutCatalyst(layoutData)\n}\n","export interface DragSortableOptions {\n itemSelector?: string\n handleSelector?: string\n onUpdate?: () => void\n}\n\nexport function getDragSortableScript(): string {\n return `\n \n `;\n}\n","import { getDragSortableScript } from './drag-sortable.template'\n\n/**\n * Returns shared readFieldValue function used by both blocks and structured fields.\n * Uses a window flag to ensure it's only initialized once.\n */\nfunction getReadFieldValueScript(): string {\n return `\n \n `\n}\n\nexport interface FieldDefinition {\n id: string\n field_name: string\n field_type: string\n field_label: string\n field_options: any // JSON options\n field_order: number\n is_required: boolean\n is_searchable: boolean\n}\n\nexport interface FieldRenderOptions {\n value?: any\n errors?: string[]\n disabled?: boolean\n className?: string\n pluginStatuses?: {\n quillEnabled?: boolean\n mdxeditorEnabled?: boolean\n tinymceEnabled?: boolean\n }\n collectionId?: string\n contentId?: string\n}\n\nexport function renderDynamicField(field: FieldDefinition, options: FieldRenderOptions = {}): string {\n const { value = '', errors = [], disabled = false, className = '', pluginStatuses = {}, collectionId = '', contentId = '' } = options\n const opts = field.field_options || {}\n const required = field.is_required ? 'required' : ''\n const baseClasses = `w-full rounded-lg px-3 py-2 text-sm text-zinc-950 dark:text-white bg-white dark:bg-zinc-800 shadow-sm ring-1 ring-inset ring-zinc-950/10 dark:ring-white/10 placeholder:text-zinc-400 dark:placeholder:text-zinc-500 focus:outline-none focus:ring-2 focus:ring-zinc-950 dark:focus:ring-white transition-shadow ${className}`\n const errorClasses = errors.length > 0 ? 'ring-pink-600 dark:ring-pink-500 focus:ring-pink-600 dark:focus:ring-pink-500' : ''\n\n const fieldId = `field-${field.field_name}`\n const fieldName = field.field_name\n\n // Check if this is a plugin-based field type and if the plugin is inactive\n // If so, fall back to textarea with a warning\n let fallbackToTextarea = false\n let fallbackWarning = ''\n\n if (field.field_type === 'quill' && !pluginStatuses.quillEnabled) {\n fallbackToTextarea = true\n fallbackWarning = '⚠️ Quill Editor plugin is inactive. Using textarea fallback.'\n } else if (field.field_type === 'mdxeditor' && !pluginStatuses.mdxeditorEnabled) {\n fallbackToTextarea = true\n fallbackWarning = '⚠️ MDXEditor plugin is inactive. Using textarea fallback.'\n } else if (field.field_type === 'tinymce' && !pluginStatuses.tinymceEnabled) {\n fallbackToTextarea = true\n fallbackWarning = '⚠️ TinyMCE plugin is inactive. Using textarea fallback.'\n }\n\n // If falling back to textarea, render it with a warning\n if (fallbackToTextarea) {\n return `\n \n
\n\n \n \n
\n \n \n
\n \n
\n ${data.collection.display_name}
\n${isEdit ? 'Update your content' : 'Create new content'}
\n\n
\n \n ${data.error ? renderAlert({ type: 'error', message: data.error, dismissible: true }) : ''}\n ${data.success ? renderAlert({ type: 'success', message: data.success, dismissible: true }) : ''}\n
\n\n \n \n
\n \n \n \n ${isEdit ? `` : ''}\n ${data.referrerParams ? `` : ''}\n \n \n ${renderFieldGroup('Basic Information', coreFieldsHTML)}\n \n \n ${contentFields.length > 0 ? renderFieldGroup('Content Details', contentFieldsHTML) : ''}\n \n \n ${metaFields.length > 0 ? renderFieldGroup('SEO & Metadata', metaFieldsHTML, true) : ''}\n \n \n \n
\n\n \n \n \n
\n\n \n \n
\n\n \n ${isEdit ? `\n Publishing
\n\n ${data.workflowEnabled ? `\n \n\n \n
\n\n \n \n \n \n \n \n \n \n \n
\n \n \n \n
\n\n \n Leave empty to publish immediately
\n\n \n \n
\n ` : `\n \n Automatically unpublish at this time
\n\n \n
\n `}\n \n \n \n \n \n \n
\n Enable Workflow plugin for advanced status management
\n\n
\n ` : ''}\n\n \n Content Info
\n\n- \n
- Created \n
- ${data.data?.created_at ? new Date(data.data.created_at).toLocaleDateString() : 'Unknown'} \n
- Last Modified \n
- ${data.data?.updated_at ? new Date(data.data.updated_at).toLocaleDateString() : 'Unknown'} \n
- Author \n
- ${data.data?.author || 'Unknown'} \n
- Published \n
- ${new Date(data.data.published_at).toLocaleDateString()} \n
\n
\n \n
\n \n
\n ${data.data?.published_at ? `\n \n
\n ` : ''}\n \n \n \n View Version History\n \n
\n \n
\n Quick Actions
\n\n\n \n \n Preview Content\n \n\n \n \n Duplicate Content\n \n\n ${isEdit ? `\n \n \n Delete Content\n \n ` : ''}\n
\n \n \n \n Cancel\n \n\n
\n \n \n \n ${isEdit ? 'Update' : 'Save'}\n \n\n ${data.user?.role !== 'viewer' ? `\n \n \n ${isEdit ? 'Update' : 'Save'} & Publish\n \n ` : ''}\n
\n \n ${fallbackWarning ? `${escapeHtml(value)}\n
\n `\n }\n\n let fieldHTML = ''\n\n switch (field.field_type) {\n case 'text':\n let patternHelp = ''\n let autoSlugScript = ''\n \n if (opts.pattern) {\n if (opts.pattern === '^[a-z0-9-]+$' || opts.pattern === '^[a-zA-Z0-9_-]+$') {\n patternHelp = '${fallbackWarning}
` : ''}\n Use letters, numbers, underscores, and hyphens only
'\n\n // Add auto-slug generation for slug fields\n if (fieldName === 'slug') {\n patternHelp += ''\n autoSlugScript = `\n \n `\n }\n } else {\n patternHelp = 'Must match required format
'\n }\n }\n \n fieldHTML = `\n \n ${patternHelp}\n ${autoSlugScript}\n ${opts.pattern ? `\n \n ` : ''}\n `\n break\n\n case 'textarea':\n fieldHTML = `\n\n ${escapeHtml(value)}\n
\n `\n break\n\n case 'quill':\n // Quill WYSIWYG Editor\n fieldHTML = `\n \n \n ${value}
\n\n \n \n ${escapeHtml(value)}\n
\n `\n break\n\n case 'number':\n fieldHTML = `\n \n `\n break\n \n case 'boolean':\n const checked = value === true || value === 'true' || value === '1' ? 'checked' : ''\n fieldHTML = `\n \n \n \n
\n \n `\n break\n \n case 'date':\n fieldHTML = `\n \n \n \n \n
\n \n \n `\n break\n\n case 'select':\n const selectOptions = opts.options || []\n const multiple = opts.multiple ? 'multiple' : ''\n const selectedValues = Array.isArray(value) ? value : [value]\n\n fieldHTML = `\n Use lowercase letters, numbers, and hyphens only
\n\n \n
\n ` : ''}\n `\n break\n\n case 'reference':\n let referenceCollections: string[] = []\n if (Array.isArray(opts.collection)) {\n referenceCollections = opts.collection.filter(Boolean)\n } else if (typeof opts.collection === 'string' && opts.collection) {\n referenceCollections = [opts.collection]\n }\n const referenceCollectionsAttr = referenceCollections.join(',')\n const hasReferenceCollection = referenceCollections.length > 0\n const hasReferenceValue = Boolean(value)\n fieldHTML = `\n \n \n
\n \n `\n break\n\n case 'media':\n // Check if multiple selection is enabled\n const isMultiple = opts.multiple === true\n const mediaValues = isMultiple && value ? (Array.isArray(value) ? value : String(value).split(',').filter(Boolean)) : []\n const singleValue = !isMultiple ? value : ''\n\n // Helper to detect if URL is a video\n const isVideoUrl = (url: string) => {\n const videoExtensions = ['.mp4', '.webm', '.ogg', '.mov', '.avi']\n return videoExtensions.some(ext => url.toLowerCase().endsWith(ext))\n }\n\n // Helper to render media element\n const renderMediaPreview = (url: string, alt: string, classes: string) => {\n if (isVideoUrl(url)) {\n return ``\n }\n return `\n \n ${hasReferenceCollection ? (hasReferenceValue ? 'Loading selection...' : 'No reference selected.') : 'Reference collection not configured.'}\n
\n \n \n Select reference\n \n \n Remove\n \n
\n \n \n\n ${isMultiple ? `\n
\n `\n break\n\n case 'object':\n // Structured object field (like SEO with nested properties)\n return renderStructuredObjectField(field, options, baseClasses, errorClasses)\n\n case 'array':\n // Check if this is a blocks field (has discriminator/blocks config) or a regular array\n const itemsConfig = opts.items && typeof opts.items === 'object' ? opts.items : {}\n if (itemsConfig.blocks && typeof itemsConfig.blocks === 'object') {\n // Blocks field with discriminated union\n return renderBlocksField(field, options, baseClasses, errorClasses)\n }\n // Regular structured array field\n return renderStructuredArrayField(field, options, baseClasses, errorClasses)\n\n default:\n fieldHTML = `\n \n ${mediaValues.map((url: string, idx: number) => `\n
\n ` : `\n \n ${renderMediaPreview(url, `Media ${idx + 1}`, 'w-full h-24 object-cover rounded-lg border border-white/20')}\n \n \n \n
\n `).join('')}\n \n ${singleValue ? renderMediaPreview(singleValue, 'Selected media', 'w-32 h-32 object-cover rounded-lg border border-white/20') : ''}\n
\n `}\n\n \n \n \n ${isMultiple ? 'Select Media (Multiple)' : 'Select Media'}\n \n ${(isMultiple ? mediaValues.length > 0 : singleValue) ? `\n \n ${isMultiple ? 'Clear All' : 'Remove'}\n \n ` : ''}\n
\n \n ${showLabel ? `\n \n ` : ''}\n ${fieldHTML}\n ${errors.length > 0 ? `\n
\n `\n}\n\nexport function renderFieldGroup(title: string, fields: string[], collapsible: boolean = false): string {\n const groupId = title.toLowerCase().replace(/\\s+/g, '-')\n\n return `\n \n ${errors.map(error => `
\n ` : ''}\n ${opts.helpText ? `\n ${escapeHtml(error)}
`).join('')}\n \n ${escapeHtml(opts.helpText)}\n
\n ` : ''}\n \n
\n `\n}\n\nfunction renderBlocksField(\n field: FieldDefinition,\n options: FieldRenderOptions,\n baseClasses: string,\n errorClasses: string\n): string {\n const { value = [], pluginStatuses = {} } = options\n const opts = field.field_options || {}\n const itemsConfig = opts.items && typeof opts.items === 'object' ? opts.items : {}\n const blocks = normalizeBlockDefinitions(itemsConfig.blocks)\n const discriminator =\n typeof itemsConfig.discriminator === 'string' && itemsConfig.discriminator\n ? itemsConfig.discriminator\n : 'blockType'\n const blockValues = normalizeBlocksValue(value, discriminator)\n const fieldId = `field-${field.field_name}`\n const fieldName = field.field_name\n const emptyState =\n blockValues.length === 0\n ? `\n \n
\n \n ${escapeHtml(title)}\n ${collapsible ? `\n \n ` : ''}\n
\n\n ${fields.join('')}\n
\n \n No blocks yet. Add your first block to get started.\n
\n `\n : ''\n\n const blockOptions = blocks\n .map((block) => ``)\n .join('')\n\n const blockItems = blockValues\n .map((blockValue, index) =>\n renderBlockItem(field, blockValue, blocks, discriminator, index, pluginStatuses)\n )\n .join('')\n\n const templates = blocks\n .map((block) => renderBlockTemplate(field, block, discriminator, pluginStatuses))\n .join('')\n\n return `\n \n \n Add Block\n \n
\n\n \n \n \n ${blockOptions}\n \n
\n \n ${blockItems || emptyState}\n
\n\n ${templates}\n \n ${getDragSortableScript()}\n ${getBlocksFieldScript()}\n `\n}\n\nfunction renderStructuredObjectField(\n field: FieldDefinition,\n options: FieldRenderOptions,\n baseClasses: string,\n errorClasses: string\n): string {\n const { value = {}, pluginStatuses = {} } = options\n const opts = field.field_options || {}\n const properties = opts.properties && typeof opts.properties === 'object' ? opts.properties : {}\n const fieldId = `field-${field.field_name}`\n const fieldName = field.field_name\n const objectValue = normalizeStructuredObjectValue(value)\n\n const subfields = Object.entries(properties)\n .map(([propertyName, propertyConfig]) =>\n renderStructuredSubfield(\n field,\n propertyName,\n propertyConfig,\n objectValue,\n pluginStatuses,\n field.field_name\n )\n )\n .join('')\n\n return `\n \n \n
\n ${getStructuredFieldScript()}\n `\n}\n\nfunction renderStructuredArrayField(\n field: FieldDefinition,\n options: FieldRenderOptions,\n baseClasses: string,\n errorClasses: string\n): string {\n const { value = [], pluginStatuses = {} } = options\n const opts = field.field_options || {}\n const itemsConfig = opts.items && typeof opts.items === 'object' ? opts.items : {}\n const fieldId = `field-${field.field_name}`\n const fieldName = field.field_name\n const arrayValue = normalizeStructuredArrayValue(value)\n\n const items = arrayValue\n .map((itemValue, index) =>\n renderStructuredArrayItem(field, itemsConfig, String(index), itemValue, pluginStatuses)\n )\n .join('')\n\n const emptyState =\n arrayValue.length === 0\n ? `\n \n ${subfields}\n
\n \n No items yet. Add the first item to get started.\n
\n `\n : ''\n\n return `\n \n \n\n
\n ${getDragSortableScript()}\n ${getStructuredFieldScript()}\n `\n}\n\nfunction renderStructuredArrayItem(\n field: FieldDefinition,\n itemConfig: Record\n \n Add item\n \n
\n\n \n ${escapeHtml(opts.itemLabel || 'Items')}\n
\n \n ${items || emptyState}\n
\n\n \n ${renderStructuredArrayItem(field, itemsConfig, '__INDEX__', {}, pluginStatuses)}\n \n \n
\n `\n}\n\nfunction renderStructuredItemFields(\n field: FieldDefinition,\n itemConfig: Record\n
\n \n
\n \n \n
\n \n Item \n
\n \n \n \n \n
\n \n ${itemFields}\n
\n \n ${renderDynamicField(fieldDefinition, { value: fieldValue, pluginStatuses })}\n
\n `\n}\n\nfunction renderStructuredSubfield(\n field: FieldDefinition,\n propertyName: string,\n propertyConfig: any,\n objectValue: Record\n ${renderDynamicField(fieldDefinition, { value: fieldValue, pluginStatuses })}\n
\n `\n}\n\nfunction normalizeStructuredObjectValue(value: any): Record\n Unknown block type: ${escapeHtml(String(blockType || 'unknown'))}. This block will be preserved as-is.\n
\n `\n }\n\n const data =\n blockValue && typeof blockValue === 'object'\n ? Object.fromEntries(Object.entries(blockValue).filter(([key]) => key !== discriminator))\n : {}\n\n return renderBlockCard(field, blockDefinition, discriminator, String(index), data, pluginStatuses)\n}\n\nfunction renderBlockCard(\n field: FieldDefinition,\n block: { name: string; label: string; description?: string; properties: Record\n Nested blocks are not supported yet for \"${escapeHtml(fieldName)}\".\n
\n `\n }\n\n const normalizedField = normalizeBlockField(fieldConfig, fieldName)\n const fieldValue = data?.[fieldName] ?? normalizedField.defaultValue ?? ''\n const fieldDefinition: FieldDefinition = {\n id: `block-${field.field_name}-${index}-${fieldName}`,\n field_name: `block-${field.field_name}-${index}-${fieldName}`,\n field_type: normalizedField.type,\n field_label: normalizedField.label,\n field_options: normalizedField.options,\n field_order: 0,\n is_required: normalizedField.required,\n is_searchable: false,\n }\n\n return `\n \n ${renderDynamicField(fieldDefinition, { value: fieldValue, pluginStatuses })}\n
\n `\n })\n .join('')\n\n return `\n \n
\n `\n}\n\nfunction normalizeBlockField(fieldConfig: any, fieldName: string) {\n const type = fieldConfig?.type || 'text'\n const label = fieldConfig?.title || fieldName\n const required = fieldConfig?.required === true\n const options = { ...fieldConfig }\n\n if (type === 'select' && Array.isArray(fieldConfig?.enum)) {\n options.options = fieldConfig.enum.map((value: string, index: number) => ({\n value,\n label: fieldConfig.enumLabels?.[index] || value,\n }))\n }\n\n return {\n type,\n label,\n required,\n defaultValue: fieldConfig?.default,\n options,\n }\n}\n\nfunction getStructuredFieldScript(): string {\n return `\n ${getReadFieldValueScript()}\n \n `\n}\n\nfunction getBlocksFieldScript(): string {\n return `\n ${getReadFieldValueScript()}\n \n `\n}\n\nfunction escapeHtml(text: string): string {\n if (typeof text !== 'string') return String(text || '')\n return text.replace(/[&<>\"']/g, (char) => ({\n '&': '&',\n '<': '<',\n '>': '>',\n '\"': '"',\n \"'\": '''\n }[char] || char))\n}","import { Plugin } from '../../../types/plugin'\nimport { PluginBuilder } from '../../sdk/plugin-builder'\n\n/**\n * TinyMCE Rich Text Editor Plugin\n *\n * Provides WYSIWYG editing capabilities for richtext fields.\n * When active, this plugin injects the TinyMCE editor into all richtext field types.\n * When inactive, richtext fields fall back to plain textareas.\n */\n\nconst builder = PluginBuilder.create({\n name: 'tinymce-plugin',\n version: '1.0.0',\n description: 'Powerful WYSIWYG rich text editor for content creation'\n})\n\nbuilder.metadata({\n author: {\n name: 'SonicJS Team',\n email: 'team@sonicjs.com'\n },\n license: 'MIT',\n compatibility: '^2.0.0'\n})\n\nbuilder.lifecycle({\n activate: async () => {\n console.info('✅ TinyMCE plugin activated')\n },\n deactivate: async () => {\n console.info('❌ TinyMCE plugin deactivated')\n }\n})\n\nconst tinymcePlugin = builder.build() as Plugin\n\nexport default tinymcePlugin\n\n/**\n * Get TinyMCE CDN script tag\n * @param apiKey - Optional TinyMCE API key (defaults to 'no-api-key')\n * @returns HTML script tag for TinyMCE CDN\n */\nexport function getTinyMCEScript(apiKey: string = 'no-api-key'): string {\n return ``\n}\n\n/**\n * Get TinyMCE initialization script\n * @param config - Optional configuration object\n * @returns JavaScript initialization code\n */\nexport function getTinyMCEInitScript(config?: {\n skin?: string\n defaultHeight?: number\n defaultToolbar?: string\n}): string {\n const skin = config?.skin || 'oxide-dark'\n const contentCss = skin.includes('dark') ? 'dark' : 'default'\n const defaultHeight = config?.defaultHeight || 300\n\n return `\n // Initialize TinyMCE for all richtext fields\n function initializeTinyMCE() {\n if (typeof tinymce !== 'undefined') {\n // Find all textareas that need TinyMCE\n document.querySelectorAll('.richtext-container textarea').forEach((textarea) => {\n // Skip if already initialized\n if (tinymce.get(textarea.id)) {\n return;\n }\n\n // Get configuration from data attributes\n const container = textarea.closest('.richtext-container');\n const height = container?.dataset.height || ${defaultHeight};\n const toolbar = container?.dataset.toolbar || 'full';\n\n tinymce.init({\n selector: '#' + textarea.id,\n skin: '${skin}',\n content_css: '${contentCss}',\n height: parseInt(height),\n menubar: false,\n plugins: [\n 'advlist', 'autolink', 'lists', 'link', 'image', 'charmap', 'preview',\n 'anchor', 'searchreplace', 'visualblocks', 'code', 'fullscreen',\n 'insertdatetime', 'media', 'table', 'help', 'wordcount'\n ],\n toolbar: toolbar === 'simple'\n ? 'bold italic underline | bullist numlist | link'\n : toolbar === 'minimal'\n ? 'bold italic | link'\n : 'undo redo | blocks | bold italic forecolor | alignleft aligncenter alignright alignjustify | bullist numlist outdent indent | removeformat | help',\n content_style: 'body { font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, Oxygen, Ubuntu, Cantarell, sans-serif; font-size: 14px }'\n });\n });\n }\n }\n\n // Initialize on DOMContentLoaded\n if (document.readyState === 'loading') {\n document.addEventListener('DOMContentLoaded', initializeTinyMCE);\n } else {\n // DOM already loaded, initialize immediately\n initializeTinyMCE();\n }\n\n // Also reinitialize after HTMX swaps (for dynamic content)\n document.addEventListener('htmx:afterSwap', function(event) {\n // Give the DOM a moment to settle\n setTimeout(initializeTinyMCE, 100);\n });\n `\n}\n\n/**\n * Check if TinyMCE plugin is active\n * @param pluginService - Plugin service instance\n * @returns Promise\n
\n \n
\n \n \n
\n \n
\n \n ${escapeHtml(block.label)}\n \n
\n ${block.description ? `${escapeHtml(block.description)}
` : ''}\n\n \n \n \n
\n \n ${blockFields}\n
\n \n \n ${value}
\n\n \n \n
\n `\n },\n {\n key: 'modelName',\n label: 'Model',\n sortable: true,\n sortType: 'string',\n className: 'text-sm text-zinc-500 dark:text-zinc-400'\n },\n {\n key: 'statusBadge',\n label: 'Status',\n sortable: true,\n sortType: 'string',\n render: (value) => value\n },\n {\n key: 'authorName',\n label: 'Author',\n sortable: true,\n sortType: 'string',\n className: 'text-sm text-zinc-500 dark:text-zinc-400'\n },\n {\n key: 'formattedDate',\n label: 'Updated',\n sortable: true,\n sortType: 'date',\n className: 'text-sm text-zinc-500 dark:text-zinc-400'\n },\n {\n key: 'actions',\n label: 'Actions',\n sortable: false,\n className: 'text-sm font-medium',\n render: (value, row) => `\n \n
\n \n ${row.title}\n
\n ${row.slug}
\n \n \n \n \n \n \n \n \n \n \n
\n `\n }\n ]\n\n const tableData: TableData\n \n
\n
\n \n \n
\n Content Management
\nManage and organize your content items
\n\n \n \n New Content\n \n
\n \n \n \n\n
\n
\n
\n
\n \n
\n