@caretcms/core 0.1.0

package/dist/runtime/rewrite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rewrite.js","sourceRoot":"","sources":["../../src/runtime/rewrite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AA0BlD,mBAAmB;AAEnB,iDAAiD;AACjD,4FAA4F;AAC5F,EAAE;AACF,mFAAmF;AACnF,0EAA0E;AAC1E,4EAA4E;AAC5E,gFAAgF;AAChF,0EAA0E;AAC1E,qEAAqE;AACrE,MAAM,qBAAqB,GACzB,kLAAkL,CAAC;AAErL,+EAA+E;AAC/E,uFAAuF;AACvF,MAAM,mBAAmB,GACvB,sDAAsD,CAAC;AAEzD,MAAM,WAAW,GAAG,+BAA+B,CAAC;AAEpD,MAAM,aAAa,GAAG,qCAAqC,CAAC;AAC5D,MAAM,YAAY,GAAG,sBAAsB,CAAC;AAE5C,6EAA6E;AAC7E,mEAAmE;AACnE,MAAM,UAAU,GAAG,uBAAuB,CAAC;AAE3C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,MAAM;IACN,MAAM;IACN,IAAI;IACJ,KAAK;IACL,OAAO;IACP,IAAI;IACJ,KAAK;IACL,OAAO;IACP,MAAM;IACN,MAAM;IACN,OAAO;IACP,QAAQ;IACR,OAAO;IACP,KAAK;CACN,CAAC,CAAC;AAEH,SAAS,UAAU,CAAC,OAAe;IACjC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAmB,EAAE,OAAe;IACpD,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YACjC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACnB,OAAO;QACT,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAY,EACZ,UAAkB,EAClB,KAA8C,EAC9C,KAAa;IAEb,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC;IAC/B,IAAI,KAA6B,CAAC;IAElC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC3C,IAAI,KAAK,CAAC,KAAK,IAAI,UAAU;YAAE,MAAM;QAErC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,aAAa,GAAG,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QAEvF,IAAI,SAAS,EAAE,CAAC;YACd,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC/B,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC;YAC/B,SAAS;QACX,CAAC;QAED,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;gBACf,OAAO;gBACP,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC;aAC3B,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC;IACjC,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAmB;IAC3C,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC5C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CACrB,UAAkB,EAClB,KAAwB;IAExB,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,0CAA0C;QAC1C,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAC3E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4BAA4B;AAE5B,SAAS,cAAc,CAAC,OAAe;IACrC,yDAAyD;IACzD,OAAO,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC;AAED,sBAAsB;AAEtB,KAAK,UAAU,gBAAgB,CAC7B,OAAuB,EACvB,IAAiB;IAEjB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC7C,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC3C,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACrD,IAAI,KAAK;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CACrB,IAA6B,EAC7B,IAAY;IAEZ,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,OAAO,GAAY,IAAI,CAAC;IAC5B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAChE,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAClD,OAAO,GAAI,OAAmC,CAAC,GAAG,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC;AAED,uBAAuB;AAEvB,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAY,EACZ,OAAuB;IAEvB,gEAAgE;IAChE,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpC,MAAM,UAAU,GAAG,CACjB,UAAkB,EAClB,KAAa,EACb,OAAe,EACf,KAAc,EACd,KAAwB,EACxB,SAAiB,EACjB,KAAa,EACP,EAAE;QACR,MAAM,QAAQ,GAAG,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ;YAAE,OAAO;QAEtB,SAAS,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;QACxD,QAAQ,CAAC,IAAI,CAAC;YACZ,GAAG,QAAQ;YACX,SAAS;YACT,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,KAAK,GAAG,SAAS,CAAC,MAAM;YACpC,KAAK;YACL,MAAM,EAAE,CAAC,KAAK,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;YAC1C,cAAc,EAAE,CAAC,KAAK,IAAI,cAAc,CAAC,OAAO,CAAC;SAClD,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,6EAA6E;IAC7E,2EAA2E;IAC3E,gFAAgF;IAChF,MAAM,QAAQ,GAAG,CACf,OAAe,EACf,OAAmE,EAC7D,EAAE;QACR,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,EAAE,KAAK,EAAE,EAAkB,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAC5D,IAAI,KAA6B,CAAC;QAClC,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACxC,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;YACxD,OAAO,CAAC,KAAK,EAAE,gBAAgB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC,CAAC;IAEF,gFAAgF;IAChF,QAAQ,CAAC,qBAAqB,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC/C,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,4DAA4D;IAC5D,QAAQ,CAAC,mBAAmB,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC7C,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvC,wBAAwB;IACxB,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,4DAA4D;IAC5D,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC;IAE7E,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;QAC7B,wFAAwF;QACxF,IAAI,OAAO,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,SAAS;QAExD,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,EAAE,EAAE,CAAC;QACxD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,MAAM,WAAW,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9D,IAAI,WAAW,KAAK,SAAS;YAAE,SAAS;QAExC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,6CAA6C;YAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;YACjC,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,QAAQ,EAAE,CAAC;gBACb,qEAAqE;gBACrE,yEAAyE;gBACzE,iEAAiE;gBACjE,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAC9B,QAAQ,CAAC,CAAC,CAAC,EACX,GAAG,EAAE,CAAC,QAAQ,UAAU,CAAC,WAAW,CAAC,GAAG,CACzC,CAAC;gBACF,MAAM;oBACJ,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC;wBACrC,SAAS;wBACT,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,oCAAoC;YACpC,uEAAuE;YACvE,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACtD,MAAM,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAE1D,wEAAwE;YACxE,wEAAwE;YACxE,sEAAsE;YACtE,0CAA0C;YAC1C,IAAI,UAAU,GAAG,CAAC,IAAI,aAAa,IAAI,UAAU,EAAE,CAAC;gBAClD,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;gBACtD,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;gBACrD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM;oBAC7B,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC;oBAC3B,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;gBAC5B,MAAM,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;gBAE3C,MAAM;oBACJ,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC;wBACrC,QAAQ;wBACR,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mBAAmB;AAEnB,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,GAAG;SACP,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,GAAG;SACP,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC"}

package/dist/runtime/routes/_helpers.d.ts

@@ -0,0 +1,17 @@
+import type { StorageAdapter, UploadHandler } from "../../types.js";
+export declare function json(body: Record<string, unknown>, status?: number): Response;
+/**
+ * Lightweight CSRF defense for mutating endpoints.
+ *
+ * Cookies use SameSite=Lax, so a cross-origin top-level POST won't carry the
+ * session — but a same-origin XSS or any future cross-origin fetch with
+ * credentials would. Requiring a custom request header forces a CORS preflight
+ * for any cross-origin caller and blocks form-based submissions outright.
+ *
+ * Returns a 403 response if the header is missing, otherwise null.
+ */
+export declare function enforceCsrfHeader(request: Request): Response | null;
+export declare function getAdapter(): StorageAdapter;
+export declare function getUploadHandler(): UploadHandler;
+export declare function getSessionId(): string | null;
+//# sourceMappingURL=_helpers.d.ts.map

package/dist/runtime/routes/_helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_helpers.d.ts","sourceRoot":"","sources":["../../../src/runtime/routes/_helpers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAMpE,wBAAgB,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,SAAM,GAAG,QAAQ,CAK1E;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG,IAAI,CAWnE;AAED,wBAAgB,UAAU,IAAI,cAAc,CAE3C;AAED,wBAAgB,gBAAgB,IAAI,aAAa,CAEhD;AAED,wBAAgB,YAAY,IAAI,MAAM,GAAG,IAAI,CAE5C"}

package/dist/runtime/routes/_helpers.js

@@ -0,0 +1,38 @@
+import { requireRequestContext } from "../request-context.js";
+const CSRF_HEADER = "x-caret-request";
+const CSRF_HEADER_VALUE = "1";
+export function json(body, status = 200) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { "Content-Type": "application/json; charset=utf-8" },
+    });
+}
+/**
+ * Lightweight CSRF defense for mutating endpoints.
+ *
+ * Cookies use SameSite=Lax, so a cross-origin top-level POST won't carry the
+ * session — but a same-origin XSS or any future cross-origin fetch with
+ * credentials would. Requiring a custom request header forces a CORS preflight
+ * for any cross-origin caller and blocks form-based submissions outright.
+ *
+ * Returns a 403 response if the header is missing, otherwise null.
+ */
+export function enforceCsrfHeader(request) {
+    if (request.headers.get(CSRF_HEADER) !== CSRF_HEADER_VALUE) {
+        return json({
+            error: "Missing required request header",
+            detail: `Send '${CSRF_HEADER}: ${CSRF_HEADER_VALUE}' on mutating CMS requests.`,
+        }, 403);
+    }
+    return null;
+}
+export function getAdapter() {
+    return requireRequestContext().adapter;
+}
+export function getUploadHandler() {
+    return requireRequestContext().uploadHandler;
+}
+export function getSessionId() {
+    return requireRequestContext().sessionId;
+}
+//# sourceMappingURL=_helpers.js.map

package/dist/runtime/routes/_helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_helpers.js","sourceRoot":"","sources":["../../../src/runtime/routes/_helpers.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,MAAM,WAAW,GAAG,iBAAiB,CAAC;AACtC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,MAAM,UAAU,IAAI,CAAC,IAA6B,EAAE,MAAM,GAAG,GAAG;IAC9D,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE;KAC/D,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAgB;IAChD,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,iBAAiB,EAAE,CAAC;QAC3D,OAAO,IAAI,CACT;YACE,KAAK,EAAE,iCAAiC;YACxC,MAAM,EAAE,SAAS,WAAW,KAAK,iBAAiB,6BAA6B;SAChF,EACD,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,qBAAqB,EAAE,CAAC,OAAO,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,qBAAqB,EAAE,CAAC,aAAa,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,qBAAqB,EAAE,CAAC,SAAS,CAAC;AAC3C,CAAC"}

package/dist/runtime/routes/admin-entry.d.ts

@@ -0,0 +1,3 @@
+import type { APIContext } from "astro";
+export declare function GET(context: APIContext): Promise<Response>;
+//# sourceMappingURL=admin-entry.d.ts.map

package/dist/runtime/routes/admin-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-entry.d.ts","sourceRoot":"","sources":["../../../src/runtime/routes/admin-entry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAexC,wBAAsB,GAAG,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CA2KhE"}

package/dist/runtime/routes/admin-entry.js

@@ -0,0 +1,170 @@
+import { isEditorAuthenticated } from "../auth/session.js";
+import { getRuntimeConfig } from "../config.js";
+import { getAdapter } from "./_helpers.js";
+import { escapeHtml, htmlResponse, redirectResponse, renderStudioPage, } from "../views/studio-layout.js";
+function humanize(name) {
+    return name.replace(/[-_]+/g, " ").replace(/\b\w/g, (c) => c.toUpperCase());
+}
+export async function GET(context) {
+    const runtime = getRuntimeConfig();
+    const collection = (context.params.collection ?? "").toString();
+    const id = (context.params.id ?? "").toString();
+    const loginRedirect = `${runtime.mountPath}?redirect=${encodeURIComponent(context.url.pathname)}`;
+    if (!isEditorAuthenticated(context)) {
+        return redirectResponse(loginRedirect);
+    }
+    if (!collection || !id) {
+        return redirectResponse(`${runtime.mountPath}/cms`);
+    }
+    const adapter = getAdapter();
+    const known = await adapter.discoverCollections();
+    if (!known.includes(collection)) {
+        return redirectResponse(`${runtime.mountPath}/cms`);
+    }
+    const label = humanize(collection);
+    const config = {
+        apiBasePath: runtime.apiBasePath,
+        mountPath: runtime.mountPath,
+        collection,
+        id,
+    };
+    const extraStyles = `@import "/__caret/admin-entry.css";
+    .editor-action-bar {
+      display: flex;
+      align-items: center;
+      justify-content: space-between;
+      gap: 1rem;
+      flex-wrap: wrap;
+      margin-bottom: 1.5rem;
+    }
+    .editor-action-bar h2 {
+      font-family: var(--studio-font-heading);
+      font-size: 1.25rem;
+      font-weight: 500;
+      margin: 0;
+      color: var(--studio-text);
+    }
+    .editor-action-bar .meta {
+      font-size: 10px;
+      margin: 0.25rem 0 0;
+      color: var(--studio-text-dim);
+      font-family: var(--studio-font-mono);
+    }
+    .editor-actions {
+      display: flex;
+      align-items: center;
+      gap: 0.75rem;
+    }
+    .modal-backdrop {
+      position: fixed;
+      inset: 0;
+      background: rgba(0, 0, 0, 0.6);
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      z-index: 1000;
+      padding: 1rem;
+    }
+    .modal-backdrop[hidden] { display: none; }
+    .modal-card {
+      width: 100%;
+      max-width: 24rem;
+      background: var(--studio-bg);
+      border: 1px solid var(--studio-border);
+      padding: 1.5rem;
+      text-align: center;
+    }
+    .modal-card .icon-wrap {
+      width: 48px;
+      height: 48px;
+      margin: 0 auto 1rem;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      background: rgba(239, 68, 68, 0.12);
+      border-radius: 50%;
+    }
+    .modal-card h3 { font-size: 0.875rem; font-weight: 600; margin: 0 0 0.5rem; color: var(--studio-text); }
+    .modal-card p { font-size: 0.75rem; color: var(--studio-text-muted); margin: 0 0 1.5rem; }
+    .history-panel {
+      margin-bottom: 1.5rem;
+      border: 1px solid var(--studio-border);
+      background: var(--studio-surface);
+    }
+    .history-panel-header {
+      display: flex;
+      align-items: center;
+      justify-content: space-between;
+      padding: 0.75rem 1rem;
+      border-bottom: 1px solid var(--studio-border);
+    }
+    .history-panel-body { padding: 1rem; }
+  `;
+    const body = `<div class="studio-fade-in" style="max-width:48rem;margin:0 auto;" id="cms-entry-page" data-collection="${escapeHtml(collection)}" data-id="${escapeHtml(id)}">
+    <div id="loading" style="display:flex;justify-content:center;padding:5rem 0;">
+      <div class="studio-spinner" style="width:24px;height:24px;"></div>
+    </div>
+
+    <div id="not-found" hidden style="text-align:center;padding:5rem 0;color:var(--studio-text-dim);">
+      <p>Entry not found.</p>
+      <a href="${escapeHtml(`${runtime.mountPath}/cms/${collection}`)}" style="margin-top:1rem;display:inline-block;font-size:0.75rem;color:var(--studio-accent);text-decoration:underline;">Go back</a>
+    </div>
+
+    <div id="editor" hidden>
+      <div class="editor-action-bar">
+        <div>
+          <h2 id="entry-title">…</h2>
+          <p class="meta">${escapeHtml(collection)} / ${escapeHtml(id)}</p>
+        </div>
+        <div class="editor-actions">
+          <span id="status-msg" hidden style="font-size:0.75rem;"></span>
+          <button id="btn-history" type="button" class="studio-btn-ghost">History</button>
+          <button id="btn-delete" type="button" class="studio-btn-danger">Delete</button>
+          <button id="btn-save" type="button" class="studio-save-clean" disabled style="padding:8px 18px;font-size:12px;font-weight:600;text-transform:uppercase;letter-spacing:0.1em;border:none;border-radius:var(--radius-theme-xs);font-family:var(--studio-font);">Save</button>
+        </div>
+      </div>
+
+      <div id="history-panel" class="history-panel" hidden>
+        <div class="history-panel-header">
+          <span class="studio-label" style="margin:0;">Version History</span>
+          <button id="btn-history-close" type="button" class="studio-btn-ghost">Close</button>
+        </div>
+        <div id="history-list" class="history-panel-body">
+          <p style="font-size:0.75rem;color:var(--studio-text-dim);margin:0;">Loading…</p>
+        </div>
+      </div>
+
+      <div id="fields"></div>
+    </div>
+  </div>
+
+  <div id="delete-dialog" class="modal-backdrop" hidden>
+    <div class="modal-card">
+      <div class="icon-wrap">
+        <svg style="width:24px;height:24px;color:var(--studio-red);" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
+          <path stroke-linecap="round" stroke-linejoin="round" d="M19 7l-.867 12.142A2 2 0 0116.138 21H7.862a2 2 0 01-1.995-1.858L5 7m5 4v6m4-6v6m1-10V4a1 1 0 00-1-1h-4a1 1 0 00-1 1v3M4 7h16"/>
+        </svg>
+      </div>
+      <h3>Delete Entry</h3>
+      <p>Permanently delete <strong id="delete-entry-name" style="color:var(--studio-text);"></strong>? A snapshot will be saved to history for recovery.</p>
+      <div style="display:flex;justify-content:center;gap:0.75rem;">
+        <button id="btn-delete-cancel" type="button" class="studio-btn-ghost">Cancel</button>
+        <button id="btn-delete-confirm" type="button" class="studio-btn-danger" style="background:var(--studio-red);color:white;">Delete</button>
+      </div>
+    </div>
+  </div>
+
+  <script type="application/json" id="caret-entry-config">${JSON.stringify(config).replace(/</g, "\\u003c")}</script>
+  <script src="/__caret/admin-entry.js" defer></script>`;
+    return htmlResponse(renderStudioPage({
+        runtime,
+        title: `Edit ${id}`,
+        breadcrumb: [
+            { label, href: `${runtime.mountPath}/cms/${encodeURIComponent(collection)}` },
+            { label: id },
+        ],
+        body,
+        extraStyles,
+    }));
+}
+//# sourceMappingURL=admin-entry.js.map

package/dist/runtime/routes/admin-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-entry.js","sourceRoot":"","sources":["../../../src/runtime/routes/admin-entry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EACL,UAAU,EACV,YAAY,EACZ,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,2BAA2B,CAAC;AAEnC,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,OAAmB;IAC3C,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChD,MAAM,aAAa,GAAG,GAAG,OAAO,CAAC,SAAS,aAAa,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;IAElG,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO,gBAAgB,CAAC,aAAa,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,CAAC,UAAU,IAAI,CAAC,EAAE,EAAE,CAAC;QACvB,OAAO,gBAAgB,CAAC,GAAG,OAAO,CAAC,SAAS,MAAM,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAClD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,OAAO,gBAAgB,CAAC,GAAG,OAAO,CAAC,SAAS,MAAM,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IAEnC,MAAM,MAAM,GAAG;QACb,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,UAAU;QACV,EAAE;KACH,CAAC;IAEF,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuEnB,CAAC;IAEF,MAAM,IAAI,GAAG,2GAA2G,UAAU,CAAC,UAAU,CAAC,cAAc,UAAU,CAAC,EAAE,CAAC;;;;;;;iBAO3J,UAAU,CAAC,GAAG,OAAO,CAAC,SAAS,QAAQ,UAAU,EAAE,CAAC;;;;;;;4BAOzC,UAAU,CAAC,UAAU,CAAC,MAAM,UAAU,CAAC,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4DAwCV,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;wDACnD,CAAC;IAEvD,OAAO,YAAY,CACjB,gBAAgB,CAAC;QACf,OAAO;QACP,KAAK,EAAE,QAAQ,EAAE,EAAE;QACnB,UAAU,EAAE;YACV,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,SAAS,QAAQ,kBAAkB,CAAC,UAAU,CAAC,EAAE,EAAE;YAC7E,EAAE,KAAK,EAAE,EAAE,EAAE;SACd;QACD,IAAI;QACJ,WAAW;KACZ,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/runtime/routes/admin.d.ts

@@ -0,0 +1,3 @@
+import type { APIContext } from "astro";
+export declare function GET(context: APIContext): Promise<Response>;
+//# sourceMappingURL=admin.d.ts.map

package/dist/runtime/routes/admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../../src/runtime/routes/admin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAuMxC,wBAAsB,GAAG,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CA2BhE"}

package/dist/runtime/routes/admin.js

@@ -0,0 +1,189 @@
+import { hasConfiguredEditorPassword, isEditorAuthenticated, } from "../auth/session.js";
+import { sanitizeRedirect } from "../auth/cookie-utils.js";
+import { getRuntimeConfig } from "../config.js";
+function escapeHtml(value) {
+    return value
+        .replace(/&/g, "&")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;")
+        .replace(/'/g, "&#39;");
+}
+function renderBrandMark(logoUrl) {
+    if (logoUrl) {
+        return `<img src="${escapeHtml(logoUrl)}" alt="" class="studio-login-mark" style="object-fit: contain;" />`;
+    }
+    return `<div class="studio-login-mark" aria-hidden="true">
+    <svg viewBox="0 0 24 24" fill="currentColor">
+      <path d="M12 2L2 9l10 13 10-13L12 2zm0 3.84L18.26 9 12 17.65 5.74 9 12 5.84z"/>
+    </svg>
+  </div>`;
+}
+function renderLogin(opts) {
+    const { hasPassword, apiBasePath, redirectTo, brandName, brandLogo, faviconUrl, themeCssHref, studioCssHref, loginCssHref, } = opts;
+    const safeBrand = escapeHtml(brandName);
+    const safeRedirect = escapeHtml(redirectTo);
+    const statusNote = hasPassword
+        ? "Sign in to manage content."
+        : "Set CARET_EDIT_PASSWORD (or EDIT_PASSWORD) to enable login.";
+    const favicon = faviconUrl
+        ? `<link rel="icon" href="${escapeHtml(faviconUrl)}" />`
+        : "";
+    return `<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width,initial-scale=1" />
+    <title>${safeBrand} — Sign In</title>
+    ${favicon}
+    <link rel="stylesheet" href="${themeCssHref}" />
+    <link rel="stylesheet" href="${studioCssHref}" />
+    <link rel="stylesheet" href="${loginCssHref}" />
+  </head>
+  <body class="studio-login-page">
+    <div class="studio-login-bg"></div>
+    <div class="studio-login-grid"></div>
+    <div class="studio-login-accent-top"></div>
+
+    <div class="studio-login-card">
+      <div class="studio-login-card-glow"></div>
+
+      <div class="studio-login-card-body">
+        <span class="studio-corner studio-corner-h studio-corner-tl-h"></span>
+        <span class="studio-corner studio-corner-v studio-corner-tl-v"></span>
+        <span class="studio-corner studio-corner-h studio-corner-tr-h"></span>
+        <span class="studio-corner studio-corner-v studio-corner-tr-v"></span>
+        <span class="studio-corner studio-corner-h studio-corner-bl-h"></span>
+        <span class="studio-corner studio-corner-v studio-corner-bl-v"></span>
+        <span class="studio-corner studio-corner-h studio-corner-br-h"></span>
+        <span class="studio-corner studio-corner-v studio-corner-br-v"></span>
+
+        <div class="studio-login-header">
+          ${renderBrandMark(brandLogo)}
+          <h1 class="studio-login-title">${safeBrand}</h1>
+          <p class="studio-login-tagline">${escapeHtml(statusNote)}</p>
+        </div>
+
+        <div id="login-error" class="studio-login-error" hidden>
+          <svg fill="none" viewBox="0 0 24 24" stroke="currentColor" stroke-width="2" aria-hidden="true">
+            <path stroke-linecap="round" stroke-linejoin="round" d="M12 9v2m0 4h.01m-6.938 4h13.856c1.54 0 2.502-1.667 1.732-3L13.732 4c-.77-1.333-2.694-1.333-3.464 0L3.34 16c-.77 1.333.192 3 1.732 3z"/>
+          </svg>
+          <span id="login-error-text">Invalid password.</span>
+        </div>
+
+        <form id="login-form" class="studio-login-form" method="POST" action="${escapeHtml(`${apiBasePath}/auth/login`)}">
+          <input type="hidden" name="redirect" value="${safeRedirect}" />
+
+          <div class="studio-login-field">
+            <label for="password">Password</label>
+            <div class="studio-login-input-wrap">
+              <input
+                type="password"
+                id="password"
+                name="password"
+                required
+                autocomplete="current-password"
+                class="studio-login-input"
+                placeholder="Enter editor password"
+                ${hasPassword ? "" : "disabled"}
+              />
+              <svg class="studio-login-input-icon" fill="none" viewBox="0 0 24 24" stroke="currentColor" stroke-width="1.5" aria-hidden="true">
+                <path stroke-linecap="round" stroke-linejoin="round" d="M16.5 10.5V6.75a4.5 4.5 0 10-9 0v3.75m-.75 11.25h10.5a2.25 2.25 0 002.25-2.25v-6.75a2.25 2.25 0 00-2.25-2.25H6.75a2.25 2.25 0 00-2.25 2.25v6.75a2.25 2.25 0 002.25 2.25z"/>
+              </svg>
+            </div>
+          </div>
+
+          <button type="submit" class="studio-login-submit" ${hasPassword ? "" : "disabled"}>
+            <span class="studio-login-submit-content">
+              <span>Sign In</span>
+              <svg class="studio-login-submit-arrow" fill="none" viewBox="0 0 24 24" stroke="currentColor" stroke-width="2" aria-hidden="true">
+                <path stroke-linecap="round" stroke-linejoin="round" d="M14 5l7 7m0 0l-7 7m7-7H3"/>
+              </svg>
+            </span>
+          </button>
+        </form>
+
+        <div class="studio-login-footer">
+          <a href="/">&larr; Back to site</a>
+        </div>
+      </div>
+    </div>
+
+    <script>
+      (function () {
+        var form = document.getElementById('login-form');
+        var error = document.getElementById('login-error');
+        var errorText = document.getElementById('login-error-text');
+        if (!form) return;
+
+        form.addEventListener('submit', function (e) {
+          e.preventDefault();
+          if (error) error.hidden = true;
+
+          var btn = form.querySelector('button[type="submit"]');
+          if (btn) btn.disabled = true;
+
+          var fd = new FormData(form);
+          var headers = { 'Accept': 'application/json', 'x-caret-request': '1' };
+
+          fetch(form.action, {
+            method: 'POST',
+            body: fd,
+            headers: headers,
+            credentials: 'same-origin'
+          })
+            .then(function (res) {
+              return res.json().catch(function () { return { error: 'Login failed' }; })
+                .then(function (data) { return { ok: res.ok, data: data }; });
+            })
+            .then(function (result) {
+              if (result.ok && result.data && result.data.redirect) {
+                window.location.href = result.data.redirect;
+                return;
+              }
+              if (errorText && result.data && result.data.error) {
+                errorText.textContent = result.data.error;
+              }
+              if (error) error.hidden = false;
+              if (btn) btn.disabled = false;
+            })
+            .catch(function () {
+              if (error) error.hidden = false;
+              if (btn) btn.disabled = false;
+            });
+        });
+      })();
+    </script>
+  </body>
+</html>`;
+}
+function html(content, status = 200, setCookie) {
+    const headers = {
+        "Content-Type": "text/html; charset=utf-8",
+    };
+    if (setCookie)
+        headers["Set-Cookie"] = setCookie;
+    return new Response(content, { status, headers });
+}
+export async function GET(context) {
+    const runtime = getRuntimeConfig();
+    const redirectTarget = sanitizeRedirect(context.url.searchParams.get("redirect"), `${runtime.mountPath}/cms`);
+    if (isEditorAuthenticated(context)) {
+        return new Response(null, {
+            status: 302,
+            headers: { Location: redirectTarget },
+        });
+    }
+    return html(renderLogin({
+        hasPassword: hasConfiguredEditorPassword(),
+        apiBasePath: runtime.apiBasePath,
+        redirectTo: redirectTarget,
+        brandName: runtime.brand.name,
+        brandLogo: runtime.brand.logo,
+        faviconUrl: runtime.brand.faviconUrl,
+        themeCssHref: `${runtime.apiBasePath}/theme.css`,
+        studioCssHref: "/__caret/studio.css",
+        loginCssHref: "/__caret/studio-login.css",
+    }));
+}
+//# sourceMappingURL=admin.js.map

package/dist/runtime/routes/admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../../src/runtime/routes/admin.ts"],"names":[],"mappings":"AACA,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,eAAe,CAAC,OAAsB;IAC7C,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,aAAa,UAAU,CAAC,OAAO,CAAC,oEAAoE,CAAC;IAC9G,CAAC;IACD,OAAO;;;;SAIA,CAAC;AACV,CAAC;AAED,SAAS,WAAW,CAAC,IAUpB;IACC,MAAM,EACJ,WAAW,EACX,WAAW,EACX,UAAU,EACV,SAAS,EACT,SAAS,EACT,UAAU,EACV,YAAY,EACZ,aAAa,EACb,YAAY,GACb,GAAG,IAAI,CAAC;IAET,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,YAAY,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,WAAW;QAC5B,CAAC,CAAC,4BAA4B;QAC9B,CAAC,CAAC,6DAA6D,CAAC;IAElE,MAAM,OAAO,GAAG,UAAU;QACxB,CAAC,CAAC,0BAA0B,UAAU,CAAC,UAAU,CAAC,MAAM;QACxD,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO;;;;;aAKI,SAAS;MAChB,OAAO;mCACsB,YAAY;mCACZ,aAAa;mCACb,YAAY;;;;;;;;;;;;;;;;;;;;;YAqBnC,eAAe,CAAC,SAAS,CAAC;2CACK,SAAS;4CACR,UAAU,CAAC,UAAU,CAAC;;;;;;;;;;gFAUc,UAAU,CAAC,GAAG,WAAW,aAAa,CAAC;wDAC/D,YAAY;;;;;;;;;;;;;kBAalD,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU;;;;;;;;8DAQe,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA8DnF,CAAC;AACT,CAAC;AAED,SAAS,IAAI,CAAC,OAAe,EAAE,MAAM,GAAG,GAAG,EAAE,SAAkB;IAC7D,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,0BAA0B;KAC3C,CAAC;IACF,IAAI,SAAS;QAAE,OAAO,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC;IAEjD,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,OAAmB;IAC3C,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,MAAM,cAAc,GAAG,gBAAgB,CACrC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,EACxC,GAAG,OAAO,CAAC,SAAS,MAAM,CAC3B,CAAC;IAEF,IAAI,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;YACxB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE;SACtC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CACT,WAAW,CAAC;QACV,WAAW,EAAE,2BAA2B,EAAE;QAC1C,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,UAAU,EAAE,cAAc;QAC1B,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI;QAC7B,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI;QAC7B,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU;QACpC,YAAY,EAAE,GAAG,OAAO,CAAC,WAAW,YAAY;QAChD,aAAa,EAAE,qBAAqB;QACpC,YAAY,EAAE,2BAA2B;KAC1C,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/runtime/routes/auth-login.d.ts

@@ -0,0 +1,4 @@
+import type { APIContext } from "astro";
+export declare function POST(context: APIContext): Promise<Response>;
+export declare function GET(): Promise<Response>;
+//# sourceMappingURL=auth-login.d.ts.map

package/dist/runtime/routes/auth-login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-login.d.ts","sourceRoot":"","sources":["../../../src/runtime/routes/auth-login.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAiCxC,wBAAsB,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CA2DjE;AAED,wBAAsB,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,CAQ7C"}

package/dist/runtime/routes/auth-login.js

@@ -0,0 +1,71 @@
+import { hasConfiguredEditorPassword, isEditorPasswordValid, issueEditorSessionCookie, } from "../auth/session.js";
+import { sanitizeRedirect } from "../auth/cookie-utils.js";
+import { checkLoginRateLimit, clearLoginAttempts, extractRateLimitKey, recordLoginFailure, } from "../auth/rate-limiter.js";
+import { getRuntimeConfig } from "../config.js";
+function redirect(pathname, setCookie) {
+    const headers = { Location: pathname };
+    if (setCookie)
+        headers["Set-Cookie"] = setCookie;
+    return new Response(null, { status: 302, headers });
+}
+function json(body, status = 200, extraHeaders) {
+    const headers = {
+        "Content-Type": "application/json; charset=utf-8",
+        ...extraHeaders,
+    };
+    return new Response(JSON.stringify(body), { status, headers });
+}
+export async function POST(context) {
+    const runtime = getRuntimeConfig();
+    if (!hasConfiguredEditorPassword()) {
+        return json({ error: "Editor password is not configured." }, 500);
+    }
+    const rateLimitKey = extractRateLimitKey(context.request);
+    const rateLimit = checkLoginRateLimit(rateLimitKey);
+    if (!rateLimit.allowed) {
+        return json({ error: "Too many login attempts. Please wait and try again." }, 429, { "Retry-After": String(rateLimit.retryAfterSeconds) });
+    }
+    const contentType = context.request.headers.get("content-type") ?? "";
+    const accept = context.request.headers.get("accept") ?? "";
+    const isJsonBody = contentType.includes("application/json");
+    const wantsJsonResponse = isJsonBody || accept.includes("application/json");
+    let password = "";
+    let redirectTo = context.url.searchParams.get("redirect");
+    if (isJsonBody) {
+        const body = (await context.request.json().catch(() => null));
+        password = typeof body?.password === "string" ? body.password : "";
+        redirectTo =
+            typeof body?.redirect === "string" ? body.redirect : redirectTo;
+    }
+    else {
+        const formData = await context.request.formData().catch(() => null);
+        password =
+            typeof formData?.get("password") === "string"
+                ? formData?.get("password")
+                : "";
+        redirectTo =
+            typeof formData?.get("redirect") === "string"
+                ? formData?.get("redirect")
+                : redirectTo;
+    }
+    const safeRedirect = sanitizeRedirect(redirectTo, `${runtime.mountPath}/cms`);
+    if (!isEditorPasswordValid(password)) {
+        recordLoginFailure(rateLimitKey);
+        if (wantsJsonResponse)
+            return json({ error: "Invalid password" }, 401);
+        return redirect(`${runtime.mountPath}?error=invalid`);
+    }
+    clearLoginAttempts(rateLimitKey);
+    const cookie = issueEditorSessionCookie("/", context.request);
+    if (wantsJsonResponse) {
+        return json({ ok: true, redirect: safeRedirect }, 200, { "Set-Cookie": cookie });
+    }
+    return redirect(safeRedirect, cookie);
+}
+export async function GET() {
+    return json({
+        error: "Method not allowed",
+        allowedMethods: ["POST"],
+    }, 405);
+}
+//# sourceMappingURL=auth-login.js.map

package/dist/runtime/routes/auth-login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-login.js","sourceRoot":"","sources":["../../../src/runtime/routes/auth-login.ts"],"names":[],"mappings":"AACA,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,SAAS,QAAQ,CAAC,QAAgB,EAAE,SAAkB;IACpD,MAAM,OAAO,GAA2B,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAC/D,IAAI,SAAS;QAAE,OAAO,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC;IACjD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,IAAI,CACX,IAA6B,EAC7B,MAAM,GAAG,GAAG,EACZ,YAAqC;IAErC,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,iCAAiC;QACjD,GAAG,YAAY;KAChB,CAAC;IACF,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,OAAmB;IAC5C,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IAEnC,IAAI,CAAC,2BAA2B,EAAE,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,EAAE,GAAG,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,YAAY,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IACpD,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QACvB,OAAO,IAAI,CACT,EAAE,KAAK,EAAE,qDAAqD,EAAE,EAChE,GAAG,EACH,EAAE,aAAa,EAAE,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,CACvD,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IACtE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC3D,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IAC5D,MAAM,iBAAiB,GAAG,UAAU,IAAI,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IAE5E,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,UAAU,GAAkB,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAEzE,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAEpD,CAAC;QACT,QAAQ,GAAG,OAAO,IAAI,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,UAAU;YACR,OAAO,IAAI,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;IACpE,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACpE,QAAQ;YACN,OAAO,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC,KAAK,QAAQ;gBAC3C,CAAC,CAAE,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAY;gBACvC,CAAC,CAAC,EAAE,CAAC;QACT,UAAU;YACR,OAAO,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC,KAAK,QAAQ;gBAC3C,CAAC,CAAE,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAY;gBACvC,CAAC,CAAC,UAAU,CAAC;IACnB,CAAC;IAED,MAAM,YAAY,GAAG,gBAAgB,CAAC,UAAU,EAAE,GAAG,OAAO,CAAC,SAAS,MAAM,CAAC,CAAC;IAE9E,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,kBAAkB,CAAC,YAAY,CAAC,CAAC;QACjC,IAAI,iBAAiB;YAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;QACvE,OAAO,QAAQ,CAAC,GAAG,OAAO,CAAC,SAAS,gBAAgB,CAAC,CAAC;IACxD,CAAC;IAED,kBAAkB,CAAC,YAAY,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAE9D,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,GAAG;IACvB,OAAO,IAAI,CACT;QACE,KAAK,EAAE,oBAAoB;QAC3B,cAAc,EAAE,CAAC,MAAM,CAAC;KACzB,EACD,GAAG,CACJ,CAAC;AACJ,CAAC"}

package/dist/runtime/routes/auth-logout.d.ts

@@ -0,0 +1,4 @@
+import type { APIContext } from "astro";
+export declare function POST(context: APIContext): Promise<Response>;
+export declare function GET(): Promise<Response>;
+//# sourceMappingURL=auth-logout.d.ts.map

package/dist/runtime/routes/auth-logout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-logout.d.ts","sourceRoot":"","sources":["../../../src/runtime/routes/auth-logout.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAuBxC,wBAAsB,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CAyBjE;AAED,wBAAsB,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,CAQ7C"}

package/dist/runtime/routes/auth-logout.js

@@ -0,0 +1,47 @@
+import { clearEditorSessionCookie } from "../auth/session.js";
+import { sanitizeRedirect } from "../auth/cookie-utils.js";
+import { getRuntimeConfig } from "../config.js";
+function redirect(pathname, setCookie) {
+    const headers = { Location: pathname };
+    if (setCookie)
+        headers["Set-Cookie"] = setCookie;
+    return new Response(null, { status: 302, headers });
+}
+function json(body, status = 200, setCookie) {
+    const headers = {
+        "Content-Type": "application/json; charset=utf-8",
+    };
+    if (setCookie)
+        headers["Set-Cookie"] = setCookie;
+    return new Response(JSON.stringify(body), { status, headers });
+}
+export async function POST(context) {
+    const runtime = getRuntimeConfig();
+    const contentType = context.request.headers.get("content-type") ?? "";
+    const isJson = contentType.includes("application/json");
+    const cookie = clearEditorSessionCookie("/", context.request);
+    let redirectTo = context.url.searchParams.get("redirect");
+    if (isJson) {
+        const body = (await context.request.json().catch(() => null));
+        redirectTo =
+            typeof body?.redirect === "string" ? body.redirect : redirectTo;
+    }
+    else {
+        const formData = await context.request.formData().catch(() => null);
+        redirectTo =
+            typeof formData?.get("redirect") === "string"
+                ? formData?.get("redirect")
+                : redirectTo;
+    }
+    const safeRedirect = sanitizeRedirect(redirectTo, runtime.mountPath);
+    if (isJson)
+        return json({ ok: true, redirect: safeRedirect }, 200, cookie);
+    return redirect(safeRedirect, cookie);
+}
+export async function GET() {
+    return json({
+        error: "Method not allowed",
+        allowedMethods: ["POST"],
+    }, 405);
+}
+//# sourceMappingURL=auth-logout.js.map

package/dist/runtime/routes/auth-logout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-logout.js","sourceRoot":"","sources":["../../../src/runtime/routes/auth-logout.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,SAAS,QAAQ,CAAC,QAAgB,EAAE,SAAkB;IACpD,MAAM,OAAO,GAA2B,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAC/D,IAAI,SAAS;QAAE,OAAO,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC;IACjD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,IAAI,CACX,IAA6B,EAC7B,MAAM,GAAG,GAAG,EACZ,SAAkB;IAElB,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,iCAAiC;KAClD,CAAC;IACF,IAAI,SAAS;QAAE,OAAO,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC;IACjD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,OAAmB;IAC5C,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IACtE,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9D,IAAI,UAAU,GAAkB,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAEzE,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAEpD,CAAC;QACT,UAAU;YACR,OAAO,IAAI,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;IACpE,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACpE,UAAU;YACR,OAAO,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC,KAAK,QAAQ;gBAC3C,CAAC,CAAE,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAY;gBACvC,CAAC,CAAC,UAAU,CAAC;IACnB,CAAC;IAED,MAAM,YAAY,GAAG,gBAAgB,CAAC,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAErE,IAAI,MAAM;QAAE,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAC3E,OAAO,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,GAAG;IACvB,OAAO,IAAI,CACT;QACE,KAAK,EAAE,oBAAoB;QAC3B,cAAc,EAAE,CAAC,MAAM,CAAC;KACzB,EACD,GAAG,CACJ,CAAC;AACJ,CAAC"}

package/dist/runtime/routes/auth-session.d.ts

@@ -0,0 +1,3 @@
+import type { APIContext } from "astro";
+export declare function GET(context: APIContext): Promise<Response>;
+//# sourceMappingURL=auth-session.d.ts.map

package/dist/runtime/routes/auth-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-session.d.ts","sourceRoot":"","sources":["../../../src/runtime/routes/auth-session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAIxC,wBAAsB,GAAG,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CAIhE"}