@ecsplico/editor 0.0.0-stage → 2.0.0

package/dist/server/handlers/editor.d.ts

@@ -0,0 +1,107 @@
+import { HandlerContext, HandlerRequest, HandlerResponse } from "./context.js";
+//#region src/server/handlers/editor.d.ts
+/** Body schema of `settingsPut`: the complete editor settings. */
+export declare const settingsPutBodySchema: import("zod").ZodObject<{
+  version: import("zod").ZodLiteral<1>;
+  editing: import("zod").ZodObject<{
+    headingConversionScope: import("zod").ZodEnum<{
+      container: "container";
+      document: "document";
+      heading: "heading";
+    }>;
+    authorColors: import("zod").ZodBoolean;
+    authorColorStyle: import("zod").ZodEnum<{
+      background: "background";
+      text: "text";
+    }>;
+    commentsLayout: import("zod").ZodEnum<{
+      margin: "margin";
+      inline: "inline";
+    }>;
+  }, import("zod/v4/core").$strip>;
+  ai: import("zod").ZodObject<{
+    autocomplete: import("zod").ZodBoolean;
+    slots: import("zod").ZodRecord<import("zod").ZodEnum<{
+      complete: "complete";
+      rewrite: "rewrite";
+      generate: "generate";
+    }> & import("zod/v4/core").$partial, import("zod").ZodString>;
+    translateLanguage: import("zod").ZodEnum<{
+      Deutsch: "Deutsch";
+      Englisch: "Englisch";
+      Französisch: "Französisch";
+      Spanisch: "Spanisch";
+      Italienisch: "Italienisch";
+    }>;
+  }, import("zod/v4/core").$strip>;
+  blocks: import("zod").ZodObject<{
+    defaultKind: import("zod").ZodString;
+    structure: import("zod").ZodEnum<{
+      flat: "flat";
+      composite: "composite";
+    }>;
+    treeRoot: import("zod").ZodEnum<{
+      file: "file";
+      folders: "folders";
+    }>;
+    kindIcon: import("zod").ZodEnum<{
+      always: "always";
+      hover: "hover";
+    }>;
+    dragHandle: import("zod").ZodEnum<{
+      always: "always";
+      hover: "hover";
+    }>;
+  }, import("zod/v4/core").$strip>;
+  appearance: import("zod").ZodObject<{
+    theme: import("zod").ZodNullable<import("zod").ZodString>;
+  }, import("zod/v4/core").$strip>;
+}, import("zod/v4/core").$strip>;
+/**
+ * The authenticated user's editor settings, normalized with `parseEditorSettings`. `204` when the adapter keeps no
+ * settings (the client stays on localStorage); `200` with JSON `null` when the user has none stored yet (the client
+ * uploads its local ones).
+ */
+export declare function settingsGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse>;
+/** Stores the authenticated user's editor settings (complete, validated: 400 otherwise); `501` when the adapter keeps none. */
+export declare function settingsPut(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse>;
+/**
+ * All `#` tag names used in any document, deduplicated and sorted. Documents currently open in the collaboration server
+ * are read from their live Y.Doc (a tag added in document A shows up in document B before the debounced store); all
+ * others from the adapter's stored content.
+ */
+export declare function listWorkspaceTags({ adapter, collab }: HandlerContext): Promise<string[]>;
+/**
+ * Tag names for the `#` popup: tags used in any document, filtered by the normalised `?q=` (prefix matches first, then
+ * substrings). Requires an authenticated user via the adapter.
+ */
+export declare function tagsGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse>;
+/**
+ * Users for the `@` mention popup, filtered case-insensitively by `?q=` (prefix matches first, then substrings).
+ * Requires an authenticated user via the adapter.
+ */
+export declare function usersGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse>;
+/**
+ * Stores a file (multipart field `file`) in the package of document `params.id` (or `scratch` for editors not bound to
+ * a stored document); answers `{ url, name }`. Requires an authenticated user via the adapter.
+ */
+export declare function assetPost(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse>;
+/**
+ * The stored file `params.name` of document `params.id`, with `Range` support (media elements send the session cookie
+ * like any same-origin request). Requires an authenticated user via the adapter.
+ */
+export declare function assetGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse>;
+/** The theme library (builtins and uploads) as `ThemeRecord[]`. `501` when the adapter has no theme support. */
+export declare function themesGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse>;
+/** `theme.css` of theme `params.id` as `text/css`. `400` for a malformed id, `404` for an unknown one, `501` when the adapter has no theme support. */
+export declare function themeGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse>;
+/** Deletes the uploaded theme `params.id` (`204`). `400` for a malformed id, `404` for an unknown one, `403` for a builtin, `501` when the adapter has no theme write support. */
+export declare function themeDelete(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse>;
+/**
+ * Uploads an Obsidian theme into the shared library: multipart `css` (File, required), `manifest` (File) and `name`
+ * (string) optional. Answers 201 with the new `ThemeRecord`; the id is the slug of the name, made unique with `-2`,
+ * `-3` … against the library.
+ */
+export declare function themePost(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse>;
+//#endregion
+//# sourceMappingURL=editor.d.ts.map

package/dist/server/handlers/editor.js

@@ -0,0 +1,241 @@
+import { THEME_ID, editorSettingsSchema, parseEditorSettings } from "../../settings/index.js";
+import { collectTagNames, normalizeTagName } from "../../features/mentions/tag.js";
+import { ASSET_DOCUMENT_ID, ASSET_NAME, assetUrl } from "../../features/media/assets.js";
+import { MAX_MEDIA_BYTES, MEDIA_TYPES, mediaKindOf, mediaMime } from "../../features/media/schema.js";
+import { HttpError } from "../errors.js";
+import { COLLAB_FIELD } from "../collab.js";
+import { authenticated, empty, json, readBody, text } from "./context.js";
+import { MAX_THEME_BYTES, themeManifestSchema } from "../../features/themes/schema.js";
+import { yDocToProsemirrorJSON } from "@tiptap/y-tiptap";
+//#region src/server/handlers/editor.ts
+/** Body schema of `settingsPut`: the complete editor settings. */
+const settingsPutBodySchema = editorSettingsSchema;
+const MAX_USERS = 20;
+const MAX_TAGS = 20;
+/**
+* The authenticated user's editor settings, normalized with `parseEditorSettings`. `204` when the adapter keeps no
+* settings (the client stays on localStorage); `200` with JSON `null` when the user has none stored yet (the client
+* uploads its local ones).
+*/
+async function settingsGet(ctx, request) {
+	const user = await authenticated(ctx, request);
+	if (!ctx.adapter.loadSettings) return empty();
+	const stored = await ctx.adapter.loadSettings(user);
+	if (stored === null || stored === void 0) return json(null);
+	return json(parseEditorSettings(stored));
+}
+/** Stores the authenticated user's editor settings (complete, validated: 400 otherwise); `501` when the adapter keeps none. */
+async function settingsPut(ctx, request) {
+	const user = await authenticated(ctx, request);
+	if (!ctx.adapter.storeSettings) throw new HttpError(501, "Einstellungen werden nicht gespeichert");
+	const settings = await readBody(request, settingsPutBodySchema);
+	await ctx.adapter.storeSettings(user, settings);
+	return empty();
+}
+/**
+* All `#` tag names used in any document, deduplicated and sorted. Documents currently open in the collaboration server
+* are read from their live Y.Doc (a tag added in document A shows up in document B before the debounced store); all
+* others from the adapter's stored content.
+*/
+async function listWorkspaceTags({ adapter, collab }) {
+	const names = /* @__PURE__ */ new Set();
+	const open = collab?.hocuspocus.documents;
+	if (open) for (const doc of open.values()) collectTagNames(yDocToProsemirrorJSON(doc, COLLAB_FIELD), names);
+	for (const { id, content } of await adapter.listContents()) if (!open?.has(id)) collectTagNames(content, names);
+	return [...names].sort((a, b) => a.localeCompare(b, "de"));
+}
+/**
+* Tag names for the `#` popup: tags used in any document, filtered by the normalised `?q=` (prefix matches first, then
+* substrings). Requires an authenticated user via the adapter.
+*/
+async function tagsGet(ctx, request) {
+	await authenticated(ctx, request);
+	const q = normalizeTagName(String(request.query?.q ?? ""));
+	const matches = (await listWorkspaceTags(ctx)).filter((tag) => tag.includes(q));
+	const prefixMatches = matches.filter((tag) => tag.startsWith(q));
+	return json([...prefixMatches, ...matches.filter((tag) => !tag.startsWith(q))].slice(0, MAX_TAGS));
+}
+/**
+* Users for the `@` mention popup, filtered case-insensitively by `?q=` (prefix matches first, then substrings).
+* Requires an authenticated user via the adapter.
+*/
+async function usersGet(ctx, request) {
+	await authenticated(ctx, request);
+	const q = String(request.query?.q ?? "").trim().toLowerCase();
+	const matches = (await ctx.adapter.listUsers()).map(({ id, username, color }) => ({
+		id,
+		username,
+		color
+	})).filter((u) => u.username.toLowerCase().includes(q)).sort((a, b) => a.username.localeCompare(b.username, "de"));
+	const prefixMatches = matches.filter((u) => u.username.toLowerCase().startsWith(q));
+	return json([...prefixMatches, ...matches.filter((u) => !prefixMatches.includes(u))].slice(0, MAX_USERS));
+}
+/**
+* Stores a file (multipart field `file`) in the package of document `params.id` (or `scratch` for editors not bound to
+* a stored document); answers `{ url, name }`. Requires an authenticated user via the adapter.
+*/
+async function assetPost(ctx, request) {
+	await authenticated(ctx, request);
+	const id = request.params?.id ?? "";
+	if (!ASSET_DOCUMENT_ID.test(id)) throw new HttpError(400, "Ungültige Dokument-ID");
+	const file = (await request.readForm?.().catch(() => null))?.get("file");
+	if (!(file instanceof File)) throw new HttpError(400, "Keine Datei übermittelt");
+	const mime = mediaMime(file.type) || "application/octet-stream";
+	const maxBytes = MAX_MEDIA_BYTES[mediaKindOf(mime) ?? "file"];
+	if (file.size > maxBytes) throw new HttpError(413, `Datei ist größer als ${maxBytes / 1024 / 1024} MB`);
+	const nameExt = file.name.includes(".") ? file.name.split(".").pop()?.toLowerCase() : void 0;
+	const ext = MEDIA_TYPES[mime]?.ext ?? (nameExt && /^[a-z0-9]{1,8}$/.test(nameExt) ? nameExt : "bin");
+	const name = `${globalThis.crypto.randomUUID()}.${ext}`;
+	await ctx.adapter.storeAsset(id, {
+		name,
+		filename: file.name.slice(0, 255) || name,
+		mimeType: mime,
+		size: file.size,
+		createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+		data: Buffer.from(await file.arrayBuffer())
+	});
+	return json({
+		url: assetUrl(id, name),
+		name
+	});
+}
+const BYTE_RANGE = /^bytes=(\d*)-(\d*)$/;
+/**
+* The stored file `params.name` of document `params.id`, with `Range` support (media elements send the session cookie
+* like any same-origin request). Requires an authenticated user via the adapter.
+*/
+async function assetGet(ctx, request) {
+	await authenticated(ctx, request);
+	const id = request.params?.id ?? "";
+	const name = request.params?.name ?? "";
+	if (!ASSET_DOCUMENT_ID.test(id) || !ASSET_NAME.test(name)) throw new HttpError(404, "Datei nicht gefunden");
+	const asset = await ctx.adapter.loadAsset(id, name);
+	if (!asset) throw new HttpError(404, "Datei nicht gefunden");
+	const { record, data } = asset;
+	const total = data.length;
+	const disposition = record.mimeType === "application/octet-stream" ? "attachment" : "inline";
+	const headers = {
+		"accept-ranges": "bytes",
+		"cache-control": "private, max-age=31536000, immutable",
+		"content-type": record.mimeType,
+		"content-disposition": `${disposition}; filename*=UTF-8''${encodeURIComponent(record.filename)}`
+	};
+	const range = BYTE_RANGE.exec(request.headers.get("range") ?? "");
+	if (!range) return {
+		status: 200,
+		headers: {
+			...headers,
+			"content-length": String(total)
+		},
+		body: data
+	};
+	const [, first, last] = range;
+	const start = first ? Number(first) : Math.max(0, total - Number(last));
+	const end = first && last ? Math.min(Number(last), total - 1) : total - 1;
+	if (start >= total || start > end) return empty(416, { "content-range": `bytes */${total}` });
+	return {
+		status: 206,
+		headers: {
+			...headers,
+			"content-range": `bytes ${start}-${end}/${total}`,
+			"content-length": String(end - start + 1)
+		},
+		body: data.subarray(start, end + 1)
+	};
+}
+const themesUnsupported = () => new HttpError(501, "Themes werden vom Adapter nicht unterstützt");
+/** The theme library (builtins and uploads) as `ThemeRecord[]`. `501` when the adapter has no theme support. */
+async function themesGet(ctx, request) {
+	await authenticated(ctx, request);
+	if (!ctx.adapter.listThemes) throw themesUnsupported();
+	return json(await ctx.adapter.listThemes());
+}
+/** `theme.css` of theme `params.id` as `text/css`. `400` for a malformed id, `404` for an unknown one, `501` when the adapter has no theme support. */
+async function themeGet(ctx, request) {
+	await authenticated(ctx, request);
+	if (!ctx.adapter.loadTheme) throw themesUnsupported();
+	const id = request.params?.id ?? "";
+	if (!THEME_ID.test(id)) throw new HttpError(400, "Ungültige Theme-ID");
+	const theme = await ctx.adapter.loadTheme(id);
+	if (!theme) throw new HttpError(404, "Theme nicht gefunden");
+	const etag = `"${theme.record.version ?? "0"}-${new TextEncoder().encode(theme.css).length}"`;
+	const headers = {
+		"cache-control": "private, max-age=0, must-revalidate",
+		"etag": etag
+	};
+	if (request.headers.get("if-none-match") === etag) return empty(304, headers);
+	return text(theme.css, "text/css; charset=utf-8", headers);
+}
+/** Deletes the uploaded theme `params.id` (`204`). `400` for a malformed id, `404` for an unknown one, `403` for a builtin, `501` when the adapter has no theme write support. */
+async function themeDelete(ctx, request) {
+	await authenticated(ctx, request);
+	const { adapter } = ctx;
+	if (!adapter.listThemes || !adapter.removeTheme) throw themesUnsupported();
+	const id = request.params?.id ?? "";
+	if (!THEME_ID.test(id)) throw new HttpError(400, "Ungültige Theme-ID");
+	const record = (await adapter.listThemes()).find((t) => t.id === id);
+	if (!record) throw new HttpError(404, "Theme nicht gefunden");
+	if (record.builtin) throw new HttpError(403, "Mitgelieferte Themes können nicht gelöscht werden");
+	if (!await adapter.removeTheme(id)) throw new HttpError(404, "Theme nicht gefunden");
+	return empty();
+}
+const MAX_MANIFEST_BYTES = 65536;
+const MAX_ID_LENGTH = 64;
+const MARKUP_HEAD = /<script|<\?xml/i;
+/** `[^a-z0-9]+` → `-`, trimmed, at most `max` characters; `theme` when nothing is left. */
+function slugOf(name, max) {
+	return name.normalize("NFKD").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+/, "").slice(0, max).replace(/-+$/, "") || "theme";
+}
+/**
+* Uploads an Obsidian theme into the shared library: multipart `css` (File, required), `manifest` (File) and `name`
+* (string) optional. Answers 201 with the new `ThemeRecord`; the id is the slug of the name, made unique with `-2`,
+* `-3` … against the library.
+*/
+async function themePost(ctx, request) {
+	await authenticated(ctx, request);
+	const { adapter } = ctx;
+	if (!adapter.listThemes || !adapter.storeTheme) throw themesUnsupported();
+	const form = await request.readForm?.().catch(() => null);
+	const cssFile = form?.get("css");
+	if (!(cssFile instanceof File) || cssFile.size === 0) throw new HttpError(400, "Keine CSS-Datei übermittelt");
+	if (cssFile.size > 2097152) throw new HttpError(413, `Theme ist größer als ${MAX_THEME_BYTES / 1024 / 1024} MB`);
+	const bytes = new Uint8Array(await cssFile.arrayBuffer());
+	if (bytes.includes(0) || MARKUP_HEAD.test(new TextDecoder("latin1").decode(bytes.subarray(0, 512)))) throw new HttpError(400, "Theme ist keine CSS-Textdatei");
+	let css;
+	try {
+		css = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+	} catch {
+		throw new HttpError(400, "Theme ist keine gültige UTF-8-Textdatei");
+	}
+	let manifest;
+	const manifestFile = form?.get("manifest");
+	if (manifestFile instanceof File && manifestFile.size > 0) try {
+		if (manifestFile.size > MAX_MANIFEST_BYTES) throw new Error("manifest too large");
+		manifest = themeManifestSchema.parse(JSON.parse(await manifestFile.text()));
+	} catch {
+		throw new HttpError(400, "Ungültiges manifest.json");
+	}
+	const nameField = form?.get("name");
+	const cssBaseName = cssFile.name.replace(/\.css$/i, "");
+	const name = manifest?.name ?? [typeof nameField === "string" ? nameField : "", cssBaseName].map((n) => n.trim().slice(0, 120)).find(Boolean) ?? "Theme";
+	const taken = new Set((await adapter.listThemes()).map((t) => t.id));
+	let id = slugOf(name, MAX_ID_LENGTH);
+	for (let n = 2; taken.has(id); n++) {
+		const suffix = `-${n}`;
+		id = `${slugOf(name, MAX_ID_LENGTH - suffix.length)}${suffix}`;
+	}
+	const record = {
+		...manifest,
+		name,
+		id
+	};
+	await adapter.storeTheme(record, css);
+	return json({
+		...record,
+		builtin: false
+	}, 201);
+}
+//#endregion
+export { assetGet, assetPost, listWorkspaceTags, settingsGet, settingsPut, settingsPutBodySchema, tagsGet, themeDelete, themeGet, themePost, themesGet, usersGet };
+
+//# sourceMappingURL=editor.js.map

package/dist/server/handlers/editor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"editor.js","names":[],"sources":["../../../src/server/handlers/editor.ts"],"sourcesContent":["import { yDocToProsemirrorJSON } from '@tiptap/y-tiptap'\nimport { ASSET_DOCUMENT_ID, ASSET_NAME, assetUrl, MAX_MEDIA_BYTES, MEDIA_TYPES, mediaKindOf, mediaMime } from '../../features/media/schema'\nimport { collectTagNames, normalizeTagName } from '../../features/mentions/schema'\nimport { MAX_THEME_BYTES, THEME_ID, themeManifestSchema, type ThemeManifest, type ThemeRecord } from '../../features/themes/schema'\nimport { editorSettingsSchema, parseEditorSettings } from '../../settings'\nimport { COLLAB_FIELD } from '../collab'\nimport { HttpError } from '../errors'\nimport { authenticated, empty, type HandlerContext, type HandlerRequest, type HandlerResponse, json, readBody, text } from './context'\n\n/** Body schema of `settingsPut`: the complete editor settings. */\nexport const settingsPutBodySchema = editorSettingsSchema\n\nconst MAX_USERS = 20\nconst MAX_TAGS = 20\n\n/**\n * The authenticated user's editor settings, normalized with `parseEditorSettings`. `204` when the adapter keeps no\n * settings (the client stays on localStorage); `200` with JSON `null` when the user has none stored yet (the client\n * uploads its local ones).\n */\nexport async function settingsGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  const user = await authenticated(ctx, request)\n  if (!ctx.adapter.loadSettings) return empty()\n  const stored = await ctx.adapter.loadSettings(user)\n  if (stored === null || stored === undefined) return json(null)\n  return json(parseEditorSettings(stored))\n}\n\n/** Stores the authenticated user's editor settings (complete, validated: 400 otherwise); `501` when the adapter keeps none. */\nexport async function settingsPut(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  const user = await authenticated(ctx, request)\n  if (!ctx.adapter.storeSettings) throw new HttpError(501, 'Einstellungen werden nicht gespeichert')\n  const settings = await readBody(request, settingsPutBodySchema)\n  await ctx.adapter.storeSettings(user, settings)\n  return empty()\n}\n\n/**\n * All `#` tag names used in any document, deduplicated and sorted. Documents currently open in the collaboration server\n * are read from their live Y.Doc (a tag added in document A shows up in document B before the debounced store); all\n * others from the adapter's stored content.\n */\nexport async function listWorkspaceTags({ adapter, collab }: HandlerContext): Promise<string[]> {\n  const names = new Set<string>()\n  const open = collab?.hocuspocus.documents\n  if (open) for (const doc of open.values()) collectTagNames(yDocToProsemirrorJSON(doc, COLLAB_FIELD), names)\n  for (const { id, content } of await adapter.listContents()) {\n    if (!open?.has(id)) collectTagNames(content, names)\n  }\n  return [...names].sort((a, b) => a.localeCompare(b, 'de'))\n}\n\n/**\n * Tag names for the `#` popup: tags used in any document, filtered by the normalised `?q=` (prefix matches first, then\n * substrings). Requires an authenticated user via the adapter.\n */\nexport async function tagsGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  await authenticated(ctx, request)\n  const q = normalizeTagName(String(request.query?.q ?? ''))\n  const matches = (await listWorkspaceTags(ctx)).filter(tag => tag.includes(q))\n  const prefixMatches = matches.filter(tag => tag.startsWith(q))\n  return json([...prefixMatches, ...matches.filter(tag => !tag.startsWith(q))].slice(0, MAX_TAGS))\n}\n\n/**\n * Users for the `@` mention popup, filtered case-insensitively by `?q=` (prefix matches first, then substrings).\n * Requires an authenticated user via the adapter.\n */\nexport async function usersGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  await authenticated(ctx, request)\n  const q = String(request.query?.q ?? '').trim().toLowerCase()\n  // Re-pick the fields so an adapter returning richer user records cannot leak them.\n  const matches = (await ctx.adapter.listUsers())\n    .map(({ id, username, color }) => ({ id, username, color }))\n    .filter(u => u.username.toLowerCase().includes(q))\n    .sort((a, b) => a.username.localeCompare(b.username, 'de'))\n  const prefixMatches = matches.filter(u => u.username.toLowerCase().startsWith(q))\n  return json([...prefixMatches, ...matches.filter(u => !prefixMatches.includes(u))].slice(0, MAX_USERS))\n}\n\n/**\n * Stores a file (multipart field `file`) in the package of document `params.id` (or `scratch` for editors not bound to\n * a stored document); answers `{ url, name }`. Requires an authenticated user via the adapter.\n */\nexport async function assetPost(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  await authenticated(ctx, request)\n  const id = request.params?.id ?? ''\n  if (!ASSET_DOCUMENT_ID.test(id)) throw new HttpError(400, 'Ungültige Dokument-ID')\n  // A body that is no multipart form at all counts as „no file“.\n  const form = await request.readForm?.().catch(() => null)\n  const file = form?.get('file')\n  if (!(file instanceof File)) throw new HttpError(400, 'Keine Datei übermittelt')\n  const mime = mediaMime(file.type) || 'application/octet-stream'\n  const maxBytes = MAX_MEDIA_BYTES[mediaKindOf(mime) ?? 'file']\n  if (file.size > maxBytes) throw new HttpError(413, `Datei ist größer als ${maxBytes / 1024 / 1024} MB`)\n  const nameExt = file.name.includes('.') ? file.name.split('.').pop()?.toLowerCase() : undefined\n  const ext = MEDIA_TYPES[mime]?.ext ?? (nameExt && /^[a-z0-9]{1,8}$/.test(nameExt) ? nameExt : 'bin')\n  const name = `${globalThis.crypto.randomUUID()}.${ext}`\n  await ctx.adapter.storeAsset(id, {\n    name,\n    filename: file.name.slice(0, 255) || name,\n    mimeType: mime,\n    size: file.size,\n    createdAt: new Date().toISOString(),\n    data: Buffer.from(await file.arrayBuffer()),\n  })\n  return json({ url: assetUrl(id, name), name })\n}\n\n// Answers single byte ranges (`Range: bytes=a-b`, `bytes=a-`, `bytes=-n`): Safari only plays and seeks audio/video\n// served with range support. Other Range forms (several ranges) get the whole file, which RFC 9110 allows.\nconst BYTE_RANGE = /^bytes=(\\d*)-(\\d*)$/\n\n/**\n * The stored file `params.name` of document `params.id`, with `Range` support (media elements send the session cookie\n * like any same-origin request). Requires an authenticated user via the adapter.\n */\nexport async function assetGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  await authenticated(ctx, request)\n  const id = request.params?.id ?? ''\n  const name = request.params?.name ?? ''\n  if (!ASSET_DOCUMENT_ID.test(id) || !ASSET_NAME.test(name)) throw new HttpError(404, 'Datei nicht gefunden')\n  const asset = await ctx.adapter.loadAsset(id, name)\n  if (!asset) throw new HttpError(404, 'Datei nicht gefunden')\n  const { record, data } = asset\n  const total = data.length\n  const disposition = record.mimeType === 'application/octet-stream' ? 'attachment' : 'inline'\n  const headers: Record<string, string> = {\n    'accept-ranges': 'bytes',\n    'cache-control': 'private, max-age=31536000, immutable',\n    'content-type': record.mimeType,\n    'content-disposition': `${disposition}; filename*=UTF-8''${encodeURIComponent(record.filename)}`,\n  }\n  const range = BYTE_RANGE.exec(request.headers.get('range') ?? '')\n  if (!range) return { status: 200, headers: { ...headers, 'content-length': String(total) }, body: data }\n  const [, first, last] = range\n  const start = first ? Number(first) : Math.max(0, total - Number(last))\n  const end = first && last ? Math.min(Number(last), total - 1) : total - 1\n  if (start >= total || start > end) return empty(416, { 'content-range': `bytes */${total}` })\n  return {\n    status: 206,\n    headers: { ...headers, 'content-range': `bytes ${start}-${end}/${total}`, 'content-length': String(end - start + 1) },\n    body: data.subarray(start, end + 1),\n  }\n}\n\nconst themesUnsupported = () => new HttpError(501, 'Themes werden vom Adapter nicht unterstützt')\n\n/** The theme library (builtins and uploads) as `ThemeRecord[]`. `501` when the adapter has no theme support. */\nexport async function themesGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  await authenticated(ctx, request)\n  if (!ctx.adapter.listThemes) throw themesUnsupported()\n  return json(await ctx.adapter.listThemes())\n}\n\n/** `theme.css` of theme `params.id` as `text/css`. `400` for a malformed id, `404` for an unknown one, `501` when the adapter has no theme support. */\nexport async function themeGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  await authenticated(ctx, request)\n  if (!ctx.adapter.loadTheme) throw themesUnsupported()\n  const id = request.params?.id ?? ''\n  if (!THEME_ID.test(id)) throw new HttpError(400, 'Ungültige Theme-ID')\n  const theme = await ctx.adapter.loadTheme(id)\n  if (!theme) throw new HttpError(404, 'Theme nicht gefunden')\n  const etag = `\"${theme.record.version ?? '0'}-${new TextEncoder().encode(theme.css).length}\"`\n  const headers = { 'cache-control': 'private, max-age=0, must-revalidate', 'etag': etag }\n  if (request.headers.get('if-none-match') === etag) return empty(304, headers)\n  return text(theme.css, 'text/css; charset=utf-8', headers)\n}\n\n/** Deletes the uploaded theme `params.id` (`204`). `400` for a malformed id, `404` for an unknown one, `403` for a builtin, `501` when the adapter has no theme write support. */\nexport async function themeDelete(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  await authenticated(ctx, request)\n  const { adapter } = ctx\n  if (!adapter.listThemes || !adapter.removeTheme) throw themesUnsupported()\n  const id = request.params?.id ?? ''\n  if (!THEME_ID.test(id)) throw new HttpError(400, 'Ungültige Theme-ID')\n  // `removeTheme` answers `false` for builtins and unknown ids alike, so the record decides between 403 and 404.\n  const record = (await adapter.listThemes()).find(t => t.id === id)\n  if (!record) throw new HttpError(404, 'Theme nicht gefunden')\n  if (record.builtin) throw new HttpError(403, 'Mitgelieferte Themes können nicht gelöscht werden')\n  if (!await adapter.removeTheme(id)) throw new HttpError(404, 'Theme nicht gefunden')\n  return empty()\n}\n\nconst MAX_MANIFEST_BYTES = 64 * 1024\nconst MAX_ID_LENGTH = 64\n// Markers of an HTML/XML/SVG document in the head of a „stylesheet“.\nconst MARKUP_HEAD = /<script|<\\?xml/i\n\n/** `[^a-z0-9]+` → `-`, trimmed, at most `max` characters; `theme` when nothing is left. */\nfunction slugOf(name: string, max: number): string {\n  const slug = name.normalize('NFKD').toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+/, '').slice(0, max).replace(/-+$/, '')\n  return slug || 'theme'\n}\n\n/**\n * Uploads an Obsidian theme into the shared library: multipart `css` (File, required), `manifest` (File) and `name`\n * (string) optional. Answers 201 with the new `ThemeRecord`; the id is the slug of the name, made unique with `-2`,\n * `-3` … against the library.\n */\nexport async function themePost(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  await authenticated(ctx, request)\n  const { adapter } = ctx\n  if (!adapter.listThemes || !adapter.storeTheme) throw themesUnsupported()\n  // A body that is no multipart form counts as „no file“.\n  const form = await request.readForm?.().catch(() => null)\n  const cssFile = form?.get('css')\n  if (!(cssFile instanceof File) || cssFile.size === 0) throw new HttpError(400, 'Keine CSS-Datei übermittelt')\n  if (cssFile.size > MAX_THEME_BYTES) throw new HttpError(413, `Theme ist größer als ${MAX_THEME_BYTES / 1024 / 1024} MB`)\n  const bytes = new Uint8Array(await cssFile.arrayBuffer())\n  if (bytes.includes(0) || MARKUP_HEAD.test(new TextDecoder('latin1').decode(bytes.subarray(0, 512)))) {\n    throw new HttpError(400, 'Theme ist keine CSS-Textdatei')\n  }\n  let css: string\n  try {\n    css = new TextDecoder('utf-8', { fatal: true }).decode(bytes)\n  }\n  catch {\n    throw new HttpError(400, 'Theme ist keine gültige UTF-8-Textdatei')\n  }\n\n  let manifest: ThemeManifest | undefined\n  const manifestFile = form?.get('manifest')\n  if (manifestFile instanceof File && manifestFile.size > 0) {\n    try {\n      if (manifestFile.size > MAX_MANIFEST_BYTES) throw new Error('manifest too large')\n      manifest = themeManifestSchema.parse(JSON.parse(await manifestFile.text()))\n    }\n    catch {\n      throw new HttpError(400, 'Ungültiges manifest.json')\n    }\n  }\n\n  const nameField = form?.get('name')\n  const cssBaseName = cssFile.name.replace(/\\.css$/i, '')\n  const name = manifest?.name\n    ?? [typeof nameField === 'string' ? nameField : '', cssBaseName].map(n => n.trim().slice(0, 120)).find(Boolean)\n    ?? 'Theme'\n\n  const taken = new Set((await adapter.listThemes()).map(t => t.id))\n  const base = slugOf(name, MAX_ID_LENGTH)\n  let id = base\n  for (let n = 2; taken.has(id); n++) {\n    const suffix = `-${n}`\n    id = `${slugOf(name, MAX_ID_LENGTH - suffix.length)}${suffix}`\n  }\n\n  const record: Omit<ThemeRecord, 'builtin'> = { ...manifest, name, id }\n  await adapter.storeTheme(record, css)\n  return json({ ...record, builtin: false } satisfies ThemeRecord, 201)\n}\n"],"mappings":";;;;;;;;;;;AAUA,MAAa,wBAAwB;AAErC,MAAM,YAAY;AAClB,MAAM,WAAW;;;;;;AAOjB,eAAsB,YAAY,KAAqB,SAAmD;CACxG,MAAM,OAAO,MAAM,cAAc,KAAK,OAAO;CAC7C,IAAI,CAAC,IAAI,QAAQ,cAAc,OAAO,MAAM;CAC5C,MAAM,SAAS,MAAM,IAAI,QAAQ,aAAa,IAAI;CAClD,IAAI,WAAW,QAAQ,WAAW,KAAA,GAAW,OAAO,KAAK,IAAI;CAC7D,OAAO,KAAK,oBAAoB,MAAM,CAAC;AACzC;;AAGA,eAAsB,YAAY,KAAqB,SAAmD;CACxG,MAAM,OAAO,MAAM,cAAc,KAAK,OAAO;CAC7C,IAAI,CAAC,IAAI,QAAQ,eAAe,MAAM,IAAI,UAAU,KAAK,wCAAwC;CACjG,MAAM,WAAW,MAAM,SAAS,SAAS,qBAAqB;CAC9D,MAAM,IAAI,QAAQ,cAAc,MAAM,QAAQ;CAC9C,OAAO,MAAM;AACf;;;;;;AAOA,eAAsB,kBAAkB,EAAE,SAAS,UAA6C;CAC9F,MAAM,wBAAQ,IAAI,IAAY;CAC9B,MAAM,OAAO,QAAQ,WAAW;CAChC,IAAI,MAAM,KAAK,MAAM,OAAO,KAAK,OAAO,GAAG,gBAAgB,sBAAsB,KAAK,YAAY,GAAG,KAAK;CAC1G,KAAK,MAAM,EAAE,IAAI,aAAa,MAAM,QAAQ,aAAa,GACvD,IAAI,CAAC,MAAM,IAAI,EAAE,GAAG,gBAAgB,SAAS,KAAK;CAEpD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,GAAG,IAAI,CAAC;AAC3D;;;;;AAMA,eAAsB,QAAQ,KAAqB,SAAmD;CACpG,MAAM,cAAc,KAAK,OAAO;CAChC,MAAM,IAAI,iBAAiB,OAAO,QAAQ,OAAO,KAAK,EAAE,CAAC;CACzD,MAAM,WAAW,MAAM,kBAAkB,GAAG,EAAA,CAAG,QAAO,QAAO,IAAI,SAAS,CAAC,CAAC;CAC5E,MAAM,gBAAgB,QAAQ,QAAO,QAAO,IAAI,WAAW,CAAC,CAAC;CAC7D,OAAO,KAAK,CAAC,GAAG,eAAe,GAAG,QAAQ,QAAO,QAAO,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,QAAQ,CAAC;AACjG;;;;;AAMA,eAAsB,SAAS,KAAqB,SAAmD;CACrG,MAAM,cAAc,KAAK,OAAO;CAChC,MAAM,IAAI,OAAO,QAAQ,OAAO,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY;CAE5D,MAAM,WAAW,MAAM,IAAI,QAAQ,UAAU,EAAA,CAC1C,KAAK,EAAE,IAAI,UAAU,aAAa;EAAE;EAAI;EAAU;CAAM,EAAE,CAAC,CAC3D,QAAO,MAAK,EAAE,SAAS,YAAY,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CACjD,MAAM,GAAG,MAAM,EAAE,SAAS,cAAc,EAAE,UAAU,IAAI,CAAC;CAC5D,MAAM,gBAAgB,QAAQ,QAAO,MAAK,EAAE,SAAS,YAAY,CAAC,CAAC,WAAW,CAAC,CAAC;CAChF,OAAO,KAAK,CAAC,GAAG,eAAe,GAAG,QAAQ,QAAO,MAAK,CAAC,cAAc,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,SAAS,CAAC;AACxG;;;;;AAMA,eAAsB,UAAU,KAAqB,SAAmD;CACtG,MAAM,cAAc,KAAK,OAAO;CAChC,MAAM,KAAK,QAAQ,QAAQ,MAAM;CACjC,IAAI,CAAC,kBAAkB,KAAK,EAAE,GAAG,MAAM,IAAI,UAAU,KAAK,uBAAuB;CAGjF,MAAM,QAAO,MADM,QAAQ,WAAW,CAAC,CAAC,YAAY,IAAI,EAAA,EACrC,IAAI,MAAM;CAC7B,IAAI,EAAE,gBAAgB,OAAO,MAAM,IAAI,UAAU,KAAK,yBAAyB;CAC/E,MAAM,OAAO,UAAU,KAAK,IAAI,KAAK;CACrC,MAAM,WAAW,gBAAgB,YAAY,IAAI,KAAK;CACtD,IAAI,KAAK,OAAO,UAAU,MAAM,IAAI,UAAU,KAAK,wBAAwB,WAAW,OAAO,KAAK,IAAI;CACtG,MAAM,UAAU,KAAK,KAAK,SAAS,GAAG,IAAI,KAAK,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,YAAY,IAAI,KAAA;CACtF,MAAM,MAAM,YAAY,KAAK,EAAE,QAAQ,WAAW,kBAAkB,KAAK,OAAO,IAAI,UAAU;CAC9F,MAAM,OAAO,GAAG,WAAW,OAAO,WAAW,EAAE,GAAG;CAClD,MAAM,IAAI,QAAQ,WAAW,IAAI;EAC/B;EACA,UAAU,KAAK,KAAK,MAAM,GAAG,GAAG,KAAK;EACrC,UAAU;EACV,MAAM,KAAK;EACX,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;EAClC,MAAM,OAAO,KAAK,MAAM,KAAK,YAAY,CAAC;CAC5C,CAAC;CACD,OAAO,KAAK;EAAE,KAAK,SAAS,IAAI,IAAI;EAAG;CAAK,CAAC;AAC/C;AAIA,MAAM,aAAa;;;;;AAMnB,eAAsB,SAAS,KAAqB,SAAmD;CACrG,MAAM,cAAc,KAAK,OAAO;CAChC,MAAM,KAAK,QAAQ,QAAQ,MAAM;CACjC,MAAM,OAAO,QAAQ,QAAQ,QAAQ;CACrC,IAAI,CAAC,kBAAkB,KAAK,EAAE,KAAK,CAAC,WAAW,KAAK,IAAI,GAAG,MAAM,IAAI,UAAU,KAAK,sBAAsB;CAC1G,MAAM,QAAQ,MAAM,IAAI,QAAQ,UAAU,IAAI,IAAI;CAClD,IAAI,CAAC,OAAO,MAAM,IAAI,UAAU,KAAK,sBAAsB;CAC3D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,KAAK;CACnB,MAAM,cAAc,OAAO,aAAa,6BAA6B,eAAe;CACpF,MAAM,UAAkC;EACtC,iBAAiB;EACjB,iBAAiB;EACjB,gBAAgB,OAAO;EACvB,uBAAuB,GAAG,YAAY,qBAAqB,mBAAmB,OAAO,QAAQ;CAC/F;CACA,MAAM,QAAQ,WAAW,KAAK,QAAQ,QAAQ,IAAI,OAAO,KAAK,EAAE;CAChE,IAAI,CAAC,OAAO,OAAO;EAAE,QAAQ;EAAK,SAAS;GAAE,GAAG;GAAS,kBAAkB,OAAO,KAAK;EAAE;EAAG,MAAM;CAAK;CACvG,MAAM,GAAG,OAAO,QAAQ;CACxB,MAAM,QAAQ,QAAQ,OAAO,KAAK,IAAI,KAAK,IAAI,GAAG,QAAQ,OAAO,IAAI,CAAC;CACtE,MAAM,MAAM,SAAS,OAAO,KAAK,IAAI,OAAO,IAAI,GAAG,QAAQ,CAAC,IAAI,QAAQ;CACxE,IAAI,SAAS,SAAS,QAAQ,KAAK,OAAO,MAAM,KAAK,EAAE,iBAAiB,WAAW,QAAQ,CAAC;CAC5F,OAAO;EACL,QAAQ;EACR,SAAS;GAAE,GAAG;GAAS,iBAAiB,SAAS,MAAM,GAAG,IAAI,GAAG;GAAS,kBAAkB,OAAO,MAAM,QAAQ,CAAC;EAAE;EACpH,MAAM,KAAK,SAAS,OAAO,MAAM,CAAC;CACpC;AACF;AAEA,MAAM,0BAA0B,IAAI,UAAU,KAAK,6CAA6C;;AAGhG,eAAsB,UAAU,KAAqB,SAAmD;CACtG,MAAM,cAAc,KAAK,OAAO;CAChC,IAAI,CAAC,IAAI,QAAQ,YAAY,MAAM,kBAAkB;CACrD,OAAO,KAAK,MAAM,IAAI,QAAQ,WAAW,CAAC;AAC5C;;AAGA,eAAsB,SAAS,KAAqB,SAAmD;CACrG,MAAM,cAAc,KAAK,OAAO;CAChC,IAAI,CAAC,IAAI,QAAQ,WAAW,MAAM,kBAAkB;CACpD,MAAM,KAAK,QAAQ,QAAQ,MAAM;CACjC,IAAI,CAAC,SAAS,KAAK,EAAE,GAAG,MAAM,IAAI,UAAU,KAAK,oBAAoB;CACrE,MAAM,QAAQ,MAAM,IAAI,QAAQ,UAAU,EAAE;CAC5C,IAAI,CAAC,OAAO,MAAM,IAAI,UAAU,KAAK,sBAAsB;CAC3D,MAAM,OAAO,IAAI,MAAM,OAAO,WAAW,IAAI,GAAG,IAAI,YAAY,CAAC,CAAC,OAAO,MAAM,GAAG,CAAC,CAAC,OAAO;CAC3F,MAAM,UAAU;EAAE,iBAAiB;EAAuC,QAAQ;CAAK;CACvF,IAAI,QAAQ,QAAQ,IAAI,eAAe,MAAM,MAAM,OAAO,MAAM,KAAK,OAAO;CAC5E,OAAO,KAAK,MAAM,KAAK,2BAA2B,OAAO;AAC3D;;AAGA,eAAsB,YAAY,KAAqB,SAAmD;CACxG,MAAM,cAAc,KAAK,OAAO;CAChC,MAAM,EAAE,YAAY;CACpB,IAAI,CAAC,QAAQ,cAAc,CAAC,QAAQ,aAAa,MAAM,kBAAkB;CACzE,MAAM,KAAK,QAAQ,QAAQ,MAAM;CACjC,IAAI,CAAC,SAAS,KAAK,EAAE,GAAG,MAAM,IAAI,UAAU,KAAK,oBAAoB;CAErE,MAAM,UAAU,MAAM,QAAQ,WAAW,EAAA,CAAG,MAAK,MAAK,EAAE,OAAO,EAAE;CACjE,IAAI,CAAC,QAAQ,MAAM,IAAI,UAAU,KAAK,sBAAsB;CAC5D,IAAI,OAAO,SAAS,MAAM,IAAI,UAAU,KAAK,mDAAmD;CAChG,IAAI,CAAC,MAAM,QAAQ,YAAY,EAAE,GAAG,MAAM,IAAI,UAAU,KAAK,sBAAsB;CACnF,OAAO,MAAM;AACf;AAEA,MAAM,qBAAqB;AAC3B,MAAM,gBAAgB;AAEtB,MAAM,cAAc;;AAGpB,SAAS,OAAO,MAAc,KAAqB;CAEjD,OADa,KAAK,UAAU,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,QAAQ,eAAe,GAAG,CAAC,CAAC,QAAQ,OAAO,EAAE,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,OAAO,EACpH,KAAK;AACjB;;;;;;AAOA,eAAsB,UAAU,KAAqB,SAAmD;CACtG,MAAM,cAAc,KAAK,OAAO;CAChC,MAAM,EAAE,YAAY;CACpB,IAAI,CAAC,QAAQ,cAAc,CAAC,QAAQ,YAAY,MAAM,kBAAkB;CAExE,MAAM,OAAO,MAAM,QAAQ,WAAW,CAAC,CAAC,YAAY,IAAI;CACxD,MAAM,UAAU,MAAM,IAAI,KAAK;CAC/B,IAAI,EAAE,mBAAmB,SAAS,QAAQ,SAAS,GAAG,MAAM,IAAI,UAAU,KAAK,6BAA6B;CAC5G,IAAI,QAAQ,OAAA,SAAwB,MAAM,IAAI,UAAU,KAAK,wBAAwB,kBAAkB,OAAO,KAAK,IAAI;CACvH,MAAM,QAAQ,IAAI,WAAW,MAAM,QAAQ,YAAY,CAAC;CACxD,IAAI,MAAM,SAAS,CAAC,KAAK,YAAY,KAAK,IAAI,YAAY,QAAQ,CAAC,CAAC,OAAO,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,GAChG,MAAM,IAAI,UAAU,KAAK,+BAA+B;CAE1D,IAAI;CACJ,IAAI;EACF,MAAM,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK;CAC9D,QACM;EACJ,MAAM,IAAI,UAAU,KAAK,yCAAyC;CACpE;CAEA,IAAI;CACJ,MAAM,eAAe,MAAM,IAAI,UAAU;CACzC,IAAI,wBAAwB,QAAQ,aAAa,OAAO,GACtD,IAAI;EACF,IAAI,aAAa,OAAO,oBAAoB,MAAM,IAAI,MAAM,oBAAoB;EAChF,WAAW,oBAAoB,MAAM,KAAK,MAAM,MAAM,aAAa,KAAK,CAAC,CAAC;CAC5E,QACM;EACJ,MAAM,IAAI,UAAU,KAAK,0BAA0B;CACrD;CAGF,MAAM,YAAY,MAAM,IAAI,MAAM;CAClC,MAAM,cAAc,QAAQ,KAAK,QAAQ,WAAW,EAAE;CACtD,MAAM,OAAO,UAAU,QAClB,CAAC,OAAO,cAAc,WAAW,YAAY,IAAI,WAAW,CAAC,CAAC,KAAI,MAAK,EAAE,KAAK,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,OAAO,KAC3G;CAEL,MAAM,QAAQ,IAAI,KAAK,MAAM,QAAQ,WAAW,EAAA,CAAG,KAAI,MAAK,EAAE,EAAE,CAAC;CAEjE,IAAI,KADS,OAAO,MAAM,aACd;CACZ,KAAK,IAAI,IAAI,GAAG,MAAM,IAAI,EAAE,GAAG,KAAK;EAClC,MAAM,SAAS,IAAI;EACnB,KAAK,GAAG,OAAO,MAAM,gBAAgB,OAAO,MAAM,IAAI;CACxD;CAEA,MAAM,SAAuC;EAAE,GAAG;EAAU;EAAM;CAAG;CACrE,MAAM,QAAQ,WAAW,QAAQ,GAAG;CACpC,OAAO,KAAK;EAAE,GAAG;EAAQ,SAAS;CAAM,GAAyB,GAAG;AACtE"}

package/dist/server/handlers/index.d.ts

@@ -0,0 +1,4 @@
+import { AiHandlerContext, HandlerContext, HandlerRequest, HandlerResponse, authenticated, empty, enforceRateLimit, eventStream, json, readBody, text } from "./context.js";
+import { chatBodySchema, chatPost, completeBodySchema, completePost, generateBodySchema, generatePost, modelsGet, transcribeBodySchema, transcribePost, transcriptCleanupBodySchema, transcriptCleanupPost } from "./ai.js";
+import { assetGet, assetPost, listWorkspaceTags, settingsGet, settingsPut, settingsPutBodySchema, tagsGet, themeDelete, themeGet, themePost, themesGet, usersGet } from "./editor.js";
+export { type AiHandlerContext, type HandlerContext, type HandlerRequest, type HandlerResponse, assetGet, assetPost, authenticated, chatBodySchema, chatPost, completeBodySchema, completePost, empty, enforceRateLimit, eventStream, generateBodySchema, generatePost, json, listWorkspaceTags, modelsGet, readBody, settingsGet, settingsPut, settingsPutBodySchema, tagsGet, text, themeDelete, themeGet, themePost, themesGet, transcribeBodySchema, transcribePost, transcriptCleanupBodySchema, transcriptCleanupPost, usersGet };

package/dist/server/handlers/index.js

@@ -0,0 +1,4 @@
+import { authenticated, empty, enforceRateLimit, eventStream, json, readBody, text } from "./context.js";
+import { chatBodySchema, chatPost, completeBodySchema, completePost, generateBodySchema, generatePost, modelsGet, transcribeBodySchema, transcribePost, transcriptCleanupBodySchema, transcriptCleanupPost } from "./ai.js";
+import { assetGet, assetPost, listWorkspaceTags, settingsGet, settingsPut, settingsPutBodySchema, tagsGet, themeDelete, themeGet, themePost, themesGet, usersGet } from "./editor.js";
+export { assetGet, assetPost, authenticated, chatBodySchema, chatPost, completeBodySchema, completePost, empty, enforceRateLimit, eventStream, generateBodySchema, generatePost, json, listWorkspaceTags, modelsGet, readBody, settingsGet, settingsPut, settingsPutBodySchema, tagsGet, text, themeDelete, themeGet, themePost, themesGet, transcribeBodySchema, transcribePost, transcriptCleanupBodySchema, transcriptCleanupPost, usersGet };

package/dist/server/host.d.ts

@@ -0,0 +1,61 @@
+import { ModelProfile, ModelRef } from "../features/ai/protocol/models.js";
+import "../features/ai/protocol/index.js";
+import { AiModels, AiModelsConfig } from "./ai.js";
+import { EditorAdapter } from "./adapter.js";
+import { CollabServer } from "./collab.js";
+import { JSONContent } from "@tiptap/core";
+import { LanguageModel } from "ai";
+//#region src/server/host.d.ts
+export interface EditorServerConfig {
+  /**
+   * The AI models: presets, shared key, transcription, slots. `languageModel`/`listModels` default to the adapter's
+   * methods of the same names.
+   */
+  ai?: Partial<AiModelsConfig>;
+  /** Per-user limit shared by the AI endpoints. Default 30 requests per minute. */
+  rateLimit?: {
+    max: number;
+    windowMs: number;
+  };
+}
+/** Registers the host's adapter; the collaboration server and the AI models are created from it on first use. Replaces (and closes) those of a previous adapter. */
+export declare function setEditorAdapter(next: EditorAdapter): void;
+export declare function useEditorAdapter(): EditorAdapter;
+/** Sets the AI configuration and the rate limit of the process-wide server. Call before the first request. */
+export declare function configureEditorServer(next: EditorServerConfig): void;
+/** The process-wide collaboration server, created from the registered adapter on first use. */
+export declare function useCollabServer(): CollabServer;
+/** The process-wide AI models: the configured presets, with the adapter's `languageModel`/`listModels` hooks. */
+export declare function useAiModels(): AiModels;
+/** Closes the process-wide collaboration server (pending stores are written first) and forgets it. */
+export declare function closeEditorServer(): Promise<void>;
+/** Open collaboration connections and loaded documents of this process (zeros before the first connection). */
+export declare function collabStats(): {
+  connections: number;
+  documents: number;
+};
+/** Tell connected clients the document is gone, disconnect them and drop the Yjs state. Call before removing the JSON. */
+export declare function forgetCollabDocument(id: string): Promise<void>;
+/** Current content of a document that is open in the collaboration server (unsaved edits included), `null` when nobody has it open. */
+export declare function liveContent(id: string): JSONContent | null;
+/** The host rewrote a document's content (an agent wrote the file): merge it into the open document now, see `CollabServer.contentChanged`. */
+export declare function collabContentChanged(id: string): Promise<void>;
+/** AI SDK language model for `ref`, see `AiModels.resolveModel`. */
+export declare function resolveModel(ref: ModelRef, user: object | null): Promise<LanguageModel>;
+/** The models listed for `user`, see `AiModels.listModels`. */
+export declare function listAiModels(user: object | null): Promise<ModelProfile[]>;
+/**
+ * Per-user limit for host-defined AI routes: the same limiter as the editor's own AI endpoints. Call first in the route.
+ * Throws 401 (`HttpError`) without a user, 429 when exceeded; returns the user the adapter authenticated, for `resolveModel`.
+ * With a Node-backed request (`event.node.res`, as h3 events have) the 429's `Retry-After` header is set on the response too.
+ */
+export declare function enforceAiRateLimit(request: {
+  headers: Headers;
+  node?: {
+    res: {
+      setHeader(name: string, value: string): unknown;
+    };
+  };
+}): Promise<object>;
+//#endregion
+//# sourceMappingURL=host.d.ts.map

package/dist/server/host.js

@@ -0,0 +1,105 @@
+import { HttpError } from "./errors.js";
+import { createAiModels } from "./ai.js";
+import { createCollabServer } from "./collab.js";
+import { createRateLimiter } from "./rate-limit.js";
+import { enforceRateLimit } from "./handlers/context.js";
+//#region src/server/host.ts
+let adapter;
+let config = {};
+let collab;
+let models;
+let limiter;
+/** Registers the host's adapter; the collaboration server and the AI models are created from it on first use. Replaces (and closes) those of a previous adapter. */
+function setEditorAdapter(next) {
+	const previous = collab;
+	adapter = next;
+	collab = void 0;
+	models = void 0;
+	if (previous) previous.close();
+}
+function useEditorAdapter() {
+	if (!adapter) throw new Error("tiptap-editor: setEditorAdapter() wurde nicht aufgerufen");
+	return adapter;
+}
+/** Sets the AI configuration and the rate limit of the process-wide server. Call before the first request. */
+function configureEditorServer(next) {
+	config = next;
+	models = void 0;
+	limiter = void 0;
+}
+/** The process-wide collaboration server, created from the registered adapter on first use. */
+function useCollabServer() {
+	return collab ??= createCollabServer({ adapter: useEditorAdapter() });
+}
+/** The process-wide AI models: the configured presets, with the adapter's `languageModel`/`listModels` hooks. */
+function useAiModels() {
+	if (models) return models;
+	const current = useEditorAdapter();
+	return models = createAiModels({
+		presets: {},
+		languageModel: current.languageModel && ((ref, user) => current.languageModel(ref, user)),
+		listModels: current.listModels && ((user) => current.listModels(user)),
+		...config.ai
+	});
+}
+/** The process-wide AI rate limiter. */
+function useRateLimiter() {
+	return limiter ??= createRateLimiter(config.rateLimit ?? {
+		max: 30,
+		windowMs: 6e4
+	});
+}
+/** Closes the process-wide collaboration server (pending stores are written first) and forgets it. */
+async function closeEditorServer() {
+	const open = collab;
+	collab = void 0;
+	await open?.close();
+}
+/** Open collaboration connections and loaded documents of this process (zeros before the first connection). */
+function collabStats() {
+	return collab?.stats() ?? {
+		connections: 0,
+		documents: 0
+	};
+}
+/** Tell connected clients the document is gone, disconnect them and drop the Yjs state. Call before removing the JSON. */
+function forgetCollabDocument(id) {
+	return useCollabServer().forgetDocument(id);
+}
+/** Current content of a document that is open in the collaboration server (unsaved edits included), `null` when nobody has it open. */
+function liveContent(id) {
+	return collab?.liveContent(id) ?? null;
+}
+/** The host rewrote a document's content (an agent wrote the file): merge it into the open document now, see `CollabServer.contentChanged`. */
+function collabContentChanged(id) {
+	return collab?.contentChanged(id) ?? Promise.resolve();
+}
+/** AI SDK language model for `ref`, see `AiModels.resolveModel`. */
+function resolveModel(ref, user) {
+	return useAiModels().resolveModel(ref, user);
+}
+/** The models listed for `user`, see `AiModels.listModels`. */
+function listAiModels(user) {
+	return useAiModels().listModels(user);
+}
+/**
+* Per-user limit for host-defined AI routes: the same limiter as the editor's own AI endpoints. Call first in the route.
+* Throws 401 (`HttpError`) without a user, 429 when exceeded; returns the user the adapter authenticated, for `resolveModel`.
+* With a Node-backed request (`event.node.res`, as h3 events have) the 429's `Retry-After` header is set on the response too.
+*/
+async function enforceAiRateLimit(request) {
+	try {
+		return await enforceRateLimit({
+			adapter: useEditorAdapter(),
+			ai: useAiModels(),
+			limiter: useRateLimiter()
+		}, { headers: request.headers });
+	} catch (error) {
+		if (error instanceof HttpError) for (const [name, value] of Object.entries(error.headers)) request.node?.res.setHeader(name, value);
+		throw error;
+	}
+}
+//#endregion
+export { closeEditorServer, collabContentChanged, collabStats, configureEditorServer, enforceAiRateLimit, forgetCollabDocument, listAiModels, liveContent, resolveModel, setEditorAdapter, useAiModels, useCollabServer, useEditorAdapter, useRateLimiter };
+
+//# sourceMappingURL=host.js.map

package/dist/server/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","names":[],"sources":["../../src/server/host.ts"],"sourcesContent":["import type { JSONContent } from '@tiptap/core'\nimport type { LanguageModel } from 'ai'\nimport type { ModelProfile, ModelRef } from '../features/ai/protocol'\nimport type { EditorAdapter } from './adapter'\nimport { type AiModels, type AiModelsConfig, createAiModels } from './ai'\nimport { type CollabServer, createCollabServer } from './collab'\nimport { HttpError } from './errors'\nimport { enforceRateLimit } from './handlers/context'\nimport { createRateLimiter, type RateLimiter } from './rate-limit'\n\n// The process-wide editor server of hosts that wire the editor once at startup (the Nuxt module, a script with several\n// modules): one adapter, one collaboration server, one set of AI models, one rate limiter. Everything here is a\n// convenience over `createCollabServer` / `createAiModels` / `createRateLimiter`, which take their configuration\n// explicitly and can be instantiated any number of times (tests, several tenants).\n\nexport interface EditorServerConfig {\n  /**\n   * The AI models: presets, shared key, transcription, slots. `languageModel`/`listModels` default to the adapter's\n   * methods of the same names.\n   */\n  ai?: Partial<AiModelsConfig>\n  /** Per-user limit shared by the AI endpoints. Default 30 requests per minute. */\n  rateLimit?: { max: number, windowMs: number }\n}\n\nlet adapter: EditorAdapter | undefined\nlet config: EditorServerConfig = {}\nlet collab: CollabServer | undefined\nlet models: AiModels | undefined\nlet limiter: RateLimiter | undefined\n\n/** Registers the host's adapter; the collaboration server and the AI models are created from it on first use. Replaces (and closes) those of a previous adapter. */\nexport function setEditorAdapter(next: EditorAdapter) {\n  const previous = collab\n  adapter = next\n  collab = undefined\n  models = undefined\n  if (previous) void previous.close()\n}\n\nexport function useEditorAdapter(): EditorAdapter {\n  if (!adapter) throw new Error('tiptap-editor: setEditorAdapter() wurde nicht aufgerufen')\n  return adapter\n}\n\n/** Sets the AI configuration and the rate limit of the process-wide server. Call before the first request. */\nexport function configureEditorServer(next: EditorServerConfig) {\n  config = next\n  models = undefined\n  limiter = undefined\n}\n\n/** The process-wide collaboration server, created from the registered adapter on first use. */\nexport function useCollabServer(): CollabServer {\n  return collab ??= createCollabServer({ adapter: useEditorAdapter() })\n}\n\n/** The process-wide AI models: the configured presets, with the adapter's `languageModel`/`listModels` hooks. */\nexport function useAiModels(): AiModels {\n  if (models) return models\n  const current = useEditorAdapter()\n  return models = createAiModels({\n    presets: {},\n    languageModel: current.languageModel && ((ref, user) => current.languageModel!(ref, user)),\n    listModels: current.listModels && (user => current.listModels!(user)),\n    ...config.ai,\n  })\n}\n\n/** The process-wide AI rate limiter. */\nexport function useRateLimiter(): RateLimiter {\n  return limiter ??= createRateLimiter(config.rateLimit ?? { max: 30, windowMs: 60_000 })\n}\n\n/** Closes the process-wide collaboration server (pending stores are written first) and forgets it. */\nexport async function closeEditorServer() {\n  const open = collab\n  collab = undefined\n  await open?.close()\n}\n\n/** Open collaboration connections and loaded documents of this process (zeros before the first connection). */\nexport function collabStats(): { connections: number, documents: number } {\n  return collab?.stats() ?? { connections: 0, documents: 0 }\n}\n\n/** Tell connected clients the document is gone, disconnect them and drop the Yjs state. Call before removing the JSON. */\nexport function forgetCollabDocument(id: string): Promise<void> {\n  return useCollabServer().forgetDocument(id)\n}\n\n/** Current content of a document that is open in the collaboration server (unsaved edits included), `null` when nobody has it open. */\nexport function liveContent(id: string): JSONContent | null {\n  return collab?.liveContent(id) ?? null\n}\n\n/** The host rewrote a document's content (an agent wrote the file): merge it into the open document now, see `CollabServer.contentChanged`. */\nexport function collabContentChanged(id: string): Promise<void> {\n  return collab?.contentChanged(id) ?? Promise.resolve()\n}\n\n/** AI SDK language model for `ref`, see `AiModels.resolveModel`. */\nexport function resolveModel(ref: ModelRef, user: object | null): Promise<LanguageModel> {\n  return useAiModels().resolveModel(ref, user)\n}\n\n/** The models listed for `user`, see `AiModels.listModels`. */\nexport function listAiModels(user: object | null): Promise<ModelProfile[]> {\n  return useAiModels().listModels(user)\n}\n\n/**\n * Per-user limit for host-defined AI routes: the same limiter as the editor's own AI endpoints. Call first in the route.\n * Throws 401 (`HttpError`) without a user, 429 when exceeded; returns the user the adapter authenticated, for `resolveModel`.\n * With a Node-backed request (`event.node.res`, as h3 events have) the 429's `Retry-After` header is set on the response too.\n */\nexport async function enforceAiRateLimit(request: { headers: Headers, node?: { res: { setHeader(name: string, value: string): unknown } } }): Promise<object> {\n  try {\n    return await enforceRateLimit({ adapter: useEditorAdapter(), ai: useAiModels(), limiter: useRateLimiter() }, { headers: request.headers })\n  }\n  catch (error) {\n    if (error instanceof HttpError) for (const [name, value] of Object.entries(error.headers)) request.node?.res.setHeader(name, value)\n    throw error\n  }\n}\n"],"mappings":";;;;;;AAyBA,IAAI;AACJ,IAAI,SAA6B,CAAC;AAClC,IAAI;AACJ,IAAI;AACJ,IAAI;;AAGJ,SAAgB,iBAAiB,MAAqB;CACpD,MAAM,WAAW;CACjB,UAAU;CACV,SAAS,KAAA;CACT,SAAS,KAAA;CACT,IAAI,UAAU,SAAc,MAAM;AACpC;AAEA,SAAgB,mBAAkC;CAChD,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,0DAA0D;CACxF,OAAO;AACT;;AAGA,SAAgB,sBAAsB,MAA0B;CAC9D,SAAS;CACT,SAAS,KAAA;CACT,UAAU,KAAA;AACZ;;AAGA,SAAgB,kBAAgC;CAC9C,OAAO,WAAW,mBAAmB,EAAE,SAAS,iBAAiB,EAAE,CAAC;AACtE;;AAGA,SAAgB,cAAwB;CACtC,IAAI,QAAQ,OAAO;CACnB,MAAM,UAAU,iBAAiB;CACjC,OAAO,SAAS,eAAe;EAC7B,SAAS,CAAC;EACV,eAAe,QAAQ,mBAAmB,KAAK,SAAS,QAAQ,cAAe,KAAK,IAAI;EACxF,YAAY,QAAQ,gBAAe,SAAQ,QAAQ,WAAY,IAAI;EACnE,GAAG,OAAO;CACZ,CAAC;AACH;;AAGA,SAAgB,iBAA8B;CAC5C,OAAO,YAAY,kBAAkB,OAAO,aAAa;EAAE,KAAK;EAAI,UAAU;CAAO,CAAC;AACxF;;AAGA,eAAsB,oBAAoB;CACxC,MAAM,OAAO;CACb,SAAS,KAAA;CACT,MAAM,MAAM,MAAM;AACpB;;AAGA,SAAgB,cAA0D;CACxE,OAAO,QAAQ,MAAM,KAAK;EAAE,aAAa;EAAG,WAAW;CAAE;AAC3D;;AAGA,SAAgB,qBAAqB,IAA2B;CAC9D,OAAO,gBAAgB,CAAC,CAAC,eAAe,EAAE;AAC5C;;AAGA,SAAgB,YAAY,IAAgC;CAC1D,OAAO,QAAQ,YAAY,EAAE,KAAK;AACpC;;AAGA,SAAgB,qBAAqB,IAA2B;CAC9D,OAAO,QAAQ,eAAe,EAAE,KAAK,QAAQ,QAAQ;AACvD;;AAGA,SAAgB,aAAa,KAAe,MAA6C;CACvF,OAAO,YAAY,CAAC,CAAC,aAAa,KAAK,IAAI;AAC7C;;AAGA,SAAgB,aAAa,MAA8C;CACzE,OAAO,YAAY,CAAC,CAAC,WAAW,IAAI;AACtC;;;;;;AAOA,eAAsB,mBAAmB,SAAqH;CAC5J,IAAI;EACF,OAAO,MAAM,iBAAiB;GAAE,SAAS,iBAAiB;GAAG,IAAI,YAAY;GAAG,SAAS,eAAe;EAAE,GAAG,EAAE,SAAS,QAAQ,QAAQ,CAAC;CAC3I,SACO,OAAO;EACZ,IAAI,iBAAiB,WAAW,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,MAAM,OAAO,GAAG,QAAQ,MAAM,IAAI,UAAU,MAAM,KAAK;EAClI,MAAM;CACR;AACF"}

package/dist/server/index.d.ts

@@ -0,0 +1,8 @@
+import { HttpError } from "./errors.js";
+import { AiModels, AiModelsConfig, ChatMessage, ChatTurnPart, PresetConfig, TranscriptionConfig, createAiModels, streamChat, streamChatTurn, upstreamError } from "./ai.js";
+import { AuthenticateRequest, EditorAdapter } from "./adapter.js";
+import { COLLAB_FIELD, CollabConnection, CollabServer, CollabServerOptions, WebSocketLike, createCollabServer } from "./collab.js";
+import { RateLimiter, RateLimiterOptions, createRateLimiter, userKey } from "./rate-limit.js";
+import { decodeCollabState, encodeCollabState, isStateStale } from "./collab-state.js";
+import { EditorServerConfig, closeEditorServer, collabContentChanged, collabStats, configureEditorServer, enforceAiRateLimit, forgetCollabDocument, listAiModels, liveContent, resolveModel, setEditorAdapter, useAiModels, useCollabServer, useEditorAdapter } from "./host.js";
+export { type AiModels, type AiModelsConfig, type AuthenticateRequest, COLLAB_FIELD, type ChatMessage, type ChatTurnPart, type CollabConnection, type CollabServer, type CollabServerOptions, type EditorAdapter, type EditorServerConfig, HttpError, type PresetConfig, type RateLimiter, type RateLimiterOptions, type TranscriptionConfig, type WebSocketLike, closeEditorServer, collabContentChanged, collabStats, configureEditorServer, createAiModels, createCollabServer, createRateLimiter, decodeCollabState, encodeCollabState, enforceAiRateLimit, forgetCollabDocument, isStateStale, listAiModels, liveContent, resolveModel, setEditorAdapter, streamChat, streamChatTurn, upstreamError, useAiModels, useCollabServer, useEditorAdapter, userKey };

package/dist/server/index.js

@@ -0,0 +1,7 @@
+import { HttpError } from "./errors.js";
+import { createAiModels, streamChat, streamChatTurn, upstreamError } from "./ai.js";
+import { decodeCollabState, encodeCollabState, isStateStale } from "./collab-state.js";
+import { COLLAB_FIELD, createCollabServer } from "./collab.js";
+import { createRateLimiter, userKey } from "./rate-limit.js";
+import { closeEditorServer, collabContentChanged, collabStats, configureEditorServer, enforceAiRateLimit, forgetCollabDocument, listAiModels, liveContent, resolveModel, setEditorAdapter, useAiModels, useCollabServer, useEditorAdapter } from "./host.js";
+export { COLLAB_FIELD, HttpError, closeEditorServer, collabContentChanged, collabStats, configureEditorServer, createAiModels, createCollabServer, createRateLimiter, decodeCollabState, encodeCollabState, enforceAiRateLimit, forgetCollabDocument, isStateStale, listAiModels, liveContent, resolveModel, setEditorAdapter, streamChat, streamChatTurn, upstreamError, useAiModels, useCollabServer, useEditorAdapter, userKey };

package/dist/server/node.d.ts

@@ -0,0 +1,24 @@
+import { CollabServer } from "./collab.js";
+//#region src/server/node.d.ts
+export interface CollabListenOptions {
+  /** Port to listen on; 0 picks a free one (see `CollabListener.port`). Default 0. */
+  port?: number;
+  /** Address to bind. Default: all interfaces. */
+  host?: string;
+}
+export interface CollabListener {
+  /** The port the server listens on. */
+  port: number;
+  /** `ws://` URL of the server: use it as the `HocuspocusProvider` `url`; the document is the provider's `name`. */
+  url: string;
+  /** Closes the collab server (pending stores are written first), the websocket connections and the listening socket. */
+  close(): Promise<void>;
+}
+/**
+ * Serves `collab` on its own Node HTTP server: every websocket upgrade becomes a collaboration connection, whose user
+ * the adapter authenticates from the upgrade request's headers and the client's `token`. For a plain Node script;
+ * hosts with a web framework mount `collab.handleConnection` on its websocket support instead.
+ */
+export declare function listenCollab(collab: CollabServer, { port, host }?: CollabListenOptions): Promise<CollabListener>;
+//#endregion
+//# sourceMappingURL=node.d.ts.map