@ecsplico/editor 2.1.2 → 3.1.0

package/dist/server/handlers/editor.d.ts

@@ -1,5 +1,11 @@
 import { HandlerContext, HandlerRequest, HandlerResponse } from "./context.js";
 //#region src/server/handlers/editor.d.ts
+/**
+ * The capabilities this server serves (`BackendCapability[]`, see `serverCapabilities`): what the client's probe
+ * (`createHttpBackend({ probe: true })`) prunes its backend to. Requires an authenticated user through the `identity` port, like the
+ * routes whose capabilities it lists.
+ */
+export declare function capabilitiesGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse>;
 /** Body schema of `settingsPut`: the complete editor settings. */
 export declare const settingsPutBodySchema: import("zod").ZodObject<{
   version: import("zod").ZodLiteral<1>;
@@ -58,44 +64,44 @@ export declare const settingsPutBodySchema: import("zod").ZodObject<{
   }, import("zod/v4/core").$strip>;
 }, import("zod/v4/core").$strip>;
 /**
- * The authenticated user's editor settings, normalized with `parseEditorSettings`. `204` when the adapter keeps no
- * settings (the client stays on localStorage); `200` with JSON `null` when the user has none stored yet (the client
- * uploads its local ones).
+ * The authenticated user's editor settings, normalized with `parseEditorSettings`. `204` without a `settings` port (the
+ * client stays on localStorage); `200` with JSON `null` when the user has none stored yet (the client uploads its local
+ * ones).
  */
 export declare function settingsGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse>;
-/** Stores the authenticated user's editor settings (complete, validated: 400 otherwise); `501` when the adapter keeps none. */
+/** Stores the authenticated user's editor settings (complete, validated: 400 otherwise); `501` without a `settings` port. */
 export declare function settingsPut(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse>;
 /**
  * All `#` tag names used in any document, deduplicated and sorted. Documents currently open in the collaboration server
  * are read from their live Y.Doc (a tag added in document A shows up in document B before the debounced store); all
- * others from the adapter's stored content.
+ * others from the stored content of `ports.documents`.
  */
-export declare function listWorkspaceTags({ adapter, collab }: HandlerContext): Promise<string[]>;
+export declare function listWorkspaceTags({ ports, collab }: HandlerContext): Promise<string[]>;
 /**
  * Tag names for the `#` popup: tags used in any document, filtered by the normalised `?q=` (prefix matches first, then
- * substrings). Requires an authenticated user via the adapter.
+ * substrings). Requires an authenticated user through the `identity` port.
  */
 export declare function tagsGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse>;
 /**
  * Users for the `@` mention popup, filtered case-insensitively by `?q=` (prefix matches first, then substrings).
- * Requires an authenticated user via the adapter.
+ * Requires an authenticated user through the `identity` port.
  */
 export declare function usersGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse>;
 /**
  * Stores a file (multipart field `file`) in the package of document `params.id` (or `scratch` for editors not bound to
- * a stored document); answers `{ url, name }`. Requires an authenticated user via the adapter.
+ * a stored document); answers `{ url, name, sha256 }`. Requires an authenticated user through the `identity` port.
  */
 export declare function assetPost(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse>;
 /**
  * The stored file `params.name` of document `params.id`, with `Range` support (media elements send the session cookie
- * like any same-origin request). Requires an authenticated user via the adapter.
+ * like any same-origin request). Requires an authenticated user through the `identity` port.
  */
 export declare function assetGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse>;
-/** The theme library (builtins and uploads) as `ThemeRecord[]`. `501` when the adapter has no theme support. */
+/** The theme library (builtins and uploads) as `ThemeRecord[]`. `501` without a `themes` port. */
 export declare function themesGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse>;
-/** `theme.css` of theme `params.id` as `text/css`. `400` for a malformed id, `404` for an unknown one, `501` when the adapter has no theme support. */
+/** `theme.css` of theme `params.id` as `text/css`. `400` for a malformed id, `404` for an unknown one, `501` without a `themes` port. */
 export declare function themeGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse>;
-/** Deletes the uploaded theme `params.id` (`204`). `400` for a malformed id, `404` for an unknown one, `403` for a builtin, `501` when the adapter has no theme write support. */
+/** Deletes the uploaded theme `params.id` (`204`). `400` for a malformed id, `404` for an unknown one, `403` for a builtin, `501` without a `themes` port. */
 export declare function themeDelete(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse>;
 /**
  * Uploads an Obsidian theme into the shared library: multipart `css` (File, required), `manifest` (File) and `name`

package/dist/server/handlers/editor.js

@@ -4,49 +4,60 @@ import { ASSET_DOCUMENT_ID, ASSET_NAME, assetUrl } from "../../features/media/as
 import { MAX_MEDIA_BYTES, MEDIA_TYPES, mediaKindOf, mediaMime } from "../../features/media/schema.js";
 import { collectTagNames, normalizeTagName } from "../../features/mentions/tag.js";
 import { COLLAB_FIELD } from "../collab.js";
-import { authenticated, empty, json, readBody, text } from "./context.js";
+import { authenticated, empty, json, port, readBody, text } from "./context.js";
+import { serverCapabilities } from "../ports.js";
 import { MAX_THEME_BYTES, themeManifestSchema } from "../../features/themes/schema.js";
+import { createHash } from "node:crypto";
 import { yDocToProsemirrorJSON } from "@tiptap/y-tiptap";
 //#region src/server/handlers/editor.ts
+/**
+* The capabilities this server serves (`BackendCapability[]`, see `serverCapabilities`): what the client's probe
+* (`createHttpBackend({ probe: true })`) prunes its backend to. Requires an authenticated user through the `identity` port, like the
+* routes whose capabilities it lists.
+*/
+async function capabilitiesGet(ctx, request) {
+	await authenticated(ctx, request);
+	return json(serverCapabilities(ctx.ports, ctx.served));
+}
 /** Body schema of `settingsPut`: the complete editor settings. */
 const settingsPutBodySchema = editorSettingsSchema;
 const MAX_USERS = 20;
 const MAX_TAGS = 20;
 /**
-* The authenticated user's editor settings, normalized with `parseEditorSettings`. `204` when the adapter keeps no
-* settings (the client stays on localStorage); `200` with JSON `null` when the user has none stored yet (the client
-* uploads its local ones).
+* The authenticated user's editor settings, normalized with `parseEditorSettings`. `204` without a `settings` port (the
+* client stays on localStorage); `200` with JSON `null` when the user has none stored yet (the client uploads its local
+* ones).
 */
 async function settingsGet(ctx, request) {
 	const user = await authenticated(ctx, request);
-	if (!ctx.adapter.loadSettings) return empty();
-	const stored = await ctx.adapter.loadSettings(user);
+	if (!ctx.ports.settings) return empty();
+	const stored = await ctx.ports.settings.loadSettings(user);
 	if (stored === null || stored === void 0) return json(null);
 	return json(parseEditorSettings(stored));
 }
-/** Stores the authenticated user's editor settings (complete, validated: 400 otherwise); `501` when the adapter keeps none. */
+/** Stores the authenticated user's editor settings (complete, validated: 400 otherwise); `501` without a `settings` port. */
 async function settingsPut(ctx, request) {
 	const user = await authenticated(ctx, request);
-	if (!ctx.adapter.storeSettings) throw new HttpError(501, "Einstellungen werden nicht gespeichert");
+	const store = port(ctx, "settings");
 	const settings = await readBody(request, settingsPutBodySchema);
-	await ctx.adapter.storeSettings(user, settings);
+	await store.storeSettings(user, settings);
 	return empty();
 }
 /**
 * All `#` tag names used in any document, deduplicated and sorted. Documents currently open in the collaboration server
 * are read from their live Y.Doc (a tag added in document A shows up in document B before the debounced store); all
-* others from the adapter's stored content.
+* others from the stored content of `ports.documents`.
 */
-async function listWorkspaceTags({ adapter, collab }) {
+async function listWorkspaceTags({ ports, collab }) {
 	const names = /* @__PURE__ */ new Set();
 	const open = collab?.hocuspocus.documents;
 	if (open) for (const doc of open.values()) collectTagNames(yDocToProsemirrorJSON(doc, COLLAB_FIELD), names);
-	for (const { id, content } of await adapter.listContents()) if (!open?.has(id)) collectTagNames(content, names);
+	for (const { id, content } of await ports.documents.listContents()) if (!open?.has(id)) collectTagNames(content, names);
 	return [...names].sort((a, b) => a.localeCompare(b, "de"));
 }
 /**
 * Tag names for the `#` popup: tags used in any document, filtered by the normalised `?q=` (prefix matches first, then
-* substrings). Requires an authenticated user via the adapter.
+* substrings). Requires an authenticated user through the `identity` port.
 */
 async function tagsGet(ctx, request) {
 	await authenticated(ctx, request);
@@ -57,12 +68,12 @@ async function tagsGet(ctx, request) {
 }
 /**
 * Users for the `@` mention popup, filtered case-insensitively by `?q=` (prefix matches first, then substrings).
-* Requires an authenticated user via the adapter.
+* Requires an authenticated user through the `identity` port.
 */
 async function usersGet(ctx, request) {
 	await authenticated(ctx, request);
 	const q = String(request.query?.q ?? "").trim().toLowerCase();
-	const matches = (await ctx.adapter.listUsers()).map(({ id, username, color }) => ({
+	const matches = (await port(ctx, "directory").listUsers()).map(({ id, username, color }) => ({
 		id,
 		username,
 		color
@@ -72,7 +83,7 @@ async function usersGet(ctx, request) {
 }
 /**
 * Stores a file (multipart field `file`) in the package of document `params.id` (or `scratch` for editors not bound to
-* a stored document); answers `{ url, name }`. Requires an authenticated user via the adapter.
+* a stored document); answers `{ url, name, sha256 }`. Requires an authenticated user through the `identity` port.
 */
 async function assetPost(ctx, request) {
 	await authenticated(ctx, request);
@@ -86,30 +97,34 @@ async function assetPost(ctx, request) {
 	const nameExt = file.name.includes(".") ? file.name.split(".").pop()?.toLowerCase() : void 0;
 	const ext = MEDIA_TYPES[mime]?.ext ?? (nameExt && /^[a-z0-9]{1,8}$/.test(nameExt) ? nameExt : "bin");
 	const name = `${globalThis.crypto.randomUUID()}.${ext}`;
-	await ctx.adapter.storeAsset(id, {
+	const data = Buffer.from(await file.arrayBuffer());
+	const sha256 = createHash("sha256").update(data).digest("hex");
+	await port(ctx, "assets").storeAsset(id, {
 		name,
 		filename: file.name.slice(0, 255) || name,
 		mimeType: mime,
 		size: file.size,
 		createdAt: (/* @__PURE__ */ new Date()).toISOString(),
-		data: Buffer.from(await file.arrayBuffer())
+		sha256,
+		data
 	});
 	return json({
 		url: assetUrl(id, name),
-		name
+		name,
+		sha256
 	});
 }
 const BYTE_RANGE = /^bytes=(\d*)-(\d*)$/;
 /**
 * The stored file `params.name` of document `params.id`, with `Range` support (media elements send the session cookie
-* like any same-origin request). Requires an authenticated user via the adapter.
+* like any same-origin request). Requires an authenticated user through the `identity` port.
 */
 async function assetGet(ctx, request) {
 	await authenticated(ctx, request);
 	const id = request.params?.id ?? "";
 	const name = request.params?.name ?? "";
 	if (!ASSET_DOCUMENT_ID.test(id) || !ASSET_NAME.test(name)) throw new HttpError(404, "Datei nicht gefunden");
-	const asset = await ctx.adapter.loadAsset(id, name);
+	const asset = await port(ctx, "assets").loadAsset(id, name);
 	if (!asset) throw new HttpError(404, "Datei nicht gefunden");
 	const { record, data } = asset;
 	const total = data.length;
@@ -143,20 +158,18 @@ async function assetGet(ctx, request) {
 		body: data.subarray(start, end + 1)
 	};
 }
-const themesUnsupported = () => new HttpError(501, "Themes werden vom Adapter nicht unterstützt");
-/** The theme library (builtins and uploads) as `ThemeRecord[]`. `501` when the adapter has no theme support. */
+/** The theme library (builtins and uploads) as `ThemeRecord[]`. `501` without a `themes` port. */
 async function themesGet(ctx, request) {
 	await authenticated(ctx, request);
-	if (!ctx.adapter.listThemes) throw themesUnsupported();
-	return json(await ctx.adapter.listThemes());
+	return json(await port(ctx, "themes").listThemes());
 }
-/** `theme.css` of theme `params.id` as `text/css`. `400` for a malformed id, `404` for an unknown one, `501` when the adapter has no theme support. */
+/** `theme.css` of theme `params.id` as `text/css`. `400` for a malformed id, `404` for an unknown one, `501` without a `themes` port. */
 async function themeGet(ctx, request) {
 	await authenticated(ctx, request);
-	if (!ctx.adapter.loadTheme) throw themesUnsupported();
+	const themes = port(ctx, "themes");
 	const id = request.params?.id ?? "";
 	if (!THEME_ID.test(id)) throw new HttpError(400, "Ungültige Theme-ID");
-	const theme = await ctx.adapter.loadTheme(id);
+	const theme = await themes.loadTheme(id);
 	if (!theme) throw new HttpError(404, "Theme nicht gefunden");
 	const etag = `"${theme.record.version ?? "0"}-${new TextEncoder().encode(theme.css).length}"`;
 	const headers = {
@@ -166,17 +179,16 @@ async function themeGet(ctx, request) {
 	if (request.headers.get("if-none-match") === etag) return empty(304, headers);
 	return text(theme.css, "text/css; charset=utf-8", headers);
 }
-/** Deletes the uploaded theme `params.id` (`204`). `400` for a malformed id, `404` for an unknown one, `403` for a builtin, `501` when the adapter has no theme write support. */
+/** Deletes the uploaded theme `params.id` (`204`). `400` for a malformed id, `404` for an unknown one, `403` for a builtin, `501` without a `themes` port. */
 async function themeDelete(ctx, request) {
 	await authenticated(ctx, request);
-	const { adapter } = ctx;
-	if (!adapter.listThemes || !adapter.removeTheme) throw themesUnsupported();
+	const themes = port(ctx, "themes");
 	const id = request.params?.id ?? "";
 	if (!THEME_ID.test(id)) throw new HttpError(400, "Ungültige Theme-ID");
-	const record = (await adapter.listThemes()).find((t) => t.id === id);
+	const record = (await themes.listThemes()).find((t) => t.id === id);
 	if (!record) throw new HttpError(404, "Theme nicht gefunden");
 	if (record.builtin) throw new HttpError(403, "Mitgelieferte Themes können nicht gelöscht werden");
-	if (!await adapter.removeTheme(id)) throw new HttpError(404, "Theme nicht gefunden");
+	if (!await themes.removeTheme(id)) throw new HttpError(404, "Theme nicht gefunden");
 	return empty();
 }
 const MAX_MANIFEST_BYTES = 65536;
@@ -193,8 +205,7 @@ function slugOf(name, max) {
 */
 async function themePost(ctx, request) {
 	await authenticated(ctx, request);
-	const { adapter } = ctx;
-	if (!adapter.listThemes || !adapter.storeTheme) throw themesUnsupported();
+	const themes = port(ctx, "themes");
 	const form = await request.readForm?.().catch(() => null);
 	const cssFile = form?.get("css");
 	if (!(cssFile instanceof File) || cssFile.size === 0) throw new HttpError(400, "Keine CSS-Datei übermittelt");
@@ -218,7 +229,7 @@ async function themePost(ctx, request) {
 	const nameField = form?.get("name");
 	const cssBaseName = cssFile.name.replace(/\.css$/i, "");
 	const name = manifest?.name ?? [typeof nameField === "string" ? nameField : "", cssBaseName].map((n) => n.trim().slice(0, 120)).find(Boolean) ?? "Theme";
-	const taken = new Set((await adapter.listThemes()).map((t) => t.id));
+	const taken = new Set((await themes.listThemes()).map((t) => t.id));
 	let id = slugOf(name, MAX_ID_LENGTH);
 	for (let n = 2; taken.has(id); n++) {
 		const suffix = `-${n}`;
@@ -229,13 +240,13 @@ async function themePost(ctx, request) {
 		name,
 		id
 	};
-	await adapter.storeTheme(record, css);
+	await themes.storeTheme(record, css);
 	return json({
 		...record,
 		builtin: false
 	}, 201);
 }
 //#endregion
-export { assetGet, assetPost, listWorkspaceTags, settingsGet, settingsPut, settingsPutBodySchema, tagsGet, themeDelete, themeGet, themePost, themesGet, usersGet };
+export { assetGet, assetPost, capabilitiesGet, listWorkspaceTags, settingsGet, settingsPut, settingsPutBodySchema, tagsGet, themeDelete, themeGet, themePost, themesGet, usersGet };
 
 //# sourceMappingURL=editor.js.map

package/dist/server/handlers/editor.js.map

@@ -1 +1 @@
-{"version":3,"file":"editor.js","names":[],"sources":["../../../src/server/handlers/editor.ts"],"sourcesContent":["import { yDocToProsemirrorJSON } from '@tiptap/y-tiptap'\nimport { ASSET_DOCUMENT_ID, ASSET_NAME, assetUrl, MAX_MEDIA_BYTES, MEDIA_TYPES, mediaKindOf, mediaMime } from '../../features/media/schema'\nimport { collectTagNames, normalizeTagName } from '../../features/mentions/schema'\nimport { MAX_THEME_BYTES, THEME_ID, themeManifestSchema, type ThemeManifest, type ThemeRecord } from '../../features/themes/schema'\nimport { editorSettingsSchema, parseEditorSettings } from '../../settings'\nimport { COLLAB_FIELD } from '../collab'\nimport { HttpError } from '../errors'\nimport { authenticated, empty, type HandlerContext, type HandlerRequest, type HandlerResponse, json, readBody, text } from './context'\n\n/** Body schema of `settingsPut`: the complete editor settings. */\nexport const settingsPutBodySchema = editorSettingsSchema\n\nconst MAX_USERS = 20\nconst MAX_TAGS = 20\n\n/**\n * The authenticated user's editor settings, normalized with `parseEditorSettings`. `204` when the adapter keeps no\n * settings (the client stays on localStorage); `200` with JSON `null` when the user has none stored yet (the client\n * uploads its local ones).\n */\nexport async function settingsGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  const user = await authenticated(ctx, request)\n  if (!ctx.adapter.loadSettings) return empty()\n  const stored = await ctx.adapter.loadSettings(user)\n  if (stored === null || stored === undefined) return json(null)\n  return json(parseEditorSettings(stored))\n}\n\n/** Stores the authenticated user's editor settings (complete, validated: 400 otherwise); `501` when the adapter keeps none. */\nexport async function settingsPut(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  const user = await authenticated(ctx, request)\n  if (!ctx.adapter.storeSettings) throw new HttpError(501, 'Einstellungen werden nicht gespeichert')\n  const settings = await readBody(request, settingsPutBodySchema)\n  await ctx.adapter.storeSettings(user, settings)\n  return empty()\n}\n\n/**\n * All `#` tag names used in any document, deduplicated and sorted. Documents currently open in the collaboration server\n * are read from their live Y.Doc (a tag added in document A shows up in document B before the debounced store); all\n * others from the adapter's stored content.\n */\nexport async function listWorkspaceTags({ adapter, collab }: HandlerContext): Promise<string[]> {\n  const names = new Set<string>()\n  const open = collab?.hocuspocus.documents\n  if (open) for (const doc of open.values()) collectTagNames(yDocToProsemirrorJSON(doc, COLLAB_FIELD), names)\n  for (const { id, content } of await adapter.listContents()) {\n    if (!open?.has(id)) collectTagNames(content, names)\n  }\n  return [...names].sort((a, b) => a.localeCompare(b, 'de'))\n}\n\n/**\n * Tag names for the `#` popup: tags used in any document, filtered by the normalised `?q=` (prefix matches first, then\n * substrings). Requires an authenticated user via the adapter.\n */\nexport async function tagsGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  await authenticated(ctx, request)\n  const q = normalizeTagName(String(request.query?.q ?? ''))\n  const matches = (await listWorkspaceTags(ctx)).filter(tag => tag.includes(q))\n  const prefixMatches = matches.filter(tag => tag.startsWith(q))\n  return json([...prefixMatches, ...matches.filter(tag => !tag.startsWith(q))].slice(0, MAX_TAGS))\n}\n\n/**\n * Users for the `@` mention popup, filtered case-insensitively by `?q=` (prefix matches first, then substrings).\n * Requires an authenticated user via the adapter.\n */\nexport async function usersGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  await authenticated(ctx, request)\n  const q = String(request.query?.q ?? '').trim().toLowerCase()\n  // Re-pick the fields so an adapter returning richer user records cannot leak them.\n  const matches = (await ctx.adapter.listUsers())\n    .map(({ id, username, color }) => ({ id, username, color }))\n    .filter(u => u.username.toLowerCase().includes(q))\n    .sort((a, b) => a.username.localeCompare(b.username, 'de'))\n  const prefixMatches = matches.filter(u => u.username.toLowerCase().startsWith(q))\n  return json([...prefixMatches, ...matches.filter(u => !prefixMatches.includes(u))].slice(0, MAX_USERS))\n}\n\n/**\n * Stores a file (multipart field `file`) in the package of document `params.id` (or `scratch` for editors not bound to\n * a stored document); answers `{ url, name }`. Requires an authenticated user via the adapter.\n */\nexport async function assetPost(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  await authenticated(ctx, request)\n  const id = request.params?.id ?? ''\n  if (!ASSET_DOCUMENT_ID.test(id)) throw new HttpError(400, 'Ungültige Dokument-ID')\n  // A body that is no multipart form at all counts as „no file“.\n  const form = await request.readForm?.().catch(() => null)\n  const file = form?.get('file')\n  if (!(file instanceof File)) throw new HttpError(400, 'Keine Datei übermittelt')\n  const mime = mediaMime(file.type) || 'application/octet-stream'\n  const maxBytes = MAX_MEDIA_BYTES[mediaKindOf(mime) ?? 'file']\n  if (file.size > maxBytes) throw new HttpError(413, `Datei ist größer als ${maxBytes / 1024 / 1024} MB`)\n  const nameExt = file.name.includes('.') ? file.name.split('.').pop()?.toLowerCase() : undefined\n  const ext = MEDIA_TYPES[mime]?.ext ?? (nameExt && /^[a-z0-9]{1,8}$/.test(nameExt) ? nameExt : 'bin')\n  const name = `${globalThis.crypto.randomUUID()}.${ext}`\n  await ctx.adapter.storeAsset(id, {\n    name,\n    filename: file.name.slice(0, 255) || name,\n    mimeType: mime,\n    size: file.size,\n    createdAt: new Date().toISOString(),\n    data: Buffer.from(await file.arrayBuffer()),\n  })\n  return json({ url: assetUrl(id, name), name })\n}\n\n// Answers single byte ranges (`Range: bytes=a-b`, `bytes=a-`, `bytes=-n`): Safari only plays and seeks audio/video\n// served with range support. Other Range forms (several ranges) get the whole file, which RFC 9110 allows.\nconst BYTE_RANGE = /^bytes=(\\d*)-(\\d*)$/\n\n/**\n * The stored file `params.name` of document `params.id`, with `Range` support (media elements send the session cookie\n * like any same-origin request). Requires an authenticated user via the adapter.\n */\nexport async function assetGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  await authenticated(ctx, request)\n  const id = request.params?.id ?? ''\n  const name = request.params?.name ?? ''\n  if (!ASSET_DOCUMENT_ID.test(id) || !ASSET_NAME.test(name)) throw new HttpError(404, 'Datei nicht gefunden')\n  const asset = await ctx.adapter.loadAsset(id, name)\n  if (!asset) throw new HttpError(404, 'Datei nicht gefunden')\n  const { record, data } = asset\n  const total = data.length\n  const disposition = record.mimeType === 'application/octet-stream' ? 'attachment' : 'inline'\n  const headers: Record<string, string> = {\n    'accept-ranges': 'bytes',\n    'cache-control': 'private, max-age=31536000, immutable',\n    'content-type': record.mimeType,\n    'content-disposition': `${disposition}; filename*=UTF-8''${encodeURIComponent(record.filename)}`,\n  }\n  const range = BYTE_RANGE.exec(request.headers.get('range') ?? '')\n  if (!range) return { status: 200, headers: { ...headers, 'content-length': String(total) }, body: data }\n  const [, first, last] = range\n  const start = first ? Number(first) : Math.max(0, total - Number(last))\n  const end = first && last ? Math.min(Number(last), total - 1) : total - 1\n  if (start >= total || start > end) return empty(416, { 'content-range': `bytes */${total}` })\n  return {\n    status: 206,\n    headers: { ...headers, 'content-range': `bytes ${start}-${end}/${total}`, 'content-length': String(end - start + 1) },\n    body: data.subarray(start, end + 1),\n  }\n}\n\nconst themesUnsupported = () => new HttpError(501, 'Themes werden vom Adapter nicht unterstützt')\n\n/** The theme library (builtins and uploads) as `ThemeRecord[]`. `501` when the adapter has no theme support. */\nexport async function themesGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  await authenticated(ctx, request)\n  if (!ctx.adapter.listThemes) throw themesUnsupported()\n  return json(await ctx.adapter.listThemes())\n}\n\n/** `theme.css` of theme `params.id` as `text/css`. `400` for a malformed id, `404` for an unknown one, `501` when the adapter has no theme support. */\nexport async function themeGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  await authenticated(ctx, request)\n  if (!ctx.adapter.loadTheme) throw themesUnsupported()\n  const id = request.params?.id ?? ''\n  if (!THEME_ID.test(id)) throw new HttpError(400, 'Ungültige Theme-ID')\n  const theme = await ctx.adapter.loadTheme(id)\n  if (!theme) throw new HttpError(404, 'Theme nicht gefunden')\n  const etag = `\"${theme.record.version ?? '0'}-${new TextEncoder().encode(theme.css).length}\"`\n  const headers = { 'cache-control': 'private, max-age=0, must-revalidate', 'etag': etag }\n  if (request.headers.get('if-none-match') === etag) return empty(304, headers)\n  return text(theme.css, 'text/css; charset=utf-8', headers)\n}\n\n/** Deletes the uploaded theme `params.id` (`204`). `400` for a malformed id, `404` for an unknown one, `403` for a builtin, `501` when the adapter has no theme write support. */\nexport async function themeDelete(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  await authenticated(ctx, request)\n  const { adapter } = ctx\n  if (!adapter.listThemes || !adapter.removeTheme) throw themesUnsupported()\n  const id = request.params?.id ?? ''\n  if (!THEME_ID.test(id)) throw new HttpError(400, 'Ungültige Theme-ID')\n  // `removeTheme` answers `false` for builtins and unknown ids alike, so the record decides between 403 and 404.\n  const record = (await adapter.listThemes()).find(t => t.id === id)\n  if (!record) throw new HttpError(404, 'Theme nicht gefunden')\n  if (record.builtin) throw new HttpError(403, 'Mitgelieferte Themes können nicht gelöscht werden')\n  if (!await adapter.removeTheme(id)) throw new HttpError(404, 'Theme nicht gefunden')\n  return empty()\n}\n\nconst MAX_MANIFEST_BYTES = 64 * 1024\nconst MAX_ID_LENGTH = 64\n// Markers of an HTML/XML/SVG document in the head of a „stylesheet“.\nconst MARKUP_HEAD = /<script|<\\?xml/i\n\n/** `[^a-z0-9]+` → `-`, trimmed, at most `max` characters; `theme` when nothing is left. */\nfunction slugOf(name: string, max: number): string {\n  const slug = name.normalize('NFKD').toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+/, '').slice(0, max).replace(/-+$/, '')\n  return slug || 'theme'\n}\n\n/**\n * Uploads an Obsidian theme into the shared library: multipart `css` (File, required), `manifest` (File) and `name`\n * (string) optional. Answers 201 with the new `ThemeRecord`; the id is the slug of the name, made unique with `-2`,\n * `-3` … against the library.\n */\nexport async function themePost(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  await authenticated(ctx, request)\n  const { adapter } = ctx\n  if (!adapter.listThemes || !adapter.storeTheme) throw themesUnsupported()\n  // A body that is no multipart form counts as „no file“.\n  const form = await request.readForm?.().catch(() => null)\n  const cssFile = form?.get('css')\n  if (!(cssFile instanceof File) || cssFile.size === 0) throw new HttpError(400, 'Keine CSS-Datei übermittelt')\n  if (cssFile.size > MAX_THEME_BYTES) throw new HttpError(413, `Theme ist größer als ${MAX_THEME_BYTES / 1024 / 1024} MB`)\n  const bytes = new Uint8Array(await cssFile.arrayBuffer())\n  if (bytes.includes(0) || MARKUP_HEAD.test(new TextDecoder('latin1').decode(bytes.subarray(0, 512)))) {\n    throw new HttpError(400, 'Theme ist keine CSS-Textdatei')\n  }\n  let css: string\n  try {\n    css = new TextDecoder('utf-8', { fatal: true }).decode(bytes)\n  }\n  catch {\n    throw new HttpError(400, 'Theme ist keine gültige UTF-8-Textdatei')\n  }\n\n  let manifest: ThemeManifest | undefined\n  const manifestFile = form?.get('manifest')\n  if (manifestFile instanceof File && manifestFile.size > 0) {\n    try {\n      if (manifestFile.size > MAX_MANIFEST_BYTES) throw new Error('manifest too large')\n      manifest = themeManifestSchema.parse(JSON.parse(await manifestFile.text()))\n    }\n    catch {\n      throw new HttpError(400, 'Ungültiges manifest.json')\n    }\n  }\n\n  const nameField = form?.get('name')\n  const cssBaseName = cssFile.name.replace(/\\.css$/i, '')\n  const name = manifest?.name\n    ?? [typeof nameField === 'string' ? nameField : '', cssBaseName].map(n => n.trim().slice(0, 120)).find(Boolean)\n    ?? 'Theme'\n\n  const taken = new Set((await adapter.listThemes()).map(t => t.id))\n  const base = slugOf(name, MAX_ID_LENGTH)\n  let id = base\n  for (let n = 2; taken.has(id); n++) {\n    const suffix = `-${n}`\n    id = `${slugOf(name, MAX_ID_LENGTH - suffix.length)}${suffix}`\n  }\n\n  const record: Omit<ThemeRecord, 'builtin'> = { ...manifest, name, id }\n  await adapter.storeTheme(record, css)\n  return json({ ...record, builtin: false } satisfies ThemeRecord, 201)\n}\n"],"mappings":";;;;;;;;;;;AAUA,MAAa,wBAAwB;AAErC,MAAM,YAAY;AAClB,MAAM,WAAW;;;;;;AAOjB,eAAsB,YAAY,KAAqB,SAAmD;CACxG,MAAM,OAAO,MAAM,cAAc,KAAK,OAAO;CAC7C,IAAI,CAAC,IAAI,QAAQ,cAAc,OAAO,MAAM;CAC5C,MAAM,SAAS,MAAM,IAAI,QAAQ,aAAa,IAAI;CAClD,IAAI,WAAW,QAAQ,WAAW,KAAA,GAAW,OAAO,KAAK,IAAI;CAC7D,OAAO,KAAK,oBAAoB,MAAM,CAAC;AACzC;;AAGA,eAAsB,YAAY,KAAqB,SAAmD;CACxG,MAAM,OAAO,MAAM,cAAc,KAAK,OAAO;CAC7C,IAAI,CAAC,IAAI,QAAQ,eAAe,MAAM,IAAI,UAAU,KAAK,wCAAwC;CACjG,MAAM,WAAW,MAAM,SAAS,SAAS,qBAAqB;CAC9D,MAAM,IAAI,QAAQ,cAAc,MAAM,QAAQ;CAC9C,OAAO,MAAM;AACf;;;;;;AAOA,eAAsB,kBAAkB,EAAE,SAAS,UAA6C;CAC9F,MAAM,wBAAQ,IAAI,IAAY;CAC9B,MAAM,OAAO,QAAQ,WAAW;CAChC,IAAI,MAAM,KAAK,MAAM,OAAO,KAAK,OAAO,GAAG,gBAAgB,sBAAsB,KAAK,YAAY,GAAG,KAAK;CAC1G,KAAK,MAAM,EAAE,IAAI,aAAa,MAAM,QAAQ,aAAa,GACvD,IAAI,CAAC,MAAM,IAAI,EAAE,GAAG,gBAAgB,SAAS,KAAK;CAEpD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,GAAG,IAAI,CAAC;AAC3D;;;;;AAMA,eAAsB,QAAQ,KAAqB,SAAmD;CACpG,MAAM,cAAc,KAAK,OAAO;CAChC,MAAM,IAAI,iBAAiB,OAAO,QAAQ,OAAO,KAAK,EAAE,CAAC;CACzD,MAAM,WAAW,MAAM,kBAAkB,GAAG,EAAA,CAAG,QAAO,QAAO,IAAI,SAAS,CAAC,CAAC;CAC5E,MAAM,gBAAgB,QAAQ,QAAO,QAAO,IAAI,WAAW,CAAC,CAAC;CAC7D,OAAO,KAAK,CAAC,GAAG,eAAe,GAAG,QAAQ,QAAO,QAAO,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,QAAQ,CAAC;AACjG;;;;;AAMA,eAAsB,SAAS,KAAqB,SAAmD;CACrG,MAAM,cAAc,KAAK,OAAO;CAChC,MAAM,IAAI,OAAO,QAAQ,OAAO,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY;CAE5D,MAAM,WAAW,MAAM,IAAI,QAAQ,UAAU,EAAA,CAC1C,KAAK,EAAE,IAAI,UAAU,aAAa;EAAE;EAAI;EAAU;CAAM,EAAE,CAAC,CAC3D,QAAO,MAAK,EAAE,SAAS,YAAY,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CACjD,MAAM,GAAG,MAAM,EAAE,SAAS,cAAc,EAAE,UAAU,IAAI,CAAC;CAC5D,MAAM,gBAAgB,QAAQ,QAAO,MAAK,EAAE,SAAS,YAAY,CAAC,CAAC,WAAW,CAAC,CAAC;CAChF,OAAO,KAAK,CAAC,GAAG,eAAe,GAAG,QAAQ,QAAO,MAAK,CAAC,cAAc,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,SAAS,CAAC;AACxG;;;;;AAMA,eAAsB,UAAU,KAAqB,SAAmD;CACtG,MAAM,cAAc,KAAK,OAAO;CAChC,MAAM,KAAK,QAAQ,QAAQ,MAAM;CACjC,IAAI,CAAC,kBAAkB,KAAK,EAAE,GAAG,MAAM,IAAI,UAAU,KAAK,uBAAuB;CAGjF,MAAM,QAAO,MADM,QAAQ,WAAW,CAAC,CAAC,YAAY,IAAI,EAAA,EACrC,IAAI,MAAM;CAC7B,IAAI,EAAE,gBAAgB,OAAO,MAAM,IAAI,UAAU,KAAK,yBAAyB;CAC/E,MAAM,OAAO,UAAU,KAAK,IAAI,KAAK;CACrC,MAAM,WAAW,gBAAgB,YAAY,IAAI,KAAK;CACtD,IAAI,KAAK,OAAO,UAAU,MAAM,IAAI,UAAU,KAAK,wBAAwB,WAAW,OAAO,KAAK,IAAI;CACtG,MAAM,UAAU,KAAK,KAAK,SAAS,GAAG,IAAI,KAAK,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,YAAY,IAAI,KAAA;CACtF,MAAM,MAAM,YAAY,KAAK,EAAE,QAAQ,WAAW,kBAAkB,KAAK,OAAO,IAAI,UAAU;CAC9F,MAAM,OAAO,GAAG,WAAW,OAAO,WAAW,EAAE,GAAG;CAClD,MAAM,IAAI,QAAQ,WAAW,IAAI;EAC/B;EACA,UAAU,KAAK,KAAK,MAAM,GAAG,GAAG,KAAK;EACrC,UAAU;EACV,MAAM,KAAK;EACX,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;EAClC,MAAM,OAAO,KAAK,MAAM,KAAK,YAAY,CAAC;CAC5C,CAAC;CACD,OAAO,KAAK;EAAE,KAAK,SAAS,IAAI,IAAI;EAAG;CAAK,CAAC;AAC/C;AAIA,MAAM,aAAa;;;;;AAMnB,eAAsB,SAAS,KAAqB,SAAmD;CACrG,MAAM,cAAc,KAAK,OAAO;CAChC,MAAM,KAAK,QAAQ,QAAQ,MAAM;CACjC,MAAM,OAAO,QAAQ,QAAQ,QAAQ;CACrC,IAAI,CAAC,kBAAkB,KAAK,EAAE,KAAK,CAAC,WAAW,KAAK,IAAI,GAAG,MAAM,IAAI,UAAU,KAAK,sBAAsB;CAC1G,MAAM,QAAQ,MAAM,IAAI,QAAQ,UAAU,IAAI,IAAI;CAClD,IAAI,CAAC,OAAO,MAAM,IAAI,UAAU,KAAK,sBAAsB;CAC3D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,KAAK;CACnB,MAAM,cAAc,OAAO,aAAa,6BAA6B,eAAe;CACpF,MAAM,UAAkC;EACtC,iBAAiB;EACjB,iBAAiB;EACjB,gBAAgB,OAAO;EACvB,uBAAuB,GAAG,YAAY,qBAAqB,mBAAmB,OAAO,QAAQ;CAC/F;CACA,MAAM,QAAQ,WAAW,KAAK,QAAQ,QAAQ,IAAI,OAAO,KAAK,EAAE;CAChE,IAAI,CAAC,OAAO,OAAO;EAAE,QAAQ;EAAK,SAAS;GAAE,GAAG;GAAS,kBAAkB,OAAO,KAAK;EAAE;EAAG,MAAM;CAAK;CACvG,MAAM,GAAG,OAAO,QAAQ;CACxB,MAAM,QAAQ,QAAQ,OAAO,KAAK,IAAI,KAAK,IAAI,GAAG,QAAQ,OAAO,IAAI,CAAC;CACtE,MAAM,MAAM,SAAS,OAAO,KAAK,IAAI,OAAO,IAAI,GAAG,QAAQ,CAAC,IAAI,QAAQ;CACxE,IAAI,SAAS,SAAS,QAAQ,KAAK,OAAO,MAAM,KAAK,EAAE,iBAAiB,WAAW,QAAQ,CAAC;CAC5F,OAAO;EACL,QAAQ;EACR,SAAS;GAAE,GAAG;GAAS,iBAAiB,SAAS,MAAM,GAAG,IAAI,GAAG;GAAS,kBAAkB,OAAO,MAAM,QAAQ,CAAC;EAAE;EACpH,MAAM,KAAK,SAAS,OAAO,MAAM,CAAC;CACpC;AACF;AAEA,MAAM,0BAA0B,IAAI,UAAU,KAAK,6CAA6C;;AAGhG,eAAsB,UAAU,KAAqB,SAAmD;CACtG,MAAM,cAAc,KAAK,OAAO;CAChC,IAAI,CAAC,IAAI,QAAQ,YAAY,MAAM,kBAAkB;CACrD,OAAO,KAAK,MAAM,IAAI,QAAQ,WAAW,CAAC;AAC5C;;AAGA,eAAsB,SAAS,KAAqB,SAAmD;CACrG,MAAM,cAAc,KAAK,OAAO;CAChC,IAAI,CAAC,IAAI,QAAQ,WAAW,MAAM,kBAAkB;CACpD,MAAM,KAAK,QAAQ,QAAQ,MAAM;CACjC,IAAI,CAAC,SAAS,KAAK,EAAE,GAAG,MAAM,IAAI,UAAU,KAAK,oBAAoB;CACrE,MAAM,QAAQ,MAAM,IAAI,QAAQ,UAAU,EAAE;CAC5C,IAAI,CAAC,OAAO,MAAM,IAAI,UAAU,KAAK,sBAAsB;CAC3D,MAAM,OAAO,IAAI,MAAM,OAAO,WAAW,IAAI,GAAG,IAAI,YAAY,CAAC,CAAC,OAAO,MAAM,GAAG,CAAC,CAAC,OAAO;CAC3F,MAAM,UAAU;EAAE,iBAAiB;EAAuC,QAAQ;CAAK;CACvF,IAAI,QAAQ,QAAQ,IAAI,eAAe,MAAM,MAAM,OAAO,MAAM,KAAK,OAAO;CAC5E,OAAO,KAAK,MAAM,KAAK,2BAA2B,OAAO;AAC3D;;AAGA,eAAsB,YAAY,KAAqB,SAAmD;CACxG,MAAM,cAAc,KAAK,OAAO;CAChC,MAAM,EAAE,YAAY;CACpB,IAAI,CAAC,QAAQ,cAAc,CAAC,QAAQ,aAAa,MAAM,kBAAkB;CACzE,MAAM,KAAK,QAAQ,QAAQ,MAAM;CACjC,IAAI,CAAC,SAAS,KAAK,EAAE,GAAG,MAAM,IAAI,UAAU,KAAK,oBAAoB;CAErE,MAAM,UAAU,MAAM,QAAQ,WAAW,EAAA,CAAG,MAAK,MAAK,EAAE,OAAO,EAAE;CACjE,IAAI,CAAC,QAAQ,MAAM,IAAI,UAAU,KAAK,sBAAsB;CAC5D,IAAI,OAAO,SAAS,MAAM,IAAI,UAAU,KAAK,mDAAmD;CAChG,IAAI,CAAC,MAAM,QAAQ,YAAY,EAAE,GAAG,MAAM,IAAI,UAAU,KAAK,sBAAsB;CACnF,OAAO,MAAM;AACf;AAEA,MAAM,qBAAqB;AAC3B,MAAM,gBAAgB;AAEtB,MAAM,cAAc;;AAGpB,SAAS,OAAO,MAAc,KAAqB;CAEjD,OADa,KAAK,UAAU,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,QAAQ,eAAe,GAAG,CAAC,CAAC,QAAQ,OAAO,EAAE,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,OAAO,EACpH,KAAK;AACjB;;;;;;AAOA,eAAsB,UAAU,KAAqB,SAAmD;CACtG,MAAM,cAAc,KAAK,OAAO;CAChC,MAAM,EAAE,YAAY;CACpB,IAAI,CAAC,QAAQ,cAAc,CAAC,QAAQ,YAAY,MAAM,kBAAkB;CAExE,MAAM,OAAO,MAAM,QAAQ,WAAW,CAAC,CAAC,YAAY,IAAI;CACxD,MAAM,UAAU,MAAM,IAAI,KAAK;CAC/B,IAAI,EAAE,mBAAmB,SAAS,QAAQ,SAAS,GAAG,MAAM,IAAI,UAAU,KAAK,6BAA6B;CAC5G,IAAI,QAAQ,OAAA,SAAwB,MAAM,IAAI,UAAU,KAAK,wBAAwB,kBAAkB,OAAO,KAAK,IAAI;CACvH,MAAM,QAAQ,IAAI,WAAW,MAAM,QAAQ,YAAY,CAAC;CACxD,IAAI,MAAM,SAAS,CAAC,KAAK,YAAY,KAAK,IAAI,YAAY,QAAQ,CAAC,CAAC,OAAO,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,GAChG,MAAM,IAAI,UAAU,KAAK,+BAA+B;CAE1D,IAAI;CACJ,IAAI;EACF,MAAM,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK;CAC9D,QACM;EACJ,MAAM,IAAI,UAAU,KAAK,yCAAyC;CACpE;CAEA,IAAI;CACJ,MAAM,eAAe,MAAM,IAAI,UAAU;CACzC,IAAI,wBAAwB,QAAQ,aAAa,OAAO,GACtD,IAAI;EACF,IAAI,aAAa,OAAO,oBAAoB,MAAM,IAAI,MAAM,oBAAoB;EAChF,WAAW,oBAAoB,MAAM,KAAK,MAAM,MAAM,aAAa,KAAK,CAAC,CAAC;CAC5E,QACM;EACJ,MAAM,IAAI,UAAU,KAAK,0BAA0B;CACrD;CAGF,MAAM,YAAY,MAAM,IAAI,MAAM;CAClC,MAAM,cAAc,QAAQ,KAAK,QAAQ,WAAW,EAAE;CACtD,MAAM,OAAO,UAAU,QAClB,CAAC,OAAO,cAAc,WAAW,YAAY,IAAI,WAAW,CAAC,CAAC,KAAI,MAAK,EAAE,KAAK,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,OAAO,KAC3G;CAEL,MAAM,QAAQ,IAAI,KAAK,MAAM,QAAQ,WAAW,EAAA,CAAG,KAAI,MAAK,EAAE,EAAE,CAAC;CAEjE,IAAI,KADS,OAAO,MAAM,aACd;CACZ,KAAK,IAAI,IAAI,GAAG,MAAM,IAAI,EAAE,GAAG,KAAK;EAClC,MAAM,SAAS,IAAI;EACnB,KAAK,GAAG,OAAO,MAAM,gBAAgB,OAAO,MAAM,IAAI;CACxD;CAEA,MAAM,SAAuC;EAAE,GAAG;EAAU;EAAM;CAAG;CACrE,MAAM,QAAQ,WAAW,QAAQ,GAAG;CACpC,OAAO,KAAK;EAAE,GAAG;EAAQ,SAAS;CAAM,GAAyB,GAAG;AACtE"}
+{"version":3,"file":"editor.js","names":[],"sources":["../../../src/server/handlers/editor.ts"],"sourcesContent":["import { createHash } from 'node:crypto'\nimport { yDocToProsemirrorJSON } from '@tiptap/y-tiptap'\nimport { ASSET_DOCUMENT_ID, ASSET_NAME, assetUrl, MAX_MEDIA_BYTES, MEDIA_TYPES, mediaKindOf, mediaMime } from '../../features/media/schema'\nimport { collectTagNames, normalizeTagName } from '../../features/mentions/schema'\nimport { MAX_THEME_BYTES, THEME_ID, themeManifestSchema, type ThemeManifest, type ThemeRecord } from '../../features/themes/schema'\nimport { editorSettingsSchema, parseEditorSettings } from '../../settings'\nimport { COLLAB_FIELD } from '../collab'\nimport { HttpError } from '../errors'\nimport { serverCapabilities } from '../ports'\nimport { authenticated, empty, type HandlerContext, type HandlerRequest, type HandlerResponse, json, port, readBody, text } from './context'\n\n/**\n * The capabilities this server serves (`BackendCapability[]`, see `serverCapabilities`): what the client's probe\n * (`createHttpBackend({ probe: true })`) prunes its backend to. Requires an authenticated user through the `identity` port, like the\n * routes whose capabilities it lists.\n */\nexport async function capabilitiesGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  await authenticated(ctx, request)\n  return json(serverCapabilities(ctx.ports, ctx.served))\n}\n\n/** Body schema of `settingsPut`: the complete editor settings. */\nexport const settingsPutBodySchema = editorSettingsSchema\n\nconst MAX_USERS = 20\nconst MAX_TAGS = 20\n\n/**\n * The authenticated user's editor settings, normalized with `parseEditorSettings`. `204` without a `settings` port (the\n * client stays on localStorage); `200` with JSON `null` when the user has none stored yet (the client uploads its local\n * ones).\n */\nexport async function settingsGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  const user = await authenticated(ctx, request)\n  if (!ctx.ports.settings) return empty()\n  const stored = await ctx.ports.settings.loadSettings(user)\n  if (stored === null || stored === undefined) return json(null)\n  return json(parseEditorSettings(stored))\n}\n\n/** Stores the authenticated user's editor settings (complete, validated: 400 otherwise); `501` without a `settings` port. */\nexport async function settingsPut(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  const user = await authenticated(ctx, request)\n  const store = port(ctx, 'settings')\n  const settings = await readBody(request, settingsPutBodySchema)\n  await store.storeSettings(user, settings)\n  return empty()\n}\n\n/**\n * All `#` tag names used in any document, deduplicated and sorted. Documents currently open in the collaboration server\n * are read from their live Y.Doc (a tag added in document A shows up in document B before the debounced store); all\n * others from the stored content of `ports.documents`.\n */\nexport async function listWorkspaceTags({ ports, collab }: HandlerContext): Promise<string[]> {\n  const names = new Set<string>()\n  const open = collab?.hocuspocus.documents\n  if (open) for (const doc of open.values()) collectTagNames(yDocToProsemirrorJSON(doc, COLLAB_FIELD), names)\n  for (const { id, content } of await ports.documents.listContents()) {\n    if (!open?.has(id)) collectTagNames(content, names)\n  }\n  return [...names].sort((a, b) => a.localeCompare(b, 'de'))\n}\n\n/**\n * Tag names for the `#` popup: tags used in any document, filtered by the normalised `?q=` (prefix matches first, then\n * substrings). Requires an authenticated user through the `identity` port.\n */\nexport async function tagsGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  await authenticated(ctx, request)\n  const q = normalizeTagName(String(request.query?.q ?? ''))\n  const matches = (await listWorkspaceTags(ctx)).filter(tag => tag.includes(q))\n  const prefixMatches = matches.filter(tag => tag.startsWith(q))\n  return json([...prefixMatches, ...matches.filter(tag => !tag.startsWith(q))].slice(0, MAX_TAGS))\n}\n\n/**\n * Users for the `@` mention popup, filtered case-insensitively by `?q=` (prefix matches first, then substrings).\n * Requires an authenticated user through the `identity` port.\n */\nexport async function usersGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  await authenticated(ctx, request)\n  const q = String(request.query?.q ?? '').trim().toLowerCase()\n  // Re-pick the fields so a directory returning richer user records cannot leak them.\n  const matches = (await port(ctx, 'directory').listUsers())\n    .map(({ id, username, color }) => ({ id, username, color }))\n    .filter(u => u.username.toLowerCase().includes(q))\n    .sort((a, b) => a.username.localeCompare(b.username, 'de'))\n  const prefixMatches = matches.filter(u => u.username.toLowerCase().startsWith(q))\n  return json([...prefixMatches, ...matches.filter(u => !prefixMatches.includes(u))].slice(0, MAX_USERS))\n}\n\n/**\n * Stores a file (multipart field `file`) in the package of document `params.id` (or `scratch` for editors not bound to\n * a stored document); answers `{ url, name, sha256 }`. Requires an authenticated user through the `identity` port.\n */\nexport async function assetPost(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  await authenticated(ctx, request)\n  const id = request.params?.id ?? ''\n  if (!ASSET_DOCUMENT_ID.test(id)) throw new HttpError(400, 'Ungültige Dokument-ID')\n  // A body that is no multipart form at all counts as „no file“.\n  const form = await request.readForm?.().catch(() => null)\n  const file = form?.get('file')\n  if (!(file instanceof File)) throw new HttpError(400, 'Keine Datei übermittelt')\n  const mime = mediaMime(file.type) || 'application/octet-stream'\n  const maxBytes = MAX_MEDIA_BYTES[mediaKindOf(mime) ?? 'file']\n  if (file.size > maxBytes) throw new HttpError(413, `Datei ist größer als ${maxBytes / 1024 / 1024} MB`)\n  const nameExt = file.name.includes('.') ? file.name.split('.').pop()?.toLowerCase() : undefined\n  const ext = MEDIA_TYPES[mime]?.ext ?? (nameExt && /^[a-z0-9]{1,8}$/.test(nameExt) ? nameExt : 'bin')\n  const name = `${globalThis.crypto.randomUUID()}.${ext}`\n  const data = Buffer.from(await file.arrayBuffer())\n  const sha256 = createHash('sha256').update(data).digest('hex')\n  await port(ctx, 'assets').storeAsset(id, {\n    name,\n    filename: file.name.slice(0, 255) || name,\n    mimeType: mime,\n    size: file.size,\n    createdAt: new Date().toISOString(),\n    sha256,\n    data,\n  })\n  return json({ url: assetUrl(id, name), name, sha256 })\n}\n\n// Answers single byte ranges (`Range: bytes=a-b`, `bytes=a-`, `bytes=-n`): Safari only plays and seeks audio/video\n// served with range support. Other Range forms (several ranges) get the whole file, which RFC 9110 allows.\nconst BYTE_RANGE = /^bytes=(\\d*)-(\\d*)$/\n\n/**\n * The stored file `params.name` of document `params.id`, with `Range` support (media elements send the session cookie\n * like any same-origin request). Requires an authenticated user through the `identity` port.\n */\nexport async function assetGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  await authenticated(ctx, request)\n  const id = request.params?.id ?? ''\n  const name = request.params?.name ?? ''\n  if (!ASSET_DOCUMENT_ID.test(id) || !ASSET_NAME.test(name)) throw new HttpError(404, 'Datei nicht gefunden')\n  const asset = await port(ctx, 'assets').loadAsset(id, name)\n  if (!asset) throw new HttpError(404, 'Datei nicht gefunden')\n  const { record, data } = asset\n  const total = data.length\n  const disposition = record.mimeType === 'application/octet-stream' ? 'attachment' : 'inline'\n  const headers: Record<string, string> = {\n    'accept-ranges': 'bytes',\n    'cache-control': 'private, max-age=31536000, immutable',\n    'content-type': record.mimeType,\n    'content-disposition': `${disposition}; filename*=UTF-8''${encodeURIComponent(record.filename)}`,\n  }\n  const range = BYTE_RANGE.exec(request.headers.get('range') ?? '')\n  if (!range) return { status: 200, headers: { ...headers, 'content-length': String(total) }, body: data }\n  const [, first, last] = range\n  const start = first ? Number(first) : Math.max(0, total - Number(last))\n  const end = first && last ? Math.min(Number(last), total - 1) : total - 1\n  if (start >= total || start > end) return empty(416, { 'content-range': `bytes */${total}` })\n  return {\n    status: 206,\n    headers: { ...headers, 'content-range': `bytes ${start}-${end}/${total}`, 'content-length': String(end - start + 1) },\n    body: data.subarray(start, end + 1),\n  }\n}\n\n/** The theme library (builtins and uploads) as `ThemeRecord[]`. `501` without a `themes` port. */\nexport async function themesGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  await authenticated(ctx, request)\n  return json(await port(ctx, 'themes').listThemes())\n}\n\n/** `theme.css` of theme `params.id` as `text/css`. `400` for a malformed id, `404` for an unknown one, `501` without a `themes` port. */\nexport async function themeGet(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  await authenticated(ctx, request)\n  const themes = port(ctx, 'themes')\n  const id = request.params?.id ?? ''\n  if (!THEME_ID.test(id)) throw new HttpError(400, 'Ungültige Theme-ID')\n  const theme = await themes.loadTheme(id)\n  if (!theme) throw new HttpError(404, 'Theme nicht gefunden')\n  const etag = `\"${theme.record.version ?? '0'}-${new TextEncoder().encode(theme.css).length}\"`\n  const headers = { 'cache-control': 'private, max-age=0, must-revalidate', 'etag': etag }\n  if (request.headers.get('if-none-match') === etag) return empty(304, headers)\n  return text(theme.css, 'text/css; charset=utf-8', headers)\n}\n\n/** Deletes the uploaded theme `params.id` (`204`). `400` for a malformed id, `404` for an unknown one, `403` for a builtin, `501` without a `themes` port. */\nexport async function themeDelete(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  await authenticated(ctx, request)\n  const themes = port(ctx, 'themes')\n  const id = request.params?.id ?? ''\n  if (!THEME_ID.test(id)) throw new HttpError(400, 'Ungültige Theme-ID')\n  // `removeTheme` answers `false` for builtins and unknown ids alike, so the record decides between 403 and 404.\n  const record = (await themes.listThemes()).find(t => t.id === id)\n  if (!record) throw new HttpError(404, 'Theme nicht gefunden')\n  if (record.builtin) throw new HttpError(403, 'Mitgelieferte Themes können nicht gelöscht werden')\n  if (!await themes.removeTheme(id)) throw new HttpError(404, 'Theme nicht gefunden')\n  return empty()\n}\n\nconst MAX_MANIFEST_BYTES = 64 * 1024\nconst MAX_ID_LENGTH = 64\n// Markers of an HTML/XML/SVG document in the head of a „stylesheet“.\nconst MARKUP_HEAD = /<script|<\\?xml/i\n\n/** `[^a-z0-9]+` → `-`, trimmed, at most `max` characters; `theme` when nothing is left. */\nfunction slugOf(name: string, max: number): string {\n  const slug = name.normalize('NFKD').toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+/, '').slice(0, max).replace(/-+$/, '')\n  return slug || 'theme'\n}\n\n/**\n * Uploads an Obsidian theme into the shared library: multipart `css` (File, required), `manifest` (File) and `name`\n * (string) optional. Answers 201 with the new `ThemeRecord`; the id is the slug of the name, made unique with `-2`,\n * `-3` … against the library.\n */\nexport async function themePost(ctx: HandlerContext, request: HandlerRequest): Promise<HandlerResponse> {\n  await authenticated(ctx, request)\n  const themes = port(ctx, 'themes')\n  // A body that is no multipart form counts as „no file“.\n  const form = await request.readForm?.().catch(() => null)\n  const cssFile = form?.get('css')\n  if (!(cssFile instanceof File) || cssFile.size === 0) throw new HttpError(400, 'Keine CSS-Datei übermittelt')\n  if (cssFile.size > MAX_THEME_BYTES) throw new HttpError(413, `Theme ist größer als ${MAX_THEME_BYTES / 1024 / 1024} MB`)\n  const bytes = new Uint8Array(await cssFile.arrayBuffer())\n  if (bytes.includes(0) || MARKUP_HEAD.test(new TextDecoder('latin1').decode(bytes.subarray(0, 512)))) {\n    throw new HttpError(400, 'Theme ist keine CSS-Textdatei')\n  }\n  let css: string\n  try {\n    css = new TextDecoder('utf-8', { fatal: true }).decode(bytes)\n  }\n  catch {\n    throw new HttpError(400, 'Theme ist keine gültige UTF-8-Textdatei')\n  }\n\n  let manifest: ThemeManifest | undefined\n  const manifestFile = form?.get('manifest')\n  if (manifestFile instanceof File && manifestFile.size > 0) {\n    try {\n      if (manifestFile.size > MAX_MANIFEST_BYTES) throw new Error('manifest too large')\n      manifest = themeManifestSchema.parse(JSON.parse(await manifestFile.text()))\n    }\n    catch {\n      throw new HttpError(400, 'Ungültiges manifest.json')\n    }\n  }\n\n  const nameField = form?.get('name')\n  const cssBaseName = cssFile.name.replace(/\\.css$/i, '')\n  const name = manifest?.name\n    ?? [typeof nameField === 'string' ? nameField : '', cssBaseName].map(n => n.trim().slice(0, 120)).find(Boolean)\n    ?? 'Theme'\n\n  const taken = new Set((await themes.listThemes()).map(t => t.id))\n  const base = slugOf(name, MAX_ID_LENGTH)\n  let id = base\n  for (let n = 2; taken.has(id); n++) {\n    const suffix = `-${n}`\n    id = `${slugOf(name, MAX_ID_LENGTH - suffix.length)}${suffix}`\n  }\n\n  const record: Omit<ThemeRecord, 'builtin'> = { ...manifest, name, id }\n  await themes.storeTheme(record, css)\n  return json({ ...record, builtin: false } satisfies ThemeRecord, 201)\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAgBA,eAAsB,gBAAgB,KAAqB,SAAmD;CAC5G,MAAM,cAAc,KAAK,OAAO;CAChC,OAAO,KAAK,mBAAmB,IAAI,OAAO,IAAI,MAAM,CAAC;AACvD;;AAGA,MAAa,wBAAwB;AAErC,MAAM,YAAY;AAClB,MAAM,WAAW;;;;;;AAOjB,eAAsB,YAAY,KAAqB,SAAmD;CACxG,MAAM,OAAO,MAAM,cAAc,KAAK,OAAO;CAC7C,IAAI,CAAC,IAAI,MAAM,UAAU,OAAO,MAAM;CACtC,MAAM,SAAS,MAAM,IAAI,MAAM,SAAS,aAAa,IAAI;CACzD,IAAI,WAAW,QAAQ,WAAW,KAAA,GAAW,OAAO,KAAK,IAAI;CAC7D,OAAO,KAAK,oBAAoB,MAAM,CAAC;AACzC;;AAGA,eAAsB,YAAY,KAAqB,SAAmD;CACxG,MAAM,OAAO,MAAM,cAAc,KAAK,OAAO;CAC7C,MAAM,QAAQ,KAAK,KAAK,UAAU;CAClC,MAAM,WAAW,MAAM,SAAS,SAAS,qBAAqB;CAC9D,MAAM,MAAM,cAAc,MAAM,QAAQ;CACxC,OAAO,MAAM;AACf;;;;;;AAOA,eAAsB,kBAAkB,EAAE,OAAO,UAA6C;CAC5F,MAAM,wBAAQ,IAAI,IAAY;CAC9B,MAAM,OAAO,QAAQ,WAAW;CAChC,IAAI,MAAM,KAAK,MAAM,OAAO,KAAK,OAAO,GAAG,gBAAgB,sBAAsB,KAAK,YAAY,GAAG,KAAK;CAC1G,KAAK,MAAM,EAAE,IAAI,aAAa,MAAM,MAAM,UAAU,aAAa,GAC/D,IAAI,CAAC,MAAM,IAAI,EAAE,GAAG,gBAAgB,SAAS,KAAK;CAEpD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,GAAG,IAAI,CAAC;AAC3D;;;;;AAMA,eAAsB,QAAQ,KAAqB,SAAmD;CACpG,MAAM,cAAc,KAAK,OAAO;CAChC,MAAM,IAAI,iBAAiB,OAAO,QAAQ,OAAO,KAAK,EAAE,CAAC;CACzD,MAAM,WAAW,MAAM,kBAAkB,GAAG,EAAA,CAAG,QAAO,QAAO,IAAI,SAAS,CAAC,CAAC;CAC5E,MAAM,gBAAgB,QAAQ,QAAO,QAAO,IAAI,WAAW,CAAC,CAAC;CAC7D,OAAO,KAAK,CAAC,GAAG,eAAe,GAAG,QAAQ,QAAO,QAAO,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,QAAQ,CAAC;AACjG;;;;;AAMA,eAAsB,SAAS,KAAqB,SAAmD;CACrG,MAAM,cAAc,KAAK,OAAO;CAChC,MAAM,IAAI,OAAO,QAAQ,OAAO,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY;CAE5D,MAAM,WAAW,MAAM,KAAK,KAAK,WAAW,CAAC,CAAC,UAAU,EAAA,CACrD,KAAK,EAAE,IAAI,UAAU,aAAa;EAAE;EAAI;EAAU;CAAM,EAAE,CAAC,CAC3D,QAAO,MAAK,EAAE,SAAS,YAAY,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CACjD,MAAM,GAAG,MAAM,EAAE,SAAS,cAAc,EAAE,UAAU,IAAI,CAAC;CAC5D,MAAM,gBAAgB,QAAQ,QAAO,MAAK,EAAE,SAAS,YAAY,CAAC,CAAC,WAAW,CAAC,CAAC;CAChF,OAAO,KAAK,CAAC,GAAG,eAAe,GAAG,QAAQ,QAAO,MAAK,CAAC,cAAc,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,SAAS,CAAC;AACxG;;;;;AAMA,eAAsB,UAAU,KAAqB,SAAmD;CACtG,MAAM,cAAc,KAAK,OAAO;CAChC,MAAM,KAAK,QAAQ,QAAQ,MAAM;CACjC,IAAI,CAAC,kBAAkB,KAAK,EAAE,GAAG,MAAM,IAAI,UAAU,KAAK,uBAAuB;CAGjF,MAAM,QAAO,MADM,QAAQ,WAAW,CAAC,CAAC,YAAY,IAAI,EAAA,EACrC,IAAI,MAAM;CAC7B,IAAI,EAAE,gBAAgB,OAAO,MAAM,IAAI,UAAU,KAAK,yBAAyB;CAC/E,MAAM,OAAO,UAAU,KAAK,IAAI,KAAK;CACrC,MAAM,WAAW,gBAAgB,YAAY,IAAI,KAAK;CACtD,IAAI,KAAK,OAAO,UAAU,MAAM,IAAI,UAAU,KAAK,wBAAwB,WAAW,OAAO,KAAK,IAAI;CACtG,MAAM,UAAU,KAAK,KAAK,SAAS,GAAG,IAAI,KAAK,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,YAAY,IAAI,KAAA;CACtF,MAAM,MAAM,YAAY,KAAK,EAAE,QAAQ,WAAW,kBAAkB,KAAK,OAAO,IAAI,UAAU;CAC9F,MAAM,OAAO,GAAG,WAAW,OAAO,WAAW,EAAE,GAAG;CAClD,MAAM,OAAO,OAAO,KAAK,MAAM,KAAK,YAAY,CAAC;CACjD,MAAM,SAAS,WAAW,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK;CAC7D,MAAM,KAAK,KAAK,QAAQ,CAAC,CAAC,WAAW,IAAI;EACvC;EACA,UAAU,KAAK,KAAK,MAAM,GAAG,GAAG,KAAK;EACrC,UAAU;EACV,MAAM,KAAK;EACX,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;EAClC;EACA;CACF,CAAC;CACD,OAAO,KAAK;EAAE,KAAK,SAAS,IAAI,IAAI;EAAG;EAAM;CAAO,CAAC;AACvD;AAIA,MAAM,aAAa;;;;;AAMnB,eAAsB,SAAS,KAAqB,SAAmD;CACrG,MAAM,cAAc,KAAK,OAAO;CAChC,MAAM,KAAK,QAAQ,QAAQ,MAAM;CACjC,MAAM,OAAO,QAAQ,QAAQ,QAAQ;CACrC,IAAI,CAAC,kBAAkB,KAAK,EAAE,KAAK,CAAC,WAAW,KAAK,IAAI,GAAG,MAAM,IAAI,UAAU,KAAK,sBAAsB;CAC1G,MAAM,QAAQ,MAAM,KAAK,KAAK,QAAQ,CAAC,CAAC,UAAU,IAAI,IAAI;CAC1D,IAAI,CAAC,OAAO,MAAM,IAAI,UAAU,KAAK,sBAAsB;CAC3D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,KAAK;CACnB,MAAM,cAAc,OAAO,aAAa,6BAA6B,eAAe;CACpF,MAAM,UAAkC;EACtC,iBAAiB;EACjB,iBAAiB;EACjB,gBAAgB,OAAO;EACvB,uBAAuB,GAAG,YAAY,qBAAqB,mBAAmB,OAAO,QAAQ;CAC/F;CACA,MAAM,QAAQ,WAAW,KAAK,QAAQ,QAAQ,IAAI,OAAO,KAAK,EAAE;CAChE,IAAI,CAAC,OAAO,OAAO;EAAE,QAAQ;EAAK,SAAS;GAAE,GAAG;GAAS,kBAAkB,OAAO,KAAK;EAAE;EAAG,MAAM;CAAK;CACvG,MAAM,GAAG,OAAO,QAAQ;CACxB,MAAM,QAAQ,QAAQ,OAAO,KAAK,IAAI,KAAK,IAAI,GAAG,QAAQ,OAAO,IAAI,CAAC;CACtE,MAAM,MAAM,SAAS,OAAO,KAAK,IAAI,OAAO,IAAI,GAAG,QAAQ,CAAC,IAAI,QAAQ;CACxE,IAAI,SAAS,SAAS,QAAQ,KAAK,OAAO,MAAM,KAAK,EAAE,iBAAiB,WAAW,QAAQ,CAAC;CAC5F,OAAO;EACL,QAAQ;EACR,SAAS;GAAE,GAAG;GAAS,iBAAiB,SAAS,MAAM,GAAG,IAAI,GAAG;GAAS,kBAAkB,OAAO,MAAM,QAAQ,CAAC;EAAE;EACpH,MAAM,KAAK,SAAS,OAAO,MAAM,CAAC;CACpC;AACF;;AAGA,eAAsB,UAAU,KAAqB,SAAmD;CACtG,MAAM,cAAc,KAAK,OAAO;CAChC,OAAO,KAAK,MAAM,KAAK,KAAK,QAAQ,CAAC,CAAC,WAAW,CAAC;AACpD;;AAGA,eAAsB,SAAS,KAAqB,SAAmD;CACrG,MAAM,cAAc,KAAK,OAAO;CAChC,MAAM,SAAS,KAAK,KAAK,QAAQ;CACjC,MAAM,KAAK,QAAQ,QAAQ,MAAM;CACjC,IAAI,CAAC,SAAS,KAAK,EAAE,GAAG,MAAM,IAAI,UAAU,KAAK,oBAAoB;CACrE,MAAM,QAAQ,MAAM,OAAO,UAAU,EAAE;CACvC,IAAI,CAAC,OAAO,MAAM,IAAI,UAAU,KAAK,sBAAsB;CAC3D,MAAM,OAAO,IAAI,MAAM,OAAO,WAAW,IAAI,GAAG,IAAI,YAAY,CAAC,CAAC,OAAO,MAAM,GAAG,CAAC,CAAC,OAAO;CAC3F,MAAM,UAAU;EAAE,iBAAiB;EAAuC,QAAQ;CAAK;CACvF,IAAI,QAAQ,QAAQ,IAAI,eAAe,MAAM,MAAM,OAAO,MAAM,KAAK,OAAO;CAC5E,OAAO,KAAK,MAAM,KAAK,2BAA2B,OAAO;AAC3D;;AAGA,eAAsB,YAAY,KAAqB,SAAmD;CACxG,MAAM,cAAc,KAAK,OAAO;CAChC,MAAM,SAAS,KAAK,KAAK,QAAQ;CACjC,MAAM,KAAK,QAAQ,QAAQ,MAAM;CACjC,IAAI,CAAC,SAAS,KAAK,EAAE,GAAG,MAAM,IAAI,UAAU,KAAK,oBAAoB;CAErE,MAAM,UAAU,MAAM,OAAO,WAAW,EAAA,CAAG,MAAK,MAAK,EAAE,OAAO,EAAE;CAChE,IAAI,CAAC,QAAQ,MAAM,IAAI,UAAU,KAAK,sBAAsB;CAC5D,IAAI,OAAO,SAAS,MAAM,IAAI,UAAU,KAAK,mDAAmD;CAChG,IAAI,CAAC,MAAM,OAAO,YAAY,EAAE,GAAG,MAAM,IAAI,UAAU,KAAK,sBAAsB;CAClF,OAAO,MAAM;AACf;AAEA,MAAM,qBAAqB;AAC3B,MAAM,gBAAgB;AAEtB,MAAM,cAAc;;AAGpB,SAAS,OAAO,MAAc,KAAqB;CAEjD,OADa,KAAK,UAAU,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,QAAQ,eAAe,GAAG,CAAC,CAAC,QAAQ,OAAO,EAAE,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,OAAO,EACpH,KAAK;AACjB;;;;;;AAOA,eAAsB,UAAU,KAAqB,SAAmD;CACtG,MAAM,cAAc,KAAK,OAAO;CAChC,MAAM,SAAS,KAAK,KAAK,QAAQ;CAEjC,MAAM,OAAO,MAAM,QAAQ,WAAW,CAAC,CAAC,YAAY,IAAI;CACxD,MAAM,UAAU,MAAM,IAAI,KAAK;CAC/B,IAAI,EAAE,mBAAmB,SAAS,QAAQ,SAAS,GAAG,MAAM,IAAI,UAAU,KAAK,6BAA6B;CAC5G,IAAI,QAAQ,OAAA,SAAwB,MAAM,IAAI,UAAU,KAAK,wBAAwB,kBAAkB,OAAO,KAAK,IAAI;CACvH,MAAM,QAAQ,IAAI,WAAW,MAAM,QAAQ,YAAY,CAAC;CACxD,IAAI,MAAM,SAAS,CAAC,KAAK,YAAY,KAAK,IAAI,YAAY,QAAQ,CAAC,CAAC,OAAO,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,GAChG,MAAM,IAAI,UAAU,KAAK,+BAA+B;CAE1D,IAAI;CACJ,IAAI;EACF,MAAM,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK;CAC9D,QACM;EACJ,MAAM,IAAI,UAAU,KAAK,yCAAyC;CACpE;CAEA,IAAI;CACJ,MAAM,eAAe,MAAM,IAAI,UAAU;CACzC,IAAI,wBAAwB,QAAQ,aAAa,OAAO,GACtD,IAAI;EACF,IAAI,aAAa,OAAO,oBAAoB,MAAM,IAAI,MAAM,oBAAoB;EAChF,WAAW,oBAAoB,MAAM,KAAK,MAAM,MAAM,aAAa,KAAK,CAAC,CAAC;CAC5E,QACM;EACJ,MAAM,IAAI,UAAU,KAAK,0BAA0B;CACrD;CAGF,MAAM,YAAY,MAAM,IAAI,MAAM;CAClC,MAAM,cAAc,QAAQ,KAAK,QAAQ,WAAW,EAAE;CACtD,MAAM,OAAO,UAAU,QAClB,CAAC,OAAO,cAAc,WAAW,YAAY,IAAI,WAAW,CAAC,CAAC,KAAI,MAAK,EAAE,KAAK,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,OAAO,KAC3G;CAEL,MAAM,QAAQ,IAAI,KAAK,MAAM,OAAO,WAAW,EAAA,CAAG,KAAI,MAAK,EAAE,EAAE,CAAC;CAEhE,IAAI,KADS,OAAO,MAAM,aACd;CACZ,KAAK,IAAI,IAAI,GAAG,MAAM,IAAI,EAAE,GAAG,KAAK;EAClC,MAAM,SAAS,IAAI;EACnB,KAAK,GAAG,OAAO,MAAM,gBAAgB,OAAO,MAAM,IAAI;CACxD;CAEA,MAAM,SAAuC;EAAE,GAAG;EAAU;EAAM;CAAG;CACrE,MAAM,OAAO,WAAW,QAAQ,GAAG;CACnC,OAAO,KAAK;EAAE,GAAG;EAAQ,SAAS;CAAM,GAAyB,GAAG;AACtE"}

package/dist/server/handlers/index.d.ts

@@ -1,4 +1,4 @@
-import { AiHandlerContext, HandlerContext, HandlerRequest, HandlerResponse, authenticated, empty, enforceRateLimit, eventStream, json, readBody, text } from "./context.js";
-import { chatBodySchema, chatPost, completeBodySchema, completePost, generateBodySchema, generatePost, modelsGet, transcribeBodySchema, transcribePost, transcriptCleanupBodySchema, transcriptCleanupPost } from "./ai.js";
-import { assetGet, assetPost, listWorkspaceTags, settingsGet, settingsPut, settingsPutBodySchema, tagsGet, themeDelete, themeGet, themePost, themesGet, usersGet } from "./editor.js";
-export { type AiHandlerContext, type HandlerContext, type HandlerRequest, type HandlerResponse, assetGet, assetPost, authenticated, chatBodySchema, chatPost, completeBodySchema, completePost, empty, enforceRateLimit, eventStream, generateBodySchema, generatePost, json, listWorkspaceTags, modelsGet, readBody, settingsGet, settingsPut, settingsPutBodySchema, tagsGet, text, themeDelete, themeGet, themePost, themesGet, transcribeBodySchema, transcribePost, transcriptCleanupBodySchema, transcriptCleanupPost, usersGet };
+import { AiHandlerContext, HandlerContext, HandlerRequest, HandlerResponse, authenticated, empty, enforceRateLimit, eventStream, json, port, readBody, text } from "./context.js";
+import { chatBodySchema, chatPost, completeBodySchema, completePost, extractBodySchema, extractPost, generateBodySchema, generatePost, modelsGet, transcriptCleanupBodySchema, transcriptCleanupPost } from "./ai.js";
+import { assetGet, assetPost, capabilitiesGet, listWorkspaceTags, settingsGet, settingsPut, settingsPutBodySchema, tagsGet, themeDelete, themeGet, themePost, themesGet, usersGet } from "./editor.js";
+export { type AiHandlerContext, type HandlerContext, type HandlerRequest, type HandlerResponse, assetGet, assetPost, authenticated, capabilitiesGet, chatBodySchema, chatPost, completeBodySchema, completePost, empty, enforceRateLimit, eventStream, extractBodySchema, extractPost, generateBodySchema, generatePost, json, listWorkspaceTags, modelsGet, port, readBody, settingsGet, settingsPut, settingsPutBodySchema, tagsGet, text, themeDelete, themeGet, themePost, themesGet, transcriptCleanupBodySchema, transcriptCleanupPost, usersGet };

package/dist/server/handlers/index.js

@@ -1,4 +1,4 @@
-import { authenticated, empty, enforceRateLimit, eventStream, json, readBody, text } from "./context.js";
-import { chatBodySchema, chatPost, completeBodySchema, completePost, generateBodySchema, generatePost, modelsGet, transcribeBodySchema, transcribePost, transcriptCleanupBodySchema, transcriptCleanupPost } from "./ai.js";
-import { assetGet, assetPost, listWorkspaceTags, settingsGet, settingsPut, settingsPutBodySchema, tagsGet, themeDelete, themeGet, themePost, themesGet, usersGet } from "./editor.js";
-export { assetGet, assetPost, authenticated, chatBodySchema, chatPost, completeBodySchema, completePost, empty, enforceRateLimit, eventStream, generateBodySchema, generatePost, json, listWorkspaceTags, modelsGet, readBody, settingsGet, settingsPut, settingsPutBodySchema, tagsGet, text, themeDelete, themeGet, themePost, themesGet, transcribeBodySchema, transcribePost, transcriptCleanupBodySchema, transcriptCleanupPost, usersGet };
+import { authenticated, empty, enforceRateLimit, eventStream, json, port, readBody, text } from "./context.js";
+import { chatBodySchema, chatPost, completeBodySchema, completePost, extractBodySchema, extractPost, generateBodySchema, generatePost, modelsGet, transcriptCleanupBodySchema, transcriptCleanupPost } from "./ai.js";
+import { assetGet, assetPost, capabilitiesGet, listWorkspaceTags, settingsGet, settingsPut, settingsPutBodySchema, tagsGet, themeDelete, themeGet, themePost, themesGet, usersGet } from "./editor.js";
+export { assetGet, assetPost, authenticated, capabilitiesGet, chatBodySchema, chatPost, completeBodySchema, completePost, empty, enforceRateLimit, eventStream, extractBodySchema, extractPost, generateBodySchema, generatePost, json, listWorkspaceTags, modelsGet, port, readBody, settingsGet, settingsPut, settingsPutBodySchema, tagsGet, text, themeDelete, themeGet, themePost, themesGet, transcriptCleanupBodySchema, transcriptCleanupPost, usersGet };

package/dist/server/host.d.ts

@@ -1,35 +1,26 @@
-import { ModelProfile, ModelRef } from "../features/ai/protocol/models.js";
+import { ModelProfile, ModelRef } from "../core/backend-types.js";
 import "../features/ai/protocol/index.js";
-import { EditorAdapter } from "./adapter.js";
-import { AiModels, AiModelsConfig } from "./ai.js";
+import { AiModels } from "./ai.js";
+import { EditorPorts } from "./ports.js";
 import { CollabServer } from "./collab.js";
-import { JSONContent } from "@tiptap/core";
+import { AnyExtension, JSONContent } from "@tiptap/core";
 import { LanguageModel } from "ai";
 //#region src/server/host.d.ts
-export interface EditorServerConfig {
-  /**
-   * The AI models: presets, shared key, transcription, slots. `languageModel`/`listModels` default to the adapter's
-   * methods of the same names.
-   */
-  ai?: Partial<AiModelsConfig>;
-  /** Per-user limit shared by the AI endpoints. Default 30 requests per minute. */
-  rateLimit?: {
-    max: number;
-    windowMs: number;
-  };
-}
-/** Registers the host's adapter; the collaboration server and the AI models are created from it on first use. Replaces (and closes) those of a previous adapter. */
-export declare function setEditorAdapter(next: EditorAdapter): void;
-export declare function useEditorAdapter(): EditorAdapter;
-/** Sets the AI configuration and the rate limit of the process-wide server. Call before the first request. */
-export declare function configureEditorServer(next: EditorServerConfig): void;
-/** The process-wide collaboration server, created from the registered adapter on first use. */
+/**
+ * Registers the host's ports for installers that read them later (the Nuxt module's server plugin installs on the first
+ * request, after every Nitro plugin has run). `options.schema`: the collaboration schema, see `CollabServerOptions.schema`.
+ */
+export declare function setEditorPorts(next: EditorPorts, options?: {
+  schema?: () => AnyExtension[];
+}): void;
+export declare function useEditorPorts(): EditorPorts;
+/** The process-wide collaboration server of the installed server. Throws when none is installed or `collab: false`. */
 export declare function useCollabServer(): CollabServer;
-/** The process-wide AI models: the configured presets, with the adapter's `languageModel`/`listModels` hooks. */
+/** The process-wide AI models of the installed server: its configured presets, with the `models` port's `languageModel`/`listModels` hooks. Throws when none is installed or it was installed without `ai`. */
 export declare function useAiModels(): AiModels;
 /** Closes the process-wide collaboration server (pending stores are written first) and forgets it. */
 export declare function closeEditorServer(): Promise<void>;
-/** Open collaboration connections and loaded documents of this process (zeros before the first connection). */
+/** Open collaboration connections and loaded documents of this process (zeros when collaboration is off). */
 export declare function collabStats(): {
   connections: number;
   documents: number;
@@ -46,7 +37,7 @@ export declare function resolveModel(ref: ModelRef, user: object | null): Promis
 export declare function listAiModels(user: object | null): Promise<ModelProfile[]>;
 /**
  * Per-user limit for host-defined AI routes: the same limiter as the editor's own AI endpoints. Call first in the route.
- * Throws 401 (`HttpError`) without a user, 429 when exceeded; returns the user the adapter authenticated, for `resolveModel`.
+ * Throws 401 (`HttpError`) without a user, 429 when exceeded; returns the user the identity port authenticated, for `resolveModel`.
  * With a Node-backed request (`event.node.res`, as h3 events have) the 429's `Retry-After` header is set on the response too.
  */
 export declare function enforceAiRateLimit(request: {