dineway 0.1.9 → 0.1.11

package/dist/allowed-origins-DG86sH8U.mjs

@@ -0,0 +1,68 @@
+import { t as getEnvAllowedOrigins } from "./public-url-BB_umF5G.mjs";
+
+//#region src/auth/allowed-origins.ts
+function getConfiguredAllowedOrigins(config) {
+	const tagged = [];
+	if (config?.allowedOrigins) {
+		for (const origin of config.allowedOrigins) if (origin) tagged.push({
+			origin,
+			source: "config.allowedOrigins"
+		});
+	}
+	const envSource = typeof process !== "undefined" && process.env?.DINEWAY_ALLOWED_ORIGINS ? "DINEWAY_ALLOWED_ORIGINS" : "ALLOWED_ORIGINS";
+	for (const origin of getEnvAllowedOrigins()) tagged.push({
+		origin,
+		source: envSource
+	});
+	return tagged;
+}
+function validateOriginShape(tagged) {
+	const normalized = [];
+	const seen = /* @__PURE__ */ new Set();
+	for (const { origin, source } of tagged) {
+		let parsed;
+		try {
+			parsed = new URL(origin);
+		} catch (error) {
+			throw configError(source, `invalid URL: "${origin}"`, error);
+		}
+		if (parsed.protocol !== "http:" && parsed.protocol !== "https:") throw configError(source, `origin must be http or https: "${origin}" (got ${parsed.protocol})`);
+		if (parsed.hostname.endsWith(".")) throw configError(source, `hostname has a trailing dot: "${origin}". Remove the trailing dot; browser assertion origins do not include it.`);
+		if (parsed.hostname.split(".").includes("")) throw configError(source, `hostname has empty labels: "${origin}"`);
+		if (!seen.has(parsed.origin)) {
+			seen.add(parsed.origin);
+			normalized.push(parsed.origin);
+		}
+	}
+	return normalized;
+}
+function validateAllowedOrigins(siteUrl, tagged) {
+	const normalized = validateOriginShape(tagged);
+	if (normalized.length === 0) return normalized;
+	if (!siteUrl) throw new Error(`Dineway config error: allowedOrigins is set (${normalized.length} ${normalized.length === 1 ? "entry" : "entries"}) but siteUrl is not. Set siteUrl in astro.config.mjs or via DINEWAY_SITE_URL.`);
+	let siteHost;
+	try {
+		siteHost = new URL(siteUrl).hostname;
+	} catch (error) {
+		throw new Error(`Dineway config error: siteUrl is not a valid URL: "${siteUrl}"`, { cause: error });
+	}
+	if (siteHost.endsWith(".")) throw new Error(`Dineway config error: siteUrl "${siteUrl}" has a trailing-dot hostname, which cannot match assertion origins. Remove the trailing dot when using allowedOrigins.`);
+	if (isIPLiteralHostname(siteHost)) throw new Error(`Dineway config error: siteUrl "${siteUrl}" uses an IP-literal hostname. Multi-origin passkeys require a domain-based siteUrl.`);
+	for (const { origin, source } of tagged) {
+		const host = new URL(origin).hostname;
+		if (host !== siteHost && !host.endsWith(`.${siteHost}`)) throw configError(source, `"${origin}" is not a subdomain of siteUrl "${siteUrl}". Allowed origins must be the same hostname as siteUrl or a subdomain of it.`);
+	}
+	return normalized;
+}
+function configError(source, detail, cause) {
+	const error = /* @__PURE__ */ new Error(`Dineway config error in ${source}: ${detail}`);
+	if (cause !== void 0) error.cause = cause;
+	return error;
+}
+const IPV4_DOTTED_DECIMAL_RE = /^\d+(\.\d+){3}$/;
+function isIPLiteralHostname(hostname) {
+	return hostname.startsWith("[") || IPV4_DOTTED_DECIMAL_RE.test(hostname);
+}
+
+//#endregion
+export { validateAllowedOrigins as n, validateOriginShape as r, getConfiguredAllowedOrigins as t };

package/dist/api/route-utils.d.mts

@@ -0,0 +1,41 @@
+import { Ci as apiError, Si as parseQuery, Ti as handleError, bi as isParseError, t as DinewayConfig, vi as OptionsRepository, wi as apiSuccess, xi as parseBody, yi as ParseResult } from "../runtime-C4-7y7xK.mjs";
+import { t as Database } from "../types-Du8jreyC.mjs";
+import { at as StorageCollectionConfig, it as StorageCollection } from "../types-DgfUZqcd.mjs";
+import "../types-D4XVOt01.mjs";
+import "../runner-9eIQXuc2.mjs";
+import "../index-CkljPf5F.mjs";
+import "../bylines-HfUKum_j.mjs";
+import "../types-C982qI5I.mjs";
+import "../validate-JCZihRIa.mjs";
+import { Kysely } from "kysely";
+
+//#region src/api/auth-storage.d.ts
+/**
+ * Get storage collections for an auth provider.
+ */
+declare function getAuthProviderStorage(db: Kysely<Database>, providerId: string, storageConfig: Record<string, StorageCollectionConfig>): Record<string, StorageCollection>;
+//#endregion
+//#region src/api/public-url.d.ts
+/**
+ * Return the public-facing origin for the site.
+ *
+ * Resolution order:
+ *   1. `config.siteUrl` (set in astro.config.mjs, origin-normalized at startup)
+ *   2. `DINEWAY_SITE_URL` or `SITE_URL` env var (resolved at runtime for containers)
+ *   3. `url.origin` (internal request URL — correct when no proxy)
+ *
+ * @param url  The request URL (`new URL(request.url)` or `Astro.url`)
+ * @param config  The Dineway config (from `locals.dineway?.config`)
+ * @returns Origin string, e.g. `"https://mysite.example.com"`
+ */
+declare function getPublicOrigin(url: URL, config?: DinewayConfig): string;
+//#endregion
+//#region src/api/setup-complete.d.ts
+/**
+ * Finalize setup after the first admin user is created.
+ *
+ * Safe to call multiple times: if setup is already complete, this no-ops.
+ */
+declare function finalizeSetup(db: Kysely<Database>): Promise<void>;
+//#endregion
+export { OptionsRepository, type ParseResult, apiError, apiSuccess, finalizeSetup, getAuthProviderStorage, getPublicOrigin, handleError, isParseError, parseBody, parseQuery };

package/dist/api/route-utils.mjs

@@ -0,0 +1,26 @@
+import "../dialect-helpers-DhTzaUxP.mjs";
+import "../content-CyLkb-qH.mjs";
+import "../base64-Cz-aU0X1.mjs";
+import "../types-Bs6lTBBW.mjs";
+import "../media-_7Fxdu45.mjs";
+import "../user-CcXq-zoL.mjs";
+import { t as OptionsRepository } from "../options-z8VVg1Ll.mjs";
+import { r as createStorageAccess } from "../context-nxMyOe3p.mjs";
+import "../seo-CUQctrog.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../error-DEGjx2Xw.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../parse-BeQXIt1U.mjs";
+import "../ssrf-CmM76lLV.mjs";
+import "../cron-DGzVTtJp.mjs";
+import { n as getPublicOrigin } from "../public-url-BB_umF5G.mjs";
+import { t as finalizeSetup } from "../setup-complete-DidsDQ1e.mjs";
+
+//#region src/api/auth-storage.ts
+/**
+* Get storage collections for an auth provider.
+*/
+function getAuthProviderStorage(db, providerId, storageConfig) {
+	return createStorageAccess(db, `auth:${providerId}`, storageConfig);
+}
+
+//#endregion
+export { OptionsRepository, apiError, apiSuccess, finalizeSetup, getAuthProviderStorage, getPublicOrigin, handleError, isParseError, parseBody, parseQuery };

package/dist/api/schemas/index.d.mts

@@ -0,0 +1,3 @@
+import { $ as updateSectionBody, $n as httpUrl, $t as publicCommentSchema, A as userDetailSchema, An as contentCompareResponseSchema, At as passkeyVerifyBody, B as wpRewriteUrlsBody, Bn as contentSeoSchema, Bt as contextEntryListQuery, C as updateWidgetBody, Cn as mediaListQuery, Ct as inviteCreateBody, D as widgetSchema, Dn as mediaUpdateBody, Dt as passkeyRegisterOptionsBody, E as widgetAreaWithWidgetsSchema, En as mediaResponseSchema, Et as passkeyOptionsBody, F as importProbeBody, Fn as contentPreviewUrlBody, Ft as hitlRequestListQuery, G as searchResultSchema, Gn as contentUpdateBody, Gt as commentBulkBody, H as searchQuery, Hn as contentTranslationSchema, Ht as contextEntryStaleQuery, I as wpMediaImportBody, In as contentPublishBody, It as hitlRequestResolveBody, J as siteSettingsSchema, Jn as VALID_ROLE_LEVELS, Jt as commentListQuery, K as searchSuggestQuery, Kn as trashedContentItemSchema, Kt as commentBulkResponseSchema, L as wpPluginAnalyzeBody, Ln as contentResponseSchema, Lt as siteBriefingQuery, M as userSchema, Mn as contentItemSchema, Mt as signupRequestBody, N as userUpdateBody, Nn as contentListQuery, Nt as reviewRequestListQuery, O as allowedDomainCreateBody, On as mediaUploadUrlBody, Ot as passkeyRegisterVerifyBody, P as usersListQuery, Pn as contentListResponseSchema, Pt as reviewRequestResolveBody, Q as sectionsListQuery, Qn as deleteResponseSchema, Qt as publicCommentListResponseSchema, R as wpPluginExecuteBody, Rn as contentScheduleBody, Rt as contextEntryCreateBody, S as reorderWidgetsBody, Sn as mediaItemSchema, St as inviteCompleteBody, T as widgetAreaWithWidgetsAndCountSchema, Tn as mediaProviderListQuery, Tt as magicLinkSendBody, U as searchRebuildBody, Un as contentTranslationsResponseSchema, Ut as contextEntrySupersedeBody, V as searchEnableBody, Vn as contentTermsBody, Vt as contextEntryReviewBody, W as searchResponseSchema, Wn as contentTrashQuery, Wt as adminCommentListResponseSchema, X as sectionListResponseSchema, Xn as countResponseSchema, Xt as commentStatusBody, Y as createSectionBody, Yn as apiErrorSchema, Yt as commentSchema, Z as sectionSchema, Zn as cursorPaginationQuery, Zt as createCommentBody, _ as redirectSchema, _n as DEFAULT_MAX_UPLOAD_SIZE, _t as menuWithItemsSchema, a as bylineUpdateBody, an as createCollectionBody, at as termListResponseSchema, b as createWidgetAreaBody, bn as mediaConfirmResponseSchema, bt as updateMenuItemBody, c as createRedirectBody, cn as fieldReorderBody, ct as termWithCountSchema, d as notFoundListResponseSchema, dn as orphanRegisterBody, dt as createMenuItemBody, en as collectionGetQuery, er as localeCode, et as createTaxonomyDefBody, f as notFoundPruneBody, fn as orphanedTableListResponseSchema, ft as menuItemDeleteQuery, g as redirectListResponseSchema, gn as updateFieldBody, gt as menuSchema, h as notFoundSummarySchema, hn as updateCollectionBody, ht as menuListItemSchema, i as bylineSummarySchema, in as collectionWithFieldsResponseSchema, ir as successEnvelope, it as termGetResponseSchema, j as userListResponseSchema, jn as contentCreateBody, jt as signupCompleteBody, k as allowedDomainUpdateBody, kn as mediaUploadUrlResponseSchema, kt as passkeyRenameBody, l as notFoundEntrySchema, ln as fieldResponseSchema, lt as updateTermBody, m as notFoundSummaryResponseSchema, mn as schemaExportQuery, mt as menuItemUpdateQuery, n as bylineCreditSchema, nn as collectionResponseSchema, nr as roleLevel, nt as taxonomyDefSchema, o as bylinesListQuery, on as createFieldBody, ot as termResponseSchema, p as notFoundSummaryQuery, pn as orphanedTableSchema, pt as menuItemSchema, q as settingsUpdateBody, qn as trashedContentListResponseSchema, qt as commentCountsResponseSchema, r as bylineListResponseSchema, rn as collectionSchema, rr as slugPattern, rt as taxonomyListResponseSchema, s as contentBylineInputSchema, sn as fieldListResponseSchema, st as termSchema, t as bylineCreateBody, tn as collectionListResponseSchema, tr as offsetPaginationQuery, tt as createTermBody, u as notFoundListQuery, un as fieldSchema, ut as createMenuBody, v as redirectsListQuery, vn as formatFileSize, vt as reorderMenuItemsBody, w as widgetAreaSchema, wn as mediaListResponseSchema, wt as inviteRegisterOptionsBody, x as createWidgetBody, xn as mediaExistingResponseSchema, xt as authMeActionBody, y as updateRedirectBody, yn as mediaConfirmBody, yt as updateMenuBody, z as wpPrepareBody, zn as contentSeoInput, zt as contextEntryDiffQuery } from "../../bylines-HfUKum_j.mjs";
+import { atprotoLoginBody, setupAdminBody, setupAdminVerifyBody, setupAtprotoAdminBody, setupBody } from "./setup.mjs";
+export { DEFAULT_MAX_UPLOAD_SIZE, VALID_ROLE_LEVELS, adminCommentListResponseSchema, allowedDomainCreateBody, allowedDomainUpdateBody, apiErrorSchema, atprotoLoginBody, authMeActionBody, bylineCreateBody, bylineCreditSchema, bylineListResponseSchema, bylineSummarySchema, bylineUpdateBody, bylinesListQuery, collectionGetQuery, collectionListResponseSchema, collectionResponseSchema, collectionSchema, collectionWithFieldsResponseSchema, commentBulkBody, commentBulkResponseSchema, commentCountsResponseSchema, commentListQuery, commentSchema, commentStatusBody, contentBylineInputSchema, contentCompareResponseSchema, contentCreateBody, contentItemSchema, contentListQuery, contentListResponseSchema, contentPreviewUrlBody, contentPublishBody, contentResponseSchema, contentScheduleBody, contentSeoInput, contentSeoSchema, contentTermsBody, contentTranslationSchema, contentTranslationsResponseSchema, contentTrashQuery, contentUpdateBody, contextEntryCreateBody, contextEntryDiffQuery, contextEntryListQuery, contextEntryReviewBody, contextEntryStaleQuery, contextEntrySupersedeBody, countResponseSchema, createCollectionBody, createCommentBody, createFieldBody, createMenuBody, createMenuItemBody, createRedirectBody, createSectionBody, createTaxonomyDefBody, createTermBody, createWidgetAreaBody, createWidgetBody, cursorPaginationQuery, deleteResponseSchema, fieldListResponseSchema, fieldReorderBody, fieldResponseSchema, fieldSchema, formatFileSize, hitlRequestListQuery, hitlRequestResolveBody, httpUrl, importProbeBody, inviteCompleteBody, inviteCreateBody, inviteRegisterOptionsBody, localeCode, magicLinkSendBody, mediaConfirmBody, mediaConfirmResponseSchema, mediaExistingResponseSchema, mediaItemSchema, mediaListQuery, mediaListResponseSchema, mediaProviderListQuery, mediaResponseSchema, mediaUpdateBody, mediaUploadUrlBody, mediaUploadUrlResponseSchema, menuItemDeleteQuery, menuItemSchema, menuItemUpdateQuery, menuListItemSchema, menuSchema, menuWithItemsSchema, notFoundEntrySchema, notFoundListQuery, notFoundListResponseSchema, notFoundPruneBody, notFoundSummaryQuery, notFoundSummaryResponseSchema, notFoundSummarySchema, offsetPaginationQuery, orphanRegisterBody, orphanedTableListResponseSchema, orphanedTableSchema, passkeyOptionsBody, passkeyRegisterOptionsBody, passkeyRegisterVerifyBody, passkeyRenameBody, passkeyVerifyBody, publicCommentListResponseSchema, publicCommentSchema, redirectListResponseSchema, redirectSchema, redirectsListQuery, reorderMenuItemsBody, reorderWidgetsBody, reviewRequestListQuery, reviewRequestResolveBody, roleLevel, schemaExportQuery, searchEnableBody, searchQuery, searchRebuildBody, searchResponseSchema, searchResultSchema, searchSuggestQuery, sectionListResponseSchema, sectionSchema, sectionsListQuery, settingsUpdateBody, setupAdminBody, setupAdminVerifyBody, setupAtprotoAdminBody, setupBody, signupCompleteBody, signupRequestBody, siteBriefingQuery, siteSettingsSchema, slugPattern, successEnvelope, taxonomyDefSchema, taxonomyListResponseSchema, termGetResponseSchema, termListResponseSchema, termResponseSchema, termSchema, termWithCountSchema, trashedContentItemSchema, trashedContentListResponseSchema, updateCollectionBody, updateFieldBody, updateMenuBody, updateMenuItemBody, updateRedirectBody, updateSectionBody, updateTermBody, updateWidgetBody, userDetailSchema, userListResponseSchema, userSchema, userUpdateBody, usersListQuery, widgetAreaSchema, widgetAreaWithWidgetsAndCountSchema, widgetAreaWithWidgetsSchema, widgetSchema, wpMediaImportBody, wpPluginAnalyzeBody, wpPluginExecuteBody, wpPrepareBody, wpRewriteUrlsBody };

package/dist/api/schemas/index.mjs

@@ -0,0 +1,6 @@
+import "../../context-types-C-LwdAxx.mjs";
+import { $ as menuItemDeleteQuery, $t as contentListQuery, A as searchRebuildBody, An as slugPattern, At as fieldSchema, B as updateSectionBody, Bt as mediaConfirmResponseSchema, C as userDetailSchema, Cn as countResponseSchema, Ct as collectionSchema, D as usersListQuery, Dn as localeCode, Dt as fieldListResponseSchema, E as userUpdateBody, En as httpUrl, Et as createFieldBody, F as siteSettingsSchema, Ft as updateCollectionBody, G as termGetResponseSchema, Gt as mediaProviderListQuery, H as createTermBody, Ht as mediaItemSchema, I as createSectionBody, It as updateFieldBody, J as termSchema, Jt as mediaUploadUrlBody, K as termListResponseSchema, Kt as mediaResponseSchema, L as sectionListResponseSchema, Lt as DEFAULT_MAX_UPLOAD_SIZE, M as searchResultSchema, Mt as orphanedTableListResponseSchema, N as searchSuggestQuery, Nt as orphanedTableSchema, O as searchEnableBody, On as offsetPaginationQuery, Ot as fieldReorderBody, P as settingsUpdateBody, Pt as schemaExportQuery, Q as createMenuItemBody, Qt as contentItemSchema, R as sectionSchema, Rt as formatFileSize, S as allowedDomainUpdateBody, Sn as apiErrorSchema, St as collectionResponseSchema, T as userSchema, Tn as deleteResponseSchema, Tt as createCollectionBody, U as taxonomyDefSchema, Ut as mediaListQuery, V as createTaxonomyDefBody, Vt as mediaExistingResponseSchema, W as taxonomyListResponseSchema, Wt as mediaListResponseSchema, X as updateTermBody, Xt as contentCompareResponseSchema, Y as termWithCountSchema, Yt as mediaUploadUrlResponseSchema, Z as createMenuBody, Zt as contentCreateBody, _ as widgetAreaSchema, _n as bylineSummarySchema, _t as createCommentBody, a as notFoundPruneBody, an as contentSeoInput, at as reorderMenuItemsBody, b as widgetSchema, bn as contentBylineInputSchema, bt as collectionGetQuery, c as notFoundSummarySchema, cn as contentTranslationSchema, d as redirectsListQuery, dn as contentUpdateBody, dt as commentBulkBody, en as contentListResponseSchema, et as menuItemSchema, f as updateRedirectBody, fn as trashedContentItemSchema, ft as commentBulkResponseSchema, g as updateWidgetBody, gn as bylineListResponseSchema, gt as commentStatusBody, h as reorderWidgetsBody, hn as bylineCreditSchema, ht as commentSchema, i as notFoundListResponseSchema, in as contentScheduleBody, it as menuWithItemsSchema, j as searchResponseSchema, jn as successEnvelope, jt as orphanRegisterBody, k as searchQuery, kn as roleLevel, kt as fieldResponseSchema, l as redirectListResponseSchema, ln as contentTranslationsResponseSchema, m as createWidgetBody, mn as bylineCreateBody, mt as commentListQuery, n as notFoundEntrySchema, nn as contentPublishBody, nt as menuListItemSchema, o as notFoundSummaryQuery, on as contentSeoSchema, ot as updateMenuBody, p as createWidgetAreaBody, pn as trashedContentListResponseSchema, pt as commentCountsResponseSchema, q as termResponseSchema, qt as mediaUpdateBody, r as notFoundListQuery, rn as contentResponseSchema, rt as menuSchema, s as notFoundSummaryResponseSchema, sn as contentTermsBody, st as updateMenuItemBody, t as createRedirectBody, tn as contentPreviewUrlBody, tt as menuItemUpdateQuery, u as redirectSchema, un as contentTrashQuery, ut as adminCommentListResponseSchema, v as widgetAreaWithWidgetsAndCountSchema, vn as bylineUpdateBody, vt as publicCommentListResponseSchema, w as userListResponseSchema, wn as cursorPaginationQuery, wt as collectionWithFieldsResponseSchema, x as allowedDomainCreateBody, xn as VALID_ROLE_LEVELS, xt as collectionListResponseSchema, y as widgetAreaWithWidgetsSchema, yn as bylinesListQuery, yt as publicCommentSchema, z as sectionsListQuery, zt as mediaConfirmBody } from "../../redirects-CqaxraTO.mjs";
+import { C as siteBriefingQuery, D as contextEntryReviewBody, E as contextEntryListQuery, O as contextEntryStaleQuery, S as hitlRequestResolveBody, T as contextEntryDiffQuery, _ as signupCompleteBody, a as wpPrepareBody, b as reviewRequestResolveBody, c as inviteCompleteBody, d as magicLinkSendBody, f as passkeyOptionsBody, g as passkeyVerifyBody, h as passkeyRenameBody, i as wpPluginExecuteBody, k as contextEntrySupersedeBody, l as inviteCreateBody, m as passkeyRegisterVerifyBody, n as wpMediaImportBody, o as wpRewriteUrlsBody, p as passkeyRegisterOptionsBody, r as wpPluginAnalyzeBody, s as authMeActionBody, t as importProbeBody, u as inviteRegisterOptionsBody, v as signupRequestBody, w as contextEntryCreateBody, x as hitlRequestListQuery, y as reviewRequestListQuery } from "../../import-DD3f2jkc.mjs";
+import { atprotoLoginBody, setupAdminBody, setupAdminVerifyBody, setupAtprotoAdminBody, setupBody } from "./setup.mjs";
+
+export { DEFAULT_MAX_UPLOAD_SIZE, VALID_ROLE_LEVELS, adminCommentListResponseSchema, allowedDomainCreateBody, allowedDomainUpdateBody, apiErrorSchema, atprotoLoginBody, authMeActionBody, bylineCreateBody, bylineCreditSchema, bylineListResponseSchema, bylineSummarySchema, bylineUpdateBody, bylinesListQuery, collectionGetQuery, collectionListResponseSchema, collectionResponseSchema, collectionSchema, collectionWithFieldsResponseSchema, commentBulkBody, commentBulkResponseSchema, commentCountsResponseSchema, commentListQuery, commentSchema, commentStatusBody, contentBylineInputSchema, contentCompareResponseSchema, contentCreateBody, contentItemSchema, contentListQuery, contentListResponseSchema, contentPreviewUrlBody, contentPublishBody, contentResponseSchema, contentScheduleBody, contentSeoInput, contentSeoSchema, contentTermsBody, contentTranslationSchema, contentTranslationsResponseSchema, contentTrashQuery, contentUpdateBody, contextEntryCreateBody, contextEntryDiffQuery, contextEntryListQuery, contextEntryReviewBody, contextEntryStaleQuery, contextEntrySupersedeBody, countResponseSchema, createCollectionBody, createCommentBody, createFieldBody, createMenuBody, createMenuItemBody, createRedirectBody, createSectionBody, createTaxonomyDefBody, createTermBody, createWidgetAreaBody, createWidgetBody, cursorPaginationQuery, deleteResponseSchema, fieldListResponseSchema, fieldReorderBody, fieldResponseSchema, fieldSchema, formatFileSize, hitlRequestListQuery, hitlRequestResolveBody, httpUrl, importProbeBody, inviteCompleteBody, inviteCreateBody, inviteRegisterOptionsBody, localeCode, magicLinkSendBody, mediaConfirmBody, mediaConfirmResponseSchema, mediaExistingResponseSchema, mediaItemSchema, mediaListQuery, mediaListResponseSchema, mediaProviderListQuery, mediaResponseSchema, mediaUpdateBody, mediaUploadUrlBody, mediaUploadUrlResponseSchema, menuItemDeleteQuery, menuItemSchema, menuItemUpdateQuery, menuListItemSchema, menuSchema, menuWithItemsSchema, notFoundEntrySchema, notFoundListQuery, notFoundListResponseSchema, notFoundPruneBody, notFoundSummaryQuery, notFoundSummaryResponseSchema, notFoundSummarySchema, offsetPaginationQuery, orphanRegisterBody, orphanedTableListResponseSchema, orphanedTableSchema, passkeyOptionsBody, passkeyRegisterOptionsBody, passkeyRegisterVerifyBody, passkeyRenameBody, passkeyVerifyBody, publicCommentListResponseSchema, publicCommentSchema, redirectListResponseSchema, redirectSchema, redirectsListQuery, reorderMenuItemsBody, reorderWidgetsBody, reviewRequestListQuery, reviewRequestResolveBody, roleLevel, schemaExportQuery, searchEnableBody, searchQuery, searchRebuildBody, searchResponseSchema, searchResultSchema, searchSuggestQuery, sectionListResponseSchema, sectionSchema, sectionsListQuery, settingsUpdateBody, setupAdminBody, setupAdminVerifyBody, setupAtprotoAdminBody, setupBody, signupCompleteBody, signupRequestBody, siteBriefingQuery, siteSettingsSchema, slugPattern, successEnvelope, taxonomyDefSchema, taxonomyListResponseSchema, termGetResponseSchema, termListResponseSchema, termResponseSchema, termSchema, termWithCountSchema, trashedContentItemSchema, trashedContentListResponseSchema, updateCollectionBody, updateFieldBody, updateMenuBody, updateMenuItemBody, updateRedirectBody, updateSectionBody, updateTermBody, updateWidgetBody, userDetailSchema, userListResponseSchema, userSchema, userUpdateBody, usersListQuery, widgetAreaSchema, widgetAreaWithWidgetsAndCountSchema, widgetAreaWithWidgetsSchema, widgetSchema, wpMediaImportBody, wpPluginAnalyzeBody, wpPluginExecuteBody, wpPrepareBody, wpRewriteUrlsBody };

package/dist/api/schemas/setup.d.mts

@@ -0,0 +1,42 @@
+import { z } from "zod";
+
+//#region src/api/schemas/setup.d.ts
+declare const setupBody: z.ZodObject<{
+  title: z.ZodString;
+  tagline: z.ZodOptional<z.ZodString>;
+  includeContent: z.ZodBoolean;
+}, z.core.$strip>;
+declare const setupAdminBody: z.ZodObject<{
+  email: z.ZodString;
+  name: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+declare const setupAdminVerifyBody: z.ZodObject<{
+  credential: z.ZodObject<{
+    id: z.ZodString;
+    rawId: z.ZodString;
+    type: z.ZodLiteral<"public-key">;
+    response: z.ZodObject<{
+      clientDataJSON: z.ZodString;
+      attestationObject: z.ZodString;
+      transports: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        usb: "usb";
+        nfc: "nfc";
+        ble: "ble";
+        internal: "internal";
+        hybrid: "hybrid";
+      }>>>;
+    }, z.core.$strip>;
+    authenticatorAttachment: z.ZodOptional<z.ZodEnum<{
+      platform: "platform";
+      "cross-platform": "cross-platform";
+    }>>;
+  }, z.core.$strip>;
+}, z.core.$strip>;
+declare const atprotoLoginBody: z.ZodObject<{
+  handle: z.ZodString;
+}, z.core.$strip>;
+declare const setupAtprotoAdminBody: z.ZodObject<{
+  handle: z.ZodString;
+}, z.core.$strip>;
+//#endregion
+export { atprotoLoginBody, setupAdminBody, setupAdminVerifyBody, setupAtprotoAdminBody, setupBody };

package/dist/api/schemas/setup.mjs

@@ -0,0 +1,39 @@
+import { z } from "zod";
+
+//#region src/api/schemas/setup.ts
+/** Registration credential — duplicated reference for setup flow.
+*  The canonical definition lives in auth.ts but setup needs it independently
+*  because setup runs before auth is configured. */
+const authenticatorTransport = z.enum([
+	"usb",
+	"nfc",
+	"ble",
+	"internal",
+	"hybrid"
+]);
+const registrationCredential = z.object({
+	id: z.string(),
+	rawId: z.string(),
+	type: z.literal("public-key"),
+	response: z.object({
+		clientDataJSON: z.string(),
+		attestationObject: z.string(),
+		transports: z.array(authenticatorTransport).optional()
+	}),
+	authenticatorAttachment: z.enum(["platform", "cross-platform"]).optional()
+});
+const setupBody = z.object({
+	title: z.string().min(1),
+	tagline: z.string().optional(),
+	includeContent: z.boolean()
+});
+const setupAdminBody = z.object({
+	email: z.string().email(),
+	name: z.string().optional()
+});
+const setupAdminVerifyBody = z.object({ credential: registrationCredential });
+const atprotoLoginBody = z.object({ handle: z.string().trim().min(1) });
+const setupAtprotoAdminBody = z.object({ handle: z.string().trim().min(1) });
+
+//#endregion
+export { atprotoLoginBody, setupAdminBody, setupAdminVerifyBody, setupAtprotoAdminBody, setupBody };