dineway 0.1.9 → 0.1.12

package/dist/allowed-origins-C1AKK9AT.mjs

@@ -0,0 +1,68 @@
+import { t as getEnvAllowedOrigins } from "./public-url-Cun8N3NU.mjs";
+
+//#region src/auth/allowed-origins.ts
+function getConfiguredAllowedOrigins(config) {
+	const tagged = [];
+	if (config?.allowedOrigins) {
+		for (const origin of config.allowedOrigins) if (origin) tagged.push({
+			origin,
+			source: "config.allowedOrigins"
+		});
+	}
+	const envSource = typeof process !== "undefined" && process.env?.DINEWAY_ALLOWED_ORIGINS ? "DINEWAY_ALLOWED_ORIGINS" : "ALLOWED_ORIGINS";
+	for (const origin of getEnvAllowedOrigins()) tagged.push({
+		origin,
+		source: envSource
+	});
+	return tagged;
+}
+function validateOriginShape(tagged) {
+	const normalized = [];
+	const seen = /* @__PURE__ */ new Set();
+	for (const { origin, source } of tagged) {
+		let parsed;
+		try {
+			parsed = new URL(origin);
+		} catch (error) {
+			throw configError(source, `invalid URL: "${origin}"`, error);
+		}
+		if (parsed.protocol !== "http:" && parsed.protocol !== "https:") throw configError(source, `origin must be http or https: "${origin}" (got ${parsed.protocol})`);
+		if (parsed.hostname.endsWith(".")) throw configError(source, `hostname has a trailing dot: "${origin}". Remove the trailing dot; browser assertion origins do not include it.`);
+		if (parsed.hostname.split(".").includes("")) throw configError(source, `hostname has empty labels: "${origin}"`);
+		if (!seen.has(parsed.origin)) {
+			seen.add(parsed.origin);
+			normalized.push(parsed.origin);
+		}
+	}
+	return normalized;
+}
+function validateAllowedOrigins(siteUrl, tagged) {
+	const normalized = validateOriginShape(tagged);
+	if (normalized.length === 0) return normalized;
+	if (!siteUrl) throw new Error(`Dineway config error: allowedOrigins is set (${normalized.length} ${normalized.length === 1 ? "entry" : "entries"}) but siteUrl is not. Set siteUrl in astro.config.mjs or via DINEWAY_SITE_URL.`);
+	let siteHost;
+	try {
+		siteHost = new URL(siteUrl).hostname;
+	} catch (error) {
+		throw new Error(`Dineway config error: siteUrl is not a valid URL: "${siteUrl}"`, { cause: error });
+	}
+	if (siteHost.endsWith(".")) throw new Error(`Dineway config error: siteUrl "${siteUrl}" has a trailing-dot hostname, which cannot match assertion origins. Remove the trailing dot when using allowedOrigins.`);
+	if (isIPLiteralHostname(siteHost)) throw new Error(`Dineway config error: siteUrl "${siteUrl}" uses an IP-literal hostname. Multi-origin passkeys require a domain-based siteUrl.`);
+	for (const { origin, source } of tagged) {
+		const host = new URL(origin).hostname;
+		if (host !== siteHost && !host.endsWith(`.${siteHost}`)) throw configError(source, `"${origin}" is not a subdomain of siteUrl "${siteUrl}". Allowed origins must be the same hostname as siteUrl or a subdomain of it.`);
+	}
+	return normalized;
+}
+function configError(source, detail, cause) {
+	const error = /* @__PURE__ */ new Error(`Dineway config error in ${source}: ${detail}`);
+	if (cause !== void 0) error.cause = cause;
+	return error;
+}
+const IPV4_DOTTED_DECIMAL_RE = /^\d+(\.\d+){3}$/;
+function isIPLiteralHostname(hostname) {
+	return hostname.startsWith("[") || IPV4_DOTTED_DECIMAL_RE.test(hostname);
+}
+
+//#endregion
+export { validateAllowedOrigins as n, validateOriginShape as r, getConfiguredAllowedOrigins as t };

package/dist/api/route-utils.d.mts

@@ -0,0 +1,42 @@
+import { $n as isParseError, Qn as ParseResult, Zn as OptionsRepository, er as parseBody, ir as handleError, nr as apiError, rr as apiSuccess, t as DinewayConfig, tr as parseQuery } from "../runtime-Db4LbNVZ.mjs";
+import { t as Database } from "../types-DZPw8Rru.mjs";
+import { at as StorageCollectionConfig, it as StorageCollection } from "../types-Q616b2Hn.mjs";
+import "../types-BFmjniC2.mjs";
+import "../runner-BU6Lo1ZS.mjs";
+import "../index-EUAWaIxW.mjs";
+import "../index-CYfhYgXd.mjs";
+import "../bylines-eVVCuOe4.mjs";
+import "../types-0Vr68fc2.mjs";
+import "../validate-BwmQEbu8.mjs";
+import { Kysely } from "kysely";
+
+//#region src/api/auth-storage.d.ts
+/**
+ * Get storage collections for an auth provider.
+ */
+declare function getAuthProviderStorage(db: Kysely<Database>, providerId: string, storageConfig: Record<string, StorageCollectionConfig>): Record<string, StorageCollection>;
+//#endregion
+//#region src/api/public-url.d.ts
+/**
+ * Return the public-facing origin for the site.
+ *
+ * Resolution order:
+ *   1. `config.siteUrl` (set in astro.config.mjs, origin-normalized at startup)
+ *   2. `DINEWAY_SITE_URL` or `SITE_URL` env var (resolved at runtime for containers)
+ *   3. `url.origin` (internal request URL — correct when no proxy)
+ *
+ * @param url  The request URL (`new URL(request.url)` or `Astro.url`)
+ * @param config  The Dineway config (from `locals.dineway?.config`)
+ * @returns Origin string, e.g. `"https://mysite.example.com"`
+ */
+declare function getPublicOrigin(url: URL, config?: DinewayConfig): string;
+//#endregion
+//#region src/api/setup-complete.d.ts
+/**
+ * Finalize setup after the first admin user is created.
+ *
+ * Safe to call multiple times: if setup is already complete, this no-ops.
+ */
+declare function finalizeSetup(db: Kysely<Database>): Promise<void>;
+//#endregion
+export { OptionsRepository, type ParseResult, apiError, apiSuccess, finalizeSetup, getAuthProviderStorage, getPublicOrigin, handleError, isParseError, parseBody, parseQuery };

package/dist/api/route-utils.mjs

@@ -0,0 +1,26 @@
+import "../dialect-helpers-DhTzaUxP.mjs";
+import "../content-CyLkb-qH.mjs";
+import "../base64-Cz-aU0X1.mjs";
+import "../types-Bs6lTBBW.mjs";
+import "../media-_7Fxdu45.mjs";
+import "../user-CcXq-zoL.mjs";
+import { t as OptionsRepository } from "../options-z8VVg1Ll.mjs";
+import { r as createStorageAccess } from "../context-CNIkMzot.mjs";
+import "../seo-CUQctrog.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../error-BMUPwxgx.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../parse-C9106ehs.mjs";
+import "../ssrf-DDwRxF6B.mjs";
+import "../cron-CKxvBrRT.mjs";
+import { n as getPublicOrigin } from "../public-url-Cun8N3NU.mjs";
+import { t as finalizeSetup } from "../setup-complete-ChilE-da.mjs";
+
+//#region src/api/auth-storage.ts
+/**
+* Get storage collections for an auth provider.
+*/
+function getAuthProviderStorage(db, providerId, storageConfig) {
+	return createStorageAccess(db, `auth:${providerId}`, storageConfig);
+}
+
+//#endregion
+export { OptionsRepository, apiError, apiSuccess, finalizeSetup, getAuthProviderStorage, getPublicOrigin, handleError, isParseError, parseBody, parseQuery };

package/dist/api/schemas/index.d.mts

@@ -0,0 +1,3 @@
+import { $ as updateSectionBody, $n as httpUrl, $t as publicCommentSchema, A as userDetailSchema, An as contentCompareResponseSchema, At as passkeyVerifyBody, B as wpRewriteUrlsBody, Bn as contentSeoSchema, Bt as contextEntryListQuery, C as updateWidgetBody, Cn as mediaListQuery, Ct as inviteCreateBody, D as widgetSchema, Dn as mediaUpdateBody, Dt as passkeyRegisterOptionsBody, E as widgetAreaWithWidgetsSchema, En as mediaResponseSchema, Et as passkeyOptionsBody, F as importProbeBody, Fn as contentPreviewUrlBody, Ft as hitlRequestListQuery, G as searchResultSchema, Gn as contentUpdateBody, Gt as commentBulkBody, H as searchQuery, Hn as contentTranslationSchema, Ht as contextEntryStaleQuery, I as wpMediaImportBody, In as contentPublishBody, It as hitlRequestResolveBody, J as siteSettingsSchema, Jn as VALID_ROLE_LEVELS, Jt as commentListQuery, K as searchSuggestQuery, Kn as trashedContentItemSchema, Kt as commentBulkResponseSchema, L as wpPluginAnalyzeBody, Ln as contentResponseSchema, Lt as siteBriefingQuery, M as userSchema, Mn as contentItemSchema, Mt as signupRequestBody, N as userUpdateBody, Nn as contentListQuery, Nt as reviewRequestListQuery, O as allowedDomainCreateBody, On as mediaUploadUrlBody, Ot as passkeyRegisterVerifyBody, P as usersListQuery, Pn as contentListResponseSchema, Pt as reviewRequestResolveBody, Q as sectionsListQuery, Qn as deleteResponseSchema, Qt as publicCommentListResponseSchema, R as wpPluginExecuteBody, Rn as contentScheduleBody, Rt as contextEntryCreateBody, S as reorderWidgetsBody, Sn as mediaItemSchema, St as inviteCompleteBody, T as widgetAreaWithWidgetsAndCountSchema, Tn as mediaProviderListQuery, Tt as magicLinkSendBody, U as searchRebuildBody, Un as contentTranslationsResponseSchema, Ut as contextEntrySupersedeBody, V as searchEnableBody, Vn as contentTermsBody, Vt as contextEntryReviewBody, W as searchResponseSchema, Wn as contentTrashQuery, Wt as adminCommentListResponseSchema, X as sectionListResponseSchema, Xn as countResponseSchema, Xt as commentStatusBody, Y as createSectionBody, Yn as apiErrorSchema, Yt as commentSchema, Z as sectionSchema, Zn as cursorPaginationQuery, Zt as createCommentBody, _ as redirectSchema, _n as DEFAULT_MAX_UPLOAD_SIZE, _t as menuWithItemsSchema, a as bylineUpdateBody, an as createCollectionBody, at as termListResponseSchema, b as createWidgetAreaBody, bn as mediaConfirmResponseSchema, bt as updateMenuItemBody, c as createRedirectBody, cn as fieldReorderBody, ct as termWithCountSchema, d as notFoundListResponseSchema, dn as orphanRegisterBody, dt as createMenuItemBody, en as collectionGetQuery, er as localeCode, et as createTaxonomyDefBody, f as notFoundPruneBody, fn as orphanedTableListResponseSchema, ft as menuItemDeleteQuery, g as redirectListResponseSchema, gn as updateFieldBody, gt as menuSchema, h as notFoundSummarySchema, hn as updateCollectionBody, ht as menuListItemSchema, i as bylineSummarySchema, in as collectionWithFieldsResponseSchema, ir as successEnvelope, it as termGetResponseSchema, j as userListResponseSchema, jn as contentCreateBody, jt as signupCompleteBody, k as allowedDomainUpdateBody, kn as mediaUploadUrlResponseSchema, kt as passkeyRenameBody, l as notFoundEntrySchema, ln as fieldResponseSchema, lt as updateTermBody, m as notFoundSummaryResponseSchema, mn as schemaExportQuery, mt as menuItemUpdateQuery, n as bylineCreditSchema, nn as collectionResponseSchema, nr as roleLevel, nt as taxonomyDefSchema, o as bylinesListQuery, on as createFieldBody, ot as termResponseSchema, p as notFoundSummaryQuery, pn as orphanedTableSchema, pt as menuItemSchema, q as settingsUpdateBody, qn as trashedContentListResponseSchema, qt as commentCountsResponseSchema, r as bylineListResponseSchema, rn as collectionSchema, rr as slugPattern, rt as taxonomyListResponseSchema, s as contentBylineInputSchema, sn as fieldListResponseSchema, st as termSchema, t as bylineCreateBody, tn as collectionListResponseSchema, tr as offsetPaginationQuery, tt as createTermBody, u as notFoundListQuery, un as fieldSchema, ut as createMenuBody, v as redirectsListQuery, vn as formatFileSize, vt as reorderMenuItemsBody, w as widgetAreaSchema, wn as mediaListResponseSchema, wt as inviteRegisterOptionsBody, x as createWidgetBody, xn as mediaExistingResponseSchema, xt as authMeActionBody, y as updateRedirectBody, yn as mediaConfirmBody, yt as updateMenuBody, z as wpPrepareBody, zn as contentSeoInput, zt as contextEntryDiffQuery } from "../../bylines-eVVCuOe4.mjs";
+import { atprotoLoginBody, setupAdminBody, setupAdminVerifyBody, setupAtprotoAdminBody, setupBody } from "./setup.mjs";
+export { DEFAULT_MAX_UPLOAD_SIZE, VALID_ROLE_LEVELS, adminCommentListResponseSchema, allowedDomainCreateBody, allowedDomainUpdateBody, apiErrorSchema, atprotoLoginBody, authMeActionBody, bylineCreateBody, bylineCreditSchema, bylineListResponseSchema, bylineSummarySchema, bylineUpdateBody, bylinesListQuery, collectionGetQuery, collectionListResponseSchema, collectionResponseSchema, collectionSchema, collectionWithFieldsResponseSchema, commentBulkBody, commentBulkResponseSchema, commentCountsResponseSchema, commentListQuery, commentSchema, commentStatusBody, contentBylineInputSchema, contentCompareResponseSchema, contentCreateBody, contentItemSchema, contentListQuery, contentListResponseSchema, contentPreviewUrlBody, contentPublishBody, contentResponseSchema, contentScheduleBody, contentSeoInput, contentSeoSchema, contentTermsBody, contentTranslationSchema, contentTranslationsResponseSchema, contentTrashQuery, contentUpdateBody, contextEntryCreateBody, contextEntryDiffQuery, contextEntryListQuery, contextEntryReviewBody, contextEntryStaleQuery, contextEntrySupersedeBody, countResponseSchema, createCollectionBody, createCommentBody, createFieldBody, createMenuBody, createMenuItemBody, createRedirectBody, createSectionBody, createTaxonomyDefBody, createTermBody, createWidgetAreaBody, createWidgetBody, cursorPaginationQuery, deleteResponseSchema, fieldListResponseSchema, fieldReorderBody, fieldResponseSchema, fieldSchema, formatFileSize, hitlRequestListQuery, hitlRequestResolveBody, httpUrl, importProbeBody, inviteCompleteBody, inviteCreateBody, inviteRegisterOptionsBody, localeCode, magicLinkSendBody, mediaConfirmBody, mediaConfirmResponseSchema, mediaExistingResponseSchema, mediaItemSchema, mediaListQuery, mediaListResponseSchema, mediaProviderListQuery, mediaResponseSchema, mediaUpdateBody, mediaUploadUrlBody, mediaUploadUrlResponseSchema, menuItemDeleteQuery, menuItemSchema, menuItemUpdateQuery, menuListItemSchema, menuSchema, menuWithItemsSchema, notFoundEntrySchema, notFoundListQuery, notFoundListResponseSchema, notFoundPruneBody, notFoundSummaryQuery, notFoundSummaryResponseSchema, notFoundSummarySchema, offsetPaginationQuery, orphanRegisterBody, orphanedTableListResponseSchema, orphanedTableSchema, passkeyOptionsBody, passkeyRegisterOptionsBody, passkeyRegisterVerifyBody, passkeyRenameBody, passkeyVerifyBody, publicCommentListResponseSchema, publicCommentSchema, redirectListResponseSchema, redirectSchema, redirectsListQuery, reorderMenuItemsBody, reorderWidgetsBody, reviewRequestListQuery, reviewRequestResolveBody, roleLevel, schemaExportQuery, searchEnableBody, searchQuery, searchRebuildBody, searchResponseSchema, searchResultSchema, searchSuggestQuery, sectionListResponseSchema, sectionSchema, sectionsListQuery, settingsUpdateBody, setupAdminBody, setupAdminVerifyBody, setupAtprotoAdminBody, setupBody, signupCompleteBody, signupRequestBody, siteBriefingQuery, siteSettingsSchema, slugPattern, successEnvelope, taxonomyDefSchema, taxonomyListResponseSchema, termGetResponseSchema, termListResponseSchema, termResponseSchema, termSchema, termWithCountSchema, trashedContentItemSchema, trashedContentListResponseSchema, updateCollectionBody, updateFieldBody, updateMenuBody, updateMenuItemBody, updateRedirectBody, updateSectionBody, updateTermBody, updateWidgetBody, userDetailSchema, userListResponseSchema, userSchema, userUpdateBody, usersListQuery, widgetAreaSchema, widgetAreaWithWidgetsAndCountSchema, widgetAreaWithWidgetsSchema, widgetSchema, wpMediaImportBody, wpPluginAnalyzeBody, wpPluginExecuteBody, wpPrepareBody, wpRewriteUrlsBody };

package/dist/api/schemas/index.mjs

@@ -0,0 +1,6 @@
+import "../../context-types-C-LwdAxx.mjs";
+import { $ as menuItemDeleteQuery, $t as contentPreviewUrlBody, A as searchRebuildBody, At as orphanedTableListResponseSchema, B as updateSectionBody, Bt as mediaItemSchema, C as userDetailSchema, Cn as deleteResponseSchema, Ct as createCollectionBody, D as usersListQuery, Dn as roleLevel, Dt as fieldResponseSchema, E as userUpdateBody, En as offsetPaginationQuery, Et as fieldReorderBody, F as siteSettingsSchema, Ft as DEFAULT_MAX_UPLOAD_SIZE, G as termGetResponseSchema, Gt as mediaUpdateBody, H as createTermBody, Ht as mediaListResponseSchema, I as createSectionBody, It as formatFileSize, J as termSchema, Jt as contentCompareResponseSchema, K as termListResponseSchema, Kt as mediaUploadUrlBody, L as sectionListResponseSchema, Lt as mediaConfirmBody, M as searchResultSchema, Mt as schemaExportQuery, N as searchSuggestQuery, Nt as updateCollectionBody, O as searchEnableBody, On as slugPattern, Ot as fieldSchema, P as settingsUpdateBody, Pt as updateFieldBody, Q as createMenuItemBody, Qt as contentListResponseSchema, R as sectionSchema, Rt as mediaConfirmResponseSchema, S as allowedDomainUpdateBody, Sn as cursorPaginationQuery, St as collectionWithFieldsResponseSchema, T as userSchema, Tn as localeCode, Tt as fieldListResponseSchema, U as taxonomyDefSchema, Ut as mediaProviderListQuery, V as createTaxonomyDefBody, Vt as mediaListQuery, W as taxonomyListResponseSchema, Wt as mediaResponseSchema, X as updateTermBody, Xt as contentItemSchema, Y as termWithCountSchema, Yt as contentCreateBody, Z as createMenuBody, Zt as contentListQuery, _ as widgetAreaSchema, _n as bylinesListQuery, _t as publicCommentSchema, a as notFoundPruneBody, an as contentTermsBody, at as reorderMenuItemsBody, b as widgetSchema, bn as apiErrorSchema, bt as collectionResponseSchema, c as notFoundSummarySchema, cn as contentTrashQuery, ct as adminCommentListResponseSchema, d as redirectsListQuery, dn as trashedContentListResponseSchema, dt as commentCountsResponseSchema, en as contentPublishBody, et as menuItemSchema, f as updateRedirectBody, fn as bylineCreateBody, ft as commentListQuery, g as updateWidgetBody, gn as bylineUpdateBody, gt as publicCommentListResponseSchema, h as reorderWidgetsBody, hn as bylineSummarySchema, ht as createCommentBody, i as notFoundListResponseSchema, in as contentSeoSchema, it as menuWithItemsSchema, j as searchResponseSchema, jt as orphanedTableSchema, k as searchQuery, kn as successEnvelope, kt as orphanRegisterBody, l as redirectListResponseSchema, ln as contentUpdateBody, lt as commentBulkBody, m as createWidgetBody, mn as bylineListResponseSchema, mt as commentStatusBody, n as notFoundEntrySchema, nn as contentScheduleBody, nt as menuListItemSchema, o as notFoundSummaryQuery, on as contentTranslationSchema, ot as updateMenuBody, p as createWidgetAreaBody, pn as bylineCreditSchema, pt as commentSchema, q as termResponseSchema, qt as mediaUploadUrlResponseSchema, r as notFoundListQuery, rn as contentSeoInput, rt as menuSchema, s as notFoundSummaryResponseSchema, sn as contentTranslationsResponseSchema, st as updateMenuItemBody, t as createRedirectBody, tn as contentResponseSchema, tt as menuItemUpdateQuery, u as redirectSchema, un as trashedContentItemSchema, ut as commentBulkResponseSchema, v as widgetAreaWithWidgetsAndCountSchema, vn as contentBylineInputSchema, vt as collectionGetQuery, w as userListResponseSchema, wn as httpUrl, wt as createFieldBody, x as allowedDomainCreateBody, xn as countResponseSchema, xt as collectionSchema, y as widgetAreaWithWidgetsSchema, yn as VALID_ROLE_LEVELS, yt as collectionListResponseSchema, z as sectionsListQuery, zt as mediaExistingResponseSchema } from "../../redirects-lrlmYXVE.mjs";
+import { C as siteBriefingQuery, D as contextEntryReviewBody, E as contextEntryListQuery, O as contextEntryStaleQuery, S as hitlRequestResolveBody, T as contextEntryDiffQuery, _ as signupCompleteBody, a as wpPrepareBody, b as reviewRequestResolveBody, c as inviteCompleteBody, d as magicLinkSendBody, f as passkeyOptionsBody, g as passkeyVerifyBody, h as passkeyRenameBody, i as wpPluginExecuteBody, k as contextEntrySupersedeBody, l as inviteCreateBody, m as passkeyRegisterVerifyBody, n as wpMediaImportBody, o as wpRewriteUrlsBody, p as passkeyRegisterOptionsBody, r as wpPluginAnalyzeBody, s as authMeActionBody, t as importProbeBody, u as inviteRegisterOptionsBody, v as signupRequestBody, w as contextEntryCreateBody, x as hitlRequestListQuery, y as reviewRequestListQuery } from "../../import-CNcKWTbp.mjs";
+import { atprotoLoginBody, setupAdminBody, setupAdminVerifyBody, setupAtprotoAdminBody, setupBody } from "./setup.mjs";
+
+export { DEFAULT_MAX_UPLOAD_SIZE, VALID_ROLE_LEVELS, adminCommentListResponseSchema, allowedDomainCreateBody, allowedDomainUpdateBody, apiErrorSchema, atprotoLoginBody, authMeActionBody, bylineCreateBody, bylineCreditSchema, bylineListResponseSchema, bylineSummarySchema, bylineUpdateBody, bylinesListQuery, collectionGetQuery, collectionListResponseSchema, collectionResponseSchema, collectionSchema, collectionWithFieldsResponseSchema, commentBulkBody, commentBulkResponseSchema, commentCountsResponseSchema, commentListQuery, commentSchema, commentStatusBody, contentBylineInputSchema, contentCompareResponseSchema, contentCreateBody, contentItemSchema, contentListQuery, contentListResponseSchema, contentPreviewUrlBody, contentPublishBody, contentResponseSchema, contentScheduleBody, contentSeoInput, contentSeoSchema, contentTermsBody, contentTranslationSchema, contentTranslationsResponseSchema, contentTrashQuery, contentUpdateBody, contextEntryCreateBody, contextEntryDiffQuery, contextEntryListQuery, contextEntryReviewBody, contextEntryStaleQuery, contextEntrySupersedeBody, countResponseSchema, createCollectionBody, createCommentBody, createFieldBody, createMenuBody, createMenuItemBody, createRedirectBody, createSectionBody, createTaxonomyDefBody, createTermBody, createWidgetAreaBody, createWidgetBody, cursorPaginationQuery, deleteResponseSchema, fieldListResponseSchema, fieldReorderBody, fieldResponseSchema, fieldSchema, formatFileSize, hitlRequestListQuery, hitlRequestResolveBody, httpUrl, importProbeBody, inviteCompleteBody, inviteCreateBody, inviteRegisterOptionsBody, localeCode, magicLinkSendBody, mediaConfirmBody, mediaConfirmResponseSchema, mediaExistingResponseSchema, mediaItemSchema, mediaListQuery, mediaListResponseSchema, mediaProviderListQuery, mediaResponseSchema, mediaUpdateBody, mediaUploadUrlBody, mediaUploadUrlResponseSchema, menuItemDeleteQuery, menuItemSchema, menuItemUpdateQuery, menuListItemSchema, menuSchema, menuWithItemsSchema, notFoundEntrySchema, notFoundListQuery, notFoundListResponseSchema, notFoundPruneBody, notFoundSummaryQuery, notFoundSummaryResponseSchema, notFoundSummarySchema, offsetPaginationQuery, orphanRegisterBody, orphanedTableListResponseSchema, orphanedTableSchema, passkeyOptionsBody, passkeyRegisterOptionsBody, passkeyRegisterVerifyBody, passkeyRenameBody, passkeyVerifyBody, publicCommentListResponseSchema, publicCommentSchema, redirectListResponseSchema, redirectSchema, redirectsListQuery, reorderMenuItemsBody, reorderWidgetsBody, reviewRequestListQuery, reviewRequestResolveBody, roleLevel, schemaExportQuery, searchEnableBody, searchQuery, searchRebuildBody, searchResponseSchema, searchResultSchema, searchSuggestQuery, sectionListResponseSchema, sectionSchema, sectionsListQuery, settingsUpdateBody, setupAdminBody, setupAdminVerifyBody, setupAtprotoAdminBody, setupBody, signupCompleteBody, signupRequestBody, siteBriefingQuery, siteSettingsSchema, slugPattern, successEnvelope, taxonomyDefSchema, taxonomyListResponseSchema, termGetResponseSchema, termListResponseSchema, termResponseSchema, termSchema, termWithCountSchema, trashedContentItemSchema, trashedContentListResponseSchema, updateCollectionBody, updateFieldBody, updateMenuBody, updateMenuItemBody, updateRedirectBody, updateSectionBody, updateTermBody, updateWidgetBody, userDetailSchema, userListResponseSchema, userSchema, userUpdateBody, usersListQuery, widgetAreaSchema, widgetAreaWithWidgetsAndCountSchema, widgetAreaWithWidgetsSchema, widgetSchema, wpMediaImportBody, wpPluginAnalyzeBody, wpPluginExecuteBody, wpPrepareBody, wpRewriteUrlsBody };

package/dist/api/schemas/setup.d.mts

@@ -0,0 +1,42 @@
+import { z } from "zod";
+
+//#region src/api/schemas/setup.d.ts
+declare const setupBody: z.ZodObject<{
+  title: z.ZodString;
+  tagline: z.ZodOptional<z.ZodString>;
+  includeContent: z.ZodBoolean;
+}, z.core.$strip>;
+declare const setupAdminBody: z.ZodObject<{
+  email: z.ZodString;
+  name: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+declare const setupAdminVerifyBody: z.ZodObject<{
+  credential: z.ZodObject<{
+    id: z.ZodString;
+    rawId: z.ZodString;
+    type: z.ZodLiteral<"public-key">;
+    response: z.ZodObject<{
+      clientDataJSON: z.ZodString;
+      attestationObject: z.ZodString;
+      transports: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        usb: "usb";
+        nfc: "nfc";
+        ble: "ble";
+        internal: "internal";
+        hybrid: "hybrid";
+      }>>>;
+    }, z.core.$strip>;
+    authenticatorAttachment: z.ZodOptional<z.ZodEnum<{
+      platform: "platform";
+      "cross-platform": "cross-platform";
+    }>>;
+  }, z.core.$strip>;
+}, z.core.$strip>;
+declare const atprotoLoginBody: z.ZodObject<{
+  handle: z.ZodString;
+}, z.core.$strip>;
+declare const setupAtprotoAdminBody: z.ZodObject<{
+  handle: z.ZodString;
+}, z.core.$strip>;
+//#endregion
+export { atprotoLoginBody, setupAdminBody, setupAdminVerifyBody, setupAtprotoAdminBody, setupBody };

package/dist/api/schemas/setup.mjs

@@ -0,0 +1,39 @@
+import { z } from "zod";
+
+//#region src/api/schemas/setup.ts
+/** Registration credential — duplicated reference for setup flow.
+*  The canonical definition lives in auth.ts but setup needs it independently
+*  because setup runs before auth is configured. */
+const authenticatorTransport = z.enum([
+	"usb",
+	"nfc",
+	"ble",
+	"internal",
+	"hybrid"
+]);
+const registrationCredential = z.object({
+	id: z.string(),
+	rawId: z.string(),
+	type: z.literal("public-key"),
+	response: z.object({
+		clientDataJSON: z.string(),
+		attestationObject: z.string(),
+		transports: z.array(authenticatorTransport).optional()
+	}),
+	authenticatorAttachment: z.enum(["platform", "cross-platform"]).optional()
+});
+const setupBody = z.object({
+	title: z.string().min(1),
+	tagline: z.string().optional(),
+	includeContent: z.boolean()
+});
+const setupAdminBody = z.object({
+	email: z.string().email(),
+	name: z.string().optional()
+});
+const setupAdminVerifyBody = z.object({ credential: registrationCredential });
+const atprotoLoginBody = z.object({ handle: z.string().trim().min(1) });
+const setupAtprotoAdminBody = z.object({ handle: z.string().trim().min(1) });
+
+//#endregion
+export { atprotoLoginBody, setupAdminBody, setupAdminVerifyBody, setupAtprotoAdminBody, setupBody };