emdash 0.12.0 → 0.13.0

package/dist/astro/routes/api/admin/comments/_id_/status.mjs

@@ -0,0 +1,80 @@
+import "../../../../../../base64-CqR-7kqF.mjs";
+import "../../../../../../types-CwXMEPRr.mjs";
+import "../../../../../../comment-Dd9MI82-.mjs";
+import "../../../../../../options-BL4X94qY.mjs";
+import { a as unwrapResult, i as requireDb, n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-tSQWIl5U.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../../parse-BFTPon-J.mjs";
+import { vt as commentStatusBody } from "../../../../../../redirects-Dmj6KRU3.mjs";
+import "../../../../../../setup-BGAJ2uXs.mjs";
+import "../../../../../../api/schemas/index.mjs";
+import { n as requirePerm } from "../../../../../../authorize-BlyCH-96.mjs";
+import { a as handleCommentGet } from "../../../../../../comments-koGI0FrK.mjs";
+import { t as getSiteBaseUrl } from "../../../../../../site-url-D-M4Fd8O.mjs";
+import { i as sendCommentNotification, n as moderateComment, r as lookupContentAuthor } from "../../../../../../service-vByySp-2.mjs";
+
+//#region src/astro/routes/api/admin/comments/[id]/status.ts
+const prerender = false;
+const PUT = async ({ params, request, locals }) => {
+	const { emdash, user } = locals;
+	const { id } = params;
+	if (!id) return apiError("VALIDATION_ERROR", "Comment ID required", 400);
+	const dbErr = requireDb(emdash?.db);
+	if (dbErr) return dbErr;
+	const denied = requirePerm(user, "comments:moderate");
+	if (denied) return denied;
+	try {
+		const body = await parseBody(request, commentStatusBody);
+		if (isParseError(body)) return body;
+		const newStatus = body.status;
+		const hookRunner = {
+			async runBeforeCreate(event) {
+				return emdash.hooks.runCommentBeforeCreate(event);
+			},
+			async runModerate(event) {
+				const result = await emdash.hooks.invokeExclusiveHook("comment:moderate", event);
+				if (!result) return {
+					status: "pending",
+					reason: "No moderator configured"
+				};
+				if (result.error) return {
+					status: "pending",
+					reason: "Moderation error"
+				};
+				return result.result;
+			},
+			fireAfterCreate(event) {
+				emdash.hooks.runCommentAfterCreate(event).catch((err) => console.error("[comments] afterCreate error:", err instanceof Error ? err.message : err));
+			},
+			fireAfterModerate(event) {
+				emdash.hooks.runCommentAfterModerate(event).catch((err) => console.error("[comments] afterModerate error:", err instanceof Error ? err.message : err));
+			}
+		};
+		const existing = await handleCommentGet(emdash.db, id);
+		if (!existing.success) return unwrapResult(existing);
+		const previousStatus = existing.data.status;
+		const updated = await moderateComment(emdash.db, id, newStatus, {
+			id: user.id,
+			name: user.name ?? null
+		}, hookRunner);
+		if (!updated) return apiError("NOT_FOUND", "Comment not found", 404);
+		if (newStatus === "approved" && previousStatus !== "approved" && emdash.email) try {
+			const adminBaseUrl = await getSiteBaseUrl(emdash.db, request);
+			const content = await lookupContentAuthor(emdash.db, updated.collection, updated.contentId);
+			if (content?.author) await sendCommentNotification({
+				email: emdash.email,
+				comment: updated,
+				contentAuthor: content.author,
+				adminBaseUrl
+			});
+		} catch (err) {
+			console.error("[comments] notification error:", err instanceof Error ? err.message : err);
+		}
+		return apiSuccess(updated);
+	} catch (error) {
+		return handleError(error, "Failed to update comment status", "COMMENT_STATUS_ERROR");
+	}
+};
+
+//#endregion
+export { PUT, prerender };
+//# sourceMappingURL=status.mjs.map

package/dist/astro/routes/api/admin/comments/_id_/status.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/admin/comments/[id]/status.ts"],"sourcesContent":["/**\n * Comment status change\n *\n * PUT /_emdash/api/admin/comments/:id/status - Change comment status\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport { handleCommentGet } from \"#api/handlers/comments.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { commentStatusBody } from \"#api/schemas.js\";\nimport { getSiteBaseUrl } from \"#api/site-url.js\";\nimport { lookupContentAuthor, sendCommentNotification } from \"#comments/notifications.js\";\nimport { moderateComment, type CommentHookRunner } from \"#comments/service.js\";\nimport type { CommentStatus } from \"#db/repositories/comment.js\";\nimport type { ModerationDecision } from \"#plugins/types.js\";\n\nexport const prerender = false;\n\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tif (!id) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"Comment ID required\", 400);\n\t}\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"comments:moderate\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst body = await parseBody(request, commentStatusBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst newStatus = body.status as CommentStatus;\n\n\t\t// Build hook runner for the service\n\t\tconst hookRunner: CommentHookRunner = {\n\t\t\tasync runBeforeCreate(event) {\n\t\t\t\treturn emdash.hooks.runCommentBeforeCreate(event);\n\t\t\t},\n\t\t\tasync runModerate(event) {\n\t\t\t\tconst result = await emdash.hooks.invokeExclusiveHook(\"comment:moderate\", event);\n\t\t\t\tif (!result) return { status: \"pending\" as const, reason: \"No moderator configured\" };\n\t\t\t\tif (result.error) return { status: \"pending\" as const, reason: \"Moderation error\" };\n\t\t\t\treturn result.result as ModerationDecision;\n\t\t\t},\n\t\t\tfireAfterCreate(event) {\n\t\t\t\temdash.hooks\n\t\t\t\t\t.runCommentAfterCreate(event)\n\t\t\t\t\t.catch((err) =>\n\t\t\t\t\t\tconsole.error(\n\t\t\t\t\t\t\t\"[comments] afterCreate error:\",\n\t\t\t\t\t\t\terr instanceof Error ? err.message : err,\n\t\t\t\t\t\t),\n\t\t\t\t\t);\n\t\t\t},\n\t\t\tfireAfterModerate(event) {\n\t\t\t\temdash.hooks\n\t\t\t\t\t.runCommentAfterModerate(event)\n\t\t\t\t\t.catch((err) =>\n\t\t\t\t\t\tconsole.error(\n\t\t\t\t\t\t\t\"[comments] afterModerate error:\",\n\t\t\t\t\t\t\terr instanceof Error ? err.message : err,\n\t\t\t\t\t\t),\n\t\t\t\t\t);\n\t\t\t},\n\t\t};\n\n\t\t// Read the comment before updating so we know the previous status\n\t\tconst existing = await handleCommentGet(emdash.db, id);\n\t\tif (!existing.success) {\n\t\t\treturn unwrapResult(existing);\n\t\t}\n\t\tconst previousStatus = existing.data.status;\n\n\t\tconst updated = await moderateComment(\n\t\t\temdash.db,\n\t\t\tid,\n\t\t\tnewStatus,\n\t\t\t{ id: user!.id, name: user!.name ?? null },\n\t\t\thookRunner,\n\t\t);\n\n\t\tif (!updated) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"Comment not found\", 404);\n\t\t}\n\n\t\t// Send notification when a comment is newly approved\n\t\tif (newStatus === \"approved\" && previousStatus !== \"approved\" && emdash.email) {\n\t\t\ttry {\n\t\t\t\tconst adminBaseUrl = await getSiteBaseUrl(emdash.db, request);\n\t\t\t\tconst content = await lookupContentAuthor(emdash.db, updated.collection, updated.contentId);\n\t\t\t\tif (content?.author) {\n\t\t\t\t\tawait sendCommentNotification({\n\t\t\t\t\t\temail: emdash.email,\n\t\t\t\t\t\tcomment: updated,\n\t\t\t\t\t\tcontentAuthor: content.author,\n\t\t\t\t\t\tadminBaseUrl,\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t} catch (err) {\n\t\t\t\tconsole.error(\"[comments] notification error:\", err instanceof Error ? err.message : err);\n\t\t\t}\n\t\t}\n\n\t\treturn apiSuccess(updated);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update comment status\", \"COMMENT_STATUS_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;AAmBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;AAEf,KAAI,CAAC,GACJ,QAAO,SAAS,oBAAoB,uBAAuB,IAAI;CAGhE,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,oBAAoB;AACrD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,kBAAkB;AACxD,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,YAAY,KAAK;EAGvB,MAAM,aAAgC;GACrC,MAAM,gBAAgB,OAAO;AAC5B,WAAO,OAAO,MAAM,uBAAuB,MAAM;;GAElD,MAAM,YAAY,OAAO;IACxB,MAAM,SAAS,MAAM,OAAO,MAAM,oBAAoB,oBAAoB,MAAM;AAChF,QAAI,CAAC,OAAQ,QAAO;KAAE,QAAQ;KAAoB,QAAQ;KAA2B;AACrF,QAAI,OAAO,MAAO,QAAO;KAAE,QAAQ;KAAoB,QAAQ;KAAoB;AACnF,WAAO,OAAO;;GAEf,gBAAgB,OAAO;AACtB,WAAO,MACL,sBAAsB,MAAM,CAC5B,OAAO,QACP,QAAQ,MACP,iCACA,eAAe,QAAQ,IAAI,UAAU,IACrC,CACD;;GAEH,kBAAkB,OAAO;AACxB,WAAO,MACL,wBAAwB,MAAM,CAC9B,OAAO,QACP,QAAQ,MACP,mCACA,eAAe,QAAQ,IAAI,UAAU,IACrC,CACD;;GAEH;EAGD,MAAM,WAAW,MAAM,iBAAiB,OAAO,IAAI,GAAG;AACtD,MAAI,CAAC,SAAS,QACb,QAAO,aAAa,SAAS;EAE9B,MAAM,iBAAiB,SAAS,KAAK;EAErC,MAAM,UAAU,MAAM,gBACrB,OAAO,IACP,IACA,WACA;GAAE,IAAI,KAAM;GAAI,MAAM,KAAM,QAAQ;GAAM,EAC1C,WACA;AAED,MAAI,CAAC,QACJ,QAAO,SAAS,aAAa,qBAAqB,IAAI;AAIvD,MAAI,cAAc,cAAc,mBAAmB,cAAc,OAAO,MACvE,KAAI;GACH,MAAM,eAAe,MAAM,eAAe,OAAO,IAAI,QAAQ;GAC7D,MAAM,UAAU,MAAM,oBAAoB,OAAO,IAAI,QAAQ,YAAY,QAAQ,UAAU;AAC3F,OAAI,SAAS,OACZ,OAAM,wBAAwB;IAC7B,OAAO,OAAO;IACd,SAAS;IACT,eAAe,QAAQ;IACvB;IACA,CAAC;WAEK,KAAK;AACb,WAAQ,MAAM,kCAAkC,eAAe,QAAQ,IAAI,UAAU,IAAI;;AAI3F,SAAO,WAAW,QAAQ;UAClB,OAAO;AACf,SAAO,YAAY,OAAO,mCAAmC,uBAAuB"}

package/dist/astro/routes/api/admin/comments/_id_.d.mts

@@ -0,0 +1,15 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/admin/comments/[id].d.ts
+declare const prerender = false;
+/**
+ * Get single comment detail (includes moderation_metadata)
+ */
+declare const GET: APIRoute;
+/**
+ * Hard delete a comment (ADMIN only)
+ */
+declare const DELETE: APIRoute;
+//#endregion
+export { DELETE, GET, prerender };
+//# sourceMappingURL=_id_.d.mts.map

package/dist/astro/routes/api/admin/comments/_id_.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_id_.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/admin/comments/[id].ts"],"mappings":";;;cAaa,SAAA;AAKb;;;AAAA,cAAa,GAAA,EAAK,QAAA;;AAyBlB;;cAAa,MAAA,EAAQ,QAAA"}

package/dist/astro/routes/api/admin/comments/_id_.mjs

@@ -0,0 +1,47 @@
+import "../../../../../base64-CqR-7kqF.mjs";
+import "../../../../../types-CwXMEPRr.mjs";
+import "../../../../../comment-Dd9MI82-.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../../error-tSQWIl5U.mjs";
+import { n as requirePerm } from "../../../../../authorize-BlyCH-96.mjs";
+import { a as handleCommentGet, i as handleCommentDelete } from "../../../../../comments-koGI0FrK.mjs";
+
+//#region src/astro/routes/api/admin/comments/[id].ts
+const prerender = false;
+/**
+* Get single comment detail (includes moderation_metadata)
+*/
+const GET = async ({ params, locals }) => {
+	const { emdash, user } = locals;
+	const { id } = params;
+	if (!id) return apiError("VALIDATION_ERROR", "Comment ID required", 400);
+	const dbErr = requireDb(emdash?.db);
+	if (dbErr) return dbErr;
+	const denied = requirePerm(user, "comments:moderate");
+	if (denied) return denied;
+	try {
+		return unwrapResult(await handleCommentGet(emdash.db, id));
+	} catch (error) {
+		return handleError(error, "Failed to get comment", "COMMENT_GET_ERROR");
+	}
+};
+/**
+* Hard delete a comment (ADMIN only)
+*/
+const DELETE = async ({ params, locals }) => {
+	const { emdash, user } = locals;
+	const { id } = params;
+	if (!id) return apiError("VALIDATION_ERROR", "Comment ID required", 400);
+	const dbErr = requireDb(emdash?.db);
+	if (dbErr) return dbErr;
+	const denied = requirePerm(user, "comments:delete");
+	if (denied) return denied;
+	try {
+		return unwrapResult(await handleCommentDelete(emdash.db, id));
+	} catch (error) {
+		return handleError(error, "Failed to delete comment", "COMMENT_DELETE_ERROR");
+	}
+};
+
+//#endregion
+export { DELETE, GET, prerender };
+//# sourceMappingURL=_id_.mjs.map

package/dist/astro/routes/api/admin/comments/_id_.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"_id_.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/admin/comments/[id].ts"],"sourcesContent":["/**\n * Single comment admin endpoints\n *\n * GET    /_emdash/api/admin/comments/:id - Get comment detail\n * DELETE /_emdash/api/admin/comments/:id - Hard delete (ADMIN only)\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport { handleCommentGet, handleCommentDelete } from \"#api/handlers/comments.js\";\n\nexport const prerender = false;\n\n/**\n * Get single comment detail (includes moderation_metadata)\n */\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tif (!id) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"Comment ID required\", 400);\n\t}\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"comments:moderate\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst result = await handleCommentGet(emdash.db, id);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to get comment\", \"COMMENT_GET_ERROR\");\n\t}\n};\n\n/**\n * Hard delete a comment (ADMIN only)\n */\nexport const DELETE: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tif (!id) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"Comment ID required\", 400);\n\t}\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"comments:delete\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst result = await handleCommentDelete(emdash.db, id);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to delete comment\", \"COMMENT_DELETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;AAaA,MAAa,YAAY;;;;AAKzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;AAEf,KAAI,CAAC,GACJ,QAAO,SAAS,oBAAoB,uBAAuB,IAAI;CAGhE,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,oBAAoB;AACrD,KAAI,OAAQ,QAAO;AAEnB,KAAI;AAEH,SAAO,aADQ,MAAM,iBAAiB,OAAO,IAAI,GAAG,CACzB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,yBAAyB,oBAAoB;;;;;;AAOzE,MAAa,SAAmB,OAAO,EAAE,QAAQ,aAAa;CAC7D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;AAEf,KAAI,CAAC,GACJ,QAAO,SAAS,oBAAoB,uBAAuB,IAAI;CAGhE,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,kBAAkB;AACnD,KAAI,OAAQ,QAAO;AAEnB,KAAI;AAEH,SAAO,aADQ,MAAM,oBAAoB,OAAO,IAAI,GAAG,CAC5B;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,4BAA4B,uBAAuB"}

package/dist/astro/routes/api/admin/comments/bulk.d.mts

@@ -0,0 +1,8 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/admin/comments/bulk.d.ts
+declare const prerender = false;
+declare const POST: APIRoute;
+//#endregion
+export { POST, prerender };
+//# sourceMappingURL=bulk.d.mts.map

package/dist/astro/routes/api/admin/comments/bulk.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bulk.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/admin/comments/bulk.ts"],"mappings":";;;cAca,SAAA;AAAA,cAEA,IAAA,EAAM,QAAA"}

package/dist/astro/routes/api/admin/comments/bulk.mjs

@@ -0,0 +1,36 @@
+import "../../../../../base64-CqR-7kqF.mjs";
+import "../../../../../types-CwXMEPRr.mjs";
+import "../../../../../comment-Dd9MI82-.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError } from "../../../../../error-tSQWIl5U.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-BFTPon-J.mjs";
+import { pt as commentBulkBody } from "../../../../../redirects-Dmj6KRU3.mjs";
+import "../../../../../setup-BGAJ2uXs.mjs";
+import "../../../../../api/schemas/index.mjs";
+import { n as requirePerm } from "../../../../../authorize-BlyCH-96.mjs";
+import { n as handleCommentBulk } from "../../../../../comments-koGI0FrK.mjs";
+
+//#region src/astro/routes/api/admin/comments/bulk.ts
+const prerender = false;
+const POST = async ({ request, locals }) => {
+	const { emdash, user } = locals;
+	const dbErr = requireDb(emdash?.db);
+	if (dbErr) return dbErr;
+	try {
+		const body = await parseBody(request, commentBulkBody);
+		if (isParseError(body)) return body;
+		if (body.action === "delete") {
+			const denied = requirePerm(user, "comments:delete");
+			if (denied) return denied;
+		} else {
+			const denied = requirePerm(user, "comments:moderate");
+			if (denied) return denied;
+		}
+		return unwrapResult(await handleCommentBulk(emdash.db, body.ids, body.action));
+	} catch (error) {
+		return handleError(error, "Failed to perform bulk operation", "COMMENT_BULK_ERROR");
+	}
+};
+
+//#endregion
+export { POST, prerender };
+//# sourceMappingURL=bulk.mjs.map

package/dist/astro/routes/api/admin/comments/bulk.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"bulk.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/admin/comments/bulk.ts"],"sourcesContent":["/**\n * Bulk comment operations\n *\n * POST /_emdash/api/admin/comments/bulk - Bulk status change or delete\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport { handleCommentBulk } from \"#api/handlers/comments.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { commentBulkBody } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\ttry {\n\t\tconst body = await parseBody(request, commentBulkBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Bulk delete requires ADMIN, bulk status change requires EDITOR\n\t\tif (body.action === \"delete\") {\n\t\t\tconst denied = requirePerm(user, \"comments:delete\");\n\t\t\tif (denied) return denied;\n\t\t} else {\n\t\t\tconst denied = requirePerm(user, \"comments:moderate\");\n\t\t\tif (denied) return denied;\n\t\t}\n\n\t\tconst result = await handleCommentBulk(emdash.db, body.ids, body.action);\n\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to perform bulk operation\", \"COMMENT_BULK_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;AAcA,MAAa,YAAY;AAEzB,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,QAAQ,SAAS;CAEzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;AAElB,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,gBAAgB;AACtD,MAAI,aAAa,KAAK,CAAE,QAAO;AAG/B,MAAI,KAAK,WAAW,UAAU;GAC7B,MAAM,SAAS,YAAY,MAAM,kBAAkB;AACnD,OAAI,OAAQ,QAAO;SACb;GACN,MAAM,SAAS,YAAY,MAAM,oBAAoB;AACrD,OAAI,OAAQ,QAAO;;AAKpB,SAAO,aAFQ,MAAM,kBAAkB,OAAO,IAAI,KAAK,KAAK,KAAK,OAAO,CAE7C;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,oCAAoC,qBAAqB"}

package/dist/astro/routes/api/admin/comments/counts.d.mts

@@ -0,0 +1,8 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/admin/comments/counts.d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+//#endregion
+export { GET, prerender };
+//# sourceMappingURL=counts.d.mts.map

package/dist/astro/routes/api/admin/comments/counts.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"counts.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/admin/comments/counts.ts"],"mappings":";;;cAYa,SAAA;AAAA,cAEA,GAAA,EAAK,QAAA"}

package/dist/astro/routes/api/admin/comments/counts.mjs

@@ -0,0 +1,25 @@
+import "../../../../../base64-CqR-7kqF.mjs";
+import "../../../../../types-CwXMEPRr.mjs";
+import "../../../../../comment-Dd9MI82-.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError } from "../../../../../error-tSQWIl5U.mjs";
+import { n as requirePerm } from "../../../../../authorize-BlyCH-96.mjs";
+import { r as handleCommentCounts } from "../../../../../comments-koGI0FrK.mjs";
+
+//#region src/astro/routes/api/admin/comments/counts.ts
+const prerender = false;
+const GET = async ({ locals }) => {
+	const { emdash, user } = locals;
+	const dbErr = requireDb(emdash?.db);
+	if (dbErr) return dbErr;
+	const denied = requirePerm(user, "comments:moderate");
+	if (denied) return denied;
+	try {
+		return unwrapResult(await handleCommentCounts(emdash.db));
+	} catch (error) {
+		return handleError(error, "Failed to get comment counts", "COMMENT_COUNTS_ERROR");
+	}
+};
+
+//#endregion
+export { GET, prerender };
+//# sourceMappingURL=counts.mjs.map

package/dist/astro/routes/api/admin/comments/counts.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"counts.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/admin/comments/counts.ts"],"sourcesContent":["/**\n * Comment status counts for inbox badges\n *\n * GET /_emdash/api/admin/comments/counts\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport { handleCommentCounts } from \"#api/handlers/comments.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ locals }) => {\n\tconst { emdash, user } = locals;\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"comments:moderate\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst result = await handleCommentCounts(emdash.db);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to get comment counts\", \"COMMENT_COUNTS_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;AAYA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,aAAa;CAClD,MAAM,EAAE,QAAQ,SAAS;CAEzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,oBAAoB;AACrD,KAAI,OAAQ,QAAO;AAEnB,KAAI;AAEH,SAAO,aADQ,MAAM,oBAAoB,OAAO,GAAG,CACxB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,gCAAgC,uBAAuB"}

package/dist/astro/routes/api/admin/comments/index.d.mts

@@ -0,0 +1,11 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/admin/comments/index.d.ts
+declare const prerender = false;
+/**
+ * List comments for moderation inbox
+ */
+declare const GET: APIRoute;
+//#endregion
+export { GET, prerender };
+//# sourceMappingURL=index.d.mts.map

package/dist/astro/routes/api/admin/comments/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/admin/comments/index.ts"],"mappings":";;;cAea,SAAA;;AAKb;;cAAa,GAAA,EAAK,QAAA"}

package/dist/astro/routes/api/admin/comments/index.mjs

@@ -0,0 +1,40 @@
+import "../../../../../base64-CqR-7kqF.mjs";
+import "../../../../../types-CwXMEPRr.mjs";
+import "../../../../../comment-Dd9MI82-.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError } from "../../../../../error-tSQWIl5U.mjs";
+import { i as parseQuery, t as isParseError } from "../../../../../parse-BFTPon-J.mjs";
+import { gt as commentListQuery } from "../../../../../redirects-Dmj6KRU3.mjs";
+import "../../../../../setup-BGAJ2uXs.mjs";
+import "../../../../../api/schemas/index.mjs";
+import { n as requirePerm } from "../../../../../authorize-BlyCH-96.mjs";
+import { o as handleCommentInbox } from "../../../../../comments-koGI0FrK.mjs";
+
+//#region src/astro/routes/api/admin/comments/index.ts
+const prerender = false;
+/**
+* List comments for moderation inbox
+*/
+const GET = async ({ url, locals }) => {
+	const { emdash, user } = locals;
+	const dbErr = requireDb(emdash?.db);
+	if (dbErr) return dbErr;
+	const denied = requirePerm(user, "comments:moderate");
+	if (denied) return denied;
+	try {
+		const query = parseQuery(url, commentListQuery);
+		if (isParseError(query)) return query;
+		return unwrapResult(await handleCommentInbox(emdash.db, {
+			status: query.status,
+			collection: query.collection,
+			search: query.search,
+			limit: query.limit,
+			cursor: query.cursor
+		}));
+	} catch (error) {
+		return handleError(error, "Failed to list comments", "COMMENT_INBOX_ERROR");
+	}
+};
+
+//#endregion
+export { GET, prerender };
+//# sourceMappingURL=index.mjs.map

package/dist/astro/routes/api/admin/comments/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/admin/comments/index.ts"],"sourcesContent":["/**\n * Admin comment inbox\n *\n * GET /_emdash/api/admin/comments - List comments (filterable by status, collection, search)\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport { handleCommentInbox } from \"#api/handlers/comments.js\";\nimport { isParseError, parseQuery } from \"#api/parse.js\";\nimport { commentListQuery } from \"#api/schemas.js\";\nimport type { CommentStatus } from \"#db/repositories/comment.js\";\n\nexport const prerender = false;\n\n/**\n * List comments for moderation inbox\n */\nexport const GET: APIRoute = async ({ url, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"comments:moderate\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst query = parseQuery(url, commentListQuery);\n\t\tif (isParseError(query)) return query;\n\n\t\tconst result = await handleCommentInbox(emdash.db, {\n\t\t\tstatus: query.status as CommentStatus | undefined,\n\t\t\tcollection: query.collection,\n\t\t\tsearch: query.search,\n\t\t\tlimit: query.limit,\n\t\t\tcursor: query.cursor,\n\t\t});\n\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to list comments\", \"COMMENT_INBOX_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;AAeA,MAAa,YAAY;;;;AAKzB,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CACvD,MAAM,EAAE,QAAQ,SAAS;CAEzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,oBAAoB;AACrD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,QAAQ,WAAW,KAAK,iBAAiB;AAC/C,MAAI,aAAa,MAAM,CAAE,QAAO;AAUhC,SAAO,aARQ,MAAM,mBAAmB,OAAO,IAAI;GAClD,QAAQ,MAAM;GACd,YAAY,MAAM;GAClB,QAAQ,MAAM;GACd,OAAO,MAAM;GACb,QAAQ,MAAM;GACd,CAAC,CAEyB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,sBAAsB"}

package/dist/astro/routes/api/admin/hooks/exclusive/_hookName_.d.mts

@@ -0,0 +1,8 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/admin/hooks/exclusive/[hookName].d.ts
+declare const prerender = false;
+declare const PUT: APIRoute;
+//#endregion
+export { PUT, prerender };
+//# sourceMappingURL=_hookName_.d.mts.map

package/dist/astro/routes/api/admin/hooks/exclusive/_hookName_.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_hookName_.d.mts","names":[],"sources":["../../../../../../../src/astro/routes/api/admin/hooks/exclusive/[hookName].ts"],"mappings":";;;cAkBa,SAAA;AAAA,cASA,GAAA,EAAK,QAAA"}

package/dist/astro/routes/api/admin/hooks/exclusive/_hookName_.mjs

@@ -0,0 +1,48 @@
+import "../../../../../../base64-CqR-7kqF.mjs";
+import "../../../../../../types-CwXMEPRr.mjs";
+import { t as OptionsRepository } from "../../../../../../options-BL4X94qY.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-tSQWIl5U.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../../parse-BFTPon-J.mjs";
+import { n as requirePerm } from "../../../../../../authorize-BlyCH-96.mjs";
+import { z } from "zod";
+
+//#region src/astro/routes/api/admin/hooks/exclusive/[hookName].ts
+const prerender = false;
+/** Hook name format: namespace:action (e.g., "content:beforeSave") */
+const HOOK_NAME_RE = /^[a-z]+:[a-zA-Z]+$/;
+const setSelectionSchema = z.object({ pluginId: z.string().min(1).nullable() });
+const PUT = async ({ params, request, locals }) => {
+	const { emdash, user } = locals;
+	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	const denied = requirePerm(user, "settings:manage");
+	if (denied) return denied;
+	const hookName = params.hookName;
+	if (!hookName) return apiError("VALIDATION_ERROR", "Hook name is required", 400);
+	if (!HOOK_NAME_RE.test(hookName)) return apiError("VALIDATION_ERROR", "Invalid hook name format", 400);
+	try {
+		const pipeline = emdash.hooks;
+		if (!pipeline.isExclusiveHook(hookName)) return apiError("NOT_FOUND", `Hook '${hookName}' is not a registered exclusive hook`, 404);
+		const body = await parseBody(request, setSelectionSchema);
+		if (isParseError(body)) return body;
+		const optionsRepo = new OptionsRepository(emdash.db);
+		const optionKey = `emdash:exclusive_hook:${hookName}`;
+		if (body.pluginId === null) {
+			await optionsRepo.delete(optionKey);
+			pipeline.clearExclusiveSelection(hookName);
+		} else {
+			if (!pipeline.getExclusiveHookProviders(hookName).some((p) => p.pluginId === body.pluginId)) return apiError("VALIDATION_ERROR", `Plugin '${body.pluginId}' is not a provider for hook '${hookName}'`, 400);
+			await optionsRepo.set(optionKey, body.pluginId);
+			pipeline.setExclusiveSelection(hookName, body.pluginId);
+		}
+		return apiSuccess({
+			hookName,
+			selectedPluginId: body.pluginId
+		});
+	} catch (error) {
+		return handleError(error, "Failed to set exclusive hook selection", "EXCLUSIVE_HOOK_SET_ERROR");
+	}
+};
+
+//#endregion
+export { PUT, prerender };
+//# sourceMappingURL=_hookName_.mjs.map

package/dist/astro/routes/api/admin/hooks/exclusive/_hookName_.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"_hookName_.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/admin/hooks/exclusive/[hookName].ts"],"sourcesContent":["/**\n * Exclusive hook selection endpoint\n *\n * PUT /_emdash/api/admin/hooks/exclusive/:hookName\n *\n * Sets or clears the selected provider for an exclusive hook.\n * Body: { pluginId: string | null }\n * Requires settings:manage permission.\n */\n\nimport type { APIRoute } from \"astro\";\nimport { z } from \"zod\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { OptionsRepository } from \"#db/repositories/options.js\";\n\nexport const prerender = false;\n\n/** Hook name format: namespace:action (e.g., \"content:beforeSave\") */\nconst HOOK_NAME_RE = /^[a-z]+:[a-zA-Z]+$/;\n\nconst setSelectionSchema = z.object({\n\tpluginId: z.string().min(1).nullable(),\n});\n\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"settings:manage\");\n\tif (denied) return denied;\n\n\tconst hookName = params.hookName;\n\tif (!hookName) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"Hook name is required\", 400);\n\t}\n\n\t// Validate hook name format: must be namespace:action (e.g., \"content:beforeSave\")\n\tif (!HOOK_NAME_RE.test(hookName)) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"Invalid hook name format\", 400);\n\t}\n\n\ttry {\n\t\tconst pipeline = emdash.hooks;\n\n\t\t// Verify this is actually an exclusive hook\n\t\tif (!pipeline.isExclusiveHook(hookName)) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Hook '${hookName}' is not a registered exclusive hook`, 404);\n\t\t}\n\n\t\tconst body = await parseBody(request, setSelectionSchema);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst optionsRepo = new OptionsRepository(emdash.db);\n\t\tconst optionKey = `emdash:exclusive_hook:${hookName}`;\n\n\t\tif (body.pluginId === null) {\n\t\t\t// Clear the selection\n\t\t\tawait optionsRepo.delete(optionKey);\n\t\t\tpipeline.clearExclusiveSelection(hookName);\n\t\t} else {\n\t\t\t// Validate that the pluginId is an actual provider for this hook\n\t\t\tconst providers = pipeline.getExclusiveHookProviders(hookName);\n\t\t\tconst isValidProvider = providers.some(\n\t\t\t\t(p: { pluginId: string }) => p.pluginId === body.pluginId,\n\t\t\t);\n\t\t\tif (!isValidProvider) {\n\t\t\t\treturn apiError(\n\t\t\t\t\t\"VALIDATION_ERROR\",\n\t\t\t\t\t`Plugin '${body.pluginId}' is not a provider for hook '${hookName}'`,\n\t\t\t\t\t400,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tawait optionsRepo.set(optionKey, body.pluginId);\n\t\t\tpipeline.setExclusiveSelection(hookName, body.pluginId);\n\t\t}\n\n\t\treturn apiSuccess({\n\t\t\thookName,\n\t\t\tselectedPluginId: body.pluginId,\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to set exclusive hook selection\", \"EXCLUSIVE_HOOK_SET_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;AAkBA,MAAa,YAAY;;AAGzB,MAAM,eAAe;AAErB,MAAM,qBAAqB,EAAE,OAAO,EACnC,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU,EACtC,CAAC;AAEF,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,kBAAkB;AACnD,KAAI,OAAQ,QAAO;CAEnB,MAAM,WAAW,OAAO;AACxB,KAAI,CAAC,SACJ,QAAO,SAAS,oBAAoB,yBAAyB,IAAI;AAIlE,KAAI,CAAC,aAAa,KAAK,SAAS,CAC/B,QAAO,SAAS,oBAAoB,4BAA4B,IAAI;AAGrE,KAAI;EACH,MAAM,WAAW,OAAO;AAGxB,MAAI,CAAC,SAAS,gBAAgB,SAAS,CACtC,QAAO,SAAS,aAAa,SAAS,SAAS,uCAAuC,IAAI;EAG3F,MAAM,OAAO,MAAM,UAAU,SAAS,mBAAmB;AACzD,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,cAAc,IAAI,kBAAkB,OAAO,GAAG;EACpD,MAAM,YAAY,yBAAyB;AAE3C,MAAI,KAAK,aAAa,MAAM;AAE3B,SAAM,YAAY,OAAO,UAAU;AACnC,YAAS,wBAAwB,SAAS;SACpC;AAMN,OAAI,CAJc,SAAS,0BAA0B,SAAS,CAC5B,MAChC,MAA4B,EAAE,aAAa,KAAK,SACjD,CAEA,QAAO,SACN,oBACA,WAAW,KAAK,SAAS,gCAAgC,SAAS,IAClE,IACA;AAGF,SAAM,YAAY,IAAI,WAAW,KAAK,SAAS;AAC/C,YAAS,sBAAsB,UAAU,KAAK,SAAS;;AAGxD,SAAO,WAAW;GACjB;GACA,kBAAkB,KAAK;GACvB,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,0CAA0C,2BAA2B"}

package/dist/astro/routes/api/admin/hooks/exclusive/index.d.mts

@@ -0,0 +1,8 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/admin/hooks/exclusive/index.d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+//#endregion
+export { GET, prerender };
+//# sourceMappingURL=index.d.mts.map

package/dist/astro/routes/api/admin/hooks/exclusive/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../../../../src/astro/routes/api/admin/hooks/exclusive/index.ts"],"mappings":";;;cAea,SAAA;AAAA,cAEA,GAAA,EAAK,QAAA"}

package/dist/astro/routes/api/admin/hooks/exclusive/index.mjs

@@ -0,0 +1,36 @@
+import "../../../../../../base64-CqR-7kqF.mjs";
+import "../../../../../../types-CwXMEPRr.mjs";
+import { t as OptionsRepository } from "../../../../../../options-BL4X94qY.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-tSQWIl5U.mjs";
+import { n as requirePerm } from "../../../../../../authorize-BlyCH-96.mjs";
+
+//#region src/astro/routes/api/admin/hooks/exclusive/index.ts
+const prerender = false;
+const GET = async ({ locals }) => {
+	const { emdash, user } = locals;
+	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	const denied = requirePerm(user, "settings:manage");
+	if (denied) return denied;
+	try {
+		const pipeline = emdash.hooks;
+		const exclusiveHookNames = pipeline.getRegisteredExclusiveHooks();
+		const optionsRepo = new OptionsRepository(emdash.db);
+		const hooks = [];
+		for (const hookName of exclusiveHookNames) {
+			const providers = pipeline.getExclusiveHookProviders(hookName);
+			const selection = await optionsRepo.get(`emdash:exclusive_hook:${hookName}`);
+			hooks.push({
+				hookName,
+				providers: providers.map((provider) => ({ pluginId: provider.pluginId })),
+				selectedPluginId: selection
+			});
+		}
+		return apiSuccess({ items: hooks });
+	} catch (error) {
+		return handleError(error, "Failed to list exclusive hooks", "EXCLUSIVE_HOOKS_LIST_ERROR");
+	}
+};
+
+//#endregion
+export { GET, prerender };
+//# sourceMappingURL=index.mjs.map

package/dist/astro/routes/api/admin/hooks/exclusive/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/admin/hooks/exclusive/index.ts"],"sourcesContent":["/**\n * Exclusive hooks list endpoint\n *\n * GET /_emdash/api/admin/hooks/exclusive\n *\n * Lists all exclusive hooks with their providers and current selections.\n * Requires admin role.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { OptionsRepository } from \"#db/repositories/options.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"settings:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst pipeline = emdash.hooks;\n\t\tconst exclusiveHookNames = pipeline.getRegisteredExclusiveHooks();\n\t\tconst optionsRepo = new OptionsRepository(emdash.db);\n\n\t\tconst hooks = [];\n\t\tfor (const hookName of exclusiveHookNames) {\n\t\t\tconst providers = pipeline.getExclusiveHookProviders(hookName);\n\t\t\tconst selection = await optionsRepo.get<string>(`emdash:exclusive_hook:${hookName}`);\n\n\t\t\thooks.push({\n\t\t\t\thookName,\n\t\t\t\tproviders: providers.map((provider: { pluginId: string }) => ({\n\t\t\t\t\tpluginId: provider.pluginId,\n\t\t\t\t})),\n\t\t\t\tselectedPluginId: selection,\n\t\t\t});\n\t\t}\n\n\t\treturn apiSuccess({ items: hooks });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to list exclusive hooks\", \"EXCLUSIVE_HOOKS_LIST_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;AAeA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,aAAa;CAClD,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,kBAAkB;AACnD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,WAAW,OAAO;EACxB,MAAM,qBAAqB,SAAS,6BAA6B;EACjE,MAAM,cAAc,IAAI,kBAAkB,OAAO,GAAG;EAEpD,MAAM,QAAQ,EAAE;AAChB,OAAK,MAAM,YAAY,oBAAoB;GAC1C,MAAM,YAAY,SAAS,0BAA0B,SAAS;GAC9D,MAAM,YAAY,MAAM,YAAY,IAAY,yBAAyB,WAAW;AAEpF,SAAM,KAAK;IACV;IACA,WAAW,UAAU,KAAK,cAAoC,EAC7D,UAAU,SAAS,UACnB,EAAE;IACH,kBAAkB;IAClB,CAAC;;AAGH,SAAO,WAAW,EAAE,OAAO,OAAO,CAAC;UAC3B,OAAO;AACf,SAAO,YAAY,OAAO,kCAAkC,6BAA6B"}

package/dist/astro/routes/api/admin/oauth-clients/_id_.d.mts

@@ -0,0 +1,19 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/admin/oauth-clients/[id].d.ts
+declare const prerender = false;
+/**
+ * Get a single OAuth client.
+ */
+declare const GET: APIRoute;
+/**
+ * Update an OAuth client.
+ */
+declare const PUT: APIRoute;
+/**
+ * Delete an OAuth client.
+ */
+declare const DELETE: APIRoute;
+//#endregion
+export { DELETE, GET, PUT, prerender };
+//# sourceMappingURL=_id_.d.mts.map

package/dist/astro/routes/api/admin/oauth-clients/_id_.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_id_.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/admin/oauth-clients/[id].ts"],"mappings":";;;cAoBa,SAAA;;;;cAcA,GAAA,EAAK,QAAA;AAuBlB;;;AAAA,cAAa,GAAA,EAAK,QAAA;;AA8BlB;;cAAa,MAAA,EAAQ,QAAA"}

package/dist/astro/routes/api/admin/oauth-clients/_id_.mjs

@@ -0,0 +1,69 @@
+import "../../../../../base64-CqR-7kqF.mjs";
+import "../../../../../types-CwXMEPRr.mjs";
+import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../error-tSQWIl5U.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-BFTPon-J.mjs";
+import { a as handleOAuthClientUpdate, n as handleOAuthClientDelete, r as handleOAuthClientGet } from "../../../../../oauth-clients-D_B0_-Bz.mjs";
+import { z } from "zod";
+import { Role } from "@emdash-cms/auth";
+
+//#region src/astro/routes/api/admin/oauth-clients/[id].ts
+/**
+* Single OAuth client endpoints
+*
+* GET    /_emdash/api/admin/oauth-clients/:id — Get a client
+* PUT    /_emdash/api/admin/oauth-clients/:id — Update a client
+* DELETE /_emdash/api/admin/oauth-clients/:id — Delete a client
+*/
+const prerender = false;
+const updateClientSchema = z.object({
+	name: z.string().min(1).max(255).optional(),
+	redirectUris: z.array(z.string().url("Each redirect URI must be a valid URL")).min(1, "At least one redirect URI is required").optional(),
+	scopes: z.array(z.string()).nullable().optional()
+});
+/**
+* Get a single OAuth client.
+*/
+const GET = async ({ params, locals }) => {
+	const { emdash, user } = locals;
+	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	if (!user || user.role < Role.ADMIN) return apiError("FORBIDDEN", "Admin privileges required", 403);
+	const clientId = params.id;
+	if (!clientId) return apiError("VALIDATION_ERROR", "Client ID is required", 400);
+	return unwrapResult(await handleOAuthClientGet(emdash.db, clientId));
+};
+/**
+* Update an OAuth client.
+*/
+const PUT = async ({ params, request, locals }) => {
+	const { emdash, user } = locals;
+	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	if (!user || user.role < Role.ADMIN) return apiError("FORBIDDEN", "Admin privileges required", 403);
+	const clientId = params.id;
+	if (!clientId) return apiError("VALIDATION_ERROR", "Client ID is required", 400);
+	try {
+		const body = await parseBody(request, updateClientSchema);
+		if (isParseError(body)) return body;
+		return unwrapResult(await handleOAuthClientUpdate(emdash.db, clientId, body));
+	} catch (error) {
+		return handleError(error, "Failed to update OAuth client", "CLIENT_UPDATE_ERROR");
+	}
+};
+/**
+* Delete an OAuth client.
+*/
+const DELETE = async ({ params, locals }) => {
+	const { emdash, user } = locals;
+	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	if (!user || user.role < Role.ADMIN) return apiError("FORBIDDEN", "Admin privileges required", 403);
+	const clientId = params.id;
+	if (!clientId) return apiError("VALIDATION_ERROR", "Client ID is required", 400);
+	try {
+		return unwrapResult(await handleOAuthClientDelete(emdash.db, clientId));
+	} catch (error) {
+		return handleError(error, "Failed to delete OAuth client", "CLIENT_DELETE_ERROR");
+	}
+};
+
+//#endregion
+export { DELETE, GET, PUT, prerender };
+//# sourceMappingURL=_id_.mjs.map

package/dist/astro/routes/api/admin/oauth-clients/_id_.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"_id_.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/admin/oauth-clients/[id].ts"],"sourcesContent":["/**\n * Single OAuth client endpoints\n *\n * GET    /_emdash/api/admin/oauth-clients/:id — Get a client\n * PUT    /_emdash/api/admin/oauth-clients/:id — Update a client\n * DELETE /_emdash/api/admin/oauth-clients/:id — Delete a client\n */\n\nimport { Role } from \"@emdash-cms/auth\";\nimport type { APIRoute } from \"astro\";\nimport { z } from \"zod\";\n\nimport { apiError, handleError, unwrapResult } from \"#api/error.js\";\nimport {\n\thandleOAuthClientDelete,\n\thandleOAuthClientGet,\n\thandleOAuthClientUpdate,\n} from \"#api/handlers/oauth-clients.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\n\nexport const prerender = false;\n\nconst updateClientSchema = z.object({\n\tname: z.string().min(1).max(255).optional(),\n\tredirectUris: z\n\t\t.array(z.string().url(\"Each redirect URI must be a valid URL\"))\n\t\t.min(1, \"At least one redirect URI is required\")\n\t\t.optional(),\n\tscopes: z.array(z.string()).nullable().optional(),\n});\n\n/**\n * Get a single OAuth client.\n */\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!user || user.role < Role.ADMIN) {\n\t\treturn apiError(\"FORBIDDEN\", \"Admin privileges required\", 403);\n\t}\n\n\tconst clientId = params.id;\n\tif (!clientId) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"Client ID is required\", 400);\n\t}\n\n\tconst result = await handleOAuthClientGet(emdash.db, clientId);\n\treturn unwrapResult(result);\n};\n\n/**\n * Update an OAuth client.\n */\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!user || user.role < Role.ADMIN) {\n\t\treturn apiError(\"FORBIDDEN\", \"Admin privileges required\", 403);\n\t}\n\n\tconst clientId = params.id;\n\tif (!clientId) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"Client ID is required\", 400);\n\t}\n\n\ttry {\n\t\tconst body = await parseBody(request, updateClientSchema);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleOAuthClientUpdate(emdash.db, clientId, body);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update OAuth client\", \"CLIENT_UPDATE_ERROR\");\n\t}\n};\n\n/**\n * Delete an OAuth client.\n */\nexport const DELETE: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!user || user.role < Role.ADMIN) {\n\t\treturn apiError(\"FORBIDDEN\", \"Admin privileges required\", 403);\n\t}\n\n\tconst clientId = params.id;\n\tif (!clientId) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"Client ID is required\", 400);\n\t}\n\n\ttry {\n\t\tconst result = await handleOAuthClientDelete(emdash.db, clientId);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to delete OAuth client\", \"CLIENT_DELETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;AAoBA,MAAa,YAAY;AAEzB,MAAM,qBAAqB,EAAE,OAAO;CACnC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU;CAC3C,cAAc,EACZ,MAAM,EAAE,QAAQ,CAAC,IAAI,wCAAwC,CAAC,CAC9D,IAAI,GAAG,wCAAwC,CAC/C,UAAU;CACZ,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU,CAAC,UAAU;CACjD,CAAC;;;;AAKF,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,QAAQ,KAAK,OAAO,KAAK,MAC7B,QAAO,SAAS,aAAa,6BAA6B,IAAI;CAG/D,MAAM,WAAW,OAAO;AACxB,KAAI,CAAC,SACJ,QAAO,SAAS,oBAAoB,yBAAyB,IAAI;AAIlE,QAAO,aADQ,MAAM,qBAAqB,OAAO,IAAI,SAAS,CACnC;;;;;AAM5B,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,QAAQ,KAAK,OAAO,KAAK,MAC7B,QAAO,SAAS,aAAa,6BAA6B,IAAI;CAG/D,MAAM,WAAW,OAAO;AACxB,KAAI,CAAC,SACJ,QAAO,SAAS,oBAAoB,yBAAyB,IAAI;AAGlE,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,mBAAmB;AACzD,MAAI,aAAa,KAAK,CAAE,QAAO;AAG/B,SAAO,aADQ,MAAM,wBAAwB,OAAO,IAAI,UAAU,KAAK,CAC5C;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,iCAAiC,sBAAsB;;;;;;AAOnF,MAAa,SAAmB,OAAO,EAAE,QAAQ,aAAa;CAC7D,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,QAAQ,KAAK,OAAO,KAAK,MAC7B,QAAO,SAAS,aAAa,6BAA6B,IAAI;CAG/D,MAAM,WAAW,OAAO;AACxB,KAAI,CAAC,SACJ,QAAO,SAAS,oBAAoB,yBAAyB,IAAI;AAGlE,KAAI;AAEH,SAAO,aADQ,MAAM,wBAAwB,OAAO,IAAI,SAAS,CACtC;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,iCAAiC,sBAAsB"}

package/dist/astro/routes/api/admin/oauth-clients/index.d.mts

@@ -0,0 +1,15 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/admin/oauth-clients/index.d.ts
+declare const prerender = false;
+/**
+ * List all registered OAuth clients.
+ */
+declare const GET: APIRoute;
+/**
+ * Register a new OAuth client.
+ */
+declare const POST: APIRoute;
+//#endregion
+export { GET, POST, prerender };
+//# sourceMappingURL=index.d.mts.map

package/dist/astro/routes/api/admin/oauth-clients/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/admin/oauth-clients/index.ts"],"mappings":";;;cAea,SAAA;AAiBb;;;AAAA,cAAa,GAAA,EAAK,QAAA;;AAkBlB;;cAAa,IAAA,EAAM,QAAA"}