emdash 0.12.0 → 0.13.0

package/dist/astro/routes/api/mcp.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.mjs","names":[],"sources":["../../../../src/mcp/server.ts","../../../../src/astro/routes/api/mcp.ts"],"sourcesContent":["/**\n * EmDash MCP Server\n *\n * Exposes content, schema, media, search, taxonomy, and menu operations\n * as MCP tools over the Streamable HTTP transport.\n *\n * Tools use the EmDashHandlers interface (same as locals.emdash) so\n * they work with the pre-bound handlers that the middleware provides.\n * The handlers instance is passed per-request via authInfo on the transport.\n */\n\nimport type { Permission, RoleLevel } from \"@emdash-cms/auth\";\nimport { canActOnOwn, hasPermission, Role } from \"@emdash-cms/auth\";\nimport { McpServer } from \"@modelcontextprotocol/sdk/server/mcp.js\";\nimport { z } from \"zod\";\n\nimport { contentBylineInputSchema, contentSeoInput } from \"#api/schemas.js\";\n\nimport type { EmDashHandlers } from \"../astro/types.js\";\nimport { hasScope } from \"../auth/api-tokens.js\";\n\nconst COLLECTION_SLUG_PATTERN = /^[a-z][a-z0-9_]*$/;\n/** http(s) scheme matcher used by `settings_update` URL validation. */\nconst HTTP_SCHEME_PATTERN = /^https?:\\/\\//i;\n\n// ---------------------------------------------------------------------------\n// Shared schemas — kept in sync with `api/schemas/settings.ts` (which the\n// REST handler validates against). Defined inline to match the rest of the\n// MCP tool registrations rather than reaching across into the REST layer.\n// ---------------------------------------------------------------------------\n\nconst settingsMediaReferenceSchema = z.object({\n\tmediaId: z.string().describe(\"Media item ID (use media_create or media_list)\"),\n\talt: z.string().optional().describe(\"Alt text for the media reference\"),\n});\n\nconst settingsSocialSchema = z.object({\n\ttwitter: z.string().optional(),\n\tgithub: z.string().optional(),\n\tfacebook: z.string().optional(),\n\tinstagram: z.string().optional(),\n\tlinkedin: z.string().optional(),\n\tyoutube: z.string().optional(),\n});\n\nconst settingsSeoSchema = z.object({\n\ttitleSeparator: z\n\t\t.string()\n\t\t.max(10)\n\t\t.optional()\n\t\t.describe(\"Separator between page title and site title (e.g. ' | ')\"),\n\tdefaultOgImage: settingsMediaReferenceSchema\n\t\t.optional()\n\t\t.describe(\"Default Open Graph image when content has none\"),\n\trobotsTxt: z\n\t\t.string()\n\t\t.max(5000)\n\t\t.optional()\n\t\t.describe(\"Custom robots.txt body. Leave unset for the EmDash default.\"),\n\tgoogleVerification: z\n\t\t.string()\n\t\t.max(100)\n\t\t.optional()\n\t\t.describe(\"Google Search Console verification token\"),\n\tbingVerification: z\n\t\t.string()\n\t\t.max(100)\n\t\t.optional()\n\t\t.describe(\"Bing Webmaster Tools verification token\"),\n});\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\ntype HandlerResult = {\n\tsuccess: boolean;\n\tdata?: unknown;\n\terror?: unknown;\n};\n\ntype SuccessEnvelope = {\n\tcontent: Array<{ type: \"text\"; text: string }>;\n\t_meta?: Record<string, unknown>;\n};\n\ntype ErrorEnvelope = {\n\tcontent: Array<{ type: \"text\"; text: string }>;\n\tisError: true;\n\t_meta: { code: string; details?: Record<string, unknown> };\n};\n\n/**\n * Return a successful tool response with the data as pretty-printed JSON.\n */\nfunction respondData(data: unknown): SuccessEnvelope {\n\treturn {\n\t\tcontent: [{ type: \"text\", text: JSON.stringify(data, null, 2) }],\n\t};\n}\n\n/**\n * Return a structured error tool response.\n *\n * The error code is emitted both in the human-readable message (as a stable\n * `[CODE]` prefix that callers can match on) and in `_meta.code` so MCP-aware\n * clients can read it programmatically once the SDK supports forwarding meta.\n */\nfunction respondError(\n\tcode: string,\n\tmessage: string,\n\tdetails?: Record<string, unknown>,\n): ErrorEnvelope {\n\tconst text = `[${code}] ${message}`;\n\tconst meta: { code: string; details?: Record<string, unknown> } = { code };\n\tif (details !== undefined) meta.details = details;\n\treturn {\n\t\tcontent: [{ type: \"text\", text }],\n\t\tisError: true,\n\t\t_meta: meta,\n\t};\n}\n\n/**\n * Auth/permission errors thrown from `requireScope` / `requireRole` /\n * `requireOwnership` / `requireDraftAccess`. Carries a stable string `code`\n * field so `respondHandlerError` can surface it through `_meta.code` and\n * the message prefix.\n *\n * Distinct from `McpError` (which the SDK catches at JSON-RPC level — the\n * code there is numeric, not a stable EmDash error code).\n */\nclass EmDashAuthError extends Error {\n\toverride readonly name = \"EmDashAuthError\";\n\tconstructor(\n\t\tmessage: string,\n\t\treadonly code: string,\n\t) {\n\t\tsuper(message);\n\t}\n}\n\n/**\n * Map an unknown thrown error to a structured error envelope.\n *\n * Recognises (in priority order):\n *  - `EmDashAuthError` — `code` is a stable EmDash auth code\n *    (`UNAUTHORIZED`, `INSUFFICIENT_SCOPE`, `INSUFFICIENT_PERMISSIONS`).\n *  - `Error` objects with an `apiError: { code, details? }` annotation\n *    (handlers throw these for NOT_FOUND / CONFLICT inside transactions;\n *    see `api/handlers/content.ts:538`).\n *  - `SchemaError` (and any error with a string `code` field) — the code\n *    is forwarded verbatim. `details` is forwarded too if present.\n *  - Plain `Error` instances — message preserved, code falls back to\n *    `fallbackCode` (or `INTERNAL_ERROR`).\n *  - Strings — used directly as the message.\n *  - Anything else — coerced via `String()`.\n *\n * The original message is always preserved so tests and humans can see the\n * specific failure cause. Numeric `code` values (e.g. on `McpError`) are\n * ignored — the field is reserved for stable string codes.\n */\nfunction respondHandlerError(error: unknown, fallbackCode = \"INTERNAL_ERROR\"): ErrorEnvelope {\n\tlet code = fallbackCode;\n\tlet message: string;\n\tlet details: Record<string, unknown> | undefined;\n\n\tif (error instanceof EmDashAuthError) {\n\t\tmessage = error.message || fallbackCode;\n\t\tcode = error.code;\n\t} else if (error instanceof Error) {\n\t\tmessage = error.message || fallbackCode;\n\t\tconst apiError = (error as { apiError?: { code?: string; details?: unknown } }).apiError;\n\t\tif (apiError && typeof apiError.code === \"string\" && apiError.code) {\n\t\t\tcode = apiError.code;\n\t\t\tif (apiError.details && typeof apiError.details === \"object\") {\n\t\t\t\tdetails = apiError.details as Record<string, unknown>;\n\t\t\t}\n\t\t} else {\n\t\t\t// Errors that carry their own `code` (SchemaError, custom errors).\n\t\t\t// Skip numeric codes (McpError, Node fs errors) — `_meta.code` is\n\t\t\t// reserved for stable string codes.\n\t\t\tconst rawCode = (error as { code?: unknown }).code;\n\t\t\tif (typeof rawCode === \"string\" && rawCode) {\n\t\t\t\tcode = rawCode;\n\t\t\t}\n\t\t\tconst rawDetails = (error as { details?: unknown }).details;\n\t\t\tif (rawDetails && typeof rawDetails === \"object\") {\n\t\t\t\tdetails = rawDetails as Record<string, unknown>;\n\t\t\t}\n\t\t}\n\t} else if (typeof error === \"string\") {\n\t\tmessage = error;\n\t} else {\n\t\tmessage = String(error);\n\t}\n\n\treturn respondError(code, message, details);\n}\n\n/**\n * Unwrap an ApiResult<T> into MCP tool result format.\n *\n * On success returns the data as JSON. On failure propagates the structured\n * `{ code, message, details }` from the handler so the caller sees both a\n * machine-readable code (in `_meta.code` and as a `[CODE]` message prefix)\n * and the original human-readable message.\n */\nfunction unwrap(result: HandlerResult): SuccessEnvelope | ErrorEnvelope {\n\tif (result.success && result.data !== undefined) {\n\t\treturn respondData(result.data);\n\t}\n\tconst err =\n\t\tresult.error && typeof result.error === \"object\"\n\t\t\t? (result.error as { code?: unknown; message?: unknown; details?: unknown })\n\t\t\t: undefined;\n\tif (!err) return respondError(\"INTERNAL_ERROR\", \"Unknown error\");\n\tconst code = typeof err.code === \"string\" && err.code ? err.code : \"INTERNAL_ERROR\";\n\tconst message = typeof err.message === \"string\" && err.message ? err.message : \"Unknown error\";\n\tconst details =\n\t\terr.details && typeof err.details === \"object\"\n\t\t\t? (err.details as Record<string, unknown>)\n\t\t\t: undefined;\n\treturn respondError(code, message, details);\n}\n\n/**\n * Return a JSON text block (success path for tools that don't go through\n * the ApiResult-returning handler layer, e.g. schema/menu/taxonomy).\n */\nfunction jsonResult(data: unknown): SuccessEnvelope {\n\treturn respondData(data);\n}\n\n// ---------------------------------------------------------------------------\n// Context extraction\n//\n// The route handler passes emdash + userId in authInfo.extra.\n// ---------------------------------------------------------------------------\n\ninterface EmDashExtra {\n\temdash: EmDashHandlers;\n\tuserId: string;\n\t/** The authenticated user's RBAC role level. */\n\tuserRole: RoleLevel;\n\t/** Token scopes — undefined for session auth (all access allowed). */\n\ttokenScopes?: string[];\n}\n\nfunction isPublished(t: unknown): boolean {\n\treturn (\n\t\ttypeof t === \"object\" &&\n\t\tt !== null &&\n\t\t\"status\" in t &&\n\t\t(t as Record<string, unknown>).status === \"published\"\n\t);\n}\n\nfunction getExtra(extra: { authInfo?: { extra?: Record<string, unknown> } }): EmDashExtra {\n\tconst payload = extra.authInfo?.extra as EmDashExtra | undefined;\n\tif (!payload?.emdash) {\n\t\tthrow new Error(\"EmDash not available — server misconfigured\");\n\t}\n\treturn payload;\n}\n\nfunction getEmDash(extra: { authInfo?: { extra?: Record<string, unknown> } }): EmDashHandlers {\n\treturn getExtra(extra).emdash;\n}\n\n/**\n * Enforce a scope requirement on the current request.\n *\n * When tokenScopes is undefined (session auth), all operations are allowed\n * since session users have full access based on their role. When scopes are\n * present (token auth), the required scope must be included.\n */\nfunction requireScope(\n\textra: { authInfo?: { extra?: Record<string, unknown> } },\n\tscope: string,\n): void {\n\tconst payload = getExtra(extra);\n\tif (payload.tokenScopes && !hasScope(payload.tokenScopes, scope)) {\n\t\tthrow new EmDashAuthError(`Insufficient scope: requires ${scope}`, \"INSUFFICIENT_SCOPE\");\n\t}\n}\n\n/**\n * Defense-in-depth: enforce a minimum RBAC role on the current request.\n *\n * This is checked in addition to scope requirements. Even if a token has\n * the right scopes (e.g. due to a bug in scope clamping), the user's\n * actual role must still meet the minimum.\n */\nfunction requireRole(\n\textra: { authInfo?: { extra?: Record<string, unknown> } },\n\tminRole: RoleLevel,\n): void {\n\tconst payload = getExtra(extra);\n\tif (payload.userRole < minRole) {\n\t\tthrow new EmDashAuthError(\n\t\t\t\"Insufficient permissions for this operation\",\n\t\t\t\"INSUFFICIENT_PERMISSIONS\",\n\t\t);\n\t}\n}\n\n/**\n * Whether the current user may read non-published content (drafts, scheduled,\n * trashed, revisions, compare). SUBSCRIBER may hold content:read for\n * member-only published content but must not see drafts.\n */\nfunction canReadDrafts(extra: { authInfo?: { extra?: Record<string, unknown> } }): boolean {\n\tconst payload = getExtra(extra);\n\treturn hasPermission({ role: payload.userRole }, \"content:read_drafts\");\n}\n\n/**\n * Throw if the current user cannot read non-published content. Used by\n * editor-only views (revisions, compare, trash, preview-url).\n */\nfunction requireDraftAccess(extra: { authInfo?: { extra?: Record<string, unknown> } }): void {\n\tif (!canReadDrafts(extra)) {\n\t\tthrow new EmDashAuthError(\n\t\t\t\"Insufficient permissions for this operation\",\n\t\t\t\"INSUFFICIENT_PERMISSIONS\",\n\t\t);\n\t}\n}\n\n/**\n * Enforce ownership-based permission checks, mirroring the REST API's\n * requireOwnerPerm() pattern.\n *\n * If the user is the owner, checks ownPermission. Otherwise checks\n * anyPermission (which requires EDITOR+ role).\n */\nfunction requireOwnership(\n\textra: { authInfo?: { extra?: Record<string, unknown> } },\n\townerId: string,\n\townPermission: Permission,\n\tanyPermission: Permission,\n): void {\n\tconst payload = getExtra(extra);\n\tconst user = { id: payload.userId, role: payload.userRole };\n\tif (!canActOnOwn(user, ownerId, ownPermission, anyPermission)) {\n\t\tthrow new EmDashAuthError(\n\t\t\t\"Insufficient permissions for this operation\",\n\t\t\t\"INSUFFICIENT_PERMISSIONS\",\n\t\t);\n\t}\n}\n\n/**\n * Extract the author ID from a content handler response.\n *\n * Content handlers return `{ item: { id, authorId, ... }, _rev? }`.\n * This helper navigates that shape safely. Returns \"\" when authorId is\n * missing or non-string (e.g. seed-imported content with no author);\n * `canActOnOwn` then decides based on the caller's permissions —\n * an actor with `*:edit_any` succeeds, an actor with only `*:edit_own`\n * is denied with a clean permission error.\n */\nfunction extractContentAuthorId(data: unknown): string {\n\tif (!data || typeof data !== \"object\") return \"\";\n\tconst obj = data as Record<string, unknown>;\n\tconst item =\n\t\tobj.item && typeof obj.item === \"object\" ? (obj.item as Record<string, unknown>) : obj;\n\treturn typeof item?.authorId === \"string\" ? item.authorId : \"\";\n}\n\n/**\n * Extract the resolved ID from a content handler response.\n * Handles slug -> ID resolution performed by the handler.\n */\nfunction extractContentId(data: unknown): string | undefined {\n\tif (!data || typeof data !== \"object\") return undefined;\n\tconst obj = data as Record<string, unknown>;\n\tconst item =\n\t\tobj.item && typeof obj.item === \"object\" ? (obj.item as Record<string, unknown>) : obj;\n\treturn typeof item?.id === \"string\" ? item.id : undefined;\n}\n\n// ---------------------------------------------------------------------------\n// Server factory\n// ---------------------------------------------------------------------------\n\nexport function createMcpServer(): McpServer {\n\tconst server = new McpServer(\n\t\t{ name: \"emdash\", version: \"0.1.0\" },\n\t\t{ capabilities: { logging: {} } },\n\t);\n\n\t// Wrap every tool registration's callback so EmDashAuthError throws\n\t// (from requireScope / requireRole / requireOwnership / requireDraftAccess)\n\t// surface as structured `_meta.code`-bearing tool error envelopes\n\t// instead of the SDK's text-only fallback in createToolError().\n\t//\n\t// Type-erased on purpose — the SDK's overloads are too narrow for a\n\t// generic wrapper, but the runtime contract (callback returns the tool\n\t// result envelope) holds for every registered tool.\n\tconst originalRegisterTool = server.registerTool.bind(server);\n\t(server as { registerTool: typeof server.registerTool }).registerTool = ((\n\t\tname: string,\n\t\tconfig: unknown,\n\t\tcallback: (...callbackArgs: unknown[]) => Promise<SuccessEnvelope | ErrorEnvelope>,\n\t) => {\n\t\tconst wrapped = async (\n\t\t\t...callbackArgs: unknown[]\n\t\t): Promise<SuccessEnvelope | ErrorEnvelope> => {\n\t\t\ttry {\n\t\t\t\treturn await callback(...callbackArgs);\n\t\t\t} catch (error) {\n\t\t\t\treturn respondHandlerError(error, \"INTERNAL_ERROR\");\n\t\t\t}\n\t\t};\n\t\treturn (\n\t\t\toriginalRegisterTool as unknown as (n: string, c: unknown, cb: typeof wrapped) => unknown\n\t\t)(name, config, wrapped);\n\t}) as typeof server.registerTool;\n\n\t// =====================================================================\n\t// Content tools\n\t// =====================================================================\n\n\tserver.registerTool(\n\t\t\"content_list\",\n\t\t{\n\t\t\ttitle: \"List Content\",\n\t\t\tdescription:\n\t\t\t\t\"List content items in a collection with optional filtering and pagination. \" +\n\t\t\t\t\"Returns items sorted by the specified field. Use the nextCursor value from \" +\n\t\t\t\t\"the response to fetch the next page. Status can be 'draft', 'published', \" +\n\t\t\t\t\"or 'scheduled'. If no status is given, all non-trashed items are returned.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tcollection: z.string().describe(\"Collection slug (e.g. 'posts', 'pages')\"),\n\t\t\t\tstatus: z\n\t\t\t\t\t.enum([\"draft\", \"published\", \"scheduled\"])\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\"Filter by content status\"),\n\t\t\t\tlimit: z\n\t\t\t\t\t.number()\n\t\t\t\t\t.int()\n\t\t\t\t\t.min(1)\n\t\t\t\t\t.max(100)\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\"Max items to return (default 50, max 100)\"),\n\t\t\t\tcursor: z\n\t\t\t\t\t.string()\n\t\t\t\t\t.min(1)\n\t\t\t\t\t.max(2048)\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\"Pagination cursor from a previous response\"),\n\t\t\t\torderBy: z\n\t\t\t\t\t.string()\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\"Field to sort by (e.g. 'created_at', 'updated_at')\"),\n\t\t\t\torder: z.enum([\"asc\", \"desc\"]).optional().describe(\"Sort direction (default 'desc')\"),\n\t\t\t\tlocale: z\n\t\t\t\t\t.string()\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\"Filter by locale (e.g. 'en', 'fr'). Only relevant when i18n is enabled.\"),\n\t\t\t}),\n\t\t\tannotations: { readOnlyHint: true },\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"content:read\");\n\t\t\tconst ec = getEmDash(extra);\n\t\t\t// Subscribers must only see published content; force the status\n\t\t\t// filter regardless of caller-supplied value.\n\t\t\tconst status = canReadDrafts(extra) ? args.status : \"published\";\n\t\t\treturn unwrap(\n\t\t\t\tawait ec.handleContentList(args.collection, {\n\t\t\t\t\tstatus,\n\t\t\t\t\tlimit: args.limit,\n\t\t\t\t\tcursor: args.cursor,\n\t\t\t\t\torderBy: args.orderBy,\n\t\t\t\t\torder: args.order,\n\t\t\t\t\tlocale: args.locale,\n\t\t\t\t}),\n\t\t\t);\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"content_get\",\n\t\t{\n\t\t\ttitle: \"Get Content\",\n\t\t\tdescription:\n\t\t\t\t\"Get a single content item by its ID or slug. Returns the full content data \" +\n\t\t\t\t\"including all field values, metadata, and a _rev token for optimistic \" +\n\t\t\t\t\"concurrency (pass _rev back when updating to detect conflicts).\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tcollection: z.string().describe(\"Collection slug (e.g. 'posts', 'pages')\"),\n\t\t\t\tid: z.string().describe(\"Content item ID (ULID) or slug\"),\n\t\t\t\tlocale: z\n\t\t\t\t\t.string()\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\n\t\t\t\t\t\t\"Locale to scope slug lookup (e.g. 'fr'). Only affects slug resolution; IDs are globally unique.\",\n\t\t\t\t\t),\n\t\t\t}),\n\t\t\tannotations: { readOnlyHint: true },\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"content:read\");\n\t\t\tconst ec = getEmDash(extra);\n\t\t\tconst result = await ec.handleContentGet(args.collection, args.id, args.locale);\n\t\t\t// Hide non-published items from users without draft access. Return a\n\t\t\t// not-found error so subscribers can't enumerate draft IDs by status.\n\t\t\tif (result.success && !canReadDrafts(extra)) {\n\t\t\t\tconst data =\n\t\t\t\t\tresult.data && typeof result.data === \"object\"\n\t\t\t\t\t\t? // eslint-disable-next-line typescript-eslint(no-unsafe-type-assertion) -- handler returns unknown data; narrowed by typeof check\n\t\t\t\t\t\t\t(result.data as Record<string, unknown>)\n\t\t\t\t\t\t: undefined;\n\t\t\t\tconst item =\n\t\t\t\t\tdata?.item && typeof data.item === \"object\"\n\t\t\t\t\t\t? // eslint-disable-next-line typescript-eslint(no-unsafe-type-assertion) -- narrowed by typeof check\n\t\t\t\t\t\t\t(data.item as Record<string, unknown>)\n\t\t\t\t\t\t: undefined;\n\t\t\t\tconst status = typeof item?.status === \"string\" ? item.status : null;\n\t\t\t\tif (status !== \"published\") {\n\t\t\t\t\treturn unwrap({\n\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\terror: { code: \"NOT_FOUND\", message: `Content item not found: ${args.id}` },\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn unwrap(result);\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"content_create\",\n\t\t{\n\t\t\ttitle: \"Create Content\",\n\t\t\tdescription:\n\t\t\t\t\"Create a new content item in a collection. The 'data' object should \" +\n\t\t\t\t\"contain field values matching the collection's schema (use \" +\n\t\t\t\t\"schema_get_collection to check). Rich text fields accept Portable Text \" +\n\t\t\t\t\"JSON arrays. A slug is auto-generated if not provided. Items are created \" +\n\t\t\t\t\"as 'draft' by default — use content_publish to make them live.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tcollection: z.string().describe(\"Collection slug (e.g. 'posts', 'pages')\"),\n\t\t\t\tdata: z\n\t\t\t\t\t.record(z.string(), z.unknown())\n\t\t\t\t\t.describe(\"Field values as key-value pairs matching the collection schema\"),\n\t\t\t\tslug: z.string().optional().describe(\"URL slug (auto-generated from title if omitted)\"),\n\t\t\t\tstatus: z\n\t\t\t\t\t.enum([\"draft\", \"published\"])\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\"Initial status (default 'draft'). Requires publish permission.\"),\n\t\t\t\tlocale: z\n\t\t\t\t\t.string()\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\"Locale for this content (e.g. 'fr'). Defaults to default locale.\"),\n\t\t\t\ttranslationOf: z\n\t\t\t\t\t.string()\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\n\t\t\t\t\t\t\"ID of the content item this is a translation of. Links items in the same translation group.\",\n\t\t\t\t\t),\n\t\t\t}),\n\t\t\tannotations: { destructiveHint: false },\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"content:write\");\n\t\t\trequireRole(extra, Role.CONTRIBUTOR);\n\t\t\tconst { emdash, userId } = getExtra(extra);\n\n\t\t\t// Creating a translation requires edit permission on the source item\n\t\t\tif (args.translationOf) {\n\t\t\t\tconst source = await emdash.handleContentGet(args.collection, args.translationOf);\n\t\t\t\tif (!source.success) return unwrap(source);\n\t\t\t\trequireOwnership(\n\t\t\t\t\textra,\n\t\t\t\t\textractContentAuthorId(source.data),\n\t\t\t\t\t\"content:edit_own\",\n\t\t\t\t\t\"content:edit_any\",\n\t\t\t\t);\n\t\t\t}\n\n\t\t\t// Publishing requires publish permission — create as draft then publish\n\t\t\tif (args.status === \"published\") {\n\t\t\t\tconst user = { id: userId, role: getExtra(extra).userRole };\n\t\t\t\tif (!hasPermission(user, \"content:publish_own\" as Permission)) {\n\t\t\t\t\tthrow new EmDashAuthError(\n\t\t\t\t\t\t\"Insufficient permissions: publishing requires content:publish_own\",\n\t\t\t\t\t\t\"INSUFFICIENT_PERMISSIONS\",\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tconst result = await emdash.handleContentCreate(args.collection, {\n\t\t\t\t\tdata: args.data,\n\t\t\t\t\tslug: args.slug,\n\t\t\t\t\tauthorId: userId,\n\t\t\t\t\tlocale: args.locale,\n\t\t\t\t\ttranslationOf: args.translationOf,\n\t\t\t\t});\n\t\t\t\tif (!result.success) return unwrap(result);\n\t\t\t\tconst itemId = extractContentId(result.data);\n\t\t\t\tif (itemId) {\n\t\t\t\t\treturn unwrap(await emdash.handleContentPublish(args.collection, itemId));\n\t\t\t\t}\n\t\t\t\treturn unwrap(result);\n\t\t\t}\n\n\t\t\treturn unwrap(\n\t\t\t\tawait emdash.handleContentCreate(args.collection, {\n\t\t\t\t\tdata: args.data,\n\t\t\t\t\tslug: args.slug,\n\t\t\t\t\tauthorId: userId,\n\t\t\t\t\tlocale: args.locale,\n\t\t\t\t\ttranslationOf: args.translationOf,\n\t\t\t\t}),\n\t\t\t);\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"content_update\",\n\t\t{\n\t\t\ttitle: \"Update Content\",\n\t\t\tdescription:\n\t\t\t\t\"Update an existing content item. Only include fields you want to change \" +\n\t\t\t\t\"in the 'data' object — unspecified fields are left unchanged. Pass the \" +\n\t\t\t\t\"_rev token from content_get to enable optimistic concurrency checking \" +\n\t\t\t\t\"(the update fails if the item was modified since you read it). \" +\n\t\t\t\t\"`seo` and `bylines` are persisted alongside the field updates in a \" +\n\t\t\t\t\"single transaction. `publishedAt` requires the content:publish_any \" +\n\t\t\t\t\"permission and is useful for migrations or correcting historical dates.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tcollection: z.string().describe(\"Collection slug\"),\n\t\t\t\tid: z.string().describe(\"Content item ID or slug\"),\n\t\t\t\tdata: z\n\t\t\t\t\t.record(z.string(), z.unknown())\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\"Field values to update (only include changed fields)\"),\n\t\t\t\tslug: z.string().optional().describe(\"New URL slug\"),\n\t\t\t\tstatus: z\n\t\t\t\t\t.enum([\"draft\", \"published\"])\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\n\t\t\t\t\t\t\"New status. Setting to 'published' requires publish permission. Setting to 'draft' unpublishes the item and also requires publish permission.\",\n\t\t\t\t\t),\n\t\t\t\t// Reuse the REST schema rather than redefining inline. The REST schema's\n\t\t\t\t// `canonical` field is gated through `httpUrl` (validates the URL parses\n\t\t\t\t// AND has an http(s) scheme) which rejects javascript:/data: URIs that\n\t\t\t\t// would otherwise become stored XSS in the rendered <link rel=\"canonical\">.\n\t\t\t\t// Inlining a looser shape here would let MCP callers bypass that.\n\t\t\t\tseo: contentSeoInput\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\n\t\t\t\t\t\t\"Per-content SEO metadata. Only valid for collections with SEO enabled (see schema_get_collection.hasSeo). Fields not included are left unchanged; pass null to clear.\",\n\t\t\t\t\t),\n\t\t\t\tbylines: z\n\t\t\t\t\t.array(contentBylineInputSchema)\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\n\t\t\t\t\t\t\"Replace the byline list for this item. The first entry becomes the primary byline. Pass an empty array to clear all bylines.\",\n\t\t\t\t\t),\n\t\t\t\tpublishedAt: z.iso\n\t\t\t\t\t.datetime({ offset: true, message: \"must be an ISO 8601 datetime\" })\n\t\t\t\t\t.nullish()\n\t\t\t\t\t.describe(\n\t\t\t\t\t\t\"Override the publication timestamp (ISO 8601). Requires content:publish_any permission. Pass null to clear. Useful for content migrations.\",\n\t\t\t\t\t),\n\t\t\t\t_rev: z\n\t\t\t\t\t.string()\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\"Revision token from content_get for conflict detection\"),\n\t\t\t}),\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"content:write\");\n\t\t\trequireRole(extra, Role.AUTHOR);\n\t\t\tconst { emdash, userId, userRole } = getExtra(extra);\n\n\t\t\t// Fetch item to check ownership\n\t\t\tconst existing = await emdash.handleContentGet(args.collection, args.id);\n\t\t\tif (!existing.success) {\n\t\t\t\treturn unwrap(existing);\n\t\t\t}\n\t\t\tconst ownerId = extractContentAuthorId(existing.data);\n\t\t\trequireOwnership(extra, ownerId, \"content:edit_own\", \"content:edit_any\");\n\n\t\t\t// Writing publishedAt directly (incl. clearing to null) overwrites\n\t\t\t// historical record — gate behind publish_any, mirroring the REST PUT\n\t\t\t// route. Status-driven publishes are gated separately below.\n\t\t\tif (args.publishedAt !== undefined) {\n\t\t\t\tconst user = { id: userId, role: userRole };\n\t\t\t\tif (!hasPermission(user, \"content:publish_any\" as Permission)) {\n\t\t\t\t\tthrow new EmDashAuthError(\n\t\t\t\t\t\t\"Setting publishedAt requires content:publish_any permission\",\n\t\t\t\t\t\t\"INSUFFICIENT_PERMISSIONS\",\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tconst resolvedId = extractContentId(existing.data) ?? args.id;\n\n\t\t\t// Status transitions route through dedicated handlers for proper revision management\n\t\t\tif (args.status === \"published\") {\n\t\t\t\trequireOwnership(extra, ownerId, \"content:publish_own\", \"content:publish_any\");\n\t\t\t\tif (\n\t\t\t\t\targs.data ||\n\t\t\t\t\targs.slug ||\n\t\t\t\t\targs.seo !== undefined ||\n\t\t\t\t\targs.bylines !== undefined ||\n\t\t\t\t\targs.publishedAt !== undefined\n\t\t\t\t) {\n\t\t\t\t\tconst updateResult = await emdash.handleContentUpdate(args.collection, resolvedId, {\n\t\t\t\t\t\tdata: args.data,\n\t\t\t\t\t\tslug: args.slug,\n\t\t\t\t\t\tauthorId: userId,\n\t\t\t\t\t\tseo: args.seo,\n\t\t\t\t\t\tbylines: args.bylines,\n\t\t\t\t\t\tpublishedAt: args.publishedAt,\n\t\t\t\t\t\t_rev: args._rev,\n\t\t\t\t\t});\n\t\t\t\t\tif (!updateResult.success) return unwrap(updateResult);\n\t\t\t\t}\n\t\t\t\treturn unwrap(await emdash.handleContentPublish(args.collection, resolvedId));\n\t\t\t}\n\n\t\t\tif (args.status === \"draft\") {\n\t\t\t\trequireOwnership(extra, ownerId, \"content:publish_own\", \"content:publish_any\");\n\t\t\t\tif (\n\t\t\t\t\targs.data ||\n\t\t\t\t\targs.slug ||\n\t\t\t\t\targs.seo !== undefined ||\n\t\t\t\t\targs.bylines !== undefined ||\n\t\t\t\t\targs.publishedAt !== undefined\n\t\t\t\t) {\n\t\t\t\t\tconst updateResult = await emdash.handleContentUpdate(args.collection, resolvedId, {\n\t\t\t\t\t\tdata: args.data,\n\t\t\t\t\t\tslug: args.slug,\n\t\t\t\t\t\tauthorId: userId,\n\t\t\t\t\t\tseo: args.seo,\n\t\t\t\t\t\tbylines: args.bylines,\n\t\t\t\t\t\tpublishedAt: args.publishedAt,\n\t\t\t\t\t\t_rev: args._rev,\n\t\t\t\t\t});\n\t\t\t\t\tif (!updateResult.success) return unwrap(updateResult);\n\t\t\t\t}\n\t\t\t\treturn unwrap(await emdash.handleContentUnpublish(args.collection, resolvedId));\n\t\t\t}\n\n\t\t\treturn unwrap(\n\t\t\t\tawait emdash.handleContentUpdate(args.collection, resolvedId, {\n\t\t\t\t\tdata: args.data,\n\t\t\t\t\tslug: args.slug,\n\t\t\t\t\tauthorId: userId,\n\t\t\t\t\tseo: args.seo,\n\t\t\t\t\tbylines: args.bylines,\n\t\t\t\t\tpublishedAt: args.publishedAt,\n\t\t\t\t\t_rev: args._rev,\n\t\t\t\t}),\n\t\t\t);\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"content_delete\",\n\t\t{\n\t\t\ttitle: \"Delete Content (Trash)\",\n\t\t\tdescription:\n\t\t\t\t\"Soft-delete a content item by moving it to the trash. The item can be \" +\n\t\t\t\t\"restored later with content_restore, or permanently deleted with \" +\n\t\t\t\t\"content_permanent_delete.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tcollection: z.string().describe(\"Collection slug\"),\n\t\t\t\tid: z.string().describe(\"Content item ID or slug\"),\n\t\t\t}),\n\t\t\tannotations: { destructiveHint: true },\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"content:write\");\n\t\t\trequireRole(extra, Role.AUTHOR);\n\t\t\tconst ec = getEmDash(extra);\n\n\t\t\t// Fetch item to check ownership\n\t\t\tconst existing = await ec.handleContentGet(args.collection, args.id);\n\t\t\tif (!existing.success) {\n\t\t\t\treturn unwrap(existing);\n\t\t\t}\n\t\t\trequireOwnership(\n\t\t\t\textra,\n\t\t\t\textractContentAuthorId(existing.data),\n\t\t\t\t\"content:delete_own\",\n\t\t\t\t\"content:delete_any\",\n\t\t\t);\n\n\t\t\tconst resolvedId = extractContentId(existing.data) ?? args.id;\n\t\t\treturn unwrap(await ec.handleContentDelete(args.collection, resolvedId));\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"content_restore\",\n\t\t{\n\t\t\ttitle: \"Restore Content\",\n\t\t\tdescription: \"Restore a soft-deleted content item from the trash back to its previous state.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tcollection: z.string().describe(\"Collection slug\"),\n\t\t\t\tid: z.string().describe(\"Content item ID or slug\"),\n\t\t\t}),\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"content:write\");\n\t\t\trequireRole(extra, Role.AUTHOR);\n\t\t\tconst ec = getEmDash(extra);\n\n\t\t\t// Fetch trashed item to check ownership\n\t\t\tconst existing = await ec.handleContentGetIncludingTrashed(args.collection, args.id);\n\t\t\tif (!existing.success) {\n\t\t\t\treturn unwrap(existing);\n\t\t\t}\n\t\t\trequireOwnership(\n\t\t\t\textra,\n\t\t\t\textractContentAuthorId(existing.data),\n\t\t\t\t\"content:edit_own\",\n\t\t\t\t\"content:edit_any\",\n\t\t\t);\n\n\t\t\tconst resolvedId = extractContentId(existing.data) ?? args.id;\n\t\t\treturn unwrap(await ec.handleContentRestore(args.collection, resolvedId));\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"content_permanent_delete\",\n\t\t{\n\t\t\ttitle: \"Permanently Delete Content\",\n\t\t\tdescription:\n\t\t\t\t\"Permanently and irreversibly delete a trashed content item. The item \" +\n\t\t\t\t\"must be in the trash first (use content_delete). This cannot be undone.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tcollection: z.string().describe(\"Collection slug\"),\n\t\t\t\tid: z.string().describe(\"Content item ID or slug\"),\n\t\t\t}),\n\t\t\tannotations: { destructiveHint: true },\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"content:write\");\n\t\t\trequireRole(extra, Role.ADMIN);\n\t\t\tconst ec = getEmDash(extra);\n\t\t\treturn unwrap(await ec.handleContentPermanentDelete(args.collection, args.id));\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"content_publish\",\n\t\t{\n\t\t\ttitle: \"Publish Content\",\n\t\t\tdescription:\n\t\t\t\t\"Publish a content item, making it live on the site. Creates a published \" +\n\t\t\t\t\"revision from the current draft. Further edits create a new draft without \" +\n\t\t\t\t\"affecting the live version until re-published. Pass `publishedAt` to \" +\n\t\t\t\t\"backdate (e.g. when migrating content from another CMS) — this requires \" +\n\t\t\t\t\"the content:publish_any permission. Without `publishedAt`, the existing \" +\n\t\t\t\t\"`published_at` is preserved on re-publish (idempotent) and falls back to \" +\n\t\t\t\t\"the current time on first publish.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tcollection: z.string().describe(\"Collection slug\"),\n\t\t\t\tid: z.string().describe(\"Content item ID or slug\"),\n\t\t\t\tpublishedAt: z.iso\n\t\t\t\t\t.datetime({ offset: true, message: \"must be an ISO 8601 datetime\" })\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\n\t\t\t\t\t\t\"Override publication timestamp (ISO 8601). Requires content:publish_any permission. Useful when importing content with original publish dates.\",\n\t\t\t\t\t),\n\t\t\t}),\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"content:write\");\n\t\t\trequireRole(extra, Role.AUTHOR);\n\t\t\tconst { emdash, userId, userRole } = getExtra(extra);\n\n\t\t\t// Fetch item to check ownership\n\t\t\tconst existing = await emdash.handleContentGet(args.collection, args.id);\n\t\t\tif (!existing.success) {\n\t\t\t\treturn unwrap(existing);\n\t\t\t}\n\t\t\tconst ownerId = extractContentAuthorId(existing.data);\n\t\t\trequireOwnership(extra, ownerId, \"content:publish_own\", \"content:publish_any\");\n\n\t\t\t// Backdating overwrites historical record — gate behind publish_any\n\t\t\t// regardless of ownership (mirrors the REST PUT route's publishedAt gate).\n\t\t\tif (args.publishedAt !== undefined) {\n\t\t\t\tconst user = { id: userId, role: userRole };\n\t\t\t\tif (!hasPermission(user, \"content:publish_any\" as Permission)) {\n\t\t\t\t\tthrow new EmDashAuthError(\n\t\t\t\t\t\t\"Setting publishedAt requires content:publish_any permission\",\n\t\t\t\t\t\t\"INSUFFICIENT_PERMISSIONS\",\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tconst resolvedId = extractContentId(existing.data) ?? args.id;\n\t\t\treturn unwrap(\n\t\t\t\tawait emdash.handleContentPublish(args.collection, resolvedId, {\n\t\t\t\t\tpublishedAt: args.publishedAt,\n\t\t\t\t}),\n\t\t\t);\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"content_unpublish\",\n\t\t{\n\t\t\ttitle: \"Unpublish Content\",\n\t\t\tdescription:\n\t\t\t\t\"Unpublish a content item, reverting it to draft status. It will no \" +\n\t\t\t\t\"longer be visible on the live site but its content is preserved.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tcollection: z.string().describe(\"Collection slug\"),\n\t\t\t\tid: z.string().describe(\"Content item ID or slug\"),\n\t\t\t}),\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"content:write\");\n\t\t\trequireRole(extra, Role.AUTHOR);\n\t\t\tconst ec = getEmDash(extra);\n\n\t\t\t// Fetch item to check ownership\n\t\t\tconst existing = await ec.handleContentGet(args.collection, args.id);\n\t\t\tif (!existing.success) {\n\t\t\t\treturn unwrap(existing);\n\t\t\t}\n\t\t\trequireOwnership(\n\t\t\t\textra,\n\t\t\t\textractContentAuthorId(existing.data),\n\t\t\t\t\"content:publish_own\",\n\t\t\t\t\"content:publish_any\",\n\t\t\t);\n\n\t\t\tconst resolvedId = extractContentId(existing.data) ?? args.id;\n\t\t\treturn unwrap(await ec.handleContentUnpublish(args.collection, resolvedId));\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"content_schedule\",\n\t\t{\n\t\t\ttitle: \"Schedule Content\",\n\t\t\tdescription:\n\t\t\t\t\"Schedule a content item for future publication. It will be automatically \" +\n\t\t\t\t\"published at the specified date/time. The scheduledAt value must be an \" +\n\t\t\t\t\"ISO 8601 datetime string in the future (e.g. '2025-06-01T09:00:00Z').\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tcollection: z.string().describe(\"Collection slug\"),\n\t\t\t\tid: z.string().describe(\"Content item ID or slug\"),\n\t\t\t\tscheduledAt: z\n\t\t\t\t\t.string()\n\t\t\t\t\t.describe(\"ISO 8601 datetime for publication (e.g. '2025-06-01T09:00:00Z')\"),\n\t\t\t}),\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"content:write\");\n\t\t\trequireRole(extra, Role.AUTHOR);\n\t\t\tconst ec = getEmDash(extra);\n\n\t\t\t// Fetch item to check ownership\n\t\t\tconst existing = await ec.handleContentGet(args.collection, args.id);\n\t\t\tif (!existing.success) {\n\t\t\t\treturn unwrap(existing);\n\t\t\t}\n\t\t\trequireOwnership(\n\t\t\t\textra,\n\t\t\t\textractContentAuthorId(existing.data),\n\t\t\t\t\"content:publish_own\",\n\t\t\t\t\"content:publish_any\",\n\t\t\t);\n\n\t\t\tconst resolvedId = extractContentId(existing.data) ?? args.id;\n\t\t\treturn unwrap(await ec.handleContentSchedule(args.collection, resolvedId, args.scheduledAt));\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"content_unschedule\",\n\t\t{\n\t\t\ttitle: \"Cancel Scheduled Publication\",\n\t\t\tdescription:\n\t\t\t\t\"Cancel a previously scheduled publication. The item remains in its current \" +\n\t\t\t\t\"status (typically 'draft' or 'scheduled'); only the scheduledAt timestamp is \" +\n\t\t\t\t\"cleared. Idempotent — calling on an item that isn't scheduled is a no-op.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tcollection: z.string().describe(\"Collection slug\"),\n\t\t\t\tid: z.string().describe(\"Content item ID or slug\"),\n\t\t\t}),\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"content:write\");\n\t\t\trequireRole(extra, Role.AUTHOR);\n\t\t\tconst ec = getEmDash(extra);\n\n\t\t\tconst existing = await ec.handleContentGet(args.collection, args.id);\n\t\t\tif (!existing.success) {\n\t\t\t\treturn unwrap(existing);\n\t\t\t}\n\t\t\trequireOwnership(\n\t\t\t\textra,\n\t\t\t\textractContentAuthorId(existing.data),\n\t\t\t\t\"content:publish_own\",\n\t\t\t\t\"content:publish_any\",\n\t\t\t);\n\n\t\t\tconst resolvedId = extractContentId(existing.data) ?? args.id;\n\t\t\treturn unwrap(await ec.handleContentUnschedule(args.collection, resolvedId));\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"content_compare\",\n\t\t{\n\t\t\ttitle: \"Compare Live vs Draft\",\n\t\t\tdescription:\n\t\t\t\t\"Compare the published (live) version of a content item with its current \" +\n\t\t\t\t\"draft. Returns both versions and a flag indicating whether there are \" +\n\t\t\t\t\"changes. Useful for reviewing unpublished edits before publishing.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tcollection: z.string().describe(\"Collection slug\"),\n\t\t\t\tid: z.string().describe(\"Content item ID or slug\"),\n\t\t\t}),\n\t\t\tannotations: { readOnlyHint: true },\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"content:read\");\n\t\t\trequireDraftAccess(extra);\n\t\t\tconst ec = getEmDash(extra);\n\t\t\treturn unwrap(await ec.handleContentCompare(args.collection, args.id));\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"content_discard_draft\",\n\t\t{\n\t\t\ttitle: \"Discard Draft\",\n\t\t\tdescription:\n\t\t\t\t\"Discard the current draft changes and revert to the last published \" +\n\t\t\t\t\"version. Only works on items that have been published at least once.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tcollection: z.string().describe(\"Collection slug\"),\n\t\t\t\tid: z.string().describe(\"Content item ID or slug\"),\n\t\t\t}),\n\t\t\tannotations: { destructiveHint: true },\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"content:write\");\n\t\t\trequireRole(extra, Role.AUTHOR);\n\t\t\tconst ec = getEmDash(extra);\n\n\t\t\t// Fetch item to check ownership\n\t\t\tconst existing = await ec.handleContentGet(args.collection, args.id);\n\t\t\tif (!existing.success) {\n\t\t\t\treturn unwrap(existing);\n\t\t\t}\n\t\t\trequireOwnership(\n\t\t\t\textra,\n\t\t\t\textractContentAuthorId(existing.data),\n\t\t\t\t\"content:edit_own\",\n\t\t\t\t\"content:edit_any\",\n\t\t\t);\n\n\t\t\tconst resolvedId = extractContentId(existing.data) ?? args.id;\n\t\t\treturn unwrap(await ec.handleContentDiscardDraft(args.collection, resolvedId));\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"content_list_trashed\",\n\t\t{\n\t\t\ttitle: \"List Trashed Content\",\n\t\t\tdescription:\n\t\t\t\t\"List soft-deleted content items in a collection's trash. These items \" +\n\t\t\t\t\"can be restored with content_restore or permanently deleted with \" +\n\t\t\t\t\"content_permanent_delete.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tcollection: z.string().describe(\"Collection slug\"),\n\t\t\t\tlimit: z.number().int().min(1).max(100).optional().describe(\"Max items (default 50)\"),\n\t\t\t\tcursor: z.string().min(1).max(2048).optional().describe(\"Pagination cursor\"),\n\t\t\t}),\n\t\t\tannotations: { readOnlyHint: true },\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"content:read\");\n\t\t\trequireDraftAccess(extra);\n\t\t\tconst ec = getEmDash(extra);\n\t\t\treturn unwrap(\n\t\t\t\tawait ec.handleContentListTrashed(args.collection, {\n\t\t\t\t\tlimit: args.limit,\n\t\t\t\t\tcursor: args.cursor,\n\t\t\t\t}),\n\t\t\t);\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"content_duplicate\",\n\t\t{\n\t\t\ttitle: \"Duplicate Content\",\n\t\t\tdescription:\n\t\t\t\t\"Create a copy of an existing content item. The duplicate is created \" +\n\t\t\t\t\"as a draft with '(Copy)' appended to the title and an auto-generated slug.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tcollection: z.string().describe(\"Collection slug\"),\n\t\t\t\tid: z.string().describe(\"Content item ID or slug to duplicate\"),\n\t\t\t}),\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"content:write\");\n\t\t\trequireRole(extra, Role.CONTRIBUTOR);\n\t\t\tconst ec = getEmDash(extra);\n\t\t\treturn unwrap(await ec.handleContentDuplicate(args.collection, args.id));\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"content_translations\",\n\t\t{\n\t\t\ttitle: \"Get Content Translations\",\n\t\t\tdescription:\n\t\t\t\t\"Get all locale variants of a content item. Returns the translation group \" +\n\t\t\t\t\"and a summary of each locale version (id, locale, slug, status). Only \" +\n\t\t\t\t\"relevant when i18n is enabled on the site.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tcollection: z.string().describe(\"Collection slug\"),\n\t\t\t\tid: z.string().describe(\"Content item ID or slug\"),\n\t\t\t}),\n\t\t\tannotations: { readOnlyHint: true },\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"content:read\");\n\t\t\tconst ec = getEmDash(extra);\n\t\t\tconst result = await ec.handleContentTranslations(args.collection, args.id);\n\t\t\t// Filter out non-published translations for users without draft\n\t\t\t// access so a subscriber can't enumerate locales that aren't yet live.\n\t\t\tif (result.success && !canReadDrafts(extra)) {\n\t\t\t\tconst data =\n\t\t\t\t\tresult.data && typeof result.data === \"object\"\n\t\t\t\t\t\t? // eslint-disable-next-line typescript-eslint(no-unsafe-type-assertion) -- handler returns unknown data; narrowed by typeof check\n\t\t\t\t\t\t\t(result.data as Record<string, unknown>)\n\t\t\t\t\t\t: undefined;\n\t\t\t\tconst translations = Array.isArray(data?.translations) ? data.translations : [];\n\t\t\t\tconst filtered = translations.filter(isPublished);\n\t\t\t\treturn unwrap({\n\t\t\t\t\tsuccess: true,\n\t\t\t\t\tdata: { ...data, translations: filtered },\n\t\t\t\t});\n\t\t\t}\n\t\t\treturn unwrap(result);\n\t\t},\n\t);\n\n\t// =====================================================================\n\t// Schema tools\n\t// =====================================================================\n\n\tserver.registerTool(\n\t\t\"schema_list_collections\",\n\t\t{\n\t\t\ttitle: \"List Collections\",\n\t\t\tdescription:\n\t\t\t\t\"List all content collections defined in the CMS. Each collection \" +\n\t\t\t\t\"represents a content type (e.g. posts, pages, products) with its own \" +\n\t\t\t\t\"schema and database table. Returns slug, label, supported features, \" +\n\t\t\t\t\"and timestamps.\",\n\t\t\tinputSchema: z.object({}),\n\t\t\tannotations: { readOnlyHint: true },\n\t\t},\n\t\tasync (_args, extra) => {\n\t\t\trequireScope(extra, \"schema:read\");\n\t\t\trequireRole(extra, Role.EDITOR);\n\t\t\tconst ec = getEmDash(extra);\n\t\t\ttry {\n\t\t\t\tconst { SchemaRegistry } = await import(\"../schema/index.js\");\n\t\t\t\tconst registry = new SchemaRegistry(ec.db);\n\t\t\t\tconst items = await registry.listCollections();\n\t\t\t\treturn jsonResult({ items });\n\t\t\t} catch (error) {\n\t\t\t\treturn respondHandlerError(error, \"SCHEMA_LIST_ERROR\");\n\t\t\t}\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"schema_get_collection\",\n\t\t{\n\t\t\ttitle: \"Get Collection Schema\",\n\t\t\tdescription:\n\t\t\t\t\"Get detailed info about a collection including all field definitions. \" +\n\t\t\t\t\"Fields describe the data model: name, type (string, text, number, \" +\n\t\t\t\t\"boolean, datetime, portableText, image, reference, json, select, \" +\n\t\t\t\t\"multiSelect, slug), constraints, and validation rules. Use this to \" +\n\t\t\t\t\"understand what data content_create and content_update expect.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tslug: z\n\t\t\t\t\t.string()\n\t\t\t\t\t.describe(\n\t\t\t\t\t\t\"Collection slug (e.g. 'posts'). Use schema_list_collections to see available slugs.\",\n\t\t\t\t\t),\n\t\t\t}),\n\t\t\tannotations: { readOnlyHint: true },\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"schema:read\");\n\t\t\trequireRole(extra, Role.EDITOR);\n\t\t\tconst ec = getEmDash(extra);\n\t\t\ttry {\n\t\t\t\tconst { SchemaRegistry } = await import(\"../schema/index.js\");\n\t\t\t\tconst registry = new SchemaRegistry(ec.db);\n\t\t\t\tconst collection = await registry.getCollectionWithFields(args.slug);\n\t\t\t\tif (!collection) {\n\t\t\t\t\treturn respondError(\"NOT_FOUND\", `Collection '${args.slug}' not found`);\n\t\t\t\t}\n\t\t\t\treturn jsonResult(collection);\n\t\t\t} catch (error) {\n\t\t\t\treturn respondHandlerError(error, \"SCHEMA_GET_ERROR\");\n\t\t\t}\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"schema_create_collection\",\n\t\t{\n\t\t\ttitle: \"Create Collection\",\n\t\t\tdescription:\n\t\t\t\t\"Create a new content collection (content type). This creates a database \" +\n\t\t\t\t\"table and schema definition. The slug must be lowercase alphanumeric \" +\n\t\t\t\t\"with underscores, starting with a letter. Supports: 'drafts' (draft/\" +\n\t\t\t\t\"publish workflow), 'revisions' (version history), 'preview' (live \" +\n\t\t\t\t\"preview), 'scheduling' (timed publish), 'search' (full-text indexing).\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tslug: z\n\t\t\t\t\t.string()\n\t\t\t\t\t.regex(COLLECTION_SLUG_PATTERN)\n\t\t\t\t\t.describe(\"Unique identifier (lowercase letters, numbers, underscores)\"),\n\t\t\t\tlabel: z.string().describe(\"Display name (plural, e.g. 'Blog Posts')\"),\n\t\t\t\tlabelSingular: z.string().optional().describe(\"Singular display name (e.g. 'Blog Post')\"),\n\t\t\t\tdescription: z.string().optional().describe(\"Description of this collection\"),\n\t\t\t\ticon: z.string().optional().describe(\"Icon name for the admin UI\"),\n\t\t\t\tsupports: z\n\t\t\t\t\t.array(z.enum([\"drafts\", \"revisions\", \"preview\", \"scheduling\", \"search\"]))\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\"Features to enable (default: ['drafts', 'revisions'])\"),\n\t\t\t}),\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"schema:write\");\n\t\t\trequireRole(extra, Role.ADMIN);\n\t\t\tconst ec = getEmDash(extra);\n\t\t\ttry {\n\t\t\t\tconst { SchemaRegistry } = await import(\"../schema/index.js\");\n\t\t\t\tconst registry = new SchemaRegistry(ec.db);\n\t\t\t\tconst collection = await registry.createCollection({\n\t\t\t\t\tslug: args.slug,\n\t\t\t\t\tlabel: args.label,\n\t\t\t\t\tlabelSingular: args.labelSingular,\n\t\t\t\t\tdescription: args.description,\n\t\t\t\t\ticon: args.icon,\n\t\t\t\t\t// SchemaRegistry.createCollection now defaults `supports` to\n\t\t\t\t\t// ['drafts', 'revisions'] when undefined; pass through verbatim.\n\t\t\t\t\tsupports: args.supports,\n\t\t\t\t});\n\t\t\t\tec.invalidateUrlPatternCache();\n\t\t\t\treturn jsonResult(collection);\n\t\t\t} catch (error) {\n\t\t\t\treturn respondHandlerError(error, \"SCHEMA_CREATE_ERROR\");\n\t\t\t}\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"schema_delete_collection\",\n\t\t{\n\t\t\ttitle: \"Delete Collection\",\n\t\t\tdescription:\n\t\t\t\t\"Delete a collection and its database table. This is irreversible and \" +\n\t\t\t\t\"deletes all content in the collection. Use with extreme caution.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tslug: z.string().describe(\"Collection slug to delete\"),\n\t\t\t\tforce: z\n\t\t\t\t\t.boolean()\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\"Force deletion even if the collection has content (default false)\"),\n\t\t\t}),\n\t\t\tannotations: { destructiveHint: true },\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"schema:write\");\n\t\t\trequireRole(extra, Role.ADMIN);\n\t\t\tconst ec = getEmDash(extra);\n\t\t\ttry {\n\t\t\t\tconst { SchemaRegistry } = await import(\"../schema/index.js\");\n\t\t\t\tconst registry = new SchemaRegistry(ec.db);\n\t\t\t\tawait registry.deleteCollection(args.slug, { force: args.force });\n\t\t\t\tec.invalidateUrlPatternCache();\n\t\t\t\treturn jsonResult({ deleted: args.slug });\n\t\t\t} catch (error) {\n\t\t\t\treturn respondHandlerError(error, \"SCHEMA_DELETE_ERROR\");\n\t\t\t}\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"schema_create_field\",\n\t\t{\n\t\t\ttitle: \"Add Field to Collection\",\n\t\t\tdescription:\n\t\t\t\t\"Add a new field to a collection's schema. This adds a column to the \" +\n\t\t\t\t\"database table. Field types: string (short text), text (long text), \" +\n\t\t\t\t\"number (decimal), integer, boolean, datetime, select (single choice), \" +\n\t\t\t\t\"multiSelect (multiple), portableText (rich text), image, file, \" +\n\t\t\t\t\"reference (link to another collection), json, slug (URL-safe id). \" +\n\t\t\t\t\"For select/multiSelect, provide choices in validation.options array.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tcollection: z.string().describe(\"Collection slug to add the field to\"),\n\t\t\t\tslug: z\n\t\t\t\t\t.string()\n\t\t\t\t\t.regex(COLLECTION_SLUG_PATTERN)\n\t\t\t\t\t.describe(\"Field identifier (lowercase letters, numbers, underscores)\"),\n\t\t\t\tlabel: z.string().describe(\"Display name for the field\"),\n\t\t\t\ttype: z\n\t\t\t\t\t.enum([\n\t\t\t\t\t\t\"string\",\n\t\t\t\t\t\t\"text\",\n\t\t\t\t\t\t\"number\",\n\t\t\t\t\t\t\"integer\",\n\t\t\t\t\t\t\"boolean\",\n\t\t\t\t\t\t\"datetime\",\n\t\t\t\t\t\t\"select\",\n\t\t\t\t\t\t\"multiSelect\",\n\t\t\t\t\t\t\"portableText\",\n\t\t\t\t\t\t\"image\",\n\t\t\t\t\t\t\"file\",\n\t\t\t\t\t\t\"reference\",\n\t\t\t\t\t\t\"json\",\n\t\t\t\t\t\t\"slug\",\n\t\t\t\t\t])\n\t\t\t\t\t.describe(\"Data type for this field\"),\n\t\t\t\trequired: z.boolean().optional().describe(\"Whether the field is required (default false)\"),\n\t\t\t\tunique: z.boolean().optional().describe(\"Whether values must be unique (default false)\"),\n\t\t\t\tdefaultValue: z.unknown().optional().describe(\"Default value for new items\"),\n\t\t\t\tvalidation: z\n\t\t\t\t\t.object({\n\t\t\t\t\t\tmin: z.number().optional(),\n\t\t\t\t\t\tmax: z.number().optional(),\n\t\t\t\t\t\tminLength: z.number().optional(),\n\t\t\t\t\t\tmaxLength: z.number().optional(),\n\t\t\t\t\t\tpattern: z.string().optional(),\n\t\t\t\t\t\toptions: z\n\t\t\t\t\t\t\t.array(z.string())\n\t\t\t\t\t\t\t.optional()\n\t\t\t\t\t\t\t.describe(\"Allowed values for select/multiSelect\"),\n\t\t\t\t\t})\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\"Validation constraints\"),\n\t\t\t\toptions: z\n\t\t\t\t\t.object({\n\t\t\t\t\t\tcollection: z\n\t\t\t\t\t\t\t.string()\n\t\t\t\t\t\t\t.optional()\n\t\t\t\t\t\t\t.describe(\"Target collection slug for reference fields\"),\n\t\t\t\t\t\trows: z.number().optional().describe(\"Number of rows for textarea\"),\n\t\t\t\t\t})\n\t\t\t\t\t.passthrough()\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\"Widget configuration\"),\n\t\t\t\tsearchable: z\n\t\t\t\t\t.boolean()\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\"Include in full-text search index (default false)\"),\n\t\t\t\ttranslatable: z\n\t\t\t\t\t.boolean()\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\n\t\t\t\t\t\t\"Whether this field is translatable (default true). \" +\n\t\t\t\t\t\t\t\"Non-translatable fields are synced across all locales in a translation group.\",\n\t\t\t\t\t),\n\t\t\t}),\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"schema:write\");\n\t\t\trequireRole(extra, Role.ADMIN);\n\t\t\tconst ec = getEmDash(extra);\n\t\t\ttry {\n\t\t\t\tconst { SchemaRegistry } = await import(\"../schema/index.js\");\n\t\t\t\tconst registry = new SchemaRegistry(ec.db);\n\t\t\t\tconst field = await registry.createField(args.collection, {\n\t\t\t\t\tslug: args.slug,\n\t\t\t\t\tlabel: args.label,\n\t\t\t\t\ttype: args.type,\n\t\t\t\t\trequired: args.required,\n\t\t\t\t\tunique: args.unique,\n\t\t\t\t\tdefaultValue: args.defaultValue,\n\t\t\t\t\tvalidation: args.validation,\n\t\t\t\t\toptions: args.options,\n\t\t\t\t\tsearchable: args.searchable,\n\t\t\t\t\ttranslatable: args.translatable,\n\t\t\t\t});\n\t\t\t\treturn jsonResult(field);\n\t\t\t} catch (error) {\n\t\t\t\treturn respondHandlerError(error, \"FIELD_CREATE_ERROR\");\n\t\t\t}\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"schema_delete_field\",\n\t\t{\n\t\t\ttitle: \"Remove Field from Collection\",\n\t\t\tdescription:\n\t\t\t\t\"Remove a field from a collection. This drops the column from the \" +\n\t\t\t\t\"database table and deletes all data in that field. Irreversible.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tcollection: z.string().describe(\"Collection slug\"),\n\t\t\t\tfieldSlug: z.string().describe(\"Field slug to remove\"),\n\t\t\t}),\n\t\t\tannotations: { destructiveHint: true },\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"schema:write\");\n\t\t\trequireRole(extra, Role.ADMIN);\n\t\t\tconst ec = getEmDash(extra);\n\t\t\ttry {\n\t\t\t\tconst { SchemaRegistry } = await import(\"../schema/index.js\");\n\t\t\t\tconst registry = new SchemaRegistry(ec.db);\n\t\t\t\tawait registry.deleteField(args.collection, args.fieldSlug);\n\t\t\t\treturn jsonResult({ deleted: args.fieldSlug, collection: args.collection });\n\t\t\t} catch (error) {\n\t\t\t\treturn respondHandlerError(error, \"FIELD_DELETE_ERROR\");\n\t\t\t}\n\t\t},\n\t);\n\n\t// =====================================================================\n\t// Media tools\n\t// =====================================================================\n\n\tserver.registerTool(\n\t\t\"media_list\",\n\t\t{\n\t\t\ttitle: \"List Media\",\n\t\t\tdescription:\n\t\t\t\t\"List uploaded media files (images, documents, etc.) with optional MIME \" +\n\t\t\t\t\"type filtering and pagination. Returns file metadata including filename, \" +\n\t\t\t\t\"URL, dimensions, and alt text.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tmimeType: z\n\t\t\t\t\t.string()\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\"Filter by MIME type prefix (e.g. 'image/', 'application/pdf')\"),\n\t\t\t\tlimit: z.number().int().min(1).max(100).optional().describe(\"Max items (default 50)\"),\n\t\t\t\tcursor: z.string().min(1).max(2048).optional().describe(\"Pagination cursor\"),\n\t\t\t}),\n\t\t\tannotations: { readOnlyHint: true },\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"media:read\");\n\t\t\tconst ec = getEmDash(extra);\n\t\t\treturn unwrap(\n\t\t\t\tawait ec.handleMediaList({\n\t\t\t\t\tmimeType: args.mimeType,\n\t\t\t\t\tlimit: args.limit,\n\t\t\t\t\tcursor: args.cursor,\n\t\t\t\t}),\n\t\t\t);\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"media_create\",\n\t\t{\n\t\t\ttitle: \"Register Uploaded Media\",\n\t\t\tdescription:\n\t\t\t\t\"Register a media file that has already been uploaded to storage. The \" +\n\t\t\t\t\"caller is responsible for placing the file at `storageKey` (typically \" +\n\t\t\t\t\"using a signed upload URL obtained from the admin UI or a separate API). \" +\n\t\t\t\t\"This tool persists the metadata record so the file is discoverable via \" +\n\t\t\t\t\"media_list / media_get and can be referenced by content. For binary \" +\n\t\t\t\t\"uploads the MCP transport is not appropriate — use the signed-upload \" +\n\t\t\t\t\"flow instead.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tfilename: z.string().describe(\"Original filename (e.g. 'logo.png')\"),\n\t\t\t\tmimeType: z.string().describe(\"MIME type (e.g. 'image/png')\"),\n\t\t\t\tstorageKey: z.string().describe(\"Storage path/key the file was uploaded to\"),\n\t\t\t\tsize: z.number().int().nonnegative().optional().describe(\"File size in bytes\"),\n\t\t\t\twidth: z.number().int().positive().optional().describe(\"Image width in pixels\"),\n\t\t\t\theight: z.number().int().positive().optional().describe(\"Image height in pixels\"),\n\t\t\t\tcontentHash: z.string().optional().describe(\"Hash of the file contents (for dedupe)\"),\n\t\t\t\tblurhash: z.string().optional().describe(\"Blurhash for image placeholders\"),\n\t\t\t\tdominantColor: z\n\t\t\t\t\t.string()\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\"Hex color string for the image's dominant color\"),\n\t\t\t}),\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"media:write\");\n\t\t\trequireRole(extra, Role.AUTHOR);\n\t\t\tconst { emdash, userId } = getExtra(extra);\n\t\t\treturn unwrap(\n\t\t\t\tawait emdash.handleMediaCreate({\n\t\t\t\t\tfilename: args.filename,\n\t\t\t\t\tmimeType: args.mimeType,\n\t\t\t\t\tstorageKey: args.storageKey,\n\t\t\t\t\tsize: args.size,\n\t\t\t\t\twidth: args.width,\n\t\t\t\t\theight: args.height,\n\t\t\t\t\tcontentHash: args.contentHash,\n\t\t\t\t\tblurhash: args.blurhash,\n\t\t\t\t\tdominantColor: args.dominantColor,\n\t\t\t\t\tauthorId: userId,\n\t\t\t\t}),\n\t\t\t);\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"media_get\",\n\t\t{\n\t\t\ttitle: \"Get Media Item\",\n\t\t\tdescription:\n\t\t\t\t\"Get details of a single media file by its ID. Returns metadata \" +\n\t\t\t\t\"including filename, MIME type, size, dimensions, alt text, and URL.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tid: z.string().describe(\"Media item ID\"),\n\t\t\t}),\n\t\t\tannotations: { readOnlyHint: true },\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"media:read\");\n\t\t\tconst ec = getEmDash(extra);\n\t\t\treturn unwrap(await ec.handleMediaGet(args.id));\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"media_update\",\n\t\t{\n\t\t\ttitle: \"Update Media Metadata\",\n\t\t\tdescription:\n\t\t\t\t\"Update the metadata of an uploaded media file. You can change the \" +\n\t\t\t\t\"alt text, caption, and dimensions. The file itself cannot be changed.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tid: z.string().describe(\"Media item ID\"),\n\t\t\t\talt: z.string().optional().describe(\"Alt text for accessibility\"),\n\t\t\t\tcaption: z.string().optional().describe(\"Caption text\"),\n\t\t\t\twidth: z.number().int().optional().describe(\"Image width in pixels\"),\n\t\t\t\theight: z.number().int().optional().describe(\"Image height in pixels\"),\n\t\t\t}),\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"media:write\");\n\t\t\trequireRole(extra, Role.AUTHOR);\n\t\t\tconst ec = getEmDash(extra);\n\n\t\t\t// Fetch media item for ownership check\n\t\t\tconst existing = await ec.handleMediaGet(args.id);\n\t\t\tif (!existing.success) {\n\t\t\t\treturn unwrap(existing);\n\t\t\t}\n\t\t\tconst media = (existing.data as Record<string, unknown> | undefined)?.item as\n\t\t\t\t| Record<string, unknown>\n\t\t\t\t| undefined;\n\t\t\tconst authorId = typeof media?.authorId === \"string\" ? media.authorId : \"\";\n\t\t\trequireOwnership(extra, authorId, \"media:edit_own\", \"media:edit_any\");\n\n\t\t\treturn unwrap(\n\t\t\t\tawait ec.handleMediaUpdate(args.id, {\n\t\t\t\t\talt: args.alt,\n\t\t\t\t\tcaption: args.caption,\n\t\t\t\t\twidth: args.width,\n\t\t\t\t\theight: args.height,\n\t\t\t\t}),\n\t\t\t);\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"media_delete\",\n\t\t{\n\t\t\ttitle: \"Delete Media\",\n\t\t\tdescription:\n\t\t\t\t\"Permanently delete an uploaded media file. Removes the database record \" +\n\t\t\t\t\"and the file from storage. Content referencing this media will have \" +\n\t\t\t\t\"broken references. Cannot be undone.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tid: z.string().describe(\"Media item ID\"),\n\t\t\t}),\n\t\t\tannotations: { destructiveHint: true },\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"media:write\");\n\t\t\trequireRole(extra, Role.AUTHOR);\n\t\t\tconst ec = getEmDash(extra);\n\n\t\t\t// Fetch media item for ownership check\n\t\t\tconst existing = await ec.handleMediaGet(args.id);\n\t\t\tif (!existing.success) {\n\t\t\t\treturn unwrap(existing);\n\t\t\t}\n\t\t\tconst media = (existing.data as Record<string, unknown> | undefined)?.item as\n\t\t\t\t| Record<string, unknown>\n\t\t\t\t| undefined;\n\t\t\tconst authorId = typeof media?.authorId === \"string\" ? media.authorId : \"\";\n\t\t\trequireOwnership(extra, authorId, \"media:delete_own\", \"media:delete_any\");\n\n\t\t\treturn unwrap(await ec.handleMediaDelete(args.id));\n\t\t},\n\t);\n\n\t// =====================================================================\n\t// Search tool\n\t// =====================================================================\n\n\tserver.registerTool(\n\t\t\"search\",\n\t\t{\n\t\t\ttitle: \"Search Content\",\n\t\t\tdescription:\n\t\t\t\t\"Full-text search across content collections. Searches indexed fields \" +\n\t\t\t\t\"for matching content. Collections must have 'search' in their supports \" +\n\t\t\t\t\"list and fields must be marked as searchable. Returns collection, item \" +\n\t\t\t\t\"ID, title, excerpt, and relevance score.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tquery: z.string().describe(\"Search query text\"),\n\t\t\t\tcollections: z\n\t\t\t\t\t.array(z.string())\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\"Limit search to specific collection slugs (all if omitted)\"),\n\t\t\t\tlocale: z\n\t\t\t\t\t.string()\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\"Filter results by locale (omit to search all locales)\"),\n\t\t\t\tlimit: z.number().int().min(1).max(50).optional().describe(\"Max results (default 20)\"),\n\t\t\t}),\n\t\t\tannotations: { readOnlyHint: true },\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"content:read\");\n\t\t\tconst ec = getEmDash(extra);\n\t\t\ttry {\n\t\t\t\tconst { searchWithDb } = await import(\"../search/index.js\");\n\t\t\t\tconst results = await searchWithDb(ec.db, args.query, {\n\t\t\t\t\tcollections: args.collections,\n\t\t\t\t\tlocale: args.locale,\n\t\t\t\t\tlimit: args.limit,\n\t\t\t\t});\n\t\t\t\treturn jsonResult(results);\n\t\t\t} catch (error) {\n\t\t\t\treturn respondHandlerError(error, \"SEARCH_ERROR\");\n\t\t\t}\n\t\t},\n\t);\n\n\t// =====================================================================\n\t// Taxonomy tools\n\t// =====================================================================\n\n\tserver.registerTool(\n\t\t\"taxonomy_list\",\n\t\t{\n\t\t\ttitle: \"List Taxonomies\",\n\t\t\tdescription:\n\t\t\t\t\"List all taxonomy definitions (e.g. categories, tags). Taxonomies are \" +\n\t\t\t\t\"classification systems applied to content. Each has a name, label, and \" +\n\t\t\t\t\"can be hierarchical (categories) or flat (tags). Optionally filter by \" +\n\t\t\t\t\"locale.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tlocale: z.string().optional().describe(\"Filter by locale (omit for all)\"),\n\t\t\t}),\n\t\t\tannotations: { readOnlyHint: true },\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"content:read\");\n\t\t\tconst ec = getEmDash(extra);\n\t\t\ttry {\n\t\t\t\tconst { handleTaxonomyList } = await import(\"../api/handlers/taxonomies.js\");\n\t\t\t\treturn unwrap(await handleTaxonomyList(ec.db, { locale: args.locale }));\n\t\t\t} catch (error) {\n\t\t\t\treturn respondHandlerError(error, \"TAXONOMY_LIST_ERROR\");\n\t\t\t}\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"taxonomy_list_terms\",\n\t\t{\n\t\t\ttitle: \"List Taxonomy Terms\",\n\t\t\tdescription:\n\t\t\t\t\"List terms in a taxonomy with pagination. Terms are individual entries \" +\n\t\t\t\t\"(e.g. specific categories or tags). Hierarchical taxonomies can have \" +\n\t\t\t\t\"parent-child relationships.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\ttaxonomy: z.string().describe(\"Taxonomy name (e.g. 'categories', 'tags')\"),\n\t\t\t\tlimit: z.number().int().min(1).max(100).optional().describe(\"Max items (default 50)\"),\n\t\t\t\tcursor: z.string().min(1).max(2048).optional().describe(\"Pagination cursor\"),\n\t\t\t\tlocale: z.string().optional().describe(\"Filter by locale (omit for all)\"),\n\t\t\t}),\n\t\t\tannotations: { readOnlyHint: true },\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"content:read\");\n\t\t\tconst ec = getEmDash(extra);\n\t\t\ttry {\n\t\t\t\tconst { handleTaxonomyList } = await import(\"../api/handlers/taxonomies.js\");\n\t\t\t\tconst listResult = await handleTaxonomyList(ec.db, { locale: args.locale });\n\t\t\t\tif (!listResult.success) return unwrap(listResult);\n\n\t\t\t\tconst taxonomies = (listResult.data as { taxonomies: Array<{ name: string; id?: string }> })\n\t\t\t\t\t.taxonomies;\n\t\t\t\tconst taxonomy = taxonomies.find((t: { name: string }) => t.name === args.taxonomy);\n\t\t\t\tif (!taxonomy) return respondError(\"NOT_FOUND\", `Taxonomy '${args.taxonomy}' not found`);\n\n\t\t\t\tconst { TaxonomyRepository } = await import(\"../database/repositories/taxonomy.js\");\n\t\t\t\tconst { decodeCursor, encodeCursor, InvalidCursorError } =\n\t\t\t\t\tawait import(\"../database/repositories/types.js\");\n\t\t\t\tconst repo = new TaxonomyRepository(ec.db);\n\t\t\t\tconst limit = Math.min(args.limit ?? 50, 100);\n\t\t\t\tconst terms = await repo.findByName(args.taxonomy, { locale: args.locale });\n\n\t\t\t\t// Manual keyset pagination over the sorted-by-label results.\n\t\t\t\t// Using a base64-encoded `(label, id)` cursor matches the\n\t\t\t\t// scheme other list endpoints use and tolerates concurrent\n\t\t\t\t// deletion of the cursor-term — the cursor is a position,\n\t\t\t\t// not a row reference, so a missing row just means we skip\n\t\t\t\t// past it rather than erroring.\n\t\t\t\tlet startIdx = 0;\n\t\t\t\tif (args.cursor) {\n\t\t\t\t\tlet decoded: { orderValue: string; id: string };\n\t\t\t\t\ttry {\n\t\t\t\t\t\tdecoded = decodeCursor(args.cursor);\n\t\t\t\t\t} catch (error) {\n\t\t\t\t\t\tif (error instanceof InvalidCursorError) {\n\t\t\t\t\t\t\treturn respondError(\"INVALID_CURSOR\", error.message);\n\t\t\t\t\t\t}\n\t\t\t\t\t\tthrow error;\n\t\t\t\t\t}\n\t\t\t\t\t// Find the first term that sorts strictly after the cursor\n\t\t\t\t\t// position. Stable order is `(label asc, id asc)` so a\n\t\t\t\t\t// `(label, id)` tuple comparison is the keyset.\n\t\t\t\t\tstartIdx = terms.findIndex(\n\t\t\t\t\t\t(t) =>\n\t\t\t\t\t\t\tt.label > decoded.orderValue || (t.label === decoded.orderValue && t.id > decoded.id),\n\t\t\t\t\t);\n\t\t\t\t\tif (startIdx < 0) startIdx = terms.length;\n\t\t\t\t}\n\n\t\t\t\tconst page = terms.slice(startIdx, startIdx + limit);\n\t\t\t\tconst hasMore = startIdx + limit < terms.length;\n\t\t\t\tconst last = page.at(-1);\n\t\t\t\tconst nextCursor = hasMore && last ? encodeCursor(last.label, last.id) : undefined;\n\n\t\t\t\treturn jsonResult({\n\t\t\t\t\titems: page.map((t) => ({\n\t\t\t\t\t\tid: t.id,\n\t\t\t\t\t\tname: t.name,\n\t\t\t\t\t\tslug: t.slug,\n\t\t\t\t\t\tlabel: t.label,\n\t\t\t\t\t\tparentId: t.parentId,\n\t\t\t\t\t\tdescription: typeof t.data?.description === \"string\" ? t.data.description : undefined,\n\t\t\t\t\t\tlocale: t.locale,\n\t\t\t\t\t\ttranslationGroup: t.translationGroup,\n\t\t\t\t\t})),\n\t\t\t\t\tnextCursor,\n\t\t\t\t});\n\t\t\t} catch (error) {\n\t\t\t\treturn respondHandlerError(error, \"TAXONOMY_LIST_TERMS_ERROR\");\n\t\t\t}\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"taxonomy_create_term\",\n\t\t{\n\t\t\ttitle: \"Create Taxonomy Term\",\n\t\t\tdescription:\n\t\t\t\t\"Create a new term in a taxonomy. For hierarchical taxonomies like \" +\n\t\t\t\t\"categories, you can specify a parentId to create a child term. The \" +\n\t\t\t\t\"parent must exist and belong to the same taxonomy. The parent's \" +\n\t\t\t\t\"ancestor chain must not exceed 100 levels — attempts to attach a \" +\n\t\t\t\t\"new term beneath a chain of 100+ existing ancestors are rejected.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\ttaxonomy: z.string().describe(\"Taxonomy name (e.g. 'categories', 'tags')\"),\n\t\t\t\tslug: z.string().describe(\"URL-safe identifier for the term\"),\n\t\t\t\tlabel: z.string().describe(\"Display name\"),\n\t\t\t\tparentId: z.string().optional().describe(\"Parent term ID for hierarchical taxonomies\"),\n\t\t\t\tdescription: z.string().optional().describe(\"Description of the term\"),\n\t\t\t\tlocale: z.string().optional().describe(\"Locale for the new term (e.g. 'es')\"),\n\t\t\t\ttranslationOf: z\n\t\t\t\t\t.string()\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\"Term id to join as a translation (same translation_group)\"),\n\t\t\t}),\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"taxonomies:manage\");\n\t\t\trequireRole(extra, Role.EDITOR);\n\t\t\tconst ec = getEmDash(extra);\n\t\t\ttry {\n\t\t\t\tconst { handleTermCreate } = await import(\"../api/handlers/taxonomies.js\");\n\t\t\t\treturn unwrap(\n\t\t\t\t\tawait handleTermCreate(ec.db, args.taxonomy, {\n\t\t\t\t\t\tslug: args.slug,\n\t\t\t\t\t\tlabel: args.label,\n\t\t\t\t\t\tparentId: args.parentId,\n\t\t\t\t\t\tdescription: args.description,\n\t\t\t\t\t\tlocale: args.locale,\n\t\t\t\t\t\ttranslationOf: args.translationOf,\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t} catch (error) {\n\t\t\t\treturn respondHandlerError(error, \"TAXONOMY_TERM_CREATE_ERROR\");\n\t\t\t}\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"taxonomy_update_term\",\n\t\t{\n\t\t\ttitle: \"Update Taxonomy Term\",\n\t\t\tdescription:\n\t\t\t\t\"Update an existing term in a taxonomy. Any field can be omitted to leave \" +\n\t\t\t\t\"it unchanged. Renaming a term's slug must not collide with another term in \" +\n\t\t\t\t\"the same taxonomy. Set parentId to null to detach from a parent. The new \" +\n\t\t\t\t\"parent must exist, belong to the same taxonomy, and not introduce a cycle \" +\n\t\t\t\t\"(a term cannot be its own ancestor). The new parent's ancestor chain must \" +\n\t\t\t\t\"not exceed 100 levels — reparenting under a chain of 100+ ancestors is \" +\n\t\t\t\t\"rejected.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\ttaxonomy: z.string().describe(\"Taxonomy name (e.g. 'categories', 'tags')\"),\n\t\t\t\ttermSlug: z.string().describe(\"Current slug of the term to update\"),\n\t\t\t\tslug: z.string().optional().describe(\"New slug (must be unique in the taxonomy)\"),\n\t\t\t\tlabel: z.string().optional().describe(\"New display name\"),\n\t\t\t\tparentId: z.string().nullable().optional().describe(\"New parent term ID; null to detach\"),\n\t\t\t\tdescription: z.string().optional().describe(\"New description\"),\n\t\t\t}),\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"taxonomies:manage\");\n\t\t\trequireRole(extra, Role.EDITOR);\n\t\t\tconst ec = getEmDash(extra);\n\t\t\ttry {\n\t\t\t\tconst { handleTermUpdate } = await import(\"../api/handlers/taxonomies.js\");\n\t\t\t\treturn unwrap(\n\t\t\t\t\tawait handleTermUpdate(ec.db, args.taxonomy, args.termSlug, {\n\t\t\t\t\t\tslug: args.slug,\n\t\t\t\t\t\tlabel: args.label,\n\t\t\t\t\t\tparentId: args.parentId,\n\t\t\t\t\t\tdescription: args.description,\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t} catch (error) {\n\t\t\t\treturn respondHandlerError(error, \"TAXONOMY_TERM_UPDATE_ERROR\");\n\t\t\t}\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"taxonomy_delete_term\",\n\t\t{\n\t\t\ttitle: \"Delete Taxonomy Term\",\n\t\t\tdescription:\n\t\t\t\t\"Permanently delete a term from a taxonomy. Any content tagged with this \" +\n\t\t\t\t\"term loses the association. Cannot delete a term that has children — \" +\n\t\t\t\t\"delete children first.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\ttaxonomy: z.string().describe(\"Taxonomy name\"),\n\t\t\t\ttermSlug: z.string().describe(\"Slug of the term to delete\"),\n\t\t\t}),\n\t\t\tannotations: { destructiveHint: true },\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"taxonomies:manage\");\n\t\t\trequireRole(extra, Role.EDITOR);\n\t\t\tconst ec = getEmDash(extra);\n\t\t\ttry {\n\t\t\t\tconst { handleTermDelete } = await import(\"../api/handlers/taxonomies.js\");\n\t\t\t\treturn unwrap(await handleTermDelete(ec.db, args.taxonomy, args.termSlug));\n\t\t\t} catch (error) {\n\t\t\t\treturn respondHandlerError(error, \"TAXONOMY_TERM_DELETE_ERROR\");\n\t\t\t}\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"taxonomy_term_translations\",\n\t\t{\n\t\t\ttitle: \"List Term Translations\",\n\t\t\tdescription:\n\t\t\t\t\"Return every locale variant of a taxonomy term, identified via its shared translation_group.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tid: z.string().describe(\"Term id (or translation_group)\"),\n\t\t\t}),\n\t\t\tannotations: { readOnlyHint: true },\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"content:read\");\n\t\t\tconst ec = getEmDash(extra);\n\t\t\ttry {\n\t\t\t\tconst { handleTermTranslations } = await import(\"../api/handlers/taxonomies.js\");\n\t\t\t\treturn unwrap(await handleTermTranslations(ec.db, args.id));\n\t\t\t} catch (error) {\n\t\t\t\treturn respondHandlerError(error, \"TERM_TRANSLATIONS_ERROR\");\n\t\t\t}\n\t\t},\n\t);\n\n\t// =====================================================================\n\t// Menu tools\n\t// =====================================================================\n\n\tserver.registerTool(\n\t\t\"menu_list\",\n\t\t{\n\t\t\ttitle: \"List Menus\",\n\t\t\tdescription:\n\t\t\t\t\"List navigation menus. Menus are per-locale: filter by `locale` to \" +\n\t\t\t\t\"get just one locale's worth, or omit to list every row (one per \" +\n\t\t\t\t\"locale per menu name).\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tlocale: z.string().optional().describe(\"Filter by locale (omit for all)\"),\n\t\t\t}),\n\t\t\tannotations: { readOnlyHint: true },\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"content:read\");\n\t\t\tconst ec = getEmDash(extra);\n\t\t\ttry {\n\t\t\t\tconst { handleMenuList } = await import(\"../api/handlers/menus.js\");\n\t\t\t\treturn unwrap(await handleMenuList(ec.db, { locale: args.locale }));\n\t\t\t} catch (error) {\n\t\t\t\treturn respondHandlerError(error, \"MENU_LIST_ERROR\");\n\t\t\t}\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"menu_get\",\n\t\t{\n\t\t\ttitle: \"Get Menu with Items\",\n\t\t\tdescription:\n\t\t\t\t\"Get a menu by name, including its items. When multiple locales exist, \" +\n\t\t\t\t\"pass `locale` to pick the right one.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tname: z.string().describe(\"Menu name (e.g. 'main', 'footer')\"),\n\t\t\t\tlocale: z.string().optional().describe(\"Locale to resolve the menu for\"),\n\t\t\t}),\n\t\t\tannotations: { readOnlyHint: true },\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"content:read\");\n\t\t\tconst ec = getEmDash(extra);\n\t\t\ttry {\n\t\t\t\tconst { handleMenuGet } = await import(\"../api/handlers/menus.js\");\n\t\t\t\treturn unwrap(await handleMenuGet(ec.db, args.name, { locale: args.locale }));\n\t\t\t} catch (error) {\n\t\t\t\treturn respondHandlerError(error, \"MENU_GET_ERROR\");\n\t\t\t}\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"menu_translations\",\n\t\t{\n\t\t\ttitle: \"List Menu Translations\",\n\t\t\tdescription:\n\t\t\t\t\"Return every locale variant of a menu, identified via the shared translation_group.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tid: z.string().describe(\"Menu id (or translation_group)\"),\n\t\t\t}),\n\t\t\tannotations: { readOnlyHint: true },\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"content:read\");\n\t\t\tconst ec = getEmDash(extra);\n\t\t\ttry {\n\t\t\t\tconst { handleMenuTranslations } = await import(\"../api/handlers/menus.js\");\n\t\t\t\treturn unwrap(await handleMenuTranslations(ec.db, args.id));\n\t\t\t} catch (error) {\n\t\t\t\treturn respondHandlerError(error, \"MENU_TRANSLATIONS_ERROR\");\n\t\t\t}\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"menu_create\",\n\t\t{\n\t\t\ttitle: \"Create Menu\",\n\t\t\tdescription:\n\t\t\t\t\"Create a new navigation menu. The `name` is the stable identifier used \" +\n\t\t\t\t\"by site templates (e.g. 'main', 'footer'); `label` is the human-readable \" +\n\t\t\t\t\"name shown in the admin. Menus are per-locale, so pass `locale` when \" +\n\t\t\t\t\"the same menu name exists in multiple translations. Add items afterwards \" +\n\t\t\t\t\"with menu_set_items. If `translationOf` is set, `locale` must also be set.\",\n\t\t\t// `locale`-when-`translationOf` is enforced inside handleMenuCreate\n\t\t\t// so REST/SDK callers get the same guard. The description above\n\t\t\t// documents the rule; the handler returns VALIDATION_ERROR.\n\t\t\tinputSchema: z.object({\n\t\t\t\tname: z\n\t\t\t\t\t.string()\n\t\t\t\t\t.regex(COLLECTION_SLUG_PATTERN)\n\t\t\t\t\t.describe(\"Stable identifier (lowercase letters, numbers, underscores)\"),\n\t\t\t\tlabel: z.string().describe(\"Display name for the admin\"),\n\t\t\t\tlocale: z.string().optional().describe(\"Locale for this menu (e.g. 'fr-fr')\"),\n\t\t\t\ttranslationOf: z\n\t\t\t\t\t.string()\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\"Existing menu id to create this locale variant from\"),\n\t\t\t}),\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"menus:manage\");\n\t\t\trequireRole(extra, Role.EDITOR);\n\t\t\tconst ec = getEmDash(extra);\n\t\t\ttry {\n\t\t\t\tconst { handleMenuCreate } = await import(\"../api/handlers/menus.js\");\n\t\t\t\treturn unwrap(\n\t\t\t\t\tawait handleMenuCreate(ec.db, {\n\t\t\t\t\t\tname: args.name,\n\t\t\t\t\t\tlabel: args.label,\n\t\t\t\t\t\tlocale: args.locale,\n\t\t\t\t\t\ttranslationOf: args.translationOf,\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t} catch (error) {\n\t\t\t\treturn respondHandlerError(error, \"MENU_CREATE_ERROR\");\n\t\t\t}\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"menu_update\",\n\t\t{\n\t\t\ttitle: \"Update Menu\",\n\t\t\tdescription:\n\t\t\t\t\"Update a menu's label. The `name` (stable identifier) cannot be changed. \" +\n\t\t\t\t\"On multi-locale installs, pass `locale` so the correct translation is updated.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tname: z.string().describe(\"Menu name to update\"),\n\t\t\t\tlabel: z.string().describe(\"New display label\"),\n\t\t\t\tlocale: z.string().optional().describe(\"Locale of the menu to update\"),\n\t\t\t}),\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"menus:manage\");\n\t\t\trequireRole(extra, Role.EDITOR);\n\t\t\tconst ec = getEmDash(extra);\n\t\t\ttry {\n\t\t\t\tconst { handleMenuUpdate } = await import(\"../api/handlers/menus.js\");\n\t\t\t\treturn unwrap(\n\t\t\t\t\tawait handleMenuUpdate(ec.db, args.name, { label: args.label, locale: args.locale }),\n\t\t\t\t);\n\t\t\t} catch (error) {\n\t\t\t\treturn respondHandlerError(error, \"MENU_UPDATE_ERROR\");\n\t\t\t}\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"menu_delete\",\n\t\t{\n\t\t\ttitle: \"Delete Menu\",\n\t\t\tdescription:\n\t\t\t\t\"Delete a menu. Items are also removed. Cannot be undone. On multi-locale \" +\n\t\t\t\t\"installs, pass `locale` so only the intended translation is removed.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tname: z.string().describe(\"Menu name to delete\"),\n\t\t\t\tlocale: z.string().optional().describe(\"Locale of the menu to delete\"),\n\t\t\t}),\n\t\t\tannotations: { destructiveHint: true },\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"menus:manage\");\n\t\t\trequireRole(extra, Role.EDITOR);\n\t\t\tconst ec = getEmDash(extra);\n\t\t\ttry {\n\t\t\t\tconst { handleMenuDelete } = await import(\"../api/handlers/menus.js\");\n\t\t\t\treturn unwrap(await handleMenuDelete(ec.db, args.name, { locale: args.locale }));\n\t\t\t} catch (error) {\n\t\t\t\treturn respondHandlerError(error, \"MENU_DELETE_ERROR\");\n\t\t\t}\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"menu_set_items\",\n\t\t{\n\t\t\ttitle: \"Set Menu Items\",\n\t\t\tdescription:\n\t\t\t\t\"Replace the entire item list of a menu in one call. This is atomic: the \" +\n\t\t\t\t\"existing items are deleted and the new list is inserted in the order \" +\n\t\t\t\t\"provided. Use this rather than per-item add/remove tools so the resulting \" +\n\t\t\t\t\"order and parent links are unambiguous. On multi-locale installs, pass \" +\n\t\t\t\t\"`locale` so only the intended translation is rewritten.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tname: z.string().describe(\"Menu name to update\"),\n\t\t\t\tlocale: z.string().optional().describe(\"Locale of the menu to rewrite\"),\n\t\t\t\titems: z\n\t\t\t\t\t.array(\n\t\t\t\t\t\tz.object({\n\t\t\t\t\t\t\tlabel: z.string().describe(\"Item display text\"),\n\t\t\t\t\t\t\ttype: z\n\t\t\t\t\t\t\t\t.enum([\"custom\", \"page\", \"post\", \"taxonomy\", \"collection\"])\n\t\t\t\t\t\t\t\t.describe(\"Item kind\"),\n\t\t\t\t\t\t\tcustomUrl: z\n\t\t\t\t\t\t\t\t.string()\n\t\t\t\t\t\t\t\t.optional()\n\t\t\t\t\t\t\t\t.describe(\"URL for type='custom' items (ignored otherwise)\"),\n\t\t\t\t\t\t\treferenceCollection: z\n\t\t\t\t\t\t\t\t.string()\n\t\t\t\t\t\t\t\t.optional()\n\t\t\t\t\t\t\t\t.describe(\"Target collection slug for content references\"),\n\t\t\t\t\t\t\treferenceId: z.string().optional().describe(\"Target content/term ID for references\"),\n\t\t\t\t\t\t\ttitleAttr: z.string().optional().describe(\"HTML title attribute\"),\n\t\t\t\t\t\t\ttarget: z.string().optional().describe(\"HTML target attribute, e.g. '_blank'\"),\n\t\t\t\t\t\t\tcssClasses: z.string().optional().describe(\"Space-separated CSS classes\"),\n\t\t\t\t\t\t\t/**\n\t\t\t\t\t\t\t * Items are positioned by array index, but parents may be referenced\n\t\t\t\t\t\t\t * by their array index — items with `parentIndex` set are nested under\n\t\t\t\t\t\t\t * the item at that position. Items without `parentIndex` are top-level.\n\t\t\t\t\t\t\t */\n\t\t\t\t\t\t\tparentIndex: z\n\t\t\t\t\t\t\t\t.number()\n\t\t\t\t\t\t\t\t.int()\n\t\t\t\t\t\t\t\t.nonnegative()\n\t\t\t\t\t\t\t\t.optional()\n\t\t\t\t\t\t\t\t.describe(\n\t\t\t\t\t\t\t\t\t\"Array index of the parent item (must be earlier in the list). Omit for top-level items.\",\n\t\t\t\t\t\t\t\t),\n\t\t\t\t\t\t}),\n\t\t\t\t\t)\n\t\t\t\t\t.describe(\"Ordered list of menu items\"),\n\t\t\t}),\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"menus:manage\");\n\t\t\trequireRole(extra, Role.EDITOR);\n\t\t\tconst ec = getEmDash(extra);\n\t\t\ttry {\n\t\t\t\tconst { handleMenuSetItems } = await import(\"../api/handlers/menus.js\");\n\t\t\t\treturn unwrap(\n\t\t\t\t\tawait handleMenuSetItems(ec.db, args.name, args.items, { locale: args.locale }),\n\t\t\t\t);\n\t\t\t} catch (error) {\n\t\t\t\treturn respondHandlerError(error, \"MENU_SET_ITEMS_ERROR\");\n\t\t\t}\n\t\t},\n\t);\n\n\t// =====================================================================\n\t// Revision tools\n\t// =====================================================================\n\n\tserver.registerTool(\n\t\t\"revision_list\",\n\t\t{\n\t\t\ttitle: \"List Revisions\",\n\t\t\tdescription:\n\t\t\t\t\"List revision history for a content item. Revisions are snapshots \" +\n\t\t\t\t\"created on publish or update. Returns newest-first. Requires the \" +\n\t\t\t\t\"collection to support 'revisions'.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\tcollection: z.string().describe(\"Collection slug\"),\n\t\t\t\tid: z.string().describe(\"Content item ID or slug\"),\n\t\t\t\tlimit: z.number().int().min(1).max(50).optional().describe(\"Max revisions (default 20)\"),\n\t\t\t}),\n\t\t\tannotations: { readOnlyHint: true },\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"content:read\");\n\t\t\trequireDraftAccess(extra);\n\t\t\tconst ec = getEmDash(extra);\n\t\t\treturn unwrap(\n\t\t\t\tawait ec.handleRevisionList(args.collection, args.id, {\n\t\t\t\t\tlimit: args.limit,\n\t\t\t\t}),\n\t\t\t);\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"revision_restore\",\n\t\t{\n\t\t\ttitle: \"Restore Revision\",\n\t\t\tdescription:\n\t\t\t\t\"Restore a content item to a previous revision. Replaces the current \" +\n\t\t\t\t\"draft with the specified revision's data. Not automatically published — \" +\n\t\t\t\t\"use content_publish afterward if needed.\",\n\t\t\tinputSchema: z.object({\n\t\t\t\trevisionId: z.string().describe(\"Revision ID to restore\"),\n\t\t\t}),\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"content:write\");\n\t\t\trequireRole(extra, Role.AUTHOR);\n\t\t\tconst { emdash, userId } = getExtra(extra);\n\n\t\t\t// Fetch the revision to discover the parent content entry\n\t\t\tconst revision = await emdash.handleRevisionGet(args.revisionId);\n\t\t\tif (!revision.success) {\n\t\t\t\treturn unwrap(revision);\n\t\t\t}\n\t\t\tconst revItem = revision.data?.item;\n\t\t\tif (!revItem?.collection || !revItem?.entryId) {\n\t\t\t\treturn respondError(\n\t\t\t\t\t\"VALIDATION_ERROR\",\n\t\t\t\t\t\"Revision is missing collection or entry reference\",\n\t\t\t\t);\n\t\t\t}\n\n\t\t\t// Fetch the content entry to check ownership\n\t\t\tconst existing = await emdash.handleContentGet(revItem.collection, revItem.entryId);\n\t\t\tif (!existing.success) {\n\t\t\t\treturn unwrap(existing);\n\t\t\t}\n\t\t\trequireOwnership(\n\t\t\t\textra,\n\t\t\t\textractContentAuthorId(existing.data),\n\t\t\t\t\"content:edit_own\",\n\t\t\t\t\"content:edit_any\",\n\t\t\t);\n\n\t\t\treturn unwrap(await emdash.handleRevisionRestore(args.revisionId, userId));\n\t\t},\n\t);\n\n\t// =====================================================================\n\t// Settings tools\n\t// =====================================================================\n\n\tserver.registerTool(\n\t\t\"settings_get\",\n\t\t{\n\t\t\ttitle: \"Get Site Settings\",\n\t\t\tdescription:\n\t\t\t\t\"Get all site-wide settings (title, tagline, logo, favicon, URL, \" +\n\t\t\t\t\"date/time formatting, social links, SEO defaults). Media references \" +\n\t\t\t\t\"(logo, favicon, defaultOgImage) include resolved URLs. Unset values \" +\n\t\t\t\t\"are omitted from the response.\",\n\t\t\tinputSchema: z.object({}),\n\t\t\tannotations: { readOnlyHint: true },\n\t\t},\n\t\tasync (_args, extra) => {\n\t\t\trequireScope(extra, \"settings:read\");\n\t\t\trequireRole(extra, Role.EDITOR);\n\t\t\tconst ec = getEmDash(extra);\n\t\t\ttry {\n\t\t\t\tconst { handleSettingsGet } = await import(\"../api/handlers/settings.js\");\n\t\t\t\treturn unwrap(await handleSettingsGet(ec.db, ec.storage));\n\t\t\t} catch (error) {\n\t\t\t\treturn respondHandlerError(error, \"SETTINGS_READ_ERROR\");\n\t\t\t}\n\t\t},\n\t);\n\n\tserver.registerTool(\n\t\t\"settings_update\",\n\t\t{\n\t\t\ttitle: \"Update Site Settings\",\n\t\t\tdescription:\n\t\t\t\t\"Update one or more site-wide settings. This is a partial update: only \" +\n\t\t\t\t\"the fields provided are changed; omitted fields are left as-is. Returns \" +\n\t\t\t\t\"the full settings object after the update. To set a media reference \" +\n\t\t\t\t\"(logo, favicon, seo.defaultOgImage), pass an object with `mediaId` \" +\n\t\t\t\t\"(and optional `alt`) — the media item must already exist (use \" +\n\t\t\t\t\"media_create first).\",\n\t\t\tinputSchema: z.object({\n\t\t\t\ttitle: z.string().optional().describe(\"Site title\"),\n\t\t\t\ttagline: z.string().optional().describe(\"Site tagline / short description\"),\n\t\t\t\tlogo: settingsMediaReferenceSchema\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\"Logo media reference ({ mediaId, alt? })\"),\n\t\t\t\tfavicon: settingsMediaReferenceSchema\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\"Favicon media reference ({ mediaId, alt? })\"),\n\t\t\t\turl: z\n\t\t\t\t\t.union([\n\t\t\t\t\t\tz\n\t\t\t\t\t\t\t.string()\n\t\t\t\t\t\t\t.url()\n\t\t\t\t\t\t\t.refine((u) => HTTP_SCHEME_PATTERN.test(u), \"URL must use http or https\"),\n\t\t\t\t\t\tz.literal(\"\"),\n\t\t\t\t\t])\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\"Canonical site URL (http or https). Empty string clears it.\"),\n\t\t\t\tpostsPerPage: z\n\t\t\t\t\t.number()\n\t\t\t\t\t.int()\n\t\t\t\t\t.min(1)\n\t\t\t\t\t.max(100)\n\t\t\t\t\t.optional()\n\t\t\t\t\t.describe(\"Default page size for content listings\"),\n\t\t\t\tdateFormat: z.string().optional().describe(\"Date format token string\"),\n\t\t\t\ttimezone: z.string().optional().describe(\"IANA timezone identifier\"),\n\t\t\t\tsocial: settingsSocialSchema.optional().describe(\"Social handles / URLs\"),\n\t\t\t\tseo: settingsSeoSchema.optional().describe(\"Site-wide SEO defaults\"),\n\t\t\t}),\n\t\t},\n\t\tasync (args, extra) => {\n\t\t\trequireScope(extra, \"settings:manage\");\n\t\t\trequireRole(extra, Role.ADMIN);\n\t\t\tconst ec = getEmDash(extra);\n\t\t\ttry {\n\t\t\t\tconst { handleSettingsUpdate } = await import(\"../api/handlers/settings.js\");\n\t\t\t\treturn unwrap(await handleSettingsUpdate(ec.db, ec.storage, args));\n\t\t\t} catch (error) {\n\t\t\t\treturn respondHandlerError(error, \"SETTINGS_UPDATE_ERROR\");\n\t\t\t}\n\t\t},\n\t);\n\n\treturn server;\n}\n","/**\n * MCP Streamable HTTP endpoint\n *\n * Exposes an MCP server at /_emdash/api/mcp using the Streamable HTTP\n * transport (Web Standard variant). The server runs stateless — each\n * request creates a fresh transport, so no session tracking is needed.\n * Authentication is handled by the existing EmDash auth middleware.\n *\n * POST /_emdash/api/mcp — JSON-RPC tool calls\n * GET  /_emdash/api/mcp — SSE stream (not used in stateless mode)\n * DELETE /_emdash/api/mcp — Session close (not used in stateless mode)\n */\n\nimport { WebStandardStreamableHTTPServerTransport } from \"@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js\";\nimport type { APIRoute } from \"astro\";\n\nimport { apiError } from \"#api/error.js\";\nimport { createMcpServer } from \"#mcp/server.js\";\n\nexport const prerender = false;\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!user) {\n\t\treturn apiError(\"UNAUTHORIZED\", \"Authentication required\", 401);\n\t}\n\n\tconst server = createMcpServer();\n\n\ttry {\n\t\tconst transport = new WebStandardStreamableHTTPServerTransport({\n\t\t\t// Stateless: no session management\n\t\t\tsessionIdGenerator: undefined,\n\t\t});\n\n\t\tawait server.connect(transport);\n\n\t\treturn await transport.handleRequest(request, {\n\t\t\tauthInfo: {\n\t\t\t\ttoken: \"\",\n\t\t\t\tclientId: \"emdash-admin\",\n\t\t\t\tscopes: [],\n\t\t\t\textra: {\n\t\t\t\t\temdash,\n\t\t\t\t\tuserId: user.id,\n\t\t\t\t\tuserRole: user.role,\n\t\t\t\t\ttokenScopes: locals.tokenScopes,\n\t\t\t\t},\n\t\t\t},\n\t\t});\n\t} catch (error) {\n\t\tconsole.error(\"[MCP]\", error);\n\t\tawait server.close().catch(() => {});\n\n\t\treturn new Response(\n\t\t\tJSON.stringify({\n\t\t\t\tjsonrpc: \"2.0\",\n\t\t\t\terror: {\n\t\t\t\t\tcode: -32603,\n\t\t\t\t\tmessage: \"Internal server error\",\n\t\t\t\t},\n\t\t\t\tid: null,\n\t\t\t}),\n\t\t\t{\n\t\t\t\tstatus: 500,\n\t\t\t\theaders: {\n\t\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t\t\"Cache-Control\": \"private, no-store\",\n\t\t\t\t},\n\t\t\t},\n\t\t);\n\t}\n};\n\n/**\n * GET — SSE stream. Not used in stateless mode.\n */\nexport const GET: APIRoute = async () => {\n\treturn new Response(\n\t\tJSON.stringify({\n\t\t\tjsonrpc: \"2.0\",\n\t\t\terror: {\n\t\t\t\tcode: -32000,\n\t\t\t\tmessage: \"Method not allowed. This is a stateless MCP endpoint — use POST.\",\n\t\t\t},\n\t\t\tid: null,\n\t\t}),\n\t\t{\n\t\t\tstatus: 405,\n\t\t\theaders: {\n\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t\"Cache-Control\": \"private, no-store\",\n\t\t\t},\n\t\t},\n\t);\n};\n\n/**\n * DELETE — Session close. Not used in stateless mode.\n */\nexport const DELETE: APIRoute = async () => {\n\treturn new Response(\n\t\tJSON.stringify({\n\t\t\tjsonrpc: \"2.0\",\n\t\t\terror: {\n\t\t\t\tcode: -32000,\n\t\t\t\tmessage: \"Method not allowed. This is a stateless MCP endpoint.\",\n\t\t\t},\n\t\t\tid: null,\n\t\t}),\n\t\t{\n\t\t\tstatus: 405,\n\t\t\theaders: {\n\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t\"Cache-Control\": \"private, no-store\",\n\t\t\t},\n\t\t},\n\t);\n};\n"],"mappings":";;;;;;;;;;;;;AAqBA,MAAM,0BAA0B;;AAEhC,MAAM,sBAAsB;AAQ5B,MAAM,+BAA+B,EAAE,OAAO;CAC7C,SAAS,EAAE,QAAQ,CAAC,SAAS,iDAAiD;CAC9E,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,mCAAmC;CACvE,CAAC;AAEF,MAAM,uBAAuB,EAAE,OAAO;CACrC,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC9B,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC9B,CAAC;AAEF,MAAM,oBAAoB,EAAE,OAAO;CAClC,gBAAgB,EACd,QAAQ,CACR,IAAI,GAAG,CACP,UAAU,CACV,SAAS,2DAA2D;CACtE,gBAAgB,6BACd,UAAU,CACV,SAAS,iDAAiD;CAC5D,WAAW,EACT,QAAQ,CACR,IAAI,IAAK,CACT,UAAU,CACV,SAAS,8DAA8D;CACzE,oBAAoB,EAClB,QAAQ,CACR,IAAI,IAAI,CACR,UAAU,CACV,SAAS,2CAA2C;CACtD,kBAAkB,EAChB,QAAQ,CACR,IAAI,IAAI,CACR,UAAU,CACV,SAAS,0CAA0C;CACrD,CAAC;;;;AA0BF,SAAS,YAAY,MAAgC;AACpD,QAAO,EACN,SAAS,CAAC;EAAE,MAAM;EAAQ,MAAM,KAAK,UAAU,MAAM,MAAM,EAAE;EAAE,CAAC,EAChE;;;;;;;;;AAUF,SAAS,aACR,MACA,SACA,SACgB;CAChB,MAAM,OAAO,IAAI,KAAK,IAAI;CAC1B,MAAM,OAA4D,EAAE,MAAM;AAC1E,KAAI,YAAY,OAAW,MAAK,UAAU;AAC1C,QAAO;EACN,SAAS,CAAC;GAAE,MAAM;GAAQ;GAAM,CAAC;EACjC,SAAS;EACT,OAAO;EACP;;;;;;;;;;;AAYF,IAAM,kBAAN,cAA8B,MAAM;CACnC,AAAkB,OAAO;CACzB,YACC,SACA,AAAS,MACR;AACD,QAAM,QAAQ;EAFL;;;;;;;;;;;;;;;;;;;;;;;AA0BX,SAAS,oBAAoB,OAAgB,eAAe,kBAAiC;CAC5F,IAAI,OAAO;CACX,IAAI;CACJ,IAAI;AAEJ,KAAI,iBAAiB,iBAAiB;AACrC,YAAU,MAAM,WAAW;AAC3B,SAAO,MAAM;YACH,iBAAiB,OAAO;AAClC,YAAU,MAAM,WAAW;EAC3B,MAAM,WAAY,MAA8D;AAChF,MAAI,YAAY,OAAO,SAAS,SAAS,YAAY,SAAS,MAAM;AACnE,UAAO,SAAS;AAChB,OAAI,SAAS,WAAW,OAAO,SAAS,YAAY,SACnD,WAAU,SAAS;SAEd;GAIN,MAAM,UAAW,MAA6B;AAC9C,OAAI,OAAO,YAAY,YAAY,QAClC,QAAO;GAER,MAAM,aAAc,MAAgC;AACpD,OAAI,cAAc,OAAO,eAAe,SACvC,WAAU;;YAGF,OAAO,UAAU,SAC3B,WAAU;KAEV,WAAU,OAAO,MAAM;AAGxB,QAAO,aAAa,MAAM,SAAS,QAAQ;;;;;;;;;;AAW5C,SAAS,OAAO,QAAwD;AACvE,KAAI,OAAO,WAAW,OAAO,SAAS,OACrC,QAAO,YAAY,OAAO,KAAK;CAEhC,MAAM,MACL,OAAO,SAAS,OAAO,OAAO,UAAU,WACpC,OAAO,QACR;AACJ,KAAI,CAAC,IAAK,QAAO,aAAa,kBAAkB,gBAAgB;AAOhE,QAAO,aANM,OAAO,IAAI,SAAS,YAAY,IAAI,OAAO,IAAI,OAAO,kBACnD,OAAO,IAAI,YAAY,YAAY,IAAI,UAAU,IAAI,UAAU,iBAE9E,IAAI,WAAW,OAAO,IAAI,YAAY,WAClC,IAAI,UACL,OACuC;;;;;;AAO5C,SAAS,WAAW,MAAgC;AACnD,QAAO,YAAY,KAAK;;AAkBzB,SAAS,YAAY,GAAqB;AACzC,QACC,OAAO,MAAM,YACb,MAAM,QACN,YAAY,KACX,EAA8B,WAAW;;AAI5C,SAAS,SAAS,OAAwE;CACzF,MAAM,UAAU,MAAM,UAAU;AAChC,KAAI,CAAC,SAAS,OACb,OAAM,IAAI,MAAM,8CAA8C;AAE/D,QAAO;;AAGR,SAAS,UAAU,OAA2E;AAC7F,QAAO,SAAS,MAAM,CAAC;;;;;;;;;AAUxB,SAAS,aACR,OACA,OACO;CACP,MAAM,UAAU,SAAS,MAAM;AAC/B,KAAI,QAAQ,eAAe,CAAC,SAAS,QAAQ,aAAa,MAAM,CAC/D,OAAM,IAAI,gBAAgB,gCAAgC,SAAS,qBAAqB;;;;;;;;;AAW1F,SAAS,YACR,OACA,SACO;AAEP,KADgB,SAAS,MAAM,CACnB,WAAW,QACtB,OAAM,IAAI,gBACT,+CACA,2BACA;;;;;;;AASH,SAAS,cAAc,OAAoE;AAE1F,QAAO,cAAc,EAAE,MADP,SAAS,MAAM,CACM,UAAU,EAAE,sBAAsB;;;;;;AAOxE,SAAS,mBAAmB,OAAiE;AAC5F,KAAI,CAAC,cAAc,MAAM,CACxB,OAAM,IAAI,gBACT,+CACA,2BACA;;;;;;;;;AAWH,SAAS,iBACR,OACA,SACA,eACA,eACO;CACP,MAAM,UAAU,SAAS,MAAM;AAE/B,KAAI,CAAC,YADQ;EAAE,IAAI,QAAQ;EAAQ,MAAM,QAAQ;EAAU,EACpC,SAAS,eAAe,cAAc,CAC5D,OAAM,IAAI,gBACT,+CACA,2BACA;;;;;;;;;;;;AAcH,SAAS,uBAAuB,MAAuB;AACtD,KAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;CAC9C,MAAM,MAAM;CACZ,MAAM,OACL,IAAI,QAAQ,OAAO,IAAI,SAAS,WAAY,IAAI,OAAmC;AACpF,QAAO,OAAO,MAAM,aAAa,WAAW,KAAK,WAAW;;;;;;AAO7D,SAAS,iBAAiB,MAAmC;AAC5D,KAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;CAC9C,MAAM,MAAM;CACZ,MAAM,OACL,IAAI,QAAQ,OAAO,IAAI,SAAS,WAAY,IAAI,OAAmC;AACpF,QAAO,OAAO,MAAM,OAAO,WAAW,KAAK,KAAK;;AAOjD,SAAgB,kBAA6B;CAC5C,MAAM,SAAS,IAAI,UAClB;EAAE,MAAM;EAAU,SAAS;EAAS,EACpC,EAAE,cAAc,EAAE,SAAS,EAAE,EAAE,EAAE,CACjC;CAUD,MAAM,uBAAuB,OAAO,aAAa,KAAK,OAAO;AAC7D,CAAC,OAAwD,iBACxD,MACA,QACA,aACI;EACJ,MAAM,UAAU,OACf,GAAG,iBAC2C;AAC9C,OAAI;AACH,WAAO,MAAM,SAAS,GAAG,aAAa;YAC9B,OAAO;AACf,WAAO,oBAAoB,OAAO,iBAAiB;;;AAGrD,SACC,qBACC,MAAM,QAAQ,QAAQ;;AAOzB,QAAO,aACN,gBACA;EACC,OAAO;EACP,aACC;EAID,aAAa,EAAE,OAAO;GACrB,YAAY,EAAE,QAAQ,CAAC,SAAS,0CAA0C;GAC1E,QAAQ,EACN,KAAK;IAAC;IAAS;IAAa;IAAY,CAAC,CACzC,UAAU,CACV,SAAS,2BAA2B;GACtC,OAAO,EACL,QAAQ,CACR,KAAK,CACL,IAAI,EAAE,CACN,IAAI,IAAI,CACR,UAAU,CACV,SAAS,4CAA4C;GACvD,QAAQ,EACN,QAAQ,CACR,IAAI,EAAE,CACN,IAAI,KAAK,CACT,UAAU,CACV,SAAS,6CAA6C;GACxD,SAAS,EACP,QAAQ,CACR,UAAU,CACV,SAAS,qDAAqD;GAChE,OAAO,EAAE,KAAK,CAAC,OAAO,OAAO,CAAC,CAAC,UAAU,CAAC,SAAS,kCAAkC;GACrF,QAAQ,EACN,QAAQ,CACR,UAAU,CACV,SAAS,0EAA0E;GACrF,CAAC;EACF,aAAa,EAAE,cAAc,MAAM;EACnC,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,eAAe;EACnC,MAAM,KAAK,UAAU,MAAM;EAG3B,MAAM,SAAS,cAAc,MAAM,GAAG,KAAK,SAAS;AACpD,SAAO,OACN,MAAM,GAAG,kBAAkB,KAAK,YAAY;GAC3C;GACA,OAAO,KAAK;GACZ,QAAQ,KAAK;GACb,SAAS,KAAK;GACd,OAAO,KAAK;GACZ,QAAQ,KAAK;GACb,CAAC,CACF;GAEF;AAED,QAAO,aACN,eACA;EACC,OAAO;EACP,aACC;EAGD,aAAa,EAAE,OAAO;GACrB,YAAY,EAAE,QAAQ,CAAC,SAAS,0CAA0C;GAC1E,IAAI,EAAE,QAAQ,CAAC,SAAS,iCAAiC;GACzD,QAAQ,EACN,QAAQ,CACR,UAAU,CACV,SACA,kGACA;GACF,CAAC;EACF,aAAa,EAAE,cAAc,MAAM;EACnC,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,eAAe;EAEnC,MAAM,SAAS,MADJ,UAAU,MAAM,CACH,iBAAiB,KAAK,YAAY,KAAK,IAAI,KAAK,OAAO;AAG/E,MAAI,OAAO,WAAW,CAAC,cAAc,MAAM,EAAE;GAC5C,MAAM,OACL,OAAO,QAAQ,OAAO,OAAO,SAAS,WAEnC,OAAO,OACP;GACJ,MAAM,OACL,MAAM,QAAQ,OAAO,KAAK,SAAS,WAEhC,KAAK,OACL;AAEJ,QADe,OAAO,MAAM,WAAW,WAAW,KAAK,SAAS,UACjD,YACd,QAAO,OAAO;IACb,SAAS;IACT,OAAO;KAAE,MAAM;KAAa,SAAS,2BAA2B,KAAK;KAAM;IAC3E,CAAC;;AAGJ,SAAO,OAAO,OAAO;GAEtB;AAED,QAAO,aACN,kBACA;EACC,OAAO;EACP,aACC;EAKD,aAAa,EAAE,OAAO;GACrB,YAAY,EAAE,QAAQ,CAAC,SAAS,0CAA0C;GAC1E,MAAM,EACJ,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC,CAC/B,SAAS,iEAAiE;GAC5E,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,kDAAkD;GACvF,QAAQ,EACN,KAAK,CAAC,SAAS,YAAY,CAAC,CAC5B,UAAU,CACV,SAAS,iEAAiE;GAC5E,QAAQ,EACN,QAAQ,CACR,UAAU,CACV,SAAS,mEAAmE;GAC9E,eAAe,EACb,QAAQ,CACR,UAAU,CACV,SACA,8FACA;GACF,CAAC;EACF,aAAa,EAAE,iBAAiB,OAAO;EACvC,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,gBAAgB;AACpC,cAAY,OAAO,KAAK,YAAY;EACpC,MAAM,EAAE,QAAQ,WAAW,SAAS,MAAM;AAG1C,MAAI,KAAK,eAAe;GACvB,MAAM,SAAS,MAAM,OAAO,iBAAiB,KAAK,YAAY,KAAK,cAAc;AACjF,OAAI,CAAC,OAAO,QAAS,QAAO,OAAO,OAAO;AAC1C,oBACC,OACA,uBAAuB,OAAO,KAAK,EACnC,oBACA,mBACA;;AAIF,MAAI,KAAK,WAAW,aAAa;AAEhC,OAAI,CAAC,cADQ;IAAE,IAAI;IAAQ,MAAM,SAAS,MAAM,CAAC;IAAU,EAClC,sBAAoC,CAC5D,OAAM,IAAI,gBACT,qEACA,2BACA;GAEF,MAAM,SAAS,MAAM,OAAO,oBAAoB,KAAK,YAAY;IAChE,MAAM,KAAK;IACX,MAAM,KAAK;IACX,UAAU;IACV,QAAQ,KAAK;IACb,eAAe,KAAK;IACpB,CAAC;AACF,OAAI,CAAC,OAAO,QAAS,QAAO,OAAO,OAAO;GAC1C,MAAM,SAAS,iBAAiB,OAAO,KAAK;AAC5C,OAAI,OACH,QAAO,OAAO,MAAM,OAAO,qBAAqB,KAAK,YAAY,OAAO,CAAC;AAE1E,UAAO,OAAO,OAAO;;AAGtB,SAAO,OACN,MAAM,OAAO,oBAAoB,KAAK,YAAY;GACjD,MAAM,KAAK;GACX,MAAM,KAAK;GACX,UAAU;GACV,QAAQ,KAAK;GACb,eAAe,KAAK;GACpB,CAAC,CACF;GAEF;AAED,QAAO,aACN,kBACA;EACC,OAAO;EACP,aACC;EAOD,aAAa,EAAE,OAAO;GACrB,YAAY,EAAE,QAAQ,CAAC,SAAS,kBAAkB;GAClD,IAAI,EAAE,QAAQ,CAAC,SAAS,0BAA0B;GAClD,MAAM,EACJ,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC,CAC/B,UAAU,CACV,SAAS,uDAAuD;GAClE,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,eAAe;GACpD,QAAQ,EACN,KAAK,CAAC,SAAS,YAAY,CAAC,CAC5B,UAAU,CACV,SACA,gJACA;GAMF,KAAK,gBACH,UAAU,CACV,SACA,wKACA;GACF,SAAS,EACP,MAAM,yBAAyB,CAC/B,UAAU,CACV,SACA,+HACA;GACF,aAAa,EAAE,IACb,SAAS;IAAE,QAAQ;IAAM,SAAS;IAAgC,CAAC,CACnE,SAAS,CACT,SACA,6IACA;GACF,MAAM,EACJ,QAAQ,CACR,UAAU,CACV,SAAS,yDAAyD;GACpE,CAAC;EACF,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,gBAAgB;AACpC,cAAY,OAAO,KAAK,OAAO;EAC/B,MAAM,EAAE,QAAQ,QAAQ,aAAa,SAAS,MAAM;EAGpD,MAAM,WAAW,MAAM,OAAO,iBAAiB,KAAK,YAAY,KAAK,GAAG;AACxE,MAAI,CAAC,SAAS,QACb,QAAO,OAAO,SAAS;EAExB,MAAM,UAAU,uBAAuB,SAAS,KAAK;AACrD,mBAAiB,OAAO,SAAS,oBAAoB,mBAAmB;AAKxE,MAAI,KAAK,gBAAgB,QAExB;OAAI,CAAC,cADQ;IAAE,IAAI;IAAQ,MAAM;IAAU,EAClB,sBAAoC,CAC5D,OAAM,IAAI,gBACT,+DACA,2BACA;;EAIH,MAAM,aAAa,iBAAiB,SAAS,KAAK,IAAI,KAAK;AAG3D,MAAI,KAAK,WAAW,aAAa;AAChC,oBAAiB,OAAO,SAAS,uBAAuB,sBAAsB;AAC9E,OACC,KAAK,QACL,KAAK,QACL,KAAK,QAAQ,UACb,KAAK,YAAY,UACjB,KAAK,gBAAgB,QACpB;IACD,MAAM,eAAe,MAAM,OAAO,oBAAoB,KAAK,YAAY,YAAY;KAClF,MAAM,KAAK;KACX,MAAM,KAAK;KACX,UAAU;KACV,KAAK,KAAK;KACV,SAAS,KAAK;KACd,aAAa,KAAK;KAClB,MAAM,KAAK;KACX,CAAC;AACF,QAAI,CAAC,aAAa,QAAS,QAAO,OAAO,aAAa;;AAEvD,UAAO,OAAO,MAAM,OAAO,qBAAqB,KAAK,YAAY,WAAW,CAAC;;AAG9E,MAAI,KAAK,WAAW,SAAS;AAC5B,oBAAiB,OAAO,SAAS,uBAAuB,sBAAsB;AAC9E,OACC,KAAK,QACL,KAAK,QACL,KAAK,QAAQ,UACb,KAAK,YAAY,UACjB,KAAK,gBAAgB,QACpB;IACD,MAAM,eAAe,MAAM,OAAO,oBAAoB,KAAK,YAAY,YAAY;KAClF,MAAM,KAAK;KACX,MAAM,KAAK;KACX,UAAU;KACV,KAAK,KAAK;KACV,SAAS,KAAK;KACd,aAAa,KAAK;KAClB,MAAM,KAAK;KACX,CAAC;AACF,QAAI,CAAC,aAAa,QAAS,QAAO,OAAO,aAAa;;AAEvD,UAAO,OAAO,MAAM,OAAO,uBAAuB,KAAK,YAAY,WAAW,CAAC;;AAGhF,SAAO,OACN,MAAM,OAAO,oBAAoB,KAAK,YAAY,YAAY;GAC7D,MAAM,KAAK;GACX,MAAM,KAAK;GACX,UAAU;GACV,KAAK,KAAK;GACV,SAAS,KAAK;GACd,aAAa,KAAK;GAClB,MAAM,KAAK;GACX,CAAC,CACF;GAEF;AAED,QAAO,aACN,kBACA;EACC,OAAO;EACP,aACC;EAGD,aAAa,EAAE,OAAO;GACrB,YAAY,EAAE,QAAQ,CAAC,SAAS,kBAAkB;GAClD,IAAI,EAAE,QAAQ,CAAC,SAAS,0BAA0B;GAClD,CAAC;EACF,aAAa,EAAE,iBAAiB,MAAM;EACtC,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,gBAAgB;AACpC,cAAY,OAAO,KAAK,OAAO;EAC/B,MAAM,KAAK,UAAU,MAAM;EAG3B,MAAM,WAAW,MAAM,GAAG,iBAAiB,KAAK,YAAY,KAAK,GAAG;AACpE,MAAI,CAAC,SAAS,QACb,QAAO,OAAO,SAAS;AAExB,mBACC,OACA,uBAAuB,SAAS,KAAK,EACrC,sBACA,qBACA;EAED,MAAM,aAAa,iBAAiB,SAAS,KAAK,IAAI,KAAK;AAC3D,SAAO,OAAO,MAAM,GAAG,oBAAoB,KAAK,YAAY,WAAW,CAAC;GAEzE;AAED,QAAO,aACN,mBACA;EACC,OAAO;EACP,aAAa;EACb,aAAa,EAAE,OAAO;GACrB,YAAY,EAAE,QAAQ,CAAC,SAAS,kBAAkB;GAClD,IAAI,EAAE,QAAQ,CAAC,SAAS,0BAA0B;GAClD,CAAC;EACF,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,gBAAgB;AACpC,cAAY,OAAO,KAAK,OAAO;EAC/B,MAAM,KAAK,UAAU,MAAM;EAG3B,MAAM,WAAW,MAAM,GAAG,iCAAiC,KAAK,YAAY,KAAK,GAAG;AACpF,MAAI,CAAC,SAAS,QACb,QAAO,OAAO,SAAS;AAExB,mBACC,OACA,uBAAuB,SAAS,KAAK,EACrC,oBACA,mBACA;EAED,MAAM,aAAa,iBAAiB,SAAS,KAAK,IAAI,KAAK;AAC3D,SAAO,OAAO,MAAM,GAAG,qBAAqB,KAAK,YAAY,WAAW,CAAC;GAE1E;AAED,QAAO,aACN,4BACA;EACC,OAAO;EACP,aACC;EAED,aAAa,EAAE,OAAO;GACrB,YAAY,EAAE,QAAQ,CAAC,SAAS,kBAAkB;GAClD,IAAI,EAAE,QAAQ,CAAC,SAAS,0BAA0B;GAClD,CAAC;EACF,aAAa,EAAE,iBAAiB,MAAM;EACtC,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,gBAAgB;AACpC,cAAY,OAAO,KAAK,MAAM;AAE9B,SAAO,OAAO,MADH,UAAU,MAAM,CACJ,6BAA6B,KAAK,YAAY,KAAK,GAAG,CAAC;GAE/E;AAED,QAAO,aACN,mBACA;EACC,OAAO;EACP,aACC;EAOD,aAAa,EAAE,OAAO;GACrB,YAAY,EAAE,QAAQ,CAAC,SAAS,kBAAkB;GAClD,IAAI,EAAE,QAAQ,CAAC,SAAS,0BAA0B;GAClD,aAAa,EAAE,IACb,SAAS;IAAE,QAAQ;IAAM,SAAS;IAAgC,CAAC,CACnE,UAAU,CACV,SACA,iJACA;GACF,CAAC;EACF,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,gBAAgB;AACpC,cAAY,OAAO,KAAK,OAAO;EAC/B,MAAM,EAAE,QAAQ,QAAQ,aAAa,SAAS,MAAM;EAGpD,MAAM,WAAW,MAAM,OAAO,iBAAiB,KAAK,YAAY,KAAK,GAAG;AACxE,MAAI,CAAC,SAAS,QACb,QAAO,OAAO,SAAS;AAGxB,mBAAiB,OADD,uBAAuB,SAAS,KAAK,EACpB,uBAAuB,sBAAsB;AAI9E,MAAI,KAAK,gBAAgB,QAExB;OAAI,CAAC,cADQ;IAAE,IAAI;IAAQ,MAAM;IAAU,EAClB,sBAAoC,CAC5D,OAAM,IAAI,gBACT,+DACA,2BACA;;EAIH,MAAM,aAAa,iBAAiB,SAAS,KAAK,IAAI,KAAK;AAC3D,SAAO,OACN,MAAM,OAAO,qBAAqB,KAAK,YAAY,YAAY,EAC9D,aAAa,KAAK,aAClB,CAAC,CACF;GAEF;AAED,QAAO,aACN,qBACA;EACC,OAAO;EACP,aACC;EAED,aAAa,EAAE,OAAO;GACrB,YAAY,EAAE,QAAQ,CAAC,SAAS,kBAAkB;GAClD,IAAI,EAAE,QAAQ,CAAC,SAAS,0BAA0B;GAClD,CAAC;EACF,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,gBAAgB;AACpC,cAAY,OAAO,KAAK,OAAO;EAC/B,MAAM,KAAK,UAAU,MAAM;EAG3B,MAAM,WAAW,MAAM,GAAG,iBAAiB,KAAK,YAAY,KAAK,GAAG;AACpE,MAAI,CAAC,SAAS,QACb,QAAO,OAAO,SAAS;AAExB,mBACC,OACA,uBAAuB,SAAS,KAAK,EACrC,uBACA,sBACA;EAED,MAAM,aAAa,iBAAiB,SAAS,KAAK,IAAI,KAAK;AAC3D,SAAO,OAAO,MAAM,GAAG,uBAAuB,KAAK,YAAY,WAAW,CAAC;GAE5E;AAED,QAAO,aACN,oBACA;EACC,OAAO;EACP,aACC;EAGD,aAAa,EAAE,OAAO;GACrB,YAAY,EAAE,QAAQ,CAAC,SAAS,kBAAkB;GAClD,IAAI,EAAE,QAAQ,CAAC,SAAS,0BAA0B;GAClD,aAAa,EACX,QAAQ,CACR,SAAS,kEAAkE;GAC7E,CAAC;EACF,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,gBAAgB;AACpC,cAAY,OAAO,KAAK,OAAO;EAC/B,MAAM,KAAK,UAAU,MAAM;EAG3B,MAAM,WAAW,MAAM,GAAG,iBAAiB,KAAK,YAAY,KAAK,GAAG;AACpE,MAAI,CAAC,SAAS,QACb,QAAO,OAAO,SAAS;AAExB,mBACC,OACA,uBAAuB,SAAS,KAAK,EACrC,uBACA,sBACA;EAED,MAAM,aAAa,iBAAiB,SAAS,KAAK,IAAI,KAAK;AAC3D,SAAO,OAAO,MAAM,GAAG,sBAAsB,KAAK,YAAY,YAAY,KAAK,YAAY,CAAC;GAE7F;AAED,QAAO,aACN,sBACA;EACC,OAAO;EACP,aACC;EAGD,aAAa,EAAE,OAAO;GACrB,YAAY,EAAE,QAAQ,CAAC,SAAS,kBAAkB;GAClD,IAAI,EAAE,QAAQ,CAAC,SAAS,0BAA0B;GAClD,CAAC;EACF,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,gBAAgB;AACpC,cAAY,OAAO,KAAK,OAAO;EAC/B,MAAM,KAAK,UAAU,MAAM;EAE3B,MAAM,WAAW,MAAM,GAAG,iBAAiB,KAAK,YAAY,KAAK,GAAG;AACpE,MAAI,CAAC,SAAS,QACb,QAAO,OAAO,SAAS;AAExB,mBACC,OACA,uBAAuB,SAAS,KAAK,EACrC,uBACA,sBACA;EAED,MAAM,aAAa,iBAAiB,SAAS,KAAK,IAAI,KAAK;AAC3D,SAAO,OAAO,MAAM,GAAG,wBAAwB,KAAK,YAAY,WAAW,CAAC;GAE7E;AAED,QAAO,aACN,mBACA;EACC,OAAO;EACP,aACC;EAGD,aAAa,EAAE,OAAO;GACrB,YAAY,EAAE,QAAQ,CAAC,SAAS,kBAAkB;GAClD,IAAI,EAAE,QAAQ,CAAC,SAAS,0BAA0B;GAClD,CAAC;EACF,aAAa,EAAE,cAAc,MAAM;EACnC,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,eAAe;AACnC,qBAAmB,MAAM;AAEzB,SAAO,OAAO,MADH,UAAU,MAAM,CACJ,qBAAqB,KAAK,YAAY,KAAK,GAAG,CAAC;GAEvE;AAED,QAAO,aACN,yBACA;EACC,OAAO;EACP,aACC;EAED,aAAa,EAAE,OAAO;GACrB,YAAY,EAAE,QAAQ,CAAC,SAAS,kBAAkB;GAClD,IAAI,EAAE,QAAQ,CAAC,SAAS,0BAA0B;GAClD,CAAC;EACF,aAAa,EAAE,iBAAiB,MAAM;EACtC,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,gBAAgB;AACpC,cAAY,OAAO,KAAK,OAAO;EAC/B,MAAM,KAAK,UAAU,MAAM;EAG3B,MAAM,WAAW,MAAM,GAAG,iBAAiB,KAAK,YAAY,KAAK,GAAG;AACpE,MAAI,CAAC,SAAS,QACb,QAAO,OAAO,SAAS;AAExB,mBACC,OACA,uBAAuB,SAAS,KAAK,EACrC,oBACA,mBACA;EAED,MAAM,aAAa,iBAAiB,SAAS,KAAK,IAAI,KAAK;AAC3D,SAAO,OAAO,MAAM,GAAG,0BAA0B,KAAK,YAAY,WAAW,CAAC;GAE/E;AAED,QAAO,aACN,wBACA;EACC,OAAO;EACP,aACC;EAGD,aAAa,EAAE,OAAO;GACrB,YAAY,EAAE,QAAQ,CAAC,SAAS,kBAAkB;GAClD,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,yBAAyB;GACrF,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,oBAAoB;GAC5E,CAAC;EACF,aAAa,EAAE,cAAc,MAAM;EACnC,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,eAAe;AACnC,qBAAmB,MAAM;AAEzB,SAAO,OACN,MAFU,UAAU,MAAM,CAEjB,yBAAyB,KAAK,YAAY;GAClD,OAAO,KAAK;GACZ,QAAQ,KAAK;GACb,CAAC,CACF;GAEF;AAED,QAAO,aACN,qBACA;EACC,OAAO;EACP,aACC;EAED,aAAa,EAAE,OAAO;GACrB,YAAY,EAAE,QAAQ,CAAC,SAAS,kBAAkB;GAClD,IAAI,EAAE,QAAQ,CAAC,SAAS,uCAAuC;GAC/D,CAAC;EACF,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,gBAAgB;AACpC,cAAY,OAAO,KAAK,YAAY;AAEpC,SAAO,OAAO,MADH,UAAU,MAAM,CACJ,uBAAuB,KAAK,YAAY,KAAK,GAAG,CAAC;GAEzE;AAED,QAAO,aACN,wBACA;EACC,OAAO;EACP,aACC;EAGD,aAAa,EAAE,OAAO;GACrB,YAAY,EAAE,QAAQ,CAAC,SAAS,kBAAkB;GAClD,IAAI,EAAE,QAAQ,CAAC,SAAS,0BAA0B;GAClD,CAAC;EACF,aAAa,EAAE,cAAc,MAAM;EACnC,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,eAAe;EAEnC,MAAM,SAAS,MADJ,UAAU,MAAM,CACH,0BAA0B,KAAK,YAAY,KAAK,GAAG;AAG3E,MAAI,OAAO,WAAW,CAAC,cAAc,MAAM,EAAE;GAC5C,MAAM,OACL,OAAO,QAAQ,OAAO,OAAO,SAAS,WAEnC,OAAO,OACP;GAEJ,MAAM,YADe,MAAM,QAAQ,MAAM,aAAa,GAAG,KAAK,eAAe,EAAE,EACjD,OAAO,YAAY;AACjD,UAAO,OAAO;IACb,SAAS;IACT,MAAM;KAAE,GAAG;KAAM,cAAc;KAAU;IACzC,CAAC;;AAEH,SAAO,OAAO,OAAO;GAEtB;AAMD,QAAO,aACN,2BACA;EACC,OAAO;EACP,aACC;EAID,aAAa,EAAE,OAAO,EAAE,CAAC;EACzB,aAAa,EAAE,cAAc,MAAM;EACnC,EACD,OAAO,OAAO,UAAU;AACvB,eAAa,OAAO,cAAc;AAClC,cAAY,OAAO,KAAK,OAAO;EAC/B,MAAM,KAAK,UAAU,MAAM;AAC3B,MAAI;GACH,MAAM,EAAE,mBAAmB,MAAM,OAAO;AAGxC,UAAO,WAAW,EAAE,OADN,MADG,IAAI,eAAe,GAAG,GAAG,CACb,iBAAiB,EACnB,CAAC;WACpB,OAAO;AACf,UAAO,oBAAoB,OAAO,oBAAoB;;GAGxD;AAED,QAAO,aACN,yBACA;EACC,OAAO;EACP,aACC;EAKD,aAAa,EAAE,OAAO,EACrB,MAAM,EACJ,QAAQ,CACR,SACA,sFACA,EACF,CAAC;EACF,aAAa,EAAE,cAAc,MAAM;EACnC,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,cAAc;AAClC,cAAY,OAAO,KAAK,OAAO;EAC/B,MAAM,KAAK,UAAU,MAAM;AAC3B,MAAI;GACH,MAAM,EAAE,mBAAmB,MAAM,OAAO;GAExC,MAAM,aAAa,MADF,IAAI,eAAe,GAAG,GAAG,CACR,wBAAwB,KAAK,KAAK;AACpE,OAAI,CAAC,WACJ,QAAO,aAAa,aAAa,eAAe,KAAK,KAAK,aAAa;AAExE,UAAO,WAAW,WAAW;WACrB,OAAO;AACf,UAAO,oBAAoB,OAAO,mBAAmB;;GAGvD;AAED,QAAO,aACN,4BACA;EACC,OAAO;EACP,aACC;EAKD,aAAa,EAAE,OAAO;GACrB,MAAM,EACJ,QAAQ,CACR,MAAM,wBAAwB,CAC9B,SAAS,8DAA8D;GACzE,OAAO,EAAE,QAAQ,CAAC,SAAS,2CAA2C;GACtE,eAAe,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,2CAA2C;GACzF,aAAa,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,iCAAiC;GAC7E,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,6BAA6B;GAClE,UAAU,EACR,MAAM,EAAE,KAAK;IAAC;IAAU;IAAa;IAAW;IAAc;IAAS,CAAC,CAAC,CACzE,UAAU,CACV,SAAS,wDAAwD;GACnE,CAAC;EACF,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,eAAe;AACnC,cAAY,OAAO,KAAK,MAAM;EAC9B,MAAM,KAAK,UAAU,MAAM;AAC3B,MAAI;GACH,MAAM,EAAE,mBAAmB,MAAM,OAAO;GAExC,MAAM,aAAa,MADF,IAAI,eAAe,GAAG,GAAG,CACR,iBAAiB;IAClD,MAAM,KAAK;IACX,OAAO,KAAK;IACZ,eAAe,KAAK;IACpB,aAAa,KAAK;IAClB,MAAM,KAAK;IAGX,UAAU,KAAK;IACf,CAAC;AACF,MAAG,2BAA2B;AAC9B,UAAO,WAAW,WAAW;WACrB,OAAO;AACf,UAAO,oBAAoB,OAAO,sBAAsB;;GAG1D;AAED,QAAO,aACN,4BACA;EACC,OAAO;EACP,aACC;EAED,aAAa,EAAE,OAAO;GACrB,MAAM,EAAE,QAAQ,CAAC,SAAS,4BAA4B;GACtD,OAAO,EACL,SAAS,CACT,UAAU,CACV,SAAS,oEAAoE;GAC/E,CAAC;EACF,aAAa,EAAE,iBAAiB,MAAM;EACtC,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,eAAe;AACnC,cAAY,OAAO,KAAK,MAAM;EAC9B,MAAM,KAAK,UAAU,MAAM;AAC3B,MAAI;GACH,MAAM,EAAE,mBAAmB,MAAM,OAAO;AAExC,SADiB,IAAI,eAAe,GAAG,GAAG,CAC3B,iBAAiB,KAAK,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC;AACjE,MAAG,2BAA2B;AAC9B,UAAO,WAAW,EAAE,SAAS,KAAK,MAAM,CAAC;WACjC,OAAO;AACf,UAAO,oBAAoB,OAAO,sBAAsB;;GAG1D;AAED,QAAO,aACN,uBACA;EACC,OAAO;EACP,aACC;EAMD,aAAa,EAAE,OAAO;GACrB,YAAY,EAAE,QAAQ,CAAC,SAAS,sCAAsC;GACtE,MAAM,EACJ,QAAQ,CACR,MAAM,wBAAwB,CAC9B,SAAS,6DAA6D;GACxE,OAAO,EAAE,QAAQ,CAAC,SAAS,6BAA6B;GACxD,MAAM,EACJ,KAAK;IACL;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,CAAC,CACD,SAAS,2BAA2B;GACtC,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC,SAAS,gDAAgD;GAC1F,QAAQ,EAAE,SAAS,CAAC,UAAU,CAAC,SAAS,gDAAgD;GACxF,cAAc,EAAE,SAAS,CAAC,UAAU,CAAC,SAAS,8BAA8B;GAC5E,YAAY,EACV,OAAO;IACP,KAAK,EAAE,QAAQ,CAAC,UAAU;IAC1B,KAAK,EAAE,QAAQ,CAAC,UAAU;IAC1B,WAAW,EAAE,QAAQ,CAAC,UAAU;IAChC,WAAW,EAAE,QAAQ,CAAC,UAAU;IAChC,SAAS,EAAE,QAAQ,CAAC,UAAU;IAC9B,SAAS,EACP,MAAM,EAAE,QAAQ,CAAC,CACjB,UAAU,CACV,SAAS,wCAAwC;IACnD,CAAC,CACD,UAAU,CACV,SAAS,yBAAyB;GACpC,SAAS,EACP,OAAO;IACP,YAAY,EACV,QAAQ,CACR,UAAU,CACV,SAAS,8CAA8C;IACzD,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,8BAA8B;IACnE,CAAC,CACD,aAAa,CACb,UAAU,CACV,SAAS,uBAAuB;GAClC,YAAY,EACV,SAAS,CACT,UAAU,CACV,SAAS,oDAAoD;GAC/D,cAAc,EACZ,SAAS,CACT,UAAU,CACV,SACA,mIAEA;GACF,CAAC;EACF,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,eAAe;AACnC,cAAY,OAAO,KAAK,MAAM;EAC9B,MAAM,KAAK,UAAU,MAAM;AAC3B,MAAI;GACH,MAAM,EAAE,mBAAmB,MAAM,OAAO;AAcxC,UAAO,WAZO,MADG,IAAI,eAAe,GAAG,GAAG,CACb,YAAY,KAAK,YAAY;IACzD,MAAM,KAAK;IACX,OAAO,KAAK;IACZ,MAAM,KAAK;IACX,UAAU,KAAK;IACf,QAAQ,KAAK;IACb,cAAc,KAAK;IACnB,YAAY,KAAK;IACjB,SAAS,KAAK;IACd,YAAY,KAAK;IACjB,cAAc,KAAK;IACnB,CAAC,CACsB;WAChB,OAAO;AACf,UAAO,oBAAoB,OAAO,qBAAqB;;GAGzD;AAED,QAAO,aACN,uBACA;EACC,OAAO;EACP,aACC;EAED,aAAa,EAAE,OAAO;GACrB,YAAY,EAAE,QAAQ,CAAC,SAAS,kBAAkB;GAClD,WAAW,EAAE,QAAQ,CAAC,SAAS,uBAAuB;GACtD,CAAC;EACF,aAAa,EAAE,iBAAiB,MAAM;EACtC,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,eAAe;AACnC,cAAY,OAAO,KAAK,MAAM;EAC9B,MAAM,KAAK,UAAU,MAAM;AAC3B,MAAI;GACH,MAAM,EAAE,mBAAmB,MAAM,OAAO;AAExC,SADiB,IAAI,eAAe,GAAG,GAAG,CAC3B,YAAY,KAAK,YAAY,KAAK,UAAU;AAC3D,UAAO,WAAW;IAAE,SAAS,KAAK;IAAW,YAAY,KAAK;IAAY,CAAC;WACnE,OAAO;AACf,UAAO,oBAAoB,OAAO,qBAAqB;;GAGzD;AAMD,QAAO,aACN,cACA;EACC,OAAO;EACP,aACC;EAGD,aAAa,EAAE,OAAO;GACrB,UAAU,EACR,QAAQ,CACR,UAAU,CACV,SAAS,gEAAgE;GAC3E,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,yBAAyB;GACrF,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,oBAAoB;GAC5E,CAAC;EACF,aAAa,EAAE,cAAc,MAAM;EACnC,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,aAAa;AAEjC,SAAO,OACN,MAFU,UAAU,MAAM,CAEjB,gBAAgB;GACxB,UAAU,KAAK;GACf,OAAO,KAAK;GACZ,QAAQ,KAAK;GACb,CAAC,CACF;GAEF;AAED,QAAO,aACN,gBACA;EACC,OAAO;EACP,aACC;EAOD,aAAa,EAAE,OAAO;GACrB,UAAU,EAAE,QAAQ,CAAC,SAAS,sCAAsC;GACpE,UAAU,EAAE,QAAQ,CAAC,SAAS,+BAA+B;GAC7D,YAAY,EAAE,QAAQ,CAAC,SAAS,4CAA4C;GAC5E,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,SAAS,qBAAqB;GAC9E,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,wBAAwB;GAC/E,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,yBAAyB;GACjF,aAAa,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,yCAAyC;GACrF,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,kCAAkC;GAC3E,eAAe,EACb,QAAQ,CACR,UAAU,CACV,SAAS,kDAAkD;GAC7D,CAAC;EACF,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,cAAc;AAClC,cAAY,OAAO,KAAK,OAAO;EAC/B,MAAM,EAAE,QAAQ,WAAW,SAAS,MAAM;AAC1C,SAAO,OACN,MAAM,OAAO,kBAAkB;GAC9B,UAAU,KAAK;GACf,UAAU,KAAK;GACf,YAAY,KAAK;GACjB,MAAM,KAAK;GACX,OAAO,KAAK;GACZ,QAAQ,KAAK;GACb,aAAa,KAAK;GAClB,UAAU,KAAK;GACf,eAAe,KAAK;GACpB,UAAU;GACV,CAAC,CACF;GAEF;AAED,QAAO,aACN,aACA;EACC,OAAO;EACP,aACC;EAED,aAAa,EAAE,OAAO,EACrB,IAAI,EAAE,QAAQ,CAAC,SAAS,gBAAgB,EACxC,CAAC;EACF,aAAa,EAAE,cAAc,MAAM;EACnC,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,aAAa;AAEjC,SAAO,OAAO,MADH,UAAU,MAAM,CACJ,eAAe,KAAK,GAAG,CAAC;GAEhD;AAED,QAAO,aACN,gBACA;EACC,OAAO;EACP,aACC;EAED,aAAa,EAAE,OAAO;GACrB,IAAI,EAAE,QAAQ,CAAC,SAAS,gBAAgB;GACxC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,6BAA6B;GACjE,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,eAAe;GACvD,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,wBAAwB;GACpE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,yBAAyB;GACtE,CAAC;EACF,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,cAAc;AAClC,cAAY,OAAO,KAAK,OAAO;EAC/B,MAAM,KAAK,UAAU,MAAM;EAG3B,MAAM,WAAW,MAAM,GAAG,eAAe,KAAK,GAAG;AACjD,MAAI,CAAC,SAAS,QACb,QAAO,OAAO,SAAS;EAExB,MAAM,QAAS,SAAS,MAA8C;AAItE,mBAAiB,OADA,OAAO,OAAO,aAAa,WAAW,MAAM,WAAW,IACtC,kBAAkB,iBAAiB;AAErE,SAAO,OACN,MAAM,GAAG,kBAAkB,KAAK,IAAI;GACnC,KAAK,KAAK;GACV,SAAS,KAAK;GACd,OAAO,KAAK;GACZ,QAAQ,KAAK;GACb,CAAC,CACF;GAEF;AAED,QAAO,aACN,gBACA;EACC,OAAO;EACP,aACC;EAGD,aAAa,EAAE,OAAO,EACrB,IAAI,EAAE,QAAQ,CAAC,SAAS,gBAAgB,EACxC,CAAC;EACF,aAAa,EAAE,iBAAiB,MAAM;EACtC,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,cAAc;AAClC,cAAY,OAAO,KAAK,OAAO;EAC/B,MAAM,KAAK,UAAU,MAAM;EAG3B,MAAM,WAAW,MAAM,GAAG,eAAe,KAAK,GAAG;AACjD,MAAI,CAAC,SAAS,QACb,QAAO,OAAO,SAAS;EAExB,MAAM,QAAS,SAAS,MAA8C;AAItE,mBAAiB,OADA,OAAO,OAAO,aAAa,WAAW,MAAM,WAAW,IACtC,oBAAoB,mBAAmB;AAEzE,SAAO,OAAO,MAAM,GAAG,kBAAkB,KAAK,GAAG,CAAC;GAEnD;AAMD,QAAO,aACN,UACA;EACC,OAAO;EACP,aACC;EAID,aAAa,EAAE,OAAO;GACrB,OAAO,EAAE,QAAQ,CAAC,SAAS,oBAAoB;GAC/C,aAAa,EACX,MAAM,EAAE,QAAQ,CAAC,CACjB,UAAU,CACV,SAAS,6DAA6D;GACxE,QAAQ,EACN,QAAQ,CACR,UAAU,CACV,SAAS,wDAAwD;GACnE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,2BAA2B;GACtF,CAAC;EACF,aAAa,EAAE,cAAc,MAAM;EACnC,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,eAAe;EACnC,MAAM,KAAK,UAAU,MAAM;AAC3B,MAAI;GACH,MAAM,EAAE,iBAAiB,MAAM,OAAO;AAMtC,UAAO,WALS,MAAM,aAAa,GAAG,IAAI,KAAK,OAAO;IACrD,aAAa,KAAK;IAClB,QAAQ,KAAK;IACb,OAAO,KAAK;IACZ,CAAC,CACwB;WAClB,OAAO;AACf,UAAO,oBAAoB,OAAO,eAAe;;GAGnD;AAMD,QAAO,aACN,iBACA;EACC,OAAO;EACP,aACC;EAID,aAAa,EAAE,OAAO,EACrB,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,kCAAkC,EACzE,CAAC;EACF,aAAa,EAAE,cAAc,MAAM;EACnC,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,eAAe;EACnC,MAAM,KAAK,UAAU,MAAM;AAC3B,MAAI;GACH,MAAM,EAAE,uBAAuB,MAAM,OAAO;AAC5C,UAAO,OAAO,MAAM,mBAAmB,GAAG,IAAI,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC;WAC/D,OAAO;AACf,UAAO,oBAAoB,OAAO,sBAAsB;;GAG1D;AAED,QAAO,aACN,uBACA;EACC,OAAO;EACP,aACC;EAGD,aAAa,EAAE,OAAO;GACrB,UAAU,EAAE,QAAQ,CAAC,SAAS,4CAA4C;GAC1E,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,yBAAyB;GACrF,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,oBAAoB;GAC5E,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,kCAAkC;GACzE,CAAC;EACF,aAAa,EAAE,cAAc,MAAM;EACnC,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,eAAe;EACnC,MAAM,KAAK,UAAU,MAAM;AAC3B,MAAI;GACH,MAAM,EAAE,uBAAuB,MAAM,OAAO;GAC5C,MAAM,aAAa,MAAM,mBAAmB,GAAG,IAAI,EAAE,QAAQ,KAAK,QAAQ,CAAC;AAC3E,OAAI,CAAC,WAAW,QAAS,QAAO,OAAO,WAAW;AAKlD,OAAI,CAHgB,WAAW,KAC7B,WAC0B,MAAM,MAAwB,EAAE,SAAS,KAAK,SAAS,CACpE,QAAO,aAAa,aAAa,aAAa,KAAK,SAAS,aAAa;GAExF,MAAM,EAAE,uBAAuB,MAAM,OAAO;GAC5C,MAAM,EAAE,cAAc,cAAc,uBACnC,MAAM,OAAO;GACd,MAAM,OAAO,IAAI,mBAAmB,GAAG,GAAG;GAC1C,MAAM,QAAQ,KAAK,IAAI,KAAK,SAAS,IAAI,IAAI;GAC7C,MAAM,QAAQ,MAAM,KAAK,WAAW,KAAK,UAAU,EAAE,QAAQ,KAAK,QAAQ,CAAC;GAQ3E,IAAI,WAAW;AACf,OAAI,KAAK,QAAQ;IAChB,IAAI;AACJ,QAAI;AACH,eAAU,aAAa,KAAK,OAAO;aAC3B,OAAO;AACf,SAAI,iBAAiB,mBACpB,QAAO,aAAa,kBAAkB,MAAM,QAAQ;AAErD,WAAM;;AAKP,eAAW,MAAM,WACf,MACA,EAAE,QAAQ,QAAQ,cAAe,EAAE,UAAU,QAAQ,cAAc,EAAE,KAAK,QAAQ,GACnF;AACD,QAAI,WAAW,EAAG,YAAW,MAAM;;GAGpC,MAAM,OAAO,MAAM,MAAM,UAAU,WAAW,MAAM;GACpD,MAAM,UAAU,WAAW,QAAQ,MAAM;GACzC,MAAM,OAAO,KAAK,GAAG,GAAG;GACxB,MAAM,aAAa,WAAW,OAAO,aAAa,KAAK,OAAO,KAAK,GAAG,GAAG;AAEzE,UAAO,WAAW;IACjB,OAAO,KAAK,KAAK,OAAO;KACvB,IAAI,EAAE;KACN,MAAM,EAAE;KACR,MAAM,EAAE;KACR,OAAO,EAAE;KACT,UAAU,EAAE;KACZ,aAAa,OAAO,EAAE,MAAM,gBAAgB,WAAW,EAAE,KAAK,cAAc;KAC5E,QAAQ,EAAE;KACV,kBAAkB,EAAE;KACpB,EAAE;IACH;IACA,CAAC;WACM,OAAO;AACf,UAAO,oBAAoB,OAAO,4BAA4B;;GAGhE;AAED,QAAO,aACN,wBACA;EACC,OAAO;EACP,aACC;EAKD,aAAa,EAAE,OAAO;GACrB,UAAU,EAAE,QAAQ,CAAC,SAAS,4CAA4C;GAC1E,MAAM,EAAE,QAAQ,CAAC,SAAS,mCAAmC;GAC7D,OAAO,EAAE,QAAQ,CAAC,SAAS,eAAe;GAC1C,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,6CAA6C;GACtF,aAAa,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,0BAA0B;GACtE,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,sCAAsC;GAC7E,eAAe,EACb,QAAQ,CACR,UAAU,CACV,SAAS,4DAA4D;GACvE,CAAC;EACF,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,oBAAoB;AACxC,cAAY,OAAO,KAAK,OAAO;EAC/B,MAAM,KAAK,UAAU,MAAM;AAC3B,MAAI;GACH,MAAM,EAAE,qBAAqB,MAAM,OAAO;AAC1C,UAAO,OACN,MAAM,iBAAiB,GAAG,IAAI,KAAK,UAAU;IAC5C,MAAM,KAAK;IACX,OAAO,KAAK;IACZ,UAAU,KAAK;IACf,aAAa,KAAK;IAClB,QAAQ,KAAK;IACb,eAAe,KAAK;IACpB,CAAC,CACF;WACO,OAAO;AACf,UAAO,oBAAoB,OAAO,6BAA6B;;GAGjE;AAED,QAAO,aACN,wBACA;EACC,OAAO;EACP,aACC;EAOD,aAAa,EAAE,OAAO;GACrB,UAAU,EAAE,QAAQ,CAAC,SAAS,4CAA4C;GAC1E,UAAU,EAAE,QAAQ,CAAC,SAAS,qCAAqC;GACnE,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,4CAA4C;GACjF,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,mBAAmB;GACzD,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,qCAAqC;GACzF,aAAa,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,kBAAkB;GAC9D,CAAC;EACF,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,oBAAoB;AACxC,cAAY,OAAO,KAAK,OAAO;EAC/B,MAAM,KAAK,UAAU,MAAM;AAC3B,MAAI;GACH,MAAM,EAAE,qBAAqB,MAAM,OAAO;AAC1C,UAAO,OACN,MAAM,iBAAiB,GAAG,IAAI,KAAK,UAAU,KAAK,UAAU;IAC3D,MAAM,KAAK;IACX,OAAO,KAAK;IACZ,UAAU,KAAK;IACf,aAAa,KAAK;IAClB,CAAC,CACF;WACO,OAAO;AACf,UAAO,oBAAoB,OAAO,6BAA6B;;GAGjE;AAED,QAAO,aACN,wBACA;EACC,OAAO;EACP,aACC;EAGD,aAAa,EAAE,OAAO;GACrB,UAAU,EAAE,QAAQ,CAAC,SAAS,gBAAgB;GAC9C,UAAU,EAAE,QAAQ,CAAC,SAAS,6BAA6B;GAC3D,CAAC;EACF,aAAa,EAAE,iBAAiB,MAAM;EACtC,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,oBAAoB;AACxC,cAAY,OAAO,KAAK,OAAO;EAC/B,MAAM,KAAK,UAAU,MAAM;AAC3B,MAAI;GACH,MAAM,EAAE,qBAAqB,MAAM,OAAO;AAC1C,UAAO,OAAO,MAAM,iBAAiB,GAAG,IAAI,KAAK,UAAU,KAAK,SAAS,CAAC;WAClE,OAAO;AACf,UAAO,oBAAoB,OAAO,6BAA6B;;GAGjE;AAED,QAAO,aACN,8BACA;EACC,OAAO;EACP,aACC;EACD,aAAa,EAAE,OAAO,EACrB,IAAI,EAAE,QAAQ,CAAC,SAAS,iCAAiC,EACzD,CAAC;EACF,aAAa,EAAE,cAAc,MAAM;EACnC,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,eAAe;EACnC,MAAM,KAAK,UAAU,MAAM;AAC3B,MAAI;GACH,MAAM,EAAE,2BAA2B,MAAM,OAAO;AAChD,UAAO,OAAO,MAAM,uBAAuB,GAAG,IAAI,KAAK,GAAG,CAAC;WACnD,OAAO;AACf,UAAO,oBAAoB,OAAO,0BAA0B;;GAG9D;AAMD,QAAO,aACN,aACA;EACC,OAAO;EACP,aACC;EAGD,aAAa,EAAE,OAAO,EACrB,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,kCAAkC,EACzE,CAAC;EACF,aAAa,EAAE,cAAc,MAAM;EACnC,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,eAAe;EACnC,MAAM,KAAK,UAAU,MAAM;AAC3B,MAAI;GACH,MAAM,EAAE,mBAAmB,MAAM,OAAO;AACxC,UAAO,OAAO,MAAM,eAAe,GAAG,IAAI,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC;WAC3D,OAAO;AACf,UAAO,oBAAoB,OAAO,kBAAkB;;GAGtD;AAED,QAAO,aACN,YACA;EACC,OAAO;EACP,aACC;EAED,aAAa,EAAE,OAAO;GACrB,MAAM,EAAE,QAAQ,CAAC,SAAS,oCAAoC;GAC9D,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,iCAAiC;GACxE,CAAC;EACF,aAAa,EAAE,cAAc,MAAM;EACnC,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,eAAe;EACnC,MAAM,KAAK,UAAU,MAAM;AAC3B,MAAI;GACH,MAAM,EAAE,kBAAkB,MAAM,OAAO;AACvC,UAAO,OAAO,MAAM,cAAc,GAAG,IAAI,KAAK,MAAM,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC;WACrE,OAAO;AACf,UAAO,oBAAoB,OAAO,iBAAiB;;GAGrD;AAED,QAAO,aACN,qBACA;EACC,OAAO;EACP,aACC;EACD,aAAa,EAAE,OAAO,EACrB,IAAI,EAAE,QAAQ,CAAC,SAAS,iCAAiC,EACzD,CAAC;EACF,aAAa,EAAE,cAAc,MAAM;EACnC,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,eAAe;EACnC,MAAM,KAAK,UAAU,MAAM;AAC3B,MAAI;GACH,MAAM,EAAE,2BAA2B,MAAM,OAAO;AAChD,UAAO,OAAO,MAAM,uBAAuB,GAAG,IAAI,KAAK,GAAG,CAAC;WACnD,OAAO;AACf,UAAO,oBAAoB,OAAO,0BAA0B;;GAG9D;AAED,QAAO,aACN,eACA;EACC,OAAO;EACP,aACC;EAQD,aAAa,EAAE,OAAO;GACrB,MAAM,EACJ,QAAQ,CACR,MAAM,wBAAwB,CAC9B,SAAS,8DAA8D;GACzE,OAAO,EAAE,QAAQ,CAAC,SAAS,6BAA6B;GACxD,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,sCAAsC;GAC7E,eAAe,EACb,QAAQ,CACR,UAAU,CACV,SAAS,sDAAsD;GACjE,CAAC;EACF,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,eAAe;AACnC,cAAY,OAAO,KAAK,OAAO;EAC/B,MAAM,KAAK,UAAU,MAAM;AAC3B,MAAI;GACH,MAAM,EAAE,qBAAqB,MAAM,OAAO;AAC1C,UAAO,OACN,MAAM,iBAAiB,GAAG,IAAI;IAC7B,MAAM,KAAK;IACX,OAAO,KAAK;IACZ,QAAQ,KAAK;IACb,eAAe,KAAK;IACpB,CAAC,CACF;WACO,OAAO;AACf,UAAO,oBAAoB,OAAO,oBAAoB;;GAGxD;AAED,QAAO,aACN,eACA;EACC,OAAO;EACP,aACC;EAED,aAAa,EAAE,OAAO;GACrB,MAAM,EAAE,QAAQ,CAAC,SAAS,sBAAsB;GAChD,OAAO,EAAE,QAAQ,CAAC,SAAS,oBAAoB;GAC/C,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,+BAA+B;GACtE,CAAC;EACF,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,eAAe;AACnC,cAAY,OAAO,KAAK,OAAO;EAC/B,MAAM,KAAK,UAAU,MAAM;AAC3B,MAAI;GACH,MAAM,EAAE,qBAAqB,MAAM,OAAO;AAC1C,UAAO,OACN,MAAM,iBAAiB,GAAG,IAAI,KAAK,MAAM;IAAE,OAAO,KAAK;IAAO,QAAQ,KAAK;IAAQ,CAAC,CACpF;WACO,OAAO;AACf,UAAO,oBAAoB,OAAO,oBAAoB;;GAGxD;AAED,QAAO,aACN,eACA;EACC,OAAO;EACP,aACC;EAED,aAAa,EAAE,OAAO;GACrB,MAAM,EAAE,QAAQ,CAAC,SAAS,sBAAsB;GAChD,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,+BAA+B;GACtE,CAAC;EACF,aAAa,EAAE,iBAAiB,MAAM;EACtC,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,eAAe;AACnC,cAAY,OAAO,KAAK,OAAO;EAC/B,MAAM,KAAK,UAAU,MAAM;AAC3B,MAAI;GACH,MAAM,EAAE,qBAAqB,MAAM,OAAO;AAC1C,UAAO,OAAO,MAAM,iBAAiB,GAAG,IAAI,KAAK,MAAM,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC;WACxE,OAAO;AACf,UAAO,oBAAoB,OAAO,oBAAoB;;GAGxD;AAED,QAAO,aACN,kBACA;EACC,OAAO;EACP,aACC;EAKD,aAAa,EAAE,OAAO;GACrB,MAAM,EAAE,QAAQ,CAAC,SAAS,sBAAsB;GAChD,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,gCAAgC;GACvE,OAAO,EACL,MACA,EAAE,OAAO;IACR,OAAO,EAAE,QAAQ,CAAC,SAAS,oBAAoB;IAC/C,MAAM,EACJ,KAAK;KAAC;KAAU;KAAQ;KAAQ;KAAY;KAAa,CAAC,CAC1D,SAAS,YAAY;IACvB,WAAW,EACT,QAAQ,CACR,UAAU,CACV,SAAS,kDAAkD;IAC7D,qBAAqB,EACnB,QAAQ,CACR,UAAU,CACV,SAAS,gDAAgD;IAC3D,aAAa,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,wCAAwC;IACpF,WAAW,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,uBAAuB;IACjE,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,uCAAuC;IAC9E,YAAY,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,8BAA8B;IAMzE,aAAa,EACX,QAAQ,CACR,KAAK,CACL,aAAa,CACb,UAAU,CACV,SACA,0FACA;IACF,CAAC,CACF,CACA,SAAS,6BAA6B;GACxC,CAAC;EACF,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,eAAe;AACnC,cAAY,OAAO,KAAK,OAAO;EAC/B,MAAM,KAAK,UAAU,MAAM;AAC3B,MAAI;GACH,MAAM,EAAE,uBAAuB,MAAM,OAAO;AAC5C,UAAO,OACN,MAAM,mBAAmB,GAAG,IAAI,KAAK,MAAM,KAAK,OAAO,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAC/E;WACO,OAAO;AACf,UAAO,oBAAoB,OAAO,uBAAuB;;GAG3D;AAMD,QAAO,aACN,iBACA;EACC,OAAO;EACP,aACC;EAGD,aAAa,EAAE,OAAO;GACrB,YAAY,EAAE,QAAQ,CAAC,SAAS,kBAAkB;GAClD,IAAI,EAAE,QAAQ,CAAC,SAAS,0BAA0B;GAClD,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,6BAA6B;GACxF,CAAC;EACF,aAAa,EAAE,cAAc,MAAM;EACnC,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,eAAe;AACnC,qBAAmB,MAAM;AAEzB,SAAO,OACN,MAFU,UAAU,MAAM,CAEjB,mBAAmB,KAAK,YAAY,KAAK,IAAI,EACrD,OAAO,KAAK,OACZ,CAAC,CACF;GAEF;AAED,QAAO,aACN,oBACA;EACC,OAAO;EACP,aACC;EAGD,aAAa,EAAE,OAAO,EACrB,YAAY,EAAE,QAAQ,CAAC,SAAS,yBAAyB,EACzD,CAAC;EACF,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,gBAAgB;AACpC,cAAY,OAAO,KAAK,OAAO;EAC/B,MAAM,EAAE,QAAQ,WAAW,SAAS,MAAM;EAG1C,MAAM,WAAW,MAAM,OAAO,kBAAkB,KAAK,WAAW;AAChE,MAAI,CAAC,SAAS,QACb,QAAO,OAAO,SAAS;EAExB,MAAM,UAAU,SAAS,MAAM;AAC/B,MAAI,CAAC,SAAS,cAAc,CAAC,SAAS,QACrC,QAAO,aACN,oBACA,oDACA;EAIF,MAAM,WAAW,MAAM,OAAO,iBAAiB,QAAQ,YAAY,QAAQ,QAAQ;AACnF,MAAI,CAAC,SAAS,QACb,QAAO,OAAO,SAAS;AAExB,mBACC,OACA,uBAAuB,SAAS,KAAK,EACrC,oBACA,mBACA;AAED,SAAO,OAAO,MAAM,OAAO,sBAAsB,KAAK,YAAY,OAAO,CAAC;GAE3E;AAMD,QAAO,aACN,gBACA;EACC,OAAO;EACP,aACC;EAID,aAAa,EAAE,OAAO,EAAE,CAAC;EACzB,aAAa,EAAE,cAAc,MAAM;EACnC,EACD,OAAO,OAAO,UAAU;AACvB,eAAa,OAAO,gBAAgB;AACpC,cAAY,OAAO,KAAK,OAAO;EAC/B,MAAM,KAAK,UAAU,MAAM;AAC3B,MAAI;GACH,MAAM,EAAE,sBAAsB,MAAM,OAAO;AAC3C,UAAO,OAAO,MAAM,kBAAkB,GAAG,IAAI,GAAG,QAAQ,CAAC;WACjD,OAAO;AACf,UAAO,oBAAoB,OAAO,sBAAsB;;GAG1D;AAED,QAAO,aACN,mBACA;EACC,OAAO;EACP,aACC;EAMD,aAAa,EAAE,OAAO;GACrB,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,aAAa;GACnD,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,mCAAmC;GAC3E,MAAM,6BACJ,UAAU,CACV,SAAS,2CAA2C;GACtD,SAAS,6BACP,UAAU,CACV,SAAS,8CAA8C;GACzD,KAAK,EACH,MAAM,CACN,EACE,QAAQ,CACR,KAAK,CACL,QAAQ,MAAM,oBAAoB,KAAK,EAAE,EAAE,6BAA6B,EAC1E,EAAE,QAAQ,GAAG,CACb,CAAC,CACD,UAAU,CACV,SAAS,8DAA8D;GACzE,cAAc,EACZ,QAAQ,CACR,KAAK,CACL,IAAI,EAAE,CACN,IAAI,IAAI,CACR,UAAU,CACV,SAAS,yCAAyC;GACpD,YAAY,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,2BAA2B;GACtE,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,2BAA2B;GACpE,QAAQ,qBAAqB,UAAU,CAAC,SAAS,wBAAwB;GACzE,KAAK,kBAAkB,UAAU,CAAC,SAAS,yBAAyB;GACpE,CAAC;EACF,EACD,OAAO,MAAM,UAAU;AACtB,eAAa,OAAO,kBAAkB;AACtC,cAAY,OAAO,KAAK,MAAM;EAC9B,MAAM,KAAK,UAAU,MAAM;AAC3B,MAAI;GACH,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,OAAO,MAAM,qBAAqB,GAAG,IAAI,GAAG,SAAS,KAAK,CAAC;WAC1D,OAAO;AACf,UAAO,oBAAoB,OAAO,wBAAwB;;GAG5D;AAED,QAAO;;;;;;;;;;;;;;;;;ACxvER,MAAa,YAAY;AAEzB,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,OACJ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,KACJ,QAAO,SAAS,gBAAgB,2BAA2B,IAAI;CAGhE,MAAM,SAAS,iBAAiB;AAEhC,KAAI;EACH,MAAM,YAAY,IAAI,yCAAyC,EAE9D,oBAAoB,QACpB,CAAC;AAEF,QAAM,OAAO,QAAQ,UAAU;AAE/B,SAAO,MAAM,UAAU,cAAc,SAAS,EAC7C,UAAU;GACT,OAAO;GACP,UAAU;GACV,QAAQ,EAAE;GACV,OAAO;IACN;IACA,QAAQ,KAAK;IACb,UAAU,KAAK;IACf,aAAa,OAAO;IACpB;GACD,EACD,CAAC;UACM,OAAO;AACf,UAAQ,MAAM,SAAS,MAAM;AAC7B,QAAM,OAAO,OAAO,CAAC,YAAY,GAAG;AAEpC,SAAO,IAAI,SACV,KAAK,UAAU;GACd,SAAS;GACT,OAAO;IACN,MAAM;IACN,SAAS;IACT;GACD,IAAI;GACJ,CAAC,EACF;GACC,QAAQ;GACR,SAAS;IACR,gBAAgB;IAChB,iBAAiB;IACjB;GACD,CACD;;;;;;AAOH,MAAa,MAAgB,YAAY;AACxC,QAAO,IAAI,SACV,KAAK,UAAU;EACd,SAAS;EACT,OAAO;GACN,MAAM;GACN,SAAS;GACT;EACD,IAAI;EACJ,CAAC,EACF;EACC,QAAQ;EACR,SAAS;GACR,gBAAgB;GAChB,iBAAiB;GACjB;EACD,CACD;;;;;AAMF,MAAa,SAAmB,YAAY;AAC3C,QAAO,IAAI,SACV,KAAK,UAAU;EACd,SAAS;EACT,OAAO;GACN,MAAM;GACN,SAAS;GACT;EACD,IAAI;EACJ,CAAC,EACF;EACC,QAAQ;EACR,SAAS;GACR,gBAAgB;GAChB,iBAAiB;GACjB;EACD,CACD"}

package/dist/astro/routes/api/media/_id_/confirm.d.mts

@@ -0,0 +1,11 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/media/[id]/confirm.d.ts
+declare const prerender = false;
+/**
+ * Confirm upload completion
+ */
+declare const POST: APIRoute;
+//#endregion
+export { POST, prerender };
+//# sourceMappingURL=confirm.d.mts.map

package/dist/astro/routes/api/media/_id_/confirm.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirm.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/media/[id]/confirm.ts"],"mappings":";;;cAkBa,SAAA;;;;cAeA,IAAA,EAAM,QAAA"}

package/dist/astro/routes/api/media/_id_/confirm.mjs

@@ -0,0 +1,61 @@
+import "../../../../../base64-CqR-7kqF.mjs";
+import "../../../../../types-CwXMEPRr.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-tSQWIl5U.mjs";
+import { r as parseOptionalBody, t as isParseError } from "../../../../../parse-BFTPon-J.mjs";
+import { Vt as mediaConfirmBody } from "../../../../../redirects-Dmj6KRU3.mjs";
+import "../../../../../setup-BGAJ2uXs.mjs";
+import "../../../../../api/schemas/index.mjs";
+import { n as requirePerm, t as requireOwnerPerm } from "../../../../../authorize-BlyCH-96.mjs";
+import { MediaRepository } from "emdash";
+
+//#region src/astro/routes/api/media/[id]/confirm.ts
+const prerender = false;
+/**
+* Add URL to media item (relative URL for portability)
+*/
+function addUrlToMedia(item) {
+	return {
+		...item,
+		url: `/_emdash/api/media/file/${item.storageKey}`
+	};
+}
+/**
+* Confirm upload completion
+*/
+const POST = async ({ params, request, locals }) => {
+	const { emdash, user } = locals;
+	const { id } = params;
+	const denied = requirePerm(user, "media:upload");
+	if (denied) return denied;
+	if (!id) return apiError("INVALID_REQUEST", "Media ID is required", 400);
+	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	try {
+		const body = await parseOptionalBody(request, mediaConfirmBody, {});
+		if (isParseError(body)) return body;
+		const repo = new MediaRepository(emdash.db);
+		const existing = await repo.findById(id);
+		if (!existing) return apiError("NOT_FOUND", `Media item not found: ${id}`, 404);
+		if (existing.status !== "pending") return apiError("INVALID_STATE", `Media item is not pending: ${existing.status}`, 400);
+		const ownerDenied = requireOwnerPerm(user, existing.authorId ?? "", "media:edit_own", "media:edit_any");
+		if (ownerDenied) return ownerDenied;
+		if (emdash.storage) {
+			if (!await emdash.storage.exists(existing.storageKey)) {
+				await repo.markFailed(id);
+				return apiError("FILE_NOT_FOUND", "File was not uploaded to storage", 400);
+			}
+		}
+		const item = await repo.confirmUpload(id, {
+			size: body.size,
+			width: body.width,
+			height: body.height
+		});
+		if (!item) return apiError("CONFIRM_FAILED", "Failed to confirm upload", 500);
+		return apiSuccess({ item: addUrlToMedia(item) });
+	} catch (error) {
+		return handleError(error, "Failed to confirm upload", "CONFIRM_ERROR");
+	}
+};
+
+//#endregion
+export { POST, prerender };
+//# sourceMappingURL=confirm.mjs.map

package/dist/astro/routes/api/media/_id_/confirm.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirm.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/media/[id]/confirm.ts"],"sourcesContent":["/**\n * Confirm media upload endpoint\n *\n * POST /_emdash/api/media/{id}/confirm\n *\n * Confirms that the client has successfully uploaded the file to storage.\n * Marks the media record as ready and optionally updates metadata.\n */\n\nimport type { APIRoute } from \"astro\";\nimport { MediaRepository } from \"emdash\";\n\nimport { requireOwnerPerm, requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseOptionalBody } from \"#api/parse.js\";\nimport { mediaConfirmBody } from \"#api/schemas.js\";\nimport type { MediaItem } from \"#types\";\n\nexport const prerender = false;\n\n/**\n * Add URL to media item (relative URL for portability)\n */\nfunction addUrlToMedia(item: MediaItem): MediaItem & { url: string } {\n\treturn {\n\t\t...item,\n\t\turl: `/_emdash/api/media/file/${item.storageKey}`,\n\t};\n}\n\n/**\n * Confirm upload completion\n */\nexport const POST: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tconst denied = requirePerm(user, \"media:upload\");\n\tif (denied) return denied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Media ID is required\", 400);\n\t}\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\tconst body = await parseOptionalBody(request, mediaConfirmBody, {});\n\t\tif (isParseError(body)) return body;\n\n\t\tconst repo = new MediaRepository(emdash.db);\n\n\t\t// Get the media item first to check status\n\t\tconst existing = await repo.findById(id);\n\t\tif (!existing) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Media item not found: ${id}`, 404);\n\t\t}\n\n\t\tif (existing.status !== \"pending\") {\n\t\t\treturn apiError(\"INVALID_STATE\", `Media item is not pending: ${existing.status}`, 400);\n\t\t}\n\n\t\t// Only the uploader or a user with media:edit_any can confirm/fail a pending upload\n\t\tconst ownerDenied = requireOwnerPerm(\n\t\t\tuser,\n\t\t\texisting.authorId ?? \"\",\n\t\t\t\"media:edit_own\",\n\t\t\t\"media:edit_any\",\n\t\t);\n\t\tif (ownerDenied) return ownerDenied;\n\n\t\t// Optionally verify the file exists in storage\n\t\tif (emdash.storage) {\n\t\t\tconst exists = await emdash.storage.exists(existing.storageKey);\n\t\t\tif (!exists) {\n\t\t\t\t// Mark as failed\n\t\t\t\tawait repo.markFailed(id);\n\t\t\t\treturn apiError(\"FILE_NOT_FOUND\", \"File was not uploaded to storage\", 400);\n\t\t\t}\n\t\t}\n\n\t\t// Confirm the upload\n\t\tconst item = await repo.confirmUpload(id, {\n\t\t\tsize: body.size,\n\t\t\twidth: body.width,\n\t\t\theight: body.height,\n\t\t});\n\n\t\tif (!item) {\n\t\t\treturn apiError(\"CONFIRM_FAILED\", \"Failed to confirm upload\", 500);\n\t\t}\n\n\t\t// Add URL to the response (relative URL for portability)\n\t\tconst itemWithUrl = addUrlToMedia(item);\n\n\t\treturn apiSuccess({ item: itemWithUrl });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to confirm upload\", \"CONFIRM_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;AAkBA,MAAa,YAAY;;;;AAKzB,SAAS,cAAc,MAA8C;AACpE,QAAO;EACN,GAAG;EACH,KAAK,2BAA2B,KAAK;EACrC;;;;;AAMF,MAAa,OAAiB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACpE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAEf,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,wBAAwB,IAAI;AAGhE,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EACH,MAAM,OAAO,MAAM,kBAAkB,SAAS,kBAAkB,EAAE,CAAC;AACnE,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,OAAO,IAAI,gBAAgB,OAAO,GAAG;EAG3C,MAAM,WAAW,MAAM,KAAK,SAAS,GAAG;AACxC,MAAI,CAAC,SACJ,QAAO,SAAS,aAAa,yBAAyB,MAAM,IAAI;AAGjE,MAAI,SAAS,WAAW,UACvB,QAAO,SAAS,iBAAiB,8BAA8B,SAAS,UAAU,IAAI;EAIvF,MAAM,cAAc,iBACnB,MACA,SAAS,YAAY,IACrB,kBACA,iBACA;AACD,MAAI,YAAa,QAAO;AAGxB,MAAI,OAAO,SAEV;OAAI,CADW,MAAM,OAAO,QAAQ,OAAO,SAAS,WAAW,EAClD;AAEZ,UAAM,KAAK,WAAW,GAAG;AACzB,WAAO,SAAS,kBAAkB,oCAAoC,IAAI;;;EAK5E,MAAM,OAAO,MAAM,KAAK,cAAc,IAAI;GACzC,MAAM,KAAK;GACX,OAAO,KAAK;GACZ,QAAQ,KAAK;GACb,CAAC;AAEF,MAAI,CAAC,KACJ,QAAO,SAAS,kBAAkB,4BAA4B,IAAI;AAMnE,SAAO,WAAW,EAAE,MAFA,cAAc,KAAK,EAEA,CAAC;UAChC,OAAO;AACf,SAAO,YAAY,OAAO,4BAA4B,gBAAgB"}

package/dist/astro/routes/api/media/_id_.d.mts

@@ -0,0 +1,23 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/media/[id].d.ts
+declare const prerender = false;
+/**
+ * Get media item
+ */
+declare const GET: APIRoute;
+/**
+ * Update media metadata
+ *
+ * Authors can edit their own media; editors+ can edit any.
+ */
+declare const PUT: APIRoute;
+/**
+ * Delete media item
+ *
+ * Authors can delete their own media; editors+ can delete any.
+ */
+declare const DELETE: APIRoute;
+//#endregion
+export { DELETE, GET, PUT, prerender };
+//# sourceMappingURL=_id_.d.mts.map

package/dist/astro/routes/api/media/_id_.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_id_.d.mts","names":[],"sources":["../../../../../src/astro/routes/api/media/[id].ts"],"mappings":";;;cAea,SAAA;;;;cAKA,GAAA,EAAK,QAAA;AAwBlB;;;;;AAAA,cAAa,GAAA,EAAK,QAAA;;;;;;cAkDL,MAAA,EAAQ,QAAA"}

package/dist/astro/routes/api/media/_id_.mjs

@@ -0,0 +1,83 @@
+import "../../../../base64-CqR-7kqF.mjs";
+import "../../../../types-CwXMEPRr.mjs";
+import { a as unwrapResult, r as handleError, t as apiError } from "../../../../error-tSQWIl5U.mjs";
+import { n as parseBody, t as isParseError } from "../../../../parse-BFTPon-J.mjs";
+import { Yt as mediaUpdateBody } from "../../../../redirects-Dmj6KRU3.mjs";
+import "../../../../setup-BGAJ2uXs.mjs";
+import "../../../../api/schemas/index.mjs";
+import { n as requirePerm, t as requireOwnerPerm } from "../../../../authorize-BlyCH-96.mjs";
+
+//#region src/astro/routes/api/media/[id].ts
+const prerender = false;
+/**
+* Get media item
+*/
+const GET = async ({ params, locals }) => {
+	const { emdash, user } = locals;
+	const { id } = params;
+	const readDenied = requirePerm(user, "media:read");
+	if (readDenied) return readDenied;
+	if (!id) return apiError("INVALID_REQUEST", "Media ID required", 400);
+	if (!emdash?.handleMediaGet) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	return unwrapResult(await emdash.handleMediaGet(id));
+};
+/**
+* Update media metadata
+*
+* Authors can edit their own media; editors+ can edit any.
+*/
+const PUT = async ({ params, request, locals }) => {
+	const { emdash, user } = locals;
+	const { id } = params;
+	const editDenied = requirePerm(user, "media:edit_own");
+	if (editDenied) return editDenied;
+	if (!id) return apiError("INVALID_REQUEST", "Media ID required", 400);
+	if (!emdash?.handleMediaGet || !emdash?.handleMediaUpdate) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	try {
+		const getResult = await emdash.handleMediaGet(id);
+		if (!getResult.success || !getResult.data?.item) return apiError("NOT_FOUND", "Media item not found", 404);
+		const media = getResult.data.item;
+		const ownerDenied = requireOwnerPerm(user, media.authorId, "media:edit_own", "media:edit_any");
+		if (ownerDenied) return ownerDenied;
+		const body = await parseBody(request, mediaUpdateBody);
+		if (isParseError(body)) return body;
+		return unwrapResult(await emdash.handleMediaUpdate(id, {
+			alt: body.alt,
+			caption: body.caption,
+			width: body.width,
+			height: body.height
+		}));
+	} catch (error) {
+		return handleError(error, "Failed to update media", "MEDIA_UPDATE_ERROR");
+	}
+};
+/**
+* Delete media item
+*
+* Authors can delete their own media; editors+ can delete any.
+*/
+const DELETE = async ({ params, locals }) => {
+	const { emdash, user } = locals;
+	const { id } = params;
+	const deleteDenied = requirePerm(user, "media:delete_own");
+	if (deleteDenied) return deleteDenied;
+	if (!id) return apiError("INVALID_REQUEST", "Media ID required", 400);
+	if (!emdash?.handleMediaGet || !emdash?.handleMediaDelete) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	try {
+		const getResult = await emdash.handleMediaGet(id);
+		if (!getResult.success || !getResult.data?.item) return apiError("NOT_FOUND", "Media item not found", 404);
+		const media = getResult.data.item;
+		const ownerDenied = requireOwnerPerm(user, media.authorId, "media:delete_own", "media:delete_any");
+		if (ownerDenied) return ownerDenied;
+		if (emdash.storage) try {
+			await emdash.storage.delete(media.storageKey);
+		} catch {}
+		return unwrapResult(await emdash.handleMediaDelete(id));
+	} catch (error) {
+		return handleError(error, "Failed to delete media", "MEDIA_DELETE_ERROR");
+	}
+};
+
+//#endregion
+export { DELETE, GET, PUT, prerender };
+//# sourceMappingURL=_id_.mjs.map

package/dist/astro/routes/api/media/_id_.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"_id_.mjs","names":[],"sources":["../../../../../src/astro/routes/api/media/[id].ts"],"sourcesContent":["/**\n * Single media item endpoint\n *\n * GET /_emdash/api/media/:id - Get media item\n * PUT /_emdash/api/media/:id - Update media metadata\n * DELETE /_emdash/api/media/:id - Delete media item\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requireOwnerPerm, requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError, unwrapResult } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { mediaUpdateBody } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\n/**\n * Get media item\n */\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tconst readDenied = requirePerm(user, \"media:read\");\n\tif (readDenied) return readDenied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Media ID required\", 400);\n\t}\n\n\tif (!emdash?.handleMediaGet) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst result = await emdash.handleMediaGet(id);\n\treturn unwrapResult(result);\n};\n\n/**\n * Update media metadata\n *\n * Authors can edit their own media; editors+ can edit any.\n */\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\t// Minimum permission gate — ownership checked below\n\tconst editDenied = requirePerm(user, \"media:edit_own\");\n\tif (editDenied) return editDenied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Media ID required\", 400);\n\t}\n\n\tif (!emdash?.handleMediaGet || !emdash?.handleMediaUpdate) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Fetch media item for ownership check\n\t\tconst getResult = await emdash.handleMediaGet(id);\n\t\tif (!getResult.success || !getResult.data?.item) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"Media item not found\", 404);\n\t\t}\n\n\t\tconst media = getResult.data.item;\n\n\t\t// Ownership check: authors can edit own, editors+ can edit any\n\t\tconst ownerDenied = requireOwnerPerm(user, media.authorId, \"media:edit_own\", \"media:edit_any\");\n\t\tif (ownerDenied) return ownerDenied;\n\n\t\tconst body = await parseBody(request, mediaUpdateBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await emdash.handleMediaUpdate(id, {\n\t\t\talt: body.alt,\n\t\t\tcaption: body.caption,\n\t\t\twidth: body.width,\n\t\t\theight: body.height,\n\t\t});\n\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update media\", \"MEDIA_UPDATE_ERROR\");\n\t}\n};\n\n/**\n * Delete media item\n *\n * Authors can delete their own media; editors+ can delete any.\n */\nexport const DELETE: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\t// Minimum permission gate — ownership checked below\n\tconst deleteDenied = requirePerm(user, \"media:delete_own\");\n\tif (deleteDenied) return deleteDenied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Media ID required\", 400);\n\t}\n\n\tif (!emdash?.handleMediaGet || !emdash?.handleMediaDelete) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Fetch media item for ownership check and storage key\n\t\tconst getResult = await emdash.handleMediaGet(id);\n\t\tif (!getResult.success || !getResult.data?.item) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"Media item not found\", 404);\n\t\t}\n\n\t\tconst media = getResult.data.item;\n\n\t\t// Ownership check: authors can delete own, editors+ can delete any\n\t\tconst ownerDenied = requireOwnerPerm(\n\t\t\tuser,\n\t\t\tmedia.authorId,\n\t\t\t\"media:delete_own\",\n\t\t\t\"media:delete_any\",\n\t\t);\n\t\tif (ownerDenied) return ownerDenied;\n\n\t\t// Delete file from storage via the storage adapter\n\t\tif (emdash.storage) {\n\t\t\ttry {\n\t\t\t\tawait emdash.storage.delete(media.storageKey);\n\t\t\t} catch {\n\t\t\t\t// Best-effort — continue with database deletion\n\t\t\t}\n\t\t}\n\n\t\t// Delete from database — site-settings cache invalidation happens\n\t\t// in `EmDashRuntime.handleMediaDelete` so MCP/plugin paths inherit it.\n\t\tconst result = await emdash.handleMediaDelete(id);\n\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to delete media\", \"MEDIA_DELETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;AAeA,MAAa,YAAY;;;;AAKzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAEf,MAAM,aAAa,YAAY,MAAM,aAAa;AAClD,KAAI,WAAY,QAAO;AAEvB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AAG7D,KAAI,CAAC,QAAQ,eACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAIpE,QAAO,aADQ,MAAM,OAAO,eAAe,GAAG,CACnB;;;;;;;AAQ5B,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAGf,MAAM,aAAa,YAAY,MAAM,iBAAiB;AACtD,KAAI,WAAY,QAAO;AAEvB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AAG7D,KAAI,CAAC,QAAQ,kBAAkB,CAAC,QAAQ,kBACvC,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EAEH,MAAM,YAAY,MAAM,OAAO,eAAe,GAAG;AACjD,MAAI,CAAC,UAAU,WAAW,CAAC,UAAU,MAAM,KAC1C,QAAO,SAAS,aAAa,wBAAwB,IAAI;EAG1D,MAAM,QAAQ,UAAU,KAAK;EAG7B,MAAM,cAAc,iBAAiB,MAAM,MAAM,UAAU,kBAAkB,iBAAiB;AAC9F,MAAI,YAAa,QAAO;EAExB,MAAM,OAAO,MAAM,UAAU,SAAS,gBAAgB;AACtD,MAAI,aAAa,KAAK,CAAE,QAAO;AAS/B,SAAO,aAPQ,MAAM,OAAO,kBAAkB,IAAI;GACjD,KAAK,KAAK;GACV,SAAS,KAAK;GACd,OAAO,KAAK;GACZ,QAAQ,KAAK;GACb,CAAC,CAEyB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,0BAA0B,qBAAqB;;;;;;;;AAS3E,MAAa,SAAmB,OAAO,EAAE,QAAQ,aAAa;CAC7D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAGf,MAAM,eAAe,YAAY,MAAM,mBAAmB;AAC1D,KAAI,aAAc,QAAO;AAEzB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AAG7D,KAAI,CAAC,QAAQ,kBAAkB,CAAC,QAAQ,kBACvC,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EAEH,MAAM,YAAY,MAAM,OAAO,eAAe,GAAG;AACjD,MAAI,CAAC,UAAU,WAAW,CAAC,UAAU,MAAM,KAC1C,QAAO,SAAS,aAAa,wBAAwB,IAAI;EAG1D,MAAM,QAAQ,UAAU,KAAK;EAG7B,MAAM,cAAc,iBACnB,MACA,MAAM,UACN,oBACA,mBACA;AACD,MAAI,YAAa,QAAO;AAGxB,MAAI,OAAO,QACV,KAAI;AACH,SAAM,OAAO,QAAQ,OAAO,MAAM,WAAW;UACtC;AAST,SAAO,aAFQ,MAAM,OAAO,kBAAkB,GAAG,CAEtB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,0BAA0B,qBAAqB"}

package/dist/astro/routes/api/media/file/_...key_.d.mts

@@ -0,0 +1,8 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/media/file/[...key].d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+//#endregion
+export { GET, prerender };
+//# sourceMappingURL=_...key_.d.mts.map

package/dist/astro/routes/api/media/file/_...key_.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_...key_.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/media/file/[...key].ts"],"mappings":";;;cAUa,SAAA;AAAA,cAoBA,GAAA,EAAK,QAAA"}

package/dist/astro/routes/api/media/file/_...key_.mjs

@@ -0,0 +1,52 @@
+import "../../../../../base64-CqR-7kqF.mjs";
+import "../../../../../types-CwXMEPRr.mjs";
+import { r as handleError, t as apiError } from "../../../../../error-tSQWIl5U.mjs";
+
+//#region src/astro/routes/api/media/file/[...key].ts
+const prerender = false;
+/**
+* Content types that are safe to display inline (simple raster/vector images, video, audio).
+* Everything else gets Content-Disposition: attachment to prevent script execution.
+*/
+const SAFE_INLINE_TYPES = new Set([
+	"image/jpeg",
+	"image/png",
+	"image/gif",
+	"image/webp",
+	"image/avif",
+	"image/x-icon",
+	"video/mp4",
+	"video/webm",
+	"audio/mpeg",
+	"audio/wav",
+	"audio/ogg"
+]);
+const GET = async ({ params, locals }) => {
+	const { key } = params;
+	const { emdash } = locals;
+	if (!key) return apiError("NOT_FOUND", "File not found", 404);
+	if (!emdash?.storage) return apiError("NOT_CONFIGURED", "Storage not configured", 500);
+	try {
+		const result = await emdash.storage.download(key);
+		const headers = {
+			"Content-Type": result.contentType,
+			"Cache-Control": "public, max-age=31536000, immutable",
+			"X-Content-Type-Options": "nosniff",
+			"Content-Security-Policy": "sandbox; default-src 'none'; img-src 'self'; style-src 'unsafe-inline'"
+		};
+		if (result.size) headers["Content-Length"] = String(result.size);
+		if (SAFE_INLINE_TYPES.has(result.contentType)) headers["Content-Disposition"] = "inline";
+		else headers["Content-Disposition"] = "attachment";
+		return new Response(result.body, {
+			status: 200,
+			headers
+		});
+	} catch (error) {
+		if (error instanceof Error && (error.message.includes("not found") || error.message.includes("NOT_FOUND"))) return apiError("NOT_FOUND", "File not found", 404);
+		return handleError(error, "Failed to serve file", "FILE_SERVE_ERROR");
+	}
+};
+
+//#endregion
+export { GET, prerender };
+//# sourceMappingURL=_...key_.mjs.map

package/dist/astro/routes/api/media/file/_...key_.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"_...key_.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/media/file/[...key].ts"],"sourcesContent":["/**\n * Serve uploaded media files\n *\n * GET /_emdash/api/media/file/:key - Serve file from storage\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { apiError, handleError } from \"#api/error.js\";\n\nexport const prerender = false;\n\n/**\n * Content types that are safe to display inline (simple raster/vector images, video, audio).\n * Everything else gets Content-Disposition: attachment to prevent script execution.\n */\nconst SAFE_INLINE_TYPES = new Set([\n\t\"image/jpeg\",\n\t\"image/png\",\n\t\"image/gif\",\n\t\"image/webp\",\n\t\"image/avif\",\n\t\"image/x-icon\",\n\t\"video/mp4\",\n\t\"video/webm\",\n\t\"audio/mpeg\",\n\t\"audio/wav\",\n\t\"audio/ogg\",\n]);\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { key } = params;\n\tconst { emdash } = locals;\n\n\tif (!key) {\n\t\treturn apiError(\"NOT_FOUND\", \"File not found\", 404);\n\t}\n\n\tif (!emdash?.storage) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"Storage not configured\", 500);\n\t}\n\n\ttry {\n\t\tconst result = await emdash.storage.download(key);\n\n\t\tconst headers: Record<string, string> = {\n\t\t\t\"Content-Type\": result.contentType,\n\t\t\t\"Cache-Control\": \"public, max-age=31536000, immutable\",\n\t\t\t\"X-Content-Type-Options\": \"nosniff\",\n\t\t\t// Sandbox CSP on all user-uploaded content — prevents script execution\n\t\t\t// even for SVGs navigated to directly or content types that support scripting.\n\t\t\t\"Content-Security-Policy\":\n\t\t\t\t\"sandbox; default-src 'none'; img-src 'self'; style-src 'unsafe-inline'\",\n\t\t};\n\n\t\tif (result.size) {\n\t\t\theaders[\"Content-Length\"] = String(result.size);\n\t\t}\n\n\t\t// Safe image/media types can render inline; everything else (SVG, PDF,\n\t\t// HTML, JS, etc.) must be downloaded to prevent stored XSS.\n\t\tif (SAFE_INLINE_TYPES.has(result.contentType)) {\n\t\t\theaders[\"Content-Disposition\"] = \"inline\";\n\t\t} else {\n\t\t\theaders[\"Content-Disposition\"] = \"attachment\";\n\t\t}\n\n\t\treturn new Response(result.body, { status: 200, headers });\n\t} catch (error) {\n\t\t// Check if it's a \"not found\" error\n\t\tif (\n\t\t\terror instanceof Error &&\n\t\t\t(error.message.includes(\"not found\") || error.message.includes(\"NOT_FOUND\"))\n\t\t) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"File not found\", 404);\n\t\t}\n\t\treturn handleError(error, \"Failed to serve file\", \"FILE_SERVE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;AAUA,MAAa,YAAY;;;;;AAMzB,MAAM,oBAAoB,IAAI,IAAI;CACjC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA,CAAC;AAEF,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ;CAChB,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,IACJ,QAAO,SAAS,aAAa,kBAAkB,IAAI;AAGpD,KAAI,CAAC,QAAQ,QACZ,QAAO,SAAS,kBAAkB,0BAA0B,IAAI;AAGjE,KAAI;EACH,MAAM,SAAS,MAAM,OAAO,QAAQ,SAAS,IAAI;EAEjD,MAAM,UAAkC;GACvC,gBAAgB,OAAO;GACvB,iBAAiB;GACjB,0BAA0B;GAG1B,2BACC;GACD;AAED,MAAI,OAAO,KACV,SAAQ,oBAAoB,OAAO,OAAO,KAAK;AAKhD,MAAI,kBAAkB,IAAI,OAAO,YAAY,CAC5C,SAAQ,yBAAyB;MAEjC,SAAQ,yBAAyB;AAGlC,SAAO,IAAI,SAAS,OAAO,MAAM;GAAE,QAAQ;GAAK;GAAS,CAAC;UAClD,OAAO;AAEf,MACC,iBAAiB,UAChB,MAAM,QAAQ,SAAS,YAAY,IAAI,MAAM,QAAQ,SAAS,YAAY,EAE3E,QAAO,SAAS,aAAa,kBAAkB,IAAI;AAEpD,SAAO,YAAY,OAAO,wBAAwB,mBAAmB"}