emdash 0.12.0 → 0.14.0

package/dist/astro/routes/PluginRegistry.d.mts

@@ -0,0 +1,15 @@
+import * as react from "react";
+import { Messages } from "@lingui/core";
+
+//#region src/astro/routes/PluginRegistry.d.ts
+interface AdminWrapperProps {
+  locale: string;
+  messages: Messages;
+}
+declare function AdminWrapper({
+  locale,
+  messages
+}: AdminWrapperProps): react.JSX.Element;
+//#endregion
+export { AdminWrapper as default };
+//# sourceMappingURL=PluginRegistry.d.mts.map

package/dist/astro/routes/PluginRegistry.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PluginRegistry.d.mts","names":[],"sources":["../../../src/astro/routes/PluginRegistry.tsx"],"mappings":";;;;UAeU,iBAAA;EACT,MAAA;EACA,QAAA,EAAU,QAAA;AAAA;AAAA,iBAGa,YAAA,CAAA;EAAe,MAAA;EAAQ;AAAA,GAAY,iBAAA,GAAiB,KAAA,CAAA,GAAA,CAAA,OAAA"}

package/dist/astro/routes/PluginRegistry.mjs

@@ -0,0 +1,25 @@
+import { AdminApp } from "@emdash-cms/admin";
+import { pluginAdmins } from "virtual:emdash/admin-registry";
+import { authProviders } from "virtual:emdash/auth-providers";
+import { jsx } from "react/jsx-runtime";
+
+//#region src/astro/routes/PluginRegistry.tsx
+/**
+* Admin Wrapper
+*
+* Imports plugin admin modules from the virtual module and passes them
+* to AdminApp via props. This ensures plugin components are bundled
+* together with the admin app and available via React context.
+*/
+function AdminWrapper({ locale, messages }) {
+	return /* @__PURE__ */ jsx(AdminApp, {
+		pluginAdmins,
+		authProviders,
+		locale,
+		messages
+	});
+}
+
+//#endregion
+export { AdminWrapper as default };
+//# sourceMappingURL=PluginRegistry.mjs.map

package/dist/astro/routes/PluginRegistry.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"PluginRegistry.mjs","names":[],"sources":["../../../src/astro/routes/PluginRegistry.tsx"],"sourcesContent":["/**\n * Admin Wrapper\n *\n * Imports plugin admin modules from the virtual module and passes them\n * to AdminApp via props. This ensures plugin components are bundled\n * together with the admin app and available via React context.\n */\n\nimport { AdminApp } from \"@emdash-cms/admin\";\nimport type { Messages } from \"@lingui/core\";\n// @ts-ignore - virtual module generated by integration\nimport { pluginAdmins } from \"virtual:emdash/admin-registry\";\n// @ts-ignore - virtual module generated by integration\nimport { authProviders } from \"virtual:emdash/auth-providers\";\n\ninterface AdminWrapperProps {\n\tlocale: string;\n\tmessages: Messages;\n}\n\nexport default function AdminWrapper({ locale, messages }: AdminWrapperProps) {\n\treturn (\n\t\t<AdminApp\n\t\t\tpluginAdmins={pluginAdmins}\n\t\t\tauthProviders={authProviders}\n\t\t\tlocale={locale}\n\t\t\tmessages={messages}\n\t\t/>\n\t);\n}\n"],"mappings":";;;;;;;;;;;;;AAoBA,SAAwB,aAAa,EAAE,QAAQ,YAA+B;AAC7E,QACC,oBAAC;EACc;EACC;EACP;EACE;GACT"}

package/dist/astro/routes/api/admin/allowed-domains/_domain_.d.mts

@@ -0,0 +1,15 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/admin/allowed-domains/[domain].d.ts
+declare const prerender = false;
+/**
+ * PATCH - Update domain settings
+ */
+declare const PATCH: APIRoute;
+/**
+ * DELETE - Remove an allowed domain
+ */
+declare const DELETE: APIRoute;
+//#endregion
+export { DELETE, PATCH, prerender };
+//# sourceMappingURL=_domain_.d.mts.map

package/dist/astro/routes/api/admin/allowed-domains/_domain_.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_domain_.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/admin/allowed-domains/[domain].ts"],"mappings":";;;cAUa,SAAA;;;;cAYA,KAAA,EAAO,QAAA;AA0DpB;;;AAAA,cAAa,MAAA,EAAQ,QAAA"}

package/dist/astro/routes/api/admin/allowed-domains/_domain_.mjs

@@ -0,0 +1,67 @@
+import "../../../../../base64-CqR-7kqF.mjs";
+import "../../../../../types-CwXMEPRr.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-tSQWIl5U.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-BFTPon-J.mjs";
+import { S as allowedDomainUpdateBody } from "../../../../../redirects-Dmj6KRU3.mjs";
+import "../../../../../setup-BGAJ2uXs.mjs";
+import "../../../../../api/schemas/index.mjs";
+import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
+import { Role, roleFromLevel } from "@emdash-cms/auth";
+
+//#region src/astro/routes/api/admin/allowed-domains/[domain].ts
+const prerender = false;
+/**
+* PATCH - Update domain settings
+*/
+const PATCH = async ({ params, request, locals }) => {
+	const { emdash, user } = locals;
+	const { domain } = params;
+	if (!emdash?.db) return apiError("NOT_CONFIGURED", "Database not configured", 500);
+	if (!domain) return apiError("VALIDATION_ERROR", "Domain is required", 400);
+	if (!user || user.role < Role.ADMIN) return apiError("FORBIDDEN", "Admin privileges required", 403);
+	const adapter = createKyselyAdapter(emdash.db);
+	try {
+		const body = await parseBody(request, allowedDomainUpdateBody);
+		if (isParseError(body)) return body;
+		const existing = await adapter.getAllowedDomain(domain);
+		if (!existing) return apiError("NOT_FOUND", "Domain not found", 404);
+		const defaultRole = body.defaultRole;
+		const enabled = body.enabled ?? existing.enabled;
+		await adapter.updateAllowedDomain(domain, enabled, defaultRole);
+		const updated = await adapter.getAllowedDomain(domain);
+		return apiSuccess({
+			success: true,
+			domain: updated ? {
+				domain: updated.domain,
+				defaultRole: updated.defaultRole,
+				roleName: roleFromLevel(updated.defaultRole),
+				enabled: updated.enabled,
+				createdAt: updated.createdAt.toISOString()
+			} : null
+		});
+	} catch (error) {
+		return handleError(error, "Failed to update allowed domain", "DOMAIN_UPDATE_ERROR");
+	}
+};
+/**
+* DELETE - Remove an allowed domain
+*/
+const DELETE = async ({ params, locals }) => {
+	const { emdash, user } = locals;
+	const { domain } = params;
+	if (!emdash?.db) return apiError("NOT_CONFIGURED", "Database not configured", 500);
+	if (!domain) return apiError("VALIDATION_ERROR", "Domain is required", 400);
+	if (!user || user.role < Role.ADMIN) return apiError("FORBIDDEN", "Admin privileges required", 403);
+	const adapter = createKyselyAdapter(emdash.db);
+	try {
+		if (!await adapter.getAllowedDomain(domain)) return apiError("NOT_FOUND", "Domain not found", 404);
+		await adapter.deleteAllowedDomain(domain);
+		return apiSuccess({ success: true });
+	} catch (error) {
+		return handleError(error, "Failed to delete allowed domain", "DOMAIN_DELETE_ERROR");
+	}
+};
+
+//#endregion
+export { DELETE, PATCH, prerender };
+//# sourceMappingURL=_domain_.mjs.map

package/dist/astro/routes/api/admin/allowed-domains/_domain_.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"_domain_.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/admin/allowed-domains/[domain].ts"],"sourcesContent":["/**\n * PATCH/DELETE /_emdash/api/admin/allowed-domains/[domain]\n *\n * Admin endpoints for managing a specific allowed domain.\n * PATCH - Update domain settings (enabled, defaultRole)\n * DELETE - Remove an allowed domain\n */\n\nimport type { APIRoute } from \"astro\";\n\nexport const prerender = false;\n\nimport { Role, roleFromLevel } from \"@emdash-cms/auth\";\nimport { createKyselyAdapter } from \"@emdash-cms/auth/adapters/kysely\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { allowedDomainUpdateBody } from \"#api/schemas.js\";\n\n/**\n * PATCH - Update domain settings\n */\nexport const PATCH: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { domain } = params;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"Database not configured\", 500);\n\t}\n\n\tif (!domain) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"Domain is required\", 400);\n\t}\n\n\tif (!user || user.role < Role.ADMIN) {\n\t\treturn apiError(\"FORBIDDEN\", \"Admin privileges required\", 403);\n\t}\n\n\tconst adapter = createKyselyAdapter(emdash.db);\n\n\ttry {\n\t\tconst body = await parseBody(request, allowedDomainUpdateBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Check if domain exists\n\t\tconst existing = await adapter.getAllowedDomain(domain);\n\t\tif (!existing) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"Domain not found\", 404);\n\t\t}\n\n\t\t// Role is already validated as RoleLevel by Zod schema\n\t\tconst defaultRole = body.defaultRole;\n\n\t\t// Update domain\n\t\tconst enabled = body.enabled ?? existing.enabled;\n\t\tawait adapter.updateAllowedDomain(domain, enabled, defaultRole);\n\n\t\t// Fetch updated domain\n\t\tconst updated = await adapter.getAllowedDomain(domain);\n\n\t\treturn apiSuccess({\n\t\t\tsuccess: true,\n\t\t\tdomain: updated\n\t\t\t\t? {\n\t\t\t\t\t\tdomain: updated.domain,\n\t\t\t\t\t\tdefaultRole: updated.defaultRole,\n\t\t\t\t\t\troleName: roleFromLevel(updated.defaultRole),\n\t\t\t\t\t\tenabled: updated.enabled,\n\t\t\t\t\t\tcreatedAt: updated.createdAt.toISOString(),\n\t\t\t\t\t}\n\t\t\t\t: null,\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update allowed domain\", \"DOMAIN_UPDATE_ERROR\");\n\t}\n};\n\n/**\n * DELETE - Remove an allowed domain\n */\nexport const DELETE: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { domain } = params;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"Database not configured\", 500);\n\t}\n\n\tif (!domain) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"Domain is required\", 400);\n\t}\n\n\tif (!user || user.role < Role.ADMIN) {\n\t\treturn apiError(\"FORBIDDEN\", \"Admin privileges required\", 403);\n\t}\n\n\tconst adapter = createKyselyAdapter(emdash.db);\n\n\ttry {\n\t\t// Check if domain exists (optional - delete is idempotent)\n\t\tconst existing = await adapter.getAllowedDomain(domain);\n\t\tif (!existing) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"Domain not found\", 404);\n\t\t}\n\n\t\tawait adapter.deleteAllowedDomain(domain);\n\n\t\treturn apiSuccess({ success: true });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to delete allowed domain\", \"DOMAIN_DELETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;AAUA,MAAa,YAAY;;;;AAYzB,MAAa,QAAkB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACrE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,2BAA2B,IAAI;AAGlE,KAAI,CAAC,OACJ,QAAO,SAAS,oBAAoB,sBAAsB,IAAI;AAG/D,KAAI,CAAC,QAAQ,KAAK,OAAO,KAAK,MAC7B,QAAO,SAAS,aAAa,6BAA6B,IAAI;CAG/D,MAAM,UAAU,oBAAoB,OAAO,GAAG;AAE9C,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,wBAAwB;AAC9D,MAAI,aAAa,KAAK,CAAE,QAAO;EAG/B,MAAM,WAAW,MAAM,QAAQ,iBAAiB,OAAO;AACvD,MAAI,CAAC,SACJ,QAAO,SAAS,aAAa,oBAAoB,IAAI;EAItD,MAAM,cAAc,KAAK;EAGzB,MAAM,UAAU,KAAK,WAAW,SAAS;AACzC,QAAM,QAAQ,oBAAoB,QAAQ,SAAS,YAAY;EAG/D,MAAM,UAAU,MAAM,QAAQ,iBAAiB,OAAO;AAEtD,SAAO,WAAW;GACjB,SAAS;GACT,QAAQ,UACL;IACA,QAAQ,QAAQ;IAChB,aAAa,QAAQ;IACrB,UAAU,cAAc,QAAQ,YAAY;IAC5C,SAAS,QAAQ;IACjB,WAAW,QAAQ,UAAU,aAAa;IAC1C,GACA;GACH,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,mCAAmC,sBAAsB;;;;;;AAOrF,MAAa,SAAmB,OAAO,EAAE,QAAQ,aAAa;CAC7D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,2BAA2B,IAAI;AAGlE,KAAI,CAAC,OACJ,QAAO,SAAS,oBAAoB,sBAAsB,IAAI;AAG/D,KAAI,CAAC,QAAQ,KAAK,OAAO,KAAK,MAC7B,QAAO,SAAS,aAAa,6BAA6B,IAAI;CAG/D,MAAM,UAAU,oBAAoB,OAAO,GAAG;AAE9C,KAAI;AAGH,MAAI,CADa,MAAM,QAAQ,iBAAiB,OAAO,CAEtD,QAAO,SAAS,aAAa,oBAAoB,IAAI;AAGtD,QAAM,QAAQ,oBAAoB,OAAO;AAEzC,SAAO,WAAW,EAAE,SAAS,MAAM,CAAC;UAC5B,OAAO;AACf,SAAO,YAAY,OAAO,mCAAmC,sBAAsB"}

package/dist/astro/routes/api/admin/allowed-domains/index.d.mts

@@ -0,0 +1,15 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/admin/allowed-domains/index.d.ts
+declare const prerender = false;
+/**
+ * GET - List all allowed domains
+ */
+declare const GET: APIRoute;
+/**
+ * POST - Add a new allowed domain
+ */
+declare const POST: APIRoute;
+//#endregion
+export { GET, POST, prerender };
+//# sourceMappingURL=index.d.mts.map

package/dist/astro/routes/api/admin/allowed-domains/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/admin/allowed-domains/index.ts"],"mappings":";;;cAUa,SAAA;;;;cAcA,GAAA,EAAK,QAAA;AAiClB;;;AAAA,cAAa,IAAA,EAAM,QAAA"}

package/dist/astro/routes/api/admin/allowed-domains/index.mjs

@@ -0,0 +1,67 @@
+import "../../../../../base64-CqR-7kqF.mjs";
+import "../../../../../types-CwXMEPRr.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-tSQWIl5U.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-BFTPon-J.mjs";
+import { x as allowedDomainCreateBody } from "../../../../../redirects-Dmj6KRU3.mjs";
+import "../../../../../setup-BGAJ2uXs.mjs";
+import "../../../../../api/schemas/index.mjs";
+import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
+import { Role, roleFromLevel } from "@emdash-cms/auth";
+
+//#region src/astro/routes/api/admin/allowed-domains/index.ts
+const prerender = false;
+const DOMAIN_REGEX = /^[a-zA-Z0-9][a-zA-Z0-9-]*(\.[a-zA-Z0-9-]+)+$/;
+/**
+* GET - List all allowed domains
+*/
+const GET = async ({ locals }) => {
+	const { emdash, user } = locals;
+	if (!emdash?.db) return apiError("NOT_CONFIGURED", "Database not configured", 500);
+	if (!user || user.role < Role.ADMIN) return apiError("FORBIDDEN", "Admin privileges required", 403);
+	const adapter = createKyselyAdapter(emdash.db);
+	try {
+		return apiSuccess({ domains: (await adapter.getAllowedDomains()).map((d) => ({
+			domain: d.domain,
+			defaultRole: d.defaultRole,
+			roleName: roleFromLevel(d.defaultRole),
+			enabled: d.enabled,
+			createdAt: d.createdAt.toISOString()
+		})) });
+	} catch (error) {
+		return handleError(error, "Failed to list allowed domains", "DOMAIN_LIST_ERROR");
+	}
+};
+/**
+* POST - Add a new allowed domain
+*/
+const POST = async ({ request, locals }) => {
+	const { emdash, user } = locals;
+	if (!emdash?.db) return apiError("NOT_CONFIGURED", "Database not configured", 500);
+	if (!user || user.role < Role.ADMIN) return apiError("FORBIDDEN", "Admin privileges required", 403);
+	const adapter = createKyselyAdapter(emdash.db);
+	try {
+		const body = await parseBody(request, allowedDomainCreateBody);
+		if (isParseError(body)) return body;
+		const defaultRole = body.defaultRole;
+		const cleanDomain = body.domain.toLowerCase().trim();
+		if (!DOMAIN_REGEX.test(cleanDomain)) return apiError("VALIDATION_ERROR", "Invalid domain format", 400);
+		if (await adapter.getAllowedDomain(cleanDomain)) return apiError("CONFLICT", "Domain already exists", 409);
+		const domain = await adapter.createAllowedDomain(cleanDomain, defaultRole);
+		return apiSuccess({
+			success: true,
+			domain: {
+				domain: domain.domain,
+				defaultRole: domain.defaultRole,
+				roleName: roleFromLevel(domain.defaultRole),
+				enabled: domain.enabled,
+				createdAt: domain.createdAt.toISOString()
+			}
+		}, 201);
+	} catch (error) {
+		return handleError(error, "Failed to create allowed domain", "DOMAIN_CREATE_ERROR");
+	}
+};
+
+//#endregion
+export { GET, POST, prerender };
+//# sourceMappingURL=index.mjs.map

package/dist/astro/routes/api/admin/allowed-domains/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/admin/allowed-domains/index.ts"],"sourcesContent":["/**\n * GET/POST /_emdash/api/admin/allowed-domains\n *\n * Admin endpoints for managing allowed signup domains.\n * GET - List all allowed domains\n * POST - Add a new allowed domain\n */\n\nimport type { APIRoute } from \"astro\";\n\nexport const prerender = false;\n\nimport { Role, roleFromLevel } from \"@emdash-cms/auth\";\nimport { createKyselyAdapter } from \"@emdash-cms/auth/adapters/kysely\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { allowedDomainCreateBody } from \"#api/schemas.js\";\n\nconst DOMAIN_REGEX = /^[a-zA-Z0-9][a-zA-Z0-9-]*(\\.[a-zA-Z0-9-]+)+$/;\n\n/**\n * GET - List all allowed domains\n */\nexport const GET: APIRoute = async ({ locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"Database not configured\", 500);\n\t}\n\n\tif (!user || user.role < Role.ADMIN) {\n\t\treturn apiError(\"FORBIDDEN\", \"Admin privileges required\", 403);\n\t}\n\n\tconst adapter = createKyselyAdapter(emdash.db);\n\n\ttry {\n\t\tconst domains = await adapter.getAllowedDomains();\n\n\t\treturn apiSuccess({\n\t\t\tdomains: domains.map((d) => ({\n\t\t\t\tdomain: d.domain,\n\t\t\t\tdefaultRole: d.defaultRole,\n\t\t\t\troleName: roleFromLevel(d.defaultRole),\n\t\t\t\tenabled: d.enabled,\n\t\t\t\tcreatedAt: d.createdAt.toISOString(),\n\t\t\t})),\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to list allowed domains\", \"DOMAIN_LIST_ERROR\");\n\t}\n};\n\n/**\n * POST - Add a new allowed domain\n */\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"Database not configured\", 500);\n\t}\n\n\tif (!user || user.role < Role.ADMIN) {\n\t\treturn apiError(\"FORBIDDEN\", \"Admin privileges required\", 403);\n\t}\n\n\tconst adapter = createKyselyAdapter(emdash.db);\n\n\ttry {\n\t\tconst body = await parseBody(request, allowedDomainCreateBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Role is already validated as RoleLevel by Zod schema\n\t\tconst defaultRole = body.defaultRole;\n\n\t\t// Validate domain format (no protocol, just domain)\n\t\tconst cleanDomain = body.domain.toLowerCase().trim();\n\t\tif (!DOMAIN_REGEX.test(cleanDomain)) {\n\t\t\treturn apiError(\"VALIDATION_ERROR\", \"Invalid domain format\", 400);\n\t\t}\n\n\t\t// Check if domain already exists\n\t\tconst existing = await adapter.getAllowedDomain(cleanDomain);\n\t\tif (existing) {\n\t\t\treturn apiError(\"CONFLICT\", \"Domain already exists\", 409);\n\t\t}\n\n\t\tconst domain = await adapter.createAllowedDomain(cleanDomain, defaultRole);\n\n\t\treturn apiSuccess(\n\t\t\t{\n\t\t\t\tsuccess: true,\n\t\t\t\tdomain: {\n\t\t\t\t\tdomain: domain.domain,\n\t\t\t\t\tdefaultRole: domain.defaultRole,\n\t\t\t\t\troleName: roleFromLevel(domain.defaultRole),\n\t\t\t\t\tenabled: domain.enabled,\n\t\t\t\t\tcreatedAt: domain.createdAt.toISOString(),\n\t\t\t\t},\n\t\t\t},\n\t\t\t201,\n\t\t);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create allowed domain\", \"DOMAIN_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;AAUA,MAAa,YAAY;AASzB,MAAM,eAAe;;;;AAKrB,MAAa,MAAgB,OAAO,EAAE,aAAa;CAClD,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,2BAA2B,IAAI;AAGlE,KAAI,CAAC,QAAQ,KAAK,OAAO,KAAK,MAC7B,QAAO,SAAS,aAAa,6BAA6B,IAAI;CAG/D,MAAM,UAAU,oBAAoB,OAAO,GAAG;AAE9C,KAAI;AAGH,SAAO,WAAW,EACjB,UAHe,MAAM,QAAQ,mBAAmB,EAG/B,KAAK,OAAO;GAC5B,QAAQ,EAAE;GACV,aAAa,EAAE;GACf,UAAU,cAAc,EAAE,YAAY;GACtC,SAAS,EAAE;GACX,WAAW,EAAE,UAAU,aAAa;GACpC,EAAE,EACH,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,kCAAkC,oBAAoB;;;;;;AAOlF,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,2BAA2B,IAAI;AAGlE,KAAI,CAAC,QAAQ,KAAK,OAAO,KAAK,MAC7B,QAAO,SAAS,aAAa,6BAA6B,IAAI;CAG/D,MAAM,UAAU,oBAAoB,OAAO,GAAG;AAE9C,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,wBAAwB;AAC9D,MAAI,aAAa,KAAK,CAAE,QAAO;EAG/B,MAAM,cAAc,KAAK;EAGzB,MAAM,cAAc,KAAK,OAAO,aAAa,CAAC,MAAM;AACpD,MAAI,CAAC,aAAa,KAAK,YAAY,CAClC,QAAO,SAAS,oBAAoB,yBAAyB,IAAI;AAKlE,MADiB,MAAM,QAAQ,iBAAiB,YAAY,CAE3D,QAAO,SAAS,YAAY,yBAAyB,IAAI;EAG1D,MAAM,SAAS,MAAM,QAAQ,oBAAoB,aAAa,YAAY;AAE1E,SAAO,WACN;GACC,SAAS;GACT,QAAQ;IACP,QAAQ,OAAO;IACf,aAAa,OAAO;IACpB,UAAU,cAAc,OAAO,YAAY;IAC3C,SAAS,OAAO;IAChB,WAAW,OAAO,UAAU,aAAa;IACzC;GACD,EACD,IACA;UACO,OAAO;AACf,SAAO,YAAY,OAAO,mCAAmC,sBAAsB"}

package/dist/astro/routes/api/admin/api-tokens/_id_.d.mts

@@ -0,0 +1,11 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/admin/api-tokens/[id].d.ts
+declare const prerender = false;
+/**
+ * Revoke (delete) an API token.
+ */
+declare const DELETE: APIRoute;
+//#endregion
+export { DELETE, prerender };
+//# sourceMappingURL=_id_.d.mts.map

package/dist/astro/routes/api/admin/api-tokens/_id_.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_id_.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/admin/api-tokens/[id].ts"],"mappings":";;;cAYa,SAAA;;AAKb;;cAAa,MAAA,EAAQ,QAAA"}

package/dist/astro/routes/api/admin/api-tokens/_id_.mjs

@@ -0,0 +1,33 @@
+import "../../../../../base64-CqR-7kqF.mjs";
+import "../../../../../types-CwXMEPRr.mjs";
+import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../error-tSQWIl5U.mjs";
+import "../../../../../api-tokens-D3C9v02m.mjs";
+import { r as handleApiTokenRevoke } from "../../../../../api-tokens-eYymBhIT.mjs";
+import { Role } from "@emdash-cms/auth";
+
+//#region src/astro/routes/api/admin/api-tokens/[id].ts
+/**
+* Single API token endpoint
+*
+* DELETE /_emdash/api/admin/api-tokens/:id — Revoke a token
+*/
+const prerender = false;
+/**
+* Revoke (delete) an API token.
+*/
+const DELETE = async ({ params, locals }) => {
+	const { emdash, user } = locals;
+	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	if (!user || user.role < Role.ADMIN) return apiError("FORBIDDEN", "Admin privileges required", 403);
+	const tokenId = params.id;
+	if (!tokenId) return apiError("VALIDATION_ERROR", "Token ID is required", 400);
+	try {
+		return unwrapResult(await handleApiTokenRevoke(emdash.db, tokenId, user.id));
+	} catch (error) {
+		return handleError(error, "Failed to revoke API token", "TOKEN_REVOKE_ERROR");
+	}
+};
+
+//#endregion
+export { DELETE, prerender };
+//# sourceMappingURL=_id_.mjs.map

package/dist/astro/routes/api/admin/api-tokens/_id_.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"_id_.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/admin/api-tokens/[id].ts"],"sourcesContent":["/**\n * Single API token endpoint\n *\n * DELETE /_emdash/api/admin/api-tokens/:id — Revoke a token\n */\n\nimport { Role } from \"@emdash-cms/auth\";\nimport type { APIRoute } from \"astro\";\n\nimport { apiError, handleError, unwrapResult } from \"#api/error.js\";\nimport { handleApiTokenRevoke } from \"#api/handlers/api-tokens.js\";\n\nexport const prerender = false;\n\n/**\n * Revoke (delete) an API token.\n */\nexport const DELETE: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!user || user.role < Role.ADMIN) {\n\t\treturn apiError(\"FORBIDDEN\", \"Admin privileges required\", 403);\n\t}\n\n\tconst tokenId = params.id;\n\tif (!tokenId) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"Token ID is required\", 400);\n\t}\n\n\ttry {\n\t\tconst result = await handleApiTokenRevoke(emdash.db, tokenId, user.id);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to revoke API token\", \"TOKEN_REVOKE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;AAYA,MAAa,YAAY;;;;AAKzB,MAAa,SAAmB,OAAO,EAAE,QAAQ,aAAa;CAC7D,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,QAAQ,KAAK,OAAO,KAAK,MAC7B,QAAO,SAAS,aAAa,6BAA6B,IAAI;CAG/D,MAAM,UAAU,OAAO;AACvB,KAAI,CAAC,QACJ,QAAO,SAAS,oBAAoB,wBAAwB,IAAI;AAGjE,KAAI;AAEH,SAAO,aADQ,MAAM,qBAAqB,OAAO,IAAI,SAAS,KAAK,GAAG,CAC3C;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,8BAA8B,qBAAqB"}

package/dist/astro/routes/api/admin/api-tokens/index.d.mts

@@ -0,0 +1,17 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/admin/api-tokens/index.d.ts
+declare const prerender = false;
+/**
+ * List API tokens for the current user.
+ * Admins can list all tokens (future: add ?userId= filter).
+ */
+declare const GET: APIRoute;
+/**
+ * Create a new API token.
+ * Returns the raw token once — it cannot be retrieved again.
+ */
+declare const POST: APIRoute;
+//#endregion
+export { GET, POST, prerender };
+//# sourceMappingURL=index.d.mts.map

package/dist/astro/routes/api/admin/api-tokens/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/admin/api-tokens/index.ts"],"mappings":";;;cAgBa,SAAA;AAYb;;;;AAAA,cAAa,GAAA,EAAK,QAAA;AAmBlB;;;;AAAA,cAAa,IAAA,EAAM,QAAA"}

package/dist/astro/routes/api/admin/api-tokens/index.mjs

@@ -0,0 +1,52 @@
+import "../../../../../base64-CqR-7kqF.mjs";
+import "../../../../../types-CwXMEPRr.mjs";
+import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../error-tSQWIl5U.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-BFTPon-J.mjs";
+import { n as VALID_SCOPES } from "../../../../../api-tokens-D3C9v02m.mjs";
+import { n as handleApiTokenList, t as handleApiTokenCreate } from "../../../../../api-tokens-eYymBhIT.mjs";
+import { z } from "zod";
+import { Role } from "@emdash-cms/auth";
+
+//#region src/astro/routes/api/admin/api-tokens/index.ts
+/**
+* API token management endpoints
+*
+* GET  /_emdash/api/admin/api-tokens — List tokens for current user
+* POST /_emdash/api/admin/api-tokens — Create a new token
+*/
+const prerender = false;
+const createTokenSchema = z.object({
+	name: z.string().min(1).max(100),
+	scopes: z.array(z.enum(VALID_SCOPES)).min(1),
+	expiresAt: z.string().datetime().optional()
+});
+/**
+* List API tokens for the current user.
+* Admins can list all tokens (future: add ?userId= filter).
+*/
+const GET = async ({ locals }) => {
+	const { emdash, user } = locals;
+	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	if (!user || user.role < Role.ADMIN) return apiError("FORBIDDEN", "Admin privileges required", 403);
+	return unwrapResult(await handleApiTokenList(emdash.db, user.id));
+};
+/**
+* Create a new API token.
+* Returns the raw token once — it cannot be retrieved again.
+*/
+const POST = async ({ request, locals }) => {
+	const { emdash, user } = locals;
+	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	if (!user || user.role < Role.ADMIN) return apiError("FORBIDDEN", "Admin privileges required", 403);
+	try {
+		const body = await parseBody(request, createTokenSchema);
+		if (isParseError(body)) return body;
+		return unwrapResult(await handleApiTokenCreate(emdash.db, user.id, body), 201);
+	} catch (error) {
+		return handleError(error, "Failed to create API token", "TOKEN_CREATE_ERROR");
+	}
+};
+
+//#endregion
+export { GET, POST, prerender };
+//# sourceMappingURL=index.mjs.map

package/dist/astro/routes/api/admin/api-tokens/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/admin/api-tokens/index.ts"],"sourcesContent":["/**\n * API token management endpoints\n *\n * GET  /_emdash/api/admin/api-tokens — List tokens for current user\n * POST /_emdash/api/admin/api-tokens — Create a new token\n */\n\nimport { Role } from \"@emdash-cms/auth\";\nimport type { APIRoute } from \"astro\";\nimport { z } from \"zod\";\n\nimport { apiError, handleError, unwrapResult } from \"#api/error.js\";\nimport { handleApiTokenCreate, handleApiTokenList } from \"#api/handlers/api-tokens.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { VALID_SCOPES } from \"#auth/api-tokens.js\";\n\nexport const prerender = false;\n\nconst createTokenSchema = z.object({\n\tname: z.string().min(1).max(100),\n\tscopes: z.array(z.enum(VALID_SCOPES)).min(1),\n\texpiresAt: z.string().datetime().optional(),\n});\n\n/**\n * List API tokens for the current user.\n * Admins can list all tokens (future: add ?userId= filter).\n */\nexport const GET: APIRoute = async ({ locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!user || user.role < Role.ADMIN) {\n\t\treturn apiError(\"FORBIDDEN\", \"Admin privileges required\", 403);\n\t}\n\n\tconst result = await handleApiTokenList(emdash.db, user.id);\n\treturn unwrapResult(result);\n};\n\n/**\n * Create a new API token.\n * Returns the raw token once — it cannot be retrieved again.\n */\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!user || user.role < Role.ADMIN) {\n\t\treturn apiError(\"FORBIDDEN\", \"Admin privileges required\", 403);\n\t}\n\n\ttry {\n\t\tconst body = await parseBody(request, createTokenSchema);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleApiTokenCreate(emdash.db, user.id, body);\n\t\treturn unwrapResult(result, 201);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create API token\", \"TOKEN_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;AAgBA,MAAa,YAAY;AAEzB,MAAM,oBAAoB,EAAE,OAAO;CAClC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI;CAChC,QAAQ,EAAE,MAAM,EAAE,KAAK,aAAa,CAAC,CAAC,IAAI,EAAE;CAC5C,WAAW,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;CAC3C,CAAC;;;;;AAMF,MAAa,MAAgB,OAAO,EAAE,aAAa;CAClD,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,QAAQ,KAAK,OAAO,KAAK,MAC7B,QAAO,SAAS,aAAa,6BAA6B,IAAI;AAI/D,QAAO,aADQ,MAAM,mBAAmB,OAAO,IAAI,KAAK,GAAG,CAChC;;;;;;AAO5B,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,QAAQ,KAAK,OAAO,KAAK,MAC7B,QAAO,SAAS,aAAa,6BAA6B,IAAI;AAG/D,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,kBAAkB;AACxD,MAAI,aAAa,KAAK,CAAE,QAAO;AAG/B,SAAO,aADQ,MAAM,qBAAqB,OAAO,IAAI,KAAK,IAAI,KAAK,EACvC,IAAI;UACxB,OAAO;AACf,SAAO,YAAY,OAAO,8BAA8B,qBAAqB"}

package/dist/astro/routes/api/admin/bylines/_id_/index.d.mts

@@ -0,0 +1,10 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/admin/bylines/[id]/index.d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+declare const PUT: APIRoute;
+declare const DELETE: APIRoute;
+//#endregion
+export { DELETE, GET, PUT, prerender };
+//# sourceMappingURL=index.d.mts.map

package/dist/astro/routes/api/admin/bylines/_id_/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../../../../src/astro/routes/api/admin/bylines/[id]/index.ts"],"mappings":";;;cAUa,SAAA;AAAA,cASA,GAAA,EAAK,QAAA;AAAA,cAoBL,GAAA,EAAK,QAAA;AAAA,cAgCL,MAAA,EAAQ,QAAA"}

package/dist/astro/routes/api/admin/bylines/_id_/index.mjs

@@ -0,0 +1,74 @@
+import "../../../../../../dialect-helpers-BKCvISIQ.mjs";
+import "../../../../../../base64-CqR-7kqF.mjs";
+import "../../../../../../types-CwXMEPRr.mjs";
+import { t as BylineRepository } from "../../../../../../byline-D09BaS4j.mjs";
+import "../../../../../../loader-Cs6-Bqe6.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-tSQWIl5U.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../../parse-BFTPon-J.mjs";
+import { bn as bylineUpdateBody } from "../../../../../../redirects-Dmj6KRU3.mjs";
+import "../../../../../../setup-BGAJ2uXs.mjs";
+import "../../../../../../api/schemas/index.mjs";
+import { i as invalidateBylineCache } from "../../../../../../bylines-BTM2xtP8.mjs";
+import { n as requirePerm } from "../../../../../../authorize-BlyCH-96.mjs";
+import { Role } from "@emdash-cms/auth";
+
+//#region src/astro/routes/api/admin/bylines/[id]/index.ts
+const prerender = false;
+function requireEditor(user) {
+	if (!user || user.role < Role.EDITOR) return apiError("FORBIDDEN", "Editor privileges required", 403);
+	return null;
+}
+const GET = async ({ params, locals }) => {
+	const { emdash, user } = locals;
+	const denied = requirePerm(user, "content:read");
+	if (denied) return denied;
+	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	try {
+		const byline = await new BylineRepository(emdash.db).findById(params.id);
+		if (!byline) return apiError("NOT_FOUND", "Byline not found", 404);
+		return apiSuccess(byline);
+	} catch (error) {
+		return handleError(error, "Failed to get byline", "BYLINE_GET_ERROR");
+	}
+};
+const PUT = async ({ params, request, locals }) => {
+	const { emdash, user } = locals;
+	const denied = requireEditor(user);
+	if (denied) return denied;
+	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	const body = await parseBody(request, bylineUpdateBody);
+	if (isParseError(body)) return body;
+	try {
+		const byline = await new BylineRepository(emdash.db).update(params.id, {
+			slug: body.slug,
+			displayName: body.displayName,
+			bio: body.bio ?? null,
+			avatarMediaId: body.avatarMediaId ?? null,
+			websiteUrl: body.websiteUrl ?? null,
+			userId: body.userId ?? null,
+			isGuest: body.isGuest
+		});
+		if (!byline) return apiError("NOT_FOUND", "Byline not found", 404);
+		/* @__PURE__ */ invalidateBylineCache();
+		return apiSuccess(byline);
+	} catch (error) {
+		return handleError(error, "Failed to update byline", "BYLINE_UPDATE_ERROR");
+	}
+};
+const DELETE = async ({ params, locals }) => {
+	const { emdash, user } = locals;
+	const denied = requireEditor(user);
+	if (denied) return denied;
+	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	try {
+		if (!await new BylineRepository(emdash.db).delete(params.id)) return apiError("NOT_FOUND", "Byline not found", 404);
+		/* @__PURE__ */ invalidateBylineCache();
+		return apiSuccess({ deleted: true });
+	} catch (error) {
+		return handleError(error, "Failed to delete byline", "BYLINE_DELETE_ERROR");
+	}
+};
+
+//#endregion
+export { DELETE, GET, PUT, prerender };
+//# sourceMappingURL=index.mjs.map

package/dist/astro/routes/api/admin/bylines/_id_/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/admin/bylines/[id]/index.ts"],"sourcesContent":["import { Role } from \"@emdash-cms/auth\";\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { bylineUpdateBody } from \"#api/schemas.js\";\nimport { invalidateBylineCache } from \"#bylines/index.js\";\nimport { BylineRepository } from \"#db/repositories/byline.js\";\n\nexport const prerender = false;\n\nfunction requireEditor(user: { role: number } | undefined): Response | null {\n\tif (!user || user.role < Role.EDITOR) {\n\t\treturn apiError(\"FORBIDDEN\", \"Editor privileges required\", 403);\n\t}\n\treturn null;\n}\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\t// Read access uses content:read so all authenticated roles can view byline data\n\tconst denied = requirePerm(user, \"content:read\");\n\tif (denied) return denied;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\tconst repo = new BylineRepository(emdash.db);\n\t\tconst byline = await repo.findById(params.id!);\n\t\tif (!byline) return apiError(\"NOT_FOUND\", \"Byline not found\", 404);\n\t\treturn apiSuccess(byline);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to get byline\", \"BYLINE_GET_ERROR\");\n\t}\n};\n\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst denied = requireEditor(user);\n\tif (denied) return denied;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst body = await parseBody(request, bylineUpdateBody);\n\tif (isParseError(body)) return body;\n\n\ttry {\n\t\tconst repo = new BylineRepository(emdash.db);\n\t\tconst byline = await repo.update(params.id!, {\n\t\t\tslug: body.slug,\n\t\t\tdisplayName: body.displayName,\n\t\t\tbio: body.bio ?? null,\n\t\t\tavatarMediaId: body.avatarMediaId ?? null,\n\t\t\twebsiteUrl: body.websiteUrl ?? null,\n\t\t\tuserId: body.userId ?? null,\n\t\t\tisGuest: body.isGuest,\n\t\t});\n\n\t\tif (!byline) return apiError(\"NOT_FOUND\", \"Byline not found\", 404);\n\t\tinvalidateBylineCache();\n\t\treturn apiSuccess(byline);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update byline\", \"BYLINE_UPDATE_ERROR\");\n\t}\n};\n\nexport const DELETE: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst denied = requireEditor(user);\n\tif (denied) return denied;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\tconst repo = new BylineRepository(emdash.db);\n\t\tconst deleted = await repo.delete(params.id!);\n\t\tif (!deleted) return apiError(\"NOT_FOUND\", \"Byline not found\", 404);\n\t\tinvalidateBylineCache();\n\t\treturn apiSuccess({ deleted: true });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to delete byline\", \"BYLINE_DELETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;AAUA,MAAa,YAAY;AAEzB,SAAS,cAAc,MAAqD;AAC3E,KAAI,CAAC,QAAQ,KAAK,OAAO,KAAK,OAC7B,QAAO,SAAS,aAAa,8BAA8B,IAAI;AAEhE,QAAO;;AAGR,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,SAAS;CAEzB,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EAEH,MAAM,SAAS,MADF,IAAI,iBAAiB,OAAO,GAAG,CAClB,SAAS,OAAO,GAAI;AAC9C,MAAI,CAAC,OAAQ,QAAO,SAAS,aAAa,oBAAoB,IAAI;AAClE,SAAO,WAAW,OAAO;UACjB,OAAO;AACf,SAAO,YAAY,OAAO,wBAAwB,mBAAmB;;;AAIvE,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,SAAS,cAAc,KAAK;AAClC,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,OAAO,MAAM,UAAU,SAAS,iBAAiB;AACvD,KAAI,aAAa,KAAK,CAAE,QAAO;AAE/B,KAAI;EAEH,MAAM,SAAS,MADF,IAAI,iBAAiB,OAAO,GAAG,CAClB,OAAO,OAAO,IAAK;GAC5C,MAAM,KAAK;GACX,aAAa,KAAK;GAClB,KAAK,KAAK,OAAO;GACjB,eAAe,KAAK,iBAAiB;GACrC,YAAY,KAAK,cAAc;GAC/B,QAAQ,KAAK,UAAU;GACvB,SAAS,KAAK;GACd,CAAC;AAEF,MAAI,CAAC,OAAQ,QAAO,SAAS,aAAa,oBAAoB,IAAI;AAClE,yCAAuB;AACvB,SAAO,WAAW,OAAO;UACjB,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,sBAAsB;;;AAI7E,MAAa,SAAmB,OAAO,EAAE,QAAQ,aAAa;CAC7D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,SAAS,cAAc,KAAK;AAClC,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;AAGH,MAAI,CADY,MADH,IAAI,iBAAiB,OAAO,GAAG,CACjB,OAAO,OAAO,GAAI,CAC/B,QAAO,SAAS,aAAa,oBAAoB,IAAI;AACnE,yCAAuB;AACvB,SAAO,WAAW,EAAE,SAAS,MAAM,CAAC;UAC5B,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,sBAAsB"}

package/dist/astro/routes/api/admin/bylines/index.d.mts

@@ -0,0 +1,9 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/admin/bylines/index.d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+declare const POST: APIRoute;
+//#endregion
+export { GET, POST, prerender };
+//# sourceMappingURL=index.d.mts.map

package/dist/astro/routes/api/admin/bylines/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/admin/bylines/index.ts"],"mappings":";;;cAUa,SAAA;AAAA,cAEA,GAAA,EAAK,QAAA;AAAA,cA8BL,IAAA,EAAM,QAAA"}

package/dist/astro/routes/api/admin/bylines/index.mjs

@@ -0,0 +1,61 @@
+import "../../../../../dialect-helpers-BKCvISIQ.mjs";
+import "../../../../../base64-CqR-7kqF.mjs";
+import "../../../../../types-CwXMEPRr.mjs";
+import { t as BylineRepository } from "../../../../../byline-D09BaS4j.mjs";
+import "../../../../../loader-Cs6-Bqe6.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-tSQWIl5U.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../parse-BFTPon-J.mjs";
+import { gn as bylineCreateBody, xn as bylinesListQuery } from "../../../../../redirects-Dmj6KRU3.mjs";
+import "../../../../../setup-BGAJ2uXs.mjs";
+import "../../../../../api/schemas/index.mjs";
+import { i as invalidateBylineCache } from "../../../../../bylines-BTM2xtP8.mjs";
+import { n as requirePerm } from "../../../../../authorize-BlyCH-96.mjs";
+import { Role } from "@emdash-cms/auth";
+
+//#region src/astro/routes/api/admin/bylines/index.ts
+const prerender = false;
+const GET = async ({ url, locals }) => {
+	const { emdash, user } = locals;
+	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	const denied = requirePerm(user, "content:read");
+	if (denied) return denied;
+	const query = parseQuery(url, bylinesListQuery);
+	if (isParseError(query)) return query;
+	try {
+		return apiSuccess(await new BylineRepository(emdash.db).findMany({
+			search: query.search,
+			isGuest: query.isGuest,
+			userId: query.userId,
+			cursor: query.cursor,
+			limit: query.limit
+		}));
+	} catch (error) {
+		return handleError(error, "Failed to list bylines", "BYLINE_LIST_ERROR");
+	}
+};
+const POST = async ({ request, locals }) => {
+	const { emdash, user } = locals;
+	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	if (!user || user.role < Role.EDITOR) return apiError("FORBIDDEN", "Editor privileges required", 403);
+	const body = await parseBody(request, bylineCreateBody);
+	if (isParseError(body)) return body;
+	try {
+		const byline = await new BylineRepository(emdash.db).create({
+			slug: body.slug,
+			displayName: body.displayName,
+			bio: body.bio ?? null,
+			avatarMediaId: body.avatarMediaId ?? null,
+			websiteUrl: body.websiteUrl ?? null,
+			userId: body.userId ?? null,
+			isGuest: body.isGuest
+		});
+		/* @__PURE__ */ invalidateBylineCache();
+		return apiSuccess(byline, 201);
+	} catch (error) {
+		return handleError(error, "Failed to create byline", "BYLINE_CREATE_ERROR");
+	}
+};
+
+//#endregion
+export { GET, POST, prerender };
+//# sourceMappingURL=index.mjs.map

package/dist/astro/routes/api/admin/bylines/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/admin/bylines/index.ts"],"sourcesContent":["import { Role } from \"@emdash-cms/auth\";\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { bylineCreateBody, bylinesListQuery } from \"#api/schemas.js\";\nimport { invalidateBylineCache } from \"#bylines/index.js\";\nimport { BylineRepository } from \"#db/repositories/byline.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ url, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\t// Read access uses content:read so all authenticated roles can view byline data\n\tconst denied = requirePerm(user, \"content:read\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(url, bylinesListQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst repo = new BylineRepository(emdash.db);\n\t\tconst result = await repo.findMany({\n\t\t\tsearch: query.search,\n\t\t\tisGuest: query.isGuest,\n\t\t\tuserId: query.userId,\n\t\t\tcursor: query.cursor,\n\t\t\tlimit: query.limit,\n\t\t});\n\n\t\treturn apiSuccess(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to list bylines\", \"BYLINE_LIST_ERROR\");\n\t}\n};\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!user || user.role < Role.EDITOR) {\n\t\treturn apiError(\"FORBIDDEN\", \"Editor privileges required\", 403);\n\t}\n\n\tconst body = await parseBody(request, bylineCreateBody);\n\tif (isParseError(body)) return body;\n\n\ttry {\n\t\tconst repo = new BylineRepository(emdash.db);\n\t\tconst byline = await repo.create({\n\t\t\tslug: body.slug,\n\t\t\tdisplayName: body.displayName,\n\t\t\tbio: body.bio ?? null,\n\t\t\tavatarMediaId: body.avatarMediaId ?? null,\n\t\t\twebsiteUrl: body.websiteUrl ?? null,\n\t\t\tuserId: body.userId ?? null,\n\t\t\tisGuest: body.isGuest,\n\t\t});\n\n\t\tinvalidateBylineCache();\n\t\treturn apiSuccess(byline, 201);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create byline\", \"BYLINE_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;AAUA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CACvD,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAIpE,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,KAAK,iBAAiB;AAC/C,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;AAUH,SAAO,WARQ,MADF,IAAI,iBAAiB,OAAO,GAAG,CAClB,SAAS;GAClC,QAAQ,MAAM;GACd,SAAS,MAAM;GACf,QAAQ,MAAM;GACd,QAAQ,MAAM;GACd,OAAO,MAAM;GACb,CAAC,CAEuB;UACjB,OAAO;AACf,SAAO,YAAY,OAAO,0BAA0B,oBAAoB;;;AAI1E,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,QAAQ,KAAK,OAAO,KAAK,OAC7B,QAAO,SAAS,aAAa,8BAA8B,IAAI;CAGhE,MAAM,OAAO,MAAM,UAAU,SAAS,iBAAiB;AACvD,KAAI,aAAa,KAAK,CAAE,QAAO;AAE/B,KAAI;EAEH,MAAM,SAAS,MADF,IAAI,iBAAiB,OAAO,GAAG,CAClB,OAAO;GAChC,MAAM,KAAK;GACX,aAAa,KAAK;GAClB,KAAK,KAAK,OAAO;GACjB,eAAe,KAAK,iBAAiB;GACrC,YAAY,KAAK,cAAc;GAC/B,QAAQ,KAAK,UAAU;GACvB,SAAS,KAAK;GACd,CAAC;AAEF,yCAAuB;AACvB,SAAO,WAAW,QAAQ,IAAI;UACtB,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,sBAAsB"}

package/dist/astro/routes/api/admin/comments/_id_/status.d.mts

@@ -0,0 +1,8 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/admin/comments/[id]/status.d.ts
+declare const prerender = false;
+declare const PUT: APIRoute;
+//#endregion
+export { PUT, prerender };
+//# sourceMappingURL=status.d.mts.map

package/dist/astro/routes/api/admin/comments/_id_/status.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.mts","names":[],"sources":["../../../../../../../src/astro/routes/api/admin/comments/[id]/status.ts"],"mappings":";;;cAmBa,SAAA;AAAA,cAEA,GAAA,EAAK,QAAA"}