emdash 0.14.0 → 0.16.0

package/dist/astro/routes/api/themes/preview.mjs

@@ -1,10 +1,10 @@
 import "../../../../base64-CqR-7kqF.mjs";
-import "../../../../types-CwXMEPRr.mjs";
+import "../../../../types-B0bmgwMG.mjs";
 import "../../../../options-BL4X94qY.mjs";
-import { n as apiSuccess, t as apiError } from "../../../../error-tSQWIl5U.mjs";
-import { n as getPublicOrigin } from "../../../../public-url-CseXl9Fv.mjs";
-import { i as resolveSecretsCached } from "../../../../secrets-6pgZyq0K.mjs";
-import { n as requirePerm } from "../../../../authorize-BlyCH-96.mjs";
+import { n as apiSuccess, t as apiError } from "../../../../error-ChfADBuu.mjs";
+import { n as getPublicOrigin } from "../../../../public-url-CUWWFME2.mjs";
+import { i as resolveSecretsCached } from "../../../../secrets-rPdhEBkD.mjs";
+import { n as requirePerm } from "../../../../authorize-Bn4S4DUT.mjs";
 
 //#region src/astro/routes/api/themes/preview.ts
 const prerender = false;

package/dist/astro/routes/api/typegen.mjs

@@ -1,6 +1,6 @@
 import "../../../base64-CqR-7kqF.mjs";
-import "../../../types-CwXMEPRr.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../error-tSQWIl5U.mjs";
+import "../../../types-B0bmgwMG.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../error-ChfADBuu.mjs";
 
 //#region src/astro/routes/api/typegen.ts
 const prerender = false;
@@ -19,7 +19,7 @@ async function safeListCollections(registry) {
 * Generate types content and metadata from the current schema.
 */
 async function generateTypes(registry) {
-	const { generateTypesFile, generateSchemaHash } = await import("../../../zod-generator-DSyz01KE.mjs").then((n) => n.r);
+	const { generateTypesFile, generateSchemaHash } = await import("../../../zod-generator-B80aap1J.mjs").then((n) => n.r);
 	const collections = await safeListCollections(registry);
 	const collectionsWithFields = await Promise.all(collections.map(async (c) => {
 		const fields = await registry.listFields(c.id);
@@ -42,7 +42,7 @@ const GET = async ({ locals }) => {
 	const { emdash } = locals;
 	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash not configured", 500);
 	try {
-		const { SchemaRegistry } = await import("../../../registry-BnCeHYsf.mjs").then((n) => n.r);
+		const { SchemaRegistry } = await import("../../../registry-Cyp-dx6J.mjs").then((n) => n.r);
 		const { types } = await generateTypes(new SchemaRegistry(emdash.db));
 		return new Response(types, {
 			status: 200,
@@ -66,7 +66,7 @@ const POST = async ({ locals }) => {
 	const { emdash } = locals;
 	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash not configured", 500);
 	try {
-		const { SchemaRegistry } = await import("../../../registry-BnCeHYsf.mjs").then((n) => n.r);
+		const { SchemaRegistry } = await import("../../../registry-Cyp-dx6J.mjs").then((n) => n.r);
 		return apiSuccess(await generateTypes(new SchemaRegistry(emdash.db)));
 	} catch (error) {
 		return handleError(error, "Typegen failed", "TYPEGEN_ERROR");

package/dist/astro/routes/api/well-known/auth.mjs

@@ -1,5 +1,5 @@
 import { t as OptionsRepository } from "../../../../options-BL4X94qY.mjs";
-import { t as getAuthMode } from "../../../../mode-DPRPvJYm.mjs";
+import { t as getAuthMode } from "../../../../mode-CaaiebZI.mjs";
 
 //#region src/astro/routes/api/well-known/auth.ts
 const prerender = false;

package/dist/astro/routes/api/well-known/oauth-authorization-server.mjs

@@ -1,5 +1,5 @@
-import { n as getPublicOrigin } from "../../../../public-url-CseXl9Fv.mjs";
-import { n as VALID_SCOPES } from "../../../../api-tokens-D3C9v02m.mjs";
+import { n as getPublicOrigin } from "../../../../public-url-CUWWFME2.mjs";
+import { n as VALID_SCOPES } from "../../../../api-tokens-iPIHAY8N.mjs";
 
 //#region src/astro/routes/api/well-known/oauth-authorization-server.ts
 const prerender = false;

package/dist/astro/routes/api/well-known/oauth-protected-resource.mjs

@@ -1,5 +1,5 @@
-import { n as getPublicOrigin } from "../../../../public-url-CseXl9Fv.mjs";
-import { n as VALID_SCOPES } from "../../../../api-tokens-D3C9v02m.mjs";
+import { n as getPublicOrigin } from "../../../../public-url-CUWWFME2.mjs";
+import { n as VALID_SCOPES } from "../../../../api-tokens-iPIHAY8N.mjs";
 
 //#region src/astro/routes/api/well-known/oauth-protected-resource.ts
 const prerender = false;

package/dist/astro/routes/api/widget-areas/_name_/reorder.mjs

@@ -1,11 +1,11 @@
 import "../../../../../base64-CqR-7kqF.mjs";
-import "../../../../../types-CwXMEPRr.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-tSQWIl5U.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-BFTPon-J.mjs";
-import { h as reorderWidgetsBody } from "../../../../../redirects-Dmj6KRU3.mjs";
-import "../../../../../setup-BGAJ2uXs.mjs";
+import "../../../../../types-B0bmgwMG.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-ChfADBuu.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-DHbXfvxO.mjs";
+import { h as reorderWidgetsBody } from "../../../../../redirects-COMLwsV5.mjs";
+import "../../../../../setup-Cf_TyOv5.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { n as requirePerm } from "../../../../../authorize-BlyCH-96.mjs";
+import { n as requirePerm } from "../../../../../authorize-Bn4S4DUT.mjs";
 
 //#region src/astro/routes/api/widget-areas/[name]/reorder.ts
 const prerender = false;

package/dist/astro/routes/api/widget-areas/_name_/widgets/_id_.mjs

@@ -1,14 +1,14 @@
 import "../../../../../../dialect-helpers-BKCvISIQ.mjs";
 import "../../../../../../base64-CqR-7kqF.mjs";
-import "../../../../../../types-CwXMEPRr.mjs";
-import "../../../../../../loader-Cs6-Bqe6.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-tSQWIl5U.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../../parse-BFTPon-J.mjs";
-import { g as updateWidgetBody } from "../../../../../../redirects-Dmj6KRU3.mjs";
-import "../../../../../../setup-BGAJ2uXs.mjs";
+import "../../../../../../types-B0bmgwMG.mjs";
+import "../../../../../../loader-D-vIJjfY.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-ChfADBuu.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../../parse-DHbXfvxO.mjs";
+import { g as updateWidgetBody } from "../../../../../../redirects-COMLwsV5.mjs";
+import "../../../../../../setup-Cf_TyOv5.mjs";
 import "../../../../../../api/schemas/index.mjs";
-import { i as rowToWidget } from "../../../../../../widgets-B9j_yzlk.mjs";
-import { n as requirePerm } from "../../../../../../authorize-BlyCH-96.mjs";
+import { i as rowToWidget } from "../../../../../../widgets-yHQa4c6c.mjs";
+import { n as requirePerm } from "../../../../../../authorize-Bn4S4DUT.mjs";
 
 //#region src/astro/routes/api/widget-areas/[name]/widgets/[id].ts
 const prerender = false;

package/dist/astro/routes/api/widget-areas/_name_/widgets.mjs

@@ -1,14 +1,14 @@
 import "../../../../../dialect-helpers-BKCvISIQ.mjs";
 import "../../../../../base64-CqR-7kqF.mjs";
-import "../../../../../types-CwXMEPRr.mjs";
-import "../../../../../loader-Cs6-Bqe6.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-tSQWIl5U.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-BFTPon-J.mjs";
-import { m as createWidgetBody } from "../../../../../redirects-Dmj6KRU3.mjs";
-import "../../../../../setup-BGAJ2uXs.mjs";
+import "../../../../../types-B0bmgwMG.mjs";
+import "../../../../../loader-D-vIJjfY.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-ChfADBuu.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-DHbXfvxO.mjs";
+import { m as createWidgetBody } from "../../../../../redirects-COMLwsV5.mjs";
+import "../../../../../setup-Cf_TyOv5.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { i as rowToWidget } from "../../../../../widgets-B9j_yzlk.mjs";
-import { n as requirePerm } from "../../../../../authorize-BlyCH-96.mjs";
+import { i as rowToWidget } from "../../../../../widgets-yHQa4c6c.mjs";
+import { n as requirePerm } from "../../../../../authorize-Bn4S4DUT.mjs";
 import { ulid } from "ulidx";
 
 //#region src/astro/routes/api/widget-areas/[name]/widgets.ts

package/dist/astro/routes/api/widget-areas/_name_.mjs

@@ -1,10 +1,10 @@
 import "../../../../dialect-helpers-BKCvISIQ.mjs";
 import "../../../../base64-CqR-7kqF.mjs";
-import "../../../../types-CwXMEPRr.mjs";
-import "../../../../loader-Cs6-Bqe6.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-tSQWIl5U.mjs";
-import { i as rowToWidget } from "../../../../widgets-B9j_yzlk.mjs";
-import { n as requirePerm } from "../../../../authorize-BlyCH-96.mjs";
+import "../../../../types-B0bmgwMG.mjs";
+import "../../../../loader-D-vIJjfY.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-ChfADBuu.mjs";
+import { i as rowToWidget } from "../../../../widgets-yHQa4c6c.mjs";
+import { n as requirePerm } from "../../../../authorize-Bn4S4DUT.mjs";
 
 //#region src/astro/routes/api/widget-areas/[name].ts
 const prerender = false;

package/dist/astro/routes/api/widget-areas/index.mjs

@@ -1,14 +1,14 @@
 import "../../../../dialect-helpers-BKCvISIQ.mjs";
 import "../../../../base64-CqR-7kqF.mjs";
-import "../../../../types-CwXMEPRr.mjs";
-import "../../../../loader-Cs6-Bqe6.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-tSQWIl5U.mjs";
-import { n as parseBody, t as isParseError } from "../../../../parse-BFTPon-J.mjs";
-import { p as createWidgetAreaBody } from "../../../../redirects-Dmj6KRU3.mjs";
-import "../../../../setup-BGAJ2uXs.mjs";
+import "../../../../types-B0bmgwMG.mjs";
+import "../../../../loader-D-vIJjfY.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-ChfADBuu.mjs";
+import { n as parseBody, t as isParseError } from "../../../../parse-DHbXfvxO.mjs";
+import { p as createWidgetAreaBody } from "../../../../redirects-COMLwsV5.mjs";
+import "../../../../setup-Cf_TyOv5.mjs";
 import "../../../../api/schemas/index.mjs";
-import { i as rowToWidget } from "../../../../widgets-B9j_yzlk.mjs";
-import { n as requirePerm } from "../../../../authorize-BlyCH-96.mjs";
+import { i as rowToWidget } from "../../../../widgets-yHQa4c6c.mjs";
+import { n as requirePerm } from "../../../../authorize-Bn4S4DUT.mjs";
 import { ulid } from "ulidx";
 
 //#region src/astro/routes/api/widget-areas/index.ts

package/dist/astro/routes/api/widget-components.mjs

@@ -1,7 +1,7 @@
 import "../../../base64-CqR-7kqF.mjs";
-import "../../../types-CwXMEPRr.mjs";
-import { n as apiSuccess, r as handleError } from "../../../error-tSQWIl5U.mjs";
-import { t as getWidgetComponents } from "../../../components-mZem7pbe.mjs";
+import "../../../types-B0bmgwMG.mjs";
+import { n as apiSuccess, r as handleError } from "../../../error-ChfADBuu.mjs";
+import { t as getWidgetComponents } from "../../../components-Dx3DM0gg.mjs";
 
 //#region src/astro/routes/api/widget-components.ts
 const prerender = false;

package/dist/astro/routes/robots.txt.mjs

@@ -1,12 +1,12 @@
 import "../../dialect-helpers-BKCvISIQ.mjs";
 import "../../base64-CqR-7kqF.mjs";
-import "../../types-CwXMEPRr.mjs";
-import "../../media-Dg7he9uK.mjs";
+import "../../types-B0bmgwMG.mjs";
+import "../../media-CKQd8AYU.mjs";
 import "../../options-BL4X94qY.mjs";
 import "../../request-cache-dzCt8TZB.mjs";
-import "../../loader-Cs6-Bqe6.mjs";
-import { a as getSiteSettingsWithDb } from "../../settings-xQKsWnzQ.mjs";
-import { n as getPublicOrigin } from "../../public-url-CseXl9Fv.mjs";
+import "../../loader-D-vIJjfY.mjs";
+import { a as getSiteSettingsWithDb } from "../../settings-BSXRtTzk.mjs";
+import { n as getPublicOrigin } from "../../public-url-CUWWFME2.mjs";
 
 //#region src/astro/routes/robots.txt.ts
 const prerender = false;

package/dist/astro/routes/sitemap-_collection_.xml.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"sitemap-_collection_.xml.d.mts","names":[],"sources":["../../../src/astro/routes/sitemap-[collection].xml.ts"],"mappings":";;;cAca,SAAA;AAAA,cAWA,GAAA,EAAK,QAAA"}
+{"version":3,"file":"sitemap-_collection_.xml.d.mts","names":[],"sources":["../../../src/astro/routes/sitemap-[collection].xml.ts"],"mappings":";;;cA0Ba,SAAA;AAAA,cASA,GAAA,EAAK,QAAA"}

package/dist/astro/routes/sitemap-_collection_.xml.mjs

@@ -1,12 +1,15 @@
 import "../../dialect-helpers-BKCvISIQ.mjs";
+import { n as getI18nConfig, r as isI18nEnabled } from "../../config-CVssduLe.mjs";
 import "../../base64-CqR-7kqF.mjs";
-import "../../types-CwXMEPRr.mjs";
-import "../../media-Dg7he9uK.mjs";
+import "../../types-B0bmgwMG.mjs";
+import "../../media-CKQd8AYU.mjs";
 import "../../options-BL4X94qY.mjs";
 import "../../request-cache-dzCt8TZB.mjs";
-import "../../loader-Cs6-Bqe6.mjs";
-import { t as handleSitemapData } from "../../seo-BoR4wCUh.mjs";
-import { a as getSiteSettingsWithDb } from "../../settings-xQKsWnzQ.mjs";
+import "../../loader-D-vIJjfY.mjs";
+import { t as handleSitemapData } from "../../seo-Dq707mNQ.mjs";
+import { a as getSiteSettingsWithDb } from "../../settings-BSXRtTzk.mjs";
+import { n as localizePath, t as interpolateUrlPattern } from "../../resolve-D6sM-SgF.mjs";
+import { n as getPublicOrigin } from "../../public-url-CUWWFME2.mjs";
 
 //#region src/astro/routes/sitemap-[collection].xml.ts
 const prerender = false;
@@ -16,8 +19,6 @@ const LT_RE = /</g;
 const GT_RE = />/g;
 const QUOT_RE = /"/g;
 const APOS_RE = /'/g;
-const SLUG_PLACEHOLDER = "{slug}";
-const ID_PLACEHOLDER = "{id}";
 const GET = async ({ params, locals, url }) => {
 	const { emdash } = locals;
 	const collectionSlug = params.collection;
@@ -26,7 +27,7 @@ const GET = async ({ params, locals, url }) => {
 		headers: { "Content-Type": "application/xml" }
 	});
 	try {
-		const siteUrl = ((await getSiteSettingsWithDb(emdash.db)).url || url.origin).replace(TRAILING_SLASH_RE, "");
+		const siteUrl = ((await getSiteSettingsWithDb(emdash.db)).url || getPublicOrigin(url, emdash?.config)).replace(TRAILING_SLASH_RE, "");
 		const result = await handleSitemapData(emdash.db, collectionSlug);
 		if (!result.success || !result.data) return new Response("<!-- Failed to generate sitemap -->", {
 			status: 500,
@@ -37,15 +38,59 @@ const GET = async ({ params, locals, url }) => {
 			status: 404,
 			headers: { "Content-Type": "application/xml" }
 		});
-		const lines = ["<?xml version=\"1.0\" encoding=\"UTF-8\"?>", "<urlset xmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\">"];
-		for (const entry of col.entries) {
-			const slug = entry.slug || entry.id;
-			const loc = `${siteUrl}${col.urlPattern ? col.urlPattern.replace(SLUG_PLACEHOLDER, encodeURIComponent(slug)).replace(ID_PLACEHOLDER, encodeURIComponent(entry.id)) : `/${encodeURIComponent(col.collection)}/${encodeURIComponent(slug)}`}`;
+		const i18nEnabled = isI18nEnabled();
+		const i18nConfig = getI18nConfig();
+		const groups = /* @__PURE__ */ new Map();
+		const ungrouped = [];
+		for (const entry of col.entries) if (i18nEnabled && entry.translationGroup) {
+			const list = groups.get(entry.translationGroup);
+			if (list) list.push(entry);
+			else groups.set(entry.translationGroup, [entry]);
+		} else ungrouped.push(entry);
+		const urlByEntry = /* @__PURE__ */ new Map();
+		const resolveEntryUrl = async (entry) => {
+			if (urlByEntry.has(entry.id)) return urlByEntry.get(entry.id) ?? null;
+			const localized = await localizePath(interpolateUrlPattern({
+				pattern: col.urlPattern,
+				collection: col.collection,
+				slug: entry.slug || entry.id,
+				id: entry.id
+			}), entry.locale);
+			const absolute = localized === null ? null : `${siteUrl}${localized}`;
+			urlByEntry.set(entry.id, absolute);
+			return absolute;
+		};
+		const useXhtml = i18nEnabled;
+		const lines = ["<?xml version=\"1.0\" encoding=\"UTF-8\"?>"];
+		lines.push(useXhtml ? "<urlset xmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\" xmlns:xhtml=\"http://www.w3.org/1999/xhtml\">" : "<urlset xmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\">");
+		const writeUrl = async (entry, siblings) => {
+			const loc = await resolveEntryUrl(entry);
+			if (loc === null) return;
 			lines.push("  <url>");
 			lines.push(`    <loc>${escapeXml(loc)}</loc>`);
 			lines.push(`    <lastmod>${escapeXml(entry.updatedAt)}</lastmod>`);
+			if (useXhtml && siblings && siblings.length > 1) {
+				for (const sib of siblings) {
+					const sibLoc = await resolveEntryUrl(sib);
+					if (sibLoc === null) continue;
+					lines.push(`    <xhtml:link rel="alternate" hreflang="${escapeXml(sib.locale)}" href="${escapeXml(sibLoc)}" />`);
+				}
+				const defaultSibling = i18nConfig && siblings.find((s) => s.locale === i18nConfig.defaultLocale);
+				let xDefaultLoc = null;
+				if (defaultSibling) xDefaultLoc = await resolveEntryUrl(defaultSibling);
+				if (xDefaultLoc === null) for (const sib of siblings) {
+					const sibLoc = await resolveEntryUrl(sib);
+					if (sibLoc !== null) {
+						xDefaultLoc = sibLoc;
+						break;
+					}
+				}
+				if (xDefaultLoc !== null) lines.push(`    <xhtml:link rel="alternate" hreflang="x-default" href="${escapeXml(xDefaultLoc)}" />`);
+			}
 			lines.push("  </url>");
-		}
+		};
+		for (const siblings of groups.values()) for (const entry of siblings) await writeUrl(entry, siblings);
+		for (const entry of ungrouped) await writeUrl(entry, null);
 		lines.push("</urlset>");
 		return new Response(lines.join("\n"), {
 			status: 200,

package/dist/astro/routes/sitemap-_collection_.xml.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"sitemap-_collection_.xml.mjs","names":[],"sources":["../../../src/astro/routes/sitemap-[collection].xml.ts"],"sourcesContent":["/**\n * Per-collection sitemap endpoint\n *\n * GET /sitemap-{collection}.xml - Sitemap for a single content collection.\n *\n * Uses the collection's url_pattern to build URLs. Falls back to\n * /{collection}/{slug} when no pattern is configured.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { handleSitemapData } from \"#api/handlers/seo.js\";\nimport { getSiteSettingsWithDb } from \"#settings/index.js\";\n\nexport const prerender = false;\n\nconst TRAILING_SLASH_RE = /\\/$/;\nconst AMP_RE = /&/g;\nconst LT_RE = /</g;\nconst GT_RE = />/g;\nconst QUOT_RE = /\"/g;\nconst APOS_RE = /'/g;\nconst SLUG_PLACEHOLDER = \"{slug}\";\nconst ID_PLACEHOLDER = \"{id}\";\n\nexport const GET: APIRoute = async ({ params, locals, url }) => {\n\tconst { emdash } = locals;\n\tconst collectionSlug = params.collection;\n\n\tif (!emdash?.db || !collectionSlug) {\n\t\treturn new Response(\"<!-- EmDash not configured -->\", {\n\t\t\tstatus: 500,\n\t\t\theaders: { \"Content-Type\": \"application/xml\" },\n\t\t});\n\t}\n\n\ttry {\n\t\tconst settings = await getSiteSettingsWithDb(emdash.db);\n\t\tconst siteUrl = (settings.url || url.origin).replace(TRAILING_SLASH_RE, \"\");\n\n\t\tconst result = await handleSitemapData(emdash.db, collectionSlug);\n\n\t\tif (!result.success || !result.data) {\n\t\t\treturn new Response(\"<!-- Failed to generate sitemap -->\", {\n\t\t\t\tstatus: 500,\n\t\t\t\theaders: { \"Content-Type\": \"application/xml\" },\n\t\t\t});\n\t\t}\n\n\t\tconst col = result.data.collections[0];\n\t\tif (!col) {\n\t\t\treturn new Response(\"<!-- Collection not found or empty -->\", {\n\t\t\t\tstatus: 404,\n\t\t\t\theaders: { \"Content-Type\": \"application/xml\" },\n\t\t\t});\n\t\t}\n\n\t\tconst lines: string[] = [\n\t\t\t'<?xml version=\"1.0\" encoding=\"UTF-8\"?>',\n\t\t\t'<urlset xmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\">',\n\t\t];\n\n\t\tfor (const entry of col.entries) {\n\t\t\tconst slug = entry.slug || entry.id;\n\t\t\tconst path = col.urlPattern\n\t\t\t\t? col.urlPattern\n\t\t\t\t\t\t.replace(SLUG_PLACEHOLDER, encodeURIComponent(slug))\n\t\t\t\t\t\t.replace(ID_PLACEHOLDER, encodeURIComponent(entry.id))\n\t\t\t\t: `/${encodeURIComponent(col.collection)}/${encodeURIComponent(slug)}`;\n\n\t\t\tconst loc = `${siteUrl}${path}`;\n\n\t\t\tlines.push(\"  <url>\");\n\t\t\tlines.push(`    <loc>${escapeXml(loc)}</loc>`);\n\t\t\tlines.push(`    <lastmod>${escapeXml(entry.updatedAt)}</lastmod>`);\n\t\t\tlines.push(\"  </url>\");\n\t\t}\n\n\t\tlines.push(\"</urlset>\");\n\n\t\treturn new Response(lines.join(\"\\n\"), {\n\t\t\tstatus: 200,\n\t\t\theaders: {\n\t\t\t\t\"Content-Type\": \"application/xml; charset=utf-8\",\n\t\t\t\t\"Cache-Control\": \"public, max-age=3600\",\n\t\t\t},\n\t\t});\n\t} catch {\n\t\treturn new Response(\"<!-- Internal error generating sitemap -->\", {\n\t\t\tstatus: 500,\n\t\t\theaders: { \"Content-Type\": \"application/xml\" },\n\t\t});\n\t}\n};\n\n/** Escape special XML characters in a string */\nfunction escapeXml(str: string): string {\n\treturn str\n\t\t.replace(AMP_RE, \"&amp;\")\n\t\t.replace(LT_RE, \"&lt;\")\n\t\t.replace(GT_RE, \"&gt;\")\n\t\t.replace(QUOT_RE, \"&quot;\")\n\t\t.replace(APOS_RE, \"&apos;\");\n}\n"],"mappings":";;;;;;;;;;;AAcA,MAAa,YAAY;AAEzB,MAAM,oBAAoB;AAC1B,MAAM,SAAS;AACf,MAAM,QAAQ;AACd,MAAM,QAAQ;AACd,MAAM,UAAU;AAChB,MAAM,UAAU;AAChB,MAAM,mBAAmB;AACzB,MAAM,iBAAiB;AAEvB,MAAa,MAAgB,OAAO,EAAE,QAAQ,QAAQ,UAAU;CAC/D,MAAM,EAAE,WAAW;CACnB,MAAM,iBAAiB,OAAO;AAE9B,KAAI,CAAC,QAAQ,MAAM,CAAC,eACnB,QAAO,IAAI,SAAS,kCAAkC;EACrD,QAAQ;EACR,SAAS,EAAE,gBAAgB,mBAAmB;EAC9C,CAAC;AAGH,KAAI;EAEH,MAAM,YADW,MAAM,sBAAsB,OAAO,GAAG,EAC7B,OAAO,IAAI,QAAQ,QAAQ,mBAAmB,GAAG;EAE3E,MAAM,SAAS,MAAM,kBAAkB,OAAO,IAAI,eAAe;AAEjE,MAAI,CAAC,OAAO,WAAW,CAAC,OAAO,KAC9B,QAAO,IAAI,SAAS,uCAAuC;GAC1D,QAAQ;GACR,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C,CAAC;EAGH,MAAM,MAAM,OAAO,KAAK,YAAY;AACpC,MAAI,CAAC,IACJ,QAAO,IAAI,SAAS,0CAA0C;GAC7D,QAAQ;GACR,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C,CAAC;EAGH,MAAM,QAAkB,CACvB,8CACA,iEACA;AAED,OAAK,MAAM,SAAS,IAAI,SAAS;GAChC,MAAM,OAAO,MAAM,QAAQ,MAAM;GAOjC,MAAM,MAAM,GAAG,UANF,IAAI,aACd,IAAI,WACH,QAAQ,kBAAkB,mBAAmB,KAAK,CAAC,CACnD,QAAQ,gBAAgB,mBAAmB,MAAM,GAAG,CAAC,GACtD,IAAI,mBAAmB,IAAI,WAAW,CAAC,GAAG,mBAAmB,KAAK;AAIrE,SAAM,KAAK,UAAU;AACrB,SAAM,KAAK,YAAY,UAAU,IAAI,CAAC,QAAQ;AAC9C,SAAM,KAAK,gBAAgB,UAAU,MAAM,UAAU,CAAC,YAAY;AAClE,SAAM,KAAK,WAAW;;AAGvB,QAAM,KAAK,YAAY;AAEvB,SAAO,IAAI,SAAS,MAAM,KAAK,KAAK,EAAE;GACrC,QAAQ;GACR,SAAS;IACR,gBAAgB;IAChB,iBAAiB;IACjB;GACD,CAAC;SACK;AACP,SAAO,IAAI,SAAS,8CAA8C;GACjE,QAAQ;GACR,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C,CAAC;;;;AAKJ,SAAS,UAAU,KAAqB;AACvC,QAAO,IACL,QAAQ,QAAQ,QAAQ,CACxB,QAAQ,OAAO,OAAO,CACtB,QAAQ,OAAO,OAAO,CACtB,QAAQ,SAAS,SAAS,CAC1B,QAAQ,SAAS,SAAS"}
+{"version":3,"file":"sitemap-_collection_.xml.mjs","names":[],"sources":["../../../src/astro/routes/sitemap-[collection].xml.ts"],"sourcesContent":["/**\n * Per-collection sitemap endpoint\n *\n * GET /sitemap-{collection}.xml - Sitemap for a single content collection.\n *\n * Uses the collection's url_pattern to build URLs. Falls back to\n * /{collection}/{slug} when no pattern is configured.\n *\n * i18n behaviour: when Astro i18n is enabled, the locale prefix is\n * applied via Astro's own `getRelativeLocaleUrl` (which honours\n * `prefixDefaultLocale`, custom `path` mappings, and other `routing`\n * config). Each translation row is emitted as its own `<url>` with\n * `<xhtml:link rel=\"alternate\" hreflang=\"...\">` entries pointing to\n * its siblings (grouped by `translation_group`). The default-locale\n * variant is also linked as `hreflang=\"x-default\"`.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { handleSitemapData } from \"#api/handlers/seo.js\";\nimport { getPublicOrigin } from \"#api/public-url.js\";\nimport { getSiteSettingsWithDb } from \"#settings/index.js\";\n\nimport { getI18nConfig, isI18nEnabled } from \"../../i18n/config.js\";\nimport { interpolateUrlPattern, localizePath } from \"../../i18n/resolve.js\";\n\nexport const prerender = false;\n\nconst TRAILING_SLASH_RE = /\\/$/;\nconst AMP_RE = /&/g;\nconst LT_RE = /</g;\nconst GT_RE = />/g;\nconst QUOT_RE = /\"/g;\nconst APOS_RE = /'/g;\n\nexport const GET: APIRoute = async ({ params, locals, url }) => {\n\tconst { emdash } = locals;\n\tconst collectionSlug = params.collection;\n\n\tif (!emdash?.db || !collectionSlug) {\n\t\treturn new Response(\"<!-- EmDash not configured -->\", {\n\t\t\tstatus: 500,\n\t\t\theaders: { \"Content-Type\": \"application/xml\" },\n\t\t});\n\t}\n\n\ttry {\n\t\tconst settings = await getSiteSettingsWithDb(emdash.db);\n\t\tconst siteUrl = (settings.url || getPublicOrigin(url, emdash?.config)).replace(\n\t\t\tTRAILING_SLASH_RE,\n\t\t\t\"\",\n\t\t);\n\n\t\tconst result = await handleSitemapData(emdash.db, collectionSlug);\n\n\t\tif (!result.success || !result.data) {\n\t\t\treturn new Response(\"<!-- Failed to generate sitemap -->\", {\n\t\t\t\tstatus: 500,\n\t\t\t\theaders: { \"Content-Type\": \"application/xml\" },\n\t\t\t});\n\t\t}\n\n\t\tconst col = result.data.collections[0];\n\t\tif (!col) {\n\t\t\treturn new Response(\"<!-- Collection not found or empty -->\", {\n\t\t\t\tstatus: 404,\n\t\t\t\theaders: { \"Content-Type\": \"application/xml\" },\n\t\t\t});\n\t\t}\n\n\t\tconst i18nEnabled = isI18nEnabled();\n\t\tconst i18nConfig = getI18nConfig();\n\n\t\t// Group entries by `translation_group` so each <url> can advertise\n\t\t// its sibling translations via xhtml:link. Rows without a group\n\t\t// (legacy/single-locale data) are emitted individually.\n\t\ttype Entry = (typeof col.entries)[number];\n\t\tconst groups = new Map<string, Entry[]>();\n\t\tconst ungrouped: Entry[] = [];\n\t\tfor (const entry of col.entries) {\n\t\t\tif (i18nEnabled && entry.translationGroup) {\n\t\t\t\tconst list = groups.get(entry.translationGroup);\n\t\t\t\tif (list) list.push(entry);\n\t\t\t\telse groups.set(entry.translationGroup, [entry]);\n\t\t\t} else {\n\t\t\t\tungrouped.push(entry);\n\t\t\t}\n\t\t}\n\n\t\t// Resolve every URL up-front so we can reference sibling URLs\n\t\t// while emitting hreflang alternates without re-resolving.\n\t\t// `localizePath` returns `null` when the row's locale isn't in\n\t\t// the configured `i18n.locales` list -- the site can't serve a\n\t\t// route for it, so the entry is dropped from the sitemap and\n\t\t// omitted from sibling alternates.\n\t\tconst urlByEntry = new Map<string, string | null>();\n\t\tconst resolveEntryUrl = async (entry: Entry): Promise<string | null> => {\n\t\t\tif (urlByEntry.has(entry.id)) return urlByEntry.get(entry.id) ?? null;\n\t\t\tconst path = interpolateUrlPattern({\n\t\t\t\tpattern: col.urlPattern,\n\t\t\t\tcollection: col.collection,\n\t\t\t\tslug: entry.slug || entry.id,\n\t\t\t\tid: entry.id,\n\t\t\t});\n\t\t\tconst localized = await localizePath(path, entry.locale);\n\t\t\tconst absolute = localized === null ? null : `${siteUrl}${localized}`;\n\t\t\turlByEntry.set(entry.id, absolute);\n\t\t\treturn absolute;\n\t\t};\n\n\t\tconst useXhtml = i18nEnabled;\n\t\tconst lines: string[] = ['<?xml version=\"1.0\" encoding=\"UTF-8\"?>'];\n\t\tlines.push(\n\t\t\tuseXhtml\n\t\t\t\t? '<urlset xmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\" xmlns:xhtml=\"http://www.w3.org/1999/xhtml\">'\n\t\t\t\t: '<urlset xmlns=\"http://www.sitemaps.org/schemas/sitemap/0.9\">',\n\t\t);\n\n\t\tconst writeUrl = async (entry: Entry, siblings: Entry[] | null) => {\n\t\t\tconst loc = await resolveEntryUrl(entry);\n\t\t\t// Skip rows whose locale isn't in the configured `i18n.locales`\n\t\t\t// list. Linking to a route the site can't serve is worse than\n\t\t\t// no link at all (search engines hit a 404 and downrank).\n\t\t\tif (loc === null) return;\n\n\t\t\tlines.push(\"  <url>\");\n\t\t\tlines.push(`    <loc>${escapeXml(loc)}</loc>`);\n\t\t\tlines.push(`    <lastmod>${escapeXml(entry.updatedAt)}</lastmod>`);\n\n\t\t\tif (useXhtml && siblings && siblings.length > 1) {\n\t\t\t\t// Emit one xhtml:link per sibling (including self -- Google\n\t\t\t\t// recommends including the page's own hreflang annotation).\n\t\t\t\t// Siblings with unroutable locales are skipped here too.\n\t\t\t\tfor (const sib of siblings) {\n\t\t\t\t\tconst sibLoc = await resolveEntryUrl(sib);\n\t\t\t\t\tif (sibLoc === null) continue;\n\t\t\t\t\tlines.push(\n\t\t\t\t\t\t`    <xhtml:link rel=\"alternate\" hreflang=\"${escapeXml(sib.locale)}\" href=\"${escapeXml(sibLoc)}\" />`,\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\t// x-default: prefer the default-locale sibling, otherwise\n\t\t\t\t// the first sibling with a routable URL. Stable order:\n\t\t\t\t// rows arrive sorted by updated_at DESC from the handler.\n\t\t\t\tconst defaultSibling =\n\t\t\t\t\ti18nConfig && siblings.find((s) => s.locale === i18nConfig.defaultLocale);\n\t\t\t\tlet xDefaultLoc: string | null = null;\n\t\t\t\tif (defaultSibling) {\n\t\t\t\t\txDefaultLoc = await resolveEntryUrl(defaultSibling);\n\t\t\t\t}\n\t\t\t\tif (xDefaultLoc === null) {\n\t\t\t\t\tfor (const sib of siblings) {\n\t\t\t\t\t\tconst sibLoc = await resolveEntryUrl(sib);\n\t\t\t\t\t\tif (sibLoc !== null) {\n\t\t\t\t\t\t\txDefaultLoc = sibLoc;\n\t\t\t\t\t\t\tbreak;\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\tif (xDefaultLoc !== null) {\n\t\t\t\t\tlines.push(\n\t\t\t\t\t\t`    <xhtml:link rel=\"alternate\" hreflang=\"x-default\" href=\"${escapeXml(xDefaultLoc)}\" />`,\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tlines.push(\"  </url>\");\n\t\t};\n\n\t\tfor (const siblings of groups.values()) {\n\t\t\tfor (const entry of siblings) {\n\t\t\t\tawait writeUrl(entry, siblings);\n\t\t\t}\n\t\t}\n\t\tfor (const entry of ungrouped) {\n\t\t\tawait writeUrl(entry, null);\n\t\t}\n\n\t\tlines.push(\"</urlset>\");\n\n\t\treturn new Response(lines.join(\"\\n\"), {\n\t\t\tstatus: 200,\n\t\t\theaders: {\n\t\t\t\t\"Content-Type\": \"application/xml; charset=utf-8\",\n\t\t\t\t\"Cache-Control\": \"public, max-age=3600\",\n\t\t\t},\n\t\t});\n\t} catch {\n\t\treturn new Response(\"<!-- Internal error generating sitemap -->\", {\n\t\t\tstatus: 500,\n\t\t\theaders: { \"Content-Type\": \"application/xml\" },\n\t\t});\n\t}\n};\n\n/** Escape special XML characters in a string */\nfunction escapeXml(str: string): string {\n\treturn str\n\t\t.replace(AMP_RE, \"&amp;\")\n\t\t.replace(LT_RE, \"&lt;\")\n\t\t.replace(GT_RE, \"&gt;\")\n\t\t.replace(QUOT_RE, \"&quot;\")\n\t\t.replace(APOS_RE, \"&apos;\");\n}\n"],"mappings":";;;;;;;;;;;;;;AA0BA,MAAa,YAAY;AAEzB,MAAM,oBAAoB;AAC1B,MAAM,SAAS;AACf,MAAM,QAAQ;AACd,MAAM,QAAQ;AACd,MAAM,UAAU;AAChB,MAAM,UAAU;AAEhB,MAAa,MAAgB,OAAO,EAAE,QAAQ,QAAQ,UAAU;CAC/D,MAAM,EAAE,WAAW;CACnB,MAAM,iBAAiB,OAAO;AAE9B,KAAI,CAAC,QAAQ,MAAM,CAAC,eACnB,QAAO,IAAI,SAAS,kCAAkC;EACrD,QAAQ;EACR,SAAS,EAAE,gBAAgB,mBAAmB;EAC9C,CAAC;AAGH,KAAI;EAEH,MAAM,YADW,MAAM,sBAAsB,OAAO,GAAG,EAC7B,OAAO,gBAAgB,KAAK,QAAQ,OAAO,EAAE,QACtE,mBACA,GACA;EAED,MAAM,SAAS,MAAM,kBAAkB,OAAO,IAAI,eAAe;AAEjE,MAAI,CAAC,OAAO,WAAW,CAAC,OAAO,KAC9B,QAAO,IAAI,SAAS,uCAAuC;GAC1D,QAAQ;GACR,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C,CAAC;EAGH,MAAM,MAAM,OAAO,KAAK,YAAY;AACpC,MAAI,CAAC,IACJ,QAAO,IAAI,SAAS,0CAA0C;GAC7D,QAAQ;GACR,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C,CAAC;EAGH,MAAM,cAAc,eAAe;EACnC,MAAM,aAAa,eAAe;EAMlC,MAAM,yBAAS,IAAI,KAAsB;EACzC,MAAM,YAAqB,EAAE;AAC7B,OAAK,MAAM,SAAS,IAAI,QACvB,KAAI,eAAe,MAAM,kBAAkB;GAC1C,MAAM,OAAO,OAAO,IAAI,MAAM,iBAAiB;AAC/C,OAAI,KAAM,MAAK,KAAK,MAAM;OACrB,QAAO,IAAI,MAAM,kBAAkB,CAAC,MAAM,CAAC;QAEhD,WAAU,KAAK,MAAM;EAUvB,MAAM,6BAAa,IAAI,KAA4B;EACnD,MAAM,kBAAkB,OAAO,UAAyC;AACvE,OAAI,WAAW,IAAI,MAAM,GAAG,CAAE,QAAO,WAAW,IAAI,MAAM,GAAG,IAAI;GAOjE,MAAM,YAAY,MAAM,aANX,sBAAsB;IAClC,SAAS,IAAI;IACb,YAAY,IAAI;IAChB,MAAM,MAAM,QAAQ,MAAM;IAC1B,IAAI,MAAM;IACV,CAAC,EACyC,MAAM,OAAO;GACxD,MAAM,WAAW,cAAc,OAAO,OAAO,GAAG,UAAU;AAC1D,cAAW,IAAI,MAAM,IAAI,SAAS;AAClC,UAAO;;EAGR,MAAM,WAAW;EACjB,MAAM,QAAkB,CAAC,6CAAyC;AAClE,QAAM,KACL,WACG,gHACA,iEACH;EAED,MAAM,WAAW,OAAO,OAAc,aAA6B;GAClE,MAAM,MAAM,MAAM,gBAAgB,MAAM;AAIxC,OAAI,QAAQ,KAAM;AAElB,SAAM,KAAK,UAAU;AACrB,SAAM,KAAK,YAAY,UAAU,IAAI,CAAC,QAAQ;AAC9C,SAAM,KAAK,gBAAgB,UAAU,MAAM,UAAU,CAAC,YAAY;AAElE,OAAI,YAAY,YAAY,SAAS,SAAS,GAAG;AAIhD,SAAK,MAAM,OAAO,UAAU;KAC3B,MAAM,SAAS,MAAM,gBAAgB,IAAI;AACzC,SAAI,WAAW,KAAM;AACrB,WAAM,KACL,6CAA6C,UAAU,IAAI,OAAO,CAAC,UAAU,UAAU,OAAO,CAAC,MAC/F;;IAMF,MAAM,iBACL,cAAc,SAAS,MAAM,MAAM,EAAE,WAAW,WAAW,cAAc;IAC1E,IAAI,cAA6B;AACjC,QAAI,eACH,eAAc,MAAM,gBAAgB,eAAe;AAEpD,QAAI,gBAAgB,KACnB,MAAK,MAAM,OAAO,UAAU;KAC3B,MAAM,SAAS,MAAM,gBAAgB,IAAI;AACzC,SAAI,WAAW,MAAM;AACpB,oBAAc;AACd;;;AAIH,QAAI,gBAAgB,KACnB,OAAM,KACL,8DAA8D,UAAU,YAAY,CAAC,MACrF;;AAIH,SAAM,KAAK,WAAW;;AAGvB,OAAK,MAAM,YAAY,OAAO,QAAQ,CACrC,MAAK,MAAM,SAAS,SACnB,OAAM,SAAS,OAAO,SAAS;AAGjC,OAAK,MAAM,SAAS,UACnB,OAAM,SAAS,OAAO,KAAK;AAG5B,QAAM,KAAK,YAAY;AAEvB,SAAO,IAAI,SAAS,MAAM,KAAK,KAAK,EAAE;GACrC,QAAQ;GACR,SAAS;IACR,gBAAgB;IAChB,iBAAiB;IACjB;GACD,CAAC;SACK;AACP,SAAO,IAAI,SAAS,8CAA8C;GACjE,QAAQ;GACR,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C,CAAC;;;;AAKJ,SAAS,UAAU,KAAqB;AACvC,QAAO,IACL,QAAQ,QAAQ,QAAQ,CACxB,QAAQ,OAAO,OAAO,CACtB,QAAQ,OAAO,OAAO,CACtB,QAAQ,SAAS,SAAS,CAC1B,QAAQ,SAAS,SAAS"}

package/dist/astro/routes/sitemap.xml.mjs

@@ -1,13 +1,13 @@
 import "../../dialect-helpers-BKCvISIQ.mjs";
 import "../../base64-CqR-7kqF.mjs";
-import "../../types-CwXMEPRr.mjs";
-import "../../media-Dg7he9uK.mjs";
+import "../../types-B0bmgwMG.mjs";
+import "../../media-CKQd8AYU.mjs";
 import "../../options-BL4X94qY.mjs";
 import "../../request-cache-dzCt8TZB.mjs";
-import "../../loader-Cs6-Bqe6.mjs";
-import { t as handleSitemapData } from "../../seo-BoR4wCUh.mjs";
-import { a as getSiteSettingsWithDb } from "../../settings-xQKsWnzQ.mjs";
-import { n as getPublicOrigin } from "../../public-url-CseXl9Fv.mjs";
+import "../../loader-D-vIJjfY.mjs";
+import { t as handleSitemapData } from "../../seo-Dq707mNQ.mjs";
+import { a as getSiteSettingsWithDb } from "../../settings-BSXRtTzk.mjs";
+import { n as getPublicOrigin } from "../../public-url-CUWWFME2.mjs";
 
 //#region src/astro/routes/sitemap.xml.ts
 const prerender = false;

package/dist/astro/types.d.mts

@@ -1,15 +1,15 @@
-import { r as ContentItem } from "../types-CzvJd1ND.mjs";
-import { d as ContentListResponse, f as ContentResponse } from "../options-Cq64Wx0O.mjs";
-import { t as Database } from "../types-C1KKK4VP.mjs";
-import { J as PageFragmentContribution, Ot as Element, Z as PageMetadataContribution, _t as ResolvedPlugin, mt as PublicPageContext } from "../types-B05e2naf.mjs";
-import "../bylines-BdUP8NuI.mjs";
-import { f as MediaProvider, p as MediaProviderCapabilities } from "../placeholder-D3cFCU9y.mjs";
-import { $n as MediaResponse, Br as MediaItem, Ot as EmailPipeline, Pt as EmDashConfig, Qn as MediaListResponse, Rn as SandboxRunner, kt as HookPipeline } from "../index-BV8iJ-6s.mjs";
-import "../runner-DcfZewkO.mjs";
-import "../index-D2gvztOP.mjs";
-import { d as Storage } from "../types-DmxPPXGf.mjs";
-import "../types-Cb2UCDJg.mjs";
-import "../validate-BpQGsmd7.mjs";
+import { r as ContentItem } from "../types-DaYDYW6g.mjs";
+import { d as ContentListResponse, f as ContentResponse } from "../options-DhV-gwJb.mjs";
+import { t as Database } from "../types-DaqNzqVt.mjs";
+import { J as PageFragmentContribution, Z as PageMetadataContribution, ht as PublicPageContext, jt as Element, yt as ResolvedPlugin } from "../types-DGHWRQgr.mjs";
+import "../bylines-B2_XmnSU.mjs";
+import { f as MediaProvider, p as MediaProviderCapabilities } from "../placeholder-KCkkCtgQ.mjs";
+import { At as EmailPipeline, Hn as SandboxRunner, It as EmDashConfig, ir as MediaResponse, jt as HookPipeline, qr as MediaItem, rr as MediaListResponse } from "../index-BPZFAcgE.mjs";
+import "../runner-DSQBurMS.mjs";
+import "../index-CC42STEm.mjs";
+import { d as Storage } from "../types-CkDSF81F.mjs";
+import "../types-bYmRn_Uy.mjs";
+import "../validate-DQtHw9NT.mjs";
 import "../index.mjs";
 import { Kysely } from "kysely";
 
@@ -97,6 +97,12 @@ interface EmDashManifest {
   version: string;
   commit?: string;
   hash: string;
+  /**
+   * Version of Astro the host project is built with. Present when the
+   * integration could resolve it. Surfaced so the admin can evaluate a
+   * registry plugin's `env:astro` requirement against the running host.
+   */
+  astroVersion?: string;
   collections: Record<string, ManifestCollection>;
   plugins: Record<string, ManifestPlugin>;
   /**
@@ -308,6 +314,7 @@ interface EmDashHandlers {
   }>>;
   handleRevisionRestore: (revisionId: string, callerUserId: string) => Promise<HandlerResponse>;
   handlePluginApiRoute: (pluginId: string, method: string, path: string, request: Request) => Promise<HandlerResponse>;
+  handlePublicPluginApiRoute: (pluginId: string, method: string, path: string, request: Request) => Promise<HandlerResponse>;
   getPluginRouteMeta: (pluginId: string, path: string) => {
     public: boolean;
   } | null;
@@ -328,6 +335,7 @@ interface EmDashHandlers {
   getManifest: () => Promise<EmDashManifest>;
   invalidateUrlPatternCache: () => void;
   getSandboxRunner: () => SandboxRunner | null;
+  isSandboxBypassed: () => boolean;
   syncMarketplacePlugins: () => Promise<void>;
   syncRegistryPlugins: () => Promise<void>;
   setPluginStatus: (pluginId: string, status: "active" | "inactive") => Promise<void>;

package/dist/astro/types.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.mts","names":[],"sources":["../../src/astro/types.ts"],"mappings":";;;;;;;;;;;;;;;;;;;UAyBiB,kBAAA;EAChB,KAAA;EACA,aAAA;EACA,QAAA;EACA,MAAA;EACA,UAAA;EACA,MAAA,EAAQ,MAAA;IAGN,IAAA;IACA,KAAA;IACA,QAAA;IACA,MAAA;IANY;;;;;;IAaZ,OAAA,GAAU,KAAA;MAAQ,KAAA;MAAe,KAAA;IAAA,KAAmB,MAAA,mBATpD;IAWA,EAAA,WATA;IAWA,UAAA,GAAa,MAAA;EAAA;AAAA;;;;UAQC,cAAA;EAChB,OAAA;EATqB;EAWrB,OAAA;EAHgB;EAKhB,OAAA;;;;;;;EAOA,SAAA;EACA,UAAA,GAAa,KAAA;IACZ,IAAA;IACA,KAAA;IACA,IAAA;EAAA;EAED,gBAAA,GAAmB,KAAA;IAClB,EAAA;IACA,KAAA;IACA,IAAA;EAAA;EAED,YAAA,GAAe,KAAA;IACd,IAAA;IACA,KAAA;IACA,UAAA;IACA,QAAA,GAAW,OAAA;EAAA;EAJZ;EAOA,kBAAA,GAAqB,KAAA;IACpB,IAAA;IACA,KAAA;IACA,IAAA;IACA,WAAA;IACA,WAAA;IACA,MAAA,GAAS,OAAA;EAAA;AAAA;;;;;;KASC,gBAAA;;;AAAZ;UAKiB,cAAA;EAChB,OAAA;EACA,MAAA;EACA,IAAA;EACA,WAAA,EAAa,MAAA,SAAe,kBAAA;EAC5B,OAAA,EAAS,MAAA,SAAe,cAAA;;;;;;;EAOxB,QAAA,EAAU,gBAAA;EAkBO;;;;EAbjB,aAAA;EAbA;;;;EAkBA,IAAA;IACC,aAAA;IACA,OAAA;IACA,mBAAA;EAAA;EAHD;;;EAQA,UAAA,EAAY,KAAA;IACX,IAAA;IACA,KAAA;IACA,aAAA;IACA,YAAA;IACA,WAAA;EAAA;EAAA;;;;;;;;EAUD,WAAA;EAqCC;;;;;AAaF;;;;;EAvCC,QAAA;IACC,aAAA;IACA,cAAA;IACA,MAAA;MAwCA;;;;;;AAaF;;;MA3CG,wBAAA;MAuDG;;;;MAlDH,wBAAA;IAAA;EAAA;EAyFU;;;;EAlFZ,KAAA;IACC,IAAA;IACA,QAAA;IACA,OAAA;EAAA;AAAA;;;;;;;;UAWe,eAAA;EAChB,OAAA;EACA,IAAA,GAAO,CAAA;EACP,KAAA;IACC,IAAA;IACA,OAAA;IACA,OAAA,GAAU,MAAA;EAAA;AAAA;;;;;;;;UAWK,cAAA;EAEhB,iBAAA,GACC,UAAA,UACA,MAAA;IACC,MAAA;IACA,KAAA;IACA,MAAA;IACA,OAAA;IACA,KAAA;IACA,MAAA;EAAA,MAEG,OAAA,CAAQ,eAAA;EAEb,gBAAA,GACC,UAAA,UACA,EAAA,UACA,MAAA,cACI,OAAA,CACJ,eAAA;IACC,IAAA;MACC,EAAA;MACA,QAAA;MAAA,CACC,GAAA;IAAA;IAEF,IAAA;EAAA;EAIF,mBAAA,GACC,UAAA,UACA,IAAA;IACC,IAAA,EAAM,MAAA;IACN,IAAA;IACA,MAAA;IACA,QAAA;IACA,MAAA;IACA,aAAA;IACA,SAAA;IACA,WAAA;EAAA,MAEG,OAAA,CAAQ,eAAA;EAEb,mBAAA,GACC,UAAA,UACA,EAAA,UACA,IAAA;IACC,IAAA,GAAO,MAAA;IACP,IAAA;IACA,MAAA;IACA,QAAA;IACA,OAAA,GAAU,KAAA;MAAQ,QAAA;MAAkB,SAAA;IAAA;IACpC,GAAA;MACC,KAAA;MACA,WAAA;MACA,KAAA;MACA,SAAA;MACA,OAAA;IAAA;IAED,WAAA;IACA,IAAA;EAAA,MAEG,OAAA,CAAQ,eAAA;EAEb,mBAAA,GAAsB,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAGjE,wBAAA,GACC,UAAA,UACA,MAAA;IAAW,MAAA;IAAiB,KAAA;EAAA,MACxB,OAAA,CAAQ,eAAA;EAEb,oBAAA,GAAuB,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAElE,4BAAA,GAA+B,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAE1E,yBAAA,GAA4B,UAAA,aAAuB,OAAA,CAAQ,eAAA;EAE3D,gCAAA,GAAmC,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAE9E,sBAAA,GACC,UAAA,UACA,EAAA,UACA,QAAA,cACI,OAAA,CAAQ,eAAA;EAGb,oBAAA,GACC,UAAA,UACA,EAAA,UACA,OAAA;IAAY,WAAA;EAAA,MACR,OAAA,CAAQ,eAAA;EAEb,sBAAA,GAAyB,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAEpE,qBAAA,GACC,UAAA,UACA,EAAA,UACA,WAAA,aACI,OAAA,CAAQ,eAAA;EAEb,uBAAA,GAA0B,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAErE,2BAAA,GAA8B,UAAA,aAAuB,OAAA,CAAQ,eAAA;EAE7D,yBAAA,GAA4B,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAEvE,oBAAA,GAAuB,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAElE,yBAAA,GAA4B,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAGvE,eAAA,GAAkB,MAAA;IACjB,MAAA;IACA,KAAA;IACA,QAAA;EAAA,MACK,OAAA,CAAQ,eAAA;EAEd,cAAA,GAAiB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAExC,iBAAA,GAAoB,KAAA;IACnB,QAAA;IACA,QAAA;IACA,IAAA;IACA,KAAA;IACA,MAAA;IACA,UAAA;IACA,WAAA;IACA,QAAA;IACA,aAAA;IACA,QAAA;EAAA,MACK,OAAA,CAAQ,eAAA;EAEd,iBAAA,GACC,EAAA,UACA,KAAA;IAAS,GAAA;IAAc,OAAA;IAAkB,KAAA;IAAgB,MAAA;EAAA,MACrD,OAAA,CAAQ,eAAA;EAEb,iBAAA,GAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAG3C,kBAAA,GACC,UAAA,UACA,OAAA,UACA,MAAA;IAAW,KAAA;EAAA,MACP,OAAA,CAAQ,eAAA;EAEb,iBAAA,GAAoB,UAAA,aAAuB,OAAA,CAC1C,eAAA;IACC,IAAA;MACC,EAAA;MACA,UAAA;MACA,OAAA;MACA,QAAA;MAAA,CACC,GAAA;IAAA;EAAA;EAKJ,qBAAA,GAAwB,UAAA,UAAoB,YAAA,aAAyB,OAAA,CAAQ,eAAA;EAG7E,oBAAA,GACC,QAAA,UACA,MAAA,UACA,IAAA,UACA,OAAA,EAAS,OAAA,KACL,OAAA,CAAQ,eAAA;EAGb,kBAAA,GAAqB,QAAA,UAAkB,IAAA;IAAmB,MAAA;EAAA;EAG1D,gBAAA,GAAmB,UAAA,aANP,aAAA;EAOZ,oBAAA,QAA4B,KAAA;IAC3B,EAAA;IACA,IAAA;IACA,IAAA;IACA,YAAA,EALkF,yBAAA;EAAA;EASnF,OAAA,EARiC,OAAA;EASjC,EAAA,EAAI,MAAA,CADkC,QAAA;EAEtC,iBAAA,IAAqB,UAAA;EAGrB,KAAA,EAJU,YAAA;EAOV,KAAA,EAHiD,aAAA;EAMjD,iBAAA,EAHkD,cAAA;EAMlD,MAAA,EAH+D,YAAA;EAQ/D,WAAA,QAAmB,OAAA,CAAQ,cAAA;EAK3B,yBAAA;EAGA,gBAAA,QAR0B,aAAA;EAW1B,sBAAA,QAA8B,OAAA;EAG9B,mBAAA,QAA2B,OAAA;EAG3B,eAAA,GAAkB,QAAA,UAAkB,MAAA,4BAAkC,OAAA;EAGtE,mBAAA,GACC,IAAA,EAJ4E,iBAAA,KAKxE,OAAA,CADiD,wBAAA;EAEtD,oBAAA,GACC,IAAA,EAFW,iBAAA,KAGP,OAAA,CADiD,wBAAA;EAnJnB;;;;;;EA4JnC,mBAAA,SAA4B,OAAA;AAAA"}
+{"version":3,"file":"types.d.mts","names":[],"sources":["../../src/astro/types.ts"],"mappings":";;;;;;;;;;;;;;;;;;;UAyBiB,kBAAA;EAChB,KAAA;EACA,aAAA;EACA,QAAA;EACA,MAAA;EACA,UAAA;EACA,MAAA,EAAQ,MAAA;IAGN,IAAA;IACA,KAAA;IACA,QAAA;IACA,MAAA;IANY;;;;;;IAaZ,OAAA,GAAU,KAAA;MAAQ,KAAA;MAAe,KAAA;IAAA,KAAmB,MAAA,mBATpD;IAWA,EAAA,WATA;IAWA,UAAA,GAAa,MAAA;EAAA;AAAA;;;;UAQC,cAAA;EAChB,OAAA;EATqB;EAWrB,OAAA;EAHgB;EAKhB,OAAA;;;;;;;EAOA,SAAA;EACA,UAAA,GAAa,KAAA;IACZ,IAAA;IACA,KAAA;IACA,IAAA;EAAA;EAED,gBAAA,GAAmB,KAAA;IAClB,EAAA;IACA,KAAA;IACA,IAAA;EAAA;EAED,YAAA,GAAe,KAAA;IACd,IAAA;IACA,KAAA;IACA,UAAA;IACA,QAAA,GAAW,OAAA;EAAA;EAJZ;EAOA,kBAAA,GAAqB,KAAA;IACpB,IAAA;IACA,KAAA;IACA,IAAA;IACA,WAAA;IACA,WAAA;IACA,MAAA,GAAS,OAAA;EAAA;AAAA;;;;;;KASC,gBAAA;;;AAAZ;UAKiB,cAAA;EAChB,OAAA;EACA,MAAA;EACA,IAAA;EAHgB;;;;;EAShB,YAAA;EACA,WAAA,EAAa,MAAA,SAAe,kBAAA;EAC5B,OAAA,EAAS,MAAA,SAAe,cAAA;EAyBZ;;;;;;EAlBZ,QAAA,EAAU,gBAAA;EARV;;;;EAaA,aAAA;EAZwB;;;;EAiBxB,IAAA;IACC,aAAA;IACA,OAAA;IACA,mBAAA;EAAA;EAKW;;;EAAZ,UAAA,EAAY,KAAA;IACX,IAAA;IACA,KAAA;IACA,aAAA;IACA,YAAA;IACA,WAAA;EAAA;EAwBA;;;;;;;;EAdD,WAAA;EAkDgB;;;;;;;;;;EAvChB,QAAA;IACC,aAAA;IACA,cAAA;IACA,MAAA;MA0CgB;AAWlB;;;;;;;;MA3CG,wBAAA;MAoFG;;;;MA/EH,wBAAA;IAAA;EAAA;EA4GW;;;;EArGb,KAAA;IACC,IAAA;IACA,QAAA;IACA,OAAA;EAAA;AAAA;;;;;;;;UAWe,eAAA;EAChB,OAAA;EACA,IAAA,GAAO,CAAA;EACP,KAAA;IACC,IAAA;IACA,OAAA;IACA,OAAA,GAAU,MAAA;EAAA;AAAA;;;;;;;;UAWK,cAAA;EAEhB,iBAAA,GACC,UAAA,UACA,MAAA;IACC,MAAA;IACA,KAAA;IACA,MAAA;IACA,OAAA;IACA,KAAA;IACA,MAAA;EAAA,MAEG,OAAA,CAAQ,eAAA;EAEb,gBAAA,GACC,UAAA,UACA,EAAA,UACA,MAAA,cACI,OAAA,CACJ,eAAA;IACC,IAAA;MACC,EAAA;MACA,QAAA;MAAA,CACC,GAAA;IAAA;IAEF,IAAA;EAAA;EAIF,mBAAA,GACC,UAAA,UACA,IAAA;IACC,IAAA,EAAM,MAAA;IACN,IAAA;IACA,MAAA;IACA,QAAA;IACA,MAAA;IACA,aAAA;IACA,SAAA;IACA,WAAA;EAAA,MAEG,OAAA,CAAQ,eAAA;EAEb,mBAAA,GACC,UAAA,UACA,EAAA,UACA,IAAA;IACC,IAAA,GAAO,MAAA;IACP,IAAA;IACA,MAAA;IACA,QAAA;IACA,OAAA,GAAU,KAAA;MAAQ,QAAA;MAAkB,SAAA;IAAA;IACpC,GAAA;MACC,KAAA;MACA,WAAA;MACA,KAAA;MACA,SAAA;MACA,OAAA;IAAA;IAED,WAAA;IACA,IAAA;EAAA,MAEG,OAAA,CAAQ,eAAA;EAEb,mBAAA,GAAsB,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAGjE,wBAAA,GACC,UAAA,UACA,MAAA;IAAW,MAAA;IAAiB,KAAA;EAAA,MACxB,OAAA,CAAQ,eAAA;EAEb,oBAAA,GAAuB,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAElE,4BAAA,GAA+B,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAE1E,yBAAA,GAA4B,UAAA,aAAuB,OAAA,CAAQ,eAAA;EAE3D,gCAAA,GAAmC,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAE9E,sBAAA,GACC,UAAA,UACA,EAAA,UACA,QAAA,cACI,OAAA,CAAQ,eAAA;EAGb,oBAAA,GACC,UAAA,UACA,EAAA,UACA,OAAA;IAAY,WAAA;EAAA,MACR,OAAA,CAAQ,eAAA;EAEb,sBAAA,GAAyB,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAEpE,qBAAA,GACC,UAAA,UACA,EAAA,UACA,WAAA,aACI,OAAA,CAAQ,eAAA;EAEb,uBAAA,GAA0B,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAErE,2BAAA,GAA8B,UAAA,aAAuB,OAAA,CAAQ,eAAA;EAE7D,yBAAA,GAA4B,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAEvE,oBAAA,GAAuB,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAElE,yBAAA,GAA4B,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAGvE,eAAA,GAAkB,MAAA;IACjB,MAAA;IACA,KAAA;IACA,QAAA;EAAA,MACK,OAAA,CAAQ,eAAA;EAEd,cAAA,GAAiB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAExC,iBAAA,GAAoB,KAAA;IACnB,QAAA;IACA,QAAA;IACA,IAAA;IACA,KAAA;IACA,MAAA;IACA,UAAA;IACA,WAAA;IACA,QAAA;IACA,aAAA;IACA,QAAA;EAAA,MACK,OAAA,CAAQ,eAAA;EAEd,iBAAA,GACC,EAAA,UACA,KAAA;IAAS,GAAA;IAAc,OAAA;IAAkB,KAAA;IAAgB,MAAA;EAAA,MACrD,OAAA,CAAQ,eAAA;EAEb,iBAAA,GAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAG3C,kBAAA,GACC,UAAA,UACA,OAAA,UACA,MAAA;IAAW,KAAA;EAAA,MACP,OAAA,CAAQ,eAAA;EAEb,iBAAA,GAAoB,UAAA,aAAuB,OAAA,CAC1C,eAAA;IACC,IAAA;MACC,EAAA;MACA,UAAA;MACA,OAAA;MACA,QAAA;MAAA,CACC,GAAA;IAAA;EAAA;EAKJ,qBAAA,GAAwB,UAAA,UAAoB,YAAA,aAAyB,OAAA,CAAQ,eAAA;EAG7E,oBAAA,GACC,QAAA,UACA,MAAA,UACA,IAAA,UACA,OAAA,EAAS,OAAA,KACL,OAAA,CAAQ,eAAA;EAGb,0BAAA,GACC,QAAA,UACA,MAAA,UACA,IAAA,UACA,OAAA,EAAS,OAAA,KACL,OAAA,CAAQ,eAAA;EAGb,kBAAA,GAAqB,QAAA,UAAkB,IAAA;IAAmB,MAAA;EAAA;EAG1D,gBAAA,GAAmB,UAAA,aANP,aAAA;EAOZ,oBAAA,QAA4B,KAAA;IAC3B,EAAA;IACA,IAAA;IACA,IAAA;IACA,YAAA,EALkF,yBAAA;EAAA;EASnF,OAAA,EARiC,OAAA;EASjC,EAAA,EAAI,MAAA,CADkC,QAAA;EAEtC,iBAAA,IAAqB,UAAA;EAGrB,KAAA,EAJU,YAAA;EAOV,KAAA,EAHiD,aAAA;EAMjD,iBAAA,EAHkD,cAAA;EAMlD,MAAA,EAH+D,YAAA;EAQ/D,WAAA,QAAmB,OAAA,CAAQ,cAAA;EAK3B,yBAAA;EAGA,gBAAA,QAR0B,aAAA;EAY1B,iBAAA;EAGA,sBAAA,QAA8B,OAAA;EAG9B,mBAAA,QAA2B,OAAA;EAG3B,eAAA,GAAkB,QAAA,UAAkB,MAAA,4BAAkC,OAAA;EAGtE,mBAAA,GACC,IAAA,EAJ4E,iBAAA,KAKxE,OAAA,CADiD,wBAAA;EAEtD,oBAAA,GACC,IAAA,EAFW,iBAAA,KAGP,OAAA,CADiD,wBAAA;EA7JtD;;;;;;EAsKA,mBAAA,SAA4B,OAAA;AAAA"}

package/dist/auth/providers/github.d.mts

@@ -1,4 +1,4 @@
-import { r as AuthProviderDescriptor } from "../../types-DFowNO60.mjs";
+import { r as AuthProviderDescriptor } from "../../types-D599-ruj.mjs";
 
 //#region src/auth/providers/github.d.ts
 /**

package/dist/auth/providers/google.d.mts

@@ -1,4 +1,4 @@
-import { r as AuthProviderDescriptor } from "../../types-DFowNO60.mjs";
+import { r as AuthProviderDescriptor } from "../../types-D599-ruj.mjs";
 
 //#region src/auth/providers/google.d.ts
 /**

package/dist/{authorize-BlyCH-96.mjs → authorize-Bn4S4DUT.mjs}

@@ -1,4 +1,4 @@
-import { t as apiError } from "./error-tSQWIl5U.mjs";
+import { t as apiError } from "./error-ChfADBuu.mjs";
 import { canActOnOwn, hasPermission } from "@emdash-cms/auth";
 
 //#region src/api/authorize.ts
@@ -34,4 +34,4 @@ function requireOwnerPerm(user, ownerId, ownPermission, anyPermission) {
 
 //#endregion
 export { requirePerm as n, requireOwnerPerm as t };
-//# sourceMappingURL=authorize-BlyCH-96.mjs.map
+//# sourceMappingURL=authorize-Bn4S4DUT.mjs.map

package/dist/{authorize-BlyCH-96.mjs.map → authorize-Bn4S4DUT.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"authorize-BlyCH-96.mjs","names":[],"sources":["../src/api/authorize.ts"],"sourcesContent":["/**\n * Authorization helpers for API routes\n *\n * Thin wrappers around @emdash-cms/auth RBAC that return HTTP responses.\n * Auth middleware handles authentication; these handle authorization.\n */\n\nimport type { Permission, RoleLevel } from \"@emdash-cms/auth\";\nimport { hasPermission, canActOnOwn } from \"@emdash-cms/auth\";\n\nimport { apiError } from \"./error.js\";\n\ninterface UserLike {\n\tid: string;\n\trole: RoleLevel;\n}\n\n/**\n * Check if user has a permission. Returns a 401/403 Response if not, or null if authorized.\n *\n * Usage:\n * ```ts\n * const denied = requirePerm(user, \"schema:manage\");\n * if (denied) return denied;\n * ```\n */\nexport function requirePerm(\n\tuser: UserLike | null | undefined,\n\tpermission: Permission,\n): Response | null {\n\tif (!user) {\n\t\treturn apiError(\"UNAUTHORIZED\", \"Authentication required\", 401);\n\t}\n\tif (!hasPermission(user, permission)) {\n\t\treturn apiError(\"FORBIDDEN\", \"Insufficient permissions\", 403);\n\t}\n\treturn null;\n}\n\n/**\n * Check if user can act on a resource, considering ownership.\n * Returns a 401/403 Response if not, or null if authorized.\n *\n * Usage:\n * ```ts\n * const denied = requireOwnerPerm(user, item.authorId, \"content:edit_own\", \"content:edit_any\");\n * if (denied) return denied;\n * ```\n */\nexport function requireOwnerPerm(\n\tuser: UserLike | null | undefined,\n\townerId: string,\n\townPermission: Permission,\n\tanyPermission: Permission,\n): Response | null {\n\tif (!user) {\n\t\treturn apiError(\"UNAUTHORIZED\", \"Authentication required\", 401);\n\t}\n\tif (!canActOnOwn(user, ownerId, ownPermission, anyPermission)) {\n\t\treturn apiError(\"FORBIDDEN\", \"Insufficient permissions\", 403);\n\t}\n\treturn null;\n}\n"],"mappings":";;;;;;;;;;;;;AA0BA,SAAgB,YACf,MACA,YACkB;AAClB,KAAI,CAAC,KACJ,QAAO,SAAS,gBAAgB,2BAA2B,IAAI;AAEhE,KAAI,CAAC,cAAc,MAAM,WAAW,CACnC,QAAO,SAAS,aAAa,4BAA4B,IAAI;AAE9D,QAAO;;;;;;;;;;;;AAaR,SAAgB,iBACf,MACA,SACA,eACA,eACkB;AAClB,KAAI,CAAC,KACJ,QAAO,SAAS,gBAAgB,2BAA2B,IAAI;AAEhE,KAAI,CAAC,YAAY,MAAM,SAAS,eAAe,cAAc,CAC5D,QAAO,SAAS,aAAa,4BAA4B,IAAI;AAE9D,QAAO"}
+{"version":3,"file":"authorize-Bn4S4DUT.mjs","names":[],"sources":["../src/api/authorize.ts"],"sourcesContent":["/**\n * Authorization helpers for API routes\n *\n * Thin wrappers around @emdash-cms/auth RBAC that return HTTP responses.\n * Auth middleware handles authentication; these handle authorization.\n */\n\nimport type { Permission, RoleLevel } from \"@emdash-cms/auth\";\nimport { hasPermission, canActOnOwn } from \"@emdash-cms/auth\";\n\nimport { apiError } from \"./error.js\";\n\ninterface UserLike {\n\tid: string;\n\trole: RoleLevel;\n}\n\n/**\n * Check if user has a permission. Returns a 401/403 Response if not, or null if authorized.\n *\n * Usage:\n * ```ts\n * const denied = requirePerm(user, \"schema:manage\");\n * if (denied) return denied;\n * ```\n */\nexport function requirePerm(\n\tuser: UserLike | null | undefined,\n\tpermission: Permission,\n): Response | null {\n\tif (!user) {\n\t\treturn apiError(\"UNAUTHORIZED\", \"Authentication required\", 401);\n\t}\n\tif (!hasPermission(user, permission)) {\n\t\treturn apiError(\"FORBIDDEN\", \"Insufficient permissions\", 403);\n\t}\n\treturn null;\n}\n\n/**\n * Check if user can act on a resource, considering ownership.\n * Returns a 401/403 Response if not, or null if authorized.\n *\n * Usage:\n * ```ts\n * const denied = requireOwnerPerm(user, item.authorId, \"content:edit_own\", \"content:edit_any\");\n * if (denied) return denied;\n * ```\n */\nexport function requireOwnerPerm(\n\tuser: UserLike | null | undefined,\n\townerId: string,\n\townPermission: Permission,\n\tanyPermission: Permission,\n): Response | null {\n\tif (!user) {\n\t\treturn apiError(\"UNAUTHORIZED\", \"Authentication required\", 401);\n\t}\n\tif (!canActOnOwn(user, ownerId, ownPermission, anyPermission)) {\n\t\treturn apiError(\"FORBIDDEN\", \"Insufficient permissions\", 403);\n\t}\n\treturn null;\n}\n"],"mappings":";;;;;;;;;;;;;AA0BA,SAAgB,YACf,MACA,YACkB;AAClB,KAAI,CAAC,KACJ,QAAO,SAAS,gBAAgB,2BAA2B,IAAI;AAEhE,KAAI,CAAC,cAAc,MAAM,WAAW,CACnC,QAAO,SAAS,aAAa,4BAA4B,IAAI;AAE9D,QAAO;;;;;;;;;;;;AAaR,SAAgB,iBACf,MACA,SACA,eACA,eACkB;AAClB,KAAI,CAAC,KACJ,QAAO,SAAS,gBAAgB,2BAA2B,IAAI;AAEhE,KAAI,CAAC,YAAY,MAAM,SAAS,eAAe,cAAc,CAC5D,QAAO,SAAS,aAAa,4BAA4B,IAAI;AAE9D,QAAO"}