emdash 0.18.0 → 0.20.0

package/dist/{adapters-C5AWLJSD.d.mts → adapters-BzIHV3sw.d.mts}

@@ -118,4 +118,4 @@ interface PostgresConfig {
 declare function postgres(config: PostgresConfig): DatabaseDescriptor;
 //#endregion
 export { SqliteConfig as a, sqlite as c, PostgresConfig as i, DatabaseDialectType as n, libsql as o, LibsqlConfig as r, postgres as s, DatabaseDescriptor as t };
-//# sourceMappingURL=adapters-C5AWLJSD.d.mts.map
+//# sourceMappingURL=adapters-BzIHV3sw.d.mts.map

package/dist/{adapters-C5AWLJSD.d.mts.map → adapters-BzIHV3sw.d.mts.map}

@@ -1 +1 @@
-{"version":3,"file":"adapters-C5AWLJSD.d.mts","names":[],"sources":["../src/db/adapters.ts"],"mappings":";;AA0BA;;;;;AAKA;;;;;;;;;;;AAqBA;;;;;AAOA;;;KAjCY,mBAAA;;AAsDZ;;UAjDiB,kBAAA;EAChB,UAAA;EACA,MAAA;EACA,IAAA,EAAM,mBAAA;EA8CuC;;;AAqB9C;;;;;;;;;AAWA;;EA/DC,oBAAA;AAAA;AAAA,UAGgB,YAAA;EA8DhB;;;EA1DA,GAAA;AAAA;AAAA,UAGgB,YAAA;EA6DhB;;;EAzDA,GAAA;EAyD0B;AAa3B;;EAlEC,SAAA;AAAA;;;;;;;;;;;iBAae,MAAA,CAAO,MAAA,EAAQ,YAAA,GAAe,kBAAA;;;;;;;;;;;;;;iBAqB9B,MAAA,CAAO,MAAA,EAAQ,YAAA,GAAe,kBAAA;;;;UAW7B,cAAA;EAChB,gBAAA;EACA,IAAA;EACA,IAAA;EACA,QAAA;EACA,IAAA;EACA,QAAA;EACA,GAAA;EACA,IAAA;IAAS,GAAA;IAAc,GAAA;EAAA;AAAA;;;;;;;;;;;iBAaR,QAAA,CAAS,MAAA,EAAQ,cAAA,GAAiB,kBAAA"}
+{"version":3,"file":"adapters-BzIHV3sw.d.mts","names":[],"sources":["../src/db/adapters.ts"],"mappings":";;AA0BA;;;;;AAKA;;;;;;;;;;;AAqBA;;;;;AAOA;;;KAjCY,mBAAA;;AAsDZ;;UAjDiB,kBAAA;EAChB,UAAA;EACA,MAAA;EACA,IAAA,EAAM,mBAAA;EA8CuC;;;AAqB9C;;;;;;;;;AAWA;;EA/DC,oBAAA;AAAA;AAAA,UAGgB,YAAA;EA8DhB;;;EA1DA,GAAA;AAAA;AAAA,UAGgB,YAAA;EA6DhB;;;EAzDA,GAAA;EAyD0B;AAa3B;;EAlEC,SAAA;AAAA;;;;;;;;;;;iBAae,MAAA,CAAO,MAAA,EAAQ,YAAA,GAAe,kBAAA;;;;;;;;;;;;;;iBAqB9B,MAAA,CAAO,MAAA,EAAQ,YAAA,GAAe,kBAAA;;;;UAW7B,cAAA;EAChB,gBAAA;EACA,IAAA;EACA,IAAA;EACA,QAAA;EACA,IAAA;EACA,QAAA;EACA,GAAA;EACA,IAAA;IAAS,GAAA;IAAc,GAAA;EAAA;AAAA;;;;;;;;;;;iBAaR,QAAA,CAAS,MAAA,EAAQ,cAAA,GAAiB,kBAAA"}

package/dist/{allowed-origins-CyYLEJkp.mjs → allowed-origins-B1u7Qnvg.mjs}

@@ -1,4 +1,4 @@
-import { t as getEnvAllowedOrigins } from "./public-url-egRHCy1m.mjs";
+import { t as getEnvAllowedOrigins } from "./public-url-BFVC2OTJ.mjs";
 
 //#region src/auth/allowed-origins.ts
 /**
@@ -113,4 +113,4 @@ function isIPLiteralHostname(h) {
 
 //#endregion
 export { validateAllowedOrigins as n, validateOriginShape as r, getConfiguredAllowedOrigins as t };
-//# sourceMappingURL=allowed-origins-CyYLEJkp.mjs.map
+//# sourceMappingURL=allowed-origins-B1u7Qnvg.mjs.map

package/dist/{allowed-origins-CyYLEJkp.mjs.map → allowed-origins-B1u7Qnvg.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"allowed-origins-CyYLEJkp.mjs","names":[],"sources":["../src/auth/allowed-origins.ts"],"sourcesContent":["/**\n * Resolution and validation of multi-origin passkey verification.\n *\n * `allowedOrigins` lets one EmDash deployment accept passkey assertions from\n * several hostnames sharing the same `rpId` (e.g. apex + preview/staging\n * subdomains under one registrable parent). Origins come from two sources:\n *\n *   - `EmDashConfig.allowedOrigins` (declared in `astro.config.mjs`)\n *   - `EMDASH_ALLOWED_ORIGINS` (comma-separated runtime env var)\n *\n * Sources are merged (union of permissions, deduplicated). Each entry is\n * validated against `siteUrl` to fail loud on dead config the browser would\n * never honor.\n */\n\nimport { getEnvAllowedOrigins } from \"../api/public-url.js\";\nimport type { EmDashConfig } from \"../astro/integration/runtime.js\";\n\nexport type AllowedOriginSource = \"config.allowedOrigins\" | \"EMDASH_ALLOWED_ORIGINS\";\n\nexport interface TaggedOrigin {\n\t/** Raw entry as declared by the operator. */\n\torigin: string;\n\t/** Where the entry came from (used for source-attributed errors). */\n\tsource: AllowedOriginSource;\n}\n\n/**\n * Collect raw allowedOrigins from config and env, source-tagged.\n *\n * Returns raw values — the caller is expected to pass the result through\n * `validateAllowedOrigins()` before use in passkey verification.\n */\nexport function getConfiguredAllowedOrigins(config?: EmDashConfig): TaggedOrigin[] {\n\tconst tagged: TaggedOrigin[] = [];\n\tif (config?.allowedOrigins) {\n\t\tfor (const origin of config.allowedOrigins) {\n\t\t\tif (origin) tagged.push({ origin, source: \"config.allowedOrigins\" });\n\t\t}\n\t}\n\tfor (const origin of getEnvAllowedOrigins()) {\n\t\ttagged.push({ origin, source: \"EMDASH_ALLOWED_ORIGINS\" });\n\t}\n\treturn tagged;\n}\n\n/**\n * Validate per-entry shape rules (no `siteUrl` needed):\n *   - parses as `URL`\n *   - protocol is `http:` or `https:`\n *   - hostname has no trailing dot (`example.com.` rejected)\n *   - hostname has no empty labels (`foo..example.com` rejected)\n *\n * Returns the deduplicated, normalized origin form (`URL.origin`) of every\n * input, in input order. Throws on the first violation with a source-tagged\n * error message.\n */\nexport function validateOriginShape(tagged: TaggedOrigin[]): string[] {\n\tconst normalized: string[] = [];\n\tconst seen = new Set<string>();\n\tfor (const { origin, source } of tagged) {\n\t\tlet parsed: URL;\n\t\ttry {\n\t\t\tparsed = new URL(origin);\n\t\t} catch (e) {\n\t\t\tthrow configError(source, `invalid URL: \"${origin}\"`, e);\n\t\t}\n\t\tif (parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") {\n\t\t\tthrow configError(\n\t\t\t\tsource,\n\t\t\t\t`origin must be http or https: \"${origin}\" (got ${parsed.protocol})`,\n\t\t\t);\n\t\t}\n\t\tif (parsed.hostname.endsWith(\".\")) {\n\t\t\tthrow configError(\n\t\t\t\tsource,\n\t\t\t\t`hostname has a trailing dot: \"${origin}\". Remove the trailing dot — assertion origins from the browser do not include it.`,\n\t\t\t);\n\t\t}\n\t\tif (parsed.hostname.split(\".\").includes(\"\")) {\n\t\t\tthrow configError(source, `hostname has empty labels: \"${origin}\"`);\n\t\t}\n\t\tif (!seen.has(parsed.origin)) {\n\t\t\tseen.add(parsed.origin);\n\t\t\tnormalized.push(parsed.origin);\n\t\t}\n\t}\n\treturn normalized;\n}\n\n/**\n * Validate the effective merged allowedOrigins set against `siteUrl`.\n *\n * Performs `validateOriginShape()` plus the siteUrl-dependent rules:\n *   - Rule A: non-empty origins ⇒ `siteUrl` is set\n *   - `siteUrl` hostname is not an IP literal (multi-origin requires a domain)\n *   - `siteUrl` hostname has no trailing dot (cannot match assertion origins)\n *   - Rule B: each origin's hostname is `siteHost` exactly or a subdomain\n *\n * Throws on first violation. Returns the deduplicated normalized origins.\n *\n * Use this at the runtime chokepoint (where config + env are merged into the\n * effective set). At Astro integration init, prefer `validateOriginShape()`\n * for shape-only checks on `config.allowedOrigins`, since `siteUrl` may be\n * supplied at runtime via `EMDASH_SITE_URL`.\n */\nexport function validateAllowedOrigins(\n\tsiteUrl: string | undefined,\n\ttagged: TaggedOrigin[],\n): string[] {\n\tconst normalized = validateOriginShape(tagged);\n\tif (normalized.length === 0) return normalized;\n\n\tif (!siteUrl) {\n\t\tthrow new Error(\n\t\t\t`EmDash config error: allowedOrigins is set (${normalized.length} ${\n\t\t\t\tnormalized.length === 1 ? \"entry\" : \"entries\"\n\t\t\t}) but siteUrl is not. Without a canonical siteUrl, rpId is derived from the request hostname, defeating multi-origin passkeys. Set siteUrl in astro.config.mjs or via EMDASH_SITE_URL.`,\n\t\t);\n\t}\n\n\tlet siteHost: string;\n\ttry {\n\t\tsiteHost = new URL(siteUrl).hostname;\n\t} catch (e) {\n\t\tthrow new Error(`EmDash config error: siteUrl is not a valid URL: \"${siteUrl}\"`, {\n\t\t\tcause: e,\n\t\t});\n\t}\n\n\tif (siteHost.endsWith(\".\")) {\n\t\tthrow new Error(\n\t\t\t`EmDash config error: siteUrl \"${siteUrl}\" has a trailing-dot hostname, which cannot match assertion origins. Remove the trailing dot when using allowedOrigins.`,\n\t\t);\n\t}\n\tif (isIPLiteralHostname(siteHost)) {\n\t\tthrow new Error(\n\t\t\t`EmDash config error: siteUrl \"${siteUrl}\" uses an IP-literal hostname. Multi-origin passkeys require a domain-based siteUrl — IP addresses cannot have valid subdomains for WebAuthn rpId.`,\n\t\t);\n\t}\n\n\tfor (const { origin, source } of tagged) {\n\t\tconst h = new URL(origin).hostname;\n\t\tif (h !== siteHost && !h.endsWith(\".\" + siteHost)) {\n\t\t\tthrow configError(\n\t\t\t\tsource,\n\t\t\t\t`\"${origin}\" is not a subdomain of siteUrl \"${siteUrl}\". Allowed origins must be the same hostname as siteUrl or a subdomain of it.`,\n\t\t\t);\n\t\t}\n\t}\n\n\treturn normalized;\n}\n\nfunction configError(source: AllowedOriginSource, detail: string, cause?: unknown): Error {\n\tconst err = new Error(`EmDash config error in ${source}: ${detail}`);\n\tif (cause !== undefined) (err as Error & { cause?: unknown }).cause = cause;\n\treturn err;\n}\n\nconst IPV4_DOTTED_DECIMAL_RE = /^\\d+(\\.\\d+){3}$/;\n\nfunction isIPLiteralHostname(h: string): boolean {\n\t// IPv6 hostnames are bracketed by URL.hostname, e.g. \"[::1]\"\n\tif (h.startsWith(\"[\")) return true;\n\t// IPv4 dotted-decimal\n\treturn IPV4_DOTTED_DECIMAL_RE.test(h);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAiCA,SAAgB,4BAA4B,QAAuC;CAClF,MAAM,SAAyB,EAAE;AACjC,KAAI,QAAQ,gBACX;OAAK,MAAM,UAAU,OAAO,eAC3B,KAAI,OAAQ,QAAO,KAAK;GAAE;GAAQ,QAAQ;GAAyB,CAAC;;AAGtE,MAAK,MAAM,UAAU,sBAAsB,CAC1C,QAAO,KAAK;EAAE;EAAQ,QAAQ;EAA0B,CAAC;AAE1D,QAAO;;;;;;;;;;;;;AAcR,SAAgB,oBAAoB,QAAkC;CACrE,MAAM,aAAuB,EAAE;CAC/B,MAAM,uBAAO,IAAI,KAAa;AAC9B,MAAK,MAAM,EAAE,QAAQ,YAAY,QAAQ;EACxC,IAAI;AACJ,MAAI;AACH,YAAS,IAAI,IAAI,OAAO;WAChB,GAAG;AACX,SAAM,YAAY,QAAQ,iBAAiB,OAAO,IAAI,EAAE;;AAEzD,MAAI,OAAO,aAAa,WAAW,OAAO,aAAa,SACtD,OAAM,YACL,QACA,kCAAkC,OAAO,SAAS,OAAO,SAAS,GAClE;AAEF,MAAI,OAAO,SAAS,SAAS,IAAI,CAChC,OAAM,YACL,QACA,iCAAiC,OAAO,oFACxC;AAEF,MAAI,OAAO,SAAS,MAAM,IAAI,CAAC,SAAS,GAAG,CAC1C,OAAM,YAAY,QAAQ,+BAA+B,OAAO,GAAG;AAEpE,MAAI,CAAC,KAAK,IAAI,OAAO,OAAO,EAAE;AAC7B,QAAK,IAAI,OAAO,OAAO;AACvB,cAAW,KAAK,OAAO,OAAO;;;AAGhC,QAAO;;;;;;;;;;;;;;;;;;AAmBR,SAAgB,uBACf,SACA,QACW;CACX,MAAM,aAAa,oBAAoB,OAAO;AAC9C,KAAI,WAAW,WAAW,EAAG,QAAO;AAEpC,KAAI,CAAC,QACJ,OAAM,IAAI,MACT,+CAA+C,WAAW,OAAO,GAChE,WAAW,WAAW,IAAI,UAAU,UACpC,wLACD;CAGF,IAAI;AACJ,KAAI;AACH,aAAW,IAAI,IAAI,QAAQ,CAAC;UACpB,GAAG;AACX,QAAM,IAAI,MAAM,qDAAqD,QAAQ,IAAI,EAChF,OAAO,GACP,CAAC;;AAGH,KAAI,SAAS,SAAS,IAAI,CACzB,OAAM,IAAI,MACT,iCAAiC,QAAQ,yHACzC;AAEF,KAAI,oBAAoB,SAAS,CAChC,OAAM,IAAI,MACT,iCAAiC,QAAQ,oJACzC;AAGF,MAAK,MAAM,EAAE,QAAQ,YAAY,QAAQ;EACxC,MAAM,IAAI,IAAI,IAAI,OAAO,CAAC;AAC1B,MAAI,MAAM,YAAY,CAAC,EAAE,SAAS,MAAM,SAAS,CAChD,OAAM,YACL,QACA,IAAI,OAAO,mCAAmC,QAAQ,+EACtD;;AAIH,QAAO;;AAGR,SAAS,YAAY,QAA6B,QAAgB,OAAwB;CACzF,MAAM,sBAAM,IAAI,MAAM,0BAA0B,OAAO,IAAI,SAAS;AACpE,KAAI,UAAU,OAAW,CAAC,IAAoC,QAAQ;AACtE,QAAO;;AAGR,MAAM,yBAAyB;AAE/B,SAAS,oBAAoB,GAAoB;AAEhD,KAAI,EAAE,WAAW,IAAI,CAAE,QAAO;AAE9B,QAAO,uBAAuB,KAAK,EAAE"}
+{"version":3,"file":"allowed-origins-B1u7Qnvg.mjs","names":[],"sources":["../src/auth/allowed-origins.ts"],"sourcesContent":["/**\n * Resolution and validation of multi-origin passkey verification.\n *\n * `allowedOrigins` lets one EmDash deployment accept passkey assertions from\n * several hostnames sharing the same `rpId` (e.g. apex + preview/staging\n * subdomains under one registrable parent). Origins come from two sources:\n *\n *   - `EmDashConfig.allowedOrigins` (declared in `astro.config.mjs`)\n *   - `EMDASH_ALLOWED_ORIGINS` (comma-separated runtime env var)\n *\n * Sources are merged (union of permissions, deduplicated). Each entry is\n * validated against `siteUrl` to fail loud on dead config the browser would\n * never honor.\n */\n\nimport { getEnvAllowedOrigins } from \"../api/public-url.js\";\nimport type { EmDashConfig } from \"../astro/integration/runtime.js\";\n\nexport type AllowedOriginSource = \"config.allowedOrigins\" | \"EMDASH_ALLOWED_ORIGINS\";\n\nexport interface TaggedOrigin {\n\t/** Raw entry as declared by the operator. */\n\torigin: string;\n\t/** Where the entry came from (used for source-attributed errors). */\n\tsource: AllowedOriginSource;\n}\n\n/**\n * Collect raw allowedOrigins from config and env, source-tagged.\n *\n * Returns raw values — the caller is expected to pass the result through\n * `validateAllowedOrigins()` before use in passkey verification.\n */\nexport function getConfiguredAllowedOrigins(config?: EmDashConfig): TaggedOrigin[] {\n\tconst tagged: TaggedOrigin[] = [];\n\tif (config?.allowedOrigins) {\n\t\tfor (const origin of config.allowedOrigins) {\n\t\t\tif (origin) tagged.push({ origin, source: \"config.allowedOrigins\" });\n\t\t}\n\t}\n\tfor (const origin of getEnvAllowedOrigins()) {\n\t\ttagged.push({ origin, source: \"EMDASH_ALLOWED_ORIGINS\" });\n\t}\n\treturn tagged;\n}\n\n/**\n * Validate per-entry shape rules (no `siteUrl` needed):\n *   - parses as `URL`\n *   - protocol is `http:` or `https:`\n *   - hostname has no trailing dot (`example.com.` rejected)\n *   - hostname has no empty labels (`foo..example.com` rejected)\n *\n * Returns the deduplicated, normalized origin form (`URL.origin`) of every\n * input, in input order. Throws on the first violation with a source-tagged\n * error message.\n */\nexport function validateOriginShape(tagged: TaggedOrigin[]): string[] {\n\tconst normalized: string[] = [];\n\tconst seen = new Set<string>();\n\tfor (const { origin, source } of tagged) {\n\t\tlet parsed: URL;\n\t\ttry {\n\t\t\tparsed = new URL(origin);\n\t\t} catch (e) {\n\t\t\tthrow configError(source, `invalid URL: \"${origin}\"`, e);\n\t\t}\n\t\tif (parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") {\n\t\t\tthrow configError(\n\t\t\t\tsource,\n\t\t\t\t`origin must be http or https: \"${origin}\" (got ${parsed.protocol})`,\n\t\t\t);\n\t\t}\n\t\tif (parsed.hostname.endsWith(\".\")) {\n\t\t\tthrow configError(\n\t\t\t\tsource,\n\t\t\t\t`hostname has a trailing dot: \"${origin}\". Remove the trailing dot — assertion origins from the browser do not include it.`,\n\t\t\t);\n\t\t}\n\t\tif (parsed.hostname.split(\".\").includes(\"\")) {\n\t\t\tthrow configError(source, `hostname has empty labels: \"${origin}\"`);\n\t\t}\n\t\tif (!seen.has(parsed.origin)) {\n\t\t\tseen.add(parsed.origin);\n\t\t\tnormalized.push(parsed.origin);\n\t\t}\n\t}\n\treturn normalized;\n}\n\n/**\n * Validate the effective merged allowedOrigins set against `siteUrl`.\n *\n * Performs `validateOriginShape()` plus the siteUrl-dependent rules:\n *   - Rule A: non-empty origins ⇒ `siteUrl` is set\n *   - `siteUrl` hostname is not an IP literal (multi-origin requires a domain)\n *   - `siteUrl` hostname has no trailing dot (cannot match assertion origins)\n *   - Rule B: each origin's hostname is `siteHost` exactly or a subdomain\n *\n * Throws on first violation. Returns the deduplicated normalized origins.\n *\n * Use this at the runtime chokepoint (where config + env are merged into the\n * effective set). At Astro integration init, prefer `validateOriginShape()`\n * for shape-only checks on `config.allowedOrigins`, since `siteUrl` may be\n * supplied at runtime via `EMDASH_SITE_URL`.\n */\nexport function validateAllowedOrigins(\n\tsiteUrl: string | undefined,\n\ttagged: TaggedOrigin[],\n): string[] {\n\tconst normalized = validateOriginShape(tagged);\n\tif (normalized.length === 0) return normalized;\n\n\tif (!siteUrl) {\n\t\tthrow new Error(\n\t\t\t`EmDash config error: allowedOrigins is set (${normalized.length} ${\n\t\t\t\tnormalized.length === 1 ? \"entry\" : \"entries\"\n\t\t\t}) but siteUrl is not. Without a canonical siteUrl, rpId is derived from the request hostname, defeating multi-origin passkeys. Set siteUrl in astro.config.mjs or via EMDASH_SITE_URL.`,\n\t\t);\n\t}\n\n\tlet siteHost: string;\n\ttry {\n\t\tsiteHost = new URL(siteUrl).hostname;\n\t} catch (e) {\n\t\tthrow new Error(`EmDash config error: siteUrl is not a valid URL: \"${siteUrl}\"`, {\n\t\t\tcause: e,\n\t\t});\n\t}\n\n\tif (siteHost.endsWith(\".\")) {\n\t\tthrow new Error(\n\t\t\t`EmDash config error: siteUrl \"${siteUrl}\" has a trailing-dot hostname, which cannot match assertion origins. Remove the trailing dot when using allowedOrigins.`,\n\t\t);\n\t}\n\tif (isIPLiteralHostname(siteHost)) {\n\t\tthrow new Error(\n\t\t\t`EmDash config error: siteUrl \"${siteUrl}\" uses an IP-literal hostname. Multi-origin passkeys require a domain-based siteUrl — IP addresses cannot have valid subdomains for WebAuthn rpId.`,\n\t\t);\n\t}\n\n\tfor (const { origin, source } of tagged) {\n\t\tconst h = new URL(origin).hostname;\n\t\tif (h !== siteHost && !h.endsWith(\".\" + siteHost)) {\n\t\t\tthrow configError(\n\t\t\t\tsource,\n\t\t\t\t`\"${origin}\" is not a subdomain of siteUrl \"${siteUrl}\". Allowed origins must be the same hostname as siteUrl or a subdomain of it.`,\n\t\t\t);\n\t\t}\n\t}\n\n\treturn normalized;\n}\n\nfunction configError(source: AllowedOriginSource, detail: string, cause?: unknown): Error {\n\tconst err = new Error(`EmDash config error in ${source}: ${detail}`);\n\tif (cause !== undefined) (err as Error & { cause?: unknown }).cause = cause;\n\treturn err;\n}\n\nconst IPV4_DOTTED_DECIMAL_RE = /^\\d+(\\.\\d+){3}$/;\n\nfunction isIPLiteralHostname(h: string): boolean {\n\t// IPv6 hostnames are bracketed by URL.hostname, e.g. \"[::1]\"\n\tif (h.startsWith(\"[\")) return true;\n\t// IPv4 dotted-decimal\n\treturn IPV4_DOTTED_DECIMAL_RE.test(h);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAiCA,SAAgB,4BAA4B,QAAuC;CAClF,MAAM,SAAyB,EAAE;AACjC,KAAI,QAAQ,gBACX;OAAK,MAAM,UAAU,OAAO,eAC3B,KAAI,OAAQ,QAAO,KAAK;GAAE;GAAQ,QAAQ;GAAyB,CAAC;;AAGtE,MAAK,MAAM,UAAU,sBAAsB,CAC1C,QAAO,KAAK;EAAE;EAAQ,QAAQ;EAA0B,CAAC;AAE1D,QAAO;;;;;;;;;;;;;AAcR,SAAgB,oBAAoB,QAAkC;CACrE,MAAM,aAAuB,EAAE;CAC/B,MAAM,uBAAO,IAAI,KAAa;AAC9B,MAAK,MAAM,EAAE,QAAQ,YAAY,QAAQ;EACxC,IAAI;AACJ,MAAI;AACH,YAAS,IAAI,IAAI,OAAO;WAChB,GAAG;AACX,SAAM,YAAY,QAAQ,iBAAiB,OAAO,IAAI,EAAE;;AAEzD,MAAI,OAAO,aAAa,WAAW,OAAO,aAAa,SACtD,OAAM,YACL,QACA,kCAAkC,OAAO,SAAS,OAAO,SAAS,GAClE;AAEF,MAAI,OAAO,SAAS,SAAS,IAAI,CAChC,OAAM,YACL,QACA,iCAAiC,OAAO,oFACxC;AAEF,MAAI,OAAO,SAAS,MAAM,IAAI,CAAC,SAAS,GAAG,CAC1C,OAAM,YAAY,QAAQ,+BAA+B,OAAO,GAAG;AAEpE,MAAI,CAAC,KAAK,IAAI,OAAO,OAAO,EAAE;AAC7B,QAAK,IAAI,OAAO,OAAO;AACvB,cAAW,KAAK,OAAO,OAAO;;;AAGhC,QAAO;;;;;;;;;;;;;;;;;;AAmBR,SAAgB,uBACf,SACA,QACW;CACX,MAAM,aAAa,oBAAoB,OAAO;AAC9C,KAAI,WAAW,WAAW,EAAG,QAAO;AAEpC,KAAI,CAAC,QACJ,OAAM,IAAI,MACT,+CAA+C,WAAW,OAAO,GAChE,WAAW,WAAW,IAAI,UAAU,UACpC,wLACD;CAGF,IAAI;AACJ,KAAI;AACH,aAAW,IAAI,IAAI,QAAQ,CAAC;UACpB,GAAG;AACX,QAAM,IAAI,MAAM,qDAAqD,QAAQ,IAAI,EAChF,OAAO,GACP,CAAC;;AAGH,KAAI,SAAS,SAAS,IAAI,CACzB,OAAM,IAAI,MACT,iCAAiC,QAAQ,yHACzC;AAEF,KAAI,oBAAoB,SAAS,CAChC,OAAM,IAAI,MACT,iCAAiC,QAAQ,oJACzC;AAGF,MAAK,MAAM,EAAE,QAAQ,YAAY,QAAQ;EACxC,MAAM,IAAI,IAAI,IAAI,OAAO,CAAC;AAC1B,MAAI,MAAM,YAAY,CAAC,EAAE,SAAS,MAAM,SAAS,CAChD,OAAM,YACL,QACA,IAAI,OAAO,mCAAmC,QAAQ,+EACtD;;AAIH,QAAO;;AAGR,SAAS,YAAY,QAA6B,QAAgB,OAAwB;CACzF,MAAM,sBAAM,IAAI,MAAM,0BAA0B,OAAO,IAAI,SAAS;AACpE,KAAI,UAAU,OAAW,CAAC,IAAoC,QAAQ;AACtE,QAAO;;AAGR,MAAM,yBAAyB;AAE/B,SAAS,oBAAoB,GAAoB;AAEhD,KAAI,EAAE,WAAW,IAAI,CAAE,QAAO;AAE9B,QAAO,uBAAuB,KAAK,EAAE"}

package/dist/api/route-utils.d.mts

@@ -1,6 +1,6 @@
-import { a as parseQuery, c as handleError, i as parseBody, n as ParseResult, o as apiError, r as isParseError, s as apiSuccess, t as OptionsRepository } from "../options-tb7DJROi.mjs";
-import { t as Database } from "../types-DawhLFwy.mjs";
-import { Ct as StorageCollectionConfig, St as StorageCollection } from "../types-DMwSpvcw.mjs";
+import { a as parseQuery, c as handleError, i as parseBody, n as ParseResult, o as apiError, r as isParseError, s as apiSuccess, t as OptionsRepository } from "../options-DyYIYpPd.mjs";
+import { t as Database } from "../types-BPzXTV9x.mjs";
+import { Ct as StorageCollectionConfig, St as StorageCollection } from "../types-CPAPl93j.mjs";
 import { Kysely } from "kysely";
 
 //#region src/api/setup-complete.d.ts

package/dist/api/route-utils.mjs

@@ -1,22 +1,22 @@
 import "../dialect-helpers-DRI5pyY3.mjs";
-import "../content-CyqOmOzm.mjs";
+import "../content-BIlVx-RX.mjs";
 import "../base64-CqR-7kqF.mjs";
-import "../types-K3MDsxpy.mjs";
-import "../media-C-oovGCG.mjs";
-import "../user-DzEUl5zA.mjs";
-import { t as OptionsRepository } from "../options-BL4X94qY.mjs";
-import { r as createStorageAccess } from "../context-DZ7bEh5-.mjs";
-import "../request-cache-BYMs-BGX.mjs";
-import "../seo-BR39kvTF.mjs";
-import "../loader-Dyx8dhFV.mjs";
-import "../settings-b5zW1R1T.mjs";
+import "../types-BXSUSAjt.mjs";
+import "../media-JOf3pNkw.mjs";
+import "../user-C0um7wrg.mjs";
+import { t as OptionsRepository } from "../options-BPCVnesz.mjs";
+import { r as createStorageAccess } from "../context-Y7BRkWes.mjs";
+import "../request-cache-D32LpnmI.mjs";
+import "../seo-B5e6y9Wk.mjs";
+import "../loader-ZN1ll-d-.mjs";
+import "../settings-DfxiWY_s.mjs";
 import "../ssrf-BsVGIE0Z.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../error-DJOsMVSt.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../parse-BBkFmLVr.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../error-RwM4dD35.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../parse-CrGndy1A.mjs";
 import "../ssrf-BvgVcfNQ.mjs";
-import "../cron-DZovZUnC.mjs";
-import { n as getPublicOrigin } from "../public-url-egRHCy1m.mjs";
-import { t as finalizeSetup } from "../setup-complete-VoEZfasi.mjs";
+import "../cron-BJ2ClIlj.mjs";
+import { n as getPublicOrigin } from "../public-url-BFVC2OTJ.mjs";
+import { t as finalizeSetup } from "../setup-complete-yvPE4OsP.mjs";
 
 //#region src/api/auth-storage.ts
 /**

package/dist/api/schemas/index.d.mts

@@ -1,2 +1,2 @@
-import { $ as wpRewriteUrlsBody, $n as apiErrorSchema, $t as commentSchema, A as reorderWidgetsBody, An as mediaResponseSchema, At as menuSchema, B as userSchema, Bn as contentPublishBody, Bt as magicLinkSendBody, C as notFoundSummarySchema, Cn as mediaConfirmBody, Ct as termWithCountSchema, D as updateRedirectBody, Dn as mediaListQuery, Dt as menuItemSchema, E as redirectsListQuery, En as mediaItemSchema, Et as createMenuItemBody, F as widgetSchema, Fn as contentCreateBody, Ft as updateMenuItemBody, G as setupAdminVerifyBody, Gn as contentTermsBody, Gt as passkeyVerifyBody, H as usersListQuery, Hn as contentScheduleBody, Ht as passkeyRegisterOptionsBody, I as allowedDomainCreateBody, In as contentItemSchema, It as authMeActionBody, J as importProbeBody, Jn as contentTrashQuery, Jt as adminCommentListResponseSchema, K as setupAtprotoAdminBody, Kn as contentTranslationSchema, Kt as signupCompleteBody, L as allowedDomainUpdateBody, Ln as contentListQuery, Lt as inviteCompleteBody, M as widgetAreaSchema, Mn as mediaUploadUrlBody, Mt as menuWithItemsSchema, N as widgetAreaWithWidgetsAndCountSchema, Nn as mediaUploadUrlResponseSchema, Nt as reorderMenuItemsBody, O as createWidgetAreaBody, On as mediaListResponseSchema, Ot as menuItemTypeEnum, P as widgetAreaWithWidgetsSchema, Pn as contentCompareResponseSchema, Pt as updateMenuBody, Q as wpPrepareBody, Qn as VALID_ROLE_LEVELS, Qt as commentListQuery, R as userDetailSchema, Rn as contentListResponseSchema, Rt as inviteCreateBody, S as notFoundSummaryResponseSchema, Sn as formatFileSize, St as termTranslationsSchema, T as redirectSchema, Tn as mediaExistingResponseSchema, Tt as createMenuBody, U as atprotoLoginBody, Un as contentSeoInput, Ut as passkeyRegisterVerifyBody, V as userUpdateBody, Vn as contentResponseSchema, Vt as passkeyOptionsBody, W as setupAdminBody, Wn as contentSeoSchema, Wt as passkeyRenameBody, X as wpPluginAnalyzeBody, Xn as trashedContentItemSchema, Xt as commentBulkResponseSchema, Y as wpMediaImportBody, Yn as contentUpdateBody, Yt as commentBulkBody, Z as wpPluginExecuteBody, Zn as trashedContentListResponseSchema, Zt as commentCountsResponseSchema, _ as notFoundEntrySchema, _n as orphanedTableSchema, _t as taxonomyListResponseSchema, a as bylineFieldUpdateBody, an as collectionListResponseSchema, ar as localeFilterQuery, at as searchSuggestQuery, b as notFoundPruneBody, bn as updateFieldBody, bt as termResponseSchema, c as bylineCreditSchema, cn as collectionWithFieldsResponseSchema, cr as slugPattern, ct as createSectionBody, d as bylineTranslationCreateBody, dn as fieldListResponseSchema, dt as sectionsListQuery, en as commentStatusBody, er as countResponseSchema, et as searchEnableBody, f as bylineTranslationsResponseSchema, fn as fieldReorderBody, ft as updateSectionBody, g as createRedirectBody, gn as orphanedTableListResponseSchema, gt as taxonomyDefTranslationsSchema, h as contentBylineInputSchema, hn as orphanRegisterBody, ht as taxonomyDefSchema, i as bylineFieldReorderBody, in as collectionGetQuery, ir as localeCode, it as searchResultSchema, j as updateWidgetBody, jn as mediaUpdateBody, jt as menuTranslationsSchema, k as createWidgetBody, kn as mediaProviderListQuery, kt as menuListItemSchema, l as bylineListResponseSchema, ln as createCollectionBody, lr as successEnvelope, lt as sectionListResponseSchema, m as bylinesListQuery, mn as fieldSchema, mt as createTermBody, n as bylineFieldDefinitionSchema, nn as publicCommentListResponseSchema, nr as deleteResponseSchema, nt as searchRebuildBody, o as bylineFieldUsageResponseSchema, on as collectionResponseSchema, or as offsetPaginationQuery, ot as settingsUpdateBody, p as bylineUpdateBody, pn as fieldResponseSchema, pt as createTaxonomyDefBody, q as setupBody, qn as contentTranslationsResponseSchema, qt as signupRequestBody, r as bylineFieldListResponseSchema, rn as publicCommentSchema, rr as httpUrl, rt as searchResponseSchema, s as bylineCreateBody, sn as collectionSchema, sr as roleLevel, st as siteSettingsSchema, t as bylineFieldCreateBody, tn as createCommentBody, tr as cursorPaginationQuery, tt as searchQuery, u as bylineSummarySchema, un as createFieldBody, ut as sectionSchema, v as notFoundListQuery, vn as schemaExportQuery, vt as termGetResponseSchema, w as redirectListResponseSchema, wn as mediaConfirmResponseSchema, wt as updateTermBody, x as notFoundSummaryQuery, xn as DEFAULT_MAX_UPLOAD_SIZE, xt as termSchema, y as notFoundListResponseSchema, yn as updateCollectionBody, yt as termListResponseSchema, z as userListResponseSchema, zn as contentPreviewUrlBody, zt as inviteRegisterOptionsBody } from "../../byline-fields-BNy7Ng1U.mjs";
-export { DEFAULT_MAX_UPLOAD_SIZE, VALID_ROLE_LEVELS, adminCommentListResponseSchema, allowedDomainCreateBody, allowedDomainUpdateBody, apiErrorSchema, atprotoLoginBody, authMeActionBody, bylineCreateBody, bylineCreditSchema, bylineFieldCreateBody, bylineFieldDefinitionSchema, bylineFieldListResponseSchema, bylineFieldReorderBody, bylineFieldUpdateBody, bylineFieldUsageResponseSchema, bylineListResponseSchema, bylineSummarySchema, bylineTranslationCreateBody, bylineTranslationsResponseSchema, bylineUpdateBody, bylinesListQuery, collectionGetQuery, collectionListResponseSchema, collectionResponseSchema, collectionSchema, collectionWithFieldsResponseSchema, commentBulkBody, commentBulkResponseSchema, commentCountsResponseSchema, commentListQuery, commentSchema, commentStatusBody, contentBylineInputSchema, contentCompareResponseSchema, contentCreateBody, contentItemSchema, contentListQuery, contentListResponseSchema, contentPreviewUrlBody, contentPublishBody, contentResponseSchema, contentScheduleBody, contentSeoInput, contentSeoSchema, contentTermsBody, contentTranslationSchema, contentTranslationsResponseSchema, contentTrashQuery, contentUpdateBody, countResponseSchema, createCollectionBody, createCommentBody, createFieldBody, createMenuBody, createMenuItemBody, createRedirectBody, createSectionBody, createTaxonomyDefBody, createTermBody, createWidgetAreaBody, createWidgetBody, cursorPaginationQuery, deleteResponseSchema, fieldListResponseSchema, fieldReorderBody, fieldResponseSchema, fieldSchema, formatFileSize, httpUrl, importProbeBody, inviteCompleteBody, inviteCreateBody, inviteRegisterOptionsBody, localeCode, localeFilterQuery, magicLinkSendBody, mediaConfirmBody, mediaConfirmResponseSchema, mediaExistingResponseSchema, mediaItemSchema, mediaListQuery, mediaListResponseSchema, mediaProviderListQuery, mediaResponseSchema, mediaUpdateBody, mediaUploadUrlBody, mediaUploadUrlResponseSchema, menuItemSchema, menuItemTypeEnum, menuListItemSchema, menuSchema, menuTranslationsSchema, menuWithItemsSchema, notFoundEntrySchema, notFoundListQuery, notFoundListResponseSchema, notFoundPruneBody, notFoundSummaryQuery, notFoundSummaryResponseSchema, notFoundSummarySchema, offsetPaginationQuery, orphanRegisterBody, orphanedTableListResponseSchema, orphanedTableSchema, passkeyOptionsBody, passkeyRegisterOptionsBody, passkeyRegisterVerifyBody, passkeyRenameBody, passkeyVerifyBody, publicCommentListResponseSchema, publicCommentSchema, redirectListResponseSchema, redirectSchema, redirectsListQuery, reorderMenuItemsBody, reorderWidgetsBody, roleLevel, schemaExportQuery, searchEnableBody, searchQuery, searchRebuildBody, searchResponseSchema, searchResultSchema, searchSuggestQuery, sectionListResponseSchema, sectionSchema, sectionsListQuery, settingsUpdateBody, setupAdminBody, setupAdminVerifyBody, setupAtprotoAdminBody, setupBody, signupCompleteBody, signupRequestBody, siteSettingsSchema, slugPattern, successEnvelope, taxonomyDefSchema, taxonomyDefTranslationsSchema, taxonomyListResponseSchema, termGetResponseSchema, termListResponseSchema, termResponseSchema, termSchema, termTranslationsSchema, termWithCountSchema, trashedContentItemSchema, trashedContentListResponseSchema, updateCollectionBody, updateFieldBody, updateMenuBody, updateMenuItemBody, updateRedirectBody, updateSectionBody, updateTermBody, updateWidgetBody, userDetailSchema, userListResponseSchema, userSchema, userUpdateBody, usersListQuery, widgetAreaSchema, widgetAreaWithWidgetsAndCountSchema, widgetAreaWithWidgetsSchema, widgetSchema, wpMediaImportBody, wpPluginAnalyzeBody, wpPluginExecuteBody, wpPrepareBody, wpRewriteUrlsBody };
+import { $ as wpRewriteUrlsBody, $n as trashedContentListResponseSchema, $t as commentSchema, A as reorderWidgetsBody, An as mediaResponseSchema, At as menuSchema, B as userSchema, Bn as contentListResponseSchema, Bt as magicLinkSendBody, C as notFoundSummarySchema, Cn as mediaConfirmBody, Ct as termWithCountSchema, D as updateRedirectBody, Dn as mediaListQuery, Dt as menuItemSchema, E as redirectsListQuery, En as mediaItemSchema, Et as createMenuItemBody, F as widgetSchema, Fn as contentAuthorsResponseSchema, Ft as updateMenuItemBody, G as setupAdminVerifyBody, Gn as contentSeoInput, Gt as passkeyVerifyBody, H as usersListQuery, Hn as contentPublishBody, Ht as passkeyRegisterOptionsBody, I as allowedDomainCreateBody, In as contentCompareResponseSchema, It as authMeActionBody, J as importProbeBody, Jn as contentTranslationSchema, Jt as adminCommentListResponseSchema, K as setupAtprotoAdminBody, Kn as contentSeoSchema, Kt as signupCompleteBody, L as allowedDomainUpdateBody, Ln as contentCreateBody, Lt as inviteCompleteBody, M as widgetAreaSchema, Mn as mediaUploadUrlBody, Mt as menuWithItemsSchema, N as widgetAreaWithWidgetsAndCountSchema, Nn as mediaUploadUrlResponseSchema, Nt as reorderMenuItemsBody, O as createWidgetAreaBody, On as mediaListResponseSchema, Ot as menuItemTypeEnum, P as widgetAreaWithWidgetsSchema, Pn as contentAuthorSchema, Pt as updateMenuBody, Q as wpPrepareBody, Qn as trashedContentItemSchema, Qt as commentListQuery, R as userDetailSchema, Rn as contentItemSchema, Rt as inviteCreateBody, S as notFoundSummaryResponseSchema, Sn as formatFileSize, St as termTranslationsSchema, T as redirectSchema, Tn as mediaExistingResponseSchema, Tt as createMenuBody, U as atprotoLoginBody, Un as contentResponseSchema, Ut as passkeyRegisterVerifyBody, V as userUpdateBody, Vn as contentPreviewUrlBody, Vt as passkeyOptionsBody, W as setupAdminBody, Wn as contentScheduleBody, Wt as passkeyRenameBody, X as wpPluginAnalyzeBody, Xn as contentTrashQuery, Xt as commentBulkResponseSchema, Y as wpMediaImportBody, Yn as contentTranslationsResponseSchema, Yt as commentBulkBody, Z as wpPluginExecuteBody, Zn as contentUpdateBody, Zt as commentCountsResponseSchema, _ as notFoundEntrySchema, _n as orphanedTableSchema, _t as taxonomyListResponseSchema, a as bylineFieldUpdateBody, an as collectionListResponseSchema, ar as httpUrl, at as searchSuggestQuery, b as notFoundPruneBody, bn as updateFieldBody, bt as termResponseSchema, c as bylineCreditSchema, cn as collectionWithFieldsResponseSchema, cr as offsetPaginationQuery, ct as createSectionBody, d as bylineTranslationCreateBody, dn as fieldListResponseSchema, dr as successEnvelope, dt as sectionsListQuery, en as commentStatusBody, er as VALID_ROLE_LEVELS, et as searchEnableBody, f as bylineTranslationsResponseSchema, fn as fieldReorderBody, ft as updateSectionBody, g as createRedirectBody, gn as orphanedTableListResponseSchema, gt as taxonomyDefTranslationsSchema, h as contentBylineInputSchema, hn as orphanRegisterBody, ht as taxonomyDefSchema, i as bylineFieldReorderBody, in as collectionGetQuery, ir as deleteResponseSchema, it as searchResultSchema, j as updateWidgetBody, jn as mediaUpdateBody, jt as menuTranslationsSchema, k as createWidgetBody, kn as mediaProviderListQuery, kt as menuListItemSchema, l as bylineListResponseSchema, ln as createCollectionBody, lr as roleLevel, lt as sectionListResponseSchema, m as bylinesListQuery, mn as fieldSchema, mt as createTermBody, n as bylineFieldDefinitionSchema, nn as publicCommentListResponseSchema, nr as countResponseSchema, nt as searchRebuildBody, o as bylineFieldUsageResponseSchema, on as collectionResponseSchema, or as localeCode, ot as settingsUpdateBody, p as bylineUpdateBody, pn as fieldResponseSchema, pt as createTaxonomyDefBody, q as setupBody, qn as contentTermsBody, qt as signupRequestBody, r as bylineFieldListResponseSchema, rn as publicCommentSchema, rr as cursorPaginationQuery, rt as searchResponseSchema, s as bylineCreateBody, sn as collectionSchema, sr as localeFilterQuery, st as siteSettingsSchema, t as bylineFieldCreateBody, tn as createCommentBody, tr as apiErrorSchema, tt as searchQuery, u as bylineSummarySchema, un as createFieldBody, ur as slugPattern, ut as sectionSchema, v as notFoundListQuery, vn as schemaExportQuery, vt as termGetResponseSchema, w as redirectListResponseSchema, wn as mediaConfirmResponseSchema, wt as updateTermBody, x as notFoundSummaryQuery, xn as DEFAULT_MAX_UPLOAD_SIZE, xt as termSchema, y as notFoundListResponseSchema, yn as updateCollectionBody, yt as termListResponseSchema, z as userListResponseSchema, zn as contentListQuery, zt as inviteRegisterOptionsBody } from "../../byline-fields-DbibsvTl.mjs";
+export { DEFAULT_MAX_UPLOAD_SIZE, VALID_ROLE_LEVELS, adminCommentListResponseSchema, allowedDomainCreateBody, allowedDomainUpdateBody, apiErrorSchema, atprotoLoginBody, authMeActionBody, bylineCreateBody, bylineCreditSchema, bylineFieldCreateBody, bylineFieldDefinitionSchema, bylineFieldListResponseSchema, bylineFieldReorderBody, bylineFieldUpdateBody, bylineFieldUsageResponseSchema, bylineListResponseSchema, bylineSummarySchema, bylineTranslationCreateBody, bylineTranslationsResponseSchema, bylineUpdateBody, bylinesListQuery, collectionGetQuery, collectionListResponseSchema, collectionResponseSchema, collectionSchema, collectionWithFieldsResponseSchema, commentBulkBody, commentBulkResponseSchema, commentCountsResponseSchema, commentListQuery, commentSchema, commentStatusBody, contentAuthorSchema, contentAuthorsResponseSchema, contentBylineInputSchema, contentCompareResponseSchema, contentCreateBody, contentItemSchema, contentListQuery, contentListResponseSchema, contentPreviewUrlBody, contentPublishBody, contentResponseSchema, contentScheduleBody, contentSeoInput, contentSeoSchema, contentTermsBody, contentTranslationSchema, contentTranslationsResponseSchema, contentTrashQuery, contentUpdateBody, countResponseSchema, createCollectionBody, createCommentBody, createFieldBody, createMenuBody, createMenuItemBody, createRedirectBody, createSectionBody, createTaxonomyDefBody, createTermBody, createWidgetAreaBody, createWidgetBody, cursorPaginationQuery, deleteResponseSchema, fieldListResponseSchema, fieldReorderBody, fieldResponseSchema, fieldSchema, formatFileSize, httpUrl, importProbeBody, inviteCompleteBody, inviteCreateBody, inviteRegisterOptionsBody, localeCode, localeFilterQuery, magicLinkSendBody, mediaConfirmBody, mediaConfirmResponseSchema, mediaExistingResponseSchema, mediaItemSchema, mediaListQuery, mediaListResponseSchema, mediaProviderListQuery, mediaResponseSchema, mediaUpdateBody, mediaUploadUrlBody, mediaUploadUrlResponseSchema, menuItemSchema, menuItemTypeEnum, menuListItemSchema, menuSchema, menuTranslationsSchema, menuWithItemsSchema, notFoundEntrySchema, notFoundListQuery, notFoundListResponseSchema, notFoundPruneBody, notFoundSummaryQuery, notFoundSummaryResponseSchema, notFoundSummarySchema, offsetPaginationQuery, orphanRegisterBody, orphanedTableListResponseSchema, orphanedTableSchema, passkeyOptionsBody, passkeyRegisterOptionsBody, passkeyRegisterVerifyBody, passkeyRenameBody, passkeyVerifyBody, publicCommentListResponseSchema, publicCommentSchema, redirectListResponseSchema, redirectSchema, redirectsListQuery, reorderMenuItemsBody, reorderWidgetsBody, roleLevel, schemaExportQuery, searchEnableBody, searchQuery, searchRebuildBody, searchResponseSchema, searchResultSchema, searchSuggestQuery, sectionListResponseSchema, sectionSchema, sectionsListQuery, settingsUpdateBody, setupAdminBody, setupAdminVerifyBody, setupAtprotoAdminBody, setupBody, signupCompleteBody, signupRequestBody, siteSettingsSchema, slugPattern, successEnvelope, taxonomyDefSchema, taxonomyDefTranslationsSchema, taxonomyListResponseSchema, termGetResponseSchema, termListResponseSchema, termResponseSchema, termSchema, termTranslationsSchema, termWithCountSchema, trashedContentItemSchema, trashedContentListResponseSchema, updateCollectionBody, updateFieldBody, updateMenuBody, updateMenuItemBody, updateRedirectBody, updateSectionBody, updateTermBody, updateWidgetBody, userDetailSchema, userListResponseSchema, userSchema, userUpdateBody, usersListQuery, widgetAreaSchema, widgetAreaWithWidgetsAndCountSchema, widgetAreaWithWidgetsSchema, widgetSchema, wpMediaImportBody, wpPluginAnalyzeBody, wpPluginExecuteBody, wpPrepareBody, wpRewriteUrlsBody };

package/dist/api/schemas/index.mjs

@@ -1,4 +1,4 @@
-import { $ as createMenuBody, $t as contentCreateBody, A as searchRebuildBody, An as httpUrl, At as fieldReorderBody, B as updateSectionBody, Bt as formatFileSize, C as userDetailSchema, Cn as bylinesListQuery, Ct as collectionListResponseSchema, D as usersListQuery, Dn as countResponseSchema, Dt as createCollectionBody, E as userUpdateBody, En as apiErrorSchema, Et as collectionWithFieldsResponseSchema, F as siteSettingsSchema, Fn as slugPattern, Ft as orphanedTableSchema, G as taxonomyListResponseSchema, Gt as mediaListQuery, H as createTermBody, Ht as mediaConfirmResponseSchema, I as createSectionBody, In as successEnvelope, It as schemaExportQuery, J as termResponseSchema, Jt as mediaResponseSchema, K as termGetResponseSchema, Kt as mediaListResponseSchema, L as sectionListResponseSchema, Lt as updateCollectionBody, M as searchResultSchema, Mn as localeFilterQuery, Mt as fieldSchema, N as searchSuggestQuery, Nn as offsetPaginationQuery, Nt as orphanRegisterBody, O as searchEnableBody, On as cursorPaginationQuery, Ot as createFieldBody, P as settingsUpdateBody, Pn as roleLevel, Pt as orphanedTableListResponseSchema, Q as updateTermBody, Qt as contentCompareResponseSchema, R as sectionSchema, Rt as updateFieldBody, S as allowedDomainUpdateBody, Sn as bylineUpdateBody, St as collectionGetQuery, T as userSchema, Tn as VALID_ROLE_LEVELS, Tt as collectionSchema, U as taxonomyDefSchema, Ut as mediaExistingResponseSchema, V as createTaxonomyDefBody, Vt as mediaConfirmBody, W as taxonomyDefTranslationsSchema, Wt as mediaItemSchema, X as termTranslationsSchema, Xt as mediaUploadUrlBody, Y as termSchema, Yt as mediaUpdateBody, Z as termWithCountSchema, Zt as mediaUploadUrlResponseSchema, _ as widgetAreaSchema, _n as bylineCreditSchema, _t as commentSchema, a as notFoundPruneBody, an as contentResponseSchema, at as menuTranslationsSchema, b as widgetSchema, bn as bylineTranslationCreateBody, bt as publicCommentListResponseSchema, c as notFoundSummarySchema, cn as contentSeoSchema, ct as updateMenuBody, d as redirectsListQuery, dn as contentTranslationsResponseSchema, en as contentItemSchema, et as createMenuItemBody, f as updateRedirectBody, fn as contentTrashQuery, ft as adminCommentListResponseSchema, g as updateWidgetBody, gn as bylineCreateBody, gt as commentListQuery, h as reorderWidgetsBody, hn as trashedContentListResponseSchema, ht as commentCountsResponseSchema, i as notFoundListResponseSchema, in as contentPublishBody, it as menuSchema, j as searchResponseSchema, jn as localeCode, jt as fieldResponseSchema, k as searchQuery, kn as deleteResponseSchema, kt as fieldListResponseSchema, l as redirectListResponseSchema, ln as contentTermsBody, lt as updateMenuItemBody, m as createWidgetBody, mn as trashedContentItemSchema, mt as commentBulkResponseSchema, n as notFoundEntrySchema, nn as contentListResponseSchema, nt as menuItemTypeEnum, o as notFoundSummaryQuery, on as contentScheduleBody, ot as menuWithItemsSchema, p as createWidgetAreaBody, pn as contentUpdateBody, pt as commentBulkBody, q as termListResponseSchema, qt as mediaProviderListQuery, r as notFoundListQuery, rn as contentPreviewUrlBody, rt as menuListItemSchema, s as notFoundSummaryResponseSchema, sn as contentSeoInput, st as reorderMenuItemsBody, t as createRedirectBody, tn as contentListQuery, tt as menuItemSchema, u as redirectSchema, un as contentTranslationSchema, v as widgetAreaWithWidgetsAndCountSchema, vn as bylineListResponseSchema, vt as commentStatusBody, w as userListResponseSchema, wn as contentBylineInputSchema, wt as collectionResponseSchema, x as allowedDomainCreateBody, xn as bylineTranslationsResponseSchema, xt as publicCommentSchema, y as widgetAreaWithWidgetsSchema, yn as bylineSummarySchema, yt as createCommentBody, z as sectionsListQuery, zt as DEFAULT_MAX_UPLOAD_SIZE } from "../../redirects-C0L9JUk4.mjs";
-import { C as passkeyOptionsBody, D as passkeyVerifyBody, E as passkeyRenameBody, O as signupCompleteBody, S as magicLinkSendBody, T as passkeyRegisterVerifyBody, _ as wpRewriteUrlsBody, a as bylineFieldUpdateBody, b as inviteCreateBody, c as setupAdminBody, d as setupBody, f as importProbeBody, g as wpPrepareBody, h as wpPluginExecuteBody, i as bylineFieldReorderBody, k as signupRequestBody, l as setupAdminVerifyBody, m as wpPluginAnalyzeBody, n as bylineFieldDefinitionSchema, o as bylineFieldUsageResponseSchema, p as wpMediaImportBody, r as bylineFieldListResponseSchema, s as atprotoLoginBody, t as bylineFieldCreateBody, u as setupAtprotoAdminBody, v as authMeActionBody, w as passkeyRegisterOptionsBody, x as inviteRegisterOptionsBody, y as inviteCompleteBody } from "../../byline-fields-Dr-xcb6S.mjs";
+import { $ as createMenuBody, $t as contentAuthorsResponseSchema, A as searchRebuildBody, An as cursorPaginationQuery, At as fieldReorderBody, B as updateSectionBody, Bt as formatFileSize, C as userDetailSchema, Cn as bylineTranslationsResponseSchema, Ct as collectionListResponseSchema, D as usersListQuery, Dn as VALID_ROLE_LEVELS, Dt as createCollectionBody, E as userUpdateBody, En as contentBylineInputSchema, Et as collectionWithFieldsResponseSchema, F as siteSettingsSchema, Fn as offsetPaginationQuery, Ft as orphanedTableSchema, G as taxonomyListResponseSchema, Gt as mediaListQuery, H as createTermBody, Ht as mediaConfirmResponseSchema, I as createSectionBody, In as roleLevel, It as schemaExportQuery, J as termResponseSchema, Jt as mediaResponseSchema, K as termGetResponseSchema, Kt as mediaListResponseSchema, L as sectionListResponseSchema, Ln as slugPattern, Lt as updateCollectionBody, M as searchResultSchema, Mn as httpUrl, Mt as fieldSchema, N as searchSuggestQuery, Nn as localeCode, Nt as orphanRegisterBody, O as searchEnableBody, On as apiErrorSchema, Ot as createFieldBody, P as settingsUpdateBody, Pn as localeFilterQuery, Pt as orphanedTableListResponseSchema, Q as updateTermBody, Qt as contentAuthorSchema, R as sectionSchema, Rn as successEnvelope, Rt as updateFieldBody, S as allowedDomainUpdateBody, Sn as bylineTranslationCreateBody, St as collectionGetQuery, T as userSchema, Tn as bylinesListQuery, Tt as collectionSchema, U as taxonomyDefSchema, Ut as mediaExistingResponseSchema, V as createTaxonomyDefBody, Vt as mediaConfirmBody, W as taxonomyDefTranslationsSchema, Wt as mediaItemSchema, X as termTranslationsSchema, Xt as mediaUploadUrlBody, Y as termSchema, Yt as mediaUpdateBody, Z as termWithCountSchema, Zt as mediaUploadUrlResponseSchema, _ as widgetAreaSchema, _n as trashedContentListResponseSchema, _t as commentSchema, a as notFoundPruneBody, an as contentPreviewUrlBody, at as menuTranslationsSchema, b as widgetSchema, bn as bylineListResponseSchema, bt as publicCommentListResponseSchema, c as notFoundSummarySchema, cn as contentScheduleBody, ct as updateMenuBody, d as redirectsListQuery, dn as contentTermsBody, en as contentCompareResponseSchema, et as createMenuItemBody, f as updateRedirectBody, fn as contentTranslationSchema, ft as adminCommentListResponseSchema, g as updateWidgetBody, gn as trashedContentItemSchema, gt as commentListQuery, h as reorderWidgetsBody, hn as contentUpdateBody, ht as commentCountsResponseSchema, i as notFoundListResponseSchema, in as contentListResponseSchema, it as menuSchema, j as searchResponseSchema, jn as deleteResponseSchema, jt as fieldResponseSchema, k as searchQuery, kn as countResponseSchema, kt as fieldListResponseSchema, l as redirectListResponseSchema, ln as contentSeoInput, lt as updateMenuItemBody, m as createWidgetBody, mn as contentTrashQuery, mt as commentBulkResponseSchema, n as notFoundEntrySchema, nn as contentItemSchema, nt as menuItemTypeEnum, o as notFoundSummaryQuery, on as contentPublishBody, ot as menuWithItemsSchema, p as createWidgetAreaBody, pn as contentTranslationsResponseSchema, pt as commentBulkBody, q as termListResponseSchema, qt as mediaProviderListQuery, r as notFoundListQuery, rn as contentListQuery, rt as menuListItemSchema, s as notFoundSummaryResponseSchema, sn as contentResponseSchema, st as reorderMenuItemsBody, t as createRedirectBody, tn as contentCreateBody, tt as menuItemSchema, u as redirectSchema, un as contentSeoSchema, v as widgetAreaWithWidgetsAndCountSchema, vn as bylineCreateBody, vt as commentStatusBody, w as userListResponseSchema, wn as bylineUpdateBody, wt as collectionResponseSchema, x as allowedDomainCreateBody, xn as bylineSummarySchema, xt as publicCommentSchema, y as widgetAreaWithWidgetsSchema, yn as bylineCreditSchema, yt as createCommentBody, z as sectionsListQuery, zt as DEFAULT_MAX_UPLOAD_SIZE } from "../../redirects-CCbCqCCd.mjs";
+import { C as passkeyOptionsBody, D as passkeyVerifyBody, E as passkeyRenameBody, O as signupCompleteBody, S as magicLinkSendBody, T as passkeyRegisterVerifyBody, _ as wpRewriteUrlsBody, a as bylineFieldUpdateBody, b as inviteCreateBody, c as setupAdminBody, d as setupBody, f as importProbeBody, g as wpPrepareBody, h as wpPluginExecuteBody, i as bylineFieldReorderBody, k as signupRequestBody, l as setupAdminVerifyBody, m as wpPluginAnalyzeBody, n as bylineFieldDefinitionSchema, o as bylineFieldUsageResponseSchema, p as wpMediaImportBody, r as bylineFieldListResponseSchema, s as atprotoLoginBody, t as bylineFieldCreateBody, u as setupAtprotoAdminBody, v as authMeActionBody, w as passkeyRegisterOptionsBody, x as inviteRegisterOptionsBody, y as inviteCompleteBody } from "../../byline-fields-8TMtkBnH.mjs";
 
-export { DEFAULT_MAX_UPLOAD_SIZE, VALID_ROLE_LEVELS, adminCommentListResponseSchema, allowedDomainCreateBody, allowedDomainUpdateBody, apiErrorSchema, atprotoLoginBody, authMeActionBody, bylineCreateBody, bylineCreditSchema, bylineFieldCreateBody, bylineFieldDefinitionSchema, bylineFieldListResponseSchema, bylineFieldReorderBody, bylineFieldUpdateBody, bylineFieldUsageResponseSchema, bylineListResponseSchema, bylineSummarySchema, bylineTranslationCreateBody, bylineTranslationsResponseSchema, bylineUpdateBody, bylinesListQuery, collectionGetQuery, collectionListResponseSchema, collectionResponseSchema, collectionSchema, collectionWithFieldsResponseSchema, commentBulkBody, commentBulkResponseSchema, commentCountsResponseSchema, commentListQuery, commentSchema, commentStatusBody, contentBylineInputSchema, contentCompareResponseSchema, contentCreateBody, contentItemSchema, contentListQuery, contentListResponseSchema, contentPreviewUrlBody, contentPublishBody, contentResponseSchema, contentScheduleBody, contentSeoInput, contentSeoSchema, contentTermsBody, contentTranslationSchema, contentTranslationsResponseSchema, contentTrashQuery, contentUpdateBody, countResponseSchema, createCollectionBody, createCommentBody, createFieldBody, createMenuBody, createMenuItemBody, createRedirectBody, createSectionBody, createTaxonomyDefBody, createTermBody, createWidgetAreaBody, createWidgetBody, cursorPaginationQuery, deleteResponseSchema, fieldListResponseSchema, fieldReorderBody, fieldResponseSchema, fieldSchema, formatFileSize, httpUrl, importProbeBody, inviteCompleteBody, inviteCreateBody, inviteRegisterOptionsBody, localeCode, localeFilterQuery, magicLinkSendBody, mediaConfirmBody, mediaConfirmResponseSchema, mediaExistingResponseSchema, mediaItemSchema, mediaListQuery, mediaListResponseSchema, mediaProviderListQuery, mediaResponseSchema, mediaUpdateBody, mediaUploadUrlBody, mediaUploadUrlResponseSchema, menuItemSchema, menuItemTypeEnum, menuListItemSchema, menuSchema, menuTranslationsSchema, menuWithItemsSchema, notFoundEntrySchema, notFoundListQuery, notFoundListResponseSchema, notFoundPruneBody, notFoundSummaryQuery, notFoundSummaryResponseSchema, notFoundSummarySchema, offsetPaginationQuery, orphanRegisterBody, orphanedTableListResponseSchema, orphanedTableSchema, passkeyOptionsBody, passkeyRegisterOptionsBody, passkeyRegisterVerifyBody, passkeyRenameBody, passkeyVerifyBody, publicCommentListResponseSchema, publicCommentSchema, redirectListResponseSchema, redirectSchema, redirectsListQuery, reorderMenuItemsBody, reorderWidgetsBody, roleLevel, schemaExportQuery, searchEnableBody, searchQuery, searchRebuildBody, searchResponseSchema, searchResultSchema, searchSuggestQuery, sectionListResponseSchema, sectionSchema, sectionsListQuery, settingsUpdateBody, setupAdminBody, setupAdminVerifyBody, setupAtprotoAdminBody, setupBody, signupCompleteBody, signupRequestBody, siteSettingsSchema, slugPattern, successEnvelope, taxonomyDefSchema, taxonomyDefTranslationsSchema, taxonomyListResponseSchema, termGetResponseSchema, termListResponseSchema, termResponseSchema, termSchema, termTranslationsSchema, termWithCountSchema, trashedContentItemSchema, trashedContentListResponseSchema, updateCollectionBody, updateFieldBody, updateMenuBody, updateMenuItemBody, updateRedirectBody, updateSectionBody, updateTermBody, updateWidgetBody, userDetailSchema, userListResponseSchema, userSchema, userUpdateBody, usersListQuery, widgetAreaSchema, widgetAreaWithWidgetsAndCountSchema, widgetAreaWithWidgetsSchema, widgetSchema, wpMediaImportBody, wpPluginAnalyzeBody, wpPluginExecuteBody, wpPrepareBody, wpRewriteUrlsBody };
+export { DEFAULT_MAX_UPLOAD_SIZE, VALID_ROLE_LEVELS, adminCommentListResponseSchema, allowedDomainCreateBody, allowedDomainUpdateBody, apiErrorSchema, atprotoLoginBody, authMeActionBody, bylineCreateBody, bylineCreditSchema, bylineFieldCreateBody, bylineFieldDefinitionSchema, bylineFieldListResponseSchema, bylineFieldReorderBody, bylineFieldUpdateBody, bylineFieldUsageResponseSchema, bylineListResponseSchema, bylineSummarySchema, bylineTranslationCreateBody, bylineTranslationsResponseSchema, bylineUpdateBody, bylinesListQuery, collectionGetQuery, collectionListResponseSchema, collectionResponseSchema, collectionSchema, collectionWithFieldsResponseSchema, commentBulkBody, commentBulkResponseSchema, commentCountsResponseSchema, commentListQuery, commentSchema, commentStatusBody, contentAuthorSchema, contentAuthorsResponseSchema, contentBylineInputSchema, contentCompareResponseSchema, contentCreateBody, contentItemSchema, contentListQuery, contentListResponseSchema, contentPreviewUrlBody, contentPublishBody, contentResponseSchema, contentScheduleBody, contentSeoInput, contentSeoSchema, contentTermsBody, contentTranslationSchema, contentTranslationsResponseSchema, contentTrashQuery, contentUpdateBody, countResponseSchema, createCollectionBody, createCommentBody, createFieldBody, createMenuBody, createMenuItemBody, createRedirectBody, createSectionBody, createTaxonomyDefBody, createTermBody, createWidgetAreaBody, createWidgetBody, cursorPaginationQuery, deleteResponseSchema, fieldListResponseSchema, fieldReorderBody, fieldResponseSchema, fieldSchema, formatFileSize, httpUrl, importProbeBody, inviteCompleteBody, inviteCreateBody, inviteRegisterOptionsBody, localeCode, localeFilterQuery, magicLinkSendBody, mediaConfirmBody, mediaConfirmResponseSchema, mediaExistingResponseSchema, mediaItemSchema, mediaListQuery, mediaListResponseSchema, mediaProviderListQuery, mediaResponseSchema, mediaUpdateBody, mediaUploadUrlBody, mediaUploadUrlResponseSchema, menuItemSchema, menuItemTypeEnum, menuListItemSchema, menuSchema, menuTranslationsSchema, menuWithItemsSchema, notFoundEntrySchema, notFoundListQuery, notFoundListResponseSchema, notFoundPruneBody, notFoundSummaryQuery, notFoundSummaryResponseSchema, notFoundSummarySchema, offsetPaginationQuery, orphanRegisterBody, orphanedTableListResponseSchema, orphanedTableSchema, passkeyOptionsBody, passkeyRegisterOptionsBody, passkeyRegisterVerifyBody, passkeyRenameBody, passkeyVerifyBody, publicCommentListResponseSchema, publicCommentSchema, redirectListResponseSchema, redirectSchema, redirectsListQuery, reorderMenuItemsBody, reorderWidgetsBody, roleLevel, schemaExportQuery, searchEnableBody, searchQuery, searchRebuildBody, searchResponseSchema, searchResultSchema, searchSuggestQuery, sectionListResponseSchema, sectionSchema, sectionsListQuery, settingsUpdateBody, setupAdminBody, setupAdminVerifyBody, setupAtprotoAdminBody, setupBody, signupCompleteBody, signupRequestBody, siteSettingsSchema, slugPattern, successEnvelope, taxonomyDefSchema, taxonomyDefTranslationsSchema, taxonomyListResponseSchema, termGetResponseSchema, termListResponseSchema, termResponseSchema, termSchema, termTranslationsSchema, termWithCountSchema, trashedContentItemSchema, trashedContentListResponseSchema, updateCollectionBody, updateFieldBody, updateMenuBody, updateMenuItemBody, updateRedirectBody, updateSectionBody, updateTermBody, updateWidgetBody, userDetailSchema, userListResponseSchema, userSchema, userUpdateBody, usersListQuery, widgetAreaSchema, widgetAreaWithWidgetsAndCountSchema, widgetAreaWithWidgetsSchema, widgetSchema, wpMediaImportBody, wpPluginAnalyzeBody, wpPluginExecuteBody, wpPrepareBody, wpRewriteUrlsBody };

package/dist/{api-Cs7DAACP.mjs → api-DStv36ik.mjs}

@@ -1,23 +1,24 @@
 import { r as validatePluginIdentifier, t as validateIdentifier } from "./validate-VPnKoIzW.mjs";
 import { n as getI18nConfig, r as isI18nEnabled } from "./config-CVssduLe.mjs";
-import { r as RevisionRepository, t as ContentRepository } from "./content-CyqOmOzm.mjs";
+import { r as RevisionRepository, t as ContentRepository } from "./content-BIlVx-RX.mjs";
 import { r as encodeBase64, t as decodeBase64 } from "./base64-CqR-7kqF.mjs";
-import { n as InvalidCursorError, t as EmDashValidationError } from "./types-K3MDsxpy.mjs";
-import { t as MediaRepository } from "./media-C-oovGCG.mjs";
-import { t as CommentRepository } from "./comment-C4jVbCM8.mjs";
-import { t as withTransaction } from "./transaction-NQj4VJ7Z.mjs";
-import { t as RedirectRepository } from "./redirect-C6tJA7tk.mjs";
-import { r as requestCached } from "./request-cache-BYMs-BGX.mjs";
-import { t as BylineRepository } from "./byline-CWQ9aSoz.mjs";
-import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-BU-vP9Dh.mjs";
-import { t as SeoRepository } from "./seo-BR39kvTF.mjs";
-import { r as invalidateRedirectCache } from "./cache-lZL7SgVb.mjs";
+import { n as InvalidCursorError, r as ScheduledNotDueError, t as EmDashValidationError } from "./types-BXSUSAjt.mjs";
+import { t as MediaRepository } from "./media-JOf3pNkw.mjs";
+import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-BerYVuve.mjs";
+import { t as UserRepository } from "./user-C0um7wrg.mjs";
+import { t as CommentRepository } from "./comment-sqQxNpN3.mjs";
+import { t as withTransaction } from "./transaction-x2tJQ-A1.mjs";
+import { t as RedirectRepository } from "./redirect-CRWIt8Zj.mjs";
+import { r as requestCached } from "./request-cache-D32LpnmI.mjs";
+import { t as BylineRepository } from "./byline-DUx48sJp.mjs";
+import { t as SeoRepository } from "./seo-B5e6y9Wk.mjs";
+import { r as invalidateRedirectCache } from "./cache-B_HzASVT.mjs";
 import { n as isMissingTableError } from "./db-errors-CtzxKBxe.mjs";
 import { r as parseAllowedMimeTypes, t as matchesMimeAllowlist } from "./mime-CCEzze7W.mjs";
 import { n as hashString } from "./hash-9w3pd3-m.mjs";
-import { n as SchemaRegistry, t as SchemaError } from "./registry-CIDxZbhh.mjs";
-import { i as pluginManifestSchema, r as normalizeManifestRoute } from "./manifest-schema-Cj-YrzrF.mjs";
-import { r as normalizeCapabilities } from "./types-Cj2S6FuC.mjs";
+import { n as SchemaRegistry, t as SchemaError } from "./registry-brYh-rAT.mjs";
+import { a as reconcileManifestAccess, i as pluginManifestSchema, r as normalizeManifestRoute } from "./manifest-schema-BtwbL_vj.mjs";
+import { a as normalizeCapabilities, r as declaredAccessToCapabilities } from "./types-CZI4E3qG.mjs";
 import { t as EmDashStorageError } from "./types-DpFmlNyB.mjs";
 import { n as resolveAndValidateExternalUrl, t as SsrfError } from "./ssrf-BsVGIE0Z.mjs";
 import { sql } from "kysely";
@@ -337,6 +338,22 @@ async function resolveSearchColumns(db, collection) {
 	for (const candidate of ["title", "name"]) if (fieldSlugs.has(candidate)) columns.push(candidate);
 	return columns;
 }
+/** Matches a date-only `YYYY-MM-DD` bound (no time component). */
+const DATE_ONLY_RE = /^\d{4}-\d{2}-\d{2}$/;
+/**
+* Normalize a date-range bound to an ISO datetime for lexicographic comparison
+* against stored ISO 8601 timestamps. A bare `YYYY-MM-DD` is widened to the
+* appropriate UTC day boundary so the range stays inclusive: a `start` bound
+* becomes the start of the day and an `end` bound the end of the day.
+* Otherwise a date-only upper bound would exclude every same-day row (since
+* `2024-06-01T12:00:00Z` sorts after `2024-06-01`). Full datetimes pass
+* through unchanged.
+*/
+function normalizeDateBound(value, edge) {
+	if (!value) return void 0;
+	if (!DATE_ONLY_RE.test(value)) return value;
+	return edge === "start" ? `${value}T00:00:00.000Z` : `${value}T23:59:59.999Z`;
+}
 /**
 * Create content list handler
 */
@@ -346,6 +363,12 @@ async function handleContentList(db, collection, params) {
 		const where = {};
 		if (params.status) where.status = params.status;
 		if (params.locale) where.locale = params.locale;
+		if (params.authorId) where.authorId = params.authorId;
+		if (params.dateField && (params.dateFrom || params.dateTo)) where.dateFilter = {
+			field: params.dateField,
+			from: normalizeDateBound(params.dateFrom, "start"),
+			to: normalizeDateBound(params.dateTo, "end")
+		};
 		const q = params.q?.trim();
 		if (q) {
 			where.q = q;
@@ -404,6 +427,48 @@ async function handleContentList(db, collection, params) {
 	}
 }
 /**
+* List the distinct authors of a collection's live content.
+*
+* Backs the admin content-list author filter. Unlike `/admin/users` (ADMIN
+* only), this is gated on `content:read`, so any editor can filter by author.
+* Returns only users who have authored at least one non-trashed entry, sorted
+* by display name then email for a stable dropdown order.
+*/
+async function handleContentAuthors(db, collection) {
+	try {
+		const authorIds = await new ContentRepository(db).findDistinctAuthorIds(collection);
+		if (authorIds.length === 0) return {
+			success: true,
+			data: { items: [] }
+		};
+		return {
+			success: true,
+			data: { items: (await new UserRepository(db).findByIds(authorIds)).map((u) => ({
+				id: u.id,
+				name: u.name,
+				email: u.email,
+				avatarUrl: u.avatarUrl
+			})).toSorted((a, b) => (a.name ?? a.email).localeCompare(b.name ?? b.email)) }
+		};
+	} catch (error) {
+		if (isMissingTableError(error)) return {
+			success: false,
+			error: {
+				code: "COLLECTION_NOT_FOUND",
+				message: `Collection '${collection}' not found`
+			}
+		};
+		console.error("Content authors error:", error);
+		return {
+			success: false,
+			error: {
+				code: "CONTENT_AUTHORS_ERROR",
+				message: "Failed to list content authors"
+			}
+		};
+	}
+}
+/**
 * Get single content item
 */
 async function handleContentGet(db, collection, id, locale) {
@@ -511,7 +576,7 @@ async function handleContentCreate(db, collection, body) {
 			});
 			if (body.bylines !== void 0) created.primaryBylineId = (await bylineRepo.setContentBylines(collection, created.id, body.bylines))[0]?.byline.translationGroup ?? null;
 			if (body.translationOf) {
-				const { TaxonomyRepository } = await import("./taxonomy-DTZrIQpi.mjs").then((n) => n.n);
+				const { TaxonomyRepository } = await import("./taxonomy-CdllE4oq.mjs").then((n) => n.n);
 				await new TaxonomyRepository(trx).copyEntryTerms(collection, body.translationOf, created.id);
 				if (body.bylines === void 0) {
 					await bylineRepo.copyContentBylines(collection, body.translationOf, created.id);
@@ -971,7 +1036,7 @@ async function handleContentPublish(db, collection, id, options = {}) {
 		const item = await withTransaction(db, async (trx) => {
 			const repo = new ContentRepository(trx);
 			const resolvedId = await resolveId(repo, collection, id) ?? id;
-			return repo.publish(collection, resolvedId, options.publishedAt);
+			return repo.publish(collection, resolvedId, options.publishedAt, options.requireScheduledDue);
 		});
 		await hydrateSeo(db, collection, item, await collectionHasSeo(db, collection));
 		return {
@@ -979,6 +1044,13 @@ async function handleContentPublish(db, collection, id, options = {}) {
 			data: { item }
 		};
 	} catch (error) {
+		if (error instanceof ScheduledNotDueError) return {
+			success: false,
+			error: {
+				code: "NOT_DUE",
+				message: error.message
+			}
+		};
 		if (error instanceof EmDashValidationError) return {
 			success: false,
 			error: {
@@ -2442,7 +2514,7 @@ async function extractBundle(tarballBytes) {
 		const parsed = JSON.parse(manifestJson);
 		const result = pluginManifestSchema.safeParse(parsed);
 		if (!result.success) throw new MarketplaceError("Invalid bundle: manifest.json failed validation", void 0, "INVALID_BUNDLE");
-		manifest = result.data;
+		manifest = reconcileManifestAccess(result.data);
 	} catch (err) {
 		if (err instanceof MarketplaceError) throw err;
 		throw new MarketplaceError("Invalid bundle: malformed manifest.json", void 0, "INVALID_BUNDLE");
@@ -2607,7 +2679,7 @@ async function loadBundleFromR2(storage, pluginId, version, source = "marketplac
 		const parsed = JSON.parse(manifestText);
 		const result = pluginManifestSchema.safeParse(parsed);
 		if (!result.success) return null;
-		const manifest = result.data;
+		const manifest = reconcileManifestAccess(result.data);
 		let adminCode;
 		try {
 			adminCode = await streamToText((await storage.download(`${prefix}/admin.js`)).body);
@@ -3442,6 +3514,21 @@ async function makeRegistryPluginId(publisherDid, slug) {
 *     each labeller's DID. Aggregator label envelope tampering is
 *     mitigated by the artifact checksum but not detected.
 */
+const RELEASE_EXTENSION_NSID = "com.emdashcms.experimental.package.releaseExtension";
+/**
+* Whether two `declaredAccess` blocks grant exactly the same enforced access --
+* the same capabilities AND the same host allow-list. Both are lowered through
+* the canonical converter so that constraint content (`allowedHosts`), not just
+* the capability set, is part of the comparison. The capability-set consent
+* gate is blind to host scope; this is what keeps a bundle from being installed
+* with a wider (or simply different) host allow-list than its published record
+* advertised and the user consented to.
+*/
+function enforcedAccessEqual(a, b) {
+	const aa = declaredAccessToCapabilities(a);
+	const bb = declaredAccessToCapabilities(b);
+	return JSON.stringify(aa.capabilities.toSorted()) === JSON.stringify(bb.capabilities.toSorted()) && JSON.stringify(aa.allowedHosts.toSorted()) === JSON.stringify(bb.allowedHosts.toSorted());
+}
 /** Matches a bare 64-character lowercase/uppercase hex SHA-256 digest. */
 const SHA256_HEX_PATTERN = /^[a-f0-9]{64}$/i;
 /** Compute the SHA-256 of `bytes` as a lowercase hex string. */
@@ -4002,6 +4089,14 @@ async function handleRegistryInstall(db, storage, sandboxRunner, registryConfigI
 			...bundle.manifest,
 			id: pluginId
 		};
+		const recordExt = (release?.extensions)?.[RELEASE_EXTENSION_NSID];
+		if (!enforcedAccessEqual(recordExt?.declaredAccess ?? {}, bundle.manifest.declaredAccess ?? {})) return {
+			success: false,
+			error: {
+				code: "DECLARED_ACCESS_DRIFT",
+				message: "The plugin bundle declares different permissions than its published record. Installation refused."
+			}
+		};
 		const actualCapabilities = canonicalCapabilitiesForDriftCheck(bundle.manifest.capabilities);
 		if (actualCapabilities.length > 0) {
 			if (input.acknowledgedDeclaredAccess === void 0) return {
@@ -4307,6 +4402,14 @@ async function handleRegistryUpdate(db, storage, sandboxRunner, registryConfigIn
 			...bundle.manifest,
 			id: pluginId
 		};
+		const recordExt = (signedRelease?.extensions)?.[RELEASE_EXTENSION_NSID];
+		if (!enforcedAccessEqual(recordExt?.declaredAccess ?? {}, bundle.manifest.declaredAccess ?? {})) return {
+			success: false,
+			error: {
+				code: "DECLARED_ACCESS_DRIFT",
+				message: "The plugin bundle declares different permissions than its published record. Update refused."
+			}
+		};
 		const oldBundle = await loadBundleFromR2(storage, pluginId, oldVersion, "registry");
 		const capabilityChanges = diffCapabilities(oldBundle?.manifest.capabilities ?? [], bundle.manifest.capabilities);
 		if (capabilityChanges.added.length > 0 && !opts?.confirmCapabilityChanges) return {
@@ -4463,5 +4566,5 @@ async function handleRegistryUpdateCheck(db, registryConfigInput) {
 }
 
 //#endregion
-export { handleContentGetIncludingTrashed as $, handleSchemaFieldCreate as A, handleMediaUpdate as B, handleOrphanedTableList as C, handleSchemaCollectionGet as D, handleSchemaCollectionDelete as E, handleSchemaFieldUpdate as F, handleContentCompare as G, handleRevisionList as H, handleMediaCreate as I, handleContentCreate as J, handleContentCountScheduled as K, handleMediaDelete as L, handleSchemaFieldGet as M, handleSchemaFieldList as N, handleSchemaCollectionList as O, handleSchemaFieldReorder as P, handleContentGet as Q, handleMediaGet as R, PluginStateRepository as S, handleSchemaCollectionCreate as T, handleRevisionRestore as U, handleRevisionGet as V, generateManifest as W, handleContentDiscardDraft as X, handleContentDelete as Y, handleContentDuplicate as Z, loadBundleFromR2 as _, handleRegistryUpdateCheck as a, handleContentSchedule as at, handlePluginGet as b, validateAggregatorUrl as c, handleContentUnschedule as ct, handleMarketplaceSearch as d, handleContentList as et, handleMarketplaceUninstall as f, handleThemeSearch as g, handleThemeGetDetail as h, handleRegistryUpdate as i, handleContentRestore as it, handleSchemaFieldDelete as j, handleSchemaCollectionUpdate as k, handleMarketplaceGetPlugin as l, handleContentUpdate as lt, handleMarketplaceUpdateCheck as m, handleRegistryInstall as n, handleContentPermanentDelete as nt, coerceRegistryConfig as o, handleContentTranslations as ot, handleMarketplaceUpdate as p, handleContentCountTrashed as q, handleRegistryUninstall as r, handleContentPublish as rt, normalizeRegistryConfig as s, handleContentUnpublish as st, assertSafeArtifactUrl as t, handleContentListTrashed as tt, handleMarketplaceInstall as u, validateRev as ut, handlePluginDisable as v, handleOrphanedTableRegister as w, handlePluginList as x, handlePluginEnable as y, handleMediaList as z };
-//# sourceMappingURL=api-Cs7DAACP.mjs.map
+export { handleContentGet as $, handleSchemaFieldCreate as A, handleMediaUpdate as B, handleOrphanedTableList as C, handleSchemaCollectionGet as D, handleSchemaCollectionDelete as E, handleSchemaFieldUpdate as F, handleContentAuthors as G, handleRevisionList as H, handleMediaCreate as I, handleContentCountTrashed as J, handleContentCompare as K, handleMediaDelete as L, handleSchemaFieldGet as M, handleSchemaFieldList as N, handleSchemaCollectionList as O, handleSchemaFieldReorder as P, handleContentDuplicate as Q, handleMediaGet as R, PluginStateRepository as S, handleSchemaCollectionCreate as T, handleRevisionRestore as U, handleRevisionGet as V, generateManifest as W, handleContentDelete as X, handleContentCreate as Y, handleContentDiscardDraft as Z, loadBundleFromR2 as _, handleRegistryUpdateCheck as a, handleContentRestore as at, handlePluginGet as b, validateAggregatorUrl as c, handleContentUnpublish as ct, handleMarketplaceSearch as d, validateRev as dt, handleContentGetIncludingTrashed as et, handleMarketplaceUninstall as f, handleThemeSearch as g, handleThemeGetDetail as h, handleRegistryUpdate as i, handleContentPublish as it, handleSchemaFieldDelete as j, handleSchemaCollectionUpdate as k, handleMarketplaceGetPlugin as l, handleContentUnschedule as lt, handleMarketplaceUpdateCheck as m, handleRegistryInstall as n, handleContentListTrashed as nt, coerceRegistryConfig as o, handleContentSchedule as ot, handleMarketplaceUpdate as p, handleContentCountScheduled as q, handleRegistryUninstall as r, handleContentPermanentDelete as rt, normalizeRegistryConfig as s, handleContentTranslations as st, assertSafeArtifactUrl as t, handleContentList as tt, handleMarketplaceInstall as u, handleContentUpdate as ut, handlePluginDisable as v, handleOrphanedTableRegister as w, handlePluginList as x, handlePluginEnable as y, handleMediaList as z };
+//# sourceMappingURL=api-DStv36ik.mjs.map