emdash 0.19.0 → 0.21.0

package/dist/{adapters-C5AWLJSD.d.mts → adapters-BxSmgtbF.d.mts}

@@ -118,4 +118,4 @@ interface PostgresConfig {
 declare function postgres(config: PostgresConfig): DatabaseDescriptor;
 //#endregion
 export { SqliteConfig as a, sqlite as c, PostgresConfig as i, DatabaseDialectType as n, libsql as o, LibsqlConfig as r, postgres as s, DatabaseDescriptor as t };
-//# sourceMappingURL=adapters-C5AWLJSD.d.mts.map
+//# sourceMappingURL=adapters-BxSmgtbF.d.mts.map

package/dist/{adapters-C5AWLJSD.d.mts.map → adapters-BxSmgtbF.d.mts.map}

@@ -1 +1 @@
-{"version":3,"file":"adapters-C5AWLJSD.d.mts","names":[],"sources":["../src/db/adapters.ts"],"mappings":";;AA0BA;;;;;AAKA;;;;;;;;;;;AAqBA;;;;;AAOA;;;KAjCY,mBAAA;;AAsDZ;;UAjDiB,kBAAA;EAChB,UAAA;EACA,MAAA;EACA,IAAA,EAAM,mBAAA;EA8CuC;;;AAqB9C;;;;;;;;;AAWA;;EA/DC,oBAAA;AAAA;AAAA,UAGgB,YAAA;EA8DhB;;;EA1DA,GAAA;AAAA;AAAA,UAGgB,YAAA;EA6DhB;;;EAzDA,GAAA;EAyD0B;AAa3B;;EAlEC,SAAA;AAAA;;;;;;;;;;;iBAae,MAAA,CAAO,MAAA,EAAQ,YAAA,GAAe,kBAAA;;;;;;;;;;;;;;iBAqB9B,MAAA,CAAO,MAAA,EAAQ,YAAA,GAAe,kBAAA;;;;UAW7B,cAAA;EAChB,gBAAA;EACA,IAAA;EACA,IAAA;EACA,QAAA;EACA,IAAA;EACA,QAAA;EACA,GAAA;EACA,IAAA;IAAS,GAAA;IAAc,GAAA;EAAA;AAAA;;;;;;;;;;;iBAaR,QAAA,CAAS,MAAA,EAAQ,cAAA,GAAiB,kBAAA"}
+{"version":3,"file":"adapters-BxSmgtbF.d.mts","names":[],"sources":["../src/db/adapters.ts"],"mappings":";;AA0BA;;;;;AAKA;;;;;;;;;;;AAqBA;;;;;AAOA;;;KAjCY,mBAAA;;AAsDZ;;UAjDiB,kBAAA;EAChB,UAAA;EACA,MAAA;EACA,IAAA,EAAM,mBAAA;EA8CuC;;;AAqB9C;;;;;;;;;AAWA;;EA/DC,oBAAA;AAAA;AAAA,UAGgB,YAAA;EA8DhB;;;EA1DA,GAAA;AAAA;AAAA,UAGgB,YAAA;EA6DhB;;;EAzDA,GAAA;EAyD0B;AAa3B;;EAlEC,SAAA;AAAA;;;;;;;;;;;iBAae,MAAA,CAAO,MAAA,EAAQ,YAAA,GAAe,kBAAA;;;;;;;;;;;;;;iBAqB9B,MAAA,CAAO,MAAA,EAAQ,YAAA,GAAe,kBAAA;;;;UAW7B,cAAA;EAChB,gBAAA;EACA,IAAA;EACA,IAAA;EACA,QAAA;EACA,IAAA;EACA,QAAA;EACA,GAAA;EACA,IAAA;IAAS,GAAA;IAAc,GAAA;EAAA;AAAA;;;;;;;;;;;iBAaR,QAAA,CAAS,MAAA,EAAQ,cAAA,GAAiB,kBAAA"}

package/dist/{allowed-origins-CyYLEJkp.mjs → allowed-origins-BqC8cul8.mjs}

@@ -1,4 +1,4 @@
-import { t as getEnvAllowedOrigins } from "./public-url-egRHCy1m.mjs";
+import { t as getEnvAllowedOrigins } from "./public-url-D_zARuvZ.mjs";
 
 //#region src/auth/allowed-origins.ts
 /**
@@ -113,4 +113,4 @@ function isIPLiteralHostname(h) {
 
 //#endregion
 export { validateAllowedOrigins as n, validateOriginShape as r, getConfiguredAllowedOrigins as t };
-//# sourceMappingURL=allowed-origins-CyYLEJkp.mjs.map
+//# sourceMappingURL=allowed-origins-BqC8cul8.mjs.map

package/dist/{allowed-origins-CyYLEJkp.mjs.map → allowed-origins-BqC8cul8.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"allowed-origins-CyYLEJkp.mjs","names":[],"sources":["../src/auth/allowed-origins.ts"],"sourcesContent":["/**\n * Resolution and validation of multi-origin passkey verification.\n *\n * `allowedOrigins` lets one EmDash deployment accept passkey assertions from\n * several hostnames sharing the same `rpId` (e.g. apex + preview/staging\n * subdomains under one registrable parent). Origins come from two sources:\n *\n *   - `EmDashConfig.allowedOrigins` (declared in `astro.config.mjs`)\n *   - `EMDASH_ALLOWED_ORIGINS` (comma-separated runtime env var)\n *\n * Sources are merged (union of permissions, deduplicated). Each entry is\n * validated against `siteUrl` to fail loud on dead config the browser would\n * never honor.\n */\n\nimport { getEnvAllowedOrigins } from \"../api/public-url.js\";\nimport type { EmDashConfig } from \"../astro/integration/runtime.js\";\n\nexport type AllowedOriginSource = \"config.allowedOrigins\" | \"EMDASH_ALLOWED_ORIGINS\";\n\nexport interface TaggedOrigin {\n\t/** Raw entry as declared by the operator. */\n\torigin: string;\n\t/** Where the entry came from (used for source-attributed errors). */\n\tsource: AllowedOriginSource;\n}\n\n/**\n * Collect raw allowedOrigins from config and env, source-tagged.\n *\n * Returns raw values — the caller is expected to pass the result through\n * `validateAllowedOrigins()` before use in passkey verification.\n */\nexport function getConfiguredAllowedOrigins(config?: EmDashConfig): TaggedOrigin[] {\n\tconst tagged: TaggedOrigin[] = [];\n\tif (config?.allowedOrigins) {\n\t\tfor (const origin of config.allowedOrigins) {\n\t\t\tif (origin) tagged.push({ origin, source: \"config.allowedOrigins\" });\n\t\t}\n\t}\n\tfor (const origin of getEnvAllowedOrigins()) {\n\t\ttagged.push({ origin, source: \"EMDASH_ALLOWED_ORIGINS\" });\n\t}\n\treturn tagged;\n}\n\n/**\n * Validate per-entry shape rules (no `siteUrl` needed):\n *   - parses as `URL`\n *   - protocol is `http:` or `https:`\n *   - hostname has no trailing dot (`example.com.` rejected)\n *   - hostname has no empty labels (`foo..example.com` rejected)\n *\n * Returns the deduplicated, normalized origin form (`URL.origin`) of every\n * input, in input order. Throws on the first violation with a source-tagged\n * error message.\n */\nexport function validateOriginShape(tagged: TaggedOrigin[]): string[] {\n\tconst normalized: string[] = [];\n\tconst seen = new Set<string>();\n\tfor (const { origin, source } of tagged) {\n\t\tlet parsed: URL;\n\t\ttry {\n\t\t\tparsed = new URL(origin);\n\t\t} catch (e) {\n\t\t\tthrow configError(source, `invalid URL: \"${origin}\"`, e);\n\t\t}\n\t\tif (parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") {\n\t\t\tthrow configError(\n\t\t\t\tsource,\n\t\t\t\t`origin must be http or https: \"${origin}\" (got ${parsed.protocol})`,\n\t\t\t);\n\t\t}\n\t\tif (parsed.hostname.endsWith(\".\")) {\n\t\t\tthrow configError(\n\t\t\t\tsource,\n\t\t\t\t`hostname has a trailing dot: \"${origin}\". Remove the trailing dot — assertion origins from the browser do not include it.`,\n\t\t\t);\n\t\t}\n\t\tif (parsed.hostname.split(\".\").includes(\"\")) {\n\t\t\tthrow configError(source, `hostname has empty labels: \"${origin}\"`);\n\t\t}\n\t\tif (!seen.has(parsed.origin)) {\n\t\t\tseen.add(parsed.origin);\n\t\t\tnormalized.push(parsed.origin);\n\t\t}\n\t}\n\treturn normalized;\n}\n\n/**\n * Validate the effective merged allowedOrigins set against `siteUrl`.\n *\n * Performs `validateOriginShape()` plus the siteUrl-dependent rules:\n *   - Rule A: non-empty origins ⇒ `siteUrl` is set\n *   - `siteUrl` hostname is not an IP literal (multi-origin requires a domain)\n *   - `siteUrl` hostname has no trailing dot (cannot match assertion origins)\n *   - Rule B: each origin's hostname is `siteHost` exactly or a subdomain\n *\n * Throws on first violation. Returns the deduplicated normalized origins.\n *\n * Use this at the runtime chokepoint (where config + env are merged into the\n * effective set). At Astro integration init, prefer `validateOriginShape()`\n * for shape-only checks on `config.allowedOrigins`, since `siteUrl` may be\n * supplied at runtime via `EMDASH_SITE_URL`.\n */\nexport function validateAllowedOrigins(\n\tsiteUrl: string | undefined,\n\ttagged: TaggedOrigin[],\n): string[] {\n\tconst normalized = validateOriginShape(tagged);\n\tif (normalized.length === 0) return normalized;\n\n\tif (!siteUrl) {\n\t\tthrow new Error(\n\t\t\t`EmDash config error: allowedOrigins is set (${normalized.length} ${\n\t\t\t\tnormalized.length === 1 ? \"entry\" : \"entries\"\n\t\t\t}) but siteUrl is not. Without a canonical siteUrl, rpId is derived from the request hostname, defeating multi-origin passkeys. Set siteUrl in astro.config.mjs or via EMDASH_SITE_URL.`,\n\t\t);\n\t}\n\n\tlet siteHost: string;\n\ttry {\n\t\tsiteHost = new URL(siteUrl).hostname;\n\t} catch (e) {\n\t\tthrow new Error(`EmDash config error: siteUrl is not a valid URL: \"${siteUrl}\"`, {\n\t\t\tcause: e,\n\t\t});\n\t}\n\n\tif (siteHost.endsWith(\".\")) {\n\t\tthrow new Error(\n\t\t\t`EmDash config error: siteUrl \"${siteUrl}\" has a trailing-dot hostname, which cannot match assertion origins. Remove the trailing dot when using allowedOrigins.`,\n\t\t);\n\t}\n\tif (isIPLiteralHostname(siteHost)) {\n\t\tthrow new Error(\n\t\t\t`EmDash config error: siteUrl \"${siteUrl}\" uses an IP-literal hostname. Multi-origin passkeys require a domain-based siteUrl — IP addresses cannot have valid subdomains for WebAuthn rpId.`,\n\t\t);\n\t}\n\n\tfor (const { origin, source } of tagged) {\n\t\tconst h = new URL(origin).hostname;\n\t\tif (h !== siteHost && !h.endsWith(\".\" + siteHost)) {\n\t\t\tthrow configError(\n\t\t\t\tsource,\n\t\t\t\t`\"${origin}\" is not a subdomain of siteUrl \"${siteUrl}\". Allowed origins must be the same hostname as siteUrl or a subdomain of it.`,\n\t\t\t);\n\t\t}\n\t}\n\n\treturn normalized;\n}\n\nfunction configError(source: AllowedOriginSource, detail: string, cause?: unknown): Error {\n\tconst err = new Error(`EmDash config error in ${source}: ${detail}`);\n\tif (cause !== undefined) (err as Error & { cause?: unknown }).cause = cause;\n\treturn err;\n}\n\nconst IPV4_DOTTED_DECIMAL_RE = /^\\d+(\\.\\d+){3}$/;\n\nfunction isIPLiteralHostname(h: string): boolean {\n\t// IPv6 hostnames are bracketed by URL.hostname, e.g. \"[::1]\"\n\tif (h.startsWith(\"[\")) return true;\n\t// IPv4 dotted-decimal\n\treturn IPV4_DOTTED_DECIMAL_RE.test(h);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAiCA,SAAgB,4BAA4B,QAAuC;CAClF,MAAM,SAAyB,EAAE;AACjC,KAAI,QAAQ,gBACX;OAAK,MAAM,UAAU,OAAO,eAC3B,KAAI,OAAQ,QAAO,KAAK;GAAE;GAAQ,QAAQ;GAAyB,CAAC;;AAGtE,MAAK,MAAM,UAAU,sBAAsB,CAC1C,QAAO,KAAK;EAAE;EAAQ,QAAQ;EAA0B,CAAC;AAE1D,QAAO;;;;;;;;;;;;;AAcR,SAAgB,oBAAoB,QAAkC;CACrE,MAAM,aAAuB,EAAE;CAC/B,MAAM,uBAAO,IAAI,KAAa;AAC9B,MAAK,MAAM,EAAE,QAAQ,YAAY,QAAQ;EACxC,IAAI;AACJ,MAAI;AACH,YAAS,IAAI,IAAI,OAAO;WAChB,GAAG;AACX,SAAM,YAAY,QAAQ,iBAAiB,OAAO,IAAI,EAAE;;AAEzD,MAAI,OAAO,aAAa,WAAW,OAAO,aAAa,SACtD,OAAM,YACL,QACA,kCAAkC,OAAO,SAAS,OAAO,SAAS,GAClE;AAEF,MAAI,OAAO,SAAS,SAAS,IAAI,CAChC,OAAM,YACL,QACA,iCAAiC,OAAO,oFACxC;AAEF,MAAI,OAAO,SAAS,MAAM,IAAI,CAAC,SAAS,GAAG,CAC1C,OAAM,YAAY,QAAQ,+BAA+B,OAAO,GAAG;AAEpE,MAAI,CAAC,KAAK,IAAI,OAAO,OAAO,EAAE;AAC7B,QAAK,IAAI,OAAO,OAAO;AACvB,cAAW,KAAK,OAAO,OAAO;;;AAGhC,QAAO;;;;;;;;;;;;;;;;;;AAmBR,SAAgB,uBACf,SACA,QACW;CACX,MAAM,aAAa,oBAAoB,OAAO;AAC9C,KAAI,WAAW,WAAW,EAAG,QAAO;AAEpC,KAAI,CAAC,QACJ,OAAM,IAAI,MACT,+CAA+C,WAAW,OAAO,GAChE,WAAW,WAAW,IAAI,UAAU,UACpC,wLACD;CAGF,IAAI;AACJ,KAAI;AACH,aAAW,IAAI,IAAI,QAAQ,CAAC;UACpB,GAAG;AACX,QAAM,IAAI,MAAM,qDAAqD,QAAQ,IAAI,EAChF,OAAO,GACP,CAAC;;AAGH,KAAI,SAAS,SAAS,IAAI,CACzB,OAAM,IAAI,MACT,iCAAiC,QAAQ,yHACzC;AAEF,KAAI,oBAAoB,SAAS,CAChC,OAAM,IAAI,MACT,iCAAiC,QAAQ,oJACzC;AAGF,MAAK,MAAM,EAAE,QAAQ,YAAY,QAAQ;EACxC,MAAM,IAAI,IAAI,IAAI,OAAO,CAAC;AAC1B,MAAI,MAAM,YAAY,CAAC,EAAE,SAAS,MAAM,SAAS,CAChD,OAAM,YACL,QACA,IAAI,OAAO,mCAAmC,QAAQ,+EACtD;;AAIH,QAAO;;AAGR,SAAS,YAAY,QAA6B,QAAgB,OAAwB;CACzF,MAAM,sBAAM,IAAI,MAAM,0BAA0B,OAAO,IAAI,SAAS;AACpE,KAAI,UAAU,OAAW,CAAC,IAAoC,QAAQ;AACtE,QAAO;;AAGR,MAAM,yBAAyB;AAE/B,SAAS,oBAAoB,GAAoB;AAEhD,KAAI,EAAE,WAAW,IAAI,CAAE,QAAO;AAE9B,QAAO,uBAAuB,KAAK,EAAE"}
+{"version":3,"file":"allowed-origins-BqC8cul8.mjs","names":[],"sources":["../src/auth/allowed-origins.ts"],"sourcesContent":["/**\n * Resolution and validation of multi-origin passkey verification.\n *\n * `allowedOrigins` lets one EmDash deployment accept passkey assertions from\n * several hostnames sharing the same `rpId` (e.g. apex + preview/staging\n * subdomains under one registrable parent). Origins come from two sources:\n *\n *   - `EmDashConfig.allowedOrigins` (declared in `astro.config.mjs`)\n *   - `EMDASH_ALLOWED_ORIGINS` (comma-separated runtime env var)\n *\n * Sources are merged (union of permissions, deduplicated). Each entry is\n * validated against `siteUrl` to fail loud on dead config the browser would\n * never honor.\n */\n\nimport { getEnvAllowedOrigins } from \"../api/public-url.js\";\nimport type { EmDashConfig } from \"../astro/integration/runtime.js\";\n\nexport type AllowedOriginSource = \"config.allowedOrigins\" | \"EMDASH_ALLOWED_ORIGINS\";\n\nexport interface TaggedOrigin {\n\t/** Raw entry as declared by the operator. */\n\torigin: string;\n\t/** Where the entry came from (used for source-attributed errors). */\n\tsource: AllowedOriginSource;\n}\n\n/**\n * Collect raw allowedOrigins from config and env, source-tagged.\n *\n * Returns raw values — the caller is expected to pass the result through\n * `validateAllowedOrigins()` before use in passkey verification.\n */\nexport function getConfiguredAllowedOrigins(config?: EmDashConfig): TaggedOrigin[] {\n\tconst tagged: TaggedOrigin[] = [];\n\tif (config?.allowedOrigins) {\n\t\tfor (const origin of config.allowedOrigins) {\n\t\t\tif (origin) tagged.push({ origin, source: \"config.allowedOrigins\" });\n\t\t}\n\t}\n\tfor (const origin of getEnvAllowedOrigins()) {\n\t\ttagged.push({ origin, source: \"EMDASH_ALLOWED_ORIGINS\" });\n\t}\n\treturn tagged;\n}\n\n/**\n * Validate per-entry shape rules (no `siteUrl` needed):\n *   - parses as `URL`\n *   - protocol is `http:` or `https:`\n *   - hostname has no trailing dot (`example.com.` rejected)\n *   - hostname has no empty labels (`foo..example.com` rejected)\n *\n * Returns the deduplicated, normalized origin form (`URL.origin`) of every\n * input, in input order. Throws on the first violation with a source-tagged\n * error message.\n */\nexport function validateOriginShape(tagged: TaggedOrigin[]): string[] {\n\tconst normalized: string[] = [];\n\tconst seen = new Set<string>();\n\tfor (const { origin, source } of tagged) {\n\t\tlet parsed: URL;\n\t\ttry {\n\t\t\tparsed = new URL(origin);\n\t\t} catch (e) {\n\t\t\tthrow configError(source, `invalid URL: \"${origin}\"`, e);\n\t\t}\n\t\tif (parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") {\n\t\t\tthrow configError(\n\t\t\t\tsource,\n\t\t\t\t`origin must be http or https: \"${origin}\" (got ${parsed.protocol})`,\n\t\t\t);\n\t\t}\n\t\tif (parsed.hostname.endsWith(\".\")) {\n\t\t\tthrow configError(\n\t\t\t\tsource,\n\t\t\t\t`hostname has a trailing dot: \"${origin}\". Remove the trailing dot — assertion origins from the browser do not include it.`,\n\t\t\t);\n\t\t}\n\t\tif (parsed.hostname.split(\".\").includes(\"\")) {\n\t\t\tthrow configError(source, `hostname has empty labels: \"${origin}\"`);\n\t\t}\n\t\tif (!seen.has(parsed.origin)) {\n\t\t\tseen.add(parsed.origin);\n\t\t\tnormalized.push(parsed.origin);\n\t\t}\n\t}\n\treturn normalized;\n}\n\n/**\n * Validate the effective merged allowedOrigins set against `siteUrl`.\n *\n * Performs `validateOriginShape()` plus the siteUrl-dependent rules:\n *   - Rule A: non-empty origins ⇒ `siteUrl` is set\n *   - `siteUrl` hostname is not an IP literal (multi-origin requires a domain)\n *   - `siteUrl` hostname has no trailing dot (cannot match assertion origins)\n *   - Rule B: each origin's hostname is `siteHost` exactly or a subdomain\n *\n * Throws on first violation. Returns the deduplicated normalized origins.\n *\n * Use this at the runtime chokepoint (where config + env are merged into the\n * effective set). At Astro integration init, prefer `validateOriginShape()`\n * for shape-only checks on `config.allowedOrigins`, since `siteUrl` may be\n * supplied at runtime via `EMDASH_SITE_URL`.\n */\nexport function validateAllowedOrigins(\n\tsiteUrl: string | undefined,\n\ttagged: TaggedOrigin[],\n): string[] {\n\tconst normalized = validateOriginShape(tagged);\n\tif (normalized.length === 0) return normalized;\n\n\tif (!siteUrl) {\n\t\tthrow new Error(\n\t\t\t`EmDash config error: allowedOrigins is set (${normalized.length} ${\n\t\t\t\tnormalized.length === 1 ? \"entry\" : \"entries\"\n\t\t\t}) but siteUrl is not. Without a canonical siteUrl, rpId is derived from the request hostname, defeating multi-origin passkeys. Set siteUrl in astro.config.mjs or via EMDASH_SITE_URL.`,\n\t\t);\n\t}\n\n\tlet siteHost: string;\n\ttry {\n\t\tsiteHost = new URL(siteUrl).hostname;\n\t} catch (e) {\n\t\tthrow new Error(`EmDash config error: siteUrl is not a valid URL: \"${siteUrl}\"`, {\n\t\t\tcause: e,\n\t\t});\n\t}\n\n\tif (siteHost.endsWith(\".\")) {\n\t\tthrow new Error(\n\t\t\t`EmDash config error: siteUrl \"${siteUrl}\" has a trailing-dot hostname, which cannot match assertion origins. Remove the trailing dot when using allowedOrigins.`,\n\t\t);\n\t}\n\tif (isIPLiteralHostname(siteHost)) {\n\t\tthrow new Error(\n\t\t\t`EmDash config error: siteUrl \"${siteUrl}\" uses an IP-literal hostname. Multi-origin passkeys require a domain-based siteUrl — IP addresses cannot have valid subdomains for WebAuthn rpId.`,\n\t\t);\n\t}\n\n\tfor (const { origin, source } of tagged) {\n\t\tconst h = new URL(origin).hostname;\n\t\tif (h !== siteHost && !h.endsWith(\".\" + siteHost)) {\n\t\t\tthrow configError(\n\t\t\t\tsource,\n\t\t\t\t`\"${origin}\" is not a subdomain of siteUrl \"${siteUrl}\". Allowed origins must be the same hostname as siteUrl or a subdomain of it.`,\n\t\t\t);\n\t\t}\n\t}\n\n\treturn normalized;\n}\n\nfunction configError(source: AllowedOriginSource, detail: string, cause?: unknown): Error {\n\tconst err = new Error(`EmDash config error in ${source}: ${detail}`);\n\tif (cause !== undefined) (err as Error & { cause?: unknown }).cause = cause;\n\treturn err;\n}\n\nconst IPV4_DOTTED_DECIMAL_RE = /^\\d+(\\.\\d+){3}$/;\n\nfunction isIPLiteralHostname(h: string): boolean {\n\t// IPv6 hostnames are bracketed by URL.hostname, e.g. \"[::1]\"\n\tif (h.startsWith(\"[\")) return true;\n\t// IPv4 dotted-decimal\n\treturn IPV4_DOTTED_DECIMAL_RE.test(h);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAiCA,SAAgB,4BAA4B,QAAuC;CAClF,MAAM,SAAyB,EAAE;AACjC,KAAI,QAAQ,gBACX;OAAK,MAAM,UAAU,OAAO,eAC3B,KAAI,OAAQ,QAAO,KAAK;GAAE;GAAQ,QAAQ;GAAyB,CAAC;;AAGtE,MAAK,MAAM,UAAU,sBAAsB,CAC1C,QAAO,KAAK;EAAE;EAAQ,QAAQ;EAA0B,CAAC;AAE1D,QAAO;;;;;;;;;;;;;AAcR,SAAgB,oBAAoB,QAAkC;CACrE,MAAM,aAAuB,EAAE;CAC/B,MAAM,uBAAO,IAAI,KAAa;AAC9B,MAAK,MAAM,EAAE,QAAQ,YAAY,QAAQ;EACxC,IAAI;AACJ,MAAI;AACH,YAAS,IAAI,IAAI,OAAO;WAChB,GAAG;AACX,SAAM,YAAY,QAAQ,iBAAiB,OAAO,IAAI,EAAE;;AAEzD,MAAI,OAAO,aAAa,WAAW,OAAO,aAAa,SACtD,OAAM,YACL,QACA,kCAAkC,OAAO,SAAS,OAAO,SAAS,GAClE;AAEF,MAAI,OAAO,SAAS,SAAS,IAAI,CAChC,OAAM,YACL,QACA,iCAAiC,OAAO,oFACxC;AAEF,MAAI,OAAO,SAAS,MAAM,IAAI,CAAC,SAAS,GAAG,CAC1C,OAAM,YAAY,QAAQ,+BAA+B,OAAO,GAAG;AAEpE,MAAI,CAAC,KAAK,IAAI,OAAO,OAAO,EAAE;AAC7B,QAAK,IAAI,OAAO,OAAO;AACvB,cAAW,KAAK,OAAO,OAAO;;;AAGhC,QAAO;;;;;;;;;;;;;;;;;;AAmBR,SAAgB,uBACf,SACA,QACW;CACX,MAAM,aAAa,oBAAoB,OAAO;AAC9C,KAAI,WAAW,WAAW,EAAG,QAAO;AAEpC,KAAI,CAAC,QACJ,OAAM,IAAI,MACT,+CAA+C,WAAW,OAAO,GAChE,WAAW,WAAW,IAAI,UAAU,UACpC,wLACD;CAGF,IAAI;AACJ,KAAI;AACH,aAAW,IAAI,IAAI,QAAQ,CAAC;UACpB,GAAG;AACX,QAAM,IAAI,MAAM,qDAAqD,QAAQ,IAAI,EAChF,OAAO,GACP,CAAC;;AAGH,KAAI,SAAS,SAAS,IAAI,CACzB,OAAM,IAAI,MACT,iCAAiC,QAAQ,yHACzC;AAEF,KAAI,oBAAoB,SAAS,CAChC,OAAM,IAAI,MACT,iCAAiC,QAAQ,oJACzC;AAGF,MAAK,MAAM,EAAE,QAAQ,YAAY,QAAQ;EACxC,MAAM,IAAI,IAAI,IAAI,OAAO,CAAC;AAC1B,MAAI,MAAM,YAAY,CAAC,EAAE,SAAS,MAAM,SAAS,CAChD,OAAM,YACL,QACA,IAAI,OAAO,mCAAmC,QAAQ,+EACtD;;AAIH,QAAO;;AAGR,SAAS,YAAY,QAA6B,QAAgB,OAAwB;CACzF,MAAM,sBAAM,IAAI,MAAM,0BAA0B,OAAO,IAAI,SAAS;AACpE,KAAI,UAAU,OAAW,CAAC,IAAoC,QAAQ;AACtE,QAAO;;AAGR,MAAM,yBAAyB;AAE/B,SAAS,oBAAoB,GAAoB;AAEhD,KAAI,EAAE,WAAW,IAAI,CAAE,QAAO;AAE9B,QAAO,uBAAuB,KAAK,EAAE"}

package/dist/api/route-utils.d.mts

@@ -1,6 +1,6 @@
-import { a as parseQuery, c as handleError, i as parseBody, n as ParseResult, o as apiError, r as isParseError, s as apiSuccess, t as OptionsRepository } from "../options-D4MnavW_.mjs";
-import { t as Database } from "../types-OT_Es5mp.mjs";
-import { Ct as StorageCollectionConfig, St as StorageCollection } from "../types-DMwSpvcw.mjs";
+import { a as parseQuery, c as handleError, i as parseBody, n as ParseResult, o as apiError, r as isParseError, s as apiSuccess, t as OptionsRepository } from "../options-9kLgkE8m.mjs";
+import { t as Database } from "../types-Del0VMij.mjs";
+import { Ct as StorageCollectionConfig, St as StorageCollection } from "../types-DO7whVYU.mjs";
 import { Kysely } from "kysely";
 
 //#region src/api/setup-complete.d.ts

package/dist/api/route-utils.mjs

@@ -5,18 +5,19 @@ import "../types-BXSUSAjt.mjs";
 import "../media-JOf3pNkw.mjs";
 import "../user-C0um7wrg.mjs";
 import { t as OptionsRepository } from "../options-BPCVnesz.mjs";
-import { r as createStorageAccess } from "../context-GG52SPgh.mjs";
-import "../request-cache-D32LpnmI.mjs";
-import "../seo-B5e6y9Wk.mjs";
-import "../loader-CpZKpFz0.mjs";
-import "../settings-B1p-gPUK.mjs";
-import "../ssrf-BsVGIE0Z.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../error-RwM4dD35.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../parse-CrGndy1A.mjs";
-import "../ssrf-BvgVcfNQ.mjs";
-import "../cron-BJ2ClIlj.mjs";
-import { n as getPublicOrigin } from "../public-url-egRHCy1m.mjs";
-import { t as finalizeSetup } from "../setup-complete-Yuv78yua.mjs";
+import { r as createStorageAccess } from "../context-Cm4pt1Ws.mjs";
+import "../init-lock-DlBHjf9-.mjs";
+import "../request-cache-UwmBAiUK.mjs";
+import "../seo-DpNgGQjF.mjs";
+import "../loader-BqWjcH3h.mjs";
+import "../settings-BjBsmVAo.mjs";
+import "../ssrf-XO05Voq6.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../error-CNn_w7jf.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../parse-DzSrk1t8.mjs";
+import "../ssrf-CRZGzjdL.mjs";
+import "../cron-DdEVrQ2Y.mjs";
+import { n as getPublicOrigin } from "../public-url-D_zARuvZ.mjs";
+import { t as finalizeSetup } from "../setup-complete-CMMr-oZU.mjs";
 
 //#region src/api/auth-storage.ts
 /**

package/dist/api/route-utils.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"route-utils.mjs","names":[],"sources":["../../src/api/auth-storage.ts"],"sourcesContent":["/**\n * Auth provider storage helper.\n *\n * Gives auth provider routes access to plugin-style storage collections\n * namespaced under `auth:<providerId>`. Reuses the existing `_plugin_storage`\n * table and `PluginStorageRepository` infrastructure.\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport type { Database } from \"../database/types.js\";\nimport { createStorageAccess } from \"../plugins/context.js\";\nimport type { StorageCollection, StorageCollectionConfig } from \"../plugins/types.js\";\n\n/**\n * Get storage collections for an auth provider.\n *\n * Returns a record of `StorageCollection` instances, one per declared\n * collection in the provider's `storage` config. Data is stored in the\n * shared `_plugin_storage` table under the namespace `auth:<providerId>`.\n *\n * @example\n * ```ts\n * const storage = getAuthProviderStorage(emdash.db, \"atproto\", {\n *   states: { indexes: [] },\n *   sessions: { indexes: [] },\n * });\n * const session = await storage.sessions.get(sessionId);\n * ```\n */\nexport function getAuthProviderStorage(\n\tdb: Kysely<Database>,\n\tproviderId: string,\n\tstorageConfig: Record<string, StorageCollectionConfig>,\n): Record<string, StorageCollection> {\n\treturn createStorageAccess(db, `auth:${providerId}`, storageConfig);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BA,SAAgB,uBACf,IACA,YACA,eACoC;AACpC,QAAO,oBAAoB,IAAI,QAAQ,cAAc,cAAc"}
+{"version":3,"file":"route-utils.mjs","names":[],"sources":["../../src/api/auth-storage.ts"],"sourcesContent":["/**\n * Auth provider storage helper.\n *\n * Gives auth provider routes access to plugin-style storage collections\n * namespaced under `auth:<providerId>`. Reuses the existing `_plugin_storage`\n * table and `PluginStorageRepository` infrastructure.\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport type { Database } from \"../database/types.js\";\nimport { createStorageAccess } from \"../plugins/context.js\";\nimport type { StorageCollection, StorageCollectionConfig } from \"../plugins/types.js\";\n\n/**\n * Get storage collections for an auth provider.\n *\n * Returns a record of `StorageCollection` instances, one per declared\n * collection in the provider's `storage` config. Data is stored in the\n * shared `_plugin_storage` table under the namespace `auth:<providerId>`.\n *\n * @example\n * ```ts\n * const storage = getAuthProviderStorage(emdash.db, \"atproto\", {\n *   states: { indexes: [] },\n *   sessions: { indexes: [] },\n * });\n * const session = await storage.sessions.get(sessionId);\n * ```\n */\nexport function getAuthProviderStorage(\n\tdb: Kysely<Database>,\n\tproviderId: string,\n\tstorageConfig: Record<string, StorageCollectionConfig>,\n): Record<string, StorageCollection> {\n\treturn createStorageAccess(db, `auth:${providerId}`, storageConfig);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BA,SAAgB,uBACf,IACA,YACA,eACoC;AACpC,QAAO,oBAAoB,IAAI,QAAQ,cAAc,cAAc"}

package/dist/api/schemas/index.d.mts

@@ -1,2 +1,2 @@
-import { $ as wpRewriteUrlsBody, $n as trashedContentListResponseSchema, $t as commentSchema, A as reorderWidgetsBody, An as mediaResponseSchema, At as menuSchema, B as userSchema, Bn as contentListResponseSchema, Bt as magicLinkSendBody, C as notFoundSummarySchema, Cn as mediaConfirmBody, Ct as termWithCountSchema, D as updateRedirectBody, Dn as mediaListQuery, Dt as menuItemSchema, E as redirectsListQuery, En as mediaItemSchema, Et as createMenuItemBody, F as widgetSchema, Fn as contentAuthorsResponseSchema, Ft as updateMenuItemBody, G as setupAdminVerifyBody, Gn as contentSeoInput, Gt as passkeyVerifyBody, H as usersListQuery, Hn as contentPublishBody, Ht as passkeyRegisterOptionsBody, I as allowedDomainCreateBody, In as contentCompareResponseSchema, It as authMeActionBody, J as importProbeBody, Jn as contentTranslationSchema, Jt as adminCommentListResponseSchema, K as setupAtprotoAdminBody, Kn as contentSeoSchema, Kt as signupCompleteBody, L as allowedDomainUpdateBody, Ln as contentCreateBody, Lt as inviteCompleteBody, M as widgetAreaSchema, Mn as mediaUploadUrlBody, Mt as menuWithItemsSchema, N as widgetAreaWithWidgetsAndCountSchema, Nn as mediaUploadUrlResponseSchema, Nt as reorderMenuItemsBody, O as createWidgetAreaBody, On as mediaListResponseSchema, Ot as menuItemTypeEnum, P as widgetAreaWithWidgetsSchema, Pn as contentAuthorSchema, Pt as updateMenuBody, Q as wpPrepareBody, Qn as trashedContentItemSchema, Qt as commentListQuery, R as userDetailSchema, Rn as contentItemSchema, Rt as inviteCreateBody, S as notFoundSummaryResponseSchema, Sn as formatFileSize, St as termTranslationsSchema, T as redirectSchema, Tn as mediaExistingResponseSchema, Tt as createMenuBody, U as atprotoLoginBody, Un as contentResponseSchema, Ut as passkeyRegisterVerifyBody, V as userUpdateBody, Vn as contentPreviewUrlBody, Vt as passkeyOptionsBody, W as setupAdminBody, Wn as contentScheduleBody, Wt as passkeyRenameBody, X as wpPluginAnalyzeBody, Xn as contentTrashQuery, Xt as commentBulkResponseSchema, Y as wpMediaImportBody, Yn as contentTranslationsResponseSchema, Yt as commentBulkBody, Z as wpPluginExecuteBody, Zn as contentUpdateBody, Zt as commentCountsResponseSchema, _ as notFoundEntrySchema, _n as orphanedTableSchema, _t as taxonomyListResponseSchema, a as bylineFieldUpdateBody, an as collectionListResponseSchema, ar as httpUrl, at as searchSuggestQuery, b as notFoundPruneBody, bn as updateFieldBody, bt as termResponseSchema, c as bylineCreditSchema, cn as collectionWithFieldsResponseSchema, cr as offsetPaginationQuery, ct as createSectionBody, d as bylineTranslationCreateBody, dn as fieldListResponseSchema, dr as successEnvelope, dt as sectionsListQuery, en as commentStatusBody, er as VALID_ROLE_LEVELS, et as searchEnableBody, f as bylineTranslationsResponseSchema, fn as fieldReorderBody, ft as updateSectionBody, g as createRedirectBody, gn as orphanedTableListResponseSchema, gt as taxonomyDefTranslationsSchema, h as contentBylineInputSchema, hn as orphanRegisterBody, ht as taxonomyDefSchema, i as bylineFieldReorderBody, in as collectionGetQuery, ir as deleteResponseSchema, it as searchResultSchema, j as updateWidgetBody, jn as mediaUpdateBody, jt as menuTranslationsSchema, k as createWidgetBody, kn as mediaProviderListQuery, kt as menuListItemSchema, l as bylineListResponseSchema, ln as createCollectionBody, lr as roleLevel, lt as sectionListResponseSchema, m as bylinesListQuery, mn as fieldSchema, mt as createTermBody, n as bylineFieldDefinitionSchema, nn as publicCommentListResponseSchema, nr as countResponseSchema, nt as searchRebuildBody, o as bylineFieldUsageResponseSchema, on as collectionResponseSchema, or as localeCode, ot as settingsUpdateBody, p as bylineUpdateBody, pn as fieldResponseSchema, pt as createTaxonomyDefBody, q as setupBody, qn as contentTermsBody, qt as signupRequestBody, r as bylineFieldListResponseSchema, rn as publicCommentSchema, rr as cursorPaginationQuery, rt as searchResponseSchema, s as bylineCreateBody, sn as collectionSchema, sr as localeFilterQuery, st as siteSettingsSchema, t as bylineFieldCreateBody, tn as createCommentBody, tr as apiErrorSchema, tt as searchQuery, u as bylineSummarySchema, un as createFieldBody, ur as slugPattern, ut as sectionSchema, v as notFoundListQuery, vn as schemaExportQuery, vt as termGetResponseSchema, w as redirectListResponseSchema, wn as mediaConfirmResponseSchema, wt as updateTermBody, x as notFoundSummaryQuery, xn as DEFAULT_MAX_UPLOAD_SIZE, xt as termSchema, y as notFoundListResponseSchema, yn as updateCollectionBody, yt as termListResponseSchema, z as userListResponseSchema, zn as contentListQuery, zt as inviteRegisterOptionsBody } from "../../byline-fields-DYXKDuNX.mjs";
+import { $ as wpRewriteUrlsBody, $n as trashedContentListResponseSchema, $t as commentSchema, A as reorderWidgetsBody, An as mediaResponseSchema, At as menuSchema, B as userSchema, Bn as contentListResponseSchema, Bt as magicLinkSendBody, C as notFoundSummarySchema, Cn as mediaConfirmBody, Ct as termWithCountSchema, D as updateRedirectBody, Dn as mediaListQuery, Dt as menuItemSchema, E as redirectsListQuery, En as mediaItemSchema, Et as createMenuItemBody, F as widgetSchema, Fn as contentAuthorsResponseSchema, Ft as updateMenuItemBody, G as setupAdminVerifyBody, Gn as contentSeoInput, Gt as passkeyVerifyBody, H as usersListQuery, Hn as contentPublishBody, Ht as passkeyRegisterOptionsBody, I as allowedDomainCreateBody, In as contentCompareResponseSchema, It as authMeActionBody, J as importProbeBody, Jn as contentTranslationSchema, Jt as adminCommentListResponseSchema, K as setupAtprotoAdminBody, Kn as contentSeoSchema, Kt as signupCompleteBody, L as allowedDomainUpdateBody, Ln as contentCreateBody, Lt as inviteCompleteBody, M as widgetAreaSchema, Mn as mediaUploadUrlBody, Mt as menuWithItemsSchema, N as widgetAreaWithWidgetsAndCountSchema, Nn as mediaUploadUrlResponseSchema, Nt as reorderMenuItemsBody, O as createWidgetAreaBody, On as mediaListResponseSchema, Ot as menuItemTypeEnum, P as widgetAreaWithWidgetsSchema, Pn as contentAuthorSchema, Pt as updateMenuBody, Q as wpPrepareBody, Qn as trashedContentItemSchema, Qt as commentListQuery, R as userDetailSchema, Rn as contentItemSchema, Rt as inviteCreateBody, S as notFoundSummaryResponseSchema, Sn as formatFileSize, St as termTranslationsSchema, T as redirectSchema, Tn as mediaExistingResponseSchema, Tt as createMenuBody, U as atprotoLoginBody, Un as contentResponseSchema, Ut as passkeyRegisterVerifyBody, V as userUpdateBody, Vn as contentPreviewUrlBody, Vt as passkeyOptionsBody, W as setupAdminBody, Wn as contentScheduleBody, Wt as passkeyRenameBody, X as wpPluginAnalyzeBody, Xn as contentTrashQuery, Xt as commentBulkResponseSchema, Y as wpMediaImportBody, Yn as contentTranslationsResponseSchema, Yt as commentBulkBody, Z as wpPluginExecuteBody, Zn as contentUpdateBody, Zt as commentCountsResponseSchema, _ as notFoundEntrySchema, _n as orphanedTableSchema, _t as taxonomyListResponseSchema, a as bylineFieldUpdateBody, an as collectionListResponseSchema, ar as httpUrl, at as searchSuggestQuery, b as notFoundPruneBody, bn as updateFieldBody, bt as termResponseSchema, c as bylineCreditSchema, cn as collectionWithFieldsResponseSchema, cr as offsetPaginationQuery, ct as createSectionBody, d as bylineTranslationCreateBody, dn as fieldListResponseSchema, dr as successEnvelope, dt as sectionsListQuery, en as commentStatusBody, er as VALID_ROLE_LEVELS, et as searchEnableBody, f as bylineTranslationsResponseSchema, fn as fieldReorderBody, ft as updateSectionBody, g as createRedirectBody, gn as orphanedTableListResponseSchema, gt as taxonomyDefTranslationsSchema, h as contentBylineInputSchema, hn as orphanRegisterBody, ht as taxonomyDefSchema, i as bylineFieldReorderBody, in as collectionGetQuery, ir as deleteResponseSchema, it as searchResultSchema, j as updateWidgetBody, jn as mediaUpdateBody, jt as menuTranslationsSchema, k as createWidgetBody, kn as mediaProviderListQuery, kt as menuListItemSchema, l as bylineListResponseSchema, ln as createCollectionBody, lr as roleLevel, lt as sectionListResponseSchema, m as bylinesListQuery, mn as fieldSchema, mt as createTermBody, n as bylineFieldDefinitionSchema, nn as publicCommentListResponseSchema, nr as countResponseSchema, nt as searchRebuildBody, o as bylineFieldUsageResponseSchema, on as collectionResponseSchema, or as localeCode, ot as settingsUpdateBody, p as bylineUpdateBody, pn as fieldResponseSchema, pt as createTaxonomyDefBody, q as setupBody, qn as contentTermsBody, qt as signupRequestBody, r as bylineFieldListResponseSchema, rn as publicCommentSchema, rr as cursorPaginationQuery, rt as searchResponseSchema, s as bylineCreateBody, sn as collectionSchema, sr as localeFilterQuery, st as siteSettingsSchema, t as bylineFieldCreateBody, tn as createCommentBody, tr as apiErrorSchema, tt as searchQuery, u as bylineSummarySchema, un as createFieldBody, ur as slugPattern, ut as sectionSchema, v as notFoundListQuery, vn as schemaExportQuery, vt as termGetResponseSchema, w as redirectListResponseSchema, wn as mediaConfirmResponseSchema, wt as updateTermBody, x as notFoundSummaryQuery, xn as DEFAULT_MAX_UPLOAD_SIZE, xt as termSchema, y as notFoundListResponseSchema, yn as updateCollectionBody, yt as termListResponseSchema, z as userListResponseSchema, zn as contentListQuery, zt as inviteRegisterOptionsBody } from "../../byline-fields-CQJRIQkn.mjs";
 export { DEFAULT_MAX_UPLOAD_SIZE, VALID_ROLE_LEVELS, adminCommentListResponseSchema, allowedDomainCreateBody, allowedDomainUpdateBody, apiErrorSchema, atprotoLoginBody, authMeActionBody, bylineCreateBody, bylineCreditSchema, bylineFieldCreateBody, bylineFieldDefinitionSchema, bylineFieldListResponseSchema, bylineFieldReorderBody, bylineFieldUpdateBody, bylineFieldUsageResponseSchema, bylineListResponseSchema, bylineSummarySchema, bylineTranslationCreateBody, bylineTranslationsResponseSchema, bylineUpdateBody, bylinesListQuery, collectionGetQuery, collectionListResponseSchema, collectionResponseSchema, collectionSchema, collectionWithFieldsResponseSchema, commentBulkBody, commentBulkResponseSchema, commentCountsResponseSchema, commentListQuery, commentSchema, commentStatusBody, contentAuthorSchema, contentAuthorsResponseSchema, contentBylineInputSchema, contentCompareResponseSchema, contentCreateBody, contentItemSchema, contentListQuery, contentListResponseSchema, contentPreviewUrlBody, contentPublishBody, contentResponseSchema, contentScheduleBody, contentSeoInput, contentSeoSchema, contentTermsBody, contentTranslationSchema, contentTranslationsResponseSchema, contentTrashQuery, contentUpdateBody, countResponseSchema, createCollectionBody, createCommentBody, createFieldBody, createMenuBody, createMenuItemBody, createRedirectBody, createSectionBody, createTaxonomyDefBody, createTermBody, createWidgetAreaBody, createWidgetBody, cursorPaginationQuery, deleteResponseSchema, fieldListResponseSchema, fieldReorderBody, fieldResponseSchema, fieldSchema, formatFileSize, httpUrl, importProbeBody, inviteCompleteBody, inviteCreateBody, inviteRegisterOptionsBody, localeCode, localeFilterQuery, magicLinkSendBody, mediaConfirmBody, mediaConfirmResponseSchema, mediaExistingResponseSchema, mediaItemSchema, mediaListQuery, mediaListResponseSchema, mediaProviderListQuery, mediaResponseSchema, mediaUpdateBody, mediaUploadUrlBody, mediaUploadUrlResponseSchema, menuItemSchema, menuItemTypeEnum, menuListItemSchema, menuSchema, menuTranslationsSchema, menuWithItemsSchema, notFoundEntrySchema, notFoundListQuery, notFoundListResponseSchema, notFoundPruneBody, notFoundSummaryQuery, notFoundSummaryResponseSchema, notFoundSummarySchema, offsetPaginationQuery, orphanRegisterBody, orphanedTableListResponseSchema, orphanedTableSchema, passkeyOptionsBody, passkeyRegisterOptionsBody, passkeyRegisterVerifyBody, passkeyRenameBody, passkeyVerifyBody, publicCommentListResponseSchema, publicCommentSchema, redirectListResponseSchema, redirectSchema, redirectsListQuery, reorderMenuItemsBody, reorderWidgetsBody, roleLevel, schemaExportQuery, searchEnableBody, searchQuery, searchRebuildBody, searchResponseSchema, searchResultSchema, searchSuggestQuery, sectionListResponseSchema, sectionSchema, sectionsListQuery, settingsUpdateBody, setupAdminBody, setupAdminVerifyBody, setupAtprotoAdminBody, setupBody, signupCompleteBody, signupRequestBody, siteSettingsSchema, slugPattern, successEnvelope, taxonomyDefSchema, taxonomyDefTranslationsSchema, taxonomyListResponseSchema, termGetResponseSchema, termListResponseSchema, termResponseSchema, termSchema, termTranslationsSchema, termWithCountSchema, trashedContentItemSchema, trashedContentListResponseSchema, updateCollectionBody, updateFieldBody, updateMenuBody, updateMenuItemBody, updateRedirectBody, updateSectionBody, updateTermBody, updateWidgetBody, userDetailSchema, userListResponseSchema, userSchema, userUpdateBody, usersListQuery, widgetAreaSchema, widgetAreaWithWidgetsAndCountSchema, widgetAreaWithWidgetsSchema, widgetSchema, wpMediaImportBody, wpPluginAnalyzeBody, wpPluginExecuteBody, wpPrepareBody, wpRewriteUrlsBody };

package/dist/api/schemas/index.mjs

@@ -1,4 +1,5 @@
-import { $ as createMenuBody, $t as contentAuthorsResponseSchema, A as searchRebuildBody, An as cursorPaginationQuery, At as fieldReorderBody, B as updateSectionBody, Bt as formatFileSize, C as userDetailSchema, Cn as bylineTranslationsResponseSchema, Ct as collectionListResponseSchema, D as usersListQuery, Dn as VALID_ROLE_LEVELS, Dt as createCollectionBody, E as userUpdateBody, En as contentBylineInputSchema, Et as collectionWithFieldsResponseSchema, F as siteSettingsSchema, Fn as offsetPaginationQuery, Ft as orphanedTableSchema, G as taxonomyListResponseSchema, Gt as mediaListQuery, H as createTermBody, Ht as mediaConfirmResponseSchema, I as createSectionBody, In as roleLevel, It as schemaExportQuery, J as termResponseSchema, Jt as mediaResponseSchema, K as termGetResponseSchema, Kt as mediaListResponseSchema, L as sectionListResponseSchema, Ln as slugPattern, Lt as updateCollectionBody, M as searchResultSchema, Mn as httpUrl, Mt as fieldSchema, N as searchSuggestQuery, Nn as localeCode, Nt as orphanRegisterBody, O as searchEnableBody, On as apiErrorSchema, Ot as createFieldBody, P as settingsUpdateBody, Pn as localeFilterQuery, Pt as orphanedTableListResponseSchema, Q as updateTermBody, Qt as contentAuthorSchema, R as sectionSchema, Rn as successEnvelope, Rt as updateFieldBody, S as allowedDomainUpdateBody, Sn as bylineTranslationCreateBody, St as collectionGetQuery, T as userSchema, Tn as bylinesListQuery, Tt as collectionSchema, U as taxonomyDefSchema, Ut as mediaExistingResponseSchema, V as createTaxonomyDefBody, Vt as mediaConfirmBody, W as taxonomyDefTranslationsSchema, Wt as mediaItemSchema, X as termTranslationsSchema, Xt as mediaUploadUrlBody, Y as termSchema, Yt as mediaUpdateBody, Z as termWithCountSchema, Zt as mediaUploadUrlResponseSchema, _ as widgetAreaSchema, _n as trashedContentListResponseSchema, _t as commentSchema, a as notFoundPruneBody, an as contentPreviewUrlBody, at as menuTranslationsSchema, b as widgetSchema, bn as bylineListResponseSchema, bt as publicCommentListResponseSchema, c as notFoundSummarySchema, cn as contentScheduleBody, ct as updateMenuBody, d as redirectsListQuery, dn as contentTermsBody, en as contentCompareResponseSchema, et as createMenuItemBody, f as updateRedirectBody, fn as contentTranslationSchema, ft as adminCommentListResponseSchema, g as updateWidgetBody, gn as trashedContentItemSchema, gt as commentListQuery, h as reorderWidgetsBody, hn as contentUpdateBody, ht as commentCountsResponseSchema, i as notFoundListResponseSchema, in as contentListResponseSchema, it as menuSchema, j as searchResponseSchema, jn as deleteResponseSchema, jt as fieldResponseSchema, k as searchQuery, kn as countResponseSchema, kt as fieldListResponseSchema, l as redirectListResponseSchema, ln as contentSeoInput, lt as updateMenuItemBody, m as createWidgetBody, mn as contentTrashQuery, mt as commentBulkResponseSchema, n as notFoundEntrySchema, nn as contentItemSchema, nt as menuItemTypeEnum, o as notFoundSummaryQuery, on as contentPublishBody, ot as menuWithItemsSchema, p as createWidgetAreaBody, pn as contentTranslationsResponseSchema, pt as commentBulkBody, q as termListResponseSchema, qt as mediaProviderListQuery, r as notFoundListQuery, rn as contentListQuery, rt as menuListItemSchema, s as notFoundSummaryResponseSchema, sn as contentResponseSchema, st as reorderMenuItemsBody, t as createRedirectBody, tn as contentCreateBody, tt as menuItemSchema, u as redirectSchema, un as contentSeoSchema, v as widgetAreaWithWidgetsAndCountSchema, vn as bylineCreateBody, vt as commentStatusBody, w as userListResponseSchema, wn as bylineUpdateBody, wt as collectionResponseSchema, x as allowedDomainCreateBody, xn as bylineSummarySchema, xt as publicCommentSchema, y as widgetAreaWithWidgetsSchema, yn as bylineCreditSchema, yt as createCommentBody, z as sectionsListQuery, zt as DEFAULT_MAX_UPLOAD_SIZE } from "../../redirects-DEygMrRO.mjs";
-import { C as passkeyOptionsBody, D as passkeyVerifyBody, E as passkeyRenameBody, O as signupCompleteBody, S as magicLinkSendBody, T as passkeyRegisterVerifyBody, _ as wpRewriteUrlsBody, a as bylineFieldUpdateBody, b as inviteCreateBody, c as setupAdminBody, d as setupBody, f as importProbeBody, g as wpPrepareBody, h as wpPluginExecuteBody, i as bylineFieldReorderBody, k as signupRequestBody, l as setupAdminVerifyBody, m as wpPluginAnalyzeBody, n as bylineFieldDefinitionSchema, o as bylineFieldUsageResponseSchema, p as wpMediaImportBody, r as bylineFieldListResponseSchema, s as atprotoLoginBody, t as bylineFieldCreateBody, u as setupAtprotoAdminBody, v as authMeActionBody, w as passkeyRegisterOptionsBody, x as inviteRegisterOptionsBody, y as inviteCompleteBody } from "../../byline-fields-51kg6Vuv.mjs";
+import { $ as createMenuBody, $t as contentAuthorsResponseSchema, A as searchRebuildBody, An as cursorPaginationQuery, At as fieldReorderBody, B as updateSectionBody, Bt as formatFileSize, C as userDetailSchema, Cn as bylineTranslationsResponseSchema, Ct as collectionListResponseSchema, D as usersListQuery, Dn as VALID_ROLE_LEVELS, Dt as createCollectionBody, E as userUpdateBody, En as contentBylineInputSchema, Et as collectionWithFieldsResponseSchema, F as siteSettingsSchema, Fn as offsetPaginationQuery, Ft as orphanedTableSchema, G as taxonomyListResponseSchema, Gt as mediaListQuery, H as createTermBody, Ht as mediaConfirmResponseSchema, I as createSectionBody, In as roleLevel, It as schemaExportQuery, J as termResponseSchema, Jt as mediaResponseSchema, K as termGetResponseSchema, Kt as mediaListResponseSchema, L as sectionListResponseSchema, Ln as slugPattern, Lt as updateCollectionBody, M as searchResultSchema, Mn as httpUrl, Mt as fieldSchema, N as searchSuggestQuery, Nn as localeCode, Nt as orphanRegisterBody, O as searchEnableBody, On as apiErrorSchema, Ot as createFieldBody, P as settingsUpdateBody, Pn as localeFilterQuery, Pt as orphanedTableListResponseSchema, Q as updateTermBody, Qt as contentAuthorSchema, R as sectionSchema, Rn as successEnvelope, Rt as updateFieldBody, S as allowedDomainUpdateBody, Sn as bylineTranslationCreateBody, St as collectionGetQuery, T as userSchema, Tn as bylinesListQuery, Tt as collectionSchema, U as taxonomyDefSchema, Ut as mediaExistingResponseSchema, V as createTaxonomyDefBody, Vt as mediaConfirmBody, W as taxonomyDefTranslationsSchema, Wt as mediaItemSchema, X as termTranslationsSchema, Xt as mediaUploadUrlBody, Y as termSchema, Yt as mediaUpdateBody, Z as termWithCountSchema, Zt as mediaUploadUrlResponseSchema, _ as widgetAreaSchema, _n as trashedContentListResponseSchema, _t as commentSchema, a as notFoundPruneBody, an as contentPreviewUrlBody, at as menuTranslationsSchema, b as widgetSchema, bn as bylineListResponseSchema, bt as publicCommentListResponseSchema, c as notFoundSummarySchema, cn as contentScheduleBody, ct as updateMenuBody, d as redirectsListQuery, dn as contentTermsBody, en as contentCompareResponseSchema, et as createMenuItemBody, f as updateRedirectBody, fn as contentTranslationSchema, ft as adminCommentListResponseSchema, g as updateWidgetBody, gn as trashedContentItemSchema, gt as commentListQuery, h as reorderWidgetsBody, hn as contentUpdateBody, ht as commentCountsResponseSchema, i as notFoundListResponseSchema, in as contentListResponseSchema, it as menuSchema, j as searchResponseSchema, jn as deleteResponseSchema, jt as fieldResponseSchema, k as searchQuery, kn as countResponseSchema, kt as fieldListResponseSchema, l as redirectListResponseSchema, ln as contentSeoInput, lt as updateMenuItemBody, m as createWidgetBody, mn as contentTrashQuery, mt as commentBulkResponseSchema, n as notFoundEntrySchema, nn as contentItemSchema, nt as menuItemTypeEnum, o as notFoundSummaryQuery, on as contentPublishBody, ot as menuWithItemsSchema, p as createWidgetAreaBody, pn as contentTranslationsResponseSchema, pt as commentBulkBody, q as termListResponseSchema, qt as mediaProviderListQuery, r as notFoundListQuery, rn as contentListQuery, rt as menuListItemSchema, s as notFoundSummaryResponseSchema, sn as contentResponseSchema, st as reorderMenuItemsBody, t as createRedirectBody, tn as contentCreateBody, tt as menuItemSchema, u as redirectSchema, un as contentSeoSchema, v as widgetAreaWithWidgetsAndCountSchema, vn as bylineCreateBody, vt as commentStatusBody, w as userListResponseSchema, wn as bylineUpdateBody, wt as collectionResponseSchema, x as allowedDomainCreateBody, xn as bylineSummarySchema, xt as publicCommentSchema, y as widgetAreaWithWidgetsSchema, yn as bylineCreditSchema, yt as createCommentBody, z as sectionsListQuery, zt as DEFAULT_MAX_UPLOAD_SIZE } from "../../redirects-6Zg2SoYo.mjs";
+import { C as passkeyOptionsBody, D as passkeyVerifyBody, E as passkeyRenameBody, O as signupCompleteBody, S as magicLinkSendBody, T as passkeyRegisterVerifyBody, _ as wpRewriteUrlsBody, a as bylineFieldUpdateBody, b as inviteCreateBody, c as setupAdminBody, d as setupBody, f as importProbeBody, g as wpPrepareBody, h as wpPluginExecuteBody, i as bylineFieldReorderBody, k as signupRequestBody, l as setupAdminVerifyBody, m as wpPluginAnalyzeBody, n as bylineFieldDefinitionSchema, o as bylineFieldUsageResponseSchema, p as wpMediaImportBody, r as bylineFieldListResponseSchema, s as atprotoLoginBody, t as bylineFieldCreateBody, u as setupAtprotoAdminBody, v as authMeActionBody, w as passkeyRegisterOptionsBody, x as inviteRegisterOptionsBody, y as inviteCompleteBody } from "../../byline-fields-B0NO1yUB.mjs";
+import "../../status-2gZklYuj.mjs";
 
 export { DEFAULT_MAX_UPLOAD_SIZE, VALID_ROLE_LEVELS, adminCommentListResponseSchema, allowedDomainCreateBody, allowedDomainUpdateBody, apiErrorSchema, atprotoLoginBody, authMeActionBody, bylineCreateBody, bylineCreditSchema, bylineFieldCreateBody, bylineFieldDefinitionSchema, bylineFieldListResponseSchema, bylineFieldReorderBody, bylineFieldUpdateBody, bylineFieldUsageResponseSchema, bylineListResponseSchema, bylineSummarySchema, bylineTranslationCreateBody, bylineTranslationsResponseSchema, bylineUpdateBody, bylinesListQuery, collectionGetQuery, collectionListResponseSchema, collectionResponseSchema, collectionSchema, collectionWithFieldsResponseSchema, commentBulkBody, commentBulkResponseSchema, commentCountsResponseSchema, commentListQuery, commentSchema, commentStatusBody, contentAuthorSchema, contentAuthorsResponseSchema, contentBylineInputSchema, contentCompareResponseSchema, contentCreateBody, contentItemSchema, contentListQuery, contentListResponseSchema, contentPreviewUrlBody, contentPublishBody, contentResponseSchema, contentScheduleBody, contentSeoInput, contentSeoSchema, contentTermsBody, contentTranslationSchema, contentTranslationsResponseSchema, contentTrashQuery, contentUpdateBody, countResponseSchema, createCollectionBody, createCommentBody, createFieldBody, createMenuBody, createMenuItemBody, createRedirectBody, createSectionBody, createTaxonomyDefBody, createTermBody, createWidgetAreaBody, createWidgetBody, cursorPaginationQuery, deleteResponseSchema, fieldListResponseSchema, fieldReorderBody, fieldResponseSchema, fieldSchema, formatFileSize, httpUrl, importProbeBody, inviteCompleteBody, inviteCreateBody, inviteRegisterOptionsBody, localeCode, localeFilterQuery, magicLinkSendBody, mediaConfirmBody, mediaConfirmResponseSchema, mediaExistingResponseSchema, mediaItemSchema, mediaListQuery, mediaListResponseSchema, mediaProviderListQuery, mediaResponseSchema, mediaUpdateBody, mediaUploadUrlBody, mediaUploadUrlResponseSchema, menuItemSchema, menuItemTypeEnum, menuListItemSchema, menuSchema, menuTranslationsSchema, menuWithItemsSchema, notFoundEntrySchema, notFoundListQuery, notFoundListResponseSchema, notFoundPruneBody, notFoundSummaryQuery, notFoundSummaryResponseSchema, notFoundSummarySchema, offsetPaginationQuery, orphanRegisterBody, orphanedTableListResponseSchema, orphanedTableSchema, passkeyOptionsBody, passkeyRegisterOptionsBody, passkeyRegisterVerifyBody, passkeyRenameBody, passkeyVerifyBody, publicCommentListResponseSchema, publicCommentSchema, redirectListResponseSchema, redirectSchema, redirectsListQuery, reorderMenuItemsBody, reorderWidgetsBody, roleLevel, schemaExportQuery, searchEnableBody, searchQuery, searchRebuildBody, searchResponseSchema, searchResultSchema, searchSuggestQuery, sectionListResponseSchema, sectionSchema, sectionsListQuery, settingsUpdateBody, setupAdminBody, setupAdminVerifyBody, setupAtprotoAdminBody, setupBody, signupCompleteBody, signupRequestBody, siteSettingsSchema, slugPattern, successEnvelope, taxonomyDefSchema, taxonomyDefTranslationsSchema, taxonomyListResponseSchema, termGetResponseSchema, termListResponseSchema, termResponseSchema, termSchema, termTranslationsSchema, termWithCountSchema, trashedContentItemSchema, trashedContentListResponseSchema, updateCollectionBody, updateFieldBody, updateMenuBody, updateMenuItemBody, updateRedirectBody, updateSectionBody, updateTermBody, updateWidgetBody, userDetailSchema, userListResponseSchema, userSchema, userUpdateBody, usersListQuery, widgetAreaSchema, widgetAreaWithWidgetsAndCountSchema, widgetAreaWithWidgetsSchema, widgetSchema, wpMediaImportBody, wpPluginAnalyzeBody, wpPluginExecuteBody, wpPrepareBody, wpRewriteUrlsBody };

package/dist/{api-BZ6bhjYs.mjs → api-DxjIV2o8.mjs}

@@ -9,18 +9,18 @@ import { t as UserRepository } from "./user-C0um7wrg.mjs";
 import { t as CommentRepository } from "./comment-sqQxNpN3.mjs";
 import { t as withTransaction } from "./transaction-x2tJQ-A1.mjs";
 import { t as RedirectRepository } from "./redirect-CRWIt8Zj.mjs";
-import { r as requestCached } from "./request-cache-D32LpnmI.mjs";
-import { t as BylineRepository } from "./byline-DUx48sJp.mjs";
-import { t as SeoRepository } from "./seo-B5e6y9Wk.mjs";
-import { r as invalidateRedirectCache } from "./cache-B_HzASVT.mjs";
-import { n as isMissingTableError } from "./db-errors-CtzxKBxe.mjs";
-import { r as parseAllowedMimeTypes, t as matchesMimeAllowlist } from "./mime-CCEzze7W.mjs";
-import { n as hashString } from "./hash-9w3pd3-m.mjs";
-import { n as SchemaRegistry, t as SchemaError } from "./registry-brYh-rAT.mjs";
-import { i as pluginManifestSchema, r as normalizeManifestRoute } from "./manifest-schema-Cj-YrzrF.mjs";
-import { r as normalizeCapabilities } from "./types-Cj2S6FuC.mjs";
-import { t as EmDashStorageError } from "./types-DpFmlNyB.mjs";
-import { n as resolveAndValidateExternalUrl, t as SsrfError } from "./ssrf-BsVGIE0Z.mjs";
+import { r as requestCached } from "./request-cache-UwmBAiUK.mjs";
+import { t as BylineRepository } from "./byline-V_Qp1Ziw.mjs";
+import { t as SeoRepository } from "./seo-DpNgGQjF.mjs";
+import { r as invalidateRedirectCache } from "./cache-DTTHWD8n.mjs";
+import { n as isMissingTableError } from "./db-errors-BluWkwGI.mjs";
+import { r as parseAllowedMimeTypes, t as matchesMimeAllowlist } from "./mime-YbtlEtvS.mjs";
+import { n as hashString } from "./hash-DlvIFn0b.mjs";
+import { n as SchemaRegistry, t as SchemaError } from "./registry-diMzD1Wf.mjs";
+import { a as reconcileManifestAccess, i as pluginManifestSchema, r as normalizeManifestRoute } from "./manifest-schema-DFPeqMAn.mjs";
+import { a as normalizeCapabilities, r as declaredAccessToCapabilities } from "./types-BoRm8-pp.mjs";
+import { t as EmDashStorageError } from "./types-DejCHqWT.mjs";
+import { n as resolveAndValidateExternalUrl, t as SsrfError } from "./ssrf-XO05Voq6.mjs";
 import { sql } from "kysely";
 import { createGzipDecoder, unpackTar } from "modern-tar";
 import { ClientResponseError, ClientValidationError } from "@atcute/client";
@@ -2514,7 +2514,7 @@ async function extractBundle(tarballBytes) {
 		const parsed = JSON.parse(manifestJson);
 		const result = pluginManifestSchema.safeParse(parsed);
 		if (!result.success) throw new MarketplaceError("Invalid bundle: manifest.json failed validation", void 0, "INVALID_BUNDLE");
-		manifest = result.data;
+		manifest = reconcileManifestAccess(result.data);
 	} catch (err) {
 		if (err instanceof MarketplaceError) throw err;
 		throw new MarketplaceError("Invalid bundle: malformed manifest.json", void 0, "INVALID_BUNDLE");
@@ -2679,7 +2679,7 @@ async function loadBundleFromR2(storage, pluginId, version, source = "marketplac
 		const parsed = JSON.parse(manifestText);
 		const result = pluginManifestSchema.safeParse(parsed);
 		if (!result.success) return null;
-		const manifest = result.data;
+		const manifest = reconcileManifestAccess(result.data);
 		let adminCode;
 		try {
 			adminCode = await streamToText((await storage.download(`${prefix}/admin.js`)).body);
@@ -3514,6 +3514,21 @@ async function makeRegistryPluginId(publisherDid, slug) {
 *     each labeller's DID. Aggregator label envelope tampering is
 *     mitigated by the artifact checksum but not detected.
 */
+const RELEASE_EXTENSION_NSID = "com.emdashcms.experimental.package.releaseExtension";
+/**
+* Whether two `declaredAccess` blocks grant exactly the same enforced access --
+* the same capabilities AND the same host allow-list. Both are lowered through
+* the canonical converter so that constraint content (`allowedHosts`), not just
+* the capability set, is part of the comparison. The capability-set consent
+* gate is blind to host scope; this is what keeps a bundle from being installed
+* with a wider (or simply different) host allow-list than its published record
+* advertised and the user consented to.
+*/
+function enforcedAccessEqual(a, b) {
+	const aa = declaredAccessToCapabilities(a);
+	const bb = declaredAccessToCapabilities(b);
+	return JSON.stringify(aa.capabilities.toSorted()) === JSON.stringify(bb.capabilities.toSorted()) && JSON.stringify(aa.allowedHosts.toSorted()) === JSON.stringify(bb.allowedHosts.toSorted());
+}
 /** Matches a bare 64-character lowercase/uppercase hex SHA-256 digest. */
 const SHA256_HEX_PATTERN = /^[a-f0-9]{64}$/i;
 /** Compute the SHA-256 of `bytes` as a lowercase hex string. */
@@ -4074,6 +4089,14 @@ async function handleRegistryInstall(db, storage, sandboxRunner, registryConfigI
 			...bundle.manifest,
 			id: pluginId
 		};
+		const recordExt = (release?.extensions)?.[RELEASE_EXTENSION_NSID];
+		if (!enforcedAccessEqual(recordExt?.declaredAccess ?? {}, bundle.manifest.declaredAccess ?? {})) return {
+			success: false,
+			error: {
+				code: "DECLARED_ACCESS_DRIFT",
+				message: "The plugin bundle declares different permissions than its published record. Installation refused."
+			}
+		};
 		const actualCapabilities = canonicalCapabilitiesForDriftCheck(bundle.manifest.capabilities);
 		if (actualCapabilities.length > 0) {
 			if (input.acknowledgedDeclaredAccess === void 0) return {
@@ -4379,6 +4402,14 @@ async function handleRegistryUpdate(db, storage, sandboxRunner, registryConfigIn
 			...bundle.manifest,
 			id: pluginId
 		};
+		const recordExt = (signedRelease?.extensions)?.[RELEASE_EXTENSION_NSID];
+		if (!enforcedAccessEqual(recordExt?.declaredAccess ?? {}, bundle.manifest.declaredAccess ?? {})) return {
+			success: false,
+			error: {
+				code: "DECLARED_ACCESS_DRIFT",
+				message: "The plugin bundle declares different permissions than its published record. Update refused."
+			}
+		};
 		const oldBundle = await loadBundleFromR2(storage, pluginId, oldVersion, "registry");
 		const capabilityChanges = diffCapabilities(oldBundle?.manifest.capabilities ?? [], bundle.manifest.capabilities);
 		if (capabilityChanges.added.length > 0 && !opts?.confirmCapabilityChanges) return {
@@ -4536,4 +4567,4 @@ async function handleRegistryUpdateCheck(db, registryConfigInput) {
 
 //#endregion
 export { handleContentGet as $, handleSchemaFieldCreate as A, handleMediaUpdate as B, handleOrphanedTableList as C, handleSchemaCollectionGet as D, handleSchemaCollectionDelete as E, handleSchemaFieldUpdate as F, handleContentAuthors as G, handleRevisionList as H, handleMediaCreate as I, handleContentCountTrashed as J, handleContentCompare as K, handleMediaDelete as L, handleSchemaFieldGet as M, handleSchemaFieldList as N, handleSchemaCollectionList as O, handleSchemaFieldReorder as P, handleContentDuplicate as Q, handleMediaGet as R, PluginStateRepository as S, handleSchemaCollectionCreate as T, handleRevisionRestore as U, handleRevisionGet as V, generateManifest as W, handleContentDelete as X, handleContentCreate as Y, handleContentDiscardDraft as Z, loadBundleFromR2 as _, handleRegistryUpdateCheck as a, handleContentRestore as at, handlePluginGet as b, validateAggregatorUrl as c, handleContentUnpublish as ct, handleMarketplaceSearch as d, validateRev as dt, handleContentGetIncludingTrashed as et, handleMarketplaceUninstall as f, handleThemeSearch as g, handleThemeGetDetail as h, handleRegistryUpdate as i, handleContentPublish as it, handleSchemaFieldDelete as j, handleSchemaCollectionUpdate as k, handleMarketplaceGetPlugin as l, handleContentUnschedule as lt, handleMarketplaceUpdateCheck as m, handleRegistryInstall as n, handleContentListTrashed as nt, coerceRegistryConfig as o, handleContentSchedule as ot, handleMarketplaceUpdate as p, handleContentCountScheduled as q, handleRegistryUninstall as r, handleContentPermanentDelete as rt, normalizeRegistryConfig as s, handleContentTranslations as st, assertSafeArtifactUrl as t, handleContentList as tt, handleMarketplaceInstall as u, handleContentUpdate as ut, handlePluginDisable as v, handleOrphanedTableRegister as w, handlePluginList as x, handlePluginEnable as y, handleMediaList as z };
-//# sourceMappingURL=api-BZ6bhjYs.mjs.map
+//# sourceMappingURL=api-DxjIV2o8.mjs.map