emdash 0.26.0 → 0.28.0

package/dist/{adapters-DAAjOID4.d.mts → adapters-hUy8vOB-.d.mts}

@@ -118,4 +118,4 @@ interface PostgresConfig {
 declare function postgres(config: PostgresConfig): DatabaseDescriptor;
 //#endregion
 export { SqliteConfig as a, sqlite as c, PostgresConfig as i, DatabaseDialectType as n, libsql as o, LibsqlConfig as r, postgres as s, DatabaseDescriptor as t };
-//# sourceMappingURL=adapters-DAAjOID4.d.mts.map
+//# sourceMappingURL=adapters-hUy8vOB-.d.mts.map

package/dist/{adapters-DAAjOID4.d.mts.map → adapters-hUy8vOB-.d.mts.map}

@@ -1 +1 @@
-{"version":3,"file":"adapters-DAAjOID4.d.mts","names":[],"sources":["../src/db/adapters.ts"],"mappings":";;AA0BA;;;;;AAKA;;;;;;;;;;;AAqBA;;;;;AAOA;;;KAjCY,mBAAA;;AAsDZ;;UAjDiB,kBAAA;EAChB,UAAA;EACA,MAAA;EACA,IAAA,EAAM,mBAAA;EA8CuC;;;AAqB9C;;;;;;;;;AAWA;;EA/DC,oBAAA;AAAA;AAAA,UAGgB,YAAA;EA8DhB;;;EA1DA,GAAA;AAAA;AAAA,UAGgB,YAAA;EA6DhB;;;EAzDA,GAAA;EAyD0B;AAa3B;;EAlEC,SAAA;AAAA;;;;;;;;;;;iBAae,MAAA,CAAO,MAAA,EAAQ,YAAA,GAAe,kBAAA;;;;;;;;;;;;;;iBAqB9B,MAAA,CAAO,MAAA,EAAQ,YAAA,GAAe,kBAAA;;;;UAW7B,cAAA;EAChB,gBAAA;EACA,IAAA;EACA,IAAA;EACA,QAAA;EACA,IAAA;EACA,QAAA;EACA,GAAA;EACA,IAAA;IAAS,GAAA;IAAc,GAAA;EAAA;AAAA;;;;;;;;;;;iBAaR,QAAA,CAAS,MAAA,EAAQ,cAAA,GAAiB,kBAAA"}
+{"version":3,"file":"adapters-hUy8vOB-.d.mts","names":[],"sources":["../src/db/adapters.ts"],"mappings":";;AA0BA;;;;;AAKA;;;;;;;;;;;AAqBA;;;;;AAOA;;;KAjCY,mBAAA;;AAsDZ;;UAjDiB,kBAAA;EAChB,UAAA;EACA,MAAA;EACA,IAAA,EAAM,mBAAA;EA8CuC;;;AAqB9C;;;;;;;;;AAWA;;EA/DC,oBAAA;AAAA;AAAA,UAGgB,YAAA;EA8DhB;;;EA1DA,GAAA;AAAA;AAAA,UAGgB,YAAA;EA6DhB;;;EAzDA,GAAA;EAyD0B;AAa3B;;EAlEC,SAAA;AAAA;;;;;;;;;;;iBAae,MAAA,CAAO,MAAA,EAAQ,YAAA,GAAe,kBAAA;;;;;;;;;;;;;;iBAqB9B,MAAA,CAAO,MAAA,EAAQ,YAAA,GAAe,kBAAA;;;;UAW7B,cAAA;EAChB,gBAAA;EACA,IAAA;EACA,IAAA;EACA,QAAA;EACA,IAAA;EACA,QAAA;EACA,GAAA;EACA,IAAA;IAAS,GAAA;IAAc,GAAA;EAAA;AAAA;;;;;;;;;;;iBAaR,QAAA,CAAS,MAAA,EAAQ,cAAA,GAAiB,kBAAA"}

package/dist/{allowed-origins-D5FxMUo8.mjs → allowed-origins-CRsJ6BPM.mjs}

@@ -1,4 +1,4 @@
-import { t as getEnvAllowedOrigins } from "./public-url-CTVqgMmg.mjs";
+import { t as getEnvAllowedOrigins } from "./public-url-Danv47cS.mjs";
 
 //#region src/auth/allowed-origins.ts
 /**
@@ -113,4 +113,4 @@ function isIPLiteralHostname(h) {
 
 //#endregion
 export { validateAllowedOrigins as n, validateOriginShape as r, getConfiguredAllowedOrigins as t };
-//# sourceMappingURL=allowed-origins-D5FxMUo8.mjs.map
+//# sourceMappingURL=allowed-origins-CRsJ6BPM.mjs.map

package/dist/{allowed-origins-D5FxMUo8.mjs.map → allowed-origins-CRsJ6BPM.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"allowed-origins-D5FxMUo8.mjs","names":[],"sources":["../src/auth/allowed-origins.ts"],"sourcesContent":["/**\n * Resolution and validation of multi-origin passkey verification.\n *\n * `allowedOrigins` lets one EmDash deployment accept passkey assertions from\n * several hostnames sharing the same `rpId` (e.g. apex + preview/staging\n * subdomains under one registrable parent). Origins come from two sources:\n *\n *   - `EmDashConfig.allowedOrigins` (declared in `astro.config.mjs`)\n *   - `EMDASH_ALLOWED_ORIGINS` (comma-separated runtime env var)\n *\n * Sources are merged (union of permissions, deduplicated). Each entry is\n * validated against `siteUrl` to fail loud on dead config the browser would\n * never honor.\n */\n\nimport { getEnvAllowedOrigins } from \"../api/public-url.js\";\nimport type { EmDashConfig } from \"../astro/integration/runtime.js\";\n\nexport type AllowedOriginSource = \"config.allowedOrigins\" | \"EMDASH_ALLOWED_ORIGINS\";\n\nexport interface TaggedOrigin {\n\t/** Raw entry as declared by the operator. */\n\torigin: string;\n\t/** Where the entry came from (used for source-attributed errors). */\n\tsource: AllowedOriginSource;\n}\n\n/**\n * Collect raw allowedOrigins from config and env, source-tagged.\n *\n * Returns raw values — the caller is expected to pass the result through\n * `validateAllowedOrigins()` before use in passkey verification.\n */\nexport function getConfiguredAllowedOrigins(config?: EmDashConfig): TaggedOrigin[] {\n\tconst tagged: TaggedOrigin[] = [];\n\tif (config?.allowedOrigins) {\n\t\tfor (const origin of config.allowedOrigins) {\n\t\t\tif (origin) tagged.push({ origin, source: \"config.allowedOrigins\" });\n\t\t}\n\t}\n\tfor (const origin of getEnvAllowedOrigins()) {\n\t\ttagged.push({ origin, source: \"EMDASH_ALLOWED_ORIGINS\" });\n\t}\n\treturn tagged;\n}\n\n/**\n * Validate per-entry shape rules (no `siteUrl` needed):\n *   - parses as `URL`\n *   - protocol is `http:` or `https:`\n *   - hostname has no trailing dot (`example.com.` rejected)\n *   - hostname has no empty labels (`foo..example.com` rejected)\n *\n * Returns the deduplicated, normalized origin form (`URL.origin`) of every\n * input, in input order. Throws on the first violation with a source-tagged\n * error message.\n */\nexport function validateOriginShape(tagged: TaggedOrigin[]): string[] {\n\tconst normalized: string[] = [];\n\tconst seen = new Set<string>();\n\tfor (const { origin, source } of tagged) {\n\t\tlet parsed: URL;\n\t\ttry {\n\t\t\tparsed = new URL(origin);\n\t\t} catch (e) {\n\t\t\tthrow configError(source, `invalid URL: \"${origin}\"`, e);\n\t\t}\n\t\tif (parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") {\n\t\t\tthrow configError(\n\t\t\t\tsource,\n\t\t\t\t`origin must be http or https: \"${origin}\" (got ${parsed.protocol})`,\n\t\t\t);\n\t\t}\n\t\tif (parsed.hostname.endsWith(\".\")) {\n\t\t\tthrow configError(\n\t\t\t\tsource,\n\t\t\t\t`hostname has a trailing dot: \"${origin}\". Remove the trailing dot — assertion origins from the browser do not include it.`,\n\t\t\t);\n\t\t}\n\t\tif (parsed.hostname.split(\".\").includes(\"\")) {\n\t\t\tthrow configError(source, `hostname has empty labels: \"${origin}\"`);\n\t\t}\n\t\tif (!seen.has(parsed.origin)) {\n\t\t\tseen.add(parsed.origin);\n\t\t\tnormalized.push(parsed.origin);\n\t\t}\n\t}\n\treturn normalized;\n}\n\n/**\n * Validate the effective merged allowedOrigins set against `siteUrl`.\n *\n * Performs `validateOriginShape()` plus the siteUrl-dependent rules:\n *   - Rule A: non-empty origins ⇒ `siteUrl` is set\n *   - `siteUrl` hostname is not an IP literal (multi-origin requires a domain)\n *   - `siteUrl` hostname has no trailing dot (cannot match assertion origins)\n *   - Rule B: each origin's hostname is `siteHost` exactly or a subdomain\n *\n * Throws on first violation. Returns the deduplicated normalized origins.\n *\n * Use this at the runtime chokepoint (where config + env are merged into the\n * effective set). At Astro integration init, prefer `validateOriginShape()`\n * for shape-only checks on `config.allowedOrigins`, since `siteUrl` may be\n * supplied at runtime via `EMDASH_SITE_URL`.\n */\nexport function validateAllowedOrigins(\n\tsiteUrl: string | undefined,\n\ttagged: TaggedOrigin[],\n): string[] {\n\tconst normalized = validateOriginShape(tagged);\n\tif (normalized.length === 0) return normalized;\n\n\tif (!siteUrl) {\n\t\tthrow new Error(\n\t\t\t`EmDash config error: allowedOrigins is set (${normalized.length} ${\n\t\t\t\tnormalized.length === 1 ? \"entry\" : \"entries\"\n\t\t\t}) but siteUrl is not. Without a canonical siteUrl, rpId is derived from the request hostname, defeating multi-origin passkeys. Set siteUrl in astro.config.mjs or via EMDASH_SITE_URL.`,\n\t\t);\n\t}\n\n\tlet siteHost: string;\n\ttry {\n\t\tsiteHost = new URL(siteUrl).hostname;\n\t} catch (e) {\n\t\tthrow new Error(`EmDash config error: siteUrl is not a valid URL: \"${siteUrl}\"`, {\n\t\t\tcause: e,\n\t\t});\n\t}\n\n\tif (siteHost.endsWith(\".\")) {\n\t\tthrow new Error(\n\t\t\t`EmDash config error: siteUrl \"${siteUrl}\" has a trailing-dot hostname, which cannot match assertion origins. Remove the trailing dot when using allowedOrigins.`,\n\t\t);\n\t}\n\tif (isIPLiteralHostname(siteHost)) {\n\t\tthrow new Error(\n\t\t\t`EmDash config error: siteUrl \"${siteUrl}\" uses an IP-literal hostname. Multi-origin passkeys require a domain-based siteUrl — IP addresses cannot have valid subdomains for WebAuthn rpId.`,\n\t\t);\n\t}\n\n\tfor (const { origin, source } of tagged) {\n\t\tconst h = new URL(origin).hostname;\n\t\tif (h !== siteHost && !h.endsWith(\".\" + siteHost)) {\n\t\t\tthrow configError(\n\t\t\t\tsource,\n\t\t\t\t`\"${origin}\" is not a subdomain of siteUrl \"${siteUrl}\". Allowed origins must be the same hostname as siteUrl or a subdomain of it.`,\n\t\t\t);\n\t\t}\n\t}\n\n\treturn normalized;\n}\n\nfunction configError(source: AllowedOriginSource, detail: string, cause?: unknown): Error {\n\tconst err = new Error(`EmDash config error in ${source}: ${detail}`);\n\tif (cause !== undefined) (err as Error & { cause?: unknown }).cause = cause;\n\treturn err;\n}\n\nconst IPV4_DOTTED_DECIMAL_RE = /^\\d+(\\.\\d+){3}$/;\n\nfunction isIPLiteralHostname(h: string): boolean {\n\t// IPv6 hostnames are bracketed by URL.hostname, e.g. \"[::1]\"\n\tif (h.startsWith(\"[\")) return true;\n\t// IPv4 dotted-decimal\n\treturn IPV4_DOTTED_DECIMAL_RE.test(h);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAiCA,SAAgB,4BAA4B,QAAuC;CAClF,MAAM,SAAyB,EAAE;AACjC,KAAI,QAAQ,gBACX;OAAK,MAAM,UAAU,OAAO,eAC3B,KAAI,OAAQ,QAAO,KAAK;GAAE;GAAQ,QAAQ;GAAyB,CAAC;;AAGtE,MAAK,MAAM,UAAU,sBAAsB,CAC1C,QAAO,KAAK;EAAE;EAAQ,QAAQ;EAA0B,CAAC;AAE1D,QAAO;;;;;;;;;;;;;AAcR,SAAgB,oBAAoB,QAAkC;CACrE,MAAM,aAAuB,EAAE;CAC/B,MAAM,uBAAO,IAAI,KAAa;AAC9B,MAAK,MAAM,EAAE,QAAQ,YAAY,QAAQ;EACxC,IAAI;AACJ,MAAI;AACH,YAAS,IAAI,IAAI,OAAO;WAChB,GAAG;AACX,SAAM,YAAY,QAAQ,iBAAiB,OAAO,IAAI,EAAE;;AAEzD,MAAI,OAAO,aAAa,WAAW,OAAO,aAAa,SACtD,OAAM,YACL,QACA,kCAAkC,OAAO,SAAS,OAAO,SAAS,GAClE;AAEF,MAAI,OAAO,SAAS,SAAS,IAAI,CAChC,OAAM,YACL,QACA,iCAAiC,OAAO,oFACxC;AAEF,MAAI,OAAO,SAAS,MAAM,IAAI,CAAC,SAAS,GAAG,CAC1C,OAAM,YAAY,QAAQ,+BAA+B,OAAO,GAAG;AAEpE,MAAI,CAAC,KAAK,IAAI,OAAO,OAAO,EAAE;AAC7B,QAAK,IAAI,OAAO,OAAO;AACvB,cAAW,KAAK,OAAO,OAAO;;;AAGhC,QAAO;;;;;;;;;;;;;;;;;;AAmBR,SAAgB,uBACf,SACA,QACW;CACX,MAAM,aAAa,oBAAoB,OAAO;AAC9C,KAAI,WAAW,WAAW,EAAG,QAAO;AAEpC,KAAI,CAAC,QACJ,OAAM,IAAI,MACT,+CAA+C,WAAW,OAAO,GAChE,WAAW,WAAW,IAAI,UAAU,UACpC,wLACD;CAGF,IAAI;AACJ,KAAI;AACH,aAAW,IAAI,IAAI,QAAQ,CAAC;UACpB,GAAG;AACX,QAAM,IAAI,MAAM,qDAAqD,QAAQ,IAAI,EAChF,OAAO,GACP,CAAC;;AAGH,KAAI,SAAS,SAAS,IAAI,CACzB,OAAM,IAAI,MACT,iCAAiC,QAAQ,yHACzC;AAEF,KAAI,oBAAoB,SAAS,CAChC,OAAM,IAAI,MACT,iCAAiC,QAAQ,oJACzC;AAGF,MAAK,MAAM,EAAE,QAAQ,YAAY,QAAQ;EACxC,MAAM,IAAI,IAAI,IAAI,OAAO,CAAC;AAC1B,MAAI,MAAM,YAAY,CAAC,EAAE,SAAS,MAAM,SAAS,CAChD,OAAM,YACL,QACA,IAAI,OAAO,mCAAmC,QAAQ,+EACtD;;AAIH,QAAO;;AAGR,SAAS,YAAY,QAA6B,QAAgB,OAAwB;CACzF,MAAM,sBAAM,IAAI,MAAM,0BAA0B,OAAO,IAAI,SAAS;AACpE,KAAI,UAAU,OAAW,CAAC,IAAoC,QAAQ;AACtE,QAAO;;AAGR,MAAM,yBAAyB;AAE/B,SAAS,oBAAoB,GAAoB;AAEhD,KAAI,EAAE,WAAW,IAAI,CAAE,QAAO;AAE9B,QAAO,uBAAuB,KAAK,EAAE"}
+{"version":3,"file":"allowed-origins-CRsJ6BPM.mjs","names":[],"sources":["../src/auth/allowed-origins.ts"],"sourcesContent":["/**\n * Resolution and validation of multi-origin passkey verification.\n *\n * `allowedOrigins` lets one EmDash deployment accept passkey assertions from\n * several hostnames sharing the same `rpId` (e.g. apex + preview/staging\n * subdomains under one registrable parent). Origins come from two sources:\n *\n *   - `EmDashConfig.allowedOrigins` (declared in `astro.config.mjs`)\n *   - `EMDASH_ALLOWED_ORIGINS` (comma-separated runtime env var)\n *\n * Sources are merged (union of permissions, deduplicated). Each entry is\n * validated against `siteUrl` to fail loud on dead config the browser would\n * never honor.\n */\n\nimport { getEnvAllowedOrigins } from \"../api/public-url.js\";\nimport type { EmDashConfig } from \"../astro/integration/runtime.js\";\n\nexport type AllowedOriginSource = \"config.allowedOrigins\" | \"EMDASH_ALLOWED_ORIGINS\";\n\nexport interface TaggedOrigin {\n\t/** Raw entry as declared by the operator. */\n\torigin: string;\n\t/** Where the entry came from (used for source-attributed errors). */\n\tsource: AllowedOriginSource;\n}\n\n/**\n * Collect raw allowedOrigins from config and env, source-tagged.\n *\n * Returns raw values — the caller is expected to pass the result through\n * `validateAllowedOrigins()` before use in passkey verification.\n */\nexport function getConfiguredAllowedOrigins(config?: EmDashConfig): TaggedOrigin[] {\n\tconst tagged: TaggedOrigin[] = [];\n\tif (config?.allowedOrigins) {\n\t\tfor (const origin of config.allowedOrigins) {\n\t\t\tif (origin) tagged.push({ origin, source: \"config.allowedOrigins\" });\n\t\t}\n\t}\n\tfor (const origin of getEnvAllowedOrigins()) {\n\t\ttagged.push({ origin, source: \"EMDASH_ALLOWED_ORIGINS\" });\n\t}\n\treturn tagged;\n}\n\n/**\n * Validate per-entry shape rules (no `siteUrl` needed):\n *   - parses as `URL`\n *   - protocol is `http:` or `https:`\n *   - hostname has no trailing dot (`example.com.` rejected)\n *   - hostname has no empty labels (`foo..example.com` rejected)\n *\n * Returns the deduplicated, normalized origin form (`URL.origin`) of every\n * input, in input order. Throws on the first violation with a source-tagged\n * error message.\n */\nexport function validateOriginShape(tagged: TaggedOrigin[]): string[] {\n\tconst normalized: string[] = [];\n\tconst seen = new Set<string>();\n\tfor (const { origin, source } of tagged) {\n\t\tlet parsed: URL;\n\t\ttry {\n\t\t\tparsed = new URL(origin);\n\t\t} catch (e) {\n\t\t\tthrow configError(source, `invalid URL: \"${origin}\"`, e);\n\t\t}\n\t\tif (parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") {\n\t\t\tthrow configError(\n\t\t\t\tsource,\n\t\t\t\t`origin must be http or https: \"${origin}\" (got ${parsed.protocol})`,\n\t\t\t);\n\t\t}\n\t\tif (parsed.hostname.endsWith(\".\")) {\n\t\t\tthrow configError(\n\t\t\t\tsource,\n\t\t\t\t`hostname has a trailing dot: \"${origin}\". Remove the trailing dot — assertion origins from the browser do not include it.`,\n\t\t\t);\n\t\t}\n\t\tif (parsed.hostname.split(\".\").includes(\"\")) {\n\t\t\tthrow configError(source, `hostname has empty labels: \"${origin}\"`);\n\t\t}\n\t\tif (!seen.has(parsed.origin)) {\n\t\t\tseen.add(parsed.origin);\n\t\t\tnormalized.push(parsed.origin);\n\t\t}\n\t}\n\treturn normalized;\n}\n\n/**\n * Validate the effective merged allowedOrigins set against `siteUrl`.\n *\n * Performs `validateOriginShape()` plus the siteUrl-dependent rules:\n *   - Rule A: non-empty origins ⇒ `siteUrl` is set\n *   - `siteUrl` hostname is not an IP literal (multi-origin requires a domain)\n *   - `siteUrl` hostname has no trailing dot (cannot match assertion origins)\n *   - Rule B: each origin's hostname is `siteHost` exactly or a subdomain\n *\n * Throws on first violation. Returns the deduplicated normalized origins.\n *\n * Use this at the runtime chokepoint (where config + env are merged into the\n * effective set). At Astro integration init, prefer `validateOriginShape()`\n * for shape-only checks on `config.allowedOrigins`, since `siteUrl` may be\n * supplied at runtime via `EMDASH_SITE_URL`.\n */\nexport function validateAllowedOrigins(\n\tsiteUrl: string | undefined,\n\ttagged: TaggedOrigin[],\n): string[] {\n\tconst normalized = validateOriginShape(tagged);\n\tif (normalized.length === 0) return normalized;\n\n\tif (!siteUrl) {\n\t\tthrow new Error(\n\t\t\t`EmDash config error: allowedOrigins is set (${normalized.length} ${\n\t\t\t\tnormalized.length === 1 ? \"entry\" : \"entries\"\n\t\t\t}) but siteUrl is not. Without a canonical siteUrl, rpId is derived from the request hostname, defeating multi-origin passkeys. Set siteUrl in astro.config.mjs or via EMDASH_SITE_URL.`,\n\t\t);\n\t}\n\n\tlet siteHost: string;\n\ttry {\n\t\tsiteHost = new URL(siteUrl).hostname;\n\t} catch (e) {\n\t\tthrow new Error(`EmDash config error: siteUrl is not a valid URL: \"${siteUrl}\"`, {\n\t\t\tcause: e,\n\t\t});\n\t}\n\n\tif (siteHost.endsWith(\".\")) {\n\t\tthrow new Error(\n\t\t\t`EmDash config error: siteUrl \"${siteUrl}\" has a trailing-dot hostname, which cannot match assertion origins. Remove the trailing dot when using allowedOrigins.`,\n\t\t);\n\t}\n\tif (isIPLiteralHostname(siteHost)) {\n\t\tthrow new Error(\n\t\t\t`EmDash config error: siteUrl \"${siteUrl}\" uses an IP-literal hostname. Multi-origin passkeys require a domain-based siteUrl — IP addresses cannot have valid subdomains for WebAuthn rpId.`,\n\t\t);\n\t}\n\n\tfor (const { origin, source } of tagged) {\n\t\tconst h = new URL(origin).hostname;\n\t\tif (h !== siteHost && !h.endsWith(\".\" + siteHost)) {\n\t\t\tthrow configError(\n\t\t\t\tsource,\n\t\t\t\t`\"${origin}\" is not a subdomain of siteUrl \"${siteUrl}\". Allowed origins must be the same hostname as siteUrl or a subdomain of it.`,\n\t\t\t);\n\t\t}\n\t}\n\n\treturn normalized;\n}\n\nfunction configError(source: AllowedOriginSource, detail: string, cause?: unknown): Error {\n\tconst err = new Error(`EmDash config error in ${source}: ${detail}`);\n\tif (cause !== undefined) (err as Error & { cause?: unknown }).cause = cause;\n\treturn err;\n}\n\nconst IPV4_DOTTED_DECIMAL_RE = /^\\d+(\\.\\d+){3}$/;\n\nfunction isIPLiteralHostname(h: string): boolean {\n\t// IPv6 hostnames are bracketed by URL.hostname, e.g. \"[::1]\"\n\tif (h.startsWith(\"[\")) return true;\n\t// IPv4 dotted-decimal\n\treturn IPV4_DOTTED_DECIMAL_RE.test(h);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAiCA,SAAgB,4BAA4B,QAAuC;CAClF,MAAM,SAAyB,EAAE;AACjC,KAAI,QAAQ,gBACX;OAAK,MAAM,UAAU,OAAO,eAC3B,KAAI,OAAQ,QAAO,KAAK;GAAE;GAAQ,QAAQ;GAAyB,CAAC;;AAGtE,MAAK,MAAM,UAAU,sBAAsB,CAC1C,QAAO,KAAK;EAAE;EAAQ,QAAQ;EAA0B,CAAC;AAE1D,QAAO;;;;;;;;;;;;;AAcR,SAAgB,oBAAoB,QAAkC;CACrE,MAAM,aAAuB,EAAE;CAC/B,MAAM,uBAAO,IAAI,KAAa;AAC9B,MAAK,MAAM,EAAE,QAAQ,YAAY,QAAQ;EACxC,IAAI;AACJ,MAAI;AACH,YAAS,IAAI,IAAI,OAAO;WAChB,GAAG;AACX,SAAM,YAAY,QAAQ,iBAAiB,OAAO,IAAI,EAAE;;AAEzD,MAAI,OAAO,aAAa,WAAW,OAAO,aAAa,SACtD,OAAM,YACL,QACA,kCAAkC,OAAO,SAAS,OAAO,SAAS,GAClE;AAEF,MAAI,OAAO,SAAS,SAAS,IAAI,CAChC,OAAM,YACL,QACA,iCAAiC,OAAO,oFACxC;AAEF,MAAI,OAAO,SAAS,MAAM,IAAI,CAAC,SAAS,GAAG,CAC1C,OAAM,YAAY,QAAQ,+BAA+B,OAAO,GAAG;AAEpE,MAAI,CAAC,KAAK,IAAI,OAAO,OAAO,EAAE;AAC7B,QAAK,IAAI,OAAO,OAAO;AACvB,cAAW,KAAK,OAAO,OAAO;;;AAGhC,QAAO;;;;;;;;;;;;;;;;;;AAmBR,SAAgB,uBACf,SACA,QACW;CACX,MAAM,aAAa,oBAAoB,OAAO;AAC9C,KAAI,WAAW,WAAW,EAAG,QAAO;AAEpC,KAAI,CAAC,QACJ,OAAM,IAAI,MACT,+CAA+C,WAAW,OAAO,GAChE,WAAW,WAAW,IAAI,UAAU,UACpC,wLACD;CAGF,IAAI;AACJ,KAAI;AACH,aAAW,IAAI,IAAI,QAAQ,CAAC;UACpB,GAAG;AACX,QAAM,IAAI,MAAM,qDAAqD,QAAQ,IAAI,EAChF,OAAO,GACP,CAAC;;AAGH,KAAI,SAAS,SAAS,IAAI,CACzB,OAAM,IAAI,MACT,iCAAiC,QAAQ,yHACzC;AAEF,KAAI,oBAAoB,SAAS,CAChC,OAAM,IAAI,MACT,iCAAiC,QAAQ,oJACzC;AAGF,MAAK,MAAM,EAAE,QAAQ,YAAY,QAAQ;EACxC,MAAM,IAAI,IAAI,IAAI,OAAO,CAAC;AAC1B,MAAI,MAAM,YAAY,CAAC,EAAE,SAAS,MAAM,SAAS,CAChD,OAAM,YACL,QACA,IAAI,OAAO,mCAAmC,QAAQ,+EACtD;;AAIH,QAAO;;AAGR,SAAS,YAAY,QAA6B,QAAgB,OAAwB;CACzF,MAAM,sBAAM,IAAI,MAAM,0BAA0B,OAAO,IAAI,SAAS;AACpE,KAAI,UAAU,OAAW,CAAC,IAAoC,QAAQ;AACtE,QAAO;;AAGR,MAAM,yBAAyB;AAE/B,SAAS,oBAAoB,GAAoB;AAEhD,KAAI,EAAE,WAAW,IAAI,CAAE,QAAO;AAE9B,QAAO,uBAAuB,KAAK,EAAE"}

package/dist/api/route-utils.d.mts

@@ -1,6 +1,6 @@
-import { a as parseQuery, c as handleError, i as parseBody, n as ParseResult, o as apiError, r as isParseError, s as apiSuccess, t as OptionsRepository } from "../options-41nCWqi9.mjs";
-import { t as Database } from "../types-xIfVRNLp.mjs";
-import { Ot as StorageCollection, kt as StorageCollectionConfig } from "../types-BYnDBVwe.mjs";
+import { a as parseQuery, c as handleError, i as parseBody, n as ParseResult, o as apiError, r as isParseError, s as apiSuccess, t as OptionsRepository } from "../options-iMpRRxIe.mjs";
+import { t as Database } from "../types-_HFLRzTn.mjs";
+import { Ot as StorageCollection, kt as StorageCollectionConfig } from "../types-CGbYowGQ.mjs";
 import { Kysely } from "kysely";
 
 //#region src/api/setup-complete.d.ts

package/dist/api/route-utils.mjs

@@ -1,25 +1,26 @@
 import "../dialect-helpers-DRI5pyY3.mjs";
 import "../after-B1IIdH3Y.mjs";
-import "../object-cache-CHbHv83-.mjs";
-import "../content-ncUWWjna.mjs";
+import "../object-cache-Bok5j2ae.mjs";
+import "../content-DhgEth4k.mjs";
 import "../base64-CmWvODNW.mjs";
-import "../types-CZgK3EMW.mjs";
-import "../media-C5t_eCnk.mjs";
-import "../user-DkG2jKCp.mjs";
+import "../types-CuW0zWDA.mjs";
+import "../media-BrXIaMFN.mjs";
+import "../user-BjAOvU3Z.mjs";
 import { t as OptionsRepository } from "../options-DTTML-Tx.mjs";
-import { r as createStorageAccess } from "../context-C_g-iJVA.mjs";
+import { r as createStorageAccess } from "../context-CUsR9dXL.mjs";
 import "../request-cache-KCNHp_RJ.mjs";
 import "../enrich-BQ0mxJRs.mjs";
-import "../seo-DKeXHkzE.mjs";
-import "../loader-BA_zhkS_.mjs";
-import "../settings-DJeki-97.mjs";
-import "../ssrf-BRKb343l.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../error-rVGiqWDt.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../parse-BwAdS7FZ.mjs";
-import "../ssrf-CcX9zvMK.mjs";
-import "../cron-C5LVoNmP.mjs";
-import { n as getPublicOrigin } from "../public-url-CTVqgMmg.mjs";
-import { t as finalizeSetup } from "../setup-complete-gEiySUc-.mjs";
+import "../seo-DXu2UQnC.mjs";
+import "../content-refresh-CA4uKwzH.mjs";
+import "../loader-CB6YHeul.mjs";
+import "../settings-zhmdKyJQ.mjs";
+import "../ssrf-1g7usGBg.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../error-CkAseSqZ.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../parse-GmjecGct.mjs";
+import "../ssrf-CmuGgCq3.mjs";
+import "../cron-v4FTEFR_.mjs";
+import { n as getPublicOrigin } from "../public-url-Danv47cS.mjs";
+import { t as finalizeSetup } from "../setup-complete-Cb3LRyzy.mjs";
 
 //#region src/api/auth-storage.ts
 /**

package/dist/api/route-utils.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"route-utils.mjs","names":[],"sources":["../../src/api/auth-storage.ts"],"sourcesContent":["/**\n * Auth provider storage helper.\n *\n * Gives auth provider routes access to plugin-style storage collections\n * namespaced under `auth:<providerId>`. Reuses the existing `_plugin_storage`\n * table and `PluginStorageRepository` infrastructure.\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport type { Database } from \"../database/types.js\";\nimport { createStorageAccess } from \"../plugins/context.js\";\nimport type { StorageCollection, StorageCollectionConfig } from \"../plugins/types.js\";\n\n/**\n * Get storage collections for an auth provider.\n *\n * Returns a record of `StorageCollection` instances, one per declared\n * collection in the provider's `storage` config. Data is stored in the\n * shared `_plugin_storage` table under the namespace `auth:<providerId>`.\n *\n * @example\n * ```ts\n * const storage = getAuthProviderStorage(emdash.db, \"atproto\", {\n *   states: { indexes: [] },\n *   sessions: { indexes: [] },\n * });\n * const session = await storage.sessions.get(sessionId);\n * ```\n */\nexport function getAuthProviderStorage(\n\tdb: Kysely<Database>,\n\tproviderId: string,\n\tstorageConfig: Record<string, StorageCollectionConfig>,\n): Record<string, StorageCollection> {\n\treturn createStorageAccess(db, `auth:${providerId}`, storageConfig);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BA,SAAgB,uBACf,IACA,YACA,eACoC;AACpC,QAAO,oBAAoB,IAAI,QAAQ,cAAc,cAAc"}
+{"version":3,"file":"route-utils.mjs","names":[],"sources":["../../src/api/auth-storage.ts"],"sourcesContent":["/**\n * Auth provider storage helper.\n *\n * Gives auth provider routes access to plugin-style storage collections\n * namespaced under `auth:<providerId>`. Reuses the existing `_plugin_storage`\n * table and `PluginStorageRepository` infrastructure.\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport type { Database } from \"../database/types.js\";\nimport { createStorageAccess } from \"../plugins/context.js\";\nimport type { StorageCollection, StorageCollectionConfig } from \"../plugins/types.js\";\n\n/**\n * Get storage collections for an auth provider.\n *\n * Returns a record of `StorageCollection` instances, one per declared\n * collection in the provider's `storage` config. Data is stored in the\n * shared `_plugin_storage` table under the namespace `auth:<providerId>`.\n *\n * @example\n * ```ts\n * const storage = getAuthProviderStorage(emdash.db, \"atproto\", {\n *   states: { indexes: [] },\n *   sessions: { indexes: [] },\n * });\n * const session = await storage.sessions.get(sessionId);\n * ```\n */\nexport function getAuthProviderStorage(\n\tdb: Kysely<Database>,\n\tproviderId: string,\n\tstorageConfig: Record<string, StorageCollectionConfig>,\n): Record<string, StorageCollection> {\n\treturn createStorageAccess(db, `auth:${providerId}`, storageConfig);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BA,SAAgB,uBACf,IACA,YACA,eACoC;AACpC,QAAO,oBAAoB,IAAI,QAAQ,cAAc,cAAc"}

package/dist/api/schemas/index.d.mts

@@ -1,2 +1,2 @@
-import { $ as wpRewriteUrlsBody, $n as trashedContentItemSchema, $t as commentSchema, A as reorderWidgetsBody, An as mediaProviderListQuery, At as menuSchema, B as userSchema, Bn as contentListQuery, Bt as magicLinkSendBody, C as notFoundSummarySchema, Cn as formatFileSize, Ct as termWithCountSchema, D as updateRedirectBody, Dn as mediaItemSchema, Dt as menuItemSchema, E as redirectsListQuery, En as mediaExistingResponseSchema, Et as createMenuItemBody, F as widgetSchema, Fn as contentAuthorSchema, Ft as updateMenuItemBody, G as setupAdminVerifyBody, Gn as contentScheduleBody, Gt as passkeyVerifyBody, H as usersListQuery, Hn as contentPreviewUrlBody, Ht as passkeyRegisterOptionsBody, I as allowedDomainCreateBody, In as contentAuthorsResponseSchema, It as authMeActionBody, J as importProbeBody, Jn as contentTermsBody, Jt as adminCommentListResponseSchema, K as setupAtprotoAdminBody, Kn as contentSeoInput, Kt as signupCompleteBody, L as allowedDomainUpdateBody, Ln as contentCompareResponseSchema, Lt as inviteCompleteBody, M as widgetAreaSchema, Mn as mediaUpdateBody, Mt as menuWithItemsSchema, N as widgetAreaWithWidgetsAndCountSchema, Nn as mediaUploadUrlBody, Nt as reorderMenuItemsBody, O as createWidgetAreaBody, On as mediaListQuery, Ot as menuItemTypeEnum, P as widgetAreaWithWidgetsSchema, Pn as mediaUploadUrlResponseSchema, Pt as updateMenuBody, Q as wpPrepareBody, Qn as contentUpdateBody, Qt as commentListQuery, R as userDetailSchema, Rn as contentCreateBody, Rt as inviteCreateBody, S as notFoundSummaryResponseSchema, Sn as DEFAULT_MAX_UPLOAD_SIZE, St as termTranslationsSchema, T as redirectSchema, Tn as mediaConfirmResponseSchema, Tt as createMenuBody, U as atprotoLoginBody, Un as contentPublishBody, Ut as passkeyRegisterVerifyBody, V as userUpdateBody, Vn as contentListResponseSchema, Vt as passkeyOptionsBody, W as setupAdminBody, Wn as contentResponseSchema, Wt as passkeyRenameBody, X as wpPluginAnalyzeBody, Xn as contentTranslationsResponseSchema, Xt as commentBulkResponseSchema, Y as wpMediaImportBody, Yn as contentTranslationSchema, Yt as commentBulkBody, Z as wpPluginExecuteBody, Zn as contentTrashQuery, Zt as commentCountsResponseSchema, _ as notFoundEntrySchema, _n as orphanedTableListResponseSchema, _t as taxonomyListResponseSchema, a as bylineFieldUpdateBody, an as collectionGetQuery, ar as deleteResponseSchema, at as searchSuggestQuery, b as notFoundPruneBody, bn as updateCollectionBody, bt as termResponseSchema, c as bylineCreditSchema, cn as collectionSchema, cr as localeFilterQuery, ct as createSectionBody, d as bylineTranslationCreateBody, dn as createFieldBody, dr as slugPattern, dt as sectionsListQuery, en as commentStatusBody, er as trashedContentListResponseSchema, et as searchEnableBody, f as bylineTranslationsResponseSchema, fn as fieldListResponseSchema, fr as successEnvelope, ft as updateSectionBody, g as createRedirectBody, gn as orphanRegisterBody, gt as taxonomyDefTranslationsSchema, h as contentBylineInputSchema, hn as fieldSchema, ht as taxonomyDefSchema, i as bylineFieldReorderBody, in as publicCommentSchema, ir as cursorPaginationQuery, it as searchResultSchema, j as updateWidgetBody, jn as mediaResponseSchema, jt as menuTranslationsSchema, k as createWidgetBody, kn as mediaListResponseSchema, kt as menuListItemSchema, l as bylineListResponseSchema, ln as collectionWithFieldsResponseSchema, lr as offsetPaginationQuery, lt as sectionListResponseSchema, m as bylinesListQuery, mn as fieldResponseSchema, mt as createTermBody, n as bylineFieldDefinitionSchema, nn as createReactionBody, nr as apiErrorSchema, nt as searchRebuildBody, o as bylineFieldUsageResponseSchema, on as collectionListResponseSchema, or as httpUrl, ot as settingsUpdateBody, p as bylineUpdateBody, pn as fieldReorderBody, pt as createTaxonomyDefBody, q as setupBody, qn as contentSeoSchema, qt as signupRequestBody, r as bylineFieldListResponseSchema, rn as publicCommentListResponseSchema, rr as countResponseSchema, rt as searchResponseSchema, s as bylineCreateBody, sn as collectionResponseSchema, sr as localeCode, st as siteSettingsSchema, t as bylineFieldCreateBody, tn as createCommentBody, tr as VALID_ROLE_LEVELS, tt as searchQuery, u as bylineSummarySchema, un as createCollectionBody, ur as roleLevel, ut as sectionSchema, v as notFoundListQuery, vn as orphanedTableSchema, vt as termGetResponseSchema, w as redirectListResponseSchema, wn as mediaConfirmBody, wt as updateTermBody, x as notFoundSummaryQuery, xn as updateFieldBody, xt as termSchema, y as notFoundListResponseSchema, yn as schemaExportQuery, yt as termListResponseSchema, z as userListResponseSchema, zn as contentItemSchema, zt as inviteRegisterOptionsBody } from "../../byline-fields-KD3JFRuH.mjs";
+import { $ as wpRewriteUrlsBody, $n as trashedContentItemSchema, $t as commentSchema, A as reorderWidgetsBody, An as mediaProviderListQuery, At as menuSchema, B as userSchema, Bn as contentListQuery, Bt as magicLinkSendBody, C as notFoundSummarySchema, Cn as formatFileSize, Ct as termWithCountSchema, D as updateRedirectBody, Dn as mediaItemSchema, Dt as menuItemSchema, E as redirectsListQuery, En as mediaExistingResponseSchema, Et as createMenuItemBody, F as widgetSchema, Fn as contentAuthorSchema, Ft as updateMenuItemBody, G as setupAdminVerifyBody, Gn as contentScheduleBody, Gt as passkeyVerifyBody, H as usersListQuery, Hn as contentPreviewUrlBody, Ht as passkeyRegisterOptionsBody, I as allowedDomainCreateBody, In as contentAuthorsResponseSchema, It as authMeActionBody, J as importProbeBody, Jn as contentTermsBody, Jt as adminCommentListResponseSchema, K as setupAtprotoAdminBody, Kn as contentSeoInput, Kt as signupCompleteBody, L as allowedDomainUpdateBody, Ln as contentCompareResponseSchema, Lt as inviteCompleteBody, M as widgetAreaSchema, Mn as mediaUpdateBody, Mt as menuWithItemsSchema, N as widgetAreaWithWidgetsAndCountSchema, Nn as mediaUploadUrlBody, Nt as reorderMenuItemsBody, O as createWidgetAreaBody, On as mediaListQuery, Ot as menuItemTypeEnum, P as widgetAreaWithWidgetsSchema, Pn as mediaUploadUrlResponseSchema, Pt as updateMenuBody, Q as wpPrepareBody, Qn as contentUpdateBody, Qt as commentListQuery, R as userDetailSchema, Rn as contentCreateBody, Rt as inviteCreateBody, S as notFoundSummaryResponseSchema, Sn as DEFAULT_MAX_UPLOAD_SIZE, St as termTranslationsSchema, T as redirectSchema, Tn as mediaConfirmResponseSchema, Tt as createMenuBody, U as atprotoLoginBody, Un as contentPublishBody, Ut as passkeyRegisterVerifyBody, V as userUpdateBody, Vn as contentListResponseSchema, Vt as passkeyOptionsBody, W as setupAdminBody, Wn as contentResponseSchema, Wt as passkeyRenameBody, X as wpPluginAnalyzeBody, Xn as contentTranslationsResponseSchema, Xt as commentBulkResponseSchema, Y as wpMediaImportBody, Yn as contentTranslationSchema, Yt as commentBulkBody, Z as wpPluginExecuteBody, Zn as contentTrashQuery, Zt as commentCountsResponseSchema, _ as notFoundEntrySchema, _n as orphanedTableListResponseSchema, _t as taxonomyListResponseSchema, a as bylineFieldUpdateBody, an as collectionGetQuery, ar as deleteResponseSchema, at as searchSuggestQuery, b as notFoundPruneBody, bn as updateCollectionBody, bt as termResponseSchema, c as bylineCreditSchema, cn as collectionSchema, cr as localeFilterQuery, ct as createSectionBody, d as bylineTranslationCreateBody, dn as createFieldBody, dr as slugPattern, dt as sectionsListQuery, en as commentStatusBody, er as trashedContentListResponseSchema, et as searchEnableBody, f as bylineTranslationsResponseSchema, fn as fieldListResponseSchema, fr as successEnvelope, ft as updateSectionBody, g as createRedirectBody, gn as orphanRegisterBody, gt as taxonomyDefTranslationsSchema, h as contentBylineInputSchema, hn as fieldSchema, ht as taxonomyDefSchema, i as bylineFieldReorderBody, in as publicCommentSchema, ir as cursorPaginationQuery, it as searchResultSchema, j as updateWidgetBody, jn as mediaResponseSchema, jt as menuTranslationsSchema, k as createWidgetBody, kn as mediaListResponseSchema, kt as menuListItemSchema, l as bylineListResponseSchema, ln as collectionWithFieldsResponseSchema, lr as offsetPaginationQuery, lt as sectionListResponseSchema, m as bylinesListQuery, mn as fieldResponseSchema, mt as createTermBody, n as bylineFieldDefinitionSchema, nn as createReactionBody, nr as apiErrorSchema, nt as searchRebuildBody, o as bylineFieldUsageResponseSchema, on as collectionListResponseSchema, or as httpUrl, ot as settingsUpdateBody, p as bylineUpdateBody, pn as fieldReorderBody, pt as createTaxonomyDefBody, q as setupBody, qn as contentSeoSchema, qt as signupRequestBody, r as bylineFieldListResponseSchema, rn as publicCommentListResponseSchema, rr as countResponseSchema, rt as searchResponseSchema, s as bylineCreateBody, sn as collectionResponseSchema, sr as localeCode, st as siteSettingsSchema, t as bylineFieldCreateBody, tn as createCommentBody, tr as VALID_ROLE_LEVELS, tt as searchQuery, u as bylineSummarySchema, un as createCollectionBody, ur as roleLevel, ut as sectionSchema, v as notFoundListQuery, vn as orphanedTableSchema, vt as termGetResponseSchema, w as redirectListResponseSchema, wn as mediaConfirmBody, wt as updateTermBody, x as notFoundSummaryQuery, xn as updateFieldBody, xt as termSchema, y as notFoundListResponseSchema, yn as schemaExportQuery, yt as termListResponseSchema, z as userListResponseSchema, zn as contentItemSchema, zt as inviteRegisterOptionsBody } from "../../byline-fields-Cgrt9-aL.mjs";
 export { DEFAULT_MAX_UPLOAD_SIZE, VALID_ROLE_LEVELS, adminCommentListResponseSchema, allowedDomainCreateBody, allowedDomainUpdateBody, apiErrorSchema, atprotoLoginBody, authMeActionBody, bylineCreateBody, bylineCreditSchema, bylineFieldCreateBody, bylineFieldDefinitionSchema, bylineFieldListResponseSchema, bylineFieldReorderBody, bylineFieldUpdateBody, bylineFieldUsageResponseSchema, bylineListResponseSchema, bylineSummarySchema, bylineTranslationCreateBody, bylineTranslationsResponseSchema, bylineUpdateBody, bylinesListQuery, collectionGetQuery, collectionListResponseSchema, collectionResponseSchema, collectionSchema, collectionWithFieldsResponseSchema, commentBulkBody, commentBulkResponseSchema, commentCountsResponseSchema, commentListQuery, commentSchema, commentStatusBody, contentAuthorSchema, contentAuthorsResponseSchema, contentBylineInputSchema, contentCompareResponseSchema, contentCreateBody, contentItemSchema, contentListQuery, contentListResponseSchema, contentPreviewUrlBody, contentPublishBody, contentResponseSchema, contentScheduleBody, contentSeoInput, contentSeoSchema, contentTermsBody, contentTranslationSchema, contentTranslationsResponseSchema, contentTrashQuery, contentUpdateBody, countResponseSchema, createCollectionBody, createCommentBody, createFieldBody, createMenuBody, createMenuItemBody, createReactionBody, createRedirectBody, createSectionBody, createTaxonomyDefBody, createTermBody, createWidgetAreaBody, createWidgetBody, cursorPaginationQuery, deleteResponseSchema, fieldListResponseSchema, fieldReorderBody, fieldResponseSchema, fieldSchema, formatFileSize, httpUrl, importProbeBody, inviteCompleteBody, inviteCreateBody, inviteRegisterOptionsBody, localeCode, localeFilterQuery, magicLinkSendBody, mediaConfirmBody, mediaConfirmResponseSchema, mediaExistingResponseSchema, mediaItemSchema, mediaListQuery, mediaListResponseSchema, mediaProviderListQuery, mediaResponseSchema, mediaUpdateBody, mediaUploadUrlBody, mediaUploadUrlResponseSchema, menuItemSchema, menuItemTypeEnum, menuListItemSchema, menuSchema, menuTranslationsSchema, menuWithItemsSchema, notFoundEntrySchema, notFoundListQuery, notFoundListResponseSchema, notFoundPruneBody, notFoundSummaryQuery, notFoundSummaryResponseSchema, notFoundSummarySchema, offsetPaginationQuery, orphanRegisterBody, orphanedTableListResponseSchema, orphanedTableSchema, passkeyOptionsBody, passkeyRegisterOptionsBody, passkeyRegisterVerifyBody, passkeyRenameBody, passkeyVerifyBody, publicCommentListResponseSchema, publicCommentSchema, redirectListResponseSchema, redirectSchema, redirectsListQuery, reorderMenuItemsBody, reorderWidgetsBody, roleLevel, schemaExportQuery, searchEnableBody, searchQuery, searchRebuildBody, searchResponseSchema, searchResultSchema, searchSuggestQuery, sectionListResponseSchema, sectionSchema, sectionsListQuery, settingsUpdateBody, setupAdminBody, setupAdminVerifyBody, setupAtprotoAdminBody, setupBody, signupCompleteBody, signupRequestBody, siteSettingsSchema, slugPattern, successEnvelope, taxonomyDefSchema, taxonomyDefTranslationsSchema, taxonomyListResponseSchema, termGetResponseSchema, termListResponseSchema, termResponseSchema, termSchema, termTranslationsSchema, termWithCountSchema, trashedContentItemSchema, trashedContentListResponseSchema, updateCollectionBody, updateFieldBody, updateMenuBody, updateMenuItemBody, updateRedirectBody, updateSectionBody, updateTermBody, updateWidgetBody, userDetailSchema, userListResponseSchema, userSchema, userUpdateBody, usersListQuery, widgetAreaSchema, widgetAreaWithWidgetsAndCountSchema, widgetAreaWithWidgetsSchema, widgetSchema, wpMediaImportBody, wpPluginAnalyzeBody, wpPluginExecuteBody, wpPrepareBody, wpRewriteUrlsBody };

package/dist/api/schemas/index.mjs

@@ -1,5 +1,5 @@
-import { $ as createMenuBody, $t as contentAuthorSchema, A as searchRebuildBody, An as countResponseSchema, At as fieldListResponseSchema, B as updateSectionBody, Bt as DEFAULT_MAX_UPLOAD_SIZE, C as userDetailSchema, Cn as bylineTranslationCreateBody, Ct as collectionGetQuery, D as usersListQuery, Dn as contentBylineInputSchema, Dt as collectionWithFieldsResponseSchema, E as userUpdateBody, En as bylinesListQuery, Et as collectionSchema, F as siteSettingsSchema, Fn as localeFilterQuery, Ft as orphanedTableListResponseSchema, G as taxonomyListResponseSchema, Gt as mediaItemSchema, H as createTermBody, Ht as mediaConfirmBody, I as createSectionBody, In as offsetPaginationQuery, It as orphanedTableSchema, J as termResponseSchema, Jt as mediaProviderListQuery, K as termGetResponseSchema, Kt as mediaListQuery, L as sectionListResponseSchema, Ln as roleLevel, Lt as schemaExportQuery, M as searchResultSchema, Mn as deleteResponseSchema, Mt as fieldResponseSchema, N as searchSuggestQuery, Nn as httpUrl, Nt as fieldSchema, O as searchEnableBody, On as VALID_ROLE_LEVELS, Ot as createCollectionBody, P as settingsUpdateBody, Pn as localeCode, Pt as orphanRegisterBody, Q as updateTermBody, Qt as mediaUploadUrlResponseSchema, R as sectionSchema, Rn as slugPattern, Rt as updateCollectionBody, S as allowedDomainUpdateBody, Sn as bylineSummarySchema, St as publicCommentSchema, T as userSchema, Tn as bylineUpdateBody, Tt as collectionResponseSchema, U as taxonomyDefSchema, Ut as mediaConfirmResponseSchema, V as createTaxonomyDefBody, Vt as formatFileSize, W as taxonomyDefTranslationsSchema, Wt as mediaExistingResponseSchema, X as termTranslationsSchema, Xt as mediaUpdateBody, Y as termSchema, Yt as mediaResponseSchema, Z as termWithCountSchema, Zt as mediaUploadUrlBody, _ as widgetAreaSchema, _n as trashedContentItemSchema, _t as commentSchema, a as notFoundPruneBody, an as contentListResponseSchema, at as menuTranslationsSchema, b as widgetSchema, bn as bylineCreditSchema, bt as createReactionBody, c as notFoundSummarySchema, cn as contentResponseSchema, ct as updateMenuBody, d as redirectsListQuery, dn as contentSeoSchema, en as contentAuthorsResponseSchema, et as createMenuItemBody, f as updateRedirectBody, fn as contentTermsBody, ft as adminCommentListResponseSchema, g as updateWidgetBody, gn as contentUpdateBody, gt as commentListQuery, h as reorderWidgetsBody, hn as contentTrashQuery, ht as commentCountsResponseSchema, i as notFoundListResponseSchema, in as contentListQuery, it as menuSchema, j as searchResponseSchema, jn as cursorPaginationQuery, jt as fieldReorderBody, k as searchQuery, kn as apiErrorSchema, kt as createFieldBody, l as redirectListResponseSchema, ln as contentScheduleBody, lt as updateMenuItemBody, m as createWidgetBody, mn as contentTranslationsResponseSchema, mt as commentBulkResponseSchema, n as notFoundEntrySchema, nn as contentCreateBody, nt as menuItemTypeEnum, o as notFoundSummaryQuery, on as contentPreviewUrlBody, ot as menuWithItemsSchema, p as createWidgetAreaBody, pn as contentTranslationSchema, pt as commentBulkBody, q as termListResponseSchema, qt as mediaListResponseSchema, r as notFoundListQuery, rn as contentItemSchema, rt as menuListItemSchema, s as notFoundSummaryResponseSchema, sn as contentPublishBody, st as reorderMenuItemsBody, t as createRedirectBody, tn as contentCompareResponseSchema, tt as menuItemSchema, u as redirectSchema, un as contentSeoInput, v as widgetAreaWithWidgetsAndCountSchema, vn as trashedContentListResponseSchema, vt as commentStatusBody, w as userListResponseSchema, wn as bylineTranslationsResponseSchema, wt as collectionListResponseSchema, x as allowedDomainCreateBody, xn as bylineListResponseSchema, xt as publicCommentListResponseSchema, y as widgetAreaWithWidgetsSchema, yn as bylineCreateBody, yt as createCommentBody, z as sectionsListQuery, zn as successEnvelope, zt as updateFieldBody } from "../../redirects-Dcbuisoj.mjs";
-import { C as passkeyOptionsBody, D as passkeyVerifyBody, E as passkeyRenameBody, O as signupCompleteBody, S as magicLinkSendBody, T as passkeyRegisterVerifyBody, _ as wpRewriteUrlsBody, a as bylineFieldUpdateBody, b as inviteCreateBody, c as setupAdminBody, d as setupBody, f as importProbeBody, g as wpPrepareBody, h as wpPluginExecuteBody, i as bylineFieldReorderBody, k as signupRequestBody, l as setupAdminVerifyBody, m as wpPluginAnalyzeBody, n as bylineFieldDefinitionSchema, o as bylineFieldUsageResponseSchema, p as wpMediaImportBody, r as bylineFieldListResponseSchema, s as atprotoLoginBody, t as bylineFieldCreateBody, u as setupAtprotoAdminBody, v as authMeActionBody, w as passkeyRegisterOptionsBody, x as inviteRegisterOptionsBody, y as inviteCompleteBody } from "../../byline-fields-eyJMblSr.mjs";
-import "../../status-vUK0SA17.mjs";
+import { $ as createMenuBody, $t as contentAuthorSchema, A as searchRebuildBody, An as countResponseSchema, At as fieldListResponseSchema, B as updateSectionBody, Bt as DEFAULT_MAX_UPLOAD_SIZE, C as userDetailSchema, Cn as bylineTranslationCreateBody, Ct as collectionGetQuery, D as usersListQuery, Dn as contentBylineInputSchema, Dt as collectionWithFieldsResponseSchema, E as userUpdateBody, En as bylinesListQuery, Et as collectionSchema, F as siteSettingsSchema, Fn as localeFilterQuery, Ft as orphanedTableListResponseSchema, G as taxonomyListResponseSchema, Gt as mediaItemSchema, H as createTermBody, Ht as mediaConfirmBody, I as createSectionBody, In as offsetPaginationQuery, It as orphanedTableSchema, J as termResponseSchema, Jt as mediaProviderListQuery, K as termGetResponseSchema, Kt as mediaListQuery, L as sectionListResponseSchema, Ln as roleLevel, Lt as schemaExportQuery, M as searchResultSchema, Mn as deleteResponseSchema, Mt as fieldResponseSchema, N as searchSuggestQuery, Nn as httpUrl, Nt as fieldSchema, O as searchEnableBody, On as VALID_ROLE_LEVELS, Ot as createCollectionBody, P as settingsUpdateBody, Pn as localeCode, Pt as orphanRegisterBody, Q as updateTermBody, Qt as mediaUploadUrlResponseSchema, R as sectionSchema, Rn as slugPattern, Rt as updateCollectionBody, S as allowedDomainUpdateBody, Sn as bylineSummarySchema, St as publicCommentSchema, T as userSchema, Tn as bylineUpdateBody, Tt as collectionResponseSchema, U as taxonomyDefSchema, Ut as mediaConfirmResponseSchema, V as createTaxonomyDefBody, Vt as formatFileSize, W as taxonomyDefTranslationsSchema, Wt as mediaExistingResponseSchema, X as termTranslationsSchema, Xt as mediaUpdateBody, Y as termSchema, Yt as mediaResponseSchema, Z as termWithCountSchema, Zt as mediaUploadUrlBody, _ as widgetAreaSchema, _n as trashedContentItemSchema, _t as commentSchema, a as notFoundPruneBody, an as contentListResponseSchema, at as menuTranslationsSchema, b as widgetSchema, bn as bylineCreditSchema, bt as createReactionBody, c as notFoundSummarySchema, cn as contentResponseSchema, ct as updateMenuBody, d as redirectsListQuery, dn as contentSeoSchema, en as contentAuthorsResponseSchema, et as createMenuItemBody, f as updateRedirectBody, fn as contentTermsBody, ft as adminCommentListResponseSchema, g as updateWidgetBody, gn as contentUpdateBody, gt as commentListQuery, h as reorderWidgetsBody, hn as contentTrashQuery, ht as commentCountsResponseSchema, i as notFoundListResponseSchema, in as contentListQuery, it as menuSchema, j as searchResponseSchema, jn as cursorPaginationQuery, jt as fieldReorderBody, k as searchQuery, kn as apiErrorSchema, kt as createFieldBody, l as redirectListResponseSchema, ln as contentScheduleBody, lt as updateMenuItemBody, m as createWidgetBody, mn as contentTranslationsResponseSchema, mt as commentBulkResponseSchema, n as notFoundEntrySchema, nn as contentCreateBody, nt as menuItemTypeEnum, o as notFoundSummaryQuery, on as contentPreviewUrlBody, ot as menuWithItemsSchema, p as createWidgetAreaBody, pn as contentTranslationSchema, pt as commentBulkBody, q as termListResponseSchema, qt as mediaListResponseSchema, r as notFoundListQuery, rn as contentItemSchema, rt as menuListItemSchema, s as notFoundSummaryResponseSchema, sn as contentPublishBody, st as reorderMenuItemsBody, t as createRedirectBody, tn as contentCompareResponseSchema, tt as menuItemSchema, u as redirectSchema, un as contentSeoInput, v as widgetAreaWithWidgetsAndCountSchema, vn as trashedContentListResponseSchema, vt as commentStatusBody, w as userListResponseSchema, wn as bylineTranslationsResponseSchema, wt as collectionListResponseSchema, x as allowedDomainCreateBody, xn as bylineListResponseSchema, xt as publicCommentListResponseSchema, y as widgetAreaWithWidgetsSchema, yn as bylineCreateBody, yt as createCommentBody, z as sectionsListQuery, zn as successEnvelope, zt as updateFieldBody } from "../../redirects-DXEXBAII.mjs";
+import { C as passkeyOptionsBody, D as passkeyVerifyBody, E as passkeyRenameBody, O as signupCompleteBody, S as magicLinkSendBody, T as passkeyRegisterVerifyBody, _ as wpRewriteUrlsBody, a as bylineFieldUpdateBody, b as inviteCreateBody, c as setupAdminBody, d as setupBody, f as importProbeBody, g as wpPrepareBody, h as wpPluginExecuteBody, i as bylineFieldReorderBody, k as signupRequestBody, l as setupAdminVerifyBody, m as wpPluginAnalyzeBody, n as bylineFieldDefinitionSchema, o as bylineFieldUsageResponseSchema, p as wpMediaImportBody, r as bylineFieldListResponseSchema, s as atprotoLoginBody, t as bylineFieldCreateBody, u as setupAtprotoAdminBody, v as authMeActionBody, w as passkeyRegisterOptionsBody, x as inviteRegisterOptionsBody, y as inviteCompleteBody } from "../../byline-fields-2Lp5Hbgf.mjs";
+import "../../status-CqJQX1QN.mjs";
 
 export { DEFAULT_MAX_UPLOAD_SIZE, VALID_ROLE_LEVELS, adminCommentListResponseSchema, allowedDomainCreateBody, allowedDomainUpdateBody, apiErrorSchema, atprotoLoginBody, authMeActionBody, bylineCreateBody, bylineCreditSchema, bylineFieldCreateBody, bylineFieldDefinitionSchema, bylineFieldListResponseSchema, bylineFieldReorderBody, bylineFieldUpdateBody, bylineFieldUsageResponseSchema, bylineListResponseSchema, bylineSummarySchema, bylineTranslationCreateBody, bylineTranslationsResponseSchema, bylineUpdateBody, bylinesListQuery, collectionGetQuery, collectionListResponseSchema, collectionResponseSchema, collectionSchema, collectionWithFieldsResponseSchema, commentBulkBody, commentBulkResponseSchema, commentCountsResponseSchema, commentListQuery, commentSchema, commentStatusBody, contentAuthorSchema, contentAuthorsResponseSchema, contentBylineInputSchema, contentCompareResponseSchema, contentCreateBody, contentItemSchema, contentListQuery, contentListResponseSchema, contentPreviewUrlBody, contentPublishBody, contentResponseSchema, contentScheduleBody, contentSeoInput, contentSeoSchema, contentTermsBody, contentTranslationSchema, contentTranslationsResponseSchema, contentTrashQuery, contentUpdateBody, countResponseSchema, createCollectionBody, createCommentBody, createFieldBody, createMenuBody, createMenuItemBody, createReactionBody, createRedirectBody, createSectionBody, createTaxonomyDefBody, createTermBody, createWidgetAreaBody, createWidgetBody, cursorPaginationQuery, deleteResponseSchema, fieldListResponseSchema, fieldReorderBody, fieldResponseSchema, fieldSchema, formatFileSize, httpUrl, importProbeBody, inviteCompleteBody, inviteCreateBody, inviteRegisterOptionsBody, localeCode, localeFilterQuery, magicLinkSendBody, mediaConfirmBody, mediaConfirmResponseSchema, mediaExistingResponseSchema, mediaItemSchema, mediaListQuery, mediaListResponseSchema, mediaProviderListQuery, mediaResponseSchema, mediaUpdateBody, mediaUploadUrlBody, mediaUploadUrlResponseSchema, menuItemSchema, menuItemTypeEnum, menuListItemSchema, menuSchema, menuTranslationsSchema, menuWithItemsSchema, notFoundEntrySchema, notFoundListQuery, notFoundListResponseSchema, notFoundPruneBody, notFoundSummaryQuery, notFoundSummaryResponseSchema, notFoundSummarySchema, offsetPaginationQuery, orphanRegisterBody, orphanedTableListResponseSchema, orphanedTableSchema, passkeyOptionsBody, passkeyRegisterOptionsBody, passkeyRegisterVerifyBody, passkeyRenameBody, passkeyVerifyBody, publicCommentListResponseSchema, publicCommentSchema, redirectListResponseSchema, redirectSchema, redirectsListQuery, reorderMenuItemsBody, reorderWidgetsBody, roleLevel, schemaExportQuery, searchEnableBody, searchQuery, searchRebuildBody, searchResponseSchema, searchResultSchema, searchSuggestQuery, sectionListResponseSchema, sectionSchema, sectionsListQuery, settingsUpdateBody, setupAdminBody, setupAdminVerifyBody, setupAtprotoAdminBody, setupBody, signupCompleteBody, signupRequestBody, siteSettingsSchema, slugPattern, successEnvelope, taxonomyDefSchema, taxonomyDefTranslationsSchema, taxonomyListResponseSchema, termGetResponseSchema, termListResponseSchema, termResponseSchema, termSchema, termTranslationsSchema, termWithCountSchema, trashedContentItemSchema, trashedContentListResponseSchema, updateCollectionBody, updateFieldBody, updateMenuBody, updateMenuItemBody, updateRedirectBody, updateSectionBody, updateTermBody, updateWidgetBody, userDetailSchema, userListResponseSchema, userSchema, userUpdateBody, usersListQuery, widgetAreaSchema, widgetAreaWithWidgetsAndCountSchema, widgetAreaWithWidgetsSchema, widgetSchema, wpMediaImportBody, wpPluginAnalyzeBody, wpPluginExecuteBody, wpPrepareBody, wpRewriteUrlsBody };

package/dist/{api-BMfveMoB.mjs → api-BFURZn1i.mjs}

@@ -1,27 +1,27 @@
 import { r as validatePluginIdentifier, t as validateIdentifier } from "./validate-VPnKoIzW.mjs";
 import { n as getI18nConfig, r as isI18nEnabled } from "./config-CVssduLe.mjs";
-import { o as invalidateCollectionCache } from "./object-cache-CHbHv83-.mjs";
-import { r as RevisionRepository, t as ContentRepository } from "./content-ncUWWjna.mjs";
+import { o as invalidateCollectionCache } from "./object-cache-Bok5j2ae.mjs";
+import { r as RevisionRepository, t as ContentRepository } from "./content-DhgEth4k.mjs";
 import { r as encodeBase64, t as decodeBase64 } from "./base64-CmWvODNW.mjs";
-import { n as InvalidCursorError, r as ScheduledNotDueError, t as EmDashValidationError } from "./types-CZgK3EMW.mjs";
-import { t as MediaRepository } from "./media-C5t_eCnk.mjs";
-import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-OCG163rN.mjs";
-import { t as UserRepository } from "./user-DkG2jKCp.mjs";
-import { t as CommentRepository } from "./comment-D9BLDpZI.mjs";
+import { n as InvalidCursorError, r as ScheduledNotDueError, t as EmDashValidationError } from "./types-CuW0zWDA.mjs";
+import { t as MediaRepository } from "./media-BrXIaMFN.mjs";
+import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-B2isWQhr.mjs";
+import { t as UserRepository } from "./user-BjAOvU3Z.mjs";
+import { t as CommentRepository } from "./comment-CzeatwBV.mjs";
 import { t as withTransaction } from "./transaction-qfqpPVpu.mjs";
-import { t as RedirectRepository } from "./redirect-_M0trWoo.mjs";
+import { t as RedirectRepository } from "./redirect-IyfNirgS.mjs";
 import { r as requestCached } from "./request-cache-KCNHp_RJ.mjs";
-import { t as BylineRepository } from "./byline-LL8lyqdb.mjs";
+import { t as BylineRepository } from "./byline-Bm8ZgUP9.mjs";
 import { r as parseAllowedMimeTypes, t as matchesMimeAllowlist } from "./mime-CCEzze7W.mjs";
-import { t as SeoRepository } from "./seo-DKeXHkzE.mjs";
-import { r as invalidateRedirectCache } from "./cache-D9jF5bYw.mjs";
+import { t as SeoRepository } from "./seo-DXu2UQnC.mjs";
+import { r as invalidateRedirectCache } from "./cache-CEBAZjir.mjs";
 import { n as isMissingTableError } from "./db-errors-CK46D-ly.mjs";
 import { n as hashString } from "./hash-DrvzIXcz.mjs";
-import { n as SchemaRegistry, t as SchemaError } from "./registry-g8yYt4cC.mjs";
-import { a as reconcileManifestAccess, i as pluginManifestSchema, r as normalizeManifestRoute } from "./manifest-schema-kPGX7VS-.mjs";
-import { a as normalizeCapabilities, r as declaredAccessToCapabilities } from "./types-BvbeGEtr.mjs";
-import { t as EmDashStorageError } from "./types-CQAugunJ.mjs";
-import { n as resolveAndValidateExternalUrl, t as SsrfError } from "./ssrf-BRKb343l.mjs";
+import { n as SchemaRegistry, t as SchemaError } from "./registry-B65mUtPa.mjs";
+import { a as reconcileManifestAccess, i as pluginManifestSchema, r as normalizeManifestRoute } from "./manifest-schema-BHlgZM1W.mjs";
+import { a as normalizeCapabilities, r as declaredAccessToCapabilities } from "./types-DROWRxYV.mjs";
+import { t as EmDashStorageError } from "./types-Jo3UYd6b.mjs";
+import { n as resolveAndValidateExternalUrl, t as SsrfError } from "./ssrf-1g7usGBg.mjs";
 import { sql } from "kysely";
 import { createGzipDecoder, unpackTar } from "modern-tar";
 import { ClientResponseError, ClientValidationError } from "@atcute/client";
@@ -339,6 +339,17 @@ async function resolveSearchColumns(db, collection) {
 	for (const candidate of ["title", "name"]) if (fieldSlugs.has(candidate)) columns.push(candidate);
 	return columns;
 }
+/**
+* Create a 301 auto-redirect from an entry's old URL to its new one after a
+* slug change, using the collection's URL pattern. Shared by
+* handleContentUpdate (direct slug edits) and handleContentPublish (slug edits
+* staged as `_slug` in a draft revision, which only land on publish).
+*/
+async function createSlugChangeRedirect(db, collection, oldSlug, newSlug, contentId) {
+	const collectionRow = await db.selectFrom("_emdash_collections").select("url_pattern").where("slug", "=", collection).executeTakeFirst();
+	await new RedirectRepository(db).createAutoRedirect(collection, oldSlug, newSlug, contentId, collectionRow?.url_pattern ?? null);
+	invalidateRedirectCache();
+}
 /** Matches a date-only `YYYY-MM-DD` bound (no time component). */
 const DATE_ONLY_RE = /^\d{4}-\d{2}-\d{2}$/;
 /**
@@ -577,7 +588,7 @@ async function handleContentCreate(db, collection, body) {
 			});
 			if (body.bylines !== void 0) created.primaryBylineId = (await bylineRepo.setContentBylines(collection, created.id, body.bylines))[0]?.byline.translationGroup ?? null;
 			if (body.translationOf) {
-				const { TaxonomyRepository } = await import("./taxonomy-BU0LjdVb.mjs").then((n) => n.n);
+				const { TaxonomyRepository } = await import("./taxonomy-BxGxZZdu.mjs").then((n) => n.n);
 				await new TaxonomyRepository(trx).copyEntryTerms(collection, body.translationOf, created.id);
 				if (body.bylines === void 0) {
 					await bylineRepo.copyContentBylines(collection, body.translationOf, created.id);
@@ -680,11 +691,7 @@ async function handleContentUpdate(db, collection, id, body) {
 				publishedAt: body.publishedAt
 			});
 			if (body.bylines !== void 0) updated.primaryBylineId = (await bylineRepo.setContentBylines(collection, resolvedId, body.bylines))[0]?.byline.translationGroup ?? null;
-			if (oldSlug && body.slug) {
-				const collectionRow = await trx.selectFrom("_emdash_collections").select("url_pattern").where("slug", "=", collection).executeTakeFirst();
-				await new RedirectRepository(trx).createAutoRedirect(collection, oldSlug, body.slug, resolvedId, collectionRow?.url_pattern ?? null);
-				invalidateRedirectCache();
-			}
+			if (oldSlug && body.slug) await createSlugChangeRedirect(trx, collection, oldSlug, body.slug, resolvedId);
 			if (isI18nEnabled() && body.data && updated.translationGroup) await syncNonTranslatableFields(trx, collection, updated.id, updated.translationGroup, body.data);
 			if (body.seo && hasSeo) updated.seo = await new SeoRepository(trx).upsert(collection, resolvedId, body.seo);
 			else if (hasSeo) updated.seo = await new SeoRepository(trx).get(collection, resolvedId);
@@ -800,11 +807,15 @@ async function handleContentDuplicate(db, collection, id, authorId) {
 */
 async function handleContentDelete(db, collection, id) {
 	try {
-		if (!await withTransaction(db, async (trx) => {
+		const result = await withTransaction(db, async (trx) => {
 			const repo = new ContentRepository(trx);
 			const resolvedId = await resolveId(repo, collection, id) ?? id;
-			return repo.delete(collection, resolvedId);
-		})) return {
+			return {
+				id: resolvedId,
+				deleted: await repo.delete(collection, resolvedId)
+			};
+		});
+		if (!result.deleted) return {
 			success: false,
 			error: {
 				code: "NOT_FOUND",
@@ -813,7 +824,10 @@ async function handleContentDelete(db, collection, id) {
 		};
 		return {
 			success: true,
-			data: { deleted: true }
+			data: {
+				deleted: true,
+				id: result.id
+			}
 		};
 	} catch (error) {
 		console.error("Content delete error:", error);
@@ -885,7 +899,10 @@ async function handleContentPermanentDelete(db, collection, id) {
 		};
 		return {
 			success: true,
-			data: { deleted: true }
+			data: {
+				deleted: true,
+				id: resolvedId
+			}
 		};
 	} catch (error) {
 		console.error("Content permanent delete error:", error);
@@ -1041,7 +1058,10 @@ async function handleContentPublish(db, collection, id, options = {}) {
 		const item = await withTransaction(db, async (trx) => {
 			const repo = new ContentRepository(trx);
 			const resolvedId = await resolveId(repo, collection, id) ?? id;
-			return repo.publish(collection, resolvedId, options.publishedAt, options.requireScheduledDue);
+			const existing = await repo.findById(collection, resolvedId);
+			const published = await repo.publish(collection, resolvedId, options.publishedAt, options.requireScheduledDue);
+			if (existing?.status === "published" && existing.slug && published.slug && existing.slug !== published.slug) await createSlugChangeRedirect(trx, collection, existing.slug, published.slug, resolvedId);
+			return published;
 		});
 		await hydrateSeo(db, collection, item, await collectionHasSeo(db, collection));
 		return {
@@ -2157,9 +2177,34 @@ function buildPluginInfo(plugin, state, marketplaceUrl) {
 	};
 }
 /**
+* Build plugin info for a statically-sandboxed plugin entry
+*/
+function buildSandboxedPluginInfo(entry, state) {
+	const status = state?.status ?? "active";
+	const enabled = status === "active";
+	return {
+		id: entry.id,
+		name: state?.displayName || entry.id,
+		version: entry.version,
+		package: void 0,
+		enabled,
+		status,
+		source: "config",
+		sandboxed: true,
+		capabilities: entry.capabilities,
+		hasAdminPages: (entry.adminPages?.length ?? 0) > 0,
+		hasDashboardWidgets: (entry.adminWidgets?.length ?? 0) > 0,
+		hasHooks: false,
+		installedAt: state?.installedAt?.toISOString(),
+		activatedAt: state?.activatedAt?.toISOString() ?? void 0,
+		deactivatedAt: state?.deactivatedAt?.toISOString() ?? void 0,
+		description: state?.description ?? void 0
+	};
+}
+/**
 * List all configured plugins with their state
 */
-async function handlePluginList(db, configuredPlugins, marketplaceUrl) {
+async function handlePluginList(db, configuredPlugins, sandboxedPluginEntries, marketplaceUrl) {
 	try {
 		const allStates = await new PluginStateRepository(db).getAll();
 		const stateMap = new Map(allStates.map((s) => [s.pluginId, s]));
@@ -2167,6 +2212,11 @@ async function handlePluginList(db, configuredPlugins, marketplaceUrl) {
 		const items = configuredPlugins.map((plugin) => {
 			return buildPluginInfo(plugin, stateMap.get(plugin.id) ?? null, marketplaceUrl);
 		});
+		for (const entry of sandboxedPluginEntries) {
+			if (configuredIds.has(entry.id)) continue;
+			configuredIds.add(entry.id);
+			items.push(buildSandboxedPluginInfo(entry, stateMap.get(entry.id) ?? null));
+		}
 		for (const state of allStates) {
 			if (state.source !== "marketplace" && state.source !== "registry") continue;
 			if (configuredIds.has(state.pluginId)) continue;
@@ -2208,20 +2258,26 @@ async function handlePluginList(db, configuredPlugins, marketplaceUrl) {
 /**
 * Get a single plugin's info
 */
-async function handlePluginGet(db, configuredPlugins, pluginId, marketplaceUrl) {
+async function handlePluginGet(db, configuredPlugins, sandboxedPluginEntries, pluginId, marketplaceUrl) {
 	try {
+		const stateRepo = new PluginStateRepository(db);
 		const plugin = configuredPlugins.find((p) => p.id === pluginId);
-		if (!plugin) return {
+		if (plugin) return {
+			success: true,
+			data: { item: buildPluginInfo(plugin, await stateRepo.get(pluginId), marketplaceUrl) }
+		};
+		const sandboxed = sandboxedPluginEntries.find((e) => e.id === pluginId);
+		if (sandboxed) return {
+			success: true,
+			data: { item: buildSandboxedPluginInfo(sandboxed, await stateRepo.get(pluginId)) }
+		};
+		return {
 			success: false,
 			error: {
 				code: "NOT_FOUND",
 				message: `Plugin not found: ${pluginId}`
 			}
 		};
-		return {
-			success: true,
-			data: { item: buildPluginInfo(plugin, await new PluginStateRepository(db).get(pluginId), marketplaceUrl) }
-		};
 	} catch {
 		return {
 			success: false,
@@ -2264,7 +2320,7 @@ function buildStateOnlyPluginInfo(state) {
 /**
 * Enable a plugin
 */
-async function handlePluginEnable(db, configuredPlugins, pluginId) {
+async function handlePluginEnable(db, configuredPlugins, sandboxedPluginEntries, pluginId) {
 	try {
 		const stateRepo = new PluginStateRepository(db);
 		const plugin = configuredPlugins.find((p) => p.id === pluginId);
@@ -2272,6 +2328,11 @@ async function handlePluginEnable(db, configuredPlugins, pluginId) {
 			success: true,
 			data: { item: buildPluginInfo(plugin, await stateRepo.enable(pluginId, plugin.version)) }
 		};
+		const sandboxed = sandboxedPluginEntries.find((e) => e.id === pluginId);
+		if (sandboxed) return {
+			success: true,
+			data: { item: buildSandboxedPluginInfo(sandboxed, await stateRepo.enable(pluginId, sandboxed.version)) }
+		};
 		const existing = await stateRepo.get(pluginId);
 		if (!existing || existing.source !== "marketplace" && existing.source !== "registry") return {
 			success: false,
@@ -2297,7 +2358,7 @@ async function handlePluginEnable(db, configuredPlugins, pluginId) {
 /**
 * Disable a plugin
 */
-async function handlePluginDisable(db, configuredPlugins, pluginId) {
+async function handlePluginDisable(db, configuredPlugins, sandboxedPluginEntries, pluginId) {
 	try {
 		const stateRepo = new PluginStateRepository(db);
 		const plugin = configuredPlugins.find((p) => p.id === pluginId);
@@ -2305,6 +2366,11 @@ async function handlePluginDisable(db, configuredPlugins, pluginId) {
 			success: true,
 			data: { item: buildPluginInfo(plugin, await stateRepo.disable(pluginId, plugin.version)) }
 		};
+		const sandboxed = sandboxedPluginEntries.find((e) => e.id === pluginId);
+		if (sandboxed) return {
+			success: true,
+			data: { item: buildSandboxedPluginInfo(sandboxed, await stateRepo.disable(pluginId, sandboxed.version)) }
+		};
 		const existing = await stateRepo.get(pluginId);
 		if (!existing || existing.source !== "marketplace" && existing.source !== "registry") return {
 			success: false,
@@ -4577,4 +4643,4 @@ async function handleRegistryUpdateCheck(db, registryConfigInput) {
 
 //#endregion
 export { handleContentGet as $, handleSchemaFieldCreate as A, handleMediaUpdate as B, handleOrphanedTableList as C, handleSchemaCollectionGet as D, handleSchemaCollectionDelete as E, handleSchemaFieldUpdate as F, handleContentAuthors as G, handleRevisionList as H, handleMediaCreate as I, handleContentCountTrashed as J, handleContentCompare as K, handleMediaDelete as L, handleSchemaFieldGet as M, handleSchemaFieldList as N, handleSchemaCollectionList as O, handleSchemaFieldReorder as P, handleContentDuplicate as Q, handleMediaGet as R, PluginStateRepository as S, handleSchemaCollectionCreate as T, handleRevisionRestore as U, handleRevisionGet as V, generateManifest as W, handleContentDelete as X, handleContentCreate as Y, handleContentDiscardDraft as Z, loadBundleFromR2 as _, handleRegistryUpdateCheck as a, handleContentRestore as at, handlePluginGet as b, validateAggregatorUrl as c, handleContentUnpublish as ct, handleMarketplaceSearch as d, validateRev as dt, handleContentGetIncludingTrashed as et, handleMarketplaceUninstall as f, handleThemeSearch as g, handleThemeGetDetail as h, handleRegistryUpdate as i, handleContentPublish as it, handleSchemaFieldDelete as j, handleSchemaCollectionUpdate as k, handleMarketplaceGetPlugin as l, handleContentUnschedule as lt, handleMarketplaceUpdateCheck as m, handleRegistryInstall as n, handleContentListTrashed as nt, coerceRegistryConfig as o, handleContentSchedule as ot, handleMarketplaceUpdate as p, handleContentCountScheduled as q, handleRegistryUninstall as r, handleContentPermanentDelete as rt, normalizeRegistryConfig as s, handleContentTranslations as st, assertSafeArtifactUrl as t, handleContentList as tt, handleMarketplaceInstall as u, handleContentUpdate as ut, handlePluginDisable as v, handleOrphanedTableRegister as w, handlePluginList as x, handlePluginEnable as y, handleMediaList as z };
-//# sourceMappingURL=api-BMfveMoB.mjs.map
+//# sourceMappingURL=api-BFURZn1i.mjs.map