emdash 0.28.0 → 0.29.0

package/dist/astro/routes/api/plugins/_pluginId_/_...path_.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"_...path_.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/plugins/[pluginId]/[...path].ts"],"mappings":";;;cAiBa,SAAA;AAAA,cAsEA,GAAA,EAAG,QAAA;AAAA,cACH,IAAA,EAAI,QAAA;AAAA,cACJ,GAAA,EAAG,QAAA;AAAA,cACH,KAAA,EAAK,QAAA;AAAA,cACL,MAAA,EAAM,QAAA"}
+{"version":3,"file":"_...path_.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/plugins/[pluginId]/[...path].ts"],"mappings":";;;cAiBa,SAAA;AAAA,cAwEA,GAAA,EAAG,QAAA;AAAA,cACH,IAAA,EAAI,QAAA;AAAA,cACJ,GAAA,EAAG,QAAA;AAAA,cACH,KAAA,EAAK,QAAA;AAAA,cACL,MAAA,EAAM,QAAA"}

package/dist/astro/routes/api/plugins/_pluginId_/_...path_.mjs

@@ -1,8 +1,8 @@
-import "../../../../../base64-CmWvODNW.mjs";
-import "../../../../../types-CuW0zWDA.mjs";
-import { n as apiSuccess, t as apiError } from "../../../../../error-CkAseSqZ.mjs";
-import { i as hasScope } from "../../../../../api-tokens-DsvvCtdh.mjs";
-import { n as requirePerm } from "../../../../../authorize-Dz88F_Fw.mjs";
+import "../../../../../base64-C74Msx8h.mjs";
+import "../../../../../types-Ch8pFMEm.mjs";
+import { n as apiSuccess, t as apiError } from "../../../../../error-CfJMLSkd.mjs";
+import { i as hasScope } from "../../../../../api-tokens-Dk2GrJMY.mjs";
+import { n as requirePerm } from "../../../../../authorize-BmCwQCib.mjs";
 
 //#region src/auth/scopes.ts
 /**
@@ -46,19 +46,11 @@ const handleRequest = async ({ params, request, locals }) => {
 	const routeMeta = emdash.getPluginRouteMeta(pluginId, `/${path}`);
 	if (!routeMeta) return apiError("NOT_FOUND", "Plugin route not found", 404);
 	if (!routeMeta.public) {
-		const denied = requirePerm(user, [
-			"GET",
-			"HEAD",
-			"OPTIONS"
-		].includes(method) ? "plugins:read" : "plugins:manage");
+		const denied = requirePerm(user, "plugins:manage");
 		if (denied) return denied;
 		const scopeError = requireScope(locals, "admin");
 		if (scopeError) return scopeError;
-		if (![
-			"GET",
-			"HEAD",
-			"OPTIONS"
-		].includes(method) && !locals.tokenScopes && request.headers.get("X-EmDash-Request") !== "1") return apiError("CSRF_REJECTED", "Missing required header", 403);
+		if (!locals.tokenScopes && request.headers.get("X-EmDash-Request") !== "1") return apiError("CSRF_REJECTED", "Missing required header", 403);
 	}
 	const result = await emdash.handlePluginApiRoute(pluginId, method, `/${path}`, request);
 	if (!result.success) {

package/dist/astro/routes/api/plugins/_pluginId_/_...path_.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"_...path_.mjs","names":[],"sources":["../../../../../../src/auth/scopes.ts","../../../../../../src/astro/routes/api/plugins/[pluginId]/[...path].ts"],"sourcesContent":["/**\n * Scope enforcement for API token authentication.\n *\n * Routes call `requireScope(locals, \"content:write\")` alongside role checks.\n * Session-authenticated requests have no scope restrictions (implicit full access).\n * Token-authenticated requests must have the required scope (or \"admin\").\n */\n\nimport { hasScope } from \"./api-tokens.js\";\n\n/**\n * Check if the request has a required scope.\n * Returns a 403 Response if the scope is missing, or null if OK.\n *\n * For session-authenticated users (no tokenScopes), always returns null\n * since session auth has implicit full scope.\n */\nexport function requireScope(locals: { tokenScopes?: string[] }, scope: string): Response | null {\n\t// Session auth = no scope restrictions\n\tif (!locals.tokenScopes) return null;\n\n\tif (hasScope(locals.tokenScopes, scope)) return null;\n\n\treturn new Response(\n\t\tJSON.stringify({\n\t\t\terror: {\n\t\t\t\tcode: \"INSUFFICIENT_SCOPE\",\n\t\t\t\tmessage: `Token lacks required scope: ${scope}`,\n\t\t\t},\n\t\t}),\n\t\t{ status: 403, headers: { \"Content-Type\": \"application/json\" } },\n\t);\n}\n","/**\n * Plugin API routes - dynamic handler for plugin-defined endpoints\n *\n * Routes are mounted at /_emdash/api/plugins/{pluginId}/*\n * Plugins register routes like \"POST /do-something\" which becomes\n * POST /_emdash/api/plugins/{pluginId}/do-something\n *\n * Routes marked as `public: true` skip authentication and CSRF checks.\n * Private routes (the default) require authentication and appropriate permissions.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess } from \"#api/error.js\";\nimport { requireScope } from \"#auth/scopes.js\";\n\nexport const prerender = false;\n\n/**\n * Handle all methods by matching against plugin-defined routes\n */\nconst handleRequest: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst pluginId = params.pluginId!;\n\tconst path = params.path || \"\";\n\tconst method = request.method.toUpperCase();\n\n\tif (!emdash?.handlePluginApiRoute) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash not configured\", 500);\n\t}\n\n\t// Resolve route metadata to decide auth before dispatch\n\tconst routeMeta = emdash.getPluginRouteMeta(pluginId, `/${path}`);\n\n\tif (!routeMeta) {\n\t\treturn apiError(\"NOT_FOUND\", \"Plugin route not found\", 404);\n\t}\n\n\t// Public routes skip auth, CSRF, and scope checks entirely\n\tif (!routeMeta.public) {\n\t\t// Private routes require authentication and permission checks\n\t\tconst permission = [\"GET\", \"HEAD\", \"OPTIONS\"].includes(method)\n\t\t\t? \"plugins:read\"\n\t\t\t: \"plugins:manage\";\n\t\tconst denied = requirePerm(user, permission);\n\t\tif (denied) return denied;\n\n\t\t// Token scope enforcement — plugin routes require \"admin\" scope.\n\t\t// Session auth is implicitly full-access (requireScope returns null).\n\t\tconst scopeError = requireScope(locals, \"admin\");\n\t\tif (scopeError) return scopeError;\n\n\t\t// CSRF protection for state-changing requests on private routes.\n\t\t// Plugin routes use soft auth in the middleware (user resolved but not required),\n\t\t// so the middleware's CSRF check doesn't run. We enforce it here for private routes.\n\t\t// Token-authed requests (which set tokenScopes) are exempt — tokens aren't\n\t\t// ambient credentials like cookies.\n\t\tif (\n\t\t\t![\"GET\", \"HEAD\", \"OPTIONS\"].includes(method) &&\n\t\t\t!locals.tokenScopes &&\n\t\t\trequest.headers.get(\"X-EmDash-Request\") !== \"1\"\n\t\t) {\n\t\t\treturn apiError(\"CSRF_REJECTED\", \"Missing required header\", 403);\n\t\t}\n\t}\n\n\tconst result = await emdash.handlePluginApiRoute(pluginId, method, `/${path}`, request);\n\n\tif (!result.success) {\n\t\tconst code = result.error?.code ?? \"PLUGIN_ERROR\";\n\t\t// Pass through messages from known plugin errors (PluginRouteError),\n\t\t// but mask internal errors (unhandled exceptions) to avoid leaking\n\t\t// database errors, file paths, etc. from sandboxed plugins.\n\t\tconst message =\n\t\t\tcode === \"INTERNAL_ERROR\"\n\t\t\t\t? \"Plugin route error\"\n\t\t\t\t: (result.error?.message ?? \"Plugin route error\");\n\t\t// PluginRouteError status is returned at the top level of the result\n\t\tconst status = (result as { status?: number }).status ?? (code === \"NOT_FOUND\" ? 404 : 400);\n\t\treturn apiError(code, message, status);\n\t}\n\n\treturn apiSuccess(result.data);\n};\n\n// Export handlers for all HTTP methods\nexport const GET = handleRequest;\nexport const POST = handleRequest;\nexport const PUT = handleRequest;\nexport const PATCH = handleRequest;\nexport const DELETE = handleRequest;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAiBA,SAAgB,aAAa,QAAoC,OAAgC;AAEhG,KAAI,CAAC,OAAO,YAAa,QAAO;AAEhC,KAAI,SAAS,OAAO,aAAa,MAAM,CAAE,QAAO;AAEhD,QAAO,IAAI,SACV,KAAK,UAAU,EACd,OAAO;EACN,MAAM;EACN,SAAS,+BAA+B;EACxC,EACD,CAAC,EACF;EAAE,QAAQ;EAAK,SAAS,EAAE,gBAAgB,oBAAoB;EAAE,CAChE;;;;;ACdF,MAAa,YAAY;;;;AAKzB,MAAM,gBAA0B,OAAO,EAAE,QAAQ,SAAS,aAAa;CACtE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,WAAW,OAAO;CACxB,MAAM,OAAO,OAAO,QAAQ;CAC5B,MAAM,SAAS,QAAQ,OAAO,aAAa;AAE3C,KAAI,CAAC,QAAQ,qBACZ,QAAO,SAAS,kBAAkB,yBAAyB,IAAI;CAIhE,MAAM,YAAY,OAAO,mBAAmB,UAAU,IAAI,OAAO;AAEjE,KAAI,CAAC,UACJ,QAAO,SAAS,aAAa,0BAA0B,IAAI;AAI5D,KAAI,CAAC,UAAU,QAAQ;EAKtB,MAAM,SAAS,YAAY,MAHR;GAAC;GAAO;GAAQ;GAAU,CAAC,SAAS,OAAO,GAC3D,iBACA,iBACyC;AAC5C,MAAI,OAAQ,QAAO;EAInB,MAAM,aAAa,aAAa,QAAQ,QAAQ;AAChD,MAAI,WAAY,QAAO;AAOvB,MACC,CAAC;GAAC;GAAO;GAAQ;GAAU,CAAC,SAAS,OAAO,IAC5C,CAAC,OAAO,eACR,QAAQ,QAAQ,IAAI,mBAAmB,KAAK,IAE5C,QAAO,SAAS,iBAAiB,2BAA2B,IAAI;;CAIlE,MAAM,SAAS,MAAM,OAAO,qBAAqB,UAAU,QAAQ,IAAI,QAAQ,QAAQ;AAEvF,KAAI,CAAC,OAAO,SAAS;EACpB,MAAM,OAAO,OAAO,OAAO,QAAQ;AAUnC,SAAO,SAAS,MALf,SAAS,mBACN,uBACC,OAAO,OAAO,WAAW,sBAEd,OAA+B,WAAW,SAAS,cAAc,MAAM,KACjD;;AAGvC,QAAO,WAAW,OAAO,KAAK;;AAI/B,MAAa,MAAM;AACnB,MAAa,OAAO;AACpB,MAAa,MAAM;AACnB,MAAa,QAAQ;AACrB,MAAa,SAAS"}
+{"version":3,"file":"_...path_.mjs","names":[],"sources":["../../../../../../src/auth/scopes.ts","../../../../../../src/astro/routes/api/plugins/[pluginId]/[...path].ts"],"sourcesContent":["/**\n * Scope enforcement for API token authentication.\n *\n * Routes call `requireScope(locals, \"content:write\")` alongside role checks.\n * Session-authenticated requests have no scope restrictions (implicit full access).\n * Token-authenticated requests must have the required scope (or \"admin\").\n */\n\nimport { hasScope } from \"./api-tokens.js\";\n\n/**\n * Check if the request has a required scope.\n * Returns a 403 Response if the scope is missing, or null if OK.\n *\n * For session-authenticated users (no tokenScopes), always returns null\n * since session auth has implicit full scope.\n */\nexport function requireScope(locals: { tokenScopes?: string[] }, scope: string): Response | null {\n\t// Session auth = no scope restrictions\n\tif (!locals.tokenScopes) return null;\n\n\tif (hasScope(locals.tokenScopes, scope)) return null;\n\n\treturn new Response(\n\t\tJSON.stringify({\n\t\t\terror: {\n\t\t\t\tcode: \"INSUFFICIENT_SCOPE\",\n\t\t\t\tmessage: `Token lacks required scope: ${scope}`,\n\t\t\t},\n\t\t}),\n\t\t{ status: 403, headers: { \"Content-Type\": \"application/json\" } },\n\t);\n}\n","/**\n * Plugin API routes - dynamic handler for plugin-defined endpoints\n *\n * Routes are mounted at /_emdash/api/plugins/{pluginId}/*\n * Plugins register routes like \"POST /do-something\" which becomes\n * POST /_emdash/api/plugins/{pluginId}/do-something\n *\n * Routes marked as `public: true` skip authentication and CSRF checks.\n * Private routes (the default) require authentication and appropriate permissions.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess } from \"#api/error.js\";\nimport { requireScope } from \"#auth/scopes.js\";\n\nexport const prerender = false;\n\n/**\n * Handle all methods by matching against plugin-defined routes\n */\nconst handleRequest: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst pluginId = params.pluginId!;\n\tconst path = params.path || \"\";\n\tconst method = request.method.toUpperCase();\n\n\tif (!emdash?.handlePluginApiRoute) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash not configured\", 500);\n\t}\n\n\t// Resolve route metadata to decide auth before dispatch\n\tconst routeMeta = emdash.getPluginRouteMeta(pluginId, `/${path}`);\n\n\tif (!routeMeta) {\n\t\treturn apiError(\"NOT_FOUND\", \"Plugin route not found\", 404);\n\t}\n\n\t// Public routes skip auth, CSRF, and scope checks entirely\n\tif (!routeMeta.public) {\n\t\t// Plugin routes are dispatched by name only — the HTTP method never\n\t\t// selects a different handler, so a route reached via GET or HEAD runs\n\t\t// exactly the same code (and side effects) as one reached via POST.\n\t\t// Method-based tiering is therefore unsafe: gating GET/HEAD/OPTIONS on\n\t\t// `plugins:read` with no CSRF let an editor (or a cross-origin page,\n\t\t// since HEAD is CORS-safe) invoke a mutating admin route by choosing the\n\t\t// method (#1853). Astro also dispatches HEAD to the GET export, so no\n\t\t// explicit HEAD handler is needed to reach a \"GET\" route. Gate every\n\t\t// private invocation on `plugins:manage` + CSRF regardless of method.\n\t\tconst denied = requirePerm(user, \"plugins:manage\");\n\t\tif (denied) return denied;\n\n\t\t// Token scope enforcement — plugin routes require \"admin\" scope.\n\t\t// Session auth is implicitly full-access (requireScope returns null).\n\t\tconst scopeError = requireScope(locals, \"admin\");\n\t\tif (scopeError) return scopeError;\n\n\t\t// CSRF protection on private routes. Plugin routes use soft auth in the\n\t\t// middleware (user resolved but not required), so the middleware's CSRF\n\t\t// check doesn't run — enforce it here. Applied to every method because\n\t\t// any method can trigger a state change (see above). Token-authed\n\t\t// requests (which set tokenScopes) are exempt — tokens aren't ambient\n\t\t// credentials like cookies.\n\t\tif (!locals.tokenScopes && request.headers.get(\"X-EmDash-Request\") !== \"1\") {\n\t\t\treturn apiError(\"CSRF_REJECTED\", \"Missing required header\", 403);\n\t\t}\n\t}\n\n\tconst result = await emdash.handlePluginApiRoute(pluginId, method, `/${path}`, request);\n\n\tif (!result.success) {\n\t\tconst code = result.error?.code ?? \"PLUGIN_ERROR\";\n\t\t// Pass through messages from known plugin errors (PluginRouteError),\n\t\t// but mask internal errors (unhandled exceptions) to avoid leaking\n\t\t// database errors, file paths, etc. from sandboxed plugins.\n\t\tconst message =\n\t\t\tcode === \"INTERNAL_ERROR\"\n\t\t\t\t? \"Plugin route error\"\n\t\t\t\t: (result.error?.message ?? \"Plugin route error\");\n\t\t// PluginRouteError status is returned at the top level of the result\n\t\tconst status = (result as { status?: number }).status ?? (code === \"NOT_FOUND\" ? 404 : 400);\n\t\treturn apiError(code, message, status);\n\t}\n\n\treturn apiSuccess(result.data);\n};\n\n// Export handlers for all HTTP methods\nexport const GET = handleRequest;\nexport const POST = handleRequest;\nexport const PUT = handleRequest;\nexport const PATCH = handleRequest;\nexport const DELETE = handleRequest;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAiBA,SAAgB,aAAa,QAAoC,OAAgC;AAEhG,KAAI,CAAC,OAAO,YAAa,QAAO;AAEhC,KAAI,SAAS,OAAO,aAAa,MAAM,CAAE,QAAO;AAEhD,QAAO,IAAI,SACV,KAAK,UAAU,EACd,OAAO;EACN,MAAM;EACN,SAAS,+BAA+B;EACxC,EACD,CAAC,EACF;EAAE,QAAQ;EAAK,SAAS,EAAE,gBAAgB,oBAAoB;EAAE,CAChE;;;;;ACdF,MAAa,YAAY;;;;AAKzB,MAAM,gBAA0B,OAAO,EAAE,QAAQ,SAAS,aAAa;CACtE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,WAAW,OAAO;CACxB,MAAM,OAAO,OAAO,QAAQ;CAC5B,MAAM,SAAS,QAAQ,OAAO,aAAa;AAE3C,KAAI,CAAC,QAAQ,qBACZ,QAAO,SAAS,kBAAkB,yBAAyB,IAAI;CAIhE,MAAM,YAAY,OAAO,mBAAmB,UAAU,IAAI,OAAO;AAEjE,KAAI,CAAC,UACJ,QAAO,SAAS,aAAa,0BAA0B,IAAI;AAI5D,KAAI,CAAC,UAAU,QAAQ;EAUtB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,MAAI,OAAQ,QAAO;EAInB,MAAM,aAAa,aAAa,QAAQ,QAAQ;AAChD,MAAI,WAAY,QAAO;AAQvB,MAAI,CAAC,OAAO,eAAe,QAAQ,QAAQ,IAAI,mBAAmB,KAAK,IACtE,QAAO,SAAS,iBAAiB,2BAA2B,IAAI;;CAIlE,MAAM,SAAS,MAAM,OAAO,qBAAqB,UAAU,QAAQ,IAAI,QAAQ,QAAQ;AAEvF,KAAI,CAAC,OAAO,SAAS;EACpB,MAAM,OAAO,OAAO,OAAO,QAAQ;AAUnC,SAAO,SAAS,MALf,SAAS,mBACN,uBACC,OAAO,OAAO,WAAW,sBAEd,OAA+B,WAAW,SAAS,cAAc,MAAM,KACjD;;AAGvC,QAAO,WAAW,OAAO,KAAK;;AAI/B,MAAa,MAAM;AACnB,MAAa,OAAO;AACpB,MAAa,MAAM;AACnB,MAAa,QAAQ;AACrB,MAAa,SAAS"}

package/dist/astro/routes/api/redirects/404s/index.mjs

@@ -1,16 +1,16 @@
-import "../../../../../dialect-helpers-DRI5pyY3.mjs";
-import "../../../../../base64-CmWvODNW.mjs";
-import "../../../../../types-CuW0zWDA.mjs";
-import "../../../../../options-DTTML-Tx.mjs";
-import "../../../../../redirect-IyfNirgS.mjs";
-import { a as unwrapResult, i as requireDb, r as handleError } from "../../../../../error-CkAseSqZ.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../parse-GmjecGct.mjs";
-import { a as notFoundPruneBody, r as notFoundListQuery } from "../../../../../redirects-DXEXBAII.mjs";
-import "../../../../../byline-fields-2Lp5Hbgf.mjs";
-import "../../../../../status-CqJQX1QN.mjs";
+import "../../../../../dialect-helpers-Cue7QQOR.mjs";
+import "../../../../../base64-C74Msx8h.mjs";
+import "../../../../../types-Ch8pFMEm.mjs";
+import "../../../../../options-BlmBHTvX.mjs";
+import "../../../../../redirect-Ch3E98qZ.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError } from "../../../../../error-CfJMLSkd.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../parse-GLksnn-B.mjs";
+import { a as notFoundPruneBody, r as notFoundListQuery } from "../../../../../redirects-CeD7K7EX.mjs";
+import "../../../../../relations-BmBmX4Eb.mjs";
+import "../../../../../status-D3Gy1Zc6.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { n as requirePerm } from "../../../../../authorize-Dz88F_Fw.mjs";
-import { n as handleNotFoundList, r as handleNotFoundPrune, t as handleNotFoundClear } from "../../../../../redirects-Bs1g42Ri.mjs";
+import { n as requirePerm } from "../../../../../authorize-BmCwQCib.mjs";
+import { n as handleNotFoundList, r as handleNotFoundPrune, t as handleNotFoundClear } from "../../../../../redirects-CXmVGRNZ.mjs";
 
 //#region src/astro/routes/api/redirects/404s/index.ts
 const prerender = false;

package/dist/astro/routes/api/redirects/404s/summary.mjs

@@ -1,16 +1,16 @@
-import "../../../../../dialect-helpers-DRI5pyY3.mjs";
-import "../../../../../base64-CmWvODNW.mjs";
-import "../../../../../types-CuW0zWDA.mjs";
-import "../../../../../options-DTTML-Tx.mjs";
-import "../../../../../redirect-IyfNirgS.mjs";
-import { a as unwrapResult, i as requireDb, r as handleError } from "../../../../../error-CkAseSqZ.mjs";
-import { i as parseQuery, t as isParseError } from "../../../../../parse-GmjecGct.mjs";
-import { o as notFoundSummaryQuery } from "../../../../../redirects-DXEXBAII.mjs";
-import "../../../../../byline-fields-2Lp5Hbgf.mjs";
-import "../../../../../status-CqJQX1QN.mjs";
+import "../../../../../dialect-helpers-Cue7QQOR.mjs";
+import "../../../../../base64-C74Msx8h.mjs";
+import "../../../../../types-Ch8pFMEm.mjs";
+import "../../../../../options-BlmBHTvX.mjs";
+import "../../../../../redirect-Ch3E98qZ.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError } from "../../../../../error-CfJMLSkd.mjs";
+import { i as parseQuery, t as isParseError } from "../../../../../parse-GLksnn-B.mjs";
+import { o as notFoundSummaryQuery } from "../../../../../redirects-CeD7K7EX.mjs";
+import "../../../../../relations-BmBmX4Eb.mjs";
+import "../../../../../status-D3Gy1Zc6.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { n as requirePerm } from "../../../../../authorize-Dz88F_Fw.mjs";
-import { i as handleNotFoundSummary } from "../../../../../redirects-Bs1g42Ri.mjs";
+import { n as requirePerm } from "../../../../../authorize-BmCwQCib.mjs";
+import { i as handleNotFoundSummary } from "../../../../../redirects-CXmVGRNZ.mjs";
 
 //#region src/astro/routes/api/redirects/404s/summary.ts
 const prerender = false;

package/dist/astro/routes/api/redirects/_id_.mjs

@@ -1,17 +1,17 @@
-import "../../../../dialect-helpers-DRI5pyY3.mjs";
-import "../../../../base64-CmWvODNW.mjs";
-import "../../../../types-CuW0zWDA.mjs";
-import "../../../../options-DTTML-Tx.mjs";
-import "../../../../redirect-IyfNirgS.mjs";
-import { r as invalidateRedirectCache } from "../../../../cache-CEBAZjir.mjs";
-import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../error-CkAseSqZ.mjs";
-import { n as parseBody, t as isParseError } from "../../../../parse-GmjecGct.mjs";
-import { f as updateRedirectBody } from "../../../../redirects-DXEXBAII.mjs";
-import "../../../../byline-fields-2Lp5Hbgf.mjs";
-import "../../../../status-CqJQX1QN.mjs";
+import "../../../../dialect-helpers-Cue7QQOR.mjs";
+import "../../../../base64-C74Msx8h.mjs";
+import "../../../../types-Ch8pFMEm.mjs";
+import "../../../../options-BlmBHTvX.mjs";
+import "../../../../redirect-Ch3E98qZ.mjs";
+import { r as invalidateRedirectCache } from "../../../../cache-BeR7RfN8.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../error-CfJMLSkd.mjs";
+import { n as parseBody, t as isParseError } from "../../../../parse-GLksnn-B.mjs";
+import { f as updateRedirectBody } from "../../../../redirects-CeD7K7EX.mjs";
+import "../../../../relations-BmBmX4Eb.mjs";
+import "../../../../status-D3Gy1Zc6.mjs";
 import "../../../../api/schemas/index.mjs";
-import { n as requirePerm } from "../../../../authorize-Dz88F_Fw.mjs";
-import { l as handleRedirectUpdate, o as handleRedirectDelete, s as handleRedirectGet } from "../../../../redirects-Bs1g42Ri.mjs";
+import { n as requirePerm } from "../../../../authorize-BmCwQCib.mjs";
+import { l as handleRedirectUpdate, o as handleRedirectDelete, s as handleRedirectGet } from "../../../../redirects-CXmVGRNZ.mjs";
 
 //#region src/astro/routes/api/redirects/[id].ts
 const prerender = false;

package/dist/astro/routes/api/redirects/index.mjs

@@ -1,17 +1,17 @@
-import "../../../../dialect-helpers-DRI5pyY3.mjs";
-import "../../../../base64-CmWvODNW.mjs";
-import "../../../../types-CuW0zWDA.mjs";
-import "../../../../options-DTTML-Tx.mjs";
-import "../../../../redirect-IyfNirgS.mjs";
-import { r as invalidateRedirectCache } from "../../../../cache-CEBAZjir.mjs";
-import { a as unwrapResult, i as requireDb, r as handleError } from "../../../../error-CkAseSqZ.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-GmjecGct.mjs";
-import { d as redirectsListQuery, t as createRedirectBody } from "../../../../redirects-DXEXBAII.mjs";
-import "../../../../byline-fields-2Lp5Hbgf.mjs";
-import "../../../../status-CqJQX1QN.mjs";
+import "../../../../dialect-helpers-Cue7QQOR.mjs";
+import "../../../../base64-C74Msx8h.mjs";
+import "../../../../types-Ch8pFMEm.mjs";
+import "../../../../options-BlmBHTvX.mjs";
+import "../../../../redirect-Ch3E98qZ.mjs";
+import { r as invalidateRedirectCache } from "../../../../cache-BeR7RfN8.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError } from "../../../../error-CfJMLSkd.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-GLksnn-B.mjs";
+import { d as redirectsListQuery, t as createRedirectBody } from "../../../../redirects-CeD7K7EX.mjs";
+import "../../../../relations-BmBmX4Eb.mjs";
+import "../../../../status-D3Gy1Zc6.mjs";
 import "../../../../api/schemas/index.mjs";
-import { n as requirePerm } from "../../../../authorize-Dz88F_Fw.mjs";
-import { a as handleRedirectCreate, c as handleRedirectList } from "../../../../redirects-Bs1g42Ri.mjs";
+import { n as requirePerm } from "../../../../authorize-BmCwQCib.mjs";
+import { a as handleRedirectCreate, c as handleRedirectList } from "../../../../redirects-CXmVGRNZ.mjs";
 
 //#region src/astro/routes/api/redirects/index.ts
 const prerender = false;

package/dist/astro/routes/api/relations/_id_/index.d.mts

@@ -0,0 +1,10 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/relations/[id]/index.d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+declare const PATCH: APIRoute;
+declare const DELETE: APIRoute;
+//#endregion
+export { DELETE, GET, PATCH, prerender };
+//# sourceMappingURL=index.d.mts.map

package/dist/astro/routes/api/relations/_id_/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/relations/[id]/index.ts"],"mappings":";;;cAoBa,SAAA;AAAA,cAEA,GAAA,EAAK,QAAA;AAAA,cAoBL,KAAA,EAAO,QAAA;AAAA,cAuBP,MAAA,EAAQ,QAAA"}

package/dist/astro/routes/api/relations/_id_/index.mjs

@@ -0,0 +1,69 @@
+import "../../../../../dialect-helpers-Cue7QQOR.mjs";
+import "../../../../../after-B1IIdH3Y.mjs";
+import "../../../../../object-cache-Bok5j2ae.mjs";
+import "../../../../../content-BO61Sx4j.mjs";
+import "../../../../../base64-C74Msx8h.mjs";
+import "../../../../../types-Ch8pFMEm.mjs";
+import "../../../../../relation-Ba68Tm4Z.mjs";
+import "../../../../../fts-manager-BD9s77qh.mjs";
+import "../../../../../content-refresh-BkkApzeS.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../../error-CfJMLSkd.mjs";
+import "../../../../../registry-CyIXPi4E.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-GLksnn-B.mjs";
+import "../../../../../redirects-CeD7K7EX.mjs";
+import { u as updateRelationBody } from "../../../../../relations-BmBmX4Eb.mjs";
+import "../../../../../status-D3Gy1Zc6.mjs";
+import "../../../../../api/schemas/index.mjs";
+import { n as requirePerm } from "../../../../../authorize-BmCwQCib.mjs";
+import { a as handleRelationDelete, l as handleRelationUpdate, o as handleRelationGet } from "../../../../../relations-C8hVyEy0.mjs";
+
+//#region src/astro/routes/api/relations/[id]/index.ts
+const prerender = false;
+const GET = async ({ params, locals }) => {
+	const { emdash, user } = locals;
+	const { id } = params;
+	const dbErr = requireDb(emdash?.db);
+	if (dbErr) return dbErr;
+	const denied = requirePerm(user, "schema:read");
+	if (denied) return denied;
+	if (!id) return apiError("VALIDATION_ERROR", "Relation id required", 400);
+	try {
+		return unwrapResult(await handleRelationGet(emdash.db, id));
+	} catch (error) {
+		return handleError(error, "Failed to get relation", "RELATION_GET_ERROR");
+	}
+};
+const PATCH = async ({ params, request, locals }) => {
+	const { emdash, user } = locals;
+	const { id } = params;
+	const dbErr = requireDb(emdash?.db);
+	if (dbErr) return dbErr;
+	const denied = requirePerm(user, "schema:manage");
+	if (denied) return denied;
+	if (!id) return apiError("VALIDATION_ERROR", "Relation id required", 400);
+	try {
+		const body = await parseBody(request, updateRelationBody);
+		if (isParseError(body)) return body;
+		return unwrapResult(await handleRelationUpdate(emdash.db, id, body));
+	} catch (error) {
+		return handleError(error, "Failed to update relation", "RELATION_UPDATE_ERROR");
+	}
+};
+const DELETE = async ({ params, locals }) => {
+	const { emdash, user } = locals;
+	const { id } = params;
+	const dbErr = requireDb(emdash?.db);
+	if (dbErr) return dbErr;
+	const denied = requirePerm(user, "schema:manage");
+	if (denied) return denied;
+	if (!id) return apiError("VALIDATION_ERROR", "Relation id required", 400);
+	try {
+		return unwrapResult(await handleRelationDelete(emdash.db, id));
+	} catch (error) {
+		return handleError(error, "Failed to delete relation", "RELATION_DELETE_ERROR");
+	}
+};
+
+//#endregion
+export { DELETE, GET, PATCH, prerender };
+//# sourceMappingURL=index.mjs.map

package/dist/astro/routes/api/relations/_id_/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/relations/[id]/index.ts"],"sourcesContent":["/**\n * Single relation definition endpoint\n *\n * GET    /_emdash/api/relations/:id - Get a relation\n * PATCH  /_emdash/api/relations/:id - Update a relation's labels\n * DELETE /_emdash/api/relations/:id - Delete a relation\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport {\n\thandleRelationDelete,\n\thandleRelationGet,\n\thandleRelationUpdate,\n} from \"#api/handlers/relations.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { updateRelationBody } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"schema:read\");\n\tif (denied) return denied;\n\n\tif (!id) return apiError(\"VALIDATION_ERROR\", \"Relation id required\", 400);\n\n\ttry {\n\t\tconst result = await handleRelationGet(emdash.db, id);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to get relation\", \"RELATION_GET_ERROR\");\n\t}\n};\n\nexport const PATCH: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"schema:manage\");\n\tif (denied) return denied;\n\n\tif (!id) return apiError(\"VALIDATION_ERROR\", \"Relation id required\", 400);\n\n\ttry {\n\t\tconst body = await parseBody(request, updateRelationBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleRelationUpdate(emdash.db, id, body);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update relation\", \"RELATION_UPDATE_ERROR\");\n\t}\n};\n\nexport const DELETE: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"schema:manage\");\n\tif (denied) return denied;\n\n\tif (!id) return apiError(\"VALIDATION_ERROR\", \"Relation id required\", 400);\n\n\ttry {\n\t\tconst result = await handleRelationDelete(emdash.db, id);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to delete relation\", \"RELATION_DELETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAoBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAEf,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,cAAc;AAC/C,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,GAAI,QAAO,SAAS,oBAAoB,wBAAwB,IAAI;AAEzE,KAAI;AAEH,SAAO,aADQ,MAAM,kBAAkB,OAAO,IAAI,GAAG,CAC1B;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,0BAA0B,qBAAqB;;;AAI3E,MAAa,QAAkB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACrE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAEf,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,gBAAgB;AACjD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,GAAI,QAAO,SAAS,oBAAoB,wBAAwB,IAAI;AAEzE,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,mBAAmB;AACzD,MAAI,aAAa,KAAK,CAAE,QAAO;AAG/B,SAAO,aADQ,MAAM,qBAAqB,OAAO,IAAI,IAAI,KAAK,CACnC;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,6BAA6B,wBAAwB;;;AAIjF,MAAa,SAAmB,OAAO,EAAE,QAAQ,aAAa;CAC7D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAEf,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,gBAAgB;AACjD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,GAAI,QAAO,SAAS,oBAAoB,wBAAwB,IAAI;AAEzE,KAAI;AAEH,SAAO,aADQ,MAAM,qBAAqB,OAAO,IAAI,GAAG,CAC7B;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,6BAA6B,wBAAwB"}

package/dist/astro/routes/api/relations/_id_/translations.d.mts

@@ -0,0 +1,8 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/relations/[id]/translations.d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+//#endregion
+export { GET, prerender };
+//# sourceMappingURL=translations.d.mts.map

package/dist/astro/routes/api/relations/_id_/translations.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"translations.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/relations/[id]/translations.ts"],"mappings":";;;cAYa,SAAA;AAAA,cAEA,GAAA,EAAK,QAAA"}

package/dist/astro/routes/api/relations/_id_/translations.mjs

@@ -0,0 +1,34 @@
+import "../../../../../dialect-helpers-Cue7QQOR.mjs";
+import "../../../../../after-B1IIdH3Y.mjs";
+import "../../../../../object-cache-Bok5j2ae.mjs";
+import "../../../../../content-BO61Sx4j.mjs";
+import "../../../../../base64-C74Msx8h.mjs";
+import "../../../../../types-Ch8pFMEm.mjs";
+import "../../../../../relation-Ba68Tm4Z.mjs";
+import "../../../../../fts-manager-BD9s77qh.mjs";
+import "../../../../../content-refresh-BkkApzeS.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../../error-CfJMLSkd.mjs";
+import "../../../../../registry-CyIXPi4E.mjs";
+import { n as requirePerm } from "../../../../../authorize-BmCwQCib.mjs";
+import { c as handleRelationTranslations } from "../../../../../relations-C8hVyEy0.mjs";
+
+//#region src/astro/routes/api/relations/[id]/translations.ts
+const prerender = false;
+const GET = async ({ params, locals }) => {
+	const { emdash, user } = locals;
+	const { id } = params;
+	const dbErr = requireDb(emdash?.db);
+	if (dbErr) return dbErr;
+	const denied = requirePerm(user, "schema:read");
+	if (denied) return denied;
+	if (!id) return apiError("VALIDATION_ERROR", "Relation id required", 400);
+	try {
+		return unwrapResult(await handleRelationTranslations(emdash.db, id));
+	} catch (error) {
+		return handleError(error, "Failed to get translations", "RELATION_TRANSLATIONS_ERROR");
+	}
+};
+
+//#endregion
+export { GET, prerender };
+//# sourceMappingURL=translations.mjs.map

package/dist/astro/routes/api/relations/_id_/translations.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"translations.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/relations/[id]/translations.ts"],"sourcesContent":["/**\n * Relation translations endpoint\n *\n * GET /_emdash/api/relations/:id/translations - List locale siblings of a relation\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport { handleRelationTranslations } from \"#api/handlers/relations.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"schema:read\");\n\tif (denied) return denied;\n\n\tif (!id) return apiError(\"VALIDATION_ERROR\", \"Relation id required\", 400);\n\n\ttry {\n\t\tconst result = await handleRelationTranslations(emdash.db, id);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to get translations\", \"RELATION_TRANSLATIONS_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;AAYA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAEf,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,cAAc;AAC/C,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,GAAI,QAAO,SAAS,oBAAoB,wBAAwB,IAAI;AAEzE,KAAI;AAEH,SAAO,aADQ,MAAM,2BAA2B,OAAO,IAAI,GAAG,CACnC;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,8BAA8B,8BAA8B"}

package/dist/astro/routes/api/relations/index.d.mts

@@ -0,0 +1,9 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/relations/index.d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+declare const POST: APIRoute;
+//#endregion
+export { GET, POST, prerender };
+//# sourceMappingURL=index.d.mts.map

package/dist/astro/routes/api/relations/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../../src/astro/routes/api/relations/index.ts"],"mappings":";;;cAea,SAAA;AAAA,cAEA,GAAA,EAAK,QAAA;AAAA,cAoBL,IAAA,EAAM,QAAA"}

package/dist/astro/routes/api/relations/index.mjs

@@ -0,0 +1,53 @@
+import "../../../../dialect-helpers-Cue7QQOR.mjs";
+import "../../../../after-B1IIdH3Y.mjs";
+import "../../../../object-cache-Bok5j2ae.mjs";
+import "../../../../content-BO61Sx4j.mjs";
+import "../../../../base64-C74Msx8h.mjs";
+import "../../../../types-Ch8pFMEm.mjs";
+import "../../../../relation-Ba68Tm4Z.mjs";
+import "../../../../fts-manager-BD9s77qh.mjs";
+import "../../../../content-refresh-BkkApzeS.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError } from "../../../../error-CfJMLSkd.mjs";
+import "../../../../registry-CyIXPi4E.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-GLksnn-B.mjs";
+import { zn as localeFilterQuery } from "../../../../redirects-CeD7K7EX.mjs";
+import { t as createRelationBody } from "../../../../relations-BmBmX4Eb.mjs";
+import "../../../../status-D3Gy1Zc6.mjs";
+import "../../../../api/schemas/index.mjs";
+import { n as requirePerm } from "../../../../authorize-BmCwQCib.mjs";
+import { i as handleRelationCreate, s as handleRelationList } from "../../../../relations-C8hVyEy0.mjs";
+
+//#region src/astro/routes/api/relations/index.ts
+const prerender = false;
+const GET = async ({ request, locals }) => {
+	const { emdash, user } = locals;
+	const dbErr = requireDb(emdash?.db);
+	if (dbErr) return dbErr;
+	const denied = requirePerm(user, "schema:read");
+	if (denied) return denied;
+	const query = parseQuery(new URL(request.url), localeFilterQuery);
+	if (isParseError(query)) return query;
+	try {
+		return unwrapResult(await handleRelationList(emdash.db, { locale: query.locale }));
+	} catch (error) {
+		return handleError(error, "Failed to list relations", "RELATION_LIST_ERROR");
+	}
+};
+const POST = async ({ request, locals }) => {
+	const { emdash, user } = locals;
+	const dbErr = requireDb(emdash?.db);
+	if (dbErr) return dbErr;
+	const denied = requirePerm(user, "schema:manage");
+	if (denied) return denied;
+	try {
+		const body = await parseBody(request, createRelationBody);
+		if (isParseError(body)) return body;
+		return unwrapResult(await handleRelationCreate(emdash.db, body), 201);
+	} catch (error) {
+		return handleError(error, "Failed to create relation", "RELATION_CREATE_ERROR");
+	}
+};
+
+//#endregion
+export { GET, POST, prerender };
+//# sourceMappingURL=index.mjs.map

package/dist/astro/routes/api/relations/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../src/astro/routes/api/relations/index.ts"],"sourcesContent":["/**\n * Relation definitions endpoint\n *\n * GET  /_emdash/api/relations[?locale=xx] - List relation definitions\n * POST /_emdash/api/relations              - Create a relation definition\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport { handleRelationCreate, handleRelationList } from \"#api/handlers/relations.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { createRelationBody, localeFilterQuery } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"schema:read\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst result = await handleRelationList(emdash.db, { locale: query.locale });\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to list relations\", \"RELATION_LIST_ERROR\");\n\t}\n};\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"schema:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst body = await parseBody(request, createRelationBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleRelationCreate(emdash.db, body);\n\t\treturn unwrapResult(result, 201);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create relation\", \"RELATION_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAeA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,SAAS,aAAa;CAC3D,MAAM,EAAE,QAAQ,SAAS;CAEzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,cAAc;AAC/C,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACjE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;AAEH,SAAO,aADQ,MAAM,mBAAmB,OAAO,IAAI,EAAE,QAAQ,MAAM,QAAQ,CAAC,CACjD;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,4BAA4B,sBAAsB;;;AAI9E,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,QAAQ,SAAS;CAEzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,gBAAgB;AACjD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,mBAAmB;AACzD,MAAI,aAAa,KAAK,CAAE,QAAO;AAG/B,SAAO,aADQ,MAAM,qBAAqB,OAAO,IAAI,KAAK,EAC9B,IAAI;UACxB,OAAO;AACf,SAAO,YAAY,OAAO,6BAA6B,wBAAwB"}

package/dist/astro/routes/api/revisions/_revisionId_/index.mjs

@@ -1,7 +1,7 @@
-import "../../../../../base64-CmWvODNW.mjs";
-import "../../../../../types-CuW0zWDA.mjs";
-import { a as unwrapResult, t as apiError } from "../../../../../error-CkAseSqZ.mjs";
-import { n as requirePerm } from "../../../../../authorize-Dz88F_Fw.mjs";
+import "../../../../../base64-C74Msx8h.mjs";
+import "../../../../../types-Ch8pFMEm.mjs";
+import { a as unwrapResult, t as apiError } from "../../../../../error-CfJMLSkd.mjs";
+import { n as requirePerm } from "../../../../../authorize-BmCwQCib.mjs";
 
 //#region src/astro/routes/api/revisions/[revisionId]/index.ts
 const prerender = false;

package/dist/astro/routes/api/revisions/_revisionId_/restore.mjs

@@ -1,7 +1,7 @@
-import "../../../../../base64-CmWvODNW.mjs";
-import "../../../../../types-CuW0zWDA.mjs";
-import { a as unwrapResult, o as mapErrorStatus, t as apiError } from "../../../../../error-CkAseSqZ.mjs";
-import { t as requireOwnerPerm } from "../../../../../authorize-Dz88F_Fw.mjs";
+import "../../../../../base64-C74Msx8h.mjs";
+import "../../../../../types-Ch8pFMEm.mjs";
+import { a as unwrapResult, s as mapErrorStatus, t as apiError } from "../../../../../error-CfJMLSkd.mjs";
+import { t as requireOwnerPerm } from "../../../../../authorize-BmCwQCib.mjs";
 
 //#region src/astro/routes/api/revisions/[revisionId]/restore.ts
 const prerender = false;

package/dist/astro/routes/api/schema/collections/_slug_/fields/_fieldSlug_.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"_fieldSlug_.d.mts","names":[],"sources":["../../../../../../../../src/astro/routes/api/schema/collections/[slug]/fields/[fieldSlug].ts"],"mappings":";;;cAqBa,SAAA;AAAA,cAEA,GAAA,EAAK,QAAA;AAAA,cAeL,GAAA,EAAK,QAAA;AAAA,cAwBL,MAAA,EAAQ,QAAA"}
+{"version":3,"file":"_fieldSlug_.d.mts","names":[],"sources":["../../../../../../../../src/astro/routes/api/schema/collections/[slug]/fields/[fieldSlug].ts"],"mappings":";;;cAoBa,SAAA;AAAA,cAEA,GAAA,EAAK,QAAA;AAAA,cAeL,GAAA,EAAK,QAAA;AAAA,cAmBL,MAAA,EAAQ,QAAA"}

package/dist/astro/routes/api/schema/collections/_slug_/fields/_fieldSlug_.mjs

@@ -1,46 +1,48 @@
-import "../../../../../../../dialect-helpers-DRI5pyY3.mjs";
+import "../../../../../../../dialect-helpers-Cue7QQOR.mjs";
 import "../../../../../../../after-B1IIdH3Y.mjs";
 import "../../../../../../../object-cache-Bok5j2ae.mjs";
-import "../../../../../../../content-DhgEth4k.mjs";
-import "../../../../../../../base64-CmWvODNW.mjs";
-import "../../../../../../../types-CuW0zWDA.mjs";
-import "../../../../../../../media-BrXIaMFN.mjs";
-import "../../../../../../../user-BjAOvU3Z.mjs";
-import "../../../../../../../taxonomy-BxGxZZdu.mjs";
-import "../../../../../../../comment-CzeatwBV.mjs";
-import "../../../../../../../options-DTTML-Tx.mjs";
-import "../../../../../../../menus-Cfivc2Ad.mjs";
-import "../../../../../../../redirect-IyfNirgS.mjs";
-import "../../../../../../../request-cache-KCNHp_RJ.mjs";
-import "../../../../../../../byline-registry-BOjqDOim.mjs";
-import "../../../../../../../field-defs-cache-WUI88LX5.mjs";
-import "../../../../../../../byline-Bm8ZgUP9.mjs";
-import "../../../../../../../seo-DXu2UQnC.mjs";
-import { F as handleSchemaFieldUpdate, M as handleSchemaFieldGet, j as handleSchemaFieldDelete } from "../../../../../../../api-BFURZn1i.mjs";
-import "../../../../../../../dashboard-EvEKF5en.mjs";
-import "../../../../../../../content-refresh-CA4uKwzH.mjs";
-import "../../../../../../../fts-manager-BbFaF_V8.mjs";
-import "../../../../../../../registry-B65mUtPa.mjs";
-import "../../../../../../../loader-CB6YHeul.mjs";
-import "../../../../../../../schema-Blhoxp3P.mjs";
-import "../../../../../../../zod-generator-CacrR-i8.mjs";
-import "../../../../../../../seo-89-53DDs.mjs";
-import "../../../../../../../sections-CpF5SaGr.mjs";
-import "../../../../../../../settings-zhmdKyJQ.mjs";
-import "../../../../../../../settings-rZyHEcNT.mjs";
-import "../../../../../../../resolve-DR3wqMTy.mjs";
-import "../../../../../../../taxonomies-Cnb4F-Pb.mjs";
-import "../../../../../../../taxonomies-BGBd16Eu.mjs";
-import "../../../../../../../manifest-schema-BHlgZM1W.mjs";
-import "../../../../../../../types-DROWRxYV.mjs";
-import "../../../../../../../ssrf-1g7usGBg.mjs";
-import { a as unwrapResult, i as requireDb } from "../../../../../../../error-CkAseSqZ.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../../../parse-GmjecGct.mjs";
-import { zt as updateFieldBody } from "../../../../../../../redirects-DXEXBAII.mjs";
-import "../../../../../../../byline-fields-2Lp5Hbgf.mjs";
-import "../../../../../../../status-CqJQX1QN.mjs";
+import "../../../../../../../content-BO61Sx4j.mjs";
+import "../../../../../../../base64-C74Msx8h.mjs";
+import "../../../../../../../types-Ch8pFMEm.mjs";
+import "../../../../../../../media-D2ZFowpn.mjs";
+import "../../../../../../../user-DTxX_Fha.mjs";
+import "../../../../../../../taxonomy-BkxbUMSw.mjs";
+import "../../../../../../../comment-SWh31kS0.mjs";
+import "../../../../../../../options-BlmBHTvX.mjs";
+import "../../../../../../../menus-BpfevlJD.mjs";
+import "../../../../../../../redirect-Ch3E98qZ.mjs";
+import "../../../../../../../request-cache-BSUptuJR.mjs";
+import "../../../../../../../byline-registry-BCuOp4UF.mjs";
+import "../../../../../../../field-defs-cache-BVrNCgSj.mjs";
+import "../../../../../../../byline-BWb5H-65.mjs";
+import "../../../../../../../seo-BLm6SXzS.mjs";
+import "../../../../../../../fts-manager-BD9s77qh.mjs";
+import "../../../../../../../resolve-Cd9dzclN.mjs";
+import "../../../../../../../loader-Rb8QlGZp.mjs";
+import "../../../../../../../taxonomies-pUkuD6nj.mjs";
+import { F as handleSchemaFieldUpdate, M as handleSchemaFieldGet, j as handleSchemaFieldDelete } from "../../../../../../../api-DVbHNApo.mjs";
+import "../../../../../../../dashboard-xo_gPs_D.mjs";
+import "../../../../../../../content-refresh-BkkApzeS.mjs";
+import "../../../../../../../media-usage-B__v9NMm.mjs";
+import { a as unwrapResult, i as requireDb } from "../../../../../../../error-CfJMLSkd.mjs";
+import "../../../../../../../registry-CyIXPi4E.mjs";
+import "../../../../../../../query-BxT95opY.mjs";
+import "../../../../../../../zod-generator-CrfV79De.mjs";
+import "../../../../../../../schema-DwjufZ1S.mjs";
+import "../../../../../../../seo-BjrbXAd_.mjs";
+import "../../../../../../../sections-DTKzgoiS.mjs";
+import "../../../../../../../settings-BuQYvLfy.mjs";
+import "../../../../../../../settings-CmS3TwXf.mjs";
+import "../../../../../../../taxonomies-ClS4RKaZ.mjs";
+import "../../../../../../../manifest-schema-DeGNma2O.mjs";
+import "../../../../../../../types-DeCZBZxn.mjs";
+import "../../../../../../../ssrf-TrKYJAy0.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../../../parse-GLksnn-B.mjs";
+import { zt as updateFieldBody } from "../../../../../../../redirects-CeD7K7EX.mjs";
+import "../../../../../../../relations-BmBmX4Eb.mjs";
+import "../../../../../../../status-D3Gy1Zc6.mjs";
 import "../../../../../../../api/schemas/index.mjs";
-import { n as requirePerm } from "../../../../../../../authorize-Dz88F_Fw.mjs";
+import { n as requirePerm } from "../../../../../../../authorize-BmCwQCib.mjs";
 
 //#region src/astro/routes/api/schema/collections/[slug]/fields/[fieldSlug].ts
 const prerender = false;

package/dist/astro/routes/api/schema/collections/_slug_/fields/_fieldSlug_.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"_fieldSlug_.mjs","names":[],"sources":["../../../../../../../../src/astro/routes/api/schema/collections/[slug]/fields/[fieldSlug].ts"],"sourcesContent":["/**\n * Schema field CRUD endpoints\n *\n * GET    /_emdash/api/schema/collections/{slug}/fields/{fieldSlug} - Get field\n * PUT    /_emdash/api/schema/collections/{slug}/fields/{fieldSlug} - Update field\n * DELETE /_emdash/api/schema/collections/{slug}/fields/{fieldSlug} - Delete field\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { requireDb, unwrapResult } from \"#api/error.js\";\nimport {\n\thandleSchemaFieldGet,\n\thandleSchemaFieldUpdate,\n\thandleSchemaFieldDelete,\n} from \"#api/index.js\";\nimport { parseBody, isParseError } from \"#api/parse.js\";\nimport { updateFieldBody } from \"#api/schemas.js\";\nimport type { UpdateFieldInput } from \"#schema/types.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst collectionSlug = params.slug!;\n\tconst fieldSlug = params.fieldSlug!;\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"schema:read\");\n\tif (denied) return denied;\n\n\tconst result = await handleSchemaFieldGet(emdash.db, collectionSlug, fieldSlug);\n\treturn unwrapResult(result);\n};\n\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst collectionSlug = params.slug!;\n\tconst fieldSlug = params.fieldSlug!;\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"schema:manage\");\n\tif (denied) return denied;\n\n\tconst body = await parseBody(request, updateFieldBody);\n\tif (isParseError(body)) return body;\n\n\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- body is Zod-validated via parseBody(request, updateFieldBody) above\n\tconst result = await handleSchemaFieldUpdate(\n\t\temdash.db,\n\t\tcollectionSlug,\n\t\tfieldSlug,\n\t\tbody as UpdateFieldInput,\n\t);\n\treturn unwrapResult(result);\n};\n\nexport const DELETE: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst collectionSlug = params.slug!;\n\tconst fieldSlug = params.fieldSlug!;\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"schema:manage\");\n\tif (denied) return denied;\n\n\tconst result = await handleSchemaFieldDelete(emdash.db, collectionSlug, fieldSlug);\n\treturn unwrapResult(result);\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,iBAAiB,OAAO;CAC9B,MAAM,YAAY,OAAO;CAEzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,cAAc;AAC/C,KAAI,OAAQ,QAAO;AAGnB,QAAO,aADQ,MAAM,qBAAqB,OAAO,IAAI,gBAAgB,UAAU,CACpD;;AAG5B,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,iBAAiB,OAAO;CAC9B,MAAM,YAAY,OAAO;CAEzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,gBAAgB;AACjD,KAAI,OAAQ,QAAO;CAEnB,MAAM,OAAO,MAAM,UAAU,SAAS,gBAAgB;AACtD,KAAI,aAAa,KAAK,CAAE,QAAO;AAS/B,QAAO,aANQ,MAAM,wBACpB,OAAO,IACP,gBACA,WACA,KACA,CAC0B;;AAG5B,MAAa,SAAmB,OAAO,EAAE,QAAQ,aAAa;CAC7D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,iBAAiB,OAAO;CAC9B,MAAM,YAAY,OAAO;CAEzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,gBAAgB;AACjD,KAAI,OAAQ,QAAO;AAGnB,QAAO,aADQ,MAAM,wBAAwB,OAAO,IAAI,gBAAgB,UAAU,CACvD"}
+{"version":3,"file":"_fieldSlug_.mjs","names":[],"sources":["../../../../../../../../src/astro/routes/api/schema/collections/[slug]/fields/[fieldSlug].ts"],"sourcesContent":["/**\n * Schema field CRUD endpoints\n *\n * GET    /_emdash/api/schema/collections/{slug}/fields/{fieldSlug} - Get field\n * PUT    /_emdash/api/schema/collections/{slug}/fields/{fieldSlug} - Update field\n * DELETE /_emdash/api/schema/collections/{slug}/fields/{fieldSlug} - Delete field\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { requireDb, unwrapResult } from \"#api/error.js\";\nimport {\n\thandleSchemaFieldGet,\n\thandleSchemaFieldUpdate,\n\thandleSchemaFieldDelete,\n} from \"#api/index.js\";\nimport { parseBody, isParseError } from \"#api/parse.js\";\nimport { updateFieldBody } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst collectionSlug = params.slug!;\n\tconst fieldSlug = params.fieldSlug!;\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"schema:read\");\n\tif (denied) return denied;\n\n\tconst result = await handleSchemaFieldGet(emdash.db, collectionSlug, fieldSlug);\n\treturn unwrapResult(result);\n};\n\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst collectionSlug = params.slug!;\n\tconst fieldSlug = params.fieldSlug!;\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"schema:manage\");\n\tif (denied) return denied;\n\n\tconst body = await parseBody(request, updateFieldBody);\n\tif (isParseError(body)) return body;\n\n\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- body is Zod-validated via parseBody(request, updateFieldBody) above\n\tconst result = await handleSchemaFieldUpdate(emdash.db, collectionSlug, fieldSlug, body);\n\treturn unwrapResult(result);\n};\n\nexport const DELETE: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst collectionSlug = params.slug!;\n\tconst fieldSlug = params.fieldSlug!;\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"schema:manage\");\n\tif (denied) return denied;\n\n\tconst result = await handleSchemaFieldDelete(emdash.db, collectionSlug, fieldSlug);\n\treturn unwrapResult(result);\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,iBAAiB,OAAO;CAC9B,MAAM,YAAY,OAAO;CAEzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,cAAc;AAC/C,KAAI,OAAQ,QAAO;AAGnB,QAAO,aADQ,MAAM,qBAAqB,OAAO,IAAI,gBAAgB,UAAU,CACpD;;AAG5B,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,iBAAiB,OAAO;CAC9B,MAAM,YAAY,OAAO;CAEzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,gBAAgB;AACjD,KAAI,OAAQ,QAAO;CAEnB,MAAM,OAAO,MAAM,UAAU,SAAS,gBAAgB;AACtD,KAAI,aAAa,KAAK,CAAE,QAAO;AAI/B,QAAO,aADQ,MAAM,wBAAwB,OAAO,IAAI,gBAAgB,WAAW,KAAK,CAC7D;;AAG5B,MAAa,SAAmB,OAAO,EAAE,QAAQ,aAAa;CAC7D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,iBAAiB,OAAO;CAC9B,MAAM,YAAY,OAAO;CAEzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,gBAAgB;AACjD,KAAI,OAAQ,QAAO;AAGnB,QAAO,aADQ,MAAM,wBAAwB,OAAO,IAAI,gBAAgB,UAAU,CACvD"}

package/dist/astro/routes/api/schema/collections/_slug_/fields/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../../../../../src/astro/routes/api/schema/collections/[slug]/fields/index.ts"],"mappings":";;;cAgBa,SAAA;AAAA,cAEA,GAAA,EAAK,QAAA;AAAA,cAcL,IAAA,EAAM,QAAA"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../../../../../src/astro/routes/api/schema/collections/[slug]/fields/index.ts"],"mappings":";;;cAea,SAAA;AAAA,cAEA,GAAA,EAAK,QAAA;AAAA,cAcL,IAAA,EAAM,QAAA"}