emdash 0.28.1 → 0.30.0

package/dist/astro/routes/api/admin/plugins/updates.mjs

@@ -1,45 +1,48 @@
-import "../../../../../dialect-helpers-DRI5pyY3.mjs";
+import "../../../../../dialect-helpers-HxEQGl_1.mjs";
 import "../../../../../after-B1IIdH3Y.mjs";
 import "../../../../../object-cache-Bok5j2ae.mjs";
-import "../../../../../content-DhgEth4k.mjs";
-import "../../../../../base64-CmWvODNW.mjs";
-import "../../../../../types-CuW0zWDA.mjs";
-import "../../../../../media-BrXIaMFN.mjs";
-import "../../../../../user-BjAOvU3Z.mjs";
-import "../../../../../taxonomy-BxGxZZdu.mjs";
-import "../../../../../comment-CzeatwBV.mjs";
-import "../../../../../options-DTTML-Tx.mjs";
-import "../../../../../menus-Cfivc2Ad.mjs";
-import "../../../../../redirect-IyfNirgS.mjs";
-import "../../../../../request-cache-KCNHp_RJ.mjs";
-import "../../../../../byline-registry-BOjqDOim.mjs";
-import "../../../../../field-defs-cache-WUI88LX5.mjs";
-import "../../../../../byline-Bm8ZgUP9.mjs";
-import "../../../../../seo-DXu2UQnC.mjs";
-import { a as handleRegistryUpdateCheck, m as handleMarketplaceUpdateCheck } from "../../../../../api-DxFSorgk.mjs";
-import "../../../../../dashboard-EvEKF5en.mjs";
-import "../../../../../content-refresh-Br4gMzh8.mjs";
-import "../../../../../fts-manager-BbFaF_V8.mjs";
-import "../../../../../registry-B57vp_X9.mjs";
-import "../../../../../loader-CB6YHeul.mjs";
-import "../../../../../schema-CX9cfNkZ.mjs";
-import "../../../../../zod-generator-CacrR-i8.mjs";
-import "../../../../../seo-89-53DDs.mjs";
-import "../../../../../sections-CpF5SaGr.mjs";
-import "../../../../../settings-zhmdKyJQ.mjs";
-import "../../../../../settings-rZyHEcNT.mjs";
-import "../../../../../resolve-DR3wqMTy.mjs";
-import "../../../../../taxonomies-kH9ABDUF.mjs";
-import "../../../../../taxonomies-Bs13SN-F.mjs";
-import "../../../../../manifest-schema-BHlgZM1W.mjs";
-import "../../../../../types-DROWRxYV.mjs";
-import "../../../../../ssrf-1g7usGBg.mjs";
-import { t as apiError } from "../../../../../error-CkAseSqZ.mjs";
-import "../../../../../parse-GmjecGct.mjs";
-import "../../../../../redirects-DXEXBAII.mjs";
-import "../../../../../byline-fields-2Lp5Hbgf.mjs";
-import "../../../../../status-CqJQX1QN.mjs";
-import { n as requirePerm } from "../../../../../authorize-Dz88F_Fw.mjs";
+import "../../../../../content-Ci04z2z-.mjs";
+import "../../../../../base64-B-PsqheR.mjs";
+import "../../../../../types-D1iJ3DpO.mjs";
+import "../../../../../media-BjhhENaJ.mjs";
+import "../../../../../user-Bh-L1qo6.mjs";
+import "../../../../../taxonomy-DfVooU4W.mjs";
+import "../../../../../comment-DPT0WKyd.mjs";
+import "../../../../../options-BlmBHTvX.mjs";
+import "../../../../../menus-CZyG6rvx.mjs";
+import "../../../../../redirect-CgLPYflR.mjs";
+import "../../../../../request-cache-BSUptuJR.mjs";
+import "../../../../../byline-registry-BCuOp4UF.mjs";
+import "../../../../../field-defs-cache-DvmlgP-D.mjs";
+import "../../../../../byline-XEjchwzZ.mjs";
+import "../../../../../seo-2cmFHZns.mjs";
+import "../../../../../fts-manager-DzqIBrrW.mjs";
+import "../../../../../resolve-Cd9dzclN.mjs";
+import "../../../../../loader-Be3ouI5L.mjs";
+import "../../../../../taxonomies-DjSKBZpq.mjs";
+import { a as handleRegistryUpdateCheck, m as handleMarketplaceUpdateCheck } from "../../../../../api-b8WIiGU4.mjs";
+import "../../../../../dashboard-C5NkXFbi.mjs";
+import "../../../../../content-refresh-D4khvC0R.mjs";
+import "../../../../../media-usage-CljdO1mc.mjs";
+import "../../../../../registry-FV15nLge.mjs";
+import "../../../../../query-Di7DOmPV.mjs";
+import "../../../../../zod-generator-B5prQ5M4.mjs";
+import "../../../../../schema-BXxlHeAf.mjs";
+import "../../../../../seo-C3GDfT0V.mjs";
+import "../../../../../sections-CwW4s1al.mjs";
+import "../../../../../settings-CpA4lQFt.mjs";
+import "../../../../../settings-C4s8hFQm.mjs";
+import "../../../../../taxonomies-Ce49uIzY.mjs";
+import "../../../../../manifest-schema-bCq54i7F.mjs";
+import "../../../../../types-CK0LxPUQ.mjs";
+import "../../../../../ssrf-CviKqWmq.mjs";
+import { n as apiSuccess, t as apiError } from "../../../../../error-CEGF6UZb.mjs";
+import "../../../../../parse-C_-6klII.mjs";
+import "../../../../../media-kIV1IxFf.mjs";
+import "../../../../../redirects-BBq3n2Rj.mjs";
+import "../../../../../relations-5_avdrN_.mjs";
+import "../../../../../status-COfycGIU.mjs";
+import { r as requirePerm } from "../../../../../authorize-WxsiePzy.mjs";
 
 //#region src/astro/routes/api/admin/plugins/updates.ts
 const prerender = false;
@@ -60,7 +63,7 @@ const GET = async ({ locals }) => {
 	const items = [];
 	if (marketplace?.success) items.push(...marketplace.data.items);
 	if (registry?.success) items.push(...registry.data.items);
-	return Response.json({ data: { items } });
+	return apiSuccess({ items });
 };
 
 //#endregion

package/dist/astro/routes/api/admin/plugins/updates.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"updates.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/admin/plugins/updates.ts"],"sourcesContent":["/**\n * Plugin update check endpoint\n *\n * GET /_emdash/api/admin/plugins/updates - Check for available updates\n * across every installed plugin source (marketplace + experimental\n * registry). Items are returned in a single flat list; admins correlate\n * items to plugins by `pluginId` and read `source` from the existing\n * `/_emdash/api/admin/plugins` list (the pluginId prefix is not a\n * reliable discriminator on its own).\n *\n * A failure in one source does NOT blank the other — a registry-side\n * aggregator outage still returns marketplace updates and vice versa.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError } from \"#api/error.js\";\nimport { handleMarketplaceUpdateCheck, handleRegistryUpdateCheck } from \"#api/index.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"plugins:read\");\n\tif (denied) return denied;\n\n\t// Run both checks in parallel. Catch each independently so one source's\n\t// failure doesn't blank the other. Both throws and structured `success:\n\t// false` returns are logged with the source name so a misconfigured\n\t// registry doesn't disappear silently from telemetry.\n\tconst [marketplace, registry] = await Promise.all([\n\t\thandleMarketplaceUpdateCheck(emdash.db, emdash.config.marketplace).catch((err) => {\n\t\t\tconsole.warn(\"[plugins/updates] marketplace check threw:\", err);\n\t\t\treturn null;\n\t\t}),\n\t\thandleRegistryUpdateCheck(emdash.db, emdash.config.experimental?.registry).catch((err) => {\n\t\t\tconsole.warn(\"[plugins/updates] registry check threw:\", err);\n\t\t\treturn null;\n\t\t}),\n\t]);\n\tif (marketplace && !marketplace.success) {\n\t\tconsole.warn(\n\t\t\t`[plugins/updates] marketplace check failed: ${marketplace.error.code} ${marketplace.error.message}`,\n\t\t);\n\t}\n\tif (registry && !registry.success) {\n\t\tconsole.warn(\n\t\t\t`[plugins/updates] registry check failed: ${registry.error.code} ${registry.error.message}`,\n\t\t);\n\t}\n\n\tconst items: unknown[] = [];\n\tif (marketplace?.success) items.push(...marketplace.data.items);\n\tif (registry?.success) items.push(...registry.data.items);\n\n\t// Match the rest of the admin API envelope (`{ data: ... }`) so the\n\t// admin client's `parseApiResponse` unwraps `body.data`.\n\treturn Response.json({ data: { items } });\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,aAAa;CAClD,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;CAMnB,MAAM,CAAC,aAAa,YAAY,MAAM,QAAQ,IAAI,CACjD,6BAA6B,OAAO,IAAI,OAAO,OAAO,YAAY,CAAC,OAAO,QAAQ;AACjF,UAAQ,KAAK,8CAA8C,IAAI;AAC/D,SAAO;GACN,EACF,0BAA0B,OAAO,IAAI,OAAO,OAAO,cAAc,SAAS,CAAC,OAAO,QAAQ;AACzF,UAAQ,KAAK,2CAA2C,IAAI;AAC5D,SAAO;GACN,CACF,CAAC;AACF,KAAI,eAAe,CAAC,YAAY,QAC/B,SAAQ,KACP,+CAA+C,YAAY,MAAM,KAAK,GAAG,YAAY,MAAM,UAC3F;AAEF,KAAI,YAAY,CAAC,SAAS,QACzB,SAAQ,KACP,4CAA4C,SAAS,MAAM,KAAK,GAAG,SAAS,MAAM,UAClF;CAGF,MAAM,QAAmB,EAAE;AAC3B,KAAI,aAAa,QAAS,OAAM,KAAK,GAAG,YAAY,KAAK,MAAM;AAC/D,KAAI,UAAU,QAAS,OAAM,KAAK,GAAG,SAAS,KAAK,MAAM;AAIzD,QAAO,SAAS,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC"}
+{"version":3,"file":"updates.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/admin/plugins/updates.ts"],"sourcesContent":["/**\n * Plugin update check endpoint\n *\n * GET /_emdash/api/admin/plugins/updates - Check for available updates\n * across every installed plugin source (marketplace + experimental\n * registry). Items are returned in a single flat list; admins correlate\n * items to plugins by `pluginId` and read `source` from the existing\n * `/_emdash/api/admin/plugins` list (the pluginId prefix is not a\n * reliable discriminator on its own).\n *\n * A failure in one source does NOT blank the other — a registry-side\n * aggregator outage still returns marketplace updates and vice versa.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess } from \"#api/error.js\";\nimport { handleMarketplaceUpdateCheck, handleRegistryUpdateCheck } from \"#api/index.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"plugins:read\");\n\tif (denied) return denied;\n\n\t// Run both checks in parallel. Catch each independently so one source's\n\t// failure doesn't blank the other. Both throws and structured `success:\n\t// false` returns are logged with the source name so a misconfigured\n\t// registry doesn't disappear silently from telemetry.\n\tconst [marketplace, registry] = await Promise.all([\n\t\thandleMarketplaceUpdateCheck(emdash.db, emdash.config.marketplace).catch((err) => {\n\t\t\tconsole.warn(\"[plugins/updates] marketplace check threw:\", err);\n\t\t\treturn null;\n\t\t}),\n\t\thandleRegistryUpdateCheck(emdash.db, emdash.config.experimental?.registry).catch((err) => {\n\t\t\tconsole.warn(\"[plugins/updates] registry check threw:\", err);\n\t\t\treturn null;\n\t\t}),\n\t]);\n\tif (marketplace && !marketplace.success) {\n\t\tconsole.warn(\n\t\t\t`[plugins/updates] marketplace check failed: ${marketplace.error.code} ${marketplace.error.message}`,\n\t\t);\n\t}\n\tif (registry && !registry.success) {\n\t\tconsole.warn(\n\t\t\t`[plugins/updates] registry check failed: ${registry.error.code} ${registry.error.message}`,\n\t\t);\n\t}\n\n\tconst items: unknown[] = [];\n\tif (marketplace?.success) items.push(...marketplace.data.items);\n\tif (registry?.success) items.push(...registry.data.items);\n\n\treturn apiSuccess({ items });\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,aAAa;CAClD,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;CAMnB,MAAM,CAAC,aAAa,YAAY,MAAM,QAAQ,IAAI,CACjD,6BAA6B,OAAO,IAAI,OAAO,OAAO,YAAY,CAAC,OAAO,QAAQ;AACjF,UAAQ,KAAK,8CAA8C,IAAI;AAC/D,SAAO;GACN,EACF,0BAA0B,OAAO,IAAI,OAAO,OAAO,cAAc,SAAS,CAAC,OAAO,QAAQ;AACzF,UAAQ,KAAK,2CAA2C,IAAI;AAC5D,SAAO;GACN,CACF,CAAC;AACF,KAAI,eAAe,CAAC,YAAY,QAC/B,SAAQ,KACP,+CAA+C,YAAY,MAAM,KAAK,GAAG,YAAY,MAAM,UAC3F;AAEF,KAAI,YAAY,CAAC,SAAS,QACzB,SAAQ,KACP,4CAA4C,SAAS,MAAM,KAAK,GAAG,SAAS,MAAM,UAClF;CAGF,MAAM,QAAmB,EAAE;AAC3B,KAAI,aAAa,QAAS,OAAM,KAAK,GAAG,YAAY,KAAK,MAAM;AAC/D,KAAI,UAAU,QAAS,OAAM,KAAK,GAAG,SAAS,KAAK,MAAM;AAEzD,QAAO,WAAW,EAAE,OAAO,CAAC"}

package/dist/astro/routes/api/admin/themes/marketplace/_id_/index.mjs

@@ -1,45 +1,48 @@
-import "../../../../../../../dialect-helpers-DRI5pyY3.mjs";
+import "../../../../../../../dialect-helpers-HxEQGl_1.mjs";
 import "../../../../../../../after-B1IIdH3Y.mjs";
 import "../../../../../../../object-cache-Bok5j2ae.mjs";
-import "../../../../../../../content-DhgEth4k.mjs";
-import "../../../../../../../base64-CmWvODNW.mjs";
-import "../../../../../../../types-CuW0zWDA.mjs";
-import "../../../../../../../media-BrXIaMFN.mjs";
-import "../../../../../../../user-BjAOvU3Z.mjs";
-import "../../../../../../../taxonomy-BxGxZZdu.mjs";
-import "../../../../../../../comment-CzeatwBV.mjs";
-import "../../../../../../../options-DTTML-Tx.mjs";
-import "../../../../../../../menus-Cfivc2Ad.mjs";
-import "../../../../../../../redirect-IyfNirgS.mjs";
-import "../../../../../../../request-cache-KCNHp_RJ.mjs";
-import "../../../../../../../byline-registry-BOjqDOim.mjs";
-import "../../../../../../../field-defs-cache-WUI88LX5.mjs";
-import "../../../../../../../byline-Bm8ZgUP9.mjs";
-import "../../../../../../../seo-DXu2UQnC.mjs";
-import { h as handleThemeGetDetail } from "../../../../../../../api-DxFSorgk.mjs";
-import "../../../../../../../dashboard-EvEKF5en.mjs";
-import "../../../../../../../content-refresh-Br4gMzh8.mjs";
-import "../../../../../../../fts-manager-BbFaF_V8.mjs";
-import "../../../../../../../registry-B57vp_X9.mjs";
-import "../../../../../../../loader-CB6YHeul.mjs";
-import "../../../../../../../schema-CX9cfNkZ.mjs";
-import "../../../../../../../zod-generator-CacrR-i8.mjs";
-import "../../../../../../../seo-89-53DDs.mjs";
-import "../../../../../../../sections-CpF5SaGr.mjs";
-import "../../../../../../../settings-zhmdKyJQ.mjs";
-import "../../../../../../../settings-rZyHEcNT.mjs";
-import "../../../../../../../resolve-DR3wqMTy.mjs";
-import "../../../../../../../taxonomies-kH9ABDUF.mjs";
-import "../../../../../../../taxonomies-Bs13SN-F.mjs";
-import "../../../../../../../manifest-schema-BHlgZM1W.mjs";
-import "../../../../../../../types-DROWRxYV.mjs";
-import "../../../../../../../ssrf-1g7usGBg.mjs";
-import { a as unwrapResult, t as apiError } from "../../../../../../../error-CkAseSqZ.mjs";
-import "../../../../../../../parse-GmjecGct.mjs";
-import "../../../../../../../redirects-DXEXBAII.mjs";
-import "../../../../../../../byline-fields-2Lp5Hbgf.mjs";
-import "../../../../../../../status-CqJQX1QN.mjs";
-import { n as requirePerm } from "../../../../../../../authorize-Dz88F_Fw.mjs";
+import "../../../../../../../content-Ci04z2z-.mjs";
+import "../../../../../../../base64-B-PsqheR.mjs";
+import "../../../../../../../types-D1iJ3DpO.mjs";
+import "../../../../../../../media-BjhhENaJ.mjs";
+import "../../../../../../../user-Bh-L1qo6.mjs";
+import "../../../../../../../taxonomy-DfVooU4W.mjs";
+import "../../../../../../../comment-DPT0WKyd.mjs";
+import "../../../../../../../options-BlmBHTvX.mjs";
+import "../../../../../../../menus-CZyG6rvx.mjs";
+import "../../../../../../../redirect-CgLPYflR.mjs";
+import "../../../../../../../request-cache-BSUptuJR.mjs";
+import "../../../../../../../byline-registry-BCuOp4UF.mjs";
+import "../../../../../../../field-defs-cache-DvmlgP-D.mjs";
+import "../../../../../../../byline-XEjchwzZ.mjs";
+import "../../../../../../../seo-2cmFHZns.mjs";
+import "../../../../../../../fts-manager-DzqIBrrW.mjs";
+import "../../../../../../../resolve-Cd9dzclN.mjs";
+import "../../../../../../../loader-Be3ouI5L.mjs";
+import "../../../../../../../taxonomies-DjSKBZpq.mjs";
+import { h as handleThemeGetDetail } from "../../../../../../../api-b8WIiGU4.mjs";
+import "../../../../../../../dashboard-C5NkXFbi.mjs";
+import "../../../../../../../content-refresh-D4khvC0R.mjs";
+import "../../../../../../../media-usage-CljdO1mc.mjs";
+import "../../../../../../../registry-FV15nLge.mjs";
+import "../../../../../../../query-Di7DOmPV.mjs";
+import "../../../../../../../zod-generator-B5prQ5M4.mjs";
+import "../../../../../../../schema-BXxlHeAf.mjs";
+import "../../../../../../../seo-C3GDfT0V.mjs";
+import "../../../../../../../sections-CwW4s1al.mjs";
+import "../../../../../../../settings-CpA4lQFt.mjs";
+import "../../../../../../../settings-C4s8hFQm.mjs";
+import "../../../../../../../taxonomies-Ce49uIzY.mjs";
+import "../../../../../../../manifest-schema-bCq54i7F.mjs";
+import "../../../../../../../types-CK0LxPUQ.mjs";
+import "../../../../../../../ssrf-CviKqWmq.mjs";
+import { a as unwrapResult, t as apiError } from "../../../../../../../error-CEGF6UZb.mjs";
+import "../../../../../../../parse-C_-6klII.mjs";
+import "../../../../../../../media-kIV1IxFf.mjs";
+import "../../../../../../../redirects-BBq3n2Rj.mjs";
+import "../../../../../../../relations-5_avdrN_.mjs";
+import "../../../../../../../status-COfycGIU.mjs";
+import { r as requirePerm } from "../../../../../../../authorize-WxsiePzy.mjs";
 
 //#region src/astro/routes/api/admin/themes/marketplace/[id]/index.ts
 const prerender = false;

package/dist/astro/routes/api/admin/themes/marketplace/_id_/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../../../src/astro/routes/api/admin/themes/marketplace/[id]/index.ts"],"sourcesContent":["/**\n * Theme marketplace detail proxy endpoint\n *\n * GET /_emdash/api/admin/themes/marketplace/:id - Get theme details\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, unwrapResult } from \"#api/error.js\";\nimport { handleThemeGetDetail } from \"#api/index.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"plugins:read\");\n\tif (denied) return denied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Theme ID required\", 400);\n\t}\n\n\tconst result = await handleThemeGetDetail(emdash.config.marketplace, id);\n\n\treturn unwrapResult(result);\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;AAEf,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AAK7D,QAAO,aAFQ,MAAM,qBAAqB,OAAO,OAAO,aAAa,GAAG,CAE7C"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../../../src/astro/routes/api/admin/themes/marketplace/[id]/index.ts"],"sourcesContent":["/**\n * Theme marketplace detail proxy endpoint\n *\n * GET /_emdash/api/admin/themes/marketplace/:id - Get theme details\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, unwrapResult } from \"#api/error.js\";\nimport { handleThemeGetDetail } from \"#api/index.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"plugins:read\");\n\tif (denied) return denied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Theme ID required\", 400);\n\t}\n\n\tconst result = await handleThemeGetDetail(emdash.config.marketplace, id);\n\n\treturn unwrapResult(result);\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;AAEf,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AAK7D,QAAO,aAFQ,MAAM,qBAAqB,OAAO,OAAO,aAAa,GAAG,CAE7C"}

package/dist/astro/routes/api/admin/themes/marketplace/_id_/thumbnail.mjs

@@ -1,7 +1,7 @@
-import "../../../../../../../base64-CmWvODNW.mjs";
-import "../../../../../../../types-CuW0zWDA.mjs";
-import { t as apiError } from "../../../../../../../error-CkAseSqZ.mjs";
-import { n as requirePerm } from "../../../../../../../authorize-Dz88F_Fw.mjs";
+import "../../../../../../../base64-B-PsqheR.mjs";
+import "../../../../../../../types-D1iJ3DpO.mjs";
+import { t as apiError } from "../../../../../../../error-CEGF6UZb.mjs";
+import { r as requirePerm } from "../../../../../../../authorize-WxsiePzy.mjs";
 
 //#region src/astro/routes/api/admin/themes/marketplace/[id]/thumbnail.ts
 const prerender = false;

package/dist/astro/routes/api/admin/themes/marketplace/index.mjs

@@ -1,45 +1,48 @@
-import "../../../../../../dialect-helpers-DRI5pyY3.mjs";
+import "../../../../../../dialect-helpers-HxEQGl_1.mjs";
 import "../../../../../../after-B1IIdH3Y.mjs";
 import "../../../../../../object-cache-Bok5j2ae.mjs";
-import "../../../../../../content-DhgEth4k.mjs";
-import "../../../../../../base64-CmWvODNW.mjs";
-import "../../../../../../types-CuW0zWDA.mjs";
-import "../../../../../../media-BrXIaMFN.mjs";
-import "../../../../../../user-BjAOvU3Z.mjs";
-import "../../../../../../taxonomy-BxGxZZdu.mjs";
-import "../../../../../../comment-CzeatwBV.mjs";
-import "../../../../../../options-DTTML-Tx.mjs";
-import "../../../../../../menus-Cfivc2Ad.mjs";
-import "../../../../../../redirect-IyfNirgS.mjs";
-import "../../../../../../request-cache-KCNHp_RJ.mjs";
-import "../../../../../../byline-registry-BOjqDOim.mjs";
-import "../../../../../../field-defs-cache-WUI88LX5.mjs";
-import "../../../../../../byline-Bm8ZgUP9.mjs";
-import "../../../../../../seo-DXu2UQnC.mjs";
-import { g as handleThemeSearch } from "../../../../../../api-DxFSorgk.mjs";
-import "../../../../../../dashboard-EvEKF5en.mjs";
-import "../../../../../../content-refresh-Br4gMzh8.mjs";
-import "../../../../../../fts-manager-BbFaF_V8.mjs";
-import "../../../../../../registry-B57vp_X9.mjs";
-import "../../../../../../loader-CB6YHeul.mjs";
-import "../../../../../../schema-CX9cfNkZ.mjs";
-import "../../../../../../zod-generator-CacrR-i8.mjs";
-import "../../../../../../seo-89-53DDs.mjs";
-import "../../../../../../sections-CpF5SaGr.mjs";
-import "../../../../../../settings-zhmdKyJQ.mjs";
-import "../../../../../../settings-rZyHEcNT.mjs";
-import "../../../../../../resolve-DR3wqMTy.mjs";
-import "../../../../../../taxonomies-kH9ABDUF.mjs";
-import "../../../../../../taxonomies-Bs13SN-F.mjs";
-import "../../../../../../manifest-schema-BHlgZM1W.mjs";
-import "../../../../../../types-DROWRxYV.mjs";
-import "../../../../../../ssrf-1g7usGBg.mjs";
-import { a as unwrapResult, t as apiError } from "../../../../../../error-CkAseSqZ.mjs";
-import "../../../../../../parse-GmjecGct.mjs";
-import "../../../../../../redirects-DXEXBAII.mjs";
-import "../../../../../../byline-fields-2Lp5Hbgf.mjs";
-import "../../../../../../status-CqJQX1QN.mjs";
-import { n as requirePerm } from "../../../../../../authorize-Dz88F_Fw.mjs";
+import "../../../../../../content-Ci04z2z-.mjs";
+import "../../../../../../base64-B-PsqheR.mjs";
+import "../../../../../../types-D1iJ3DpO.mjs";
+import "../../../../../../media-BjhhENaJ.mjs";
+import "../../../../../../user-Bh-L1qo6.mjs";
+import "../../../../../../taxonomy-DfVooU4W.mjs";
+import "../../../../../../comment-DPT0WKyd.mjs";
+import "../../../../../../options-BlmBHTvX.mjs";
+import "../../../../../../menus-CZyG6rvx.mjs";
+import "../../../../../../redirect-CgLPYflR.mjs";
+import "../../../../../../request-cache-BSUptuJR.mjs";
+import "../../../../../../byline-registry-BCuOp4UF.mjs";
+import "../../../../../../field-defs-cache-DvmlgP-D.mjs";
+import "../../../../../../byline-XEjchwzZ.mjs";
+import "../../../../../../seo-2cmFHZns.mjs";
+import "../../../../../../fts-manager-DzqIBrrW.mjs";
+import "../../../../../../resolve-Cd9dzclN.mjs";
+import "../../../../../../loader-Be3ouI5L.mjs";
+import "../../../../../../taxonomies-DjSKBZpq.mjs";
+import { g as handleThemeSearch } from "../../../../../../api-b8WIiGU4.mjs";
+import "../../../../../../dashboard-C5NkXFbi.mjs";
+import "../../../../../../content-refresh-D4khvC0R.mjs";
+import "../../../../../../media-usage-CljdO1mc.mjs";
+import "../../../../../../registry-FV15nLge.mjs";
+import "../../../../../../query-Di7DOmPV.mjs";
+import "../../../../../../zod-generator-B5prQ5M4.mjs";
+import "../../../../../../schema-BXxlHeAf.mjs";
+import "../../../../../../seo-C3GDfT0V.mjs";
+import "../../../../../../sections-CwW4s1al.mjs";
+import "../../../../../../settings-CpA4lQFt.mjs";
+import "../../../../../../settings-C4s8hFQm.mjs";
+import "../../../../../../taxonomies-Ce49uIzY.mjs";
+import "../../../../../../manifest-schema-bCq54i7F.mjs";
+import "../../../../../../types-CK0LxPUQ.mjs";
+import "../../../../../../ssrf-CviKqWmq.mjs";
+import { a as unwrapResult, t as apiError } from "../../../../../../error-CEGF6UZb.mjs";
+import "../../../../../../parse-C_-6klII.mjs";
+import "../../../../../../media-kIV1IxFf.mjs";
+import "../../../../../../redirects-BBq3n2Rj.mjs";
+import "../../../../../../relations-5_avdrN_.mjs";
+import "../../../../../../status-COfycGIU.mjs";
+import { r as requirePerm } from "../../../../../../authorize-WxsiePzy.mjs";
 
 //#region src/astro/routes/api/admin/themes/marketplace/index.ts
 const prerender = false;

package/dist/astro/routes/api/admin/themes/marketplace/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/admin/themes/marketplace/index.ts"],"sourcesContent":["/**\n * Theme marketplace search proxy endpoint\n *\n * GET /_emdash/api/admin/themes/marketplace - Search marketplace themes\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, unwrapResult } from \"#api/error.js\";\nimport { handleThemeSearch } from \"#api/index.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ url, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"plugins:read\");\n\tif (denied) return denied;\n\n\tconst query = url.searchParams.get(\"q\") ?? undefined;\n\tconst keyword = url.searchParams.get(\"keyword\") ?? undefined;\n\tconst sortParam = url.searchParams.get(\"sort\");\n\tconst validSorts = new Set([\"name\", \"created\", \"updated\"]);\n\tlet sort: \"name\" | \"created\" | \"updated\" | undefined;\n\tif (sortParam && validSorts.has(sortParam)) {\n\t\tsort = sortParam as \"name\" | \"created\" | \"updated\"; // eslint-disable-line typescript/no-unsafe-type-assertion -- validated by Set.has()\n\t}\n\tconst cursor = url.searchParams.get(\"cursor\") ?? undefined;\n\tconst limitParam = url.searchParams.get(\"limit\");\n\tconst limit = limitParam ? Math.min(Math.max(1, parseInt(limitParam, 10) || 50), 100) : undefined;\n\n\tconst result = await handleThemeSearch(emdash.config.marketplace, query, {\n\t\tkeyword,\n\t\tsort,\n\t\tcursor,\n\t\tlimit,\n\t});\n\n\treturn unwrapResult(result);\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CACvD,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,IAAI,aAAa,IAAI,IAAI,IAAI;CAC3C,MAAM,UAAU,IAAI,aAAa,IAAI,UAAU,IAAI;CACnD,MAAM,YAAY,IAAI,aAAa,IAAI,OAAO;CAC9C,MAAM,aAAa,IAAI,IAAI;EAAC;EAAQ;EAAW;EAAU,CAAC;CAC1D,IAAI;AACJ,KAAI,aAAa,WAAW,IAAI,UAAU,CACzC,QAAO;CAER,MAAM,SAAS,IAAI,aAAa,IAAI,SAAS,IAAI;CACjD,MAAM,aAAa,IAAI,aAAa,IAAI,QAAQ;CAChD,MAAM,QAAQ,aAAa,KAAK,IAAI,KAAK,IAAI,GAAG,SAAS,YAAY,GAAG,IAAI,GAAG,EAAE,IAAI,GAAG;AASxF,QAAO,aAPQ,MAAM,kBAAkB,OAAO,OAAO,aAAa,OAAO;EACxE;EACA;EACA;EACA;EACA,CAAC,CAEyB"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/admin/themes/marketplace/index.ts"],"sourcesContent":["/**\n * Theme marketplace search proxy endpoint\n *\n * GET /_emdash/api/admin/themes/marketplace - Search marketplace themes\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, unwrapResult } from \"#api/error.js\";\nimport { handleThemeSearch } from \"#api/index.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ url, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"plugins:read\");\n\tif (denied) return denied;\n\n\tconst query = url.searchParams.get(\"q\") ?? undefined;\n\tconst keyword = url.searchParams.get(\"keyword\") ?? undefined;\n\tconst sortParam = url.searchParams.get(\"sort\");\n\tconst validSorts = new Set([\"name\", \"created\", \"updated\"]);\n\tlet sort: \"name\" | \"created\" | \"updated\" | undefined;\n\tif (sortParam && validSorts.has(sortParam)) {\n\t\tsort = sortParam as \"name\" | \"created\" | \"updated\"; // eslint-disable-line typescript/no-unsafe-type-assertion -- validated by Set.has()\n\t}\n\tconst cursor = url.searchParams.get(\"cursor\") ?? undefined;\n\tconst limitParam = url.searchParams.get(\"limit\");\n\tconst limit = limitParam ? Math.min(Math.max(1, parseInt(limitParam, 10) || 50), 100) : undefined;\n\n\tconst result = await handleThemeSearch(emdash.config.marketplace, query, {\n\t\tkeyword,\n\t\tsort,\n\t\tcursor,\n\t\tlimit,\n\t});\n\n\treturn unwrapResult(result);\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CACvD,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,IAAI,aAAa,IAAI,IAAI,IAAI;CAC3C,MAAM,UAAU,IAAI,aAAa,IAAI,UAAU,IAAI;CACnD,MAAM,YAAY,IAAI,aAAa,IAAI,OAAO;CAC9C,MAAM,aAAa,IAAI,IAAI;EAAC;EAAQ;EAAW;EAAU,CAAC;CAC1D,IAAI;AACJ,KAAI,aAAa,WAAW,IAAI,UAAU,CACzC,QAAO;CAER,MAAM,SAAS,IAAI,aAAa,IAAI,SAAS,IAAI;CACjD,MAAM,aAAa,IAAI,aAAa,IAAI,QAAQ;CAChD,MAAM,QAAQ,aAAa,KAAK,IAAI,KAAK,IAAI,GAAG,SAAS,YAAY,GAAG,IAAI,GAAG,EAAE,IAAI,GAAG;AASxF,QAAO,aAPQ,MAAM,kBAAkB,OAAO,OAAO,aAAa,OAAO;EACxE;EACA;EACA;EACA;EACA,CAAC,CAEyB"}

package/dist/astro/routes/api/admin/users/_id_/disable.mjs

@@ -1,9 +1,9 @@
-import "../../../../../../base64-CmWvODNW.mjs";
-import "../../../../../../types-CuW0zWDA.mjs";
-import { t as withTransaction } from "../../../../../../transaction-qfqpPVpu.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-CkAseSqZ.mjs";
-import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
+import "../../../../../../base64-B-PsqheR.mjs";
+import "../../../../../../types-D1iJ3DpO.mjs";
+import { t as withTransaction } from "../../../../../../transaction-D0FOsb3X.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-CEGF6UZb.mjs";
 import { Role } from "@emdash-cms/auth";
+import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 
 //#region src/astro/routes/api/admin/users/[id]/disable.ts
 /**

package/dist/astro/routes/api/admin/users/_id_/enable.mjs

@@ -1,8 +1,8 @@
-import "../../../../../../base64-CmWvODNW.mjs";
-import "../../../../../../types-CuW0zWDA.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-CkAseSqZ.mjs";
-import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
+import "../../../../../../base64-B-PsqheR.mjs";
+import "../../../../../../types-D1iJ3DpO.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-CEGF6UZb.mjs";
 import { Role } from "@emdash-cms/auth";
+import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 
 //#region src/astro/routes/api/admin/users/[id]/enable.ts
 /**

package/dist/astro/routes/api/admin/users/_id_/index.mjs

@@ -1,14 +1,15 @@
-import "../../../../../../base64-CmWvODNW.mjs";
-import "../../../../../../types-CuW0zWDA.mjs";
-import { t as withTransaction } from "../../../../../../transaction-qfqpPVpu.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-CkAseSqZ.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../../parse-GmjecGct.mjs";
-import { E as userUpdateBody } from "../../../../../../redirects-DXEXBAII.mjs";
-import "../../../../../../byline-fields-2Lp5Hbgf.mjs";
-import "../../../../../../status-CqJQX1QN.mjs";
+import "../../../../../../base64-B-PsqheR.mjs";
+import "../../../../../../types-D1iJ3DpO.mjs";
+import { t as withTransaction } from "../../../../../../transaction-D0FOsb3X.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-CEGF6UZb.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../../parse-C_-6klII.mjs";
+import "../../../../../../media-kIV1IxFf.mjs";
+import { E as userUpdateBody } from "../../../../../../redirects-BBq3n2Rj.mjs";
+import "../../../../../../relations-5_avdrN_.mjs";
+import "../../../../../../status-COfycGIU.mjs";
 import "../../../../../../api/schemas/index.mjs";
-import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 import { Role } from "@emdash-cms/auth";
+import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 
 //#region src/astro/routes/api/admin/users/[id]/index.ts
 /**

package/dist/astro/routes/api/admin/users/_id_/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/admin/users/[id]/index.ts"],"sourcesContent":["/**\n * User management detail endpoint\n *\n * GET /_emdash/api/admin/users/:id - Get user details\n * PUT /_emdash/api/admin/users/:id - Update user\n */\n\nimport { Role } from \"@emdash-cms/auth\";\nimport { createKyselyAdapter } from \"@emdash-cms/auth/adapters/kysely\";\nimport type { APIRoute } from \"astro\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { userUpdateBody } from \"#api/schemas.js\";\nimport { withTransaction } from \"#db/transaction.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user: currentUser } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!currentUser || currentUser.role < Role.ADMIN) {\n\t\treturn apiError(\"FORBIDDEN\", \"Admin privileges required\", 403);\n\t}\n\n\tconst adapter = createKyselyAdapter(emdash.db);\n\n\tconst { id } = params;\n\n\tif (!id) {\n\t\treturn apiError(\"MISSING_PARAM\", \"User ID required\", 400);\n\t}\n\n\ttry {\n\t\tconst result = await adapter.getUserWithDetails(id);\n\n\t\tif (!result) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"User not found\", 404);\n\t\t}\n\n\t\t// Transform for JSON serialization\n\t\tconst item = {\n\t\t\tid: result.user.id,\n\t\t\temail: result.user.email,\n\t\t\tname: result.user.name,\n\t\t\tavatarUrl: result.user.avatarUrl,\n\t\t\trole: result.user.role,\n\t\t\temailVerified: result.user.emailVerified,\n\t\t\tdisabled: result.user.disabled,\n\t\t\tcreatedAt: result.user.createdAt.toISOString(),\n\t\t\tupdatedAt: result.user.updatedAt.toISOString(),\n\t\t\tlastLogin: result.lastLogin?.toISOString() ?? null,\n\t\t\tcredentials: result.credentials.map((c) => ({\n\t\t\t\tid: c.id,\n\t\t\t\tname: c.name,\n\t\t\t\tdeviceType: c.deviceType,\n\t\t\t\tcreatedAt: c.createdAt.toISOString(),\n\t\t\t\tlastUsedAt: c.lastUsedAt.toISOString(),\n\t\t\t})),\n\t\t\toauthAccounts: result.oauthAccounts.map((a) => ({\n\t\t\t\tprovider: a.provider,\n\t\t\t\tcreatedAt: a.createdAt.toISOString(),\n\t\t\t})),\n\t\t};\n\n\t\treturn apiSuccess({ item });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to get user details\", \"USER_DETAIL_ERROR\");\n\t}\n};\n\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user: currentUser } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!currentUser || currentUser.role < Role.ADMIN) {\n\t\treturn apiError(\"FORBIDDEN\", \"Admin privileges required\", 403);\n\t}\n\n\tconst adapter = createKyselyAdapter(emdash.db);\n\n\tconst { id } = params;\n\n\tif (!id) {\n\t\treturn apiError(\"MISSING_PARAM\", \"User ID required\", 400);\n\t}\n\n\ttry {\n\t\t// Get target user\n\t\tconst targetUser = await adapter.getUserById(id);\n\t\tif (!targetUser) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"User not found\", 404);\n\t\t}\n\n\t\tconst body = await parseBody(request, userUpdateBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Role is already validated as RoleLevel by Zod schema\n\t\tconst role = body.role;\n\n\t\t// Prevent editing own role (security: prevents self-demotion/lockout)\n\t\tif (role !== undefined && id === currentUser.id) {\n\t\t\treturn apiError(\"SELF_ROLE_CHANGE\", \"Cannot change your own role\", 400);\n\t\t}\n\n\t\t// Check email uniqueness if changing email\n\t\tif (body.email && body.email !== targetUser.email) {\n\t\t\tconst existing = await adapter.getUserByEmail(body.email);\n\t\t\tif (existing) {\n\t\t\t\treturn apiError(\"EMAIL_IN_USE\", \"Email already in use\", 409);\n\t\t\t}\n\t\t}\n\n\t\t// Wrap admin demotion guard + update in a transaction to prevent\n\t\t// two concurrent demotions from both passing the count check.\n\t\tconst isDemotingAdmin =\n\t\t\trole !== undefined && role < Role.ADMIN && targetUser.role === Role.ADMIN;\n\n\t\tconst lastAdminBlocked = await withTransaction(emdash.db, async (trx) => {\n\t\t\tconst trxAdapter = createKyselyAdapter(trx);\n\t\t\tif (isDemotingAdmin) {\n\t\t\t\tconst adminCount = await trxAdapter.countAdmins();\n\t\t\t\tif (adminCount <= 1) return true;\n\t\t\t}\n\t\t\tawait trxAdapter.updateUser(id, {\n\t\t\t\tname: body.name,\n\t\t\t\temail: body.email,\n\t\t\t\trole,\n\t\t\t});\n\t\t\treturn false;\n\t\t});\n\n\t\tif (lastAdminBlocked) {\n\t\t\treturn apiError(\n\t\t\t\t\"LAST_ADMIN\",\n\t\t\t\t\"Cannot demote the last admin. Promote another user first.\",\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\n\t\t// Fetch updated user\n\t\tconst updated = await adapter.getUserById(id);\n\n\t\treturn apiSuccess({\n\t\t\titem: {\n\t\t\t\tid: updated!.id,\n\t\t\t\temail: updated!.email,\n\t\t\t\tname: updated!.name,\n\t\t\t\tavatarUrl: updated!.avatarUrl,\n\t\t\t\trole: updated!.role,\n\t\t\t\temailVerified: updated!.emailVerified,\n\t\t\t\tdisabled: updated!.disabled,\n\t\t\t\tcreatedAt: updated!.createdAt.toISOString(),\n\t\t\t\tupdatedAt: updated!.updatedAt.toISOString(),\n\t\t\t},\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update user\", \"USER_UPDATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAgBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,MAAM,gBAAgB;AAEtC,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,eAAe,YAAY,OAAO,KAAK,MAC3C,QAAO,SAAS,aAAa,6BAA6B,IAAI;CAG/D,MAAM,UAAU,oBAAoB,OAAO,GAAG;CAE9C,MAAM,EAAE,OAAO;AAEf,KAAI,CAAC,GACJ,QAAO,SAAS,iBAAiB,oBAAoB,IAAI;AAG1D,KAAI;EACH,MAAM,SAAS,MAAM,QAAQ,mBAAmB,GAAG;AAEnD,MAAI,CAAC,OACJ,QAAO,SAAS,aAAa,kBAAkB,IAAI;AA4BpD,SAAO,WAAW,EAAE,MAxBP;GACZ,IAAI,OAAO,KAAK;GAChB,OAAO,OAAO,KAAK;GACnB,MAAM,OAAO,KAAK;GAClB,WAAW,OAAO,KAAK;GACvB,MAAM,OAAO,KAAK;GAClB,eAAe,OAAO,KAAK;GAC3B,UAAU,OAAO,KAAK;GACtB,WAAW,OAAO,KAAK,UAAU,aAAa;GAC9C,WAAW,OAAO,KAAK,UAAU,aAAa;GAC9C,WAAW,OAAO,WAAW,aAAa,IAAI;GAC9C,aAAa,OAAO,YAAY,KAAK,OAAO;IAC3C,IAAI,EAAE;IACN,MAAM,EAAE;IACR,YAAY,EAAE;IACd,WAAW,EAAE,UAAU,aAAa;IACpC,YAAY,EAAE,WAAW,aAAa;IACtC,EAAE;GACH,eAAe,OAAO,cAAc,KAAK,OAAO;IAC/C,UAAU,EAAE;IACZ,WAAW,EAAE,UAAU,aAAa;IACpC,EAAE;GACH,EAEyB,CAAC;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,8BAA8B,oBAAoB;;;AAI9E,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,MAAM,gBAAgB;AAEtC,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,eAAe,YAAY,OAAO,KAAK,MAC3C,QAAO,SAAS,aAAa,6BAA6B,IAAI;CAG/D,MAAM,UAAU,oBAAoB,OAAO,GAAG;CAE9C,MAAM,EAAE,OAAO;AAEf,KAAI,CAAC,GACJ,QAAO,SAAS,iBAAiB,oBAAoB,IAAI;AAG1D,KAAI;EAEH,MAAM,aAAa,MAAM,QAAQ,YAAY,GAAG;AAChD,MAAI,CAAC,WACJ,QAAO,SAAS,aAAa,kBAAkB,IAAI;EAGpD,MAAM,OAAO,MAAM,UAAU,SAAS,eAAe;AACrD,MAAI,aAAa,KAAK,CAAE,QAAO;EAG/B,MAAM,OAAO,KAAK;AAGlB,MAAI,SAAS,UAAa,OAAO,YAAY,GAC5C,QAAO,SAAS,oBAAoB,+BAA+B,IAAI;AAIxE,MAAI,KAAK,SAAS,KAAK,UAAU,WAAW,OAE3C;OADiB,MAAM,QAAQ,eAAe,KAAK,MAAM,CAExD,QAAO,SAAS,gBAAgB,wBAAwB,IAAI;;EAM9D,MAAM,kBACL,SAAS,UAAa,OAAO,KAAK,SAAS,WAAW,SAAS,KAAK;AAgBrE,MAdyB,MAAM,gBAAgB,OAAO,IAAI,OAAO,QAAQ;GACxE,MAAM,aAAa,oBAAoB,IAAI;AAC3C,OAAI,iBAEH;QADmB,MAAM,WAAW,aAAa,IAC/B,EAAG,QAAO;;AAE7B,SAAM,WAAW,WAAW,IAAI;IAC/B,MAAM,KAAK;IACX,OAAO,KAAK;IACZ;IACA,CAAC;AACF,UAAO;IACN,CAGD,QAAO,SACN,cACA,6DACA,IACA;EAIF,MAAM,UAAU,MAAM,QAAQ,YAAY,GAAG;AAE7C,SAAO,WAAW,EACjB,MAAM;GACL,IAAI,QAAS;GACb,OAAO,QAAS;GAChB,MAAM,QAAS;GACf,WAAW,QAAS;GACpB,MAAM,QAAS;GACf,eAAe,QAAS;GACxB,UAAU,QAAS;GACnB,WAAW,QAAS,UAAU,aAAa;GAC3C,WAAW,QAAS,UAAU,aAAa;GAC3C,EACD,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,yBAAyB,oBAAoB"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/admin/users/[id]/index.ts"],"sourcesContent":["/**\n * User management detail endpoint\n *\n * GET /_emdash/api/admin/users/:id - Get user details\n * PUT /_emdash/api/admin/users/:id - Update user\n */\n\nimport { Role } from \"@emdash-cms/auth\";\nimport { createKyselyAdapter } from \"@emdash-cms/auth/adapters/kysely\";\nimport type { APIRoute } from \"astro\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { userUpdateBody } from \"#api/schemas.js\";\nimport { withTransaction } from \"#db/transaction.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user: currentUser } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!currentUser || currentUser.role < Role.ADMIN) {\n\t\treturn apiError(\"FORBIDDEN\", \"Admin privileges required\", 403);\n\t}\n\n\tconst adapter = createKyselyAdapter(emdash.db);\n\n\tconst { id } = params;\n\n\tif (!id) {\n\t\treturn apiError(\"MISSING_PARAM\", \"User ID required\", 400);\n\t}\n\n\ttry {\n\t\tconst result = await adapter.getUserWithDetails(id);\n\n\t\tif (!result) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"User not found\", 404);\n\t\t}\n\n\t\t// Transform for JSON serialization\n\t\tconst item = {\n\t\t\tid: result.user.id,\n\t\t\temail: result.user.email,\n\t\t\tname: result.user.name,\n\t\t\tavatarUrl: result.user.avatarUrl,\n\t\t\trole: result.user.role,\n\t\t\temailVerified: result.user.emailVerified,\n\t\t\tdisabled: result.user.disabled,\n\t\t\tcreatedAt: result.user.createdAt.toISOString(),\n\t\t\tupdatedAt: result.user.updatedAt.toISOString(),\n\t\t\tlastLogin: result.lastLogin?.toISOString() ?? null,\n\t\t\tcredentials: result.credentials.map((c) => ({\n\t\t\t\tid: c.id,\n\t\t\t\tname: c.name,\n\t\t\t\tdeviceType: c.deviceType,\n\t\t\t\tcreatedAt: c.createdAt.toISOString(),\n\t\t\t\tlastUsedAt: c.lastUsedAt.toISOString(),\n\t\t\t})),\n\t\t\toauthAccounts: result.oauthAccounts.map((a) => ({\n\t\t\t\tprovider: a.provider,\n\t\t\t\tcreatedAt: a.createdAt.toISOString(),\n\t\t\t})),\n\t\t};\n\n\t\treturn apiSuccess({ item });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to get user details\", \"USER_DETAIL_ERROR\");\n\t}\n};\n\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user: currentUser } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!currentUser || currentUser.role < Role.ADMIN) {\n\t\treturn apiError(\"FORBIDDEN\", \"Admin privileges required\", 403);\n\t}\n\n\tconst adapter = createKyselyAdapter(emdash.db);\n\n\tconst { id } = params;\n\n\tif (!id) {\n\t\treturn apiError(\"MISSING_PARAM\", \"User ID required\", 400);\n\t}\n\n\ttry {\n\t\t// Get target user\n\t\tconst targetUser = await adapter.getUserById(id);\n\t\tif (!targetUser) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"User not found\", 404);\n\t\t}\n\n\t\tconst body = await parseBody(request, userUpdateBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Role is already validated as RoleLevel by Zod schema\n\t\tconst role = body.role;\n\n\t\t// Prevent editing own role (security: prevents self-demotion/lockout)\n\t\tif (role !== undefined && id === currentUser.id) {\n\t\t\treturn apiError(\"SELF_ROLE_CHANGE\", \"Cannot change your own role\", 400);\n\t\t}\n\n\t\t// Check email uniqueness if changing email\n\t\tif (body.email && body.email !== targetUser.email) {\n\t\t\tconst existing = await adapter.getUserByEmail(body.email);\n\t\t\tif (existing) {\n\t\t\t\treturn apiError(\"EMAIL_IN_USE\", \"Email already in use\", 409);\n\t\t\t}\n\t\t}\n\n\t\t// Wrap admin demotion guard + update in a transaction to prevent\n\t\t// two concurrent demotions from both passing the count check.\n\t\tconst isDemotingAdmin =\n\t\t\trole !== undefined && role < Role.ADMIN && targetUser.role === Role.ADMIN;\n\n\t\tconst lastAdminBlocked = await withTransaction(emdash.db, async (trx) => {\n\t\t\tconst trxAdapter = createKyselyAdapter(trx);\n\t\t\tif (isDemotingAdmin) {\n\t\t\t\tconst adminCount = await trxAdapter.countAdmins();\n\t\t\t\tif (adminCount <= 1) return true;\n\t\t\t}\n\t\t\tawait trxAdapter.updateUser(id, {\n\t\t\t\tname: body.name,\n\t\t\t\temail: body.email,\n\t\t\t\trole,\n\t\t\t});\n\t\t\treturn false;\n\t\t});\n\n\t\tif (lastAdminBlocked) {\n\t\t\treturn apiError(\n\t\t\t\t\"LAST_ADMIN\",\n\t\t\t\t\"Cannot demote the last admin. Promote another user first.\",\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\n\t\t// Fetch updated user\n\t\tconst updated = await adapter.getUserById(id);\n\n\t\treturn apiSuccess({\n\t\t\titem: {\n\t\t\t\tid: updated!.id,\n\t\t\t\temail: updated!.email,\n\t\t\t\tname: updated!.name,\n\t\t\t\tavatarUrl: updated!.avatarUrl,\n\t\t\t\trole: updated!.role,\n\t\t\t\temailVerified: updated!.emailVerified,\n\t\t\t\tdisabled: updated!.disabled,\n\t\t\t\tcreatedAt: updated!.createdAt.toISOString(),\n\t\t\t\tupdatedAt: updated!.updatedAt.toISOString(),\n\t\t\t},\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update user\", \"USER_UPDATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAgBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,MAAM,gBAAgB;AAEtC,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,eAAe,YAAY,OAAO,KAAK,MAC3C,QAAO,SAAS,aAAa,6BAA6B,IAAI;CAG/D,MAAM,UAAU,oBAAoB,OAAO,GAAG;CAE9C,MAAM,EAAE,OAAO;AAEf,KAAI,CAAC,GACJ,QAAO,SAAS,iBAAiB,oBAAoB,IAAI;AAG1D,KAAI;EACH,MAAM,SAAS,MAAM,QAAQ,mBAAmB,GAAG;AAEnD,MAAI,CAAC,OACJ,QAAO,SAAS,aAAa,kBAAkB,IAAI;AA4BpD,SAAO,WAAW,EAAE,MAxBP;GACZ,IAAI,OAAO,KAAK;GAChB,OAAO,OAAO,KAAK;GACnB,MAAM,OAAO,KAAK;GAClB,WAAW,OAAO,KAAK;GACvB,MAAM,OAAO,KAAK;GAClB,eAAe,OAAO,KAAK;GAC3B,UAAU,OAAO,KAAK;GACtB,WAAW,OAAO,KAAK,UAAU,aAAa;GAC9C,WAAW,OAAO,KAAK,UAAU,aAAa;GAC9C,WAAW,OAAO,WAAW,aAAa,IAAI;GAC9C,aAAa,OAAO,YAAY,KAAK,OAAO;IAC3C,IAAI,EAAE;IACN,MAAM,EAAE;IACR,YAAY,EAAE;IACd,WAAW,EAAE,UAAU,aAAa;IACpC,YAAY,EAAE,WAAW,aAAa;IACtC,EAAE;GACH,eAAe,OAAO,cAAc,KAAK,OAAO;IAC/C,UAAU,EAAE;IACZ,WAAW,EAAE,UAAU,aAAa;IACpC,EAAE;GACH,EAEyB,CAAC;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,8BAA8B,oBAAoB;;;AAI9E,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,MAAM,gBAAgB;AAEtC,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,eAAe,YAAY,OAAO,KAAK,MAC3C,QAAO,SAAS,aAAa,6BAA6B,IAAI;CAG/D,MAAM,UAAU,oBAAoB,OAAO,GAAG;CAE9C,MAAM,EAAE,OAAO;AAEf,KAAI,CAAC,GACJ,QAAO,SAAS,iBAAiB,oBAAoB,IAAI;AAG1D,KAAI;EAEH,MAAM,aAAa,MAAM,QAAQ,YAAY,GAAG;AAChD,MAAI,CAAC,WACJ,QAAO,SAAS,aAAa,kBAAkB,IAAI;EAGpD,MAAM,OAAO,MAAM,UAAU,SAAS,eAAe;AACrD,MAAI,aAAa,KAAK,CAAE,QAAO;EAG/B,MAAM,OAAO,KAAK;AAGlB,MAAI,SAAS,UAAa,OAAO,YAAY,GAC5C,QAAO,SAAS,oBAAoB,+BAA+B,IAAI;AAIxE,MAAI,KAAK,SAAS,KAAK,UAAU,WAAW,OAE3C;OADiB,MAAM,QAAQ,eAAe,KAAK,MAAM,CAExD,QAAO,SAAS,gBAAgB,wBAAwB,IAAI;;EAM9D,MAAM,kBACL,SAAS,UAAa,OAAO,KAAK,SAAS,WAAW,SAAS,KAAK;AAgBrE,MAdyB,MAAM,gBAAgB,OAAO,IAAI,OAAO,QAAQ;GACxE,MAAM,aAAa,oBAAoB,IAAI;AAC3C,OAAI,iBAEH;QADmB,MAAM,WAAW,aAAa,IAC/B,EAAG,QAAO;;AAE7B,SAAM,WAAW,WAAW,IAAI;IAC/B,MAAM,KAAK;IACX,OAAO,KAAK;IACZ;IACA,CAAC;AACF,UAAO;IACN,CAGD,QAAO,SACN,cACA,6DACA,IACA;EAIF,MAAM,UAAU,MAAM,QAAQ,YAAY,GAAG;AAE7C,SAAO,WAAW,EACjB,MAAM;GACL,IAAI,QAAS;GACb,OAAO,QAAS;GAChB,MAAM,QAAS;GACf,WAAW,QAAS;GACpB,MAAM,QAAS;GACf,eAAe,QAAS;GACxB,UAAU,QAAS;GACnB,WAAW,QAAS,UAAU,aAAa;GAC3C,WAAW,QAAS,UAAU,aAAa;GAC3C,EACD,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,yBAAyB,oBAAoB"}

package/dist/astro/routes/api/admin/users/_id_/send-recovery.mjs

@@ -1,10 +1,10 @@
-import "../../../../../../base64-CmWvODNW.mjs";
-import "../../../../../../types-CuW0zWDA.mjs";
-import { t as OptionsRepository } from "../../../../../../options-DTTML-Tx.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-CkAseSqZ.mjs";
-import { t as getSiteBaseUrl } from "../../../../../../site-url-BBfDTgZB.mjs";
-import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
+import "../../../../../../base64-B-PsqheR.mjs";
+import "../../../../../../types-D1iJ3DpO.mjs";
+import { t as OptionsRepository } from "../../../../../../options-BlmBHTvX.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-CEGF6UZb.mjs";
+import { t as getSiteBaseUrl } from "../../../../../../site-url-NGJT6NTU.mjs";
 import { Role, sendMagicLink } from "@emdash-cms/auth";
+import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 
 //#region src/astro/routes/api/admin/users/[id]/send-recovery.ts
 /**

package/dist/astro/routes/api/admin/users/index.mjs

@@ -1,13 +1,14 @@
-import "../../../../../base64-CmWvODNW.mjs";
-import "../../../../../types-CuW0zWDA.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-CkAseSqZ.mjs";
-import { i as parseQuery, t as isParseError } from "../../../../../parse-GmjecGct.mjs";
-import { D as usersListQuery } from "../../../../../redirects-DXEXBAII.mjs";
-import "../../../../../byline-fields-2Lp5Hbgf.mjs";
-import "../../../../../status-CqJQX1QN.mjs";
+import "../../../../../base64-B-PsqheR.mjs";
+import "../../../../../types-D1iJ3DpO.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-CEGF6UZb.mjs";
+import { i as parseQuery, t as isParseError } from "../../../../../parse-C_-6klII.mjs";
+import "../../../../../media-kIV1IxFf.mjs";
+import { D as usersListQuery } from "../../../../../redirects-BBq3n2Rj.mjs";
+import "../../../../../relations-5_avdrN_.mjs";
+import "../../../../../status-COfycGIU.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 import { Role } from "@emdash-cms/auth";
+import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 
 //#region src/astro/routes/api/admin/users/index.ts
 /**

package/dist/astro/routes/api/admin/users/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/admin/users/index.ts"],"sourcesContent":["/**\n * User management list endpoint\n *\n * GET /_emdash/api/admin/users - List users with search, filter, pagination\n */\n\nimport { Role } from \"@emdash-cms/auth\";\nimport { createKyselyAdapter } from \"@emdash-cms/auth/adapters/kysely\";\nimport type { APIRoute } from \"astro\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseQuery } from \"#api/parse.js\";\nimport { usersListQuery } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ url, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!user || user.role < Role.ADMIN) {\n\t\treturn apiError(\"FORBIDDEN\", \"Admin privileges required\", 403);\n\t}\n\n\tconst adapter = createKyselyAdapter(emdash.db);\n\n\ttry {\n\t\t// Parse query parameters\n\t\tconst query = parseQuery(url, usersListQuery);\n\t\tif (isParseError(query)) return query;\n\n\t\t// Fetch users\n\t\tconst result = await adapter.getUsers({\n\t\t\tsearch: query.search,\n\t\t\trole: query.role ? parseInt(query.role, 10) : undefined,\n\t\t\tcursor: query.cursor,\n\t\t\tlimit: query.limit,\n\t\t});\n\n\t\t// Transform dates to ISO strings for JSON serialization\n\t\tconst items = result.items.map((u) => ({\n\t\t\tid: u.id,\n\t\t\temail: u.email,\n\t\t\tname: u.name,\n\t\t\tavatarUrl: u.avatarUrl,\n\t\t\trole: u.role,\n\t\t\temailVerified: u.emailVerified,\n\t\t\tdisabled: u.disabled,\n\t\t\tcreatedAt: u.createdAt.toISOString(),\n\t\t\tupdatedAt: u.updatedAt.toISOString(),\n\t\t\tlastLogin: u.lastLogin?.toISOString() ?? null,\n\t\t\tcredentialCount: u.credentialCount,\n\t\t\toauthProviders: u.oauthProviders,\n\t\t}));\n\n\t\treturn apiSuccess({\n\t\t\titems,\n\t\t\tnextCursor: result.nextCursor,\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to list users\", \"USER_LIST_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;AAcA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CACvD,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,QAAQ,KAAK,OAAO,KAAK,MAC7B,QAAO,SAAS,aAAa,6BAA6B,IAAI;CAG/D,MAAM,UAAU,oBAAoB,OAAO,GAAG;AAE9C,KAAI;EAEH,MAAM,QAAQ,WAAW,KAAK,eAAe;AAC7C,MAAI,aAAa,MAAM,CAAE,QAAO;EAGhC,MAAM,SAAS,MAAM,QAAQ,SAAS;GACrC,QAAQ,MAAM;GACd,MAAM,MAAM,OAAO,SAAS,MAAM,MAAM,GAAG,GAAG;GAC9C,QAAQ,MAAM;GACd,OAAO,MAAM;GACb,CAAC;AAkBF,SAAO,WAAW;GACjB,OAhBa,OAAO,MAAM,KAAK,OAAO;IACtC,IAAI,EAAE;IACN,OAAO,EAAE;IACT,MAAM,EAAE;IACR,WAAW,EAAE;IACb,MAAM,EAAE;IACR,eAAe,EAAE;IACjB,UAAU,EAAE;IACZ,WAAW,EAAE,UAAU,aAAa;IACpC,WAAW,EAAE,UAAU,aAAa;IACpC,WAAW,EAAE,WAAW,aAAa,IAAI;IACzC,iBAAiB,EAAE;IACnB,gBAAgB,EAAE;IAClB,EAAE;GAIF,YAAY,OAAO;GACnB,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,wBAAwB,kBAAkB"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/admin/users/index.ts"],"sourcesContent":["/**\n * User management list endpoint\n *\n * GET /_emdash/api/admin/users - List users with search, filter, pagination\n */\n\nimport { Role } from \"@emdash-cms/auth\";\nimport { createKyselyAdapter } from \"@emdash-cms/auth/adapters/kysely\";\nimport type { APIRoute } from \"astro\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseQuery } from \"#api/parse.js\";\nimport { usersListQuery } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ url, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!user || user.role < Role.ADMIN) {\n\t\treturn apiError(\"FORBIDDEN\", \"Admin privileges required\", 403);\n\t}\n\n\tconst adapter = createKyselyAdapter(emdash.db);\n\n\ttry {\n\t\t// Parse query parameters\n\t\tconst query = parseQuery(url, usersListQuery);\n\t\tif (isParseError(query)) return query;\n\n\t\t// Fetch users\n\t\tconst result = await adapter.getUsers({\n\t\t\tsearch: query.search,\n\t\t\trole: query.role ? parseInt(query.role, 10) : undefined,\n\t\t\tcursor: query.cursor,\n\t\t\tlimit: query.limit,\n\t\t});\n\n\t\t// Transform dates to ISO strings for JSON serialization\n\t\tconst items = result.items.map((u) => ({\n\t\t\tid: u.id,\n\t\t\temail: u.email,\n\t\t\tname: u.name,\n\t\t\tavatarUrl: u.avatarUrl,\n\t\t\trole: u.role,\n\t\t\temailVerified: u.emailVerified,\n\t\t\tdisabled: u.disabled,\n\t\t\tcreatedAt: u.createdAt.toISOString(),\n\t\t\tupdatedAt: u.updatedAt.toISOString(),\n\t\t\tlastLogin: u.lastLogin?.toISOString() ?? null,\n\t\t\tcredentialCount: u.credentialCount,\n\t\t\toauthProviders: u.oauthProviders,\n\t\t}));\n\n\t\treturn apiSuccess({\n\t\t\titems,\n\t\t\tnextCursor: result.nextCursor,\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to list users\", \"USER_LIST_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;AAcA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CACvD,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,QAAQ,KAAK,OAAO,KAAK,MAC7B,QAAO,SAAS,aAAa,6BAA6B,IAAI;CAG/D,MAAM,UAAU,oBAAoB,OAAO,GAAG;AAE9C,KAAI;EAEH,MAAM,QAAQ,WAAW,KAAK,eAAe;AAC7C,MAAI,aAAa,MAAM,CAAE,QAAO;EAGhC,MAAM,SAAS,MAAM,QAAQ,SAAS;GACrC,QAAQ,MAAM;GACd,MAAM,MAAM,OAAO,SAAS,MAAM,MAAM,GAAG,GAAG;GAC9C,QAAQ,MAAM;GACd,OAAO,MAAM;GACb,CAAC;AAkBF,SAAO,WAAW;GACjB,OAhBa,OAAO,MAAM,KAAK,OAAO;IACtC,IAAI,EAAE;IACN,OAAO,EAAE;IACT,MAAM,EAAE;IACR,WAAW,EAAE;IACb,MAAM,EAAE;IACR,eAAe,EAAE;IACjB,UAAU,EAAE;IACZ,WAAW,EAAE,UAAU,aAAa;IACpC,WAAW,EAAE,UAAU,aAAa;IACpC,WAAW,EAAE,WAAW,aAAa,IAAI;IACzC,iBAAiB,EAAE;IACnB,gBAAgB,EAAE;IAClB,EAAE;GAIF,YAAY,OAAO;GACnB,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,wBAAwB,kBAAkB"}

package/dist/astro/routes/api/auth/dev-bypass.mjs

@@ -1,10 +1,10 @@
-import { i as runMigrations } from "../../../../runner-K8XK101B.mjs";
-import "../../../../dialect-helpers-DRI5pyY3.mjs";
-import "../../../../base64-CmWvODNW.mjs";
-import "../../../../types-CuW0zWDA.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-CkAseSqZ.mjs";
-import { t as escapeHtml } from "../../../../escape-DqD0aCKu.mjs";
-import { t as isSafeRedirect } from "../../../../redirect-CoW3G-0U.mjs";
+import { a as runMigrations } from "../../../../runner-DfnZ5eUr.mjs";
+import "../../../../dialect-helpers-HxEQGl_1.mjs";
+import "../../../../base64-B-PsqheR.mjs";
+import "../../../../types-D1iJ3DpO.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-CEGF6UZb.mjs";
+import { t as escapeHtml } from "../../../../escape-CFedIB1C.mjs";
+import { t as isSafeRedirect } from "../../../../redirect-Botom7X6.mjs";
 import { ulid } from "ulidx";
 
 //#region src/astro/routes/api/auth/dev-bypass.ts

package/dist/astro/routes/api/auth/invite/accept.mjs

@@ -1,8 +1,8 @@
-import "../../../../../base64-CmWvODNW.mjs";
-import "../../../../../types-CuW0zWDA.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-CkAseSqZ.mjs";
-import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
+import "../../../../../base64-B-PsqheR.mjs";
+import "../../../../../types-D1iJ3DpO.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-CEGF6UZb.mjs";
 import { InviteError, roleFromLevel, validateInvite } from "@emdash-cms/auth";
+import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 
 //#region src/astro/routes/api/auth/invite/accept.ts
 const prerender = false;

package/dist/astro/routes/api/auth/invite/complete.mjs

@@ -1,18 +1,19 @@
-import "../../../../../base64-CmWvODNW.mjs";
-import "../../../../../types-CuW0zWDA.mjs";
-import { t as OptionsRepository } from "../../../../../options-DTTML-Tx.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-CkAseSqZ.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-GmjecGct.mjs";
-import "../../../../../redirects-DXEXBAII.mjs";
-import { y as inviteCompleteBody } from "../../../../../byline-fields-2Lp5Hbgf.mjs";
-import "../../../../../status-CqJQX1QN.mjs";
+import "../../../../../base64-B-PsqheR.mjs";
+import "../../../../../types-D1iJ3DpO.mjs";
+import { t as OptionsRepository } from "../../../../../options-BlmBHTvX.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-CEGF6UZb.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-C_-6klII.mjs";
+import "../../../../../media-kIV1IxFf.mjs";
+import "../../../../../redirects-BBq3n2Rj.mjs";
+import { k as inviteCompleteBody } from "../../../../../relations-5_avdrN_.mjs";
+import "../../../../../status-COfycGIU.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { n as getPublicOrigin } from "../../../../../public-url-Danv47cS.mjs";
-import { n as validateAllowedOrigins, t as getConfiguredAllowedOrigins } from "../../../../../allowed-origins-CRsJ6BPM.mjs";
-import { n as createChallengeStore } from "../../../../../challenge-store-anhwVER0.mjs";
-import { t as getPasskeyConfig } from "../../../../../passkey-config-De0ahnRg.mjs";
-import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
+import { n as getPublicOrigin } from "../../../../../public-url-DSGTnJFw.mjs";
+import { n as validateAllowedOrigins, t as getConfiguredAllowedOrigins } from "../../../../../allowed-origins-CCEi9bPI.mjs";
+import { n as createChallengeStore } from "../../../../../challenge-store-BFzgFRog.mjs";
+import { t as getPasskeyConfig } from "../../../../../passkey-config-C-SKpc0-.mjs";
 import { InviteError, completeInvite } from "@emdash-cms/auth";
+import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 import { registerPasskey, verifyRegistrationResponse } from "@emdash-cms/auth/passkey";
 
 //#region src/astro/routes/api/auth/invite/complete.ts