emdash 0.29.0 → 0.30.0

package/dist/astro/routes/api/typegen.mjs

@@ -1,6 +1,6 @@
-import "../../../base64-C74Msx8h.mjs";
-import "../../../types-Ch8pFMEm.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../error-CfJMLSkd.mjs";
+import "../../../base64-B-PsqheR.mjs";
+import "../../../types-D1iJ3DpO.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../error-CEGF6UZb.mjs";
 
 //#region src/astro/routes/api/typegen.ts
 const prerender = false;
@@ -19,7 +19,7 @@ async function safeListCollections(registry) {
 * Generate types content and metadata from the current schema.
 */
 async function generateTypes(registry) {
-	const { generateTypesFile, generateSchemaHash } = await import("../../../zod-generator-CrfV79De.mjs").then((n) => n.i);
+	const { generateTypesFile, generateSchemaHash } = await import("../../../zod-generator-B5prQ5M4.mjs").then((n) => n.i);
 	const collections = await safeListCollections(registry);
 	const collectionsWithFields = await Promise.all(collections.map(async (c) => {
 		const fields = await registry.listFields(c.id);
@@ -42,7 +42,7 @@ const GET = async ({ locals }) => {
 	const { emdash } = locals;
 	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash not configured", 500);
 	try {
-		const { SchemaRegistry } = await import("../../../registry-CyIXPi4E.mjs").then((n) => n.r);
+		const { SchemaRegistry } = await import("../../../registry-FV15nLge.mjs").then((n) => n.r);
 		const { types } = await generateTypes(new SchemaRegistry(emdash.db));
 		return new Response(types, {
 			status: 200,
@@ -66,7 +66,7 @@ const POST = async ({ locals }) => {
 	const { emdash } = locals;
 	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash not configured", 500);
 	try {
-		const { SchemaRegistry } = await import("../../../registry-CyIXPi4E.mjs").then((n) => n.r);
+		const { SchemaRegistry } = await import("../../../registry-FV15nLge.mjs").then((n) => n.r);
 		return apiSuccess(await generateTypes(new SchemaRegistry(emdash.db)));
 	} catch (error) {
 		return handleError(error, "Typegen failed", "TYPEGEN_ERROR");

package/dist/astro/routes/api/well-known/auth.mjs

@@ -1,5 +1,5 @@
 import { t as OptionsRepository } from "../../../../options-BlmBHTvX.mjs";
-import { t as getAuthMode } from "../../../../mode-BVnhGZ2o.mjs";
+import { t as getAuthMode } from "../../../../mode-fiXRMfeA.mjs";
 
 //#region src/astro/routes/api/well-known/auth.ts
 const prerender = false;

package/dist/astro/routes/api/well-known/oauth-authorization-server.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-authorization-server.d.mts","names":[],"sources":["../../../../../src/astro/routes/api/well-known/oauth-authorization-server.ts"],"mappings":";;;cAgBa,SAAA;AAAA,cAEA,GAAA,EAAK,QAAA"}
+{"version":3,"file":"oauth-authorization-server.d.mts","names":[],"sources":["../../../../../src/astro/routes/api/well-known/oauth-authorization-server.ts"],"mappings":";;;cAkBa,SAAA;AAAA,cAEA,GAAA,EAAK,QAAA"}

package/dist/astro/routes/api/well-known/oauth-authorization-server.mjs

@@ -1,10 +1,11 @@
-import { n as getPublicOrigin } from "../../../../public-url-C0cEvrRu.mjs";
-import { n as VALID_SCOPES } from "../../../../api-tokens-Dk2GrJMY.mjs";
+import { n as getPublicOrigin } from "../../../../public-url-DSGTnJFw.mjs";
+import { n as VALID_SCOPES } from "../../../../api-tokens-Cvmixds7.mjs";
+import virtualConfig from "virtual:emdash/config";
 
 //#region src/astro/routes/api/well-known/oauth-authorization-server.ts
 const prerender = false;
 const GET = async ({ url, locals }) => {
-	const origin = getPublicOrigin(url, locals.emdash?.config);
+	const origin = getPublicOrigin(url, locals.emdash?.config ?? virtualConfig);
 	const issuer = `${origin}/_emdash`;
 	return Response.json({
 		issuer,

package/dist/astro/routes/api/well-known/oauth-authorization-server.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-authorization-server.mjs","names":[],"sources":["../../../../../src/astro/routes/api/well-known/oauth-authorization-server.ts"],"sourcesContent":["/**\n * GET /.well-known/oauth-authorization-server/_emdash\n *\n * RFC 8414 Authorization Server Metadata. The path follows the RFC 8414\n * convention: the issuer's pathname (/_emdash) is appended after\n * /.well-known/oauth-authorization-server, so MCP clients can discover\n * it automatically from the authorization_servers URL.\n *\n * Public, unauthenticated.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { getPublicOrigin } from \"#api/public-url.js\";\nimport { VALID_SCOPES } from \"#auth/api-tokens.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ url, locals }) => {\n\tconst origin = getPublicOrigin(url, locals.emdash?.config);\n\tconst issuer = `${origin}/_emdash`;\n\n\treturn Response.json(\n\t\t{\n\t\t\tissuer,\n\t\t\tauthorization_endpoint: `${origin}/_emdash/oauth/authorize`,\n\t\t\ttoken_endpoint: `${origin}/_emdash/api/oauth/token`,\n\t\t\tscopes_supported: [...VALID_SCOPES],\n\t\t\tresponse_types_supported: [\"code\"],\n\t\t\tgrant_types_supported: [\n\t\t\t\t\"authorization_code\",\n\t\t\t\t\"refresh_token\",\n\t\t\t\t\"urn:ietf:params:oauth:grant-type:device_code\",\n\t\t\t],\n\t\t\tcode_challenge_methods_supported: [\"S256\"],\n\t\t\tregistration_endpoint: `${origin}/_emdash/api/oauth/register`,\n\t\t\ttoken_endpoint_auth_methods_supported: [\"none\"],\n\t\t\tdevice_authorization_endpoint: `${origin}/_emdash/api/oauth/device/code`,\n\t\t},\n\t\t{\n\t\t\theaders: {\n\t\t\t\t\"Cache-Control\": \"public, max-age=3600\",\n\t\t\t\t\"Access-Control-Allow-Origin\": \"*\",\n\t\t\t},\n\t\t},\n\t);\n};\n"],"mappings":";;;;AAgBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CACvD,MAAM,SAAS,gBAAgB,KAAK,OAAO,QAAQ,OAAO;CAC1D,MAAM,SAAS,GAAG,OAAO;AAEzB,QAAO,SAAS,KACf;EACC;EACA,wBAAwB,GAAG,OAAO;EAClC,gBAAgB,GAAG,OAAO;EAC1B,kBAAkB,CAAC,GAAG,aAAa;EACnC,0BAA0B,CAAC,OAAO;EAClC,uBAAuB;GACtB;GACA;GACA;GACA;EACD,kCAAkC,CAAC,OAAO;EAC1C,uBAAuB,GAAG,OAAO;EACjC,uCAAuC,CAAC,OAAO;EAC/C,+BAA+B,GAAG,OAAO;EACzC,EACD,EACC,SAAS;EACR,iBAAiB;EACjB,+BAA+B;EAC/B,EACD,CACD"}
+{"version":3,"file":"oauth-authorization-server.mjs","names":[],"sources":["../../../../../src/astro/routes/api/well-known/oauth-authorization-server.ts"],"sourcesContent":["/**\n * GET /.well-known/oauth-authorization-server/_emdash\n *\n * RFC 8414 Authorization Server Metadata. The path follows the RFC 8414\n * convention: the issuer's pathname (/_emdash) is appended after\n * /.well-known/oauth-authorization-server, so MCP clients can discover\n * it automatically from the authorization_servers URL.\n *\n * Public, unauthenticated.\n */\n\nimport type { APIRoute } from \"astro\";\n// @ts-ignore - virtual module\nimport virtualConfig from \"virtual:emdash/config\";\n\nimport { getPublicOrigin } from \"#api/public-url.js\";\nimport { VALID_SCOPES } from \"#auth/api-tokens.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ url, locals }) => {\n\t// Same fallback as oauth-protected-resource.ts (#2016).\n\tconst origin = getPublicOrigin(url, locals.emdash?.config ?? virtualConfig);\n\tconst issuer = `${origin}/_emdash`;\n\n\treturn Response.json(\n\t\t{\n\t\t\tissuer,\n\t\t\tauthorization_endpoint: `${origin}/_emdash/oauth/authorize`,\n\t\t\ttoken_endpoint: `${origin}/_emdash/api/oauth/token`,\n\t\t\tscopes_supported: [...VALID_SCOPES],\n\t\t\tresponse_types_supported: [\"code\"],\n\t\t\tgrant_types_supported: [\n\t\t\t\t\"authorization_code\",\n\t\t\t\t\"refresh_token\",\n\t\t\t\t\"urn:ietf:params:oauth:grant-type:device_code\",\n\t\t\t],\n\t\t\tcode_challenge_methods_supported: [\"S256\"],\n\t\t\tregistration_endpoint: `${origin}/_emdash/api/oauth/register`,\n\t\t\ttoken_endpoint_auth_methods_supported: [\"none\"],\n\t\t\tdevice_authorization_endpoint: `${origin}/_emdash/api/oauth/device/code`,\n\t\t},\n\t\t{\n\t\t\theaders: {\n\t\t\t\t\"Cache-Control\": \"public, max-age=3600\",\n\t\t\t\t\"Access-Control-Allow-Origin\": \"*\",\n\t\t\t},\n\t\t},\n\t);\n};\n"],"mappings":";;;;;AAkBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CAEvD,MAAM,SAAS,gBAAgB,KAAK,OAAO,QAAQ,UAAU,cAAc;CAC3E,MAAM,SAAS,GAAG,OAAO;AAEzB,QAAO,SAAS,KACf;EACC;EACA,wBAAwB,GAAG,OAAO;EAClC,gBAAgB,GAAG,OAAO;EAC1B,kBAAkB,CAAC,GAAG,aAAa;EACnC,0BAA0B,CAAC,OAAO;EAClC,uBAAuB;GACtB;GACA;GACA;GACA;EACD,kCAAkC,CAAC,OAAO;EAC1C,uBAAuB,GAAG,OAAO;EACjC,uCAAuC,CAAC,OAAO;EAC/C,+BAA+B,GAAG,OAAO;EACzC,EACD,EACC,SAAS;EACR,iBAAiB;EACjB,+BAA+B;EAC/B,EACD,CACD"}

package/dist/astro/routes/api/well-known/oauth-protected-resource.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-protected-resource.d.mts","names":[],"sources":["../../../../../src/astro/routes/api/well-known/oauth-protected-resource.ts"],"mappings":";;;cAkBa,SAAA;AAAA,cAEA,GAAA,EAAK,QAAA"}
+{"version":3,"file":"oauth-protected-resource.d.mts","names":[],"sources":["../../../../../src/astro/routes/api/well-known/oauth-protected-resource.ts"],"mappings":";;;cAoBa,SAAA;AAAA,cAEA,GAAA,EAAK,QAAA"}

package/dist/astro/routes/api/well-known/oauth-protected-resource.mjs

@@ -1,10 +1,11 @@
-import { n as getPublicOrigin } from "../../../../public-url-C0cEvrRu.mjs";
-import { n as VALID_SCOPES } from "../../../../api-tokens-Dk2GrJMY.mjs";
+import { n as getPublicOrigin } from "../../../../public-url-DSGTnJFw.mjs";
+import { n as VALID_SCOPES } from "../../../../api-tokens-Cvmixds7.mjs";
+import virtualConfig from "virtual:emdash/config";
 
 //#region src/astro/routes/api/well-known/oauth-protected-resource.ts
 const prerender = false;
 const GET = async ({ url, locals }) => {
-	const origin = getPublicOrigin(url, locals.emdash?.config);
+	const origin = getPublicOrigin(url, locals.emdash?.config ?? virtualConfig);
 	return Response.json({
 		resource: `${origin}/_emdash/api/mcp`,
 		authorization_servers: [`${origin}/_emdash`],

package/dist/astro/routes/api/well-known/oauth-protected-resource.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-protected-resource.mjs","names":[],"sources":["../../../../../src/astro/routes/api/well-known/oauth-protected-resource.ts"],"sourcesContent":["/**\n * GET /.well-known/oauth-protected-resource\n *\n * RFC 9728 Protected Resource Metadata. Tells MCP clients where to find\n * the authorization server. Injected at the site root (not under /_emdash/)\n * because RFC 9728 requires it at the well-known URI of the resource's origin.\n *\n * Also serves as `/.well-known/oauth-protected-resource/_emdash/api/mcp`\n * (path-scoped variant) when Astro's routing allows.\n *\n * Public, unauthenticated.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { getPublicOrigin } from \"#api/public-url.js\";\nimport { VALID_SCOPES } from \"#auth/api-tokens.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ url, locals }) => {\n\tconst origin = getPublicOrigin(url, locals.emdash?.config);\n\n\treturn Response.json(\n\t\t{\n\t\t\tresource: `${origin}/_emdash/api/mcp`,\n\t\t\tauthorization_servers: [`${origin}/_emdash`],\n\t\t\tscopes_supported: [...VALID_SCOPES],\n\t\t\tbearer_methods_supported: [\"header\"],\n\t\t},\n\t\t{\n\t\t\theaders: {\n\t\t\t\t\"Cache-Control\": \"public, max-age=3600\",\n\t\t\t\t\"Access-Control-Allow-Origin\": \"*\",\n\t\t\t},\n\t\t},\n\t);\n};\n"],"mappings":";;;;AAkBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CACvD,MAAM,SAAS,gBAAgB,KAAK,OAAO,QAAQ,OAAO;AAE1D,QAAO,SAAS,KACf;EACC,UAAU,GAAG,OAAO;EACpB,uBAAuB,CAAC,GAAG,OAAO,UAAU;EAC5C,kBAAkB,CAAC,GAAG,aAAa;EACnC,0BAA0B,CAAC,SAAS;EACpC,EACD,EACC,SAAS;EACR,iBAAiB;EACjB,+BAA+B;EAC/B,EACD,CACD"}
+{"version":3,"file":"oauth-protected-resource.mjs","names":[],"sources":["../../../../../src/astro/routes/api/well-known/oauth-protected-resource.ts"],"sourcesContent":["/**\n * GET /.well-known/oauth-protected-resource\n *\n * RFC 9728 Protected Resource Metadata. Tells MCP clients where to find\n * the authorization server. Injected at the site root (not under /_emdash/)\n * because RFC 9728 requires it at the well-known URI of the resource's origin.\n *\n * Also serves as `/.well-known/oauth-protected-resource/_emdash/api/mcp`\n * (path-scoped variant) when Astro's routing allows.\n *\n * Public, unauthenticated.\n */\n\nimport type { APIRoute } from \"astro\";\n// @ts-ignore - virtual module\nimport virtualConfig from \"virtual:emdash/config\";\n\nimport { getPublicOrigin } from \"#api/public-url.js\";\nimport { VALID_SCOPES } from \"#auth/api-tokens.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ url, locals }) => {\n\t// Anonymous discovery requests omit runtime config; use build-time config\n\t// so `siteUrl` can override the proxy's internal origin (#2016).\n\tconst origin = getPublicOrigin(url, locals.emdash?.config ?? virtualConfig);\n\n\treturn Response.json(\n\t\t{\n\t\t\tresource: `${origin}/_emdash/api/mcp`,\n\t\t\tauthorization_servers: [`${origin}/_emdash`],\n\t\t\tscopes_supported: [...VALID_SCOPES],\n\t\t\tbearer_methods_supported: [\"header\"],\n\t\t},\n\t\t{\n\t\t\theaders: {\n\t\t\t\t\"Cache-Control\": \"public, max-age=3600\",\n\t\t\t\t\"Access-Control-Allow-Origin\": \"*\",\n\t\t\t},\n\t\t},\n\t);\n};\n"],"mappings":";;;;;AAoBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CAGvD,MAAM,SAAS,gBAAgB,KAAK,OAAO,QAAQ,UAAU,cAAc;AAE3E,QAAO,SAAS,KACf;EACC,UAAU,GAAG,OAAO;EACpB,uBAAuB,CAAC,GAAG,OAAO,UAAU;EAC5C,kBAAkB,CAAC,GAAG,aAAa;EACnC,0BAA0B,CAAC,SAAS;EACpC,EACD,EACC,SAAS;EACR,iBAAiB;EACjB,+BAA+B;EAC/B,EACD,CACD"}

package/dist/astro/routes/api/widget-areas/_name_/reorder.mjs

@@ -1,12 +1,13 @@
-import "../../../../../base64-C74Msx8h.mjs";
-import "../../../../../types-Ch8pFMEm.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-CfJMLSkd.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-GLksnn-B.mjs";
-import { h as reorderWidgetsBody } from "../../../../../redirects-CeD7K7EX.mjs";
-import "../../../../../relations-BmBmX4Eb.mjs";
-import "../../../../../status-D3Gy1Zc6.mjs";
+import "../../../../../base64-B-PsqheR.mjs";
+import "../../../../../types-D1iJ3DpO.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-CEGF6UZb.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-C_-6klII.mjs";
+import "../../../../../media-kIV1IxFf.mjs";
+import { h as reorderWidgetsBody } from "../../../../../redirects-BBq3n2Rj.mjs";
+import "../../../../../relations-5_avdrN_.mjs";
+import "../../../../../status-COfycGIU.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { n as requirePerm } from "../../../../../authorize-BmCwQCib.mjs";
+import { r as requirePerm } from "../../../../../authorize-WxsiePzy.mjs";
 
 //#region src/astro/routes/api/widget-areas/[name]/reorder.ts
 const prerender = false;

package/dist/astro/routes/api/widget-areas/_name_/reorder.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"reorder.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/widget-areas/[name]/reorder.ts"],"sourcesContent":["/**\n * Reorder widgets endpoint\n *\n * POST /_emdash/api/widget-areas/:name/reorder\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { reorderWidgetsBody } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\nexport const POST: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst db = emdash.db;\n\tconst { name } = params;\n\n\tconst denied = requirePerm(user, \"widgets:manage\");\n\tif (denied) return denied;\n\n\tif (!name) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"name is required\", 400);\n\t}\n\n\ttry {\n\t\t// Get the area\n\t\tconst area = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"name\", \"=\", name)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!area) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Widget area \"${name}\" not found`, 404);\n\t\t}\n\n\t\tconst body = await parseBody(request, reorderWidgetsBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Verify all widget IDs belong to this area\n\t\tconst existingWidgets = await db\n\t\t\t.selectFrom(\"_emdash_widgets\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"area_id\", \"=\", area.id)\n\t\t\t.execute();\n\n\t\tconst existingIds = new Set(existingWidgets.map((w) => w.id));\n\t\tfor (const id of body.widgetIds) {\n\t\t\tif (!existingIds.has(id)) {\n\t\t\t\treturn apiError(\"VALIDATION_ERROR\", `Widget \"${id}\" not found in area \"${name}\"`, 400);\n\t\t\t}\n\t\t}\n\n\t\t// Update sort_order for each widget\n\t\tawait Promise.all(\n\t\t\tbody.widgetIds.map((id, index) =>\n\t\t\t\tdb.updateTable(\"_emdash_widgets\").set({ sort_order: index }).where(\"id\", \"=\", id).execute(),\n\t\t\t),\n\t\t);\n\n\t\treturn apiSuccess({ success: true });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to reorder widgets\", \"WIDGET_REORDER_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;AAaA,MAAa,YAAY;AAEzB,MAAa,OAAiB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACpE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,KAAK,OAAO;CAClB,MAAM,EAAE,SAAS;CAEjB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,KACJ,QAAO,SAAS,oBAAoB,oBAAoB,IAAI;AAG7D,KAAI;EAEH,MAAM,OAAO,MAAM,GACjB,WAAW,uBAAuB,CAClC,OAAO,KAAK,CACZ,MAAM,QAAQ,KAAK,KAAK,CACxB,kBAAkB;AAEpB,MAAI,CAAC,KACJ,QAAO,SAAS,aAAa,gBAAgB,KAAK,cAAc,IAAI;EAGrE,MAAM,OAAO,MAAM,UAAU,SAAS,mBAAmB;AACzD,MAAI,aAAa,KAAK,CAAE,QAAO;EAG/B,MAAM,kBAAkB,MAAM,GAC5B,WAAW,kBAAkB,CAC7B,OAAO,KAAK,CACZ,MAAM,WAAW,KAAK,KAAK,GAAG,CAC9B,SAAS;EAEX,MAAM,cAAc,IAAI,IAAI,gBAAgB,KAAK,MAAM,EAAE,GAAG,CAAC;AAC7D,OAAK,MAAM,MAAM,KAAK,UACrB,KAAI,CAAC,YAAY,IAAI,GAAG,CACvB,QAAO,SAAS,oBAAoB,WAAW,GAAG,uBAAuB,KAAK,IAAI,IAAI;AAKxF,QAAM,QAAQ,IACb,KAAK,UAAU,KAAK,IAAI,UACvB,GAAG,YAAY,kBAAkB,CAAC,IAAI,EAAE,YAAY,OAAO,CAAC,CAAC,MAAM,MAAM,KAAK,GAAG,CAAC,SAAS,CAC3F,CACD;AAED,SAAO,WAAW,EAAE,SAAS,MAAM,CAAC;UAC5B,OAAO;AACf,SAAO,YAAY,OAAO,6BAA6B,uBAAuB"}
+{"version":3,"file":"reorder.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/widget-areas/[name]/reorder.ts"],"sourcesContent":["/**\n * Reorder widgets endpoint\n *\n * POST /_emdash/api/widget-areas/:name/reorder\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { reorderWidgetsBody } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\nexport const POST: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst db = emdash.db;\n\tconst { name } = params;\n\n\tconst denied = requirePerm(user, \"widgets:manage\");\n\tif (denied) return denied;\n\n\tif (!name) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"name is required\", 400);\n\t}\n\n\ttry {\n\t\t// Get the area\n\t\tconst area = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"name\", \"=\", name)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!area) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Widget area \"${name}\" not found`, 404);\n\t\t}\n\n\t\tconst body = await parseBody(request, reorderWidgetsBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Verify all widget IDs belong to this area\n\t\tconst existingWidgets = await db\n\t\t\t.selectFrom(\"_emdash_widgets\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"area_id\", \"=\", area.id)\n\t\t\t.execute();\n\n\t\tconst existingIds = new Set(existingWidgets.map((w) => w.id));\n\t\tfor (const id of body.widgetIds) {\n\t\t\tif (!existingIds.has(id)) {\n\t\t\t\treturn apiError(\"VALIDATION_ERROR\", `Widget \"${id}\" not found in area \"${name}\"`, 400);\n\t\t\t}\n\t\t}\n\n\t\t// Update sort_order for each widget\n\t\tawait Promise.all(\n\t\t\tbody.widgetIds.map((id, index) =>\n\t\t\t\tdb.updateTable(\"_emdash_widgets\").set({ sort_order: index }).where(\"id\", \"=\", id).execute(),\n\t\t\t),\n\t\t);\n\n\t\treturn apiSuccess({ success: true });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to reorder widgets\", \"WIDGET_REORDER_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;AAaA,MAAa,YAAY;AAEzB,MAAa,OAAiB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACpE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,KAAK,OAAO;CAClB,MAAM,EAAE,SAAS;CAEjB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,KACJ,QAAO,SAAS,oBAAoB,oBAAoB,IAAI;AAG7D,KAAI;EAEH,MAAM,OAAO,MAAM,GACjB,WAAW,uBAAuB,CAClC,OAAO,KAAK,CACZ,MAAM,QAAQ,KAAK,KAAK,CACxB,kBAAkB;AAEpB,MAAI,CAAC,KACJ,QAAO,SAAS,aAAa,gBAAgB,KAAK,cAAc,IAAI;EAGrE,MAAM,OAAO,MAAM,UAAU,SAAS,mBAAmB;AACzD,MAAI,aAAa,KAAK,CAAE,QAAO;EAG/B,MAAM,kBAAkB,MAAM,GAC5B,WAAW,kBAAkB,CAC7B,OAAO,KAAK,CACZ,MAAM,WAAW,KAAK,KAAK,GAAG,CAC9B,SAAS;EAEX,MAAM,cAAc,IAAI,IAAI,gBAAgB,KAAK,MAAM,EAAE,GAAG,CAAC;AAC7D,OAAK,MAAM,MAAM,KAAK,UACrB,KAAI,CAAC,YAAY,IAAI,GAAG,CACvB,QAAO,SAAS,oBAAoB,WAAW,GAAG,uBAAuB,KAAK,IAAI,IAAI;AAKxF,QAAM,QAAQ,IACb,KAAK,UAAU,KAAK,IAAI,UACvB,GAAG,YAAY,kBAAkB,CAAC,IAAI,EAAE,YAAY,OAAO,CAAC,CAAC,MAAM,MAAM,KAAK,GAAG,CAAC,SAAS,CAC3F,CACD;AAED,SAAO,WAAW,EAAE,SAAS,MAAM,CAAC;UAC5B,OAAO;AACf,SAAO,YAAY,OAAO,6BAA6B,uBAAuB"}

package/dist/astro/routes/api/widget-areas/_name_/widgets/_id_.mjs

@@ -1,16 +1,17 @@
-import "../../../../../../dialect-helpers-Cue7QQOR.mjs";
-import "../../../../../../base64-C74Msx8h.mjs";
-import "../../../../../../types-Ch8pFMEm.mjs";
+import "../../../../../../dialect-helpers-HxEQGl_1.mjs";
+import "../../../../../../base64-B-PsqheR.mjs";
+import "../../../../../../types-D1iJ3DpO.mjs";
 import "../../../../../../request-cache-BSUptuJR.mjs";
-import "../../../../../../loader-Rb8QlGZp.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-CfJMLSkd.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../../parse-GLksnn-B.mjs";
-import { g as updateWidgetBody } from "../../../../../../redirects-CeD7K7EX.mjs";
-import "../../../../../../relations-BmBmX4Eb.mjs";
-import "../../../../../../status-D3Gy1Zc6.mjs";
+import "../../../../../../loader-Be3ouI5L.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-CEGF6UZb.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../../parse-C_-6klII.mjs";
+import "../../../../../../media-kIV1IxFf.mjs";
+import { g as updateWidgetBody } from "../../../../../../redirects-BBq3n2Rj.mjs";
+import "../../../../../../relations-5_avdrN_.mjs";
+import "../../../../../../status-COfycGIU.mjs";
 import "../../../../../../api/schemas/index.mjs";
-import { i as rowToWidget } from "../../../../../../widgets-B_X6_UXJ.mjs";
-import { n as requirePerm } from "../../../../../../authorize-BmCwQCib.mjs";
+import { i as rowToWidget } from "../../../../../../widgets-DGv1Z04V.mjs";
+import { r as requirePerm } from "../../../../../../authorize-WxsiePzy.mjs";
 
 //#region src/astro/routes/api/widget-areas/[name]/widgets/[id].ts
 const prerender = false;

package/dist/astro/routes/api/widget-areas/_name_/widgets/_id_.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"_id_.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/widget-areas/[name]/widgets/[id].ts"],"sourcesContent":["/**\n * Single widget endpoints\n *\n * PUT    /_emdash/api/widget-areas/:name/widgets/:id - Update widget\n * DELETE /_emdash/api/widget-areas/:name/widgets/:id - Delete widget\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { updateWidgetBody } from \"#api/schemas.js\";\nimport { rowToWidget } from \"#widgets/index.js\";\nimport type { WidgetRow } from \"#widgets/types.js\";\n\nexport const prerender = false;\n\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst db = emdash.db;\n\tconst { name, id } = params;\n\n\tconst denied = requirePerm(user, \"widgets:manage\");\n\tif (denied) return denied;\n\n\tif (!name || !id) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"name and id are required\", 400);\n\t}\n\n\ttry {\n\t\t// Get the area\n\t\tconst area = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"name\", \"=\", name)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!area) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Widget area \"${name}\" not found`, 404);\n\t\t}\n\n\t\t// Check widget exists and belongs to this area\n\t\tconst existingWidget = await db\n\t\t\t.selectFrom(\"_emdash_widgets\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"area_id\", \"=\", area.id)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!existingWidget) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Widget \"${id}\" not found in area \"${name}\"`, 404);\n\t\t}\n\n\t\tconst body = await parseBody(request, updateWidgetBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Build update object (only update provided fields)\n\t\tconst updates: Record<string, unknown> = {};\n\t\tif (body.title !== undefined) updates.title = body.title || null;\n\t\tif (body.type !== undefined) updates.type = body.type;\n\t\tif (body.content !== undefined)\n\t\t\tupdates.content = body.content ? JSON.stringify(body.content) : null;\n\t\tif (body.menuName !== undefined) updates.menu_name = body.menuName || null;\n\t\tif (body.componentId !== undefined) updates.component_id = body.componentId || null;\n\t\tif (body.componentProps !== undefined)\n\t\t\tupdates.component_props = body.componentProps ? JSON.stringify(body.componentProps) : null;\n\n\t\tif (Object.keys(updates).length === 0) {\n\t\t\treturn apiError(\"VALIDATION_ERROR\", \"No fields to update\", 400);\n\t\t}\n\n\t\tawait db.updateTable(\"_emdash_widgets\").set(updates).where(\"id\", \"=\", id).execute();\n\n\t\tconst widget = await db\n\t\t\t.selectFrom(\"_emdash_widgets\")\n\t\t\t.selectAll()\n\t\t\t.$castTo<WidgetRow>()\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirstOrThrow();\n\n\t\treturn apiSuccess(rowToWidget(widget));\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update widget\", \"WIDGET_UPDATE_ERROR\");\n\t}\n};\n\nexport const DELETE: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst db = emdash.db;\n\tconst { name, id } = params;\n\n\tconst denied = requirePerm(user, \"widgets:manage\");\n\tif (denied) return denied;\n\n\tif (!name || !id) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"name and id are required\", 400);\n\t}\n\n\ttry {\n\t\t// Get the area\n\t\tconst area = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"name\", \"=\", name)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!area) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Widget area \"${name}\" not found`, 404);\n\t\t}\n\n\t\t// Check widget exists and belongs to this area\n\t\tconst existingWidget = await db\n\t\t\t.selectFrom(\"_emdash_widgets\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"area_id\", \"=\", area.id)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!existingWidget) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Widget \"${id}\" not found in area \"${name}\"`, 404);\n\t\t}\n\n\t\tawait db.deleteFrom(\"_emdash_widgets\").where(\"id\", \"=\", id).execute();\n\n\t\treturn apiSuccess({ deleted: true });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to delete widget\", \"WIDGET_DELETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;AAgBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,KAAK,OAAO;CAClB,MAAM,EAAE,MAAM,OAAO;CAErB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,QAAQ,CAAC,GACb,QAAO,SAAS,oBAAoB,4BAA4B,IAAI;AAGrE,KAAI;EAEH,MAAM,OAAO,MAAM,GACjB,WAAW,uBAAuB,CAClC,OAAO,KAAK,CACZ,MAAM,QAAQ,KAAK,KAAK,CACxB,kBAAkB;AAEpB,MAAI,CAAC,KACJ,QAAO,SAAS,aAAa,gBAAgB,KAAK,cAAc,IAAI;AAWrE,MAAI,CAPmB,MAAM,GAC3B,WAAW,kBAAkB,CAC7B,OAAO,KAAK,CACZ,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,WAAW,KAAK,KAAK,GAAG,CAC9B,kBAAkB,CAGnB,QAAO,SAAS,aAAa,WAAW,GAAG,uBAAuB,KAAK,IAAI,IAAI;EAGhF,MAAM,OAAO,MAAM,UAAU,SAAS,iBAAiB;AACvD,MAAI,aAAa,KAAK,CAAE,QAAO;EAG/B,MAAM,UAAmC,EAAE;AAC3C,MAAI,KAAK,UAAU,OAAW,SAAQ,QAAQ,KAAK,SAAS;AAC5D,MAAI,KAAK,SAAS,OAAW,SAAQ,OAAO,KAAK;AACjD,MAAI,KAAK,YAAY,OACpB,SAAQ,UAAU,KAAK,UAAU,KAAK,UAAU,KAAK,QAAQ,GAAG;AACjE,MAAI,KAAK,aAAa,OAAW,SAAQ,YAAY,KAAK,YAAY;AACtE,MAAI,KAAK,gBAAgB,OAAW,SAAQ,eAAe,KAAK,eAAe;AAC/E,MAAI,KAAK,mBAAmB,OAC3B,SAAQ,kBAAkB,KAAK,iBAAiB,KAAK,UAAU,KAAK,eAAe,GAAG;AAEvF,MAAI,OAAO,KAAK,QAAQ,CAAC,WAAW,EACnC,QAAO,SAAS,oBAAoB,uBAAuB,IAAI;AAGhE,QAAM,GAAG,YAAY,kBAAkB,CAAC,IAAI,QAAQ,CAAC,MAAM,MAAM,KAAK,GAAG,CAAC,SAAS;AASnF,SAAO,WAAW,YAPH,MAAM,GACnB,WAAW,kBAAkB,CAC7B,WAAW,CACX,SAAoB,CACpB,MAAM,MAAM,KAAK,GAAG,CACpB,yBAAyB,CAEU,CAAC;UAC9B,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,sBAAsB;;;AAI7E,MAAa,SAAmB,OAAO,EAAE,QAAQ,aAAa;CAC7D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,KAAK,OAAO;CAClB,MAAM,EAAE,MAAM,OAAO;CAErB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,QAAQ,CAAC,GACb,QAAO,SAAS,oBAAoB,4BAA4B,IAAI;AAGrE,KAAI;EAEH,MAAM,OAAO,MAAM,GACjB,WAAW,uBAAuB,CAClC,OAAO,KAAK,CACZ,MAAM,QAAQ,KAAK,KAAK,CACxB,kBAAkB;AAEpB,MAAI,CAAC,KACJ,QAAO,SAAS,aAAa,gBAAgB,KAAK,cAAc,IAAI;AAWrE,MAAI,CAPmB,MAAM,GAC3B,WAAW,kBAAkB,CAC7B,OAAO,KAAK,CACZ,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,WAAW,KAAK,KAAK,GAAG,CAC9B,kBAAkB,CAGnB,QAAO,SAAS,aAAa,WAAW,GAAG,uBAAuB,KAAK,IAAI,IAAI;AAGhF,QAAM,GAAG,WAAW,kBAAkB,CAAC,MAAM,MAAM,KAAK,GAAG,CAAC,SAAS;AAErE,SAAO,WAAW,EAAE,SAAS,MAAM,CAAC;UAC5B,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,sBAAsB"}
+{"version":3,"file":"_id_.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/widget-areas/[name]/widgets/[id].ts"],"sourcesContent":["/**\n * Single widget endpoints\n *\n * PUT    /_emdash/api/widget-areas/:name/widgets/:id - Update widget\n * DELETE /_emdash/api/widget-areas/:name/widgets/:id - Delete widget\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { updateWidgetBody } from \"#api/schemas.js\";\nimport { rowToWidget } from \"#widgets/index.js\";\nimport type { WidgetRow } from \"#widgets/types.js\";\n\nexport const prerender = false;\n\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst db = emdash.db;\n\tconst { name, id } = params;\n\n\tconst denied = requirePerm(user, \"widgets:manage\");\n\tif (denied) return denied;\n\n\tif (!name || !id) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"name and id are required\", 400);\n\t}\n\n\ttry {\n\t\t// Get the area\n\t\tconst area = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"name\", \"=\", name)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!area) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Widget area \"${name}\" not found`, 404);\n\t\t}\n\n\t\t// Check widget exists and belongs to this area\n\t\tconst existingWidget = await db\n\t\t\t.selectFrom(\"_emdash_widgets\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"area_id\", \"=\", area.id)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!existingWidget) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Widget \"${id}\" not found in area \"${name}\"`, 404);\n\t\t}\n\n\t\tconst body = await parseBody(request, updateWidgetBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Build update object (only update provided fields)\n\t\tconst updates: Record<string, unknown> = {};\n\t\tif (body.title !== undefined) updates.title = body.title || null;\n\t\tif (body.type !== undefined) updates.type = body.type;\n\t\tif (body.content !== undefined)\n\t\t\tupdates.content = body.content ? JSON.stringify(body.content) : null;\n\t\tif (body.menuName !== undefined) updates.menu_name = body.menuName || null;\n\t\tif (body.componentId !== undefined) updates.component_id = body.componentId || null;\n\t\tif (body.componentProps !== undefined)\n\t\t\tupdates.component_props = body.componentProps ? JSON.stringify(body.componentProps) : null;\n\n\t\tif (Object.keys(updates).length === 0) {\n\t\t\treturn apiError(\"VALIDATION_ERROR\", \"No fields to update\", 400);\n\t\t}\n\n\t\tawait db.updateTable(\"_emdash_widgets\").set(updates).where(\"id\", \"=\", id).execute();\n\n\t\tconst widget = await db\n\t\t\t.selectFrom(\"_emdash_widgets\")\n\t\t\t.selectAll()\n\t\t\t.$castTo<WidgetRow>()\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirstOrThrow();\n\n\t\treturn apiSuccess(rowToWidget(widget));\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update widget\", \"WIDGET_UPDATE_ERROR\");\n\t}\n};\n\nexport const DELETE: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst db = emdash.db;\n\tconst { name, id } = params;\n\n\tconst denied = requirePerm(user, \"widgets:manage\");\n\tif (denied) return denied;\n\n\tif (!name || !id) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"name and id are required\", 400);\n\t}\n\n\ttry {\n\t\t// Get the area\n\t\tconst area = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"name\", \"=\", name)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!area) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Widget area \"${name}\" not found`, 404);\n\t\t}\n\n\t\t// Check widget exists and belongs to this area\n\t\tconst existingWidget = await db\n\t\t\t.selectFrom(\"_emdash_widgets\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"area_id\", \"=\", area.id)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!existingWidget) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Widget \"${id}\" not found in area \"${name}\"`, 404);\n\t\t}\n\n\t\tawait db.deleteFrom(\"_emdash_widgets\").where(\"id\", \"=\", id).execute();\n\n\t\treturn apiSuccess({ deleted: true });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to delete widget\", \"WIDGET_DELETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;AAgBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,KAAK,OAAO;CAClB,MAAM,EAAE,MAAM,OAAO;CAErB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,QAAQ,CAAC,GACb,QAAO,SAAS,oBAAoB,4BAA4B,IAAI;AAGrE,KAAI;EAEH,MAAM,OAAO,MAAM,GACjB,WAAW,uBAAuB,CAClC,OAAO,KAAK,CACZ,MAAM,QAAQ,KAAK,KAAK,CACxB,kBAAkB;AAEpB,MAAI,CAAC,KACJ,QAAO,SAAS,aAAa,gBAAgB,KAAK,cAAc,IAAI;AAWrE,MAAI,CAPmB,MAAM,GAC3B,WAAW,kBAAkB,CAC7B,OAAO,KAAK,CACZ,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,WAAW,KAAK,KAAK,GAAG,CAC9B,kBAAkB,CAGnB,QAAO,SAAS,aAAa,WAAW,GAAG,uBAAuB,KAAK,IAAI,IAAI;EAGhF,MAAM,OAAO,MAAM,UAAU,SAAS,iBAAiB;AACvD,MAAI,aAAa,KAAK,CAAE,QAAO;EAG/B,MAAM,UAAmC,EAAE;AAC3C,MAAI,KAAK,UAAU,OAAW,SAAQ,QAAQ,KAAK,SAAS;AAC5D,MAAI,KAAK,SAAS,OAAW,SAAQ,OAAO,KAAK;AACjD,MAAI,KAAK,YAAY,OACpB,SAAQ,UAAU,KAAK,UAAU,KAAK,UAAU,KAAK,QAAQ,GAAG;AACjE,MAAI,KAAK,aAAa,OAAW,SAAQ,YAAY,KAAK,YAAY;AACtE,MAAI,KAAK,gBAAgB,OAAW,SAAQ,eAAe,KAAK,eAAe;AAC/E,MAAI,KAAK,mBAAmB,OAC3B,SAAQ,kBAAkB,KAAK,iBAAiB,KAAK,UAAU,KAAK,eAAe,GAAG;AAEvF,MAAI,OAAO,KAAK,QAAQ,CAAC,WAAW,EACnC,QAAO,SAAS,oBAAoB,uBAAuB,IAAI;AAGhE,QAAM,GAAG,YAAY,kBAAkB,CAAC,IAAI,QAAQ,CAAC,MAAM,MAAM,KAAK,GAAG,CAAC,SAAS;AASnF,SAAO,WAAW,YAPH,MAAM,GACnB,WAAW,kBAAkB,CAC7B,WAAW,CACX,SAAoB,CACpB,MAAM,MAAM,KAAK,GAAG,CACpB,yBAAyB,CAEU,CAAC;UAC9B,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,sBAAsB;;;AAI7E,MAAa,SAAmB,OAAO,EAAE,QAAQ,aAAa;CAC7D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,KAAK,OAAO;CAClB,MAAM,EAAE,MAAM,OAAO;CAErB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,QAAQ,CAAC,GACb,QAAO,SAAS,oBAAoB,4BAA4B,IAAI;AAGrE,KAAI;EAEH,MAAM,OAAO,MAAM,GACjB,WAAW,uBAAuB,CAClC,OAAO,KAAK,CACZ,MAAM,QAAQ,KAAK,KAAK,CACxB,kBAAkB;AAEpB,MAAI,CAAC,KACJ,QAAO,SAAS,aAAa,gBAAgB,KAAK,cAAc,IAAI;AAWrE,MAAI,CAPmB,MAAM,GAC3B,WAAW,kBAAkB,CAC7B,OAAO,KAAK,CACZ,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,WAAW,KAAK,KAAK,GAAG,CAC9B,kBAAkB,CAGnB,QAAO,SAAS,aAAa,WAAW,GAAG,uBAAuB,KAAK,IAAI,IAAI;AAGhF,QAAM,GAAG,WAAW,kBAAkB,CAAC,MAAM,MAAM,KAAK,GAAG,CAAC,SAAS;AAErE,SAAO,WAAW,EAAE,SAAS,MAAM,CAAC;UAC5B,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,sBAAsB"}

package/dist/astro/routes/api/widget-areas/_name_/widgets.mjs

@@ -1,16 +1,17 @@
-import "../../../../../dialect-helpers-Cue7QQOR.mjs";
-import "../../../../../base64-C74Msx8h.mjs";
-import "../../../../../types-Ch8pFMEm.mjs";
+import "../../../../../dialect-helpers-HxEQGl_1.mjs";
+import "../../../../../base64-B-PsqheR.mjs";
+import "../../../../../types-D1iJ3DpO.mjs";
 import "../../../../../request-cache-BSUptuJR.mjs";
-import "../../../../../loader-Rb8QlGZp.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-CfJMLSkd.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-GLksnn-B.mjs";
-import { m as createWidgetBody } from "../../../../../redirects-CeD7K7EX.mjs";
-import "../../../../../relations-BmBmX4Eb.mjs";
-import "../../../../../status-D3Gy1Zc6.mjs";
+import "../../../../../loader-Be3ouI5L.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-CEGF6UZb.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-C_-6klII.mjs";
+import "../../../../../media-kIV1IxFf.mjs";
+import { m as createWidgetBody } from "../../../../../redirects-BBq3n2Rj.mjs";
+import "../../../../../relations-5_avdrN_.mjs";
+import "../../../../../status-COfycGIU.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { i as rowToWidget } from "../../../../../widgets-B_X6_UXJ.mjs";
-import { n as requirePerm } from "../../../../../authorize-BmCwQCib.mjs";
+import { i as rowToWidget } from "../../../../../widgets-DGv1Z04V.mjs";
+import { r as requirePerm } from "../../../../../authorize-WxsiePzy.mjs";
 import { ulid } from "ulidx";
 
 //#region src/astro/routes/api/widget-areas/[name]/widgets.ts

package/dist/astro/routes/api/widget-areas/_name_/widgets.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"widgets.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/widget-areas/[name]/widgets.ts"],"sourcesContent":["/**\n * Widgets CRUD endpoints\n *\n * POST /_emdash/api/widget-areas/:name/widgets - Add widget\n */\n\nimport type { APIRoute } from \"astro\";\nimport { ulid } from \"ulidx\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { createWidgetBody } from \"#api/schemas.js\";\nimport { rowToWidget } from \"#widgets/index.js\";\nimport type { WidgetRow } from \"#widgets/types.js\";\n\nexport const prerender = false;\n\nexport const POST: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst db = emdash.db;\n\tconst { name } = params;\n\n\tconst denied = requirePerm(user, \"widgets:manage\");\n\tif (denied) return denied;\n\n\tif (!name) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"name is required\", 400);\n\t}\n\n\ttry {\n\t\t// Get the area\n\t\tconst area = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"name\", \"=\", name)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!area) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Widget area \"${name}\" not found`, 404);\n\t\t}\n\n\t\tconst body = await parseBody(request, createWidgetBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Get max sort_order\n\t\tconst maxOrder = await db\n\t\t\t.selectFrom(\"_emdash_widgets\")\n\t\t\t.select(({ fn }) => fn.max(\"sort_order\").as(\"maxOrder\"))\n\t\t\t.where(\"area_id\", \"=\", area.id)\n\t\t\t.executeTakeFirst();\n\n\t\tconst sortOrder = (maxOrder?.maxOrder ?? -1) + 1;\n\n\t\t// Prepare values\n\t\tconst id = ulid();\n\t\tawait db\n\t\t\t.insertInto(\"_emdash_widgets\")\n\t\t\t.values({\n\t\t\t\tid,\n\t\t\t\tarea_id: area.id,\n\t\t\t\tsort_order: sortOrder,\n\t\t\t\ttype: body.type,\n\t\t\t\ttitle: body.title ?? null,\n\t\t\t\tcontent: body.content ? JSON.stringify(body.content) : null,\n\t\t\t\tmenu_name: body.menuName ?? null,\n\t\t\t\tcomponent_id: body.componentId ?? null,\n\t\t\t\tcomponent_props: body.componentProps ? JSON.stringify(body.componentProps) : null,\n\t\t\t})\n\t\t\t.execute();\n\n\t\tconst widget = await db\n\t\t\t.selectFrom(\"_emdash_widgets\")\n\t\t\t.selectAll()\n\t\t\t.$castTo<WidgetRow>()\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirstOrThrow();\n\n\t\treturn apiSuccess(rowToWidget(widget), 201);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create widget\", \"WIDGET_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;AAgBA,MAAa,YAAY;AAEzB,MAAa,OAAiB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACpE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,KAAK,OAAO;CAClB,MAAM,EAAE,SAAS;CAEjB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,KACJ,QAAO,SAAS,oBAAoB,oBAAoB,IAAI;AAG7D,KAAI;EAEH,MAAM,OAAO,MAAM,GACjB,WAAW,uBAAuB,CAClC,OAAO,KAAK,CACZ,MAAM,QAAQ,KAAK,KAAK,CACxB,kBAAkB;AAEpB,MAAI,CAAC,KACJ,QAAO,SAAS,aAAa,gBAAgB,KAAK,cAAc,IAAI;EAGrE,MAAM,OAAO,MAAM,UAAU,SAAS,iBAAiB;AACvD,MAAI,aAAa,KAAK,CAAE,QAAO;EAS/B,MAAM,cANW,MAAM,GACrB,WAAW,kBAAkB,CAC7B,QAAQ,EAAE,SAAS,GAAG,IAAI,aAAa,CAAC,GAAG,WAAW,CAAC,CACvD,MAAM,WAAW,KAAK,KAAK,GAAG,CAC9B,kBAAkB,GAES,YAAY,MAAM;EAG/C,MAAM,KAAK,MAAM;AACjB,QAAM,GACJ,WAAW,kBAAkB,CAC7B,OAAO;GACP;GACA,SAAS,KAAK;GACd,YAAY;GACZ,MAAM,KAAK;GACX,OAAO,KAAK,SAAS;GACrB,SAAS,KAAK,UAAU,KAAK,UAAU,KAAK,QAAQ,GAAG;GACvD,WAAW,KAAK,YAAY;GAC5B,cAAc,KAAK,eAAe;GAClC,iBAAiB,KAAK,iBAAiB,KAAK,UAAU,KAAK,eAAe,GAAG;GAC7E,CAAC,CACD,SAAS;AASX,SAAO,WAAW,YAPH,MAAM,GACnB,WAAW,kBAAkB,CAC7B,WAAW,CACX,SAAoB,CACpB,MAAM,MAAM,KAAK,GAAG,CACpB,yBAAyB,CAEU,EAAE,IAAI;UACnC,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,sBAAsB"}
+{"version":3,"file":"widgets.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/widget-areas/[name]/widgets.ts"],"sourcesContent":["/**\n * Widgets CRUD endpoints\n *\n * POST /_emdash/api/widget-areas/:name/widgets - Add widget\n */\n\nimport type { APIRoute } from \"astro\";\nimport { ulid } from \"ulidx\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { createWidgetBody } from \"#api/schemas.js\";\nimport { rowToWidget } from \"#widgets/index.js\";\nimport type { WidgetRow } from \"#widgets/types.js\";\n\nexport const prerender = false;\n\nexport const POST: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst db = emdash.db;\n\tconst { name } = params;\n\n\tconst denied = requirePerm(user, \"widgets:manage\");\n\tif (denied) return denied;\n\n\tif (!name) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"name is required\", 400);\n\t}\n\n\ttry {\n\t\t// Get the area\n\t\tconst area = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"name\", \"=\", name)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!area) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Widget area \"${name}\" not found`, 404);\n\t\t}\n\n\t\tconst body = await parseBody(request, createWidgetBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Get max sort_order\n\t\tconst maxOrder = await db\n\t\t\t.selectFrom(\"_emdash_widgets\")\n\t\t\t.select(({ fn }) => fn.max(\"sort_order\").as(\"maxOrder\"))\n\t\t\t.where(\"area_id\", \"=\", area.id)\n\t\t\t.executeTakeFirst();\n\n\t\tconst sortOrder = (maxOrder?.maxOrder ?? -1) + 1;\n\n\t\t// Prepare values\n\t\tconst id = ulid();\n\t\tawait db\n\t\t\t.insertInto(\"_emdash_widgets\")\n\t\t\t.values({\n\t\t\t\tid,\n\t\t\t\tarea_id: area.id,\n\t\t\t\tsort_order: sortOrder,\n\t\t\t\ttype: body.type,\n\t\t\t\ttitle: body.title ?? null,\n\t\t\t\tcontent: body.content ? JSON.stringify(body.content) : null,\n\t\t\t\tmenu_name: body.menuName ?? null,\n\t\t\t\tcomponent_id: body.componentId ?? null,\n\t\t\t\tcomponent_props: body.componentProps ? JSON.stringify(body.componentProps) : null,\n\t\t\t})\n\t\t\t.execute();\n\n\t\tconst widget = await db\n\t\t\t.selectFrom(\"_emdash_widgets\")\n\t\t\t.selectAll()\n\t\t\t.$castTo<WidgetRow>()\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirstOrThrow();\n\n\t\treturn apiSuccess(rowToWidget(widget), 201);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create widget\", \"WIDGET_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;AAgBA,MAAa,YAAY;AAEzB,MAAa,OAAiB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACpE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,KAAK,OAAO;CAClB,MAAM,EAAE,SAAS;CAEjB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,KACJ,QAAO,SAAS,oBAAoB,oBAAoB,IAAI;AAG7D,KAAI;EAEH,MAAM,OAAO,MAAM,GACjB,WAAW,uBAAuB,CAClC,OAAO,KAAK,CACZ,MAAM,QAAQ,KAAK,KAAK,CACxB,kBAAkB;AAEpB,MAAI,CAAC,KACJ,QAAO,SAAS,aAAa,gBAAgB,KAAK,cAAc,IAAI;EAGrE,MAAM,OAAO,MAAM,UAAU,SAAS,iBAAiB;AACvD,MAAI,aAAa,KAAK,CAAE,QAAO;EAS/B,MAAM,cANW,MAAM,GACrB,WAAW,kBAAkB,CAC7B,QAAQ,EAAE,SAAS,GAAG,IAAI,aAAa,CAAC,GAAG,WAAW,CAAC,CACvD,MAAM,WAAW,KAAK,KAAK,GAAG,CAC9B,kBAAkB,GAES,YAAY,MAAM;EAG/C,MAAM,KAAK,MAAM;AACjB,QAAM,GACJ,WAAW,kBAAkB,CAC7B,OAAO;GACP;GACA,SAAS,KAAK;GACd,YAAY;GACZ,MAAM,KAAK;GACX,OAAO,KAAK,SAAS;GACrB,SAAS,KAAK,UAAU,KAAK,UAAU,KAAK,QAAQ,GAAG;GACvD,WAAW,KAAK,YAAY;GAC5B,cAAc,KAAK,eAAe;GAClC,iBAAiB,KAAK,iBAAiB,KAAK,UAAU,KAAK,eAAe,GAAG;GAC7E,CAAC,CACD,SAAS;AASX,SAAO,WAAW,YAPH,MAAM,GACnB,WAAW,kBAAkB,CAC7B,WAAW,CACX,SAAoB,CACpB,MAAM,MAAM,KAAK,GAAG,CACpB,yBAAyB,CAEU,EAAE,IAAI;UACnC,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,sBAAsB"}

package/dist/astro/routes/api/widget-areas/_name_.mjs

@@ -1,11 +1,11 @@
-import "../../../../dialect-helpers-Cue7QQOR.mjs";
-import "../../../../base64-C74Msx8h.mjs";
-import "../../../../types-Ch8pFMEm.mjs";
+import "../../../../dialect-helpers-HxEQGl_1.mjs";
+import "../../../../base64-B-PsqheR.mjs";
+import "../../../../types-D1iJ3DpO.mjs";
 import "../../../../request-cache-BSUptuJR.mjs";
-import "../../../../loader-Rb8QlGZp.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-CfJMLSkd.mjs";
-import { i as rowToWidget } from "../../../../widgets-B_X6_UXJ.mjs";
-import { n as requirePerm } from "../../../../authorize-BmCwQCib.mjs";
+import "../../../../loader-Be3ouI5L.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-CEGF6UZb.mjs";
+import { i as rowToWidget } from "../../../../widgets-DGv1Z04V.mjs";
+import { r as requirePerm } from "../../../../authorize-WxsiePzy.mjs";
 
 //#region src/astro/routes/api/widget-areas/[name].ts
 const prerender = false;

package/dist/astro/routes/api/widget-areas/index.mjs

@@ -1,16 +1,17 @@
-import "../../../../dialect-helpers-Cue7QQOR.mjs";
-import "../../../../base64-C74Msx8h.mjs";
-import "../../../../types-Ch8pFMEm.mjs";
+import "../../../../dialect-helpers-HxEQGl_1.mjs";
+import "../../../../base64-B-PsqheR.mjs";
+import "../../../../types-D1iJ3DpO.mjs";
 import "../../../../request-cache-BSUptuJR.mjs";
-import "../../../../loader-Rb8QlGZp.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-CfJMLSkd.mjs";
-import { n as parseBody, t as isParseError } from "../../../../parse-GLksnn-B.mjs";
-import { p as createWidgetAreaBody } from "../../../../redirects-CeD7K7EX.mjs";
-import "../../../../relations-BmBmX4Eb.mjs";
-import "../../../../status-D3Gy1Zc6.mjs";
+import "../../../../loader-Be3ouI5L.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-CEGF6UZb.mjs";
+import { n as parseBody, t as isParseError } from "../../../../parse-C_-6klII.mjs";
+import "../../../../media-kIV1IxFf.mjs";
+import { p as createWidgetAreaBody } from "../../../../redirects-BBq3n2Rj.mjs";
+import "../../../../relations-5_avdrN_.mjs";
+import "../../../../status-COfycGIU.mjs";
 import "../../../../api/schemas/index.mjs";
-import { i as rowToWidget } from "../../../../widgets-B_X6_UXJ.mjs";
-import { n as requirePerm } from "../../../../authorize-BmCwQCib.mjs";
+import { i as rowToWidget } from "../../../../widgets-DGv1Z04V.mjs";
+import { r as requirePerm } from "../../../../authorize-WxsiePzy.mjs";
 import { ulid } from "ulidx";
 
 //#region src/astro/routes/api/widget-areas/index.ts

package/dist/astro/routes/api/widget-areas/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../src/astro/routes/api/widget-areas/index.ts"],"sourcesContent":["/**\n * Widget areas list and create endpoints\n *\n * GET  /_emdash/api/widget-areas - List all widget areas\n * POST /_emdash/api/widget-areas - Create widget area\n */\n\nimport type { APIRoute } from \"astro\";\nimport { ulid } from \"ulidx\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { createWidgetAreaBody } from \"#api/schemas.js\";\nimport { rowToWidget } from \"#widgets/index.js\";\nimport type { WidgetRow } from \"#widgets/types.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ locals }) => {\n\tconst { emdash, user } = locals;\n\tconst db = emdash.db;\n\n\tconst denied = requirePerm(user, \"widgets:read\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst areas = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas\")\n\t\t\t.selectAll()\n\t\t\t.orderBy(\"name\", \"asc\")\n\t\t\t.execute();\n\n\t\t// Get widgets for each area (needed for drag-and-drop reordering in admin UI)\n\t\tconst areasWithWidgets = await Promise.all(\n\t\t\tareas.map(async (area) => {\n\t\t\t\tconst widgets = await db\n\t\t\t\t\t.selectFrom(\"_emdash_widgets\")\n\t\t\t\t\t.selectAll()\n\t\t\t\t\t.$castTo<WidgetRow>()\n\t\t\t\t\t.where(\"area_id\", \"=\", area.id)\n\t\t\t\t\t.orderBy(\"sort_order\", \"asc\")\n\t\t\t\t\t.execute();\n\n\t\t\t\treturn {\n\t\t\t\t\t...area,\n\t\t\t\t\twidgets: widgets.map((row) => rowToWidget(row)),\n\t\t\t\t\twidgetCount: widgets.length,\n\t\t\t\t};\n\t\t\t}),\n\t\t);\n\n\t\treturn apiSuccess({ items: areasWithWidgets });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to fetch widget areas\", \"WIDGET_AREA_LIST_ERROR\");\n\t}\n};\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst db = emdash.db;\n\n\tconst denied = requirePerm(user, \"widgets:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst body = await parseBody(request, createWidgetAreaBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Check if area name already exists\n\t\tconst existing = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"name\", \"=\", body.name)\n\t\t\t.executeTakeFirst();\n\n\t\tif (existing) {\n\t\t\treturn apiError(\"CONFLICT\", `Widget area with name \"${body.name}\" already exists`, 409);\n\t\t}\n\n\t\tconst id = ulid();\n\t\tawait db\n\t\t\t.insertInto(\"_emdash_widget_areas\")\n\t\t\t.values({\n\t\t\t\tid,\n\t\t\t\tname: body.name,\n\t\t\t\tlabel: body.label,\n\t\t\t\tdescription: body.description ?? null,\n\t\t\t})\n\t\t\t.execute();\n\n\t\tconst area = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas\")\n\t\t\t.selectAll()\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirstOrThrow();\n\n\t\treturn apiSuccess(area, 201);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create widget area\", \"WIDGET_AREA_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;AAiBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,aAAa;CAClD,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,KAAK,OAAO;CAElB,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,QAAQ,MAAM,GAClB,WAAW,uBAAuB,CAClC,WAAW,CACX,QAAQ,QAAQ,MAAM,CACtB,SAAS;AAqBX,SAAO,WAAW,EAAE,OAlBK,MAAM,QAAQ,IACtC,MAAM,IAAI,OAAO,SAAS;GACzB,MAAM,UAAU,MAAM,GACpB,WAAW,kBAAkB,CAC7B,WAAW,CACX,SAAoB,CACpB,MAAM,WAAW,KAAK,KAAK,GAAG,CAC9B,QAAQ,cAAc,MAAM,CAC5B,SAAS;AAEX,UAAO;IACN,GAAG;IACH,SAAS,QAAQ,KAAK,QAAQ,YAAY,IAAI,CAAC;IAC/C,aAAa,QAAQ;IACrB;IACA,CACF,EAE4C,CAAC;UACtC,OAAO;AACf,SAAO,YAAY,OAAO,gCAAgC,yBAAyB;;;AAIrF,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,KAAK,OAAO;CAElB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,qBAAqB;AAC3D,MAAI,aAAa,KAAK,CAAE,QAAO;AAS/B,MANiB,MAAM,GACrB,WAAW,uBAAuB,CAClC,OAAO,KAAK,CACZ,MAAM,QAAQ,KAAK,KAAK,KAAK,CAC7B,kBAAkB,CAGnB,QAAO,SAAS,YAAY,0BAA0B,KAAK,KAAK,mBAAmB,IAAI;EAGxF,MAAM,KAAK,MAAM;AACjB,QAAM,GACJ,WAAW,uBAAuB,CAClC,OAAO;GACP;GACA,MAAM,KAAK;GACX,OAAO,KAAK;GACZ,aAAa,KAAK,eAAe;GACjC,CAAC,CACD,SAAS;AAQX,SAAO,WANM,MAAM,GACjB,WAAW,uBAAuB,CAClC,WAAW,CACX,MAAM,MAAM,KAAK,GAAG,CACpB,yBAAyB,EAEH,IAAI;UACpB,OAAO;AACf,SAAO,YAAY,OAAO,gCAAgC,2BAA2B"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../src/astro/routes/api/widget-areas/index.ts"],"sourcesContent":["/**\n * Widget areas list and create endpoints\n *\n * GET  /_emdash/api/widget-areas - List all widget areas\n * POST /_emdash/api/widget-areas - Create widget area\n */\n\nimport type { APIRoute } from \"astro\";\nimport { ulid } from \"ulidx\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { createWidgetAreaBody } from \"#api/schemas.js\";\nimport { rowToWidget } from \"#widgets/index.js\";\nimport type { WidgetRow } from \"#widgets/types.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ locals }) => {\n\tconst { emdash, user } = locals;\n\tconst db = emdash.db;\n\n\tconst denied = requirePerm(user, \"widgets:read\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst areas = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas\")\n\t\t\t.selectAll()\n\t\t\t.orderBy(\"name\", \"asc\")\n\t\t\t.execute();\n\n\t\t// Get widgets for each area (needed for drag-and-drop reordering in admin UI)\n\t\tconst areasWithWidgets = await Promise.all(\n\t\t\tareas.map(async (area) => {\n\t\t\t\tconst widgets = await db\n\t\t\t\t\t.selectFrom(\"_emdash_widgets\")\n\t\t\t\t\t.selectAll()\n\t\t\t\t\t.$castTo<WidgetRow>()\n\t\t\t\t\t.where(\"area_id\", \"=\", area.id)\n\t\t\t\t\t.orderBy(\"sort_order\", \"asc\")\n\t\t\t\t\t.execute();\n\n\t\t\t\treturn {\n\t\t\t\t\t...area,\n\t\t\t\t\twidgets: widgets.map((row) => rowToWidget(row)),\n\t\t\t\t\twidgetCount: widgets.length,\n\t\t\t\t};\n\t\t\t}),\n\t\t);\n\n\t\treturn apiSuccess({ items: areasWithWidgets });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to fetch widget areas\", \"WIDGET_AREA_LIST_ERROR\");\n\t}\n};\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst db = emdash.db;\n\n\tconst denied = requirePerm(user, \"widgets:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst body = await parseBody(request, createWidgetAreaBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Check if area name already exists\n\t\tconst existing = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"name\", \"=\", body.name)\n\t\t\t.executeTakeFirst();\n\n\t\tif (existing) {\n\t\t\treturn apiError(\"CONFLICT\", `Widget area with name \"${body.name}\" already exists`, 409);\n\t\t}\n\n\t\tconst id = ulid();\n\t\tawait db\n\t\t\t.insertInto(\"_emdash_widget_areas\")\n\t\t\t.values({\n\t\t\t\tid,\n\t\t\t\tname: body.name,\n\t\t\t\tlabel: body.label,\n\t\t\t\tdescription: body.description ?? null,\n\t\t\t})\n\t\t\t.execute();\n\n\t\tconst area = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas\")\n\t\t\t.selectAll()\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirstOrThrow();\n\n\t\treturn apiSuccess(area, 201);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create widget area\", \"WIDGET_AREA_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;AAiBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,aAAa;CAClD,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,KAAK,OAAO;CAElB,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,QAAQ,MAAM,GAClB,WAAW,uBAAuB,CAClC,WAAW,CACX,QAAQ,QAAQ,MAAM,CACtB,SAAS;AAqBX,SAAO,WAAW,EAAE,OAlBK,MAAM,QAAQ,IACtC,MAAM,IAAI,OAAO,SAAS;GACzB,MAAM,UAAU,MAAM,GACpB,WAAW,kBAAkB,CAC7B,WAAW,CACX,SAAoB,CACpB,MAAM,WAAW,KAAK,KAAK,GAAG,CAC9B,QAAQ,cAAc,MAAM,CAC5B,SAAS;AAEX,UAAO;IACN,GAAG;IACH,SAAS,QAAQ,KAAK,QAAQ,YAAY,IAAI,CAAC;IAC/C,aAAa,QAAQ;IACrB;IACA,CACF,EAE4C,CAAC;UACtC,OAAO;AACf,SAAO,YAAY,OAAO,gCAAgC,yBAAyB;;;AAIrF,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,KAAK,OAAO;CAElB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,qBAAqB;AAC3D,MAAI,aAAa,KAAK,CAAE,QAAO;AAS/B,MANiB,MAAM,GACrB,WAAW,uBAAuB,CAClC,OAAO,KAAK,CACZ,MAAM,QAAQ,KAAK,KAAK,KAAK,CAC7B,kBAAkB,CAGnB,QAAO,SAAS,YAAY,0BAA0B,KAAK,KAAK,mBAAmB,IAAI;EAGxF,MAAM,KAAK,MAAM;AACjB,QAAM,GACJ,WAAW,uBAAuB,CAClC,OAAO;GACP;GACA,MAAM,KAAK;GACX,OAAO,KAAK;GACZ,aAAa,KAAK,eAAe;GACjC,CAAC,CACD,SAAS;AAQX,SAAO,WANM,MAAM,GACjB,WAAW,uBAAuB,CAClC,WAAW,CACX,MAAM,MAAM,KAAK,GAAG,CACpB,yBAAyB,EAEH,IAAI;UACpB,OAAO;AACf,SAAO,YAAY,OAAO,gCAAgC,2BAA2B"}

package/dist/astro/routes/api/widget-components.mjs

@@ -1,7 +1,7 @@
-import "../../../base64-C74Msx8h.mjs";
-import "../../../types-Ch8pFMEm.mjs";
-import { n as apiSuccess, r as handleError } from "../../../error-CfJMLSkd.mjs";
-import { t as getWidgetComponents } from "../../../components-CliOkZAs.mjs";
+import "../../../base64-B-PsqheR.mjs";
+import "../../../types-D1iJ3DpO.mjs";
+import { n as apiSuccess, r as handleError } from "../../../error-CEGF6UZb.mjs";
+import { t as getWidgetComponents } from "../../../components-DZkL4Fx0.mjs";
 
 //#region src/astro/routes/api/widget-components.ts
 const prerender = false;

package/dist/astro/routes/robots.txt.mjs

@@ -1,14 +1,14 @@
-import "../../dialect-helpers-Cue7QQOR.mjs";
+import "../../dialect-helpers-HxEQGl_1.mjs";
 import "../../after-B1IIdH3Y.mjs";
 import "../../object-cache-Bok5j2ae.mjs";
-import "../../base64-C74Msx8h.mjs";
-import "../../types-Ch8pFMEm.mjs";
-import "../../media-D2ZFowpn.mjs";
+import "../../base64-B-PsqheR.mjs";
+import "../../types-D1iJ3DpO.mjs";
+import "../../media-BjhhENaJ.mjs";
 import "../../options-BlmBHTvX.mjs";
 import "../../request-cache-BSUptuJR.mjs";
-import "../../loader-Rb8QlGZp.mjs";
-import { a as getSiteSettingsWithDb } from "../../settings-BuQYvLfy.mjs";
-import { n as getPublicOrigin } from "../../public-url-C0cEvrRu.mjs";
+import "../../loader-Be3ouI5L.mjs";
+import { a as getSiteSettingsWithDb } from "../../settings-CpA4lQFt.mjs";
+import { n as getPublicOrigin } from "../../public-url-DSGTnJFw.mjs";
 
 //#region src/astro/routes/robots.txt.ts
 const prerender = false;

package/dist/astro/routes/sitemap-_collection_.xml.mjs

@@ -1,18 +1,18 @@
-import "../../dialect-helpers-Cue7QQOR.mjs";
+import "../../dialect-helpers-HxEQGl_1.mjs";
 import { n as getI18nConfig, r as isI18nEnabled } from "../../config-CVssduLe.mjs";
 import "../../after-B1IIdH3Y.mjs";
 import "../../object-cache-Bok5j2ae.mjs";
-import "../../base64-C74Msx8h.mjs";
-import "../../types-Ch8pFMEm.mjs";
-import "../../media-D2ZFowpn.mjs";
+import "../../base64-B-PsqheR.mjs";
+import "../../types-D1iJ3DpO.mjs";
+import "../../media-BjhhENaJ.mjs";
 import "../../options-BlmBHTvX.mjs";
 import "../../request-cache-BSUptuJR.mjs";
 import { n as localizePath, t as interpolateUrlPattern } from "../../resolve-Cd9dzclN.mjs";
-import "../../loader-Rb8QlGZp.mjs";
-import { t as handleSitemapData } from "../../seo-BjrbXAd_.mjs";
-import { a as getSiteSettingsWithDb } from "../../settings-BuQYvLfy.mjs";
-import { t as buildSeoImageUrl } from "../../media-url-DgIEYZr4.mjs";
-import { n as getPublicOrigin } from "../../public-url-C0cEvrRu.mjs";
+import "../../loader-Be3ouI5L.mjs";
+import { t as handleSitemapData } from "../../seo-C3GDfT0V.mjs";
+import { a as getSiteSettingsWithDb } from "../../settings-CpA4lQFt.mjs";
+import { t as buildSeoImageUrl } from "../../media-url-BCm5vBn6.mjs";
+import { n as getPublicOrigin } from "../../public-url-DSGTnJFw.mjs";
 
 //#region src/astro/routes/sitemap-[collection].xml.ts
 const prerender = false;

package/dist/astro/routes/sitemap.xml.mjs

@@ -1,15 +1,15 @@
-import "../../dialect-helpers-Cue7QQOR.mjs";
+import "../../dialect-helpers-HxEQGl_1.mjs";
 import "../../after-B1IIdH3Y.mjs";
 import "../../object-cache-Bok5j2ae.mjs";
-import "../../base64-C74Msx8h.mjs";
-import "../../types-Ch8pFMEm.mjs";
-import "../../media-D2ZFowpn.mjs";
+import "../../base64-B-PsqheR.mjs";
+import "../../types-D1iJ3DpO.mjs";
+import "../../media-BjhhENaJ.mjs";
 import "../../options-BlmBHTvX.mjs";
 import "../../request-cache-BSUptuJR.mjs";
-import "../../loader-Rb8QlGZp.mjs";
-import { t as handleSitemapData } from "../../seo-BjrbXAd_.mjs";
-import { a as getSiteSettingsWithDb } from "../../settings-BuQYvLfy.mjs";
-import { n as getPublicOrigin } from "../../public-url-C0cEvrRu.mjs";
+import "../../loader-Be3ouI5L.mjs";
+import { t as handleSitemapData } from "../../seo-C3GDfT0V.mjs";
+import { a as getSiteSettingsWithDb } from "../../settings-CpA4lQFt.mjs";
+import { n as getPublicOrigin } from "../../public-url-DSGTnJFw.mjs";
 
 //#region src/astro/routes/sitemap.xml.ts
 const prerender = false;

package/dist/astro/types.d.mts

@@ -1,19 +1,19 @@
-import { i as ContentItem } from "../types-DLIrNtv5.mjs";
-import { d as ContentListResponse, f as ContentResponse } from "../options-COXGTtqd.mjs";
-import { t as Database } from "../types-momGysZk.mjs";
-import { Tt as ResolvedPlugin, Vt as Element, et as PageFragmentContribution, rt as PageMetadataContribution, xt as PublicPageContext } from "../types-CtDVagM4.mjs";
-import "../relations-CbBpoOys.mjs";
-import { f as MediaProvider, p as MediaProviderCapabilities } from "../placeholder-DR-eeZr-.mjs";
-import { $n as HookPipeline, Cr as MediaResponse, Jn as SandboxedPluginEntry, Qn as EmailPipeline, Sr as MediaListResponse, fr as EmDashConfig, pi as MediaItem, sr as SandboxRunner } from "../index-BXOCyLj0.mjs";
-import "../runner-CiNdIk3y.mjs";
-import "../index-DxjWLKGT.mjs";
-import { d as Storage } from "../types-Cm4Cz-8M.mjs";
-import "../scheduled-publish-DlJHGcuL.mjs";
-import "../types-B_pmP7Yq.mjs";
-import "../hreflang-CgIxhH4k.mjs";
-import "../validate-9jLuE301.mjs";
+import { i as ContentItem } from "../types-BfYUPJdP.mjs";
+import { d as ContentListResponse, f as ContentResponse } from "../options-BqMkWfYa.mjs";
+import { t as Database } from "../types-DPKhI5ib.mjs";
+import { Et as ResolvedPlugin, St as PublicPageContext, Ut as Element, et as PageFragmentContribution, rt as PageMetadataContribution } from "../types-BvB7gDOD.mjs";
+import "../relations-Bh8jlFsU.mjs";
+import { f as MediaProvider, p as MediaProviderCapabilities } from "../placeholder-Dop47JMM.mjs";
+import { Er as MediaResponse, Tr as MediaListResponse, Yn as SandboxedPluginEntry, er as RouteMeta, gi as MediaItem, hr as EmDashConfig, nr as HookPipeline, tr as EmailPipeline, ur as SandboxRunner } from "../index-wYnC6u4o.mjs";
+import "../runner-Dd8m8k9F.mjs";
+import "../index-BEui-cRd.mjs";
+import { d as Storage } from "../types-B97jg3aW.mjs";
+import "../types-C7U0HlEr.mjs";
+import "../hreflang-CIxH_LKz.mjs";
+import "../validate-DULfgpJP.mjs";
 import "../index.mjs";
 import { Kysely } from "kysely";
+import * as zod from "zod";
 
 //#region src/astro/types.d.ts
 /**
@@ -331,9 +331,30 @@ interface EmDashHandlers {
   handleRevisionRestore: (revisionId: string, callerUserId: string) => Promise<HandlerResponse>;
   handlePluginApiRoute: (pluginId: string, method: string, path: string, request: Request) => Promise<HandlerResponse>;
   handlePublicPluginApiRoute: (pluginId: string, method: string, path: string, request: Request) => Promise<HandlerResponse>;
-  getPluginRouteMeta: (pluginId: string, path: string) => {
-    public: boolean;
-  } | null;
+  getPluginRouteMeta: (pluginId: string, path: string) => RouteMeta | null;
+  getEnabledPluginMcpTools: () => Promise<Array<{
+    pluginId: string;
+    name: string;
+    description: string;
+    route: string;
+    permission: string;
+    destructive: boolean;
+    inputSchema: zod.ZodType;
+    outputSchema?: zod.ZodType;
+  }>>;
+  getPluginMcpTools: (pluginId?: string) => Promise<Array<{
+    pluginId: string;
+    name: string;
+    description: string;
+    route: string;
+    permission: string;
+    destructive: boolean;
+    inputSchema: zod.ZodType;
+    outputSchema?: zod.ZodType;
+  }>>;
+  serializePluginMcpConsent: (tools: Awaited<ReturnType<EmDashHandlers["getPluginMcpTools"]>>, pluginId: string) => string;
+  handlePluginMcpTool: (pluginId: string, toolName: string, route: string, input: unknown, actorId: string, request: Request) => Promise<HandlerResponse>;
+  handlePluginMcpDenied: (pluginId: string, toolName: string, route: string, actorId: string, request: Request, reason: string) => Promise<void>;
   getMediaProvider: (providerId: string) => MediaProvider | undefined;
   getMediaProviderList: () => Array<{
     id: string;

package/dist/astro/types.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.mts","names":[],"sources":["../../src/astro/types.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;UAyBiB,kBAAA;EAChB,KAAA;EACA,aAAA;EACA,QAAA;EACA,MAAA;EACA,UAAA;EACA,MAAA,EAAQ,MAAA;IAGN,IAAA;IACA,KAAA;IACA,QAAA;IACA,MAAA;IAWa;;;;;;IAJb,OAAA,GAAU,KAAA;MAAQ,KAAA;MAAe,KAAA;IAAA,KAAmB,MAAA,mBAb9C;IAeN,EAAA,WAXA;IAaA,UAAA,GAAa,MAAA;EAAA;AAAA;;;;UAQC,cAAA;EAChB,OAAA;EATE;EAWF,OAAA;EAXqB;EAarB,OAAA;EALgB;;;;;;EAYhB,SAAA;EACA,UAAA,GAAa,KAAA;IACZ,IAAA;IACA,KAAA;IACA,IAAA;EAAA;EAED,gBAAA,GAAmB,KAAA;IAClB,EAAA;IACA,KAAA;IACA,IAAA;EAAA;EAED,YAAA,GAAe,KAAA;IACd,IAAA;IACA,KAAA;IACA,UAAA;IACA,QAAA,GAAW,OAAA;EAAA;EAPX;EAUD,kBAAA,GAAqB,KAAA;IACpB,IAAA;IACA,KAAA;IACA,IAAA;IACA,WAAA;IACA,WAAA;IACA,MAAA,GAAS,OAAA;EAAA;AAAA;;;;;;KASC,gBAAA;;;;UAKK,cAAA;EAChB,OAAA;EACA,MAAA;EACA,IAAA;EAR2B;;AAK5B;;;EASC,YAAA;EACA,WAAA,EAAa,MAAA,SAAe,kBAAA;EAC5B,OAAA,EAAS,MAAA,SAAe,cAAA;EAAf;;;;;;EAOT,QAAA,EAAU,gBAAA;EAfV;;;;EAoBA,aAAA;EAZA;;;;EAiBA,IAAA;IACC,aAAA;IACA,OAAA;IACA,mBAAA;EAAA;EAAA;;;EAKD,UAAA,EAAY,KAAA;IACX,IAAA;IACA,KAAA;IACA,aAAA;IACA,YAAA;IACA,WAAA;EAAA;EAsBA;;;;;;;;EAZD,WAAA;EAuCQ;;AAWT;;;;;;;;EAvCC,QAAA;IACC,aAAA;IACA,cAAA;IACA,MAAA;MA0CU;;;AAWZ;;;;;;MA3CG,wBAAA;MAqED;;;;MAhEC,wBAAA;IAAA;EAAA;EA8FO;;;;EAvFT,KAAA;IACC,IAAA;IACA,QAAA;IACA,OAAA;EAAA;AAAA;;;;;;;;UAWe,eAAA;EAChB,OAAA;EACA,IAAA,GAAO,CAAA;EACP,KAAA;IACC,IAAA;IACA,OAAA;IACA,OAAA,GAAU,MAAA;EAAA;AAAA;;;;;;;;UAWK,cAAA;EAEhB,iBAAA,GACC,UAAA,UACA,MAAA;IACC,MAAA;IACA,KAAA;IACA,MAAA;IACA,OAAA;IACA,KAAA;IACA,MAAA;IACA,CAAA;IACA,QAAA;IACA,SAAA;IACA,QAAA;IACA,MAAA;EAAA,MAEG,OAAA,CAAQ,eAAA;EAEb,oBAAA,GAAuB,UAAA,aAAuB,OAAA,CAAQ,eAAA;EAEtD,gBAAA,GACC,UAAA,UACA,EAAA,UACA,MAAA,cACI,OAAA,CACJ,eAAA;IACC,IAAA;MACC,EAAA;MACA,QAAA;MAAA,CACC,GAAA;IAAA;IAEF,IAAA;EAAA;EAIF,mBAAA,GACC,UAAA,UACA,IAAA;IACC,IAAA,EAAM,MAAA;IACN,IAAA;IACA,MAAA;IACA,QAAA;IACA,OAAA,GAAU,KAAA;MAAQ,QAAA;MAAkB,SAAA;IAAA;IACpC,MAAA;IACA,aAAA;IACA,UAAA,GAAa,MAAA;IACb,SAAA;IACA,WAAA;EAAA,MAEG,OAAA,CAAQ,eAAA;EAEb,mBAAA,GACC,UAAA,UACA,EAAA,UACA,IAAA;IACC,IAAA,GAAO,MAAA;IACP,IAAA;IACA,MAAA;IACA,QAAA;IACA,OAAA,GAAU,KAAA;MAAQ,QAAA;MAAkB,SAAA;IAAA;IACpC,MAAA;IACA,GAAA;MACC,KAAA;MACA,WAAA;MACA,KAAA;MACA,SAAA;MACA,OAAA;IAAA;IAED,UAAA,GAAa,MAAA;IACb,WAAA;IACA,IAAA;EAAA,MAEG,OAAA,CAAQ,eAAA;EAEb,mBAAA,GAAsB,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAGjE,wBAAA,GACC,UAAA,UACA,MAAA;IAAW,MAAA;IAAiB,KAAA;EAAA,MACxB,OAAA,CAAQ,eAAA;EAEb,oBAAA,GAAuB,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAElE,4BAAA,GAA+B,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAE1E,yBAAA,GAA4B,UAAA,aAAuB,OAAA,CAAQ,eAAA;EAE3D,gCAAA,GAAmC,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAE9E,sBAAA,GACC,UAAA,UACA,EAAA,UACA,QAAA,cACI,OAAA,CAAQ,eAAA;EAGb,oBAAA,GACC,UAAA,UACA,EAAA,UACA,OAAA;IAAY,WAAA;IAAsB,mBAAA;EAAA,MAC9B,OAAA,CAAQ,eAAA;EAEb,sBAAA,GAAyB,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAEpE,qBAAA,GACC,UAAA,UACA,EAAA,UACA,WAAA,aACI,OAAA,CAAQ,eAAA;EAEb,uBAAA,GAA0B,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAErE,2BAAA,GAA8B,UAAA,aAAuB,OAAA,CAAQ,eAAA;EAE7D,yBAAA,GAA4B,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAEvE,oBAAA,GAAuB,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAElE,yBAAA,GAA4B,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAGvE,eAAA,GAAkB,MAAA;IACjB,MAAA;IACA,KAAA;IACA,QAAA;EAAA,MACK,OAAA,CAAQ,eAAA;EAEd,cAAA,GAAiB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAExC,iBAAA,GAAoB,KAAA;IACnB,QAAA;IACA,QAAA;IACA,IAAA;IACA,KAAA;IACA,MAAA;IACA,UAAA;IACA,WAAA;IACA,QAAA;IACA,aAAA;IACA,QAAA;EAAA,MACK,OAAA,CAAQ,eAAA;EAEd,iBAAA,GACC,EAAA,UACA,KAAA;IAAS,GAAA;IAAc,OAAA;IAAkB,KAAA;IAAgB,MAAA;EAAA,MACrD,OAAA,CAAQ,eAAA;EAEb,iBAAA,GAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAG3C,kBAAA,GACC,UAAA,UACA,OAAA,UACA,MAAA;IAAW,KAAA;EAAA,MACP,OAAA,CAAQ,eAAA;EAEb,iBAAA,GAAoB,UAAA,aAAuB,OAAA,CAC1C,eAAA;IACC,IAAA;MACC,EAAA;MACA,UAAA;MACA,OAAA;MACA,QAAA;MAAA,CACC,GAAA;IAAA;EAAA;EAKJ,qBAAA,GAAwB,UAAA,UAAoB,YAAA,aAAyB,OAAA,CAAQ,eAAA;EAG7E,oBAAA,GACC,QAAA,UACA,MAAA,UACA,IAAA,UACA,OAAA,EAAS,OAAA,KACL,OAAA,CAAQ,eAAA;EAGb,0BAAA,GACC,QAAA,UACA,MAAA,UACA,IAAA,UACA,OAAA,EAAS,OAAA,KACL,OAAA,CAAQ,eAAA;EAGb,kBAAA,GAAqB,QAAA,UAAkB,IAAA;IAAmB,MAAA;EAAA;EAG1D,gBAAA,GAAmB,UAAA,aANP,aAAA;EAOZ,oBAAA,QAA4B,KAAA;IAC3B,EAAA;IACA,IAAA;IACA,IAAA;IACA,YAAA,EALkF,yBAAA;EAAA;EASnF,OAAA,EARiC,OAAA;EASjC,EAAA,EAAI,MAAA,CADkC,QAAA;EAEtC,iBAAA,IAAqB,UAAA;EAGrB,KAAA,EAJU,YAAA;EAOV,KAAA,EAHiD,aAAA;EAMjD,iBAAA,EAHkD,cAAA;EAOlD,sBAAA,EAJ+D,oBAAA;EAO/D,MAAA,EAH2E,YAAA;EAQ3E,WAAA,QAAmB,OAAA,CAAQ,cAAA;EAK3B,yBAAA;EAGA,gBAAA,QAR0B,aAAA;EAY1B,iBAAA;EAGA,sBAAA,QAA8B,OAAA;EAG9B,mBAAA,QAA2B,OAAA;EAG3B,eAAA,GAAkB,QAAA,UAAkB,MAAA,4BAAkC,OAAA;EAGtE,mBAAA,GACC,IAAA,EAJ4E,iBAAA,KAKxE,OAAA,CADiD,wBAAA;EAEtD,oBAAA,GACC,IAAA,EAFW,iBAAA,KAGP,OAAA,CADiD,wBAAA;EAvKY;;;;;;EAgLlE,mBAAA,SAA4B,OAAA;AAAA"}
+{"version":3,"file":"types.d.mts","names":[],"sources":["../../src/astro/types.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;UA2BiB,kBAAA;EAChB,KAAA;EACA,aAAA;EACA,QAAA;EACA,MAAA;EACA,UAAA;EACA,MAAA,EAAQ,MAAA;IAGN,IAAA;IACA,KAAA;IACA,QAAA;IACA,MAAA;IANM;;;;;;IAaN,OAAA,GAAU,KAAA;MAAQ,KAAA;MAAe,KAAA;IAAA,KAAmB,MAAA,mBAVpD;IAYA,EAAA,WAVA;IAYA,UAAA,GAAa,MAAA;EAAA;AAAA;;;;UAQC,cAAA;EAChB,OAAA;EATe;EAWf,OAAA;EAXqB;EAarB,OAAA;EAL8B;;;;;;EAY9B,SAAA;EACA,UAAA,GAAa,KAAA;IACZ,IAAA;IACA,KAAA;IACA,IAAA;EAAA;EAED,gBAAA,GAAmB,KAAA;IAClB,EAAA;IACA,KAAA;IACA,IAAA;EAAA;EAED,YAAA,GAAe,KAAA;IACd,IAAA;IACA,KAAA;IACA,UAAA;IACA,QAAA,GAAW,OAAA;EAAA;EANX;EASD,kBAAA,GAAqB,KAAA;IACpB,IAAA;IACA,KAAA;IACA,IAAA;IACA,WAAA;IACA,WAAA;IACA,MAAA,GAAS,OAAA;EAAA;AAAA;;;;;;KASC,gBAAA;;;;UAKK,cAAA;EAChB,OAAA;EACA,MAAA;EACA,IAAA;EAR2B;AAK5B;;;;EASC,YAAA;EACA,WAAA,EAAa,MAAA,SAAe,kBAAA;EAC5B,OAAA,EAAS,MAAA,SAAe,cAAA;EAOd;;;;;;EAAV,QAAA,EAAU,gBAAA;EATV;;;;EAcA,aAAA;EAZS;;;;EAiBT,IAAA;IACC,aAAA;IACA,OAAA;IACA,mBAAA;EAAA;EAKD;;;EAAA,UAAA,EAAY,KAAA;IACX,IAAA;IACA,KAAA;IACA,aAAA;IACA,YAAA;IACA,WAAA;EAAA;EAuBA;;;;;;;;EAbD,WAAA;EAuCQ;AAWT;;;;;;;;;EAvCC,QAAA;IACC,aAAA;IACA,cAAA;IACA,MAAA;MA0CgB;;AAWlB;;;;;;;MA3CG,wBAAA;MAoEG;;;;MA/DH,wBAAA;IAAA;EAAA;EAkGU;;;;EA3FZ,KAAA;IACC,IAAA;IACA,QAAA;IACA,OAAA;EAAA;AAAA;;;;;;;;UAWe,eAAA;EAChB,OAAA;EACA,IAAA,GAAO,CAAA;EACP,KAAA;IACC,IAAA;IACA,OAAA;IACA,OAAA,GAAU,MAAA;EAAA;AAAA;;;;;;;;UAWK,cAAA;EAEhB,iBAAA,GACC,UAAA,UACA,MAAA;IACC,MAAA;IACA,KAAA;IACA,MAAA;IACA,OAAA;IACA,KAAA;IACA,MAAA;IACA,CAAA;IACA,QAAA;IACA,SAAA;IACA,QAAA;IACA,MAAA;EAAA,MAEG,OAAA,CAAQ,eAAA;EAEb,oBAAA,GAAuB,UAAA,aAAuB,OAAA,CAAQ,eAAA;EAEtD,gBAAA,GACC,UAAA,UACA,EAAA,UACA,MAAA,cACI,OAAA,CACJ,eAAA;IACC,IAAA;MACC,EAAA;MACA,QAAA;MAAA,CACC,GAAA;IAAA;IAEF,IAAA;EAAA;EAIF,mBAAA,GACC,UAAA,UACA,IAAA;IACC,IAAA,EAAM,MAAA;IACN,IAAA;IACA,MAAA;IACA,QAAA;IACA,OAAA,GAAU,KAAA;MAAQ,QAAA;MAAkB,SAAA;IAAA;IACpC,MAAA;IACA,aAAA;IACA,UAAA,GAAa,MAAA;IACb,SAAA;IACA,WAAA;EAAA,MAEG,OAAA,CAAQ,eAAA;EAEb,mBAAA,GACC,UAAA,UACA,EAAA,UACA,IAAA;IACC,IAAA,GAAO,MAAA;IACP,IAAA;IACA,MAAA;IACA,QAAA;IACA,OAAA,GAAU,KAAA;MAAQ,QAAA;MAAkB,SAAA;IAAA;IACpC,MAAA;IACA,GAAA;MACC,KAAA;MACA,WAAA;MACA,KAAA;MACA,SAAA;MACA,OAAA;IAAA;IAED,UAAA,GAAa,MAAA;IACb,WAAA;IACA,IAAA;EAAA,MAEG,OAAA,CAAQ,eAAA;EAEb,mBAAA,GAAsB,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAGjE,wBAAA,GACC,UAAA,UACA,MAAA;IAAW,MAAA;IAAiB,KAAA;EAAA,MACxB,OAAA,CAAQ,eAAA;EAEb,oBAAA,GAAuB,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAElE,4BAAA,GAA+B,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAE1E,yBAAA,GAA4B,UAAA,aAAuB,OAAA,CAAQ,eAAA;EAE3D,gCAAA,GAAmC,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAE9E,sBAAA,GACC,UAAA,UACA,EAAA,UACA,QAAA,cACI,OAAA,CAAQ,eAAA;EAGb,oBAAA,GACC,UAAA,UACA,EAAA,UACA,OAAA;IAAY,WAAA;IAAsB,mBAAA;EAAA,MAC9B,OAAA,CAAQ,eAAA;EAEb,sBAAA,GAAyB,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAEpE,qBAAA,GACC,UAAA,UACA,EAAA,UACA,WAAA,aACI,OAAA,CAAQ,eAAA;EAEb,uBAAA,GAA0B,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAErE,2BAAA,GAA8B,UAAA,aAAuB,OAAA,CAAQ,eAAA;EAE7D,yBAAA,GAA4B,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAEvE,oBAAA,GAAuB,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAElE,yBAAA,GAA4B,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAGvE,eAAA,GAAkB,MAAA;IACjB,MAAA;IACA,KAAA;IACA,QAAA;EAAA,MACK,OAAA,CAAQ,eAAA;EAEd,cAAA,GAAiB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAExC,iBAAA,GAAoB,KAAA;IACnB,QAAA;IACA,QAAA;IACA,IAAA;IACA,KAAA;IACA,MAAA;IACA,UAAA;IACA,WAAA;IACA,QAAA;IACA,aAAA;IACA,QAAA;EAAA,MACK,OAAA,CAAQ,eAAA;EAEd,iBAAA,GACC,EAAA,UACA,KAAA;IAAS,GAAA;IAAc,OAAA;IAAkB,KAAA;IAAgB,MAAA;EAAA,MACrD,OAAA,CAAQ,eAAA;EAEb,iBAAA,GAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAG3C,kBAAA,GACC,UAAA,UACA,OAAA,UACA,MAAA;IAAW,KAAA;EAAA,MACP,OAAA,CAAQ,eAAA;EAEb,iBAAA,GAAoB,UAAA,aAAuB,OAAA,CAC1C,eAAA;IACC,IAAA;MACC,EAAA;MACA,UAAA;MACA,OAAA;MACA,QAAA;MAAA,CACC,GAAA;IAAA;EAAA;EAKJ,qBAAA,GAAwB,UAAA,UAAoB,YAAA,aAAyB,OAAA,CAAQ,eAAA;EAG7E,oBAAA,GACC,QAAA,UACA,MAAA,UACA,IAAA,UACA,OAAA,EAAS,OAAA,KACL,OAAA,CAAQ,eAAA;EAGb,0BAAA,GACC,QAAA,UACA,MAAA,UACA,IAAA,UACA,OAAA,EAAS,OAAA,KACL,OAAA,CAAQ,eAAA;EAGb,kBAAA,GAAqB,QAAA,UAAkB,IAAA,aAAiB,SAAA;EACxD,wBAAA,QAAgC,OAAA,CAC/B,KAAA;IACC,QAAA;IACA,IAAA;IACA,WAAA;IACA,KAAA;IACA,UAAA;IACA,WAAA;IACA,WAAA,EAT+D,GAAA,CASpC,OAAA;IAC3B,YAAA,GADkC,GAAA,CACL,OAAA;EAAA;EAG/B,iBAAA,GAAoB,QAAA,cAAsB,OAAA,CACzC,KAAA;IACC,QAAA;IACA,IAAA;IACA,WAAA;IACA,KAAA;IACA,UAAA;IACA,WAAA;IACA,WAAA,EApBqC,GAAA,CAoBV,OAAA;IAC3B,YAAA,GADkC,GAAA,CACL,OAAA;EAAA;EAG/B,yBAAA,GACC,KAAA,EAAO,OAAA,CAAQ,UAAA,CAAW,cAAA,yBAC1B,QAAA;EAED,mBAAA,GACC,QAAA,UACA,QAAA,UACA,KAAA,UACA,KAAA,WACA,OAAA,UACA,OAAA,EAAS,OAAA,KACL,OAAA,CAAQ,eAAA;EACb,qBAAA,GACC,QAAA,UACA,QAAA,UACA,KAAA,UACA,OAAA,UACA,OAAA,EAAS,OAAA,EACT,MAAA,aACI,OAAA;EAGL,gBAAA,GAAmB,UAAA,aAHP,aAAA;EAIZ,oBAAA,QAA4B,KAAA;IAC3B,EAAA;IACA,IAAA;IACA,IAAA;IACA,YAAA,EALkF,yBAAA;EAAA;EASnF,OAAA,EARiC,OAAA;EASjC,EAAA,EAAI,MAAA,CADkC,QAAA;EAEtC,iBAAA,IAAqB,UAAA;EAGrB,KAAA,EAJU,YAAA;EAOV,KAAA,EAHiD,aAAA;EAMjD,iBAAA,EAHkD,cAAA;EAOlD,sBAAA,EAJ+D,oBAAA;EAO/D,MAAA,EAH2E,YAAA;EAQ3E,WAAA,QAAmB,OAAA,CAAQ,cAAA;EAK3B,yBAAA;EAGA,gBAAA,QAR0B,aAAA;EAY1B,iBAAA;EAGA,sBAAA,QAA8B,OAAA;EAG9B,mBAAA,QAA2B,OAAA;EAG3B,eAAA,GAAkB,QAAA,UAAkB,MAAA,4BAAkC,OAAA;EAGtE,mBAAA,GACC,IAAA,EAJ4E,iBAAA,KAKxE,OAAA,CADiD,wBAAA;EAEtD,oBAAA,GACC,IAAA,EAFW,iBAAA,KAGP,OAAA,CADiD,wBAAA;EAjNK;;;;;;EA0N3D,mBAAA,SAA4B,OAAA;AAAA"}

package/dist/auth/providers/github.d.mts

@@ -1,4 +1,4 @@
-import { r as AuthProviderDescriptor } from "../../types-B6-N9cBB.mjs";
+import { r as AuthProviderDescriptor } from "../../types-B4vm81VH.mjs";
 
 //#region src/auth/providers/github.d.ts
 /**

package/dist/auth/providers/google.d.mts

@@ -1,4 +1,4 @@
-import { r as AuthProviderDescriptor } from "../../types-B6-N9cBB.mjs";
+import { r as AuthProviderDescriptor } from "../../types-B4vm81VH.mjs";
 
 //#region src/auth/providers/google.d.ts
 /**

package/dist/{authorize-BmCwQCib.mjs → authorize-WxsiePzy.mjs}

@@ -1,7 +1,10 @@
-import { t as apiError } from "./error-CfJMLSkd.mjs";
-import { canActOnOwn, hasPermission } from "@emdash-cms/auth";
+import { t as apiError } from "./error-CEGF6UZb.mjs";
+import { canActOnOwn, hasPermission, hasScope } from "@emdash-cms/auth";
 
 //#region src/api/authorize.ts
+function canReadMediaUsageCount(user, tokenScopes) {
+	return hasPermission(user, "content:read_drafts") && (!tokenScopes || hasScope(tokenScopes, "admin"));
+}
 /**
 * Check if user has a permission. Returns a 401/403 Response if not, or null if authorized.
 *
@@ -33,5 +36,5 @@ function requireOwnerPerm(user, ownerId, ownPermission, anyPermission) {
 }
 
 //#endregion
-export { requirePerm as n, requireOwnerPerm as t };
-//# sourceMappingURL=authorize-BmCwQCib.mjs.map
+export { requireOwnerPerm as n, requirePerm as r, canReadMediaUsageCount as t };
+//# sourceMappingURL=authorize-WxsiePzy.mjs.map

package/dist/authorize-WxsiePzy.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorize-WxsiePzy.mjs","names":[],"sources":["../src/api/authorize.ts"],"sourcesContent":["/**\n * Authorization helpers for API routes\n *\n * Thin wrappers around @emdash-cms/auth RBAC that return HTTP responses.\n * Auth middleware handles authentication; these handle authorization.\n */\n\nimport type { Permission, RoleLevel } from \"@emdash-cms/auth\";\nimport { hasPermission, canActOnOwn, hasScope } from \"@emdash-cms/auth\";\n\nimport { apiError } from \"./error.js\";\n\ninterface UserLike {\n\tid: string;\n\trole: RoleLevel;\n}\n\nexport function canReadMediaUsageCount(\n\tuser: UserLike | null | undefined,\n\ttokenScopes: string[] | undefined,\n): boolean {\n\treturn (\n\t\thasPermission(user, \"content:read_drafts\") && (!tokenScopes || hasScope(tokenScopes, \"admin\"))\n\t);\n}\n\n/**\n * Check if user has a permission. Returns a 401/403 Response if not, or null if authorized.\n *\n * Usage:\n * ```ts\n * const denied = requirePerm(user, \"schema:manage\");\n * if (denied) return denied;\n * ```\n */\nexport function requirePerm(\n\tuser: UserLike | null | undefined,\n\tpermission: Permission,\n): Response | null {\n\tif (!user) {\n\t\treturn apiError(\"UNAUTHORIZED\", \"Authentication required\", 401);\n\t}\n\tif (!hasPermission(user, permission)) {\n\t\treturn apiError(\"FORBIDDEN\", \"Insufficient permissions\", 403);\n\t}\n\treturn null;\n}\n\n/**\n * Check if user can act on a resource, considering ownership.\n * Returns a 401/403 Response if not, or null if authorized.\n *\n * Usage:\n * ```ts\n * const denied = requireOwnerPerm(user, item.authorId, \"content:edit_own\", \"content:edit_any\");\n * if (denied) return denied;\n * ```\n */\nexport function requireOwnerPerm(\n\tuser: UserLike | null | undefined,\n\townerId: string,\n\townPermission: Permission,\n\tanyPermission: Permission,\n): Response | null {\n\tif (!user) {\n\t\treturn apiError(\"UNAUTHORIZED\", \"Authentication required\", 401);\n\t}\n\tif (!canActOnOwn(user, ownerId, ownPermission, anyPermission)) {\n\t\treturn apiError(\"FORBIDDEN\", \"Insufficient permissions\", 403);\n\t}\n\treturn null;\n}\n"],"mappings":";;;;AAiBA,SAAgB,uBACf,MACA,aACU;AACV,QACC,cAAc,MAAM,sBAAsB,KAAK,CAAC,eAAe,SAAS,aAAa,QAAQ;;;;;;;;;;;AAa/F,SAAgB,YACf,MACA,YACkB;AAClB,KAAI,CAAC,KACJ,QAAO,SAAS,gBAAgB,2BAA2B,IAAI;AAEhE,KAAI,CAAC,cAAc,MAAM,WAAW,CACnC,QAAO,SAAS,aAAa,4BAA4B,IAAI;AAE9D,QAAO;;;;;;;;;;;;AAaR,SAAgB,iBACf,MACA,SACA,eACA,eACkB;AAClB,KAAI,CAAC,KACJ,QAAO,SAAS,gBAAgB,2BAA2B,IAAI;AAEhE,KAAI,CAAC,YAAY,MAAM,SAAS,eAAe,cAAc,CAC5D,QAAO,SAAS,aAAa,4BAA4B,IAAI;AAE9D,QAAO"}