emdash 0.29.0 → 0.31.0

package/dist/astro/routes/api/plugins/_pluginId_/_...path_.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"_...path_.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/plugins/[pluginId]/[...path].ts"],"mappings":";;;cAiBa,SAAA;AAAA,cAwEA,GAAA,EAAG,QAAA;AAAA,cACH,IAAA,EAAI,QAAA;AAAA,cACJ,GAAA,EAAG,QAAA;AAAA,cACH,KAAA,EAAK,QAAA;AAAA,cACL,MAAA,EAAM,QAAA"}
+{"version":3,"file":"_...path_.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/plugins/[pluginId]/[...path].ts"],"mappings":";;;cAkBa,SAAA;AAAA,cAqFA,GAAA,EAAG,QAAA;AAAA,cACH,IAAA,EAAI,QAAA;AAAA,cACJ,GAAA,EAAG,QAAA;AAAA,cACH,KAAA,EAAK,QAAA;AAAA,cACL,MAAA,EAAM,QAAA"}

package/dist/astro/routes/api/plugins/_pluginId_/_...path_.mjs

@@ -1,38 +1,22 @@
-import "../../../../../base64-C74Msx8h.mjs";
-import "../../../../../types-Ch8pFMEm.mjs";
-import { n as apiSuccess, t as apiError } from "../../../../../error-CfJMLSkd.mjs";
-import { i as hasScope } from "../../../../../api-tokens-Dk2GrJMY.mjs";
-import { n as requirePerm } from "../../../../../authorize-BmCwQCib.mjs";
+import "../../../../../base64-B-PsqheR.mjs";
+import "../../../../../types-CrRUFdej.mjs";
+import { n as apiSuccess, t as apiError } from "../../../../../error-DJ98TRbQ.mjs";
+import "../../../../../api-tokens-Cvmixds7.mjs";
+import { r as requirePerm } from "../../../../../authorize-6WPZa1xZ.mjs";
+import { t as requireScope } from "../../../../../scopes-DTIkIaGA.mjs";
+import { Permissions } from "@emdash-cms/auth";
 
-//#region src/auth/scopes.ts
+//#region src/astro/routes/api/plugins/[pluginId]/[...path].ts
 /**
-* Scope enforcement for API token authentication.
+* Plugin API routes - dynamic handler for plugin-defined endpoints
 *
-* Routes call `requireScope(locals, "content:write")` alongside role checks.
-* Session-authenticated requests have no scope restrictions (implicit full access).
-* Token-authenticated requests must have the required scope (or "admin").
-*/
-/**
-* Check if the request has a required scope.
-* Returns a 403 Response if the scope is missing, or null if OK.
+* Routes are mounted at /_emdash/api/plugins/{pluginId}/*
+* Plugins register routes like "POST /do-something" which becomes
+* POST /_emdash/api/plugins/{pluginId}/do-something
 *
-* For session-authenticated users (no tokenScopes), always returns null
-* since session auth has implicit full scope.
+* Routes marked as `public: true` skip authentication and CSRF checks.
+* Private routes (the default) require authentication and appropriate permissions.
 */
-function requireScope(locals, scope) {
-	if (!locals.tokenScopes) return null;
-	if (hasScope(locals.tokenScopes, scope)) return null;
-	return new Response(JSON.stringify({ error: {
-		code: "INSUFFICIENT_SCOPE",
-		message: `Token lacks required scope: ${scope}`
-	} }), {
-		status: 403,
-		headers: { "Content-Type": "application/json" }
-	});
-}
-
-//#endregion
-//#region src/astro/routes/api/plugins/[pluginId]/[...path].ts
 const prerender = false;
 /**
 * Handle all methods by matching against plugin-defined routes
@@ -46,7 +30,9 @@ const handleRequest = async ({ params, request, locals }) => {
 	const routeMeta = emdash.getPluginRouteMeta(pluginId, `/${path}`);
 	if (!routeMeta) return apiError("NOT_FOUND", "Plugin route not found", 404);
 	if (!routeMeta.public) {
-		const denied = requirePerm(user, "plugins:manage");
+		const permission = routeMeta.permission ?? "plugins:manage";
+		if (!(permission in Permissions)) return apiError("INVALID_PLUGIN_ROUTE", "Plugin route declares an invalid permission", 500);
+		const denied = requirePerm(user, permission);
 		if (denied) return denied;
 		const scopeError = requireScope(locals, "admin");
 		if (scopeError) return scopeError;
@@ -57,7 +43,9 @@ const handleRequest = async ({ params, request, locals }) => {
 		const code = result.error?.code ?? "PLUGIN_ERROR";
 		return apiError(code, code === "INTERNAL_ERROR" ? "Plugin route error" : result.error?.message ?? "Plugin route error", result.status ?? (code === "NOT_FOUND" ? 404 : 400));
 	}
-	return apiSuccess(result.data);
+	const response = apiSuccess(result.data);
+	if (routeMeta.cacheControl && (method === "GET" || method === "HEAD")) response.headers.set("Cache-Control", routeMeta.cacheControl);
+	return response;
 };
 const GET = handleRequest;
 const POST = handleRequest;

package/dist/astro/routes/api/plugins/_pluginId_/_...path_.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"_...path_.mjs","names":[],"sources":["../../../../../../src/auth/scopes.ts","../../../../../../src/astro/routes/api/plugins/[pluginId]/[...path].ts"],"sourcesContent":["/**\n * Scope enforcement for API token authentication.\n *\n * Routes call `requireScope(locals, \"content:write\")` alongside role checks.\n * Session-authenticated requests have no scope restrictions (implicit full access).\n * Token-authenticated requests must have the required scope (or \"admin\").\n */\n\nimport { hasScope } from \"./api-tokens.js\";\n\n/**\n * Check if the request has a required scope.\n * Returns a 403 Response if the scope is missing, or null if OK.\n *\n * For session-authenticated users (no tokenScopes), always returns null\n * since session auth has implicit full scope.\n */\nexport function requireScope(locals: { tokenScopes?: string[] }, scope: string): Response | null {\n\t// Session auth = no scope restrictions\n\tif (!locals.tokenScopes) return null;\n\n\tif (hasScope(locals.tokenScopes, scope)) return null;\n\n\treturn new Response(\n\t\tJSON.stringify({\n\t\t\terror: {\n\t\t\t\tcode: \"INSUFFICIENT_SCOPE\",\n\t\t\t\tmessage: `Token lacks required scope: ${scope}`,\n\t\t\t},\n\t\t}),\n\t\t{ status: 403, headers: { \"Content-Type\": \"application/json\" } },\n\t);\n}\n","/**\n * Plugin API routes - dynamic handler for plugin-defined endpoints\n *\n * Routes are mounted at /_emdash/api/plugins/{pluginId}/*\n * Plugins register routes like \"POST /do-something\" which becomes\n * POST /_emdash/api/plugins/{pluginId}/do-something\n *\n * Routes marked as `public: true` skip authentication and CSRF checks.\n * Private routes (the default) require authentication and appropriate permissions.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess } from \"#api/error.js\";\nimport { requireScope } from \"#auth/scopes.js\";\n\nexport const prerender = false;\n\n/**\n * Handle all methods by matching against plugin-defined routes\n */\nconst handleRequest: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst pluginId = params.pluginId!;\n\tconst path = params.path || \"\";\n\tconst method = request.method.toUpperCase();\n\n\tif (!emdash?.handlePluginApiRoute) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash not configured\", 500);\n\t}\n\n\t// Resolve route metadata to decide auth before dispatch\n\tconst routeMeta = emdash.getPluginRouteMeta(pluginId, `/${path}`);\n\n\tif (!routeMeta) {\n\t\treturn apiError(\"NOT_FOUND\", \"Plugin route not found\", 404);\n\t}\n\n\t// Public routes skip auth, CSRF, and scope checks entirely\n\tif (!routeMeta.public) {\n\t\t// Plugin routes are dispatched by name only — the HTTP method never\n\t\t// selects a different handler, so a route reached via GET or HEAD runs\n\t\t// exactly the same code (and side effects) as one reached via POST.\n\t\t// Method-based tiering is therefore unsafe: gating GET/HEAD/OPTIONS on\n\t\t// `plugins:read` with no CSRF let an editor (or a cross-origin page,\n\t\t// since HEAD is CORS-safe) invoke a mutating admin route by choosing the\n\t\t// method (#1853). Astro also dispatches HEAD to the GET export, so no\n\t\t// explicit HEAD handler is needed to reach a \"GET\" route. Gate every\n\t\t// private invocation on `plugins:manage` + CSRF regardless of method.\n\t\tconst denied = requirePerm(user, \"plugins:manage\");\n\t\tif (denied) return denied;\n\n\t\t// Token scope enforcement — plugin routes require \"admin\" scope.\n\t\t// Session auth is implicitly full-access (requireScope returns null).\n\t\tconst scopeError = requireScope(locals, \"admin\");\n\t\tif (scopeError) return scopeError;\n\n\t\t// CSRF protection on private routes. Plugin routes use soft auth in the\n\t\t// middleware (user resolved but not required), so the middleware's CSRF\n\t\t// check doesn't run — enforce it here. Applied to every method because\n\t\t// any method can trigger a state change (see above). Token-authed\n\t\t// requests (which set tokenScopes) are exempt — tokens aren't ambient\n\t\t// credentials like cookies.\n\t\tif (!locals.tokenScopes && request.headers.get(\"X-EmDash-Request\") !== \"1\") {\n\t\t\treturn apiError(\"CSRF_REJECTED\", \"Missing required header\", 403);\n\t\t}\n\t}\n\n\tconst result = await emdash.handlePluginApiRoute(pluginId, method, `/${path}`, request);\n\n\tif (!result.success) {\n\t\tconst code = result.error?.code ?? \"PLUGIN_ERROR\";\n\t\t// Pass through messages from known plugin errors (PluginRouteError),\n\t\t// but mask internal errors (unhandled exceptions) to avoid leaking\n\t\t// database errors, file paths, etc. from sandboxed plugins.\n\t\tconst message =\n\t\t\tcode === \"INTERNAL_ERROR\"\n\t\t\t\t? \"Plugin route error\"\n\t\t\t\t: (result.error?.message ?? \"Plugin route error\");\n\t\t// PluginRouteError status is returned at the top level of the result\n\t\tconst status = (result as { status?: number }).status ?? (code === \"NOT_FOUND\" ? 404 : 400);\n\t\treturn apiError(code, message, status);\n\t}\n\n\treturn apiSuccess(result.data);\n};\n\n// Export handlers for all HTTP methods\nexport const GET = handleRequest;\nexport const POST = handleRequest;\nexport const PUT = handleRequest;\nexport const PATCH = handleRequest;\nexport const DELETE = handleRequest;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAiBA,SAAgB,aAAa,QAAoC,OAAgC;AAEhG,KAAI,CAAC,OAAO,YAAa,QAAO;AAEhC,KAAI,SAAS,OAAO,aAAa,MAAM,CAAE,QAAO;AAEhD,QAAO,IAAI,SACV,KAAK,UAAU,EACd,OAAO;EACN,MAAM;EACN,SAAS,+BAA+B;EACxC,EACD,CAAC,EACF;EAAE,QAAQ;EAAK,SAAS,EAAE,gBAAgB,oBAAoB;EAAE,CAChE;;;;;ACdF,MAAa,YAAY;;;;AAKzB,MAAM,gBAA0B,OAAO,EAAE,QAAQ,SAAS,aAAa;CACtE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,WAAW,OAAO;CACxB,MAAM,OAAO,OAAO,QAAQ;CAC5B,MAAM,SAAS,QAAQ,OAAO,aAAa;AAE3C,KAAI,CAAC,QAAQ,qBACZ,QAAO,SAAS,kBAAkB,yBAAyB,IAAI;CAIhE,MAAM,YAAY,OAAO,mBAAmB,UAAU,IAAI,OAAO;AAEjE,KAAI,CAAC,UACJ,QAAO,SAAS,aAAa,0BAA0B,IAAI;AAI5D,KAAI,CAAC,UAAU,QAAQ;EAUtB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,MAAI,OAAQ,QAAO;EAInB,MAAM,aAAa,aAAa,QAAQ,QAAQ;AAChD,MAAI,WAAY,QAAO;AAQvB,MAAI,CAAC,OAAO,eAAe,QAAQ,QAAQ,IAAI,mBAAmB,KAAK,IACtE,QAAO,SAAS,iBAAiB,2BAA2B,IAAI;;CAIlE,MAAM,SAAS,MAAM,OAAO,qBAAqB,UAAU,QAAQ,IAAI,QAAQ,QAAQ;AAEvF,KAAI,CAAC,OAAO,SAAS;EACpB,MAAM,OAAO,OAAO,OAAO,QAAQ;AAUnC,SAAO,SAAS,MALf,SAAS,mBACN,uBACC,OAAO,OAAO,WAAW,sBAEd,OAA+B,WAAW,SAAS,cAAc,MAAM,KACjD;;AAGvC,QAAO,WAAW,OAAO,KAAK;;AAI/B,MAAa,MAAM;AACnB,MAAa,OAAO;AACpB,MAAa,MAAM;AACnB,MAAa,QAAQ;AACrB,MAAa,SAAS"}
+{"version":3,"file":"_...path_.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/plugins/[pluginId]/[...path].ts"],"sourcesContent":["/**\n * Plugin API routes - dynamic handler for plugin-defined endpoints\n *\n * Routes are mounted at /_emdash/api/plugins/{pluginId}/*\n * Plugins register routes like \"POST /do-something\" which becomes\n * POST /_emdash/api/plugins/{pluginId}/do-something\n *\n * Routes marked as `public: true` skip authentication and CSRF checks.\n * Private routes (the default) require authentication and appropriate permissions.\n */\n\nimport { Permissions, type Permission } from \"@emdash-cms/auth\";\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess } from \"#api/error.js\";\nimport { requireScope } from \"#auth/scopes.js\";\n\nexport const prerender = false;\n\n/**\n * Handle all methods by matching against plugin-defined routes\n */\nconst handleRequest: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst pluginId = params.pluginId!;\n\tconst path = params.path || \"\";\n\tconst method = request.method.toUpperCase();\n\n\tif (!emdash?.handlePluginApiRoute) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash not configured\", 500);\n\t}\n\n\t// Resolve route metadata to decide auth before dispatch\n\tconst routeMeta = emdash.getPluginRouteMeta(pluginId, `/${path}`);\n\n\tif (!routeMeta) {\n\t\treturn apiError(\"NOT_FOUND\", \"Plugin route not found\", 404);\n\t}\n\n\t// Public routes skip auth, CSRF, and scope checks entirely\n\tif (!routeMeta.public) {\n\t\t// Plugin routes are dispatched by name only — the HTTP method never\n\t\t// selects a different handler, so a route reached via GET or HEAD runs\n\t\t// exactly the same code (and side effects) as one reached via POST.\n\t\t// Method-based tiering is therefore unsafe: gating GET/HEAD/OPTIONS on\n\t\t// `plugins:read` with no CSRF let an editor (or a cross-origin page,\n\t\t// since HEAD is CORS-safe) invoke a mutating admin route by choosing the\n\t\t// method (#1853). Astro also dispatches HEAD to the GET export, so no\n\t\t// explicit HEAD handler is needed to reach a \"GET\" route. Gate every\n\t\t// private invocation on the route's declared permission (defaulting to\n\t\t// `plugins:manage`) + CSRF regardless of method.\n\t\tconst permission = routeMeta.permission ?? \"plugins:manage\";\n\t\tif (!(permission in Permissions)) {\n\t\t\treturn apiError(\"INVALID_PLUGIN_ROUTE\", \"Plugin route declares an invalid permission\", 500);\n\t\t}\n\t\tconst denied = requirePerm(user, permission as Permission);\n\t\tif (denied) return denied;\n\n\t\t// Token scope enforcement — plugin routes require \"admin\" scope.\n\t\t// Session auth is implicitly full-access (requireScope returns null).\n\t\tconst scopeError = requireScope(locals, \"admin\");\n\t\tif (scopeError) return scopeError;\n\n\t\t// CSRF protection on private routes. Plugin routes use soft auth in the\n\t\t// middleware (user resolved but not required), so the middleware's CSRF\n\t\t// check doesn't run — enforce it here. Applied to every method because\n\t\t// any method can trigger a state change (see above). Token-authed\n\t\t// requests (which set tokenScopes) are exempt — tokens aren't ambient\n\t\t// credentials like cookies.\n\t\tif (!locals.tokenScopes && request.headers.get(\"X-EmDash-Request\") !== \"1\") {\n\t\t\treturn apiError(\"CSRF_REJECTED\", \"Missing required header\", 403);\n\t\t}\n\t}\n\n\tconst result = await emdash.handlePluginApiRoute(pluginId, method, `/${path}`, request);\n\n\tif (!result.success) {\n\t\tconst code = result.error?.code ?? \"PLUGIN_ERROR\";\n\t\t// Pass through messages from known plugin errors (PluginRouteError),\n\t\t// but mask internal errors (unhandled exceptions) to avoid leaking\n\t\t// database errors, file paths, etc. from sandboxed plugins.\n\t\tconst message =\n\t\t\tcode === \"INTERNAL_ERROR\"\n\t\t\t\t? \"Plugin route error\"\n\t\t\t\t: (result.error?.message ?? \"Plugin route error\");\n\t\t// PluginRouteError status is returned at the top level of the result\n\t\tconst status = (result as { status?: number }).status ?? (code === \"NOT_FOUND\" ? 404 : 400);\n\t\treturn apiError(code, message, status);\n\t}\n\n\tconst response = apiSuccess(result.data);\n\t// Public routes may opt in to CDN/browser caching for GET responses.\n\t// getRouteMeta only ever exposes cacheControl on public routes, and errors\n\t// above keep the default private, no-store. Astro serves HEAD via this GET\n\t// export, which is fine: same headers, no body.\n\tif (routeMeta.cacheControl && (method === \"GET\" || method === \"HEAD\")) {\n\t\tresponse.headers.set(\"Cache-Control\", routeMeta.cacheControl);\n\t}\n\treturn response;\n};\n\n// Export handlers for all HTTP methods\nexport const GET = handleRequest;\nexport const POST = handleRequest;\nexport const PUT = handleRequest;\nexport const PATCH = handleRequest;\nexport const DELETE = handleRequest;\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAkBA,MAAa,YAAY;;;;AAKzB,MAAM,gBAA0B,OAAO,EAAE,QAAQ,SAAS,aAAa;CACtE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,WAAW,OAAO;CACxB,MAAM,OAAO,OAAO,QAAQ;CAC5B,MAAM,SAAS,QAAQ,OAAO,aAAa;AAE3C,KAAI,CAAC,QAAQ,qBACZ,QAAO,SAAS,kBAAkB,yBAAyB,IAAI;CAIhE,MAAM,YAAY,OAAO,mBAAmB,UAAU,IAAI,OAAO;AAEjE,KAAI,CAAC,UACJ,QAAO,SAAS,aAAa,0BAA0B,IAAI;AAI5D,KAAI,CAAC,UAAU,QAAQ;EAWtB,MAAM,aAAa,UAAU,cAAc;AAC3C,MAAI,EAAE,cAAc,aACnB,QAAO,SAAS,wBAAwB,+CAA+C,IAAI;EAE5F,MAAM,SAAS,YAAY,MAAM,WAAyB;AAC1D,MAAI,OAAQ,QAAO;EAInB,MAAM,aAAa,aAAa,QAAQ,QAAQ;AAChD,MAAI,WAAY,QAAO;AAQvB,MAAI,CAAC,OAAO,eAAe,QAAQ,QAAQ,IAAI,mBAAmB,KAAK,IACtE,QAAO,SAAS,iBAAiB,2BAA2B,IAAI;;CAIlE,MAAM,SAAS,MAAM,OAAO,qBAAqB,UAAU,QAAQ,IAAI,QAAQ,QAAQ;AAEvF,KAAI,CAAC,OAAO,SAAS;EACpB,MAAM,OAAO,OAAO,OAAO,QAAQ;AAUnC,SAAO,SAAS,MALf,SAAS,mBACN,uBACC,OAAO,OAAO,WAAW,sBAEd,OAA+B,WAAW,SAAS,cAAc,MAAM,KACjD;;CAGvC,MAAM,WAAW,WAAW,OAAO,KAAK;AAKxC,KAAI,UAAU,iBAAiB,WAAW,SAAS,WAAW,QAC7D,UAAS,QAAQ,IAAI,iBAAiB,UAAU,aAAa;AAE9D,QAAO;;AAIR,MAAa,MAAM;AACnB,MAAa,OAAO;AACpB,MAAa,MAAM;AACnB,MAAa,QAAQ;AACrB,MAAa,SAAS"}

package/dist/astro/routes/api/redirects/404s/index.mjs

@@ -1,16 +1,17 @@
-import "../../../../../dialect-helpers-Cue7QQOR.mjs";
-import "../../../../../base64-C74Msx8h.mjs";
-import "../../../../../types-Ch8pFMEm.mjs";
+import "../../../../../dialect-helpers-BtOwo2us.mjs";
+import "../../../../../base64-B-PsqheR.mjs";
+import "../../../../../types-CrRUFdej.mjs";
 import "../../../../../options-BlmBHTvX.mjs";
-import "../../../../../redirect-Ch3E98qZ.mjs";
-import { a as unwrapResult, i as requireDb, r as handleError } from "../../../../../error-CfJMLSkd.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../parse-GLksnn-B.mjs";
-import { a as notFoundPruneBody, r as notFoundListQuery } from "../../../../../redirects-CeD7K7EX.mjs";
-import "../../../../../relations-BmBmX4Eb.mjs";
-import "../../../../../status-D3Gy1Zc6.mjs";
+import "../../../../../redirect-BoUac4NT.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError } from "../../../../../error-DJ98TRbQ.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../parse-53zyxlpv.mjs";
+import "../../../../../media-BJ6SRY3g.mjs";
+import { a as notFoundPruneBody, r as notFoundListQuery } from "../../../../../redirects-D457qwt0.mjs";
+import "../../../../../relations-CZMpBqEd.mjs";
+import "../../../../../status-COfycGIU.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { n as requirePerm } from "../../../../../authorize-BmCwQCib.mjs";
-import { n as handleNotFoundList, r as handleNotFoundPrune, t as handleNotFoundClear } from "../../../../../redirects-CXmVGRNZ.mjs";
+import { r as requirePerm } from "../../../../../authorize-6WPZa1xZ.mjs";
+import { n as handleNotFoundList, r as handleNotFoundPrune, t as handleNotFoundClear } from "../../../../../redirects-ChbpqKiS.mjs";
 
 //#region src/astro/routes/api/redirects/404s/index.ts
 const prerender = false;

package/dist/astro/routes/api/redirects/404s/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/redirects/404s/index.ts"],"sourcesContent":["/**\n * 404 log list and management endpoints\n *\n * GET    /_emdash/api/redirects/404s - List 404 log entries\n * DELETE /_emdash/api/redirects/404s - Clear all 404 log entries\n * POST   /_emdash/api/redirects/404s - Prune 404 log entries older than date\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport {\n\thandleNotFoundClear,\n\thandleNotFoundList,\n\thandleNotFoundPrune,\n} from \"#api/handlers/redirects.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { notFoundListQuery, notFoundPruneBody } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ url, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\tconst db = emdash.db;\n\n\tconst denied = requirePerm(user, \"redirects:read\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst query = parseQuery(url, notFoundListQuery);\n\t\tif (isParseError(query)) return query;\n\n\t\tconst result = await handleNotFoundList(db, query);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to fetch 404 log\", \"NOT_FOUND_LIST_ERROR\");\n\t}\n};\n\nexport const DELETE: APIRoute = async ({ locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\tconst db = emdash.db;\n\n\tconst denied = requirePerm(user, \"redirects:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst result = await handleNotFoundClear(db);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to clear 404 log\", \"NOT_FOUND_CLEAR_ERROR\");\n\t}\n};\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\tconst db = emdash.db;\n\n\tconst denied = requirePerm(user, \"redirects:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst body = await parseBody(request, notFoundPruneBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleNotFoundPrune(db, body.olderThan);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to prune 404 log\", \"NOT_FOUND_PRUNE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;AAoBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CACvD,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAClB,MAAM,KAAK,OAAO;CAElB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,QAAQ,WAAW,KAAK,kBAAkB;AAChD,MAAI,aAAa,MAAM,CAAE,QAAO;AAGhC,SAAO,aADQ,MAAM,mBAAmB,IAAI,MAAM,CACvB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,uBAAuB;;;AAI9E,MAAa,SAAmB,OAAO,EAAE,aAAa;CACrD,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAClB,MAAM,KAAK,OAAO;CAElB,MAAM,SAAS,YAAY,MAAM,mBAAmB;AACpD,KAAI,OAAQ,QAAO;AAEnB,KAAI;AAEH,SAAO,aADQ,MAAM,oBAAoB,GAAG,CACjB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,wBAAwB;;;AAI/E,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAClB,MAAM,KAAK,OAAO;CAElB,MAAM,SAAS,YAAY,MAAM,mBAAmB;AACpD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,kBAAkB;AACxD,MAAI,aAAa,KAAK,CAAE,QAAO;AAG/B,SAAO,aADQ,MAAM,oBAAoB,IAAI,KAAK,UAAU,CACjC;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,wBAAwB"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/redirects/404s/index.ts"],"sourcesContent":["/**\n * 404 log list and management endpoints\n *\n * GET    /_emdash/api/redirects/404s - List 404 log entries\n * DELETE /_emdash/api/redirects/404s - Clear all 404 log entries\n * POST   /_emdash/api/redirects/404s - Prune 404 log entries older than date\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport {\n\thandleNotFoundClear,\n\thandleNotFoundList,\n\thandleNotFoundPrune,\n} from \"#api/handlers/redirects.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { notFoundListQuery, notFoundPruneBody } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ url, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\tconst db = emdash.db;\n\n\tconst denied = requirePerm(user, \"redirects:read\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst query = parseQuery(url, notFoundListQuery);\n\t\tif (isParseError(query)) return query;\n\n\t\tconst result = await handleNotFoundList(db, query);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to fetch 404 log\", \"NOT_FOUND_LIST_ERROR\");\n\t}\n};\n\nexport const DELETE: APIRoute = async ({ locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\tconst db = emdash.db;\n\n\tconst denied = requirePerm(user, \"redirects:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst result = await handleNotFoundClear(db);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to clear 404 log\", \"NOT_FOUND_CLEAR_ERROR\");\n\t}\n};\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\tconst db = emdash.db;\n\n\tconst denied = requirePerm(user, \"redirects:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst body = await parseBody(request, notFoundPruneBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleNotFoundPrune(db, body.olderThan);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to prune 404 log\", \"NOT_FOUND_PRUNE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;AAoBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CACvD,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAClB,MAAM,KAAK,OAAO;CAElB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,QAAQ,WAAW,KAAK,kBAAkB;AAChD,MAAI,aAAa,MAAM,CAAE,QAAO;AAGhC,SAAO,aADQ,MAAM,mBAAmB,IAAI,MAAM,CACvB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,uBAAuB;;;AAI9E,MAAa,SAAmB,OAAO,EAAE,aAAa;CACrD,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAClB,MAAM,KAAK,OAAO;CAElB,MAAM,SAAS,YAAY,MAAM,mBAAmB;AACpD,KAAI,OAAQ,QAAO;AAEnB,KAAI;AAEH,SAAO,aADQ,MAAM,oBAAoB,GAAG,CACjB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,wBAAwB;;;AAI/E,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAClB,MAAM,KAAK,OAAO;CAElB,MAAM,SAAS,YAAY,MAAM,mBAAmB;AACpD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,kBAAkB;AACxD,MAAI,aAAa,KAAK,CAAE,QAAO;AAG/B,SAAO,aADQ,MAAM,oBAAoB,IAAI,KAAK,UAAU,CACjC;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,wBAAwB"}

package/dist/astro/routes/api/redirects/404s/summary.mjs

@@ -1,16 +1,17 @@
-import "../../../../../dialect-helpers-Cue7QQOR.mjs";
-import "../../../../../base64-C74Msx8h.mjs";
-import "../../../../../types-Ch8pFMEm.mjs";
+import "../../../../../dialect-helpers-BtOwo2us.mjs";
+import "../../../../../base64-B-PsqheR.mjs";
+import "../../../../../types-CrRUFdej.mjs";
 import "../../../../../options-BlmBHTvX.mjs";
-import "../../../../../redirect-Ch3E98qZ.mjs";
-import { a as unwrapResult, i as requireDb, r as handleError } from "../../../../../error-CfJMLSkd.mjs";
-import { i as parseQuery, t as isParseError } from "../../../../../parse-GLksnn-B.mjs";
-import { o as notFoundSummaryQuery } from "../../../../../redirects-CeD7K7EX.mjs";
-import "../../../../../relations-BmBmX4Eb.mjs";
-import "../../../../../status-D3Gy1Zc6.mjs";
+import "../../../../../redirect-BoUac4NT.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError } from "../../../../../error-DJ98TRbQ.mjs";
+import { i as parseQuery, t as isParseError } from "../../../../../parse-53zyxlpv.mjs";
+import "../../../../../media-BJ6SRY3g.mjs";
+import { o as notFoundSummaryQuery } from "../../../../../redirects-D457qwt0.mjs";
+import "../../../../../relations-CZMpBqEd.mjs";
+import "../../../../../status-COfycGIU.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { n as requirePerm } from "../../../../../authorize-BmCwQCib.mjs";
-import { i as handleNotFoundSummary } from "../../../../../redirects-CXmVGRNZ.mjs";
+import { r as requirePerm } from "../../../../../authorize-6WPZa1xZ.mjs";
+import { i as handleNotFoundSummary } from "../../../../../redirects-ChbpqKiS.mjs";
 
 //#region src/astro/routes/api/redirects/404s/summary.ts
 const prerender = false;

package/dist/astro/routes/api/redirects/404s/summary.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"summary.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/redirects/404s/summary.ts"],"sourcesContent":["/**\n * 404 summary endpoint\n *\n * GET /_emdash/api/redirects/404s/summary - Get 404 summary grouped by path\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport { handleNotFoundSummary } from \"#api/handlers/redirects.js\";\nimport { isParseError, parseQuery } from \"#api/parse.js\";\nimport { notFoundSummaryQuery } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ url, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\tconst db = emdash.db;\n\n\tconst denied = requirePerm(user, \"redirects:read\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst query = parseQuery(url, notFoundSummaryQuery);\n\t\tif (isParseError(query)) return query;\n\n\t\tconst result = await handleNotFoundSummary(db, query.limit);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to fetch 404 summary\", \"NOT_FOUND_SUMMARY_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;AAcA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CACvD,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAClB,MAAM,KAAK,OAAO;CAElB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,QAAQ,WAAW,KAAK,qBAAqB;AACnD,MAAI,aAAa,MAAM,CAAE,QAAO;AAGhC,SAAO,aADQ,MAAM,sBAAsB,IAAI,MAAM,MAAM,CAChC;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,+BAA+B,0BAA0B"}
+{"version":3,"file":"summary.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/redirects/404s/summary.ts"],"sourcesContent":["/**\n * 404 summary endpoint\n *\n * GET /_emdash/api/redirects/404s/summary - Get 404 summary grouped by path\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport { handleNotFoundSummary } from \"#api/handlers/redirects.js\";\nimport { isParseError, parseQuery } from \"#api/parse.js\";\nimport { notFoundSummaryQuery } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ url, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\tconst db = emdash.db;\n\n\tconst denied = requirePerm(user, \"redirects:read\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst query = parseQuery(url, notFoundSummaryQuery);\n\t\tif (isParseError(query)) return query;\n\n\t\tconst result = await handleNotFoundSummary(db, query.limit);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to fetch 404 summary\", \"NOT_FOUND_SUMMARY_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;AAcA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CACvD,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAClB,MAAM,KAAK,OAAO;CAElB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,QAAQ,WAAW,KAAK,qBAAqB;AACnD,MAAI,aAAa,MAAM,CAAE,QAAO;AAGhC,SAAO,aADQ,MAAM,sBAAsB,IAAI,MAAM,MAAM,CAChC;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,+BAA+B,0BAA0B"}

package/dist/astro/routes/api/redirects/_id_.mjs

@@ -1,17 +1,18 @@
-import "../../../../dialect-helpers-Cue7QQOR.mjs";
-import "../../../../base64-C74Msx8h.mjs";
-import "../../../../types-Ch8pFMEm.mjs";
+import "../../../../dialect-helpers-BtOwo2us.mjs";
+import "../../../../base64-B-PsqheR.mjs";
+import "../../../../types-CrRUFdej.mjs";
 import "../../../../options-BlmBHTvX.mjs";
-import "../../../../redirect-Ch3E98qZ.mjs";
-import { r as invalidateRedirectCache } from "../../../../cache-BeR7RfN8.mjs";
-import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../error-CfJMLSkd.mjs";
-import { n as parseBody, t as isParseError } from "../../../../parse-GLksnn-B.mjs";
-import { f as updateRedirectBody } from "../../../../redirects-CeD7K7EX.mjs";
-import "../../../../relations-BmBmX4Eb.mjs";
-import "../../../../status-D3Gy1Zc6.mjs";
+import "../../../../redirect-BoUac4NT.mjs";
+import { r as invalidateRedirectCache } from "../../../../cache-DDwy3JDW.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../error-DJ98TRbQ.mjs";
+import { n as parseBody, t as isParseError } from "../../../../parse-53zyxlpv.mjs";
+import "../../../../media-BJ6SRY3g.mjs";
+import { f as updateRedirectBody } from "../../../../redirects-D457qwt0.mjs";
+import "../../../../relations-CZMpBqEd.mjs";
+import "../../../../status-COfycGIU.mjs";
 import "../../../../api/schemas/index.mjs";
-import { n as requirePerm } from "../../../../authorize-BmCwQCib.mjs";
-import { l as handleRedirectUpdate, o as handleRedirectDelete, s as handleRedirectGet } from "../../../../redirects-CXmVGRNZ.mjs";
+import { r as requirePerm } from "../../../../authorize-6WPZa1xZ.mjs";
+import { l as handleRedirectUpdate, o as handleRedirectDelete, s as handleRedirectGet } from "../../../../redirects-ChbpqKiS.mjs";
 
 //#region src/astro/routes/api/redirects/[id].ts
 const prerender = false;

package/dist/astro/routes/api/redirects/_id_.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"_id_.mjs","names":[],"sources":["../../../../../src/astro/routes/api/redirects/[id].ts"],"sourcesContent":["/**\n * Redirect by ID endpoints\n *\n * GET    /_emdash/api/redirects/:id - Get redirect\n * PUT    /_emdash/api/redirects/:id - Update redirect\n * DELETE /_emdash/api/redirects/:id - Delete redirect\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport {\n\thandleRedirectDelete,\n\thandleRedirectGet,\n\thandleRedirectUpdate,\n} from \"#api/handlers/redirects.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { updateRedirectBody } from \"#api/schemas.js\";\nimport { invalidateRedirectCache } from \"#redirects/cache.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\tconst db = emdash.db;\n\tconst { id } = params;\n\n\tconst denied = requirePerm(user, \"redirects:read\");\n\tif (denied) return denied;\n\n\tif (!id) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"id is required\", 400);\n\t}\n\n\ttry {\n\t\tconst result = await handleRedirectGet(db, id);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to fetch redirect\", \"REDIRECT_GET_ERROR\");\n\t}\n};\n\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\tconst db = emdash.db;\n\tconst { id } = params;\n\n\tconst denied = requirePerm(user, \"redirects:manage\");\n\tif (denied) return denied;\n\n\tif (!id) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"id is required\", 400);\n\t}\n\n\ttry {\n\t\tconst body = await parseBody(request, updateRedirectBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleRedirectUpdate(db, id, body);\n\t\tinvalidateRedirectCache();\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update redirect\", \"REDIRECT_UPDATE_ERROR\");\n\t}\n};\n\nexport const DELETE: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\tconst db = emdash.db;\n\tconst { id } = params;\n\n\tconst denied = requirePerm(user, \"redirects:manage\");\n\tif (denied) return denied;\n\n\tif (!id) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"id is required\", 400);\n\t}\n\n\ttry {\n\t\tconst result = await handleRedirectDelete(db, id);\n\t\tinvalidateRedirectCache();\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to delete redirect\", \"REDIRECT_DELETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;AAqBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAClB,MAAM,KAAK,OAAO;CAClB,MAAM,EAAE,OAAO;CAEf,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,GACJ,QAAO,SAAS,oBAAoB,kBAAkB,IAAI;AAG3D,KAAI;AAEH,SAAO,aADQ,MAAM,kBAAkB,IAAI,GAAG,CACnB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,4BAA4B,qBAAqB;;;AAI7E,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAClB,MAAM,KAAK,OAAO;CAClB,MAAM,EAAE,OAAO;CAEf,MAAM,SAAS,YAAY,MAAM,mBAAmB;AACpD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,GACJ,QAAO,SAAS,oBAAoB,kBAAkB,IAAI;AAG3D,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,mBAAmB;AACzD,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,SAAS,MAAM,qBAAqB,IAAI,IAAI,KAAK;AACvD,2BAAyB;AACzB,SAAO,aAAa,OAAO;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,6BAA6B,wBAAwB;;;AAIjF,MAAa,SAAmB,OAAO,EAAE,QAAQ,aAAa;CAC7D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAClB,MAAM,KAAK,OAAO;CAClB,MAAM,EAAE,OAAO;CAEf,MAAM,SAAS,YAAY,MAAM,mBAAmB;AACpD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,GACJ,QAAO,SAAS,oBAAoB,kBAAkB,IAAI;AAG3D,KAAI;EACH,MAAM,SAAS,MAAM,qBAAqB,IAAI,GAAG;AACjD,2BAAyB;AACzB,SAAO,aAAa,OAAO;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,6BAA6B,wBAAwB"}
+{"version":3,"file":"_id_.mjs","names":[],"sources":["../../../../../src/astro/routes/api/redirects/[id].ts"],"sourcesContent":["/**\n * Redirect by ID endpoints\n *\n * GET    /_emdash/api/redirects/:id - Get redirect\n * PUT    /_emdash/api/redirects/:id - Update redirect\n * DELETE /_emdash/api/redirects/:id - Delete redirect\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport {\n\thandleRedirectDelete,\n\thandleRedirectGet,\n\thandleRedirectUpdate,\n} from \"#api/handlers/redirects.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { updateRedirectBody } from \"#api/schemas.js\";\nimport { invalidateRedirectCache } from \"#redirects/cache.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\tconst db = emdash.db;\n\tconst { id } = params;\n\n\tconst denied = requirePerm(user, \"redirects:read\");\n\tif (denied) return denied;\n\n\tif (!id) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"id is required\", 400);\n\t}\n\n\ttry {\n\t\tconst result = await handleRedirectGet(db, id);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to fetch redirect\", \"REDIRECT_GET_ERROR\");\n\t}\n};\n\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\tconst db = emdash.db;\n\tconst { id } = params;\n\n\tconst denied = requirePerm(user, \"redirects:manage\");\n\tif (denied) return denied;\n\n\tif (!id) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"id is required\", 400);\n\t}\n\n\ttry {\n\t\tconst body = await parseBody(request, updateRedirectBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleRedirectUpdate(db, id, body);\n\t\tinvalidateRedirectCache();\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update redirect\", \"REDIRECT_UPDATE_ERROR\");\n\t}\n};\n\nexport const DELETE: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\tconst db = emdash.db;\n\tconst { id } = params;\n\n\tconst denied = requirePerm(user, \"redirects:manage\");\n\tif (denied) return denied;\n\n\tif (!id) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"id is required\", 400);\n\t}\n\n\ttry {\n\t\tconst result = await handleRedirectDelete(db, id);\n\t\tinvalidateRedirectCache();\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to delete redirect\", \"REDIRECT_DELETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;AAqBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAClB,MAAM,KAAK,OAAO;CAClB,MAAM,EAAE,OAAO;CAEf,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,GACJ,QAAO,SAAS,oBAAoB,kBAAkB,IAAI;AAG3D,KAAI;AAEH,SAAO,aADQ,MAAM,kBAAkB,IAAI,GAAG,CACnB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,4BAA4B,qBAAqB;;;AAI7E,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAClB,MAAM,KAAK,OAAO;CAClB,MAAM,EAAE,OAAO;CAEf,MAAM,SAAS,YAAY,MAAM,mBAAmB;AACpD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,GACJ,QAAO,SAAS,oBAAoB,kBAAkB,IAAI;AAG3D,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,mBAAmB;AACzD,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,SAAS,MAAM,qBAAqB,IAAI,IAAI,KAAK;AACvD,2BAAyB;AACzB,SAAO,aAAa,OAAO;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,6BAA6B,wBAAwB;;;AAIjF,MAAa,SAAmB,OAAO,EAAE,QAAQ,aAAa;CAC7D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAClB,MAAM,KAAK,OAAO;CAClB,MAAM,EAAE,OAAO;CAEf,MAAM,SAAS,YAAY,MAAM,mBAAmB;AACpD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,GACJ,QAAO,SAAS,oBAAoB,kBAAkB,IAAI;AAG3D,KAAI;EACH,MAAM,SAAS,MAAM,qBAAqB,IAAI,GAAG;AACjD,2BAAyB;AACzB,SAAO,aAAa,OAAO;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,6BAA6B,wBAAwB"}

package/dist/astro/routes/api/redirects/index.mjs

@@ -1,17 +1,18 @@
-import "../../../../dialect-helpers-Cue7QQOR.mjs";
-import "../../../../base64-C74Msx8h.mjs";
-import "../../../../types-Ch8pFMEm.mjs";
+import "../../../../dialect-helpers-BtOwo2us.mjs";
+import "../../../../base64-B-PsqheR.mjs";
+import "../../../../types-CrRUFdej.mjs";
 import "../../../../options-BlmBHTvX.mjs";
-import "../../../../redirect-Ch3E98qZ.mjs";
-import { r as invalidateRedirectCache } from "../../../../cache-BeR7RfN8.mjs";
-import { a as unwrapResult, i as requireDb, r as handleError } from "../../../../error-CfJMLSkd.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-GLksnn-B.mjs";
-import { d as redirectsListQuery, t as createRedirectBody } from "../../../../redirects-CeD7K7EX.mjs";
-import "../../../../relations-BmBmX4Eb.mjs";
-import "../../../../status-D3Gy1Zc6.mjs";
+import "../../../../redirect-BoUac4NT.mjs";
+import { r as invalidateRedirectCache } from "../../../../cache-DDwy3JDW.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError } from "../../../../error-DJ98TRbQ.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-53zyxlpv.mjs";
+import "../../../../media-BJ6SRY3g.mjs";
+import { d as redirectsListQuery, t as createRedirectBody } from "../../../../redirects-D457qwt0.mjs";
+import "../../../../relations-CZMpBqEd.mjs";
+import "../../../../status-COfycGIU.mjs";
 import "../../../../api/schemas/index.mjs";
-import { n as requirePerm } from "../../../../authorize-BmCwQCib.mjs";
-import { a as handleRedirectCreate, c as handleRedirectList } from "../../../../redirects-CXmVGRNZ.mjs";
+import { r as requirePerm } from "../../../../authorize-6WPZa1xZ.mjs";
+import { a as handleRedirectCreate, c as handleRedirectList } from "../../../../redirects-ChbpqKiS.mjs";
 
 //#region src/astro/routes/api/redirects/index.ts
 const prerender = false;

package/dist/astro/routes/api/redirects/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../src/astro/routes/api/redirects/index.ts"],"sourcesContent":["/**\n * Redirects list and create endpoints\n *\n * GET  /_emdash/api/redirects - List redirects (with filters)\n * POST /_emdash/api/redirects - Create redirect\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport { handleRedirectCreate, handleRedirectList } from \"#api/handlers/redirects.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { createRedirectBody, redirectsListQuery } from \"#api/schemas.js\";\nimport { invalidateRedirectCache } from \"#redirects/cache.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ url, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\tconst db = emdash.db;\n\n\tconst denied = requirePerm(user, \"redirects:read\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst query = parseQuery(url, redirectsListQuery);\n\t\tif (isParseError(query)) return query;\n\n\t\tconst result = await handleRedirectList(db, query);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to fetch redirects\", \"REDIRECT_LIST_ERROR\");\n\t}\n};\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\tconst db = emdash.db;\n\n\tconst denied = requirePerm(user, \"redirects:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst body = await parseBody(request, createRedirectBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleRedirectCreate(db, body);\n\t\tinvalidateRedirectCache();\n\t\treturn unwrapResult(result, 201);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create redirect\", \"REDIRECT_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;AAgBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CACvD,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAClB,MAAM,KAAK,OAAO;CAElB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,QAAQ,WAAW,KAAK,mBAAmB;AACjD,MAAI,aAAa,MAAM,CAAE,QAAO;AAGhC,SAAO,aADQ,MAAM,mBAAmB,IAAI,MAAM,CACvB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,6BAA6B,sBAAsB;;;AAI/E,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAClB,MAAM,KAAK,OAAO;CAElB,MAAM,SAAS,YAAY,MAAM,mBAAmB;AACpD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,mBAAmB;AACzD,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,SAAS,MAAM,qBAAqB,IAAI,KAAK;AACnD,2BAAyB;AACzB,SAAO,aAAa,QAAQ,IAAI;UACxB,OAAO;AACf,SAAO,YAAY,OAAO,6BAA6B,wBAAwB"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../src/astro/routes/api/redirects/index.ts"],"sourcesContent":["/**\n * Redirects list and create endpoints\n *\n * GET  /_emdash/api/redirects - List redirects (with filters)\n * POST /_emdash/api/redirects - Create redirect\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport { handleRedirectCreate, handleRedirectList } from \"#api/handlers/redirects.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { createRedirectBody, redirectsListQuery } from \"#api/schemas.js\";\nimport { invalidateRedirectCache } from \"#redirects/cache.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ url, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\tconst db = emdash.db;\n\n\tconst denied = requirePerm(user, \"redirects:read\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst query = parseQuery(url, redirectsListQuery);\n\t\tif (isParseError(query)) return query;\n\n\t\tconst result = await handleRedirectList(db, query);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to fetch redirects\", \"REDIRECT_LIST_ERROR\");\n\t}\n};\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\tconst db = emdash.db;\n\n\tconst denied = requirePerm(user, \"redirects:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst body = await parseBody(request, createRedirectBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleRedirectCreate(db, body);\n\t\tinvalidateRedirectCache();\n\t\treturn unwrapResult(result, 201);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create redirect\", \"REDIRECT_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;AAgBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CACvD,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAClB,MAAM,KAAK,OAAO;CAElB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,QAAQ,WAAW,KAAK,mBAAmB;AACjD,MAAI,aAAa,MAAM,CAAE,QAAO;AAGhC,SAAO,aADQ,MAAM,mBAAmB,IAAI,MAAM,CACvB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,6BAA6B,sBAAsB;;;AAI/E,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAClB,MAAM,KAAK,OAAO;CAElB,MAAM,SAAS,YAAY,MAAM,mBAAmB;AACpD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,mBAAmB;AACzD,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,SAAS,MAAM,qBAAqB,IAAI,KAAK;AACnD,2BAAyB;AACzB,SAAO,aAAa,QAAQ,IAAI;UACxB,OAAO;AACf,SAAO,YAAY,OAAO,6BAA6B,wBAAwB"}

package/dist/astro/routes/api/relations/_id_/index.mjs

@@ -1,21 +1,22 @@
-import "../../../../../dialect-helpers-Cue7QQOR.mjs";
+import "../../../../../dialect-helpers-BtOwo2us.mjs";
 import "../../../../../after-B1IIdH3Y.mjs";
 import "../../../../../object-cache-Bok5j2ae.mjs";
-import "../../../../../content-BO61Sx4j.mjs";
-import "../../../../../base64-C74Msx8h.mjs";
-import "../../../../../types-Ch8pFMEm.mjs";
-import "../../../../../relation-Ba68Tm4Z.mjs";
-import "../../../../../fts-manager-BD9s77qh.mjs";
-import "../../../../../content-refresh-BkkApzeS.mjs";
-import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../../error-CfJMLSkd.mjs";
-import "../../../../../registry-CyIXPi4E.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-GLksnn-B.mjs";
-import "../../../../../redirects-CeD7K7EX.mjs";
-import { u as updateRelationBody } from "../../../../../relations-BmBmX4Eb.mjs";
-import "../../../../../status-D3Gy1Zc6.mjs";
+import "../../../../../content-BC43pICM.mjs";
+import "../../../../../base64-B-PsqheR.mjs";
+import "../../../../../types-CrRUFdej.mjs";
+import "../../../../../relation-Du0r04E0.mjs";
+import "../../../../../fts-manager-hyCU9OOp.mjs";
+import "../../../../../content-refresh-CPMSauD3.mjs";
+import "../../../../../registry-y21kjhfG.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../../error-DJ98TRbQ.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-53zyxlpv.mjs";
+import "../../../../../media-BJ6SRY3g.mjs";
+import "../../../../../redirects-D457qwt0.mjs";
+import { u as updateRelationBody } from "../../../../../relations-CZMpBqEd.mjs";
+import "../../../../../status-COfycGIU.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { n as requirePerm } from "../../../../../authorize-BmCwQCib.mjs";
-import { a as handleRelationDelete, l as handleRelationUpdate, o as handleRelationGet } from "../../../../../relations-C8hVyEy0.mjs";
+import { r as requirePerm } from "../../../../../authorize-6WPZa1xZ.mjs";
+import { a as handleRelationDelete, l as handleRelationUpdate, o as handleRelationGet } from "../../../../../relations-DtX1UMBH.mjs";
 
 //#region src/astro/routes/api/relations/[id]/index.ts
 const prerender = false;

package/dist/astro/routes/api/relations/_id_/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/relations/[id]/index.ts"],"sourcesContent":["/**\n * Single relation definition endpoint\n *\n * GET    /_emdash/api/relations/:id - Get a relation\n * PATCH  /_emdash/api/relations/:id - Update a relation's labels\n * DELETE /_emdash/api/relations/:id - Delete a relation\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport {\n\thandleRelationDelete,\n\thandleRelationGet,\n\thandleRelationUpdate,\n} from \"#api/handlers/relations.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { updateRelationBody } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"schema:read\");\n\tif (denied) return denied;\n\n\tif (!id) return apiError(\"VALIDATION_ERROR\", \"Relation id required\", 400);\n\n\ttry {\n\t\tconst result = await handleRelationGet(emdash.db, id);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to get relation\", \"RELATION_GET_ERROR\");\n\t}\n};\n\nexport const PATCH: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"schema:manage\");\n\tif (denied) return denied;\n\n\tif (!id) return apiError(\"VALIDATION_ERROR\", \"Relation id required\", 400);\n\n\ttry {\n\t\tconst body = await parseBody(request, updateRelationBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleRelationUpdate(emdash.db, id, body);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update relation\", \"RELATION_UPDATE_ERROR\");\n\t}\n};\n\nexport const DELETE: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"schema:manage\");\n\tif (denied) return denied;\n\n\tif (!id) return apiError(\"VALIDATION_ERROR\", \"Relation id required\", 400);\n\n\ttry {\n\t\tconst result = await handleRelationDelete(emdash.db, id);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to delete relation\", \"RELATION_DELETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAoBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAEf,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,cAAc;AAC/C,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,GAAI,QAAO,SAAS,oBAAoB,wBAAwB,IAAI;AAEzE,KAAI;AAEH,SAAO,aADQ,MAAM,kBAAkB,OAAO,IAAI,GAAG,CAC1B;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,0BAA0B,qBAAqB;;;AAI3E,MAAa,QAAkB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACrE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAEf,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,gBAAgB;AACjD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,GAAI,QAAO,SAAS,oBAAoB,wBAAwB,IAAI;AAEzE,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,mBAAmB;AACzD,MAAI,aAAa,KAAK,CAAE,QAAO;AAG/B,SAAO,aADQ,MAAM,qBAAqB,OAAO,IAAI,IAAI,KAAK,CACnC;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,6BAA6B,wBAAwB;;;AAIjF,MAAa,SAAmB,OAAO,EAAE,QAAQ,aAAa;CAC7D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAEf,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,gBAAgB;AACjD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,GAAI,QAAO,SAAS,oBAAoB,wBAAwB,IAAI;AAEzE,KAAI;AAEH,SAAO,aADQ,MAAM,qBAAqB,OAAO,IAAI,GAAG,CAC7B;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,6BAA6B,wBAAwB"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/relations/[id]/index.ts"],"sourcesContent":["/**\n * Single relation definition endpoint\n *\n * GET    /_emdash/api/relations/:id - Get a relation\n * PATCH  /_emdash/api/relations/:id - Update a relation's labels\n * DELETE /_emdash/api/relations/:id - Delete a relation\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport {\n\thandleRelationDelete,\n\thandleRelationGet,\n\thandleRelationUpdate,\n} from \"#api/handlers/relations.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { updateRelationBody } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"schema:read\");\n\tif (denied) return denied;\n\n\tif (!id) return apiError(\"VALIDATION_ERROR\", \"Relation id required\", 400);\n\n\ttry {\n\t\tconst result = await handleRelationGet(emdash.db, id);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to get relation\", \"RELATION_GET_ERROR\");\n\t}\n};\n\nexport const PATCH: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"schema:manage\");\n\tif (denied) return denied;\n\n\tif (!id) return apiError(\"VALIDATION_ERROR\", \"Relation id required\", 400);\n\n\ttry {\n\t\tconst body = await parseBody(request, updateRelationBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleRelationUpdate(emdash.db, id, body);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update relation\", \"RELATION_UPDATE_ERROR\");\n\t}\n};\n\nexport const DELETE: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"schema:manage\");\n\tif (denied) return denied;\n\n\tif (!id) return apiError(\"VALIDATION_ERROR\", \"Relation id required\", 400);\n\n\ttry {\n\t\tconst result = await handleRelationDelete(emdash.db, id);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to delete relation\", \"RELATION_DELETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAoBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAEf,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,cAAc;AAC/C,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,GAAI,QAAO,SAAS,oBAAoB,wBAAwB,IAAI;AAEzE,KAAI;AAEH,SAAO,aADQ,MAAM,kBAAkB,OAAO,IAAI,GAAG,CAC1B;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,0BAA0B,qBAAqB;;;AAI3E,MAAa,QAAkB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACrE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAEf,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,gBAAgB;AACjD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,GAAI,QAAO,SAAS,oBAAoB,wBAAwB,IAAI;AAEzE,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,mBAAmB;AACzD,MAAI,aAAa,KAAK,CAAE,QAAO;AAG/B,SAAO,aADQ,MAAM,qBAAqB,OAAO,IAAI,IAAI,KAAK,CACnC;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,6BAA6B,wBAAwB;;;AAIjF,MAAa,SAAmB,OAAO,EAAE,QAAQ,aAAa;CAC7D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAEf,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,gBAAgB;AACjD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,GAAI,QAAO,SAAS,oBAAoB,wBAAwB,IAAI;AAEzE,KAAI;AAEH,SAAO,aADQ,MAAM,qBAAqB,OAAO,IAAI,GAAG,CAC7B;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,6BAA6B,wBAAwB"}

package/dist/astro/routes/api/relations/_id_/translations.mjs

@@ -1,16 +1,16 @@
-import "../../../../../dialect-helpers-Cue7QQOR.mjs";
+import "../../../../../dialect-helpers-BtOwo2us.mjs";
 import "../../../../../after-B1IIdH3Y.mjs";
 import "../../../../../object-cache-Bok5j2ae.mjs";
-import "../../../../../content-BO61Sx4j.mjs";
-import "../../../../../base64-C74Msx8h.mjs";
-import "../../../../../types-Ch8pFMEm.mjs";
-import "../../../../../relation-Ba68Tm4Z.mjs";
-import "../../../../../fts-manager-BD9s77qh.mjs";
-import "../../../../../content-refresh-BkkApzeS.mjs";
-import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../../error-CfJMLSkd.mjs";
-import "../../../../../registry-CyIXPi4E.mjs";
-import { n as requirePerm } from "../../../../../authorize-BmCwQCib.mjs";
-import { c as handleRelationTranslations } from "../../../../../relations-C8hVyEy0.mjs";
+import "../../../../../content-BC43pICM.mjs";
+import "../../../../../base64-B-PsqheR.mjs";
+import "../../../../../types-CrRUFdej.mjs";
+import "../../../../../relation-Du0r04E0.mjs";
+import "../../../../../fts-manager-hyCU9OOp.mjs";
+import "../../../../../content-refresh-CPMSauD3.mjs";
+import "../../../../../registry-y21kjhfG.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../../error-DJ98TRbQ.mjs";
+import { r as requirePerm } from "../../../../../authorize-6WPZa1xZ.mjs";
+import { c as handleRelationTranslations } from "../../../../../relations-DtX1UMBH.mjs";
 
 //#region src/astro/routes/api/relations/[id]/translations.ts
 const prerender = false;

package/dist/astro/routes/api/relations/index.mjs

@@ -1,21 +1,22 @@
-import "../../../../dialect-helpers-Cue7QQOR.mjs";
+import "../../../../dialect-helpers-BtOwo2us.mjs";
 import "../../../../after-B1IIdH3Y.mjs";
 import "../../../../object-cache-Bok5j2ae.mjs";
-import "../../../../content-BO61Sx4j.mjs";
-import "../../../../base64-C74Msx8h.mjs";
-import "../../../../types-Ch8pFMEm.mjs";
-import "../../../../relation-Ba68Tm4Z.mjs";
-import "../../../../fts-manager-BD9s77qh.mjs";
-import "../../../../content-refresh-BkkApzeS.mjs";
-import { a as unwrapResult, i as requireDb, r as handleError } from "../../../../error-CfJMLSkd.mjs";
-import "../../../../registry-CyIXPi4E.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-GLksnn-B.mjs";
-import { zn as localeFilterQuery } from "../../../../redirects-CeD7K7EX.mjs";
-import { t as createRelationBody } from "../../../../relations-BmBmX4Eb.mjs";
-import "../../../../status-D3Gy1Zc6.mjs";
+import "../../../../content-BC43pICM.mjs";
+import "../../../../base64-B-PsqheR.mjs";
+import "../../../../types-CrRUFdej.mjs";
+import "../../../../relation-Du0r04E0.mjs";
+import "../../../../fts-manager-hyCU9OOp.mjs";
+import "../../../../content-refresh-CPMSauD3.mjs";
+import "../../../../registry-y21kjhfG.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError } from "../../../../error-DJ98TRbQ.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-53zyxlpv.mjs";
+import { z as localeFilterQuery } from "../../../../media-BJ6SRY3g.mjs";
+import "../../../../redirects-D457qwt0.mjs";
+import { t as createRelationBody } from "../../../../relations-CZMpBqEd.mjs";
+import "../../../../status-COfycGIU.mjs";
 import "../../../../api/schemas/index.mjs";
-import { n as requirePerm } from "../../../../authorize-BmCwQCib.mjs";
-import { i as handleRelationCreate, s as handleRelationList } from "../../../../relations-C8hVyEy0.mjs";
+import { r as requirePerm } from "../../../../authorize-6WPZa1xZ.mjs";
+import { i as handleRelationCreate, s as handleRelationList } from "../../../../relations-DtX1UMBH.mjs";
 
 //#region src/astro/routes/api/relations/index.ts
 const prerender = false;

package/dist/astro/routes/api/relations/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../src/astro/routes/api/relations/index.ts"],"sourcesContent":["/**\n * Relation definitions endpoint\n *\n * GET  /_emdash/api/relations[?locale=xx] - List relation definitions\n * POST /_emdash/api/relations              - Create a relation definition\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport { handleRelationCreate, handleRelationList } from \"#api/handlers/relations.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { createRelationBody, localeFilterQuery } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"schema:read\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst result = await handleRelationList(emdash.db, { locale: query.locale });\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to list relations\", \"RELATION_LIST_ERROR\");\n\t}\n};\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"schema:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst body = await parseBody(request, createRelationBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleRelationCreate(emdash.db, body);\n\t\treturn unwrapResult(result, 201);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create relation\", \"RELATION_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAeA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,SAAS,aAAa;CAC3D,MAAM,EAAE,QAAQ,SAAS;CAEzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,cAAc;AAC/C,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACjE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;AAEH,SAAO,aADQ,MAAM,mBAAmB,OAAO,IAAI,EAAE,QAAQ,MAAM,QAAQ,CAAC,CACjD;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,4BAA4B,sBAAsB;;;AAI9E,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,QAAQ,SAAS;CAEzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,gBAAgB;AACjD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,mBAAmB;AACzD,MAAI,aAAa,KAAK,CAAE,QAAO;AAG/B,SAAO,aADQ,MAAM,qBAAqB,OAAO,IAAI,KAAK,EAC9B,IAAI;UACxB,OAAO;AACf,SAAO,YAAY,OAAO,6BAA6B,wBAAwB"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../src/astro/routes/api/relations/index.ts"],"sourcesContent":["/**\n * Relation definitions endpoint\n *\n * GET  /_emdash/api/relations[?locale=xx] - List relation definitions\n * POST /_emdash/api/relations              - Create a relation definition\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport { handleRelationCreate, handleRelationList } from \"#api/handlers/relations.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { createRelationBody, localeFilterQuery } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"schema:read\");\n\tif (denied) return denied;\n\n\tconst query = parseQuery(new URL(request.url), localeFilterQuery);\n\tif (isParseError(query)) return query;\n\n\ttry {\n\t\tconst result = await handleRelationList(emdash.db, { locale: query.locale });\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to list relations\", \"RELATION_LIST_ERROR\");\n\t}\n};\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\n\tconst denied = requirePerm(user, \"schema:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst body = await parseBody(request, createRelationBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleRelationCreate(emdash.db, body);\n\t\treturn unwrapResult(result, 201);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create relation\", \"RELATION_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAeA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,SAAS,aAAa;CAC3D,MAAM,EAAE,QAAQ,SAAS;CAEzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,cAAc;AAC/C,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,kBAAkB;AACjE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,KAAI;AAEH,SAAO,aADQ,MAAM,mBAAmB,OAAO,IAAI,EAAE,QAAQ,MAAM,QAAQ,CAAC,CACjD;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,4BAA4B,sBAAsB;;;AAI9E,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,QAAQ,SAAS;CAEzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAElB,MAAM,SAAS,YAAY,MAAM,gBAAgB;AACjD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,mBAAmB;AACzD,MAAI,aAAa,KAAK,CAAE,QAAO;AAG/B,SAAO,aADQ,MAAM,qBAAqB,OAAO,IAAI,KAAK,EAC9B,IAAI;UACxB,OAAO;AACf,SAAO,YAAY,OAAO,6BAA6B,wBAAwB"}

package/dist/astro/routes/api/revisions/_revisionId_/index.mjs

@@ -1,7 +1,7 @@
-import "../../../../../base64-C74Msx8h.mjs";
-import "../../../../../types-Ch8pFMEm.mjs";
-import { a as unwrapResult, t as apiError } from "../../../../../error-CfJMLSkd.mjs";
-import { n as requirePerm } from "../../../../../authorize-BmCwQCib.mjs";
+import "../../../../../base64-B-PsqheR.mjs";
+import "../../../../../types-CrRUFdej.mjs";
+import { a as unwrapResult, t as apiError } from "../../../../../error-DJ98TRbQ.mjs";
+import { r as requirePerm } from "../../../../../authorize-6WPZa1xZ.mjs";
 
 //#region src/astro/routes/api/revisions/[revisionId]/index.ts
 const prerender = false;

package/dist/astro/routes/api/revisions/_revisionId_/restore.mjs

@@ -1,7 +1,8 @@
-import "../../../../../base64-C74Msx8h.mjs";
-import "../../../../../types-Ch8pFMEm.mjs";
-import { a as unwrapResult, s as mapErrorStatus, t as apiError } from "../../../../../error-CfJMLSkd.mjs";
-import { t as requireOwnerPerm } from "../../../../../authorize-BmCwQCib.mjs";
+import "../../../../../base64-B-PsqheR.mjs";
+import "../../../../../types-CrRUFdej.mjs";
+import { n as mapErrorStatus } from "../../../../../errors-DtEXIQQV.mjs";
+import { a as unwrapResult, t as apiError } from "../../../../../error-DJ98TRbQ.mjs";
+import { n as requireOwnerPerm } from "../../../../../authorize-6WPZa1xZ.mjs";
 
 //#region src/astro/routes/api/revisions/[revisionId]/restore.ts
 const prerender = false;

package/dist/astro/routes/api/revisions/_revisionId_/restore.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"restore.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/revisions/[revisionId]/restore.ts"],"sourcesContent":["/**\n * Restore revision endpoint - injected by EmDash integration\n *\n * POST /_emdash/api/revisions/{revisionId}/restore - Restore revision\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requireOwnerPerm } from \"#api/authorize.js\";\nimport { apiError, mapErrorStatus, unwrapResult } from \"#api/error.js\";\n\nexport const prerender = false;\n\nexport const POST: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst revisionId = params.revisionId!;\n\n\tif (!emdash?.handleRevisionRestore || !emdash?.handleRevisionGet || !emdash?.handleContentGet) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash not configured\", 500);\n\t}\n\n\t// Fetch the revision to discover which content entry it belongs to\n\tconst revision = await emdash.handleRevisionGet(revisionId);\n\tif (!revision.success) {\n\t\treturn apiError(\n\t\t\trevision.error?.code ?? \"UNKNOWN_ERROR\",\n\t\t\trevision.error?.message ?? \"Revision not found\",\n\t\t\tmapErrorStatus(revision.error?.code),\n\t\t);\n\t}\n\n\tconst collection = revision.data?.item?.collection;\n\tconst entryId = revision.data?.item?.entryId;\n\n\tif (!collection || !entryId) {\n\t\treturn apiError(\"INVALID_REVISION\", \"Revision is missing collection or entry reference\", 400);\n\t}\n\n\t// Fetch the content entry to check ownership\n\tconst existing = await emdash.handleContentGet(collection, entryId);\n\tif (!existing.success) {\n\t\treturn apiError(\n\t\t\texisting.error?.code ?? \"UNKNOWN_ERROR\",\n\t\t\texisting.error?.message ?? \"Content not found\",\n\t\t\tmapErrorStatus(existing.error?.code),\n\t\t);\n\t}\n\n\tconst authorId = existing.data?.item?.authorId ?? \"\";\n\n\t// Check ownership: authors can only restore their own content, editors+ can restore any\n\tconst denied = requireOwnerPerm(user, authorId, \"content:edit_own\", \"content:edit_any\");\n\tif (denied) return denied;\n\n\tconst result = await emdash.handleRevisionRestore(revisionId, user!.id);\n\n\treturn unwrapResult(result);\n};\n"],"mappings":";;;;;;AAWA,MAAa,YAAY;AAEzB,MAAa,OAAiB,OAAO,EAAE,QAAQ,aAAa;CAC3D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,aAAa,OAAO;AAE1B,KAAI,CAAC,QAAQ,yBAAyB,CAAC,QAAQ,qBAAqB,CAAC,QAAQ,iBAC5E,QAAO,SAAS,kBAAkB,yBAAyB,IAAI;CAIhE,MAAM,WAAW,MAAM,OAAO,kBAAkB,WAAW;AAC3D,KAAI,CAAC,SAAS,QACb,QAAO,SACN,SAAS,OAAO,QAAQ,iBACxB,SAAS,OAAO,WAAW,sBAC3B,eAAe,SAAS,OAAO,KAAK,CACpC;CAGF,MAAM,aAAa,SAAS,MAAM,MAAM;CACxC,MAAM,UAAU,SAAS,MAAM,MAAM;AAErC,KAAI,CAAC,cAAc,CAAC,QACnB,QAAO,SAAS,oBAAoB,qDAAqD,IAAI;CAI9F,MAAM,WAAW,MAAM,OAAO,iBAAiB,YAAY,QAAQ;AACnE,KAAI,CAAC,SAAS,QACb,QAAO,SACN,SAAS,OAAO,QAAQ,iBACxB,SAAS,OAAO,WAAW,qBAC3B,eAAe,SAAS,OAAO,KAAK,CACpC;CAMF,MAAM,SAAS,iBAAiB,MAHf,SAAS,MAAM,MAAM,YAAY,IAGF,oBAAoB,mBAAmB;AACvF,KAAI,OAAQ,QAAO;AAInB,QAAO,aAFQ,MAAM,OAAO,sBAAsB,YAAY,KAAM,GAAG,CAE5C"}
+{"version":3,"file":"restore.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/revisions/[revisionId]/restore.ts"],"sourcesContent":["/**\n * Restore revision endpoint - injected by EmDash integration\n *\n * POST /_emdash/api/revisions/{revisionId}/restore - Restore revision\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requireOwnerPerm } from \"#api/authorize.js\";\nimport { apiError, mapErrorStatus, unwrapResult } from \"#api/error.js\";\n\nexport const prerender = false;\n\nexport const POST: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst revisionId = params.revisionId!;\n\n\tif (!emdash?.handleRevisionRestore || !emdash?.handleRevisionGet || !emdash?.handleContentGet) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash not configured\", 500);\n\t}\n\n\t// Fetch the revision to discover which content entry it belongs to\n\tconst revision = await emdash.handleRevisionGet(revisionId);\n\tif (!revision.success) {\n\t\treturn apiError(\n\t\t\trevision.error?.code ?? \"UNKNOWN_ERROR\",\n\t\t\trevision.error?.message ?? \"Revision not found\",\n\t\t\tmapErrorStatus(revision.error?.code),\n\t\t);\n\t}\n\n\tconst collection = revision.data?.item?.collection;\n\tconst entryId = revision.data?.item?.entryId;\n\n\tif (!collection || !entryId) {\n\t\treturn apiError(\"INVALID_REVISION\", \"Revision is missing collection or entry reference\", 400);\n\t}\n\n\t// Fetch the content entry to check ownership\n\tconst existing = await emdash.handleContentGet(collection, entryId);\n\tif (!existing.success) {\n\t\treturn apiError(\n\t\t\texisting.error?.code ?? \"UNKNOWN_ERROR\",\n\t\t\texisting.error?.message ?? \"Content not found\",\n\t\t\tmapErrorStatus(existing.error?.code),\n\t\t);\n\t}\n\n\tconst authorId = existing.data?.item?.authorId ?? \"\";\n\n\t// Check ownership: authors can only restore their own content, editors+ can restore any\n\tconst denied = requireOwnerPerm(user, authorId, \"content:edit_own\", \"content:edit_any\");\n\tif (denied) return denied;\n\n\tconst result = await emdash.handleRevisionRestore(revisionId, user!.id);\n\n\treturn unwrapResult(result);\n};\n"],"mappings":";;;;;;;AAWA,MAAa,YAAY;AAEzB,MAAa,OAAiB,OAAO,EAAE,QAAQ,aAAa;CAC3D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,aAAa,OAAO;AAE1B,KAAI,CAAC,QAAQ,yBAAyB,CAAC,QAAQ,qBAAqB,CAAC,QAAQ,iBAC5E,QAAO,SAAS,kBAAkB,yBAAyB,IAAI;CAIhE,MAAM,WAAW,MAAM,OAAO,kBAAkB,WAAW;AAC3D,KAAI,CAAC,SAAS,QACb,QAAO,SACN,SAAS,OAAO,QAAQ,iBACxB,SAAS,OAAO,WAAW,sBAC3B,eAAe,SAAS,OAAO,KAAK,CACpC;CAGF,MAAM,aAAa,SAAS,MAAM,MAAM;CACxC,MAAM,UAAU,SAAS,MAAM,MAAM;AAErC,KAAI,CAAC,cAAc,CAAC,QACnB,QAAO,SAAS,oBAAoB,qDAAqD,IAAI;CAI9F,MAAM,WAAW,MAAM,OAAO,iBAAiB,YAAY,QAAQ;AACnE,KAAI,CAAC,SAAS,QACb,QAAO,SACN,SAAS,OAAO,QAAQ,iBACxB,SAAS,OAAO,WAAW,qBAC3B,eAAe,SAAS,OAAO,KAAK,CACpC;CAMF,MAAM,SAAS,iBAAiB,MAHf,SAAS,MAAM,MAAM,YAAY,IAGF,oBAAoB,mBAAmB;AACvF,KAAI,OAAQ,QAAO;AAInB,QAAO,aAFQ,MAAM,OAAO,sBAAsB,YAAY,KAAM,GAAG,CAE5C"}