emdash 0.29.0 → 0.31.0

package/dist/{menus-BtvH7Z7t.mjs → menus-CPf_SW7u.mjs}

@@ -1,21 +1,144 @@
 import { t as validateIdentifier } from "./validate-VPnKoIzW.mjs";
 import { n as cachedQuery, t as CacheNamespace } from "./object-cache-Bok5j2ae.mjs";
-import { t as CommentRepository } from "./comment-SWh31kS0.mjs";
+import { a as encodeCursor, i as decodeCursor } from "./types-CrRUFdej.mjs";
+import { t as CommentRepository } from "./comment-B9cUud8H.mjs";
 import { t as OptionsRepository } from "./options-BlmBHTvX.mjs";
-import { t as PluginContextFactory } from "./context-DtSFYFuS.mjs";
+import { t as PluginContextFactory } from "./context-DOurRIrb.mjs";
 import { r as requestCached } from "./request-cache-BSUptuJR.mjs";
-import { i as resolveLocaleChain, r as resolveLocale } from "./resolve-Cd9dzclN.mjs";
-import { a as getDb } from "./loader-Rb8QlGZp.mjs";
-import { a as normalizeCapabilities } from "./types-DeCZBZxn.mjs";
-import { dt as sanitizeHref } from "./redirects-CeD7K7EX.mjs";
-import { t as extractRequestMeta } from "./request-meta-DCwktC5P.mjs";
-import { r as setCronTasksEnabled } from "./cron-YFJ7uNVA.mjs";
-import { t as CommentReactionRepository } from "./comment-reaction-DgcpziXI.mjs";
+import { i as resolveLocaleChain, r as resolveLocale } from "./resolve-DFr4kq72.mjs";
+import { a as getDb } from "./loader-D4rigvjR.mjs";
+import { a as normalizeCapabilities } from "./types-CK0LxPUQ.mjs";
+import { dt as sanitizeHref } from "./redirects-D457qwt0.mjs";
+import { t as extractRequestMeta } from "./request-meta-DzXYYI-n.mjs";
+import { r as setCronTasksEnabled } from "./cron-BlKIMD_e.mjs";
+import { t as CommentReactionRepository } from "./comment-reaction-VUXO981F.mjs";
 import { sql } from "kysely";
 import { ulid } from "ulidx";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { z } from "astro/zod";
 
+//#region src/database/repositories/audit.ts
+/**
+* Audit repository for logging system events
+*
+* Tracks user actions for security, debugging, and compliance.
+* All mutations should create an audit log entry.
+*/
+var AuditRepository = class {
+	constructor(db) {
+		this.db = db;
+	}
+	/**
+	* Create an audit log entry
+	*/
+	async log(input) {
+		const id = ulid();
+		const row = {
+			id,
+			actor_id: input.actorId ?? null,
+			actor_ip: input.actorIp ?? null,
+			action: input.action,
+			resource_type: input.resourceType ?? null,
+			resource_id: input.resourceId ?? null,
+			details: input.details ? JSON.stringify(input.details) : null,
+			status: input.status ?? null
+		};
+		await this.db.insertInto("audit_logs").values(row).execute();
+		const log = await this.findById(id);
+		if (!log) throw new Error("Failed to create audit log");
+		return log;
+	}
+	/**
+	* Find audit log by ID
+	*/
+	async findById(id) {
+		const row = await this.db.selectFrom("audit_logs").selectAll().where("id", "=", id).executeTakeFirst();
+		return row ? this.rowToAuditLog(row) : null;
+	}
+	/**
+	* Query audit logs with filters and cursor-based pagination
+	*/
+	async findMany(query = {}) {
+		const limit = Math.min(Math.max(1, query.limit || 50), 100);
+		let q = this.db.selectFrom("audit_logs").selectAll().orderBy("timestamp", "desc").orderBy("id", "desc").limit(limit + 1);
+		if (query.actorId) q = q.where("actor_id", "=", query.actorId);
+		if (query.action) q = q.where("action", "=", query.action);
+		if (query.resourceType) q = q.where("resource_type", "=", query.resourceType);
+		if (query.resourceId) q = q.where("resource_id", "=", query.resourceId);
+		if (query.status) q = q.where("status", "=", query.status);
+		if (query.since) q = q.where("timestamp", ">=", query.since);
+		if (query.until) q = q.where("timestamp", "<=", query.until);
+		if (query.cursor) {
+			const decoded = decodeCursor(query.cursor);
+			q = q.where((eb) => eb.or([eb("timestamp", "<", decoded.orderValue), eb.and([eb("timestamp", "=", decoded.orderValue), eb("id", "<", decoded.id)])]));
+		}
+		const rows = await q.execute();
+		const items = rows.slice(0, limit).map((row) => this.rowToAuditLog(row));
+		const result = { items };
+		if (rows.length > limit && items.length > 0) {
+			const last = items.at(-1);
+			result.nextCursor = encodeCursor(last.timestamp, last.id);
+		}
+		return result;
+	}
+	/**
+	* Get all logs for a specific resource
+	*/
+	async findByResource(resourceType, resourceId, options = {}) {
+		let query = this.db.selectFrom("audit_logs").selectAll().where("resource_type", "=", resourceType).where("resource_id", "=", resourceId).orderBy("timestamp", "desc");
+		if (options.limit) query = query.limit(options.limit);
+		return (await query.execute()).map((row) => this.rowToAuditLog(row));
+	}
+	/**
+	* Get all logs for a specific user
+	*/
+	async findByActor(actorId, options = {}) {
+		let query = this.db.selectFrom("audit_logs").selectAll().where("actor_id", "=", actorId).orderBy("timestamp", "desc");
+		if (options.since) query = query.where("timestamp", ">=", options.since);
+		if (options.limit) query = query.limit(options.limit);
+		return (await query.execute()).map((row) => this.rowToAuditLog(row));
+	}
+	/**
+	* Count logs matching a query
+	*/
+	async count(query = {}) {
+		let q = this.db.selectFrom("audit_logs").select((eb) => eb.fn.count("id").as("count"));
+		if (query.actorId) q = q.where("actor_id", "=", query.actorId);
+		if (query.action) q = q.where("action", "=", query.action);
+		if (query.resourceType) q = q.where("resource_type", "=", query.resourceType);
+		if (query.resourceId) q = q.where("resource_id", "=", query.resourceId);
+		if (query.status) q = q.where("status", "=", query.status);
+		if (query.since) q = q.where("timestamp", ">=", query.since);
+		if (query.until) q = q.where("timestamp", "<=", query.until);
+		const result = await q.executeTakeFirst();
+		return Number(result?.count || 0);
+	}
+	/**
+	* Delete old audit logs (for retention policy)
+	*/
+	async deleteOlderThan(date) {
+		const result = await this.db.deleteFrom("audit_logs").where("timestamp", "<", date).executeTakeFirst();
+		return Number(result.numDeletedRows ?? 0);
+	}
+	/**
+	* Convert database row to AuditLog object
+	*/
+	rowToAuditLog(row) {
+		return {
+			id: row.id,
+			timestamp: row.timestamp,
+			actorId: row.actor_id,
+			actorIp: row.actor_ip,
+			action: row.action,
+			resourceType: row.resource_type,
+			resourceId: row.resource_id,
+			details: row.details ? JSON.parse(row.details) : null,
+			status: row.status
+		};
+	}
+};
+
+//#endregion
 //#region src/fields/image.ts
 const imageSchema = z.object({
 	id: z.string(),
@@ -104,9 +227,55 @@ function portableText(options) {
 	};
 }
 
+//#endregion
+//#region src/content/converters/gallery.ts
+/**
+* Normalize an untrusted `images` value into well-formed gallery images.
+* Non-object entries and entries without an asset object are dropped.
+* Missing `_key`s are filled via `generateKey` when provided (PM → PT);
+* left empty otherwise (PT → PM keeps whatever the block carried).
+*/
+function sanitizeGalleryImages(value, generateKey) {
+	if (!Array.isArray(value)) return [];
+	const images = [];
+	for (const entry of value) {
+		if (!isRecord(entry)) continue;
+		const record = entry;
+		const asset = record.asset;
+		if (!isRecord(asset)) continue;
+		const assetRecord = asset;
+		const image = {
+			_type: "image",
+			_key: typeof record._key === "string" && record._key ? record._key : generateKey ? generateKey() : "",
+			asset: {
+				_type: "reference",
+				_ref: typeof assetRecord._ref === "string" ? assetRecord._ref : "",
+				...typeof assetRecord.url === "string" && assetRecord.url ? { url: assetRecord.url } : {},
+				...typeof assetRecord.provider === "string" && assetRecord.provider ? { provider: assetRecord.provider } : {}
+			}
+		};
+		if (typeof record.alt === "string" && record.alt) image.alt = record.alt;
+		if (typeof record.caption === "string" && record.caption) image.caption = record.caption;
+		if (typeof record.width === "number") image.width = record.width;
+		if (typeof record.height === "number") image.height = record.height;
+		if (typeof record.blurhash === "string" && record.blurhash) image.blurhash = record.blurhash;
+		if (typeof record.dominantColor === "string" && record.dominantColor) image.dominantColor = record.dominantColor;
+		images.push(image);
+	}
+	return images;
+}
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
 //#endregion
 //#region src/content/converters/prosemirror-to-portable-text.ts
 /**
+* ProseMirror to Portable Text Converter
+*
+* Converts TipTap's ProseMirror JSON format to Portable Text for storage.
+*/
+/**
 * Generate a unique key for Portable Text blocks
 */
 function generateKey() {
@@ -138,6 +307,7 @@ function convertNode(node) {
 		case "codeBlock": return convertCodeBlock$1(node);
 		case "htmlBlock": return convertHtmlBlock(node);
 		case "image": return convertImage$1(node);
+		case "gallery": return convertGallery(node);
 		case "horizontalRule": return {
 			_type: "break",
 			_key: generateKey(),
@@ -309,6 +479,18 @@ function convertImage$1(node) {
 	};
 }
 /**
+* Convert gallery node to Portable Text
+*/
+function convertGallery(node) {
+	const columns = node.attrs?.columns;
+	return {
+		_type: "gallery",
+		_key: generateKey(),
+		images: sanitizeGalleryImages(node.attrs?.images, generateKey),
+		...typeof columns === "number" ? { columns } : {}
+	};
+}
+/**
 * Convert inline content (text nodes with marks) to Portable Text spans
 */
 function convertInlineContent(nodes) {
@@ -378,6 +560,11 @@ function convertMark(mark, markDefs, markDefMap) {
 //#endregion
 //#region src/content/converters/portable-text-to-prosemirror.ts
 /**
+* Portable Text to ProseMirror Converter
+*
+* Converts Portable Text to TipTap's ProseMirror JSON format for editing.
+*/
+/**
 * Convert Portable Text to ProseMirror document
 */
 function portableTextToProsemirror(blocks) {
@@ -446,6 +633,13 @@ function isImageBlock(block) {
 	return block._type === "image" && "asset" in block && typeof block.asset === "object" && block.asset !== null;
 }
 /**
+* Type guard for gallery blocks. Requires an `images` array — a gallery
+* without one is malformed and falls through to the unknown-block path.
+*/
+function isGalleryBlock(block) {
+	return block._type === "gallery" && "images" in block && Array.isArray(block.images);
+}
+/**
 * Type guard for code blocks
 */
 function isCodeBlock(block) {
@@ -458,6 +652,13 @@ function convertBlock(block) {
 	if (isTextBlock(block)) return convertTextBlock(block);
 	if (isImageBlock(block)) return convertImage(block);
 	if (block._type === "image") return convertMalformedImage(block);
+	if (isGalleryBlock(block)) return {
+		type: "gallery",
+		attrs: {
+			images: sanitizeGalleryImages(block.images),
+			columns: typeof block.columns === "number" ? block.columns : void 0
+		}
+	};
 	if (isCodeBlock(block)) return convertCodeBlock(block);
 	if (block._type === "htmlBlock") return {
 		type: "htmlBlock",
@@ -702,6 +903,7 @@ function convertCodeBlock(block) {
 * annotation from `emdash/plugin`. See the `emdash` changeset for the
 * authoring shape.
 */
+const MCP_TOOL_NAME_PATTERN = /^[a-zA-Z0-9_-]+$/;
 /**
 * Define a native EmDash plugin.
 *
@@ -753,10 +955,17 @@ function defineNativePlugin(definition) {
 	const SIMPLE_ID = /^[a-z0-9-]+$/;
 	const SCOPED_ID = /^@[a-z0-9-]+\/[a-z0-9-]+$/;
 	const SEMVER_PATTERN = /^\d+\.\d+\.\d+/;
-	const { id, version, capabilities = [], allowedHosts = [], hooks = {}, routes = {}, admin = {} } = definition;
+	const { id, version, capabilities = [], allowedHosts = [], hooks = {}, routes = {}, mcp = { tools: {} }, admin = {} } = definition;
 	const storage = definition.storage ?? {};
 	if (!SIMPLE_ID.test(id) && !SCOPED_ID.test(id)) throw new Error(`Invalid plugin id "${id}". Must be lowercase alphanumeric with dashes (e.g., "my-plugin" or "@scope/my-plugin").`);
 	if (!SEMVER_PATTERN.test(version)) throw new Error(`Invalid plugin version "${version}". Must be semver format (e.g., "1.0.0").`);
+	for (const [name, tool] of Object.entries(mcp.tools)) {
+		if (!MCP_TOOL_NAME_PATTERN.test(name)) throw new Error(`Invalid MCP tool name "${name}" in plugin "${id}".`);
+		const route = routes[tool.route];
+		if (!route) throw new Error(`MCP tool "${name}" references unknown route "${tool.route}".`);
+		if (route.public) throw new Error(`MCP tool "${name}" cannot reference a public route.`);
+		if (!route.permission) throw new Error(`MCP route "${tool.route}" must declare a permission.`);
+	}
 	const validCapabilities = new Set([
 		"network:request",
 		"network:request:unrestricted",
@@ -795,6 +1004,7 @@ function defineNativePlugin(definition) {
 		storage,
 		hooks: resolveHooks(hooks, id),
 		routes,
+		mcp,
 		admin
 	};
 }
@@ -1976,6 +2186,17 @@ function guardConsumedRequestBody(request) {
 	} });
 }
 /**
+* Build RouteMeta from a route's `public`/`cacheControl` flags. Single source
+* of truth for the "cacheControl is only ever exposed on public routes"
+* invariant — used for trusted routes and manifest-declared sandboxed routes.
+*/
+function buildRouteMeta(route) {
+	const meta = { public: route.public === true };
+	if (route.permission !== void 0) meta.permission = route.permission;
+	if (meta.public && typeof route.cacheControl === "string" && route.cacheControl.length > 0) meta.cacheControl = route.cacheControl;
+	return meta;
+}
+/**
 * Route handler for a plugin
 */
 var PluginRouteHandler = class {
@@ -2066,7 +2287,7 @@ var PluginRouteHandler = class {
 	getRouteMeta(name) {
 		const route = this.plugin.routes[name];
 		if (!route) return null;
-		return { public: route.public === true };
+		return buildRouteMeta(route);
 	}
 };
 /**
@@ -3084,5 +3305,5 @@ async function resolveTaxonomyUrl(referenceGroup, db, locale) {
 }
 
 //#endregion
-export { file as C, reference as S, resolveExclusiveHooks as _, SandboxUnavailableError as a, prosemirrorToPortableText as b, createNoopSandboxRunner as c, createPluginManager as d, PluginRouteError as f, createHookPipeline as g, HookPipeline as h, getComments as i, NodeCronScheduler as l, EmailPipeline as m, getMenus as n, NoopSandboxRunner as o, PluginRouteRegistry as p, getCommentCount as r, SandboxNotAvailableError as s, getMenu as t, PluginManager as u, definePlugin as v, image as w, portableText as x, portableTextToProsemirror as y };
-//# sourceMappingURL=menus-BtvH7Z7t.mjs.map
+export { reference as C, AuditRepository as E, portableText as S, image as T, createHookPipeline as _, SandboxUnavailableError as a, portableTextToProsemirror as b, createNoopSandboxRunner as c, createPluginManager as d, PluginRouteError as f, HookPipeline as g, EmailPipeline as h, getComments as i, NodeCronScheduler as l, buildRouteMeta as m, getMenus as n, NoopSandboxRunner as o, PluginRouteRegistry as p, getCommentCount as r, SandboxNotAvailableError as s, getMenu as t, PluginManager as u, resolveExclusiveHooks as v, file as w, prosemirrorToPortableText as x, definePlugin as y };
+//# sourceMappingURL=menus-CPf_SW7u.mjs.map