emdash 0.31.0 → 0.32.0

package/dist/astro/routes/api/admin/plugins/updates.mjs

@@ -1,48 +1,50 @@
-import "../../../../../dialect-helpers-BtOwo2us.mjs";
+import "../../../../../dialect-helpers-DFwyWjTM.mjs";
+import "../../../../../config-DyF3OKg_.mjs";
 import "../../../../../after-B1IIdH3Y.mjs";
 import "../../../../../object-cache-Bok5j2ae.mjs";
-import "../../../../../content-BC43pICM.mjs";
+import "../../../../../content-CpfKV9QE.mjs";
 import "../../../../../base64-B-PsqheR.mjs";
-import "../../../../../types-CrRUFdej.mjs";
-import "../../../../../media-its1WLYv.mjs";
-import "../../../../../user-aTXqmXBz.mjs";
-import "../../../../../taxonomy-0mCI25HN.mjs";
-import "../../../../../comment-B9cUud8H.mjs";
+import "../../../../../types-XrQQ-Aex.mjs";
+import "../../../../../media-tQDZEdu7.mjs";
+import "../../../../../user-BAumEmpA.mjs";
+import "../../../../../taxonomy-DvwWAPvA.mjs";
+import "../../../../../comment-DnTxxVHv.mjs";
 import "../../../../../options-BlmBHTvX.mjs";
-import "../../../../../menus-BMGzWyWH.mjs";
-import "../../../../../redirect-BoUac4NT.mjs";
+import "../../../../../menus-BxPLFfIc.mjs";
+import "../../../../../redirect-BJ6d1yHh.mjs";
 import "../../../../../request-cache-BSUptuJR.mjs";
 import "../../../../../byline-registry-BCuOp4UF.mjs";
-import "../../../../../field-defs-cache-KfNJ_qLQ.mjs";
-import "../../../../../byline-BTOxUlFF.mjs";
-import "../../../../../seo-kJzVAmmu.mjs";
-import "../../../../../fts-manager-hyCU9OOp.mjs";
-import "../../../../../resolve-DFr4kq72.mjs";
-import "../../../../../loader-D4rigvjR.mjs";
-import "../../../../../taxonomies-HI9fnTdp.mjs";
-import { a as handleRegistryUpdateCheck, m as handleMarketplaceUpdateCheck } from "../../../../../api-EibxGP-V.mjs";
-import "../../../../../dashboard-CBm4zhc3.mjs";
-import "../../../../../content-refresh-CPMSauD3.mjs";
-import "../../../../../media-usage-DPQ3K4xB.mjs";
-import "../../../../../registry-y21kjhfG.mjs";
-import "../../../../../query-DdFGHzQF.mjs";
-import "../../../../../zod-generator-CwkHWz4f.mjs";
-import "../../../../../schema-BH8P8vaC.mjs";
+import "../../../../../field-defs-cache-QMVnzTH6.mjs";
+import "../../../../../byline-C5TAqs8N.mjs";
+import "../../../../../seo-BAPKiED8.mjs";
+import "../../../../../fts-manager-vncsZIJm.mjs";
+import "../../../../../resolve-BUvFE0Lr.mjs";
+import "../../../../../loader-C1XOLV5b.mjs";
+import "../../../../../taxonomies-B61CRSha.mjs";
+import { a as handleRegistryUpdateCheck, m as handleMarketplaceUpdateCheck } from "../../../../../api-DgPbMlng.mjs";
+import "../../../../../dashboard-DoBwPnON.mjs";
+import "../../../../../hash-Cb7U1b5M.mjs";
+import "../../../../../content-refresh-DgqUBeTv.mjs";
+import "../../../../../media-usage-DPJcNaAq.mjs";
+import "../../../../../registry-BP1JK2xh.mjs";
+import "../../../../../query-1xOcEy18.mjs";
+import "../../../../../zod-generator-DMzfga3g.mjs";
+import "../../../../../schema-eqZhkR0S.mjs";
 import "../../../../../seo-C3GDfT0V.mjs";
-import "../../../../../sections-CzVBAKjw.mjs";
-import "../../../../../settings-C2PaBS49.mjs";
-import "../../../../../settings-Dtc0DU31.mjs";
-import "../../../../../taxonomies-rMeBzOjX.mjs";
+import "../../../../../sections-DSuEfirn.mjs";
+import "../../../../../settings-DgKouY2S.mjs";
+import "../../../../../settings-CREKyj8I.mjs";
+import "../../../../../taxonomies-Dbdki3Un.mjs";
 import "../../../../../manifest-schema-bCq54i7F.mjs";
 import "../../../../../types-CK0LxPUQ.mjs";
 import "../../../../../ssrf-CviKqWmq.mjs";
-import { n as apiSuccess, t as apiError } from "../../../../../error-DJ98TRbQ.mjs";
-import "../../../../../parse-53zyxlpv.mjs";
-import "../../../../../media-BJ6SRY3g.mjs";
-import "../../../../../redirects-D457qwt0.mjs";
-import "../../../../../relations-CZMpBqEd.mjs";
+import { n as apiSuccess, t as apiError } from "../../../../../error-DmmN74gW.mjs";
+import "../../../../../parse-BL49yb9D.mjs";
+import "../../../../../media-DWIzoVFL.mjs";
+import "../../../../../redirects-BOn2DIUs.mjs";
+import "../../../../../relations-C4duJnwI.mjs";
 import "../../../../../status-COfycGIU.mjs";
-import { r as requirePerm } from "../../../../../authorize-6WPZa1xZ.mjs";
+import { r as requirePerm } from "../../../../../authorize-R5iYYrpa.mjs";
 
 //#region src/astro/routes/api/admin/plugins/updates.ts
 const prerender = false;

package/dist/astro/routes/api/admin/plugins/updates.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"updates.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/admin/plugins/updates.ts"],"sourcesContent":["/**\n * Plugin update check endpoint\n *\n * GET /_emdash/api/admin/plugins/updates - Check for available updates\n * across every installed plugin source (marketplace + experimental\n * registry). Items are returned in a single flat list; admins correlate\n * items to plugins by `pluginId` and read `source` from the existing\n * `/_emdash/api/admin/plugins` list (the pluginId prefix is not a\n * reliable discriminator on its own).\n *\n * A failure in one source does NOT blank the other — a registry-side\n * aggregator outage still returns marketplace updates and vice versa.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess } from \"#api/error.js\";\nimport { handleMarketplaceUpdateCheck, handleRegistryUpdateCheck } from \"#api/index.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"plugins:read\");\n\tif (denied) return denied;\n\n\t// Run both checks in parallel. Catch each independently so one source's\n\t// failure doesn't blank the other. Both throws and structured `success:\n\t// false` returns are logged with the source name so a misconfigured\n\t// registry doesn't disappear silently from telemetry.\n\tconst [marketplace, registry] = await Promise.all([\n\t\thandleMarketplaceUpdateCheck(emdash.db, emdash.config.marketplace).catch((err) => {\n\t\t\tconsole.warn(\"[plugins/updates] marketplace check threw:\", err);\n\t\t\treturn null;\n\t\t}),\n\t\thandleRegistryUpdateCheck(emdash.db, emdash.config.experimental?.registry).catch((err) => {\n\t\t\tconsole.warn(\"[plugins/updates] registry check threw:\", err);\n\t\t\treturn null;\n\t\t}),\n\t]);\n\tif (marketplace && !marketplace.success) {\n\t\tconsole.warn(\n\t\t\t`[plugins/updates] marketplace check failed: ${marketplace.error.code} ${marketplace.error.message}`,\n\t\t);\n\t}\n\tif (registry && !registry.success) {\n\t\tconsole.warn(\n\t\t\t`[plugins/updates] registry check failed: ${registry.error.code} ${registry.error.message}`,\n\t\t);\n\t}\n\n\tconst items: unknown[] = [];\n\tif (marketplace?.success) items.push(...marketplace.data.items);\n\tif (registry?.success) items.push(...registry.data.items);\n\n\treturn apiSuccess({ items });\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,aAAa;CAClD,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;CAMnB,MAAM,CAAC,aAAa,YAAY,MAAM,QAAQ,IAAI,CACjD,6BAA6B,OAAO,IAAI,OAAO,OAAO,YAAY,CAAC,OAAO,QAAQ;AACjF,UAAQ,KAAK,8CAA8C,IAAI;AAC/D,SAAO;GACN,EACF,0BAA0B,OAAO,IAAI,OAAO,OAAO,cAAc,SAAS,CAAC,OAAO,QAAQ;AACzF,UAAQ,KAAK,2CAA2C,IAAI;AAC5D,SAAO;GACN,CACF,CAAC;AACF,KAAI,eAAe,CAAC,YAAY,QAC/B,SAAQ,KACP,+CAA+C,YAAY,MAAM,KAAK,GAAG,YAAY,MAAM,UAC3F;AAEF,KAAI,YAAY,CAAC,SAAS,QACzB,SAAQ,KACP,4CAA4C,SAAS,MAAM,KAAK,GAAG,SAAS,MAAM,UAClF;CAGF,MAAM,QAAmB,EAAE;AAC3B,KAAI,aAAa,QAAS,OAAM,KAAK,GAAG,YAAY,KAAK,MAAM;AAC/D,KAAI,UAAU,QAAS,OAAM,KAAK,GAAG,SAAS,KAAK,MAAM;AAEzD,QAAO,WAAW,EAAE,OAAO,CAAC"}
+{"version":3,"file":"updates.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/admin/plugins/updates.ts"],"sourcesContent":["/**\n * Plugin update check endpoint\n *\n * GET /_emdash/api/admin/plugins/updates - Check for available updates\n * across every installed plugin source (marketplace + experimental\n * registry). Items are returned in a single flat list; admins correlate\n * items to plugins by `pluginId` and read `source` from the existing\n * `/_emdash/api/admin/plugins` list (the pluginId prefix is not a\n * reliable discriminator on its own).\n *\n * A failure in one source does NOT blank the other — a registry-side\n * aggregator outage still returns marketplace updates and vice versa.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess } from \"#api/error.js\";\nimport { handleMarketplaceUpdateCheck, handleRegistryUpdateCheck } from \"#api/index.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"plugins:read\");\n\tif (denied) return denied;\n\n\t// Run both checks in parallel. Catch each independently so one source's\n\t// failure doesn't blank the other. Both throws and structured `success:\n\t// false` returns are logged with the source name so a misconfigured\n\t// registry doesn't disappear silently from telemetry.\n\tconst [marketplace, registry] = await Promise.all([\n\t\thandleMarketplaceUpdateCheck(emdash.db, emdash.config.marketplace).catch((err) => {\n\t\t\tconsole.warn(\"[plugins/updates] marketplace check threw:\", err);\n\t\t\treturn null;\n\t\t}),\n\t\thandleRegistryUpdateCheck(emdash.db, emdash.config.experimental?.registry).catch((err) => {\n\t\t\tconsole.warn(\"[plugins/updates] registry check threw:\", err);\n\t\t\treturn null;\n\t\t}),\n\t]);\n\tif (marketplace && !marketplace.success) {\n\t\tconsole.warn(\n\t\t\t`[plugins/updates] marketplace check failed: ${marketplace.error.code} ${marketplace.error.message}`,\n\t\t);\n\t}\n\tif (registry && !registry.success) {\n\t\tconsole.warn(\n\t\t\t`[plugins/updates] registry check failed: ${registry.error.code} ${registry.error.message}`,\n\t\t);\n\t}\n\n\tconst items: unknown[] = [];\n\tif (marketplace?.success) items.push(...marketplace.data.items);\n\tif (registry?.success) items.push(...registry.data.items);\n\n\treturn apiSuccess({ items });\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,aAAa;CAClD,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;CAMnB,MAAM,CAAC,aAAa,YAAY,MAAM,QAAQ,IAAI,CACjD,6BAA6B,OAAO,IAAI,OAAO,OAAO,YAAY,CAAC,OAAO,QAAQ;AACjF,UAAQ,KAAK,8CAA8C,IAAI;AAC/D,SAAO;GACN,EACF,0BAA0B,OAAO,IAAI,OAAO,OAAO,cAAc,SAAS,CAAC,OAAO,QAAQ;AACzF,UAAQ,KAAK,2CAA2C,IAAI;AAC5D,SAAO;GACN,CACF,CAAC;AACF,KAAI,eAAe,CAAC,YAAY,QAC/B,SAAQ,KACP,+CAA+C,YAAY,MAAM,KAAK,GAAG,YAAY,MAAM,UAC3F;AAEF,KAAI,YAAY,CAAC,SAAS,QACzB,SAAQ,KACP,4CAA4C,SAAS,MAAM,KAAK,GAAG,SAAS,MAAM,UAClF;CAGF,MAAM,QAAmB,EAAE;AAC3B,KAAI,aAAa,QAAS,OAAM,KAAK,GAAG,YAAY,KAAK,MAAM;AAC/D,KAAI,UAAU,QAAS,OAAM,KAAK,GAAG,SAAS,KAAK,MAAM;AAEzD,QAAO,WAAW,EAAE,OAAO,CAAC"}

package/dist/astro/routes/api/admin/themes/marketplace/_id_/index.mjs

@@ -1,48 +1,50 @@
-import "../../../../../../../dialect-helpers-BtOwo2us.mjs";
+import "../../../../../../../dialect-helpers-DFwyWjTM.mjs";
+import "../../../../../../../config-DyF3OKg_.mjs";
 import "../../../../../../../after-B1IIdH3Y.mjs";
 import "../../../../../../../object-cache-Bok5j2ae.mjs";
-import "../../../../../../../content-BC43pICM.mjs";
+import "../../../../../../../content-CpfKV9QE.mjs";
 import "../../../../../../../base64-B-PsqheR.mjs";
-import "../../../../../../../types-CrRUFdej.mjs";
-import "../../../../../../../media-its1WLYv.mjs";
-import "../../../../../../../user-aTXqmXBz.mjs";
-import "../../../../../../../taxonomy-0mCI25HN.mjs";
-import "../../../../../../../comment-B9cUud8H.mjs";
+import "../../../../../../../types-XrQQ-Aex.mjs";
+import "../../../../../../../media-tQDZEdu7.mjs";
+import "../../../../../../../user-BAumEmpA.mjs";
+import "../../../../../../../taxonomy-DvwWAPvA.mjs";
+import "../../../../../../../comment-DnTxxVHv.mjs";
 import "../../../../../../../options-BlmBHTvX.mjs";
-import "../../../../../../../menus-BMGzWyWH.mjs";
-import "../../../../../../../redirect-BoUac4NT.mjs";
+import "../../../../../../../menus-BxPLFfIc.mjs";
+import "../../../../../../../redirect-BJ6d1yHh.mjs";
 import "../../../../../../../request-cache-BSUptuJR.mjs";
 import "../../../../../../../byline-registry-BCuOp4UF.mjs";
-import "../../../../../../../field-defs-cache-KfNJ_qLQ.mjs";
-import "../../../../../../../byline-BTOxUlFF.mjs";
-import "../../../../../../../seo-kJzVAmmu.mjs";
-import "../../../../../../../fts-manager-hyCU9OOp.mjs";
-import "../../../../../../../resolve-DFr4kq72.mjs";
-import "../../../../../../../loader-D4rigvjR.mjs";
-import "../../../../../../../taxonomies-HI9fnTdp.mjs";
-import { h as handleThemeGetDetail } from "../../../../../../../api-EibxGP-V.mjs";
-import "../../../../../../../dashboard-CBm4zhc3.mjs";
-import "../../../../../../../content-refresh-CPMSauD3.mjs";
-import "../../../../../../../media-usage-DPQ3K4xB.mjs";
-import "../../../../../../../registry-y21kjhfG.mjs";
-import "../../../../../../../query-DdFGHzQF.mjs";
-import "../../../../../../../zod-generator-CwkHWz4f.mjs";
-import "../../../../../../../schema-BH8P8vaC.mjs";
+import "../../../../../../../field-defs-cache-QMVnzTH6.mjs";
+import "../../../../../../../byline-C5TAqs8N.mjs";
+import "../../../../../../../seo-BAPKiED8.mjs";
+import "../../../../../../../fts-manager-vncsZIJm.mjs";
+import "../../../../../../../resolve-BUvFE0Lr.mjs";
+import "../../../../../../../loader-C1XOLV5b.mjs";
+import "../../../../../../../taxonomies-B61CRSha.mjs";
+import { h as handleThemeGetDetail } from "../../../../../../../api-DgPbMlng.mjs";
+import "../../../../../../../dashboard-DoBwPnON.mjs";
+import "../../../../../../../hash-Cb7U1b5M.mjs";
+import "../../../../../../../content-refresh-DgqUBeTv.mjs";
+import "../../../../../../../media-usage-DPJcNaAq.mjs";
+import "../../../../../../../registry-BP1JK2xh.mjs";
+import "../../../../../../../query-1xOcEy18.mjs";
+import "../../../../../../../zod-generator-DMzfga3g.mjs";
+import "../../../../../../../schema-eqZhkR0S.mjs";
 import "../../../../../../../seo-C3GDfT0V.mjs";
-import "../../../../../../../sections-CzVBAKjw.mjs";
-import "../../../../../../../settings-C2PaBS49.mjs";
-import "../../../../../../../settings-Dtc0DU31.mjs";
-import "../../../../../../../taxonomies-rMeBzOjX.mjs";
+import "../../../../../../../sections-DSuEfirn.mjs";
+import "../../../../../../../settings-DgKouY2S.mjs";
+import "../../../../../../../settings-CREKyj8I.mjs";
+import "../../../../../../../taxonomies-Dbdki3Un.mjs";
 import "../../../../../../../manifest-schema-bCq54i7F.mjs";
 import "../../../../../../../types-CK0LxPUQ.mjs";
 import "../../../../../../../ssrf-CviKqWmq.mjs";
-import { a as unwrapResult, t as apiError } from "../../../../../../../error-DJ98TRbQ.mjs";
-import "../../../../../../../parse-53zyxlpv.mjs";
-import "../../../../../../../media-BJ6SRY3g.mjs";
-import "../../../../../../../redirects-D457qwt0.mjs";
-import "../../../../../../../relations-CZMpBqEd.mjs";
+import { a as unwrapResult, t as apiError } from "../../../../../../../error-DmmN74gW.mjs";
+import "../../../../../../../parse-BL49yb9D.mjs";
+import "../../../../../../../media-DWIzoVFL.mjs";
+import "../../../../../../../redirects-BOn2DIUs.mjs";
+import "../../../../../../../relations-C4duJnwI.mjs";
 import "../../../../../../../status-COfycGIU.mjs";
-import { r as requirePerm } from "../../../../../../../authorize-6WPZa1xZ.mjs";
+import { r as requirePerm } from "../../../../../../../authorize-R5iYYrpa.mjs";
 
 //#region src/astro/routes/api/admin/themes/marketplace/[id]/index.ts
 const prerender = false;

package/dist/astro/routes/api/admin/themes/marketplace/_id_/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../../../src/astro/routes/api/admin/themes/marketplace/[id]/index.ts"],"sourcesContent":["/**\n * Theme marketplace detail proxy endpoint\n *\n * GET /_emdash/api/admin/themes/marketplace/:id - Get theme details\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, unwrapResult } from \"#api/error.js\";\nimport { handleThemeGetDetail } from \"#api/index.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"plugins:read\");\n\tif (denied) return denied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Theme ID required\", 400);\n\t}\n\n\tconst result = await handleThemeGetDetail(emdash.config.marketplace, id);\n\n\treturn unwrapResult(result);\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;AAEf,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AAK7D,QAAO,aAFQ,MAAM,qBAAqB,OAAO,OAAO,aAAa,GAAG,CAE7C"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../../../src/astro/routes/api/admin/themes/marketplace/[id]/index.ts"],"sourcesContent":["/**\n * Theme marketplace detail proxy endpoint\n *\n * GET /_emdash/api/admin/themes/marketplace/:id - Get theme details\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, unwrapResult } from \"#api/error.js\";\nimport { handleThemeGetDetail } from \"#api/index.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"plugins:read\");\n\tif (denied) return denied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Theme ID required\", 400);\n\t}\n\n\tconst result = await handleThemeGetDetail(emdash.config.marketplace, id);\n\n\treturn unwrapResult(result);\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;AAEf,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AAK7D,QAAO,aAFQ,MAAM,qBAAqB,OAAO,OAAO,aAAa,GAAG,CAE7C"}

package/dist/astro/routes/api/admin/themes/marketplace/_id_/thumbnail.mjs

@@ -1,7 +1,7 @@
 import "../../../../../../../base64-B-PsqheR.mjs";
-import "../../../../../../../types-CrRUFdej.mjs";
-import { t as apiError } from "../../../../../../../error-DJ98TRbQ.mjs";
-import { r as requirePerm } from "../../../../../../../authorize-6WPZa1xZ.mjs";
+import "../../../../../../../types-XrQQ-Aex.mjs";
+import { t as apiError } from "../../../../../../../error-DmmN74gW.mjs";
+import { r as requirePerm } from "../../../../../../../authorize-R5iYYrpa.mjs";
 
 //#region src/astro/routes/api/admin/themes/marketplace/[id]/thumbnail.ts
 const prerender = false;

package/dist/astro/routes/api/admin/themes/marketplace/index.mjs

@@ -1,48 +1,50 @@
-import "../../../../../../dialect-helpers-BtOwo2us.mjs";
+import "../../../../../../dialect-helpers-DFwyWjTM.mjs";
+import "../../../../../../config-DyF3OKg_.mjs";
 import "../../../../../../after-B1IIdH3Y.mjs";
 import "../../../../../../object-cache-Bok5j2ae.mjs";
-import "../../../../../../content-BC43pICM.mjs";
+import "../../../../../../content-CpfKV9QE.mjs";
 import "../../../../../../base64-B-PsqheR.mjs";
-import "../../../../../../types-CrRUFdej.mjs";
-import "../../../../../../media-its1WLYv.mjs";
-import "../../../../../../user-aTXqmXBz.mjs";
-import "../../../../../../taxonomy-0mCI25HN.mjs";
-import "../../../../../../comment-B9cUud8H.mjs";
+import "../../../../../../types-XrQQ-Aex.mjs";
+import "../../../../../../media-tQDZEdu7.mjs";
+import "../../../../../../user-BAumEmpA.mjs";
+import "../../../../../../taxonomy-DvwWAPvA.mjs";
+import "../../../../../../comment-DnTxxVHv.mjs";
 import "../../../../../../options-BlmBHTvX.mjs";
-import "../../../../../../menus-BMGzWyWH.mjs";
-import "../../../../../../redirect-BoUac4NT.mjs";
+import "../../../../../../menus-BxPLFfIc.mjs";
+import "../../../../../../redirect-BJ6d1yHh.mjs";
 import "../../../../../../request-cache-BSUptuJR.mjs";
 import "../../../../../../byline-registry-BCuOp4UF.mjs";
-import "../../../../../../field-defs-cache-KfNJ_qLQ.mjs";
-import "../../../../../../byline-BTOxUlFF.mjs";
-import "../../../../../../seo-kJzVAmmu.mjs";
-import "../../../../../../fts-manager-hyCU9OOp.mjs";
-import "../../../../../../resolve-DFr4kq72.mjs";
-import "../../../../../../loader-D4rigvjR.mjs";
-import "../../../../../../taxonomies-HI9fnTdp.mjs";
-import { g as handleThemeSearch } from "../../../../../../api-EibxGP-V.mjs";
-import "../../../../../../dashboard-CBm4zhc3.mjs";
-import "../../../../../../content-refresh-CPMSauD3.mjs";
-import "../../../../../../media-usage-DPQ3K4xB.mjs";
-import "../../../../../../registry-y21kjhfG.mjs";
-import "../../../../../../query-DdFGHzQF.mjs";
-import "../../../../../../zod-generator-CwkHWz4f.mjs";
-import "../../../../../../schema-BH8P8vaC.mjs";
+import "../../../../../../field-defs-cache-QMVnzTH6.mjs";
+import "../../../../../../byline-C5TAqs8N.mjs";
+import "../../../../../../seo-BAPKiED8.mjs";
+import "../../../../../../fts-manager-vncsZIJm.mjs";
+import "../../../../../../resolve-BUvFE0Lr.mjs";
+import "../../../../../../loader-C1XOLV5b.mjs";
+import "../../../../../../taxonomies-B61CRSha.mjs";
+import { g as handleThemeSearch } from "../../../../../../api-DgPbMlng.mjs";
+import "../../../../../../dashboard-DoBwPnON.mjs";
+import "../../../../../../hash-Cb7U1b5M.mjs";
+import "../../../../../../content-refresh-DgqUBeTv.mjs";
+import "../../../../../../media-usage-DPJcNaAq.mjs";
+import "../../../../../../registry-BP1JK2xh.mjs";
+import "../../../../../../query-1xOcEy18.mjs";
+import "../../../../../../zod-generator-DMzfga3g.mjs";
+import "../../../../../../schema-eqZhkR0S.mjs";
 import "../../../../../../seo-C3GDfT0V.mjs";
-import "../../../../../../sections-CzVBAKjw.mjs";
-import "../../../../../../settings-C2PaBS49.mjs";
-import "../../../../../../settings-Dtc0DU31.mjs";
-import "../../../../../../taxonomies-rMeBzOjX.mjs";
+import "../../../../../../sections-DSuEfirn.mjs";
+import "../../../../../../settings-DgKouY2S.mjs";
+import "../../../../../../settings-CREKyj8I.mjs";
+import "../../../../../../taxonomies-Dbdki3Un.mjs";
 import "../../../../../../manifest-schema-bCq54i7F.mjs";
 import "../../../../../../types-CK0LxPUQ.mjs";
 import "../../../../../../ssrf-CviKqWmq.mjs";
-import { a as unwrapResult, t as apiError } from "../../../../../../error-DJ98TRbQ.mjs";
-import "../../../../../../parse-53zyxlpv.mjs";
-import "../../../../../../media-BJ6SRY3g.mjs";
-import "../../../../../../redirects-D457qwt0.mjs";
-import "../../../../../../relations-CZMpBqEd.mjs";
+import { a as unwrapResult, t as apiError } from "../../../../../../error-DmmN74gW.mjs";
+import "../../../../../../parse-BL49yb9D.mjs";
+import "../../../../../../media-DWIzoVFL.mjs";
+import "../../../../../../redirects-BOn2DIUs.mjs";
+import "../../../../../../relations-C4duJnwI.mjs";
 import "../../../../../../status-COfycGIU.mjs";
-import { r as requirePerm } from "../../../../../../authorize-6WPZa1xZ.mjs";
+import { r as requirePerm } from "../../../../../../authorize-R5iYYrpa.mjs";
 
 //#region src/astro/routes/api/admin/themes/marketplace/index.ts
 const prerender = false;

package/dist/astro/routes/api/admin/themes/marketplace/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/admin/themes/marketplace/index.ts"],"sourcesContent":["/**\n * Theme marketplace search proxy endpoint\n *\n * GET /_emdash/api/admin/themes/marketplace - Search marketplace themes\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, unwrapResult } from \"#api/error.js\";\nimport { handleThemeSearch } from \"#api/index.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ url, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"plugins:read\");\n\tif (denied) return denied;\n\n\tconst query = url.searchParams.get(\"q\") ?? undefined;\n\tconst keyword = url.searchParams.get(\"keyword\") ?? undefined;\n\tconst sortParam = url.searchParams.get(\"sort\");\n\tconst validSorts = new Set([\"name\", \"created\", \"updated\"]);\n\tlet sort: \"name\" | \"created\" | \"updated\" | undefined;\n\tif (sortParam && validSorts.has(sortParam)) {\n\t\tsort = sortParam as \"name\" | \"created\" | \"updated\"; // eslint-disable-line typescript/no-unsafe-type-assertion -- validated by Set.has()\n\t}\n\tconst cursor = url.searchParams.get(\"cursor\") ?? undefined;\n\tconst limitParam = url.searchParams.get(\"limit\");\n\tconst limit = limitParam ? Math.min(Math.max(1, parseInt(limitParam, 10) || 50), 100) : undefined;\n\n\tconst result = await handleThemeSearch(emdash.config.marketplace, query, {\n\t\tkeyword,\n\t\tsort,\n\t\tcursor,\n\t\tlimit,\n\t});\n\n\treturn unwrapResult(result);\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CACvD,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,IAAI,aAAa,IAAI,IAAI,IAAI;CAC3C,MAAM,UAAU,IAAI,aAAa,IAAI,UAAU,IAAI;CACnD,MAAM,YAAY,IAAI,aAAa,IAAI,OAAO;CAC9C,MAAM,aAAa,IAAI,IAAI;EAAC;EAAQ;EAAW;EAAU,CAAC;CAC1D,IAAI;AACJ,KAAI,aAAa,WAAW,IAAI,UAAU,CACzC,QAAO;CAER,MAAM,SAAS,IAAI,aAAa,IAAI,SAAS,IAAI;CACjD,MAAM,aAAa,IAAI,aAAa,IAAI,QAAQ;CAChD,MAAM,QAAQ,aAAa,KAAK,IAAI,KAAK,IAAI,GAAG,SAAS,YAAY,GAAG,IAAI,GAAG,EAAE,IAAI,GAAG;AASxF,QAAO,aAPQ,MAAM,kBAAkB,OAAO,OAAO,aAAa,OAAO;EACxE;EACA;EACA;EACA;EACA,CAAC,CAEyB"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/admin/themes/marketplace/index.ts"],"sourcesContent":["/**\n * Theme marketplace search proxy endpoint\n *\n * GET /_emdash/api/admin/themes/marketplace - Search marketplace themes\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, unwrapResult } from \"#api/error.js\";\nimport { handleThemeSearch } from \"#api/index.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ url, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"plugins:read\");\n\tif (denied) return denied;\n\n\tconst query = url.searchParams.get(\"q\") ?? undefined;\n\tconst keyword = url.searchParams.get(\"keyword\") ?? undefined;\n\tconst sortParam = url.searchParams.get(\"sort\");\n\tconst validSorts = new Set([\"name\", \"created\", \"updated\"]);\n\tlet sort: \"name\" | \"created\" | \"updated\" | undefined;\n\tif (sortParam && validSorts.has(sortParam)) {\n\t\tsort = sortParam as \"name\" | \"created\" | \"updated\"; // eslint-disable-line typescript/no-unsafe-type-assertion -- validated by Set.has()\n\t}\n\tconst cursor = url.searchParams.get(\"cursor\") ?? undefined;\n\tconst limitParam = url.searchParams.get(\"limit\");\n\tconst limit = limitParam ? Math.min(Math.max(1, parseInt(limitParam, 10) || 50), 100) : undefined;\n\n\tconst result = await handleThemeSearch(emdash.config.marketplace, query, {\n\t\tkeyword,\n\t\tsort,\n\t\tcursor,\n\t\tlimit,\n\t});\n\n\treturn unwrapResult(result);\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CACvD,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;CAEnB,MAAM,QAAQ,IAAI,aAAa,IAAI,IAAI,IAAI;CAC3C,MAAM,UAAU,IAAI,aAAa,IAAI,UAAU,IAAI;CACnD,MAAM,YAAY,IAAI,aAAa,IAAI,OAAO;CAC9C,MAAM,aAAa,IAAI,IAAI;EAAC;EAAQ;EAAW;EAAU,CAAC;CAC1D,IAAI;AACJ,KAAI,aAAa,WAAW,IAAI,UAAU,CACzC,QAAO;CAER,MAAM,SAAS,IAAI,aAAa,IAAI,SAAS,IAAI;CACjD,MAAM,aAAa,IAAI,aAAa,IAAI,QAAQ;CAChD,MAAM,QAAQ,aAAa,KAAK,IAAI,KAAK,IAAI,GAAG,SAAS,YAAY,GAAG,IAAI,GAAG,EAAE,IAAI,GAAG;AASxF,QAAO,aAPQ,MAAM,kBAAkB,OAAO,OAAO,aAAa,OAAO;EACxE;EACA;EACA;EACA;EACA,CAAC,CAEyB"}

package/dist/astro/routes/api/admin/users/_id_/disable.mjs

@@ -1,7 +1,7 @@
 import "../../../../../../base64-B-PsqheR.mjs";
-import "../../../../../../types-CrRUFdej.mjs";
+import "../../../../../../types-XrQQ-Aex.mjs";
 import { t as withTransaction } from "../../../../../../transaction-D0FOsb3X.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-DJ98TRbQ.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-DmmN74gW.mjs";
 import { Role } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 

package/dist/astro/routes/api/admin/users/_id_/enable.mjs

@@ -1,6 +1,6 @@
 import "../../../../../../base64-B-PsqheR.mjs";
-import "../../../../../../types-CrRUFdej.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-DJ98TRbQ.mjs";
+import "../../../../../../types-XrQQ-Aex.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-DmmN74gW.mjs";
 import { Role } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 

package/dist/astro/routes/api/admin/users/_id_/index.mjs

@@ -1,11 +1,11 @@
 import "../../../../../../base64-B-PsqheR.mjs";
-import "../../../../../../types-CrRUFdej.mjs";
+import "../../../../../../types-XrQQ-Aex.mjs";
 import { t as withTransaction } from "../../../../../../transaction-D0FOsb3X.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-DJ98TRbQ.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../../parse-53zyxlpv.mjs";
-import "../../../../../../media-BJ6SRY3g.mjs";
-import { E as userUpdateBody } from "../../../../../../redirects-D457qwt0.mjs";
-import "../../../../../../relations-CZMpBqEd.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-DmmN74gW.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../../parse-BL49yb9D.mjs";
+import "../../../../../../media-DWIzoVFL.mjs";
+import { E as userUpdateBody } from "../../../../../../redirects-BOn2DIUs.mjs";
+import "../../../../../../relations-C4duJnwI.mjs";
 import "../../../../../../status-COfycGIU.mjs";
 import "../../../../../../api/schemas/index.mjs";
 import { Role } from "@emdash-cms/auth";

package/dist/astro/routes/api/admin/users/_id_/send-recovery.mjs

@@ -1,8 +1,8 @@
 import "../../../../../../base64-B-PsqheR.mjs";
-import "../../../../../../types-CrRUFdej.mjs";
+import "../../../../../../types-XrQQ-Aex.mjs";
 import { t as OptionsRepository } from "../../../../../../options-BlmBHTvX.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-DJ98TRbQ.mjs";
-import { t as getSiteBaseUrl } from "../../../../../../site-url-NGJT6NTU.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-DmmN74gW.mjs";
+import { t as getSiteBaseUrl } from "../../../../../../site-url-8N3kSyVZ.mjs";
 import { Role, sendMagicLink } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 

package/dist/astro/routes/api/admin/users/index.mjs

@@ -1,10 +1,10 @@
 import "../../../../../base64-B-PsqheR.mjs";
-import "../../../../../types-CrRUFdej.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DJ98TRbQ.mjs";
-import { i as parseQuery, t as isParseError } from "../../../../../parse-53zyxlpv.mjs";
-import "../../../../../media-BJ6SRY3g.mjs";
-import { D as usersListQuery } from "../../../../../redirects-D457qwt0.mjs";
-import "../../../../../relations-CZMpBqEd.mjs";
+import "../../../../../types-XrQQ-Aex.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DmmN74gW.mjs";
+import { i as parseQuery, t as isParseError } from "../../../../../parse-BL49yb9D.mjs";
+import "../../../../../media-DWIzoVFL.mjs";
+import { D as usersListQuery } from "../../../../../redirects-BOn2DIUs.mjs";
+import "../../../../../relations-C4duJnwI.mjs";
 import "../../../../../status-COfycGIU.mjs";
 import "../../../../../api/schemas/index.mjs";
 import { Role } from "@emdash-cms/auth";

package/dist/astro/routes/api/auth/dev-bypass.mjs

@@ -1,10 +1,11 @@
-import { a as runMigrations } from "../../../../runner-BdeLEgad.mjs";
-import "../../../../dialect-helpers-BtOwo2us.mjs";
+import { a as runMigrations } from "../../../../runner-BsI18UgP.mjs";
+import "../../../../dialect-helpers-DFwyWjTM.mjs";
+import "../../../../config-DyF3OKg_.mjs";
 import "../../../../base64-B-PsqheR.mjs";
-import "../../../../types-CrRUFdej.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DJ98TRbQ.mjs";
-import { t as escapeHtml } from "../../../../escape-CFedIB1C.mjs";
-import { t as isSafeRedirect } from "../../../../redirect-Botom7X6.mjs";
+import "../../../../types-XrQQ-Aex.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DmmN74gW.mjs";
+import { t as escapeHtml } from "../../../../escape-CdW31WsG.mjs";
+import { t as isSafeRedirect } from "../../../../redirect-CDgfv9vh.mjs";
 import { ulid } from "ulidx";
 
 //#region src/astro/routes/api/auth/dev-bypass.ts

package/dist/astro/routes/api/auth/dev-bypass.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"dev-bypass.mjs","names":[],"sources":["../../../../../src/astro/routes/api/auth/dev-bypass.ts"],"sourcesContent":["/**\n * POST /_emdash/api/auth/dev-bypass\n * GET  /_emdash/api/auth/dev-bypass\n *\n * Development-only endpoint to bypass passkey authentication.\n * Creates or uses a test admin user and establishes a session.\n *\n * ONLY available when import.meta.env.DEV is true.\n *\n * Usage:\n * - GET with redirect: /_emdash/api/auth/dev-bypass?redirect=/_emdash/admin\n * - POST for API: Returns JSON with user info\n *\n * For agent/browser testing, navigate to:\n *   /_emdash/api/auth/dev-bypass?redirect=/_emdash/admin\n */\n\nimport type { APIRoute } from \"astro\";\n\nexport const prerender = false;\n\nimport { ulid } from \"ulidx\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { escapeHtml } from \"#api/escape.js\";\nimport { isSafeRedirect } from \"#api/redirect.js\";\nimport { runMigrations } from \"#db/migrations/runner.js\";\n\nconst DEV_USER_EMAIL = \"dev@emdash.local\";\nconst DEV_USER_NAME = \"Dev Admin\";\n\n// RBAC role levels (matching @emdash-cms/auth)\nconst ROLE_ADMIN = 50;\n\nasync function handleDevBypass(context: Parameters<APIRoute>[0]): Promise<Response> {\n\t// CRITICAL: Only allow in development mode\n\tif (!import.meta.env.DEV) {\n\t\treturn apiError(\"FORBIDDEN\", \"Dev bypass is only available in development mode\", 403);\n\t}\n\n\tconst { locals, url, session } = context;\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Ensure migrations are run\n\t\tawait runMigrations(emdash.db);\n\n\t\t// Find or create dev user (direct DB access to avoid @emdash-cms/auth import issues in dev)\n\t\tconst existingUser = await emdash.db\n\t\t\t.selectFrom(\"users\")\n\t\t\t.selectAll()\n\t\t\t.where(\"email\", \"=\", DEV_USER_EMAIL)\n\t\t\t.executeTakeFirst();\n\n\t\tlet user: { id: string; email: string; name: string; role: number };\n\n\t\tif (!existingUser) {\n\t\t\tconst now = new Date().toISOString();\n\t\t\tconst newUser = {\n\t\t\t\tid: ulid(),\n\t\t\t\temail: DEV_USER_EMAIL,\n\t\t\t\tname: DEV_USER_NAME,\n\t\t\t\trole: ROLE_ADMIN,\n\t\t\t\temail_verified: 1,\n\t\t\t\tcreated_at: now,\n\t\t\t\tupdated_at: now,\n\t\t\t};\n\n\t\t\tawait emdash.db.insertInto(\"users\").values(newUser).execute();\n\n\t\t\tuser = {\n\t\t\t\tid: newUser.id,\n\t\t\t\temail: newUser.email,\n\t\t\t\tname: newUser.name,\n\t\t\t\trole: newUser.role,\n\t\t\t};\n\t\t\tconsole.log(\"[dev-bypass] Created dev admin user:\", user.email);\n\t\t} else {\n\t\t\tuser = {\n\t\t\t\tid: existingUser.id,\n\t\t\t\temail: existingUser.email,\n\t\t\t\tname: existingUser.name || DEV_USER_NAME,\n\t\t\t\trole: existingUser.role,\n\t\t\t};\n\t\t}\n\n\t\t// Create session\n\t\tif (session) {\n\t\t\tsession.set(\"user\", { id: user.id });\n\t\t}\n\n\t\t// Check for redirect parameter\n\t\tconst redirect = url.searchParams.get(\"redirect\");\n\n\t\tif (redirect) {\n\t\t\t// Validate redirect is a safe local path (prevent open redirect via //evil.com or /\\evil.com)\n\t\t\tif (!isSafeRedirect(redirect)) {\n\t\t\t\treturn apiError(\"INVALID_REDIRECT\", \"Redirect must be a local path\", 400);\n\t\t\t}\n\n\t\t\t// Return an HTML page with meta-refresh redirect\n\t\t\t// This ensures the session is fully saved before redirect\n\t\t\tconst safeRedirect = escapeHtml(redirect);\n\t\t\tconst html = `<!DOCTYPE html>\n<html>\n<head>\n\t<meta http-equiv=\"refresh\" content=\"0;url=${safeRedirect}\">\n</head>\n<body>Redirecting...</body>\n</html>`;\n\t\t\treturn new Response(html, {\n\t\t\t\tstatus: 200,\n\t\t\t\theaders: { \"Content-Type\": \"text/html\" },\n\t\t\t});\n\t\t}\n\n\t\t// Return JSON response\n\t\treturn apiSuccess({\n\t\t\tsuccess: true,\n\t\t\tmessage: \"Dev session created\",\n\t\t\tuser: {\n\t\t\t\tid: user.id,\n\t\t\t\temail: user.email,\n\t\t\t\tname: user.name,\n\t\t\t\trole: user.role,\n\t\t\t},\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Dev bypass setup failed\", \"DEV_BYPASS_ERROR\");\n\t}\n}\n\n// Support both GET and POST\nexport const GET: APIRoute = handleDevBypass;\nexport const POST: APIRoute = handleDevBypass;\n"],"mappings":";;;;;;;;;;AAmBA,MAAa,YAAY;AASzB,MAAM,iBAAiB;AACvB,MAAM,gBAAgB;AAGtB,MAAM,aAAa;AAEnB,eAAe,gBAAgB,SAAqD;AAEnF,KAAI,CAAC,OAAO,KAAK,IAAI,IACpB,QAAO,SAAS,aAAa,oDAAoD,IAAI;CAGtF,MAAM,EAAE,QAAQ,KAAK,YAAY;CACjC,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;AAEH,QAAM,cAAc,OAAO,GAAG;EAG9B,MAAM,eAAe,MAAM,OAAO,GAChC,WAAW,QAAQ,CACnB,WAAW,CACX,MAAM,SAAS,KAAK,eAAe,CACnC,kBAAkB;EAEpB,IAAI;AAEJ,MAAI,CAAC,cAAc;GAClB,MAAM,uBAAM,IAAI,MAAM,EAAC,aAAa;GACpC,MAAM,UAAU;IACf,IAAI,MAAM;IACV,OAAO;IACP,MAAM;IACN,MAAM;IACN,gBAAgB;IAChB,YAAY;IACZ,YAAY;IACZ;AAED,SAAM,OAAO,GAAG,WAAW,QAAQ,CAAC,OAAO,QAAQ,CAAC,SAAS;AAE7D,UAAO;IACN,IAAI,QAAQ;IACZ,OAAO,QAAQ;IACf,MAAM,QAAQ;IACd,MAAM,QAAQ;IACd;AACD,WAAQ,IAAI,wCAAwC,KAAK,MAAM;QAE/D,QAAO;GACN,IAAI,aAAa;GACjB,OAAO,aAAa;GACpB,MAAM,aAAa,QAAQ;GAC3B,MAAM,aAAa;GACnB;AAIF,MAAI,QACH,SAAQ,IAAI,QAAQ,EAAE,IAAI,KAAK,IAAI,CAAC;EAIrC,MAAM,WAAW,IAAI,aAAa,IAAI,WAAW;AAEjD,MAAI,UAAU;AAEb,OAAI,CAAC,eAAe,SAAS,CAC5B,QAAO,SAAS,oBAAoB,iCAAiC,IAAI;GAM1E,MAAM,OAAO;;;6CADQ,WAAW,SAAS,CAIc;;;;AAIvD,UAAO,IAAI,SAAS,MAAM;IACzB,QAAQ;IACR,SAAS,EAAE,gBAAgB,aAAa;IACxC,CAAC;;AAIH,SAAO,WAAW;GACjB,SAAS;GACT,SAAS;GACT,MAAM;IACL,IAAI,KAAK;IACT,OAAO,KAAK;IACZ,MAAM,KAAK;IACX,MAAM,KAAK;IACX;GACD,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,mBAAmB;;;AAK1E,MAAa,MAAgB;AAC7B,MAAa,OAAiB"}
+{"version":3,"file":"dev-bypass.mjs","names":[],"sources":["../../../../../src/astro/routes/api/auth/dev-bypass.ts"],"sourcesContent":["/**\n * POST /_emdash/api/auth/dev-bypass\n * GET  /_emdash/api/auth/dev-bypass\n *\n * Development-only endpoint to bypass passkey authentication.\n * Creates or uses a test admin user and establishes a session.\n *\n * ONLY available when import.meta.env.DEV is true.\n *\n * Usage:\n * - GET with redirect: /_emdash/api/auth/dev-bypass?redirect=/_emdash/admin\n * - POST for API: Returns JSON with user info\n *\n * For agent/browser testing, navigate to:\n *   /_emdash/api/auth/dev-bypass?redirect=/_emdash/admin\n */\n\nimport type { APIRoute } from \"astro\";\n\nexport const prerender = false;\n\nimport { ulid } from \"ulidx\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { escapeHtml } from \"#api/escape.js\";\nimport { isSafeRedirect } from \"#api/redirect.js\";\nimport { runMigrations } from \"#db/migrations/runner.js\";\n\nconst DEV_USER_EMAIL = \"dev@emdash.local\";\nconst DEV_USER_NAME = \"Dev Admin\";\n\n// RBAC role levels (matching @emdash-cms/auth)\nconst ROLE_ADMIN = 50;\n\nasync function handleDevBypass(context: Parameters<APIRoute>[0]): Promise<Response> {\n\t// CRITICAL: Only allow in development mode\n\tif (!import.meta.env.DEV) {\n\t\treturn apiError(\"FORBIDDEN\", \"Dev bypass is only available in development mode\", 403);\n\t}\n\n\tconst { locals, url, session } = context;\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Ensure migrations are run\n\t\tawait runMigrations(emdash.db);\n\n\t\t// Find or create dev user (direct DB access to avoid @emdash-cms/auth import issues in dev)\n\t\tconst existingUser = await emdash.db\n\t\t\t.selectFrom(\"users\")\n\t\t\t.selectAll()\n\t\t\t.where(\"email\", \"=\", DEV_USER_EMAIL)\n\t\t\t.executeTakeFirst();\n\n\t\tlet user: { id: string; email: string; name: string; role: number };\n\n\t\tif (!existingUser) {\n\t\t\tconst now = new Date().toISOString();\n\t\t\tconst newUser = {\n\t\t\t\tid: ulid(),\n\t\t\t\temail: DEV_USER_EMAIL,\n\t\t\t\tname: DEV_USER_NAME,\n\t\t\t\trole: ROLE_ADMIN,\n\t\t\t\temail_verified: 1,\n\t\t\t\tcreated_at: now,\n\t\t\t\tupdated_at: now,\n\t\t\t};\n\n\t\t\tawait emdash.db.insertInto(\"users\").values(newUser).execute();\n\n\t\t\tuser = {\n\t\t\t\tid: newUser.id,\n\t\t\t\temail: newUser.email,\n\t\t\t\tname: newUser.name,\n\t\t\t\trole: newUser.role,\n\t\t\t};\n\t\t\tconsole.log(\"[dev-bypass] Created dev admin user:\", user.email);\n\t\t} else {\n\t\t\tuser = {\n\t\t\t\tid: existingUser.id,\n\t\t\t\temail: existingUser.email,\n\t\t\t\tname: existingUser.name || DEV_USER_NAME,\n\t\t\t\trole: existingUser.role,\n\t\t\t};\n\t\t}\n\n\t\t// Create session\n\t\tif (session) {\n\t\t\tsession.set(\"user\", { id: user.id });\n\t\t}\n\n\t\t// Check for redirect parameter\n\t\tconst redirect = url.searchParams.get(\"redirect\");\n\n\t\tif (redirect) {\n\t\t\t// Validate redirect is a safe local path (prevent open redirect via //evil.com or /\\evil.com)\n\t\t\tif (!isSafeRedirect(redirect)) {\n\t\t\t\treturn apiError(\"INVALID_REDIRECT\", \"Redirect must be a local path\", 400);\n\t\t\t}\n\n\t\t\t// Return an HTML page with meta-refresh redirect\n\t\t\t// This ensures the session is fully saved before redirect\n\t\t\tconst safeRedirect = escapeHtml(redirect);\n\t\t\tconst html = `<!DOCTYPE html>\n<html>\n<head>\n\t<meta http-equiv=\"refresh\" content=\"0;url=${safeRedirect}\">\n</head>\n<body>Redirecting...</body>\n</html>`;\n\t\t\treturn new Response(html, {\n\t\t\t\tstatus: 200,\n\t\t\t\theaders: { \"Content-Type\": \"text/html\" },\n\t\t\t});\n\t\t}\n\n\t\t// Return JSON response\n\t\treturn apiSuccess({\n\t\t\tsuccess: true,\n\t\t\tmessage: \"Dev session created\",\n\t\t\tuser: {\n\t\t\t\tid: user.id,\n\t\t\t\temail: user.email,\n\t\t\t\tname: user.name,\n\t\t\t\trole: user.role,\n\t\t\t},\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Dev bypass setup failed\", \"DEV_BYPASS_ERROR\");\n\t}\n}\n\n// Support both GET and POST\nexport const GET: APIRoute = handleDevBypass;\nexport const POST: APIRoute = handleDevBypass;\n"],"mappings":";;;;;;;;;;;AAmBA,MAAa,YAAY;AASzB,MAAM,iBAAiB;AACvB,MAAM,gBAAgB;AAGtB,MAAM,aAAa;AAEnB,eAAe,gBAAgB,SAAqD;AAEnF,KAAI,CAAC,OAAO,KAAK,IAAI,IACpB,QAAO,SAAS,aAAa,oDAAoD,IAAI;CAGtF,MAAM,EAAE,QAAQ,KAAK,YAAY;CACjC,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;AAEH,QAAM,cAAc,OAAO,GAAG;EAG9B,MAAM,eAAe,MAAM,OAAO,GAChC,WAAW,QAAQ,CACnB,WAAW,CACX,MAAM,SAAS,KAAK,eAAe,CACnC,kBAAkB;EAEpB,IAAI;AAEJ,MAAI,CAAC,cAAc;GAClB,MAAM,uBAAM,IAAI,MAAM,EAAC,aAAa;GACpC,MAAM,UAAU;IACf,IAAI,MAAM;IACV,OAAO;IACP,MAAM;IACN,MAAM;IACN,gBAAgB;IAChB,YAAY;IACZ,YAAY;IACZ;AAED,SAAM,OAAO,GAAG,WAAW,QAAQ,CAAC,OAAO,QAAQ,CAAC,SAAS;AAE7D,UAAO;IACN,IAAI,QAAQ;IACZ,OAAO,QAAQ;IACf,MAAM,QAAQ;IACd,MAAM,QAAQ;IACd;AACD,WAAQ,IAAI,wCAAwC,KAAK,MAAM;QAE/D,QAAO;GACN,IAAI,aAAa;GACjB,OAAO,aAAa;GACpB,MAAM,aAAa,QAAQ;GAC3B,MAAM,aAAa;GACnB;AAIF,MAAI,QACH,SAAQ,IAAI,QAAQ,EAAE,IAAI,KAAK,IAAI,CAAC;EAIrC,MAAM,WAAW,IAAI,aAAa,IAAI,WAAW;AAEjD,MAAI,UAAU;AAEb,OAAI,CAAC,eAAe,SAAS,CAC5B,QAAO,SAAS,oBAAoB,iCAAiC,IAAI;GAM1E,MAAM,OAAO;;;6CADQ,WAAW,SAAS,CAIc;;;;AAIvD,UAAO,IAAI,SAAS,MAAM;IACzB,QAAQ;IACR,SAAS,EAAE,gBAAgB,aAAa;IACxC,CAAC;;AAIH,SAAO,WAAW;GACjB,SAAS;GACT,SAAS;GACT,MAAM;IACL,IAAI,KAAK;IACT,OAAO,KAAK;IACZ,MAAM,KAAK;IACX,MAAM,KAAK;IACX;GACD,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,mBAAmB;;;AAK1E,MAAa,MAAgB;AAC7B,MAAa,OAAiB"}

package/dist/astro/routes/api/auth/invite/accept.mjs

@@ -1,6 +1,6 @@
 import "../../../../../base64-B-PsqheR.mjs";
-import "../../../../../types-CrRUFdej.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DJ98TRbQ.mjs";
+import "../../../../../types-XrQQ-Aex.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DmmN74gW.mjs";
 import { InviteError, roleFromLevel, validateInvite } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 

package/dist/astro/routes/api/auth/invite/complete.mjs

@@ -1,17 +1,17 @@
 import "../../../../../base64-B-PsqheR.mjs";
-import "../../../../../types-CrRUFdej.mjs";
+import "../../../../../types-XrQQ-Aex.mjs";
 import { t as OptionsRepository } from "../../../../../options-BlmBHTvX.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DJ98TRbQ.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-53zyxlpv.mjs";
-import "../../../../../media-BJ6SRY3g.mjs";
-import "../../../../../redirects-D457qwt0.mjs";
-import { k as inviteCompleteBody } from "../../../../../relations-CZMpBqEd.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DmmN74gW.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-BL49yb9D.mjs";
+import "../../../../../media-DWIzoVFL.mjs";
+import "../../../../../redirects-BOn2DIUs.mjs";
+import { k as inviteCompleteBody } from "../../../../../relations-C4duJnwI.mjs";
 import "../../../../../status-COfycGIU.mjs";
 import "../../../../../api/schemas/index.mjs";
 import { n as getPublicOrigin } from "../../../../../public-url-DSGTnJFw.mjs";
 import { n as validateAllowedOrigins, t as getConfiguredAllowedOrigins } from "../../../../../allowed-origins-CCEi9bPI.mjs";
 import { n as createChallengeStore } from "../../../../../challenge-store-BFzgFRog.mjs";
-import { t as getPasskeyConfig } from "../../../../../passkey-config-C-SKpc0-.mjs";
+import { t as getPasskeyConfig } from "../../../../../passkey-config-KMhgFjdQ.mjs";
 import { InviteError, completeInvite } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 import { registerPasskey, verifyRegistrationResponse } from "@emdash-cms/auth/passkey";

package/dist/astro/routes/api/auth/invite/index.mjs

@@ -1,14 +1,14 @@
 import "../../../../../base64-B-PsqheR.mjs";
-import "../../../../../types-CrRUFdej.mjs";
+import "../../../../../types-XrQQ-Aex.mjs";
 import { t as OptionsRepository } from "../../../../../options-BlmBHTvX.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DJ98TRbQ.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-53zyxlpv.mjs";
-import "../../../../../media-BJ6SRY3g.mjs";
-import "../../../../../redirects-D457qwt0.mjs";
-import { A as inviteCreateBody } from "../../../../../relations-CZMpBqEd.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DmmN74gW.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-BL49yb9D.mjs";
+import "../../../../../media-DWIzoVFL.mjs";
+import "../../../../../redirects-BOn2DIUs.mjs";
+import { A as inviteCreateBody } from "../../../../../relations-C4duJnwI.mjs";
 import "../../../../../status-COfycGIU.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { t as getSiteBaseUrl } from "../../../../../site-url-NGJT6NTU.mjs";
+import { t as getSiteBaseUrl } from "../../../../../site-url-8N3kSyVZ.mjs";
 import { InviteError, Role, createInvite } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 

package/dist/astro/routes/api/auth/invite/register-options.mjs

@@ -1,16 +1,16 @@
 import "../../../../../base64-B-PsqheR.mjs";
-import "../../../../../types-CrRUFdej.mjs";
+import "../../../../../types-XrQQ-Aex.mjs";
 import { t as OptionsRepository } from "../../../../../options-BlmBHTvX.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DJ98TRbQ.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-53zyxlpv.mjs";
-import "../../../../../media-BJ6SRY3g.mjs";
-import "../../../../../redirects-D457qwt0.mjs";
-import { j as inviteRegisterOptionsBody } from "../../../../../relations-CZMpBqEd.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DmmN74gW.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-BL49yb9D.mjs";
+import "../../../../../media-DWIzoVFL.mjs";
+import "../../../../../redirects-BOn2DIUs.mjs";
+import { j as inviteRegisterOptionsBody } from "../../../../../relations-C4duJnwI.mjs";
 import "../../../../../status-COfycGIU.mjs";
 import "../../../../../api/schemas/index.mjs";
 import { n as getPublicOrigin } from "../../../../../public-url-DSGTnJFw.mjs";
 import { n as createChallengeStore } from "../../../../../challenge-store-BFzgFRog.mjs";
-import { t as getPasskeyConfig } from "../../../../../passkey-config-C-SKpc0-.mjs";
+import { t as getPasskeyConfig } from "../../../../../passkey-config-KMhgFjdQ.mjs";
 import { ulid } from "ulidx";
 import { InviteError, validateInvite } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";

package/dist/astro/routes/api/auth/logout.mjs

@@ -1,7 +1,7 @@
 import "../../../../base64-B-PsqheR.mjs";
-import "../../../../types-CrRUFdej.mjs";
-import { n as apiSuccess, r as handleError } from "../../../../error-DJ98TRbQ.mjs";
-import { t as isSafeRedirect } from "../../../../redirect-Botom7X6.mjs";
+import "../../../../types-XrQQ-Aex.mjs";
+import { n as apiSuccess, r as handleError } from "../../../../error-DmmN74gW.mjs";
+import { t as isSafeRedirect } from "../../../../redirect-CDgfv9vh.mjs";
 
 //#region src/astro/routes/api/auth/logout.ts
 const prerender = false;

package/dist/astro/routes/api/auth/magic-link/send.mjs

@@ -1,16 +1,16 @@
 import "../../../../../base64-B-PsqheR.mjs";
-import "../../../../../types-CrRUFdej.mjs";
+import "../../../../../types-XrQQ-Aex.mjs";
 import { t as OptionsRepository } from "../../../../../options-BlmBHTvX.mjs";
-import { n as apiSuccess, t as apiError } from "../../../../../error-DJ98TRbQ.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-53zyxlpv.mjs";
-import "../../../../../media-BJ6SRY3g.mjs";
-import "../../../../../redirects-D457qwt0.mjs";
-import { M as magicLinkSendBody } from "../../../../../relations-CZMpBqEd.mjs";
+import { n as apiSuccess, t as apiError } from "../../../../../error-DmmN74gW.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-BL49yb9D.mjs";
+import "../../../../../media-DWIzoVFL.mjs";
+import "../../../../../redirects-BOn2DIUs.mjs";
+import { M as magicLinkSendBody } from "../../../../../relations-C4duJnwI.mjs";
 import "../../../../../status-COfycGIU.mjs";
 import "../../../../../api/schemas/index.mjs";
 import { t as getTrustedProxyHeaders } from "../../../../../trusted-proxy-CwjQj0YG.mjs";
-import { t as getSiteBaseUrl } from "../../../../../site-url-NGJT6NTU.mjs";
-import { n as getClientIp, t as checkRateLimit } from "../../../../../rate-limit-D3IEiUi2.mjs";
+import { t as getSiteBaseUrl } from "../../../../../site-url-8N3kSyVZ.mjs";
+import { n as getClientIp, t as checkRateLimit } from "../../../../../rate-limit-Vkp9gQ1Y.mjs";
 import { sendMagicLink } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";