emdash 0.31.1 → 0.32.0

package/dist/astro/routes/api/search/enable.mjs

@@ -1,17 +1,18 @@
-import "../../../../dialect-helpers-BtOwo2us.mjs";
+import "../../../../dialect-helpers-DFwyWjTM.mjs";
+import "../../../../config-DyF3OKg_.mjs";
 import "../../../../base64-B-PsqheR.mjs";
-import "../../../../types-CrRUFdej.mjs";
-import { t as FTSManager } from "../../../../fts-manager-hyCU9OOp.mjs";
-import "../../../../loader-D4rigvjR.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DJ98TRbQ.mjs";
-import { n as parseBody, t as isParseError } from "../../../../parse-53zyxlpv.mjs";
-import "../../../../media-BJ6SRY3g.mjs";
-import { O as searchEnableBody } from "../../../../redirects-D457qwt0.mjs";
-import "../../../../relations-CZMpBqEd.mjs";
+import "../../../../types-XrQQ-Aex.mjs";
+import { t as FTSManager } from "../../../../fts-manager-vncsZIJm.mjs";
+import "../../../../loader-C1XOLV5b.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DmmN74gW.mjs";
+import { n as parseBody, t as isParseError } from "../../../../parse-BL49yb9D.mjs";
+import "../../../../media-DWIzoVFL.mjs";
+import { O as searchEnableBody } from "../../../../redirects-BOn2DIUs.mjs";
+import "../../../../relations-C4duJnwI.mjs";
 import "../../../../status-COfycGIU.mjs";
 import "../../../../api/schemas/index.mjs";
-import "../../../../search-D-Yhpmvs.mjs";
-import { r as requirePerm } from "../../../../authorize-6WPZa1xZ.mjs";
+import "../../../../search-CeO678cp.mjs";
+import { r as requirePerm } from "../../../../authorize-R5iYYrpa.mjs";
 
 //#region src/astro/routes/api/search/enable.ts
 const prerender = false;

package/dist/astro/routes/api/search/enable.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"enable.mjs","names":[],"sources":["../../../../../src/astro/routes/api/search/enable.ts"],"sourcesContent":["/**\n * Search enable/disable endpoint\n *\n * POST /_emdash/api/search/enable\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { searchEnableBody } from \"#api/schemas.js\";\nimport { FTSManager } from \"#search/index.js\";\n\nexport const prerender = false;\n\n/**\n * Enable or disable search for a collection\n *\n * Body:\n * - collection: Collection slug (required)\n * - enabled: boolean (required)\n * - weights: Optional field weights for ranking\n */\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash not configured\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"search:manage\");\n\tif (denied) return denied;\n\n\tconst body = await parseBody(request, searchEnableBody);\n\tif (isParseError(body)) return body;\n\n\tconst ftsManager = new FTSManager(emdash.db);\n\n\ttry {\n\t\tif (body.enabled) {\n\t\t\t// Enable search - creates FTS table, triggers, and populates index\n\t\t\tawait ftsManager.enableSearch(body.collection, { weights: body.weights });\n\n\t\t\tconst stats = await ftsManager.getIndexStats(body.collection);\n\n\t\t\treturn apiSuccess({\n\t\t\t\tcollection: body.collection,\n\t\t\t\tenabled: true,\n\t\t\t\tindexed: stats?.indexed ?? 0,\n\t\t\t});\n\t\t} else {\n\t\t\t// Disable search - drops FTS table and triggers\n\t\t\tawait ftsManager.disableSearch(body.collection);\n\n\t\t\treturn apiSuccess({\n\t\t\t\tcollection: body.collection,\n\t\t\t\tenabled: false,\n\t\t\t});\n\t\t}\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update search config\", \"SEARCH_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;AAcA,MAAa,YAAY;;;;;;;;;AAUzB,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,yBAAyB,IAAI;CAGhE,MAAM,SAAS,YAAY,MAAM,gBAAgB;AACjD,KAAI,OAAQ,QAAO;CAEnB,MAAM,OAAO,MAAM,UAAU,SAAS,iBAAiB;AACvD,KAAI,aAAa,KAAK,CAAE,QAAO;CAE/B,MAAM,aAAa,IAAI,WAAW,OAAO,GAAG;AAE5C,KAAI;AACH,MAAI,KAAK,SAAS;AAEjB,SAAM,WAAW,aAAa,KAAK,YAAY,EAAE,SAAS,KAAK,SAAS,CAAC;GAEzE,MAAM,QAAQ,MAAM,WAAW,cAAc,KAAK,WAAW;AAE7D,UAAO,WAAW;IACjB,YAAY,KAAK;IACjB,SAAS;IACT,SAAS,OAAO,WAAW;IAC3B,CAAC;SACI;AAEN,SAAM,WAAW,cAAc,KAAK,WAAW;AAE/C,UAAO,WAAW;IACjB,YAAY,KAAK;IACjB,SAAS;IACT,CAAC;;UAEK,OAAO;AACf,SAAO,YAAY,OAAO,kCAAkC,eAAe"}
+{"version":3,"file":"enable.mjs","names":[],"sources":["../../../../../src/astro/routes/api/search/enable.ts"],"sourcesContent":["/**\n * Search enable/disable endpoint\n *\n * POST /_emdash/api/search/enable\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { searchEnableBody } from \"#api/schemas.js\";\nimport { FTSManager } from \"#search/index.js\";\n\nexport const prerender = false;\n\n/**\n * Enable or disable search for a collection\n *\n * Body:\n * - collection: Collection slug (required)\n * - enabled: boolean (required)\n * - weights: Optional field weights for ranking\n */\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash not configured\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"search:manage\");\n\tif (denied) return denied;\n\n\tconst body = await parseBody(request, searchEnableBody);\n\tif (isParseError(body)) return body;\n\n\tconst ftsManager = new FTSManager(emdash.db);\n\n\ttry {\n\t\tif (body.enabled) {\n\t\t\t// Enable search - creates FTS table, triggers, and populates index\n\t\t\tawait ftsManager.enableSearch(body.collection, { weights: body.weights });\n\n\t\t\tconst stats = await ftsManager.getIndexStats(body.collection);\n\n\t\t\treturn apiSuccess({\n\t\t\t\tcollection: body.collection,\n\t\t\t\tenabled: true,\n\t\t\t\tindexed: stats?.indexed ?? 0,\n\t\t\t});\n\t\t} else {\n\t\t\t// Disable search - drops FTS table and triggers\n\t\t\tawait ftsManager.disableSearch(body.collection);\n\n\t\t\treturn apiSuccess({\n\t\t\t\tcollection: body.collection,\n\t\t\t\tenabled: false,\n\t\t\t});\n\t\t}\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update search config\", \"SEARCH_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;AAcA,MAAa,YAAY;;;;;;;;;AAUzB,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,yBAAyB,IAAI;CAGhE,MAAM,SAAS,YAAY,MAAM,gBAAgB;AACjD,KAAI,OAAQ,QAAO;CAEnB,MAAM,OAAO,MAAM,UAAU,SAAS,iBAAiB;AACvD,KAAI,aAAa,KAAK,CAAE,QAAO;CAE/B,MAAM,aAAa,IAAI,WAAW,OAAO,GAAG;AAE5C,KAAI;AACH,MAAI,KAAK,SAAS;AAEjB,SAAM,WAAW,aAAa,KAAK,YAAY,EAAE,SAAS,KAAK,SAAS,CAAC;GAEzE,MAAM,QAAQ,MAAM,WAAW,cAAc,KAAK,WAAW;AAE7D,UAAO,WAAW;IACjB,YAAY,KAAK;IACjB,SAAS;IACT,SAAS,OAAO,WAAW;IAC3B,CAAC;SACI;AAEN,SAAM,WAAW,cAAc,KAAK,WAAW;AAE/C,UAAO,WAAW;IACjB,YAAY,KAAK;IACjB,SAAS;IACT,CAAC;;UAEK,OAAO;AACf,SAAO,YAAY,OAAO,kCAAkC,eAAe"}

package/dist/astro/routes/api/search/index.mjs

@@ -1,16 +1,17 @@
-import "../../../../dialect-helpers-BtOwo2us.mjs";
+import "../../../../dialect-helpers-DFwyWjTM.mjs";
+import "../../../../config-DyF3OKg_.mjs";
 import "../../../../base64-B-PsqheR.mjs";
-import "../../../../types-CrRUFdej.mjs";
-import "../../../../fts-manager-hyCU9OOp.mjs";
-import "../../../../loader-D4rigvjR.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DJ98TRbQ.mjs";
-import { i as parseQuery, t as isParseError } from "../../../../parse-53zyxlpv.mjs";
-import "../../../../media-BJ6SRY3g.mjs";
-import { k as searchQuery } from "../../../../redirects-D457qwt0.mjs";
-import "../../../../relations-CZMpBqEd.mjs";
+import "../../../../types-XrQQ-Aex.mjs";
+import "../../../../fts-manager-vncsZIJm.mjs";
+import "../../../../loader-C1XOLV5b.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DmmN74gW.mjs";
+import { i as parseQuery, t as isParseError } from "../../../../parse-BL49yb9D.mjs";
+import "../../../../media-DWIzoVFL.mjs";
+import { k as searchQuery } from "../../../../redirects-BOn2DIUs.mjs";
+import "../../../../relations-C4duJnwI.mjs";
 import "../../../../status-COfycGIU.mjs";
 import "../../../../api/schemas/index.mjs";
-import { c as searchWithDb } from "../../../../search-D-Yhpmvs.mjs";
+import { c as searchWithDb } from "../../../../search-CeO678cp.mjs";
 import { hasPermission } from "@emdash-cms/auth";
 
 //#region src/astro/routes/api/search/index.ts

package/dist/astro/routes/api/search/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../src/astro/routes/api/search/index.ts"],"sourcesContent":["/**\n * Search endpoint - Full-text search across collections\n *\n * GET /_emdash/api/search?q=query&collections=posts,pages&limit=20\n */\n\nimport { hasPermission } from \"@emdash-cms/auth\";\nimport type { APIRoute } from \"astro\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseQuery } from \"#api/parse.js\";\nimport { searchQuery } from \"#api/schemas.js\";\nimport { searchWithDb } from \"#search/index.js\";\n\nexport const prerender = false;\n\n/**\n * Search content\n *\n * Query parameters:\n * - q: Search query (required)\n * - collections: Comma-separated list of collection slugs (optional, defaults to all)\n * - status: Filter by status (optional, defaults to 'published')\n * - limit: Maximum results (optional, defaults to 20)\n */\nexport const GET: APIRoute = async ({ url, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash not configured\", 500);\n\t}\n\n\tconst query = parseQuery(url, searchQuery);\n\tif (isParseError(query)) return query;\n\n\tconst collections = query.collections\n\t\t? query.collections.split(\",\").map((c: string) => c.trim())\n\t\t: undefined;\n\n\t// Only users with content:read_drafts may search non-published statuses.\n\t// Anonymous and subscriber requests are forced to \"published\".\n\tconst status =\n\t\tquery.status && query.status !== \"published\" && hasPermission(user, \"content:read_drafts\")\n\t\t\t? query.status\n\t\t\t: \"published\";\n\n\ttry {\n\t\t// Verify FTS indexes are healthy on first use. At most once per worker\n\t\t// lifetime; no-op after that. Moved off the cold-start hot path to\n\t\t// keep anonymous public reads fast.\n\t\tawait emdash.ensureSearchHealthy?.();\n\n\t\tconst result = await searchWithDb(emdash.db, query.q, {\n\t\t\tcollections,\n\t\t\tstatus,\n\t\t\tlocale: query.locale,\n\t\t\tlimit: query.limit,\n\t\t\tcursor: query.cursor,\n\t\t});\n\n\t\treturn apiSuccess(result);\n\t} catch (error) {\n\t\t// handleError maps a malformed pagination cursor to a 400 INVALID_CURSOR.\n\t\treturn handleError(error, \"Search failed\", \"SEARCH_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAcA,MAAa,YAAY;;;;;;;;;;AAWzB,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CACvD,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,yBAAyB,IAAI;CAGhE,MAAM,QAAQ,WAAW,KAAK,YAAY;AAC1C,KAAI,aAAa,MAAM,CAAE,QAAO;CAEhC,MAAM,cAAc,MAAM,cACvB,MAAM,YAAY,MAAM,IAAI,CAAC,KAAK,MAAc,EAAE,MAAM,CAAC,GACzD;CAIH,MAAM,SACL,MAAM,UAAU,MAAM,WAAW,eAAe,cAAc,MAAM,sBAAsB,GACvF,MAAM,SACN;AAEJ,KAAI;AAIH,QAAM,OAAO,uBAAuB;AAUpC,SAAO,WARQ,MAAM,aAAa,OAAO,IAAI,MAAM,GAAG;GACrD;GACA;GACA,QAAQ,MAAM;GACd,OAAO,MAAM;GACb,QAAQ,MAAM;GACd,CAAC,CAEuB;UACjB,OAAO;AAEf,SAAO,YAAY,OAAO,iBAAiB,eAAe"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../src/astro/routes/api/search/index.ts"],"sourcesContent":["/**\n * Search endpoint - Full-text search across collections\n *\n * GET /_emdash/api/search?q=query&collections=posts,pages&limit=20\n */\n\nimport { hasPermission } from \"@emdash-cms/auth\";\nimport type { APIRoute } from \"astro\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseQuery } from \"#api/parse.js\";\nimport { searchQuery } from \"#api/schemas.js\";\nimport { searchWithDb } from \"#search/index.js\";\n\nexport const prerender = false;\n\n/**\n * Search content\n *\n * Query parameters:\n * - q: Search query (required)\n * - collections: Comma-separated list of collection slugs (optional, defaults to all)\n * - status: Filter by status (optional, defaults to 'published')\n * - limit: Maximum results (optional, defaults to 20)\n */\nexport const GET: APIRoute = async ({ url, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash not configured\", 500);\n\t}\n\n\tconst query = parseQuery(url, searchQuery);\n\tif (isParseError(query)) return query;\n\n\tconst collections = query.collections\n\t\t? query.collections.split(\",\").map((c: string) => c.trim())\n\t\t: undefined;\n\n\t// Only users with content:read_drafts may search non-published statuses.\n\t// Anonymous and subscriber requests are forced to \"published\".\n\tconst status =\n\t\tquery.status && query.status !== \"published\" && hasPermission(user, \"content:read_drafts\")\n\t\t\t? query.status\n\t\t\t: \"published\";\n\n\ttry {\n\t\t// Verify FTS indexes are healthy on first use. At most once per worker\n\t\t// lifetime; no-op after that. Moved off the cold-start hot path to\n\t\t// keep anonymous public reads fast.\n\t\tawait emdash.ensureSearchHealthy?.();\n\n\t\tconst result = await searchWithDb(emdash.db, query.q, {\n\t\t\tcollections,\n\t\t\tstatus,\n\t\t\tlocale: query.locale,\n\t\t\tlimit: query.limit,\n\t\t\tcursor: query.cursor,\n\t\t});\n\n\t\treturn apiSuccess(result);\n\t} catch (error) {\n\t\t// handleError maps a malformed pagination cursor to a 400 INVALID_CURSOR.\n\t\treturn handleError(error, \"Search failed\", \"SEARCH_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAcA,MAAa,YAAY;;;;;;;;;;AAWzB,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CACvD,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,yBAAyB,IAAI;CAGhE,MAAM,QAAQ,WAAW,KAAK,YAAY;AAC1C,KAAI,aAAa,MAAM,CAAE,QAAO;CAEhC,MAAM,cAAc,MAAM,cACvB,MAAM,YAAY,MAAM,IAAI,CAAC,KAAK,MAAc,EAAE,MAAM,CAAC,GACzD;CAIH,MAAM,SACL,MAAM,UAAU,MAAM,WAAW,eAAe,cAAc,MAAM,sBAAsB,GACvF,MAAM,SACN;AAEJ,KAAI;AAIH,QAAM,OAAO,uBAAuB;AAUpC,SAAO,WARQ,MAAM,aAAa,OAAO,IAAI,MAAM,GAAG;GACrD;GACA;GACA,QAAQ,MAAM;GACd,OAAO,MAAM;GACb,QAAQ,MAAM;GACd,CAAC,CAEuB;UACjB,OAAO;AAEf,SAAO,YAAY,OAAO,iBAAiB,eAAe"}

package/dist/astro/routes/api/search/rebuild.mjs

@@ -1,17 +1,18 @@
-import "../../../../dialect-helpers-BtOwo2us.mjs";
+import "../../../../dialect-helpers-DFwyWjTM.mjs";
+import "../../../../config-DyF3OKg_.mjs";
 import "../../../../base64-B-PsqheR.mjs";
-import "../../../../types-CrRUFdej.mjs";
-import { t as FTSManager } from "../../../../fts-manager-hyCU9OOp.mjs";
-import "../../../../loader-D4rigvjR.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DJ98TRbQ.mjs";
-import { n as parseBody, t as isParseError } from "../../../../parse-53zyxlpv.mjs";
-import "../../../../media-BJ6SRY3g.mjs";
-import { A as searchRebuildBody } from "../../../../redirects-D457qwt0.mjs";
-import "../../../../relations-CZMpBqEd.mjs";
+import "../../../../types-XrQQ-Aex.mjs";
+import { t as FTSManager } from "../../../../fts-manager-vncsZIJm.mjs";
+import "../../../../loader-C1XOLV5b.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DmmN74gW.mjs";
+import { n as parseBody, t as isParseError } from "../../../../parse-BL49yb9D.mjs";
+import "../../../../media-DWIzoVFL.mjs";
+import { A as searchRebuildBody } from "../../../../redirects-BOn2DIUs.mjs";
+import "../../../../relations-C4duJnwI.mjs";
 import "../../../../status-COfycGIU.mjs";
 import "../../../../api/schemas/index.mjs";
-import "../../../../search-D-Yhpmvs.mjs";
-import { r as requirePerm } from "../../../../authorize-6WPZa1xZ.mjs";
+import "../../../../search-CeO678cp.mjs";
+import { r as requirePerm } from "../../../../authorize-R5iYYrpa.mjs";
 
 //#region src/astro/routes/api/search/rebuild.ts
 const prerender = false;

package/dist/astro/routes/api/search/rebuild.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"rebuild.mjs","names":[],"sources":["../../../../../src/astro/routes/api/search/rebuild.ts"],"sourcesContent":["/**\n * Search rebuild endpoint - Rebuild FTS index\n *\n * POST /_emdash/api/search/rebuild\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { searchRebuildBody } from \"#api/schemas.js\";\nimport { FTSManager } from \"#search/index.js\";\n\nexport const prerender = false;\n\n/**\n * Rebuild the search index for a collection\n *\n * Body:\n * - collection: Collection slug to rebuild (required)\n */\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash not configured\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"search:manage\");\n\tif (denied) return denied;\n\n\tconst body = await parseBody(request, searchRebuildBody);\n\tif (isParseError(body)) return body;\n\n\tconst ftsManager = new FTSManager(emdash.db);\n\n\ttry {\n\t\t// Get search config for the collection\n\t\tconst config = await ftsManager.getSearchConfig(body.collection);\n\t\tif (!config?.enabled) {\n\t\t\treturn apiError(\n\t\t\t\t\"SEARCH_NOT_ENABLED\",\n\t\t\t\t`Search is not enabled for collection \"${body.collection}\"`,\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\n\t\t// Get searchable fields\n\t\tconst searchableFields = await ftsManager.getSearchableFields(body.collection);\n\t\tif (searchableFields.length === 0) {\n\t\t\treturn apiError(\n\t\t\t\t\"NO_SEARCHABLE_FIELDS\",\n\t\t\t\t`No searchable fields defined for collection \"${body.collection}\"`,\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\n\t\t// Rebuild the index\n\t\tawait ftsManager.rebuildIndex(body.collection, searchableFields, config.weights);\n\n\t\t// Get stats after rebuild\n\t\tconst stats = await ftsManager.getIndexStats(body.collection);\n\n\t\treturn apiSuccess({\n\t\t\tcollection: body.collection,\n\t\t\tindexed: stats?.indexed ?? 0,\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to rebuild index\", \"REBUILD_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;AAcA,MAAa,YAAY;;;;;;;AAQzB,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,yBAAyB,IAAI;CAGhE,MAAM,SAAS,YAAY,MAAM,gBAAgB;AACjD,KAAI,OAAQ,QAAO;CAEnB,MAAM,OAAO,MAAM,UAAU,SAAS,kBAAkB;AACxD,KAAI,aAAa,KAAK,CAAE,QAAO;CAE/B,MAAM,aAAa,IAAI,WAAW,OAAO,GAAG;AAE5C,KAAI;EAEH,MAAM,SAAS,MAAM,WAAW,gBAAgB,KAAK,WAAW;AAChE,MAAI,CAAC,QAAQ,QACZ,QAAO,SACN,sBACA,yCAAyC,KAAK,WAAW,IACzD,IACA;EAIF,MAAM,mBAAmB,MAAM,WAAW,oBAAoB,KAAK,WAAW;AAC9E,MAAI,iBAAiB,WAAW,EAC/B,QAAO,SACN,wBACA,gDAAgD,KAAK,WAAW,IAChE,IACA;AAIF,QAAM,WAAW,aAAa,KAAK,YAAY,kBAAkB,OAAO,QAAQ;EAGhF,MAAM,QAAQ,MAAM,WAAW,cAAc,KAAK,WAAW;AAE7D,SAAO,WAAW;GACjB,YAAY,KAAK;GACjB,SAAS,OAAO,WAAW;GAC3B,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,gBAAgB"}
+{"version":3,"file":"rebuild.mjs","names":[],"sources":["../../../../../src/astro/routes/api/search/rebuild.ts"],"sourcesContent":["/**\n * Search rebuild endpoint - Rebuild FTS index\n *\n * POST /_emdash/api/search/rebuild\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { searchRebuildBody } from \"#api/schemas.js\";\nimport { FTSManager } from \"#search/index.js\";\n\nexport const prerender = false;\n\n/**\n * Rebuild the search index for a collection\n *\n * Body:\n * - collection: Collection slug to rebuild (required)\n */\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash not configured\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"search:manage\");\n\tif (denied) return denied;\n\n\tconst body = await parseBody(request, searchRebuildBody);\n\tif (isParseError(body)) return body;\n\n\tconst ftsManager = new FTSManager(emdash.db);\n\n\ttry {\n\t\t// Get search config for the collection\n\t\tconst config = await ftsManager.getSearchConfig(body.collection);\n\t\tif (!config?.enabled) {\n\t\t\treturn apiError(\n\t\t\t\t\"SEARCH_NOT_ENABLED\",\n\t\t\t\t`Search is not enabled for collection \"${body.collection}\"`,\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\n\t\t// Get searchable fields\n\t\tconst searchableFields = await ftsManager.getSearchableFields(body.collection);\n\t\tif (searchableFields.length === 0) {\n\t\t\treturn apiError(\n\t\t\t\t\"NO_SEARCHABLE_FIELDS\",\n\t\t\t\t`No searchable fields defined for collection \"${body.collection}\"`,\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\n\t\t// Rebuild the index\n\t\tawait ftsManager.rebuildIndex(body.collection, searchableFields, config.weights);\n\n\t\t// Get stats after rebuild\n\t\tconst stats = await ftsManager.getIndexStats(body.collection);\n\n\t\treturn apiSuccess({\n\t\t\tcollection: body.collection,\n\t\t\tindexed: stats?.indexed ?? 0,\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to rebuild index\", \"REBUILD_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;AAcA,MAAa,YAAY;;;;;;;AAQzB,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,yBAAyB,IAAI;CAGhE,MAAM,SAAS,YAAY,MAAM,gBAAgB;AACjD,KAAI,OAAQ,QAAO;CAEnB,MAAM,OAAO,MAAM,UAAU,SAAS,kBAAkB;AACxD,KAAI,aAAa,KAAK,CAAE,QAAO;CAE/B,MAAM,aAAa,IAAI,WAAW,OAAO,GAAG;AAE5C,KAAI;EAEH,MAAM,SAAS,MAAM,WAAW,gBAAgB,KAAK,WAAW;AAChE,MAAI,CAAC,QAAQ,QACZ,QAAO,SACN,sBACA,yCAAyC,KAAK,WAAW,IACzD,IACA;EAIF,MAAM,mBAAmB,MAAM,WAAW,oBAAoB,KAAK,WAAW;AAC9E,MAAI,iBAAiB,WAAW,EAC/B,QAAO,SACN,wBACA,gDAAgD,KAAK,WAAW,IAChE,IACA;AAIF,QAAM,WAAW,aAAa,KAAK,YAAY,kBAAkB,OAAO,QAAQ;EAGhF,MAAM,QAAQ,MAAM,WAAW,cAAc,KAAK,WAAW;AAE7D,SAAO,WAAW;GACjB,YAAY,KAAK;GACjB,SAAS,OAAO,WAAW;GAC3B,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,gBAAgB"}

package/dist/astro/routes/api/search/stats.mjs

@@ -1,11 +1,12 @@
-import "../../../../dialect-helpers-BtOwo2us.mjs";
+import "../../../../dialect-helpers-DFwyWjTM.mjs";
+import "../../../../config-DyF3OKg_.mjs";
 import "../../../../base64-B-PsqheR.mjs";
-import "../../../../types-CrRUFdej.mjs";
-import "../../../../fts-manager-hyCU9OOp.mjs";
-import "../../../../loader-D4rigvjR.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DJ98TRbQ.mjs";
-import { i as getSearchStats } from "../../../../search-D-Yhpmvs.mjs";
-import { r as requirePerm } from "../../../../authorize-6WPZa1xZ.mjs";
+import "../../../../types-XrQQ-Aex.mjs";
+import "../../../../fts-manager-vncsZIJm.mjs";
+import "../../../../loader-C1XOLV5b.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DmmN74gW.mjs";
+import { i as getSearchStats } from "../../../../search-CeO678cp.mjs";
+import { r as requirePerm } from "../../../../authorize-R5iYYrpa.mjs";
 
 //#region src/astro/routes/api/search/stats.ts
 const prerender = false;

package/dist/astro/routes/api/search/stats.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"stats.mjs","names":[],"sources":["../../../../../src/astro/routes/api/search/stats.ts"],"sourcesContent":["/**\n * Search stats endpoint\n *\n * GET /_emdash/api/search/stats\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { getSearchStats } from \"#search/index.js\";\n\nexport const prerender = false;\n\n/**\n * Get search index statistics\n */\nexport const GET: APIRoute = async ({ locals }) => {\n\tconst { emdash, user } = locals;\n\n\tconst denied = requirePerm(user, \"search:manage\");\n\tif (denied) return denied;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash not configured\", 500);\n\t}\n\n\ttry {\n\t\tconst stats = await getSearchStats(emdash.db);\n\n\t\treturn apiSuccess(stats);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to get stats\", \"STATS_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;AAYA,MAAa,YAAY;;;;AAKzB,MAAa,MAAgB,OAAO,EAAE,aAAa;CAClD,MAAM,EAAE,QAAQ,SAAS;CAEzB,MAAM,SAAS,YAAY,MAAM,gBAAgB;AACjD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,yBAAyB,IAAI;AAGhE,KAAI;AAGH,SAAO,WAFO,MAAM,eAAe,OAAO,GAAG,CAErB;UAChB,OAAO;AACf,SAAO,YAAY,OAAO,uBAAuB,cAAc"}
+{"version":3,"file":"stats.mjs","names":[],"sources":["../../../../../src/astro/routes/api/search/stats.ts"],"sourcesContent":["/**\n * Search stats endpoint\n *\n * GET /_emdash/api/search/stats\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { getSearchStats } from \"#search/index.js\";\n\nexport const prerender = false;\n\n/**\n * Get search index statistics\n */\nexport const GET: APIRoute = async ({ locals }) => {\n\tconst { emdash, user } = locals;\n\n\tconst denied = requirePerm(user, \"search:manage\");\n\tif (denied) return denied;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash not configured\", 500);\n\t}\n\n\ttry {\n\t\tconst stats = await getSearchStats(emdash.db);\n\n\t\treturn apiSuccess(stats);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to get stats\", \"STATS_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;AAYA,MAAa,YAAY;;;;AAKzB,MAAa,MAAgB,OAAO,EAAE,aAAa;CAClD,MAAM,EAAE,QAAQ,SAAS;CAEzB,MAAM,SAAS,YAAY,MAAM,gBAAgB;AACjD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,yBAAyB,IAAI;AAGhE,KAAI;AAGH,SAAO,WAFO,MAAM,eAAe,OAAO,GAAG,CAErB;UAChB,OAAO;AACf,SAAO,YAAY,OAAO,uBAAuB,cAAc"}

package/dist/astro/routes/api/search/suggest.mjs

@@ -1,16 +1,17 @@
-import "../../../../dialect-helpers-BtOwo2us.mjs";
+import "../../../../dialect-helpers-DFwyWjTM.mjs";
+import "../../../../config-DyF3OKg_.mjs";
 import "../../../../base64-B-PsqheR.mjs";
-import "../../../../types-CrRUFdej.mjs";
-import "../../../../fts-manager-hyCU9OOp.mjs";
-import "../../../../loader-D4rigvjR.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DJ98TRbQ.mjs";
-import { i as parseQuery, t as isParseError } from "../../../../parse-53zyxlpv.mjs";
-import "../../../../media-BJ6SRY3g.mjs";
-import { N as searchSuggestQuery } from "../../../../redirects-D457qwt0.mjs";
-import "../../../../relations-CZMpBqEd.mjs";
+import "../../../../types-XrQQ-Aex.mjs";
+import "../../../../fts-manager-vncsZIJm.mjs";
+import "../../../../loader-C1XOLV5b.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DmmN74gW.mjs";
+import { i as parseQuery, t as isParseError } from "../../../../parse-BL49yb9D.mjs";
+import "../../../../media-DWIzoVFL.mjs";
+import { N as searchSuggestQuery } from "../../../../redirects-BOn2DIUs.mjs";
+import "../../../../relations-C4duJnwI.mjs";
 import "../../../../status-COfycGIU.mjs";
 import "../../../../api/schemas/index.mjs";
-import { a as getSuggestions } from "../../../../search-D-Yhpmvs.mjs";
+import { a as getSuggestions } from "../../../../search-CeO678cp.mjs";
 
 //#region src/astro/routes/api/search/suggest.ts
 const prerender = false;

package/dist/astro/routes/api/search/suggest.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"suggest.mjs","names":[],"sources":["../../../../../src/astro/routes/api/search/suggest.ts"],"sourcesContent":["/**\n * Search suggestions endpoint - Autocomplete\n *\n * GET /_emdash/api/search/suggest?q=hel&limit=5\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseQuery } from \"#api/parse.js\";\nimport { searchSuggestQuery } from \"#api/schemas.js\";\nimport { getSuggestions } from \"#search/index.js\";\n\nexport const prerender = false;\n\n/**\n * Get search suggestions for autocomplete\n *\n * Query parameters:\n * - q: Partial search query (required)\n * - collections: Comma-separated list of collection slugs (optional)\n * - limit: Maximum suggestions (optional, defaults to 5)\n */\nexport const GET: APIRoute = async ({ url, locals }) => {\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash not configured\", 500);\n\t}\n\n\tconst query = parseQuery(url, searchSuggestQuery);\n\tif (isParseError(query)) return query;\n\n\tconst collections = query.collections\n\t\t? query.collections.split(\",\").map((c: string) => c.trim())\n\t\t: undefined;\n\n\ttry {\n\t\t// Verify FTS indexes are healthy on first use. See search/index.ts.\n\t\tawait emdash.ensureSearchHealthy?.();\n\n\t\tconst suggestions = await getSuggestions(emdash.db, query.q, {\n\t\t\tcollections,\n\t\t\tlocale: query.locale,\n\t\t\tlimit: query.limit,\n\t\t});\n\n\t\treturn apiSuccess({ items: suggestions });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to get suggestions\", \"SUGGESTION_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;AAaA,MAAa,YAAY;;;;;;;;;AAUzB,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CACvD,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,yBAAyB,IAAI;CAGhE,MAAM,QAAQ,WAAW,KAAK,mBAAmB;AACjD,KAAI,aAAa,MAAM,CAAE,QAAO;CAEhC,MAAM,cAAc,MAAM,cACvB,MAAM,YAAY,MAAM,IAAI,CAAC,KAAK,MAAc,EAAE,MAAM,CAAC,GACzD;AAEH,KAAI;AAEH,QAAM,OAAO,uBAAuB;AAQpC,SAAO,WAAW,EAAE,OANA,MAAM,eAAe,OAAO,IAAI,MAAM,GAAG;GAC5D;GACA,QAAQ,MAAM;GACd,OAAO,MAAM;GACb,CAAC,EAEsC,CAAC;UACjC,OAAO;AACf,SAAO,YAAY,OAAO,6BAA6B,mBAAmB"}
+{"version":3,"file":"suggest.mjs","names":[],"sources":["../../../../../src/astro/routes/api/search/suggest.ts"],"sourcesContent":["/**\n * Search suggestions endpoint - Autocomplete\n *\n * GET /_emdash/api/search/suggest?q=hel&limit=5\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseQuery } from \"#api/parse.js\";\nimport { searchSuggestQuery } from \"#api/schemas.js\";\nimport { getSuggestions } from \"#search/index.js\";\n\nexport const prerender = false;\n\n/**\n * Get search suggestions for autocomplete\n *\n * Query parameters:\n * - q: Partial search query (required)\n * - collections: Comma-separated list of collection slugs (optional)\n * - limit: Maximum suggestions (optional, defaults to 5)\n */\nexport const GET: APIRoute = async ({ url, locals }) => {\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash not configured\", 500);\n\t}\n\n\tconst query = parseQuery(url, searchSuggestQuery);\n\tif (isParseError(query)) return query;\n\n\tconst collections = query.collections\n\t\t? query.collections.split(\",\").map((c: string) => c.trim())\n\t\t: undefined;\n\n\ttry {\n\t\t// Verify FTS indexes are healthy on first use. See search/index.ts.\n\t\tawait emdash.ensureSearchHealthy?.();\n\n\t\tconst suggestions = await getSuggestions(emdash.db, query.q, {\n\t\t\tcollections,\n\t\t\tlocale: query.locale,\n\t\t\tlimit: query.limit,\n\t\t});\n\n\t\treturn apiSuccess({ items: suggestions });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to get suggestions\", \"SUGGESTION_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;AAaA,MAAa,YAAY;;;;;;;;;AAUzB,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CACvD,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,yBAAyB,IAAI;CAGhE,MAAM,QAAQ,WAAW,KAAK,mBAAmB;AACjD,KAAI,aAAa,MAAM,CAAE,QAAO;CAEhC,MAAM,cAAc,MAAM,cACvB,MAAM,YAAY,MAAM,IAAI,CAAC,KAAK,MAAc,EAAE,MAAM,CAAC,GACzD;AAEH,KAAI;AAEH,QAAM,OAAO,uBAAuB;AAQpC,SAAO,WAAW,EAAE,OANA,MAAM,eAAe,OAAO,IAAI,MAAM,GAAG;GAC5D;GACA,QAAQ,MAAM;GACd,OAAO,MAAM;GACb,CAAC,EAEsC,CAAC;UACjC,OAAO;AACf,SAAO,YAAY,OAAO,6BAA6B,mBAAmB"}

package/dist/astro/routes/api/sections/_slug_.mjs

@@ -1,16 +1,16 @@
-import "../../../../dialect-helpers-BtOwo2us.mjs";
+import "../../../../dialect-helpers-DFwyWjTM.mjs";
 import "../../../../base64-B-PsqheR.mjs";
-import "../../../../types-CrRUFdej.mjs";
-import "../../../../loader-D4rigvjR.mjs";
-import { a as handleSectionUpdate, n as handleSectionDelete, r as handleSectionGet } from "../../../../sections-CzVBAKjw.mjs";
-import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../error-DJ98TRbQ.mjs";
-import { n as parseBody, t as isParseError } from "../../../../parse-53zyxlpv.mjs";
-import "../../../../media-BJ6SRY3g.mjs";
-import { B as updateSectionBody } from "../../../../redirects-D457qwt0.mjs";
-import "../../../../relations-CZMpBqEd.mjs";
+import "../../../../types-XrQQ-Aex.mjs";
+import "../../../../loader-C1XOLV5b.mjs";
+import { a as handleSectionUpdate, n as handleSectionDelete, r as handleSectionGet } from "../../../../sections-DSuEfirn.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError, t as apiError } from "../../../../error-DmmN74gW.mjs";
+import { n as parseBody, t as isParseError } from "../../../../parse-BL49yb9D.mjs";
+import "../../../../media-DWIzoVFL.mjs";
+import { B as updateSectionBody } from "../../../../redirects-BOn2DIUs.mjs";
+import "../../../../relations-C4duJnwI.mjs";
 import "../../../../status-COfycGIU.mjs";
 import "../../../../api/schemas/index.mjs";
-import { r as requirePerm } from "../../../../authorize-6WPZa1xZ.mjs";
+import { r as requirePerm } from "../../../../authorize-R5iYYrpa.mjs";
 
 //#region src/astro/routes/api/sections/[slug].ts
 const prerender = false;

package/dist/astro/routes/api/sections/index.mjs

@@ -1,16 +1,16 @@
-import "../../../../dialect-helpers-BtOwo2us.mjs";
+import "../../../../dialect-helpers-DFwyWjTM.mjs";
 import "../../../../base64-B-PsqheR.mjs";
-import "../../../../types-CrRUFdej.mjs";
-import "../../../../loader-D4rigvjR.mjs";
-import { i as handleSectionList, t as handleSectionCreate } from "../../../../sections-CzVBAKjw.mjs";
-import { a as unwrapResult, i as requireDb, r as handleError } from "../../../../error-DJ98TRbQ.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-53zyxlpv.mjs";
-import "../../../../media-BJ6SRY3g.mjs";
-import { I as createSectionBody, z as sectionsListQuery } from "../../../../redirects-D457qwt0.mjs";
-import "../../../../relations-CZMpBqEd.mjs";
+import "../../../../types-XrQQ-Aex.mjs";
+import "../../../../loader-C1XOLV5b.mjs";
+import { i as handleSectionList, t as handleSectionCreate } from "../../../../sections-DSuEfirn.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError } from "../../../../error-DmmN74gW.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-BL49yb9D.mjs";
+import "../../../../media-DWIzoVFL.mjs";
+import { I as createSectionBody, z as sectionsListQuery } from "../../../../redirects-BOn2DIUs.mjs";
+import "../../../../relations-C4duJnwI.mjs";
 import "../../../../status-COfycGIU.mjs";
 import "../../../../api/schemas/index.mjs";
-import { r as requirePerm } from "../../../../authorize-6WPZa1xZ.mjs";
+import { r as requirePerm } from "../../../../authorize-R5iYYrpa.mjs";
 
 //#region src/astro/routes/api/sections/index.ts
 const prerender = false;

package/dist/astro/routes/api/settings/backups/archives/_name_.mjs

@@ -1,11 +1,11 @@
 import "../../../../../../base64-B-PsqheR.mjs";
-import "../../../../../../types-CrRUFdej.mjs";
+import "../../../../../../types-XrQQ-Aex.mjs";
 import "../../../../../../options-BlmBHTvX.mjs";
 import { t as ErrorCode } from "../../../../../../errors-DtEXIQQV.mjs";
-import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../../error-DJ98TRbQ.mjs";
+import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../../error-DmmN74gW.mjs";
 import "../../../../../../snapshot-BdpUJKD-.mjs";
-import { a as deleteBackupArchive, c as isValidArchiveName, r as BACKUP_STORAGE_PREFIX } from "../../../../../../backup-DoW-H0r4.mjs";
-import { r as requirePerm } from "../../../../../../authorize-6WPZa1xZ.mjs";
+import { a as deleteBackupArchive, c as isValidArchiveName, r as BACKUP_STORAGE_PREFIX } from "../../../../../../backup-LpQ1V_sR.mjs";
+import { r as requirePerm } from "../../../../../../authorize-R5iYYrpa.mjs";
 
 //#region src/astro/routes/api/settings/backups/archives/[name].ts
 const prerender = false;

package/dist/astro/routes/api/settings/backups/archives/index.mjs

@@ -1,10 +1,10 @@
 import "../../../../../../base64-B-PsqheR.mjs";
-import "../../../../../../types-CrRUFdej.mjs";
+import "../../../../../../types-XrQQ-Aex.mjs";
 import "../../../../../../options-BlmBHTvX.mjs";
-import { a as unwrapResult, t as apiError } from "../../../../../../error-DJ98TRbQ.mjs";
+import { a as unwrapResult, t as apiError } from "../../../../../../error-DmmN74gW.mjs";
 import "../../../../../../snapshot-BdpUJKD-.mjs";
-import { d as runBackupToStorage, s as getBackupSettings } from "../../../../../../backup-DoW-H0r4.mjs";
-import { r as requirePerm } from "../../../../../../authorize-6WPZa1xZ.mjs";
+import { d as runBackupToStorage, s as getBackupSettings } from "../../../../../../backup-LpQ1V_sR.mjs";
+import { r as requirePerm } from "../../../../../../authorize-R5iYYrpa.mjs";
 
 //#region src/astro/routes/api/settings/backups/archives/index.ts
 const prerender = false;

package/dist/astro/routes/api/settings/backups/export.mjs

@@ -1,11 +1,11 @@
 import "../../../../../base64-B-PsqheR.mjs";
-import "../../../../../types-CrRUFdej.mjs";
+import "../../../../../types-XrQQ-Aex.mjs";
 import "../../../../../options-BlmBHTvX.mjs";
 import { t as ErrorCode } from "../../../../../errors-DtEXIQQV.mjs";
-import { r as handleError, t as apiError } from "../../../../../error-DJ98TRbQ.mjs";
+import { r as handleError, t as apiError } from "../../../../../error-DmmN74gW.mjs";
 import "../../../../../snapshot-BdpUJKD-.mjs";
-import { i as archiveNameForDate, o as generateBackupJson } from "../../../../../backup-DoW-H0r4.mjs";
-import { r as requirePerm } from "../../../../../authorize-6WPZa1xZ.mjs";
+import { i as archiveNameForDate, o as generateBackupJson } from "../../../../../backup-LpQ1V_sR.mjs";
+import { r as requirePerm } from "../../../../../authorize-R5iYYrpa.mjs";
 
 //#region src/astro/routes/api/settings/backups/export.ts
 const prerender = false;

package/dist/astro/routes/api/settings/backups/index.mjs

@@ -1,12 +1,12 @@
 import "../../../../../base64-B-PsqheR.mjs";
-import "../../../../../types-CrRUFdej.mjs";
+import "../../../../../types-XrQQ-Aex.mjs";
 import "../../../../../options-BlmBHTvX.mjs";
 import { t as ErrorCode } from "../../../../../errors-DtEXIQQV.mjs";
-import { a as unwrapResult, n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DJ98TRbQ.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-53zyxlpv.mjs";
+import { a as unwrapResult, n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DmmN74gW.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-BL49yb9D.mjs";
 import "../../../../../snapshot-BdpUJKD-.mjs";
-import { f as updateBackupSettings, l as listBackupArchives, n as BACKUP_RETENTION_MIN, s as getBackupSettings, t as BACKUP_RETENTION_MAX } from "../../../../../backup-DoW-H0r4.mjs";
-import { r as requirePerm } from "../../../../../authorize-6WPZa1xZ.mjs";
+import { f as updateBackupSettings, l as listBackupArchives, n as BACKUP_RETENTION_MIN, s as getBackupSettings, t as BACKUP_RETENTION_MAX } from "../../../../../backup-LpQ1V_sR.mjs";
+import { r as requirePerm } from "../../../../../authorize-R5iYYrpa.mjs";
 import { z } from "zod";
 
 //#region src/astro/routes/api/settings/backups/index.ts

package/dist/astro/routes/api/settings/email.mjs

@@ -1,9 +1,9 @@
 import "../../../../base64-B-PsqheR.mjs";
-import "../../../../types-CrRUFdej.mjs";
+import "../../../../types-XrQQ-Aex.mjs";
 import { t as OptionsRepository } from "../../../../options-BlmBHTvX.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DJ98TRbQ.mjs";
-import { n as parseBody, t as isParseError } from "../../../../parse-53zyxlpv.mjs";
-import { r as requirePerm } from "../../../../authorize-6WPZa1xZ.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DmmN74gW.mjs";
+import { n as parseBody, t as isParseError } from "../../../../parse-BL49yb9D.mjs";
+import { r as requirePerm } from "../../../../authorize-R5iYYrpa.mjs";
 import { z } from "zod";
 import { escapeHtml } from "@emdash-cms/auth";
 

package/dist/astro/routes/api/settings.mjs

@@ -1,22 +1,22 @@
-import "../../../dialect-helpers-BtOwo2us.mjs";
+import "../../../dialect-helpers-DFwyWjTM.mjs";
 import "../../../after-B1IIdH3Y.mjs";
 import "../../../object-cache-Bok5j2ae.mjs";
 import "../../../base64-B-PsqheR.mjs";
-import "../../../types-CrRUFdej.mjs";
-import "../../../media-its1WLYv.mjs";
+import "../../../types-XrQQ-Aex.mjs";
+import "../../../media-tQDZEdu7.mjs";
 import "../../../options-BlmBHTvX.mjs";
 import "../../../request-cache-BSUptuJR.mjs";
-import "../../../loader-D4rigvjR.mjs";
-import "../../../settings-C2PaBS49.mjs";
-import { n as handleSettingsUpdate, t as handleSettingsGet } from "../../../settings-Dtc0DU31.mjs";
-import { a as unwrapResult, r as handleError, t as apiError } from "../../../error-DJ98TRbQ.mjs";
-import { n as parseBody, t as isParseError } from "../../../parse-53zyxlpv.mjs";
-import "../../../media-BJ6SRY3g.mjs";
-import { P as settingsUpdateBody } from "../../../redirects-D457qwt0.mjs";
-import "../../../relations-CZMpBqEd.mjs";
+import "../../../loader-C1XOLV5b.mjs";
+import "../../../settings-DgKouY2S.mjs";
+import { n as handleSettingsUpdate, t as handleSettingsGet } from "../../../settings-CREKyj8I.mjs";
+import { a as unwrapResult, r as handleError, t as apiError } from "../../../error-DmmN74gW.mjs";
+import { n as parseBody, t as isParseError } from "../../../parse-BL49yb9D.mjs";
+import "../../../media-DWIzoVFL.mjs";
+import { P as settingsUpdateBody } from "../../../redirects-BOn2DIUs.mjs";
+import "../../../relations-C4duJnwI.mjs";
 import "../../../status-COfycGIU.mjs";
 import "../../../api/schemas/index.mjs";
-import { r as requirePerm } from "../../../authorize-6WPZa1xZ.mjs";
+import { r as requirePerm } from "../../../authorize-R5iYYrpa.mjs";
 
 //#region src/astro/routes/api/settings.ts
 const prerender = false;

package/dist/astro/routes/api/setup/admin-verify.mjs

@@ -1,18 +1,18 @@
 import "../../../../base64-B-PsqheR.mjs";
-import "../../../../types-CrRUFdej.mjs";
+import "../../../../types-XrQQ-Aex.mjs";
 import { t as OptionsRepository } from "../../../../options-BlmBHTvX.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DJ98TRbQ.mjs";
-import { n as parseBody, t as isParseError } from "../../../../parse-53zyxlpv.mjs";
-import "../../../../media-BJ6SRY3g.mjs";
-import "../../../../redirects-D457qwt0.mjs";
-import { y as setupAdminVerifyBody } from "../../../../relations-CZMpBqEd.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DmmN74gW.mjs";
+import { n as parseBody, t as isParseError } from "../../../../parse-BL49yb9D.mjs";
+import "../../../../media-DWIzoVFL.mjs";
+import "../../../../redirects-BOn2DIUs.mjs";
+import { y as setupAdminVerifyBody } from "../../../../relations-C4duJnwI.mjs";
 import "../../../../status-COfycGIU.mjs";
 import "../../../../api/schemas/index.mjs";
 import { n as getPublicOrigin } from "../../../../public-url-DSGTnJFw.mjs";
 import { n as validateAllowedOrigins, t as getConfiguredAllowedOrigins } from "../../../../allowed-origins-CCEi9bPI.mjs";
 import { n as createChallengeStore } from "../../../../challenge-store-BFzgFRog.mjs";
-import { t as getPasskeyConfig } from "../../../../passkey-config-C-SKpc0-.mjs";
-import { t as SETUP_NONCE_COOKIE } from "../../../../setup-nonce-DqiIPr-J.mjs";
+import { t as getPasskeyConfig } from "../../../../passkey-config-KMhgFjdQ.mjs";
+import { t as SETUP_NONCE_COOKIE } from "../../../../setup-nonce-Ct5tjWcq.mjs";
 import { Role, secureCompare } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 import { registerPasskey, verifyRegistrationResponse } from "@emdash-cms/auth/passkey";

package/dist/astro/routes/api/setup/admin.mjs

@@ -1,17 +1,17 @@
 import "../../../../base64-B-PsqheR.mjs";
-import "../../../../types-CrRUFdej.mjs";
+import "../../../../types-XrQQ-Aex.mjs";
 import { t as OptionsRepository } from "../../../../options-BlmBHTvX.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DJ98TRbQ.mjs";
-import { n as parseBody, t as isParseError } from "../../../../parse-53zyxlpv.mjs";
-import "../../../../media-BJ6SRY3g.mjs";
-import "../../../../redirects-D457qwt0.mjs";
-import { v as setupAdminBody } from "../../../../relations-CZMpBqEd.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DmmN74gW.mjs";
+import { n as parseBody, t as isParseError } from "../../../../parse-BL49yb9D.mjs";
+import "../../../../media-DWIzoVFL.mjs";
+import "../../../../redirects-BOn2DIUs.mjs";
+import { v as setupAdminBody } from "../../../../relations-C4duJnwI.mjs";
 import "../../../../status-COfycGIU.mjs";
 import "../../../../api/schemas/index.mjs";
 import { n as getPublicOrigin } from "../../../../public-url-DSGTnJFw.mjs";
 import { n as createChallengeStore } from "../../../../challenge-store-BFzgFRog.mjs";
-import { t as getPasskeyConfig } from "../../../../passkey-config-C-SKpc0-.mjs";
-import { n as SETUP_NONCE_MAX_AGE_SECONDS, t as SETUP_NONCE_COOKIE } from "../../../../setup-nonce-DqiIPr-J.mjs";
+import { t as getPasskeyConfig } from "../../../../passkey-config-KMhgFjdQ.mjs";
+import { n as SETUP_NONCE_MAX_AGE_SECONDS, t as SETUP_NONCE_COOKIE } from "../../../../setup-nonce-Ct5tjWcq.mjs";
 import { generateToken } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 import { generateRegistrationOptions } from "@emdash-cms/auth/passkey";

package/dist/astro/routes/api/setup/dev-bypass.mjs

@@ -1,34 +1,36 @@
-import { a as runMigrations } from "../../../../runner-BdeLEgad.mjs";
-import "../../../../dialect-helpers-BtOwo2us.mjs";
+import { a as runMigrations } from "../../../../runner-BsI18UgP.mjs";
+import "../../../../dialect-helpers-DFwyWjTM.mjs";
+import "../../../../config-DyF3OKg_.mjs";
 import "../../../../after-B1IIdH3Y.mjs";
 import "../../../../object-cache-Bok5j2ae.mjs";
-import "../../../../content-BC43pICM.mjs";
+import "../../../../content-CpfKV9QE.mjs";
 import "../../../../base64-B-PsqheR.mjs";
-import "../../../../types-CrRUFdej.mjs";
-import "../../../../media-its1WLYv.mjs";
-import "../../../../taxonomy-0mCI25HN.mjs";
+import "../../../../types-XrQQ-Aex.mjs";
+import "../../../../media-tQDZEdu7.mjs";
+import "../../../../taxonomy-DvwWAPvA.mjs";
 import { t as OptionsRepository } from "../../../../options-BlmBHTvX.mjs";
-import "../../../../redirect-BoUac4NT.mjs";
+import "../../../../redirect-BJ6d1yHh.mjs";
 import "../../../../request-cache-BSUptuJR.mjs";
 import "../../../../byline-registry-BCuOp4UF.mjs";
-import "../../../../field-defs-cache-KfNJ_qLQ.mjs";
-import "../../../../byline-BTOxUlFF.mjs";
-import "../../../../fts-manager-hyCU9OOp.mjs";
-import "../../../../loader-D4rigvjR.mjs";
-import "../../../../content-refresh-CPMSauD3.mjs";
-import "../../../../registry-y21kjhfG.mjs";
-import "../../../../settings-C2PaBS49.mjs";
+import "../../../../field-defs-cache-QMVnzTH6.mjs";
+import "../../../../byline-C5TAqs8N.mjs";
+import "../../../../fts-manager-vncsZIJm.mjs";
+import "../../../../loader-C1XOLV5b.mjs";
+import "../../../../hash-Cb7U1b5M.mjs";
+import "../../../../content-refresh-DgqUBeTv.mjs";
+import "../../../../registry-BP1JK2xh.mjs";
+import "../../../../settings-DgKouY2S.mjs";
 import "../../../../ssrf-CviKqWmq.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DJ98TRbQ.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DmmN74gW.mjs";
 import "../../../../ssrf-BB__xfNM.mjs";
-import { t as validateSeed } from "../../../../validate-CDT1jl6_.mjs";
-import { t as applySeed } from "../../../../apply-DuXsqll7.mjs";
-import { t as loadSeed } from "../../../../load-Dg5gtWma.mjs";
+import { t as validateSeed } from "../../../../validate-Bs_wT2ul.mjs";
+import { t as applySeed } from "../../../../apply-1_6ra7NP.mjs";
+import { t as loadSeed } from "../../../../load-BwTdWE8B.mjs";
 import { n as getPublicOrigin } from "../../../../public-url-DSGTnJFw.mjs";
-import "../../../../api-tokens-Cvmixds7.mjs";
-import { n as handleApiTokenCreate, t as deleteApiTokensByName } from "../../../../api-tokens-uPt8UDpx.mjs";
-import { t as escapeHtml } from "../../../../escape-CFedIB1C.mjs";
-import { t as isSafeRedirect } from "../../../../redirect-Botom7X6.mjs";
+import "../../../../api-tokens-CEsW_jCg.mjs";
+import { n as handleApiTokenCreate, t as deleteApiTokensByName } from "../../../../api-tokens-p-iMzvXR.mjs";
+import { t as escapeHtml } from "../../../../escape-CdW31WsG.mjs";
+import { t as isSafeRedirect } from "../../../../redirect-CDgfv9vh.mjs";
 import { ulid } from "ulidx";
 
 //#region src/astro/routes/api/setup/dev-bypass.ts

package/dist/astro/routes/api/setup/dev-bypass.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"dev-bypass.mjs","names":[],"sources":["../../../../../src/astro/routes/api/setup/dev-bypass.ts"],"sourcesContent":["/**\n * POST /_emdash/api/setup/dev-bypass\n * GET  /_emdash/api/setup/dev-bypass\n *\n * Development-only endpoint to bypass the setup wizard.\n * Runs migrations, creates a dev admin user, and marks setup complete.\n *\n * ONLY available when import.meta.env.DEV is true.\n *\n * Usage:\n * - GET with redirect: /_emdash/api/setup/dev-bypass?redirect=/_emdash/admin\n * - POST for API: Returns JSON with setup info\n * - ?content=0 (or ?content=false): apply schema/structure only, skipping\n *   sample content entries, bylines, and taxonomy terms\n *\n * For agent/browser testing, navigate to:\n *   /_emdash/api/setup/dev-bypass?redirect=/_emdash/admin\n */\n\nimport type { APIRoute } from \"astro\";\n\nexport const prerender = false;\n\nimport { ulid } from \"ulidx\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { escapeHtml } from \"#api/escape.js\";\nimport { deleteApiTokensByName, handleApiTokenCreate } from \"#api/handlers/api-tokens.js\";\nimport { getPublicOrigin } from \"#api/public-url.js\";\nimport { isSafeRedirect } from \"#api/redirect.js\";\nimport { runMigrations } from \"#db/migrations/runner.js\";\nimport { OptionsRepository } from \"#db/repositories/options.js\";\nimport { applySeed } from \"#seed/apply.js\";\nimport { loadSeed } from \"#seed/load.js\";\nimport { validateSeed } from \"#seed/validate.js\";\n\n// RBAC role levels (matching @emdash-cms/auth)\nconst ROLE_ADMIN = 50;\n\nconst DEV_USER_EMAIL = \"dev@emdash.local\";\nconst DEV_USER_NAME = \"Dev Admin\";\nconst DEV_SITE_TITLE = \"EmDash Dev Site\";\n\nasync function handleDevBypass(context: Parameters<APIRoute>[0]): Promise<Response> {\n\t// CRITICAL: Only allow in development mode\n\tif (!import.meta.env.DEV) {\n\t\treturn apiError(\"FORBIDDEN\", \"Dev bypass is only available in development mode\", 403);\n\t}\n\n\tconst { locals, url, session } = context;\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Run migrations\n\t\tconst migrations = await runMigrations(emdash.db);\n\t\tconsole.log(\"[setup-dev-bypass] Migrations applied:\", migrations.applied);\n\n\t\t// Apply seed (user seed or built-in default). `?content=0` (or `false`)\n\t\t// applies schema/structure only — no sample content, bylines, or terms.\n\t\tconst contentParam = url.searchParams.get(\"content\");\n\t\tconst includeContent = contentParam !== \"0\" && contentParam !== \"false\";\n\t\tconst seed = await loadSeed();\n\t\tconst validation = validateSeed(seed);\n\t\tif (validation.valid) {\n\t\t\tconst seedResult = await applySeed(emdash.db, seed, {\n\t\t\t\tincludeContent,\n\t\t\t\tonConflict: \"skip\",\n\t\t\t\tstorage: emdash.storage ?? undefined,\n\t\t\t});\n\t\t\tconsole.log(\n\t\t\t\t`[setup-dev-bypass] Seed applied: ${seedResult.collections.created} collections, ${seedResult.fields.created} fields`,\n\t\t\t);\n\t\t}\n\n\t\tconst options = new OptionsRepository(emdash.db);\n\n\t\t// Find or create dev user (direct DB access to avoid @emdash-cms/auth import issues in dev)\n\t\tconst existingUser = await emdash.db\n\t\t\t.selectFrom(\"users\")\n\t\t\t.selectAll()\n\t\t\t.where(\"email\", \"=\", DEV_USER_EMAIL)\n\t\t\t.executeTakeFirst();\n\n\t\tlet user: { id: string; email: string; name: string; role: number };\n\t\tlet userCreated = false;\n\n\t\tif (!existingUser) {\n\t\t\tconst now = new Date().toISOString();\n\t\t\tconst newUser = {\n\t\t\t\tid: ulid(),\n\t\t\t\temail: DEV_USER_EMAIL,\n\t\t\t\tname: DEV_USER_NAME,\n\t\t\t\trole: ROLE_ADMIN,\n\t\t\t\temail_verified: 1,\n\t\t\t\tcreated_at: now,\n\t\t\t\tupdated_at: now,\n\t\t\t};\n\n\t\t\tawait emdash.db.insertInto(\"users\").values(newUser).execute();\n\n\t\t\tuser = {\n\t\t\t\tid: newUser.id,\n\t\t\t\temail: newUser.email,\n\t\t\t\tname: newUser.name,\n\t\t\t\trole: newUser.role,\n\t\t\t};\n\t\t\tuserCreated = true;\n\t\t\tconsole.log(\"[setup-dev-bypass] Created dev admin user:\", user.email);\n\t\t} else {\n\t\t\tuser = {\n\t\t\t\tid: existingUser.id,\n\t\t\t\temail: existingUser.email,\n\t\t\t\tname: existingUser.name || DEV_USER_NAME,\n\t\t\t\trole: existingUser.role,\n\t\t\t};\n\t\t}\n\n\t\t// Set site title if not already set\n\t\tconst existingTitle = await options.get(\"emdash:site_title\");\n\t\tif (!existingTitle) {\n\t\t\tawait options.set(\"emdash:site_title\", DEV_SITE_TITLE);\n\t\t}\n\n\t\t// Store canonical site URL (used by magic-link/recovery emails)\n\t\tawait options.set(\"emdash:site_url\", getPublicOrigin(url, emdash?.config));\n\n\t\t// Mark setup complete\n\t\tawait options.set(\"emdash:setup_complete\", true);\n\n\t\t// Create session\n\t\tif (session) {\n\t\t\tsession.set(\"user\", { id: user.id });\n\t\t}\n\n\t\t// Optionally create a PAT token (?token=1) for headless/CLI testing.\n\t\tlet token: string | undefined;\n\t\tif (url.searchParams.has(\"token\")) {\n\t\t\t// Idempotent by name: a prior reset can leave a stale dev-bypass-token,\n\t\t\t// and the raw token is only available at creation, so drop any existing\n\t\t\t// one and mint a fresh, usable PAT rather than accumulating duplicates.\n\t\t\tawait deleteApiTokensByName(emdash.db, user.id, \"dev-bypass-token\");\n\t\t\tconst result = await handleApiTokenCreate(emdash.db, user.id, {\n\t\t\t\tname: \"dev-bypass-token\",\n\t\t\t\tscopes: [\n\t\t\t\t\t\"content:read\",\n\t\t\t\t\t\"content:write\",\n\t\t\t\t\t\"media:read\",\n\t\t\t\t\t\"media:write\",\n\t\t\t\t\t\"schema:read\",\n\t\t\t\t\t\"schema:write\",\n\t\t\t\t\t\"admin\",\n\t\t\t\t],\n\t\t\t});\n\t\t\tif (result.success) {\n\t\t\t\ttoken = result.data.token;\n\t\t\t}\n\t\t}\n\n\t\t// Check for redirect parameter\n\t\tconst redirect = url.searchParams.get(\"redirect\");\n\n\t\tif (redirect) {\n\t\t\t// Validate redirect is a safe local path (prevent open redirect via //evil.com or /\\evil.com)\n\t\t\tif (!isSafeRedirect(redirect)) {\n\t\t\t\treturn apiError(\"INVALID_REDIRECT\", \"Redirect must be a local path\", 400);\n\t\t\t}\n\n\t\t\t// Return an HTML page with meta-refresh redirect\n\t\t\t// This ensures the session is fully saved before redirect\n\t\t\tconst safeRedirect = escapeHtml(redirect);\n\t\t\tconst html = `<!DOCTYPE html>\n<html>\n<head>\n\t<meta http-equiv=\"refresh\" content=\"0;url=${safeRedirect}\">\n</head>\n<body>Redirecting...</body>\n</html>`;\n\t\t\treturn new Response(html, {\n\t\t\t\tstatus: 200,\n\t\t\t\theaders: { \"Content-Type\": \"text/html\" },\n\t\t\t});\n\t\t}\n\n\t\t// Return JSON response\n\t\treturn apiSuccess({\n\t\t\tsuccess: true,\n\t\t\tmessage: \"Dev setup complete\",\n\t\t\tmigrations: migrations.applied,\n\t\t\tuserCreated,\n\t\t\tuser: {\n\t\t\t\tid: user.id,\n\t\t\t\temail: user.email,\n\t\t\t\tname: user.name,\n\t\t\t\trole: user.role,\n\t\t\t},\n\t\t\t...(token ? { token } : {}),\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Dev bypass failed\", \"DEV_BYPASS_ERROR\");\n\t}\n}\n\n// Support both GET and POST\nexport const GET: APIRoute = handleDevBypass;\nexport const POST: APIRoute = handleDevBypass;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqBA,MAAa,YAAY;AAgBzB,MAAM,aAAa;AAEnB,MAAM,iBAAiB;AACvB,MAAM,gBAAgB;AACtB,MAAM,iBAAiB;AAEvB,eAAe,gBAAgB,SAAqD;AAEnF,KAAI,CAAC,OAAO,KAAK,IAAI,IACpB,QAAO,SAAS,aAAa,oDAAoD,IAAI;CAGtF,MAAM,EAAE,QAAQ,KAAK,YAAY;CACjC,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EAEH,MAAM,aAAa,MAAM,cAAc,OAAO,GAAG;AACjD,UAAQ,IAAI,0CAA0C,WAAW,QAAQ;EAIzE,MAAM,eAAe,IAAI,aAAa,IAAI,UAAU;EACpD,MAAM,iBAAiB,iBAAiB,OAAO,iBAAiB;EAChE,MAAM,OAAO,MAAM,UAAU;AAE7B,MADmB,aAAa,KAAK,CACtB,OAAO;GACrB,MAAM,aAAa,MAAM,UAAU,OAAO,IAAI,MAAM;IACnD;IACA,YAAY;IACZ,SAAS,OAAO,WAAW;IAC3B,CAAC;AACF,WAAQ,IACP,oCAAoC,WAAW,YAAY,QAAQ,gBAAgB,WAAW,OAAO,QAAQ,SAC7G;;EAGF,MAAM,UAAU,IAAI,kBAAkB,OAAO,GAAG;EAGhD,MAAM,eAAe,MAAM,OAAO,GAChC,WAAW,QAAQ,CACnB,WAAW,CACX,MAAM,SAAS,KAAK,eAAe,CACnC,kBAAkB;EAEpB,IAAI;EACJ,IAAI,cAAc;AAElB,MAAI,CAAC,cAAc;GAClB,MAAM,uBAAM,IAAI,MAAM,EAAC,aAAa;GACpC,MAAM,UAAU;IACf,IAAI,MAAM;IACV,OAAO;IACP,MAAM;IACN,MAAM;IACN,gBAAgB;IAChB,YAAY;IACZ,YAAY;IACZ;AAED,SAAM,OAAO,GAAG,WAAW,QAAQ,CAAC,OAAO,QAAQ,CAAC,SAAS;AAE7D,UAAO;IACN,IAAI,QAAQ;IACZ,OAAO,QAAQ;IACf,MAAM,QAAQ;IACd,MAAM,QAAQ;IACd;AACD,iBAAc;AACd,WAAQ,IAAI,8CAA8C,KAAK,MAAM;QAErE,QAAO;GACN,IAAI,aAAa;GACjB,OAAO,aAAa;GACpB,MAAM,aAAa,QAAQ;GAC3B,MAAM,aAAa;GACnB;AAKF,MAAI,CADkB,MAAM,QAAQ,IAAI,oBAAoB,CAE3D,OAAM,QAAQ,IAAI,qBAAqB,eAAe;AAIvD,QAAM,QAAQ,IAAI,mBAAmB,gBAAgB,KAAK,QAAQ,OAAO,CAAC;AAG1E,QAAM,QAAQ,IAAI,yBAAyB,KAAK;AAGhD,MAAI,QACH,SAAQ,IAAI,QAAQ,EAAE,IAAI,KAAK,IAAI,CAAC;EAIrC,IAAI;AACJ,MAAI,IAAI,aAAa,IAAI,QAAQ,EAAE;AAIlC,SAAM,sBAAsB,OAAO,IAAI,KAAK,IAAI,mBAAmB;GACnE,MAAM,SAAS,MAAM,qBAAqB,OAAO,IAAI,KAAK,IAAI;IAC7D,MAAM;IACN,QAAQ;KACP;KACA;KACA;KACA;KACA;KACA;KACA;KACA;IACD,CAAC;AACF,OAAI,OAAO,QACV,SAAQ,OAAO,KAAK;;EAKtB,MAAM,WAAW,IAAI,aAAa,IAAI,WAAW;AAEjD,MAAI,UAAU;AAEb,OAAI,CAAC,eAAe,SAAS,CAC5B,QAAO,SAAS,oBAAoB,iCAAiC,IAAI;GAM1E,MAAM,OAAO;;;6CADQ,WAAW,SAAS,CAIc;;;;AAIvD,UAAO,IAAI,SAAS,MAAM;IACzB,QAAQ;IACR,SAAS,EAAE,gBAAgB,aAAa;IACxC,CAAC;;AAIH,SAAO,WAAW;GACjB,SAAS;GACT,SAAS;GACT,YAAY,WAAW;GACvB;GACA,MAAM;IACL,IAAI,KAAK;IACT,OAAO,KAAK;IACZ,MAAM,KAAK;IACX,MAAM,KAAK;IACX;GACD,GAAI,QAAQ,EAAE,OAAO,GAAG,EAAE;GAC1B,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,qBAAqB,mBAAmB;;;AAKpE,MAAa,MAAgB;AAC7B,MAAa,OAAiB"}
+{"version":3,"file":"dev-bypass.mjs","names":[],"sources":["../../../../../src/astro/routes/api/setup/dev-bypass.ts"],"sourcesContent":["/**\n * POST /_emdash/api/setup/dev-bypass\n * GET  /_emdash/api/setup/dev-bypass\n *\n * Development-only endpoint to bypass the setup wizard.\n * Runs migrations, creates a dev admin user, and marks setup complete.\n *\n * ONLY available when import.meta.env.DEV is true.\n *\n * Usage:\n * - GET with redirect: /_emdash/api/setup/dev-bypass?redirect=/_emdash/admin\n * - POST for API: Returns JSON with setup info\n * - ?content=0 (or ?content=false): apply schema/structure only, skipping\n *   sample content entries, bylines, and taxonomy terms\n *\n * For agent/browser testing, navigate to:\n *   /_emdash/api/setup/dev-bypass?redirect=/_emdash/admin\n */\n\nimport type { APIRoute } from \"astro\";\n\nexport const prerender = false;\n\nimport { ulid } from \"ulidx\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { escapeHtml } from \"#api/escape.js\";\nimport { deleteApiTokensByName, handleApiTokenCreate } from \"#api/handlers/api-tokens.js\";\nimport { getPublicOrigin } from \"#api/public-url.js\";\nimport { isSafeRedirect } from \"#api/redirect.js\";\nimport { runMigrations } from \"#db/migrations/runner.js\";\nimport { OptionsRepository } from \"#db/repositories/options.js\";\nimport { applySeed } from \"#seed/apply.js\";\nimport { loadSeed } from \"#seed/load.js\";\nimport { validateSeed } from \"#seed/validate.js\";\n\n// RBAC role levels (matching @emdash-cms/auth)\nconst ROLE_ADMIN = 50;\n\nconst DEV_USER_EMAIL = \"dev@emdash.local\";\nconst DEV_USER_NAME = \"Dev Admin\";\nconst DEV_SITE_TITLE = \"EmDash Dev Site\";\n\nasync function handleDevBypass(context: Parameters<APIRoute>[0]): Promise<Response> {\n\t// CRITICAL: Only allow in development mode\n\tif (!import.meta.env.DEV) {\n\t\treturn apiError(\"FORBIDDEN\", \"Dev bypass is only available in development mode\", 403);\n\t}\n\n\tconst { locals, url, session } = context;\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Run migrations\n\t\tconst migrations = await runMigrations(emdash.db);\n\t\tconsole.log(\"[setup-dev-bypass] Migrations applied:\", migrations.applied);\n\n\t\t// Apply seed (user seed or built-in default). `?content=0` (or `false`)\n\t\t// applies schema/structure only — no sample content, bylines, or terms.\n\t\tconst contentParam = url.searchParams.get(\"content\");\n\t\tconst includeContent = contentParam !== \"0\" && contentParam !== \"false\";\n\t\tconst seed = await loadSeed();\n\t\tconst validation = validateSeed(seed);\n\t\tif (validation.valid) {\n\t\t\tconst seedResult = await applySeed(emdash.db, seed, {\n\t\t\t\tincludeContent,\n\t\t\t\tonConflict: \"skip\",\n\t\t\t\tstorage: emdash.storage ?? undefined,\n\t\t\t});\n\t\t\tconsole.log(\n\t\t\t\t`[setup-dev-bypass] Seed applied: ${seedResult.collections.created} collections, ${seedResult.fields.created} fields`,\n\t\t\t);\n\t\t}\n\n\t\tconst options = new OptionsRepository(emdash.db);\n\n\t\t// Find or create dev user (direct DB access to avoid @emdash-cms/auth import issues in dev)\n\t\tconst existingUser = await emdash.db\n\t\t\t.selectFrom(\"users\")\n\t\t\t.selectAll()\n\t\t\t.where(\"email\", \"=\", DEV_USER_EMAIL)\n\t\t\t.executeTakeFirst();\n\n\t\tlet user: { id: string; email: string; name: string; role: number };\n\t\tlet userCreated = false;\n\n\t\tif (!existingUser) {\n\t\t\tconst now = new Date().toISOString();\n\t\t\tconst newUser = {\n\t\t\t\tid: ulid(),\n\t\t\t\temail: DEV_USER_EMAIL,\n\t\t\t\tname: DEV_USER_NAME,\n\t\t\t\trole: ROLE_ADMIN,\n\t\t\t\temail_verified: 1,\n\t\t\t\tcreated_at: now,\n\t\t\t\tupdated_at: now,\n\t\t\t};\n\n\t\t\tawait emdash.db.insertInto(\"users\").values(newUser).execute();\n\n\t\t\tuser = {\n\t\t\t\tid: newUser.id,\n\t\t\t\temail: newUser.email,\n\t\t\t\tname: newUser.name,\n\t\t\t\trole: newUser.role,\n\t\t\t};\n\t\t\tuserCreated = true;\n\t\t\tconsole.log(\"[setup-dev-bypass] Created dev admin user:\", user.email);\n\t\t} else {\n\t\t\tuser = {\n\t\t\t\tid: existingUser.id,\n\t\t\t\temail: existingUser.email,\n\t\t\t\tname: existingUser.name || DEV_USER_NAME,\n\t\t\t\trole: existingUser.role,\n\t\t\t};\n\t\t}\n\n\t\t// Set site title if not already set\n\t\tconst existingTitle = await options.get(\"emdash:site_title\");\n\t\tif (!existingTitle) {\n\t\t\tawait options.set(\"emdash:site_title\", DEV_SITE_TITLE);\n\t\t}\n\n\t\t// Store canonical site URL (used by magic-link/recovery emails)\n\t\tawait options.set(\"emdash:site_url\", getPublicOrigin(url, emdash?.config));\n\n\t\t// Mark setup complete\n\t\tawait options.set(\"emdash:setup_complete\", true);\n\n\t\t// Create session\n\t\tif (session) {\n\t\t\tsession.set(\"user\", { id: user.id });\n\t\t}\n\n\t\t// Optionally create a PAT token (?token=1) for headless/CLI testing.\n\t\tlet token: string | undefined;\n\t\tif (url.searchParams.has(\"token\")) {\n\t\t\t// Idempotent by name: a prior reset can leave a stale dev-bypass-token,\n\t\t\t// and the raw token is only available at creation, so drop any existing\n\t\t\t// one and mint a fresh, usable PAT rather than accumulating duplicates.\n\t\t\tawait deleteApiTokensByName(emdash.db, user.id, \"dev-bypass-token\");\n\t\t\tconst result = await handleApiTokenCreate(emdash.db, user.id, {\n\t\t\t\tname: \"dev-bypass-token\",\n\t\t\t\tscopes: [\n\t\t\t\t\t\"content:read\",\n\t\t\t\t\t\"content:write\",\n\t\t\t\t\t\"media:read\",\n\t\t\t\t\t\"media:write\",\n\t\t\t\t\t\"schema:read\",\n\t\t\t\t\t\"schema:write\",\n\t\t\t\t\t\"admin\",\n\t\t\t\t],\n\t\t\t});\n\t\t\tif (result.success) {\n\t\t\t\ttoken = result.data.token;\n\t\t\t}\n\t\t}\n\n\t\t// Check for redirect parameter\n\t\tconst redirect = url.searchParams.get(\"redirect\");\n\n\t\tif (redirect) {\n\t\t\t// Validate redirect is a safe local path (prevent open redirect via //evil.com or /\\evil.com)\n\t\t\tif (!isSafeRedirect(redirect)) {\n\t\t\t\treturn apiError(\"INVALID_REDIRECT\", \"Redirect must be a local path\", 400);\n\t\t\t}\n\n\t\t\t// Return an HTML page with meta-refresh redirect\n\t\t\t// This ensures the session is fully saved before redirect\n\t\t\tconst safeRedirect = escapeHtml(redirect);\n\t\t\tconst html = `<!DOCTYPE html>\n<html>\n<head>\n\t<meta http-equiv=\"refresh\" content=\"0;url=${safeRedirect}\">\n</head>\n<body>Redirecting...</body>\n</html>`;\n\t\t\treturn new Response(html, {\n\t\t\t\tstatus: 200,\n\t\t\t\theaders: { \"Content-Type\": \"text/html\" },\n\t\t\t});\n\t\t}\n\n\t\t// Return JSON response\n\t\treturn apiSuccess({\n\t\t\tsuccess: true,\n\t\t\tmessage: \"Dev setup complete\",\n\t\t\tmigrations: migrations.applied,\n\t\t\tuserCreated,\n\t\t\tuser: {\n\t\t\t\tid: user.id,\n\t\t\t\temail: user.email,\n\t\t\t\tname: user.name,\n\t\t\t\trole: user.role,\n\t\t\t},\n\t\t\t...(token ? { token } : {}),\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Dev bypass failed\", \"DEV_BYPASS_ERROR\");\n\t}\n}\n\n// Support both GET and POST\nexport const GET: APIRoute = handleDevBypass;\nexport const POST: APIRoute = handleDevBypass;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqBA,MAAa,YAAY;AAgBzB,MAAM,aAAa;AAEnB,MAAM,iBAAiB;AACvB,MAAM,gBAAgB;AACtB,MAAM,iBAAiB;AAEvB,eAAe,gBAAgB,SAAqD;AAEnF,KAAI,CAAC,OAAO,KAAK,IAAI,IACpB,QAAO,SAAS,aAAa,oDAAoD,IAAI;CAGtF,MAAM,EAAE,QAAQ,KAAK,YAAY;CACjC,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EAEH,MAAM,aAAa,MAAM,cAAc,OAAO,GAAG;AACjD,UAAQ,IAAI,0CAA0C,WAAW,QAAQ;EAIzE,MAAM,eAAe,IAAI,aAAa,IAAI,UAAU;EACpD,MAAM,iBAAiB,iBAAiB,OAAO,iBAAiB;EAChE,MAAM,OAAO,MAAM,UAAU;AAE7B,MADmB,aAAa,KAAK,CACtB,OAAO;GACrB,MAAM,aAAa,MAAM,UAAU,OAAO,IAAI,MAAM;IACnD;IACA,YAAY;IACZ,SAAS,OAAO,WAAW;IAC3B,CAAC;AACF,WAAQ,IACP,oCAAoC,WAAW,YAAY,QAAQ,gBAAgB,WAAW,OAAO,QAAQ,SAC7G;;EAGF,MAAM,UAAU,IAAI,kBAAkB,OAAO,GAAG;EAGhD,MAAM,eAAe,MAAM,OAAO,GAChC,WAAW,QAAQ,CACnB,WAAW,CACX,MAAM,SAAS,KAAK,eAAe,CACnC,kBAAkB;EAEpB,IAAI;EACJ,IAAI,cAAc;AAElB,MAAI,CAAC,cAAc;GAClB,MAAM,uBAAM,IAAI,MAAM,EAAC,aAAa;GACpC,MAAM,UAAU;IACf,IAAI,MAAM;IACV,OAAO;IACP,MAAM;IACN,MAAM;IACN,gBAAgB;IAChB,YAAY;IACZ,YAAY;IACZ;AAED,SAAM,OAAO,GAAG,WAAW,QAAQ,CAAC,OAAO,QAAQ,CAAC,SAAS;AAE7D,UAAO;IACN,IAAI,QAAQ;IACZ,OAAO,QAAQ;IACf,MAAM,QAAQ;IACd,MAAM,QAAQ;IACd;AACD,iBAAc;AACd,WAAQ,IAAI,8CAA8C,KAAK,MAAM;QAErE,QAAO;GACN,IAAI,aAAa;GACjB,OAAO,aAAa;GACpB,MAAM,aAAa,QAAQ;GAC3B,MAAM,aAAa;GACnB;AAKF,MAAI,CADkB,MAAM,QAAQ,IAAI,oBAAoB,CAE3D,OAAM,QAAQ,IAAI,qBAAqB,eAAe;AAIvD,QAAM,QAAQ,IAAI,mBAAmB,gBAAgB,KAAK,QAAQ,OAAO,CAAC;AAG1E,QAAM,QAAQ,IAAI,yBAAyB,KAAK;AAGhD,MAAI,QACH,SAAQ,IAAI,QAAQ,EAAE,IAAI,KAAK,IAAI,CAAC;EAIrC,IAAI;AACJ,MAAI,IAAI,aAAa,IAAI,QAAQ,EAAE;AAIlC,SAAM,sBAAsB,OAAO,IAAI,KAAK,IAAI,mBAAmB;GACnE,MAAM,SAAS,MAAM,qBAAqB,OAAO,IAAI,KAAK,IAAI;IAC7D,MAAM;IACN,QAAQ;KACP;KACA;KACA;KACA;KACA;KACA;KACA;KACA;IACD,CAAC;AACF,OAAI,OAAO,QACV,SAAQ,OAAO,KAAK;;EAKtB,MAAM,WAAW,IAAI,aAAa,IAAI,WAAW;AAEjD,MAAI,UAAU;AAEb,OAAI,CAAC,eAAe,SAAS,CAC5B,QAAO,SAAS,oBAAoB,iCAAiC,IAAI;GAM1E,MAAM,OAAO;;;6CADQ,WAAW,SAAS,CAIc;;;;AAIvD,UAAO,IAAI,SAAS,MAAM;IACzB,QAAQ;IACR,SAAS,EAAE,gBAAgB,aAAa;IACxC,CAAC;;AAIH,SAAO,WAAW;GACjB,SAAS;GACT,SAAS;GACT,YAAY,WAAW;GACvB;GACA,MAAM;IACL,IAAI,KAAK;IACT,OAAO,KAAK;IACZ,MAAM,KAAK;IACX,MAAM,KAAK;IACX;GACD,GAAI,QAAQ,EAAE,OAAO,GAAG,EAAE;GAC1B,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,qBAAqB,mBAAmB;;;AAKpE,MAAa,MAAgB;AAC7B,MAAa,OAAiB"}

package/dist/astro/routes/api/setup/dev-reset.mjs

@@ -1,7 +1,7 @@
 import "../../../../base64-B-PsqheR.mjs";
-import "../../../../types-CrRUFdej.mjs";
+import "../../../../types-XrQQ-Aex.mjs";
 import { t as OptionsRepository } from "../../../../options-BlmBHTvX.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DJ98TRbQ.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DmmN74gW.mjs";
 
 //#region src/astro/routes/api/setup/dev-reset.ts
 const prerender = false;