emdash 0.31.1 → 0.33.0

package/dist/astro/routes/api/media/_id_/confirm.mjs

@@ -1,15 +1,16 @@
 import "../../../../../base64-B-PsqheR.mjs";
-import "../../../../../types-CrRUFdej.mjs";
+import "../../../../../types-Cd8iuS1J.mjs";
+import { t as MediaRepository } from "../../../../../media-BP7S-nHT.mjs";
 import { t as enrichImageMetadata } from "../../../../../enrich-CFJJgxs_.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DJ98TRbQ.mjs";
-import { r as parseOptionalBody, t as isParseError } from "../../../../../parse-53zyxlpv.mjs";
-import { i as mediaConfirmBody } from "../../../../../media-BJ6SRY3g.mjs";
-import "../../../../../redirects-D457qwt0.mjs";
-import "../../../../../relations-CZMpBqEd.mjs";
-import "../../../../../status-COfycGIU.mjs";
+import { n as computeContentHash, t as MAX_CONTENT_HASH_BYTES } from "../../../../../hash-Cg0TXJPV.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-oh_9i6bR.mjs";
+import { r as parseOptionalBody, t as isParseError } from "../../../../../parse-CJKNuewM.mjs";
+import { i as mediaConfirmBody } from "../../../../../media-OhYL-7Io.mjs";
+import "../../../../../redirects-G8wAhWAf.mjs";
+import "../../../../../relations-Bw_E1TXo.mjs";
+import "../../../../../status-CIsmlC1E.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { n as requireOwnerPerm, r as requirePerm } from "../../../../../authorize-6WPZa1xZ.mjs";
-import { MediaRepository } from "emdash";
+import { n as requireOwnerPerm, r as requirePerm } from "../../../../../authorize-qRhWQnel.mjs";
 
 //#region src/astro/routes/api/media/[id]/confirm.ts
 const prerender = false;
@@ -20,7 +21,7 @@ const prerender = false;
 * on the very uploads that flow was designed for. LQIP is progressive
 * enhancement: large images simply ship without a server-generated placeholder.
 */
-const MAX_PLACEHOLDER_DOWNLOAD_BYTES = 8 * 1024 * 1024;
+const MAX_PLACEHOLDER_DOWNLOAD_BYTES = MAX_CONTENT_HASH_BYTES;
 /**
 * Add URL to media item (relative URL for portability)
 */
@@ -30,6 +31,55 @@ function addUrlToMedia(item) {
 		url: `/_emdash/api/media/file/${item.storageKey}`
 	};
 }
+async function cancelDownload(download) {
+	try {
+		await download.body.cancel();
+	} catch (error) {
+		console.error("[media] confirm download cancellation failed:", error);
+	}
+}
+async function forgetUploadAttempt(repo, storageKey) {
+	try {
+		await repo.deleteUploadAttempt(storageKey);
+	} catch (error) {
+		console.error("[media] confirm upload attempt cleanup failed:", error);
+	}
+}
+async function confirmationConflict(repo, id) {
+	const current = await repo.findById(id);
+	if (!current) return apiError("NOT_FOUND", `Media item not found: ${id}`, 404);
+	if (current.status === "ready") {
+		await forgetUploadAttempt(repo, current.storageKey);
+		return apiSuccess({ item: addUrlToMedia(current) });
+	}
+	if (current.status === "pending") return apiError("INVALID_STATE", "Media item changed during confirmation", 409);
+	return apiError("INVALID_STATE", `Media item is not pending: ${current.status}`, 400);
+}
+async function consumeDownload(download) {
+	const reader = download.body.getReader();
+	try {
+		const bytes = new Uint8Array(download.size);
+		let receivedSize = 0;
+		while (true) {
+			const { done, value } = await reader.read();
+			if (done) break;
+			if (receivedSize + value.byteLength > bytes.byteLength) throw new Error("Stored file exceeds its reported size");
+			bytes.set(value, receivedSize);
+			receivedSize += value.byteLength;
+		}
+		if (receivedSize !== download.size) throw new Error("Stored file size does not match its reported size");
+		return bytes;
+	} catch (error) {
+		try {
+			await reader.cancel(error);
+		} catch (cancelError) {
+			console.error("[media] confirm download cancellation failed:", cancelError);
+		}
+		throw error;
+	} finally {
+		reader.releaseLock();
+	}
+}
 /**
 * Confirm upload completion
 */
@@ -46,48 +96,67 @@ const POST = async ({ params, request, locals }) => {
 		const repo = new MediaRepository(emdash.db);
 		const existing = await repo.findById(id);
 		if (!existing) return apiError("NOT_FOUND", `Media item not found: ${id}`, 404);
-		if (existing.status !== "pending") return apiError("INVALID_STATE", `Media item is not pending: ${existing.status}`, 400);
-		const ownerDenied = requireOwnerPerm(user, existing.authorId ?? "", "media:edit_own", "media:edit_any");
+		const ownerDenied = requireOwnerPerm(user, existing.authorId ?? "", "media:upload", "media:edit_any");
 		if (ownerDenied) return ownerDenied;
+		if (existing.status === "ready") {
+			await forgetUploadAttempt(repo, existing.storageKey);
+			return apiSuccess({ item: addUrlToMedia(existing) });
+		}
+		if (existing.status !== "pending") return apiError("INVALID_STATE", `Media item is not pending: ${existing.status}`, 400);
+		if (body.size !== void 0 && existing.size !== null && body.size !== existing.size) return apiError("UPLOAD_SIZE_MISMATCH", "Confirmed size does not match the pending media item", 400);
+		let confirmedSize = existing.size ?? body.size;
+		let contentHash = existing.contentHash;
+		let imageBytes;
 		if (emdash.storage) {
 			if (!await emdash.storage.exists(existing.storageKey)) {
-				await repo.markFailed(id);
+				if (!await repo.markFailed(id, existing.storageKey)) return await confirmationConflict(repo, id);
 				return apiError("FILE_NOT_FOUND", "File was not uploaded to storage", 400);
 			}
+			const storedFile = await emdash.storage.download(existing.storageKey);
+			if (confirmedSize !== void 0 && storedFile.size !== confirmedSize) {
+				await cancelDownload(storedFile);
+				return apiError("UPLOAD_SIZE_MISMATCH", "Stored file size does not match the pending media item", 400);
+			}
+			confirmedSize = storedFile.size;
+			const isImage = existing.mimeType.startsWith("image/");
+			const canBuffer = storedFile.size <= MAX_PLACEHOLDER_DOWNLOAD_BYTES;
+			const hasServerHash = contentHash !== null && await repo.hasUploadAttempt(existing.storageKey);
+			if (canBuffer && (isImage || !hasServerHash)) {
+				const bytes = await consumeDownload(storedFile);
+				contentHash = bytes.byteLength > 0 ? await computeContentHash(bytes) : null;
+				if (isImage && bytes.byteLength > 0) imageBytes = bytes;
+			} else {
+				if (!hasServerHash) contentHash = null;
+				await cancelDownload(storedFile);
+			}
+			if (isImage && !canBuffer) console.warn(`[media] confirm skipping placeholder: object ${existing.storageKey} reported size ${storedFile.size} bytes (> ${MAX_PLACEHOLDER_DOWNLOAD_BYTES})`);
 		}
 		let blurhash;
 		let dominantColor;
 		let width = body.width;
 		let height = body.height;
-		if (emdash.storage && existing.mimeType.startsWith("image/")) {
-			const knownSize = body.size ?? existing.size ?? void 0;
-			if (!(knownSize != null && knownSize > MAX_PLACEHOLDER_DOWNLOAD_BYTES)) try {
-				const { body: stream } = await emdash.storage.download(existing.storageKey);
-				const bytes = new Uint8Array(await new Response(stream).arrayBuffer());
-				if (bytes.byteLength > MAX_PLACEHOLDER_DOWNLOAD_BYTES) console.warn(`[media] confirm skipping placeholder: object ${existing.storageKey} is ${bytes.byteLength} bytes (> ${MAX_PLACEHOLDER_DOWNLOAD_BYTES})`);
-				else {
-					const enriched = await enrichImageMetadata(bytes, existing.mimeType, { knownDimensions: body.width != null && body.height != null ? {
-						width: body.width,
-						height: body.height
-					} : void 0 });
-					blurhash = enriched.blurhash;
-					dominantColor = enriched.dominantColor;
-					width = width ?? enriched.width;
-					height = height ?? enriched.height;
-				}
-			} catch (error) {
-				console.error("[media] confirm placeholder generation failed:", error);
-			}
-			else console.warn(`[media] confirm skipping placeholder: object ${existing.storageKey} reported size ${knownSize} bytes (> ${MAX_PLACEHOLDER_DOWNLOAD_BYTES})`);
+		if (imageBytes) try {
+			const enriched = await enrichImageMetadata(imageBytes, existing.mimeType, { knownDimensions: body.width != null && body.height != null ? {
+				width: body.width,
+				height: body.height
+			} : void 0 });
+			blurhash = enriched.blurhash;
+			dominantColor = enriched.dominantColor;
+			width = width ?? enriched.width;
+			height = height ?? enriched.height;
+		} catch (error) {
+			console.error("[media] confirm placeholder generation failed:", error);
 		}
 		const item = await repo.confirmUpload(id, {
-			size: body.size,
+			size: confirmedSize,
 			width,
 			height,
 			blurhash,
-			dominantColor
-		});
-		if (!item) return apiError("CONFIRM_FAILED", "Failed to confirm upload", 500);
+			dominantColor,
+			contentHash
+		}, existing.storageKey);
+		if (!item) return await confirmationConflict(repo, id);
+		await forgetUploadAttempt(repo, item.storageKey);
 		return apiSuccess({ item: addUrlToMedia(item) });
 	} catch (error) {
 		return handleError(error, "Failed to confirm upload", "CONFIRM_ERROR");

package/dist/astro/routes/api/media/_id_/confirm.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"confirm.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/media/[id]/confirm.ts"],"sourcesContent":["/**\n * Confirm media upload endpoint\n *\n * POST /_emdash/api/media/{id}/confirm\n *\n * Confirms that the client has successfully uploaded the file to storage.\n * Marks the media record as ready and optionally updates metadata.\n */\n\nimport type { APIRoute } from \"astro\";\nimport { MediaRepository } from \"emdash\";\n\nimport { requireOwnerPerm, requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseOptionalBody } from \"#api/parse.js\";\nimport { mediaConfirmBody } from \"#api/schemas.js\";\nimport { enrichImageMetadata } from \"#media/enrich.js\";\nimport type { MediaItem } from \"#types\";\n\nexport const prerender = false;\n\n/**\n * Max raw bytes to buffer for server-side LQIP generation at confirm time. The\n * signed-URL upload flow exists so large files bypass server buffering — re-reading\n * the whole object into a Worker's 128 MB heap to compute a blurhash would OOM\n * on the very uploads that flow was designed for. LQIP is progressive\n * enhancement: large images simply ship without a server-generated placeholder.\n */\nconst MAX_PLACEHOLDER_DOWNLOAD_BYTES = 8 * 1024 * 1024;\n\n/**\n * Add URL to media item (relative URL for portability)\n */\nfunction addUrlToMedia(item: MediaItem): MediaItem & { url: string } {\n\treturn {\n\t\t...item,\n\t\turl: `/_emdash/api/media/file/${item.storageKey}`,\n\t};\n}\n\n/**\n * Confirm upload completion\n */\nexport const POST: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tconst denied = requirePerm(user, \"media:upload\");\n\tif (denied) return denied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Media ID is required\", 400);\n\t}\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\tconst body = await parseOptionalBody(request, mediaConfirmBody, {});\n\t\tif (isParseError(body)) return body;\n\n\t\tconst repo = new MediaRepository(emdash.db);\n\n\t\t// Get the media item first to check status\n\t\tconst existing = await repo.findById(id);\n\t\tif (!existing) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Media item not found: ${id}`, 404);\n\t\t}\n\n\t\tif (existing.status !== \"pending\") {\n\t\t\treturn apiError(\"INVALID_STATE\", `Media item is not pending: ${existing.status}`, 400);\n\t\t}\n\n\t\t// Only the uploader or a user with media:edit_any can confirm/fail a pending upload\n\t\tconst ownerDenied = requireOwnerPerm(\n\t\t\tuser,\n\t\t\texisting.authorId ?? \"\",\n\t\t\t\"media:edit_own\",\n\t\t\t\"media:edit_any\",\n\t\t);\n\t\tif (ownerDenied) return ownerDenied;\n\n\t\t// Optionally verify the file exists in storage\n\t\tif (emdash.storage) {\n\t\t\tconst exists = await emdash.storage.exists(existing.storageKey);\n\t\t\tif (!exists) {\n\t\t\t\t// Mark as failed\n\t\t\t\tawait repo.markFailed(id);\n\t\t\t\treturn apiError(\"FILE_NOT_FOUND\", \"File was not uploaded to storage\", 400);\n\t\t\t}\n\t\t}\n\n\t\t// For images, read the just-uploaded bytes back from storage once to\n\t\t// generate LQIP placeholders (and server-side dimensions as a fallback).\n\t\t// The signed-URL flow uploads directly to storage, so this confirm is the\n\t\t// only point at which the server sees the bytes. Best-effort: a decode\n\t\t// failure must not block the upload from being marked ready. We also cap\n\t\t// the download size — buffering a large original into a Worker heap to\n\t\t// compute a 32px blurhash would OOM on the uploads the signed-URL path\n\t\t// exists to support, so oversized files skip the server-side placeholder.\n\t\tlet blurhash: string | undefined;\n\t\tlet dominantColor: string | undefined;\n\t\tlet width = body.width;\n\t\tlet height = body.height;\n\t\tif (emdash.storage && existing.mimeType.startsWith(\"image/\")) {\n\t\t\tconst knownSize = body.size ?? existing.size ?? undefined;\n\t\t\tconst tooLarge = knownSize != null && knownSize > MAX_PLACEHOLDER_DOWNLOAD_BYTES;\n\t\t\tif (!tooLarge) {\n\t\t\t\ttry {\n\t\t\t\t\tconst { body: stream } = await emdash.storage.download(existing.storageKey);\n\t\t\t\t\tconst bytes = new Uint8Array(await new Response(stream).arrayBuffer());\n\t\t\t\t\t// Defense-in-depth for the unknown-size case: even though we\n\t\t\t\t\t// already buffered it, refuse the decode so we don't also pay\n\t\t\t\t\t// the (larger) RGBA allocation.\n\t\t\t\t\tif (bytes.byteLength > MAX_PLACEHOLDER_DOWNLOAD_BYTES) {\n\t\t\t\t\t\tconsole.warn(\n\t\t\t\t\t\t\t`[media] confirm skipping placeholder: object ${existing.storageKey} is ${bytes.byteLength} bytes (> ${MAX_PLACEHOLDER_DOWNLOAD_BYTES})`,\n\t\t\t\t\t\t);\n\t\t\t\t\t} else {\n\t\t\t\t\t\tconst enriched = await enrichImageMetadata(bytes, existing.mimeType, {\n\t\t\t\t\t\t\tknownDimensions:\n\t\t\t\t\t\t\t\tbody.width != null && body.height != null\n\t\t\t\t\t\t\t\t\t? { width: body.width, height: body.height }\n\t\t\t\t\t\t\t\t\t: undefined,\n\t\t\t\t\t\t});\n\t\t\t\t\t\tblurhash = enriched.blurhash;\n\t\t\t\t\t\tdominantColor = enriched.dominantColor;\n\t\t\t\t\t\twidth = width ?? enriched.width;\n\t\t\t\t\t\theight = height ?? enriched.height;\n\t\t\t\t\t}\n\t\t\t\t} catch (error) {\n\t\t\t\t\tconsole.error(\"[media] confirm placeholder generation failed:\", error);\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\tconsole.warn(\n\t\t\t\t\t`[media] confirm skipping placeholder: object ${existing.storageKey} reported size ${knownSize} bytes (> ${MAX_PLACEHOLDER_DOWNLOAD_BYTES})`,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\n\t\t// Confirm the upload\n\t\tconst item = await repo.confirmUpload(id, {\n\t\t\tsize: body.size,\n\t\t\twidth,\n\t\t\theight,\n\t\t\tblurhash,\n\t\t\tdominantColor,\n\t\t});\n\n\t\tif (!item) {\n\t\t\treturn apiError(\"CONFIRM_FAILED\", \"Failed to confirm upload\", 500);\n\t\t}\n\n\t\t// Add URL to the response (relative URL for portability)\n\t\tconst itemWithUrl = addUrlToMedia(item);\n\n\t\treturn apiSuccess({ item: itemWithUrl });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to confirm upload\", \"CONFIRM_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;AAmBA,MAAa,YAAY;;;;;;;;AASzB,MAAM,iCAAiC,IAAI,OAAO;;;;AAKlD,SAAS,cAAc,MAA8C;AACpE,QAAO;EACN,GAAG;EACH,KAAK,2BAA2B,KAAK;EACrC;;;;;AAMF,MAAa,OAAiB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACpE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAEf,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,wBAAwB,IAAI;AAGhE,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EACH,MAAM,OAAO,MAAM,kBAAkB,SAAS,kBAAkB,EAAE,CAAC;AACnE,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,OAAO,IAAI,gBAAgB,OAAO,GAAG;EAG3C,MAAM,WAAW,MAAM,KAAK,SAAS,GAAG;AACxC,MAAI,CAAC,SACJ,QAAO,SAAS,aAAa,yBAAyB,MAAM,IAAI;AAGjE,MAAI,SAAS,WAAW,UACvB,QAAO,SAAS,iBAAiB,8BAA8B,SAAS,UAAU,IAAI;EAIvF,MAAM,cAAc,iBACnB,MACA,SAAS,YAAY,IACrB,kBACA,iBACA;AACD,MAAI,YAAa,QAAO;AAGxB,MAAI,OAAO,SAEV;OAAI,CADW,MAAM,OAAO,QAAQ,OAAO,SAAS,WAAW,EAClD;AAEZ,UAAM,KAAK,WAAW,GAAG;AACzB,WAAO,SAAS,kBAAkB,oCAAoC,IAAI;;;EAY5E,IAAI;EACJ,IAAI;EACJ,IAAI,QAAQ,KAAK;EACjB,IAAI,SAAS,KAAK;AAClB,MAAI,OAAO,WAAW,SAAS,SAAS,WAAW,SAAS,EAAE;GAC7D,MAAM,YAAY,KAAK,QAAQ,SAAS,QAAQ;AAEhD,OAAI,EADa,aAAa,QAAQ,YAAY,gCAEjD,KAAI;IACH,MAAM,EAAE,MAAM,WAAW,MAAM,OAAO,QAAQ,SAAS,SAAS,WAAW;IAC3E,MAAM,QAAQ,IAAI,WAAW,MAAM,IAAI,SAAS,OAAO,CAAC,aAAa,CAAC;AAItE,QAAI,MAAM,aAAa,+BACtB,SAAQ,KACP,gDAAgD,SAAS,WAAW,MAAM,MAAM,WAAW,YAAY,+BAA+B,GACtI;SACK;KACN,MAAM,WAAW,MAAM,oBAAoB,OAAO,SAAS,UAAU,EACpE,iBACC,KAAK,SAAS,QAAQ,KAAK,UAAU,OAClC;MAAE,OAAO,KAAK;MAAO,QAAQ,KAAK;MAAQ,GAC1C,QACJ,CAAC;AACF,gBAAW,SAAS;AACpB,qBAAgB,SAAS;AACzB,aAAQ,SAAS,SAAS;AAC1B,cAAS,UAAU,SAAS;;YAErB,OAAO;AACf,YAAQ,MAAM,kDAAkD,MAAM;;OAGvE,SAAQ,KACP,gDAAgD,SAAS,WAAW,iBAAiB,UAAU,YAAY,+BAA+B,GAC1I;;EAKH,MAAM,OAAO,MAAM,KAAK,cAAc,IAAI;GACzC,MAAM,KAAK;GACX;GACA;GACA;GACA;GACA,CAAC;AAEF,MAAI,CAAC,KACJ,QAAO,SAAS,kBAAkB,4BAA4B,IAAI;AAMnE,SAAO,WAAW,EAAE,MAFA,cAAc,KAAK,EAEA,CAAC;UAChC,OAAO;AACf,SAAO,YAAY,OAAO,4BAA4B,gBAAgB"}
+{"version":3,"file":"confirm.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/media/[id]/confirm.ts"],"sourcesContent":["/**\n * Confirm media upload endpoint\n *\n * POST /_emdash/api/media/{id}/confirm\n *\n * Confirms that the client has successfully uploaded the file to storage.\n * Marks the media record as ready and optionally updates metadata.\n */\n\nimport type { APIRoute } from \"astro\";\nimport type { DownloadResult } from \"emdash\";\n\nimport { requireOwnerPerm, requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseOptionalBody } from \"#api/parse.js\";\nimport { mediaConfirmBody } from \"#api/schemas.js\";\nimport { MediaRepository } from \"#db/repositories/media.js\";\nimport { enrichImageMetadata } from \"#media/enrich.js\";\nimport type { MediaItem } from \"#types\";\nimport { computeContentHash, MAX_CONTENT_HASH_BYTES } from \"#utils/hash.js\";\n\nexport const prerender = false;\n\n/**\n * Max raw bytes to buffer for server-side LQIP generation at confirm time. The\n * signed-URL upload flow exists so large files bypass server buffering — re-reading\n * the whole object into a Worker's 128 MB heap to compute a blurhash would OOM\n * on the very uploads that flow was designed for. LQIP is progressive\n * enhancement: large images simply ship without a server-generated placeholder.\n */\nconst MAX_PLACEHOLDER_DOWNLOAD_BYTES = MAX_CONTENT_HASH_BYTES;\n\n/**\n * Add URL to media item (relative URL for portability)\n */\nfunction addUrlToMedia(item: MediaItem): MediaItem & { url: string } {\n\treturn {\n\t\t...item,\n\t\turl: `/_emdash/api/media/file/${item.storageKey}`,\n\t};\n}\n\nasync function cancelDownload(download: DownloadResult): Promise<void> {\n\ttry {\n\t\tawait download.body.cancel();\n\t} catch (error) {\n\t\tconsole.error(\"[media] confirm download cancellation failed:\", error);\n\t}\n}\n\nasync function forgetUploadAttempt(repo: MediaRepository, storageKey: string): Promise<void> {\n\ttry {\n\t\tawait repo.deleteUploadAttempt(storageKey);\n\t} catch (error) {\n\t\tconsole.error(\"[media] confirm upload attempt cleanup failed:\", error);\n\t}\n}\n\nasync function confirmationConflict(repo: MediaRepository, id: string): Promise<Response> {\n\tconst current = await repo.findById(id);\n\tif (!current) {\n\t\treturn apiError(\"NOT_FOUND\", `Media item not found: ${id}`, 404);\n\t}\n\tif (current.status === \"ready\") {\n\t\tawait forgetUploadAttempt(repo, current.storageKey);\n\t\treturn apiSuccess({ item: addUrlToMedia(current) });\n\t}\n\tif (current.status === \"pending\") {\n\t\treturn apiError(\"INVALID_STATE\", \"Media item changed during confirmation\", 409);\n\t}\n\treturn apiError(\"INVALID_STATE\", `Media item is not pending: ${current.status}`, 400);\n}\n\nasync function consumeDownload(download: DownloadResult): Promise<Uint8Array> {\n\tconst reader = download.body.getReader();\n\ttry {\n\t\tconst bytes = new Uint8Array(download.size);\n\t\tlet receivedSize = 0;\n\t\twhile (true) {\n\t\t\tconst { done, value } = await reader.read();\n\t\t\tif (done) break;\n\t\t\tif (receivedSize + value.byteLength > bytes.byteLength) {\n\t\t\t\tthrow new Error(\"Stored file exceeds its reported size\");\n\t\t\t}\n\t\t\tbytes.set(value, receivedSize);\n\t\t\treceivedSize += value.byteLength;\n\t\t}\n\t\tif (receivedSize !== download.size) {\n\t\t\tthrow new Error(\"Stored file size does not match its reported size\");\n\t\t}\n\t\treturn bytes;\n\t} catch (error) {\n\t\ttry {\n\t\t\tawait reader.cancel(error);\n\t\t} catch (cancelError) {\n\t\t\tconsole.error(\"[media] confirm download cancellation failed:\", cancelError);\n\t\t}\n\t\tthrow error;\n\t} finally {\n\t\treader.releaseLock();\n\t}\n}\n\n/**\n * Confirm upload completion\n */\nexport const POST: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tconst denied = requirePerm(user, \"media:upload\");\n\tif (denied) return denied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Media ID is required\", 400);\n\t}\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\tconst body = await parseOptionalBody(request, mediaConfirmBody, {});\n\t\tif (isParseError(body)) return body;\n\n\t\tconst repo = new MediaRepository(emdash.db);\n\n\t\t// Get the media item first to check status\n\t\tconst existing = await repo.findById(id);\n\t\tif (!existing) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Media item not found: ${id}`, 404);\n\t\t}\n\n\t\t// Only the uploader or a user with media:edit_any can confirm/fail a pending upload\n\t\tconst ownerDenied = requireOwnerPerm(\n\t\t\tuser,\n\t\t\texisting.authorId ?? \"\",\n\t\t\t\"media:upload\",\n\t\t\t\"media:edit_any\",\n\t\t);\n\t\tif (ownerDenied) return ownerDenied;\n\n\t\tif (existing.status === \"ready\") {\n\t\t\tawait forgetUploadAttempt(repo, existing.storageKey);\n\t\t\treturn apiSuccess({ item: addUrlToMedia(existing) });\n\t\t}\n\t\tif (existing.status !== \"pending\") {\n\t\t\treturn apiError(\"INVALID_STATE\", `Media item is not pending: ${existing.status}`, 400);\n\t\t}\n\n\t\tif (body.size !== undefined && existing.size !== null && body.size !== existing.size) {\n\t\t\treturn apiError(\n\t\t\t\t\"UPLOAD_SIZE_MISMATCH\",\n\t\t\t\t\"Confirmed size does not match the pending media item\",\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\n\t\tlet confirmedSize = existing.size ?? body.size;\n\t\tlet contentHash = existing.contentHash;\n\t\tlet imageBytes: Uint8Array | undefined;\n\n\t\tif (emdash.storage) {\n\t\t\tconst exists = await emdash.storage.exists(existing.storageKey);\n\t\t\tif (!exists) {\n\t\t\t\tconst failed = await repo.markFailed(id, existing.storageKey);\n\t\t\t\tif (!failed) return await confirmationConflict(repo, id);\n\t\t\t\treturn apiError(\"FILE_NOT_FOUND\", \"File was not uploaded to storage\", 400);\n\t\t\t}\n\n\t\t\tconst storedFile = await emdash.storage.download(existing.storageKey);\n\t\t\tif (confirmedSize !== undefined && storedFile.size !== confirmedSize) {\n\t\t\t\tawait cancelDownload(storedFile);\n\t\t\t\treturn apiError(\n\t\t\t\t\t\"UPLOAD_SIZE_MISMATCH\",\n\t\t\t\t\t\"Stored file size does not match the pending media item\",\n\t\t\t\t\t400,\n\t\t\t\t);\n\t\t\t}\n\t\t\tconfirmedSize = storedFile.size;\n\n\t\t\tconst isImage = existing.mimeType.startsWith(\"image/\");\n\t\t\tconst canBuffer = storedFile.size <= MAX_PLACEHOLDER_DOWNLOAD_BYTES;\n\t\t\tconst hasServerHash =\n\t\t\t\tcontentHash !== null && (await repo.hasUploadAttempt(existing.storageKey));\n\t\t\tif (canBuffer && (isImage || !hasServerHash)) {\n\t\t\t\tconst bytes = await consumeDownload(storedFile);\n\t\t\t\tcontentHash = bytes.byteLength > 0 ? await computeContentHash(bytes) : null;\n\t\t\t\tif (isImage && bytes.byteLength > 0) imageBytes = bytes;\n\t\t\t} else {\n\t\t\t\tif (!hasServerHash) contentHash = null;\n\t\t\t\tawait cancelDownload(storedFile);\n\t\t\t}\n\n\t\t\tif (isImage && !canBuffer) {\n\t\t\t\tconsole.warn(\n\t\t\t\t\t`[media] confirm skipping placeholder: object ${existing.storageKey} reported size ${storedFile.size} bytes (> ${MAX_PLACEHOLDER_DOWNLOAD_BYTES})`,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\n\t\t// LQIP is best-effort; oversized images skip server-side placeholders.\n\t\tlet blurhash: string | undefined;\n\t\tlet dominantColor: string | undefined;\n\t\tlet width = body.width;\n\t\tlet height = body.height;\n\t\tif (imageBytes) {\n\t\t\ttry {\n\t\t\t\tconst enriched = await enrichImageMetadata(imageBytes, existing.mimeType, {\n\t\t\t\t\tknownDimensions:\n\t\t\t\t\t\tbody.width != null && body.height != null\n\t\t\t\t\t\t\t? { width: body.width, height: body.height }\n\t\t\t\t\t\t\t: undefined,\n\t\t\t\t});\n\t\t\t\tblurhash = enriched.blurhash;\n\t\t\t\tdominantColor = enriched.dominantColor;\n\t\t\t\twidth = width ?? enriched.width;\n\t\t\t\theight = height ?? enriched.height;\n\t\t\t} catch (error) {\n\t\t\t\tconsole.error(\"[media] confirm placeholder generation failed:\", error);\n\t\t\t}\n\t\t}\n\n\t\t// Confirm the upload\n\t\tconst item = await repo.confirmUpload(\n\t\t\tid,\n\t\t\t{\n\t\t\t\tsize: confirmedSize,\n\t\t\t\twidth,\n\t\t\t\theight,\n\t\t\t\tblurhash,\n\t\t\t\tdominantColor,\n\t\t\t\tcontentHash,\n\t\t\t},\n\t\t\texisting.storageKey,\n\t\t);\n\n\t\tif (!item) {\n\t\t\treturn await confirmationConflict(repo, id);\n\t\t}\n\n\t\tawait forgetUploadAttempt(repo, item.storageKey);\n\n\t\t// Add URL to the response (relative URL for portability)\n\t\tconst itemWithUrl = addUrlToMedia(item);\n\n\t\treturn apiSuccess({ item: itemWithUrl });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to confirm upload\", \"CONFIRM_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;AAqBA,MAAa,YAAY;;;;;;;;AASzB,MAAM,iCAAiC;;;;AAKvC,SAAS,cAAc,MAA8C;AACpE,QAAO;EACN,GAAG;EACH,KAAK,2BAA2B,KAAK;EACrC;;AAGF,eAAe,eAAe,UAAyC;AACtE,KAAI;AACH,QAAM,SAAS,KAAK,QAAQ;UACpB,OAAO;AACf,UAAQ,MAAM,iDAAiD,MAAM;;;AAIvE,eAAe,oBAAoB,MAAuB,YAAmC;AAC5F,KAAI;AACH,QAAM,KAAK,oBAAoB,WAAW;UAClC,OAAO;AACf,UAAQ,MAAM,kDAAkD,MAAM;;;AAIxE,eAAe,qBAAqB,MAAuB,IAA+B;CACzF,MAAM,UAAU,MAAM,KAAK,SAAS,GAAG;AACvC,KAAI,CAAC,QACJ,QAAO,SAAS,aAAa,yBAAyB,MAAM,IAAI;AAEjE,KAAI,QAAQ,WAAW,SAAS;AAC/B,QAAM,oBAAoB,MAAM,QAAQ,WAAW;AACnD,SAAO,WAAW,EAAE,MAAM,cAAc,QAAQ,EAAE,CAAC;;AAEpD,KAAI,QAAQ,WAAW,UACtB,QAAO,SAAS,iBAAiB,0CAA0C,IAAI;AAEhF,QAAO,SAAS,iBAAiB,8BAA8B,QAAQ,UAAU,IAAI;;AAGtF,eAAe,gBAAgB,UAA+C;CAC7E,MAAM,SAAS,SAAS,KAAK,WAAW;AACxC,KAAI;EACH,MAAM,QAAQ,IAAI,WAAW,SAAS,KAAK;EAC3C,IAAI,eAAe;AACnB,SAAO,MAAM;GACZ,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,MAAM;AAC3C,OAAI,KAAM;AACV,OAAI,eAAe,MAAM,aAAa,MAAM,WAC3C,OAAM,IAAI,MAAM,wCAAwC;AAEzD,SAAM,IAAI,OAAO,aAAa;AAC9B,mBAAgB,MAAM;;AAEvB,MAAI,iBAAiB,SAAS,KAC7B,OAAM,IAAI,MAAM,oDAAoD;AAErE,SAAO;UACC,OAAO;AACf,MAAI;AACH,SAAM,OAAO,OAAO,MAAM;WAClB,aAAa;AACrB,WAAQ,MAAM,iDAAiD,YAAY;;AAE5E,QAAM;WACG;AACT,SAAO,aAAa;;;;;;AAOtB,MAAa,OAAiB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACpE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAEf,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,wBAAwB,IAAI;AAGhE,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EACH,MAAM,OAAO,MAAM,kBAAkB,SAAS,kBAAkB,EAAE,CAAC;AACnE,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,OAAO,IAAI,gBAAgB,OAAO,GAAG;EAG3C,MAAM,WAAW,MAAM,KAAK,SAAS,GAAG;AACxC,MAAI,CAAC,SACJ,QAAO,SAAS,aAAa,yBAAyB,MAAM,IAAI;EAIjE,MAAM,cAAc,iBACnB,MACA,SAAS,YAAY,IACrB,gBACA,iBACA;AACD,MAAI,YAAa,QAAO;AAExB,MAAI,SAAS,WAAW,SAAS;AAChC,SAAM,oBAAoB,MAAM,SAAS,WAAW;AACpD,UAAO,WAAW,EAAE,MAAM,cAAc,SAAS,EAAE,CAAC;;AAErD,MAAI,SAAS,WAAW,UACvB,QAAO,SAAS,iBAAiB,8BAA8B,SAAS,UAAU,IAAI;AAGvF,MAAI,KAAK,SAAS,UAAa,SAAS,SAAS,QAAQ,KAAK,SAAS,SAAS,KAC/E,QAAO,SACN,wBACA,wDACA,IACA;EAGF,IAAI,gBAAgB,SAAS,QAAQ,KAAK;EAC1C,IAAI,cAAc,SAAS;EAC3B,IAAI;AAEJ,MAAI,OAAO,SAAS;AAEnB,OAAI,CADW,MAAM,OAAO,QAAQ,OAAO,SAAS,WAAW,EAClD;AAEZ,QAAI,CADW,MAAM,KAAK,WAAW,IAAI,SAAS,WAAW,CAChD,QAAO,MAAM,qBAAqB,MAAM,GAAG;AACxD,WAAO,SAAS,kBAAkB,oCAAoC,IAAI;;GAG3E,MAAM,aAAa,MAAM,OAAO,QAAQ,SAAS,SAAS,WAAW;AACrE,OAAI,kBAAkB,UAAa,WAAW,SAAS,eAAe;AACrE,UAAM,eAAe,WAAW;AAChC,WAAO,SACN,wBACA,0DACA,IACA;;AAEF,mBAAgB,WAAW;GAE3B,MAAM,UAAU,SAAS,SAAS,WAAW,SAAS;GACtD,MAAM,YAAY,WAAW,QAAQ;GACrC,MAAM,gBACL,gBAAgB,QAAS,MAAM,KAAK,iBAAiB,SAAS,WAAW;AAC1E,OAAI,cAAc,WAAW,CAAC,gBAAgB;IAC7C,MAAM,QAAQ,MAAM,gBAAgB,WAAW;AAC/C,kBAAc,MAAM,aAAa,IAAI,MAAM,mBAAmB,MAAM,GAAG;AACvE,QAAI,WAAW,MAAM,aAAa,EAAG,cAAa;UAC5C;AACN,QAAI,CAAC,cAAe,eAAc;AAClC,UAAM,eAAe,WAAW;;AAGjC,OAAI,WAAW,CAAC,UACf,SAAQ,KACP,gDAAgD,SAAS,WAAW,iBAAiB,WAAW,KAAK,YAAY,+BAA+B,GAChJ;;EAKH,IAAI;EACJ,IAAI;EACJ,IAAI,QAAQ,KAAK;EACjB,IAAI,SAAS,KAAK;AAClB,MAAI,WACH,KAAI;GACH,MAAM,WAAW,MAAM,oBAAoB,YAAY,SAAS,UAAU,EACzE,iBACC,KAAK,SAAS,QAAQ,KAAK,UAAU,OAClC;IAAE,OAAO,KAAK;IAAO,QAAQ,KAAK;IAAQ,GAC1C,QACJ,CAAC;AACF,cAAW,SAAS;AACpB,mBAAgB,SAAS;AACzB,WAAQ,SAAS,SAAS;AAC1B,YAAS,UAAU,SAAS;WACpB,OAAO;AACf,WAAQ,MAAM,kDAAkD,MAAM;;EAKxE,MAAM,OAAO,MAAM,KAAK,cACvB,IACA;GACC,MAAM;GACN;GACA;GACA;GACA;GACA;GACA,EACD,SAAS,WACT;AAED,MAAI,CAAC,KACJ,QAAO,MAAM,qBAAqB,MAAM,GAAG;AAG5C,QAAM,oBAAoB,MAAM,KAAK,WAAW;AAKhD,SAAO,WAAW,EAAE,MAFA,cAAc,KAAK,EAEA,CAAC;UAChC,OAAO;AACf,SAAO,YAAY,OAAO,4BAA4B,gBAAgB"}

package/dist/astro/routes/api/media/_id_/upload.d.mts

@@ -0,0 +1,8 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/media/[id]/upload.d.ts
+declare const prerender = false;
+declare const PUT: APIRoute;
+//#endregion
+export { PUT, prerender };
+//# sourceMappingURL=upload.d.mts.map

package/dist/astro/routes/api/media/_id_/upload.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/media/[id]/upload.ts"],"mappings":";;;cAWa,SAAA;AAAA,cA2DA,GAAA,EAAK,QAAA"}

package/dist/astro/routes/api/media/_id_/upload.mjs

@@ -0,0 +1,168 @@
+import "../../../../../base64-B-PsqheR.mjs";
+import "../../../../../types-Cd8iuS1J.mjs";
+import { t as MediaRepository } from "../../../../../media-BP7S-nHT.mjs";
+import { n as normalizeMime } from "../../../../../mime-DfIVjNkr.mjs";
+import { n as computeContentHash, t as MAX_CONTENT_HASH_BYTES } from "../../../../../hash-Cg0TXJPV.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-oh_9i6bR.mjs";
+import { t as removeUploadAttempt } from "../../../../../upload-attempts-D8QAFLUJ.mjs";
+import { n as requireOwnerPerm, r as requirePerm } from "../../../../../authorize-qRhWQnel.mjs";
+import { ulid } from "ulidx";
+
+//#region src/astro/routes/api/media/[id]/upload.ts
+const prerender = false;
+const INITIAL_HASH_BUFFER_BYTES = 64 * 1024;
+var UploadBodyError = class extends Error {
+	code;
+	constructor(code) {
+		super(code);
+		this.code = code;
+	}
+};
+function findUploadBodyError(error) {
+	let current = error;
+	for (let depth = 0; depth < 5 && current instanceof Error; depth++) {
+		if (current instanceof UploadBodyError) return current;
+		current = current.cause;
+	}
+	return null;
+}
+function preserveKnownLength(body, expectedLength) {
+	if (typeof FixedLengthStream === "undefined") return body;
+	return body.pipeThrough(new FixedLengthStream(expectedLength));
+}
+function createUploadAttemptKey(key) {
+	const pathSeparator = key.lastIndexOf("/");
+	const extensionSeparator = key.lastIndexOf(".");
+	if (extensionSeparator > pathSeparator) return `${key.slice(0, extensionSeparator)}.${ulid()}${key.slice(extensionSeparator)}`;
+	return `${key}.${ulid()}`;
+}
+async function getStoredSize(storage, key) {
+	if (!await storage.exists(key)) return null;
+	const download = await storage.download(key);
+	try {
+		return download.size;
+	} finally {
+		try {
+			await download.body.cancel();
+		} catch (error) {
+			console.error("[media] upload download cancellation failed:", error);
+		}
+	}
+}
+const PUT = async ({ params, request, locals }) => {
+	const { emdash, user } = locals;
+	const { id } = params;
+	const denied = requirePerm(user, "media:upload");
+	if (denied) return denied;
+	if (!id) return apiError("INVALID_REQUEST", "Media ID is required", 400);
+	if (!emdash?.db) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	if (!emdash.storage) return apiError("NO_STORAGE", "Storage not configured", 500);
+	try {
+		const repo = new MediaRepository(emdash.db);
+		const media = await repo.findById(id);
+		if (!media) return apiError("NOT_FOUND", `Media item not found: ${id}`, 404);
+		if (media.status !== "pending") return apiError("INVALID_STATE", `Media item is not pending: ${media.status}`, 400);
+		const ownerDenied = requireOwnerPerm(user, media.authorId ?? "", "media:upload", "media:edit_any");
+		if (ownerDenied) return ownerDenied;
+		if (!Number.isSafeInteger(media.size) || media.size === null || media.size < 0) return apiError("INVALID_STATE", "Pending media item has no valid upload size", 400);
+		const expectedSize = media.size;
+		const contentType = request.headers.get("Content-Type");
+		if (!contentType || normalizeMime(contentType) !== media.mimeType) return apiError("INVALID_TYPE", "Upload content type does not match the media item", 400);
+		const requestBody = request.body ?? (expectedSize === 0 ? new ReadableStream({ start(controller) {
+			controller.close();
+		} }) : null);
+		if (!requestBody) return apiError("NO_FILE", "No file provided", 400);
+		const contentLength = request.headers.get("Content-Length");
+		if (contentLength !== null) {
+			const declaredSize = Number(contentLength);
+			if (!Number.isSafeInteger(declaredSize) || declaredSize < 0) return apiError("INVALID_REQUEST", "Invalid Content-Length header", 400);
+			if (declaredSize > expectedSize) return apiError("PAYLOAD_TOO_LARGE", "Upload exceeds the expected size", 413);
+			if (declaredSize !== expectedSize) return apiError("UPLOAD_SIZE_MISMATCH", "Upload size does not match the media item", 400);
+		}
+		let receivedSize = 0;
+		const shouldHash = expectedSize > 0 && expectedSize <= MAX_CONTENT_HASH_BYTES;
+		let hashBytes = null;
+		const body = preserveKnownLength(requestBody.pipeThrough(new TransformStream({
+			transform(chunk, controller) {
+				const offset = receivedSize;
+				receivedSize += chunk.byteLength;
+				if (receivedSize > expectedSize) {
+					controller.error(new UploadBodyError("PAYLOAD_TOO_LARGE"));
+					return;
+				}
+				if (shouldHash && chunk.byteLength > 0) {
+					if (!hashBytes) hashBytes = new Uint8Array(Math.min(expectedSize, Math.max(INITIAL_HASH_BUFFER_BYTES, receivedSize)));
+					else if (receivedSize > hashBytes.byteLength) {
+						const grown = new Uint8Array(Math.min(expectedSize, Math.max(receivedSize, hashBytes.byteLength * 2)));
+						grown.set(hashBytes);
+						hashBytes = grown;
+					}
+					hashBytes.set(chunk, offset);
+				}
+				controller.enqueue(chunk);
+			},
+			flush(controller) {
+				if (receivedSize !== expectedSize) controller.error(new UploadBodyError("UPLOAD_SIZE_MISMATCH"));
+			}
+		})), expectedSize);
+		const attemptKey = createUploadAttemptKey(media.storageKey);
+		await repo.createUploadAttempt(id, attemptKey);
+		let attemptSize;
+		try {
+			attemptSize = (await emdash.storage.upload({
+				key: attemptKey,
+				body,
+				contentType: media.mimeType
+			})).size;
+		} catch (error) {
+			await removeUploadAttempt(emdash.storage, repo, attemptKey);
+			const bodyError = findUploadBodyError(error);
+			if (bodyError?.code === "PAYLOAD_TOO_LARGE") return apiError("PAYLOAD_TOO_LARGE", "Upload exceeds the expected size", 413);
+			if (bodyError?.code === "UPLOAD_SIZE_MISMATCH") return apiError("UPLOAD_SIZE_MISMATCH", "Upload size does not match the media item", 400);
+			return handleError(error, "Upload failed", "UPLOAD_ERROR");
+		}
+		if (receivedSize !== expectedSize || attemptSize !== expectedSize) {
+			await removeUploadAttempt(emdash.storage, repo, attemptKey);
+			return apiError("UPLOAD_SIZE_MISMATCH", "Upload size does not match the media item", 400);
+		}
+		const contentHash = hashBytes ? await computeContentHash(hashBytes) : void 0;
+		let published;
+		try {
+			published = await repo.publishPendingStorageKey(id, media.storageKey, attemptKey, contentHash);
+		} catch (error) {
+			try {
+				const current = await repo.findById(id);
+				if (current?.storageKey === attemptKey && (current.status === "pending" || current.status === "ready") && current.size === expectedSize && await getStoredSize(emdash.storage, attemptKey) === expectedSize) return apiSuccess({
+					uploaded: true,
+					size: expectedSize
+				});
+			} catch (verificationError) {
+				console.error("[media] upload publication verification failed:", verificationError);
+			}
+			return handleError(error, "Upload failed", "UPLOAD_ERROR");
+		}
+		if (!published) {
+			const current = await repo.findById(id);
+			if (current && (current.status === "pending" || current.status === "ready") && current.size === expectedSize && (current.storageKey === attemptKey || expectedSize === 0 || contentHash !== void 0 && current.contentHash === contentHash) && await getStoredSize(emdash.storage, current.storageKey) === expectedSize) {
+				if (current.storageKey !== attemptKey) await removeUploadAttempt(emdash.storage, repo, attemptKey);
+				return apiSuccess({
+					uploaded: true,
+					size: expectedSize
+				});
+			}
+			await removeUploadAttempt(emdash.storage, repo, attemptKey);
+			return apiError("INVALID_STATE", "Media item is no longer pending", 400);
+		}
+		await removeUploadAttempt(emdash.storage, repo, media.storageKey);
+		return apiSuccess({
+			uploaded: true,
+			size: receivedSize
+		});
+	} catch (error) {
+		return handleError(error, "Upload failed", "UPLOAD_ERROR");
+	}
+};
+
+//#endregion
+export { PUT, prerender };
+//# sourceMappingURL=upload.mjs.map

package/dist/astro/routes/api/media/_id_/upload.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/media/[id]/upload.ts"],"sourcesContent":["import type { APIRoute } from \"astro\";\nimport type { Storage } from \"emdash\";\nimport { ulid } from \"ulidx\";\n\nimport { requireOwnerPerm, requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { MediaRepository } from \"#db/repositories/media.js\";\nimport { normalizeMime } from \"#media/mime.js\";\nimport { removeUploadAttempt } from \"#media/upload-attempts.js\";\nimport { computeContentHash, MAX_CONTENT_HASH_BYTES } from \"#utils/hash.js\";\n\nexport const prerender = false;\n\nconst INITIAL_HASH_BUFFER_BYTES = 64 * 1024;\n\ntype FixedLengthStreamConstructor = new (\n\texpectedLength: number | bigint,\n) => TransformStream<ArrayBuffer | ArrayBufferView, Uint8Array>;\n\ndeclare const FixedLengthStream: FixedLengthStreamConstructor | undefined;\n\nclass UploadBodyError extends Error {\n\treadonly code: \"PAYLOAD_TOO_LARGE\" | \"UPLOAD_SIZE_MISMATCH\";\n\n\tconstructor(code: \"PAYLOAD_TOO_LARGE\" | \"UPLOAD_SIZE_MISMATCH\") {\n\t\tsuper(code);\n\t\tthis.code = code;\n\t}\n}\n\nfunction findUploadBodyError(error: unknown): UploadBodyError | null {\n\tlet current = error;\n\tfor (let depth = 0; depth < 5 && current instanceof Error; depth++) {\n\t\tif (current instanceof UploadBodyError) return current;\n\t\tcurrent = current.cause;\n\t}\n\treturn null;\n}\n\nfunction preserveKnownLength(\n\tbody: ReadableStream<Uint8Array>,\n\texpectedLength: number,\n): ReadableStream<Uint8Array> {\n\tif (typeof FixedLengthStream === \"undefined\") return body;\n\treturn body.pipeThrough(new FixedLengthStream(expectedLength));\n}\n\nfunction createUploadAttemptKey(key: string): string {\n\tconst pathSeparator = key.lastIndexOf(\"/\");\n\tconst extensionSeparator = key.lastIndexOf(\".\");\n\tif (extensionSeparator > pathSeparator) {\n\t\treturn `${key.slice(0, extensionSeparator)}.${ulid()}${key.slice(extensionSeparator)}`;\n\t}\n\treturn `${key}.${ulid()}`;\n}\n\nasync function getStoredSize(storage: Storage, key: string): Promise<number | null> {\n\tif (!(await storage.exists(key))) return null;\n\tconst download = await storage.download(key);\n\ttry {\n\t\treturn download.size;\n\t} finally {\n\t\ttry {\n\t\t\tawait download.body.cancel();\n\t\t} catch (error) {\n\t\t\tconsole.error(\"[media] upload download cancellation failed:\", error);\n\t\t}\n\t}\n}\n\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tconst denied = requirePerm(user, \"media:upload\");\n\tif (denied) return denied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Media ID is required\", 400);\n\t}\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!emdash.storage) {\n\t\treturn apiError(\"NO_STORAGE\", \"Storage not configured\", 500);\n\t}\n\n\ttry {\n\t\tconst repo = new MediaRepository(emdash.db);\n\t\tconst media = await repo.findById(id);\n\t\tif (!media) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Media item not found: ${id}`, 404);\n\t\t}\n\n\t\tif (media.status !== \"pending\") {\n\t\t\treturn apiError(\"INVALID_STATE\", `Media item is not pending: ${media.status}`, 400);\n\t\t}\n\n\t\tconst ownerDenied = requireOwnerPerm(\n\t\t\tuser,\n\t\t\tmedia.authorId ?? \"\",\n\t\t\t\"media:upload\",\n\t\t\t\"media:edit_any\",\n\t\t);\n\t\tif (ownerDenied) return ownerDenied;\n\n\t\tif (!Number.isSafeInteger(media.size) || media.size === null || media.size < 0) {\n\t\t\treturn apiError(\"INVALID_STATE\", \"Pending media item has no valid upload size\", 400);\n\t\t}\n\t\tconst expectedSize = media.size;\n\n\t\tconst contentType = request.headers.get(\"Content-Type\");\n\t\tif (!contentType || normalizeMime(contentType) !== media.mimeType) {\n\t\t\treturn apiError(\"INVALID_TYPE\", \"Upload content type does not match the media item\", 400);\n\t\t}\n\n\t\tconst requestBody =\n\t\t\trequest.body ??\n\t\t\t(expectedSize === 0\n\t\t\t\t? new ReadableStream<Uint8Array>({\n\t\t\t\t\t\tstart(controller) {\n\t\t\t\t\t\t\tcontroller.close();\n\t\t\t\t\t\t},\n\t\t\t\t\t})\n\t\t\t\t: null);\n\t\tif (!requestBody) {\n\t\t\treturn apiError(\"NO_FILE\", \"No file provided\", 400);\n\t\t}\n\n\t\tconst contentLength = request.headers.get(\"Content-Length\");\n\t\tif (contentLength !== null) {\n\t\t\tconst declaredSize = Number(contentLength);\n\t\t\tif (!Number.isSafeInteger(declaredSize) || declaredSize < 0) {\n\t\t\t\treturn apiError(\"INVALID_REQUEST\", \"Invalid Content-Length header\", 400);\n\t\t\t}\n\t\t\tif (declaredSize > expectedSize) {\n\t\t\t\treturn apiError(\"PAYLOAD_TOO_LARGE\", \"Upload exceeds the expected size\", 413);\n\t\t\t}\n\t\t\tif (declaredSize !== expectedSize) {\n\t\t\t\treturn apiError(\"UPLOAD_SIZE_MISMATCH\", \"Upload size does not match the media item\", 400);\n\t\t\t}\n\t\t}\n\n\t\tlet receivedSize = 0;\n\t\tconst shouldHash = expectedSize > 0 && expectedSize <= MAX_CONTENT_HASH_BYTES;\n\t\tlet hashBytes: Uint8Array | null = null;\n\t\tconst checkedBody = requestBody.pipeThrough(\n\t\t\tnew TransformStream<Uint8Array, Uint8Array>({\n\t\t\t\ttransform(chunk, controller) {\n\t\t\t\t\tconst offset = receivedSize;\n\t\t\t\t\treceivedSize += chunk.byteLength;\n\t\t\t\t\tif (receivedSize > expectedSize) {\n\t\t\t\t\t\tcontroller.error(new UploadBodyError(\"PAYLOAD_TOO_LARGE\"));\n\t\t\t\t\t\treturn;\n\t\t\t\t\t}\n\t\t\t\t\tif (shouldHash && chunk.byteLength > 0) {\n\t\t\t\t\t\tif (!hashBytes) {\n\t\t\t\t\t\t\thashBytes = new Uint8Array(\n\t\t\t\t\t\t\t\tMath.min(expectedSize, Math.max(INITIAL_HASH_BUFFER_BYTES, receivedSize)),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t} else if (receivedSize > hashBytes.byteLength) {\n\t\t\t\t\t\t\tconst grown = new Uint8Array(\n\t\t\t\t\t\t\t\tMath.min(expectedSize, Math.max(receivedSize, hashBytes.byteLength * 2)),\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\tgrown.set(hashBytes);\n\t\t\t\t\t\t\thashBytes = grown;\n\t\t\t\t\t\t}\n\t\t\t\t\t\thashBytes.set(chunk, offset);\n\t\t\t\t\t}\n\t\t\t\t\tcontroller.enqueue(chunk);\n\t\t\t\t},\n\t\t\t\tflush(controller) {\n\t\t\t\t\tif (receivedSize !== expectedSize) {\n\t\t\t\t\t\tcontroller.error(new UploadBodyError(\"UPLOAD_SIZE_MISMATCH\"));\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t}),\n\t\t);\n\t\tconst body = preserveKnownLength(checkedBody, expectedSize);\n\n\t\tconst attemptKey = createUploadAttemptKey(media.storageKey);\n\t\tawait repo.createUploadAttempt(id, attemptKey);\n\n\t\tlet attemptSize: number;\n\t\ttry {\n\t\t\tconst result = await emdash.storage.upload({\n\t\t\t\tkey: attemptKey,\n\t\t\t\tbody,\n\t\t\t\tcontentType: media.mimeType,\n\t\t\t});\n\t\t\tattemptSize = result.size;\n\t\t} catch (error) {\n\t\t\tawait removeUploadAttempt(emdash.storage, repo, attemptKey);\n\t\t\tconst bodyError = findUploadBodyError(error);\n\t\t\tif (bodyError?.code === \"PAYLOAD_TOO_LARGE\") {\n\t\t\t\treturn apiError(\"PAYLOAD_TOO_LARGE\", \"Upload exceeds the expected size\", 413);\n\t\t\t}\n\t\t\tif (bodyError?.code === \"UPLOAD_SIZE_MISMATCH\") {\n\t\t\t\treturn apiError(\"UPLOAD_SIZE_MISMATCH\", \"Upload size does not match the media item\", 400);\n\t\t\t}\n\t\t\treturn handleError(error, \"Upload failed\", \"UPLOAD_ERROR\");\n\t\t}\n\n\t\tif (receivedSize !== expectedSize || attemptSize !== expectedSize) {\n\t\t\tawait removeUploadAttempt(emdash.storage, repo, attemptKey);\n\t\t\treturn apiError(\"UPLOAD_SIZE_MISMATCH\", \"Upload size does not match the media item\", 400);\n\t\t}\n\t\tconst contentHash = hashBytes ? await computeContentHash(hashBytes) : undefined;\n\n\t\tlet published: boolean;\n\t\ttry {\n\t\t\tpublished = await repo.publishPendingStorageKey(\n\t\t\t\tid,\n\t\t\t\tmedia.storageKey,\n\t\t\t\tattemptKey,\n\t\t\t\tcontentHash,\n\t\t\t);\n\t\t} catch (error) {\n\t\t\ttry {\n\t\t\t\tconst current = await repo.findById(id);\n\t\t\t\tif (\n\t\t\t\t\tcurrent?.storageKey === attemptKey &&\n\t\t\t\t\t(current.status === \"pending\" || current.status === \"ready\") &&\n\t\t\t\t\tcurrent.size === expectedSize &&\n\t\t\t\t\t(await getStoredSize(emdash.storage, attemptKey)) === expectedSize\n\t\t\t\t) {\n\t\t\t\t\treturn apiSuccess({ uploaded: true, size: expectedSize });\n\t\t\t\t}\n\t\t\t} catch (verificationError) {\n\t\t\t\tconsole.error(\"[media] upload publication verification failed:\", verificationError);\n\t\t\t}\n\t\t\treturn handleError(error, \"Upload failed\", \"UPLOAD_ERROR\");\n\t\t}\n\n\t\tif (!published) {\n\t\t\tconst current = await repo.findById(id);\n\t\t\tif (\n\t\t\t\tcurrent &&\n\t\t\t\t(current.status === \"pending\" || current.status === \"ready\") &&\n\t\t\t\tcurrent.size === expectedSize &&\n\t\t\t\t(current.storageKey === attemptKey ||\n\t\t\t\t\texpectedSize === 0 ||\n\t\t\t\t\t(contentHash !== undefined && current.contentHash === contentHash)) &&\n\t\t\t\t(await getStoredSize(emdash.storage, current.storageKey)) === expectedSize\n\t\t\t) {\n\t\t\t\tif (current.storageKey !== attemptKey) {\n\t\t\t\t\tawait removeUploadAttempt(emdash.storage, repo, attemptKey);\n\t\t\t\t}\n\t\t\t\treturn apiSuccess({ uploaded: true, size: expectedSize });\n\t\t\t}\n\t\t\tawait removeUploadAttempt(emdash.storage, repo, attemptKey);\n\t\t\treturn apiError(\"INVALID_STATE\", \"Media item is no longer pending\", 400);\n\t\t}\n\n\t\tawait removeUploadAttempt(emdash.storage, repo, media.storageKey);\n\t\treturn apiSuccess({ uploaded: true, size: receivedSize });\n\t} catch (error) {\n\t\treturn handleError(error, \"Upload failed\", \"UPLOAD_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;AAWA,MAAa,YAAY;AAEzB,MAAM,4BAA4B,KAAK;AAQvC,IAAM,kBAAN,cAA8B,MAAM;CACnC,AAAS;CAET,YAAY,MAAoD;AAC/D,QAAM,KAAK;AACX,OAAK,OAAO;;;AAId,SAAS,oBAAoB,OAAwC;CACpE,IAAI,UAAU;AACd,MAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,mBAAmB,OAAO,SAAS;AACnE,MAAI,mBAAmB,gBAAiB,QAAO;AAC/C,YAAU,QAAQ;;AAEnB,QAAO;;AAGR,SAAS,oBACR,MACA,gBAC6B;AAC7B,KAAI,OAAO,sBAAsB,YAAa,QAAO;AACrD,QAAO,KAAK,YAAY,IAAI,kBAAkB,eAAe,CAAC;;AAG/D,SAAS,uBAAuB,KAAqB;CACpD,MAAM,gBAAgB,IAAI,YAAY,IAAI;CAC1C,MAAM,qBAAqB,IAAI,YAAY,IAAI;AAC/C,KAAI,qBAAqB,cACxB,QAAO,GAAG,IAAI,MAAM,GAAG,mBAAmB,CAAC,GAAG,MAAM,GAAG,IAAI,MAAM,mBAAmB;AAErF,QAAO,GAAG,IAAI,GAAG,MAAM;;AAGxB,eAAe,cAAc,SAAkB,KAAqC;AACnF,KAAI,CAAE,MAAM,QAAQ,OAAO,IAAI,CAAG,QAAO;CACzC,MAAM,WAAW,MAAM,QAAQ,SAAS,IAAI;AAC5C,KAAI;AACH,SAAO,SAAS;WACP;AACT,MAAI;AACH,SAAM,SAAS,KAAK,QAAQ;WACpB,OAAO;AACf,WAAQ,MAAM,gDAAgD,MAAM;;;;AAKvE,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAEf,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,wBAAwB,IAAI;AAGhE,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,OAAO,QACX,QAAO,SAAS,cAAc,0BAA0B,IAAI;AAG7D,KAAI;EACH,MAAM,OAAO,IAAI,gBAAgB,OAAO,GAAG;EAC3C,MAAM,QAAQ,MAAM,KAAK,SAAS,GAAG;AACrC,MAAI,CAAC,MACJ,QAAO,SAAS,aAAa,yBAAyB,MAAM,IAAI;AAGjE,MAAI,MAAM,WAAW,UACpB,QAAO,SAAS,iBAAiB,8BAA8B,MAAM,UAAU,IAAI;EAGpF,MAAM,cAAc,iBACnB,MACA,MAAM,YAAY,IAClB,gBACA,iBACA;AACD,MAAI,YAAa,QAAO;AAExB,MAAI,CAAC,OAAO,cAAc,MAAM,KAAK,IAAI,MAAM,SAAS,QAAQ,MAAM,OAAO,EAC5E,QAAO,SAAS,iBAAiB,+CAA+C,IAAI;EAErF,MAAM,eAAe,MAAM;EAE3B,MAAM,cAAc,QAAQ,QAAQ,IAAI,eAAe;AACvD,MAAI,CAAC,eAAe,cAAc,YAAY,KAAK,MAAM,SACxD,QAAO,SAAS,gBAAgB,qDAAqD,IAAI;EAG1F,MAAM,cACL,QAAQ,SACP,iBAAiB,IACf,IAAI,eAA2B,EAC/B,MAAM,YAAY;AACjB,cAAW,OAAO;KAEnB,CAAC,GACD;AACJ,MAAI,CAAC,YACJ,QAAO,SAAS,WAAW,oBAAoB,IAAI;EAGpD,MAAM,gBAAgB,QAAQ,QAAQ,IAAI,iBAAiB;AAC3D,MAAI,kBAAkB,MAAM;GAC3B,MAAM,eAAe,OAAO,cAAc;AAC1C,OAAI,CAAC,OAAO,cAAc,aAAa,IAAI,eAAe,EACzD,QAAO,SAAS,mBAAmB,iCAAiC,IAAI;AAEzE,OAAI,eAAe,aAClB,QAAO,SAAS,qBAAqB,oCAAoC,IAAI;AAE9E,OAAI,iBAAiB,aACpB,QAAO,SAAS,wBAAwB,6CAA6C,IAAI;;EAI3F,IAAI,eAAe;EACnB,MAAM,aAAa,eAAe,KAAK,gBAAgB;EACvD,IAAI,YAA+B;EAiCnC,MAAM,OAAO,oBAhCO,YAAY,YAC/B,IAAI,gBAAwC;GAC3C,UAAU,OAAO,YAAY;IAC5B,MAAM,SAAS;AACf,oBAAgB,MAAM;AACtB,QAAI,eAAe,cAAc;AAChC,gBAAW,MAAM,IAAI,gBAAgB,oBAAoB,CAAC;AAC1D;;AAED,QAAI,cAAc,MAAM,aAAa,GAAG;AACvC,SAAI,CAAC,UACJ,aAAY,IAAI,WACf,KAAK,IAAI,cAAc,KAAK,IAAI,2BAA2B,aAAa,CAAC,CACzE;cACS,eAAe,UAAU,YAAY;MAC/C,MAAM,QAAQ,IAAI,WACjB,KAAK,IAAI,cAAc,KAAK,IAAI,cAAc,UAAU,aAAa,EAAE,CAAC,CACxE;AACD,YAAM,IAAI,UAAU;AACpB,kBAAY;;AAEb,eAAU,IAAI,OAAO,OAAO;;AAE7B,eAAW,QAAQ,MAAM;;GAE1B,MAAM,YAAY;AACjB,QAAI,iBAAiB,aACpB,YAAW,MAAM,IAAI,gBAAgB,uBAAuB,CAAC;;GAG/D,CAAC,CACF,EAC6C,aAAa;EAE3D,MAAM,aAAa,uBAAuB,MAAM,WAAW;AAC3D,QAAM,KAAK,oBAAoB,IAAI,WAAW;EAE9C,IAAI;AACJ,MAAI;AAMH,kBALe,MAAM,OAAO,QAAQ,OAAO;IAC1C,KAAK;IACL;IACA,aAAa,MAAM;IACnB,CAAC,EACmB;WACb,OAAO;AACf,SAAM,oBAAoB,OAAO,SAAS,MAAM,WAAW;GAC3D,MAAM,YAAY,oBAAoB,MAAM;AAC5C,OAAI,WAAW,SAAS,oBACvB,QAAO,SAAS,qBAAqB,oCAAoC,IAAI;AAE9E,OAAI,WAAW,SAAS,uBACvB,QAAO,SAAS,wBAAwB,6CAA6C,IAAI;AAE1F,UAAO,YAAY,OAAO,iBAAiB,eAAe;;AAG3D,MAAI,iBAAiB,gBAAgB,gBAAgB,cAAc;AAClE,SAAM,oBAAoB,OAAO,SAAS,MAAM,WAAW;AAC3D,UAAO,SAAS,wBAAwB,6CAA6C,IAAI;;EAE1F,MAAM,cAAc,YAAY,MAAM,mBAAmB,UAAU,GAAG;EAEtE,IAAI;AACJ,MAAI;AACH,eAAY,MAAM,KAAK,yBACtB,IACA,MAAM,YACN,YACA,YACA;WACO,OAAO;AACf,OAAI;IACH,MAAM,UAAU,MAAM,KAAK,SAAS,GAAG;AACvC,QACC,SAAS,eAAe,eACvB,QAAQ,WAAW,aAAa,QAAQ,WAAW,YACpD,QAAQ,SAAS,gBAChB,MAAM,cAAc,OAAO,SAAS,WAAW,KAAM,aAEtD,QAAO,WAAW;KAAE,UAAU;KAAM,MAAM;KAAc,CAAC;YAElD,mBAAmB;AAC3B,YAAQ,MAAM,mDAAmD,kBAAkB;;AAEpF,UAAO,YAAY,OAAO,iBAAiB,eAAe;;AAG3D,MAAI,CAAC,WAAW;GACf,MAAM,UAAU,MAAM,KAAK,SAAS,GAAG;AACvC,OACC,YACC,QAAQ,WAAW,aAAa,QAAQ,WAAW,YACpD,QAAQ,SAAS,iBAChB,QAAQ,eAAe,cACvB,iBAAiB,KAChB,gBAAgB,UAAa,QAAQ,gBAAgB,gBACtD,MAAM,cAAc,OAAO,SAAS,QAAQ,WAAW,KAAM,cAC7D;AACD,QAAI,QAAQ,eAAe,WAC1B,OAAM,oBAAoB,OAAO,SAAS,MAAM,WAAW;AAE5D,WAAO,WAAW;KAAE,UAAU;KAAM,MAAM;KAAc,CAAC;;AAE1D,SAAM,oBAAoB,OAAO,SAAS,MAAM,WAAW;AAC3D,UAAO,SAAS,iBAAiB,mCAAmC,IAAI;;AAGzE,QAAM,oBAAoB,OAAO,SAAS,MAAM,MAAM,WAAW;AACjE,SAAO,WAAW;GAAE,UAAU;GAAM,MAAM;GAAc,CAAC;UACjD,OAAO;AACf,SAAO,YAAY,OAAO,iBAAiB,eAAe"}

package/dist/astro/routes/api/media/_id_/usage.mjs

@@ -1,18 +1,20 @@
+import "../../../../../config-DyF3OKg_.mjs";
 import "../../../../../base64-B-PsqheR.mjs";
-import "../../../../../types-CrRUFdej.mjs";
-import "../../../../../media-its1WLYv.mjs";
-import "../../../../../content-refresh-CPMSauD3.mjs";
-import { t as handleMediaUsageDetails } from "../../../../../media-usage-DPQ3K4xB.mjs";
-import { a as unwrapResult, t as apiError } from "../../../../../error-DJ98TRbQ.mjs";
-import { i as parseQuery, t as isParseError } from "../../../../../parse-53zyxlpv.mjs";
-import { S as mediaUsageDetailsQuery } from "../../../../../media-BJ6SRY3g.mjs";
-import "../../../../../redirects-D457qwt0.mjs";
-import "../../../../../relations-CZMpBqEd.mjs";
-import "../../../../../status-COfycGIU.mjs";
+import "../../../../../types-Cd8iuS1J.mjs";
+import "../../../../../media-BP7S-nHT.mjs";
+import "../../../../../hash-Cg0TXJPV.mjs";
+import "../../../../../content-refresh-Xw7aKmou.mjs";
+import { t as handleMediaUsageDetails } from "../../../../../media-usage-BlxfTkN0.mjs";
+import { a as unwrapResult, t as apiError } from "../../../../../error-oh_9i6bR.mjs";
+import { i as parseQuery, t as isParseError } from "../../../../../parse-CJKNuewM.mjs";
+import { C as mediaUsageDetailsQuery } from "../../../../../media-OhYL-7Io.mjs";
+import "../../../../../redirects-G8wAhWAf.mjs";
+import "../../../../../relations-Bw_E1TXo.mjs";
+import "../../../../../status-CIsmlC1E.mjs";
 import "../../../../../api/schemas/index.mjs";
-import "../../../../../api-tokens-Cvmixds7.mjs";
-import { r as requirePerm } from "../../../../../authorize-6WPZa1xZ.mjs";
-import { t as requireScope } from "../../../../../scopes-DTIkIaGA.mjs";
+import "../../../../../api-tokens-Dai9dND0.mjs";
+import { r as requirePerm } from "../../../../../authorize-qRhWQnel.mjs";
+import { t as requireScope } from "../../../../../scopes-CNJVT5i5.mjs";
 
 //#region src/astro/routes/api/media/[id]/usage.ts
 const prerender = false;

package/dist/astro/routes/api/media/_id_/usage.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"usage.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/media/[id]/usage.ts"],"sourcesContent":["import type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, unwrapResult } from \"#api/error.js\";\nimport { handleMediaUsageDetails } from \"#api/handlers/media-usage.js\";\nimport { isParseError, parseQuery } from \"#api/parse.js\";\nimport { mediaUsageDetailsQuery } from \"#api/schemas.js\";\nimport { requireScope } from \"#auth/scopes.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tconst mediaDenied = requirePerm(user, \"media:read\");\n\tif (mediaDenied) return mediaDenied;\n\tconst contentDenied = requirePerm(user, \"content:read_drafts\");\n\tif (contentDenied) return contentDenied;\n\tconst scopeDenied = requireScope(locals, \"admin\");\n\tif (scopeDenied) return scopeDenied;\n\n\tconst { id } = params;\n\tif (!id) return apiError(\"INVALID_REQUEST\", \"Media ID required\", 400);\n\tif (!emdash?.db) return apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\n\tconst query = parseQuery(new URL(request.url), mediaUsageDetailsQuery);\n\tif (isParseError(query)) return query;\n\n\treturn unwrapResult(await handleMediaUsageDetails(emdash.db, id, query));\n};\n"],"mappings":";;;;;;;;;;;;;;;;;AASA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CAEzB,MAAM,cAAc,YAAY,MAAM,aAAa;AACnD,KAAI,YAAa,QAAO;CACxB,MAAM,gBAAgB,YAAY,MAAM,sBAAsB;AAC9D,KAAI,cAAe,QAAO;CAC1B,MAAM,cAAc,aAAa,QAAQ,QAAQ;AACjD,KAAI,YAAa,QAAO;CAExB,MAAM,EAAE,OAAO;AACf,KAAI,CAAC,GAAI,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AACrE,KAAI,CAAC,QAAQ,GAAI,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAEpF,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,uBAAuB;AACtE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,QAAO,aAAa,MAAM,wBAAwB,OAAO,IAAI,IAAI,MAAM,CAAC"}
+{"version":3,"file":"usage.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/media/[id]/usage.ts"],"sourcesContent":["import type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, unwrapResult } from \"#api/error.js\";\nimport { handleMediaUsageDetails } from \"#api/handlers/media-usage.js\";\nimport { isParseError, parseQuery } from \"#api/parse.js\";\nimport { mediaUsageDetailsQuery } from \"#api/schemas.js\";\nimport { requireScope } from \"#auth/scopes.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tconst mediaDenied = requirePerm(user, \"media:read\");\n\tif (mediaDenied) return mediaDenied;\n\tconst contentDenied = requirePerm(user, \"content:read_drafts\");\n\tif (contentDenied) return contentDenied;\n\tconst scopeDenied = requireScope(locals, \"admin\");\n\tif (scopeDenied) return scopeDenied;\n\n\tconst { id } = params;\n\tif (!id) return apiError(\"INVALID_REQUEST\", \"Media ID required\", 400);\n\tif (!emdash?.db) return apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\n\tconst query = parseQuery(new URL(request.url), mediaUsageDetailsQuery);\n\tif (isParseError(query)) return query;\n\n\treturn unwrapResult(await handleMediaUsageDetails(emdash.db, id, query));\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;AASA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CAEzB,MAAM,cAAc,YAAY,MAAM,aAAa;AACnD,KAAI,YAAa,QAAO;CACxB,MAAM,gBAAgB,YAAY,MAAM,sBAAsB;AAC9D,KAAI,cAAe,QAAO;CAC1B,MAAM,cAAc,aAAa,QAAQ,QAAQ;AACjD,KAAI,YAAa,QAAO;CAExB,MAAM,EAAE,OAAO;AACf,KAAI,CAAC,GAAI,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AACrE,KAAI,CAAC,QAAQ,GAAI,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAEpF,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,uBAAuB;AACtE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,QAAO,aAAa,MAAM,wBAAwB,OAAO,IAAI,IAAI,MAAM,CAAC"}

package/dist/astro/routes/api/media/_id_.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"_id_.d.mts","names":[],"sources":["../../../../../src/astro/routes/api/media/[id].ts"],"mappings":";;;cAgBa,SAAA;;;;cAKA,GAAA,EAAK,QAAA;AAkClB;;;;;AAAA,cAAa,GAAA,EAAK,QAAA;;;;;;cAkDL,MAAA,EAAQ,QAAA"}
+{"version":3,"file":"_id_.d.mts","names":[],"sources":["../../../../../src/astro/routes/api/media/[id].ts"],"mappings":";;;cAkBa,SAAA;;;;cAKA,GAAA,EAAK,QAAA;AAkClB;;;;;AAAA,cAAa,GAAA,EAAK,QAAA;;;;;;cAkDL,MAAA,EAAQ,QAAA"}

package/dist/astro/routes/api/media/_id_.mjs

@@ -1,16 +1,19 @@
+import "../../../../config-DyF3OKg_.mjs";
 import "../../../../base64-B-PsqheR.mjs";
-import "../../../../types-CrRUFdej.mjs";
-import "../../../../media-its1WLYv.mjs";
-import "../../../../content-refresh-CPMSauD3.mjs";
-import { r as handleMediaUsageSummaries } from "../../../../media-usage-DPQ3K4xB.mjs";
-import { a as unwrapResult, n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DJ98TRbQ.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-53zyxlpv.mjs";
-import { _ as mediaUpdateBody, s as mediaGetQuery } from "../../../../media-BJ6SRY3g.mjs";
-import "../../../../redirects-D457qwt0.mjs";
-import "../../../../relations-CZMpBqEd.mjs";
-import "../../../../status-COfycGIU.mjs";
+import "../../../../types-Cd8iuS1J.mjs";
+import { t as MediaRepository } from "../../../../media-BP7S-nHT.mjs";
+import "../../../../hash-Cg0TXJPV.mjs";
+import "../../../../content-refresh-Xw7aKmou.mjs";
+import { r as handleMediaUsageSummaries } from "../../../../media-usage-BlxfTkN0.mjs";
+import { a as unwrapResult, n as apiSuccess, r as handleError, t as apiError } from "../../../../error-oh_9i6bR.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-CJKNuewM.mjs";
+import { s as mediaGetQuery, v as mediaUpdateBody } from "../../../../media-OhYL-7Io.mjs";
+import "../../../../redirects-G8wAhWAf.mjs";
+import "../../../../relations-Bw_E1TXo.mjs";
+import "../../../../status-CIsmlC1E.mjs";
 import "../../../../api/schemas/index.mjs";
-import { n as requireOwnerPerm, r as requirePerm, t as canReadMediaUsageCount } from "../../../../authorize-6WPZa1xZ.mjs";
+import { t as removeUploadAttempt } from "../../../../upload-attempts-D8QAFLUJ.mjs";
+import { n as requireOwnerPerm, r as requirePerm, t as canReadMediaUsageCount } from "../../../../authorize-qRhWQnel.mjs";
 
 //#region src/astro/routes/api/media/[id].ts
 const prerender = false;
@@ -86,10 +89,14 @@ const DELETE = async ({ params, locals }) => {
 		const media = getResult.data.item;
 		const ownerDenied = requireOwnerPerm(user, media.authorId, "media:delete_own", "media:delete_any");
 		if (ownerDenied) return ownerDenied;
-		if (emdash.storage) try {
-			await emdash.storage.delete(media.storageKey);
-		} catch {}
-		return unwrapResult(await emdash.handleMediaDelete(id));
+		const result = await emdash.handleMediaDelete(id);
+		if (!result.success) return unwrapResult(result);
+		if (typeof result.data !== "object" || result.data === null || !("storageKey" in result.data) || typeof result.data.storageKey !== "string") return apiError("MEDIA_DELETE_ERROR", "Failed to delete media", 500);
+		if (emdash.storage) {
+			const repo = new MediaRepository(emdash.db);
+			await removeUploadAttempt(emdash.storage, repo, result.data.storageKey, { allowUntracked: true });
+		}
+		return apiSuccess({ deleted: true });
 	} catch (error) {
 		return handleError(error, "Failed to delete media", "MEDIA_DELETE_ERROR");
 	}

package/dist/astro/routes/api/media/_id_.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"_id_.mjs","names":[],"sources":["../../../../../src/astro/routes/api/media/[id].ts"],"sourcesContent":["/**\n * Single media item endpoint\n *\n * GET /_emdash/api/media/:id - Get media item\n * PUT /_emdash/api/media/:id - Update media metadata\n * DELETE /_emdash/api/media/:id - Delete media item\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { canReadMediaUsageCount, requireOwnerPerm, requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError, unwrapResult } from \"#api/error.js\";\nimport { handleMediaUsageSummaries } from \"#api/handlers/media-usage.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { mediaGetQuery, mediaUpdateBody } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\n/**\n * Get media item\n */\nexport const GET: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tconst readDenied = requirePerm(user, \"media:read\");\n\tif (readDenied) return readDenied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Media ID required\", 400);\n\t}\n\n\tif (!emdash?.handleMediaGet) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\tconst query = parseQuery(new URL(request.url), mediaGetQuery);\n\tif (isParseError(query)) return query;\n\n\tconst result = await emdash.handleMediaGet(id);\n\tif (!result.success || query.includeUsage !== \"1\") return unwrapResult(result);\n\n\tconst includeCount = canReadMediaUsageCount(user, locals.tokenScopes);\n\tconst usageResult = await handleMediaUsageSummaries(emdash.db, [id], { includeCount });\n\tif (!usageResult.success) return unwrapResult(usageResult);\n\tconst usage = usageResult.data[id];\n\tif (!usage) return apiError(\"MEDIA_USAGE_READ_ERROR\", \"Failed to read media usage\", 500);\n\n\treturn apiSuccess({ item: { ...result.data.item, usage } });\n};\n\n/**\n * Update media metadata\n *\n * Authors can edit their own media; editors+ can edit any.\n */\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\t// Minimum permission gate — ownership checked below\n\tconst editDenied = requirePerm(user, \"media:edit_own\");\n\tif (editDenied) return editDenied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Media ID required\", 400);\n\t}\n\n\tif (!emdash?.handleMediaGet || !emdash?.handleMediaUpdate) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Fetch media item for ownership check\n\t\tconst getResult = await emdash.handleMediaGet(id);\n\t\tif (!getResult.success || !getResult.data?.item) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"Media item not found\", 404);\n\t\t}\n\n\t\tconst media = getResult.data.item;\n\n\t\t// Ownership check: authors can edit own, editors+ can edit any\n\t\tconst ownerDenied = requireOwnerPerm(user, media.authorId, \"media:edit_own\", \"media:edit_any\");\n\t\tif (ownerDenied) return ownerDenied;\n\n\t\tconst body = await parseBody(request, mediaUpdateBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await emdash.handleMediaUpdate(id, {\n\t\t\talt: body.alt,\n\t\t\tcaption: body.caption,\n\t\t\twidth: body.width,\n\t\t\theight: body.height,\n\t\t});\n\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update media\", \"MEDIA_UPDATE_ERROR\");\n\t}\n};\n\n/**\n * Delete media item\n *\n * Authors can delete their own media; editors+ can delete any.\n */\nexport const DELETE: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\t// Minimum permission gate — ownership checked below\n\tconst deleteDenied = requirePerm(user, \"media:delete_own\");\n\tif (deleteDenied) return deleteDenied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Media ID required\", 400);\n\t}\n\n\tif (!emdash?.handleMediaGet || !emdash?.handleMediaDelete) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Fetch media item for ownership check and storage key\n\t\tconst getResult = await emdash.handleMediaGet(id);\n\t\tif (!getResult.success || !getResult.data?.item) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"Media item not found\", 404);\n\t\t}\n\n\t\tconst media = getResult.data.item;\n\n\t\t// Ownership check: authors can delete own, editors+ can delete any\n\t\tconst ownerDenied = requireOwnerPerm(\n\t\t\tuser,\n\t\t\tmedia.authorId,\n\t\t\t\"media:delete_own\",\n\t\t\t\"media:delete_any\",\n\t\t);\n\t\tif (ownerDenied) return ownerDenied;\n\n\t\t// Delete file from storage via the storage adapter\n\t\tif (emdash.storage) {\n\t\t\ttry {\n\t\t\t\tawait emdash.storage.delete(media.storageKey);\n\t\t\t} catch {\n\t\t\t\t// Best-effort — continue with database deletion\n\t\t\t}\n\t\t}\n\n\t\t// Delete from database — site-settings cache invalidation happens\n\t\t// in `EmDashRuntime.handleMediaDelete` so MCP/plugin paths inherit it.\n\t\tconst result = await emdash.handleMediaDelete(id);\n\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to delete media\", \"MEDIA_DELETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;AAgBA,MAAa,YAAY;;;;AAKzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAEf,MAAM,aAAa,YAAY,MAAM,aAAa;AAClD,KAAI,WAAY,QAAO;AAEvB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AAG7D,KAAI,CAAC,QAAQ,eACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAEpE,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,cAAc;AAC7D,KAAI,aAAa,MAAM,CAAE,QAAO;CAEhC,MAAM,SAAS,MAAM,OAAO,eAAe,GAAG;AAC9C,KAAI,CAAC,OAAO,WAAW,MAAM,iBAAiB,IAAK,QAAO,aAAa,OAAO;CAE9E,MAAM,eAAe,uBAAuB,MAAM,OAAO,YAAY;CACrE,MAAM,cAAc,MAAM,0BAA0B,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC;AACtF,KAAI,CAAC,YAAY,QAAS,QAAO,aAAa,YAAY;CAC1D,MAAM,QAAQ,YAAY,KAAK;AAC/B,KAAI,CAAC,MAAO,QAAO,SAAS,0BAA0B,8BAA8B,IAAI;AAExF,QAAO,WAAW,EAAE,MAAM;EAAE,GAAG,OAAO,KAAK;EAAM;EAAO,EAAE,CAAC;;;;;;;AAQ5D,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAGf,MAAM,aAAa,YAAY,MAAM,iBAAiB;AACtD,KAAI,WAAY,QAAO;AAEvB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AAG7D,KAAI,CAAC,QAAQ,kBAAkB,CAAC,QAAQ,kBACvC,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EAEH,MAAM,YAAY,MAAM,OAAO,eAAe,GAAG;AACjD,MAAI,CAAC,UAAU,WAAW,CAAC,UAAU,MAAM,KAC1C,QAAO,SAAS,aAAa,wBAAwB,IAAI;EAG1D,MAAM,QAAQ,UAAU,KAAK;EAG7B,MAAM,cAAc,iBAAiB,MAAM,MAAM,UAAU,kBAAkB,iBAAiB;AAC9F,MAAI,YAAa,QAAO;EAExB,MAAM,OAAO,MAAM,UAAU,SAAS,gBAAgB;AACtD,MAAI,aAAa,KAAK,CAAE,QAAO;AAS/B,SAAO,aAPQ,MAAM,OAAO,kBAAkB,IAAI;GACjD,KAAK,KAAK;GACV,SAAS,KAAK;GACd,OAAO,KAAK;GACZ,QAAQ,KAAK;GACb,CAAC,CAEyB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,0BAA0B,qBAAqB;;;;;;;;AAS3E,MAAa,SAAmB,OAAO,EAAE,QAAQ,aAAa;CAC7D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAGf,MAAM,eAAe,YAAY,MAAM,mBAAmB;AAC1D,KAAI,aAAc,QAAO;AAEzB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AAG7D,KAAI,CAAC,QAAQ,kBAAkB,CAAC,QAAQ,kBACvC,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EAEH,MAAM,YAAY,MAAM,OAAO,eAAe,GAAG;AACjD,MAAI,CAAC,UAAU,WAAW,CAAC,UAAU,MAAM,KAC1C,QAAO,SAAS,aAAa,wBAAwB,IAAI;EAG1D,MAAM,QAAQ,UAAU,KAAK;EAG7B,MAAM,cAAc,iBACnB,MACA,MAAM,UACN,oBACA,mBACA;AACD,MAAI,YAAa,QAAO;AAGxB,MAAI,OAAO,QACV,KAAI;AACH,SAAM,OAAO,QAAQ,OAAO,MAAM,WAAW;UACtC;AAST,SAAO,aAFQ,MAAM,OAAO,kBAAkB,GAAG,CAEtB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,0BAA0B,qBAAqB"}
+{"version":3,"file":"_id_.mjs","names":[],"sources":["../../../../../src/astro/routes/api/media/[id].ts"],"sourcesContent":["/**\n * Single media item endpoint\n *\n * GET /_emdash/api/media/:id - Get media item\n * PUT /_emdash/api/media/:id - Update media metadata\n * DELETE /_emdash/api/media/:id - Delete media item\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { canReadMediaUsageCount, requireOwnerPerm, requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError, unwrapResult } from \"#api/error.js\";\nimport { handleMediaUsageSummaries } from \"#api/handlers/media-usage.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { mediaGetQuery, mediaUpdateBody } from \"#api/schemas.js\";\nimport { MediaRepository } from \"#db/repositories/media.js\";\nimport { removeUploadAttempt } from \"#media/upload-attempts.js\";\n\nexport const prerender = false;\n\n/**\n * Get media item\n */\nexport const GET: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tconst readDenied = requirePerm(user, \"media:read\");\n\tif (readDenied) return readDenied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Media ID required\", 400);\n\t}\n\n\tif (!emdash?.handleMediaGet) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\tconst query = parseQuery(new URL(request.url), mediaGetQuery);\n\tif (isParseError(query)) return query;\n\n\tconst result = await emdash.handleMediaGet(id);\n\tif (!result.success || query.includeUsage !== \"1\") return unwrapResult(result);\n\n\tconst includeCount = canReadMediaUsageCount(user, locals.tokenScopes);\n\tconst usageResult = await handleMediaUsageSummaries(emdash.db, [id], { includeCount });\n\tif (!usageResult.success) return unwrapResult(usageResult);\n\tconst usage = usageResult.data[id];\n\tif (!usage) return apiError(\"MEDIA_USAGE_READ_ERROR\", \"Failed to read media usage\", 500);\n\n\treturn apiSuccess({ item: { ...result.data.item, usage } });\n};\n\n/**\n * Update media metadata\n *\n * Authors can edit their own media; editors+ can edit any.\n */\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\t// Minimum permission gate — ownership checked below\n\tconst editDenied = requirePerm(user, \"media:edit_own\");\n\tif (editDenied) return editDenied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Media ID required\", 400);\n\t}\n\n\tif (!emdash?.handleMediaGet || !emdash?.handleMediaUpdate) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Fetch media item for ownership check\n\t\tconst getResult = await emdash.handleMediaGet(id);\n\t\tif (!getResult.success || !getResult.data?.item) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"Media item not found\", 404);\n\t\t}\n\n\t\tconst media = getResult.data.item;\n\n\t\t// Ownership check: authors can edit own, editors+ can edit any\n\t\tconst ownerDenied = requireOwnerPerm(user, media.authorId, \"media:edit_own\", \"media:edit_any\");\n\t\tif (ownerDenied) return ownerDenied;\n\n\t\tconst body = await parseBody(request, mediaUpdateBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await emdash.handleMediaUpdate(id, {\n\t\t\talt: body.alt,\n\t\t\tcaption: body.caption,\n\t\t\twidth: body.width,\n\t\t\theight: body.height,\n\t\t});\n\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update media\", \"MEDIA_UPDATE_ERROR\");\n\t}\n};\n\n/**\n * Delete media item\n *\n * Authors can delete their own media; editors+ can delete any.\n */\nexport const DELETE: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\t// Minimum permission gate — ownership checked below\n\tconst deleteDenied = requirePerm(user, \"media:delete_own\");\n\tif (deleteDenied) return deleteDenied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Media ID required\", 400);\n\t}\n\n\tif (!emdash?.handleMediaGet || !emdash?.handleMediaDelete) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Fetch media item for ownership check and storage key\n\t\tconst getResult = await emdash.handleMediaGet(id);\n\t\tif (!getResult.success || !getResult.data?.item) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"Media item not found\", 404);\n\t\t}\n\n\t\tconst media = getResult.data.item;\n\n\t\t// Ownership check: authors can delete own, editors+ can delete any\n\t\tconst ownerDenied = requireOwnerPerm(\n\t\t\tuser,\n\t\t\tmedia.authorId,\n\t\t\t\"media:delete_own\",\n\t\t\t\"media:delete_any\",\n\t\t);\n\t\tif (ownerDenied) return ownerDenied;\n\n\t\t// Delete from database — site-settings cache invalidation happens\n\t\t// in `EmDashRuntime.handleMediaDelete` so MCP/plugin paths inherit it.\n\t\tconst result = await emdash.handleMediaDelete(id);\n\t\tif (!result.success) return unwrapResult(result);\n\t\tif (\n\t\t\ttypeof result.data !== \"object\" ||\n\t\t\tresult.data === null ||\n\t\t\t!(\"storageKey\" in result.data) ||\n\t\t\ttypeof result.data.storageKey !== \"string\"\n\t\t) {\n\t\t\treturn apiError(\"MEDIA_DELETE_ERROR\", \"Failed to delete media\", 500);\n\t\t}\n\n\t\tif (emdash.storage) {\n\t\t\tconst repo = new MediaRepository(emdash.db);\n\t\t\tawait removeUploadAttempt(emdash.storage, repo, result.data.storageKey, {\n\t\t\t\tallowUntracked: true,\n\t\t\t});\n\t\t}\n\n\t\treturn apiSuccess({ deleted: true });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to delete media\", \"MEDIA_DELETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;AAkBA,MAAa,YAAY;;;;AAKzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAEf,MAAM,aAAa,YAAY,MAAM,aAAa;AAClD,KAAI,WAAY,QAAO;AAEvB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AAG7D,KAAI,CAAC,QAAQ,eACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAEpE,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,cAAc;AAC7D,KAAI,aAAa,MAAM,CAAE,QAAO;CAEhC,MAAM,SAAS,MAAM,OAAO,eAAe,GAAG;AAC9C,KAAI,CAAC,OAAO,WAAW,MAAM,iBAAiB,IAAK,QAAO,aAAa,OAAO;CAE9E,MAAM,eAAe,uBAAuB,MAAM,OAAO,YAAY;CACrE,MAAM,cAAc,MAAM,0BAA0B,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC;AACtF,KAAI,CAAC,YAAY,QAAS,QAAO,aAAa,YAAY;CAC1D,MAAM,QAAQ,YAAY,KAAK;AAC/B,KAAI,CAAC,MAAO,QAAO,SAAS,0BAA0B,8BAA8B,IAAI;AAExF,QAAO,WAAW,EAAE,MAAM;EAAE,GAAG,OAAO,KAAK;EAAM;EAAO,EAAE,CAAC;;;;;;;AAQ5D,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAGf,MAAM,aAAa,YAAY,MAAM,iBAAiB;AACtD,KAAI,WAAY,QAAO;AAEvB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AAG7D,KAAI,CAAC,QAAQ,kBAAkB,CAAC,QAAQ,kBACvC,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EAEH,MAAM,YAAY,MAAM,OAAO,eAAe,GAAG;AACjD,MAAI,CAAC,UAAU,WAAW,CAAC,UAAU,MAAM,KAC1C,QAAO,SAAS,aAAa,wBAAwB,IAAI;EAG1D,MAAM,QAAQ,UAAU,KAAK;EAG7B,MAAM,cAAc,iBAAiB,MAAM,MAAM,UAAU,kBAAkB,iBAAiB;AAC9F,MAAI,YAAa,QAAO;EAExB,MAAM,OAAO,MAAM,UAAU,SAAS,gBAAgB;AACtD,MAAI,aAAa,KAAK,CAAE,QAAO;AAS/B,SAAO,aAPQ,MAAM,OAAO,kBAAkB,IAAI;GACjD,KAAK,KAAK;GACV,SAAS,KAAK;GACd,OAAO,KAAK;GACZ,QAAQ,KAAK;GACb,CAAC,CAEyB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,0BAA0B,qBAAqB;;;;;;;;AAS3E,MAAa,SAAmB,OAAO,EAAE,QAAQ,aAAa;CAC7D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAGf,MAAM,eAAe,YAAY,MAAM,mBAAmB;AAC1D,KAAI,aAAc,QAAO;AAEzB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AAG7D,KAAI,CAAC,QAAQ,kBAAkB,CAAC,QAAQ,kBACvC,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EAEH,MAAM,YAAY,MAAM,OAAO,eAAe,GAAG;AACjD,MAAI,CAAC,UAAU,WAAW,CAAC,UAAU,MAAM,KAC1C,QAAO,SAAS,aAAa,wBAAwB,IAAI;EAG1D,MAAM,QAAQ,UAAU,KAAK;EAG7B,MAAM,cAAc,iBACnB,MACA,MAAM,UACN,oBACA,mBACA;AACD,MAAI,YAAa,QAAO;EAIxB,MAAM,SAAS,MAAM,OAAO,kBAAkB,GAAG;AACjD,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAChD,MACC,OAAO,OAAO,SAAS,YACvB,OAAO,SAAS,QAChB,EAAE,gBAAgB,OAAO,SACzB,OAAO,OAAO,KAAK,eAAe,SAElC,QAAO,SAAS,sBAAsB,0BAA0B,IAAI;AAGrE,MAAI,OAAO,SAAS;GACnB,MAAM,OAAO,IAAI,gBAAgB,OAAO,GAAG;AAC3C,SAAM,oBAAoB,OAAO,SAAS,MAAM,OAAO,KAAK,YAAY,EACvE,gBAAgB,MAChB,CAAC;;AAGH,SAAO,WAAW,EAAE,SAAS,MAAM,CAAC;UAC5B,OAAO;AACf,SAAO,YAAY,OAAO,0BAA0B,qBAAqB"}

package/dist/astro/routes/api/media/file/_...key_.mjs

@@ -1,6 +1,6 @@
 import "../../../../../base64-B-PsqheR.mjs";
-import "../../../../../types-CrRUFdej.mjs";
-import { r as handleError, t as apiError } from "../../../../../error-DJ98TRbQ.mjs";
+import "../../../../../types-Cd8iuS1J.mjs";
+import { r as handleError, t as apiError } from "../../../../../error-oh_9i6bR.mjs";
 
 //#region src/astro/routes/api/media/file/[...key].ts
 const prerender = false;