emdash 0.32.0 → 0.33.0

package/dist/astro/routes/api/admin/users/_id_/send-recovery.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"send-recovery.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/admin/users/[id]/send-recovery.ts"],"sourcesContent":["/**\n * Send recovery link endpoint\n *\n * POST /_emdash/api/admin/users/:id/send-recovery\n *\n * Admin-initiated account recovery — sends a recovery magic link to the user's email.\n */\n\nimport { Role, sendMagicLink, type MagicLinkConfig } from \"@emdash-cms/auth\";\nimport { createKyselyAdapter } from \"@emdash-cms/auth/adapters/kysely\";\nimport type { APIRoute } from \"astro\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { getSiteBaseUrl } from \"#api/site-url.js\";\nimport { OptionsRepository } from \"#db/repositories/options.js\";\n\nexport const prerender = false;\n\nexport const POST: APIRoute = async ({ request, params, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"Database not configured\", 500);\n\t}\n\n\tif (!user || user.role < Role.ADMIN) {\n\t\treturn apiError(\"FORBIDDEN\", \"Admin privileges required\", 403);\n\t}\n\n\tconst { id } = params;\n\n\tif (!id) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"User ID required\", 400);\n\t}\n\n\ttry {\n\t\tconst adapter = createKyselyAdapter(emdash.db);\n\n\t\t// Verify target user exists\n\t\tconst targetUser = await adapter.getUserById(id);\n\t\tif (!targetUser) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"User not found\", 404);\n\t\t}\n\n\t\t// Check if email pipeline is available\n\t\tif (!emdash.email?.isAvailable()) {\n\t\t\treturn apiError(\n\t\t\t\t\"EMAIL_NOT_CONFIGURED\",\n\t\t\t\t\"Email is not configured. Recovery links require an email provider.\",\n\t\t\t\t503,\n\t\t\t);\n\t\t}\n\n\t\t// Build config using stored site URL (not request Host header)\n\t\tconst options = new OptionsRepository(emdash.db);\n\t\tconst baseUrl = await getSiteBaseUrl(emdash.db, request);\n\t\tconst siteName = (await options.get<string>(\"emdash:site_title\")) ?? \"EmDash\";\n\n\t\tconst config: MagicLinkConfig = {\n\t\t\tbaseUrl,\n\t\t\tsiteName,\n\t\t\temail: (message) => emdash.email!.send(message, \"system\"),\n\t\t};\n\n\t\t// Send recovery link\n\t\tawait sendMagicLink(config, adapter, targetUser.email, \"recovery\");\n\n\t\treturn apiSuccess({ success: true, message: \"Recovery link sent\" });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to send recovery link\", \"RECOVERY_SEND_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;AAgBA,MAAa,YAAY;AAEzB,MAAa,OAAiB,OAAO,EAAE,SAAS,QAAQ,aAAa;CACpE,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,2BAA2B,IAAI;AAGlE,KAAI,CAAC,QAAQ,KAAK,OAAO,KAAK,MAC7B,QAAO,SAAS,aAAa,6BAA6B,IAAI;CAG/D,MAAM,EAAE,OAAO;AAEf,KAAI,CAAC,GACJ,QAAO,SAAS,oBAAoB,oBAAoB,IAAI;AAG7D,KAAI;EACH,MAAM,UAAU,oBAAoB,OAAO,GAAG;EAG9C,MAAM,aAAa,MAAM,QAAQ,YAAY,GAAG;AAChD,MAAI,CAAC,WACJ,QAAO,SAAS,aAAa,kBAAkB,IAAI;AAIpD,MAAI,CAAC,OAAO,OAAO,aAAa,CAC/B,QAAO,SACN,wBACA,sEACA,IACA;EAIF,MAAM,UAAU,IAAI,kBAAkB,OAAO,GAAG;AAWhD,QAAM,cAP0B;GAC/B,SAJe,MAAM,eAAe,OAAO,IAAI,QAAQ;GAKvD,UAJiB,MAAM,QAAQ,IAAY,oBAAoB,IAAK;GAKpE,QAAQ,YAAY,OAAO,MAAO,KAAK,SAAS,SAAS;GACzD,EAG2B,SAAS,WAAW,OAAO,WAAW;AAElE,SAAO,WAAW;GAAE,SAAS;GAAM,SAAS;GAAsB,CAAC;UAC3D,OAAO;AACf,SAAO,YAAY,OAAO,gCAAgC,sBAAsB"}
+{"version":3,"file":"send-recovery.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/admin/users/[id]/send-recovery.ts"],"sourcesContent":["/**\n * Send recovery link endpoint\n *\n * POST /_emdash/api/admin/users/:id/send-recovery\n *\n * Admin-initiated account recovery — sends a recovery magic link to the user's email.\n */\n\nimport { Role, sendMagicLink, type MagicLinkConfig } from \"@emdash-cms/auth\";\nimport { createKyselyAdapter } from \"@emdash-cms/auth/adapters/kysely\";\nimport type { APIRoute } from \"astro\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { getSiteBaseUrl } from \"#api/site-url.js\";\nimport { OptionsRepository } from \"#db/repositories/options.js\";\n\nexport const prerender = false;\n\nexport const POST: APIRoute = async ({ request, params, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"Database not configured\", 500);\n\t}\n\n\tif (!user || user.role < Role.ADMIN) {\n\t\treturn apiError(\"FORBIDDEN\", \"Admin privileges required\", 403);\n\t}\n\n\tconst { id } = params;\n\n\tif (!id) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"User ID required\", 400);\n\t}\n\n\ttry {\n\t\tconst adapter = createKyselyAdapter(emdash.db);\n\n\t\t// Verify target user exists\n\t\tconst targetUser = await adapter.getUserById(id);\n\t\tif (!targetUser) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"User not found\", 404);\n\t\t}\n\n\t\t// Check if email pipeline is available\n\t\tif (!emdash.email?.isAvailable()) {\n\t\t\treturn apiError(\n\t\t\t\t\"EMAIL_NOT_CONFIGURED\",\n\t\t\t\t\"Email is not configured. Recovery links require an email provider.\",\n\t\t\t\t503,\n\t\t\t);\n\t\t}\n\n\t\t// Build config using the configured site URL, stored option as fallback (not request Host header)\n\t\tconst options = new OptionsRepository(emdash.db);\n\t\tconst baseUrl = await getSiteBaseUrl(emdash.db, request, emdash.config);\n\t\tconst siteName = (await options.get<string>(\"emdash:site_title\")) ?? \"EmDash\";\n\n\t\tconst config: MagicLinkConfig = {\n\t\t\tbaseUrl,\n\t\t\tsiteName,\n\t\t\temail: (message) => emdash.email!.send(message, \"system\"),\n\t\t};\n\n\t\t// Send recovery link\n\t\tawait sendMagicLink(config, adapter, targetUser.email, \"recovery\");\n\n\t\treturn apiSuccess({ success: true, message: \"Recovery link sent\" });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to send recovery link\", \"RECOVERY_SEND_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;AAgBA,MAAa,YAAY;AAEzB,MAAa,OAAiB,OAAO,EAAE,SAAS,QAAQ,aAAa;CACpE,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,2BAA2B,IAAI;AAGlE,KAAI,CAAC,QAAQ,KAAK,OAAO,KAAK,MAC7B,QAAO,SAAS,aAAa,6BAA6B,IAAI;CAG/D,MAAM,EAAE,OAAO;AAEf,KAAI,CAAC,GACJ,QAAO,SAAS,oBAAoB,oBAAoB,IAAI;AAG7D,KAAI;EACH,MAAM,UAAU,oBAAoB,OAAO,GAAG;EAG9C,MAAM,aAAa,MAAM,QAAQ,YAAY,GAAG;AAChD,MAAI,CAAC,WACJ,QAAO,SAAS,aAAa,kBAAkB,IAAI;AAIpD,MAAI,CAAC,OAAO,OAAO,aAAa,CAC/B,QAAO,SACN,wBACA,sEACA,IACA;EAIF,MAAM,UAAU,IAAI,kBAAkB,OAAO,GAAG;AAWhD,QAAM,cAP0B;GAC/B,SAJe,MAAM,eAAe,OAAO,IAAI,SAAS,OAAO,OAAO;GAKtE,UAJiB,MAAM,QAAQ,IAAY,oBAAoB,IAAK;GAKpE,QAAQ,YAAY,OAAO,MAAO,KAAK,SAAS,SAAS;GACzD,EAG2B,SAAS,WAAW,OAAO,WAAW;AAElE,SAAO,WAAW;GAAE,SAAS;GAAM,SAAS;GAAsB,CAAC;UAC3D,OAAO;AACf,SAAO,YAAY,OAAO,gCAAgC,sBAAsB"}

package/dist/astro/routes/api/admin/users/index.mjs

@@ -1,11 +1,11 @@
 import "../../../../../base64-B-PsqheR.mjs";
-import "../../../../../types-XrQQ-Aex.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DmmN74gW.mjs";
-import { i as parseQuery, t as isParseError } from "../../../../../parse-BL49yb9D.mjs";
-import "../../../../../media-DWIzoVFL.mjs";
-import { D as usersListQuery } from "../../../../../redirects-BOn2DIUs.mjs";
-import "../../../../../relations-C4duJnwI.mjs";
-import "../../../../../status-COfycGIU.mjs";
+import "../../../../../types-Cd8iuS1J.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-oh_9i6bR.mjs";
+import { i as parseQuery, t as isParseError } from "../../../../../parse-CJKNuewM.mjs";
+import "../../../../../media-OhYL-7Io.mjs";
+import { D as usersListQuery } from "../../../../../redirects-G8wAhWAf.mjs";
+import "../../../../../relations-Bw_E1TXo.mjs";
+import "../../../../../status-CIsmlC1E.mjs";
 import "../../../../../api/schemas/index.mjs";
 import { Role } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";

package/dist/astro/routes/api/auth/dev-bypass.mjs

@@ -1,11 +1,11 @@
-import { a as runMigrations } from "../../../../runner-BsI18UgP.mjs";
-import "../../../../dialect-helpers-DFwyWjTM.mjs";
+import { a as runMigrations } from "../../../../runner-BFTrkYhu.mjs";
+import "../../../../dialect-helpers-BSbfaO3F.mjs";
 import "../../../../config-DyF3OKg_.mjs";
 import "../../../../base64-B-PsqheR.mjs";
-import "../../../../types-XrQQ-Aex.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DmmN74gW.mjs";
-import { t as escapeHtml } from "../../../../escape-CdW31WsG.mjs";
-import { t as isSafeRedirect } from "../../../../redirect-CDgfv9vh.mjs";
+import "../../../../types-Cd8iuS1J.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-oh_9i6bR.mjs";
+import { t as escapeHtml } from "../../../../escape-CXps5F_v.mjs";
+import { t as isSafeRedirect } from "../../../../redirect-Egf2R9yP.mjs";
 import { ulid } from "ulidx";
 
 //#region src/astro/routes/api/auth/dev-bypass.ts

package/dist/astro/routes/api/auth/invite/accept.mjs

@@ -1,6 +1,6 @@
 import "../../../../../base64-B-PsqheR.mjs";
-import "../../../../../types-XrQQ-Aex.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DmmN74gW.mjs";
+import "../../../../../types-Cd8iuS1J.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-oh_9i6bR.mjs";
 import { InviteError, roleFromLevel, validateInvite } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 

package/dist/astro/routes/api/auth/invite/complete.mjs

@@ -1,17 +1,17 @@
 import "../../../../../base64-B-PsqheR.mjs";
-import "../../../../../types-XrQQ-Aex.mjs";
-import { t as OptionsRepository } from "../../../../../options-BlmBHTvX.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DmmN74gW.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-BL49yb9D.mjs";
-import "../../../../../media-DWIzoVFL.mjs";
-import "../../../../../redirects-BOn2DIUs.mjs";
-import { k as inviteCompleteBody } from "../../../../../relations-C4duJnwI.mjs";
-import "../../../../../status-COfycGIU.mjs";
+import "../../../../../types-Cd8iuS1J.mjs";
+import { t as OptionsRepository } from "../../../../../options-CBXIHUoT.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-oh_9i6bR.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-CJKNuewM.mjs";
+import "../../../../../media-OhYL-7Io.mjs";
+import "../../../../../redirects-G8wAhWAf.mjs";
+import { k as inviteCompleteBody } from "../../../../../relations-Bw_E1TXo.mjs";
+import "../../../../../status-CIsmlC1E.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { n as getPublicOrigin } from "../../../../../public-url-DSGTnJFw.mjs";
-import { n as validateAllowedOrigins, t as getConfiguredAllowedOrigins } from "../../../../../allowed-origins-CCEi9bPI.mjs";
-import { n as createChallengeStore } from "../../../../../challenge-store-BFzgFRog.mjs";
-import { t as getPasskeyConfig } from "../../../../../passkey-config-KMhgFjdQ.mjs";
+import { r as getPublicOrigin } from "../../../../../public-url-Ox9oOlgp.mjs";
+import { n as validateAllowedOrigins, t as getConfiguredAllowedOrigins } from "../../../../../allowed-origins-CG1pACtS.mjs";
+import { n as createChallengeStore } from "../../../../../challenge-store-D9VNKELo.mjs";
+import { t as getPasskeyConfig } from "../../../../../passkey-config-D-zrzMJI.mjs";
 import { InviteError, completeInvite } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 import { registerPasskey, verifyRegistrationResponse } from "@emdash-cms/auth/passkey";

package/dist/astro/routes/api/auth/invite/index.mjs

@@ -1,14 +1,14 @@
 import "../../../../../base64-B-PsqheR.mjs";
-import "../../../../../types-XrQQ-Aex.mjs";
-import { t as OptionsRepository } from "../../../../../options-BlmBHTvX.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DmmN74gW.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-BL49yb9D.mjs";
-import "../../../../../media-DWIzoVFL.mjs";
-import "../../../../../redirects-BOn2DIUs.mjs";
-import { A as inviteCreateBody } from "../../../../../relations-C4duJnwI.mjs";
-import "../../../../../status-COfycGIU.mjs";
+import "../../../../../types-Cd8iuS1J.mjs";
+import { t as OptionsRepository } from "../../../../../options-CBXIHUoT.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-oh_9i6bR.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-CJKNuewM.mjs";
+import "../../../../../media-OhYL-7Io.mjs";
+import "../../../../../redirects-G8wAhWAf.mjs";
+import { A as inviteCreateBody } from "../../../../../relations-Bw_E1TXo.mjs";
+import "../../../../../status-CIsmlC1E.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { t as getSiteBaseUrl } from "../../../../../site-url-8N3kSyVZ.mjs";
+import { t as getSiteBaseUrl } from "../../../../../site-url-I-lJ5kma.mjs";
 import { InviteError, Role, createInvite } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 
@@ -24,7 +24,7 @@ const POST = async ({ request, locals }) => {
 		if (isParseError(body)) return body;
 		const role = body.role ?? Role.AUTHOR;
 		const siteName = await new OptionsRepository(emdash.db).get("emdash:site_title") || "EmDash";
-		const baseUrl = await getSiteBaseUrl(emdash.db, request);
+		const baseUrl = await getSiteBaseUrl(emdash.db, request, emdash.config);
 		const emailSend = emdash.email?.isAvailable() ? (message) => emdash.email.send(message, "system") : void 0;
 		const result = await createInvite({
 			baseUrl,

package/dist/astro/routes/api/auth/invite/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/auth/invite/index.ts"],"sourcesContent":["/**\n * POST /_emdash/api/auth/invite\n *\n * Create an invite for a new user. Admin only.\n *\n * When an email provider is configured (via the plugin email pipeline),\n * the invite email is sent automatically.\n * When no provider is configured, returns the invite URL for the admin\n * to share manually (copy-link fallback).\n */\n\nimport type { APIRoute } from \"astro\";\n\nexport const prerender = false;\n\nimport { createInvite, InviteError, Role } from \"@emdash-cms/auth\";\nimport { createKyselyAdapter } from \"@emdash-cms/auth/adapters/kysely\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { inviteCreateBody } from \"#api/schemas.js\";\nimport { getSiteBaseUrl } from \"#api/site-url.js\";\nimport { OptionsRepository } from \"#db/repositories/options.js\";\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!user || user.role < Role.ADMIN) {\n\t\treturn apiError(\"FORBIDDEN\", \"Admin privileges required\", 403);\n\t}\n\n\tconst adapter = createKyselyAdapter(emdash.db);\n\n\ttry {\n\t\tconst body = await parseBody(request, inviteCreateBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Default to AUTHOR role if not specified (Zod validates the level)\n\t\tconst role = body.role ?? Role.AUTHOR;\n\n\t\t// Get site config for invite email\n\t\tconst options = new OptionsRepository(emdash.db);\n\t\tconst siteName = (await options.get<string>(\"emdash:site_title\")) || \"EmDash\";\n\n\t\t// Use stored site URL to prevent Host header spoofing in invite emails\n\t\tconst baseUrl = await getSiteBaseUrl(emdash.db, request);\n\n\t\t// Build email sender from the plugin pipeline (if available)\n\t\tconst emailSend = emdash.email?.isAvailable()\n\t\t\t? (message: { to: string; subject: string; text: string; html?: string }) =>\n\t\t\t\t\temdash.email!.send(message, \"system\")\n\t\t\t: undefined;\n\n\t\tconst result = await createInvite(\n\t\t\t{\n\t\t\t\tbaseUrl,\n\t\t\t\tsiteName,\n\t\t\t\temail: emailSend,\n\t\t\t},\n\t\t\tadapter,\n\t\t\tbody.email,\n\t\t\trole,\n\t\t\tuser.id,\n\t\t);\n\n\t\tif (emailSend) {\n\t\t\t// Email was sent\n\t\t\treturn apiSuccess({\n\t\t\t\tsuccess: true,\n\t\t\t\tmessage: `Invite sent to ${body.email}`,\n\t\t\t});\n\t\t}\n\n\t\t// No email provider — return the invite URL for manual sharing\n\t\treturn apiSuccess(\n\t\t\t{\n\t\t\t\tsuccess: true,\n\t\t\t\tmessage: \"Invite created. No email provider configured — share the link manually.\",\n\t\t\t\tinviteUrl: result.url,\n\t\t\t},\n\t\t\t200,\n\t\t);\n\t} catch (error) {\n\t\tif (error instanceof InviteError) {\n\t\t\tconst statusMap: Record<string, number> = {\n\t\t\t\tuser_exists: 409,\n\t\t\t\tinvalid_token: 400,\n\t\t\t\ttoken_expired: 400,\n\t\t\t};\n\t\t\treturn apiError(error.code.toUpperCase(), error.message, statusMap[error.code] ?? 400);\n\t\t}\n\n\t\treturn handleError(error, \"Failed to create invite\", \"INVITE_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;AAaA,MAAa,YAAY;AAWzB,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,QAAQ,KAAK,OAAO,KAAK,MAC7B,QAAO,SAAS,aAAa,6BAA6B,IAAI;CAG/D,MAAM,UAAU,oBAAoB,OAAO,GAAG;AAE9C,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,iBAAiB;AACvD,MAAI,aAAa,KAAK,CAAE,QAAO;EAG/B,MAAM,OAAO,KAAK,QAAQ,KAAK;EAI/B,MAAM,WAAY,MADF,IAAI,kBAAkB,OAAO,GAAG,CAChB,IAAY,oBAAoB,IAAK;EAGrE,MAAM,UAAU,MAAM,eAAe,OAAO,IAAI,QAAQ;EAGxD,MAAM,YAAY,OAAO,OAAO,aAAa,IACzC,YACD,OAAO,MAAO,KAAK,SAAS,SAAS,GACrC;EAEH,MAAM,SAAS,MAAM,aACpB;GACC;GACA;GACA,OAAO;GACP,EACD,SACA,KAAK,OACL,MACA,KAAK,GACL;AAED,MAAI,UAEH,QAAO,WAAW;GACjB,SAAS;GACT,SAAS,kBAAkB,KAAK;GAChC,CAAC;AAIH,SAAO,WACN;GACC,SAAS;GACT,SAAS;GACT,WAAW,OAAO;GAClB,EACD,IACA;UACO,OAAO;AACf,MAAI,iBAAiB,YAMpB,QAAO,SAAS,MAAM,KAAK,aAAa,EAAE,MAAM,SALN;GACzC,aAAa;GACb,eAAe;GACf,eAAe;GACf,CACkE,MAAM,SAAS,IAAI;AAGvF,SAAO,YAAY,OAAO,2BAA2B,sBAAsB"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/auth/invite/index.ts"],"sourcesContent":["/**\n * POST /_emdash/api/auth/invite\n *\n * Create an invite for a new user. Admin only.\n *\n * When an email provider is configured (via the plugin email pipeline),\n * the invite email is sent automatically.\n * When no provider is configured, returns the invite URL for the admin\n * to share manually (copy-link fallback).\n */\n\nimport type { APIRoute } from \"astro\";\n\nexport const prerender = false;\n\nimport { createInvite, InviteError, Role } from \"@emdash-cms/auth\";\nimport { createKyselyAdapter } from \"@emdash-cms/auth/adapters/kysely\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { inviteCreateBody } from \"#api/schemas.js\";\nimport { getSiteBaseUrl } from \"#api/site-url.js\";\nimport { OptionsRepository } from \"#db/repositories/options.js\";\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tif (!user || user.role < Role.ADMIN) {\n\t\treturn apiError(\"FORBIDDEN\", \"Admin privileges required\", 403);\n\t}\n\n\tconst adapter = createKyselyAdapter(emdash.db);\n\n\ttry {\n\t\tconst body = await parseBody(request, inviteCreateBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Default to AUTHOR role if not specified (Zod validates the level)\n\t\tconst role = body.role ?? Role.AUTHOR;\n\n\t\t// Get site config for invite email\n\t\tconst options = new OptionsRepository(emdash.db);\n\t\tconst siteName = (await options.get<string>(\"emdash:site_title\")) || \"EmDash\";\n\n\t\t// Use the configured site URL (stored option as fallback) to prevent Host header spoofing in invite emails\n\t\tconst baseUrl = await getSiteBaseUrl(emdash.db, request, emdash.config);\n\n\t\t// Build email sender from the plugin pipeline (if available)\n\t\tconst emailSend = emdash.email?.isAvailable()\n\t\t\t? (message: { to: string; subject: string; text: string; html?: string }) =>\n\t\t\t\t\temdash.email!.send(message, \"system\")\n\t\t\t: undefined;\n\n\t\tconst result = await createInvite(\n\t\t\t{\n\t\t\t\tbaseUrl,\n\t\t\t\tsiteName,\n\t\t\t\temail: emailSend,\n\t\t\t},\n\t\t\tadapter,\n\t\t\tbody.email,\n\t\t\trole,\n\t\t\tuser.id,\n\t\t);\n\n\t\tif (emailSend) {\n\t\t\t// Email was sent\n\t\t\treturn apiSuccess({\n\t\t\t\tsuccess: true,\n\t\t\t\tmessage: `Invite sent to ${body.email}`,\n\t\t\t});\n\t\t}\n\n\t\t// No email provider — return the invite URL for manual sharing\n\t\treturn apiSuccess(\n\t\t\t{\n\t\t\t\tsuccess: true,\n\t\t\t\tmessage: \"Invite created. No email provider configured — share the link manually.\",\n\t\t\t\tinviteUrl: result.url,\n\t\t\t},\n\t\t\t200,\n\t\t);\n\t} catch (error) {\n\t\tif (error instanceof InviteError) {\n\t\t\tconst statusMap: Record<string, number> = {\n\t\t\t\tuser_exists: 409,\n\t\t\t\tinvalid_token: 400,\n\t\t\t\ttoken_expired: 400,\n\t\t\t};\n\t\t\treturn apiError(error.code.toUpperCase(), error.message, statusMap[error.code] ?? 400);\n\t\t}\n\n\t\treturn handleError(error, \"Failed to create invite\", \"INVITE_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;AAaA,MAAa,YAAY;AAWzB,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI,CAAC,QAAQ,KAAK,OAAO,KAAK,MAC7B,QAAO,SAAS,aAAa,6BAA6B,IAAI;CAG/D,MAAM,UAAU,oBAAoB,OAAO,GAAG;AAE9C,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,iBAAiB;AACvD,MAAI,aAAa,KAAK,CAAE,QAAO;EAG/B,MAAM,OAAO,KAAK,QAAQ,KAAK;EAI/B,MAAM,WAAY,MADF,IAAI,kBAAkB,OAAO,GAAG,CAChB,IAAY,oBAAoB,IAAK;EAGrE,MAAM,UAAU,MAAM,eAAe,OAAO,IAAI,SAAS,OAAO,OAAO;EAGvE,MAAM,YAAY,OAAO,OAAO,aAAa,IACzC,YACD,OAAO,MAAO,KAAK,SAAS,SAAS,GACrC;EAEH,MAAM,SAAS,MAAM,aACpB;GACC;GACA;GACA,OAAO;GACP,EACD,SACA,KAAK,OACL,MACA,KAAK,GACL;AAED,MAAI,UAEH,QAAO,WAAW;GACjB,SAAS;GACT,SAAS,kBAAkB,KAAK;GAChC,CAAC;AAIH,SAAO,WACN;GACC,SAAS;GACT,SAAS;GACT,WAAW,OAAO;GAClB,EACD,IACA;UACO,OAAO;AACf,MAAI,iBAAiB,YAMpB,QAAO,SAAS,MAAM,KAAK,aAAa,EAAE,MAAM,SALN;GACzC,aAAa;GACb,eAAe;GACf,eAAe;GACf,CACkE,MAAM,SAAS,IAAI;AAGvF,SAAO,YAAY,OAAO,2BAA2B,sBAAsB"}

package/dist/astro/routes/api/auth/invite/register-options.mjs

@@ -1,16 +1,16 @@
 import "../../../../../base64-B-PsqheR.mjs";
-import "../../../../../types-XrQQ-Aex.mjs";
-import { t as OptionsRepository } from "../../../../../options-BlmBHTvX.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DmmN74gW.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-BL49yb9D.mjs";
-import "../../../../../media-DWIzoVFL.mjs";
-import "../../../../../redirects-BOn2DIUs.mjs";
-import { j as inviteRegisterOptionsBody } from "../../../../../relations-C4duJnwI.mjs";
-import "../../../../../status-COfycGIU.mjs";
+import "../../../../../types-Cd8iuS1J.mjs";
+import { t as OptionsRepository } from "../../../../../options-CBXIHUoT.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-oh_9i6bR.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-CJKNuewM.mjs";
+import "../../../../../media-OhYL-7Io.mjs";
+import "../../../../../redirects-G8wAhWAf.mjs";
+import { j as inviteRegisterOptionsBody } from "../../../../../relations-Bw_E1TXo.mjs";
+import "../../../../../status-CIsmlC1E.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { n as getPublicOrigin } from "../../../../../public-url-DSGTnJFw.mjs";
-import { n as createChallengeStore } from "../../../../../challenge-store-BFzgFRog.mjs";
-import { t as getPasskeyConfig } from "../../../../../passkey-config-KMhgFjdQ.mjs";
+import { r as getPublicOrigin } from "../../../../../public-url-Ox9oOlgp.mjs";
+import { n as createChallengeStore } from "../../../../../challenge-store-D9VNKELo.mjs";
+import { t as getPasskeyConfig } from "../../../../../passkey-config-D-zrzMJI.mjs";
 import { ulid } from "ulidx";
 import { InviteError, validateInvite } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";

package/dist/astro/routes/api/auth/logout.mjs

@@ -1,7 +1,7 @@
 import "../../../../base64-B-PsqheR.mjs";
-import "../../../../types-XrQQ-Aex.mjs";
-import { n as apiSuccess, r as handleError } from "../../../../error-DmmN74gW.mjs";
-import { t as isSafeRedirect } from "../../../../redirect-CDgfv9vh.mjs";
+import "../../../../types-Cd8iuS1J.mjs";
+import { n as apiSuccess, r as handleError } from "../../../../error-oh_9i6bR.mjs";
+import { t as isSafeRedirect } from "../../../../redirect-Egf2R9yP.mjs";
 
 //#region src/astro/routes/api/auth/logout.ts
 const prerender = false;

package/dist/astro/routes/api/auth/magic-link/send.mjs

@@ -1,16 +1,16 @@
 import "../../../../../base64-B-PsqheR.mjs";
-import "../../../../../types-XrQQ-Aex.mjs";
-import { t as OptionsRepository } from "../../../../../options-BlmBHTvX.mjs";
-import { n as apiSuccess, t as apiError } from "../../../../../error-DmmN74gW.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-BL49yb9D.mjs";
-import "../../../../../media-DWIzoVFL.mjs";
-import "../../../../../redirects-BOn2DIUs.mjs";
-import { M as magicLinkSendBody } from "../../../../../relations-C4duJnwI.mjs";
-import "../../../../../status-COfycGIU.mjs";
+import "../../../../../types-Cd8iuS1J.mjs";
+import { t as OptionsRepository } from "../../../../../options-CBXIHUoT.mjs";
+import { n as apiSuccess, t as apiError } from "../../../../../error-oh_9i6bR.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-CJKNuewM.mjs";
+import "../../../../../media-OhYL-7Io.mjs";
+import "../../../../../redirects-G8wAhWAf.mjs";
+import { M as magicLinkSendBody } from "../../../../../relations-Bw_E1TXo.mjs";
+import "../../../../../status-CIsmlC1E.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { t as getTrustedProxyHeaders } from "../../../../../trusted-proxy-CwjQj0YG.mjs";
-import { t as getSiteBaseUrl } from "../../../../../site-url-8N3kSyVZ.mjs";
-import { n as getClientIp, t as checkRateLimit } from "../../../../../rate-limit-Vkp9gQ1Y.mjs";
+import { t as getTrustedProxyHeaders } from "../../../../../trusted-proxy-D20_7fyX.mjs";
+import { t as getSiteBaseUrl } from "../../../../../site-url-I-lJ5kma.mjs";
+import { n as getClientIp, t as checkRateLimit } from "../../../../../rate-limit-kug6q99V.mjs";
 import { sendMagicLink } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 
@@ -30,7 +30,7 @@ const POST = async ({ request, locals }) => {
 		if (!emdash.email?.isAvailable()) return apiError("EMAIL_NOT_CONFIGURED", "Email is not configured. Magic link authentication requires an email provider.", 503);
 		const options = new OptionsRepository(emdash.db);
 		await sendMagicLink({
-			baseUrl: await getSiteBaseUrl(emdash.db, request),
+			baseUrl: await getSiteBaseUrl(emdash.db, request, emdash.config),
 			siteName: await options.get("emdash:site_title") ?? "EmDash",
 			email: (message) => emdash.email.send(message, "system")
 		}, createKyselyAdapter(emdash.db), body.email.toLowerCase());

package/dist/astro/routes/api/auth/magic-link/send.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"send.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/auth/magic-link/send.ts"],"sourcesContent":["/**\n * POST /_emdash/api/auth/magic-link/send\n *\n * Send a magic link email for passwordless authentication.\n * Always returns success to avoid revealing whether email exists.\n *\n * Rate limited: 3 requests per 5 minutes per IP.\n */\n\nimport type { APIRoute } from \"astro\";\n\nexport const prerender = false;\n\nimport { sendMagicLink, type MagicLinkConfig } from \"@emdash-cms/auth\";\nimport { createKyselyAdapter } from \"@emdash-cms/auth/adapters/kysely\";\n\nimport { apiError, apiSuccess } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { magicLinkSendBody } from \"#api/schemas.js\";\nimport { getSiteBaseUrl } from \"#api/site-url.js\";\nimport { checkRateLimit, getClientIp } from \"#auth/rate-limit.js\";\nimport { getTrustedProxyHeaders } from \"#auth/trusted-proxy.js\";\nimport { OptionsRepository } from \"#db/repositories/options.js\";\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Parse request body first — avoids consuming rate limit slots on\n\t\t// malformed requests and normalizes timing between rate-limited\n\t\t// and real paths (parse cost evens out the response time).\n\t\tconst body = await parseBody(request, magicLinkSendBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Rate limit: 3 requests per 300 seconds (5 minutes) per IP\n\t\tconst ip = getClientIp(request, getTrustedProxyHeaders(emdash.config));\n\t\tconst rateLimit = await checkRateLimit(emdash.db, ip, \"magic-link/send\", 3, 300);\n\t\tif (!rateLimit.allowed) {\n\t\t\t// Return success-shaped response to avoid revealing rate limit\n\t\t\t// (which could leak information about email enumeration attempts)\n\t\t\treturn apiSuccess({\n\t\t\t\tsuccess: true,\n\t\t\t\tmessage: \"If an account exists for this email, a magic link has been sent.\",\n\t\t\t});\n\t\t}\n\n\t\t// Check if email pipeline is available\n\t\tif (!emdash.email?.isAvailable()) {\n\t\t\treturn apiError(\n\t\t\t\t\"EMAIL_NOT_CONFIGURED\",\n\t\t\t\t\"Email is not configured. Magic link authentication requires an email provider.\",\n\t\t\t\t503,\n\t\t\t);\n\t\t}\n\n\t\t// Build magic link config using stored site URL (not request Host header)\n\t\tconst options = new OptionsRepository(emdash.db);\n\t\tconst baseUrl = await getSiteBaseUrl(emdash.db, request);\n\t\tconst siteName = (await options.get<string>(\"emdash:site_title\")) ?? \"EmDash\";\n\n\t\tconst config: MagicLinkConfig = {\n\t\t\tbaseUrl,\n\t\t\tsiteName,\n\t\t\temail: (message) => emdash.email!.send(message, \"system\"),\n\t\t};\n\n\t\t// Send magic link (silently fails if user doesn't exist)\n\t\tconst adapter = createKyselyAdapter(emdash.db);\n\t\tawait sendMagicLink(config, adapter, body.email.toLowerCase());\n\n\t\t// Always return success to avoid revealing if email exists\n\t\treturn apiSuccess({\n\t\t\tsuccess: true,\n\t\t\tmessage: \"If an account exists for this email, a magic link has been sent.\",\n\t\t});\n\t} catch (error) {\n\t\tconsole.error(\"Magic link send error:\", error);\n\n\t\t// Still return success to avoid revealing information\n\t\t// Log the error but don't expose it to the client\n\t\treturn apiSuccess({\n\t\t\tsuccess: true,\n\t\t\tmessage: \"If an account exists for this email, a magic link has been sent.\",\n\t\t});\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;AAWA,MAAa,YAAY;AAazB,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EAIH,MAAM,OAAO,MAAM,UAAU,SAAS,kBAAkB;AACxD,MAAI,aAAa,KAAK,CAAE,QAAO;EAG/B,MAAM,KAAK,YAAY,SAAS,uBAAuB,OAAO,OAAO,CAAC;AAEtE,MAAI,EADc,MAAM,eAAe,OAAO,IAAI,IAAI,mBAAmB,GAAG,IAAI,EACjE,QAGd,QAAO,WAAW;GACjB,SAAS;GACT,SAAS;GACT,CAAC;AAIH,MAAI,CAAC,OAAO,OAAO,aAAa,CAC/B,QAAO,SACN,wBACA,kFACA,IACA;EAIF,MAAM,UAAU,IAAI,kBAAkB,OAAO,GAAG;AAYhD,QAAM,cAR0B;GAC/B,SAJe,MAAM,eAAe,OAAO,IAAI,QAAQ;GAKvD,UAJiB,MAAM,QAAQ,IAAY,oBAAoB,IAAK;GAKpE,QAAQ,YAAY,OAAO,MAAO,KAAK,SAAS,SAAS;GACzD,EAGe,oBAAoB,OAAO,GAAG,EACT,KAAK,MAAM,aAAa,CAAC;AAG9D,SAAO,WAAW;GACjB,SAAS;GACT,SAAS;GACT,CAAC;UACM,OAAO;AACf,UAAQ,MAAM,0BAA0B,MAAM;AAI9C,SAAO,WAAW;GACjB,SAAS;GACT,SAAS;GACT,CAAC"}
+{"version":3,"file":"send.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/auth/magic-link/send.ts"],"sourcesContent":["/**\n * POST /_emdash/api/auth/magic-link/send\n *\n * Send a magic link email for passwordless authentication.\n * Always returns success to avoid revealing whether email exists.\n *\n * Rate limited: 3 requests per 5 minutes per IP.\n */\n\nimport type { APIRoute } from \"astro\";\n\nexport const prerender = false;\n\nimport { sendMagicLink, type MagicLinkConfig } from \"@emdash-cms/auth\";\nimport { createKyselyAdapter } from \"@emdash-cms/auth/adapters/kysely\";\n\nimport { apiError, apiSuccess } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { magicLinkSendBody } from \"#api/schemas.js\";\nimport { getSiteBaseUrl } from \"#api/site-url.js\";\nimport { checkRateLimit, getClientIp } from \"#auth/rate-limit.js\";\nimport { getTrustedProxyHeaders } from \"#auth/trusted-proxy.js\";\nimport { OptionsRepository } from \"#db/repositories/options.js\";\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Parse request body first — avoids consuming rate limit slots on\n\t\t// malformed requests and normalizes timing between rate-limited\n\t\t// and real paths (parse cost evens out the response time).\n\t\tconst body = await parseBody(request, magicLinkSendBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Rate limit: 3 requests per 300 seconds (5 minutes) per IP\n\t\tconst ip = getClientIp(request, getTrustedProxyHeaders(emdash.config));\n\t\tconst rateLimit = await checkRateLimit(emdash.db, ip, \"magic-link/send\", 3, 300);\n\t\tif (!rateLimit.allowed) {\n\t\t\t// Return success-shaped response to avoid revealing rate limit\n\t\t\t// (which could leak information about email enumeration attempts)\n\t\t\treturn apiSuccess({\n\t\t\t\tsuccess: true,\n\t\t\t\tmessage: \"If an account exists for this email, a magic link has been sent.\",\n\t\t\t});\n\t\t}\n\n\t\t// Check if email pipeline is available\n\t\tif (!emdash.email?.isAvailable()) {\n\t\t\treturn apiError(\n\t\t\t\t\"EMAIL_NOT_CONFIGURED\",\n\t\t\t\t\"Email is not configured. Magic link authentication requires an email provider.\",\n\t\t\t\t503,\n\t\t\t);\n\t\t}\n\n\t\t// Build magic link config using the configured site URL, stored option as fallback (not request Host header)\n\t\tconst options = new OptionsRepository(emdash.db);\n\t\tconst baseUrl = await getSiteBaseUrl(emdash.db, request, emdash.config);\n\t\tconst siteName = (await options.get<string>(\"emdash:site_title\")) ?? \"EmDash\";\n\n\t\tconst config: MagicLinkConfig = {\n\t\t\tbaseUrl,\n\t\t\tsiteName,\n\t\t\temail: (message) => emdash.email!.send(message, \"system\"),\n\t\t};\n\n\t\t// Send magic link (silently fails if user doesn't exist)\n\t\tconst adapter = createKyselyAdapter(emdash.db);\n\t\tawait sendMagicLink(config, adapter, body.email.toLowerCase());\n\n\t\t// Always return success to avoid revealing if email exists\n\t\treturn apiSuccess({\n\t\t\tsuccess: true,\n\t\t\tmessage: \"If an account exists for this email, a magic link has been sent.\",\n\t\t});\n\t} catch (error) {\n\t\tconsole.error(\"Magic link send error:\", error);\n\n\t\t// Still return success to avoid revealing information\n\t\t// Log the error but don't expose it to the client\n\t\treturn apiSuccess({\n\t\t\tsuccess: true,\n\t\t\tmessage: \"If an account exists for this email, a magic link has been sent.\",\n\t\t});\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;AAWA,MAAa,YAAY;AAazB,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EAIH,MAAM,OAAO,MAAM,UAAU,SAAS,kBAAkB;AACxD,MAAI,aAAa,KAAK,CAAE,QAAO;EAG/B,MAAM,KAAK,YAAY,SAAS,uBAAuB,OAAO,OAAO,CAAC;AAEtE,MAAI,EADc,MAAM,eAAe,OAAO,IAAI,IAAI,mBAAmB,GAAG,IAAI,EACjE,QAGd,QAAO,WAAW;GACjB,SAAS;GACT,SAAS;GACT,CAAC;AAIH,MAAI,CAAC,OAAO,OAAO,aAAa,CAC/B,QAAO,SACN,wBACA,kFACA,IACA;EAIF,MAAM,UAAU,IAAI,kBAAkB,OAAO,GAAG;AAYhD,QAAM,cAR0B;GAC/B,SAJe,MAAM,eAAe,OAAO,IAAI,SAAS,OAAO,OAAO;GAKtE,UAJiB,MAAM,QAAQ,IAAY,oBAAoB,IAAK;GAKpE,QAAQ,YAAY,OAAO,MAAO,KAAK,SAAS,SAAS;GACzD,EAGe,oBAAoB,OAAO,GAAG,EACT,KAAK,MAAM,aAAa,CAAC;AAG9D,SAAO,WAAW;GACjB,SAAS;GACT,SAAS;GACT,CAAC;UACM,OAAO;AACf,UAAQ,MAAM,0BAA0B,MAAM;AAI9C,SAAO,WAAW;GACjB,SAAS;GACT,SAAS;GACT,CAAC"}

package/dist/astro/routes/api/auth/magic-link/verify.mjs

@@ -1,7 +1,7 @@
 import "../../../../../base64-B-PsqheR.mjs";
-import "../../../../../types-XrQQ-Aex.mjs";
-import { t as apiError } from "../../../../../error-DmmN74gW.mjs";
-import { t as isSafeRedirect } from "../../../../../redirect-CDgfv9vh.mjs";
+import "../../../../../types-Cd8iuS1J.mjs";
+import { t as apiError } from "../../../../../error-oh_9i6bR.mjs";
+import { t as isSafeRedirect } from "../../../../../redirect-Egf2R9yP.mjs";
 import { MagicLinkError, verifyMagicLink } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 

package/dist/astro/routes/api/auth/me.mjs

@@ -1,12 +1,12 @@
 import "../../../../base64-B-PsqheR.mjs";
-import "../../../../types-XrQQ-Aex.mjs";
-import { t as UserRepository } from "../../../../user-BAumEmpA.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DmmN74gW.mjs";
-import { n as parseBody, t as isParseError } from "../../../../parse-BL49yb9D.mjs";
-import "../../../../media-DWIzoVFL.mjs";
-import "../../../../redirects-BOn2DIUs.mjs";
-import { O as authMeActionBody } from "../../../../relations-C4duJnwI.mjs";
-import "../../../../status-COfycGIU.mjs";
+import "../../../../types-Cd8iuS1J.mjs";
+import { t as UserRepository } from "../../../../user-DBrq4UVq.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-oh_9i6bR.mjs";
+import { n as parseBody, t as isParseError } from "../../../../parse-CJKNuewM.mjs";
+import "../../../../media-OhYL-7Io.mjs";
+import "../../../../redirects-G8wAhWAf.mjs";
+import { O as authMeActionBody } from "../../../../relations-Bw_E1TXo.mjs";
+import "../../../../status-CIsmlC1E.mjs";
 import "../../../../api/schemas/index.mjs";
 
 //#region src/astro/routes/api/auth/me.ts

package/dist/astro/routes/api/auth/mode.mjs

@@ -1,7 +1,7 @@
 import "../../../../base64-B-PsqheR.mjs";
-import "../../../../types-XrQQ-Aex.mjs";
-import { n as apiSuccess } from "../../../../error-DmmN74gW.mjs";
-import { t as getAuthMode } from "../../../../mode-fiXRMfeA.mjs";
+import "../../../../types-Cd8iuS1J.mjs";
+import { n as apiSuccess } from "../../../../error-oh_9i6bR.mjs";
+import { t as getAuthMode } from "../../../../mode-BWyTBe3I.mjs";
 
 //#region src/astro/routes/api/auth/mode.ts
 const prerender = false;

package/dist/astro/routes/api/auth/oauth/_provider_/callback.mjs

@@ -1,7 +1,7 @@
-import { t as OptionsRepository } from "../../../../../../options-BlmBHTvX.mjs";
-import { n as getPublicOrigin } from "../../../../../../public-url-DSGTnJFw.mjs";
-import { t as finalizeSetup } from "../../../../../../setup-complete-L7bMK2VI.mjs";
-import { t as createOAuthStateStore } from "../../../../../../oauth-state-store-DaRUwPWO.mjs";
+import { t as OptionsRepository } from "../../../../../../options-CBXIHUoT.mjs";
+import { r as getPublicOrigin } from "../../../../../../public-url-Ox9oOlgp.mjs";
+import { t as finalizeSetup } from "../../../../../../setup-complete-u50Qm8rY.mjs";
+import { t as createOAuthStateStore } from "../../../../../../oauth-state-store-B1ofdTiQ.mjs";
 import { OAuthError, Role, handleOAuthCallback } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 

package/dist/astro/routes/api/auth/oauth/_provider_.mjs

@@ -1,5 +1,5 @@
-import { n as getPublicOrigin } from "../../../../../public-url-DSGTnJFw.mjs";
-import { t as createOAuthStateStore } from "../../../../../oauth-state-store-DaRUwPWO.mjs";
+import { r as getPublicOrigin } from "../../../../../public-url-Ox9oOlgp.mjs";
+import { t as createOAuthStateStore } from "../../../../../oauth-state-store-B1ofdTiQ.mjs";
 import { createAuthorizationUrl } from "@emdash-cms/auth";
 
 //#region src/astro/routes/api/auth/oauth/[provider].ts

package/dist/astro/routes/api/auth/passkey/_id_.mjs

@@ -1,11 +1,11 @@
 import "../../../../../base64-B-PsqheR.mjs";
-import "../../../../../types-XrQQ-Aex.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DmmN74gW.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-BL49yb9D.mjs";
-import "../../../../../media-DWIzoVFL.mjs";
-import "../../../../../redirects-BOn2DIUs.mjs";
-import { I as passkeyRenameBody } from "../../../../../relations-C4duJnwI.mjs";
-import "../../../../../status-COfycGIU.mjs";
+import "../../../../../types-Cd8iuS1J.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-oh_9i6bR.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-CJKNuewM.mjs";
+import "../../../../../media-OhYL-7Io.mjs";
+import "../../../../../redirects-G8wAhWAf.mjs";
+import { I as passkeyRenameBody } from "../../../../../relations-Bw_E1TXo.mjs";
+import "../../../../../status-CIsmlC1E.mjs";
 import "../../../../../api/schemas/index.mjs";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 

package/dist/astro/routes/api/auth/passkey/index.mjs

@@ -1,6 +1,6 @@
 import "../../../../../base64-B-PsqheR.mjs";
-import "../../../../../types-XrQQ-Aex.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DmmN74gW.mjs";
+import "../../../../../types-Cd8iuS1J.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-oh_9i6bR.mjs";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 
 //#region src/astro/routes/api/auth/passkey/index.ts

package/dist/astro/routes/api/auth/passkey/options.mjs

@@ -1,18 +1,18 @@
 import "../../../../../base64-B-PsqheR.mjs";
-import "../../../../../types-XrQQ-Aex.mjs";
-import { t as OptionsRepository } from "../../../../../options-BlmBHTvX.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DmmN74gW.mjs";
-import { r as parseOptionalBody, t as isParseError } from "../../../../../parse-BL49yb9D.mjs";
-import "../../../../../media-DWIzoVFL.mjs";
-import "../../../../../redirects-BOn2DIUs.mjs";
-import { N as passkeyOptionsBody } from "../../../../../relations-C4duJnwI.mjs";
-import "../../../../../status-COfycGIU.mjs";
+import "../../../../../types-Cd8iuS1J.mjs";
+import { t as OptionsRepository } from "../../../../../options-CBXIHUoT.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-oh_9i6bR.mjs";
+import { r as parseOptionalBody, t as isParseError } from "../../../../../parse-CJKNuewM.mjs";
+import "../../../../../media-OhYL-7Io.mjs";
+import "../../../../../redirects-G8wAhWAf.mjs";
+import { N as passkeyOptionsBody } from "../../../../../relations-Bw_E1TXo.mjs";
+import "../../../../../status-CIsmlC1E.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { t as getTrustedProxyHeaders } from "../../../../../trusted-proxy-CwjQj0YG.mjs";
-import { n as getPublicOrigin } from "../../../../../public-url-DSGTnJFw.mjs";
-import { n as createChallengeStore, t as cleanupExpiredChallenges } from "../../../../../challenge-store-BFzgFRog.mjs";
-import { t as getPasskeyConfig } from "../../../../../passkey-config-KMhgFjdQ.mjs";
-import { n as getClientIp, r as rateLimitResponse, t as checkRateLimit } from "../../../../../rate-limit-Vkp9gQ1Y.mjs";
+import { t as getTrustedProxyHeaders } from "../../../../../trusted-proxy-D20_7fyX.mjs";
+import { r as getPublicOrigin } from "../../../../../public-url-Ox9oOlgp.mjs";
+import { n as createChallengeStore, t as cleanupExpiredChallenges } from "../../../../../challenge-store-D9VNKELo.mjs";
+import { t as getPasskeyConfig } from "../../../../../passkey-config-D-zrzMJI.mjs";
+import { n as getClientIp, r as rateLimitResponse, t as checkRateLimit } from "../../../../../rate-limit-kug6q99V.mjs";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 import { generateAuthenticationOptions } from "@emdash-cms/auth/passkey";
 

package/dist/astro/routes/api/auth/passkey/register/options.mjs

@@ -1,16 +1,16 @@
 import "../../../../../../base64-B-PsqheR.mjs";
-import "../../../../../../types-XrQQ-Aex.mjs";
-import { t as OptionsRepository } from "../../../../../../options-BlmBHTvX.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-DmmN74gW.mjs";
-import { r as parseOptionalBody, t as isParseError } from "../../../../../../parse-BL49yb9D.mjs";
-import "../../../../../../media-DWIzoVFL.mjs";
-import "../../../../../../redirects-BOn2DIUs.mjs";
-import { P as passkeyRegisterOptionsBody } from "../../../../../../relations-C4duJnwI.mjs";
-import "../../../../../../status-COfycGIU.mjs";
+import "../../../../../../types-Cd8iuS1J.mjs";
+import { t as OptionsRepository } from "../../../../../../options-CBXIHUoT.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-oh_9i6bR.mjs";
+import { r as parseOptionalBody, t as isParseError } from "../../../../../../parse-CJKNuewM.mjs";
+import "../../../../../../media-OhYL-7Io.mjs";
+import "../../../../../../redirects-G8wAhWAf.mjs";
+import { P as passkeyRegisterOptionsBody } from "../../../../../../relations-Bw_E1TXo.mjs";
+import "../../../../../../status-CIsmlC1E.mjs";
 import "../../../../../../api/schemas/index.mjs";
-import { n as getPublicOrigin } from "../../../../../../public-url-DSGTnJFw.mjs";
-import { n as createChallengeStore } from "../../../../../../challenge-store-BFzgFRog.mjs";
-import { t as getPasskeyConfig } from "../../../../../../passkey-config-KMhgFjdQ.mjs";
+import { r as getPublicOrigin } from "../../../../../../public-url-Ox9oOlgp.mjs";
+import { n as createChallengeStore } from "../../../../../../challenge-store-D9VNKELo.mjs";
+import { t as getPasskeyConfig } from "../../../../../../passkey-config-D-zrzMJI.mjs";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 import { generateRegistrationOptions } from "@emdash-cms/auth/passkey";
 

package/dist/astro/routes/api/auth/passkey/register/verify.mjs

@@ -1,17 +1,17 @@
 import "../../../../../../base64-B-PsqheR.mjs";
-import "../../../../../../types-XrQQ-Aex.mjs";
-import { t as OptionsRepository } from "../../../../../../options-BlmBHTvX.mjs";
-import { n as apiSuccess, t as apiError } from "../../../../../../error-DmmN74gW.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../../parse-BL49yb9D.mjs";
-import "../../../../../../media-DWIzoVFL.mjs";
-import "../../../../../../redirects-BOn2DIUs.mjs";
-import { F as passkeyRegisterVerifyBody } from "../../../../../../relations-C4duJnwI.mjs";
-import "../../../../../../status-COfycGIU.mjs";
+import "../../../../../../types-Cd8iuS1J.mjs";
+import { t as OptionsRepository } from "../../../../../../options-CBXIHUoT.mjs";
+import { n as apiSuccess, t as apiError } from "../../../../../../error-oh_9i6bR.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../../parse-CJKNuewM.mjs";
+import "../../../../../../media-OhYL-7Io.mjs";
+import "../../../../../../redirects-G8wAhWAf.mjs";
+import { F as passkeyRegisterVerifyBody } from "../../../../../../relations-Bw_E1TXo.mjs";
+import "../../../../../../status-CIsmlC1E.mjs";
 import "../../../../../../api/schemas/index.mjs";
-import { n as getPublicOrigin } from "../../../../../../public-url-DSGTnJFw.mjs";
-import { n as validateAllowedOrigins, t as getConfiguredAllowedOrigins } from "../../../../../../allowed-origins-CCEi9bPI.mjs";
-import { n as createChallengeStore } from "../../../../../../challenge-store-BFzgFRog.mjs";
-import { t as getPasskeyConfig } from "../../../../../../passkey-config-KMhgFjdQ.mjs";
+import { r as getPublicOrigin } from "../../../../../../public-url-Ox9oOlgp.mjs";
+import { n as validateAllowedOrigins, t as getConfiguredAllowedOrigins } from "../../../../../../allowed-origins-CG1pACtS.mjs";
+import { n as createChallengeStore } from "../../../../../../challenge-store-D9VNKELo.mjs";
+import { t as getPasskeyConfig } from "../../../../../../passkey-config-D-zrzMJI.mjs";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 import { registerPasskey, verifyRegistrationResponse } from "@emdash-cms/auth/passkey";
 

package/dist/astro/routes/api/auth/passkey/verify.mjs

@@ -1,17 +1,17 @@
 import "../../../../../base64-B-PsqheR.mjs";
-import "../../../../../types-XrQQ-Aex.mjs";
-import { t as OptionsRepository } from "../../../../../options-BlmBHTvX.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DmmN74gW.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-BL49yb9D.mjs";
-import "../../../../../media-DWIzoVFL.mjs";
-import "../../../../../redirects-BOn2DIUs.mjs";
-import { L as passkeyVerifyBody } from "../../../../../relations-C4duJnwI.mjs";
-import "../../../../../status-COfycGIU.mjs";
+import "../../../../../types-Cd8iuS1J.mjs";
+import { t as OptionsRepository } from "../../../../../options-CBXIHUoT.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-oh_9i6bR.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-CJKNuewM.mjs";
+import "../../../../../media-OhYL-7Io.mjs";
+import "../../../../../redirects-G8wAhWAf.mjs";
+import { L as passkeyVerifyBody } from "../../../../../relations-Bw_E1TXo.mjs";
+import "../../../../../status-CIsmlC1E.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { n as getPublicOrigin } from "../../../../../public-url-DSGTnJFw.mjs";
-import { n as validateAllowedOrigins, t as getConfiguredAllowedOrigins } from "../../../../../allowed-origins-CCEi9bPI.mjs";
-import { n as createChallengeStore } from "../../../../../challenge-store-BFzgFRog.mjs";
-import { t as getPasskeyConfig } from "../../../../../passkey-config-KMhgFjdQ.mjs";
+import { r as getPublicOrigin } from "../../../../../public-url-Ox9oOlgp.mjs";
+import { n as validateAllowedOrigins, t as getConfiguredAllowedOrigins } from "../../../../../allowed-origins-CG1pACtS.mjs";
+import { n as createChallengeStore } from "../../../../../challenge-store-D9VNKELo.mjs";
+import { t as getPasskeyConfig } from "../../../../../passkey-config-D-zrzMJI.mjs";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 import { PasskeyAuthenticationError, authenticateWithPasskey } from "@emdash-cms/auth/passkey";
 

package/dist/astro/routes/api/auth/signup/complete.mjs

@@ -1,17 +1,17 @@
 import "../../../../../base64-B-PsqheR.mjs";
-import "../../../../../types-XrQQ-Aex.mjs";
-import { t as OptionsRepository } from "../../../../../options-BlmBHTvX.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DmmN74gW.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-BL49yb9D.mjs";
-import "../../../../../media-DWIzoVFL.mjs";
-import "../../../../../redirects-BOn2DIUs.mjs";
-import { R as signupCompleteBody } from "../../../../../relations-C4duJnwI.mjs";
-import "../../../../../status-COfycGIU.mjs";
+import "../../../../../types-Cd8iuS1J.mjs";
+import { t as OptionsRepository } from "../../../../../options-CBXIHUoT.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-oh_9i6bR.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-CJKNuewM.mjs";
+import "../../../../../media-OhYL-7Io.mjs";
+import "../../../../../redirects-G8wAhWAf.mjs";
+import { R as signupCompleteBody } from "../../../../../relations-Bw_E1TXo.mjs";
+import "../../../../../status-CIsmlC1E.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { n as getPublicOrigin } from "../../../../../public-url-DSGTnJFw.mjs";
-import { n as validateAllowedOrigins, t as getConfiguredAllowedOrigins } from "../../../../../allowed-origins-CCEi9bPI.mjs";
-import { n as createChallengeStore } from "../../../../../challenge-store-BFzgFRog.mjs";
-import { t as getPasskeyConfig } from "../../../../../passkey-config-KMhgFjdQ.mjs";
+import { r as getPublicOrigin } from "../../../../../public-url-Ox9oOlgp.mjs";
+import { n as validateAllowedOrigins, t as getConfiguredAllowedOrigins } from "../../../../../allowed-origins-CG1pACtS.mjs";
+import { n as createChallengeStore } from "../../../../../challenge-store-D9VNKELo.mjs";
+import { t as getPasskeyConfig } from "../../../../../passkey-config-D-zrzMJI.mjs";
 import { SignupError, completeSignup } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 import { registerPasskey, verifyRegistrationResponse } from "@emdash-cms/auth/passkey";

package/dist/astro/routes/api/auth/signup/request.mjs

@@ -1,16 +1,16 @@
 import "../../../../../base64-B-PsqheR.mjs";
-import "../../../../../types-XrQQ-Aex.mjs";
-import { t as OptionsRepository } from "../../../../../options-BlmBHTvX.mjs";
-import { n as apiSuccess, t as apiError } from "../../../../../error-DmmN74gW.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-BL49yb9D.mjs";
-import "../../../../../media-DWIzoVFL.mjs";
-import "../../../../../redirects-BOn2DIUs.mjs";
-import { z as signupRequestBody } from "../../../../../relations-C4duJnwI.mjs";
-import "../../../../../status-COfycGIU.mjs";
+import "../../../../../types-Cd8iuS1J.mjs";
+import { t as OptionsRepository } from "../../../../../options-CBXIHUoT.mjs";
+import { n as apiSuccess, t as apiError } from "../../../../../error-oh_9i6bR.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-CJKNuewM.mjs";
+import "../../../../../media-OhYL-7Io.mjs";
+import "../../../../../redirects-G8wAhWAf.mjs";
+import { z as signupRequestBody } from "../../../../../relations-Bw_E1TXo.mjs";
+import "../../../../../status-CIsmlC1E.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { t as getTrustedProxyHeaders } from "../../../../../trusted-proxy-CwjQj0YG.mjs";
-import { t as getSiteBaseUrl } from "../../../../../site-url-8N3kSyVZ.mjs";
-import { n as getClientIp, t as checkRateLimit } from "../../../../../rate-limit-Vkp9gQ1Y.mjs";
+import { t as getTrustedProxyHeaders } from "../../../../../trusted-proxy-D20_7fyX.mjs";
+import { t as getSiteBaseUrl } from "../../../../../site-url-I-lJ5kma.mjs";
+import { n as getClientIp, t as checkRateLimit } from "../../../../../rate-limit-kug6q99V.mjs";
 import { requestSignup } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 
@@ -32,7 +32,7 @@ const POST = async ({ request, locals }) => {
 		const adapter = createKyselyAdapter(emdash.db);
 		const siteName = await new OptionsRepository(emdash.db).get("emdash:site_title") || "EmDash";
 		await requestSignup({
-			baseUrl: await getSiteBaseUrl(emdash.db, request),
+			baseUrl: await getSiteBaseUrl(emdash.db, request, emdash.config),
 			siteName,
 			email: (message) => emdash.email.send(message, "system")
 		}, adapter, body.email.toLowerCase().trim());