emdash 0.35.0 → 0.36.0

package/dist/activation-K0kGBWuJ.mjs

@@ -0,0 +1,382 @@
+import { p as tableExists, s as isPostgres } from "./dialect-helpers-BSbfaO3F.mjs";
+import { n as verifyMediaUsageCaptureTriggers, t as installMediaUsageCaptureTriggers } from "./capture-triggers-CNW1q3HK.mjs";
+import { sql } from "kysely";
+import { ulid } from "ulidx";
+
+//#region src/media/usage/activation.ts
+const ACTIVATION_KEY = "incremental_capture";
+const ACTIVATION_ERROR_CODE = "MEDIA_USAGE_ACTIVATION_FAILED";
+const MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION = 1;
+var MediaUsageActivationVersionMismatchError = class extends Error {};
+const MEDIA_USAGE_ACTIVATION_LIMITS = Object.freeze({
+	collectionsPerCall: 1,
+	leaseDurationSeconds: 300
+});
+async function getMediaUsageActivationStatus(db) {
+	const activation = await db.selectFrom("_emdash_media_usage_activation").select([
+		"state",
+		"runtime_generation",
+		"collection_cursor",
+		"drain_confirmed_at",
+		"lease_expires_at",
+		"attempt_count",
+		"last_attempted_at",
+		"last_error_code",
+		"activated_at",
+		"updated_at"
+	]).where("task_key", "=", ACTIVATION_KEY).executeTakeFirstOrThrow();
+	assertRuntimeGeneration(activation);
+	if (activation.state !== "expanded" && activation.state !== "activating" && activation.state !== "active") throw new Error("Invalid media usage activation state");
+	if (!Number.isInteger(activation.attempt_count) || activation.attempt_count < 0) throw new Error("Invalid media usage activation attempt count");
+	return {
+		state: activation.state,
+		collectionCursor: activation.collection_cursor,
+		attemptCount: activation.attempt_count,
+		drainConfirmedAt: activation.drain_confirmed_at,
+		lastAttemptedAt: activation.last_attempted_at,
+		lastErrorCode: activation.last_error_code === null ? null : ACTIVATION_ERROR_CODE,
+		leaseExpiresAt: activation.lease_expires_at,
+		activatedAt: activation.activated_at,
+		updatedAt: activation.updated_at
+	};
+}
+async function canResumeMediaUsageCollectionCapture(db, identity) {
+	const activation = await findActivationIfAvailable(db);
+	if (!activation) return false;
+	assertRuntimeGeneration(activation);
+	if (activation.state !== "active") return false;
+	const lifecycle = await db.selectFrom("_emdash_media_usage_index_status").select(["collection_id", "cursor"]).where("adapter_id", "=", "content-media").where("scope_type", "=", "collection").where("scope_key", "=", identity.collectionSlug).where("collection_id", "=", identity.collectionId).where("capture_state", "in", ["installing", "ready"]).executeTakeFirst();
+	return lifecycle?.collection_id === identity.collectionId && (identity.creationFingerprint ? lifecycle.cursor === identity.creationFingerprint : lifecycle.cursor === null);
+}
+async function prepareMediaUsageCollectionCapture(db, input) {
+	const activation = await findActivationIfAvailable(db);
+	if (!activation) return {
+		captureRequired: false,
+		collectionId: input.collectionId,
+		registrationExists: input.registeredCollectionId !== void 0,
+		resuming: false
+	};
+	assertRuntimeGeneration(activation);
+	if (activation.state !== "active") return {
+		captureRequired: false,
+		collectionId: input.collectionId,
+		registrationExists: input.registeredCollectionId !== void 0,
+		resuming: false
+	};
+	const existing = await db.selectFrom("_emdash_media_usage_index_status").select([
+		"collection_id",
+		"capture_state",
+		"cursor"
+	]).where("adapter_id", "=", "content-media").where("scope_type", "=", "collection").where("scope_key", "=", input.collectionSlug).executeTakeFirst();
+	if (existing) {
+		if (existing.collection_id && (existing.capture_state === "installing" || existing.capture_state === "ready") && (input.creationFingerprint ? existing.cursor === input.creationFingerprint : existing.cursor === null) && (input.registeredCollectionId === void 0 || input.registeredCollectionId === existing.collection_id)) return {
+			captureRequired: true,
+			collectionId: existing.collection_id,
+			registrationExists: input.registeredCollectionId !== void 0,
+			resuming: true
+		};
+		throw new Error("Media usage collection lifecycle identity conflict");
+	}
+	if (input.registeredCollectionId !== void 0) throw new Error("Media usage collection lifecycle is missing");
+	await db.insertInto("_emdash_media_usage_index_status").values({
+		adapter_id: "content-media",
+		scope_type: "collection",
+		scope_key: input.collectionSlug,
+		status: "never",
+		collection_id: input.collectionId,
+		reconciliation_required: 1,
+		capture_state: "installing",
+		cursor: input.creationFingerprint ?? null,
+		updated_at: timestampOffset(db, 0)
+	}).execute();
+	return {
+		captureRequired: true,
+		collectionId: input.collectionId,
+		registrationExists: false,
+		resuming: false
+	};
+}
+async function installPreparedMediaUsageCollectionCapture(db, identity) {
+	await installMediaUsageCaptureTriggers(db, identity, { replaceExisting: false });
+	if (!await verifyMediaUsageCaptureTriggers(db, identity)) throw new Error("Media usage capture trigger verification failed");
+}
+async function markMediaUsageCollectionCaptureReady(db, identity) {
+	const result = await db.updateTable("_emdash_media_usage_index_status").set({
+		capture_state: "ready",
+		updated_at: timestampOffset(db, 0)
+	}).where("adapter_id", "=", "content-media").where("scope_type", "=", "collection").where("scope_key", "=", identity.collectionSlug).where("collection_id", "=", identity.collectionId).where("capture_state", "in", ["installing", "ready"]).where(sql`EXISTS (
+				SELECT 1 FROM _emdash_media_usage_activation AS activation
+				WHERE activation.task_key = ${ACTIVATION_KEY}
+					AND activation.state = 'active'
+					AND activation.runtime_generation = ${MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION}
+			)`).executeTakeFirst();
+	if (Number(result.numUpdatedRows ?? 0) === 0) throw new Error("Media usage collection readiness lost its fence");
+}
+async function finalizeMediaUsageCollectionCapture(db, identity) {
+	const result = await db.updateTable("_emdash_media_usage_index_status").set({
+		capture_state: "active",
+		cursor: null,
+		updated_at: timestampOffset(db, 0)
+	}).where("adapter_id", "=", "content-media").where("scope_type", "=", "collection").where("scope_key", "=", identity.collectionSlug).where("collection_id", "=", identity.collectionId).where("capture_state", "=", "ready").where(sql`EXISTS (
+				SELECT 1 FROM _emdash_collections AS collection
+				WHERE collection.id = ${identity.collectionId}
+					AND collection.slug = ${identity.collectionSlug}
+			)`).where(sql`EXISTS (
+				SELECT 1 FROM _emdash_media_usage_activation AS activation
+				WHERE activation.task_key = ${ACTIVATION_KEY}
+					AND activation.state = 'active'
+					AND activation.runtime_generation = ${MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION}
+			)`).executeTakeFirst();
+	if (Number(result.numUpdatedRows ?? 0) === 0) throw new Error("Media usage collection activation lost its fence");
+}
+async function activateMediaUsageCapture(db, input) {
+	if (input.writersDrained !== true) throw new Error("Media usage activation requires confirmation that writers are drained");
+	return advanceMediaUsageActivation(db, "confirmed");
+}
+async function continueMediaUsageActivation(db) {
+	return advanceMediaUsageActivation(db, "background");
+}
+async function advanceMediaUsageActivation(db, mode) {
+	const before = await findActivation(db);
+	assertRuntimeGeneration(before);
+	if (before.state === "active") return {
+		outcome: "active",
+		processedCollections: 0
+	};
+	if (mode === "background") {
+		if (before.state === "expanded" || before.drain_confirmed_at === null) return { outcome: "inactive" };
+		if (before.state !== "activating") throw new Error("Invalid media usage activation state");
+		if (before.last_error_code !== null) return { outcome: "failed" };
+	}
+	const leaseToken = ulid();
+	const lease = await claimActivation(db, leaseToken, mode);
+	if (!lease) return activationClaimLoss(db, mode);
+	let processedCollections = 0;
+	try {
+		const candidates = await findActivationCandidates(db, lease.collection_cursor);
+		for (const collection of candidates.slice(0, MEDIA_USAGE_ACTIVATION_LIMITS.collectionsPerCall)) {
+			await requireActivationLease(db, leaseToken);
+			await prepareCollectionForActivation(db, collection, leaseToken);
+			await requireActivationLease(db, leaseToken);
+			await installMediaUsageCaptureTriggers(db, {
+				collectionId: collection.id,
+				collectionSlug: collection.slug
+			}, { replaceExisting: false });
+			await requireActivationLease(db, leaseToken);
+			if (!await verifyMediaUsageCaptureTriggers(db, {
+				collectionId: collection.id,
+				collectionSlug: collection.slug
+			})) throw new Error("Media usage capture trigger verification failed");
+			if (!await activateCollectionLifecycle(db, collection, leaseToken)) throw new Error("Media usage collection activation lost its fence");
+			processedCollections++;
+		}
+		const collectionCursor = candidates[Math.min(processedCollections, candidates.length) - 1]?.slug ?? lease.collection_cursor;
+		if (candidates.length > MEDIA_USAGE_ACTIVATION_LIMITS.collectionsPerCall) {
+			if (!await releaseActivationBatch(db, leaseToken, collectionCursor)) throw new Error("Media usage activation cursor lost its fence");
+			return {
+				outcome: "activating",
+				processedCollections,
+				collectionCursor
+			};
+		}
+		if (await findIncompleteCollection(db)) {
+			if (!await releaseActivationBatch(db, leaseToken, null)) throw new Error("Media usage activation restart lost its fence");
+			return {
+				outcome: "activating",
+				processedCollections,
+				collectionCursor: null
+			};
+		}
+		if (!await finalizeActivation(db, leaseToken, collectionCursor)) throw new Error("Media usage activation finalization lost its fence");
+		return {
+			outcome: "active",
+			processedCollections
+		};
+	} catch (error) {
+		if (!await activationLeaseIsLive(db, leaseToken)) return {
+			outcome: "conflict",
+			processedCollections
+		};
+		await recordActivationFailure(db, leaseToken);
+		throw new Error("Media usage activation failed", { cause: error });
+	}
+}
+async function findActivation(db) {
+	return db.selectFrom("_emdash_media_usage_activation").selectAll().where("task_key", "=", ACTIVATION_KEY).executeTakeFirstOrThrow();
+}
+async function findActivationIfAvailable(db) {
+	if (!await tableExists(db, "_emdash_media_usage_activation")) return null;
+	return findActivation(db);
+}
+function assertRuntimeGeneration(activation) {
+	if (activation.runtime_generation !== MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION) throw new MediaUsageActivationVersionMismatchError("Media usage activation runtime generation mismatch");
+}
+async function claimActivation(db, leaseToken, mode) {
+	const now = timestampOffset(db, 0);
+	const claimValues = {
+		lease_token: leaseToken,
+		lease_expires_at: timestampOffset(db, MEDIA_USAGE_ACTIVATION_LIMITS.leaseDurationSeconds),
+		attempt_count: sql`attempt_count + 1`,
+		last_attempted_at: now,
+		updated_at: now
+	};
+	let claim = db.updateTable("_emdash_media_usage_activation").set(mode === "confirmed" ? {
+		...claimValues,
+		state: "activating",
+		drain_confirmed_at: now,
+		last_error_code: null
+	} : claimValues).where("task_key", "=", ACTIVATION_KEY).where("runtime_generation", "=", MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION);
+	if (mode === "confirmed") claim = claim.where((eb) => eb.or([eb("state", "=", "expanded"), eb.and([eb("state", "=", "activating"), eb.or([eb("lease_token", "is", null), eb.and([eb("lease_expires_at", "is not", null), timestampIsDue(db, "lease_expires_at")])])])]));
+	else claim = claim.where("state", "=", "activating").where("drain_confirmed_at", "is not", null).where("last_error_code", "is", null).where((eb) => eb.or([eb("lease_token", "is", null), eb.and([eb("lease_expires_at", "is not", null), timestampIsDue(db, "lease_expires_at")])]));
+	return await claim.returningAll().executeTakeFirst() ?? null;
+}
+async function activationClaimLoss(db, mode) {
+	const current = await findActivation(db);
+	assertRuntimeGeneration(current);
+	if (current.state === "active") return {
+		outcome: "active",
+		processedCollections: 0
+	};
+	if (mode === "background") {
+		if (current.state === "expanded" || current.drain_confirmed_at === null) return { outcome: "inactive" };
+		if (current.state === "activating" && current.last_error_code !== null) return { outcome: "failed" };
+	}
+	if (current.state === "activating" && current.lease_token && current.lease_expires_at && await activationLeaseIsLive(db, current.lease_token)) return {
+		outcome: "lease_active",
+		leaseExpiresAt: current.lease_expires_at
+	};
+	if (mode === "background" && current.state === "activating") return {
+		outcome: "conflict",
+		processedCollections: 0
+	};
+	throw new Error("Media usage activation state is not claimable");
+}
+async function activationLeaseIsLive(db, leaseToken) {
+	return await db.selectFrom("_emdash_media_usage_activation").select("task_key").where("task_key", "=", ACTIVATION_KEY).where("state", "=", "activating").where("runtime_generation", "=", MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION).where("lease_token", "=", leaseToken).where("lease_expires_at", "is not", null).where(timestampIsLive(db, "lease_expires_at")).executeTakeFirst() !== void 0;
+}
+async function findActivationCandidates(db, collectionCursor) {
+	let query = db.selectFrom("_emdash_collections").select(["id", "slug"]);
+	if (collectionCursor) query = query.where("slug", ">", collectionCursor);
+	return query.orderBy("slug", "asc").limit(MEDIA_USAGE_ACTIVATION_LIMITS.collectionsPerCall + 1).execute();
+}
+async function prepareCollectionForActivation(db, collection, leaseToken) {
+	const now = timestampOffset(db, 0);
+	const existingStatus = sql.ref("_emdash_media_usage_index_status.status");
+	const existingCompletedAt = sql.ref("_emdash_media_usage_index_status.completed_at");
+	const existingCollectionId = sql.ref("_emdash_media_usage_index_status.collection_id");
+	const existingCaptureState = sql.ref("_emdash_media_usage_index_status.capture_state");
+	if ((await db.insertInto("_emdash_media_usage_index_status").values({
+		adapter_id: "content-media",
+		scope_type: "collection",
+		scope_key: collection.slug,
+		status: "never",
+		collection_id: collection.id,
+		reconciliation_required: 1,
+		capture_state: "installing",
+		updated_at: now
+	}).onConflict((conflict) => conflict.columns([
+		"adapter_id",
+		"scope_type",
+		"scope_key"
+	]).doUpdateSet({
+		status: sql`CASE WHEN ${existingStatus} IN ('complete', 'running') THEN 'stale' ELSE ${existingStatus} END`,
+		completed_at: sql`CASE WHEN ${existingStatus} IN ('complete', 'running') THEN NULL ELSE ${existingCompletedAt} END`,
+		cursor: null,
+		collection_id: collection.id,
+		reconciliation_required: 1,
+		capture_state: "installing",
+		updated_at: now
+	}).where((eb) => eb.and([
+		eb.or([eb(existingCollectionId, "is", null), eb(existingCollectionId, "=", collection.id)]),
+		eb.or([eb(existingCaptureState, "is", null), eb(existingCaptureState, "!=", "deleting")]),
+		activeActivationLease(db, leaseToken)
+	]))).returning("collection_id").executeTakeFirst())?.collection_id !== collection.id) throw new Error("Media usage collection lifecycle identity conflict");
+}
+async function requireActivationLease(db, leaseToken) {
+	if (!await activationLeaseIsLive(db, leaseToken)) throw new Error("Media usage activation lease is no longer live");
+}
+async function activateCollectionLifecycle(db, collection, leaseToken) {
+	const result = await db.updateTable("_emdash_media_usage_index_status").set({
+		capture_state: "active",
+		updated_at: timestampOffset(db, 0)
+	}).where("adapter_id", "=", "content-media").where("scope_type", "=", "collection").where("scope_key", "=", collection.slug).where("collection_id", "=", collection.id).where("capture_state", "=", "installing").where(sql`EXISTS (
+				SELECT 1 FROM _emdash_collections AS collection
+				WHERE collection.id = ${collection.id}
+					AND collection.slug = ${collection.slug}
+			)`).where(activeActivationLease(db, leaseToken)).executeTakeFirst();
+	return Number(result.numUpdatedRows ?? 0) > 0;
+}
+async function releaseActivationBatch(db, leaseToken, collectionCursor) {
+	const result = await db.updateTable("_emdash_media_usage_activation").set({
+		collection_cursor: collectionCursor,
+		lease_token: null,
+		lease_expires_at: null,
+		updated_at: timestampOffset(db, 0)
+	}).where("task_key", "=", ACTIVATION_KEY).where("state", "=", "activating").where("runtime_generation", "=", MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION).where("lease_token", "=", leaseToken).where("lease_expires_at", "is not", null).where(timestampIsLive(db, "lease_expires_at")).executeTakeFirst();
+	return Number(result.numUpdatedRows ?? 0) > 0;
+}
+async function findIncompleteCollection(db) {
+	return await db.selectFrom("_emdash_collections as collection").select(["collection.id", "collection.slug"]).where((eb) => eb.not(eb.exists(eb.selectFrom("_emdash_media_usage_index_status as status").select("status.scope_key").where("status.adapter_id", "=", "content-media").where("status.scope_type", "=", "collection").whereRef("status.scope_key", "=", "collection.slug").whereRef("status.collection_id", "=", "collection.id").where("status.capture_state", "=", "active")))).orderBy("collection.slug", "asc").limit(1).executeTakeFirst() ?? null;
+}
+async function finalizeActivation(db, leaseToken, collectionCursor) {
+	const now = timestampOffset(db, 0);
+	const result = await db.updateTable("_emdash_media_usage_activation").set({
+		state: "active",
+		collection_cursor: collectionCursor,
+		lease_token: null,
+		lease_expires_at: null,
+		last_error_code: null,
+		activated_at: now,
+		updated_at: now
+	}).where("task_key", "=", ACTIVATION_KEY).where("state", "=", "activating").where("runtime_generation", "=", MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION).where("lease_token", "=", leaseToken).where("lease_expires_at", "is not", null).where(timestampIsLive(db, "lease_expires_at")).where(sql`NOT EXISTS (
+				SELECT 1
+				FROM _emdash_collections AS collection
+				WHERE NOT EXISTS (
+					SELECT 1
+					FROM _emdash_media_usage_index_status AS status
+					WHERE status.adapter_id = 'content-media'
+						AND status.scope_type = 'collection'
+						AND status.scope_key = collection.slug
+						AND status.collection_id = collection.id
+						AND status.capture_state = 'active'
+				)
+			)`).executeTakeFirst();
+	return Number(result.numUpdatedRows ?? 0) > 0;
+}
+async function recordActivationFailure(db, leaseToken) {
+	await db.updateTable("_emdash_media_usage_activation").set({
+		lease_token: null,
+		lease_expires_at: null,
+		last_error_code: ACTIVATION_ERROR_CODE,
+		updated_at: timestampOffset(db, 0)
+	}).where("task_key", "=", ACTIVATION_KEY).where("state", "=", "activating").where("runtime_generation", "=", MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION).where("lease_token", "=", leaseToken).execute();
+}
+function activeActivationLease(db, leaseToken) {
+	return sql`EXISTS (
+		SELECT 1
+		FROM _emdash_media_usage_activation AS activation
+		WHERE activation.task_key = ${ACTIVATION_KEY}
+			AND activation.state = 'activating'
+			AND activation.runtime_generation = ${MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION}
+			AND activation.lease_token = ${leaseToken}
+			AND activation.lease_expires_at IS NOT NULL
+			AND ${timestampIsLive(db, "activation.lease_expires_at")}
+	)`;
+}
+function timestampIsDue(db, column) {
+	return isPostgres(db) ? sql`${sql.ref(column)}::timestamptz <= clock_timestamp()` : sql`${sql.ref(column)} <= strftime('%Y-%m-%dT%H:%M:%fZ', 'now')`;
+}
+function timestampIsLive(db, column) {
+	return isPostgres(db) ? sql`${sql.ref(column)}::timestamptz > clock_timestamp()` : sql`${sql.ref(column)} > strftime('%Y-%m-%dT%H:%M:%fZ', 'now')`;
+}
+function timestampOffset(db, seconds) {
+	if (isPostgres(db)) return sql`to_char(
+			clock_timestamp() AT TIME ZONE 'UTC' + (${seconds} * interval '1 second'),
+			'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"'
+		)`;
+	return sql`strftime('%Y-%m-%dT%H:%M:%fZ', 'now', ${`+${seconds} seconds`})`;
+}
+
+//#endregion
+export { continueMediaUsageActivation as a, installPreparedMediaUsageCollectionCapture as c, canResumeMediaUsageCollectionCapture as i, markMediaUsageCollectionCaptureReady as l, MediaUsageActivationVersionMismatchError as n, finalizeMediaUsageCollectionCapture as o, activateMediaUsageCapture as r, getMediaUsageActivationStatus as s, MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION as t, prepareMediaUsageCollectionCapture as u };
+//# sourceMappingURL=activation-K0kGBWuJ.mjs.map

package/dist/activation-K0kGBWuJ.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"activation-K0kGBWuJ.mjs","names":[],"sources":["../src/media/usage/activation.ts"],"sourcesContent":["import { sql, type Kysely, type RawBuilder, type Selectable } from \"kysely\";\nimport { ulid } from \"ulidx\";\n\nimport { isPostgres, tableExists } from \"../../database/dialect-helpers.js\";\nimport type { Database, MediaUsageActivationTable } from \"../../database/types.js\";\nimport {\n\tinstallMediaUsageCaptureTriggers,\n\tverifyMediaUsageCaptureTriggers,\n} from \"./capture-triggers.js\";\n\nconst ACTIVATION_KEY = \"incremental_capture\";\nconst ACTIVATION_ERROR_CODE = \"MEDIA_USAGE_ACTIVATION_FAILED\";\nexport const MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION = 1;\n\nexport class MediaUsageActivationVersionMismatchError extends Error {}\n\nexport interface MediaUsageActivationStatus {\n\tstate: \"expanded\" | \"activating\" | \"active\";\n\tcollectionCursor: string | null;\n\tattemptCount: number;\n\tdrainConfirmedAt: string | null;\n\tlastAttemptedAt: string | null;\n\tlastErrorCode: \"MEDIA_USAGE_ACTIVATION_FAILED\" | null;\n\tleaseExpiresAt: string | null;\n\tactivatedAt: string | null;\n\tupdatedAt: string;\n}\n\nexport const MEDIA_USAGE_ACTIVATION_LIMITS = Object.freeze({\n\tcollectionsPerCall: 1,\n\tleaseDurationSeconds: 5 * 60,\n});\n\nexport type MediaUsageActivationResult =\n\t| { outcome: \"active\"; processedCollections: number }\n\t| {\n\t\t\toutcome: \"activating\";\n\t\t\tprocessedCollections: number;\n\t\t\tcollectionCursor: string | null;\n\t  }\n\t| { outcome: \"lease_active\"; leaseExpiresAt: string }\n\t| { outcome: \"conflict\"; processedCollections: number };\n\nexport type MediaUsageActivationContinuationResult =\n\t| MediaUsageActivationResult\n\t| { outcome: \"inactive\" | \"failed\" };\n\ntype MediaUsageActivationClaimMode = \"confirmed\" | \"background\";\n\nexport interface MediaUsageCollectionCapturePreparation {\n\tcaptureRequired: boolean;\n\tcollectionId: string;\n\tregistrationExists: boolean;\n\tresuming: boolean;\n}\n\nexport async function getMediaUsageActivationStatus(\n\tdb: Kysely<Database>,\n): Promise<MediaUsageActivationStatus> {\n\tconst activation = await db\n\t\t.selectFrom(\"_emdash_media_usage_activation\")\n\t\t.select([\n\t\t\t\"state\",\n\t\t\t\"runtime_generation\",\n\t\t\t\"collection_cursor\",\n\t\t\t\"drain_confirmed_at\",\n\t\t\t\"lease_expires_at\",\n\t\t\t\"attempt_count\",\n\t\t\t\"last_attempted_at\",\n\t\t\t\"last_error_code\",\n\t\t\t\"activated_at\",\n\t\t\t\"updated_at\",\n\t\t])\n\t\t.where(\"task_key\", \"=\", ACTIVATION_KEY)\n\t\t.executeTakeFirstOrThrow();\n\tassertRuntimeGeneration(activation);\n\tif (\n\t\tactivation.state !== \"expanded\" &&\n\t\tactivation.state !== \"activating\" &&\n\t\tactivation.state !== \"active\"\n\t) {\n\t\tthrow new Error(\"Invalid media usage activation state\");\n\t}\n\tif (!Number.isInteger(activation.attempt_count) || activation.attempt_count < 0) {\n\t\tthrow new Error(\"Invalid media usage activation attempt count\");\n\t}\n\n\treturn {\n\t\tstate: activation.state,\n\t\tcollectionCursor: activation.collection_cursor,\n\t\tattemptCount: activation.attempt_count,\n\t\tdrainConfirmedAt: activation.drain_confirmed_at,\n\t\tlastAttemptedAt: activation.last_attempted_at,\n\t\tlastErrorCode: activation.last_error_code === null ? null : ACTIVATION_ERROR_CODE,\n\t\tleaseExpiresAt: activation.lease_expires_at,\n\t\tactivatedAt: activation.activated_at,\n\t\tupdatedAt: activation.updated_at,\n\t};\n}\n\nexport async function canResumeMediaUsageCollectionCapture(\n\tdb: Kysely<Database>,\n\tidentity: { collectionId: string; collectionSlug: string; creationFingerprint?: string },\n): Promise<boolean> {\n\tconst activation = await findActivationIfAvailable(db);\n\tif (!activation) return false;\n\tassertRuntimeGeneration(activation);\n\tif (activation.state !== \"active\") return false;\n\n\tconst lifecycle = await db\n\t\t.selectFrom(\"_emdash_media_usage_index_status\")\n\t\t.select([\"collection_id\", \"cursor\"])\n\t\t.where(\"adapter_id\", \"=\", \"content-media\")\n\t\t.where(\"scope_type\", \"=\", \"collection\")\n\t\t.where(\"scope_key\", \"=\", identity.collectionSlug)\n\t\t.where(\"collection_id\", \"=\", identity.collectionId)\n\t\t.where(\"capture_state\", \"in\", [\"installing\", \"ready\"])\n\t\t.executeTakeFirst();\n\treturn (\n\t\tlifecycle?.collection_id === identity.collectionId &&\n\t\t(identity.creationFingerprint\n\t\t\t? lifecycle.cursor === identity.creationFingerprint\n\t\t\t: lifecycle.cursor === null)\n\t);\n}\n\nexport async function prepareMediaUsageCollectionCapture(\n\tdb: Kysely<Database>,\n\tinput: {\n\t\tcollectionId: string;\n\t\tcollectionSlug: string;\n\t\tcreationFingerprint?: string;\n\t\tregisteredCollectionId?: string;\n\t},\n): Promise<MediaUsageCollectionCapturePreparation> {\n\tconst activation = await findActivationIfAvailable(db);\n\tif (!activation) {\n\t\treturn {\n\t\t\tcaptureRequired: false,\n\t\t\tcollectionId: input.collectionId,\n\t\t\tregistrationExists: input.registeredCollectionId !== undefined,\n\t\t\tresuming: false,\n\t\t};\n\t}\n\tassertRuntimeGeneration(activation);\n\tif (activation.state !== \"active\") {\n\t\treturn {\n\t\t\tcaptureRequired: false,\n\t\t\tcollectionId: input.collectionId,\n\t\t\tregistrationExists: input.registeredCollectionId !== undefined,\n\t\t\tresuming: false,\n\t\t};\n\t}\n\n\tconst existing = await db\n\t\t.selectFrom(\"_emdash_media_usage_index_status\")\n\t\t.select([\"collection_id\", \"capture_state\", \"cursor\"])\n\t\t.where(\"adapter_id\", \"=\", \"content-media\")\n\t\t.where(\"scope_type\", \"=\", \"collection\")\n\t\t.where(\"scope_key\", \"=\", input.collectionSlug)\n\t\t.executeTakeFirst();\n\tif (existing) {\n\t\tif (\n\t\t\texisting.collection_id &&\n\t\t\t(existing.capture_state === \"installing\" || existing.capture_state === \"ready\") &&\n\t\t\t(input.creationFingerprint\n\t\t\t\t? existing.cursor === input.creationFingerprint\n\t\t\t\t: existing.cursor === null) &&\n\t\t\t(input.registeredCollectionId === undefined ||\n\t\t\t\tinput.registeredCollectionId === existing.collection_id)\n\t\t) {\n\t\t\treturn {\n\t\t\t\tcaptureRequired: true,\n\t\t\t\tcollectionId: existing.collection_id,\n\t\t\t\tregistrationExists: input.registeredCollectionId !== undefined,\n\t\t\t\tresuming: true,\n\t\t\t};\n\t\t}\n\t\tthrow new Error(\"Media usage collection lifecycle identity conflict\");\n\t}\n\tif (input.registeredCollectionId !== undefined) {\n\t\tthrow new Error(\"Media usage collection lifecycle is missing\");\n\t}\n\n\tawait db\n\t\t.insertInto(\"_emdash_media_usage_index_status\")\n\t\t.values({\n\t\t\tadapter_id: \"content-media\",\n\t\t\tscope_type: \"collection\",\n\t\t\tscope_key: input.collectionSlug,\n\t\t\tstatus: \"never\",\n\t\t\tcollection_id: input.collectionId,\n\t\t\treconciliation_required: 1,\n\t\t\tcapture_state: \"installing\",\n\t\t\tcursor: input.creationFingerprint ?? null,\n\t\t\tupdated_at: timestampOffset(db, 0),\n\t\t})\n\t\t.execute();\n\treturn {\n\t\tcaptureRequired: true,\n\t\tcollectionId: input.collectionId,\n\t\tregistrationExists: false,\n\t\tresuming: false,\n\t};\n}\n\nexport async function installPreparedMediaUsageCollectionCapture(\n\tdb: Kysely<Database>,\n\tidentity: { collectionId: string; collectionSlug: string },\n): Promise<void> {\n\tawait installMediaUsageCaptureTriggers(db, identity, { replaceExisting: false });\n\tif (!(await verifyMediaUsageCaptureTriggers(db, identity))) {\n\t\tthrow new Error(\"Media usage capture trigger verification failed\");\n\t}\n}\n\nexport async function markMediaUsageCollectionCaptureReady(\n\tdb: Kysely<Database>,\n\tidentity: { collectionId: string; collectionSlug: string },\n): Promise<void> {\n\tconst result = await db\n\t\t.updateTable(\"_emdash_media_usage_index_status\")\n\t\t.set({ capture_state: \"ready\", updated_at: timestampOffset(db, 0) })\n\t\t.where(\"adapter_id\", \"=\", \"content-media\")\n\t\t.where(\"scope_type\", \"=\", \"collection\")\n\t\t.where(\"scope_key\", \"=\", identity.collectionSlug)\n\t\t.where(\"collection_id\", \"=\", identity.collectionId)\n\t\t.where(\"capture_state\", \"in\", [\"installing\", \"ready\"])\n\t\t.where(\n\t\t\tsql<boolean>`EXISTS (\n\t\t\t\tSELECT 1 FROM _emdash_media_usage_activation AS activation\n\t\t\t\tWHERE activation.task_key = ${ACTIVATION_KEY}\n\t\t\t\t\tAND activation.state = 'active'\n\t\t\t\t\tAND activation.runtime_generation = ${MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION}\n\t\t\t)`,\n\t\t)\n\t\t.executeTakeFirst();\n\tif (Number(result.numUpdatedRows ?? 0) === 0) {\n\t\tthrow new Error(\"Media usage collection readiness lost its fence\");\n\t}\n}\n\nexport async function finalizeMediaUsageCollectionCapture(\n\tdb: Kysely<Database>,\n\tidentity: { collectionId: string; collectionSlug: string },\n): Promise<void> {\n\tconst result = await db\n\t\t.updateTable(\"_emdash_media_usage_index_status\")\n\t\t.set({ capture_state: \"active\", cursor: null, updated_at: timestampOffset(db, 0) })\n\t\t.where(\"adapter_id\", \"=\", \"content-media\")\n\t\t.where(\"scope_type\", \"=\", \"collection\")\n\t\t.where(\"scope_key\", \"=\", identity.collectionSlug)\n\t\t.where(\"collection_id\", \"=\", identity.collectionId)\n\t\t.where(\"capture_state\", \"=\", \"ready\")\n\t\t.where(\n\t\t\tsql<boolean>`EXISTS (\n\t\t\t\tSELECT 1 FROM _emdash_collections AS collection\n\t\t\t\tWHERE collection.id = ${identity.collectionId}\n\t\t\t\t\tAND collection.slug = ${identity.collectionSlug}\n\t\t\t)`,\n\t\t)\n\t\t.where(\n\t\t\tsql<boolean>`EXISTS (\n\t\t\t\tSELECT 1 FROM _emdash_media_usage_activation AS activation\n\t\t\t\tWHERE activation.task_key = ${ACTIVATION_KEY}\n\t\t\t\t\tAND activation.state = 'active'\n\t\t\t\t\tAND activation.runtime_generation = ${MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION}\n\t\t\t)`,\n\t\t)\n\t\t.executeTakeFirst();\n\tif (Number(result.numUpdatedRows ?? 0) === 0) {\n\t\tthrow new Error(\"Media usage collection activation lost its fence\");\n\t}\n}\n\nexport async function activateMediaUsageCapture(\n\tdb: Kysely<Database>,\n\tinput: { writersDrained: true },\n): Promise<MediaUsageActivationResult> {\n\tif (input.writersDrained !== true) {\n\t\tthrow new Error(\"Media usage activation requires confirmation that writers are drained\");\n\t}\n\treturn advanceMediaUsageActivation(db, \"confirmed\");\n}\n\nexport async function continueMediaUsageActivation(\n\tdb: Kysely<Database>,\n): Promise<MediaUsageActivationContinuationResult> {\n\treturn advanceMediaUsageActivation(db, \"background\");\n}\n\nasync function advanceMediaUsageActivation(\n\tdb: Kysely<Database>,\n\tmode: \"confirmed\",\n): Promise<MediaUsageActivationResult>;\nasync function advanceMediaUsageActivation(\n\tdb: Kysely<Database>,\n\tmode: \"background\",\n): Promise<MediaUsageActivationContinuationResult>;\nasync function advanceMediaUsageActivation(\n\tdb: Kysely<Database>,\n\tmode: MediaUsageActivationClaimMode,\n): Promise<MediaUsageActivationContinuationResult> {\n\tconst before = await findActivation(db);\n\tassertRuntimeGeneration(before);\n\tif (before.state === \"active\") {\n\t\treturn { outcome: \"active\", processedCollections: 0 };\n\t}\n\tif (mode === \"background\") {\n\t\tif (before.state === \"expanded\" || before.drain_confirmed_at === null) {\n\t\t\treturn { outcome: \"inactive\" };\n\t\t}\n\t\tif (before.state !== \"activating\") {\n\t\t\tthrow new Error(\"Invalid media usage activation state\");\n\t\t}\n\t\tif (before.last_error_code !== null) return { outcome: \"failed\" };\n\t}\n\n\tconst leaseToken = ulid();\n\tconst lease = await claimActivation(db, leaseToken, mode);\n\tif (!lease) return activationClaimLoss(db, mode);\n\n\tlet processedCollections = 0;\n\ttry {\n\t\tconst candidates = await findActivationCandidates(db, lease.collection_cursor);\n\t\tfor (const collection of candidates.slice(\n\t\t\t0,\n\t\t\tMEDIA_USAGE_ACTIVATION_LIMITS.collectionsPerCall,\n\t\t)) {\n\t\t\tawait requireActivationLease(db, leaseToken);\n\t\t\tawait prepareCollectionForActivation(db, collection, leaseToken);\n\t\t\tawait requireActivationLease(db, leaseToken);\n\t\t\tawait installMediaUsageCaptureTriggers(\n\t\t\t\tdb,\n\t\t\t\t{\n\t\t\t\t\tcollectionId: collection.id,\n\t\t\t\t\tcollectionSlug: collection.slug,\n\t\t\t\t},\n\t\t\t\t{ replaceExisting: false },\n\t\t\t);\n\t\t\tawait requireActivationLease(db, leaseToken);\n\t\t\tif (\n\t\t\t\t!(await verifyMediaUsageCaptureTriggers(db, {\n\t\t\t\t\tcollectionId: collection.id,\n\t\t\t\t\tcollectionSlug: collection.slug,\n\t\t\t\t}))\n\t\t\t) {\n\t\t\t\tthrow new Error(\"Media usage capture trigger verification failed\");\n\t\t\t}\n\t\t\tif (!(await activateCollectionLifecycle(db, collection, leaseToken))) {\n\t\t\t\tthrow new Error(\"Media usage collection activation lost its fence\");\n\t\t\t}\n\t\t\tprocessedCollections++;\n\t\t}\n\n\t\tconst collectionCursor =\n\t\t\tcandidates[Math.min(processedCollections, candidates.length) - 1]?.slug ??\n\t\t\tlease.collection_cursor;\n\t\tif (candidates.length > MEDIA_USAGE_ACTIVATION_LIMITS.collectionsPerCall) {\n\t\t\tif (!(await releaseActivationBatch(db, leaseToken, collectionCursor))) {\n\t\t\t\tthrow new Error(\"Media usage activation cursor lost its fence\");\n\t\t\t}\n\t\t\treturn { outcome: \"activating\", processedCollections, collectionCursor };\n\t\t}\n\n\t\tconst incomplete = await findIncompleteCollection(db);\n\t\tif (incomplete) {\n\t\t\tif (!(await releaseActivationBatch(db, leaseToken, null))) {\n\t\t\t\tthrow new Error(\"Media usage activation restart lost its fence\");\n\t\t\t}\n\t\t\treturn { outcome: \"activating\", processedCollections, collectionCursor: null };\n\t\t}\n\n\t\tif (!(await finalizeActivation(db, leaseToken, collectionCursor))) {\n\t\t\tthrow new Error(\"Media usage activation finalization lost its fence\");\n\t\t}\n\t\treturn { outcome: \"active\", processedCollections };\n\t} catch (error) {\n\t\tif (!(await activationLeaseIsLive(db, leaseToken))) {\n\t\t\treturn { outcome: \"conflict\", processedCollections };\n\t\t}\n\t\tawait recordActivationFailure(db, leaseToken);\n\t\tthrow new Error(\"Media usage activation failed\", { cause: error });\n\t}\n}\n\nasync function findActivation(\n\tdb: Kysely<Database>,\n): Promise<Selectable<MediaUsageActivationTable>> {\n\treturn db\n\t\t.selectFrom(\"_emdash_media_usage_activation\")\n\t\t.selectAll()\n\t\t.where(\"task_key\", \"=\", ACTIVATION_KEY)\n\t\t.executeTakeFirstOrThrow();\n}\n\nasync function findActivationIfAvailable(\n\tdb: Kysely<Database>,\n): Promise<Selectable<MediaUsageActivationTable> | null> {\n\tif (!(await tableExists(db, \"_emdash_media_usage_activation\"))) return null;\n\treturn findActivation(db);\n}\n\nfunction assertRuntimeGeneration(activation: { runtime_generation: number }): void {\n\tif (activation.runtime_generation !== MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION) {\n\t\tthrow new MediaUsageActivationVersionMismatchError(\n\t\t\t\"Media usage activation runtime generation mismatch\",\n\t\t);\n\t}\n}\n\nasync function claimActivation(\n\tdb: Kysely<Database>,\n\tleaseToken: string,\n\tmode: MediaUsageActivationClaimMode,\n): Promise<Selectable<MediaUsageActivationTable> | null> {\n\tconst now = timestampOffset(db, 0);\n\tconst claimValues = {\n\t\tlease_token: leaseToken,\n\t\tlease_expires_at: timestampOffset(db, MEDIA_USAGE_ACTIVATION_LIMITS.leaseDurationSeconds),\n\t\tattempt_count: sql<number>`attempt_count + 1`,\n\t\tlast_attempted_at: now,\n\t\tupdated_at: now,\n\t};\n\tlet claim = db\n\t\t.updateTable(\"_emdash_media_usage_activation\")\n\t\t.set(\n\t\t\tmode === \"confirmed\"\n\t\t\t\t? {\n\t\t\t\t\t\t...claimValues,\n\t\t\t\t\t\tstate: \"activating\",\n\t\t\t\t\t\tdrain_confirmed_at: now,\n\t\t\t\t\t\tlast_error_code: null,\n\t\t\t\t\t}\n\t\t\t\t: claimValues,\n\t\t)\n\t\t.where(\"task_key\", \"=\", ACTIVATION_KEY)\n\t\t.where(\"runtime_generation\", \"=\", MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION);\n\tif (mode === \"confirmed\") {\n\t\tclaim = claim.where((eb) =>\n\t\t\teb.or([\n\t\t\t\teb(\"state\", \"=\", \"expanded\"),\n\t\t\t\teb.and([\n\t\t\t\t\teb(\"state\", \"=\", \"activating\"),\n\t\t\t\t\teb.or([\n\t\t\t\t\t\teb(\"lease_token\", \"is\", null),\n\t\t\t\t\t\teb.and([\n\t\t\t\t\t\t\teb(\"lease_expires_at\", \"is not\", null),\n\t\t\t\t\t\t\ttimestampIsDue(db, \"lease_expires_at\"),\n\t\t\t\t\t\t]),\n\t\t\t\t\t]),\n\t\t\t\t]),\n\t\t\t]),\n\t\t);\n\t} else {\n\t\tclaim = claim\n\t\t\t.where(\"state\", \"=\", \"activating\")\n\t\t\t.where(\"drain_confirmed_at\", \"is not\", null)\n\t\t\t.where(\"last_error_code\", \"is\", null)\n\t\t\t.where((eb) =>\n\t\t\t\teb.or([\n\t\t\t\t\teb(\"lease_token\", \"is\", null),\n\t\t\t\t\teb.and([eb(\"lease_expires_at\", \"is not\", null), timestampIsDue(db, \"lease_expires_at\")]),\n\t\t\t\t]),\n\t\t\t);\n\t}\n\treturn (await claim.returningAll().executeTakeFirst()) ?? null;\n}\n\nasync function activationClaimLoss(\n\tdb: Kysely<Database>,\n\tmode: MediaUsageActivationClaimMode,\n): Promise<MediaUsageActivationContinuationResult> {\n\tconst current = await findActivation(db);\n\tassertRuntimeGeneration(current);\n\tif (current.state === \"active\") return { outcome: \"active\", processedCollections: 0 };\n\tif (mode === \"background\") {\n\t\tif (current.state === \"expanded\" || current.drain_confirmed_at === null) {\n\t\t\treturn { outcome: \"inactive\" };\n\t\t}\n\t\tif (current.state === \"activating\" && current.last_error_code !== null) {\n\t\t\treturn { outcome: \"failed\" };\n\t\t}\n\t}\n\tif (\n\t\tcurrent.state === \"activating\" &&\n\t\tcurrent.lease_token &&\n\t\tcurrent.lease_expires_at &&\n\t\t(await activationLeaseIsLive(db, current.lease_token))\n\t) {\n\t\treturn { outcome: \"lease_active\", leaseExpiresAt: current.lease_expires_at };\n\t}\n\tif (mode === \"background\" && current.state === \"activating\") {\n\t\treturn { outcome: \"conflict\", processedCollections: 0 };\n\t}\n\tthrow new Error(\"Media usage activation state is not claimable\");\n}\n\nasync function activationLeaseIsLive(db: Kysely<Database>, leaseToken: string): Promise<boolean> {\n\tconst row = await db\n\t\t.selectFrom(\"_emdash_media_usage_activation\")\n\t\t.select(\"task_key\")\n\t\t.where(\"task_key\", \"=\", ACTIVATION_KEY)\n\t\t.where(\"state\", \"=\", \"activating\")\n\t\t.where(\"runtime_generation\", \"=\", MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION)\n\t\t.where(\"lease_token\", \"=\", leaseToken)\n\t\t.where(\"lease_expires_at\", \"is not\", null)\n\t\t.where(timestampIsLive(db, \"lease_expires_at\"))\n\t\t.executeTakeFirst();\n\treturn row !== undefined;\n}\n\nasync function findActivationCandidates(\n\tdb: Kysely<Database>,\n\tcollectionCursor: string | null,\n): Promise<Array<{ id: string; slug: string }>> {\n\tlet query = db.selectFrom(\"_emdash_collections\").select([\"id\", \"slug\"]);\n\tif (collectionCursor) query = query.where(\"slug\", \">\", collectionCursor);\n\treturn query\n\t\t.orderBy(\"slug\", \"asc\")\n\t\t.limit(MEDIA_USAGE_ACTIVATION_LIMITS.collectionsPerCall + 1)\n\t\t.execute();\n}\n\nasync function prepareCollectionForActivation(\n\tdb: Kysely<Database>,\n\tcollection: { id: string; slug: string },\n\tleaseToken: string,\n): Promise<void> {\n\tconst now = timestampOffset(db, 0);\n\tconst existingStatus = sql.ref(\"_emdash_media_usage_index_status.status\");\n\tconst existingCompletedAt = sql.ref(\"_emdash_media_usage_index_status.completed_at\");\n\tconst existingCollectionId = sql.ref(\"_emdash_media_usage_index_status.collection_id\");\n\tconst existingCaptureState = sql.ref(\"_emdash_media_usage_index_status.capture_state\");\n\tconst row = await db\n\t\t.insertInto(\"_emdash_media_usage_index_status\")\n\t\t.values({\n\t\t\tadapter_id: \"content-media\",\n\t\t\tscope_type: \"collection\",\n\t\t\tscope_key: collection.slug,\n\t\t\tstatus: \"never\",\n\t\t\tcollection_id: collection.id,\n\t\t\treconciliation_required: 1,\n\t\t\tcapture_state: \"installing\",\n\t\t\tupdated_at: now,\n\t\t})\n\t\t.onConflict((conflict) =>\n\t\t\tconflict\n\t\t\t\t.columns([\"adapter_id\", \"scope_type\", \"scope_key\"])\n\t\t\t\t.doUpdateSet({\n\t\t\t\t\tstatus: sql<string>`CASE WHEN ${existingStatus} IN ('complete', 'running') THEN 'stale' ELSE ${existingStatus} END`,\n\t\t\t\t\tcompleted_at: sql<\n\t\t\t\t\t\tstring | null\n\t\t\t\t\t>`CASE WHEN ${existingStatus} IN ('complete', 'running') THEN NULL ELSE ${existingCompletedAt} END`,\n\t\t\t\t\tcursor: null,\n\t\t\t\t\tcollection_id: collection.id,\n\t\t\t\t\treconciliation_required: 1,\n\t\t\t\t\tcapture_state: \"installing\",\n\t\t\t\t\tupdated_at: now,\n\t\t\t\t})\n\t\t\t\t.where((eb) =>\n\t\t\t\t\teb.and([\n\t\t\t\t\t\teb.or([\n\t\t\t\t\t\t\teb(existingCollectionId, \"is\", null),\n\t\t\t\t\t\t\teb(existingCollectionId, \"=\", collection.id),\n\t\t\t\t\t\t]),\n\t\t\t\t\t\teb.or([\n\t\t\t\t\t\t\teb(existingCaptureState, \"is\", null),\n\t\t\t\t\t\t\teb(existingCaptureState, \"!=\", \"deleting\"),\n\t\t\t\t\t\t]),\n\t\t\t\t\t\tactiveActivationLease(db, leaseToken),\n\t\t\t\t\t]),\n\t\t\t\t),\n\t\t)\n\t\t.returning(\"collection_id\")\n\t\t.executeTakeFirst();\n\tif (row?.collection_id !== collection.id) {\n\t\tthrow new Error(\"Media usage collection lifecycle identity conflict\");\n\t}\n}\n\nasync function requireActivationLease(db: Kysely<Database>, leaseToken: string): Promise<void> {\n\tif (!(await activationLeaseIsLive(db, leaseToken))) {\n\t\tthrow new Error(\"Media usage activation lease is no longer live\");\n\t}\n}\n\nasync function activateCollectionLifecycle(\n\tdb: Kysely<Database>,\n\tcollection: { id: string; slug: string },\n\tleaseToken: string,\n): Promise<boolean> {\n\tconst result = await db\n\t\t.updateTable(\"_emdash_media_usage_index_status\")\n\t\t.set({ capture_state: \"active\", updated_at: timestampOffset(db, 0) })\n\t\t.where(\"adapter_id\", \"=\", \"content-media\")\n\t\t.where(\"scope_type\", \"=\", \"collection\")\n\t\t.where(\"scope_key\", \"=\", collection.slug)\n\t\t.where(\"collection_id\", \"=\", collection.id)\n\t\t.where(\"capture_state\", \"=\", \"installing\")\n\t\t.where(\n\t\t\tsql<boolean>`EXISTS (\n\t\t\t\tSELECT 1 FROM _emdash_collections AS collection\n\t\t\t\tWHERE collection.id = ${collection.id}\n\t\t\t\t\tAND collection.slug = ${collection.slug}\n\t\t\t)`,\n\t\t)\n\t\t.where(activeActivationLease(db, leaseToken))\n\t\t.executeTakeFirst();\n\treturn Number(result.numUpdatedRows ?? 0) > 0;\n}\n\nasync function releaseActivationBatch(\n\tdb: Kysely<Database>,\n\tleaseToken: string,\n\tcollectionCursor: string | null,\n): Promise<boolean> {\n\tconst result = await db\n\t\t.updateTable(\"_emdash_media_usage_activation\")\n\t\t.set({\n\t\t\tcollection_cursor: collectionCursor,\n\t\t\tlease_token: null,\n\t\t\tlease_expires_at: null,\n\t\t\tupdated_at: timestampOffset(db, 0),\n\t\t})\n\t\t.where(\"task_key\", \"=\", ACTIVATION_KEY)\n\t\t.where(\"state\", \"=\", \"activating\")\n\t\t.where(\"runtime_generation\", \"=\", MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION)\n\t\t.where(\"lease_token\", \"=\", leaseToken)\n\t\t.where(\"lease_expires_at\", \"is not\", null)\n\t\t.where(timestampIsLive(db, \"lease_expires_at\"))\n\t\t.executeTakeFirst();\n\treturn Number(result.numUpdatedRows ?? 0) > 0;\n}\n\nasync function findIncompleteCollection(\n\tdb: Kysely<Database>,\n): Promise<{ id: string; slug: string } | null> {\n\tconst row = await db\n\t\t.selectFrom(\"_emdash_collections as collection\")\n\t\t.select([\"collection.id\", \"collection.slug\"])\n\t\t.where((eb) =>\n\t\t\teb.not(\n\t\t\t\teb.exists(\n\t\t\t\t\teb\n\t\t\t\t\t\t.selectFrom(\"_emdash_media_usage_index_status as status\")\n\t\t\t\t\t\t.select(\"status.scope_key\")\n\t\t\t\t\t\t.where(\"status.adapter_id\", \"=\", \"content-media\")\n\t\t\t\t\t\t.where(\"status.scope_type\", \"=\", \"collection\")\n\t\t\t\t\t\t.whereRef(\"status.scope_key\", \"=\", \"collection.slug\")\n\t\t\t\t\t\t.whereRef(\"status.collection_id\", \"=\", \"collection.id\")\n\t\t\t\t\t\t.where(\"status.capture_state\", \"=\", \"active\"),\n\t\t\t\t),\n\t\t\t),\n\t\t)\n\t\t.orderBy(\"collection.slug\", \"asc\")\n\t\t.limit(1)\n\t\t.executeTakeFirst();\n\treturn row ?? null;\n}\n\nasync function finalizeActivation(\n\tdb: Kysely<Database>,\n\tleaseToken: string,\n\tcollectionCursor: string | null,\n): Promise<boolean> {\n\tconst now = timestampOffset(db, 0);\n\tconst result = await db\n\t\t.updateTable(\"_emdash_media_usage_activation\")\n\t\t.set({\n\t\t\tstate: \"active\",\n\t\t\tcollection_cursor: collectionCursor,\n\t\t\tlease_token: null,\n\t\t\tlease_expires_at: null,\n\t\t\tlast_error_code: null,\n\t\t\tactivated_at: now,\n\t\t\tupdated_at: now,\n\t\t})\n\t\t.where(\"task_key\", \"=\", ACTIVATION_KEY)\n\t\t.where(\"state\", \"=\", \"activating\")\n\t\t.where(\"runtime_generation\", \"=\", MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION)\n\t\t.where(\"lease_token\", \"=\", leaseToken)\n\t\t.where(\"lease_expires_at\", \"is not\", null)\n\t\t.where(timestampIsLive(db, \"lease_expires_at\"))\n\t\t.where(\n\t\t\tsql<boolean>`NOT EXISTS (\n\t\t\t\tSELECT 1\n\t\t\t\tFROM _emdash_collections AS collection\n\t\t\t\tWHERE NOT EXISTS (\n\t\t\t\t\tSELECT 1\n\t\t\t\t\tFROM _emdash_media_usage_index_status AS status\n\t\t\t\t\tWHERE status.adapter_id = 'content-media'\n\t\t\t\t\t\tAND status.scope_type = 'collection'\n\t\t\t\t\t\tAND status.scope_key = collection.slug\n\t\t\t\t\t\tAND status.collection_id = collection.id\n\t\t\t\t\t\tAND status.capture_state = 'active'\n\t\t\t\t)\n\t\t\t)`,\n\t\t)\n\t\t.executeTakeFirst();\n\treturn Number(result.numUpdatedRows ?? 0) > 0;\n}\n\nasync function recordActivationFailure(db: Kysely<Database>, leaseToken: string): Promise<void> {\n\tawait db\n\t\t.updateTable(\"_emdash_media_usage_activation\")\n\t\t.set({\n\t\t\tlease_token: null,\n\t\t\tlease_expires_at: null,\n\t\t\tlast_error_code: ACTIVATION_ERROR_CODE,\n\t\t\tupdated_at: timestampOffset(db, 0),\n\t\t})\n\t\t.where(\"task_key\", \"=\", ACTIVATION_KEY)\n\t\t.where(\"state\", \"=\", \"activating\")\n\t\t.where(\"runtime_generation\", \"=\", MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION)\n\t\t.where(\"lease_token\", \"=\", leaseToken)\n\t\t.execute();\n}\n\nfunction activeActivationLease(db: Kysely<Database>, leaseToken: string): RawBuilder<boolean> {\n\treturn sql<boolean>`EXISTS (\n\t\tSELECT 1\n\t\tFROM _emdash_media_usage_activation AS activation\n\t\tWHERE activation.task_key = ${ACTIVATION_KEY}\n\t\t\tAND activation.state = 'activating'\n\t\t\tAND activation.runtime_generation = ${MEDIA_USAGE_ACTIVATION_RUNTIME_GENERATION}\n\t\t\tAND activation.lease_token = ${leaseToken}\n\t\t\tAND activation.lease_expires_at IS NOT NULL\n\t\t\tAND ${timestampIsLive(db, \"activation.lease_expires_at\")}\n\t)`;\n}\n\nfunction timestampIsDue(db: Kysely<Database>, column: string): RawBuilder<boolean> {\n\treturn isPostgres(db)\n\t\t? sql<boolean>`${sql.ref(column)}::timestamptz <= clock_timestamp()`\n\t\t: sql<boolean>`${sql.ref(column)} <= strftime('%Y-%m-%dT%H:%M:%fZ', 'now')`;\n}\n\nfunction timestampIsLive(db: Kysely<Database>, column: string): RawBuilder<boolean> {\n\treturn isPostgres(db)\n\t\t? sql<boolean>`${sql.ref(column)}::timestamptz > clock_timestamp()`\n\t\t: sql<boolean>`${sql.ref(column)} > strftime('%Y-%m-%dT%H:%M:%fZ', 'now')`;\n}\n\nfunction timestampOffset(db: Kysely<Database>, seconds: number): RawBuilder<string> {\n\tif (isPostgres(db)) {\n\t\treturn sql<string>`to_char(\n\t\t\tclock_timestamp() AT TIME ZONE 'UTC' + (${seconds} * interval '1 second'),\n\t\t\t'YYYY-MM-DD\"T\"HH24:MI:SS.MS\"Z\"'\n\t\t)`;\n\t}\n\treturn sql<string>`strftime('%Y-%m-%dT%H:%M:%fZ', 'now', ${`+${seconds} seconds`})`;\n}\n"],"mappings":";;;;;;AAUA,MAAM,iBAAiB;AACvB,MAAM,wBAAwB;AAC9B,MAAa,4CAA4C;AAEzD,IAAa,2CAAb,cAA8D,MAAM;AAcpE,MAAa,gCAAgC,OAAO,OAAO;CAC1D,oBAAoB;CACpB,sBAAsB;CACtB,CAAC;AAyBF,eAAsB,8BACrB,IACsC;CACtC,MAAM,aAAa,MAAM,GACvB,WAAW,iCAAiC,CAC5C,OAAO;EACP;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,CAAC,CACD,MAAM,YAAY,KAAK,eAAe,CACtC,yBAAyB;AAC3B,yBAAwB,WAAW;AACnC,KACC,WAAW,UAAU,cACrB,WAAW,UAAU,gBACrB,WAAW,UAAU,SAErB,OAAM,IAAI,MAAM,uCAAuC;AAExD,KAAI,CAAC,OAAO,UAAU,WAAW,cAAc,IAAI,WAAW,gBAAgB,EAC7E,OAAM,IAAI,MAAM,+CAA+C;AAGhE,QAAO;EACN,OAAO,WAAW;EAClB,kBAAkB,WAAW;EAC7B,cAAc,WAAW;EACzB,kBAAkB,WAAW;EAC7B,iBAAiB,WAAW;EAC5B,eAAe,WAAW,oBAAoB,OAAO,OAAO;EAC5D,gBAAgB,WAAW;EAC3B,aAAa,WAAW;EACxB,WAAW,WAAW;EACtB;;AAGF,eAAsB,qCACrB,IACA,UACmB;CACnB,MAAM,aAAa,MAAM,0BAA0B,GAAG;AACtD,KAAI,CAAC,WAAY,QAAO;AACxB,yBAAwB,WAAW;AACnC,KAAI,WAAW,UAAU,SAAU,QAAO;CAE1C,MAAM,YAAY,MAAM,GACtB,WAAW,mCAAmC,CAC9C,OAAO,CAAC,iBAAiB,SAAS,CAAC,CACnC,MAAM,cAAc,KAAK,gBAAgB,CACzC,MAAM,cAAc,KAAK,aAAa,CACtC,MAAM,aAAa,KAAK,SAAS,eAAe,CAChD,MAAM,iBAAiB,KAAK,SAAS,aAAa,CAClD,MAAM,iBAAiB,MAAM,CAAC,cAAc,QAAQ,CAAC,CACrD,kBAAkB;AACpB,QACC,WAAW,kBAAkB,SAAS,iBACrC,SAAS,sBACP,UAAU,WAAW,SAAS,sBAC9B,UAAU,WAAW;;AAI1B,eAAsB,mCACrB,IACA,OAMkD;CAClD,MAAM,aAAa,MAAM,0BAA0B,GAAG;AACtD,KAAI,CAAC,WACJ,QAAO;EACN,iBAAiB;EACjB,cAAc,MAAM;EACpB,oBAAoB,MAAM,2BAA2B;EACrD,UAAU;EACV;AAEF,yBAAwB,WAAW;AACnC,KAAI,WAAW,UAAU,SACxB,QAAO;EACN,iBAAiB;EACjB,cAAc,MAAM;EACpB,oBAAoB,MAAM,2BAA2B;EACrD,UAAU;EACV;CAGF,MAAM,WAAW,MAAM,GACrB,WAAW,mCAAmC,CAC9C,OAAO;EAAC;EAAiB;EAAiB;EAAS,CAAC,CACpD,MAAM,cAAc,KAAK,gBAAgB,CACzC,MAAM,cAAc,KAAK,aAAa,CACtC,MAAM,aAAa,KAAK,MAAM,eAAe,CAC7C,kBAAkB;AACpB,KAAI,UAAU;AACb,MACC,SAAS,kBACR,SAAS,kBAAkB,gBAAgB,SAAS,kBAAkB,aACtE,MAAM,sBACJ,SAAS,WAAW,MAAM,sBAC1B,SAAS,WAAW,UACtB,MAAM,2BAA2B,UACjC,MAAM,2BAA2B,SAAS,eAE3C,QAAO;GACN,iBAAiB;GACjB,cAAc,SAAS;GACvB,oBAAoB,MAAM,2BAA2B;GACrD,UAAU;GACV;AAEF,QAAM,IAAI,MAAM,qDAAqD;;AAEtE,KAAI,MAAM,2BAA2B,OACpC,OAAM,IAAI,MAAM,8CAA8C;AAG/D,OAAM,GACJ,WAAW,mCAAmC,CAC9C,OAAO;EACP,YAAY;EACZ,YAAY;EACZ,WAAW,MAAM;EACjB,QAAQ;EACR,eAAe,MAAM;EACrB,yBAAyB;EACzB,eAAe;EACf,QAAQ,MAAM,uBAAuB;EACrC,YAAY,gBAAgB,IAAI,EAAE;EAClC,CAAC,CACD,SAAS;AACX,QAAO;EACN,iBAAiB;EACjB,cAAc,MAAM;EACpB,oBAAoB;EACpB,UAAU;EACV;;AAGF,eAAsB,2CACrB,IACA,UACgB;AAChB,OAAM,iCAAiC,IAAI,UAAU,EAAE,iBAAiB,OAAO,CAAC;AAChF,KAAI,CAAE,MAAM,gCAAgC,IAAI,SAAS,CACxD,OAAM,IAAI,MAAM,kDAAkD;;AAIpE,eAAsB,qCACrB,IACA,UACgB;CAChB,MAAM,SAAS,MAAM,GACnB,YAAY,mCAAmC,CAC/C,IAAI;EAAE,eAAe;EAAS,YAAY,gBAAgB,IAAI,EAAE;EAAE,CAAC,CACnE,MAAM,cAAc,KAAK,gBAAgB,CACzC,MAAM,cAAc,KAAK,aAAa,CACtC,MAAM,aAAa,KAAK,SAAS,eAAe,CAChD,MAAM,iBAAiB,KAAK,SAAS,aAAa,CAClD,MAAM,iBAAiB,MAAM,CAAC,cAAc,QAAQ,CAAC,CACrD,MACA,GAAY;;kCAEmB,eAAe;;2CAEN,0CAA0C;MAElF,CACA,kBAAkB;AACpB,KAAI,OAAO,OAAO,kBAAkB,EAAE,KAAK,EAC1C,OAAM,IAAI,MAAM,kDAAkD;;AAIpE,eAAsB,oCACrB,IACA,UACgB;CAChB,MAAM,SAAS,MAAM,GACnB,YAAY,mCAAmC,CAC/C,IAAI;EAAE,eAAe;EAAU,QAAQ;EAAM,YAAY,gBAAgB,IAAI,EAAE;EAAE,CAAC,CAClF,MAAM,cAAc,KAAK,gBAAgB,CACzC,MAAM,cAAc,KAAK,aAAa,CACtC,MAAM,aAAa,KAAK,SAAS,eAAe,CAChD,MAAM,iBAAiB,KAAK,SAAS,aAAa,CAClD,MAAM,iBAAiB,KAAK,QAAQ,CACpC,MACA,GAAY;;4BAEa,SAAS,aAAa;6BACrB,SAAS,eAAe;MAElD,CACA,MACA,GAAY;;kCAEmB,eAAe;;2CAEN,0CAA0C;MAElF,CACA,kBAAkB;AACpB,KAAI,OAAO,OAAO,kBAAkB,EAAE,KAAK,EAC1C,OAAM,IAAI,MAAM,mDAAmD;;AAIrE,eAAsB,0BACrB,IACA,OACsC;AACtC,KAAI,MAAM,mBAAmB,KAC5B,OAAM,IAAI,MAAM,wEAAwE;AAEzF,QAAO,4BAA4B,IAAI,YAAY;;AAGpD,eAAsB,6BACrB,IACkD;AAClD,QAAO,4BAA4B,IAAI,aAAa;;AAWrD,eAAe,4BACd,IACA,MACkD;CAClD,MAAM,SAAS,MAAM,eAAe,GAAG;AACvC,yBAAwB,OAAO;AAC/B,KAAI,OAAO,UAAU,SACpB,QAAO;EAAE,SAAS;EAAU,sBAAsB;EAAG;AAEtD,KAAI,SAAS,cAAc;AAC1B,MAAI,OAAO,UAAU,cAAc,OAAO,uBAAuB,KAChE,QAAO,EAAE,SAAS,YAAY;AAE/B,MAAI,OAAO,UAAU,aACpB,OAAM,IAAI,MAAM,uCAAuC;AAExD,MAAI,OAAO,oBAAoB,KAAM,QAAO,EAAE,SAAS,UAAU;;CAGlE,MAAM,aAAa,MAAM;CACzB,MAAM,QAAQ,MAAM,gBAAgB,IAAI,YAAY,KAAK;AACzD,KAAI,CAAC,MAAO,QAAO,oBAAoB,IAAI,KAAK;CAEhD,IAAI,uBAAuB;AAC3B,KAAI;EACH,MAAM,aAAa,MAAM,yBAAyB,IAAI,MAAM,kBAAkB;AAC9E,OAAK,MAAM,cAAc,WAAW,MACnC,GACA,8BAA8B,mBAC9B,EAAE;AACF,SAAM,uBAAuB,IAAI,WAAW;AAC5C,SAAM,+BAA+B,IAAI,YAAY,WAAW;AAChE,SAAM,uBAAuB,IAAI,WAAW;AAC5C,SAAM,iCACL,IACA;IACC,cAAc,WAAW;IACzB,gBAAgB,WAAW;IAC3B,EACD,EAAE,iBAAiB,OAAO,CAC1B;AACD,SAAM,uBAAuB,IAAI,WAAW;AAC5C,OACC,CAAE,MAAM,gCAAgC,IAAI;IAC3C,cAAc,WAAW;IACzB,gBAAgB,WAAW;IAC3B,CAAC,CAEF,OAAM,IAAI,MAAM,kDAAkD;AAEnE,OAAI,CAAE,MAAM,4BAA4B,IAAI,YAAY,WAAW,CAClE,OAAM,IAAI,MAAM,mDAAmD;AAEpE;;EAGD,MAAM,mBACL,WAAW,KAAK,IAAI,sBAAsB,WAAW,OAAO,GAAG,IAAI,QACnE,MAAM;AACP,MAAI,WAAW,SAAS,8BAA8B,oBAAoB;AACzE,OAAI,CAAE,MAAM,uBAAuB,IAAI,YAAY,iBAAiB,CACnE,OAAM,IAAI,MAAM,+CAA+C;AAEhE,UAAO;IAAE,SAAS;IAAc;IAAsB;IAAkB;;AAIzE,MADmB,MAAM,yBAAyB,GAAG,EACrC;AACf,OAAI,CAAE,MAAM,uBAAuB,IAAI,YAAY,KAAK,CACvD,OAAM,IAAI,MAAM,gDAAgD;AAEjE,UAAO;IAAE,SAAS;IAAc;IAAsB,kBAAkB;IAAM;;AAG/E,MAAI,CAAE,MAAM,mBAAmB,IAAI,YAAY,iBAAiB,CAC/D,OAAM,IAAI,MAAM,qDAAqD;AAEtE,SAAO;GAAE,SAAS;GAAU;GAAsB;UAC1C,OAAO;AACf,MAAI,CAAE,MAAM,sBAAsB,IAAI,WAAW,CAChD,QAAO;GAAE,SAAS;GAAY;GAAsB;AAErD,QAAM,wBAAwB,IAAI,WAAW;AAC7C,QAAM,IAAI,MAAM,iCAAiC,EAAE,OAAO,OAAO,CAAC;;;AAIpE,eAAe,eACd,IACiD;AACjD,QAAO,GACL,WAAW,iCAAiC,CAC5C,WAAW,CACX,MAAM,YAAY,KAAK,eAAe,CACtC,yBAAyB;;AAG5B,eAAe,0BACd,IACwD;AACxD,KAAI,CAAE,MAAM,YAAY,IAAI,iCAAiC,CAAG,QAAO;AACvE,QAAO,eAAe,GAAG;;AAG1B,SAAS,wBAAwB,YAAkD;AAClF,KAAI,WAAW,uBAAuB,0CACrC,OAAM,IAAI,yCACT,qDACA;;AAIH,eAAe,gBACd,IACA,YACA,MACwD;CACxD,MAAM,MAAM,gBAAgB,IAAI,EAAE;CAClC,MAAM,cAAc;EACnB,aAAa;EACb,kBAAkB,gBAAgB,IAAI,8BAA8B,qBAAqB;EACzF,eAAe,GAAW;EAC1B,mBAAmB;EACnB,YAAY;EACZ;CACD,IAAI,QAAQ,GACV,YAAY,iCAAiC,CAC7C,IACA,SAAS,cACN;EACA,GAAG;EACH,OAAO;EACP,oBAAoB;EACpB,iBAAiB;EACjB,GACA,YACH,CACA,MAAM,YAAY,KAAK,eAAe,CACtC,MAAM,sBAAsB,KAAK,0CAA0C;AAC7E,KAAI,SAAS,YACZ,SAAQ,MAAM,OAAO,OACpB,GAAG,GAAG,CACL,GAAG,SAAS,KAAK,WAAW,EAC5B,GAAG,IAAI,CACN,GAAG,SAAS,KAAK,aAAa,EAC9B,GAAG,GAAG,CACL,GAAG,eAAe,MAAM,KAAK,EAC7B,GAAG,IAAI,CACN,GAAG,oBAAoB,UAAU,KAAK,EACtC,eAAe,IAAI,mBAAmB,CACtC,CAAC,CACF,CAAC,CACF,CAAC,CACF,CAAC,CACF;KAED,SAAQ,MACN,MAAM,SAAS,KAAK,aAAa,CACjC,MAAM,sBAAsB,UAAU,KAAK,CAC3C,MAAM,mBAAmB,MAAM,KAAK,CACpC,OAAO,OACP,GAAG,GAAG,CACL,GAAG,eAAe,MAAM,KAAK,EAC7B,GAAG,IAAI,CAAC,GAAG,oBAAoB,UAAU,KAAK,EAAE,eAAe,IAAI,mBAAmB,CAAC,CAAC,CACxF,CAAC,CACF;AAEH,QAAQ,MAAM,MAAM,cAAc,CAAC,kBAAkB,IAAK;;AAG3D,eAAe,oBACd,IACA,MACkD;CAClD,MAAM,UAAU,MAAM,eAAe,GAAG;AACxC,yBAAwB,QAAQ;AAChC,KAAI,QAAQ,UAAU,SAAU,QAAO;EAAE,SAAS;EAAU,sBAAsB;EAAG;AACrF,KAAI,SAAS,cAAc;AAC1B,MAAI,QAAQ,UAAU,cAAc,QAAQ,uBAAuB,KAClE,QAAO,EAAE,SAAS,YAAY;AAE/B,MAAI,QAAQ,UAAU,gBAAgB,QAAQ,oBAAoB,KACjE,QAAO,EAAE,SAAS,UAAU;;AAG9B,KACC,QAAQ,UAAU,gBAClB,QAAQ,eACR,QAAQ,oBACP,MAAM,sBAAsB,IAAI,QAAQ,YAAY,CAErD,QAAO;EAAE,SAAS;EAAgB,gBAAgB,QAAQ;EAAkB;AAE7E,KAAI,SAAS,gBAAgB,QAAQ,UAAU,aAC9C,QAAO;EAAE,SAAS;EAAY,sBAAsB;EAAG;AAExD,OAAM,IAAI,MAAM,gDAAgD;;AAGjE,eAAe,sBAAsB,IAAsB,YAAsC;AAWhG,QAVY,MAAM,GAChB,WAAW,iCAAiC,CAC5C,OAAO,WAAW,CAClB,MAAM,YAAY,KAAK,eAAe,CACtC,MAAM,SAAS,KAAK,aAAa,CACjC,MAAM,sBAAsB,KAAK,0CAA0C,CAC3E,MAAM,eAAe,KAAK,WAAW,CACrC,MAAM,oBAAoB,UAAU,KAAK,CACzC,MAAM,gBAAgB,IAAI,mBAAmB,CAAC,CAC9C,kBAAkB,KACL;;AAGhB,eAAe,yBACd,IACA,kBAC+C;CAC/C,IAAI,QAAQ,GAAG,WAAW,sBAAsB,CAAC,OAAO,CAAC,MAAM,OAAO,CAAC;AACvE,KAAI,iBAAkB,SAAQ,MAAM,MAAM,QAAQ,KAAK,iBAAiB;AACxE,QAAO,MACL,QAAQ,QAAQ,MAAM,CACtB,MAAM,8BAA8B,qBAAqB,EAAE,CAC3D,SAAS;;AAGZ,eAAe,+BACd,IACA,YACA,YACgB;CAChB,MAAM,MAAM,gBAAgB,IAAI,EAAE;CAClC,MAAM,iBAAiB,IAAI,IAAI,0CAA0C;CACzE,MAAM,sBAAsB,IAAI,IAAI,gDAAgD;CACpF,MAAM,uBAAuB,IAAI,IAAI,iDAAiD;CACtF,MAAM,uBAAuB,IAAI,IAAI,iDAAiD;AA2CtF,MA1CY,MAAM,GAChB,WAAW,mCAAmC,CAC9C,OAAO;EACP,YAAY;EACZ,YAAY;EACZ,WAAW,WAAW;EACtB,QAAQ;EACR,eAAe,WAAW;EAC1B,yBAAyB;EACzB,eAAe;EACf,YAAY;EACZ,CAAC,CACD,YAAY,aACZ,SACE,QAAQ;EAAC;EAAc;EAAc;EAAY,CAAC,CAClD,YAAY;EACZ,QAAQ,GAAW,aAAa,eAAe,gDAAgD,eAAe;EAC9G,cAAc,GAEb,aAAa,eAAe,6CAA6C,oBAAoB;EAC9F,QAAQ;EACR,eAAe,WAAW;EAC1B,yBAAyB;EACzB,eAAe;EACf,YAAY;EACZ,CAAC,CACD,OAAO,OACP,GAAG,IAAI;EACN,GAAG,GAAG,CACL,GAAG,sBAAsB,MAAM,KAAK,EACpC,GAAG,sBAAsB,KAAK,WAAW,GAAG,CAC5C,CAAC;EACF,GAAG,GAAG,CACL,GAAG,sBAAsB,MAAM,KAAK,EACpC,GAAG,sBAAsB,MAAM,WAAW,CAC1C,CAAC;EACF,sBAAsB,IAAI,WAAW;EACrC,CAAC,CACF,CACF,CACA,UAAU,gBAAgB,CAC1B,kBAAkB,GACX,kBAAkB,WAAW,GACrC,OAAM,IAAI,MAAM,qDAAqD;;AAIvE,eAAe,uBAAuB,IAAsB,YAAmC;AAC9F,KAAI,CAAE,MAAM,sBAAsB,IAAI,WAAW,CAChD,OAAM,IAAI,MAAM,iDAAiD;;AAInE,eAAe,4BACd,IACA,YACA,YACmB;CACnB,MAAM,SAAS,MAAM,GACnB,YAAY,mCAAmC,CAC/C,IAAI;EAAE,eAAe;EAAU,YAAY,gBAAgB,IAAI,EAAE;EAAE,CAAC,CACpE,MAAM,cAAc,KAAK,gBAAgB,CACzC,MAAM,cAAc,KAAK,aAAa,CACtC,MAAM,aAAa,KAAK,WAAW,KAAK,CACxC,MAAM,iBAAiB,KAAK,WAAW,GAAG,CAC1C,MAAM,iBAAiB,KAAK,aAAa,CACzC,MACA,GAAY;;4BAEa,WAAW,GAAG;6BACb,WAAW,KAAK;MAE1C,CACA,MAAM,sBAAsB,IAAI,WAAW,CAAC,CAC5C,kBAAkB;AACpB,QAAO,OAAO,OAAO,kBAAkB,EAAE,GAAG;;AAG7C,eAAe,uBACd,IACA,YACA,kBACmB;CACnB,MAAM,SAAS,MAAM,GACnB,YAAY,iCAAiC,CAC7C,IAAI;EACJ,mBAAmB;EACnB,aAAa;EACb,kBAAkB;EAClB,YAAY,gBAAgB,IAAI,EAAE;EAClC,CAAC,CACD,MAAM,YAAY,KAAK,eAAe,CACtC,MAAM,SAAS,KAAK,aAAa,CACjC,MAAM,sBAAsB,KAAK,0CAA0C,CAC3E,MAAM,eAAe,KAAK,WAAW,CACrC,MAAM,oBAAoB,UAAU,KAAK,CACzC,MAAM,gBAAgB,IAAI,mBAAmB,CAAC,CAC9C,kBAAkB;AACpB,QAAO,OAAO,OAAO,kBAAkB,EAAE,GAAG;;AAG7C,eAAe,yBACd,IAC+C;AAqB/C,QApBY,MAAM,GAChB,WAAW,oCAAoC,CAC/C,OAAO,CAAC,iBAAiB,kBAAkB,CAAC,CAC5C,OAAO,OACP,GAAG,IACF,GAAG,OACF,GACE,WAAW,6CAA6C,CACxD,OAAO,mBAAmB,CAC1B,MAAM,qBAAqB,KAAK,gBAAgB,CAChD,MAAM,qBAAqB,KAAK,aAAa,CAC7C,SAAS,oBAAoB,KAAK,kBAAkB,CACpD,SAAS,wBAAwB,KAAK,gBAAgB,CACtD,MAAM,wBAAwB,KAAK,SAAS,CAC9C,CACD,CACD,CACA,QAAQ,mBAAmB,MAAM,CACjC,MAAM,EAAE,CACR,kBAAkB,IACN;;AAGf,eAAe,mBACd,IACA,YACA,kBACmB;CACnB,MAAM,MAAM,gBAAgB,IAAI,EAAE;CAClC,MAAM,SAAS,MAAM,GACnB,YAAY,iCAAiC,CAC7C,IAAI;EACJ,OAAO;EACP,mBAAmB;EACnB,aAAa;EACb,kBAAkB;EAClB,iBAAiB;EACjB,cAAc;EACd,YAAY;EACZ,CAAC,CACD,MAAM,YAAY,KAAK,eAAe,CACtC,MAAM,SAAS,KAAK,aAAa,CACjC,MAAM,sBAAsB,KAAK,0CAA0C,CAC3E,MAAM,eAAe,KAAK,WAAW,CACrC,MAAM,oBAAoB,UAAU,KAAK,CACzC,MAAM,gBAAgB,IAAI,mBAAmB,CAAC,CAC9C,MACA,GAAY;;;;;;;;;;;;MAaZ,CACA,kBAAkB;AACpB,QAAO,OAAO,OAAO,kBAAkB,EAAE,GAAG;;AAG7C,eAAe,wBAAwB,IAAsB,YAAmC;AAC/F,OAAM,GACJ,YAAY,iCAAiC,CAC7C,IAAI;EACJ,aAAa;EACb,kBAAkB;EAClB,iBAAiB;EACjB,YAAY,gBAAgB,IAAI,EAAE;EAClC,CAAC,CACD,MAAM,YAAY,KAAK,eAAe,CACtC,MAAM,SAAS,KAAK,aAAa,CACjC,MAAM,sBAAsB,KAAK,0CAA0C,CAC3E,MAAM,eAAe,KAAK,WAAW,CACrC,SAAS;;AAGZ,SAAS,sBAAsB,IAAsB,YAAyC;AAC7F,QAAO,GAAY;;;gCAGY,eAAe;;yCAEN,0CAA0C;kCACjD,WAAW;;SAEpC,gBAAgB,IAAI,8BAA8B,CAAC;;;AAI5D,SAAS,eAAe,IAAsB,QAAqC;AAClF,QAAO,WAAW,GAAG,GAClB,GAAY,GAAG,IAAI,IAAI,OAAO,CAAC,sCAC/B,GAAY,GAAG,IAAI,IAAI,OAAO,CAAC;;AAGnC,SAAS,gBAAgB,IAAsB,QAAqC;AACnF,QAAO,WAAW,GAAG,GAClB,GAAY,GAAG,IAAI,IAAI,OAAO,CAAC,qCAC/B,GAAY,GAAG,IAAI,IAAI,OAAO,CAAC;;AAGnC,SAAS,gBAAgB,IAAsB,SAAqC;AACnF,KAAI,WAAW,GAAG,CACjB,QAAO,GAAW;6CACyB,QAAQ;;;AAIpD,QAAO,GAAW,yCAAyC,IAAI,QAAQ,UAAU"}

package/dist/{adapters-Bb1vG41D.d.mts → adapters-CzL3H752.d.mts}

@@ -112,9 +112,9 @@ interface LibsqlConfig {
   migrationAuthTokenEnv?: string;
 }
 /**
- * SQLite database adapter (better-sqlite3)
+ * SQLite database adapter (node:sqlite)
  *
- * For local development and Node.js deployments.
+ * For local development and Node.js deployments. Requires Node.js 22.16 or later.
  *
  * @example
  * ```ts
@@ -166,4 +166,4 @@ interface PostgresConfig {
 declare function postgres(config: PostgresConfig): DatabaseDescriptor;
 //#endregion
 export { ExecuteCollectionDeletionGuard as a, SqliteConfig as c, sqlite as d, DatabaseDialectType as i, libsql as l, CollectionDeletionGuardResult as n, LibsqlConfig as o, DatabaseDescriptor as r, PostgresConfig as s, CollectionDeletionGuardInput as t, postgres as u };
-//# sourceMappingURL=adapters-Bb1vG41D.d.mts.map
+//# sourceMappingURL=adapters-CzL3H752.d.mts.map

package/dist/{adapters-Bb1vG41D.d.mts.map → adapters-CzL3H752.d.mts.map}

@@ -1 +1 @@
-{"version":3,"file":"adapters-Bb1vG41D.d.mts","names":[],"sources":["../src/db/adapters.ts"],"mappings":";;AA0BA;;;;;AAEA;;;;;;;;;;;;;;;AAeA;;;;AAAA,KAjBY,mBAAA;AAAA,KAEA,4BAAA;EAET,MAAA;EACA,YAAA;EACA,cAAA;EACA,UAAA;EACA,WAAA;AAAA;EAGA,MAAA;EACA,YAAA;EACA,cAAA;EACA,UAAA;AAAA;AAAA,KAGS,6BAAA;EACP,OAAA;AAAA;EACA,OAAA;AAAA;EACA,OAAA;AAAA;EACA,OAAA;AAAA;AAAA,KAEO,8BAAA,IACX,MAAA,WACA,KAAA,EAAO,4BAAA,KACH,OAAA,CAAQ,6BAAA;;;;UAmBI,kBAAA;EAChB,UAAA;EACA,MAAA;EACA,IAAA,EAAM,mBAAA;EAGL;EADD,UAAA;IACC,UAAA;IACA,cAAA;EAAA;EAmCD;;;AAGD;;;;;AAOA;;;;;;EA7BC,oBAAA;EAsCqB;;AAatB;;;;;EA3CC,uBAAA;EA2C6C;;;AAyB9C;;;;;EA3DC,kBAAA;EA2D6C;EAzD7C,+BAAA;AAAA;AAAA,UAGgB,YAAA;EA6Ec;;;EAzE9B,GAAA;AAAA;AAAA,UAGgB,YAAA;EA0EhB;;;EAtEA,GAAA;EA0EA;;;EAtEA,SAAA;EACA,qBAAA;AAAA;AAmFD;;;;;;;;;;AAAA,iBAtEgB,MAAA,CAAO,MAAA,EAAQ,YAAA,GAAe,kBAAA;;;;;;;;;;;;;;iBAyB9B,MAAA,CAAO,MAAA,EAAQ,YAAA,GAAe,kBAAA;;;;UAuB7B,cAAA;EAChB,gBAAA;EACA,IAAA;EACA,IAAA;EACA,QAAA;EACA,IAAA;EACA,QAAA;EACA,GAAA;EACA,IAAA;IAAS,GAAA;IAAc,GAAA;EAAA;EACvB,4BAAA;AAAA;;;;;;;;;;;iBAae,QAAA,CAAS,MAAA,EAAQ,cAAA,GAAiB,kBAAA"}
+{"version":3,"file":"adapters-CzL3H752.d.mts","names":[],"sources":["../src/db/adapters.ts"],"mappings":";;AA0BA;;;;;AAEA;;;;;;;;;;;;;;;AAeA;;;;AAAA,KAjBY,mBAAA;AAAA,KAEA,4BAAA;EAET,MAAA;EACA,YAAA;EACA,cAAA;EACA,UAAA;EACA,WAAA;AAAA;EAGA,MAAA;EACA,YAAA;EACA,cAAA;EACA,UAAA;AAAA;AAAA,KAGS,6BAAA;EACP,OAAA;AAAA;EACA,OAAA;AAAA;EACA,OAAA;AAAA;EACA,OAAA;AAAA;AAAA,KAEO,8BAAA,IACX,MAAA,WACA,KAAA,EAAO,4BAAA,KACH,OAAA,CAAQ,6BAAA;;;;UAmBI,kBAAA;EAChB,UAAA;EACA,MAAA;EACA,IAAA,EAAM,mBAAA;EAGL;EADD,UAAA;IACC,UAAA;IACA,cAAA;EAAA;EAmCD;;;AAGD;;;;;AAOA;;;;;;EA7BC,oBAAA;EAsCqB;;AAatB;;;;;EA3CC,uBAAA;EA2C6C;;;AAyB9C;;;;;EA3DC,kBAAA;EA2D6C;EAzD7C,+BAAA;AAAA;AAAA,UAGgB,YAAA;EA6Ec;;;EAzE9B,GAAA;AAAA;AAAA,UAGgB,YAAA;EA0EhB;;;EAtEA,GAAA;EA0EA;;;EAtEA,SAAA;EACA,qBAAA;AAAA;AAmFD;;;;;;;;;;AAAA,iBAtEgB,MAAA,CAAO,MAAA,EAAQ,YAAA,GAAe,kBAAA;;;;;;;;;;;;;;iBAyB9B,MAAA,CAAO,MAAA,EAAQ,YAAA,GAAe,kBAAA;;;;UAuB7B,cAAA;EAChB,gBAAA;EACA,IAAA;EACA,IAAA;EACA,QAAA;EACA,IAAA;EACA,QAAA;EACA,GAAA;EACA,IAAA;IAAS,GAAA;IAAc,GAAA;EAAA;EACvB,4BAAA;AAAA;;;;;;;;;;;iBAae,QAAA,CAAS,MAAA,EAAQ,cAAA,GAAiB,kBAAA"}

package/dist/{allowed-origins-DW7sYyqg.mjs → allowed-origins-maylGaHv.mjs}

@@ -1,4 +1,4 @@
-import { n as getEnvAllowedOrigins } from "./public-url-CWoFhQT8.mjs";
+import { n as getEnvAllowedOrigins } from "./public-url-DRz_AinV.mjs";
 
 //#region src/auth/allowed-origins.ts
 /**
@@ -113,4 +113,4 @@ function isIPLiteralHostname(h) {
 
 //#endregion
 export { validateAllowedOrigins as n, validateOriginShape as r, getConfiguredAllowedOrigins as t };
-//# sourceMappingURL=allowed-origins-DW7sYyqg.mjs.map
+//# sourceMappingURL=allowed-origins-maylGaHv.mjs.map

package/dist/{allowed-origins-DW7sYyqg.mjs.map → allowed-origins-maylGaHv.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"allowed-origins-DW7sYyqg.mjs","names":[],"sources":["../src/auth/allowed-origins.ts"],"sourcesContent":["/**\n * Resolution and validation of multi-origin passkey verification.\n *\n * `allowedOrigins` lets one EmDash deployment accept passkey assertions from\n * several hostnames sharing the same `rpId` (e.g. apex + preview/staging\n * subdomains under one registrable parent). Origins come from two sources:\n *\n *   - `EmDashConfig.allowedOrigins` (declared in `astro.config.mjs`)\n *   - `EMDASH_ALLOWED_ORIGINS` (comma-separated runtime env var)\n *\n * Sources are merged (union of permissions, deduplicated). Each entry is\n * validated against `siteUrl` to fail loud on dead config the browser would\n * never honor.\n */\n\nimport { getEnvAllowedOrigins } from \"../api/public-url.js\";\nimport type { EmDashConfig } from \"../astro/integration/runtime.js\";\n\nexport type AllowedOriginSource = \"config.allowedOrigins\" | \"EMDASH_ALLOWED_ORIGINS\";\n\nexport interface TaggedOrigin {\n\t/** Raw entry as declared by the operator. */\n\torigin: string;\n\t/** Where the entry came from (used for source-attributed errors). */\n\tsource: AllowedOriginSource;\n}\n\n/**\n * Collect raw allowedOrigins from config and env, source-tagged.\n *\n * Returns raw values — the caller is expected to pass the result through\n * `validateAllowedOrigins()` before use in passkey verification.\n */\nexport function getConfiguredAllowedOrigins(config?: EmDashConfig): TaggedOrigin[] {\n\tconst tagged: TaggedOrigin[] = [];\n\tif (config?.allowedOrigins) {\n\t\tfor (const origin of config.allowedOrigins) {\n\t\t\tif (origin) tagged.push({ origin, source: \"config.allowedOrigins\" });\n\t\t}\n\t}\n\tfor (const origin of getEnvAllowedOrigins()) {\n\t\ttagged.push({ origin, source: \"EMDASH_ALLOWED_ORIGINS\" });\n\t}\n\treturn tagged;\n}\n\n/**\n * Validate per-entry shape rules (no `siteUrl` needed):\n *   - parses as `URL`\n *   - protocol is `http:` or `https:`\n *   - hostname has no trailing dot (`example.com.` rejected)\n *   - hostname has no empty labels (`foo..example.com` rejected)\n *\n * Returns the deduplicated, normalized origin form (`URL.origin`) of every\n * input, in input order. Throws on the first violation with a source-tagged\n * error message.\n */\nexport function validateOriginShape(tagged: TaggedOrigin[]): string[] {\n\tconst normalized: string[] = [];\n\tconst seen = new Set<string>();\n\tfor (const { origin, source } of tagged) {\n\t\tlet parsed: URL;\n\t\ttry {\n\t\t\tparsed = new URL(origin);\n\t\t} catch (e) {\n\t\t\tthrow configError(source, `invalid URL: \"${origin}\"`, e);\n\t\t}\n\t\tif (parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") {\n\t\t\tthrow configError(\n\t\t\t\tsource,\n\t\t\t\t`origin must be http or https: \"${origin}\" (got ${parsed.protocol})`,\n\t\t\t);\n\t\t}\n\t\tif (parsed.hostname.endsWith(\".\")) {\n\t\t\tthrow configError(\n\t\t\t\tsource,\n\t\t\t\t`hostname has a trailing dot: \"${origin}\". Remove the trailing dot — assertion origins from the browser do not include it.`,\n\t\t\t);\n\t\t}\n\t\tif (parsed.hostname.split(\".\").includes(\"\")) {\n\t\t\tthrow configError(source, `hostname has empty labels: \"${origin}\"`);\n\t\t}\n\t\tif (!seen.has(parsed.origin)) {\n\t\t\tseen.add(parsed.origin);\n\t\t\tnormalized.push(parsed.origin);\n\t\t}\n\t}\n\treturn normalized;\n}\n\n/**\n * Validate the effective merged allowedOrigins set against `siteUrl`.\n *\n * Performs `validateOriginShape()` plus the siteUrl-dependent rules:\n *   - Rule A: non-empty origins ⇒ `siteUrl` is set\n *   - `siteUrl` hostname is not an IP literal (multi-origin requires a domain)\n *   - `siteUrl` hostname has no trailing dot (cannot match assertion origins)\n *   - Rule B: each origin's hostname is `siteHost` exactly or a subdomain\n *\n * Throws on first violation. Returns the deduplicated normalized origins.\n *\n * Use this at the runtime chokepoint (where config + env are merged into the\n * effective set). At Astro integration init, prefer `validateOriginShape()`\n * for shape-only checks on `config.allowedOrigins`, since `siteUrl` may be\n * supplied at runtime via `EMDASH_SITE_URL`.\n */\nexport function validateAllowedOrigins(\n\tsiteUrl: string | undefined,\n\ttagged: TaggedOrigin[],\n): string[] {\n\tconst normalized = validateOriginShape(tagged);\n\tif (normalized.length === 0) return normalized;\n\n\tif (!siteUrl) {\n\t\tthrow new Error(\n\t\t\t`EmDash config error: allowedOrigins is set (${normalized.length} ${\n\t\t\t\tnormalized.length === 1 ? \"entry\" : \"entries\"\n\t\t\t}) but siteUrl is not. Without a canonical siteUrl, rpId is derived from the request hostname, defeating multi-origin passkeys. Set siteUrl in astro.config.mjs or via EMDASH_SITE_URL.`,\n\t\t);\n\t}\n\n\tlet siteHost: string;\n\ttry {\n\t\tsiteHost = new URL(siteUrl).hostname;\n\t} catch (e) {\n\t\tthrow new Error(`EmDash config error: siteUrl is not a valid URL: \"${siteUrl}\"`, {\n\t\t\tcause: e,\n\t\t});\n\t}\n\n\tif (siteHost.endsWith(\".\")) {\n\t\tthrow new Error(\n\t\t\t`EmDash config error: siteUrl \"${siteUrl}\" has a trailing-dot hostname, which cannot match assertion origins. Remove the trailing dot when using allowedOrigins.`,\n\t\t);\n\t}\n\tif (isIPLiteralHostname(siteHost)) {\n\t\tthrow new Error(\n\t\t\t`EmDash config error: siteUrl \"${siteUrl}\" uses an IP-literal hostname. Multi-origin passkeys require a domain-based siteUrl — IP addresses cannot have valid subdomains for WebAuthn rpId.`,\n\t\t);\n\t}\n\n\tfor (const { origin, source } of tagged) {\n\t\tconst h = new URL(origin).hostname;\n\t\tif (h !== siteHost && !h.endsWith(\".\" + siteHost)) {\n\t\t\tthrow configError(\n\t\t\t\tsource,\n\t\t\t\t`\"${origin}\" is not a subdomain of siteUrl \"${siteUrl}\". Allowed origins must be the same hostname as siteUrl or a subdomain of it.`,\n\t\t\t);\n\t\t}\n\t}\n\n\treturn normalized;\n}\n\nfunction configError(source: AllowedOriginSource, detail: string, cause?: unknown): Error {\n\tconst err = new Error(`EmDash config error in ${source}: ${detail}`);\n\tif (cause !== undefined) (err as Error & { cause?: unknown }).cause = cause;\n\treturn err;\n}\n\nconst IPV4_DOTTED_DECIMAL_RE = /^\\d+(\\.\\d+){3}$/;\n\nfunction isIPLiteralHostname(h: string): boolean {\n\t// IPv6 hostnames are bracketed by URL.hostname, e.g. \"[::1]\"\n\tif (h.startsWith(\"[\")) return true;\n\t// IPv4 dotted-decimal\n\treturn IPV4_DOTTED_DECIMAL_RE.test(h);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAiCA,SAAgB,4BAA4B,QAAuC;CAClF,MAAM,SAAyB,EAAE;AACjC,KAAI,QAAQ,gBACX;OAAK,MAAM,UAAU,OAAO,eAC3B,KAAI,OAAQ,QAAO,KAAK;GAAE;GAAQ,QAAQ;GAAyB,CAAC;;AAGtE,MAAK,MAAM,UAAU,sBAAsB,CAC1C,QAAO,KAAK;EAAE;EAAQ,QAAQ;EAA0B,CAAC;AAE1D,QAAO;;;;;;;;;;;;;AAcR,SAAgB,oBAAoB,QAAkC;CACrE,MAAM,aAAuB,EAAE;CAC/B,MAAM,uBAAO,IAAI,KAAa;AAC9B,MAAK,MAAM,EAAE,QAAQ,YAAY,QAAQ;EACxC,IAAI;AACJ,MAAI;AACH,YAAS,IAAI,IAAI,OAAO;WAChB,GAAG;AACX,SAAM,YAAY,QAAQ,iBAAiB,OAAO,IAAI,EAAE;;AAEzD,MAAI,OAAO,aAAa,WAAW,OAAO,aAAa,SACtD,OAAM,YACL,QACA,kCAAkC,OAAO,SAAS,OAAO,SAAS,GAClE;AAEF,MAAI,OAAO,SAAS,SAAS,IAAI,CAChC,OAAM,YACL,QACA,iCAAiC,OAAO,oFACxC;AAEF,MAAI,OAAO,SAAS,MAAM,IAAI,CAAC,SAAS,GAAG,CAC1C,OAAM,YAAY,QAAQ,+BAA+B,OAAO,GAAG;AAEpE,MAAI,CAAC,KAAK,IAAI,OAAO,OAAO,EAAE;AAC7B,QAAK,IAAI,OAAO,OAAO;AACvB,cAAW,KAAK,OAAO,OAAO;;;AAGhC,QAAO;;;;;;;;;;;;;;;;;;AAmBR,SAAgB,uBACf,SACA,QACW;CACX,MAAM,aAAa,oBAAoB,OAAO;AAC9C,KAAI,WAAW,WAAW,EAAG,QAAO;AAEpC,KAAI,CAAC,QACJ,OAAM,IAAI,MACT,+CAA+C,WAAW,OAAO,GAChE,WAAW,WAAW,IAAI,UAAU,UACpC,wLACD;CAGF,IAAI;AACJ,KAAI;AACH,aAAW,IAAI,IAAI,QAAQ,CAAC;UACpB,GAAG;AACX,QAAM,IAAI,MAAM,qDAAqD,QAAQ,IAAI,EAChF,OAAO,GACP,CAAC;;AAGH,KAAI,SAAS,SAAS,IAAI,CACzB,OAAM,IAAI,MACT,iCAAiC,QAAQ,yHACzC;AAEF,KAAI,oBAAoB,SAAS,CAChC,OAAM,IAAI,MACT,iCAAiC,QAAQ,oJACzC;AAGF,MAAK,MAAM,EAAE,QAAQ,YAAY,QAAQ;EACxC,MAAM,IAAI,IAAI,IAAI,OAAO,CAAC;AAC1B,MAAI,MAAM,YAAY,CAAC,EAAE,SAAS,MAAM,SAAS,CAChD,OAAM,YACL,QACA,IAAI,OAAO,mCAAmC,QAAQ,+EACtD;;AAIH,QAAO;;AAGR,SAAS,YAAY,QAA6B,QAAgB,OAAwB;CACzF,MAAM,sBAAM,IAAI,MAAM,0BAA0B,OAAO,IAAI,SAAS;AACpE,KAAI,UAAU,OAAW,CAAC,IAAoC,QAAQ;AACtE,QAAO;;AAGR,MAAM,yBAAyB;AAE/B,SAAS,oBAAoB,GAAoB;AAEhD,KAAI,EAAE,WAAW,IAAI,CAAE,QAAO;AAE9B,QAAO,uBAAuB,KAAK,EAAE"}
+{"version":3,"file":"allowed-origins-maylGaHv.mjs","names":[],"sources":["../src/auth/allowed-origins.ts"],"sourcesContent":["/**\n * Resolution and validation of multi-origin passkey verification.\n *\n * `allowedOrigins` lets one EmDash deployment accept passkey assertions from\n * several hostnames sharing the same `rpId` (e.g. apex + preview/staging\n * subdomains under one registrable parent). Origins come from two sources:\n *\n *   - `EmDashConfig.allowedOrigins` (declared in `astro.config.mjs`)\n *   - `EMDASH_ALLOWED_ORIGINS` (comma-separated runtime env var)\n *\n * Sources are merged (union of permissions, deduplicated). Each entry is\n * validated against `siteUrl` to fail loud on dead config the browser would\n * never honor.\n */\n\nimport { getEnvAllowedOrigins } from \"../api/public-url.js\";\nimport type { EmDashConfig } from \"../astro/integration/runtime.js\";\n\nexport type AllowedOriginSource = \"config.allowedOrigins\" | \"EMDASH_ALLOWED_ORIGINS\";\n\nexport interface TaggedOrigin {\n\t/** Raw entry as declared by the operator. */\n\torigin: string;\n\t/** Where the entry came from (used for source-attributed errors). */\n\tsource: AllowedOriginSource;\n}\n\n/**\n * Collect raw allowedOrigins from config and env, source-tagged.\n *\n * Returns raw values — the caller is expected to pass the result through\n * `validateAllowedOrigins()` before use in passkey verification.\n */\nexport function getConfiguredAllowedOrigins(config?: EmDashConfig): TaggedOrigin[] {\n\tconst tagged: TaggedOrigin[] = [];\n\tif (config?.allowedOrigins) {\n\t\tfor (const origin of config.allowedOrigins) {\n\t\t\tif (origin) tagged.push({ origin, source: \"config.allowedOrigins\" });\n\t\t}\n\t}\n\tfor (const origin of getEnvAllowedOrigins()) {\n\t\ttagged.push({ origin, source: \"EMDASH_ALLOWED_ORIGINS\" });\n\t}\n\treturn tagged;\n}\n\n/**\n * Validate per-entry shape rules (no `siteUrl` needed):\n *   - parses as `URL`\n *   - protocol is `http:` or `https:`\n *   - hostname has no trailing dot (`example.com.` rejected)\n *   - hostname has no empty labels (`foo..example.com` rejected)\n *\n * Returns the deduplicated, normalized origin form (`URL.origin`) of every\n * input, in input order. Throws on the first violation with a source-tagged\n * error message.\n */\nexport function validateOriginShape(tagged: TaggedOrigin[]): string[] {\n\tconst normalized: string[] = [];\n\tconst seen = new Set<string>();\n\tfor (const { origin, source } of tagged) {\n\t\tlet parsed: URL;\n\t\ttry {\n\t\t\tparsed = new URL(origin);\n\t\t} catch (e) {\n\t\t\tthrow configError(source, `invalid URL: \"${origin}\"`, e);\n\t\t}\n\t\tif (parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") {\n\t\t\tthrow configError(\n\t\t\t\tsource,\n\t\t\t\t`origin must be http or https: \"${origin}\" (got ${parsed.protocol})`,\n\t\t\t);\n\t\t}\n\t\tif (parsed.hostname.endsWith(\".\")) {\n\t\t\tthrow configError(\n\t\t\t\tsource,\n\t\t\t\t`hostname has a trailing dot: \"${origin}\". Remove the trailing dot — assertion origins from the browser do not include it.`,\n\t\t\t);\n\t\t}\n\t\tif (parsed.hostname.split(\".\").includes(\"\")) {\n\t\t\tthrow configError(source, `hostname has empty labels: \"${origin}\"`);\n\t\t}\n\t\tif (!seen.has(parsed.origin)) {\n\t\t\tseen.add(parsed.origin);\n\t\t\tnormalized.push(parsed.origin);\n\t\t}\n\t}\n\treturn normalized;\n}\n\n/**\n * Validate the effective merged allowedOrigins set against `siteUrl`.\n *\n * Performs `validateOriginShape()` plus the siteUrl-dependent rules:\n *   - Rule A: non-empty origins ⇒ `siteUrl` is set\n *   - `siteUrl` hostname is not an IP literal (multi-origin requires a domain)\n *   - `siteUrl` hostname has no trailing dot (cannot match assertion origins)\n *   - Rule B: each origin's hostname is `siteHost` exactly or a subdomain\n *\n * Throws on first violation. Returns the deduplicated normalized origins.\n *\n * Use this at the runtime chokepoint (where config + env are merged into the\n * effective set). At Astro integration init, prefer `validateOriginShape()`\n * for shape-only checks on `config.allowedOrigins`, since `siteUrl` may be\n * supplied at runtime via `EMDASH_SITE_URL`.\n */\nexport function validateAllowedOrigins(\n\tsiteUrl: string | undefined,\n\ttagged: TaggedOrigin[],\n): string[] {\n\tconst normalized = validateOriginShape(tagged);\n\tif (normalized.length === 0) return normalized;\n\n\tif (!siteUrl) {\n\t\tthrow new Error(\n\t\t\t`EmDash config error: allowedOrigins is set (${normalized.length} ${\n\t\t\t\tnormalized.length === 1 ? \"entry\" : \"entries\"\n\t\t\t}) but siteUrl is not. Without a canonical siteUrl, rpId is derived from the request hostname, defeating multi-origin passkeys. Set siteUrl in astro.config.mjs or via EMDASH_SITE_URL.`,\n\t\t);\n\t}\n\n\tlet siteHost: string;\n\ttry {\n\t\tsiteHost = new URL(siteUrl).hostname;\n\t} catch (e) {\n\t\tthrow new Error(`EmDash config error: siteUrl is not a valid URL: \"${siteUrl}\"`, {\n\t\t\tcause: e,\n\t\t});\n\t}\n\n\tif (siteHost.endsWith(\".\")) {\n\t\tthrow new Error(\n\t\t\t`EmDash config error: siteUrl \"${siteUrl}\" has a trailing-dot hostname, which cannot match assertion origins. Remove the trailing dot when using allowedOrigins.`,\n\t\t);\n\t}\n\tif (isIPLiteralHostname(siteHost)) {\n\t\tthrow new Error(\n\t\t\t`EmDash config error: siteUrl \"${siteUrl}\" uses an IP-literal hostname. Multi-origin passkeys require a domain-based siteUrl — IP addresses cannot have valid subdomains for WebAuthn rpId.`,\n\t\t);\n\t}\n\n\tfor (const { origin, source } of tagged) {\n\t\tconst h = new URL(origin).hostname;\n\t\tif (h !== siteHost && !h.endsWith(\".\" + siteHost)) {\n\t\t\tthrow configError(\n\t\t\t\tsource,\n\t\t\t\t`\"${origin}\" is not a subdomain of siteUrl \"${siteUrl}\". Allowed origins must be the same hostname as siteUrl or a subdomain of it.`,\n\t\t\t);\n\t\t}\n\t}\n\n\treturn normalized;\n}\n\nfunction configError(source: AllowedOriginSource, detail: string, cause?: unknown): Error {\n\tconst err = new Error(`EmDash config error in ${source}: ${detail}`);\n\tif (cause !== undefined) (err as Error & { cause?: unknown }).cause = cause;\n\treturn err;\n}\n\nconst IPV4_DOTTED_DECIMAL_RE = /^\\d+(\\.\\d+){3}$/;\n\nfunction isIPLiteralHostname(h: string): boolean {\n\t// IPv6 hostnames are bracketed by URL.hostname, e.g. \"[::1]\"\n\tif (h.startsWith(\"[\")) return true;\n\t// IPv4 dotted-decimal\n\treturn IPV4_DOTTED_DECIMAL_RE.test(h);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAiCA,SAAgB,4BAA4B,QAAuC;CAClF,MAAM,SAAyB,EAAE;AACjC,KAAI,QAAQ,gBACX;OAAK,MAAM,UAAU,OAAO,eAC3B,KAAI,OAAQ,QAAO,KAAK;GAAE;GAAQ,QAAQ;GAAyB,CAAC;;AAGtE,MAAK,MAAM,UAAU,sBAAsB,CAC1C,QAAO,KAAK;EAAE;EAAQ,QAAQ;EAA0B,CAAC;AAE1D,QAAO;;;;;;;;;;;;;AAcR,SAAgB,oBAAoB,QAAkC;CACrE,MAAM,aAAuB,EAAE;CAC/B,MAAM,uBAAO,IAAI,KAAa;AAC9B,MAAK,MAAM,EAAE,QAAQ,YAAY,QAAQ;EACxC,IAAI;AACJ,MAAI;AACH,YAAS,IAAI,IAAI,OAAO;WAChB,GAAG;AACX,SAAM,YAAY,QAAQ,iBAAiB,OAAO,IAAI,EAAE;;AAEzD,MAAI,OAAO,aAAa,WAAW,OAAO,aAAa,SACtD,OAAM,YACL,QACA,kCAAkC,OAAO,SAAS,OAAO,SAAS,GAClE;AAEF,MAAI,OAAO,SAAS,SAAS,IAAI,CAChC,OAAM,YACL,QACA,iCAAiC,OAAO,oFACxC;AAEF,MAAI,OAAO,SAAS,MAAM,IAAI,CAAC,SAAS,GAAG,CAC1C,OAAM,YAAY,QAAQ,+BAA+B,OAAO,GAAG;AAEpE,MAAI,CAAC,KAAK,IAAI,OAAO,OAAO,EAAE;AAC7B,QAAK,IAAI,OAAO,OAAO;AACvB,cAAW,KAAK,OAAO,OAAO;;;AAGhC,QAAO;;;;;;;;;;;;;;;;;;AAmBR,SAAgB,uBACf,SACA,QACW;CACX,MAAM,aAAa,oBAAoB,OAAO;AAC9C,KAAI,WAAW,WAAW,EAAG,QAAO;AAEpC,KAAI,CAAC,QACJ,OAAM,IAAI,MACT,+CAA+C,WAAW,OAAO,GAChE,WAAW,WAAW,IAAI,UAAU,UACpC,wLACD;CAGF,IAAI;AACJ,KAAI;AACH,aAAW,IAAI,IAAI,QAAQ,CAAC;UACpB,GAAG;AACX,QAAM,IAAI,MAAM,qDAAqD,QAAQ,IAAI,EAChF,OAAO,GACP,CAAC;;AAGH,KAAI,SAAS,SAAS,IAAI,CACzB,OAAM,IAAI,MACT,iCAAiC,QAAQ,yHACzC;AAEF,KAAI,oBAAoB,SAAS,CAChC,OAAM,IAAI,MACT,iCAAiC,QAAQ,oJACzC;AAGF,MAAK,MAAM,EAAE,QAAQ,YAAY,QAAQ;EACxC,MAAM,IAAI,IAAI,IAAI,OAAO,CAAC;AAC1B,MAAI,MAAM,YAAY,CAAC,EAAE,SAAS,MAAM,SAAS,CAChD,OAAM,YACL,QACA,IAAI,OAAO,mCAAmC,QAAQ,+EACtD;;AAIH,QAAO;;AAGR,SAAS,YAAY,QAA6B,QAAgB,OAAwB;CACzF,MAAM,sBAAM,IAAI,MAAM,0BAA0B,OAAO,IAAI,SAAS;AACpE,KAAI,UAAU,OAAW,CAAC,IAAoC,QAAQ;AACtE,QAAO;;AAGR,MAAM,yBAAyB;AAE/B,SAAS,oBAAoB,GAAoB;AAEhD,KAAI,EAAE,WAAW,IAAI,CAAE,QAAO;AAE9B,QAAO,uBAAuB,KAAK,EAAE"}

package/dist/api/route-utils.d.mts

@@ -1,6 +1,6 @@
-import { a as parseQuery, c as handleError, i as parseBody, n as ParseResult, o as apiError, r as isParseError, s as apiSuccess, t as OptionsRepository } from "../options--hhz-jZ1.mjs";
-import { t as Database } from "../types-DQIDRKF2.mjs";
-import { Mt as StorageCollectionConfig, jt as StorageCollection } from "../types-DrJrVCT1.mjs";
+import { a as parseQuery, c as handleError, i as parseBody, n as ParseResult, o as apiError, r as isParseError, s as apiSuccess, t as OptionsRepository } from "../options-BhZIeFY1.mjs";
+import { t as Database } from "../types-DHxzBjbD.mjs";
+import { Mt as StorageCollectionConfig, jt as StorageCollection } from "../types-Vg6f5i3s.mjs";
 import { Kysely } from "kysely";
 
 //#region src/api/setup-complete.d.ts

package/dist/api/route-utils.mjs

@@ -2,29 +2,31 @@ import "../dialect-helpers-BSbfaO3F.mjs";
 import "../config-C3EBstHi.mjs";
 import "../after-CBU2vkoO.mjs";
 import "../object-cache-71tPfV4A.mjs";
-import "../content-ZHCc1ngN.mjs";
+import "../content-CP-SeXNa.mjs";
 import "../slugify-B994zkXC.mjs";
 import "../base64-CvLhUKQv.mjs";
 import "../types-CQPWhPxE.mjs";
-import "../media-CzhAn2--.mjs";
-import "../user-DJZfUJVE.mjs";
-import "../taxonomy-BqCZ1TdU.mjs";
-import { t as OptionsRepository } from "../options-CBXIHUoT.mjs";
-import { i as createStorageAccess } from "../context-ZldbZcle.mjs";
-import "../request-cache-BSUptuJR.mjs";
-import "../dist-D_6CKR8z.mjs";
-import "../enrich-_ySMEvEE.mjs";
-import "../seo-Dq4G-RrO.mjs";
-import "../loader-CdG_Ci3H.mjs";
-import "../content-refresh-B_8SJzuU.mjs";
-import "../settings-xRdoUZr0.mjs";
-import "../ssrf-Cpvg_n3A.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../error-DupyJZE2.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../parse-DFbuc-Fh.mjs";
-import "../ssrf-DpXgKsna.mjs";
-import "../cron-Y9aLtgrA.mjs";
-import { r as getPublicOrigin } from "../public-url-CWoFhQT8.mjs";
-import { t as finalizeSetup } from "../setup-complete-BnT8pq_C.mjs";
+import "../media-D6SeAfBl.mjs";
+import "../user-CtYY0tp2.mjs";
+import "../taxonomy-8X09dLN5.mjs";
+import { t as OptionsRepository } from "../options-BHPeIbBd.mjs";
+import { i as createStorageAccess } from "../context-BR5hRWiK.mjs";
+import "../request-cache-DH9zdCOD.mjs";
+import "../dist-89xCrGqi.mjs";
+import "../enrich-BX0IDp4z.mjs";
+import "../seo-Cm-dtvgk.mjs";
+import "../loader-ZsjE4paL.mjs";
+import "../capture-triggers-CNW1q3HK.mjs";
+import "../activation-K0kGBWuJ.mjs";
+import "../content-refresh-DLOfIhYc.mjs";
+import "../settings-BgN-0DT-.mjs";
+import "../ssrf-DqebVE34.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../error-D9w94fjV.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../parse-BRJg1kz8.mjs";
+import "../ssrf-BPKzkm6O.mjs";
+import "../cron-CWfWrWKG.mjs";
+import { r as getPublicOrigin } from "../public-url-DRz_AinV.mjs";
+import { t as finalizeSetup } from "../setup-complete-CcpXaPU7.mjs";
 
 //#region src/api/auth-storage.ts
 /**