emdash 0.35.0 → 0.37.0

package/dist/astro/routes/api/media/_id_/confirm.mjs

@@ -1,18 +1,18 @@
 import "../../../../../config-C3EBstHi.mjs";
 import "../../../../../base64-CvLhUKQv.mjs";
 import "../../../../../types-CQPWhPxE.mjs";
-import { t as MediaRepository } from "../../../../../media-CzhAn2--.mjs";
-import "../../../../../dist-D_6CKR8z.mjs";
-import { t as enrichImageMetadata } from "../../../../../enrich-_ySMEvEE.mjs";
-import { n as computeContentHash, t as MAX_CONTENT_HASH_BYTES } from "../../../../../hash-Cg0TXJPV.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DupyJZE2.mjs";
-import { r as parseOptionalBody, t as isParseError } from "../../../../../parse-DFbuc-Fh.mjs";
-import { i as mediaConfirmBody } from "../../../../../media-BWWWb8kg.mjs";
-import "../../../../../redirects-DTDHWH31.mjs";
-import "../../../../../relations-BBApI4e2.mjs";
-import "../../../../../status-CWVYpbD8.mjs";
+import { t as MediaRepository } from "../../../../../media-BBm8Wg3f.mjs";
+import "../../../../../dist-89xCrGqi.mjs";
+import { t as enrichImageMetadata } from "../../../../../enrich-BX0IDp4z.mjs";
+import { n as computeContentHash, t as MAX_CONTENT_HASH_BYTES } from "../../../../../hash-3JJPlHF2.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DFrQjppn.mjs";
+import { r as parseOptionalBody, t as isParseError } from "../../../../../parse-Ckpg-Qfp.mjs";
+import { i as mediaConfirmBody } from "../../../../../media-BHjus86Y.mjs";
+import "../../../../../redirects-BLNOWQTn.mjs";
+import "../../../../../relations-C4htk5sb.mjs";
+import "../../../../../status-B777-dXz.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { n as requireOwnerPerm, r as requirePerm } from "../../../../../authorize-DUElxgOQ.mjs";
+import { n as requireOwnerPerm, r as requirePerm } from "../../../../../authorize-Bkf_UHhD.mjs";
 
 //#region src/astro/routes/api/media/[id]/confirm.ts
 const prerender = false;

package/dist/astro/routes/api/media/_id_/replace.d.mts

@@ -0,0 +1,8 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/media/[id]/replace.d.ts
+declare const prerender = false;
+declare const PUT: APIRoute;
+//#endregion
+export { PUT, prerender };
+//# sourceMappingURL=replace.d.mts.map

package/dist/astro/routes/api/media/_id_/replace.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"replace.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/media/[id]/replace.ts"],"mappings":";;;cASa,SAAA;AAAA,cAIA,GAAA,EAAK,QAAA"}

package/dist/astro/routes/api/media/_id_/replace.mjs

@@ -0,0 +1,91 @@
+import "../../../../../config-C3EBstHi.mjs";
+import "../../../../../base64-CvLhUKQv.mjs";
+import "../../../../../types-CQPWhPxE.mjs";
+import { n as normalizeMime } from "../../../../../mime-CUIG6x84.mjs";
+import { n as computeContentHash } from "../../../../../hash-3JJPlHF2.mjs";
+import { a as unwrapResult, n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DFrQjppn.mjs";
+import { n as DEFAULT_MAX_UPLOAD_SIZE, w as mediaReplaceMetadataForm } from "../../../../../media-BHjus86Y.mjs";
+import "../../../../../redirects-BLNOWQTn.mjs";
+import "../../../../../relations-C4htk5sb.mjs";
+import "../../../../../status-B777-dXz.mjs";
+import "../../../../../api/schemas/index.mjs";
+import { MUTABLE_MEDIA_CACHE_CONTROL } from "../../../../../media/image-endpoint.mjs";
+import { n as requireOwnerPerm, r as requirePerm } from "../../../../../authorize-Bkf_UHhD.mjs";
+
+//#region src/astro/routes/api/media/[id]/replace.ts
+const prerender = false;
+const REPLACEABLE_IMAGE_TYPES = new Set([
+	"image/jpeg",
+	"image/png",
+	"image/webp"
+]);
+const PUT = async ({ params, request, locals }) => {
+	const { emdash, user } = locals;
+	const { id } = params;
+	const editDenied = requirePerm(user, "media:edit_own");
+	if (editDenied) return editDenied;
+	if (!id) return apiError("INVALID_REQUEST", "Media ID required", 400);
+	if (!emdash?.handleMediaGet || !emdash?.handleMediaReplaceMetadata) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	if (!emdash.storage) return apiError("NO_STORAGE", "Storage not configured", 500);
+	const getResult = await emdash.handleMediaGet(id);
+	if (!getResult.success) return unwrapResult(getResult);
+	const media = getResult.data.item;
+	const ownerDenied = requireOwnerPerm(user, media.authorId ?? "", "media:edit_own", "media:edit_any");
+	if (ownerDenied) return ownerDenied;
+	if (media.status !== "ready") return apiError("INVALID_STATE", "Only ready media can be replaced", 400);
+	const sourceMime = normalizeMime(media.mimeType);
+	if (!REPLACEABLE_IMAGE_TYPES.has(sourceMime)) return apiError("INVALID_TYPE", "Media type cannot be replaced", 400);
+	const rawMax = emdash.config.maxUploadSize ?? DEFAULT_MAX_UPLOAD_SIZE;
+	if (!Number.isFinite(rawMax) || rawMax <= 0) return apiError("CONFIGURATION_ERROR", "Invalid maxUploadSize configuration", 500);
+	const maxUploadSize = rawMax;
+	const contentLength = request.headers.get("Content-Length");
+	if (contentLength && parseInt(contentLength, 10) > maxUploadSize) return apiError("PAYLOAD_TOO_LARGE", "Upload too large", 413);
+	try {
+		const formData = await request.formData();
+		const fileEntry = formData.get("file");
+		const file = fileEntry instanceof File ? fileEntry : null;
+		if (!file) return apiError("NO_FILE", "No file provided", 400);
+		if (file.size === 0) return apiError("VALIDATION_ERROR", "Replacement file is empty", 400);
+		if (file.size > maxUploadSize) return apiError("PAYLOAD_TOO_LARGE", "Upload too large", 413);
+		const replacementMime = normalizeMime(file.type);
+		if (!REPLACEABLE_IMAGE_TYPES.has(replacementMime) || replacementMime !== sourceMime) return apiError("INVALID_TYPE", "Replacement file type must match the media item", 400);
+		const metadataResult = mediaReplaceMetadataForm.safeParse({
+			width: formData.get("width"),
+			height: formData.get("height")
+		});
+		if (!metadataResult.success) return apiError("VALIDATION_ERROR", "Invalid request data", 400, { issues: metadataResult.error.issues.map((issue) => ({
+			path: issue.path.join("."),
+			message: issue.message
+		})) });
+		const { width, height } = metadataResult.data;
+		const bytes = new Uint8Array(await file.arrayBuffer());
+		const contentHash = await computeContentHash(bytes);
+		try {
+			await emdash.storage.upload({
+				key: media.storageKey,
+				body: bytes,
+				contentType: sourceMime,
+				cacheControl: MUTABLE_MEDIA_CACHE_CONTROL
+			});
+		} catch (error) {
+			return handleError(error, "Failed to replace media", "MEDIA_REPLACE_ERROR");
+		}
+		const result = await emdash.handleMediaReplaceMetadata(id, media.storageKey, {
+			size: file.size,
+			width,
+			height,
+			contentHash
+		});
+		if (!result.success) return unwrapResult(result);
+		return apiSuccess({ item: {
+			...result.data.item,
+			url: `/_emdash/api/media/file/${result.data.item.storageKey}`
+		} });
+	} catch (error) {
+		return handleError(error, "Failed to replace media", "MEDIA_REPLACE_ERROR");
+	}
+};
+
+//#endregion
+export { PUT, prerender };
+//# sourceMappingURL=replace.mjs.map

package/dist/astro/routes/api/media/_id_/replace.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"replace.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/media/[id]/replace.ts"],"sourcesContent":["import type { APIRoute } from \"astro\";\n\nimport { requireOwnerPerm, requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError, unwrapResult } from \"#api/error.js\";\nimport { DEFAULT_MAX_UPLOAD_SIZE, mediaReplaceMetadataForm } from \"#api/schemas.js\";\nimport { MUTABLE_MEDIA_CACHE_CONTROL } from \"#media/image-endpoint.js\";\nimport { normalizeMime } from \"#media/mime.js\";\nimport { computeContentHash } from \"#utils/hash.js\";\n\nexport const prerender = false;\n\nconst REPLACEABLE_IMAGE_TYPES = new Set([\"image/jpeg\", \"image/png\", \"image/webp\"]);\n\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tconst editDenied = requirePerm(user, \"media:edit_own\");\n\tif (editDenied) return editDenied;\n\tif (!id) return apiError(\"INVALID_REQUEST\", \"Media ID required\", 400);\n\tif (!emdash?.handleMediaGet || !emdash?.handleMediaReplaceMetadata) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\tif (!emdash.storage) return apiError(\"NO_STORAGE\", \"Storage not configured\", 500);\n\n\tconst getResult = await emdash.handleMediaGet(id);\n\tif (!getResult.success) return unwrapResult(getResult);\n\tconst media = getResult.data.item;\n\tconst ownerDenied = requireOwnerPerm(\n\t\tuser,\n\t\tmedia.authorId ?? \"\",\n\t\t\"media:edit_own\",\n\t\t\"media:edit_any\",\n\t);\n\tif (ownerDenied) return ownerDenied;\n\tif (media.status !== \"ready\") {\n\t\treturn apiError(\"INVALID_STATE\", \"Only ready media can be replaced\", 400);\n\t}\n\n\tconst sourceMime = normalizeMime(media.mimeType);\n\tif (!REPLACEABLE_IMAGE_TYPES.has(sourceMime)) {\n\t\treturn apiError(\"INVALID_TYPE\", \"Media type cannot be replaced\", 400);\n\t}\n\n\tconst rawMax = emdash.config.maxUploadSize ?? DEFAULT_MAX_UPLOAD_SIZE;\n\tif (!Number.isFinite(rawMax) || rawMax <= 0) {\n\t\treturn apiError(\"CONFIGURATION_ERROR\", \"Invalid maxUploadSize configuration\", 500);\n\t}\n\tconst maxUploadSize = rawMax;\n\tconst contentLength = request.headers.get(\"Content-Length\");\n\tif (contentLength && parseInt(contentLength, 10) > maxUploadSize) {\n\t\treturn apiError(\"PAYLOAD_TOO_LARGE\", \"Upload too large\", 413);\n\t}\n\n\ttry {\n\t\tconst formData = await request.formData();\n\t\tconst fileEntry = formData.get(\"file\");\n\t\tconst file = fileEntry instanceof File ? fileEntry : null;\n\t\tif (!file) return apiError(\"NO_FILE\", \"No file provided\", 400);\n\t\tif (file.size === 0) return apiError(\"VALIDATION_ERROR\", \"Replacement file is empty\", 400);\n\t\tif (file.size > maxUploadSize) {\n\t\t\treturn apiError(\"PAYLOAD_TOO_LARGE\", \"Upload too large\", 413);\n\t\t}\n\n\t\tconst replacementMime = normalizeMime(file.type);\n\t\tif (!REPLACEABLE_IMAGE_TYPES.has(replacementMime) || replacementMime !== sourceMime) {\n\t\t\treturn apiError(\"INVALID_TYPE\", \"Replacement file type must match the media item\", 400);\n\t\t}\n\n\t\tconst metadataResult = mediaReplaceMetadataForm.safeParse({\n\t\t\twidth: formData.get(\"width\"),\n\t\t\theight: formData.get(\"height\"),\n\t\t});\n\t\tif (!metadataResult.success) {\n\t\t\treturn apiError(\"VALIDATION_ERROR\", \"Invalid request data\", 400, {\n\t\t\t\tissues: metadataResult.error.issues.map((issue) => ({\n\t\t\t\t\tpath: issue.path.join(\".\"),\n\t\t\t\t\tmessage: issue.message,\n\t\t\t\t})),\n\t\t\t});\n\t\t}\n\t\tconst { width, height } = metadataResult.data;\n\n\t\tconst bytes = new Uint8Array(await file.arrayBuffer());\n\t\tconst contentHash = await computeContentHash(bytes);\n\t\ttry {\n\t\t\tawait emdash.storage.upload({\n\t\t\t\tkey: media.storageKey,\n\t\t\t\tbody: bytes,\n\t\t\t\tcontentType: sourceMime,\n\t\t\t\tcacheControl: MUTABLE_MEDIA_CACHE_CONTROL,\n\t\t\t});\n\t\t} catch (error) {\n\t\t\treturn handleError(error, \"Failed to replace media\", \"MEDIA_REPLACE_ERROR\");\n\t\t}\n\n\t\tconst result = await emdash.handleMediaReplaceMetadata(id, media.storageKey, {\n\t\t\tsize: file.size,\n\t\t\twidth,\n\t\t\theight,\n\t\t\tcontentHash,\n\t\t});\n\t\tif (!result.success) return unwrapResult(result);\n\n\t\treturn apiSuccess({\n\t\t\titem: {\n\t\t\t\t...result.data.item,\n\t\t\t\turl: `/_emdash/api/media/file/${result.data.item.storageKey}`,\n\t\t\t},\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to replace media\", \"MEDIA_REPLACE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;AASA,MAAa,YAAY;AAEzB,MAAM,0BAA0B,IAAI,IAAI;CAAC;CAAc;CAAa;CAAa,CAAC;AAElF,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAEf,MAAM,aAAa,YAAY,MAAM,iBAAiB;AACtD,KAAI,WAAY,QAAO;AACvB,KAAI,CAAC,GAAI,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AACrE,KAAI,CAAC,QAAQ,kBAAkB,CAAC,QAAQ,2BACvC,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAEpE,KAAI,CAAC,OAAO,QAAS,QAAO,SAAS,cAAc,0BAA0B,IAAI;CAEjF,MAAM,YAAY,MAAM,OAAO,eAAe,GAAG;AACjD,KAAI,CAAC,UAAU,QAAS,QAAO,aAAa,UAAU;CACtD,MAAM,QAAQ,UAAU,KAAK;CAC7B,MAAM,cAAc,iBACnB,MACA,MAAM,YAAY,IAClB,kBACA,iBACA;AACD,KAAI,YAAa,QAAO;AACxB,KAAI,MAAM,WAAW,QACpB,QAAO,SAAS,iBAAiB,oCAAoC,IAAI;CAG1E,MAAM,aAAa,cAAc,MAAM,SAAS;AAChD,KAAI,CAAC,wBAAwB,IAAI,WAAW,CAC3C,QAAO,SAAS,gBAAgB,iCAAiC,IAAI;CAGtE,MAAM,SAAS,OAAO,OAAO,iBAAiB;AAC9C,KAAI,CAAC,OAAO,SAAS,OAAO,IAAI,UAAU,EACzC,QAAO,SAAS,uBAAuB,uCAAuC,IAAI;CAEnF,MAAM,gBAAgB;CACtB,MAAM,gBAAgB,QAAQ,QAAQ,IAAI,iBAAiB;AAC3D,KAAI,iBAAiB,SAAS,eAAe,GAAG,GAAG,cAClD,QAAO,SAAS,qBAAqB,oBAAoB,IAAI;AAG9D,KAAI;EACH,MAAM,WAAW,MAAM,QAAQ,UAAU;EACzC,MAAM,YAAY,SAAS,IAAI,OAAO;EACtC,MAAM,OAAO,qBAAqB,OAAO,YAAY;AACrD,MAAI,CAAC,KAAM,QAAO,SAAS,WAAW,oBAAoB,IAAI;AAC9D,MAAI,KAAK,SAAS,EAAG,QAAO,SAAS,oBAAoB,6BAA6B,IAAI;AAC1F,MAAI,KAAK,OAAO,cACf,QAAO,SAAS,qBAAqB,oBAAoB,IAAI;EAG9D,MAAM,kBAAkB,cAAc,KAAK,KAAK;AAChD,MAAI,CAAC,wBAAwB,IAAI,gBAAgB,IAAI,oBAAoB,WACxE,QAAO,SAAS,gBAAgB,mDAAmD,IAAI;EAGxF,MAAM,iBAAiB,yBAAyB,UAAU;GACzD,OAAO,SAAS,IAAI,QAAQ;GAC5B,QAAQ,SAAS,IAAI,SAAS;GAC9B,CAAC;AACF,MAAI,CAAC,eAAe,QACnB,QAAO,SAAS,oBAAoB,wBAAwB,KAAK,EAChE,QAAQ,eAAe,MAAM,OAAO,KAAK,WAAW;GACnD,MAAM,MAAM,KAAK,KAAK,IAAI;GAC1B,SAAS,MAAM;GACf,EAAE,EACH,CAAC;EAEH,MAAM,EAAE,OAAO,WAAW,eAAe;EAEzC,MAAM,QAAQ,IAAI,WAAW,MAAM,KAAK,aAAa,CAAC;EACtD,MAAM,cAAc,MAAM,mBAAmB,MAAM;AACnD,MAAI;AACH,SAAM,OAAO,QAAQ,OAAO;IAC3B,KAAK,MAAM;IACX,MAAM;IACN,aAAa;IACb,cAAc;IACd,CAAC;WACM,OAAO;AACf,UAAO,YAAY,OAAO,2BAA2B,sBAAsB;;EAG5E,MAAM,SAAS,MAAM,OAAO,2BAA2B,IAAI,MAAM,YAAY;GAC5E,MAAM,KAAK;GACX;GACA;GACA;GACA,CAAC;AACF,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAEhD,SAAO,WAAW,EACjB,MAAM;GACL,GAAG,OAAO,KAAK;GACf,KAAK,2BAA2B,OAAO,KAAK,KAAK;GACjD,EACD,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,sBAAsB"}

package/dist/astro/routes/api/media/_id_/upload.mjs

@@ -1,11 +1,11 @@
 import "../../../../../base64-CvLhUKQv.mjs";
 import "../../../../../types-CQPWhPxE.mjs";
-import { t as MediaRepository } from "../../../../../media-CzhAn2--.mjs";
-import { n as normalizeMime } from "../../../../../mime-DfIVjNkr.mjs";
-import { n as computeContentHash, t as MAX_CONTENT_HASH_BYTES } from "../../../../../hash-Cg0TXJPV.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DupyJZE2.mjs";
-import { t as removeUploadAttempt } from "../../../../../upload-attempts-D4FS8LT6.mjs";
-import { n as requireOwnerPerm, r as requirePerm } from "../../../../../authorize-DUElxgOQ.mjs";
+import { t as MediaRepository } from "../../../../../media-BBm8Wg3f.mjs";
+import { n as normalizeMime } from "../../../../../mime-CUIG6x84.mjs";
+import { n as computeContentHash, t as MAX_CONTENT_HASH_BYTES } from "../../../../../hash-3JJPlHF2.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DFrQjppn.mjs";
+import { t as removeUploadAttempt } from "../../../../../upload-attempts-BsqoQ1fn.mjs";
+import { n as requireOwnerPerm, r as requirePerm } from "../../../../../authorize-Bkf_UHhD.mjs";
 import { ulid } from "ulidx";
 
 //#region src/astro/routes/api/media/[id]/upload.ts

package/dist/astro/routes/api/media/_id_/usage.mjs

@@ -2,20 +2,25 @@ import "../../../../../dialect-helpers-BSbfaO3F.mjs";
 import "../../../../../config-C3EBstHi.mjs";
 import "../../../../../base64-CvLhUKQv.mjs";
 import "../../../../../types-CQPWhPxE.mjs";
-import "../../../../../media-CzhAn2--.mjs";
-import "../../../../../content-refresh-B_8SJzuU.mjs";
-import "../../../../../media-usage-work-DrCbqBcl.mjs";
-import { t as handleMediaUsageDetails } from "../../../../../media-usage-BZCydfvu.mjs";
-import { a as unwrapResult, t as apiError } from "../../../../../error-DupyJZE2.mjs";
-import { i as parseQuery, t as isParseError } from "../../../../../parse-DFbuc-Fh.mjs";
-import { A as mediaUsageDetailsQuery } from "../../../../../media-BWWWb8kg.mjs";
-import "../../../../../redirects-DTDHWH31.mjs";
-import "../../../../../relations-BBApI4e2.mjs";
-import "../../../../../status-CWVYpbD8.mjs";
+import "../../../../../media-BBm8Wg3f.mjs";
+import "../../../../../fts-manager-Do1BlW2r.mjs";
+import "../../../../../capture-triggers-CNW1q3HK.mjs";
+import "../../../../../activation-K0kGBWuJ.mjs";
+import "../../../../../collection-deletion-Bj07NHbj.mjs";
+import "../../../../../content-refresh-Bwp-8yGy.mjs";
+import "../../../../../media-usage-work-D6D9sMCA.mjs";
+import "../../../../../content-repair-Czdp7jz5.mjs";
+import { t as handleMediaUsageDetails } from "../../../../../media-usage-CdY5jhSR.mjs";
+import { a as unwrapResult, t as apiError } from "../../../../../error-DFrQjppn.mjs";
+import { i as parseQuery, t as isParseError } from "../../../../../parse-Ckpg-Qfp.mjs";
+import { J as mediaUsageDetailsQuery } from "../../../../../media-BHjus86Y.mjs";
+import "../../../../../redirects-BLNOWQTn.mjs";
+import "../../../../../relations-C4htk5sb.mjs";
+import "../../../../../status-B777-dXz.mjs";
 import "../../../../../api/schemas/index.mjs";
-import "../../../../../api-tokens-rIXC6LdE.mjs";
-import { r as requirePerm } from "../../../../../authorize-DUElxgOQ.mjs";
-import { t as requireScope } from "../../../../../scopes-8ClPF2bC.mjs";
+import "../../../../../api-tokens-BfYts-sq.mjs";
+import { r as requirePerm } from "../../../../../authorize-Bkf_UHhD.mjs";
+import { t as requireScope } from "../../../../../scopes-BhWvBavj.mjs";
 
 //#region src/astro/routes/api/media/[id]/usage.ts
 const prerender = false;

package/dist/astro/routes/api/media/_id_/usage.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"usage.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/media/[id]/usage.ts"],"sourcesContent":["import type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, unwrapResult } from \"#api/error.js\";\nimport { handleMediaUsageDetails } from \"#api/handlers/media-usage.js\";\nimport { isParseError, parseQuery } from \"#api/parse.js\";\nimport { mediaUsageDetailsQuery } from \"#api/schemas.js\";\nimport { requireScope } from \"#auth/scopes.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tconst mediaDenied = requirePerm(user, \"media:read\");\n\tif (mediaDenied) return mediaDenied;\n\tconst contentDenied = requirePerm(user, \"content:read_drafts\");\n\tif (contentDenied) return contentDenied;\n\tconst scopeDenied = requireScope(locals, \"admin\");\n\tif (scopeDenied) return scopeDenied;\n\n\tconst { id } = params;\n\tif (!id) return apiError(\"INVALID_REQUEST\", \"Media ID required\", 400);\n\tif (!emdash?.db) return apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\n\tconst query = parseQuery(new URL(request.url), mediaUsageDetailsQuery);\n\tif (isParseError(query)) return query;\n\n\treturn unwrapResult(await handleMediaUsageDetails(emdash.db, id, query));\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AASA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CAEzB,MAAM,cAAc,YAAY,MAAM,aAAa;AACnD,KAAI,YAAa,QAAO;CACxB,MAAM,gBAAgB,YAAY,MAAM,sBAAsB;AAC9D,KAAI,cAAe,QAAO;CAC1B,MAAM,cAAc,aAAa,QAAQ,QAAQ;AACjD,KAAI,YAAa,QAAO;CAExB,MAAM,EAAE,OAAO;AACf,KAAI,CAAC,GAAI,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AACrE,KAAI,CAAC,QAAQ,GAAI,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAEpF,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,uBAAuB;AACtE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,QAAO,aAAa,MAAM,wBAAwB,OAAO,IAAI,IAAI,MAAM,CAAC"}
+{"version":3,"file":"usage.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/media/[id]/usage.ts"],"sourcesContent":["import type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, unwrapResult } from \"#api/error.js\";\nimport { handleMediaUsageDetails } from \"#api/handlers/media-usage.js\";\nimport { isParseError, parseQuery } from \"#api/parse.js\";\nimport { mediaUsageDetailsQuery } from \"#api/schemas.js\";\nimport { requireScope } from \"#auth/scopes.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tconst mediaDenied = requirePerm(user, \"media:read\");\n\tif (mediaDenied) return mediaDenied;\n\tconst contentDenied = requirePerm(user, \"content:read_drafts\");\n\tif (contentDenied) return contentDenied;\n\tconst scopeDenied = requireScope(locals, \"admin\");\n\tif (scopeDenied) return scopeDenied;\n\n\tconst { id } = params;\n\tif (!id) return apiError(\"INVALID_REQUEST\", \"Media ID required\", 400);\n\tif (!emdash?.db) return apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\n\tconst query = parseQuery(new URL(request.url), mediaUsageDetailsQuery);\n\tif (isParseError(query)) return query;\n\n\treturn unwrapResult(await handleMediaUsageDetails(emdash.db, id, query));\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AASA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CAEzB,MAAM,cAAc,YAAY,MAAM,aAAa;AACnD,KAAI,YAAa,QAAO;CACxB,MAAM,gBAAgB,YAAY,MAAM,sBAAsB;AAC9D,KAAI,cAAe,QAAO;CAC1B,MAAM,cAAc,aAAa,QAAQ,QAAQ;AACjD,KAAI,YAAa,QAAO;CAExB,MAAM,EAAE,OAAO;AACf,KAAI,CAAC,GAAI,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AACrE,KAAI,CAAC,QAAQ,GAAI,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAEpF,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,uBAAuB;AACtE,KAAI,aAAa,MAAM,CAAE,QAAO;AAEhC,QAAO,aAAa,MAAM,wBAAwB,OAAO,IAAI,IAAI,MAAM,CAAC"}

package/dist/astro/routes/api/media/_id_.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"_id_.d.mts","names":[],"sources":["../../../../../src/astro/routes/api/media/[id].ts"],"mappings":";;;cAkBa,SAAA;;;;cAKA,GAAA,EAAK,QAAA;AAkClB;;;;;AAAA,cAAa,GAAA,EAAK,QAAA;;;;;;cAkDL,MAAA,EAAQ,QAAA"}
+{"version":3,"file":"_id_.d.mts","names":[],"sources":["../../../../../src/astro/routes/api/media/[id].ts"],"mappings":";;;cAkBa,SAAA;;;;cAKA,GAAA,EAAK,QAAA;AAkClB;;;;;AAAA,cAAa,GAAA,EAAK,QAAA;;;;;;cAqDL,MAAA,EAAQ,QAAA"}

package/dist/astro/routes/api/media/_id_.mjs

@@ -2,19 +2,24 @@ import "../../../../dialect-helpers-BSbfaO3F.mjs";
 import "../../../../config-C3EBstHi.mjs";
 import "../../../../base64-CvLhUKQv.mjs";
 import "../../../../types-CQPWhPxE.mjs";
-import { t as MediaRepository } from "../../../../media-CzhAn2--.mjs";
-import "../../../../content-refresh-B_8SJzuU.mjs";
-import "../../../../media-usage-work-DrCbqBcl.mjs";
-import { r as handleMediaUsageSummaries } from "../../../../media-usage-BZCydfvu.mjs";
-import { a as unwrapResult, n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DupyJZE2.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-DFbuc-Fh.mjs";
-import { s as mediaGetQuery, v as mediaUpdateBody } from "../../../../media-BWWWb8kg.mjs";
-import "../../../../redirects-DTDHWH31.mjs";
-import "../../../../relations-BBApI4e2.mjs";
-import "../../../../status-CWVYpbD8.mjs";
+import { t as MediaRepository } from "../../../../media-BBm8Wg3f.mjs";
+import "../../../../fts-manager-Do1BlW2r.mjs";
+import "../../../../capture-triggers-CNW1q3HK.mjs";
+import "../../../../activation-K0kGBWuJ.mjs";
+import "../../../../collection-deletion-Bj07NHbj.mjs";
+import "../../../../content-refresh-Bwp-8yGy.mjs";
+import "../../../../media-usage-work-D6D9sMCA.mjs";
+import "../../../../content-repair-Czdp7jz5.mjs";
+import { a as handleMediaUsageSummaries } from "../../../../media-usage-CdY5jhSR.mjs";
+import { a as unwrapResult, n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DFrQjppn.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-Ckpg-Qfp.mjs";
+import { O as mediaUpdateBody, m as mediaGetQuery } from "../../../../media-BHjus86Y.mjs";
+import "../../../../redirects-BLNOWQTn.mjs";
+import "../../../../relations-C4htk5sb.mjs";
+import "../../../../status-B777-dXz.mjs";
 import "../../../../api/schemas/index.mjs";
-import { t as removeUploadAttempt } from "../../../../upload-attempts-D4FS8LT6.mjs";
-import { n as requireOwnerPerm, r as requirePerm, t as canReadMediaUsageCount } from "../../../../authorize-DUElxgOQ.mjs";
+import { t as removeUploadAttempt } from "../../../../upload-attempts-BsqoQ1fn.mjs";
+import { n as requireOwnerPerm, r as requirePerm, t as canReadMediaUsageCount } from "../../../../authorize-Bkf_UHhD.mjs";
 
 //#region src/astro/routes/api/media/[id].ts
 const prerender = false;
@@ -66,7 +71,10 @@ const PUT = async ({ params, request, locals }) => {
 			alt: body.alt,
 			caption: body.caption,
 			width: body.width,
-			height: body.height
+			height: body.height,
+			folderId: body.folderId,
+			focalX: body.focalX,
+			focalY: body.focalY
 		}));
 	} catch (error) {
 		return handleError(error, "Failed to update media", "MEDIA_UPDATE_ERROR");

package/dist/astro/routes/api/media/_id_.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"_id_.mjs","names":[],"sources":["../../../../../src/astro/routes/api/media/[id].ts"],"sourcesContent":["/**\n * Single media item endpoint\n *\n * GET /_emdash/api/media/:id - Get media item\n * PUT /_emdash/api/media/:id - Update media metadata\n * DELETE /_emdash/api/media/:id - Delete media item\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { canReadMediaUsageCount, requireOwnerPerm, requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError, unwrapResult } from \"#api/error.js\";\nimport { handleMediaUsageSummaries } from \"#api/handlers/media-usage.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { mediaGetQuery, mediaUpdateBody } from \"#api/schemas.js\";\nimport { MediaRepository } from \"#db/repositories/media.js\";\nimport { removeUploadAttempt } from \"#media/upload-attempts.js\";\n\nexport const prerender = false;\n\n/**\n * Get media item\n */\nexport const GET: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tconst readDenied = requirePerm(user, \"media:read\");\n\tif (readDenied) return readDenied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Media ID required\", 400);\n\t}\n\n\tif (!emdash?.handleMediaGet) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\tconst query = parseQuery(new URL(request.url), mediaGetQuery);\n\tif (isParseError(query)) return query;\n\n\tconst result = await emdash.handleMediaGet(id);\n\tif (!result.success || query.includeUsage !== \"1\") return unwrapResult(result);\n\n\tconst includeCount = canReadMediaUsageCount(user, locals.tokenScopes);\n\tconst usageResult = await handleMediaUsageSummaries(emdash.db, [id], { includeCount });\n\tif (!usageResult.success) return unwrapResult(usageResult);\n\tconst usage = usageResult.data[id];\n\tif (!usage) return apiError(\"MEDIA_USAGE_READ_ERROR\", \"Failed to read media usage\", 500);\n\n\treturn apiSuccess({ item: { ...result.data.item, usage } });\n};\n\n/**\n * Update media metadata\n *\n * Authors can edit their own media; editors+ can edit any.\n */\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\t// Minimum permission gate — ownership checked below\n\tconst editDenied = requirePerm(user, \"media:edit_own\");\n\tif (editDenied) return editDenied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Media ID required\", 400);\n\t}\n\n\tif (!emdash?.handleMediaGet || !emdash?.handleMediaUpdate) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Fetch media item for ownership check\n\t\tconst getResult = await emdash.handleMediaGet(id);\n\t\tif (!getResult.success || !getResult.data?.item) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"Media item not found\", 404);\n\t\t}\n\n\t\tconst media = getResult.data.item;\n\n\t\t// Ownership check: authors can edit own, editors+ can edit any\n\t\tconst ownerDenied = requireOwnerPerm(user, media.authorId, \"media:edit_own\", \"media:edit_any\");\n\t\tif (ownerDenied) return ownerDenied;\n\n\t\tconst body = await parseBody(request, mediaUpdateBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await emdash.handleMediaUpdate(id, {\n\t\t\talt: body.alt,\n\t\t\tcaption: body.caption,\n\t\t\twidth: body.width,\n\t\t\theight: body.height,\n\t\t});\n\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update media\", \"MEDIA_UPDATE_ERROR\");\n\t}\n};\n\n/**\n * Delete media item\n *\n * Authors can delete their own media; editors+ can delete any.\n */\nexport const DELETE: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\t// Minimum permission gate — ownership checked below\n\tconst deleteDenied = requirePerm(user, \"media:delete_own\");\n\tif (deleteDenied) return deleteDenied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Media ID required\", 400);\n\t}\n\n\tif (!emdash?.handleMediaGet || !emdash?.handleMediaDelete) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Fetch media item for ownership check and storage key\n\t\tconst getResult = await emdash.handleMediaGet(id);\n\t\tif (!getResult.success || !getResult.data?.item) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"Media item not found\", 404);\n\t\t}\n\n\t\tconst media = getResult.data.item;\n\n\t\t// Ownership check: authors can delete own, editors+ can delete any\n\t\tconst ownerDenied = requireOwnerPerm(\n\t\t\tuser,\n\t\t\tmedia.authorId,\n\t\t\t\"media:delete_own\",\n\t\t\t\"media:delete_any\",\n\t\t);\n\t\tif (ownerDenied) return ownerDenied;\n\n\t\t// Delete from database — site-settings cache invalidation happens\n\t\t// in `EmDashRuntime.handleMediaDelete` so MCP/plugin paths inherit it.\n\t\tconst result = await emdash.handleMediaDelete(id);\n\t\tif (!result.success) return unwrapResult(result);\n\t\tif (\n\t\t\ttypeof result.data !== \"object\" ||\n\t\t\tresult.data === null ||\n\t\t\t!(\"storageKey\" in result.data) ||\n\t\t\ttypeof result.data.storageKey !== \"string\"\n\t\t) {\n\t\t\treturn apiError(\"MEDIA_DELETE_ERROR\", \"Failed to delete media\", 500);\n\t\t}\n\n\t\tif (emdash.storage) {\n\t\t\tconst repo = new MediaRepository(emdash.db);\n\t\t\tawait removeUploadAttempt(emdash.storage, repo, result.data.storageKey, {\n\t\t\t\tallowUntracked: true,\n\t\t\t});\n\t\t}\n\n\t\treturn apiSuccess({ deleted: true });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to delete media\", \"MEDIA_DELETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAkBA,MAAa,YAAY;;;;AAKzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAEf,MAAM,aAAa,YAAY,MAAM,aAAa;AAClD,KAAI,WAAY,QAAO;AAEvB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AAG7D,KAAI,CAAC,QAAQ,eACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAEpE,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,cAAc;AAC7D,KAAI,aAAa,MAAM,CAAE,QAAO;CAEhC,MAAM,SAAS,MAAM,OAAO,eAAe,GAAG;AAC9C,KAAI,CAAC,OAAO,WAAW,MAAM,iBAAiB,IAAK,QAAO,aAAa,OAAO;CAE9E,MAAM,eAAe,uBAAuB,MAAM,OAAO,YAAY;CACrE,MAAM,cAAc,MAAM,0BAA0B,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC;AACtF,KAAI,CAAC,YAAY,QAAS,QAAO,aAAa,YAAY;CAC1D,MAAM,QAAQ,YAAY,KAAK;AAC/B,KAAI,CAAC,MAAO,QAAO,SAAS,0BAA0B,8BAA8B,IAAI;AAExF,QAAO,WAAW,EAAE,MAAM;EAAE,GAAG,OAAO,KAAK;EAAM;EAAO,EAAE,CAAC;;;;;;;AAQ5D,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAGf,MAAM,aAAa,YAAY,MAAM,iBAAiB;AACtD,KAAI,WAAY,QAAO;AAEvB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AAG7D,KAAI,CAAC,QAAQ,kBAAkB,CAAC,QAAQ,kBACvC,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EAEH,MAAM,YAAY,MAAM,OAAO,eAAe,GAAG;AACjD,MAAI,CAAC,UAAU,WAAW,CAAC,UAAU,MAAM,KAC1C,QAAO,SAAS,aAAa,wBAAwB,IAAI;EAG1D,MAAM,QAAQ,UAAU,KAAK;EAG7B,MAAM,cAAc,iBAAiB,MAAM,MAAM,UAAU,kBAAkB,iBAAiB;AAC9F,MAAI,YAAa,QAAO;EAExB,MAAM,OAAO,MAAM,UAAU,SAAS,gBAAgB;AACtD,MAAI,aAAa,KAAK,CAAE,QAAO;AAS/B,SAAO,aAPQ,MAAM,OAAO,kBAAkB,IAAI;GACjD,KAAK,KAAK;GACV,SAAS,KAAK;GACd,OAAO,KAAK;GACZ,QAAQ,KAAK;GACb,CAAC,CAEyB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,0BAA0B,qBAAqB;;;;;;;;AAS3E,MAAa,SAAmB,OAAO,EAAE,QAAQ,aAAa;CAC7D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAGf,MAAM,eAAe,YAAY,MAAM,mBAAmB;AAC1D,KAAI,aAAc,QAAO;AAEzB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AAG7D,KAAI,CAAC,QAAQ,kBAAkB,CAAC,QAAQ,kBACvC,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EAEH,MAAM,YAAY,MAAM,OAAO,eAAe,GAAG;AACjD,MAAI,CAAC,UAAU,WAAW,CAAC,UAAU,MAAM,KAC1C,QAAO,SAAS,aAAa,wBAAwB,IAAI;EAG1D,MAAM,QAAQ,UAAU,KAAK;EAG7B,MAAM,cAAc,iBACnB,MACA,MAAM,UACN,oBACA,mBACA;AACD,MAAI,YAAa,QAAO;EAIxB,MAAM,SAAS,MAAM,OAAO,kBAAkB,GAAG;AACjD,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAChD,MACC,OAAO,OAAO,SAAS,YACvB,OAAO,SAAS,QAChB,EAAE,gBAAgB,OAAO,SACzB,OAAO,OAAO,KAAK,eAAe,SAElC,QAAO,SAAS,sBAAsB,0BAA0B,IAAI;AAGrE,MAAI,OAAO,SAAS;GACnB,MAAM,OAAO,IAAI,gBAAgB,OAAO,GAAG;AAC3C,SAAM,oBAAoB,OAAO,SAAS,MAAM,OAAO,KAAK,YAAY,EACvE,gBAAgB,MAChB,CAAC;;AAGH,SAAO,WAAW,EAAE,SAAS,MAAM,CAAC;UAC5B,OAAO;AACf,SAAO,YAAY,OAAO,0BAA0B,qBAAqB"}
+{"version":3,"file":"_id_.mjs","names":[],"sources":["../../../../../src/astro/routes/api/media/[id].ts"],"sourcesContent":["/**\n * Single media item endpoint\n *\n * GET /_emdash/api/media/:id - Get media item\n * PUT /_emdash/api/media/:id - Update media metadata\n * DELETE /_emdash/api/media/:id - Delete media item\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { canReadMediaUsageCount, requireOwnerPerm, requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError, unwrapResult } from \"#api/error.js\";\nimport { handleMediaUsageSummaries } from \"#api/handlers/media-usage.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { mediaGetQuery, mediaUpdateBody } from \"#api/schemas.js\";\nimport { MediaRepository } from \"#db/repositories/media.js\";\nimport { removeUploadAttempt } from \"#media/upload-attempts.js\";\n\nexport const prerender = false;\n\n/**\n * Get media item\n */\nexport const GET: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\tconst readDenied = requirePerm(user, \"media:read\");\n\tif (readDenied) return readDenied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Media ID required\", 400);\n\t}\n\n\tif (!emdash?.handleMediaGet) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\tconst query = parseQuery(new URL(request.url), mediaGetQuery);\n\tif (isParseError(query)) return query;\n\n\tconst result = await emdash.handleMediaGet(id);\n\tif (!result.success || query.includeUsage !== \"1\") return unwrapResult(result);\n\n\tconst includeCount = canReadMediaUsageCount(user, locals.tokenScopes);\n\tconst usageResult = await handleMediaUsageSummaries(emdash.db, [id], { includeCount });\n\tif (!usageResult.success) return unwrapResult(usageResult);\n\tconst usage = usageResult.data[id];\n\tif (!usage) return apiError(\"MEDIA_USAGE_READ_ERROR\", \"Failed to read media usage\", 500);\n\n\treturn apiSuccess({ item: { ...result.data.item, usage } });\n};\n\n/**\n * Update media metadata\n *\n * Authors can edit their own media; editors+ can edit any.\n */\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\t// Minimum permission gate — ownership checked below\n\tconst editDenied = requirePerm(user, \"media:edit_own\");\n\tif (editDenied) return editDenied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Media ID required\", 400);\n\t}\n\n\tif (!emdash?.handleMediaGet || !emdash?.handleMediaUpdate) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Fetch media item for ownership check\n\t\tconst getResult = await emdash.handleMediaGet(id);\n\t\tif (!getResult.success || !getResult.data?.item) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"Media item not found\", 404);\n\t\t}\n\n\t\tconst media = getResult.data.item;\n\n\t\t// Ownership check: authors can edit own, editors+ can edit any\n\t\tconst ownerDenied = requireOwnerPerm(user, media.authorId, \"media:edit_own\", \"media:edit_any\");\n\t\tif (ownerDenied) return ownerDenied;\n\n\t\tconst body = await parseBody(request, mediaUpdateBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await emdash.handleMediaUpdate(id, {\n\t\t\talt: body.alt,\n\t\t\tcaption: body.caption,\n\t\t\twidth: body.width,\n\t\t\theight: body.height,\n\t\t\tfolderId: body.folderId,\n\t\t\tfocalX: body.focalX,\n\t\t\tfocalY: body.focalY,\n\t\t});\n\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update media\", \"MEDIA_UPDATE_ERROR\");\n\t}\n};\n\n/**\n * Delete media item\n *\n * Authors can delete their own media; editors+ can delete any.\n */\nexport const DELETE: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst { id } = params;\n\n\t// Minimum permission gate — ownership checked below\n\tconst deleteDenied = requirePerm(user, \"media:delete_own\");\n\tif (deleteDenied) return deleteDenied;\n\n\tif (!id) {\n\t\treturn apiError(\"INVALID_REQUEST\", \"Media ID required\", 400);\n\t}\n\n\tif (!emdash?.handleMediaGet || !emdash?.handleMediaDelete) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Fetch media item for ownership check and storage key\n\t\tconst getResult = await emdash.handleMediaGet(id);\n\t\tif (!getResult.success || !getResult.data?.item) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"Media item not found\", 404);\n\t\t}\n\n\t\tconst media = getResult.data.item;\n\n\t\t// Ownership check: authors can delete own, editors+ can delete any\n\t\tconst ownerDenied = requireOwnerPerm(\n\t\t\tuser,\n\t\t\tmedia.authorId,\n\t\t\t\"media:delete_own\",\n\t\t\t\"media:delete_any\",\n\t\t);\n\t\tif (ownerDenied) return ownerDenied;\n\n\t\t// Delete from database — site-settings cache invalidation happens\n\t\t// in `EmDashRuntime.handleMediaDelete` so MCP/plugin paths inherit it.\n\t\tconst result = await emdash.handleMediaDelete(id);\n\t\tif (!result.success) return unwrapResult(result);\n\t\tif (\n\t\t\ttypeof result.data !== \"object\" ||\n\t\t\tresult.data === null ||\n\t\t\t!(\"storageKey\" in result.data) ||\n\t\t\ttypeof result.data.storageKey !== \"string\"\n\t\t) {\n\t\t\treturn apiError(\"MEDIA_DELETE_ERROR\", \"Failed to delete media\", 500);\n\t\t}\n\n\t\tif (emdash.storage) {\n\t\t\tconst repo = new MediaRepository(emdash.db);\n\t\t\tawait removeUploadAttempt(emdash.storage, repo, result.data.storageKey, {\n\t\t\t\tallowUntracked: true,\n\t\t\t});\n\t\t}\n\n\t\treturn apiSuccess({ deleted: true });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to delete media\", \"MEDIA_DELETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAkBA,MAAa,YAAY;;;;AAKzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAEf,MAAM,aAAa,YAAY,MAAM,aAAa;AAClD,KAAI,WAAY,QAAO;AAEvB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AAG7D,KAAI,CAAC,QAAQ,eACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAEpE,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,cAAc;AAC7D,KAAI,aAAa,MAAM,CAAE,QAAO;CAEhC,MAAM,SAAS,MAAM,OAAO,eAAe,GAAG;AAC9C,KAAI,CAAC,OAAO,WAAW,MAAM,iBAAiB,IAAK,QAAO,aAAa,OAAO;CAE9E,MAAM,eAAe,uBAAuB,MAAM,OAAO,YAAY;CACrE,MAAM,cAAc,MAAM,0BAA0B,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC;AACtF,KAAI,CAAC,YAAY,QAAS,QAAO,aAAa,YAAY;CAC1D,MAAM,QAAQ,YAAY,KAAK;AAC/B,KAAI,CAAC,MAAO,QAAO,SAAS,0BAA0B,8BAA8B,IAAI;AAExF,QAAO,WAAW,EAAE,MAAM;EAAE,GAAG,OAAO,KAAK;EAAM;EAAO,EAAE,CAAC;;;;;;;AAQ5D,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAGf,MAAM,aAAa,YAAY,MAAM,iBAAiB;AACtD,KAAI,WAAY,QAAO;AAEvB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AAG7D,KAAI,CAAC,QAAQ,kBAAkB,CAAC,QAAQ,kBACvC,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EAEH,MAAM,YAAY,MAAM,OAAO,eAAe,GAAG;AACjD,MAAI,CAAC,UAAU,WAAW,CAAC,UAAU,MAAM,KAC1C,QAAO,SAAS,aAAa,wBAAwB,IAAI;EAG1D,MAAM,QAAQ,UAAU,KAAK;EAG7B,MAAM,cAAc,iBAAiB,MAAM,MAAM,UAAU,kBAAkB,iBAAiB;AAC9F,MAAI,YAAa,QAAO;EAExB,MAAM,OAAO,MAAM,UAAU,SAAS,gBAAgB;AACtD,MAAI,aAAa,KAAK,CAAE,QAAO;AAY/B,SAAO,aAVQ,MAAM,OAAO,kBAAkB,IAAI;GACjD,KAAK,KAAK;GACV,SAAS,KAAK;GACd,OAAO,KAAK;GACZ,QAAQ,KAAK;GACb,UAAU,KAAK;GACf,QAAQ,KAAK;GACb,QAAQ,KAAK;GACb,CAAC,CAEyB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,0BAA0B,qBAAqB;;;;;;;;AAS3E,MAAa,SAAmB,OAAO,EAAE,QAAQ,aAAa;CAC7D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,EAAE,OAAO;CAGf,MAAM,eAAe,YAAY,MAAM,mBAAmB;AAC1D,KAAI,aAAc,QAAO;AAEzB,KAAI,CAAC,GACJ,QAAO,SAAS,mBAAmB,qBAAqB,IAAI;AAG7D,KAAI,CAAC,QAAQ,kBAAkB,CAAC,QAAQ,kBACvC,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EAEH,MAAM,YAAY,MAAM,OAAO,eAAe,GAAG;AACjD,MAAI,CAAC,UAAU,WAAW,CAAC,UAAU,MAAM,KAC1C,QAAO,SAAS,aAAa,wBAAwB,IAAI;EAG1D,MAAM,QAAQ,UAAU,KAAK;EAG7B,MAAM,cAAc,iBACnB,MACA,MAAM,UACN,oBACA,mBACA;AACD,MAAI,YAAa,QAAO;EAIxB,MAAM,SAAS,MAAM,OAAO,kBAAkB,GAAG;AACjD,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAChD,MACC,OAAO,OAAO,SAAS,YACvB,OAAO,SAAS,QAChB,EAAE,gBAAgB,OAAO,SACzB,OAAO,OAAO,KAAK,eAAe,SAElC,QAAO,SAAS,sBAAsB,0BAA0B,IAAI;AAGrE,MAAI,OAAO,SAAS;GACnB,MAAM,OAAO,IAAI,gBAAgB,OAAO,GAAG;AAC3C,SAAM,oBAAoB,OAAO,SAAS,MAAM,OAAO,KAAK,YAAY,EACvE,gBAAgB,MAChB,CAAC;;AAGH,SAAO,WAAW,EAAE,SAAS,MAAM,CAAC;UAC5B,OAAO;AACf,SAAO,YAAY,OAAO,0BAA0B,qBAAqB"}

package/dist/astro/routes/api/media/file/_...key_.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"_...key_.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/media/file/[...key].ts"],"mappings":";;;cAUa,SAAA;AAAA,cAoBA,GAAA,EAAK,QAAA"}
+{"version":3,"file":"_...key_.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/media/file/[...key].ts"],"mappings":";;;cAWa,SAAA;AAAA,cAoBA,GAAA,EAAK,QAAA"}

package/dist/astro/routes/api/media/file/_...key_.mjs

@@ -1,6 +1,7 @@
 import "../../../../../base64-CvLhUKQv.mjs";
 import "../../../../../types-CQPWhPxE.mjs";
-import { r as handleError, t as apiError } from "../../../../../error-DupyJZE2.mjs";
+import { r as handleError, t as apiError } from "../../../../../error-DFrQjppn.mjs";
+import { IMMUTABLE_IMAGE_CACHE, MUTABLE_MEDIA_CACHE_CONTROL } from "../../../../../media/image-endpoint.mjs";
 
 //#region src/astro/routes/api/media/file/[...key].ts
 const prerender = false;
@@ -31,7 +32,7 @@ const GET = async ({ params, locals }) => {
 		const result = await emdash.storage.download(key);
 		const headers = {
 			"Content-Type": result.contentType,
-			"Cache-Control": "public, max-age=31536000, immutable",
+			"Cache-Control": result.contentType.startsWith("image/") ? MUTABLE_MEDIA_CACHE_CONTROL : IMMUTABLE_IMAGE_CACHE,
 			"X-Content-Type-Options": "nosniff",
 			"Content-Security-Policy": "sandbox; default-src 'none'; img-src 'self'; style-src 'unsafe-inline'"
 		};

package/dist/astro/routes/api/media/file/_...key_.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"_...key_.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/media/file/[...key].ts"],"sourcesContent":["/**\n * Serve uploaded media files\n *\n * GET /_emdash/api/media/file/:key - Serve file from storage\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { apiError, handleError } from \"#api/error.js\";\n\nexport const prerender = false;\n\n/**\n * Content types that are safe to display inline (simple raster/vector images, video, audio).\n * Everything else gets Content-Disposition: attachment to prevent script execution.\n */\nconst SAFE_INLINE_TYPES = new Set([\n\t\"image/jpeg\",\n\t\"image/png\",\n\t\"image/gif\",\n\t\"image/webp\",\n\t\"image/avif\",\n\t\"image/x-icon\",\n\t\"video/mp4\",\n\t\"video/webm\",\n\t\"audio/mpeg\",\n\t\"audio/wav\",\n\t\"audio/ogg\",\n]);\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { key } = params;\n\tconst { emdash } = locals;\n\n\tif (!key) {\n\t\treturn apiError(\"NOT_FOUND\", \"File not found\", 404);\n\t}\n\n\t// Backup archives share the storage bucket but hold the site's full\n\t// content export — they must never be reachable through the public,\n\t// unauthenticated media route. Admins download them via the\n\t// authenticated backups API.\n\tif (key.startsWith(\"backups/\")) {\n\t\treturn apiError(\"NOT_FOUND\", \"File not found\", 404);\n\t}\n\n\tif (!emdash?.storage) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"Storage not configured\", 500);\n\t}\n\n\ttry {\n\t\tconst result = await emdash.storage.download(key);\n\n\t\tconst headers: Record<string, string> = {\n\t\t\t\"Content-Type\": result.contentType,\n\t\t\t\"Cache-Control\": \"public, max-age=31536000, immutable\",\n\t\t\t\"X-Content-Type-Options\": \"nosniff\",\n\t\t\t// Sandbox CSP on all user-uploaded content — prevents script execution\n\t\t\t// even for SVGs navigated to directly or content types that support scripting.\n\t\t\t\"Content-Security-Policy\":\n\t\t\t\t\"sandbox; default-src 'none'; img-src 'self'; style-src 'unsafe-inline'\",\n\t\t};\n\n\t\tif (result.size) {\n\t\t\theaders[\"Content-Length\"] = String(result.size);\n\t\t}\n\n\t\t// Safe image/media types can render inline; everything else (SVG, PDF,\n\t\t// HTML, JS, etc.) must be downloaded to prevent stored XSS.\n\t\tif (SAFE_INLINE_TYPES.has(result.contentType)) {\n\t\t\theaders[\"Content-Disposition\"] = \"inline\";\n\t\t} else {\n\t\t\theaders[\"Content-Disposition\"] = \"attachment\";\n\t\t}\n\n\t\treturn new Response(result.body, { status: 200, headers });\n\t} catch (error) {\n\t\t// Check if it's a \"not found\" error\n\t\tif (\n\t\t\terror instanceof Error &&\n\t\t\t(error.message.includes(\"not found\") || error.message.includes(\"NOT_FOUND\"))\n\t\t) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"File not found\", 404);\n\t\t}\n\t\treturn handleError(error, \"Failed to serve file\", \"FILE_SERVE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;AAUA,MAAa,YAAY;;;;;AAMzB,MAAM,oBAAoB,IAAI,IAAI;CACjC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA,CAAC;AAEF,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ;CAChB,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,IACJ,QAAO,SAAS,aAAa,kBAAkB,IAAI;AAOpD,KAAI,IAAI,WAAW,WAAW,CAC7B,QAAO,SAAS,aAAa,kBAAkB,IAAI;AAGpD,KAAI,CAAC,QAAQ,QACZ,QAAO,SAAS,kBAAkB,0BAA0B,IAAI;AAGjE,KAAI;EACH,MAAM,SAAS,MAAM,OAAO,QAAQ,SAAS,IAAI;EAEjD,MAAM,UAAkC;GACvC,gBAAgB,OAAO;GACvB,iBAAiB;GACjB,0BAA0B;GAG1B,2BACC;GACD;AAED,MAAI,OAAO,KACV,SAAQ,oBAAoB,OAAO,OAAO,KAAK;AAKhD,MAAI,kBAAkB,IAAI,OAAO,YAAY,CAC5C,SAAQ,yBAAyB;MAEjC,SAAQ,yBAAyB;AAGlC,SAAO,IAAI,SAAS,OAAO,MAAM;GAAE,QAAQ;GAAK;GAAS,CAAC;UAClD,OAAO;AAEf,MACC,iBAAiB,UAChB,MAAM,QAAQ,SAAS,YAAY,IAAI,MAAM,QAAQ,SAAS,YAAY,EAE3E,QAAO,SAAS,aAAa,kBAAkB,IAAI;AAEpD,SAAO,YAAY,OAAO,wBAAwB,mBAAmB"}
+{"version":3,"file":"_...key_.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/media/file/[...key].ts"],"sourcesContent":["/**\n * Serve uploaded media files\n *\n * GET /_emdash/api/media/file/:key - Serve file from storage\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { apiError, handleError } from \"#api/error.js\";\nimport { IMMUTABLE_IMAGE_CACHE, MUTABLE_MEDIA_CACHE_CONTROL } from \"#media/image-endpoint.js\";\n\nexport const prerender = false;\n\n/**\n * Content types that are safe to display inline (simple raster/vector images, video, audio).\n * Everything else gets Content-Disposition: attachment to prevent script execution.\n */\nconst SAFE_INLINE_TYPES = new Set([\n\t\"image/jpeg\",\n\t\"image/png\",\n\t\"image/gif\",\n\t\"image/webp\",\n\t\"image/avif\",\n\t\"image/x-icon\",\n\t\"video/mp4\",\n\t\"video/webm\",\n\t\"audio/mpeg\",\n\t\"audio/wav\",\n\t\"audio/ogg\",\n]);\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { key } = params;\n\tconst { emdash } = locals;\n\n\tif (!key) {\n\t\treturn apiError(\"NOT_FOUND\", \"File not found\", 404);\n\t}\n\n\t// Backup archives share the storage bucket but hold the site's full\n\t// content export — they must never be reachable through the public,\n\t// unauthenticated media route. Admins download them via the\n\t// authenticated backups API.\n\tif (key.startsWith(\"backups/\")) {\n\t\treturn apiError(\"NOT_FOUND\", \"File not found\", 404);\n\t}\n\n\tif (!emdash?.storage) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"Storage not configured\", 500);\n\t}\n\n\ttry {\n\t\tconst result = await emdash.storage.download(key);\n\n\t\tconst headers: Record<string, string> = {\n\t\t\t\"Content-Type\": result.contentType,\n\t\t\t\"Cache-Control\": result.contentType.startsWith(\"image/\")\n\t\t\t\t? MUTABLE_MEDIA_CACHE_CONTROL\n\t\t\t\t: IMMUTABLE_IMAGE_CACHE,\n\t\t\t\"X-Content-Type-Options\": \"nosniff\",\n\t\t\t// Sandbox CSP on all user-uploaded content — prevents script execution\n\t\t\t// even for SVGs navigated to directly or content types that support scripting.\n\t\t\t\"Content-Security-Policy\":\n\t\t\t\t\"sandbox; default-src 'none'; img-src 'self'; style-src 'unsafe-inline'\",\n\t\t};\n\n\t\tif (result.size) {\n\t\t\theaders[\"Content-Length\"] = String(result.size);\n\t\t}\n\n\t\t// Safe image/media types can render inline; everything else (SVG, PDF,\n\t\t// HTML, JS, etc.) must be downloaded to prevent stored XSS.\n\t\tif (SAFE_INLINE_TYPES.has(result.contentType)) {\n\t\t\theaders[\"Content-Disposition\"] = \"inline\";\n\t\t} else {\n\t\t\theaders[\"Content-Disposition\"] = \"attachment\";\n\t\t}\n\n\t\treturn new Response(result.body, { status: 200, headers });\n\t} catch (error) {\n\t\t// Check if it's a \"not found\" error\n\t\tif (\n\t\t\terror instanceof Error &&\n\t\t\t(error.message.includes(\"not found\") || error.message.includes(\"NOT_FOUND\"))\n\t\t) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"File not found\", 404);\n\t\t}\n\t\treturn handleError(error, \"Failed to serve file\", \"FILE_SERVE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;AAWA,MAAa,YAAY;;;;;AAMzB,MAAM,oBAAoB,IAAI,IAAI;CACjC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA,CAAC;AAEF,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ;CAChB,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,IACJ,QAAO,SAAS,aAAa,kBAAkB,IAAI;AAOpD,KAAI,IAAI,WAAW,WAAW,CAC7B,QAAO,SAAS,aAAa,kBAAkB,IAAI;AAGpD,KAAI,CAAC,QAAQ,QACZ,QAAO,SAAS,kBAAkB,0BAA0B,IAAI;AAGjE,KAAI;EACH,MAAM,SAAS,MAAM,OAAO,QAAQ,SAAS,IAAI;EAEjD,MAAM,UAAkC;GACvC,gBAAgB,OAAO;GACvB,iBAAiB,OAAO,YAAY,WAAW,SAAS,GACrD,8BACA;GACH,0BAA0B;GAG1B,2BACC;GACD;AAED,MAAI,OAAO,KACV,SAAQ,oBAAoB,OAAO,OAAO,KAAK;AAKhD,MAAI,kBAAkB,IAAI,OAAO,YAAY,CAC5C,SAAQ,yBAAyB;MAEjC,SAAQ,yBAAyB;AAGlC,SAAO,IAAI,SAAS,OAAO,MAAM;GAAE,QAAQ;GAAK;GAAS,CAAC;UAClD,OAAO;AAEf,MACC,iBAAiB,UAChB,MAAM,QAAQ,SAAS,YAAY,IAAI,MAAM,QAAQ,SAAS,YAAY,EAE3E,QAAO,SAAS,aAAa,kBAAkB,IAAI;AAEpD,SAAO,YAAY,OAAO,wBAAwB,mBAAmB"}

package/dist/astro/routes/api/media/folders/_id_.d.mts

@@ -0,0 +1,10 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/media/folders/[id].d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+declare const PUT: APIRoute;
+declare const DELETE: APIRoute;
+//#endregion
+export { DELETE, GET, PUT, prerender };
+//# sourceMappingURL=_id_.d.mts.map

package/dist/astro/routes/api/media/folders/_id_.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_id_.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/media/folders/[id].ts"],"mappings":";;;cAYa,SAAA;AAAA,cASA,GAAA,EAAK,QAAA;AAAA,cAWL,GAAA,EAAK,QAAA;AAAA,cAaL,MAAA,EAAQ,QAAA"}

package/dist/astro/routes/api/media/folders/_id_.mjs

@@ -0,0 +1,52 @@
+import "../../../../../config-C3EBstHi.mjs";
+import "../../../../../base64-CvLhUKQv.mjs";
+import "../../../../../types-CQPWhPxE.mjs";
+import { a as handleMediaFolderUpdate, n as handleMediaFolderDelete, r as handleMediaFolderGet } from "../../../../../media-folders-BGkATs8n.mjs";
+import { a as unwrapResult, t as apiError } from "../../../../../error-DFrQjppn.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-Ckpg-Qfp.mjs";
+import { c as mediaFolderBody, l as mediaFolderIdSchema } from "../../../../../media-BHjus86Y.mjs";
+import "../../../../../redirects-BLNOWQTn.mjs";
+import "../../../../../relations-C4htk5sb.mjs";
+import "../../../../../status-B777-dXz.mjs";
+import "../../../../../api/schemas/index.mjs";
+import { r as requirePerm } from "../../../../../authorize-Bkf_UHhD.mjs";
+
+//#region src/astro/routes/api/media/folders/[id].ts
+const prerender = false;
+function parseFolderId(id) {
+	const result = mediaFolderIdSchema.safeParse(id);
+	return result.success ? result.data : apiError("VALIDATION_ERROR", "Invalid media folder ID", 400);
+}
+const GET = async ({ params, locals }) => {
+	const { emdash, user } = locals;
+	const denied = requirePerm(user, "media:read");
+	if (denied) return denied;
+	if (!emdash) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	const id = parseFolderId(params.id);
+	if (id instanceof Response) return id;
+	return unwrapResult(await handleMediaFolderGet(emdash.db, id));
+};
+const PUT = async ({ params, request, locals }) => {
+	const { emdash, user } = locals;
+	const denied = requirePerm(user, "media:edit_any");
+	if (denied) return denied;
+	if (!emdash) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	const id = parseFolderId(params.id);
+	if (id instanceof Response) return id;
+	const body = await parseBody(request, mediaFolderBody);
+	if (isParseError(body)) return body;
+	return unwrapResult(await handleMediaFolderUpdate(emdash.db, id, body));
+};
+const DELETE = async ({ params, locals }) => {
+	const { emdash, user } = locals;
+	const denied = requirePerm(user, "media:edit_any");
+	if (denied) return denied;
+	if (!emdash) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	const id = parseFolderId(params.id);
+	if (id instanceof Response) return id;
+	return unwrapResult(await handleMediaFolderDelete(emdash.db, id));
+};
+
+//#endregion
+export { DELETE, GET, PUT, prerender };
+//# sourceMappingURL=_id_.mjs.map

package/dist/astro/routes/api/media/folders/_id_.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"_id_.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/media/folders/[id].ts"],"sourcesContent":["import type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, unwrapResult } from \"#api/error.js\";\nimport {\n\thandleMediaFolderDelete,\n\thandleMediaFolderGet,\n\thandleMediaFolderUpdate,\n} from \"#api/handlers/media-folders.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { mediaFolderBody, mediaFolderIdSchema } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\nfunction parseFolderId(id: string | undefined): string | Response {\n\tconst result = mediaFolderIdSchema.safeParse(id);\n\treturn result.success\n\t\t? result.data\n\t\t: apiError(\"VALIDATION_ERROR\", \"Invalid media folder ID\", 400);\n}\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst denied = requirePerm(user, \"media:read\");\n\tif (denied) return denied;\n\tif (!emdash) return apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\n\tconst id = parseFolderId(params.id);\n\tif (id instanceof Response) return id;\n\treturn unwrapResult(await handleMediaFolderGet(emdash.db, id));\n};\n\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst denied = requirePerm(user, \"media:edit_any\");\n\tif (denied) return denied;\n\tif (!emdash) return apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\n\tconst id = parseFolderId(params.id);\n\tif (id instanceof Response) return id;\n\tconst body = await parseBody(request, mediaFolderBody);\n\tif (isParseError(body)) return body;\n\treturn unwrapResult(await handleMediaFolderUpdate(emdash.db, id, body));\n};\n\nexport const DELETE: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst denied = requirePerm(user, \"media:edit_any\");\n\tif (denied) return denied;\n\tif (!emdash) return apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\n\tconst id = parseFolderId(params.id);\n\tif (id instanceof Response) return id;\n\treturn unwrapResult(await handleMediaFolderDelete(emdash.db, id));\n};\n"],"mappings":";;;;;;;;;;;;;;AAYA,MAAa,YAAY;AAEzB,SAAS,cAAc,IAA2C;CACjE,MAAM,SAAS,oBAAoB,UAAU,GAAG;AAChD,QAAO,OAAO,UACX,OAAO,OACP,SAAS,oBAAoB,2BAA2B,IAAI;;AAGhE,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,SAAS,YAAY,MAAM,aAAa;AAC9C,KAAI,OAAQ,QAAO;AACnB,KAAI,CAAC,OAAQ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAEhF,MAAM,KAAK,cAAc,OAAO,GAAG;AACnC,KAAI,cAAc,SAAU,QAAO;AACnC,QAAO,aAAa,MAAM,qBAAqB,OAAO,IAAI,GAAG,CAAC;;AAG/D,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AACnB,KAAI,CAAC,OAAQ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAEhF,MAAM,KAAK,cAAc,OAAO,GAAG;AACnC,KAAI,cAAc,SAAU,QAAO;CACnC,MAAM,OAAO,MAAM,UAAU,SAAS,gBAAgB;AACtD,KAAI,aAAa,KAAK,CAAE,QAAO;AAC/B,QAAO,aAAa,MAAM,wBAAwB,OAAO,IAAI,IAAI,KAAK,CAAC;;AAGxE,MAAa,SAAmB,OAAO,EAAE,QAAQ,aAAa;CAC7D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AACnB,KAAI,CAAC,OAAQ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAEhF,MAAM,KAAK,cAAc,OAAO,GAAG;AACnC,KAAI,cAAc,SAAU,QAAO;AACnC,QAAO,aAAa,MAAM,wBAAwB,OAAO,IAAI,GAAG,CAAC"}

package/dist/astro/routes/api/media/folders/index.d.mts

@@ -0,0 +1,9 @@
+import { APIRoute } from "astro";
+
+//#region src/astro/routes/api/media/folders/index.d.ts
+declare const prerender = false;
+declare const GET: APIRoute;
+declare const POST: APIRoute;
+//#endregion
+export { GET, POST, prerender };
+//# sourceMappingURL=index.d.mts.map

package/dist/astro/routes/api/media/folders/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/media/folders/index.ts"],"mappings":";;;cAQa,SAAA;AAAA,cAEA,GAAA,EAAK,QAAA;AAAA,cAiBL,IAAA,EAAM,QAAA"}

package/dist/astro/routes/api/media/folders/index.mjs

@@ -0,0 +1,41 @@
+import "../../../../../config-C3EBstHi.mjs";
+import "../../../../../base64-CvLhUKQv.mjs";
+import "../../../../../types-CQPWhPxE.mjs";
+import { i as handleMediaFolderList, t as handleMediaFolderCreate } from "../../../../../media-folders-BGkATs8n.mjs";
+import { a as unwrapResult, t as apiError } from "../../../../../error-DFrQjppn.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../../parse-Ckpg-Qfp.mjs";
+import { c as mediaFolderBody, u as mediaFolderListQuery } from "../../../../../media-BHjus86Y.mjs";
+import "../../../../../redirects-BLNOWQTn.mjs";
+import "../../../../../relations-C4htk5sb.mjs";
+import "../../../../../status-B777-dXz.mjs";
+import "../../../../../api/schemas/index.mjs";
+import { r as requirePerm } from "../../../../../authorize-Bkf_UHhD.mjs";
+
+//#region src/astro/routes/api/media/folders/index.ts
+const prerender = false;
+const GET = async ({ request, locals }) => {
+	const { emdash, user } = locals;
+	const denied = requirePerm(user, "media:read");
+	if (denied) return denied;
+	if (!emdash) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	const query = parseQuery(new URL(request.url), mediaFolderListQuery);
+	if (isParseError(query)) return query;
+	return unwrapResult(await handleMediaFolderList(emdash.db, {
+		limit: query.limit,
+		cursor: query.cursor,
+		q: query.q
+	}));
+};
+const POST = async ({ request, locals }) => {
+	const { emdash, user } = locals;
+	const denied = requirePerm(user, "media:edit_any");
+	if (denied) return denied;
+	if (!emdash) return apiError("NOT_CONFIGURED", "EmDash is not initialized", 500);
+	const body = await parseBody(request, mediaFolderBody);
+	if (isParseError(body)) return body;
+	return unwrapResult(await handleMediaFolderCreate(emdash.db, body), 201);
+};
+
+//#endregion
+export { GET, POST, prerender };
+//# sourceMappingURL=index.mjs.map

package/dist/astro/routes/api/media/folders/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/media/folders/index.ts"],"sourcesContent":["import type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, unwrapResult } from \"#api/error.js\";\nimport { handleMediaFolderCreate, handleMediaFolderList } from \"#api/handlers/media-folders.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { mediaFolderBody, mediaFolderListQuery } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst denied = requirePerm(user, \"media:read\");\n\tif (denied) return denied;\n\tif (!emdash) return apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\n\tconst query = parseQuery(new URL(request.url), mediaFolderListQuery);\n\tif (isParseError(query)) return query;\n\treturn unwrapResult(\n\t\tawait handleMediaFolderList(emdash.db, {\n\t\t\tlimit: query.limit,\n\t\t\tcursor: query.cursor,\n\t\t\tq: query.q,\n\t\t}),\n\t);\n};\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst denied = requirePerm(user, \"media:edit_any\");\n\tif (denied) return denied;\n\tif (!emdash) return apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\n\tconst body = await parseBody(request, mediaFolderBody);\n\tif (isParseError(body)) return body;\n\treturn unwrapResult(await handleMediaFolderCreate(emdash.db, body), 201);\n};\n"],"mappings":";;;;;;;;;;;;;;AAQA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,SAAS,aAAa;CAC3D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,SAAS,YAAY,MAAM,aAAa;AAC9C,KAAI,OAAQ,QAAO;AACnB,KAAI,CAAC,OAAQ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAEhF,MAAM,QAAQ,WAAW,IAAI,IAAI,QAAQ,IAAI,EAAE,qBAAqB;AACpE,KAAI,aAAa,MAAM,CAAE,QAAO;AAChC,QAAO,aACN,MAAM,sBAAsB,OAAO,IAAI;EACtC,OAAO,MAAM;EACb,QAAQ,MAAM;EACd,GAAG,MAAM;EACT,CAAC,CACF;;AAGF,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AACnB,KAAI,CAAC,OAAQ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAEhF,MAAM,OAAO,MAAM,UAAU,SAAS,gBAAgB;AACtD,KAAI,aAAa,KAAK,CAAE,QAAO;AAC/B,QAAO,aAAa,MAAM,wBAAwB,OAAO,IAAI,KAAK,EAAE,IAAI"}

package/dist/astro/routes/api/media/providers/_providerId_/_itemId_.mjs

@@ -1,7 +1,7 @@
 import "../../../../../../base64-CvLhUKQv.mjs";
 import "../../../../../../types-CQPWhPxE.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-DupyJZE2.mjs";
-import { r as requirePerm } from "../../../../../../authorize-DUElxgOQ.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-DFrQjppn.mjs";
+import { r as requirePerm } from "../../../../../../authorize-Bkf_UHhD.mjs";
 
 //#region src/astro/routes/api/media/providers/[providerId]/[itemId].ts
 const prerender = false;

package/dist/astro/routes/api/media/providers/_providerId_/index.mjs

@@ -1,7 +1,7 @@
 import "../../../../../../base64-CvLhUKQv.mjs";
 import "../../../../../../types-CQPWhPxE.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-DupyJZE2.mjs";
-import { r as requirePerm } from "../../../../../../authorize-DUElxgOQ.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../../error-DFrQjppn.mjs";
+import { r as requirePerm } from "../../../../../../authorize-Bkf_UHhD.mjs";
 
 //#region src/astro/routes/api/media/providers/[providerId]/index.ts
 const prerender = false;

package/dist/astro/routes/api/media/providers/index.mjs

@@ -1,7 +1,7 @@
 import "../../../../../base64-CvLhUKQv.mjs";
 import "../../../../../types-CQPWhPxE.mjs";
-import { n as apiSuccess, t as apiError } from "../../../../../error-DupyJZE2.mjs";
-import { r as requirePerm } from "../../../../../authorize-DUElxgOQ.mjs";
+import { n as apiSuccess, t as apiError } from "../../../../../error-DFrQjppn.mjs";
+import { r as requirePerm } from "../../../../../authorize-Bkf_UHhD.mjs";
 
 //#region src/astro/routes/api/media/providers/index.ts
 const prerender = false;