emdash 0.35.0 → 0.37.0

package/dist/{media-usage-BZCydfvu.mjs → content-repair-Czdp7jz5.mjs}

@@ -1,11 +1,7 @@
-import { c as __exportAll } from "./runner-C1T11CfC.mjs";
 import { t as validateIdentifier } from "./validate-BpwoDOgt.mjs";
-import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-fiZ8G9RJ.mjs";
-import { i as InvalidCursorError } from "./types-CQPWhPxE.mjs";
-import { t as MediaRepository } from "./media-CzhAn2--.mjs";
-import { _ as loadContentMediaUsageFields, d as withContentUsageCollectionLock, f as loadContentMediaUsageSnapshots, h as MediaUsageFieldDiscoveryError, m as buildContentMediaUsageSourceKey, n as CONTENT_MEDIA_USAGE_COLLECTION_SCOPE, p as MEDIA_USAGE_CONTENT_SOURCE_VARIANTS, t as CONTENT_MEDIA_USAGE_ADAPTER_ID, v as CONTENT_SOURCE_SCHEMA_VERSION, y as MediaUsageRepository } from "./content-refresh-B_8SJzuU.mjs";
-import { t as MediaUsageWorkRepository } from "./media-usage-work-DrCbqBcl.mjs";
-import { t as ErrorCode } from "./errors-CLUPm7aD.mjs";
+import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-C4szrD8o.mjs";
+import { f as withContentUsageCollectionLock, g as MediaUsageFieldDiscoveryError, h as buildContentMediaUsageSourceKey, m as MEDIA_USAGE_CONTENT_SOURCE_VARIANTS, n as CONTENT_MEDIA_USAGE_COLLECTION_SCOPE, p as loadContentMediaUsageSnapshots, t as CONTENT_MEDIA_USAGE_ADAPTER_ID, v as loadContentMediaUsageFields, x as CONTENT_SOURCE_SCHEMA_VERSION, y as MediaUsageRepository } from "./content-refresh-Bwp-8yGy.mjs";
+import { t as MediaUsageWorkRepository } from "./media-usage-work-D6D9sMCA.mjs";
 import { sql } from "kysely";
 import { ulid } from "ulidx";
 
@@ -440,192 +436,5 @@ function getContentTableName(collectionSlug) {
 }
 
 //#endregion
-//#region src/api/handlers/media-usage.ts
-var media_usage_exports = /* @__PURE__ */ __exportAll({
-	aggregateMediaUsageCoverageStatus: () => aggregateMediaUsageCoverageStatus,
-	handleMediaUsageDetails: () => handleMediaUsageDetails,
-	handleMediaUsageRepair: () => handleMediaUsageRepair,
-	handleMediaUsageSummaries: () => handleMediaUsageSummaries,
-	toMediaUsageRepairResponse: () => toMediaUsageRepairResponse
-});
-function aggregateMediaUsageCoverageStatus(scopes) {
-	const statuses = scopes.map(normalizeMediaUsageCoverageStatus);
-	if (statuses.every((status) => status === "complete")) return "complete";
-	if (statuses.includes("unknown")) return "unknown";
-	if (statuses.includes("running")) return "running";
-	if (statuses.includes("stale")) return "stale";
-	if (statuses.includes("partial")) return "partial";
-	if (statuses.every((status) => status === "never")) return "never";
-	if (statuses.every((status) => status === "failed")) return "failed";
-	return "partial";
-}
-async function handleMediaUsageSummaries(db, mediaIds, options) {
-	if (mediaIds.length === 0) return {
-		success: true,
-		data: {}
-	};
-	try {
-		const repository = new MediaUsageRepository(db);
-		const coverage = await loadMediaUsageCoverage(repository);
-		const counts = options.includeCount && coverage.status === "complete" ? await repository.findActiveEntryCountsByMediaIds(mediaIds) : null;
-		const summaries = {};
-		for (const mediaId of new Set(mediaIds)) summaries[mediaId] = {
-			count: counts ? counts.get(mediaId) ?? 0 : null,
-			coverage
-		};
-		return {
-			success: true,
-			data: summaries
-		};
-	} catch (error) {
-		console.error("[media-usage] summary read failed:", error);
-		return {
-			success: false,
-			error: {
-				code: ErrorCode.MEDIA_USAGE_READ_ERROR,
-				message: "Failed to read media usage"
-			}
-		};
-	}
-}
-async function handleMediaUsageDetails(db, mediaId, options) {
-	try {
-		if (!await new MediaRepository(db).findById(mediaId)) return {
-			success: false,
-			error: {
-				code: ErrorCode.NOT_FOUND,
-				message: `Media item not found: ${mediaId}`
-			}
-		};
-		const repository = new MediaUsageRepository(db);
-		const coverage = await loadMediaUsageCoverage(repository);
-		const page = await repository.findCurrentEntryUsagePageByMediaId(mediaId, options);
-		return {
-			success: true,
-			data: {
-				items: page.items.map(toMediaUsageEntryDetail),
-				...page.nextCursor ? { nextCursor: page.nextCursor } : {},
-				coverage
-			}
-		};
-	} catch (error) {
-		if (error instanceof InvalidCursorError) return {
-			success: false,
-			error: {
-				code: ErrorCode.INVALID_CURSOR,
-				message: error.message
-			}
-		};
-		console.error("[media-usage] detail read failed:", error);
-		return {
-			success: false,
-			error: {
-				code: ErrorCode.MEDIA_USAGE_READ_ERROR,
-				message: "Failed to read media usage"
-			}
-		};
-	}
-}
-async function handleMediaUsageRepair(db, input) {
-	try {
-		let result;
-		if (input.scope === "collection") result = await repairContentMediaUsageCollection(db, { collectionSlug: input.collection });
-		else if (input.scope === "all") result = await repairContentMediaUsageAll(db);
-		else return {
-			success: false,
-			error: {
-				code: ErrorCode.VALIDATION_ERROR,
-				message: "Invalid media usage repair request"
-			}
-		};
-		return {
-			success: true,
-			data: toMediaUsageRepairResponse(result)
-		};
-	} catch (error) {
-		console.error("[media-usage] repair failed:", error);
-		return {
-			success: false,
-			error: {
-				code: ErrorCode.MEDIA_USAGE_REPAIR_ERROR,
-				message: "Failed to repair media usage"
-			}
-		};
-	}
-}
-function toMediaUsageRepairResponse(result) {
-	const collections = "collections" in result ? result.collections : [result];
-	return {
-		status: result.status,
-		indexedSourceCount: result.indexedSourceCount,
-		failedSourceCount: result.failedSourceCount,
-		skippedSourceCount: result.skippedSourceCount,
-		deletedSourceCount: result.deletedSourceCount,
-		collections: collections.map(toMediaUsageRepairCollectionSummary)
-	};
-}
-function toMediaUsageRepairCollectionSummary(result) {
-	return {
-		collection: result.scope.scopeKey,
-		status: result.status,
-		indexedSourceCount: result.indexedSourceCount,
-		failedSourceCount: result.failedSourceCount,
-		skippedSourceCount: result.skippedSourceCount,
-		deletedSourceCount: result.deletedSourceCount,
-		lastErrorCode: result.lastErrorCode,
-		startedAt: result.startedAt,
-		completedAt: result.completedAt
-	};
-}
-function normalizeMediaUsageCoverageStatus(scope) {
-	if (scope.status === null) return "never";
-	if (scope.status === "complete") {
-		if (scope.reconciliationRequired) return "stale";
-		return scope.schemaVersion === CONTENT_SOURCE_SCHEMA_VERSION ? "complete" : "stale";
-	}
-	if (scope.status === "never" || scope.status === "running" || scope.status === "partial" || scope.status === "failed" || scope.status === "stale") return scope.status;
-	return "unknown";
-}
-async function loadMediaUsageCoverage(repository) {
-	return {
-		scope: "all_content_collections",
-		status: aggregateMediaUsageCoverageStatus(await repository.findCollectionIndexStatusScopes({
-			adapterId: CONTENT_MEDIA_USAGE_ADAPTER_ID,
-			scopeType: CONTENT_MEDIA_USAGE_COLLECTION_SCOPE
-		}))
-	};
-}
-function toMediaUsageEntryDetail(group) {
-	const preferred = group.sources.find(({ source }) => source.sourceVariant === "draft_overlay") ?? group.sources.find(({ source }) => source.sourceVariant === "columns");
-	if (!preferred) throw new Error("Media usage entry has no supported source");
-	return {
-		collection: group.collectionSlug,
-		contentId: group.contentId,
-		title: preferred.source.contentTitle,
-		slug: preferred.source.contentSlug,
-		locale: preferred.source.locale,
-		status: preferred.source.contentStatus,
-		scheduledAt: preferred.source.contentScheduledAt,
-		deletedAt: group.contentDeletedAt,
-		sources: group.sources.flatMap(({ source, occurrences }) => {
-			if (source.sourceVariant !== "columns" && source.sourceVariant !== "draft_overlay") return [];
-			return [{
-				variant: source.sourceVariant,
-				occurrences: occurrences.map((occurrence) => ({
-					fieldSlug: occurrence.fieldSlug,
-					fieldPath: occurrence.fieldPath,
-					occurrenceIndex: occurrence.occurrenceIndex,
-					referenceType: normalizeMediaUsageReferenceType(occurrence.referenceType)
-				}))
-			}];
-		})
-	};
-}
-function normalizeMediaUsageReferenceType(referenceType) {
-	if (referenceType === "image_field" || referenceType === "file_field" || referenceType === "portable_text_image") return referenceType;
-	return "unknown";
-}
-
-//#endregion
-export { media_usage_exports as i, handleMediaUsageRepair as n, handleMediaUsageSummaries as r, handleMediaUsageDetails as t };
-//# sourceMappingURL=media-usage-BZCydfvu.mjs.map
+export { repairContentMediaUsageCollection as n, repairContentMediaUsageAll as t };
+//# sourceMappingURL=content-repair-Czdp7jz5.mjs.map

package/dist/content-repair-Czdp7jz5.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-repair-Czdp7jz5.mjs","names":[],"sources":["../src/media/usage/content-repair.ts"],"sourcesContent":["import { sql, type Kysely } from \"kysely\";\nimport { ulid } from \"ulidx\";\n\nimport { MediaUsageWorkRepository } from \"../../database/repositories/media-usage-work.js\";\nimport {\n\tMediaUsageRepository,\n\ttype MediaUsageSource,\n} from \"../../database/repositories/media-usage.js\";\nimport type { Database } from \"../../database/types.js\";\nimport { validateIdentifier } from \"../../database/validate.js\";\nimport { chunks, SQL_BATCH_SIZE } from \"../../utils/chunks.js\";\nimport {\n\tloadContentMediaUsageFields,\n\tMediaUsageFieldDiscoveryError,\n\ttype ContentMediaUsageFieldDiscovery,\n} from \"./content-fields.js\";\nimport {\n\tCONTENT_MEDIA_USAGE_ADAPTER_ID,\n\tCONTENT_MEDIA_USAGE_COLLECTION_SCOPE,\n\twithContentUsageCollectionLock,\n} from \"./content-refresh.js\";\nimport {\n\tCONTENT_SOURCE_SCHEMA_VERSION,\n\ttype ContentMediaUsageSnapshot,\n\tloadContentMediaUsageSnapshots,\n} from \"./content-snapshots.js\";\nimport {\n\tbuildContentMediaUsageSourceKey,\n\tMEDIA_USAGE_CONTENT_SOURCE_VARIANTS,\n} from \"./source-key.js\";\n\nexport type ContentMediaUsageRepairStatus = \"complete\" | \"partial\" | \"failed\" | \"stale\";\n\nexport const CONTENT_MEDIA_USAGE_REPAIR_ERROR = {\n\tCOLLECTION_NOT_FOUND: \"COLLECTION_NOT_FOUND\",\n\tCONTENT_NOT_FOUND: \"CONTENT_NOT_FOUND\",\n\tDRAFT_REVISION_NOT_FOUND: \"DRAFT_REVISION_NOT_FOUND\",\n\tDRAFT_REVISION_MISMATCH: \"DRAFT_REVISION_MISMATCH\",\n\tDRAFT_REVISION_INVALID: \"DRAFT_REVISION_INVALID\",\n\tCONTENT_USAGE_REPAIR_ERROR: \"CONTENT_USAGE_REPAIR_ERROR\",\n\tCONTENT_USAGE_REPAIR_CONFLICT: \"CONTENT_USAGE_REPAIR_CONFLICT\",\n\tINVALID_REPEATER_VALIDATION: \"INVALID_REPEATER_VALIDATION\",\n} as const;\n\nexport type ContentMediaUsageRepairErrorCode =\n\t(typeof CONTENT_MEDIA_USAGE_REPAIR_ERROR)[keyof typeof CONTENT_MEDIA_USAGE_REPAIR_ERROR];\n\nexport interface ContentMediaUsageRepairCollectionInput {\n\tcollectionSlug: string;\n}\n\nexport interface ContentMediaUsageRepairScope {\n\tadapterId: typeof CONTENT_MEDIA_USAGE_ADAPTER_ID;\n\tscopeType: typeof CONTENT_MEDIA_USAGE_COLLECTION_SCOPE;\n\tscopeKey: string;\n}\n\nexport interface ContentMediaUsageRepairCollectionResult {\n\tscope: ContentMediaUsageRepairScope;\n\tstatus: ContentMediaUsageRepairStatus;\n\tindexedSourceCount: number;\n\tfailedSourceCount: number;\n\tskippedSourceCount: number;\n\tdeletedSourceCount: number;\n\tlastErrorCode: string | null;\n\tstartedAt: string;\n\tcompletedAt: string | null;\n}\n\nexport interface ContentMediaUsageRepairAllResult {\n\tstatus: ContentMediaUsageRepairStatus;\n\tcollections: ContentMediaUsageRepairCollectionResult[];\n\tindexedSourceCount: number;\n\tfailedSourceCount: number;\n\tskippedSourceCount: number;\n\tdeletedSourceCount: number;\n}\n\nexport interface ContentMediaUsageCollectionScan {\n\tcollectionSlug: string;\n\tcontentIds: string[];\n}\n\ninterface ContentMediaUsageCollectionRecord {\n\tid: string;\n\tslug: string;\n}\n\ninterface ContentMediaUsageInitialCollectionResult {\n\tcollection: ContentMediaUsageCollectionRecord;\n\tresult: ContentMediaUsageRepairCollectionResult;\n}\n\ninterface ContentMediaUsageRepairExecution {\n\tcollectionId: string;\n\tstartingEpoch: number | string;\n}\n\nexport async function repairContentMediaUsageAll(\n\tdb: Kysely<Database>,\n): Promise<ContentMediaUsageRepairAllResult> {\n\tconst collections = await loadContentMediaUsageCollectionRecords(db);\n\tconst results: ContentMediaUsageInitialCollectionResult[] = [];\n\n\tfor (const collection of collections) {\n\t\tresults.push({\n\t\t\tcollection,\n\t\t\tresult: await repairContentMediaUsageCollectionSafely(db, collection),\n\t\t});\n\t}\n\n\treturn aggregateContentMediaUsageRepairAll(\n\t\tawait filterExistingContentMediaUsageCollectionResults(db, results),\n\t);\n}\n\nexport async function scanContentMediaUsageCollection(\n\tdb: Kysely<Database>,\n\tcollectionSlug: string,\n\texpectedCollectionId?: string,\n): Promise<ContentMediaUsageCollectionScan | null> {\n\tvalidateIdentifier(collectionSlug, \"collection slug\");\n\tlet collectionQuery = db\n\t\t.selectFrom(\"_emdash_collections\")\n\t\t.select(\"id\")\n\t\t.where(\"slug\", \"=\", collectionSlug);\n\tif (expectedCollectionId !== undefined) {\n\t\tcollectionQuery = collectionQuery.where(\"id\", \"=\", expectedCollectionId);\n\t}\n\tconst collection = await collectionQuery.executeTakeFirst();\n\tif (!collection) return null;\n\n\tconst tableName = getContentTableName(collectionSlug);\n\tconst rows = await sql<{ id: string }>`\n\t\tSELECT content.id\n\t\tFROM ${sql.ref(tableName)} AS content\n\t\tWHERE EXISTS (\n\t\t\tSELECT 1\n\t\t\tFROM _emdash_collections AS collection\n\t\t\tWHERE collection.id = ${collection.id}\n\t\t\t\tAND collection.slug = ${collectionSlug}\n\t\t)\n\t\tORDER BY content.id ASC\n\t`.execute(db);\n\n\treturn {\n\t\tcollectionSlug,\n\t\tcontentIds: rows.rows.map((row) => row.id),\n\t};\n}\n\nexport async function repairContentMediaUsageCollection(\n\tdb: Kysely<Database>,\n\tinput: ContentMediaUsageRepairCollectionInput,\n): Promise<ContentMediaUsageRepairCollectionResult> {\n\tvalidateIdentifier(input.collectionSlug, \"collection slug\");\n\treturn withContentUsageCollectionLock(input.collectionSlug, () =>\n\t\trepairContentMediaUsageCollectionUnlocked(db, input.collectionSlug),\n\t);\n}\n\nasync function loadContentMediaUsageCollectionRecords(\n\tdb: Kysely<Database>,\n): Promise<ContentMediaUsageCollectionRecord[]> {\n\treturn db\n\t\t.selectFrom(\"_emdash_collections\")\n\t\t.select([\"id\", \"slug\"])\n\t\t.orderBy(\"slug\", \"asc\")\n\t\t.execute();\n}\n\nasync function repairContentMediaUsageCollectionSafely(\n\tdb: Kysely<Database>,\n\tcollection: ContentMediaUsageCollectionRecord,\n): Promise<ContentMediaUsageRepairCollectionResult> {\n\ttry {\n\t\treturn await withContentUsageCollectionLock(collection.slug, () =>\n\t\t\trepairContentMediaUsageCollectionUnlocked(db, collection.slug, collection.id),\n\t\t);\n\t} catch (error) {\n\t\tconsole.error(`[media-usage] Failed to repair collection ${collection.slug}:`, error);\n\t\tconst now = new Date().toISOString();\n\t\treturn {\n\t\t\tscope: contentMediaUsageCollectionScope(collection.slug),\n\t\t\tstatus: \"failed\",\n\t\t\tindexedSourceCount: 0,\n\t\t\tfailedSourceCount: 0,\n\t\t\tskippedSourceCount: 0,\n\t\t\tdeletedSourceCount: 0,\n\t\t\tlastErrorCode: CONTENT_MEDIA_USAGE_REPAIR_ERROR.CONTENT_USAGE_REPAIR_ERROR,\n\t\t\tstartedAt: now,\n\t\t\tcompletedAt: now,\n\t\t};\n\t}\n}\n\nasync function filterExistingContentMediaUsageCollectionResults(\n\tdb: Kysely<Database>,\n\tresults: readonly ContentMediaUsageInitialCollectionResult[],\n): Promise<ContentMediaUsageRepairCollectionResult[]> {\n\tconst identityBound = await isIncrementalCaptureActive(db);\n\tconst currentCollections = await loadContentMediaUsageCollectionRecordsSafely(db);\n\tconst currentIdsBySlug = new Map(\n\t\tcurrentCollections.map((collection) => [collection.slug, collection.id]),\n\t);\n\tconst includedResults: ContentMediaUsageRepairCollectionResult[] = [];\n\tconst excludedResults: ContentMediaUsageInitialCollectionResult[] = [];\n\n\tfor (const { collection, result } of results) {\n\t\tif (currentIdsBySlug.get(collection.slug) === collection.id) {\n\t\t\tincludedResults.push(result);\n\t\t} else {\n\t\t\texcludedResults.push({ collection, result });\n\t\t}\n\t}\n\n\tif (excludedResults.length > 0) {\n\t\tconst repo = new MediaUsageRepository(db);\n\t\tfor (const excluded of excludedResults) {\n\t\t\tawait repo.deleteIndexStatus(\n\t\t\t\texcluded.result.scope,\n\t\t\t\tidentityBound ? excluded.collection.id : undefined,\n\t\t\t);\n\t\t}\n\t}\n\n\treturn includedResults;\n}\n\nasync function loadContentMediaUsageCollectionRecordsSafely(\n\tdb: Kysely<Database>,\n): Promise<ContentMediaUsageCollectionRecord[]> {\n\ttry {\n\t\treturn await loadContentMediaUsageCollectionRecords(db);\n\t} catch {\n\t\t// Retry once before failing; returning unpruned results can over-report deleted collections.\n\t}\n\n\ttry {\n\t\treturn await loadContentMediaUsageCollectionRecords(db);\n\t} catch (error) {\n\t\tconsole.error(\"[media-usage] Failed to reconcile all-content repair collections:\", error);\n\t\tthrow error;\n\t}\n}\n\nfunction aggregateContentMediaUsageRepairAll(\n\tcollections: readonly ContentMediaUsageRepairCollectionResult[],\n): ContentMediaUsageRepairAllResult {\n\treturn {\n\t\tstatus: determineRepairAllStatus(collections),\n\t\tcollections: [...collections],\n\t\tindexedSourceCount: sumCollectionRepairCount(collections, \"indexedSourceCount\"),\n\t\tfailedSourceCount: sumCollectionRepairCount(collections, \"failedSourceCount\"),\n\t\tskippedSourceCount: sumCollectionRepairCount(collections, \"skippedSourceCount\"),\n\t\tdeletedSourceCount: sumCollectionRepairCount(collections, \"deletedSourceCount\"),\n\t};\n}\n\nfunction determineRepairAllStatus(\n\tcollections: readonly ContentMediaUsageRepairCollectionResult[],\n): ContentMediaUsageRepairStatus {\n\tif (collections.length === 0) return \"complete\";\n\tif (collections.every((collection) => collection.status === \"complete\")) return \"complete\";\n\tif (collections.some((collection) => collection.status === \"stale\")) return \"stale\";\n\tif (collections.some((collection) => collection.status === \"partial\")) return \"partial\";\n\tif (collections.every((collection) => collection.status === \"failed\")) return \"failed\";\n\treturn \"partial\";\n}\n\nfunction sumCollectionRepairCount(\n\tcollections: readonly ContentMediaUsageRepairCollectionResult[],\n\tkey: \"indexedSourceCount\" | \"failedSourceCount\" | \"skippedSourceCount\" | \"deletedSourceCount\",\n): number {\n\treturn collections.reduce((sum, collection) => sum + collection[key], 0);\n}\n\nasync function repairContentMediaUsageCollectionUnlocked(\n\tdb: Kysely<Database>,\n\tcollectionSlug: string,\n\texpectedCollectionId?: string,\n): Promise<ContentMediaUsageRepairCollectionResult> {\n\tconst requestedAt = new Date().toISOString();\n\tconst scope = contentMediaUsageCollectionScope(collectionSlug);\n\tconst identityBound = await isIncrementalCaptureActive(db);\n\tconst collection = await loadContentMediaUsageCollectionRecord(db, collectionSlug);\n\tif (\n\t\t!collection ||\n\t\t(identityBound && expectedCollectionId && collection.id !== expectedCollectionId)\n\t) {\n\t\treturn {\n\t\t\tscope,\n\t\t\tstatus: \"failed\",\n\t\t\tindexedSourceCount: 0,\n\t\t\tfailedSourceCount: 0,\n\t\t\tskippedSourceCount: 0,\n\t\t\tdeletedSourceCount: 0,\n\t\t\tlastErrorCode: CONTENT_MEDIA_USAGE_REPAIR_ERROR.COLLECTION_NOT_FOUND,\n\t\t\tstartedAt: requestedAt,\n\t\t\tcompletedAt: requestedAt,\n\t\t};\n\t}\n\n\tconst repo = new MediaUsageRepository(db);\n\tconst runToken = ulid();\n\tlet startedAt = requestedAt;\n\tlet execution: ContentMediaUsageRepairExecution | undefined;\n\tif (identityBound) {\n\t\tconst run = await repo.beginIndexStatusRepairAtCurrentEpoch({\n\t\t\t...scope,\n\t\t\tcollectionId: collection.id,\n\t\t\trunToken,\n\t\t\tschemaVersion: CONTENT_SOURCE_SCHEMA_VERSION,\n\t\t});\n\t\tif (!run) {\n\t\t\treturn {\n\t\t\t\tscope,\n\t\t\t\tstatus: \"failed\",\n\t\t\t\tindexedSourceCount: 0,\n\t\t\t\tfailedSourceCount: 0,\n\t\t\t\tskippedSourceCount: 0,\n\t\t\t\tdeletedSourceCount: 0,\n\t\t\t\tlastErrorCode: CONTENT_MEDIA_USAGE_REPAIR_ERROR.CONTENT_USAGE_REPAIR_ERROR,\n\t\t\t\tstartedAt,\n\t\t\t\tcompletedAt: requestedAt,\n\t\t\t};\n\t\t}\n\t\tstartedAt = run.startedAt;\n\t\texecution = { collectionId: collection.id, startingEpoch: run.changeEpoch };\n\t} else {\n\t\tawait repo.beginIndexStatusRepair({\n\t\t\t...scope,\n\t\t\trunToken,\n\t\t\tschemaVersion: CONTENT_SOURCE_SCHEMA_VERSION,\n\t\t\tstartedAt,\n\t\t});\n\t}\n\n\ttry {\n\t\tconst scan = await scanContentMediaUsageCollection(db, collectionSlug, execution?.collectionId);\n\t\tif (!scan) {\n\t\t\tconst completedAt = new Date().toISOString();\n\t\t\treturn await finalizeRepairStatus(db, repo, {\n\t\t\t\t...scope,\n\t\t\t\trunToken,\n\t\t\t\tcounts: {\n\t\t\t\t\tindexedSourceCount: 0,\n\t\t\t\t\tfailedSourceCount: 0,\n\t\t\t\t\tskippedSourceCount: 0,\n\t\t\t\t\tdeletedSourceCount: 0,\n\t\t\t\t\tlastErrorCode: CONTENT_MEDIA_USAGE_REPAIR_ERROR.COLLECTION_NOT_FOUND,\n\t\t\t\t\tmissingContentIds: new Set(),\n\t\t\t\t},\n\t\t\t\tstatus: \"failed\",\n\t\t\t\tstartedAt,\n\t\t\t\tcompletedAt,\n\t\t\t\texecution,\n\t\t\t});\n\t\t}\n\t\tconst counts = await repairScannedContentSources(db, repo, scan, execution?.collectionId);\n\t\tconst finalScan = await scanContentMediaUsageCollection(\n\t\t\tdb,\n\t\t\tcollectionSlug,\n\t\t\texecution?.collectionId,\n\t\t);\n\t\tif (!finalScan) {\n\t\t\tcounts.failedSourceCount++;\n\t\t\tcounts.lastErrorCode = CONTENT_MEDIA_USAGE_REPAIR_ERROR.COLLECTION_NOT_FOUND;\n\t\t} else if (!sameContentIds(repairedContentIds(scan.contentIds, counts), finalScan.contentIds)) {\n\t\t\tmarkRepairConflict(counts);\n\t\t}\n\t\tconst completedAt = new Date().toISOString();\n\t\tconst status = determineRepairStatus(counts);\n\t\treturn await finalizeRepairStatus(db, repo, {\n\t\t\t...scope,\n\t\t\trunToken,\n\t\t\tcounts,\n\t\t\tstatus,\n\t\t\tstartedAt,\n\t\t\tcompletedAt,\n\t\t\texecution,\n\t\t});\n\t} catch (error) {\n\t\tif (!(error instanceof MediaUsageFieldDiscoveryError)) {\n\t\t\tconsole.error(`[media-usage] Failed to repair collection ${collectionSlug}:`, error);\n\t\t}\n\t\tconst completedAt = new Date().toISOString();\n\t\tconst lastErrorCode =\n\t\t\terror instanceof MediaUsageFieldDiscoveryError\n\t\t\t\t? error.code\n\t\t\t\t: CONTENT_MEDIA_USAGE_REPAIR_ERROR.CONTENT_USAGE_REPAIR_ERROR;\n\t\treturn finalizeRepairStatus(db, repo, {\n\t\t\t...scope,\n\t\t\trunToken,\n\t\t\tcounts: {\n\t\t\t\tindexedSourceCount: 0,\n\t\t\t\tfailedSourceCount: 0,\n\t\t\t\tskippedSourceCount: 0,\n\t\t\t\tdeletedSourceCount: 0,\n\t\t\t\tlastErrorCode,\n\t\t\t\tmissingContentIds: new Set(),\n\t\t\t},\n\t\t\tstatus: \"failed\",\n\t\t\tstartedAt,\n\t\t\tcompletedAt,\n\t\t\texecution,\n\t\t});\n\t}\n}\n\ninterface RepairCounts {\n\tindexedSourceCount: number;\n\tfailedSourceCount: number;\n\tskippedSourceCount: number;\n\tdeletedSourceCount: number;\n\tlastErrorCode: ContentMediaUsageRepairErrorCode | null;\n\tmissingContentIds: Set<string>;\n}\n\nasync function repairScannedContentSources(\n\tdb: Kysely<Database>,\n\trepo: MediaUsageRepository,\n\tscan: ContentMediaUsageCollectionScan,\n\tcollectionId?: string,\n): Promise<RepairCounts> {\n\tconst counts: RepairCounts = {\n\t\tindexedSourceCount: 0,\n\t\tfailedSourceCount: 0,\n\t\tskippedSourceCount: 0,\n\t\tdeletedSourceCount: 0,\n\t\tlastErrorCode: null,\n\t\tmissingContentIds: new Set(),\n\t};\n\n\tconst fieldDiscovery = await loadContentMediaUsageFields(db, scan.collectionSlug, collectionId);\n\tconst observedSources = await repo.findSources(buildContentSourceKeysForScan(scan, collectionId));\n\n\tfor (const contentId of scan.contentIds) {\n\t\tawait repairContentSource(\n\t\t\tdb,\n\t\t\trepo,\n\t\t\tscan.collectionSlug,\n\t\t\tcontentId,\n\t\t\tfieldDiscovery,\n\t\t\tobservedSources,\n\t\t\tcounts,\n\t\t\tcollectionId,\n\t\t);\n\t}\n\n\tawait reconcileOrphanedContentSources(db, repo, scan.collectionSlug, counts, collectionId);\n\treturn counts;\n}\n\nasync function repairContentSource(\n\tdb: Kysely<Database>,\n\trepo: MediaUsageRepository,\n\tcollectionSlug: string,\n\tcontentId: string,\n\tfieldDiscovery: ContentMediaUsageFieldDiscovery,\n\tobservedSources: Map<string, MediaUsageSource>,\n\tcounts: RepairCounts,\n\tcollectionId?: string,\n): Promise<void> {\n\tconst sourceKeys = buildContentSourceKeys(collectionSlug, contentId, collectionId);\n\tconst snapshotsResult = await loadContentMediaUsageSnapshots(\n\t\tdb,\n\t\tcollectionSlug,\n\t\tcontentId,\n\t\tfieldDiscovery,\n\t\tcollectionId ? { collectionId, identityVersion: 1 } : undefined,\n\t);\n\tif (!snapshotsResult.success) {\n\t\tif (snapshotsResult.error === CONTENT_MEDIA_USAGE_REPAIR_ERROR.CONTENT_NOT_FOUND) {\n\t\t\tmarkRepairConflict(counts);\n\t\t\tcounts.missingContentIds.add(contentId);\n\t\t\treturn;\n\t\t}\n\t\tcounts.lastErrorCode = snapshotsResult.error;\n\t\tif (snapshotsResult.snapshots) {\n\t\t\t// Partial snapshot failures keep absent variants in place; the attempted source is marked below.\n\t\t\tawait repairSnapshotSources(repo, snapshotsResult.snapshots, observedSources, counts);\n\t\t}\n\t\tif (snapshotsResult.source) {\n\t\t\tconst result = await repo.markSourceAttemptedIfMatching(\n\t\t\t\t{\n\t\t\t\t\t...snapshotsResult.source,\n\t\t\t\t\tsourceCompleteness: \"failed\",\n\t\t\t\t\tlastErrorCode: snapshotsResult.error,\n\t\t\t\t},\n\t\t\t\tobservedSources.get(snapshotsResult.source.sourceKey) ?? null,\n\t\t\t);\n\t\t\tif (result.attempted) {\n\t\t\t\tcounts.failedSourceCount++;\n\t\t\t} else {\n\t\t\t\tmarkRepairConflict(counts);\n\t\t\t}\n\t\t\treturn;\n\t\t}\n\n\t\tcounts.failedSourceCount++;\n\t\treturn;\n\t}\n\n\tconst expectedSourceKeys = await repairSnapshotSources(\n\t\trepo,\n\t\tsnapshotsResult.snapshots,\n\t\tobservedSources,\n\t\tcounts,\n\t);\n\n\tfor (const sourceKey of sourceKeys) {\n\t\tif (expectedSourceKeys.has(sourceKey)) continue;\n\t\tconst observedSource = observedSources.get(sourceKey);\n\t\tif (!observedSource) continue;\n\t\tawait deleteObservedSource(repo, sourceKey, observedSource, counts);\n\t}\n}\n\nasync function repairSnapshotSources(\n\trepo: MediaUsageRepository,\n\tsnapshots: readonly ContentMediaUsageSnapshot[],\n\tobservedSources: Map<string, MediaUsageSource>,\n\tcounts: RepairCounts,\n): Promise<Set<string>> {\n\tconst expectedSourceKeys = new Set<string>();\n\tfor (const snapshot of snapshots) {\n\t\texpectedSourceKeys.add(snapshot.source.sourceKey);\n\t\tconst result = await repo.replaceSourceIfMatching(\n\t\t\tsnapshot.source,\n\t\t\tsnapshot.occurrences,\n\t\t\tobservedSources.get(snapshot.source.sourceKey) ?? null,\n\t\t);\n\t\tif (result.replaced || result.unchanged) {\n\t\t\tcounts.indexedSourceCount++;\n\t\t} else {\n\t\t\tmarkRepairConflict(counts);\n\t\t}\n\t}\n\treturn expectedSourceKeys;\n}\n\nfunction markRepairConflict(counts: RepairCounts): void {\n\tcounts.skippedSourceCount++;\n\tcounts.lastErrorCode ??= CONTENT_MEDIA_USAGE_REPAIR_ERROR.CONTENT_USAGE_REPAIR_CONFLICT;\n}\n\nasync function reconcileOrphanedContentSources(\n\tdb: Kysely<Database>,\n\trepo: MediaUsageRepository,\n\tcollectionSlug: string,\n\tcounts: RepairCounts,\n\tcollectionId?: string,\n): Promise<void> {\n\tconst sources = await repo.findCollectionContentSources(collectionSlug, collectionId);\n\tconst existingContentIds = await findExistingContentIds(\n\t\tdb,\n\t\tcollectionSlug,\n\t\tsources.flatMap((source) => (source.contentId ? [source.contentId] : [])),\n\t\tcollectionId,\n\t);\n\n\tfor (const source of sources) {\n\t\tif (!source.contentId) {\n\t\t\tawait deleteObservedSource(repo, source.sourceKey, source, counts);\n\t\t\tcontinue;\n\t\t}\n\t\tif (existingContentIds.has(source.contentId)) continue;\n\t\tawait deleteObservedSourceIfContentAbsent(repo, collectionSlug, source, counts);\n\t}\n}\n\nasync function findExistingContentIds(\n\tdb: Kysely<Database>,\n\tcollectionSlug: string,\n\tcontentIds: readonly string[],\n\tcollectionId?: string,\n): Promise<Set<string>> {\n\tvalidateIdentifier(collectionSlug, \"collection slug\");\n\tconst existingContentIds = new Set<string>();\n\tconst uniqueContentIds = [...new Set(contentIds)];\n\tif (uniqueContentIds.length === 0) return existingContentIds;\n\n\tconst tableName = getContentTableName(collectionSlug);\n\tfor (const contentIdBatch of chunks(uniqueContentIds, SQL_BATCH_SIZE)) {\n\t\tconst result = await sql<{ id: string }>`\n\t\t\tSELECT content.id\n\t\t\tFROM ${sql.ref(tableName)} AS content\n\t\t\tWHERE content.id IN (${sql.join(contentIdBatch)})\n\t\t\t${\n\t\t\t\tcollectionId\n\t\t\t\t\t? sql`AND EXISTS (\n\t\t\t\t\t\tSELECT 1\n\t\t\t\t\t\tFROM _emdash_collections AS collection\n\t\t\t\t\t\tWHERE collection.id = ${collectionId}\n\t\t\t\t\t\t\tAND collection.slug = ${collectionSlug}\n\t\t\t\t\t)`\n\t\t\t\t\t: sql``\n\t\t\t}\n\t\t`.execute(db);\n\t\tfor (const row of result.rows) {\n\t\t\texistingContentIds.add(row.id);\n\t\t}\n\t}\n\n\treturn existingContentIds;\n}\n\nasync function deleteObservedSourceIfContentAbsent(\n\trepo: MediaUsageRepository,\n\tcollectionSlug: string,\n\tobservedSource: MediaUsageSource,\n\tcounts: RepairCounts,\n): Promise<void> {\n\tif (!observedSource.contentId) return;\n\tconst result = await repo.deleteSourceIfMatchingContentAbsent(\n\t\tobservedSource.sourceKey,\n\t\tobservedSource,\n\t\tcollectionSlug,\n\t\tobservedSource.contentId,\n\t);\n\tif (result.deleted) {\n\t\tcounts.deletedSourceCount++;\n\t\treturn;\n\t}\n\tif (result.contentPresent) return;\n\tif (result.source) {\n\t\tmarkRepairConflict(counts);\n\t}\n}\n\nasync function deleteObservedSource(\n\trepo: MediaUsageRepository,\n\tsourceKey: string,\n\tobservedSource: MediaUsageSource,\n\tcounts: RepairCounts,\n): Promise<void> {\n\tconst result = await repo.deleteSourceIfMatching(sourceKey, observedSource);\n\tif (result.deleted) {\n\t\tcounts.deletedSourceCount++;\n\t\treturn;\n\t}\n\tif (result.source) {\n\t\tmarkRepairConflict(counts);\n\t}\n}\n\ninterface FinalizeInput extends ContentMediaUsageRepairScope {\n\trunToken: string;\n\tcounts: RepairCounts;\n\tstatus: Exclude<ContentMediaUsageRepairStatus, \"stale\">;\n\tstartedAt: string;\n\tcompletedAt: string;\n\texecution?: ContentMediaUsageRepairExecution;\n}\n\nasync function finalizeRepairStatus(\n\tdb: Kysely<Database>,\n\trepo: MediaUsageRepository,\n\tinput: FinalizeInput,\n): Promise<ContentMediaUsageRepairCollectionResult> {\n\tlet result;\n\tif (input.execution) {\n\t\tif (input.status === \"complete\") {\n\t\t\tawait new MediaUsageWorkRepository(db).deleteWorkThroughEpoch(\n\t\t\t\tinput.execution.collectionId,\n\t\t\t\tinput.execution.startingEpoch,\n\t\t\t);\n\t\t}\n\t\tresult = await repo.finalizeIndexStatusRepairAtEpoch({\n\t\t\tadapterId: input.adapterId,\n\t\t\tscopeType: input.scopeType,\n\t\t\tscopeKey: input.scopeKey,\n\t\t\tcollectionId: input.execution.collectionId,\n\t\t\trunToken: input.runToken,\n\t\t\tstartingEpoch: input.execution.startingEpoch,\n\t\t\tstatus: input.status,\n\t\t\tschemaVersion: CONTENT_SOURCE_SCHEMA_VERSION,\n\t\t\tindexedSourceCount: input.counts.indexedSourceCount,\n\t\t\tfailedSourceCount: input.counts.failedSourceCount,\n\t\t\tlastErrorCode: input.counts.lastErrorCode,\n\t\t});\n\t} else {\n\t\tresult = await repo.finalizeIndexStatusRepairIfRunning({\n\t\t\tadapterId: input.adapterId,\n\t\t\tscopeType: input.scopeType,\n\t\t\tscopeKey: input.scopeKey,\n\t\t\trunToken: input.runToken,\n\t\t\tstatus: input.status,\n\t\t\tschemaVersion: CONTENT_SOURCE_SCHEMA_VERSION,\n\t\t\tcompletedAt: input.completedAt,\n\t\t\tindexedSourceCount: input.counts.indexedSourceCount,\n\t\t\tfailedSourceCount: input.counts.failedSourceCount,\n\t\t\tlastErrorCode: input.counts.lastErrorCode,\n\t\t});\n\t}\n\n\treturn {\n\t\tscope: {\n\t\t\tadapterId: input.adapterId,\n\t\t\tscopeType: input.scopeType,\n\t\t\tscopeKey: input.scopeKey,\n\t\t},\n\t\tstatus: result.finalized ? input.status : \"stale\",\n\t\tindexedSourceCount: input.counts.indexedSourceCount,\n\t\tfailedSourceCount: input.counts.failedSourceCount,\n\t\tskippedSourceCount: input.counts.skippedSourceCount,\n\t\tdeletedSourceCount: input.counts.deletedSourceCount,\n\t\tlastErrorCode: result.finalized\n\t\t\t? input.counts.lastErrorCode\n\t\t\t: (result.status?.lastErrorCode ??\n\t\t\t\tCONTENT_MEDIA_USAGE_REPAIR_ERROR.CONTENT_USAGE_REPAIR_CONFLICT),\n\t\tstartedAt: input.startedAt,\n\t\tcompletedAt: result.finalized ? (result.status?.completedAt ?? input.completedAt) : null,\n\t};\n}\n\nfunction determineRepairStatus(\n\tcounts: RepairCounts,\n): Exclude<ContentMediaUsageRepairStatus, \"stale\"> {\n\tif (counts.failedSourceCount === 0 && counts.skippedSourceCount === 0) return \"complete\";\n\tconst trustedProgress = counts.indexedSourceCount + counts.deletedSourceCount;\n\tif (counts.failedSourceCount > 0 && trustedProgress === 0) {\n\t\treturn \"failed\";\n\t}\n\treturn \"partial\";\n}\n\nfunction buildContentSourceKeys(\n\tcollectionSlug: string,\n\tcontentId: string,\n\tcollectionId?: string,\n): string[] {\n\treturn MEDIA_USAGE_CONTENT_SOURCE_VARIANTS.map((sourceVariant) =>\n\t\tbuildContentMediaUsageSourceKey({ collectionId, collectionSlug, contentId, sourceVariant }),\n\t);\n}\n\nfunction buildContentSourceKeysForScan(\n\tscan: ContentMediaUsageCollectionScan,\n\tcollectionId?: string,\n): string[] {\n\treturn scan.contentIds.flatMap((contentId) =>\n\t\tbuildContentSourceKeys(scan.collectionSlug, contentId, collectionId),\n\t);\n}\n\nasync function loadContentMediaUsageCollectionRecord(\n\tdb: Kysely<Database>,\n\tcollectionSlug: string,\n): Promise<ContentMediaUsageCollectionRecord | null> {\n\tconst row = await db\n\t\t.selectFrom(\"_emdash_collections\")\n\t\t.select([\"id\", \"slug\"])\n\t\t.where(\"slug\", \"=\", collectionSlug)\n\t\t.executeTakeFirst();\n\treturn row ?? null;\n}\n\nasync function isIncrementalCaptureActive(db: Kysely<Database>): Promise<boolean> {\n\tconst row = await db\n\t\t.selectFrom(\"_emdash_media_usage_activation\")\n\t\t.select(\"state\")\n\t\t.where(\"task_key\", \"=\", \"incremental_capture\")\n\t\t.executeTakeFirst();\n\treturn row?.state === \"active\";\n}\n\nfunction sameContentIds(left: readonly string[], right: readonly string[]): boolean {\n\tif (left.length !== right.length) return false;\n\tconst rightIds = new Set(right);\n\treturn left.every((id) => rightIds.has(id));\n}\n\nfunction repairedContentIds(\n\tcontentIds: readonly string[],\n\tcounts: Pick<RepairCounts, \"missingContentIds\">,\n): string[] {\n\tif (counts.missingContentIds.size === 0) return [...contentIds];\n\treturn contentIds.filter((contentId) => !counts.missingContentIds.has(contentId));\n}\n\nfunction contentMediaUsageCollectionScope(collectionSlug: string): ContentMediaUsageRepairScope {\n\treturn {\n\t\tadapterId: CONTENT_MEDIA_USAGE_ADAPTER_ID,\n\t\tscopeType: CONTENT_MEDIA_USAGE_COLLECTION_SCOPE,\n\t\tscopeKey: collectionSlug,\n\t};\n}\n\nfunction getContentTableName(collectionSlug: string): string {\n\tvalidateIdentifier(collectionSlug, \"collection slug\");\n\treturn `ec_${collectionSlug}`;\n}\n"],"mappings":";;;;;;;;AAiCA,MAAa,mCAAmC;CAC/C,sBAAsB;CACtB,mBAAmB;CACnB,0BAA0B;CAC1B,yBAAyB;CACzB,wBAAwB;CACxB,4BAA4B;CAC5B,+BAA+B;CAC/B,6BAA6B;CAC7B;AAwDD,eAAsB,2BACrB,IAC4C;CAC5C,MAAM,cAAc,MAAM,uCAAuC,GAAG;CACpE,MAAM,UAAsD,EAAE;AAE9D,MAAK,MAAM,cAAc,YACxB,SAAQ,KAAK;EACZ;EACA,QAAQ,MAAM,wCAAwC,IAAI,WAAW;EACrE,CAAC;AAGH,QAAO,oCACN,MAAM,iDAAiD,IAAI,QAAQ,CACnE;;AAGF,eAAsB,gCACrB,IACA,gBACA,sBACkD;AAClD,oBAAmB,gBAAgB,kBAAkB;CACrD,IAAI,kBAAkB,GACpB,WAAW,sBAAsB,CACjC,OAAO,KAAK,CACZ,MAAM,QAAQ,KAAK,eAAe;AACpC,KAAI,yBAAyB,OAC5B,mBAAkB,gBAAgB,MAAM,MAAM,KAAK,qBAAqB;CAEzE,MAAM,aAAa,MAAM,gBAAgB,kBAAkB;AAC3D,KAAI,CAAC,WAAY,QAAO;CAExB,MAAM,YAAY,oBAAoB,eAAe;AAarD,QAAO;EACN;EACA,aAdY,MAAM,GAAmB;;SAE9B,IAAI,IAAI,UAAU,CAAC;;;;2BAID,WAAW,GAAG;4BACb,eAAe;;;GAGxC,QAAQ,GAAG,EAIK,KAAK,KAAK,QAAQ,IAAI,GAAG;EAC1C;;AAGF,eAAsB,kCACrB,IACA,OACmD;AACnD,oBAAmB,MAAM,gBAAgB,kBAAkB;AAC3D,QAAO,+BAA+B,MAAM,sBAC3C,0CAA0C,IAAI,MAAM,eAAe,CACnE;;AAGF,eAAe,uCACd,IAC+C;AAC/C,QAAO,GACL,WAAW,sBAAsB,CACjC,OAAO,CAAC,MAAM,OAAO,CAAC,CACtB,QAAQ,QAAQ,MAAM,CACtB,SAAS;;AAGZ,eAAe,wCACd,IACA,YACmD;AACnD,KAAI;AACH,SAAO,MAAM,+BAA+B,WAAW,YACtD,0CAA0C,IAAI,WAAW,MAAM,WAAW,GAAG,CAC7E;UACO,OAAO;AACf,UAAQ,MAAM,6CAA6C,WAAW,KAAK,IAAI,MAAM;EACrF,MAAM,uBAAM,IAAI,MAAM,EAAC,aAAa;AACpC,SAAO;GACN,OAAO,iCAAiC,WAAW,KAAK;GACxD,QAAQ;GACR,oBAAoB;GACpB,mBAAmB;GACnB,oBAAoB;GACpB,oBAAoB;GACpB,eAAe,iCAAiC;GAChD,WAAW;GACX,aAAa;GACb;;;AAIH,eAAe,iDACd,IACA,SACqD;CACrD,MAAM,gBAAgB,MAAM,2BAA2B,GAAG;CAC1D,MAAM,qBAAqB,MAAM,6CAA6C,GAAG;CACjF,MAAM,mBAAmB,IAAI,IAC5B,mBAAmB,KAAK,eAAe,CAAC,WAAW,MAAM,WAAW,GAAG,CAAC,CACxE;CACD,MAAM,kBAA6D,EAAE;CACrE,MAAM,kBAA8D,EAAE;AAEtE,MAAK,MAAM,EAAE,YAAY,YAAY,QACpC,KAAI,iBAAiB,IAAI,WAAW,KAAK,KAAK,WAAW,GACxD,iBAAgB,KAAK,OAAO;KAE5B,iBAAgB,KAAK;EAAE;EAAY;EAAQ,CAAC;AAI9C,KAAI,gBAAgB,SAAS,GAAG;EAC/B,MAAM,OAAO,IAAI,qBAAqB,GAAG;AACzC,OAAK,MAAM,YAAY,gBACtB,OAAM,KAAK,kBACV,SAAS,OAAO,OAChB,gBAAgB,SAAS,WAAW,KAAK,OACzC;;AAIH,QAAO;;AAGR,eAAe,6CACd,IAC+C;AAC/C,KAAI;AACH,SAAO,MAAM,uCAAuC,GAAG;SAChD;AAIR,KAAI;AACH,SAAO,MAAM,uCAAuC,GAAG;UAC/C,OAAO;AACf,UAAQ,MAAM,qEAAqE,MAAM;AACzF,QAAM;;;AAIR,SAAS,oCACR,aACmC;AACnC,QAAO;EACN,QAAQ,yBAAyB,YAAY;EAC7C,aAAa,CAAC,GAAG,YAAY;EAC7B,oBAAoB,yBAAyB,aAAa,qBAAqB;EAC/E,mBAAmB,yBAAyB,aAAa,oBAAoB;EAC7E,oBAAoB,yBAAyB,aAAa,qBAAqB;EAC/E,oBAAoB,yBAAyB,aAAa,qBAAqB;EAC/E;;AAGF,SAAS,yBACR,aACgC;AAChC,KAAI,YAAY,WAAW,EAAG,QAAO;AACrC,KAAI,YAAY,OAAO,eAAe,WAAW,WAAW,WAAW,CAAE,QAAO;AAChF,KAAI,YAAY,MAAM,eAAe,WAAW,WAAW,QAAQ,CAAE,QAAO;AAC5E,KAAI,YAAY,MAAM,eAAe,WAAW,WAAW,UAAU,CAAE,QAAO;AAC9E,KAAI,YAAY,OAAO,eAAe,WAAW,WAAW,SAAS,CAAE,QAAO;AAC9E,QAAO;;AAGR,SAAS,yBACR,aACA,KACS;AACT,QAAO,YAAY,QAAQ,KAAK,eAAe,MAAM,WAAW,MAAM,EAAE;;AAGzE,eAAe,0CACd,IACA,gBACA,sBACmD;CACnD,MAAM,+BAAc,IAAI,MAAM,EAAC,aAAa;CAC5C,MAAM,QAAQ,iCAAiC,eAAe;CAC9D,MAAM,gBAAgB,MAAM,2BAA2B,GAAG;CAC1D,MAAM,aAAa,MAAM,sCAAsC,IAAI,eAAe;AAClF,KACC,CAAC,cACA,iBAAiB,wBAAwB,WAAW,OAAO,qBAE5D,QAAO;EACN;EACA,QAAQ;EACR,oBAAoB;EACpB,mBAAmB;EACnB,oBAAoB;EACpB,oBAAoB;EACpB,eAAe,iCAAiC;EAChD,WAAW;EACX,aAAa;EACb;CAGF,MAAM,OAAO,IAAI,qBAAqB,GAAG;CACzC,MAAM,WAAW,MAAM;CACvB,IAAI,YAAY;CAChB,IAAI;AACJ,KAAI,eAAe;EAClB,MAAM,MAAM,MAAM,KAAK,qCAAqC;GAC3D,GAAG;GACH,cAAc,WAAW;GACzB;GACA,eAAe;GACf,CAAC;AACF,MAAI,CAAC,IACJ,QAAO;GACN;GACA,QAAQ;GACR,oBAAoB;GACpB,mBAAmB;GACnB,oBAAoB;GACpB,oBAAoB;GACpB,eAAe,iCAAiC;GAChD;GACA,aAAa;GACb;AAEF,cAAY,IAAI;AAChB,cAAY;GAAE,cAAc,WAAW;GAAI,eAAe,IAAI;GAAa;OAE3E,OAAM,KAAK,uBAAuB;EACjC,GAAG;EACH;EACA,eAAe;EACf;EACA,CAAC;AAGH,KAAI;EACH,MAAM,OAAO,MAAM,gCAAgC,IAAI,gBAAgB,WAAW,aAAa;AAC/F,MAAI,CAAC,MAAM;GACV,MAAM,+BAAc,IAAI,MAAM,EAAC,aAAa;AAC5C,UAAO,MAAM,qBAAqB,IAAI,MAAM;IAC3C,GAAG;IACH;IACA,QAAQ;KACP,oBAAoB;KACpB,mBAAmB;KACnB,oBAAoB;KACpB,oBAAoB;KACpB,eAAe,iCAAiC;KAChD,mCAAmB,IAAI,KAAK;KAC5B;IACD,QAAQ;IACR;IACA;IACA;IACA,CAAC;;EAEH,MAAM,SAAS,MAAM,4BAA4B,IAAI,MAAM,MAAM,WAAW,aAAa;EACzF,MAAM,YAAY,MAAM,gCACvB,IACA,gBACA,WAAW,aACX;AACD,MAAI,CAAC,WAAW;AACf,UAAO;AACP,UAAO,gBAAgB,iCAAiC;aAC9C,CAAC,eAAe,mBAAmB,KAAK,YAAY,OAAO,EAAE,UAAU,WAAW,CAC5F,oBAAmB,OAAO;EAE3B,MAAM,+BAAc,IAAI,MAAM,EAAC,aAAa;EAC5C,MAAM,SAAS,sBAAsB,OAAO;AAC5C,SAAO,MAAM,qBAAqB,IAAI,MAAM;GAC3C,GAAG;GACH;GACA;GACA;GACA;GACA;GACA;GACA,CAAC;UACM,OAAO;AACf,MAAI,EAAE,iBAAiB,+BACtB,SAAQ,MAAM,6CAA6C,eAAe,IAAI,MAAM;EAErF,MAAM,+BAAc,IAAI,MAAM,EAAC,aAAa;EAC5C,MAAM,gBACL,iBAAiB,gCACd,MAAM,OACN,iCAAiC;AACrC,SAAO,qBAAqB,IAAI,MAAM;GACrC,GAAG;GACH;GACA,QAAQ;IACP,oBAAoB;IACpB,mBAAmB;IACnB,oBAAoB;IACpB,oBAAoB;IACpB;IACA,mCAAmB,IAAI,KAAK;IAC5B;GACD,QAAQ;GACR;GACA;GACA;GACA,CAAC;;;AAaJ,eAAe,4BACd,IACA,MACA,MACA,cACwB;CACxB,MAAM,SAAuB;EAC5B,oBAAoB;EACpB,mBAAmB;EACnB,oBAAoB;EACpB,oBAAoB;EACpB,eAAe;EACf,mCAAmB,IAAI,KAAK;EAC5B;CAED,MAAM,iBAAiB,MAAM,4BAA4B,IAAI,KAAK,gBAAgB,aAAa;CAC/F,MAAM,kBAAkB,MAAM,KAAK,YAAY,8BAA8B,MAAM,aAAa,CAAC;AAEjG,MAAK,MAAM,aAAa,KAAK,WAC5B,OAAM,oBACL,IACA,MACA,KAAK,gBACL,WACA,gBACA,iBACA,QACA,aACA;AAGF,OAAM,gCAAgC,IAAI,MAAM,KAAK,gBAAgB,QAAQ,aAAa;AAC1F,QAAO;;AAGR,eAAe,oBACd,IACA,MACA,gBACA,WACA,gBACA,iBACA,QACA,cACgB;CAChB,MAAM,aAAa,uBAAuB,gBAAgB,WAAW,aAAa;CAClF,MAAM,kBAAkB,MAAM,+BAC7B,IACA,gBACA,WACA,gBACA,eAAe;EAAE;EAAc,iBAAiB;EAAG,GAAG,OACtD;AACD,KAAI,CAAC,gBAAgB,SAAS;AAC7B,MAAI,gBAAgB,UAAU,iCAAiC,mBAAmB;AACjF,sBAAmB,OAAO;AAC1B,UAAO,kBAAkB,IAAI,UAAU;AACvC;;AAED,SAAO,gBAAgB,gBAAgB;AACvC,MAAI,gBAAgB,UAEnB,OAAM,sBAAsB,MAAM,gBAAgB,WAAW,iBAAiB,OAAO;AAEtF,MAAI,gBAAgB,QAAQ;AAS3B,QARe,MAAM,KAAK,8BACzB;IACC,GAAG,gBAAgB;IACnB,oBAAoB;IACpB,eAAe,gBAAgB;IAC/B,EACD,gBAAgB,IAAI,gBAAgB,OAAO,UAAU,IAAI,KACzD,EACU,UACV,QAAO;OAEP,oBAAmB,OAAO;AAE3B;;AAGD,SAAO;AACP;;CAGD,MAAM,qBAAqB,MAAM,sBAChC,MACA,gBAAgB,WAChB,iBACA,OACA;AAED,MAAK,MAAM,aAAa,YAAY;AACnC,MAAI,mBAAmB,IAAI,UAAU,CAAE;EACvC,MAAM,iBAAiB,gBAAgB,IAAI,UAAU;AACrD,MAAI,CAAC,eAAgB;AACrB,QAAM,qBAAqB,MAAM,WAAW,gBAAgB,OAAO;;;AAIrE,eAAe,sBACd,MACA,WACA,iBACA,QACuB;CACvB,MAAM,qCAAqB,IAAI,KAAa;AAC5C,MAAK,MAAM,YAAY,WAAW;AACjC,qBAAmB,IAAI,SAAS,OAAO,UAAU;EACjD,MAAM,SAAS,MAAM,KAAK,wBACzB,SAAS,QACT,SAAS,aACT,gBAAgB,IAAI,SAAS,OAAO,UAAU,IAAI,KAClD;AACD,MAAI,OAAO,YAAY,OAAO,UAC7B,QAAO;MAEP,oBAAmB,OAAO;;AAG5B,QAAO;;AAGR,SAAS,mBAAmB,QAA4B;AACvD,QAAO;AACP,QAAO,kBAAkB,iCAAiC;;AAG3D,eAAe,gCACd,IACA,MACA,gBACA,QACA,cACgB;CAChB,MAAM,UAAU,MAAM,KAAK,6BAA6B,gBAAgB,aAAa;CACrF,MAAM,qBAAqB,MAAM,uBAChC,IACA,gBACA,QAAQ,SAAS,WAAY,OAAO,YAAY,CAAC,OAAO,UAAU,GAAG,EAAE,CAAE,EACzE,aACA;AAED,MAAK,MAAM,UAAU,SAAS;AAC7B,MAAI,CAAC,OAAO,WAAW;AACtB,SAAM,qBAAqB,MAAM,OAAO,WAAW,QAAQ,OAAO;AAClE;;AAED,MAAI,mBAAmB,IAAI,OAAO,UAAU,CAAE;AAC9C,QAAM,oCAAoC,MAAM,gBAAgB,QAAQ,OAAO;;;AAIjF,eAAe,uBACd,IACA,gBACA,YACA,cACuB;AACvB,oBAAmB,gBAAgB,kBAAkB;CACrD,MAAM,qCAAqB,IAAI,KAAa;CAC5C,MAAM,mBAAmB,CAAC,GAAG,IAAI,IAAI,WAAW,CAAC;AACjD,KAAI,iBAAiB,WAAW,EAAG,QAAO;CAE1C,MAAM,YAAY,oBAAoB,eAAe;AACrD,MAAK,MAAM,kBAAkB,OAAO,kBAAkB,eAAe,EAAE;EACtE,MAAM,SAAS,MAAM,GAAmB;;UAEhC,IAAI,IAAI,UAAU,CAAC;0BACH,IAAI,KAAK,eAAe,CAAC;KAE/C,eACG,GAAG;;;8BAGoB,aAAa;+BACZ,eAAe;UAEvC,GAAG,GACN;IACA,QAAQ,GAAG;AACb,OAAK,MAAM,OAAO,OAAO,KACxB,oBAAmB,IAAI,IAAI,GAAG;;AAIhC,QAAO;;AAGR,eAAe,oCACd,MACA,gBACA,gBACA,QACgB;AAChB,KAAI,CAAC,eAAe,UAAW;CAC/B,MAAM,SAAS,MAAM,KAAK,oCACzB,eAAe,WACf,gBACA,gBACA,eAAe,UACf;AACD,KAAI,OAAO,SAAS;AACnB,SAAO;AACP;;AAED,KAAI,OAAO,eAAgB;AAC3B,KAAI,OAAO,OACV,oBAAmB,OAAO;;AAI5B,eAAe,qBACd,MACA,WACA,gBACA,QACgB;CAChB,MAAM,SAAS,MAAM,KAAK,uBAAuB,WAAW,eAAe;AAC3E,KAAI,OAAO,SAAS;AACnB,SAAO;AACP;;AAED,KAAI,OAAO,OACV,oBAAmB,OAAO;;AAa5B,eAAe,qBACd,IACA,MACA,OACmD;CACnD,IAAI;AACJ,KAAI,MAAM,WAAW;AACpB,MAAI,MAAM,WAAW,WACpB,OAAM,IAAI,yBAAyB,GAAG,CAAC,uBACtC,MAAM,UAAU,cAChB,MAAM,UAAU,cAChB;AAEF,WAAS,MAAM,KAAK,iCAAiC;GACpD,WAAW,MAAM;GACjB,WAAW,MAAM;GACjB,UAAU,MAAM;GAChB,cAAc,MAAM,UAAU;GAC9B,UAAU,MAAM;GAChB,eAAe,MAAM,UAAU;GAC/B,QAAQ,MAAM;GACd,eAAe;GACf,oBAAoB,MAAM,OAAO;GACjC,mBAAmB,MAAM,OAAO;GAChC,eAAe,MAAM,OAAO;GAC5B,CAAC;OAEF,UAAS,MAAM,KAAK,mCAAmC;EACtD,WAAW,MAAM;EACjB,WAAW,MAAM;EACjB,UAAU,MAAM;EAChB,UAAU,MAAM;EAChB,QAAQ,MAAM;EACd,eAAe;EACf,aAAa,MAAM;EACnB,oBAAoB,MAAM,OAAO;EACjC,mBAAmB,MAAM,OAAO;EAChC,eAAe,MAAM,OAAO;EAC5B,CAAC;AAGH,QAAO;EACN,OAAO;GACN,WAAW,MAAM;GACjB,WAAW,MAAM;GACjB,UAAU,MAAM;GAChB;EACD,QAAQ,OAAO,YAAY,MAAM,SAAS;EAC1C,oBAAoB,MAAM,OAAO;EACjC,mBAAmB,MAAM,OAAO;EAChC,oBAAoB,MAAM,OAAO;EACjC,oBAAoB,MAAM,OAAO;EACjC,eAAe,OAAO,YACnB,MAAM,OAAO,gBACZ,OAAO,QAAQ,iBACjB,iCAAiC;EACnC,WAAW,MAAM;EACjB,aAAa,OAAO,YAAa,OAAO,QAAQ,eAAe,MAAM,cAAe;EACpF;;AAGF,SAAS,sBACR,QACkD;AAClD,KAAI,OAAO,sBAAsB,KAAK,OAAO,uBAAuB,EAAG,QAAO;CAC9E,MAAM,kBAAkB,OAAO,qBAAqB,OAAO;AAC3D,KAAI,OAAO,oBAAoB,KAAK,oBAAoB,EACvD,QAAO;AAER,QAAO;;AAGR,SAAS,uBACR,gBACA,WACA,cACW;AACX,QAAO,oCAAoC,KAAK,kBAC/C,gCAAgC;EAAE;EAAc;EAAgB;EAAW;EAAe,CAAC,CAC3F;;AAGF,SAAS,8BACR,MACA,cACW;AACX,QAAO,KAAK,WAAW,SAAS,cAC/B,uBAAuB,KAAK,gBAAgB,WAAW,aAAa,CACpE;;AAGF,eAAe,sCACd,IACA,gBACoD;AAMpD,QALY,MAAM,GAChB,WAAW,sBAAsB,CACjC,OAAO,CAAC,MAAM,OAAO,CAAC,CACtB,MAAM,QAAQ,KAAK,eAAe,CAClC,kBAAkB,IACN;;AAGf,eAAe,2BAA2B,IAAwC;AAMjF,SALY,MAAM,GAChB,WAAW,iCAAiC,CAC5C,OAAO,QAAQ,CACf,MAAM,YAAY,KAAK,sBAAsB,CAC7C,kBAAkB,GACR,UAAU;;AAGvB,SAAS,eAAe,MAAyB,OAAmC;AACnF,KAAI,KAAK,WAAW,MAAM,OAAQ,QAAO;CACzC,MAAM,WAAW,IAAI,IAAI,MAAM;AAC/B,QAAO,KAAK,OAAO,OAAO,SAAS,IAAI,GAAG,CAAC;;AAG5C,SAAS,mBACR,YACA,QACW;AACX,KAAI,OAAO,kBAAkB,SAAS,EAAG,QAAO,CAAC,GAAG,WAAW;AAC/D,QAAO,WAAW,QAAQ,cAAc,CAAC,OAAO,kBAAkB,IAAI,UAAU,CAAC;;AAGlF,SAAS,iCAAiC,gBAAsD;AAC/F,QAAO;EACN,WAAW;EACX,WAAW;EACX,UAAU;EACV;;AAGF,SAAS,oBAAoB,gBAAgC;AAC5D,oBAAmB,gBAAgB,kBAAkB;AACrD,QAAO,MAAM"}

package/dist/{context-ZldbZcle.mjs → context-CX6gxOLW.mjs}

@@ -1,18 +1,18 @@
 import { d as pluginDataExtractExpr, f as pluginDataOrderExpr } from "./dialect-helpers-BSbfaO3F.mjs";
 import { o as resolveContentCreateLocale } from "./config-C3EBstHi.mjs";
-import { t as ContentRepository } from "./content-ZHCc1ngN.mjs";
+import { t as ContentRepository } from "./content-DjvM0T92.mjs";
 import { o as decodeCursor, s as encodeCursor } from "./types-CQPWhPxE.mjs";
-import { t as MediaRepository } from "./media-CzhAn2--.mjs";
-import { t as UserRepository } from "./user-DJZfUJVE.mjs";
-import { t as withTransaction } from "./transaction-NQj4VJ7Z.mjs";
-import { t as TaxonomyRepository } from "./taxonomy-BqCZ1TdU.mjs";
-import { t as OptionsRepository } from "./options-CBXIHUoT.mjs";
-import { t as enrichImageMetadata } from "./enrich-_ySMEvEE.mjs";
-import { t as SeoRepository } from "./seo-Dq4G-RrO.mjs";
-import { c as markContentMediaUsageCollectionStaleSafely } from "./content-refresh-B_8SJzuU.mjs";
-import { o as invalidateSiteSettingsCache } from "./settings-xRdoUZr0.mjs";
-import { i as stripCredentialHeaders, n as resolveAndValidateExternalUrl, t as SsrfError } from "./ssrf-Cpvg_n3A.mjs";
-import { t as CronAccessImpl } from "./cron-Y9aLtgrA.mjs";
+import { t as MediaRepository } from "./media-BBm8Wg3f.mjs";
+import { t as UserRepository } from "./user-BTZ40aq6.mjs";
+import { t as withTransaction } from "./transaction-0KOpOyMu.mjs";
+import { t as TaxonomyRepository } from "./taxonomy-tJepplLL.mjs";
+import { t as OptionsRepository } from "./options-BHPeIbBd.mjs";
+import { t as enrichImageMetadata } from "./enrich-BX0IDp4z.mjs";
+import { t as SeoRepository } from "./seo-926NRIgt.mjs";
+import { l as markContentMediaUsageCollectionStaleSafely } from "./content-refresh-Bwp-8yGy.mjs";
+import { s as invalidateSiteSettingsCache } from "./settings--wobrkkC.mjs";
+import { o as stripCredentialHeaders, r as resolveAndValidateExternalUrl, t as SsrfError } from "./ssrf-5sIM5jzl.mjs";
+import { t as CronAccessImpl } from "./cron-C6o7VppJ.mjs";
 import { sql } from "kysely";
 import { ulid } from "ulidx";
 
@@ -195,6 +195,18 @@ function rawWhereExpr(sqlText, params) {
 *
 * Implements the StorageCollection interface for a specific plugin and collection.
 */
+/**
+* Rank a sort expression so NULLs get a deterministic position.
+*
+* A missing key in a schemaless document extracts as NULL, which sorts
+* differently per dialect (SQLite first, Postgres last) and makes every
+* comparison against it UNKNOWN. Sorting on this rank ahead of the value puts
+* NULLs in the same place on both dialects and keeps the seek operands
+* non-NULL.
+*/
+function nullRank(expr) {
+	return sql`(case when ${expr} is null then 1 else 0 end)`;
+}
 var PluginStorageRepository = class {
 	indexedFields;
 	constructor(db, pluginId, collection, indexes) {
@@ -305,16 +317,39 @@ var PluginStorageRepository = class {
 		]).where("plugin_id", "=", this.pluginId).where("collection", "=", this.collection);
 		const whereResult = buildWhereClause(this.db, where);
 		if (whereResult.sql) query = query.where(rawWhereExpr(whereResult.sql, whereResult.params));
+		const orderEntries = Object.entries(orderBy);
+		const orderDirections = new Set(orderEntries.map(([, direction]) => direction));
+		const descending = orderEntries.length > 0 && orderEntries[0][1] === "desc";
+		const sortExpr = (field) => sql`${sql.raw(jsonOrderExtract(this.db, field))}`;
 		if (cursor) {
 			const decoded = decodeCursor(cursor);
-			query = query.where(({ eb }) => eb(sql`(created_at, id)`, ">", sql`(${decoded.orderValue}, ${decoded.id})`));
-		}
-		if (Object.keys(orderBy).length > 0) for (const [field, direction] of Object.entries(orderBy)) {
-			const extract = jsonOrderExtract(this.db, field);
-			const orderExpr = direction === "desc" ? sql`${sql.raw(extract)} desc` : sql`${sql.raw(extract)} asc`;
-			query = query.orderBy(orderExpr);
+			if (orderEntries.length === 0) query = query.where(({ eb }) => eb(sql`(created_at, id)`, ">", sql`(${decoded.orderValue}, ${decoded.id})`));
+			else {
+				if (orderDirections.size > 1) throw new StorageQueryError("Cursor pagination requires every orderBy field to share one direction.", Object.keys(orderBy).join(", "), "Sort every field the same way, or page without a cursor.");
+				const op = descending ? sql`<` : sql`>`;
+				const cursorExpr = (field) => sql`(select ${sql.raw(jsonOrderExtract(this.db, field))} from _plugin_storage where plugin_id = ${this.pluginId} and collection = ${this.collection} and id = ${decoded.id})`;
+				const fields = orderEntries.map(([field]) => {
+					const own = sortExpr(field);
+					const theirs = cursorExpr(field);
+					return {
+						equal: sql`(${nullRank(own)} = ${nullRank(theirs)} and (${nullRank(own)} = 1 or ${own} = ${theirs}))`,
+						after: sql`(${nullRank(own)} ${op} ${nullRank(theirs)} or (${nullRank(own)} = ${nullRank(theirs)} and ${nullRank(own)} = 0 and ${own} ${op} ${theirs}))`
+					};
+				});
+				const terms = fields.map((_, k) => sql`(${sql.join([...fields.slice(0, k).map((f) => f.equal), fields[k].after], sql` and `)})`);
+				terms.push(sql`(${sql.join([...fields.map((f) => f.equal), sql`id ${op} ${decoded.id}`], sql` and `)})`);
+				query = query.where(sql`(${sql.join(terms, sql` or `)})`);
+			}
 		}
-		else query = query.orderBy("created_at", "asc").orderBy("id", "asc");
+		if (orderEntries.length > 0) {
+			for (const [field, direction] of orderEntries) {
+				const dir = direction === "desc" ? sql`desc` : sql`asc`;
+				const expr = sortExpr(field);
+				query = query.orderBy(sql`${nullRank(expr)} ${dir}`);
+				query = query.orderBy(sql`${expr} ${dir}`);
+			}
+			query = query.orderBy("id", descending ? "desc" : "asc");
+		} else query = query.orderBy("created_at", "asc").orderBy("id", "asc");
 		query = query.limit(limit + 1);
 		const rows = await query.execute();
 		const hasMore = rows.length > limit;
@@ -1030,4 +1065,4 @@ var PluginContextFactory = class {
 
 //#endregion
 export { createUnrestrictedHttpAccess as a, createStorageAccess as i, createHttpAccess as n, PluginStorageRepository as o, createSiteInfo as r, PluginContextFactory as t };
-//# sourceMappingURL=context-ZldbZcle.mjs.map
+//# sourceMappingURL=context-CX6gxOLW.mjs.map

package/dist/context-CX6gxOLW.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-CX6gxOLW.mjs","names":[],"sources":["../src/plugins/storage-query.ts","../src/database/repositories/plugin-storage.ts","../src/plugins/context.ts"],"sourcesContent":["/**\n * Plugin Storage Query Validation and Building\n *\n * Validates that queries only use indexed fields and builds SQL WHERE clauses.\n *\n * @see PLUGIN-SYSTEM.md § Plugin Storage > Query Validation\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport { pluginDataExtractExpr, pluginDataOrderExpr } from \"../database/dialect-helpers.js\";\nimport type { WhereClause, WhereValue, RangeFilter, InFilter, StartsWithFilter } from \"./types.js\";\n\n/**\n * Error thrown when querying non-indexed fields\n */\nexport class StorageQueryError extends Error {\n\tconstructor(\n\t\tmessage: string,\n\t\tpublic field?: string,\n\t\tpublic suggestion?: string,\n\t) {\n\t\tsuper(message);\n\t\tthis.name = \"StorageQueryError\";\n\t}\n}\n\n/**\n * Check if a value is a range filter\n */\nexport function isRangeFilter(value: WhereValue): value is RangeFilter {\n\tif (typeof value !== \"object\" || value === null) return false;\n\treturn \"gt\" in value || \"gte\" in value || \"lt\" in value || \"lte\" in value;\n}\n\n/**\n * Check if a value is an IN filter\n */\nexport function isInFilter(value: WhereValue): value is InFilter {\n\tif (typeof value !== \"object\" || value === null) return false;\n\treturn \"in\" in value && Array.isArray(value.in);\n}\n\n/**\n * Check if a value is a startsWith filter\n */\nexport function isStartsWithFilter(value: WhereValue): value is StartsWithFilter {\n\tif (typeof value !== \"object\" || value === null) return false;\n\treturn \"startsWith\" in value && typeof value.startsWith === \"string\";\n}\n\n/**\n * Escape LIKE pattern metacharacters so a startsWith prefix matches\n * literally. Without this, `%` and `_` in the prefix act as wildcards\n * (e.g. `{ startsWith: \"50%\" }` would match \"50x off\").\n */\nexport function escapeLikePattern(value: string): string {\n\treturn value.replaceAll(\"\\\\\", \"\\\\\\\\\").replaceAll(\"%\", \"\\\\%\").replaceAll(\"_\", \"\\\\_\");\n}\n\n/**\n * Get the set of indexed fields from index declarations\n */\nexport function getIndexedFields(indexes: Array<string | string[]>): Set<string> {\n\tconst fields = new Set<string>();\n\tfor (const index of indexes) {\n\t\tif (Array.isArray(index)) {\n\t\t\tfor (const field of index) {\n\t\t\t\tfields.add(field);\n\t\t\t}\n\t\t} else {\n\t\t\tfields.add(index);\n\t\t}\n\t}\n\treturn fields;\n}\n\n/**\n * Validate that all fields in a where clause are indexed\n */\nexport function validateWhereClause(\n\twhere: WhereClause,\n\tindexedFields: Set<string>,\n\tpluginId: string,\n\tcollection: string,\n): void {\n\tfor (const field of Object.keys(where)) {\n\t\tif (!indexedFields.has(field)) {\n\t\t\tthrow new StorageQueryError(\n\t\t\t\t`Cannot query on non-indexed field '${field}'.`,\n\t\t\t\tfield,\n\t\t\t\t`Add '${field}' to storage.${collection}.indexes in plugin '${pluginId}' to enable this query.`,\n\t\t\t);\n\t\t}\n\t}\n}\n\n/**\n * Validate orderBy fields are indexed\n */\nexport function validateOrderByClause(\n\torderBy: Record<string, \"asc\" | \"desc\">,\n\tindexedFields: Set<string>,\n\tpluginId: string,\n\tcollection: string,\n): void {\n\tfor (const field of Object.keys(orderBy)) {\n\t\tif (!indexedFields.has(field)) {\n\t\t\tthrow new StorageQueryError(\n\t\t\t\t`Cannot order by non-indexed field '${field}'.`,\n\t\t\t\tfield,\n\t\t\t\t`Add '${field}' to storage.${collection}.indexes in plugin '${pluginId}' to enable ordering by this field.`,\n\t\t\t);\n\t\t}\n\t}\n}\n\n/**\n * SQL expression for extracting a queryable field from the `_plugin_storage.data`\n * column.\n *\n * Delegates to `pluginDataExtractExpr`, which validates the field name before\n * interpolation and applies the dialect-correct extraction: a `::jsonb` cast on\n * Postgres (the `data` column is `text`) plus an optional type-guarded\n * `::numeric` cast so numeric comparisons don't fall back to lexical text\n * ordering.\n */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any -- accepts any Kysely instance\nexport function jsonExtract(\n\tdb: Kysely<any>,\n\tfield: string,\n\toptions?: { numeric?: boolean },\n): string {\n\treturn pluginDataExtractExpr(db, field, options);\n}\n\n/**\n * SQL expression for ordering by a `_plugin_storage.data` field.\n *\n * Delegates to `pluginDataOrderExpr`, which orders over the jsonb-native value\n * on Postgres so numeric fields sort numerically (not lexically) while staying\n * total across heterogeneous data. SQLite keeps `json_extract` (already numeric).\n */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any -- accepts any Kysely instance\nexport function jsonOrderExtract(db: Kysely<any>, field: string): string {\n\treturn pluginDataOrderExpr(db, field);\n}\n\n/**\n * Build a WHERE clause condition for a single field\n */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any -- accepts any Kysely instance\nexport function buildCondition(\n\tdb: Kysely<any>,\n\tfield: string,\n\tvalue: WhereValue,\n): { sql: string; params: unknown[] } {\n\t// Numeric-vs-text is decided per condition from the JS type of the bound\n\t// value. On Postgres a text extract compared to a bound number would sort\n\t// lexically (`'9' >= '10'` is TRUE); a type-guarded `::numeric` cast on the\n\t// extract fixes it. String/boolean operands keep text comparison. SQLite is\n\t// unaffected — `json_extract` already returns a typed value.\n\tconst extractFor = (numeric: boolean): string => jsonExtract(db, field, { numeric });\n\n\tif (value === null) {\n\t\treturn { sql: `${extractFor(false)} IS NULL`, params: [] };\n\t}\n\n\tif (typeof value === \"number\") {\n\t\treturn { sql: `${extractFor(true)} = ?`, params: [value] };\n\t}\n\n\tif (typeof value === \"string\") {\n\t\treturn { sql: `${extractFor(false)} = ?`, params: [value] };\n\t}\n\n\tif (typeof value === \"boolean\") {\n\t\t// JSON booleans are stored as true/false strings\n\t\treturn { sql: `${extractFor(false)} = ?`, params: [value] };\n\t}\n\n\tif (isInFilter(value)) {\n\t\tconst numeric = value.in.length > 0 && value.in.every((v) => typeof v === \"number\");\n\t\tconst placeholders = value.in.map(() => \"?\").join(\", \");\n\t\treturn {\n\t\t\tsql: `${extractFor(numeric)} IN (${placeholders})`,\n\t\t\tparams: value.in,\n\t\t};\n\t}\n\n\tif (isStartsWithFilter(value)) {\n\t\t// ESCAPE '\\' works on both SQLite and PostgreSQL. startsWith is a string\n\t\t// operation, so always compare as text.\n\t\treturn {\n\t\t\tsql: `${extractFor(false)} LIKE ? ESCAPE '\\\\'`,\n\t\t\tparams: [`${escapeLikePattern(value.startsWith)}%`],\n\t\t};\n\t}\n\n\tif (isRangeFilter(value)) {\n\t\tconst conditions: string[] = [];\n\t\tconst params: unknown[] = [];\n\n\t\t// Each bound is cast to numeric only when its own operand is a number, so\n\t\t// a mixed range (e.g. a string lower bound) stays correct per side.\n\t\tconst pushBound = (op: string, bound: string | number): void => {\n\t\t\tconditions.push(`${extractFor(typeof bound === \"number\")} ${op} ?`);\n\t\t\tparams.push(bound);\n\t\t};\n\n\t\tif (value.gt !== undefined) pushBound(\">\", value.gt);\n\t\tif (value.gte !== undefined) pushBound(\">=\", value.gte);\n\t\tif (value.lt !== undefined) pushBound(\"<\", value.lt);\n\t\tif (value.lte !== undefined) pushBound(\"<=\", value.lte);\n\n\t\treturn {\n\t\t\tsql: conditions.join(\" AND \"),\n\t\t\tparams,\n\t\t};\n\t}\n\n\tthrow new StorageQueryError(`Unknown filter type for field '${field}'`);\n}\n\n/**\n * Build a complete WHERE clause from a WhereClause object\n */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any -- accepts any Kysely instance\nexport function buildWhereClause(\n\tdb: Kysely<any>,\n\twhere: WhereClause,\n): {\n\tsql: string;\n\tparams: unknown[];\n} {\n\tconst conditions: string[] = [];\n\tconst params: unknown[] = [];\n\n\tfor (const [field, value] of Object.entries(where)) {\n\t\tconst condition = buildCondition(db, field, value);\n\t\tconditions.push(condition.sql);\n\t\tparams.push(...condition.params);\n\t}\n\n\tif (conditions.length === 0) {\n\t\treturn { sql: \"\", params: [] };\n\t}\n\n\treturn {\n\t\tsql: conditions.join(\" AND \"),\n\t\tparams,\n\t};\n}\n\n/**\n * Build ORDER BY clause\n */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any -- accepts any Kysely instance\nexport function buildOrderByClause(\n\tdb: Kysely<any>,\n\torderBy: Record<string, \"asc\" | \"desc\">,\n): string {\n\tconst clauses: string[] = [];\n\n\tfor (const [field, direction] of Object.entries(orderBy)) {\n\t\tclauses.push(`${jsonOrderExtract(db, field)} ${direction.toUpperCase()}`);\n\t}\n\n\tif (clauses.length === 0) {\n\t\treturn \"\";\n\t}\n\n\treturn `ORDER BY ${clauses.join(\", \")}`;\n}\n","/**\n * Plugin Storage Repository\n *\n * Provides a document store API for plugin data storage.\n * Uses a single _plugin_storage table with JSON documents and expression indexes.\n *\n * @see PLUGIN-SYSTEM.md § Plugin Storage > Full API Reference\n */\n\nimport type { Kysely, RawBuilder } from \"kysely\";\nimport { sql } from \"kysely\";\n\nimport {\n\tbuildWhereClause,\n\tvalidateWhereClause,\n\tvalidateOrderByClause,\n\tgetIndexedFields,\n\tjsonOrderExtract,\n\tStorageQueryError,\n} from \"../../plugins/storage-query.js\";\nimport type {\n\tStorageCollection,\n\tQueryOptions,\n\tPaginatedResult,\n\tWhereClause,\n} from \"../../plugins/types.js\";\nimport { withTransaction } from \"../transaction.js\";\nimport type { Database } from \"../types.js\";\nimport { encodeCursor, decodeCursor } from \"./types.js\";\n\n/**\n * Interleave a `?`-placeholder SQL string with its params into a single\n * boolean raw expression. Used as a WHERE predicate directly — wrapping it\n * in `(...) = 1` breaks on Postgres, which has a strict boolean type (#920).\n */\nfunction rawWhereExpr(sqlText: string, params: unknown[]): RawBuilder<boolean> {\n\tconst parts: ReturnType<typeof sql>[] = [];\n\tlet paramIndex = 0;\n\tconst sqlParts = sqlText.split(\"?\");\n\tfor (let i = 0; i < sqlParts.length; i++) {\n\t\tif (i > 0) {\n\t\t\tparts.push(sql`${params[paramIndex++]}`);\n\t\t}\n\t\tif (sqlParts[i]) {\n\t\t\tparts.push(sql.raw(sqlParts[i]));\n\t\t}\n\t}\n\treturn sql<boolean>`(${sql.join(parts, sql.raw(\"\"))})`;\n}\n\n/**\n * Plugin Storage Repository\n *\n * Implements the StorageCollection interface for a specific plugin and collection.\n */\n/**\n * Rank a sort expression so NULLs get a deterministic position.\n *\n * A missing key in a schemaless document extracts as NULL, which sorts\n * differently per dialect (SQLite first, Postgres last) and makes every\n * comparison against it UNKNOWN. Sorting on this rank ahead of the value puts\n * NULLs in the same place on both dialects and keeps the seek operands\n * non-NULL.\n */\nfunction nullRank(expr: RawBuilder<unknown>): RawBuilder<number> {\n\treturn sql`(case when ${expr} is null then 1 else 0 end)`;\n}\n\nexport class PluginStorageRepository<T = unknown> implements StorageCollection<T> {\n\tprivate indexedFields: Set<string>;\n\n\tconstructor(\n\t\tprivate db: Kysely<Database>,\n\t\tprivate pluginId: string,\n\t\tprivate collection: string,\n\t\tindexes: Array<string | string[]>,\n\t) {\n\t\tthis.indexedFields = getIndexedFields(indexes);\n\t}\n\n\t/**\n\t * Get a document by ID\n\t */\n\tasync get(id: string): Promise<T | null> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"_plugin_storage\")\n\t\t\t.select(\"data\")\n\t\t\t.where(\"plugin_id\", \"=\", this.pluginId)\n\t\t\t.where(\"collection\", \"=\", this.collection)\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!row) return null;\n\t\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- JSON.parse returns any; generic callers provide T\n\t\treturn JSON.parse(row.data) as T;\n\t}\n\n\t/**\n\t * Store a document\n\t */\n\tasync put(id: string, data: T): Promise<void> {\n\t\tconst now = new Date().toISOString();\n\t\tconst jsonData = JSON.stringify(data);\n\n\t\tawait this.db\n\t\t\t.insertInto(\"_plugin_storage\")\n\t\t\t.values({\n\t\t\t\tplugin_id: this.pluginId,\n\t\t\t\tcollection: this.collection,\n\t\t\t\tid,\n\t\t\t\tdata: jsonData,\n\t\t\t\tcreated_at: now,\n\t\t\t\tupdated_at: now,\n\t\t\t})\n\t\t\t.onConflict((oc) =>\n\t\t\t\toc.columns([\"plugin_id\", \"collection\", \"id\"]).doUpdateSet({\n\t\t\t\t\tdata: jsonData,\n\t\t\t\t\tupdated_at: now,\n\t\t\t\t}),\n\t\t\t)\n\t\t\t.execute();\n\t}\n\n\t/**\n\t * Delete a document\n\t */\n\tasync delete(id: string): Promise<boolean> {\n\t\tconst result = await this.db\n\t\t\t.deleteFrom(\"_plugin_storage\")\n\t\t\t.where(\"plugin_id\", \"=\", this.pluginId)\n\t\t\t.where(\"collection\", \"=\", this.collection)\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirst();\n\n\t\treturn (result.numDeletedRows ?? 0) > 0;\n\t}\n\n\t/**\n\t * Check if a document exists\n\t */\n\tasync exists(id: string): Promise<boolean> {\n\t\tconst row = await this.db\n\t\t\t.selectFrom(\"_plugin_storage\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"plugin_id\", \"=\", this.pluginId)\n\t\t\t.where(\"collection\", \"=\", this.collection)\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirst();\n\n\t\treturn !!row;\n\t}\n\n\t/**\n\t * Get multiple documents by ID\n\t */\n\tasync getMany(ids: string[]): Promise<Map<string, T>> {\n\t\tif (ids.length === 0) return new Map();\n\n\t\tconst rows = await this.db\n\t\t\t.selectFrom(\"_plugin_storage\")\n\t\t\t.select([\"id\", \"data\"])\n\t\t\t.where(\"plugin_id\", \"=\", this.pluginId)\n\t\t\t.where(\"collection\", \"=\", this.collection)\n\t\t\t.where(\"id\", \"in\", ids)\n\t\t\t.execute();\n\n\t\tconst result = new Map<string, T>();\n\t\tfor (const row of rows) {\n\t\t\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- JSON.parse returns any; generic callers provide T\n\t\t\tresult.set(row.id, JSON.parse(row.data) as T);\n\t\t}\n\t\treturn result;\n\t}\n\n\t/**\n\t * Store multiple documents\n\t */\n\tasync putMany(items: Array<{ id: string; data: T }>): Promise<void> {\n\t\tif (items.length === 0) return;\n\n\t\tconst now = new Date().toISOString();\n\n\t\t// SQLite doesn't support batch upserts well, so we do them one at a time\n\t\t// In a transaction for atomicity\n\t\tawait withTransaction(this.db, async (trx) => {\n\t\t\tfor (const item of items) {\n\t\t\t\tconst jsonData = JSON.stringify(item.data);\n\t\t\t\tawait trx\n\t\t\t\t\t.insertInto(\"_plugin_storage\")\n\t\t\t\t\t.values({\n\t\t\t\t\t\tplugin_id: this.pluginId,\n\t\t\t\t\t\tcollection: this.collection,\n\t\t\t\t\t\tid: item.id,\n\t\t\t\t\t\tdata: jsonData,\n\t\t\t\t\t\tcreated_at: now,\n\t\t\t\t\t\tupdated_at: now,\n\t\t\t\t\t})\n\t\t\t\t\t.onConflict((oc) =>\n\t\t\t\t\t\toc.columns([\"plugin_id\", \"collection\", \"id\"]).doUpdateSet({\n\t\t\t\t\t\t\tdata: jsonData,\n\t\t\t\t\t\t\tupdated_at: now,\n\t\t\t\t\t\t}),\n\t\t\t\t\t)\n\t\t\t\t\t.execute();\n\t\t\t}\n\t\t});\n\t}\n\n\t/**\n\t * Delete multiple documents\n\t */\n\tasync deleteMany(ids: string[]): Promise<number> {\n\t\tif (ids.length === 0) return 0;\n\n\t\tconst result = await this.db\n\t\t\t.deleteFrom(\"_plugin_storage\")\n\t\t\t.where(\"plugin_id\", \"=\", this.pluginId)\n\t\t\t.where(\"collection\", \"=\", this.collection)\n\t\t\t.where(\"id\", \"in\", ids)\n\t\t\t.executeTakeFirst();\n\n\t\treturn Number(result.numDeletedRows ?? 0);\n\t}\n\n\t/**\n\t * Query documents with filters\n\t */\n\tasync query(options: QueryOptions = {}): Promise<PaginatedResult<{ id: string; data: T }>> {\n\t\tconst { where = {}, orderBy = {}, cursor } = options;\n\t\tconst limit = Math.min(options.limit ?? 50, 100);\n\n\t\t// Validate that all queried fields are indexed\n\t\tvalidateWhereClause(where, this.indexedFields, this.pluginId, this.collection);\n\t\tif (Object.keys(orderBy).length > 0) {\n\t\t\tvalidateOrderByClause(orderBy, this.indexedFields, this.pluginId, this.collection);\n\t\t}\n\n\t\t// Build base query\n\t\tlet query = this.db\n\t\t\t.selectFrom(\"_plugin_storage\")\n\t\t\t.select([\"id\", \"data\", \"created_at\"])\n\t\t\t.where(\"plugin_id\", \"=\", this.pluginId)\n\t\t\t.where(\"collection\", \"=\", this.collection);\n\n\t\t// Add JSON extraction WHERE conditions\n\t\tconst whereResult = buildWhereClause(this.db, where);\n\t\tif (whereResult.sql) {\n\t\t\tquery = query.where(rawWhereExpr(whereResult.sql, whereResult.params));\n\t\t}\n\n\t\tconst orderEntries = Object.entries(orderBy);\n\t\tconst orderDirections = new Set(orderEntries.map(([, direction]) => direction));\n\t\tconst descending = orderEntries.length > 0 && orderEntries[0][1] === \"desc\";\n\n\t\t// A missing key in a schemaless document extracts as NULL, and NULL sorts\n\t\t// differently per dialect (SQLite first, Postgres last) and makes any\n\t\t// comparison against it UNKNOWN. Rank nulls explicitly so both the sort and\n\t\t// the seek agree on where they sit, on either dialect, and so no comparison\n\t\t// operand is ever NULL.\n\t\tconst sortExpr = (field: string): RawBuilder<unknown> =>\n\t\t\tsql`${sql.raw(jsonOrderExtract(this.db, field))}`;\n\n\t\t// Handle cursor-based pagination — throws on invalid cursor.\n\t\tif (cursor) {\n\t\t\tconst decoded = decodeCursor(cursor);\n\t\t\tif (orderEntries.length === 0) {\n\t\t\t\tquery = query.where(({ eb }) =>\n\t\t\t\t\teb(sql`(created_at, id)`, \">\", sql`(${decoded.orderValue}, ${decoded.id})`),\n\t\t\t\t);\n\t\t\t} else {\n\t\t\t\tif (orderDirections.size > 1) {\n\t\t\t\t\tthrow new StorageQueryError(\n\t\t\t\t\t\t\"Cursor pagination requires every orderBy field to share one direction.\",\n\t\t\t\t\t\tObject.keys(orderBy).join(\", \"),\n\t\t\t\t\t\t\"Sort every field the same way, or page without a cursor.\",\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tconst op = descending ? sql`<` : sql`>`;\n\t\t\t\t// The cursor row's sort values, recomputed with the same expression\n\t\t\t\t// rather than carried in the cursor, so nothing is bound as a literal\n\t\t\t\t// and neither dialect has to coerce a JSON value to compare it.\n\t\t\t\tconst cursorExpr = (field: string): RawBuilder<unknown> =>\n\t\t\t\t\tsql`(select ${sql.raw(jsonOrderExtract(this.db, field))} from _plugin_storage where plugin_id = ${this.pluginId} and collection = ${this.collection} and id = ${decoded.id})`;\n\n\t\t\t\tconst fields = orderEntries.map(([field]) => {\n\t\t\t\t\tconst own = sortExpr(field);\n\t\t\t\t\tconst theirs = cursorExpr(field);\n\t\t\t\t\treturn {\n\t\t\t\t\t\tequal: sql`(${nullRank(own)} = ${nullRank(theirs)} and (${nullRank(own)} = 1 or ${own} = ${theirs}))`,\n\t\t\t\t\t\tafter: sql`(${nullRank(own)} ${op} ${nullRank(theirs)} or (${nullRank(own)} = ${nullRank(theirs)} and ${nullRank(own)} = 0 and ${own} ${op} ${theirs}))`,\n\t\t\t\t\t};\n\t\t\t\t});\n\n\t\t\t\t// Lexicographic seek: ties on every earlier field, then strictly after\n\t\t\t\t// on this one; finally all fields tied and strictly after on id.\n\t\t\t\tconst terms = fields.map(\n\t\t\t\t\t(_, k) =>\n\t\t\t\t\t\tsql`(${sql.join([...fields.slice(0, k).map((f) => f.equal), fields[k].after], sql` and `)})`,\n\t\t\t\t);\n\t\t\t\tterms.push(\n\t\t\t\t\tsql`(${sql.join([...fields.map((f) => f.equal), sql`id ${op} ${decoded.id}`], sql` and `)})`,\n\t\t\t\t);\n\t\t\t\tquery = query.where(sql<boolean>`(${sql.join(terms, sql` or `)})`);\n\t\t\t}\n\t\t}\n\n\t\t// Build ORDER BY using sql template\n\t\tif (orderEntries.length > 0) {\n\t\t\tfor (const [field, direction] of orderEntries) {\n\t\t\t\tconst dir = direction === \"desc\" ? sql`desc` : sql`asc`;\n\t\t\t\tconst expr = sortExpr(field);\n\t\t\t\t// Null rank first so NULL placement is identical on both dialects.\n\t\t\t\tquery = query.orderBy(sql`${nullRank(expr)} ${dir}`);\n\t\t\t\t// Order over the jsonb-native value on Postgres so numeric fields sort\n\t\t\t\t// numerically, not lexically. See pluginDataOrderExpr.\n\t\t\t\tquery = query.orderBy(sql`${expr} ${dir}`);\n\t\t\t}\n\t\t\t// Total order, so a page boundary can never fall inside a group of ties.\n\t\t\tquery = query.orderBy(\"id\", descending ? \"desc\" : \"asc\");\n\t\t} else {\n\t\t\t// Default ordering for consistent pagination\n\t\t\tquery = query.orderBy(\"created_at\", \"asc\").orderBy(\"id\", \"asc\");\n\t\t}\n\n\t\t// Apply limit (fetch one extra to detect if there's more)\n\t\tquery = query.limit(limit + 1);\n\n\t\tconst rows = await query.execute();\n\n\t\tconst hasMore = rows.length > limit;\n\t\tconst items = rows.slice(0, limit).map((row) => ({\n\t\t\tid: row.id,\n\t\t\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- JSON.parse returns any; generic callers provide T\n\t\t\tdata: JSON.parse(row.data) as T,\n\t\t}));\n\n\t\t// Generate cursor for next page if there are more results\n\t\tlet nextCursor: string | undefined;\n\t\tif (hasMore) {\n\t\t\tconst lastItem = rows[limit - 1];\n\t\t\tif (lastItem) {\n\t\t\t\tnextCursor = encodeCursor(lastItem.created_at, lastItem.id);\n\t\t\t}\n\t\t}\n\n\t\treturn { items, cursor: nextCursor, hasMore };\n\t}\n\n\t/**\n\t * Count documents matching a filter\n\t */\n\tasync count(where?: WhereClause): Promise<number> {\n\t\tif (where && Object.keys(where).length > 0) {\n\t\t\tvalidateWhereClause(where, this.indexedFields, this.pluginId, this.collection);\n\t\t}\n\n\t\tlet query = this.db\n\t\t\t.selectFrom(\"_plugin_storage\")\n\t\t\t.select(sql<number>`COUNT(*)`.as(\"count\"))\n\t\t\t.where(\"plugin_id\", \"=\", this.pluginId)\n\t\t\t.where(\"collection\", \"=\", this.collection);\n\n\t\t// Add JSON extraction WHERE conditions\n\t\tif (where && Object.keys(where).length > 0) {\n\t\t\tconst whereResult = buildWhereClause(this.db, where);\n\t\t\tif (whereResult.sql) {\n\t\t\t\tquery = query.where(rawWhereExpr(whereResult.sql, whereResult.params));\n\t\t\t}\n\t\t}\n\n\t\tconst result = await query.executeTakeFirst();\n\t\t// Number() because the pg driver returns COUNT(*) (bigint) as a string.\n\t\treturn Number(result?.count ?? 0);\n\t}\n}\n\n/**\n * Create a scoped storage accessor for a plugin\n */\nexport function createPluginStorageAccessor(\n\tdb: Kysely<Database>,\n\tpluginId: string,\n\tstorageConfig: Record<\n\t\tstring,\n\t\t{ indexes: Array<string | string[]>; uniqueIndexes?: Array<string | string[]> }\n\t>,\n): Record<string, StorageCollection> {\n\tconst accessor: Record<string, StorageCollection> = {};\n\n\tfor (const [collectionName, config] of Object.entries(storageConfig)) {\n\t\tconst allIndexes = [...config.indexes, ...(config.uniqueIndexes ?? [])];\n\t\taccessor[collectionName] = new PluginStorageRepository(\n\t\t\tdb,\n\t\t\tpluginId,\n\t\t\tcollectionName,\n\t\t\tallIndexes,\n\t\t);\n\t}\n\n\treturn accessor;\n}\n\n/**\n * Delete all storage data for a plugin\n */\nexport async function deleteAllPluginStorage(\n\tdb: Kysely<Database>,\n\tpluginId: string,\n): Promise<number> {\n\tconst result = await db\n\t\t.deleteFrom(\"_plugin_storage\")\n\t\t.where(\"plugin_id\", \"=\", pluginId)\n\t\t.executeTakeFirst();\n\n\treturn Number(result.numDeletedRows ?? 0);\n}\n\n/**\n * Delete all storage data for a plugin collection\n */\nexport async function deletePluginCollection(\n\tdb: Kysely<Database>,\n\tpluginId: string,\n\tcollection: string,\n): Promise<number> {\n\tconst result = await db\n\t\t.deleteFrom(\"_plugin_storage\")\n\t\t.where(\"plugin_id\", \"=\", pluginId)\n\t\t.where(\"collection\", \"=\", collection)\n\t\t.executeTakeFirst();\n\n\treturn Number(result.numDeletedRows ?? 0);\n}\n","/**\n * Plugin Context v2\n *\n * Creates the unified context object provided to plugins in all hooks and routes.\n *\n */\n\nimport type { Kysely } from \"kysely\";\nimport { ulid } from \"ulidx\";\n\nimport { ContentRepository } from \"../database/repositories/content.js\";\nimport { MediaRepository } from \"../database/repositories/media.js\";\nimport { OptionsRepository } from \"../database/repositories/options.js\";\nimport { PluginStorageRepository } from \"../database/repositories/plugin-storage.js\";\nimport { SeoRepository } from \"../database/repositories/seo.js\";\nimport { TaxonomyRepository, type Taxonomy } from \"../database/repositories/taxonomy.js\";\nimport { UserRepository } from \"../database/repositories/user.js\";\nimport { withTransaction } from \"../database/transaction.js\";\nimport type { Database } from \"../database/types.js\";\nimport { resolveContentCreateLocale } from \"../i18n/config.js\";\nimport {\n\tresolveAndValidateExternalUrl,\n\tSsrfError,\n\tstripCredentialHeaders,\n} from \"../import/ssrf.js\";\nimport { enrichImageMetadata } from \"../media/enrich.js\";\nimport { markContentMediaUsageCollectionStaleSafely } from \"../media/usage/content-refresh.js\";\nimport { invalidateSiteSettingsCache } from \"../settings/index.js\";\nimport type { Storage } from \"../storage/types.js\";\nimport { CronAccessImpl } from \"./cron.js\";\nimport type { EmailPipeline } from \"./email.js\";\nimport type {\n\tResolvedPlugin,\n\tPluginContext,\n\tPluginStorageConfig,\n\tStorageCollection,\n\tKVAccess,\n\tCronAccess,\n\tEmailAccess,\n\tContentAccess,\n\tContentAccessWithWrite,\n\tMediaAccess,\n\tMediaAccessWithWrite,\n\tHttpAccess,\n\tLogAccess,\n\tSiteInfo,\n\tUserAccess,\n\tUserInfo,\n\tContentItem,\n\tContentCreateOptions,\n\tContentItemSeoInput,\n\tContentWriteInput,\n\tMediaItem,\n\tPaginatedResult,\n\tQueryOptions,\n\tContentListOptions,\n\tMediaListOptions,\n\tTaxonomyAccess,\n\tTaxonomyDefInfo,\n\tTaxonomyTermInfo,\n\tTaxonomyReadOptions,\n} from \"./types.js\";\n\n// =============================================================================\n// KV Access\n// =============================================================================\n\n/**\n * Create KV accessor for a plugin\n * All keys are automatically prefixed with the plugin ID\n */\nexport function createKVAccess(optionsRepo: OptionsRepository, pluginId: string): KVAccess {\n\tconst prefix = `plugin:${pluginId}:`;\n\n\treturn {\n\t\tasync get<T>(key: string): Promise<T | null> {\n\t\t\treturn optionsRepo.get<T>(`${prefix}${key}`);\n\t\t},\n\n\t\tasync set(key: string, value: unknown): Promise<void> {\n\t\t\tawait optionsRepo.set(`${prefix}${key}`, value);\n\t\t},\n\n\t\tasync delete(key: string): Promise<boolean> {\n\t\t\treturn optionsRepo.delete(`${prefix}${key}`);\n\t\t},\n\n\t\tasync list(keyPrefix?: string): Promise<Array<{ key: string; value: unknown }>> {\n\t\t\tconst fullPrefix = `${prefix}${keyPrefix ?? \"\"}`;\n\t\t\tconst entriesMap = await optionsRepo.getByPrefix(fullPrefix);\n\t\t\tconst result: Array<{ key: string; value: unknown }> = [];\n\t\t\tfor (const [fullKey, value] of entriesMap) {\n\t\t\t\tresult.push({\n\t\t\t\t\tkey: fullKey.slice(prefix.length),\n\t\t\t\t\tvalue,\n\t\t\t\t});\n\t\t\t}\n\t\t\treturn result;\n\t\t},\n\t};\n}\n\n// =============================================================================\n// Storage Access\n// =============================================================================\n\n/**\n * Create storage collection accessor for a plugin\n * Wraps PluginStorageRepository with the v2 interface (no async iterators)\n */\nfunction createStorageCollection<T>(\n\tdb: Kysely<Database>,\n\tpluginId: string,\n\tcollectionName: string,\n\tindexes: Array<string | string[]>,\n): StorageCollection<T> {\n\tconst repo = new PluginStorageRepository<T>(db, pluginId, collectionName, indexes);\n\n\treturn {\n\t\tget: (id) => repo.get(id),\n\t\tput: (id, data) => repo.put(id, data),\n\t\tdelete: (id) => repo.delete(id),\n\t\texists: (id) => repo.exists(id),\n\t\tgetMany: (ids) => repo.getMany(ids),\n\t\tputMany: (items) => repo.putMany(items),\n\t\tdeleteMany: (ids) => repo.deleteMany(ids),\n\t\tcount: (where) => repo.count(where),\n\n\t\t// Query returns PaginatedResult instead of the old format\n\t\tasync query(options?: QueryOptions): Promise<PaginatedResult<{ id: string; data: T }>> {\n\t\t\tconst result = await repo.query({\n\t\t\t\twhere: options?.where,\n\t\t\t\torderBy: options?.orderBy,\n\t\t\t\tlimit: options?.limit,\n\t\t\t\tcursor: options?.cursor,\n\t\t\t});\n\n\t\t\treturn {\n\t\t\t\titems: result.items,\n\t\t\t\tcursor: result.cursor,\n\t\t\t\thasMore: result.hasMore,\n\t\t\t};\n\t\t},\n\t};\n}\n\n/**\n * Create storage accessor with all declared collections\n */\nexport function createStorageAccess<T extends PluginStorageConfig>(\n\tdb: Kysely<Database>,\n\tpluginId: string,\n\tstorageConfig: T,\n): Record<string, StorageCollection> {\n\tconst storage: Record<string, StorageCollection> = {};\n\n\tfor (const [collectionName, config] of Object.entries(storageConfig)) {\n\t\tconst allIndexes = [...config.indexes, ...(config.uniqueIndexes ?? [])];\n\t\tstorage[collectionName] = createStorageCollection(db, pluginId, collectionName, allIndexes);\n\t}\n\n\treturn storage;\n}\n\n// =============================================================================\n// Content Access\n// =============================================================================\n\n/**\n * Extract `seo` from a plugin-supplied content write input and return both\n * parts. Mutates nothing — returns a new field map without the `seo` key.\n */\nfunction splitSeoFromInput(input: ContentWriteInput): {\n\tfields: Record<string, unknown>;\n\tseo: ContentItemSeoInput | undefined;\n} {\n\tconst { seo, ...fields } = input;\n\t// Reject non-object seo values rather than silently dropping them.\n\tif (seo !== undefined && (seo === null || typeof seo !== \"object\" || Array.isArray(seo))) {\n\t\tthrow new Error(\"content.seo must be an object\");\n\t}\n\treturn { fields, seo };\n}\n\n/**\n * Reject writing SEO to a collection that does not have it enabled.\n * Matches the REST API behavior (VALIDATION_ERROR).\n */\nasync function assertSeoEnabled(\n\tseoRepo: SeoRepository,\n\tcollection: string,\n\tseo: ContentItemSeoInput | undefined,\n): Promise<boolean> {\n\tconst hasSeo = await seoRepo.isEnabled(collection);\n\tif (seo !== undefined && !hasSeo) {\n\t\tthrow new Error(\n\t\t\t`Collection \"${collection}\" does not have SEO enabled. ` +\n\t\t\t\t`Remove the seo field or enable SEO on this collection.`,\n\t\t);\n\t}\n\treturn hasSeo;\n}\n\n/**\n * Parse the `collections` JSON column into a string array (`[]` on anything\n * else). Mirrors the guards in the Cloudflare/workerd bridges so an\n * in-process plugin degrades on malformed data instead of crashing.\n */\nfunction parseCollectionsColumn(value: string | null): string[] {\n\tif (!value) return [];\n\ttry {\n\t\tconst parsed: unknown = JSON.parse(value);\n\t\treturn Array.isArray(parsed)\n\t\t\t? parsed.filter((item): item is string => typeof item === \"string\")\n\t\t\t: [];\n\t} catch {\n\t\treturn [];\n\t}\n}\n\n/** Map a repository `Taxonomy` row to the plugin-facing term shape. */\nfunction taxonomyToTermInfo(term: Taxonomy): TaxonomyTermInfo {\n\treturn {\n\t\tid: term.id,\n\t\ttaxonomy: term.name,\n\t\tslug: term.slug,\n\t\tlabel: term.label,\n\t\tparentId: term.parentId,\n\t\tdata: term.data,\n\t\tlocale: term.locale,\n\t\ttranslationGroup: term.translationGroup,\n\t};\n}\n\n/**\n * Create read-only content access\n */\nexport function createContentAccess(db: Kysely<Database>): ContentAccess {\n\tconst contentRepo = new ContentRepository(db);\n\tconst seoRepo = new SeoRepository(db);\n\n\treturn {\n\t\tasync get(collection: string, id: string): Promise<ContentItem | null> {\n\t\t\tconst item = await contentRepo.findById(collection, id);\n\t\t\tif (!item) return null;\n\n\t\t\tconst result: ContentItem = {\n\t\t\t\tid: item.id,\n\t\t\t\ttype: item.type,\n\t\t\t\tslug: item.slug,\n\t\t\t\tstatus: item.status,\n\t\t\t\tdata: item.data,\n\t\t\t\tcreatedAt: item.createdAt,\n\t\t\t\tupdatedAt: item.updatedAt,\n\t\t\t\tlocale: item.locale,\n\t\t\t\tpublishedAt: item.publishedAt,\n\t\t\t\tscheduledAt: item.scheduledAt,\n\t\t\t};\n\n\t\t\tif (await seoRepo.isEnabled(collection)) {\n\t\t\t\tresult.seo = await seoRepo.get(collection, item.id);\n\t\t\t}\n\n\t\t\treturn result;\n\t\t},\n\n\t\tasync list(\n\t\t\tcollection: string,\n\t\t\toptions?: ContentListOptions,\n\t\t): Promise<PaginatedResult<ContentItem>> {\n\t\t\t// Convert orderBy format if provided\n\t\t\tlet orderBy: { field: string; direction: \"asc\" | \"desc\" } | undefined;\n\t\t\tif (options?.orderBy) {\n\t\t\t\tconst entries = Object.entries(options.orderBy);\n\t\t\t\tconst first = entries[0];\n\t\t\t\tif (first) {\n\t\t\t\t\torderBy = { field: first[0], direction: first[1] };\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tconst result = await contentRepo.findMany(collection, {\n\t\t\t\tlimit: options?.limit ?? 50,\n\t\t\t\tcursor: options?.cursor,\n\t\t\t\torderBy,\n\t\t\t\twhere: options?.where,\n\t\t\t});\n\n\t\t\tconst items: ContentItem[] = result.items.map((item) => ({\n\t\t\t\tid: item.id,\n\t\t\t\ttype: item.type,\n\t\t\t\tslug: item.slug,\n\t\t\t\tstatus: item.status,\n\t\t\t\tdata: item.data,\n\t\t\t\tcreatedAt: item.createdAt,\n\t\t\t\tupdatedAt: item.updatedAt,\n\t\t\t\tlocale: item.locale,\n\t\t\t\tpublishedAt: item.publishedAt,\n\t\t\t\tscheduledAt: item.scheduledAt,\n\t\t\t}));\n\n\t\t\tif (items.length > 0 && (await seoRepo.isEnabled(collection))) {\n\t\t\t\tconst seoMap = await seoRepo.getMany(\n\t\t\t\t\tcollection,\n\t\t\t\t\titems.map((i) => i.id),\n\t\t\t\t);\n\t\t\t\tfor (const item of items) {\n\t\t\t\t\tconst seo = seoMap.get(item.id);\n\t\t\t\t\tif (seo) item.seo = seo;\n\t\t\t\t}\n\t\t\t}\n\n\t\t\treturn {\n\t\t\t\titems,\n\t\t\t\tcursor: result.nextCursor,\n\t\t\t\thasMore: !!result.nextCursor,\n\t\t\t};\n\t\t},\n\t};\n}\n\n/**\n * Create read-only taxonomy access (gated on `taxonomies:read`).\n */\nexport function createTaxonomyAccess(db: Kysely<Database>): TaxonomyAccess {\n\tconst taxonomyRepo = new TaxonomyRepository(db);\n\n\treturn {\n\t\tasync getAll(options?: TaxonomyReadOptions): Promise<TaxonomyDefInfo[]> {\n\t\t\tlet query = db.selectFrom(\"_emdash_taxonomy_defs\").selectAll();\n\t\t\tif (options?.locale !== undefined) query = query.where(\"locale\", \"=\", options.locale);\n\t\t\tconst rows = await query.orderBy(\"name\", \"asc\").execute();\n\t\t\treturn rows.map((row) => ({\n\t\t\t\tname: row.name,\n\t\t\t\tlabel: row.label,\n\t\t\t\tlabelSingular: row.label_singular,\n\t\t\t\thierarchical: row.hierarchical === 1,\n\t\t\t\tcollections: parseCollectionsColumn(row.collections),\n\t\t\t\tlocale: row.locale,\n\t\t\t}));\n\t\t},\n\n\t\tasync getTerms(taxonomy: string, options?: TaxonomyReadOptions): Promise<TaxonomyTermInfo[]> {\n\t\t\tconst terms = await taxonomyRepo.findByName(taxonomy, { locale: options?.locale });\n\t\t\treturn terms.map(taxonomyToTermInfo);\n\t\t},\n\n\t\tasync getEntryTerms(\n\t\t\tcollection: string,\n\t\t\tentryId: string,\n\t\t\toptions?: TaxonomyReadOptions & { taxonomy?: string },\n\t\t): Promise<TaxonomyTermInfo[]> {\n\t\t\tconst terms = await taxonomyRepo.getTermsForEntry(\n\t\t\t\tcollection,\n\t\t\t\tentryId,\n\t\t\t\toptions?.taxonomy,\n\t\t\t\toptions?.locale,\n\t\t\t);\n\t\t\treturn terms.map(taxonomyToTermInfo);\n\t\t},\n\t};\n}\n\n/**\n * Create full content access with write operations.\n *\n * `create` and `update` accept a reserved `seo` key in their `data`\n * argument. When present, it is routed to the core SEO panel\n * (`_emdash_seo`) via `SeoRepository.upsert`, in the same transaction as\n * the content write. The returned `ContentItem.seo` reflects the resulting\n * SEO state for SEO-enabled collections.\n */\nexport function createContentAccessWithWrite(\n\tdb: Kysely<Database>,\n\tbeforeContentWrite?: () => Promise<void>,\n): ContentAccessWithWrite {\n\tconst readAccess = createContentAccess(db);\n\n\treturn {\n\t\t...readAccess,\n\n\t\tasync create(\n\t\t\tcollection: string,\n\t\t\tdata: ContentWriteInput,\n\t\t\toptions?: ContentCreateOptions,\n\t\t): Promise<ContentItem> {\n\t\t\tconst locale = resolveContentCreateLocale(options?.locale);\n\t\t\tawait beforeContentWrite?.();\n\t\t\tconst { fields, seo } = splitSeoFromInput(data);\n\t\t\tlet contentMutated = false;\n\n\t\t\ttry {\n\t\t\t\tconst created = await withTransaction(db, async (trx) => {\n\t\t\t\t\tconst trxContentRepo = new ContentRepository(trx);\n\t\t\t\t\tconst trxSeoRepo = new SeoRepository(trx);\n\n\t\t\t\t\tconst hasSeo = await assertSeoEnabled(trxSeoRepo, collection, seo);\n\n\t\t\t\t\tconst item = await trxContentRepo.create({\n\t\t\t\t\t\ttype: collection,\n\t\t\t\t\t\tdata: fields,\n\t\t\t\t\t\tlocale,\n\t\t\t\t\t});\n\t\t\t\t\tcontentMutated = true;\n\n\t\t\t\t\tconst result: ContentItem = {\n\t\t\t\t\t\tid: item.id,\n\t\t\t\t\t\ttype: item.type,\n\t\t\t\t\t\tslug: item.slug,\n\t\t\t\t\t\tstatus: item.status,\n\t\t\t\t\t\tdata: item.data,\n\t\t\t\t\t\tcreatedAt: item.createdAt,\n\t\t\t\t\t\tupdatedAt: item.updatedAt,\n\t\t\t\t\t\tlocale: item.locale,\n\t\t\t\t\t\tpublishedAt: item.publishedAt,\n\t\t\t\t\t\tscheduledAt: item.scheduledAt,\n\t\t\t\t\t};\n\n\t\t\t\t\tif (hasSeo) {\n\t\t\t\t\t\tresult.seo =\n\t\t\t\t\t\t\tseo !== undefined\n\t\t\t\t\t\t\t\t? await trxSeoRepo.upsert(collection, item.id, seo)\n\t\t\t\t\t\t\t\t: await trxSeoRepo.get(collection, item.id);\n\t\t\t\t\t}\n\n\t\t\t\t\treturn result;\n\t\t\t\t});\n\t\t\t\tawait markContentMediaUsageCollectionStaleSafely(db, collection, \"CONTENT_USAGE_STALE\");\n\t\t\t\treturn created;\n\t\t\t} catch (error) {\n\t\t\t\tif (contentMutated) {\n\t\t\t\t\tawait markContentMediaUsageCollectionStaleSafely(db, collection, \"CONTENT_USAGE_STALE\");\n\t\t\t\t}\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t},\n\n\t\tasync update(collection: string, id: string, data: ContentWriteInput): Promise<ContentItem> {\n\t\t\tawait beforeContentWrite?.();\n\t\t\tconst { fields, seo } = splitSeoFromInput(data);\n\t\t\tconst hasFieldUpdates = Object.keys(fields).length > 0;\n\t\t\tlet contentMutated = false;\n\n\t\t\ttry {\n\t\t\t\tconst updated = await withTransaction(db, async (trx) => {\n\t\t\t\t\tconst trxContentRepo = new ContentRepository(trx);\n\t\t\t\t\tconst trxSeoRepo = new SeoRepository(trx);\n\n\t\t\t\t\tconst hasSeo = await assertSeoEnabled(trxSeoRepo, collection, seo);\n\n\t\t\t\t\t// Pass the `data` payload to ContentRepository.updateDraftAware only when\n\t\t\t\t\t// there are field updates — passing an empty object would still\n\t\t\t\t\t// bump updated_at/version, but we want a seo-only call to touch\n\t\t\t\t\t// only the SEO table. updateDraftAware delegates no-op writes to\n\t\t\t\t\t// ContentRepository.update.\n\t\t\t\t\tconst item = hasFieldUpdates\n\t\t\t\t\t\t? await trxContentRepo.updateDraftAware(collection, id, { data: fields })\n\t\t\t\t\t\t: await (async () => {\n\t\t\t\t\t\t\t\tconst existing = await trxContentRepo.findById(collection, id);\n\t\t\t\t\t\t\t\tif (!existing) throw new Error(\"Content not found\");\n\t\t\t\t\t\t\t\treturn existing;\n\t\t\t\t\t\t\t})();\n\t\t\t\t\tif (hasFieldUpdates) contentMutated = true;\n\n\t\t\t\t\tconst result: ContentItem = {\n\t\t\t\t\t\tid: item.id,\n\t\t\t\t\t\ttype: item.type,\n\t\t\t\t\t\tslug: item.slug,\n\t\t\t\t\t\tstatus: item.status,\n\t\t\t\t\t\tdata: item.data,\n\t\t\t\t\t\tcreatedAt: item.createdAt,\n\t\t\t\t\t\tupdatedAt: item.updatedAt,\n\t\t\t\t\t\tlocale: item.locale,\n\t\t\t\t\t\tpublishedAt: item.publishedAt,\n\t\t\t\t\t\tscheduledAt: item.scheduledAt,\n\t\t\t\t\t};\n\n\t\t\t\t\tif (hasSeo) {\n\t\t\t\t\t\tresult.seo =\n\t\t\t\t\t\t\tseo !== undefined\n\t\t\t\t\t\t\t\t? await trxSeoRepo.upsert(collection, item.id, seo)\n\t\t\t\t\t\t\t\t: await trxSeoRepo.get(collection, item.id);\n\t\t\t\t\t}\n\n\t\t\t\t\treturn result;\n\t\t\t\t});\n\t\t\t\tif (hasFieldUpdates) {\n\t\t\t\t\tawait markContentMediaUsageCollectionStaleSafely(db, collection, \"CONTENT_USAGE_STALE\");\n\t\t\t\t}\n\t\t\t\treturn updated;\n\t\t\t} catch (error) {\n\t\t\t\tif (contentMutated) {\n\t\t\t\t\tawait markContentMediaUsageCollectionStaleSafely(db, collection, \"CONTENT_USAGE_STALE\");\n\t\t\t\t}\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t},\n\n\t\tasync delete(collection: string, id: string): Promise<boolean> {\n\t\t\tawait beforeContentWrite?.();\n\t\t\tconst contentRepo = new ContentRepository(db);\n\t\t\tconst deleted = await contentRepo.delete(collection, id);\n\t\t\tif (deleted) {\n\t\t\t\tawait markContentMediaUsageCollectionStaleSafely(db, collection, \"CONTENT_USAGE_STALE\");\n\t\t\t}\n\t\t\treturn deleted;\n\t\t},\n\t};\n}\n\n// =============================================================================\n// Media Access\n// =============================================================================\n\n/**\n * Create read-only media access\n */\nexport function createMediaAccess(db: Kysely<Database>): MediaAccess {\n\tconst mediaRepo = new MediaRepository(db);\n\n\treturn {\n\t\tasync get(id: string): Promise<MediaItem | null> {\n\t\t\tconst item = await mediaRepo.findById(id);\n\t\t\tif (!item) return null;\n\n\t\t\treturn {\n\t\t\t\tid: item.id,\n\t\t\t\tfilename: item.filename,\n\t\t\t\tmimeType: item.mimeType,\n\t\t\t\tsize: item.size,\n\t\t\t\t// Construct URL from storage key (or use a sensible default path)\n\t\t\t\turl: `/media/${item.id}/${item.filename}`,\n\t\t\t\tcreatedAt: item.createdAt,\n\t\t\t};\n\t\t},\n\n\t\tasync list(options?: MediaListOptions): Promise<PaginatedResult<MediaItem>> {\n\t\t\tconst result = await mediaRepo.findMany({\n\t\t\t\tlimit: options?.limit ?? 50,\n\t\t\t\tcursor: options?.cursor,\n\t\t\t\tmimeType: options?.mimeType,\n\t\t\t});\n\n\t\t\treturn {\n\t\t\t\titems: result.items.map((item) => ({\n\t\t\t\t\tid: item.id,\n\t\t\t\t\tfilename: item.filename,\n\t\t\t\t\tmimeType: item.mimeType,\n\t\t\t\t\tsize: item.size,\n\t\t\t\t\turl: `/media/${item.id}/${item.filename}`,\n\t\t\t\t\tcreatedAt: item.createdAt,\n\t\t\t\t})),\n\t\t\t\tcursor: result.nextCursor,\n\t\t\t\thasMore: !!result.nextCursor,\n\t\t\t};\n\t\t},\n\t};\n}\n\n/**\n * Create full media access with write operations.\n *\n * `getUploadUrlFn` is optional: when omitted, `getUploadUrl()` is derived from\n * `storage` (create a pending record + a signed PUT URL), mirroring the REST\n * `/_emdash/api/media/upload-url` endpoint. `upload()` only needs `storage`.\n * If storage is not provided, both throw at call time.\n */\nexport function createMediaAccessWithWrite(\n\tdb: Kysely<Database>,\n\tgetUploadUrlFn:\n\t\t| ((filename: string, contentType: string) => Promise<{ uploadUrl: string; mediaId: string }>)\n\t\t| undefined,\n\tstorage?: Storage,\n): MediaAccessWithWrite {\n\tconst mediaRepo = new MediaRepository(db);\n\tconst readAccess = createMediaAccess(db);\n\n\tconst getUploadUrl =\n\t\tgetUploadUrlFn ??\n\t\t(async (filename: string, contentType: string) => {\n\t\t\tif (!storage) {\n\t\t\t\tthrow new Error(\n\t\t\t\t\t\"Media getUploadUrl() requires a storage backend. Configure storage in PluginContextFactoryOptions.\",\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tconst basename = filename.split(\"/\").pop() ?? filename;\n\t\t\tconst dotIdx = basename.lastIndexOf(\".\");\n\t\t\tconst ext = dotIdx > 0 ? basename.slice(dotIdx).toLowerCase() : \"\";\n\t\t\tconst storageKey = `${ulid()}${ext}`;\n\n\t\t\tconst media = await mediaRepo.createPending({\n\t\t\t\tfilename: basename,\n\t\t\t\tmimeType: contentType,\n\t\t\t\tstorageKey,\n\t\t\t});\n\n\t\t\tconst signed = await storage.getSignedUploadUrl({\n\t\t\t\tkey: storageKey,\n\t\t\t\tcontentType,\n\t\t\t\texpiresIn: 3600,\n\t\t\t});\n\n\t\t\treturn { uploadUrl: signed.url, mediaId: media.id };\n\t\t});\n\n\treturn {\n\t\t...readAccess,\n\n\t\tgetUploadUrl,\n\n\t\tasync upload(\n\t\t\tfilename: string,\n\t\t\tcontentType: string,\n\t\t\tbytes: ArrayBuffer,\n\t\t): Promise<{ mediaId: string; storageKey: string; url: string }> {\n\t\t\tif (!storage) {\n\t\t\t\tthrow new Error(\n\t\t\t\t\t\"Media upload() requires a storage backend. Configure storage in PluginContextFactoryOptions.\",\n\t\t\t\t);\n\t\t\t}\n\n\t\t\t// Generate a storage key with a unique prefix\n\t\t\tconst keyPrefix = ulid();\n\t\t\t// Extract extension from basename (ignore path separators)\n\t\t\tconst basename = filename.split(\"/\").pop() ?? filename;\n\t\t\tconst dotIdx = basename.lastIndexOf(\".\");\n\t\t\tconst ext = dotIdx > 0 ? basename.slice(dotIdx).toLowerCase() : \"\";\n\t\t\tconst storageKey = `${keyPrefix}${ext}`;\n\n\t\t\t// Upload to storage first\n\t\t\tawait storage.upload({\n\t\t\t\tkey: storageKey,\n\t\t\t\tbody: new Uint8Array(bytes),\n\t\t\t\tcontentType,\n\t\t\t});\n\n\t\t\t// Derive dimensions + LQIP placeholders (no-op for non-images).\n\t\t\tconst enriched = await enrichImageMetadata(new Uint8Array(bytes), contentType);\n\n\t\t\t// Create DB record — clean up storage on failure\n\t\t\tlet media;\n\t\t\ttry {\n\t\t\t\tmedia = await mediaRepo.create({\n\t\t\t\t\tfilename: basename,\n\t\t\t\t\tmimeType: contentType,\n\t\t\t\t\tsize: bytes.byteLength,\n\t\t\t\t\tstorageKey,\n\t\t\t\t\tstatus: \"ready\",\n\t\t\t\t\twidth: enriched.width,\n\t\t\t\t\theight: enriched.height,\n\t\t\t\t\tblurhash: enriched.blurhash,\n\t\t\t\t\tdominantColor: enriched.dominantColor,\n\t\t\t\t});\n\t\t\t} catch (error) {\n\t\t\t\ttry {\n\t\t\t\t\tawait storage.delete(storageKey);\n\t\t\t\t} catch {\n\t\t\t\t\t// Best-effort cleanup\n\t\t\t\t}\n\t\t\t\tthrow error;\n\t\t\t}\n\n\t\t\treturn {\n\t\t\t\tmediaId: media.id,\n\t\t\t\tstorageKey,\n\t\t\t\turl: `/_emdash/api/media/file/${storageKey}`,\n\t\t\t};\n\t\t},\n\n\t\tasync delete(id: string): Promise<boolean> {\n\t\t\tconst deleted = await mediaRepo.delete(id);\n\t\t\t// Plugins can delete media that's referenced by site settings\n\t\t\t// (`logo`, `favicon`, `seo.defaultOgImage`); the worker-scoped\n\t\t\t// resolved-URL cache must be dropped or it will keep serving\n\t\t\t// 404s. Matches the invalidation in\n\t\t\t// `EmDashRuntime.handleMediaDelete`.\n\t\t\tif (deleted) {\n\t\t\t\tinvalidateSiteSettingsCache();\n\t\t\t}\n\t\t\treturn deleted;\n\t\t},\n\t};\n}\n\n// =============================================================================\n// HTTP Access\n// =============================================================================\n\n/** Maximum number of redirects to follow in plugin HTTP access */\nconst MAX_PLUGIN_REDIRECTS = 5;\n\n/**\n * Check if a hostname matches any pattern in the allowed list.\n * Patterns: \"*\" matches all, \"*.example.com\" matches subdomains AND bare \"example.com\",\n * \"api.example.com\" matches exactly.\n */\nfunction isHostAllowed(host: string, allowedHosts: string[]): boolean {\n\treturn allowedHosts.some((pattern) => {\n\t\tif (pattern === \"*\") return true;\n\t\tif (pattern.startsWith(\"*.\")) {\n\t\t\tconst suffix = pattern.slice(1); // \".example.com\"\n\t\t\t// Match subdomains (foo.example.com) and bare domain (example.com)\n\t\t\treturn host.endsWith(suffix) || host === pattern.slice(2);\n\t\t}\n\t\treturn host === pattern;\n\t});\n}\n\n/**\n * Create HTTP access with host validation.\n *\n * Uses redirect: \"manual\" to re-validate each redirect target against\n * the allowedHosts list, preventing redirects to unauthorized hosts.\n */\nexport function createHttpAccess(pluginId: string, allowedHosts: string[]): HttpAccess {\n\treturn {\n\t\tasync fetch(url: string, init?: RequestInit): Promise<Response> {\n\t\t\t// Deny by default — plugins must declare allowed hosts\n\t\t\tif (allowedHosts.length === 0) {\n\t\t\t\tthrow new Error(\n\t\t\t\t\t`Plugin \"${pluginId}\" has no allowed hosts configured. ` +\n\t\t\t\t\t\t`Add hosts to the plugin's allowedHosts array to enable HTTP requests.`,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tlet currentUrl = url;\n\t\t\tlet currentInit = init;\n\n\t\t\tfor (let i = 0; i <= MAX_PLUGIN_REDIRECTS; i++) {\n\t\t\t\tconst hostname = new URL(currentUrl).hostname;\n\t\t\t\tif (!isHostAllowed(hostname, allowedHosts)) {\n\t\t\t\t\tthrow new Error(\n\t\t\t\t\t\t`Plugin \"${pluginId}\" is not allowed to fetch from host \"${hostname}\". ` +\n\t\t\t\t\t\t\t`Allowed hosts: ${allowedHosts.join(\", \")}`,\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\tconst response = await globalThis.fetch(currentUrl, {\n\t\t\t\t\t...currentInit,\n\t\t\t\t\tredirect: \"manual\",\n\t\t\t\t});\n\n\t\t\t\t// Not a redirect -- return directly\n\t\t\t\tif (response.status < 300 || response.status >= 400) {\n\t\t\t\t\treturn response;\n\t\t\t\t}\n\n\t\t\t\t// Extract redirect target\n\t\t\t\tconst location = response.headers.get(\"Location\");\n\t\t\t\tif (!location) {\n\t\t\t\t\treturn response;\n\t\t\t\t}\n\n\t\t\t\t// Resolve relative redirects; strip credentials on cross-origin hops\n\t\t\t\tconst previousOrigin = new URL(currentUrl).origin;\n\t\t\t\tcurrentUrl = new URL(location, currentUrl).href;\n\t\t\t\tconst nextOrigin = new URL(currentUrl).origin;\n\n\t\t\t\tif (previousOrigin !== nextOrigin && currentInit) {\n\t\t\t\t\tcurrentInit = stripCredentialHeaders(currentInit);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tthrow new Error(`Plugin \"${pluginId}\": too many redirects (max ${MAX_PLUGIN_REDIRECTS})`);\n\t\t},\n\t};\n}\n\n/**\n * Create unrestricted HTTP access (for plugins with network:fetch:any capability).\n * No host validation, but applies SSRF protection on redirect targets to\n * prevent plugins from being tricked into reaching internal services.\n */\nexport function createUnrestrictedHttpAccess(pluginId: string): HttpAccess {\n\treturn {\n\t\tasync fetch(url: string, init?: RequestInit): Promise<Response> {\n\t\t\tlet currentUrl = url;\n\t\t\tlet currentInit = init;\n\n\t\t\tfor (let i = 0; i <= MAX_PLUGIN_REDIRECTS; i++) {\n\t\t\t\t// Validate each URL against SSRF rules (private IPs, metadata\n\t\t\t\t// endpoints, wildcard DNS, resolved-IP private ranges).\n\t\t\t\ttry {\n\t\t\t\t\tawait resolveAndValidateExternalUrl(currentUrl);\n\t\t\t\t} catch (e) {\n\t\t\t\t\tconst msg = e instanceof SsrfError ? e.message : \"SSRF validation failed\";\n\t\t\t\t\tthrow new Error(\n\t\t\t\t\t\t`Plugin \"${pluginId}\": blocked fetch to \"${new URL(currentUrl).hostname}\": ${msg}`,\n\t\t\t\t\t\t{ cause: e },\n\t\t\t\t\t);\n\t\t\t\t}\n\n\t\t\t\tconst response = await globalThis.fetch(currentUrl, {\n\t\t\t\t\t...currentInit,\n\t\t\t\t\tredirect: \"manual\",\n\t\t\t\t});\n\n\t\t\t\t// Not a redirect -- return directly\n\t\t\t\tif (response.status < 300 || response.status >= 400) {\n\t\t\t\t\treturn response;\n\t\t\t\t}\n\n\t\t\t\t// Extract redirect target\n\t\t\t\tconst location = response.headers.get(\"Location\");\n\t\t\t\tif (!location) {\n\t\t\t\t\treturn response;\n\t\t\t\t}\n\n\t\t\t\t// Resolve relative redirects; strip credentials on cross-origin hops\n\t\t\t\tconst previousOrigin = new URL(currentUrl).origin;\n\t\t\t\tcurrentUrl = new URL(location, currentUrl).href;\n\t\t\t\tconst nextOrigin = new URL(currentUrl).origin;\n\n\t\t\t\tif (previousOrigin !== nextOrigin && currentInit) {\n\t\t\t\t\tcurrentInit = stripCredentialHeaders(currentInit);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tthrow new Error(`Plugin \"${pluginId}\": too many redirects (max ${MAX_PLUGIN_REDIRECTS})`);\n\t\t},\n\t};\n}\n\n/**\n * Create blocked HTTP access (for plugins without network:request capability)\n */\nexport function createBlockedHttpAccess(pluginId: string): HttpAccess {\n\treturn {\n\t\tasync fetch(): Promise<never> {\n\t\t\tthrow new Error(\n\t\t\t\t`Plugin \"${pluginId}\" does not have the \"network:request\" capability. ` +\n\t\t\t\t\t`Add \"network:request\" to the plugin's capabilities to enable HTTP requests.`,\n\t\t\t);\n\t\t},\n\t};\n}\n\n// =============================================================================\n// Log Access\n// =============================================================================\n\n/**\n * Create logger for a plugin\n */\nexport function createLogAccess(pluginId: string): LogAccess {\n\tconst prefix = `[plugin:${pluginId}]`;\n\n\treturn {\n\t\tdebug(message: string, data?: unknown): void {\n\t\t\tif (data !== undefined) {\n\t\t\t\tconsole.debug(prefix, message, data);\n\t\t\t} else {\n\t\t\t\tconsole.debug(prefix, message);\n\t\t\t}\n\t\t},\n\n\t\tinfo(message: string, data?: unknown): void {\n\t\t\tif (data !== undefined) {\n\t\t\t\tconsole.info(prefix, message, data);\n\t\t\t} else {\n\t\t\t\tconsole.info(prefix, message);\n\t\t\t}\n\t\t},\n\n\t\twarn(message: string, data?: unknown): void {\n\t\t\tif (data !== undefined) {\n\t\t\t\tconsole.warn(prefix, message, data);\n\t\t\t} else {\n\t\t\t\tconsole.warn(prefix, message);\n\t\t\t}\n\t\t},\n\n\t\terror(message: string, data?: unknown): void {\n\t\t\tif (data !== undefined) {\n\t\t\t\tconsole.error(prefix, message, data);\n\t\t\t} else {\n\t\t\t\tconsole.error(prefix, message);\n\t\t\t}\n\t\t},\n\t};\n}\n\n// =============================================================================\n// Site Info\n// =============================================================================\n\nconst TRAILING_SLASH_RE = /\\/$/;\n\n/**\n * Options for creating site info\n */\nexport interface SiteInfoOptions {\n\t/** Site name from options table */\n\tsiteName?: string;\n\t/** Site URL from options table or Astro config */\n\tsiteUrl?: string;\n\t/** Site locale from options table */\n\tlocale?: string;\n\t/** Astro's `trailingSlash` config (from `virtual:emdash/config`). */\n\ttrailingSlash?: \"always\" | \"never\" | \"ignore\";\n}\n\n/**\n * Create site info from config and settings.\n *\n * Resolution order for URL:\n * 1. options table (emdash:site_url)\n * 2. Astro `site` config\n * 3. fallback to empty string\n */\nexport function createSiteInfo(options: SiteInfoOptions): SiteInfo {\n\treturn {\n\t\tname: options.siteName ?? \"\",\n\t\turl: (options.siteUrl ?? \"\").replace(TRAILING_SLASH_RE, \"\"), // strip trailing slash\n\t\tlocale: options.locale ?? \"en\",\n\t\ttrailingSlash: options.trailingSlash ?? \"ignore\", // Astro's default\n\t};\n}\n\n/**\n * Create a URL helper that generates absolute URLs from relative paths.\n * Validates that path starts with \"/\" and rejects protocol-relative paths (\"//\").\n */\nexport function createUrlHelper(siteUrl: string): (path: string) => string {\n\tconst base = siteUrl.replace(TRAILING_SLASH_RE, \"\"); // strip trailing slash\n\n\treturn (path: string): string => {\n\t\tif (!path.startsWith(\"/\")) {\n\t\t\tthrow new Error(`URL path must start with \"/\", got: \"${path}\"`);\n\t\t}\n\t\tif (path.startsWith(\"//\")) {\n\t\t\tthrow new Error(`URL path must not be protocol-relative, got: \"${path}\"`);\n\t\t}\n\t\treturn `${base}${path}`;\n\t};\n}\n\n// =============================================================================\n// User Access\n// =============================================================================\n\n/**\n * Convert a UserRepository user to the plugin-facing UserInfo shape.\n * Strips sensitive fields (avatarUrl, emailVerified, data).\n */\nfunction toUserInfo(user: {\n\tid: string;\n\temail: string;\n\tname: string | null;\n\trole: number;\n\tcreatedAt: string;\n}): UserInfo {\n\treturn {\n\t\tid: user.id,\n\t\temail: user.email,\n\t\tname: user.name,\n\t\trole: user.role,\n\t\tcreatedAt: user.createdAt,\n\t};\n}\n\n/**\n * Create read-only user access for plugins.\n * Excludes sensitive fields (password hashes, sessions, passkeys, avatar URL, data).\n */\nexport function createUserAccess(db: Kysely<Database>): UserAccess {\n\tconst userRepo = new UserRepository(db);\n\n\treturn {\n\t\tasync get(id: string): Promise<UserInfo | null> {\n\t\t\tconst user = await userRepo.findById(id);\n\t\t\tif (!user) return null;\n\t\t\treturn toUserInfo(user);\n\t\t},\n\n\t\tasync getByEmail(email: string): Promise<UserInfo | null> {\n\t\t\tconst user = await userRepo.findByEmail(email);\n\t\t\tif (!user) return null;\n\t\t\treturn toUserInfo(user);\n\t\t},\n\n\t\tasync list(opts?: {\n\t\t\trole?: number;\n\t\t\tlimit?: number;\n\t\t\tcursor?: string;\n\t\t}): Promise<{ items: UserInfo[]; nextCursor?: string }> {\n\t\t\tconst result = await userRepo.findMany({\n\t\t\t\trole: opts?.role as 10 | 20 | 30 | 40 | 50 | undefined,\n\t\t\t\tcursor: opts?.cursor,\n\t\t\t\tlimit: opts?.limit,\n\t\t\t});\n\n\t\t\treturn {\n\t\t\t\titems: result.items.map(toUserInfo),\n\t\t\t\tnextCursor: result.nextCursor,\n\t\t\t};\n\t\t},\n\t};\n}\n\n// =============================================================================\n// Plugin Context Factory\n// =============================================================================\n\nexport interface PluginContextFactoryOptions {\n\tdb: Kysely<Database>;\n\tbeforeContentWrite?: () => Promise<void>;\n\t/**\n\t * Resolver for the database connection, preferred over `db` when present.\n\t * Called per `createContext()` so connection-backed adapters (e.g. Postgres\n\t * over Hyperdrive) get the current request/event-scoped connection from ALS\n\t * rather than a snapshot of the per-isolate singleton — reusing the\n\t * singleton's socket from a later event trips workerd's cross-request I/O\n\t * guard. When omitted, `db` is used directly (correct for stateless\n\t * adapters like D1 and Node SQLite). `db` remains required as the fallback.\n\t */\n\tgetDb?: () => Kysely<Database>;\n\t/**\n\t * Storage backend for direct media uploads.\n\t * If not provided, upload() will throw.\n\t */\n\tstorage?: Storage;\n\t/**\n\t * Explicit provider for `ctx.media.getUploadUrl()`. Optional: when omitted\n\t * but `storage` is configured, the factory derives a working `getUploadUrl()`\n\t * (and `upload()`) from storage. Only when neither `getUploadUrl` nor\n\t * `storage` is present do media write operations become unavailable.\n\t */\n\tgetUploadUrl?: (\n\t\tfilename: string,\n\t\tcontentType: string,\n\t) => Promise<{ uploadUrl: string; mediaId: string }>;\n\t/**\n\t * Site information for ctx.site and ctx.url().\n\t * If not provided, site info will have empty defaults.\n\t */\n\tsiteInfo?: SiteInfoOptions;\n\t/**\n\t * Callback to notify the cron scheduler that the next due time may have changed.\n\t * If not provided, ctx.cron will not be available.\n\t */\n\tcronReschedule?: () => void;\n\t/**\n\t * Email pipeline instance for ctx.email.\n\t * If not provided (or no provider configured), ctx.email will be undefined.\n\t */\n\temailPipeline?: EmailPipeline;\n\t/**\n\t * Pre-resolved list of trusted proxy header names (from the runtime\n\t * `EmDashConfig.trustedProxyHeaders` or the env var). Plugin route\n\t * handlers pass this to `extractRequestMeta` so plugins see the same\n\t * client IP the core auth path does.\n\t */\n\ttrustedProxyHeaders?: string[];\n}\n\n/**\n * Factory for creating plugin contexts\n */\nexport class PluginContextFactory {\n\tprivate resolveDb: () => Kysely<Database>;\n\tprivate beforeContentWrite?: () => Promise<void>;\n\tprivate storage?: Storage;\n\tprivate getUploadUrl?: (\n\t\tfilename: string,\n\t\tcontentType: string,\n\t) => Promise<{ uploadUrl: string; mediaId: string }>;\n\tprivate site: SiteInfo;\n\tprivate urlHelper: (path: string) => string;\n\tprivate cronReschedule?: () => void;\n\tprivate emailPipeline?: EmailPipeline;\n\t/**\n\t * Plugin IDs already warned about a missing media-write backend, so the\n\t * warning fires once per factory instead of on every hook/route context\n\t * creation (which would spam logs for hook-participating plugins).\n\t */\n\tprivate warnedMissingMediaBackend = new Set<string>();\n\n\tconstructor(options: PluginContextFactoryOptions) {\n\t\tconst fixedDb = options.db;\n\t\tthis.resolveDb = options.getDb ?? (() => fixedDb);\n\t\tthis.beforeContentWrite = options.beforeContentWrite;\n\t\tthis.storage = options.storage;\n\t\tthis.getUploadUrl = options.getUploadUrl;\n\t\tthis.site = createSiteInfo(options.siteInfo ?? {});\n\t\tthis.urlHelper = createUrlHelper(this.site.url);\n\t\tthis.cronReschedule = options.cronReschedule;\n\t\tthis.emailPipeline = options.emailPipeline;\n\t}\n\n\t/**\n\t * Create the unified plugin context\n\t */\n\tcreateContext(plugin: ResolvedPlugin): PluginContext {\n\t\tconst capabilities = new Set(plugin.capabilities);\n\n\t\t// Resolve the connection once per context. For stateless adapters this\n\t\t// is the singleton; for connection-backed adapters it's the current\n\t\t// request/event-scoped connection from ALS. All repos below are built\n\t\t// from this local `db` so a hook never queries a stale singleton socket.\n\t\tconst db = this.resolveDb();\n\t\tconst optionsRepo = new OptionsRepository(db);\n\n\t\t// Always available\n\t\tconst kv = createKVAccess(optionsRepo, plugin.id);\n\t\tconst log = createLogAccess(plugin.id);\n\t\tconst storage = createStorageAccess(db, plugin.id, plugin.storage);\n\n\t\t// Capability-gated: content\n\t\t// Note: capabilities reach this point already normalized to the\n\t\t// canonical names by definePlugin / adaptSandboxEntry. Deprecated\n\t\t// names (\"read:content\", \"write:content\") never appear here.\n\t\tlet content: ContentAccess | ContentAccessWithWrite | undefined;\n\t\tif (capabilities.has(\"content:write\")) {\n\t\t\tcontent = createContentAccessWithWrite(db, this.beforeContentWrite);\n\t\t} else if (capabilities.has(\"content:read\")) {\n\t\t\tcontent = createContentAccess(db);\n\t\t}\n\n\t\t// Capability-gated: taxonomies (read-only)\n\t\tlet taxonomies: TaxonomyAccess | undefined;\n\t\tif (capabilities.has(\"taxonomies:read\")) {\n\t\t\ttaxonomies = createTaxonomyAccess(db);\n\t\t}\n\n\t\t// Capability-gated: media\n\t\t// `upload()` only needs `storage`; `getUploadUrl()` is derived from\n\t\t// storage when no explicit provider is wired. Granting write access on\n\t\t// either avoids silently degrading media:write to read-only — the bug\n\t\t// where the runtime threads `storage` but not `getUploadUrl`.\n\t\tlet media: MediaAccess | MediaAccessWithWrite | undefined;\n\t\tif (capabilities.has(\"media:write\")) {\n\t\t\tif (this.getUploadUrl || this.storage) {\n\t\t\t\tmedia = createMediaAccessWithWrite(db, this.getUploadUrl, this.storage);\n\t\t\t} else {\n\t\t\t\tif (!this.warnedMissingMediaBackend.has(plugin.id)) {\n\t\t\t\t\tthis.warnedMissingMediaBackend.add(plugin.id);\n\t\t\t\t\tlog.warn(\n\t\t\t\t\t\t\"declares the media:write capability but no storage backend is configured; upload() is unavailable.\",\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tif (capabilities.has(\"media:read\")) {\n\t\t\t\t\tmedia = createMediaAccess(db);\n\t\t\t\t}\n\t\t\t}\n\t\t} else if (capabilities.has(\"media:read\")) {\n\t\t\tmedia = createMediaAccess(db);\n\t\t}\n\n\t\t// Capability-gated: http\n\t\tlet http: HttpAccess | undefined;\n\t\tif (capabilities.has(\"network:request:unrestricted\")) {\n\t\t\thttp = createUnrestrictedHttpAccess(plugin.id);\n\t\t} else if (capabilities.has(\"network:request\")) {\n\t\t\thttp = createHttpAccess(plugin.id, plugin.allowedHosts);\n\t\t}\n\n\t\t// Capability-gated: users\n\t\tlet users: UserAccess | undefined;\n\t\tif (capabilities.has(\"users:read\")) {\n\t\t\tusers = createUserAccess(db);\n\t\t}\n\n\t\t// Cron access — always available (scoped to plugin), but only if\n\t\t// the runtime provided a reschedule callback (i.e. cron is wired up).\n\t\tlet cron: CronAccess | undefined;\n\t\tif (this.cronReschedule) {\n\t\t\tcron = new CronAccessImpl(db, plugin.id, this.cronReschedule);\n\t\t}\n\n\t\t// Email access — requires email:send capability AND a configured provider\n\t\tlet email: EmailAccess | undefined;\n\t\tif (capabilities.has(\"email:send\") && this.emailPipeline?.isAvailable()) {\n\t\t\tconst pipeline = this.emailPipeline;\n\t\t\tconst pluginId = plugin.id;\n\t\t\temail = {\n\t\t\t\tsend: (message) => pipeline.send(message, pluginId),\n\t\t\t};\n\t\t}\n\n\t\treturn {\n\t\t\tplugin: {\n\t\t\t\tid: plugin.id,\n\t\t\t\tversion: plugin.version,\n\t\t\t},\n\t\t\tstorage,\n\t\t\tkv,\n\t\t\tcontent,\n\t\t\ttaxonomies,\n\t\t\tmedia,\n\t\t\thttp,\n\t\t\tlog,\n\t\t\tsite: this.site,\n\t\t\turl: this.urlHelper,\n\t\t\tusers,\n\t\t\tcron,\n\t\t\temail,\n\t\t};\n\t}\n}\n\n/**\n * Create a plugin context for a resolved plugin\n */\nexport function createPluginContext(\n\toptions: PluginContextFactoryOptions,\n\tplugin: ResolvedPlugin,\n): PluginContext {\n\tconst factory = new PluginContextFactory(options);\n\treturn factory.createContext(plugin);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAgBA,IAAa,oBAAb,cAAuC,MAAM;CAC5C,YACC,SACA,AAAO,OACP,AAAO,YACN;AACD,QAAM,QAAQ;EAHP;EACA;AAGP,OAAK,OAAO;;;;;;AAOd,SAAgB,cAAc,OAAyC;AACtE,KAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAO,QAAQ,SAAS,SAAS,SAAS,QAAQ,SAAS,SAAS;;;;;AAMrE,SAAgB,WAAW,OAAsC;AAChE,KAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAO,QAAQ,SAAS,MAAM,QAAQ,MAAM,GAAG;;;;;AAMhD,SAAgB,mBAAmB,OAA8C;AAChF,KAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAO,gBAAgB,SAAS,OAAO,MAAM,eAAe;;;;;;;AAQ7D,SAAgB,kBAAkB,OAAuB;AACxD,QAAO,MAAM,WAAW,MAAM,OAAO,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,KAAK,MAAM;;;;;AAMpF,SAAgB,iBAAiB,SAAgD;CAChF,MAAM,yBAAS,IAAI,KAAa;AAChC,MAAK,MAAM,SAAS,QACnB,KAAI,MAAM,QAAQ,MAAM,CACvB,MAAK,MAAM,SAAS,MACnB,QAAO,IAAI,MAAM;KAGlB,QAAO,IAAI,MAAM;AAGnB,QAAO;;;;;AAMR,SAAgB,oBACf,OACA,eACA,UACA,YACO;AACP,MAAK,MAAM,SAAS,OAAO,KAAK,MAAM,CACrC,KAAI,CAAC,cAAc,IAAI,MAAM,CAC5B,OAAM,IAAI,kBACT,sCAAsC,MAAM,KAC5C,OACA,QAAQ,MAAM,eAAe,WAAW,sBAAsB,SAAS,yBACvE;;;;;AAQJ,SAAgB,sBACf,SACA,eACA,UACA,YACO;AACP,MAAK,MAAM,SAAS,OAAO,KAAK,QAAQ,CACvC,KAAI,CAAC,cAAc,IAAI,MAAM,CAC5B,OAAM,IAAI,kBACT,sCAAsC,MAAM,KAC5C,OACA,QAAQ,MAAM,eAAe,WAAW,sBAAsB,SAAS,qCACvE;;;;;;;;;;;;AAgBJ,SAAgB,YACf,IACA,OACA,SACS;AACT,QAAO,sBAAsB,IAAI,OAAO,QAAQ;;;;;;;;;AAWjD,SAAgB,iBAAiB,IAAiB,OAAuB;AACxE,QAAO,oBAAoB,IAAI,MAAM;;;;;AAOtC,SAAgB,eACf,IACA,OACA,OACqC;CAMrC,MAAM,cAAc,YAA6B,YAAY,IAAI,OAAO,EAAE,SAAS,CAAC;AAEpF,KAAI,UAAU,KACb,QAAO;EAAE,KAAK,GAAG,WAAW,MAAM,CAAC;EAAW,QAAQ,EAAE;EAAE;AAG3D,KAAI,OAAO,UAAU,SACpB,QAAO;EAAE,KAAK,GAAG,WAAW,KAAK,CAAC;EAAO,QAAQ,CAAC,MAAM;EAAE;AAG3D,KAAI,OAAO,UAAU,SACpB,QAAO;EAAE,KAAK,GAAG,WAAW,MAAM,CAAC;EAAO,QAAQ,CAAC,MAAM;EAAE;AAG5D,KAAI,OAAO,UAAU,UAEpB,QAAO;EAAE,KAAK,GAAG,WAAW,MAAM,CAAC;EAAO,QAAQ,CAAC,MAAM;EAAE;AAG5D,KAAI,WAAW,MAAM,EAAE;EACtB,MAAM,UAAU,MAAM,GAAG,SAAS,KAAK,MAAM,GAAG,OAAO,MAAM,OAAO,MAAM,SAAS;EACnF,MAAM,eAAe,MAAM,GAAG,UAAU,IAAI,CAAC,KAAK,KAAK;AACvD,SAAO;GACN,KAAK,GAAG,WAAW,QAAQ,CAAC,OAAO,aAAa;GAChD,QAAQ,MAAM;GACd;;AAGF,KAAI,mBAAmB,MAAM,CAG5B,QAAO;EACN,KAAK,GAAG,WAAW,MAAM,CAAC;EAC1B,QAAQ,CAAC,GAAG,kBAAkB,MAAM,WAAW,CAAC,GAAG;EACnD;AAGF,KAAI,cAAc,MAAM,EAAE;EACzB,MAAM,aAAuB,EAAE;EAC/B,MAAM,SAAoB,EAAE;EAI5B,MAAM,aAAa,IAAY,UAAiC;AAC/D,cAAW,KAAK,GAAG,WAAW,OAAO,UAAU,SAAS,CAAC,GAAG,GAAG,IAAI;AACnE,UAAO,KAAK,MAAM;;AAGnB,MAAI,MAAM,OAAO,OAAW,WAAU,KAAK,MAAM,GAAG;AACpD,MAAI,MAAM,QAAQ,OAAW,WAAU,MAAM,MAAM,IAAI;AACvD,MAAI,MAAM,OAAO,OAAW,WAAU,KAAK,MAAM,GAAG;AACpD,MAAI,MAAM,QAAQ,OAAW,WAAU,MAAM,MAAM,IAAI;AAEvD,SAAO;GACN,KAAK,WAAW,KAAK,QAAQ;GAC7B;GACA;;AAGF,OAAM,IAAI,kBAAkB,kCAAkC,MAAM,GAAG;;;;;AAOxE,SAAgB,iBACf,IACA,OAIC;CACD,MAAM,aAAuB,EAAE;CAC/B,MAAM,SAAoB,EAAE;AAE5B,MAAK,MAAM,CAAC,OAAO,UAAU,OAAO,QAAQ,MAAM,EAAE;EACnD,MAAM,YAAY,eAAe,IAAI,OAAO,MAAM;AAClD,aAAW,KAAK,UAAU,IAAI;AAC9B,SAAO,KAAK,GAAG,UAAU,OAAO;;AAGjC,KAAI,WAAW,WAAW,EACzB,QAAO;EAAE,KAAK;EAAI,QAAQ,EAAE;EAAE;AAG/B,QAAO;EACN,KAAK,WAAW,KAAK,QAAQ;EAC7B;EACA;;;;;;;;;;ACxNF,SAAS,aAAa,SAAiB,QAAwC;CAC9E,MAAM,QAAkC,EAAE;CAC1C,IAAI,aAAa;CACjB,MAAM,WAAW,QAAQ,MAAM,IAAI;AACnC,MAAK,IAAI,IAAI,GAAG,IAAI,SAAS,QAAQ,KAAK;AACzC,MAAI,IAAI,EACP,OAAM,KAAK,GAAG,GAAG,OAAO,gBAAgB;AAEzC,MAAI,SAAS,GACZ,OAAM,KAAK,IAAI,IAAI,SAAS,GAAG,CAAC;;AAGlC,QAAO,GAAY,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,GAAG,CAAC,CAAC;;;;;;;;;;;;;;;;AAiBrD,SAAS,SAAS,MAA+C;AAChE,QAAO,GAAG,cAAc,KAAK;;AAG9B,IAAa,0BAAb,MAAkF;CACjF,AAAQ;CAER,YACC,AAAQ,IACR,AAAQ,UACR,AAAQ,YACR,SACC;EAJO;EACA;EACA;AAGR,OAAK,gBAAgB,iBAAiB,QAAQ;;;;;CAM/C,MAAM,IAAI,IAA+B;EACxC,MAAM,MAAM,MAAM,KAAK,GACrB,WAAW,kBAAkB,CAC7B,OAAO,OAAO,CACd,MAAM,aAAa,KAAK,KAAK,SAAS,CACtC,MAAM,cAAc,KAAK,KAAK,WAAW,CACzC,MAAM,MAAM,KAAK,GAAG,CACpB,kBAAkB;AAEpB,MAAI,CAAC,IAAK,QAAO;AAEjB,SAAO,KAAK,MAAM,IAAI,KAAK;;;;;CAM5B,MAAM,IAAI,IAAY,MAAwB;EAC7C,MAAM,uBAAM,IAAI,MAAM,EAAC,aAAa;EACpC,MAAM,WAAW,KAAK,UAAU,KAAK;AAErC,QAAM,KAAK,GACT,WAAW,kBAAkB,CAC7B,OAAO;GACP,WAAW,KAAK;GAChB,YAAY,KAAK;GACjB;GACA,MAAM;GACN,YAAY;GACZ,YAAY;GACZ,CAAC,CACD,YAAY,OACZ,GAAG,QAAQ;GAAC;GAAa;GAAc;GAAK,CAAC,CAAC,YAAY;GACzD,MAAM;GACN,YAAY;GACZ,CAAC,CACF,CACA,SAAS;;;;;CAMZ,MAAM,OAAO,IAA8B;AAQ1C,WAPe,MAAM,KAAK,GACxB,WAAW,kBAAkB,CAC7B,MAAM,aAAa,KAAK,KAAK,SAAS,CACtC,MAAM,cAAc,KAAK,KAAK,WAAW,CACzC,MAAM,MAAM,KAAK,GAAG,CACpB,kBAAkB,EAEL,kBAAkB,KAAK;;;;;CAMvC,MAAM,OAAO,IAA8B;AAS1C,SAAO,CAAC,CARI,MAAM,KAAK,GACrB,WAAW,kBAAkB,CAC7B,OAAO,KAAK,CACZ,MAAM,aAAa,KAAK,KAAK,SAAS,CACtC,MAAM,cAAc,KAAK,KAAK,WAAW,CACzC,MAAM,MAAM,KAAK,GAAG,CACpB,kBAAkB;;;;;CAQrB,MAAM,QAAQ,KAAwC;AACrD,MAAI,IAAI,WAAW,EAAG,wBAAO,IAAI,KAAK;EAEtC,MAAM,OAAO,MAAM,KAAK,GACtB,WAAW,kBAAkB,CAC7B,OAAO,CAAC,MAAM,OAAO,CAAC,CACtB,MAAM,aAAa,KAAK,KAAK,SAAS,CACtC,MAAM,cAAc,KAAK,KAAK,WAAW,CACzC,MAAM,MAAM,MAAM,IAAI,CACtB,SAAS;EAEX,MAAM,yBAAS,IAAI,KAAgB;AACnC,OAAK,MAAM,OAAO,KAEjB,QAAO,IAAI,IAAI,IAAI,KAAK,MAAM,IAAI,KAAK,CAAM;AAE9C,SAAO;;;;;CAMR,MAAM,QAAQ,OAAsD;AACnE,MAAI,MAAM,WAAW,EAAG;EAExB,MAAM,uBAAM,IAAI,MAAM,EAAC,aAAa;AAIpC,QAAM,gBAAgB,KAAK,IAAI,OAAO,QAAQ;AAC7C,QAAK,MAAM,QAAQ,OAAO;IACzB,MAAM,WAAW,KAAK,UAAU,KAAK,KAAK;AAC1C,UAAM,IACJ,WAAW,kBAAkB,CAC7B,OAAO;KACP,WAAW,KAAK;KAChB,YAAY,KAAK;KACjB,IAAI,KAAK;KACT,MAAM;KACN,YAAY;KACZ,YAAY;KACZ,CAAC,CACD,YAAY,OACZ,GAAG,QAAQ;KAAC;KAAa;KAAc;KAAK,CAAC,CAAC,YAAY;KACzD,MAAM;KACN,YAAY;KACZ,CAAC,CACF,CACA,SAAS;;IAEX;;;;;CAMH,MAAM,WAAW,KAAgC;AAChD,MAAI,IAAI,WAAW,EAAG,QAAO;EAE7B,MAAM,SAAS,MAAM,KAAK,GACxB,WAAW,kBAAkB,CAC7B,MAAM,aAAa,KAAK,KAAK,SAAS,CACtC,MAAM,cAAc,KAAK,KAAK,WAAW,CACzC,MAAM,MAAM,MAAM,IAAI,CACtB,kBAAkB;AAEpB,SAAO,OAAO,OAAO,kBAAkB,EAAE;;;;;CAM1C,MAAM,MAAM,UAAwB,EAAE,EAAqD;EAC1F,MAAM,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,EAAE,WAAW;EAC7C,MAAM,QAAQ,KAAK,IAAI,QAAQ,SAAS,IAAI,IAAI;AAGhD,sBAAoB,OAAO,KAAK,eAAe,KAAK,UAAU,KAAK,WAAW;AAC9E,MAAI,OAAO,KAAK,QAAQ,CAAC,SAAS,EACjC,uBAAsB,SAAS,KAAK,eAAe,KAAK,UAAU,KAAK,WAAW;EAInF,IAAI,QAAQ,KAAK,GACf,WAAW,kBAAkB,CAC7B,OAAO;GAAC;GAAM;GAAQ;GAAa,CAAC,CACpC,MAAM,aAAa,KAAK,KAAK,SAAS,CACtC,MAAM,cAAc,KAAK,KAAK,WAAW;EAG3C,MAAM,cAAc,iBAAiB,KAAK,IAAI,MAAM;AACpD,MAAI,YAAY,IACf,SAAQ,MAAM,MAAM,aAAa,YAAY,KAAK,YAAY,OAAO,CAAC;EAGvE,MAAM,eAAe,OAAO,QAAQ,QAAQ;EAC5C,MAAM,kBAAkB,IAAI,IAAI,aAAa,KAAK,GAAG,eAAe,UAAU,CAAC;EAC/E,MAAM,aAAa,aAAa,SAAS,KAAK,aAAa,GAAG,OAAO;EAOrE,MAAM,YAAY,UACjB,GAAG,GAAG,IAAI,IAAI,iBAAiB,KAAK,IAAI,MAAM,CAAC;AAGhD,MAAI,QAAQ;GACX,MAAM,UAAU,aAAa,OAAO;AACpC,OAAI,aAAa,WAAW,EAC3B,SAAQ,MAAM,OAAO,EAAE,SACtB,GAAG,GAAG,oBAAoB,KAAK,GAAG,IAAI,QAAQ,WAAW,IAAI,QAAQ,GAAG,GAAG,CAC3E;QACK;AACN,QAAI,gBAAgB,OAAO,EAC1B,OAAM,IAAI,kBACT,0EACA,OAAO,KAAK,QAAQ,CAAC,KAAK,KAAK,EAC/B,2DACA;IAEF,MAAM,KAAK,aAAa,GAAG,MAAM,GAAG;IAIpC,MAAM,cAAc,UACnB,GAAG,WAAW,IAAI,IAAI,iBAAiB,KAAK,IAAI,MAAM,CAAC,CAAC,0CAA0C,KAAK,SAAS,oBAAoB,KAAK,WAAW,YAAY,QAAQ,GAAG;IAE5K,MAAM,SAAS,aAAa,KAAK,CAAC,WAAW;KAC5C,MAAM,MAAM,SAAS,MAAM;KAC3B,MAAM,SAAS,WAAW,MAAM;AAChC,YAAO;MACN,OAAO,GAAG,IAAI,SAAS,IAAI,CAAC,KAAK,SAAS,OAAO,CAAC,QAAQ,SAAS,IAAI,CAAC,UAAU,IAAI,KAAK,OAAO;MAClG,OAAO,GAAG,IAAI,SAAS,IAAI,CAAC,GAAG,GAAG,GAAG,SAAS,OAAO,CAAC,OAAO,SAAS,IAAI,CAAC,KAAK,SAAS,OAAO,CAAC,OAAO,SAAS,IAAI,CAAC,WAAW,IAAI,GAAG,GAAG,GAAG,OAAO;MACrJ;MACA;IAIF,MAAM,QAAQ,OAAO,KACnB,GAAG,MACH,GAAG,IAAI,IAAI,KAAK,CAAC,GAAG,OAAO,MAAM,GAAG,EAAE,CAAC,KAAK,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,EAAE,GAAG,QAAQ,CAAC,GAC3F;AACD,UAAM,KACL,GAAG,IAAI,IAAI,KAAK,CAAC,GAAG,OAAO,KAAK,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,GAAG,QAAQ,KAAK,EAAE,GAAG,QAAQ,CAAC,GAC1F;AACD,YAAQ,MAAM,MAAM,GAAY,IAAI,IAAI,KAAK,OAAO,GAAG,OAAO,CAAC,GAAG;;;AAKpE,MAAI,aAAa,SAAS,GAAG;AAC5B,QAAK,MAAM,CAAC,OAAO,cAAc,cAAc;IAC9C,MAAM,MAAM,cAAc,SAAS,GAAG,SAAS,GAAG;IAClD,MAAM,OAAO,SAAS,MAAM;AAE5B,YAAQ,MAAM,QAAQ,GAAG,GAAG,SAAS,KAAK,CAAC,GAAG,MAAM;AAGpD,YAAQ,MAAM,QAAQ,GAAG,GAAG,KAAK,GAAG,MAAM;;AAG3C,WAAQ,MAAM,QAAQ,MAAM,aAAa,SAAS,MAAM;QAGxD,SAAQ,MAAM,QAAQ,cAAc,MAAM,CAAC,QAAQ,MAAM,MAAM;AAIhE,UAAQ,MAAM,MAAM,QAAQ,EAAE;EAE9B,MAAM,OAAO,MAAM,MAAM,SAAS;EAElC,MAAM,UAAU,KAAK,SAAS;EAC9B,MAAM,QAAQ,KAAK,MAAM,GAAG,MAAM,CAAC,KAAK,SAAS;GAChD,IAAI,IAAI;GAER,MAAM,KAAK,MAAM,IAAI,KAAK;GAC1B,EAAE;EAGH,IAAI;AACJ,MAAI,SAAS;GACZ,MAAM,WAAW,KAAK,QAAQ;AAC9B,OAAI,SACH,cAAa,aAAa,SAAS,YAAY,SAAS,GAAG;;AAI7D,SAAO;GAAE;GAAO,QAAQ;GAAY;GAAS;;;;;CAM9C,MAAM,MAAM,OAAsC;AACjD,MAAI,SAAS,OAAO,KAAK,MAAM,CAAC,SAAS,EACxC,qBAAoB,OAAO,KAAK,eAAe,KAAK,UAAU,KAAK,WAAW;EAG/E,IAAI,QAAQ,KAAK,GACf,WAAW,kBAAkB,CAC7B,OAAO,GAAW,WAAW,GAAG,QAAQ,CAAC,CACzC,MAAM,aAAa,KAAK,KAAK,SAAS,CACtC,MAAM,cAAc,KAAK,KAAK,WAAW;AAG3C,MAAI,SAAS,OAAO,KAAK,MAAM,CAAC,SAAS,GAAG;GAC3C,MAAM,cAAc,iBAAiB,KAAK,IAAI,MAAM;AACpD,OAAI,YAAY,IACf,SAAQ,MAAM,MAAM,aAAa,YAAY,KAAK,YAAY,OAAO,CAAC;;EAIxE,MAAM,SAAS,MAAM,MAAM,kBAAkB;AAE7C,SAAO,OAAO,QAAQ,SAAS,EAAE;;;;;;;;;;AC7SnC,SAAgB,eAAe,aAAgC,UAA4B;CAC1F,MAAM,SAAS,UAAU,SAAS;AAElC,QAAO;EACN,MAAM,IAAO,KAAgC;AAC5C,UAAO,YAAY,IAAO,GAAG,SAAS,MAAM;;EAG7C,MAAM,IAAI,KAAa,OAA+B;AACrD,SAAM,YAAY,IAAI,GAAG,SAAS,OAAO,MAAM;;EAGhD,MAAM,OAAO,KAA+B;AAC3C,UAAO,YAAY,OAAO,GAAG,SAAS,MAAM;;EAG7C,MAAM,KAAK,WAAqE;GAC/E,MAAM,aAAa,GAAG,SAAS,aAAa;GAC5C,MAAM,aAAa,MAAM,YAAY,YAAY,WAAW;GAC5D,MAAM,SAAiD,EAAE;AACzD,QAAK,MAAM,CAAC,SAAS,UAAU,WAC9B,QAAO,KAAK;IACX,KAAK,QAAQ,MAAM,OAAO,OAAO;IACjC;IACA,CAAC;AAEH,UAAO;;EAER;;;;;;AAWF,SAAS,wBACR,IACA,UACA,gBACA,SACuB;CACvB,MAAM,OAAO,IAAI,wBAA2B,IAAI,UAAU,gBAAgB,QAAQ;AAElF,QAAO;EACN,MAAM,OAAO,KAAK,IAAI,GAAG;EACzB,MAAM,IAAI,SAAS,KAAK,IAAI,IAAI,KAAK;EACrC,SAAS,OAAO,KAAK,OAAO,GAAG;EAC/B,SAAS,OAAO,KAAK,OAAO,GAAG;EAC/B,UAAU,QAAQ,KAAK,QAAQ,IAAI;EACnC,UAAU,UAAU,KAAK,QAAQ,MAAM;EACvC,aAAa,QAAQ,KAAK,WAAW,IAAI;EACzC,QAAQ,UAAU,KAAK,MAAM,MAAM;EAGnC,MAAM,MAAM,SAA2E;GACtF,MAAM,SAAS,MAAM,KAAK,MAAM;IAC/B,OAAO,SAAS;IAChB,SAAS,SAAS;IAClB,OAAO,SAAS;IAChB,QAAQ,SAAS;IACjB,CAAC;AAEF,UAAO;IACN,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,SAAS,OAAO;IAChB;;EAEF;;;;;AAMF,SAAgB,oBACf,IACA,UACA,eACoC;CACpC,MAAM,UAA6C,EAAE;AAErD,MAAK,MAAM,CAAC,gBAAgB,WAAW,OAAO,QAAQ,cAAc,CAEnE,SAAQ,kBAAkB,wBAAwB,IAAI,UAAU,gBAD7C,CAAC,GAAG,OAAO,SAAS,GAAI,OAAO,iBAAiB,EAAE,CAAE,CACoB;AAG5F,QAAO;;;;;;AAWR,SAAS,kBAAkB,OAGzB;CACD,MAAM,EAAE,KAAK,GAAG,WAAW;AAE3B,KAAI,QAAQ,WAAc,QAAQ,QAAQ,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,EACtF,OAAM,IAAI,MAAM,gCAAgC;AAEjD,QAAO;EAAE;EAAQ;EAAK;;;;;;AAOvB,eAAe,iBACd,SACA,YACA,KACmB;CACnB,MAAM,SAAS,MAAM,QAAQ,UAAU,WAAW;AAClD,KAAI,QAAQ,UAAa,CAAC,OACzB,OAAM,IAAI,MACT,eAAe,WAAW,qFAE1B;AAEF,QAAO;;;;;;;AAQR,SAAS,uBAAuB,OAAgC;AAC/D,KAAI,CAAC,MAAO,QAAO,EAAE;AACrB,KAAI;EACH,MAAM,SAAkB,KAAK,MAAM,MAAM;AACzC,SAAO,MAAM,QAAQ,OAAO,GACzB,OAAO,QAAQ,SAAyB,OAAO,SAAS,SAAS,GACjE,EAAE;SACE;AACP,SAAO,EAAE;;;;AAKX,SAAS,mBAAmB,MAAkC;AAC7D,QAAO;EACN,IAAI,KAAK;EACT,UAAU,KAAK;EACf,MAAM,KAAK;EACX,OAAO,KAAK;EACZ,UAAU,KAAK;EACf,MAAM,KAAK;EACX,QAAQ,KAAK;EACb,kBAAkB,KAAK;EACvB;;;;;AAMF,SAAgB,oBAAoB,IAAqC;CACxE,MAAM,cAAc,IAAI,kBAAkB,GAAG;CAC7C,MAAM,UAAU,IAAI,cAAc,GAAG;AAErC,QAAO;EACN,MAAM,IAAI,YAAoB,IAAyC;GACtE,MAAM,OAAO,MAAM,YAAY,SAAS,YAAY,GAAG;AACvD,OAAI,CAAC,KAAM,QAAO;GAElB,MAAM,SAAsB;IAC3B,IAAI,KAAK;IACT,MAAM,KAAK;IACX,MAAM,KAAK;IACX,QAAQ,KAAK;IACb,MAAM,KAAK;IACX,WAAW,KAAK;IAChB,WAAW,KAAK;IAChB,QAAQ,KAAK;IACb,aAAa,KAAK;IAClB,aAAa,KAAK;IAClB;AAED,OAAI,MAAM,QAAQ,UAAU,WAAW,CACtC,QAAO,MAAM,MAAM,QAAQ,IAAI,YAAY,KAAK,GAAG;AAGpD,UAAO;;EAGR,MAAM,KACL,YACA,SACwC;GAExC,IAAI;AACJ,OAAI,SAAS,SAAS;IAErB,MAAM,QADU,OAAO,QAAQ,QAAQ,QAAQ,CACzB;AACtB,QAAI,MACH,WAAU;KAAE,OAAO,MAAM;KAAI,WAAW,MAAM;KAAI;;GAIpD,MAAM,SAAS,MAAM,YAAY,SAAS,YAAY;IACrD,OAAO,SAAS,SAAS;IACzB,QAAQ,SAAS;IACjB;IACA,OAAO,SAAS;IAChB,CAAC;GAEF,MAAM,QAAuB,OAAO,MAAM,KAAK,UAAU;IACxD,IAAI,KAAK;IACT,MAAM,KAAK;IACX,MAAM,KAAK;IACX,QAAQ,KAAK;IACb,MAAM,KAAK;IACX,WAAW,KAAK;IAChB,WAAW,KAAK;IAChB,QAAQ,KAAK;IACb,aAAa,KAAK;IAClB,aAAa,KAAK;IAClB,EAAE;AAEH,OAAI,MAAM,SAAS,KAAM,MAAM,QAAQ,UAAU,WAAW,EAAG;IAC9D,MAAM,SAAS,MAAM,QAAQ,QAC5B,YACA,MAAM,KAAK,MAAM,EAAE,GAAG,CACtB;AACD,SAAK,MAAM,QAAQ,OAAO;KACzB,MAAM,MAAM,OAAO,IAAI,KAAK,GAAG;AAC/B,SAAI,IAAK,MAAK,MAAM;;;AAItB,UAAO;IACN;IACA,QAAQ,OAAO;IACf,SAAS,CAAC,CAAC,OAAO;IAClB;;EAEF;;;;;AAMF,SAAgB,qBAAqB,IAAsC;CAC1E,MAAM,eAAe,IAAI,mBAAmB,GAAG;AAE/C,QAAO;EACN,MAAM,OAAO,SAA2D;GACvE,IAAI,QAAQ,GAAG,WAAW,wBAAwB,CAAC,WAAW;AAC9D,OAAI,SAAS,WAAW,OAAW,SAAQ,MAAM,MAAM,UAAU,KAAK,QAAQ,OAAO;AAErF,WADa,MAAM,MAAM,QAAQ,QAAQ,MAAM,CAAC,SAAS,EAC7C,KAAK,SAAS;IACzB,MAAM,IAAI;IACV,OAAO,IAAI;IACX,eAAe,IAAI;IACnB,cAAc,IAAI,iBAAiB;IACnC,aAAa,uBAAuB,IAAI,YAAY;IACpD,QAAQ,IAAI;IACZ,EAAE;;EAGJ,MAAM,SAAS,UAAkB,SAA4D;AAE5F,WADc,MAAM,aAAa,WAAW,UAAU,EAAE,QAAQ,SAAS,QAAQ,CAAC,EACrE,IAAI,mBAAmB;;EAGrC,MAAM,cACL,YACA,SACA,SAC8B;AAO9B,WANc,MAAM,aAAa,iBAChC,YACA,SACA,SAAS,UACT,SAAS,OACT,EACY,IAAI,mBAAmB;;EAErC;;;;;;;;;;;AAYF,SAAgB,6BACf,IACA,oBACyB;AAGzB,QAAO;EACN,GAHkB,oBAAoB,GAAG;EAKzC,MAAM,OACL,YACA,MACA,SACuB;GACvB,MAAM,SAAS,2BAA2B,SAAS,OAAO;AAC1D,SAAM,sBAAsB;GAC5B,MAAM,EAAE,QAAQ,QAAQ,kBAAkB,KAAK;GAC/C,IAAI,iBAAiB;AAErB,OAAI;IACH,MAAM,UAAU,MAAM,gBAAgB,IAAI,OAAO,QAAQ;KACxD,MAAM,iBAAiB,IAAI,kBAAkB,IAAI;KACjD,MAAM,aAAa,IAAI,cAAc,IAAI;KAEzC,MAAM,SAAS,MAAM,iBAAiB,YAAY,YAAY,IAAI;KAElE,MAAM,OAAO,MAAM,eAAe,OAAO;MACxC,MAAM;MACN,MAAM;MACN;MACA,CAAC;AACF,sBAAiB;KAEjB,MAAM,SAAsB;MAC3B,IAAI,KAAK;MACT,MAAM,KAAK;MACX,MAAM,KAAK;MACX,QAAQ,KAAK;MACb,MAAM,KAAK;MACX,WAAW,KAAK;MAChB,WAAW,KAAK;MAChB,QAAQ,KAAK;MACb,aAAa,KAAK;MAClB,aAAa,KAAK;MAClB;AAED,SAAI,OACH,QAAO,MACN,QAAQ,SACL,MAAM,WAAW,OAAO,YAAY,KAAK,IAAI,IAAI,GACjD,MAAM,WAAW,IAAI,YAAY,KAAK,GAAG;AAG9C,YAAO;MACN;AACF,UAAM,2CAA2C,IAAI,YAAY,sBAAsB;AACvF,WAAO;YACC,OAAO;AACf,QAAI,eACH,OAAM,2CAA2C,IAAI,YAAY,sBAAsB;AAExF,UAAM;;;EAIR,MAAM,OAAO,YAAoB,IAAY,MAA+C;AAC3F,SAAM,sBAAsB;GAC5B,MAAM,EAAE,QAAQ,QAAQ,kBAAkB,KAAK;GAC/C,MAAM,kBAAkB,OAAO,KAAK,OAAO,CAAC,SAAS;GACrD,IAAI,iBAAiB;AAErB,OAAI;IACH,MAAM,UAAU,MAAM,gBAAgB,IAAI,OAAO,QAAQ;KACxD,MAAM,iBAAiB,IAAI,kBAAkB,IAAI;KACjD,MAAM,aAAa,IAAI,cAAc,IAAI;KAEzC,MAAM,SAAS,MAAM,iBAAiB,YAAY,YAAY,IAAI;KAOlE,MAAM,OAAO,kBACV,MAAM,eAAe,iBAAiB,YAAY,IAAI,EAAE,MAAM,QAAQ,CAAC,GACvE,OAAO,YAAY;MACnB,MAAM,WAAW,MAAM,eAAe,SAAS,YAAY,GAAG;AAC9D,UAAI,CAAC,SAAU,OAAM,IAAI,MAAM,oBAAoB;AACnD,aAAO;SACJ;AACN,SAAI,gBAAiB,kBAAiB;KAEtC,MAAM,SAAsB;MAC3B,IAAI,KAAK;MACT,MAAM,KAAK;MACX,MAAM,KAAK;MACX,QAAQ,KAAK;MACb,MAAM,KAAK;MACX,WAAW,KAAK;MAChB,WAAW,KAAK;MAChB,QAAQ,KAAK;MACb,aAAa,KAAK;MAClB,aAAa,KAAK;MAClB;AAED,SAAI,OACH,QAAO,MACN,QAAQ,SACL,MAAM,WAAW,OAAO,YAAY,KAAK,IAAI,IAAI,GACjD,MAAM,WAAW,IAAI,YAAY,KAAK,GAAG;AAG9C,YAAO;MACN;AACF,QAAI,gBACH,OAAM,2CAA2C,IAAI,YAAY,sBAAsB;AAExF,WAAO;YACC,OAAO;AACf,QAAI,eACH,OAAM,2CAA2C,IAAI,YAAY,sBAAsB;AAExF,UAAM;;;EAIR,MAAM,OAAO,YAAoB,IAA8B;AAC9D,SAAM,sBAAsB;GAE5B,MAAM,UAAU,MADI,IAAI,kBAAkB,GAAG,CACX,OAAO,YAAY,GAAG;AACxD,OAAI,QACH,OAAM,2CAA2C,IAAI,YAAY,sBAAsB;AAExF,UAAO;;EAER;;;;;AAUF,SAAgB,kBAAkB,IAAmC;CACpE,MAAM,YAAY,IAAI,gBAAgB,GAAG;AAEzC,QAAO;EACN,MAAM,IAAI,IAAuC;GAChD,MAAM,OAAO,MAAM,UAAU,SAAS,GAAG;AACzC,OAAI,CAAC,KAAM,QAAO;AAElB,UAAO;IACN,IAAI,KAAK;IACT,UAAU,KAAK;IACf,UAAU,KAAK;IACf,MAAM,KAAK;IAEX,KAAK,UAAU,KAAK,GAAG,GAAG,KAAK;IAC/B,WAAW,KAAK;IAChB;;EAGF,MAAM,KAAK,SAAiE;GAC3E,MAAM,SAAS,MAAM,UAAU,SAAS;IACvC,OAAO,SAAS,SAAS;IACzB,QAAQ,SAAS;IACjB,UAAU,SAAS;IACnB,CAAC;AAEF,UAAO;IACN,OAAO,OAAO,MAAM,KAAK,UAAU;KAClC,IAAI,KAAK;KACT,UAAU,KAAK;KACf,UAAU,KAAK;KACf,MAAM,KAAK;KACX,KAAK,UAAU,KAAK,GAAG,GAAG,KAAK;KAC/B,WAAW,KAAK;KAChB,EAAE;IACH,QAAQ,OAAO;IACf,SAAS,CAAC,CAAC,OAAO;IAClB;;EAEF;;;;;;;;;;AAWF,SAAgB,2BACf,IACA,gBAGA,SACuB;CACvB,MAAM,YAAY,IAAI,gBAAgB,GAAG;CACzC,MAAM,aAAa,kBAAkB,GAAG;CAExC,MAAM,eACL,mBACC,OAAO,UAAkB,gBAAwB;AACjD,MAAI,CAAC,QACJ,OAAM,IAAI,MACT,qGACA;EAGF,MAAM,WAAW,SAAS,MAAM,IAAI,CAAC,KAAK,IAAI;EAC9C,MAAM,SAAS,SAAS,YAAY,IAAI;EACxC,MAAM,MAAM,SAAS,IAAI,SAAS,MAAM,OAAO,CAAC,aAAa,GAAG;EAChE,MAAM,aAAa,GAAG,MAAM,GAAG;EAE/B,MAAM,QAAQ,MAAM,UAAU,cAAc;GAC3C,UAAU;GACV,UAAU;GACV;GACA,CAAC;AAQF,SAAO;GAAE,YANM,MAAM,QAAQ,mBAAmB;IAC/C,KAAK;IACL;IACA,WAAW;IACX,CAAC,EAEyB;GAAK,SAAS,MAAM;GAAI;;AAGrD,QAAO;EACN,GAAG;EAEH;EAEA,MAAM,OACL,UACA,aACA,OACgE;AAChE,OAAI,CAAC,QACJ,OAAM,IAAI,MACT,+FACA;GAIF,MAAM,YAAY,MAAM;GAExB,MAAM,WAAW,SAAS,MAAM,IAAI,CAAC,KAAK,IAAI;GAC9C,MAAM,SAAS,SAAS,YAAY,IAAI;GAExC,MAAM,aAAa,GAAG,YADV,SAAS,IAAI,SAAS,MAAM,OAAO,CAAC,aAAa,GAAG;AAIhE,SAAM,QAAQ,OAAO;IACpB,KAAK;IACL,MAAM,IAAI,WAAW,MAAM;IAC3B;IACA,CAAC;GAGF,MAAM,WAAW,MAAM,oBAAoB,IAAI,WAAW,MAAM,EAAE,YAAY;GAG9E,IAAI;AACJ,OAAI;AACH,YAAQ,MAAM,UAAU,OAAO;KAC9B,UAAU;KACV,UAAU;KACV,MAAM,MAAM;KACZ;KACA,QAAQ;KACR,OAAO,SAAS;KAChB,QAAQ,SAAS;KACjB,UAAU,SAAS;KACnB,eAAe,SAAS;KACxB,CAAC;YACM,OAAO;AACf,QAAI;AACH,WAAM,QAAQ,OAAO,WAAW;YACzB;AAGR,UAAM;;AAGP,UAAO;IACN,SAAS,MAAM;IACf;IACA,KAAK,2BAA2B;IAChC;;EAGF,MAAM,OAAO,IAA8B;GAC1C,MAAM,UAAU,MAAM,UAAU,OAAO,GAAG;AAM1C,OAAI,QACH,8BAA6B;AAE9B,UAAO;;EAER;;;AAQF,MAAM,uBAAuB;;;;;;AAO7B,SAAS,cAAc,MAAc,cAAiC;AACrE,QAAO,aAAa,MAAM,YAAY;AACrC,MAAI,YAAY,IAAK,QAAO;AAC5B,MAAI,QAAQ,WAAW,KAAK,EAAE;GAC7B,MAAM,SAAS,QAAQ,MAAM,EAAE;AAE/B,UAAO,KAAK,SAAS,OAAO,IAAI,SAAS,QAAQ,MAAM,EAAE;;AAE1D,SAAO,SAAS;GACf;;;;;;;;AASH,SAAgB,iBAAiB,UAAkB,cAAoC;AACtF,QAAO,EACN,MAAM,MAAM,KAAa,MAAuC;AAE/D,MAAI,aAAa,WAAW,EAC3B,OAAM,IAAI,MACT,WAAW,SAAS,0GAEpB;EAGF,IAAI,aAAa;EACjB,IAAI,cAAc;AAElB,OAAK,IAAI,IAAI,GAAG,KAAK,sBAAsB,KAAK;GAC/C,MAAM,WAAW,IAAI,IAAI,WAAW,CAAC;AACrC,OAAI,CAAC,cAAc,UAAU,aAAa,CACzC,OAAM,IAAI,MACT,WAAW,SAAS,uCAAuC,SAAS,oBACjD,aAAa,KAAK,KAAK,GAC1C;GAGF,MAAM,WAAW,MAAM,WAAW,MAAM,YAAY;IACnD,GAAG;IACH,UAAU;IACV,CAAC;AAGF,OAAI,SAAS,SAAS,OAAO,SAAS,UAAU,IAC/C,QAAO;GAIR,MAAM,WAAW,SAAS,QAAQ,IAAI,WAAW;AACjD,OAAI,CAAC,SACJ,QAAO;GAIR,MAAM,iBAAiB,IAAI,IAAI,WAAW,CAAC;AAC3C,gBAAa,IAAI,IAAI,UAAU,WAAW,CAAC;AAG3C,OAAI,mBAFe,IAAI,IAAI,WAAW,CAAC,UAEF,YACpC,eAAc,uBAAuB,YAAY;;AAInD,QAAM,IAAI,MAAM,WAAW,SAAS,6BAA6B,qBAAqB,GAAG;IAE1F;;;;;;;AAQF,SAAgB,6BAA6B,UAA8B;AAC1E,QAAO,EACN,MAAM,MAAM,KAAa,MAAuC;EAC/D,IAAI,aAAa;EACjB,IAAI,cAAc;AAElB,OAAK,IAAI,IAAI,GAAG,KAAK,sBAAsB,KAAK;AAG/C,OAAI;AACH,UAAM,8BAA8B,WAAW;YACvC,GAAG;IACX,MAAM,MAAM,aAAa,YAAY,EAAE,UAAU;AACjD,UAAM,IAAI,MACT,WAAW,SAAS,uBAAuB,IAAI,IAAI,WAAW,CAAC,SAAS,KAAK,OAC7E,EAAE,OAAO,GAAG,CACZ;;GAGF,MAAM,WAAW,MAAM,WAAW,MAAM,YAAY;IACnD,GAAG;IACH,UAAU;IACV,CAAC;AAGF,OAAI,SAAS,SAAS,OAAO,SAAS,UAAU,IAC/C,QAAO;GAIR,MAAM,WAAW,SAAS,QAAQ,IAAI,WAAW;AACjD,OAAI,CAAC,SACJ,QAAO;GAIR,MAAM,iBAAiB,IAAI,IAAI,WAAW,CAAC;AAC3C,gBAAa,IAAI,IAAI,UAAU,WAAW,CAAC;AAG3C,OAAI,mBAFe,IAAI,IAAI,WAAW,CAAC,UAEF,YACpC,eAAc,uBAAuB,YAAY;;AAInD,QAAM,IAAI,MAAM,WAAW,SAAS,6BAA6B,qBAAqB,GAAG;IAE1F;;;;;AAwBF,SAAgB,gBAAgB,UAA6B;CAC5D,MAAM,SAAS,WAAW,SAAS;AAEnC,QAAO;EACN,MAAM,SAAiB,MAAsB;AAC5C,OAAI,SAAS,OACZ,SAAQ,MAAM,QAAQ,SAAS,KAAK;OAEpC,SAAQ,MAAM,QAAQ,QAAQ;;EAIhC,KAAK,SAAiB,MAAsB;AAC3C,OAAI,SAAS,OACZ,SAAQ,KAAK,QAAQ,SAAS,KAAK;OAEnC,SAAQ,KAAK,QAAQ,QAAQ;;EAI/B,KAAK,SAAiB,MAAsB;AAC3C,OAAI,SAAS,OACZ,SAAQ,KAAK,QAAQ,SAAS,KAAK;OAEnC,SAAQ,KAAK,QAAQ,QAAQ;;EAI/B,MAAM,SAAiB,MAAsB;AAC5C,OAAI,SAAS,OACZ,SAAQ,MAAM,QAAQ,SAAS,KAAK;OAEpC,SAAQ,MAAM,QAAQ,QAAQ;;EAGhC;;AAOF,MAAM,oBAAoB;;;;;;;;;AAwB1B,SAAgB,eAAe,SAAoC;AAClE,QAAO;EACN,MAAM,QAAQ,YAAY;EAC1B,MAAM,QAAQ,WAAW,IAAI,QAAQ,mBAAmB,GAAG;EAC3D,QAAQ,QAAQ,UAAU;EAC1B,eAAe,QAAQ,iBAAiB;EACxC;;;;;;AAOF,SAAgB,gBAAgB,SAA2C;CAC1E,MAAM,OAAO,QAAQ,QAAQ,mBAAmB,GAAG;AAEnD,SAAQ,SAAyB;AAChC,MAAI,CAAC,KAAK,WAAW,IAAI,CACxB,OAAM,IAAI,MAAM,uCAAuC,KAAK,GAAG;AAEhE,MAAI,KAAK,WAAW,KAAK,CACxB,OAAM,IAAI,MAAM,iDAAiD,KAAK,GAAG;AAE1E,SAAO,GAAG,OAAO;;;;;;;AAYnB,SAAS,WAAW,MAMP;AACZ,QAAO;EACN,IAAI,KAAK;EACT,OAAO,KAAK;EACZ,MAAM,KAAK;EACX,MAAM,KAAK;EACX,WAAW,KAAK;EAChB;;;;;;AAOF,SAAgB,iBAAiB,IAAkC;CAClE,MAAM,WAAW,IAAI,eAAe,GAAG;AAEvC,QAAO;EACN,MAAM,IAAI,IAAsC;GAC/C,MAAM,OAAO,MAAM,SAAS,SAAS,GAAG;AACxC,OAAI,CAAC,KAAM,QAAO;AAClB,UAAO,WAAW,KAAK;;EAGxB,MAAM,WAAW,OAAyC;GACzD,MAAM,OAAO,MAAM,SAAS,YAAY,MAAM;AAC9C,OAAI,CAAC,KAAM,QAAO;AAClB,UAAO,WAAW,KAAK;;EAGxB,MAAM,KAAK,MAI6C;GACvD,MAAM,SAAS,MAAM,SAAS,SAAS;IACtC,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,OAAO,MAAM;IACb,CAAC;AAEF,UAAO;IACN,OAAO,OAAO,MAAM,IAAI,WAAW;IACnC,YAAY,OAAO;IACnB;;EAEF;;;;;AA8DF,IAAa,uBAAb,MAAkC;CACjC,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;CAIR,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;;;;;;CAMR,AAAQ,4CAA4B,IAAI,KAAa;CAErD,YAAY,SAAsC;EACjD,MAAM,UAAU,QAAQ;AACxB,OAAK,YAAY,QAAQ,gBAAgB;AACzC,OAAK,qBAAqB,QAAQ;AAClC,OAAK,UAAU,QAAQ;AACvB,OAAK,eAAe,QAAQ;AAC5B,OAAK,OAAO,eAAe,QAAQ,YAAY,EAAE,CAAC;AAClD,OAAK,YAAY,gBAAgB,KAAK,KAAK,IAAI;AAC/C,OAAK,iBAAiB,QAAQ;AAC9B,OAAK,gBAAgB,QAAQ;;;;;CAM9B,cAAc,QAAuC;EACpD,MAAM,eAAe,IAAI,IAAI,OAAO,aAAa;EAMjD,MAAM,KAAK,KAAK,WAAW;EAI3B,MAAM,KAAK,eAHS,IAAI,kBAAkB,GAAG,EAGN,OAAO,GAAG;EACjD,MAAM,MAAM,gBAAgB,OAAO,GAAG;EACtC,MAAM,UAAU,oBAAoB,IAAI,OAAO,IAAI,OAAO,QAAQ;EAMlE,IAAI;AACJ,MAAI,aAAa,IAAI,gBAAgB,CACpC,WAAU,6BAA6B,IAAI,KAAK,mBAAmB;WACzD,aAAa,IAAI,eAAe,CAC1C,WAAU,oBAAoB,GAAG;EAIlC,IAAI;AACJ,MAAI,aAAa,IAAI,kBAAkB,CACtC,cAAa,qBAAqB,GAAG;EAQtC,IAAI;AACJ,MAAI,aAAa,IAAI,cAAc,CAClC,KAAI,KAAK,gBAAgB,KAAK,QAC7B,SAAQ,2BAA2B,IAAI,KAAK,cAAc,KAAK,QAAQ;OACjE;AACN,OAAI,CAAC,KAAK,0BAA0B,IAAI,OAAO,GAAG,EAAE;AACnD,SAAK,0BAA0B,IAAI,OAAO,GAAG;AAC7C,QAAI,KACH,qGACA;;AAEF,OAAI,aAAa,IAAI,aAAa,CACjC,SAAQ,kBAAkB,GAAG;;WAGrB,aAAa,IAAI,aAAa,CACxC,SAAQ,kBAAkB,GAAG;EAI9B,IAAI;AACJ,MAAI,aAAa,IAAI,+BAA+B,CACnD,QAAO,6BAA6B,OAAO,GAAG;WACpC,aAAa,IAAI,kBAAkB,CAC7C,QAAO,iBAAiB,OAAO,IAAI,OAAO,aAAa;EAIxD,IAAI;AACJ,MAAI,aAAa,IAAI,aAAa,CACjC,SAAQ,iBAAiB,GAAG;EAK7B,IAAI;AACJ,MAAI,KAAK,eACR,QAAO,IAAI,eAAe,IAAI,OAAO,IAAI,KAAK,eAAe;EAI9D,IAAI;AACJ,MAAI,aAAa,IAAI,aAAa,IAAI,KAAK,eAAe,aAAa,EAAE;GACxE,MAAM,WAAW,KAAK;GACtB,MAAM,WAAW,OAAO;AACxB,WAAQ,EACP,OAAO,YAAY,SAAS,KAAK,SAAS,SAAS,EACnD;;AAGF,SAAO;GACN,QAAQ;IACP,IAAI,OAAO;IACX,SAAS,OAAO;IAChB;GACD;GACA;GACA;GACA;GACA;GACA;GACA;GACA,MAAM,KAAK;GACX,KAAK,KAAK;GACV;GACA;GACA;GACA"}

package/dist/{cron-Y9aLtgrA.mjs → cron-C6o7VppJ.mjs}

@@ -274,4 +274,4 @@ function validateSchedule(schedule) {
 
 //#endregion
 export { CronExecutor as n, setCronTasksEnabled as r, CronAccessImpl as t };
-//# sourceMappingURL=cron-Y9aLtgrA.mjs.map
+//# sourceMappingURL=cron-C6o7VppJ.mjs.map