emdash 0.36.0 → 0.37.0

package/dist/astro/routes/api/widget-areas/_name_/widgets/_id_.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"_id_.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/widget-areas/[name]/widgets/[id].ts"],"sourcesContent":["/**\n * Single widget endpoints\n *\n * PUT    /_emdash/api/widget-areas/:name/widgets/:id - Update widget\n * DELETE /_emdash/api/widget-areas/:name/widgets/:id - Delete widget\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { updateWidgetBody } from \"#api/schemas.js\";\nimport { rowToWidget } from \"#widgets/index.js\";\nimport type { WidgetRow } from \"#widgets/types.js\";\n\nexport const prerender = false;\n\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst db = emdash.db;\n\tconst { name, id } = params;\n\n\tconst denied = requirePerm(user, \"widgets:manage\");\n\tif (denied) return denied;\n\n\tif (!name || !id) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"name and id are required\", 400);\n\t}\n\n\ttry {\n\t\t// Get the area\n\t\tconst area = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"name\", \"=\", name)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!area) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Widget area \"${name}\" not found`, 404);\n\t\t}\n\n\t\t// Check widget exists and belongs to this area\n\t\tconst existingWidget = await db\n\t\t\t.selectFrom(\"_emdash_widgets\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"area_id\", \"=\", area.id)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!existingWidget) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Widget \"${id}\" not found in area \"${name}\"`, 404);\n\t\t}\n\n\t\tconst body = await parseBody(request, updateWidgetBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Build update object (only update provided fields)\n\t\tconst updates: Record<string, unknown> = {};\n\t\tif (body.title !== undefined) updates.title = body.title || null;\n\t\tif (body.type !== undefined) updates.type = body.type;\n\t\tif (body.content !== undefined)\n\t\t\tupdates.content = body.content ? JSON.stringify(body.content) : null;\n\t\tif (body.menuName !== undefined) updates.menu_name = body.menuName || null;\n\t\tif (body.componentId !== undefined) updates.component_id = body.componentId || null;\n\t\tif (body.componentProps !== undefined)\n\t\t\tupdates.component_props = body.componentProps ? JSON.stringify(body.componentProps) : null;\n\n\t\tif (Object.keys(updates).length === 0) {\n\t\t\treturn apiError(\"VALIDATION_ERROR\", \"No fields to update\", 400);\n\t\t}\n\n\t\tawait db.updateTable(\"_emdash_widgets\").set(updates).where(\"id\", \"=\", id).execute();\n\n\t\tconst widget = await db\n\t\t\t.selectFrom(\"_emdash_widgets\")\n\t\t\t.selectAll()\n\t\t\t.$castTo<WidgetRow>()\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirstOrThrow();\n\n\t\treturn apiSuccess(rowToWidget(widget));\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update widget\", \"WIDGET_UPDATE_ERROR\");\n\t}\n};\n\nexport const DELETE: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst db = emdash.db;\n\tconst { name, id } = params;\n\n\tconst denied = requirePerm(user, \"widgets:manage\");\n\tif (denied) return denied;\n\n\tif (!name || !id) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"name and id are required\", 400);\n\t}\n\n\ttry {\n\t\t// Get the area\n\t\tconst area = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"name\", \"=\", name)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!area) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Widget area \"${name}\" not found`, 404);\n\t\t}\n\n\t\t// Check widget exists and belongs to this area\n\t\tconst existingWidget = await db\n\t\t\t.selectFrom(\"_emdash_widgets\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"area_id\", \"=\", area.id)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!existingWidget) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Widget \"${id}\" not found in area \"${name}\"`, 404);\n\t\t}\n\n\t\tawait db.deleteFrom(\"_emdash_widgets\").where(\"id\", \"=\", id).execute();\n\n\t\treturn apiSuccess({ deleted: true });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to delete widget\", \"WIDGET_DELETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;AAgBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,KAAK,OAAO;CAClB,MAAM,EAAE,MAAM,OAAO;CAErB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,QAAQ,CAAC,GACb,QAAO,SAAS,oBAAoB,4BAA4B,IAAI;AAGrE,KAAI;EAEH,MAAM,OAAO,MAAM,GACjB,WAAW,uBAAuB,CAClC,OAAO,KAAK,CACZ,MAAM,QAAQ,KAAK,KAAK,CACxB,kBAAkB;AAEpB,MAAI,CAAC,KACJ,QAAO,SAAS,aAAa,gBAAgB,KAAK,cAAc,IAAI;AAWrE,MAAI,CAPmB,MAAM,GAC3B,WAAW,kBAAkB,CAC7B,OAAO,KAAK,CACZ,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,WAAW,KAAK,KAAK,GAAG,CAC9B,kBAAkB,CAGnB,QAAO,SAAS,aAAa,WAAW,GAAG,uBAAuB,KAAK,IAAI,IAAI;EAGhF,MAAM,OAAO,MAAM,UAAU,SAAS,iBAAiB;AACvD,MAAI,aAAa,KAAK,CAAE,QAAO;EAG/B,MAAM,UAAmC,EAAE;AAC3C,MAAI,KAAK,UAAU,OAAW,SAAQ,QAAQ,KAAK,SAAS;AAC5D,MAAI,KAAK,SAAS,OAAW,SAAQ,OAAO,KAAK;AACjD,MAAI,KAAK,YAAY,OACpB,SAAQ,UAAU,KAAK,UAAU,KAAK,UAAU,KAAK,QAAQ,GAAG;AACjE,MAAI,KAAK,aAAa,OAAW,SAAQ,YAAY,KAAK,YAAY;AACtE,MAAI,KAAK,gBAAgB,OAAW,SAAQ,eAAe,KAAK,eAAe;AAC/E,MAAI,KAAK,mBAAmB,OAC3B,SAAQ,kBAAkB,KAAK,iBAAiB,KAAK,UAAU,KAAK,eAAe,GAAG;AAEvF,MAAI,OAAO,KAAK,QAAQ,CAAC,WAAW,EACnC,QAAO,SAAS,oBAAoB,uBAAuB,IAAI;AAGhE,QAAM,GAAG,YAAY,kBAAkB,CAAC,IAAI,QAAQ,CAAC,MAAM,MAAM,KAAK,GAAG,CAAC,SAAS;AASnF,SAAO,WAAW,YAPH,MAAM,GACnB,WAAW,kBAAkB,CAC7B,WAAW,CACX,SAAoB,CACpB,MAAM,MAAM,KAAK,GAAG,CACpB,yBAAyB,CAEU,CAAC;UAC9B,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,sBAAsB;;;AAI7E,MAAa,SAAmB,OAAO,EAAE,QAAQ,aAAa;CAC7D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,KAAK,OAAO;CAClB,MAAM,EAAE,MAAM,OAAO;CAErB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,QAAQ,CAAC,GACb,QAAO,SAAS,oBAAoB,4BAA4B,IAAI;AAGrE,KAAI;EAEH,MAAM,OAAO,MAAM,GACjB,WAAW,uBAAuB,CAClC,OAAO,KAAK,CACZ,MAAM,QAAQ,KAAK,KAAK,CACxB,kBAAkB;AAEpB,MAAI,CAAC,KACJ,QAAO,SAAS,aAAa,gBAAgB,KAAK,cAAc,IAAI;AAWrE,MAAI,CAPmB,MAAM,GAC3B,WAAW,kBAAkB,CAC7B,OAAO,KAAK,CACZ,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,WAAW,KAAK,KAAK,GAAG,CAC9B,kBAAkB,CAGnB,QAAO,SAAS,aAAa,WAAW,GAAG,uBAAuB,KAAK,IAAI,IAAI;AAGhF,QAAM,GAAG,WAAW,kBAAkB,CAAC,MAAM,MAAM,KAAK,GAAG,CAAC,SAAS;AAErE,SAAO,WAAW,EAAE,SAAS,MAAM,CAAC;UAC5B,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,sBAAsB"}
+{"version":3,"file":"_id_.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/widget-areas/[name]/widgets/[id].ts"],"sourcesContent":["/**\n * Single widget endpoints\n *\n * PUT    /_emdash/api/widget-areas/:name/widgets/:id - Update widget\n * DELETE /_emdash/api/widget-areas/:name/widgets/:id - Delete widget\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { updateWidgetBody } from \"#api/schemas.js\";\nimport { widgetAreaTag } from \"#cache/chrome-tags.js\";\nimport { rowToWidget } from \"#widgets/index.js\";\nimport type { WidgetRow } from \"#widgets/types.js\";\n\nexport const prerender = false;\n\nexport const PUT: APIRoute = async ({ params, request, locals, cache }) => {\n\tconst { emdash, user } = locals;\n\tconst db = emdash.db;\n\tconst { name, id } = params;\n\n\tconst denied = requirePerm(user, \"widgets:manage\");\n\tif (denied) return denied;\n\n\tif (!name || !id) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"name and id are required\", 400);\n\t}\n\n\ttry {\n\t\t// Get the area\n\t\tconst area = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"name\", \"=\", name)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!area) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Widget area \"${name}\" not found`, 404);\n\t\t}\n\n\t\t// Check widget exists and belongs to this area\n\t\tconst existingWidget = await db\n\t\t\t.selectFrom(\"_emdash_widgets\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"area_id\", \"=\", area.id)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!existingWidget) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Widget \"${id}\" not found in area \"${name}\"`, 404);\n\t\t}\n\n\t\tconst body = await parseBody(request, updateWidgetBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Build update object (only update provided fields)\n\t\tconst updates: Record<string, unknown> = {};\n\t\tif (body.title !== undefined) updates.title = body.title || null;\n\t\tif (body.type !== undefined) updates.type = body.type;\n\t\tif (body.content !== undefined)\n\t\t\tupdates.content = body.content ? JSON.stringify(body.content) : null;\n\t\tif (body.menuName !== undefined) updates.menu_name = body.menuName || null;\n\t\tif (body.componentId !== undefined) updates.component_id = body.componentId || null;\n\t\tif (body.componentProps !== undefined)\n\t\t\tupdates.component_props = body.componentProps ? JSON.stringify(body.componentProps) : null;\n\n\t\tif (Object.keys(updates).length === 0) {\n\t\t\treturn apiError(\"VALIDATION_ERROR\", \"No fields to update\", 400);\n\t\t}\n\n\t\tawait db.updateTable(\"_emdash_widgets\").set(updates).where(\"id\", \"=\", id).execute();\n\n\t\tconst widget = await db\n\t\t\t.selectFrom(\"_emdash_widgets\")\n\t\t\t.selectAll()\n\t\t\t.$castTo<WidgetRow>()\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirstOrThrow();\n\n\t\tif (cache?.enabled) await cache.invalidate({ tags: [widgetAreaTag(name)] });\n\t\treturn apiSuccess(rowToWidget(widget));\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update widget\", \"WIDGET_UPDATE_ERROR\");\n\t}\n};\n\nexport const DELETE: APIRoute = async ({ params, locals, cache }) => {\n\tconst { emdash, user } = locals;\n\tconst db = emdash.db;\n\tconst { name, id } = params;\n\n\tconst denied = requirePerm(user, \"widgets:manage\");\n\tif (denied) return denied;\n\n\tif (!name || !id) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"name and id are required\", 400);\n\t}\n\n\ttry {\n\t\t// Get the area\n\t\tconst area = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"name\", \"=\", name)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!area) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Widget area \"${name}\" not found`, 404);\n\t\t}\n\n\t\t// Check widget exists and belongs to this area\n\t\tconst existingWidget = await db\n\t\t\t.selectFrom(\"_emdash_widgets\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.where(\"area_id\", \"=\", area.id)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!existingWidget) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Widget \"${id}\" not found in area \"${name}\"`, 404);\n\t\t}\n\n\t\tawait db.deleteFrom(\"_emdash_widgets\").where(\"id\", \"=\", id).execute();\n\n\t\tif (cache?.enabled) await cache.invalidate({ tags: [widgetAreaTag(name)] });\n\t\treturn apiSuccess({ deleted: true });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to delete widget\", \"WIDGET_DELETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;AAiBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,QAAQ,YAAY;CAC1E,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,KAAK,OAAO;CAClB,MAAM,EAAE,MAAM,OAAO;CAErB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,QAAQ,CAAC,GACb,QAAO,SAAS,oBAAoB,4BAA4B,IAAI;AAGrE,KAAI;EAEH,MAAM,OAAO,MAAM,GACjB,WAAW,uBAAuB,CAClC,OAAO,KAAK,CACZ,MAAM,QAAQ,KAAK,KAAK,CACxB,kBAAkB;AAEpB,MAAI,CAAC,KACJ,QAAO,SAAS,aAAa,gBAAgB,KAAK,cAAc,IAAI;AAWrE,MAAI,CAPmB,MAAM,GAC3B,WAAW,kBAAkB,CAC7B,OAAO,KAAK,CACZ,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,WAAW,KAAK,KAAK,GAAG,CAC9B,kBAAkB,CAGnB,QAAO,SAAS,aAAa,WAAW,GAAG,uBAAuB,KAAK,IAAI,IAAI;EAGhF,MAAM,OAAO,MAAM,UAAU,SAAS,iBAAiB;AACvD,MAAI,aAAa,KAAK,CAAE,QAAO;EAG/B,MAAM,UAAmC,EAAE;AAC3C,MAAI,KAAK,UAAU,OAAW,SAAQ,QAAQ,KAAK,SAAS;AAC5D,MAAI,KAAK,SAAS,OAAW,SAAQ,OAAO,KAAK;AACjD,MAAI,KAAK,YAAY,OACpB,SAAQ,UAAU,KAAK,UAAU,KAAK,UAAU,KAAK,QAAQ,GAAG;AACjE,MAAI,KAAK,aAAa,OAAW,SAAQ,YAAY,KAAK,YAAY;AACtE,MAAI,KAAK,gBAAgB,OAAW,SAAQ,eAAe,KAAK,eAAe;AAC/E,MAAI,KAAK,mBAAmB,OAC3B,SAAQ,kBAAkB,KAAK,iBAAiB,KAAK,UAAU,KAAK,eAAe,GAAG;AAEvF,MAAI,OAAO,KAAK,QAAQ,CAAC,WAAW,EACnC,QAAO,SAAS,oBAAoB,uBAAuB,IAAI;AAGhE,QAAM,GAAG,YAAY,kBAAkB,CAAC,IAAI,QAAQ,CAAC,MAAM,MAAM,KAAK,GAAG,CAAC,SAAS;EAEnF,MAAM,SAAS,MAAM,GACnB,WAAW,kBAAkB,CAC7B,WAAW,CACX,SAAoB,CACpB,MAAM,MAAM,KAAK,GAAG,CACpB,yBAAyB;AAE3B,MAAI,OAAO,QAAS,OAAM,MAAM,WAAW,EAAE,MAAM,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;AAC3E,SAAO,WAAW,YAAY,OAAO,CAAC;UAC9B,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,sBAAsB;;;AAI7E,MAAa,SAAmB,OAAO,EAAE,QAAQ,QAAQ,YAAY;CACpE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,KAAK,OAAO;CAClB,MAAM,EAAE,MAAM,OAAO;CAErB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,QAAQ,CAAC,GACb,QAAO,SAAS,oBAAoB,4BAA4B,IAAI;AAGrE,KAAI;EAEH,MAAM,OAAO,MAAM,GACjB,WAAW,uBAAuB,CAClC,OAAO,KAAK,CACZ,MAAM,QAAQ,KAAK,KAAK,CACxB,kBAAkB;AAEpB,MAAI,CAAC,KACJ,QAAO,SAAS,aAAa,gBAAgB,KAAK,cAAc,IAAI;AAWrE,MAAI,CAPmB,MAAM,GAC3B,WAAW,kBAAkB,CAC7B,OAAO,KAAK,CACZ,MAAM,MAAM,KAAK,GAAG,CACpB,MAAM,WAAW,KAAK,KAAK,GAAG,CAC9B,kBAAkB,CAGnB,QAAO,SAAS,aAAa,WAAW,GAAG,uBAAuB,KAAK,IAAI,IAAI;AAGhF,QAAM,GAAG,WAAW,kBAAkB,CAAC,MAAM,MAAM,KAAK,GAAG,CAAC,SAAS;AAErE,MAAI,OAAO,QAAS,OAAM,MAAM,WAAW,EAAE,MAAM,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;AAC3E,SAAO,WAAW,EAAE,SAAS,MAAM,CAAC;UAC5B,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,sBAAsB"}

package/dist/astro/routes/api/widget-areas/_name_/widgets.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"widgets.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/widget-areas/[name]/widgets.ts"],"mappings":";;;cAgBa,SAAA;AAAA,cAEA,IAAA,EAAM,QAAA"}
+{"version":3,"file":"widgets.d.mts","names":[],"sources":["../../../../../../src/astro/routes/api/widget-areas/[name]/widgets.ts"],"mappings":";;;cAiBa,SAAA;AAAA,cAEA,IAAA,EAAM,QAAA"}

package/dist/astro/routes/api/widget-areas/_name_/widgets.mjs

@@ -3,21 +3,22 @@ import "../../../../../config-C3EBstHi.mjs";
 import "../../../../../base64-CvLhUKQv.mjs";
 import "../../../../../types-CQPWhPxE.mjs";
 import "../../../../../request-cache-DH9zdCOD.mjs";
-import "../../../../../loader-ZsjE4paL.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-D9w94fjV.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-BRJg1kz8.mjs";
-import "../../../../../media-BjwNuLEu.mjs";
-import { m as createWidgetBody } from "../../../../../redirects-CRIM55KH.mjs";
-import "../../../../../relations-BTPM2saV.mjs";
-import "../../../../../status-DDu8HIQl.mjs";
+import { i as widgetAreaTag } from "../../../../../chrome-tags-D8fiZG94.mjs";
+import "../../../../../loader-Z8vl7zTq.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DFrQjppn.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-Ckpg-Qfp.mjs";
+import "../../../../../media-BHjus86Y.mjs";
+import { m as createWidgetBody } from "../../../../../redirects-BLNOWQTn.mjs";
+import "../../../../../relations-C4htk5sb.mjs";
+import "../../../../../status-B777-dXz.mjs";
 import "../../../../../api/schemas/index.mjs";
-import { i as rowToWidget } from "../../../../../widgets-CpmZd9Q-.mjs";
-import { r as requirePerm } from "../../../../../authorize-ByYs-Uxs.mjs";
+import { a as rowToWidget } from "../../../../../widgets-D3gJ10xU.mjs";
+import { r as requirePerm } from "../../../../../authorize-Bkf_UHhD.mjs";
 import { ulid } from "ulidx";
 
 //#region src/astro/routes/api/widget-areas/[name]/widgets.ts
 const prerender = false;
-const POST = async ({ params, request, locals }) => {
+const POST = async ({ params, request, locals, cache }) => {
 	const { emdash, user } = locals;
 	const db = emdash.db;
 	const { name } = params;
@@ -42,7 +43,9 @@ const POST = async ({ params, request, locals }) => {
 			component_id: body.componentId ?? null,
 			component_props: body.componentProps ? JSON.stringify(body.componentProps) : null
 		}).execute();
-		return apiSuccess(rowToWidget(await db.selectFrom("_emdash_widgets").selectAll().$castTo().where("id", "=", id).executeTakeFirstOrThrow()), 201);
+		const widget = await db.selectFrom("_emdash_widgets").selectAll().$castTo().where("id", "=", id).executeTakeFirstOrThrow();
+		if (cache?.enabled) await cache.invalidate({ tags: [widgetAreaTag(name)] });
+		return apiSuccess(rowToWidget(widget), 201);
 	} catch (error) {
 		return handleError(error, "Failed to create widget", "WIDGET_CREATE_ERROR");
 	}

package/dist/astro/routes/api/widget-areas/_name_/widgets.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"widgets.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/widget-areas/[name]/widgets.ts"],"sourcesContent":["/**\n * Widgets CRUD endpoints\n *\n * POST /_emdash/api/widget-areas/:name/widgets - Add widget\n */\n\nimport type { APIRoute } from \"astro\";\nimport { ulid } from \"ulidx\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { createWidgetBody } from \"#api/schemas.js\";\nimport { rowToWidget } from \"#widgets/index.js\";\nimport type { WidgetRow } from \"#widgets/types.js\";\n\nexport const prerender = false;\n\nexport const POST: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst db = emdash.db;\n\tconst { name } = params;\n\n\tconst denied = requirePerm(user, \"widgets:manage\");\n\tif (denied) return denied;\n\n\tif (!name) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"name is required\", 400);\n\t}\n\n\ttry {\n\t\t// Get the area\n\t\tconst area = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"name\", \"=\", name)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!area) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Widget area \"${name}\" not found`, 404);\n\t\t}\n\n\t\tconst body = await parseBody(request, createWidgetBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Get max sort_order\n\t\tconst maxOrder = await db\n\t\t\t.selectFrom(\"_emdash_widgets\")\n\t\t\t.select(({ fn }) => fn.max(\"sort_order\").as(\"maxOrder\"))\n\t\t\t.where(\"area_id\", \"=\", area.id)\n\t\t\t.executeTakeFirst();\n\n\t\tconst sortOrder = (maxOrder?.maxOrder ?? -1) + 1;\n\n\t\t// Prepare values\n\t\tconst id = ulid();\n\t\tawait db\n\t\t\t.insertInto(\"_emdash_widgets\")\n\t\t\t.values({\n\t\t\t\tid,\n\t\t\t\tarea_id: area.id,\n\t\t\t\tsort_order: sortOrder,\n\t\t\t\ttype: body.type,\n\t\t\t\ttitle: body.title ?? null,\n\t\t\t\tcontent: body.content ? JSON.stringify(body.content) : null,\n\t\t\t\tmenu_name: body.menuName ?? null,\n\t\t\t\tcomponent_id: body.componentId ?? null,\n\t\t\t\tcomponent_props: body.componentProps ? JSON.stringify(body.componentProps) : null,\n\t\t\t})\n\t\t\t.execute();\n\n\t\tconst widget = await db\n\t\t\t.selectFrom(\"_emdash_widgets\")\n\t\t\t.selectAll()\n\t\t\t.$castTo<WidgetRow>()\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirstOrThrow();\n\n\t\treturn apiSuccess(rowToWidget(widget), 201);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create widget\", \"WIDGET_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;AAgBA,MAAa,YAAY;AAEzB,MAAa,OAAiB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACpE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,KAAK,OAAO;CAClB,MAAM,EAAE,SAAS;CAEjB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,KACJ,QAAO,SAAS,oBAAoB,oBAAoB,IAAI;AAG7D,KAAI;EAEH,MAAM,OAAO,MAAM,GACjB,WAAW,uBAAuB,CAClC,OAAO,KAAK,CACZ,MAAM,QAAQ,KAAK,KAAK,CACxB,kBAAkB;AAEpB,MAAI,CAAC,KACJ,QAAO,SAAS,aAAa,gBAAgB,KAAK,cAAc,IAAI;EAGrE,MAAM,OAAO,MAAM,UAAU,SAAS,iBAAiB;AACvD,MAAI,aAAa,KAAK,CAAE,QAAO;EAS/B,MAAM,cANW,MAAM,GACrB,WAAW,kBAAkB,CAC7B,QAAQ,EAAE,SAAS,GAAG,IAAI,aAAa,CAAC,GAAG,WAAW,CAAC,CACvD,MAAM,WAAW,KAAK,KAAK,GAAG,CAC9B,kBAAkB,GAES,YAAY,MAAM;EAG/C,MAAM,KAAK,MAAM;AACjB,QAAM,GACJ,WAAW,kBAAkB,CAC7B,OAAO;GACP;GACA,SAAS,KAAK;GACd,YAAY;GACZ,MAAM,KAAK;GACX,OAAO,KAAK,SAAS;GACrB,SAAS,KAAK,UAAU,KAAK,UAAU,KAAK,QAAQ,GAAG;GACvD,WAAW,KAAK,YAAY;GAC5B,cAAc,KAAK,eAAe;GAClC,iBAAiB,KAAK,iBAAiB,KAAK,UAAU,KAAK,eAAe,GAAG;GAC7E,CAAC,CACD,SAAS;AASX,SAAO,WAAW,YAPH,MAAM,GACnB,WAAW,kBAAkB,CAC7B,WAAW,CACX,SAAoB,CACpB,MAAM,MAAM,KAAK,GAAG,CACpB,yBAAyB,CAEU,EAAE,IAAI;UACnC,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,sBAAsB"}
+{"version":3,"file":"widgets.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/widget-areas/[name]/widgets.ts"],"sourcesContent":["/**\n * Widgets CRUD endpoints\n *\n * POST /_emdash/api/widget-areas/:name/widgets - Add widget\n */\n\nimport type { APIRoute } from \"astro\";\nimport { ulid } from \"ulidx\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { createWidgetBody } from \"#api/schemas.js\";\nimport { widgetAreaTag } from \"#cache/chrome-tags.js\";\nimport { rowToWidget } from \"#widgets/index.js\";\nimport type { WidgetRow } from \"#widgets/types.js\";\n\nexport const prerender = false;\n\nexport const POST: APIRoute = async ({ params, request, locals, cache }) => {\n\tconst { emdash, user } = locals;\n\tconst db = emdash.db;\n\tconst { name } = params;\n\n\tconst denied = requirePerm(user, \"widgets:manage\");\n\tif (denied) return denied;\n\n\tif (!name) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"name is required\", 400);\n\t}\n\n\ttry {\n\t\t// Get the area\n\t\tconst area = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"name\", \"=\", name)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!area) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Widget area \"${name}\" not found`, 404);\n\t\t}\n\n\t\tconst body = await parseBody(request, createWidgetBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Get max sort_order\n\t\tconst maxOrder = await db\n\t\t\t.selectFrom(\"_emdash_widgets\")\n\t\t\t.select(({ fn }) => fn.max(\"sort_order\").as(\"maxOrder\"))\n\t\t\t.where(\"area_id\", \"=\", area.id)\n\t\t\t.executeTakeFirst();\n\n\t\tconst sortOrder = (maxOrder?.maxOrder ?? -1) + 1;\n\n\t\t// Prepare values\n\t\tconst id = ulid();\n\t\tawait db\n\t\t\t.insertInto(\"_emdash_widgets\")\n\t\t\t.values({\n\t\t\t\tid,\n\t\t\t\tarea_id: area.id,\n\t\t\t\tsort_order: sortOrder,\n\t\t\t\ttype: body.type,\n\t\t\t\ttitle: body.title ?? null,\n\t\t\t\tcontent: body.content ? JSON.stringify(body.content) : null,\n\t\t\t\tmenu_name: body.menuName ?? null,\n\t\t\t\tcomponent_id: body.componentId ?? null,\n\t\t\t\tcomponent_props: body.componentProps ? JSON.stringify(body.componentProps) : null,\n\t\t\t})\n\t\t\t.execute();\n\n\t\tconst widget = await db\n\t\t\t.selectFrom(\"_emdash_widgets\")\n\t\t\t.selectAll()\n\t\t\t.$castTo<WidgetRow>()\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirstOrThrow();\n\n\t\tif (cache?.enabled) await cache.invalidate({ tags: [widgetAreaTag(name)] });\n\t\treturn apiSuccess(rowToWidget(widget), 201);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create widget\", \"WIDGET_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAiBA,MAAa,YAAY;AAEzB,MAAa,OAAiB,OAAO,EAAE,QAAQ,SAAS,QAAQ,YAAY;CAC3E,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,KAAK,OAAO;CAClB,MAAM,EAAE,SAAS;CAEjB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,KACJ,QAAO,SAAS,oBAAoB,oBAAoB,IAAI;AAG7D,KAAI;EAEH,MAAM,OAAO,MAAM,GACjB,WAAW,uBAAuB,CAClC,OAAO,KAAK,CACZ,MAAM,QAAQ,KAAK,KAAK,CACxB,kBAAkB;AAEpB,MAAI,CAAC,KACJ,QAAO,SAAS,aAAa,gBAAgB,KAAK,cAAc,IAAI;EAGrE,MAAM,OAAO,MAAM,UAAU,SAAS,iBAAiB;AACvD,MAAI,aAAa,KAAK,CAAE,QAAO;EAS/B,MAAM,cANW,MAAM,GACrB,WAAW,kBAAkB,CAC7B,QAAQ,EAAE,SAAS,GAAG,IAAI,aAAa,CAAC,GAAG,WAAW,CAAC,CACvD,MAAM,WAAW,KAAK,KAAK,GAAG,CAC9B,kBAAkB,GAES,YAAY,MAAM;EAG/C,MAAM,KAAK,MAAM;AACjB,QAAM,GACJ,WAAW,kBAAkB,CAC7B,OAAO;GACP;GACA,SAAS,KAAK;GACd,YAAY;GACZ,MAAM,KAAK;GACX,OAAO,KAAK,SAAS;GACrB,SAAS,KAAK,UAAU,KAAK,UAAU,KAAK,QAAQ,GAAG;GACvD,WAAW,KAAK,YAAY;GAC5B,cAAc,KAAK,eAAe;GAClC,iBAAiB,KAAK,iBAAiB,KAAK,UAAU,KAAK,eAAe,GAAG;GAC7E,CAAC,CACD,SAAS;EAEX,MAAM,SAAS,MAAM,GACnB,WAAW,kBAAkB,CAC7B,WAAW,CACX,SAAoB,CACpB,MAAM,MAAM,KAAK,GAAG,CACpB,yBAAyB;AAE3B,MAAI,OAAO,QAAS,OAAM,MAAM,WAAW,EAAE,MAAM,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;AAC3E,SAAO,WAAW,YAAY,OAAO,EAAE,IAAI;UACnC,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,sBAAsB"}

package/dist/astro/routes/api/widget-areas/_name_.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"_name_.d.mts","names":[],"sources":["../../../../../src/astro/routes/api/widget-areas/[name].ts"],"mappings":";;;cAca,SAAA;AAAA,cAEA,GAAA,EAAK,QAAA;AAAA,cA0CL,MAAA,EAAQ,QAAA"}
+{"version":3,"file":"_name_.d.mts","names":[],"sources":["../../../../../src/astro/routes/api/widget-areas/[name].ts"],"mappings":";;;cAea,SAAA;AAAA,cAEA,GAAA,EAAK,QAAA;AAAA,cA0CL,MAAA,EAAQ,QAAA"}

package/dist/astro/routes/api/widget-areas/_name_.mjs

@@ -3,10 +3,11 @@ import "../../../../config-C3EBstHi.mjs";
 import "../../../../base64-CvLhUKQv.mjs";
 import "../../../../types-CQPWhPxE.mjs";
 import "../../../../request-cache-DH9zdCOD.mjs";
-import "../../../../loader-ZsjE4paL.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-D9w94fjV.mjs";
-import { i as rowToWidget } from "../../../../widgets-CpmZd9Q-.mjs";
-import { r as requirePerm } from "../../../../authorize-ByYs-Uxs.mjs";
+import { i as widgetAreaTag } from "../../../../chrome-tags-D8fiZG94.mjs";
+import "../../../../loader-Z8vl7zTq.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DFrQjppn.mjs";
+import { a as rowToWidget } from "../../../../widgets-D3gJ10xU.mjs";
+import { r as requirePerm } from "../../../../authorize-Bkf_UHhD.mjs";
 
 //#region src/astro/routes/api/widget-areas/[name].ts
 const prerender = false;
@@ -29,7 +30,7 @@ const GET = async ({ params, locals }) => {
 		return handleError(error, "Failed to fetch widget area", "WIDGET_AREA_GET_ERROR");
 	}
 };
-const DELETE = async ({ params, locals }) => {
+const DELETE = async ({ params, locals, cache }) => {
 	const { emdash, user } = locals;
 	const db = emdash.db;
 	const { name } = params;
@@ -40,6 +41,7 @@ const DELETE = async ({ params, locals }) => {
 		const area = await db.selectFrom("_emdash_widget_areas").select("id").where("name", "=", name).executeTakeFirst();
 		if (!area) return apiError("NOT_FOUND", `Widget area "${name}" not found`, 404);
 		await db.deleteFrom("_emdash_widget_areas").where("id", "=", area.id).execute();
+		if (cache?.enabled) await cache.invalidate({ tags: [widgetAreaTag(name)] });
 		return apiSuccess({ deleted: true });
 	} catch (error) {
 		return handleError(error, "Failed to delete widget area", "WIDGET_AREA_DELETE_ERROR");

package/dist/astro/routes/api/widget-areas/_name_.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"_name_.mjs","names":[],"sources":["../../../../../src/astro/routes/api/widget-areas/[name].ts"],"sourcesContent":["/**\n * Widget area by name endpoints\n *\n * GET    /_emdash/api/widget-areas/:name - Get area with widgets\n * DELETE /_emdash/api/widget-areas/:name - Delete area\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { rowToWidget } from \"#widgets/index.js\";\nimport type { WidgetRow } from \"#widgets/types.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst db = emdash.db;\n\tconst { name } = params;\n\n\tconst denied = requirePerm(user, \"widgets:read\");\n\tif (denied) return denied;\n\n\tif (!name) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"name is required\", 400);\n\t}\n\n\ttry {\n\t\t// Get the area\n\t\tconst area = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas\")\n\t\t\t.selectAll()\n\t\t\t.where(\"name\", \"=\", name)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!area) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Widget area \"${name}\" not found`, 404);\n\t\t}\n\n\t\t// Get widgets for this area\n\t\tconst widgets = await db\n\t\t\t.selectFrom(\"_emdash_widgets\")\n\t\t\t.selectAll()\n\t\t\t.$castTo<WidgetRow>()\n\t\t\t.where(\"area_id\", \"=\", area.id)\n\t\t\t.orderBy(\"sort_order\", \"asc\")\n\t\t\t.execute();\n\n\t\treturn apiSuccess({\n\t\t\t...area,\n\t\t\twidgets: widgets.map((row) => rowToWidget(row)),\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to fetch widget area\", \"WIDGET_AREA_GET_ERROR\");\n\t}\n};\n\nexport const DELETE: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst db = emdash.db;\n\tconst { name } = params;\n\n\tconst denied = requirePerm(user, \"widgets:manage\");\n\tif (denied) return denied;\n\n\tif (!name) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"name is required\", 400);\n\t}\n\n\ttry {\n\t\t// Check if area exists\n\t\tconst area = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"name\", \"=\", name)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!area) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Widget area \"${name}\" not found`, 404);\n\t\t}\n\n\t\t// Delete area (widgets cascade)\n\t\tawait db.deleteFrom(\"_emdash_widget_areas\").where(\"id\", \"=\", area.id).execute();\n\n\t\treturn apiSuccess({ deleted: true });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to delete widget area\", \"WIDGET_AREA_DELETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;AAcA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,KAAK,OAAO;CAClB,MAAM,EAAE,SAAS;CAEjB,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,KACJ,QAAO,SAAS,oBAAoB,oBAAoB,IAAI;AAG7D,KAAI;EAEH,MAAM,OAAO,MAAM,GACjB,WAAW,uBAAuB,CAClC,WAAW,CACX,MAAM,QAAQ,KAAK,KAAK,CACxB,kBAAkB;AAEpB,MAAI,CAAC,KACJ,QAAO,SAAS,aAAa,gBAAgB,KAAK,cAAc,IAAI;EAIrE,MAAM,UAAU,MAAM,GACpB,WAAW,kBAAkB,CAC7B,WAAW,CACX,SAAoB,CACpB,MAAM,WAAW,KAAK,KAAK,GAAG,CAC9B,QAAQ,cAAc,MAAM,CAC5B,SAAS;AAEX,SAAO,WAAW;GACjB,GAAG;GACH,SAAS,QAAQ,KAAK,QAAQ,YAAY,IAAI,CAAC;GAC/C,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,+BAA+B,wBAAwB;;;AAInF,MAAa,SAAmB,OAAO,EAAE,QAAQ,aAAa;CAC7D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,KAAK,OAAO;CAClB,MAAM,EAAE,SAAS;CAEjB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,KACJ,QAAO,SAAS,oBAAoB,oBAAoB,IAAI;AAG7D,KAAI;EAEH,MAAM,OAAO,MAAM,GACjB,WAAW,uBAAuB,CAClC,OAAO,KAAK,CACZ,MAAM,QAAQ,KAAK,KAAK,CACxB,kBAAkB;AAEpB,MAAI,CAAC,KACJ,QAAO,SAAS,aAAa,gBAAgB,KAAK,cAAc,IAAI;AAIrE,QAAM,GAAG,WAAW,uBAAuB,CAAC,MAAM,MAAM,KAAK,KAAK,GAAG,CAAC,SAAS;AAE/E,SAAO,WAAW,EAAE,SAAS,MAAM,CAAC;UAC5B,OAAO;AACf,SAAO,YAAY,OAAO,gCAAgC,2BAA2B"}
+{"version":3,"file":"_name_.mjs","names":[],"sources":["../../../../../src/astro/routes/api/widget-areas/[name].ts"],"sourcesContent":["/**\n * Widget area by name endpoints\n *\n * GET    /_emdash/api/widget-areas/:name - Get area with widgets\n * DELETE /_emdash/api/widget-areas/:name - Delete area\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { widgetAreaTag } from \"#cache/chrome-tags.js\";\nimport { rowToWidget } from \"#widgets/index.js\";\nimport type { WidgetRow } from \"#widgets/types.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst db = emdash.db;\n\tconst { name } = params;\n\n\tconst denied = requirePerm(user, \"widgets:read\");\n\tif (denied) return denied;\n\n\tif (!name) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"name is required\", 400);\n\t}\n\n\ttry {\n\t\t// Get the area\n\t\tconst area = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas\")\n\t\t\t.selectAll()\n\t\t\t.where(\"name\", \"=\", name)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!area) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Widget area \"${name}\" not found`, 404);\n\t\t}\n\n\t\t// Get widgets for this area\n\t\tconst widgets = await db\n\t\t\t.selectFrom(\"_emdash_widgets\")\n\t\t\t.selectAll()\n\t\t\t.$castTo<WidgetRow>()\n\t\t\t.where(\"area_id\", \"=\", area.id)\n\t\t\t.orderBy(\"sort_order\", \"asc\")\n\t\t\t.execute();\n\n\t\treturn apiSuccess({\n\t\t\t...area,\n\t\t\twidgets: widgets.map((row) => rowToWidget(row)),\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to fetch widget area\", \"WIDGET_AREA_GET_ERROR\");\n\t}\n};\n\nexport const DELETE: APIRoute = async ({ params, locals, cache }) => {\n\tconst { emdash, user } = locals;\n\tconst db = emdash.db;\n\tconst { name } = params;\n\n\tconst denied = requirePerm(user, \"widgets:manage\");\n\tif (denied) return denied;\n\n\tif (!name) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"name is required\", 400);\n\t}\n\n\ttry {\n\t\t// Check if area exists\n\t\tconst area = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"name\", \"=\", name)\n\t\t\t.executeTakeFirst();\n\n\t\tif (!area) {\n\t\t\treturn apiError(\"NOT_FOUND\", `Widget area \"${name}\" not found`, 404);\n\t\t}\n\n\t\t// Delete area (widgets cascade)\n\t\tawait db.deleteFrom(\"_emdash_widget_areas\").where(\"id\", \"=\", area.id).execute();\n\n\t\tif (cache?.enabled) await cache.invalidate({ tags: [widgetAreaTag(name)] });\n\t\treturn apiSuccess({ deleted: true });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to delete widget area\", \"WIDGET_AREA_DELETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;AAeA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,KAAK,OAAO;CAClB,MAAM,EAAE,SAAS;CAEjB,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,KACJ,QAAO,SAAS,oBAAoB,oBAAoB,IAAI;AAG7D,KAAI;EAEH,MAAM,OAAO,MAAM,GACjB,WAAW,uBAAuB,CAClC,WAAW,CACX,MAAM,QAAQ,KAAK,KAAK,CACxB,kBAAkB;AAEpB,MAAI,CAAC,KACJ,QAAO,SAAS,aAAa,gBAAgB,KAAK,cAAc,IAAI;EAIrE,MAAM,UAAU,MAAM,GACpB,WAAW,kBAAkB,CAC7B,WAAW,CACX,SAAoB,CACpB,MAAM,WAAW,KAAK,KAAK,GAAG,CAC9B,QAAQ,cAAc,MAAM,CAC5B,SAAS;AAEX,SAAO,WAAW;GACjB,GAAG;GACH,SAAS,QAAQ,KAAK,QAAQ,YAAY,IAAI,CAAC;GAC/C,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,+BAA+B,wBAAwB;;;AAInF,MAAa,SAAmB,OAAO,EAAE,QAAQ,QAAQ,YAAY;CACpE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,KAAK,OAAO;CAClB,MAAM,EAAE,SAAS;CAEjB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,KACJ,QAAO,SAAS,oBAAoB,oBAAoB,IAAI;AAG7D,KAAI;EAEH,MAAM,OAAO,MAAM,GACjB,WAAW,uBAAuB,CAClC,OAAO,KAAK,CACZ,MAAM,QAAQ,KAAK,KAAK,CACxB,kBAAkB;AAEpB,MAAI,CAAC,KACJ,QAAO,SAAS,aAAa,gBAAgB,KAAK,cAAc,IAAI;AAIrE,QAAM,GAAG,WAAW,uBAAuB,CAAC,MAAM,MAAM,KAAK,KAAK,GAAG,CAAC,SAAS;AAE/E,MAAI,OAAO,QAAS,OAAM,MAAM,WAAW,EAAE,MAAM,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;AAC3E,SAAO,WAAW,EAAE,SAAS,MAAM,CAAC;UAC5B,OAAO;AACf,SAAO,YAAY,OAAO,gCAAgC,2BAA2B"}

package/dist/astro/routes/api/widget-areas/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../../src/astro/routes/api/widget-areas/index.ts"],"mappings":";;;cAiBa,SAAA;AAAA,cAEA,GAAA,EAAK,QAAA;AAAA,cAuCL,IAAA,EAAM,QAAA"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../../src/astro/routes/api/widget-areas/index.ts"],"mappings":";;;cAkBa,SAAA;AAAA,cAEA,GAAA,EAAK,QAAA;AAAA,cAuCL,IAAA,EAAM,QAAA"}

package/dist/astro/routes/api/widget-areas/index.mjs

@@ -3,16 +3,17 @@ import "../../../../config-C3EBstHi.mjs";
 import "../../../../base64-CvLhUKQv.mjs";
 import "../../../../types-CQPWhPxE.mjs";
 import "../../../../request-cache-DH9zdCOD.mjs";
-import "../../../../loader-ZsjE4paL.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-D9w94fjV.mjs";
-import { n as parseBody, t as isParseError } from "../../../../parse-BRJg1kz8.mjs";
-import "../../../../media-BjwNuLEu.mjs";
-import { p as createWidgetAreaBody } from "../../../../redirects-CRIM55KH.mjs";
-import "../../../../relations-BTPM2saV.mjs";
-import "../../../../status-DDu8HIQl.mjs";
+import { i as widgetAreaTag } from "../../../../chrome-tags-D8fiZG94.mjs";
+import "../../../../loader-Z8vl7zTq.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DFrQjppn.mjs";
+import { n as parseBody, t as isParseError } from "../../../../parse-Ckpg-Qfp.mjs";
+import "../../../../media-BHjus86Y.mjs";
+import { p as createWidgetAreaBody } from "../../../../redirects-BLNOWQTn.mjs";
+import "../../../../relations-C4htk5sb.mjs";
+import "../../../../status-B777-dXz.mjs";
 import "../../../../api/schemas/index.mjs";
-import { i as rowToWidget } from "../../../../widgets-CpmZd9Q-.mjs";
-import { r as requirePerm } from "../../../../authorize-ByYs-Uxs.mjs";
+import { a as rowToWidget } from "../../../../widgets-D3gJ10xU.mjs";
+import { r as requirePerm } from "../../../../authorize-Bkf_UHhD.mjs";
 import { ulid } from "ulidx";
 
 //#region src/astro/routes/api/widget-areas/index.ts
@@ -36,7 +37,7 @@ const GET = async ({ locals }) => {
 		return handleError(error, "Failed to fetch widget areas", "WIDGET_AREA_LIST_ERROR");
 	}
 };
-const POST = async ({ request, locals }) => {
+const POST = async ({ request, locals, cache }) => {
 	const { emdash, user } = locals;
 	const db = emdash.db;
 	const denied = requirePerm(user, "widgets:manage");
@@ -52,7 +53,9 @@ const POST = async ({ request, locals }) => {
 			label: body.label,
 			description: body.description ?? null
 		}).execute();
-		return apiSuccess(await db.selectFrom("_emdash_widget_areas").selectAll().where("id", "=", id).executeTakeFirstOrThrow(), 201);
+		const area = await db.selectFrom("_emdash_widget_areas").selectAll().where("id", "=", id).executeTakeFirstOrThrow();
+		if (cache?.enabled) await cache.invalidate({ tags: [widgetAreaTag(area.name)] });
+		return apiSuccess(area, 201);
 	} catch (error) {
 		return handleError(error, "Failed to create widget area", "WIDGET_AREA_CREATE_ERROR");
 	}

package/dist/astro/routes/api/widget-areas/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../src/astro/routes/api/widget-areas/index.ts"],"sourcesContent":["/**\n * Widget areas list and create endpoints\n *\n * GET  /_emdash/api/widget-areas - List all widget areas\n * POST /_emdash/api/widget-areas - Create widget area\n */\n\nimport type { APIRoute } from \"astro\";\nimport { ulid } from \"ulidx\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { createWidgetAreaBody } from \"#api/schemas.js\";\nimport { rowToWidget } from \"#widgets/index.js\";\nimport type { WidgetRow } from \"#widgets/types.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ locals }) => {\n\tconst { emdash, user } = locals;\n\tconst db = emdash.db;\n\n\tconst denied = requirePerm(user, \"widgets:read\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst areas = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas\")\n\t\t\t.selectAll()\n\t\t\t.orderBy(\"name\", \"asc\")\n\t\t\t.execute();\n\n\t\t// Get widgets for each area (needed for drag-and-drop reordering in admin UI)\n\t\tconst areasWithWidgets = await Promise.all(\n\t\t\tareas.map(async (area) => {\n\t\t\t\tconst widgets = await db\n\t\t\t\t\t.selectFrom(\"_emdash_widgets\")\n\t\t\t\t\t.selectAll()\n\t\t\t\t\t.$castTo<WidgetRow>()\n\t\t\t\t\t.where(\"area_id\", \"=\", area.id)\n\t\t\t\t\t.orderBy(\"sort_order\", \"asc\")\n\t\t\t\t\t.execute();\n\n\t\t\t\treturn {\n\t\t\t\t\t...area,\n\t\t\t\t\twidgets: widgets.map((row) => rowToWidget(row)),\n\t\t\t\t\twidgetCount: widgets.length,\n\t\t\t\t};\n\t\t\t}),\n\t\t);\n\n\t\treturn apiSuccess({ items: areasWithWidgets });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to fetch widget areas\", \"WIDGET_AREA_LIST_ERROR\");\n\t}\n};\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst db = emdash.db;\n\n\tconst denied = requirePerm(user, \"widgets:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst body = await parseBody(request, createWidgetAreaBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Check if area name already exists\n\t\tconst existing = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"name\", \"=\", body.name)\n\t\t\t.executeTakeFirst();\n\n\t\tif (existing) {\n\t\t\treturn apiError(\"CONFLICT\", `Widget area with name \"${body.name}\" already exists`, 409);\n\t\t}\n\n\t\tconst id = ulid();\n\t\tawait db\n\t\t\t.insertInto(\"_emdash_widget_areas\")\n\t\t\t.values({\n\t\t\t\tid,\n\t\t\t\tname: body.name,\n\t\t\t\tlabel: body.label,\n\t\t\t\tdescription: body.description ?? null,\n\t\t\t})\n\t\t\t.execute();\n\n\t\tconst area = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas\")\n\t\t\t.selectAll()\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirstOrThrow();\n\n\t\treturn apiSuccess(area, 201);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create widget area\", \"WIDGET_AREA_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;AAiBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,aAAa;CAClD,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,KAAK,OAAO;CAElB,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,QAAQ,MAAM,GAClB,WAAW,uBAAuB,CAClC,WAAW,CACX,QAAQ,QAAQ,MAAM,CACtB,SAAS;AAqBX,SAAO,WAAW,EAAE,OAlBK,MAAM,QAAQ,IACtC,MAAM,IAAI,OAAO,SAAS;GACzB,MAAM,UAAU,MAAM,GACpB,WAAW,kBAAkB,CAC7B,WAAW,CACX,SAAoB,CACpB,MAAM,WAAW,KAAK,KAAK,GAAG,CAC9B,QAAQ,cAAc,MAAM,CAC5B,SAAS;AAEX,UAAO;IACN,GAAG;IACH,SAAS,QAAQ,KAAK,QAAQ,YAAY,IAAI,CAAC;IAC/C,aAAa,QAAQ;IACrB;IACA,CACF,EAE4C,CAAC;UACtC,OAAO;AACf,SAAO,YAAY,OAAO,gCAAgC,yBAAyB;;;AAIrF,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,KAAK,OAAO;CAElB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,qBAAqB;AAC3D,MAAI,aAAa,KAAK,CAAE,QAAO;AAS/B,MANiB,MAAM,GACrB,WAAW,uBAAuB,CAClC,OAAO,KAAK,CACZ,MAAM,QAAQ,KAAK,KAAK,KAAK,CAC7B,kBAAkB,CAGnB,QAAO,SAAS,YAAY,0BAA0B,KAAK,KAAK,mBAAmB,IAAI;EAGxF,MAAM,KAAK,MAAM;AACjB,QAAM,GACJ,WAAW,uBAAuB,CAClC,OAAO;GACP;GACA,MAAM,KAAK;GACX,OAAO,KAAK;GACZ,aAAa,KAAK,eAAe;GACjC,CAAC,CACD,SAAS;AAQX,SAAO,WANM,MAAM,GACjB,WAAW,uBAAuB,CAClC,WAAW,CACX,MAAM,MAAM,KAAK,GAAG,CACpB,yBAAyB,EAEH,IAAI;UACpB,OAAO;AACf,SAAO,YAAY,OAAO,gCAAgC,2BAA2B"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../src/astro/routes/api/widget-areas/index.ts"],"sourcesContent":["/**\n * Widget areas list and create endpoints\n *\n * GET  /_emdash/api/widget-areas - List all widget areas\n * POST /_emdash/api/widget-areas - Create widget area\n */\n\nimport type { APIRoute } from \"astro\";\nimport { ulid } from \"ulidx\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { createWidgetAreaBody } from \"#api/schemas.js\";\nimport { widgetAreaTag } from \"#cache/chrome-tags.js\";\nimport { rowToWidget } from \"#widgets/index.js\";\nimport type { WidgetRow } from \"#widgets/types.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ locals }) => {\n\tconst { emdash, user } = locals;\n\tconst db = emdash.db;\n\n\tconst denied = requirePerm(user, \"widgets:read\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst areas = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas\")\n\t\t\t.selectAll()\n\t\t\t.orderBy(\"name\", \"asc\")\n\t\t\t.execute();\n\n\t\t// Get widgets for each area (needed for drag-and-drop reordering in admin UI)\n\t\tconst areasWithWidgets = await Promise.all(\n\t\t\tareas.map(async (area) => {\n\t\t\t\tconst widgets = await db\n\t\t\t\t\t.selectFrom(\"_emdash_widgets\")\n\t\t\t\t\t.selectAll()\n\t\t\t\t\t.$castTo<WidgetRow>()\n\t\t\t\t\t.where(\"area_id\", \"=\", area.id)\n\t\t\t\t\t.orderBy(\"sort_order\", \"asc\")\n\t\t\t\t\t.execute();\n\n\t\t\t\treturn {\n\t\t\t\t\t...area,\n\t\t\t\t\twidgets: widgets.map((row) => rowToWidget(row)),\n\t\t\t\t\twidgetCount: widgets.length,\n\t\t\t\t};\n\t\t\t}),\n\t\t);\n\n\t\treturn apiSuccess({ items: areasWithWidgets });\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to fetch widget areas\", \"WIDGET_AREA_LIST_ERROR\");\n\t}\n};\n\nexport const POST: APIRoute = async ({ request, locals, cache }) => {\n\tconst { emdash, user } = locals;\n\tconst db = emdash.db;\n\n\tconst denied = requirePerm(user, \"widgets:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst body = await parseBody(request, createWidgetAreaBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Check if area name already exists\n\t\tconst existing = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas\")\n\t\t\t.select(\"id\")\n\t\t\t.where(\"name\", \"=\", body.name)\n\t\t\t.executeTakeFirst();\n\n\t\tif (existing) {\n\t\t\treturn apiError(\"CONFLICT\", `Widget area with name \"${body.name}\" already exists`, 409);\n\t\t}\n\n\t\tconst id = ulid();\n\t\tawait db\n\t\t\t.insertInto(\"_emdash_widget_areas\")\n\t\t\t.values({\n\t\t\t\tid,\n\t\t\t\tname: body.name,\n\t\t\t\tlabel: body.label,\n\t\t\t\tdescription: body.description ?? null,\n\t\t\t})\n\t\t\t.execute();\n\n\t\tconst area = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas\")\n\t\t\t.selectAll()\n\t\t\t.where(\"id\", \"=\", id)\n\t\t\t.executeTakeFirstOrThrow();\n\n\t\tif (cache?.enabled) await cache.invalidate({ tags: [widgetAreaTag(area.name)] });\n\t\treturn apiSuccess(area, 201);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create widget area\", \"WIDGET_AREA_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAkBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,aAAa;CAClD,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,KAAK,OAAO;CAElB,MAAM,SAAS,YAAY,MAAM,eAAe;AAChD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,QAAQ,MAAM,GAClB,WAAW,uBAAuB,CAClC,WAAW,CACX,QAAQ,QAAQ,MAAM,CACtB,SAAS;AAqBX,SAAO,WAAW,EAAE,OAlBK,MAAM,QAAQ,IACtC,MAAM,IAAI,OAAO,SAAS;GACzB,MAAM,UAAU,MAAM,GACpB,WAAW,kBAAkB,CAC7B,WAAW,CACX,SAAoB,CACpB,MAAM,WAAW,KAAK,KAAK,GAAG,CAC9B,QAAQ,cAAc,MAAM,CAC5B,SAAS;AAEX,UAAO;IACN,GAAG;IACH,SAAS,QAAQ,KAAK,QAAQ,YAAY,IAAI,CAAC;IAC/C,aAAa,QAAQ;IACrB;IACA,CACF,EAE4C,CAAC;UACtC,OAAO;AACf,SAAO,YAAY,OAAO,gCAAgC,yBAAyB;;;AAIrF,MAAa,OAAiB,OAAO,EAAE,SAAS,QAAQ,YAAY;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,KAAK,OAAO;CAElB,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,qBAAqB;AAC3D,MAAI,aAAa,KAAK,CAAE,QAAO;AAS/B,MANiB,MAAM,GACrB,WAAW,uBAAuB,CAClC,OAAO,KAAK,CACZ,MAAM,QAAQ,KAAK,KAAK,KAAK,CAC7B,kBAAkB,CAGnB,QAAO,SAAS,YAAY,0BAA0B,KAAK,KAAK,mBAAmB,IAAI;EAGxF,MAAM,KAAK,MAAM;AACjB,QAAM,GACJ,WAAW,uBAAuB,CAClC,OAAO;GACP;GACA,MAAM,KAAK;GACX,OAAO,KAAK;GACZ,aAAa,KAAK,eAAe;GACjC,CAAC,CACD,SAAS;EAEX,MAAM,OAAO,MAAM,GACjB,WAAW,uBAAuB,CAClC,WAAW,CACX,MAAM,MAAM,KAAK,GAAG,CACpB,yBAAyB;AAE3B,MAAI,OAAO,QAAS,OAAM,MAAM,WAAW,EAAE,MAAM,CAAC,cAAc,KAAK,KAAK,CAAC,EAAE,CAAC;AAChF,SAAO,WAAW,MAAM,IAAI;UACpB,OAAO;AACf,SAAO,YAAY,OAAO,gCAAgC,2BAA2B"}

package/dist/astro/routes/api/widget-components.mjs

@@ -1,7 +1,7 @@
 import "../../../base64-CvLhUKQv.mjs";
 import "../../../types-CQPWhPxE.mjs";
-import { n as apiSuccess, r as handleError } from "../../../error-D9w94fjV.mjs";
-import { t as getWidgetComponents } from "../../../components-v4U4DT2y.mjs";
+import { n as apiSuccess, r as handleError } from "../../../error-DFrQjppn.mjs";
+import { t as getWidgetComponents } from "../../../components-DJbo1z0S.mjs";
 
 //#region src/astro/routes/api/widget-components.ts
 const prerender = false;

package/dist/astro/routes/robots.txt.mjs

@@ -1,15 +1,15 @@
 import "../../dialect-helpers-BSbfaO3F.mjs";
 import "../../config-C3EBstHi.mjs";
 import "../../after-CBU2vkoO.mjs";
-import "../../object-cache-71tPfV4A.mjs";
+import "../../object-cache-DVKnyOfy.mjs";
 import "../../base64-CvLhUKQv.mjs";
 import "../../types-CQPWhPxE.mjs";
-import "../../media-D6SeAfBl.mjs";
+import "../../media-BBm8Wg3f.mjs";
 import "../../options-BHPeIbBd.mjs";
 import "../../request-cache-DH9zdCOD.mjs";
-import "../../loader-ZsjE4paL.mjs";
-import { a as getSiteSettingsWithDb } from "../../settings-BgN-0DT-.mjs";
-import { r as getPublicOrigin } from "../../public-url-DRz_AinV.mjs";
+import "../../loader-Z8vl7zTq.mjs";
+import { o as getSiteSettingsWithDb } from "../../settings--wobrkkC.mjs";
+import { r as getPublicOrigin } from "../../public-url-CarhZJgf.mjs";
 
 //#region src/astro/routes/robots.txt.ts
 const prerender = false;

package/dist/astro/routes/sitemap-_collection_.xml.mjs

@@ -1,18 +1,18 @@
 import "../../dialect-helpers-BSbfaO3F.mjs";
 import { i as isI18nEnabled, r as getI18nConfig } from "../../config-C3EBstHi.mjs";
 import "../../after-CBU2vkoO.mjs";
-import "../../object-cache-71tPfV4A.mjs";
+import "../../object-cache-DVKnyOfy.mjs";
 import "../../base64-CvLhUKQv.mjs";
 import "../../types-CQPWhPxE.mjs";
-import "../../media-D6SeAfBl.mjs";
+import "../../media-BBm8Wg3f.mjs";
 import "../../options-BHPeIbBd.mjs";
 import "../../request-cache-DH9zdCOD.mjs";
-import { n as localizePath, t as interpolateUrlPattern } from "../../resolve-DxUpTMmE.mjs";
-import "../../loader-ZsjE4paL.mjs";
-import { t as handleSitemapData } from "../../seo-BSiTIXzd.mjs";
-import { a as getSiteSettingsWithDb } from "../../settings-BgN-0DT-.mjs";
-import { t as buildSeoImageUrl } from "../../media-url-DH7giMx_.mjs";
-import { r as getPublicOrigin } from "../../public-url-DRz_AinV.mjs";
+import { n as localizePath, t as interpolateUrlPattern } from "../../resolve-prZ3mP7l.mjs";
+import "../../loader-Z8vl7zTq.mjs";
+import { t as handleSitemapData } from "../../seo-CVWkdv6x.mjs";
+import { o as getSiteSettingsWithDb } from "../../settings--wobrkkC.mjs";
+import { t as buildSeoImageUrl } from "../../media-url-DHoPr0hq.mjs";
+import { r as getPublicOrigin } from "../../public-url-CarhZJgf.mjs";
 
 //#region src/astro/routes/sitemap-[collection].xml.ts
 const prerender = false;

package/dist/astro/routes/sitemap.xml.mjs

@@ -1,16 +1,16 @@
 import "../../dialect-helpers-BSbfaO3F.mjs";
 import "../../config-C3EBstHi.mjs";
 import "../../after-CBU2vkoO.mjs";
-import "../../object-cache-71tPfV4A.mjs";
+import "../../object-cache-DVKnyOfy.mjs";
 import "../../base64-CvLhUKQv.mjs";
 import "../../types-CQPWhPxE.mjs";
-import "../../media-D6SeAfBl.mjs";
+import "../../media-BBm8Wg3f.mjs";
 import "../../options-BHPeIbBd.mjs";
 import "../../request-cache-DH9zdCOD.mjs";
-import "../../loader-ZsjE4paL.mjs";
-import { t as handleSitemapData } from "../../seo-BSiTIXzd.mjs";
-import { a as getSiteSettingsWithDb } from "../../settings-BgN-0DT-.mjs";
-import { r as getPublicOrigin } from "../../public-url-DRz_AinV.mjs";
+import "../../loader-Z8vl7zTq.mjs";
+import { t as handleSitemapData } from "../../seo-CVWkdv6x.mjs";
+import { o as getSiteSettingsWithDb } from "../../settings--wobrkkC.mjs";
+import { r as getPublicOrigin } from "../../public-url-CarhZJgf.mjs";
 
 //#region src/astro/routes/sitemap.xml.ts
 const prerender = false;

package/dist/astro/types.d.mts

@@ -1,17 +1,17 @@
-import { r as ContentFieldFilters } from "../content-list-query-BhejKVqb.mjs";
-import { i as ContentItem } from "../types-DJQxln7q.mjs";
-import { d as ContentListResponse, f as ContentResponse } from "../options-BhZIeFY1.mjs";
-import { t as Database } from "../types-DHxzBjbD.mjs";
-import { Ct as PublicPageContext, Dt as ResolvedPlugin, Gt as Element, it as PageMetadataContribution, tt as PageFragmentContribution } from "../types-Vg6f5i3s.mjs";
-import "../relations-C7B46bcU.mjs";
-import { f as MediaProvider, p as MediaProviderCapabilities } from "../placeholder-BR4ZhVJl.mjs";
-import { Cr as EmDashConfig, Ir as MediaListResponse, Lr as MediaResponse, Oi as MediaItem, Yn as SandboxedPluginEntry, er as RouteCallerInput, mr as SandboxRunner, nr as EmailPipeline, rr as HookPipeline, tr as RouteMeta } from "../index-DWbJrsAg.mjs";
-import "../runner-zgqA_CqP.mjs";
-import "../index-6bRee8zb.mjs";
-import { d as Storage } from "../types-D_DWe7k9.mjs";
-import "../types-CLqvnd05.mjs";
-import "../hreflang-7pTHsLZJ.mjs";
-import "../validate-DlqdOZXB.mjs";
+import { r as ContentFieldFilters } from "../content-list-query-Btqd4uV2.mjs";
+import { i as ContentItem } from "../types-BuHW4xDE.mjs";
+import { d as ContentListResponse, f as ContentResponse } from "../options-CYb4y7hM.mjs";
+import { t as Database } from "../types-FV23hEoW.mjs";
+import { Ct as PublicPageContext, Dt as ResolvedPlugin, Gt as Element, it as PageMetadataContribution, tt as PageFragmentContribution } from "../types-B6GrPic4.mjs";
+import "../relations-DnRK4YIT.mjs";
+import { f as MediaProvider, p as MediaProviderCapabilities } from "../placeholder-4X9BrRrp.mjs";
+import { Fi as MediaItem, Hr as MediaListResponse, Ur as MediaResponse, br as SandboxRunner, cr as EmailPipeline, kr as EmDashConfig, lr as HookPipeline, or as RouteCallerInput, sr as RouteMeta, tr as SandboxedPluginEntry } from "../index-BJNMCWmu.mjs";
+import "../runner-YKfIMnaF.mjs";
+import "../index-Du8K7bWa.mjs";
+import { d as Storage } from "../types-CXFkwEGC.mjs";
+import "../types-DczELMop.mjs";
+import "../hreflang-B6hbAuuO.mjs";
+import "../validate-DUP27OYD.mjs";
 import "../index.mjs";
 import { Kysely } from "kysely";
 import * as zod from "zod";
@@ -299,21 +299,29 @@ interface EmDashHandlers {
   handleContentListTrashed: (collection: string, params?: {
     cursor?: string;
     limit?: number;
+    locale?: string;
   }) => Promise<HandlerResponse>;
   handleContentRestore: (collection: string, id: string) => Promise<HandlerResponse>;
   handleContentPermanentDelete: (collection: string, id: string) => Promise<HandlerResponse>;
-  handleContentCountTrashed: (collection: string) => Promise<HandlerResponse>;
+  handleContentCountTrashed: (collection: string, params?: {
+    locale?: string;
+  }) => Promise<HandlerResponse>;
   handleContentGetIncludingTrashed: (collection: string, id: string) => Promise<HandlerResponse>;
   handleContentDuplicate: (collection: string, id: string, authorId?: string) => Promise<HandlerResponse>;
   handleContentPublish: (collection: string, id: string, options?: {
     publishedAt?: string;
     requireScheduledDue?: boolean;
+    _rev?: string;
+  }) => Promise<HandlerResponse>;
+  handleContentUnpublish: (collection: string, id: string, options?: {
+    _rev?: string;
   }) => Promise<HandlerResponse>;
-  handleContentUnpublish: (collection: string, id: string) => Promise<HandlerResponse>;
   handleContentSchedule: (collection: string, id: string, scheduledAt: string) => Promise<HandlerResponse>;
   handleContentUnschedule: (collection: string, id: string) => Promise<HandlerResponse>;
   handleContentCountScheduled: (collection: string) => Promise<HandlerResponse>;
-  handleContentDiscardDraft: (collection: string, id: string) => Promise<HandlerResponse>;
+  handleContentDiscardDraft: (collection: string, id: string, options?: {
+    _rev?: string;
+  }) => Promise<HandlerResponse>;
   handleContentCompare: (collection: string, id: string) => Promise<HandlerResponse>;
   handleContentTranslations: (collection: string, id: string) => Promise<HandlerResponse>;
   handleMediaList: (params: {
@@ -335,6 +343,7 @@ interface EmDashHandlers {
     blurhash?: string;
     dominantColor?: string;
     authorId?: string;
+    folderId?: string | null;
   }) => Promise<HandlerResponse>;
   handleMediaUpdate: (id: string, input: {
     alt?: string;
@@ -345,6 +354,12 @@ interface EmDashHandlers {
     focalX?: number | null;
     focalY?: number | null;
   }) => Promise<HandlerResponse>;
+  handleMediaReplaceMetadata?: (id: string, expectedStorageKey: string, input: {
+    size: number;
+    width: number;
+    height: number;
+    contentHash: string;
+  }) => Promise<HandlerResponse>;
   handleMediaDelete: (id: string) => Promise<HandlerResponse>;
   handleRevisionList: (collection: string, entryId: string, params?: {
     limit?: number;

package/dist/astro/types.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.mts","names":[],"sources":["../../src/astro/types.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;UA4BiB,kBAAA;EAChB,KAAA;EACA,aAAA;EACA,QAAA;EACA,MAAA;EACA,UAAA;EALkC;EAOlC,QAAA;EACA,UAAA;EACA,SAAA;EA0Be;;;;;EApBf,MAAA;EAZA;EAcA,WAAA;EACA,MAAA,EAAQ,MAAA;IAGN,IAAA;IACA,KAAA;IACA,QAAA;IACA,MAAA;IAPF;;;;;;IAcE,OAAA,GAAU,KAAA;MAAQ,KAAA;MAAe,KAAA;IAAA,KAAmB,MAAA,mBAAnB;IAEjC,EAAA,WAAA;IAEA,UAAA,GAAa,MAAA;EAAA;AAAA;;AAQhB;;UAAiB,cAAA;EAChB,OAAA;EAiBmB;EAfnB,OAAA;EAoBe;EAlBf,OAAA;EAyBqB;;;;;;EAlBrB,SAAA;EACA,UAAA,GAAa,KAAA;IACZ,IAAA;IACA,KAAA;IACA,IAAA;EAAA;EAED,gBAAA,GAAmB,KAAA;IAClB,EAAA;IACA,KAAA;IACA,IAAA;EAAA;EAED,YAAA,GAAe,KAAA;IACd,IAAA;IACA,KAAA;IACA,UAAA;IACA,QAAA,GAAW,OAAA;EAAA;EAAA;EAGZ,kBAAA,GAAqB,KAAA;IACpB,IAAA;IACA,KAAA;IACA,IAAA;IACA,WAAA;IACA,WAAA;IACA,MAAA,GAAS,OAAA;EAAA;AAAA;;;AASX;;;KAAY,gBAAA;;AAKZ;;UAAiB,cAAA;EAChB,OAAA;EACA,MAAA;EACA,IAAA;EAQS;;;;;EAFT,YAAA;EACA,WAAA,EAAa,MAAA,SAAe,kBAAA;EAC5B,OAAA,EAAS,MAAA,SAAe,cAAA;EAFxB;;;;;;EASA,QAAA,EAAU,gBAAA;EAAV;;;;EAKA,aAAA;EAOC;;;;EAFD,IAAA;IACC,aAAA;IACA,OAAA;IACA,mBAAA;EAAA;EAED,aAAA;IACC,aAAA;IACA,QAAA;EAAA;EAYA;;;EAPD,UAAA,EAAY,KAAA;IACX,EAAA;IACA,IAAA;IACA,KAAA;IACA,aAAA;IACA,YAAA;IACA,WAAA;IACA,MAAA;IACA,gBAAA;EAAA;EAiDO;;AAWT;;;;;;EAlDC,WAAA;EAoDO;;;;;;;;;AAgBR;EAzDC,QAAA;IACC,aAAA;IACA,cAAA;IACA,MAAA;MA2EI;;;;;;;;;MAjEH,wBAAA;MAwGO;;;;MAnGP,wBAAA;IAAA;EAAA;EA4HW;;;;EArHb,KAAA;IACC,IAAA;IACA,QAAA;IACA,OAAA;EAAA;AAAA;;;;;;;;UAWe,eAAA;EAChB,OAAA;EACA,IAAA,GAAO,CAAA;EACP,kBAAA;EACA,KAAA;IACC,IAAA;IACA,OAAA;IACA,OAAA,GAAU,MAAA;EAAA;AAAA;;;;;;;;UAWK,cAAA;EAEhB,iBAAA,GACC,UAAA,UACA,MAAA;IACC,MAAA;IACA,KAAA;IACA,MAAA;IACA,OAAA;IACA,KAAA;IACA,MAAA;IACA,CAAA;IACA,QAAA;IACA,SAAA;IACA,QAAA;IACA,MAAA;IACA,OAAA;IACA,WAAA;IACA,sBAAA;IACA,YAAA,GAAe,mBAAA;EAAA,MAEZ,OAAA,CAAQ,eAAA;EAEb,oBAAA,GAAuB,UAAA,aAAuB,OAAA,CAAQ,eAAA;EAEtD,gBAAA,GACC,UAAA,UACA,EAAA,UACA,MAAA,cACI,OAAA,CACJ,eAAA;IACC,IAAA;MACC,EAAA;MACA,QAAA;MAAA,CACC,GAAA;IAAA;IAEF,IAAA;EAAA;EAIF,mBAAA,GACC,UAAA,UACA,IAAA;IACC,IAAA,EAAM,MAAA;IACN,IAAA;IACA,MAAA;IACA,QAAA;IACA,OAAA,GAAU,KAAA;MAAQ,QAAA;MAAkB,SAAA;IAAA;IACpC,MAAA;IACA,aAAA;IACA,UAAA,GAAa,MAAA;IACb,SAAA;IACA,WAAA;EAAA,MAEG,OAAA,CAAQ,eAAA;EAEb,mBAAA,GACC,UAAA,UACA,EAAA,UACA,IAAA;IACC,IAAA,GAAO,MAAA;IACP,IAAA;IACA,MAAA;IACA,QAAA;IACA,OAAA,GAAU,KAAA;MAAQ,QAAA;MAAkB,SAAA;IAAA;IACpC,MAAA;IACA,GAAA;MACC,KAAA;MACA,WAAA;MACA,KAAA;MACA,SAAA;MACA,OAAA;IAAA;IAED,UAAA,GAAa,MAAA;IACb,WAAA;IACA,IAAA;EAAA,MAEG,OAAA,CAAQ,eAAA;EAEb,mBAAA,GAAsB,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAGjE,wBAAA,GACC,UAAA,UACA,MAAA;IAAW,MAAA;IAAiB,KAAA;EAAA,MACxB,OAAA,CAAQ,eAAA;EAEb,oBAAA,GAAuB,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAElE,4BAAA,GAA+B,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAE1E,yBAAA,GAA4B,UAAA,aAAuB,OAAA,CAAQ,eAAA;EAE3D,gCAAA,GAAmC,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAE9E,sBAAA,GACC,UAAA,UACA,EAAA,UACA,QAAA,cACI,OAAA,CAAQ,eAAA;EAGb,oBAAA,GACC,UAAA,UACA,EAAA,UACA,OAAA;IAAY,WAAA;IAAsB,mBAAA;EAAA,MAC9B,OAAA,CAAQ,eAAA;EAEb,sBAAA,GAAyB,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAEpE,qBAAA,GACC,UAAA,UACA,EAAA,UACA,WAAA,aACI,OAAA,CAAQ,eAAA;EAEb,uBAAA,GAA0B,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAErE,2BAAA,GAA8B,UAAA,aAAuB,OAAA,CAAQ,eAAA;EAE7D,yBAAA,GAA4B,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAEvE,oBAAA,GAAuB,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAElE,yBAAA,GAA4B,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAGvE,eAAA,GAAkB,MAAA;IACjB,MAAA;IACA,IAAA;IACA,KAAA;IACA,QAAA;IACA,QAAA;EAAA,MACK,OAAA,CAAQ,eAAA;EAEd,cAAA,GAAiB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAExC,iBAAA,GAAoB,KAAA;IACnB,QAAA;IACA,QAAA;IACA,IAAA;IACA,KAAA;IACA,MAAA;IACA,UAAA;IACA,WAAA;IACA,QAAA;IACA,aAAA;IACA,QAAA;EAAA,MACK,OAAA,CAAQ,eAAA;EAEd,iBAAA,GACC,EAAA,UACA,KAAA;IACC,GAAA;IACA,OAAA;IACA,KAAA;IACA,MAAA;IACA,QAAA;IACA,MAAA;IACA,MAAA;EAAA,MAEG,OAAA,CAAQ,eAAA;EAEb,iBAAA,GAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAG3C,kBAAA,GACC,UAAA,UACA,OAAA,UACA,MAAA;IAAW,KAAA;EAAA,MACP,OAAA,CAAQ,eAAA;EAEb,iBAAA,GAAoB,UAAA,aAAuB,OAAA,CAC1C,eAAA;IACC,IAAA;MACC,EAAA;MACA,UAAA;MACA,OAAA;MACA,QAAA;MAAA,CACC,GAAA;IAAA;EAAA;EAKJ,qBAAA,GAAwB,UAAA,UAAoB,YAAA,aAAyB,OAAA,CAAQ,eAAA;EAI7E,oBAAA,GACC,QAAA,UACA,MAAA,UACA,IAAA,UACA,OAAA,EAAS,OAAA,EACT,IAAA,GAAO,gBAAA,YACH,OAAA,CAAQ,eAAA;EAGb,0BAAA,GACC,QAAA,UACA,MAAA,UACA,IAAA,UACA,OAAA,EAAS,OAAA,KACL,OAAA,CAAQ,eAAA;EAGb,kBAAA,GAAqB,QAAA,UAAkB,IAAA,aAAiB,SAAA;EACxD,wBAAA,QAAgC,OAAA,CAC/B,KAAA;IACC,QAAA;IACA,IAAA;IACA,WAAA;IACA,KAAA;IACA,UAAA;IACA,WAAA;IACA,WAAA,EAT+D,GAAA,CASpC,OAAA;IAC3B,YAAA,GADkC,GAAA,CACL,OAAA;EAAA;EAG/B,iBAAA,GAAoB,QAAA,cAAsB,OAAA,CACzC,KAAA;IACC,QAAA;IACA,IAAA;IACA,WAAA;IACA,KAAA;IACA,UAAA;IACA,WAAA;IACA,WAAA,EApBqC,GAAA,CAoBV,OAAA;IAC3B,YAAA,GADkC,GAAA,CACL,OAAA;EAAA;EAG/B,yBAAA,GACC,KAAA,EAAO,OAAA,CAAQ,UAAA,CAAW,cAAA,yBAC1B,QAAA;EAED,mBAAA,GACC,QAAA,UACA,QAAA,UACA,KAAA,UACA,KAAA,WACA,OAAA,UACA,OAAA,EAAS,OAAA,EACT,MAAA,GAAS,gBAAA,YACL,OAAA,CAAQ,eAAA;EACb,qBAAA,GACC,QAAA,UACA,QAAA,UACA,KAAA,UACA,OAAA,UACA,OAAA,EAAS,OAAA,EACT,MAAA,aACI,OAAA;EAGL,gBAAA,GAAmB,UAAA,aAHP,aAAA;EAIZ,oBAAA,QAA4B,KAAA;IAC3B,EAAA;IACA,IAAA;IACA,IAAA;IACA,YAAA,EALkF,yBAAA;EAAA;EASnF,OAAA,EARiC,OAAA;EASjC,EAAA,EAAI,MAAA,CADkC,QAAA;EAEtC,iBAAA,IAAqB,UAAA;EAGrB,KAAA,EAJU,YAAA;EAOV,KAAA,EAHiD,aAAA;EAMjD,iBAAA,EAHkD,cAAA;EAOlD,sBAAA,EAJ+D,oBAAA;EAO/D,MAAA,EAH2E,YAAA;EAQ3E,WAAA,QAAmB,OAAA,CAAQ,cAAA;EAK3B,yBAAA;EAGA,gBAAA,QAR0B,aAAA;EAY1B,iBAAA;EAGA,sBAAA,QAA8B,OAAA;EAG9B,mBAAA,QAA2B,OAAA;EAG3B,eAAA,GAAkB,QAAA,UAAkB,MAAA,4BAAkC,OAAA;EAGtE,mBAAA,GACC,IAAA,EAJ4E,iBAAA,KAKxE,OAAA,CADiD,wBAAA;EAEtD,oBAAA,GACC,IAAA,EAFW,iBAAA,KAGP,OAAA,CADiD,wBAAA;EAvNrD;;;;;;EAgOD,mBAAA,SAA4B,OAAA;AAAA"}
+{"version":3,"file":"types.d.mts","names":[],"sources":["../../src/astro/types.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;UA4BiB,kBAAA;EAChB,KAAA;EACA,aAAA;EACA,QAAA;EACA,MAAA;EACA,UAAA;EALkC;EAOlC,QAAA;EACA,UAAA;EACA,SAAA;EA0Be;;;;;EApBf,MAAA;EAZA;EAcA,WAAA;EACA,MAAA,EAAQ,MAAA;IAGN,IAAA;IACA,KAAA;IACA,QAAA;IACA,MAAA;IAPF;;;;;;IAcE,OAAA,GAAU,KAAA;MAAQ,KAAA;MAAe,KAAA;IAAA,KAAmB,MAAA,mBAAnB;IAEjC,EAAA,WAAA;IAEA,UAAA,GAAa,MAAA;EAAA;AAAA;;AAQhB;;UAAiB,cAAA;EAChB,OAAA;EAiBmB;EAfnB,OAAA;EAoBe;EAlBf,OAAA;EAyBqB;;;;;;EAlBrB,SAAA;EACA,UAAA,GAAa,KAAA;IACZ,IAAA;IACA,KAAA;IACA,IAAA;EAAA;EAED,gBAAA,GAAmB,KAAA;IAClB,EAAA;IACA,KAAA;IACA,IAAA;EAAA;EAED,YAAA,GAAe,KAAA;IACd,IAAA;IACA,KAAA;IACA,UAAA;IACA,QAAA,GAAW,OAAA;EAAA;EAAA;EAGZ,kBAAA,GAAqB,KAAA;IACpB,IAAA;IACA,KAAA;IACA,IAAA;IACA,WAAA;IACA,WAAA;IACA,MAAA,GAAS,OAAA;EAAA;AAAA;;;AASX;;;KAAY,gBAAA;;AAKZ;;UAAiB,cAAA;EAChB,OAAA;EACA,MAAA;EACA,IAAA;EAQS;;;;;EAFT,YAAA;EACA,WAAA,EAAa,MAAA,SAAe,kBAAA;EAC5B,OAAA,EAAS,MAAA,SAAe,cAAA;EAFxB;;;;;;EASA,QAAA,EAAU,gBAAA;EAAV;;;;EAKA,aAAA;EAOC;;;;EAFD,IAAA;IACC,aAAA;IACA,OAAA;IACA,mBAAA;EAAA;EAED,aAAA;IACC,aAAA;IACA,QAAA;EAAA;EAYA;;;EAPD,UAAA,EAAY,KAAA;IACX,EAAA;IACA,IAAA;IACA,KAAA;IACA,aAAA;IACA,YAAA;IACA,WAAA;IACA,MAAA;IACA,gBAAA;EAAA;EAiDO;;AAWT;;;;;;EAlDC,WAAA;EAoDO;;;;;;;;;AAgBR;EAzDC,QAAA;IACC,aAAA;IACA,cAAA;IACA,MAAA;MA2EI;;;;;;;;;MAjEH,wBAAA;MAwGO;;;;MAnGP,wBAAA;IAAA;EAAA;EA4HW;;;;EArHb,KAAA;IACC,IAAA;IACA,QAAA;IACA,OAAA;EAAA;AAAA;;;;;;;;UAWe,eAAA;EAChB,OAAA;EACA,IAAA,GAAO,CAAA;EACP,kBAAA;EACA,KAAA;IACC,IAAA;IACA,OAAA;IACA,OAAA,GAAU,MAAA;EAAA;AAAA;;;;;;;;UAWK,cAAA;EAEhB,iBAAA,GACC,UAAA,UACA,MAAA;IACC,MAAA;IACA,KAAA;IACA,MAAA;IACA,OAAA;IACA,KAAA;IACA,MAAA;IACA,CAAA;IACA,QAAA;IACA,SAAA;IACA,QAAA;IACA,MAAA;IACA,OAAA;IACA,WAAA;IACA,sBAAA;IACA,YAAA,GAAe,mBAAA;EAAA,MAEZ,OAAA,CAAQ,eAAA;EAEb,oBAAA,GAAuB,UAAA,aAAuB,OAAA,CAAQ,eAAA;EAEtD,gBAAA,GACC,UAAA,UACA,EAAA,UACA,MAAA,cACI,OAAA,CACJ,eAAA;IACC,IAAA;MACC,EAAA;MACA,QAAA;MAAA,CACC,GAAA;IAAA;IAEF,IAAA;EAAA;EAIF,mBAAA,GACC,UAAA,UACA,IAAA;IACC,IAAA,EAAM,MAAA;IACN,IAAA;IACA,MAAA;IACA,QAAA;IACA,OAAA,GAAU,KAAA;MAAQ,QAAA;MAAkB,SAAA;IAAA;IACpC,MAAA;IACA,aAAA;IACA,UAAA,GAAa,MAAA;IACb,SAAA;IACA,WAAA;EAAA,MAEG,OAAA,CAAQ,eAAA;EAEb,mBAAA,GACC,UAAA,UACA,EAAA,UACA,IAAA;IACC,IAAA,GAAO,MAAA;IACP,IAAA;IACA,MAAA;IACA,QAAA;IACA,OAAA,GAAU,KAAA;MAAQ,QAAA;MAAkB,SAAA;IAAA;IACpC,MAAA;IACA,GAAA;MACC,KAAA;MACA,WAAA;MACA,KAAA;MACA,SAAA;MACA,OAAA;IAAA;IAED,UAAA,GAAa,MAAA;IACb,WAAA;IACA,IAAA;EAAA,MAEG,OAAA,CAAQ,eAAA;EAEb,mBAAA,GAAsB,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAGjE,wBAAA,GACC,UAAA,UACA,MAAA;IAAW,MAAA;IAAiB,KAAA;IAAgB,MAAA;EAAA,MACxC,OAAA,CAAQ,eAAA;EAEb,oBAAA,GAAuB,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAElE,4BAAA,GAA+B,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAE1E,yBAAA,GACC,UAAA,UACA,MAAA;IAAW,MAAA;EAAA,MACP,OAAA,CAAQ,eAAA;EAEb,gCAAA,GAAmC,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAE9E,sBAAA,GACC,UAAA,UACA,EAAA,UACA,QAAA,cACI,OAAA,CAAQ,eAAA;EAGb,oBAAA,GACC,UAAA,UACA,EAAA,UACA,OAAA;IAAY,WAAA;IAAsB,mBAAA;IAA+B,IAAA;EAAA,MAC7D,OAAA,CAAQ,eAAA;EAEb,sBAAA,GACC,UAAA,UACA,EAAA,UACA,OAAA;IAAY,IAAA;EAAA,MACR,OAAA,CAAQ,eAAA;EAEb,qBAAA,GACC,UAAA,UACA,EAAA,UACA,WAAA,aACI,OAAA,CAAQ,eAAA;EAEb,uBAAA,GAA0B,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAErE,2BAAA,GAA8B,UAAA,aAAuB,OAAA,CAAQ,eAAA;EAE7D,yBAAA,GACC,UAAA,UACA,EAAA,UACA,OAAA;IAAY,IAAA;EAAA,MACR,OAAA,CAAQ,eAAA;EAEb,oBAAA,GAAuB,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAElE,yBAAA,GAA4B,UAAA,UAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAGvE,eAAA,GAAkB,MAAA;IACjB,MAAA;IACA,IAAA;IACA,KAAA;IACA,QAAA;IACA,QAAA;EAAA,MACK,OAAA,CAAQ,eAAA;EAEd,cAAA,GAAiB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAExC,iBAAA,GAAoB,KAAA;IACnB,QAAA;IACA,QAAA;IACA,IAAA;IACA,KAAA;IACA,MAAA;IACA,UAAA;IACA,WAAA;IACA,QAAA;IACA,aAAA;IACA,QAAA;IACA,QAAA;EAAA,MACK,OAAA,CAAQ,eAAA;EAEd,iBAAA,GACC,EAAA,UACA,KAAA;IACC,GAAA;IACA,OAAA;IACA,KAAA;IACA,MAAA;IACA,QAAA;IACA,MAAA;IACA,MAAA;EAAA,MAEG,OAAA,CAAQ,eAAA;EAEb,0BAAA,IACC,EAAA,UACA,kBAAA,UACA,KAAA;IAAS,IAAA;IAAc,KAAA;IAAe,MAAA;IAAgB,WAAA;EAAA,MAClD,OAAA,CAAQ,eAAA;EAEb,iBAAA,GAAoB,EAAA,aAAe,OAAA,CAAQ,eAAA;EAG3C,kBAAA,GACC,UAAA,UACA,OAAA,UACA,MAAA;IAAW,KAAA;EAAA,MACP,OAAA,CAAQ,eAAA;EAEb,iBAAA,GAAoB,UAAA,aAAuB,OAAA,CAC1C,eAAA;IACC,IAAA;MACC,EAAA;MACA,UAAA;MACA,OAAA;MACA,QAAA;MAAA,CACC,GAAA;IAAA;EAAA;EAKJ,qBAAA,GAAwB,UAAA,UAAoB,YAAA,aAAyB,OAAA,CAAQ,eAAA;EAI7E,oBAAA,GACC,QAAA,UACA,MAAA,UACA,IAAA,UACA,OAAA,EAAS,OAAA,EACT,IAAA,GAAO,gBAAA,YACH,OAAA,CAAQ,eAAA;EAGb,0BAAA,GACC,QAAA,UACA,MAAA,UACA,IAAA,UACA,OAAA,EAAS,OAAA,KACL,OAAA,CAAQ,eAAA;EAGb,kBAAA,GAAqB,QAAA,UAAkB,IAAA,aAAiB,SAAA;EACxD,wBAAA,QAAgC,OAAA,CAC/B,KAAA;IACC,QAAA;IACA,IAAA;IACA,WAAA;IACA,KAAA;IACA,UAAA;IACA,WAAA;IACA,WAAA,EAT+D,GAAA,CASpC,OAAA;IAC3B,YAAA,GADkC,GAAA,CACL,OAAA;EAAA;EAG/B,iBAAA,GAAoB,QAAA,cAAsB,OAAA,CACzC,KAAA;IACC,QAAA;IACA,IAAA;IACA,WAAA;IACA,KAAA;IACA,UAAA;IACA,WAAA;IACA,WAAA,EApBqC,GAAA,CAoBV,OAAA;IAC3B,YAAA,GADkC,GAAA,CACL,OAAA;EAAA;EAG/B,yBAAA,GACC,KAAA,EAAO,OAAA,CAAQ,UAAA,CAAW,cAAA,yBAC1B,QAAA;EAED,mBAAA,GACC,QAAA,UACA,QAAA,UACA,KAAA,UACA,KAAA,WACA,OAAA,UACA,OAAA,EAAS,OAAA,EACT,MAAA,GAAS,gBAAA,YACL,OAAA,CAAQ,eAAA;EACb,qBAAA,GACC,QAAA,UACA,QAAA,UACA,KAAA,UACA,OAAA,UACA,OAAA,EAAS,OAAA,EACT,MAAA,aACI,OAAA;EAGL,gBAAA,GAAmB,UAAA,aAHP,aAAA;EAIZ,oBAAA,QAA4B,KAAA;IAC3B,EAAA;IACA,IAAA;IACA,IAAA;IACA,YAAA,EALkF,yBAAA;EAAA;EASnF,OAAA,EARiC,OAAA;EASjC,EAAA,EAAI,MAAA,CADkC,QAAA;EAEtC,iBAAA,IAAqB,UAAA;EAGrB,KAAA,EAJU,YAAA;EAOV,KAAA,EAHiD,aAAA;EAMjD,iBAAA,EAHkD,cAAA;EAOlD,sBAAA,EAJ+D,oBAAA;EAO/D,MAAA,EAH2E,YAAA;EAQ3E,WAAA,QAAmB,OAAA,CAAQ,cAAA;EAK3B,yBAAA;EAGA,gBAAA,QAR0B,aAAA;EAY1B,iBAAA;EAGA,sBAAA,QAA8B,OAAA;EAG9B,mBAAA,QAA2B,OAAA;EAG3B,eAAA,GAAkB,QAAA,UAAkB,MAAA,4BAAkC,OAAA;EAGtE,mBAAA,GACC,IAAA,EAJ4E,iBAAA,KAKxE,OAAA,CADiD,wBAAA;EAEtD,oBAAA,GACC,IAAA,EAFW,iBAAA,KAGP,OAAA,CADiD,wBAAA;EA9NjD;;;;;;EAuOL,mBAAA,SAA4B,OAAA;AAAA"}

package/dist/auth/providers/github.d.mts

@@ -1,4 +1,4 @@
-import { r as AuthProviderDescriptor } from "../../types-BzBd3PeX.mjs";
+import { r as AuthProviderDescriptor } from "../../types-C00oyCZp.mjs";
 
 //#region src/auth/providers/github.d.ts
 /**

package/dist/auth/providers/google.d.mts

@@ -1,4 +1,4 @@
-import { r as AuthProviderDescriptor } from "../../types-BzBd3PeX.mjs";
+import { r as AuthProviderDescriptor } from "../../types-C00oyCZp.mjs";
 
 //#region src/auth/providers/google.d.ts
 /**

package/dist/{authorize-ByYs-Uxs.mjs → authorize-Bkf_UHhD.mjs}

@@ -1,4 +1,4 @@
-import { t as apiError } from "./error-D9w94fjV.mjs";
+import { t as apiError } from "./error-DFrQjppn.mjs";
 import { canActOnOwn, hasPermission, hasScope } from "@emdash-cms/auth";
 
 //#region src/api/authorize.ts
@@ -37,4 +37,4 @@ function requireOwnerPerm(user, ownerId, ownPermission, anyPermission) {
 
 //#endregion
 export { requireOwnerPerm as n, requirePerm as r, canReadMediaUsageCount as t };
-//# sourceMappingURL=authorize-ByYs-Uxs.mjs.map
+//# sourceMappingURL=authorize-Bkf_UHhD.mjs.map

package/dist/{authorize-ByYs-Uxs.mjs.map → authorize-Bkf_UHhD.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"authorize-ByYs-Uxs.mjs","names":[],"sources":["../src/api/authorize.ts"],"sourcesContent":["/**\n * Authorization helpers for API routes\n *\n * Thin wrappers around @emdash-cms/auth RBAC that return HTTP responses.\n * Auth middleware handles authentication; these handle authorization.\n */\n\nimport type { Permission, RoleLevel } from \"@emdash-cms/auth\";\nimport { hasPermission, canActOnOwn, hasScope } from \"@emdash-cms/auth\";\n\nimport { apiError } from \"./error.js\";\n\ninterface UserLike {\n\tid: string;\n\trole: RoleLevel;\n}\n\nexport function canReadMediaUsageCount(\n\tuser: UserLike | null | undefined,\n\ttokenScopes: string[] | undefined,\n): boolean {\n\treturn (\n\t\thasPermission(user, \"content:read_drafts\") && (!tokenScopes || hasScope(tokenScopes, \"admin\"))\n\t);\n}\n\n/**\n * Check if user has a permission. Returns a 401/403 Response if not, or null if authorized.\n *\n * Usage:\n * ```ts\n * const denied = requirePerm(user, \"schema:manage\");\n * if (denied) return denied;\n * ```\n */\nexport function requirePerm(\n\tuser: UserLike | null | undefined,\n\tpermission: Permission,\n): Response | null {\n\tif (!user) {\n\t\treturn apiError(\"UNAUTHORIZED\", \"Authentication required\", 401);\n\t}\n\tif (!hasPermission(user, permission)) {\n\t\treturn apiError(\"FORBIDDEN\", \"Insufficient permissions\", 403);\n\t}\n\treturn null;\n}\n\n/**\n * Check if user can act on a resource, considering ownership.\n * Returns a 401/403 Response if not, or null if authorized.\n *\n * Usage:\n * ```ts\n * const denied = requireOwnerPerm(user, item.authorId, \"content:edit_own\", \"content:edit_any\");\n * if (denied) return denied;\n * ```\n */\nexport function requireOwnerPerm(\n\tuser: UserLike | null | undefined,\n\townerId: string,\n\townPermission: Permission,\n\tanyPermission: Permission,\n): Response | null {\n\tif (!user) {\n\t\treturn apiError(\"UNAUTHORIZED\", \"Authentication required\", 401);\n\t}\n\tif (!canActOnOwn(user, ownerId, ownPermission, anyPermission)) {\n\t\treturn apiError(\"FORBIDDEN\", \"Insufficient permissions\", 403);\n\t}\n\treturn null;\n}\n"],"mappings":";;;;AAiBA,SAAgB,uBACf,MACA,aACU;AACV,QACC,cAAc,MAAM,sBAAsB,KAAK,CAAC,eAAe,SAAS,aAAa,QAAQ;;;;;;;;;;;AAa/F,SAAgB,YACf,MACA,YACkB;AAClB,KAAI,CAAC,KACJ,QAAO,SAAS,gBAAgB,2BAA2B,IAAI;AAEhE,KAAI,CAAC,cAAc,MAAM,WAAW,CACnC,QAAO,SAAS,aAAa,4BAA4B,IAAI;AAE9D,QAAO;;;;;;;;;;;;AAaR,SAAgB,iBACf,MACA,SACA,eACA,eACkB;AAClB,KAAI,CAAC,KACJ,QAAO,SAAS,gBAAgB,2BAA2B,IAAI;AAEhE,KAAI,CAAC,YAAY,MAAM,SAAS,eAAe,cAAc,CAC5D,QAAO,SAAS,aAAa,4BAA4B,IAAI;AAE9D,QAAO"}
+{"version":3,"file":"authorize-Bkf_UHhD.mjs","names":[],"sources":["../src/api/authorize.ts"],"sourcesContent":["/**\n * Authorization helpers for API routes\n *\n * Thin wrappers around @emdash-cms/auth RBAC that return HTTP responses.\n * Auth middleware handles authentication; these handle authorization.\n */\n\nimport type { Permission, RoleLevel } from \"@emdash-cms/auth\";\nimport { hasPermission, canActOnOwn, hasScope } from \"@emdash-cms/auth\";\n\nimport { apiError } from \"./error.js\";\n\ninterface UserLike {\n\tid: string;\n\trole: RoleLevel;\n}\n\nexport function canReadMediaUsageCount(\n\tuser: UserLike | null | undefined,\n\ttokenScopes: string[] | undefined,\n): boolean {\n\treturn (\n\t\thasPermission(user, \"content:read_drafts\") && (!tokenScopes || hasScope(tokenScopes, \"admin\"))\n\t);\n}\n\n/**\n * Check if user has a permission. Returns a 401/403 Response if not, or null if authorized.\n *\n * Usage:\n * ```ts\n * const denied = requirePerm(user, \"schema:manage\");\n * if (denied) return denied;\n * ```\n */\nexport function requirePerm(\n\tuser: UserLike | null | undefined,\n\tpermission: Permission,\n): Response | null {\n\tif (!user) {\n\t\treturn apiError(\"UNAUTHORIZED\", \"Authentication required\", 401);\n\t}\n\tif (!hasPermission(user, permission)) {\n\t\treturn apiError(\"FORBIDDEN\", \"Insufficient permissions\", 403);\n\t}\n\treturn null;\n}\n\n/**\n * Check if user can act on a resource, considering ownership.\n * Returns a 401/403 Response if not, or null if authorized.\n *\n * Usage:\n * ```ts\n * const denied = requireOwnerPerm(user, item.authorId, \"content:edit_own\", \"content:edit_any\");\n * if (denied) return denied;\n * ```\n */\nexport function requireOwnerPerm(\n\tuser: UserLike | null | undefined,\n\townerId: string,\n\townPermission: Permission,\n\tanyPermission: Permission,\n): Response | null {\n\tif (!user) {\n\t\treturn apiError(\"UNAUTHORIZED\", \"Authentication required\", 401);\n\t}\n\tif (!canActOnOwn(user, ownerId, ownPermission, anyPermission)) {\n\t\treturn apiError(\"FORBIDDEN\", \"Insufficient permissions\", 403);\n\t}\n\treturn null;\n}\n"],"mappings":";;;;AAiBA,SAAgB,uBACf,MACA,aACU;AACV,QACC,cAAc,MAAM,sBAAsB,KAAK,CAAC,eAAe,SAAS,aAAa,QAAQ;;;;;;;;;;;AAa/F,SAAgB,YACf,MACA,YACkB;AAClB,KAAI,CAAC,KACJ,QAAO,SAAS,gBAAgB,2BAA2B,IAAI;AAEhE,KAAI,CAAC,cAAc,MAAM,WAAW,CACnC,QAAO,SAAS,aAAa,4BAA4B,IAAI;AAE9D,QAAO;;;;;;;;;;;;AAaR,SAAgB,iBACf,MACA,SACA,eACA,eACkB;AAClB,KAAI,CAAC,KACJ,QAAO,SAAS,gBAAgB,2BAA2B,IAAI;AAEhE,KAAI,CAAC,YAAY,MAAM,SAAS,eAAe,cAAc,CAC5D,QAAO,SAAS,aAAa,4BAA4B,IAAI;AAE9D,QAAO"}

package/dist/{backup-ChyHfIoX.mjs → backup-rwVAl9NI.mjs}

@@ -1,7 +1,7 @@
 import { t as OptionsRepository } from "./options-BHPeIbBd.mjs";
-import { t as ErrorCode } from "./errors-n2j49uNf.mjs";
-import { n as VERSION } from "./version-ri-sCyAp.mjs";
-import { t as generateSnapshot } from "./snapshot-DSB8P7Lm.mjs";
+import { t as ErrorCode } from "./errors-DsVoDUjJ.mjs";
+import { n as VERSION } from "./version-Bii3suaO.mjs";
+import { t as generateSnapshot } from "./snapshot--OCDTqdb.mjs";
 
 //#region src/api/handlers/backup.ts
 /** Storage key prefix for scheduled/manual archives. */
@@ -238,4 +238,4 @@ async function maybeRunScheduledBackup(db, storage) {
 
 //#endregion
 export { deleteBackupArchive as a, isValidArchiveName as c, runBackupToStorage as d, updateBackupSettings as f, archiveNameForDate as i, listBackupArchives as l, BACKUP_RETENTION_MIN as n, generateBackupJson as o, BACKUP_STORAGE_PREFIX as r, getBackupSettings as s, BACKUP_RETENTION_MAX as t, maybeRunScheduledBackup as u };
-//# sourceMappingURL=backup-ChyHfIoX.mjs.map
+//# sourceMappingURL=backup-rwVAl9NI.mjs.map

package/dist/{backup-ChyHfIoX.mjs.map → backup-rwVAl9NI.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"backup-ChyHfIoX.mjs","names":[],"sources":["../src/api/handlers/backup.ts"],"sourcesContent":["/**\n * Backup handlers — portable content backups, on demand and scheduled.\n *\n * A backup is the snapshot format (see `snapshot.ts`) wrapped in a small\n * envelope: all content (including drafts, scheduled, and trashed entries),\n * schema definitions, taxonomies, menus, widgets, revisions, media metadata,\n * and site settings.\n *\n * Deliberately NOT included:\n * - Users, sessions, credentials, API/OAuth tokens (auth data is neither\n *   portable nor safe in a user-downloadable file)\n * - Secrets (`emdash:preview_secret`, plugin config, passkey challenges)\n * - Media binaries (metadata only — the files live in the same bucket the\n *   scheduled archives are written to)\n *\n * For full point-in-time database recovery on Cloudflare, D1 Time Travel\n * covers the last 30 days out of the box; these backups complement it with\n * user-holdable, longer-lived archives.\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport { OptionsRepository } from \"../../database/repositories/options.js\";\nimport type { Database } from \"../../database/types.js\";\nimport type { Storage } from \"../../storage/types.js\";\nimport { VERSION } from \"../../version.js\";\nimport { ErrorCode } from \"../errors.js\";\nimport type { ApiResult } from \"../types.js\";\nimport { generateSnapshot } from \"./snapshot.js\";\n\n// ── Constants ───────────────────────────────────────────────────\n\n/** Storage key prefix for scheduled/manual archives. */\nexport const BACKUP_STORAGE_PREFIX = \"backups/\";\n\n/**\n * Filename prefix within the backups/ folder. Included in the list() prefix\n * so LocalStorage (which matches directory + filename prefix, not flat keys\n * like S3/R2) finds the archives too.\n */\nconst BACKUP_FILE_PREFIX = \"emdash-backup-\";\n\n/** Options key holding the scheduled-backup settings. */\nexport const BACKUP_SETTINGS_KEY = \"emdash:backups\";\n\n/** Options key holding the ISO timestamp of the last scheduled run. */\nconst BACKUP_LAST_RUN_KEY = \"emdash:backups_last_run\";\n\n/** Minimum interval between scheduled backups (23h — daily with cron jitter). */\nconst SCHEDULED_BACKUP_INTERVAL_MS = 23 * 60 * 60 * 1000;\n\n/** Retention bounds for stored archives. */\nexport const BACKUP_RETENTION_MIN = 1;\nexport const BACKUP_RETENTION_MAX = 30;\nconst BACKUP_RETENTION_DEFAULT = 7;\n\n/**\n * Options-table key prefixes included in backups. Site settings plus the\n * site-identity keys (`emdash:site_title`, `emdash:site_tagline`,\n * `emdash:site_url`). Never widen this to a prefix that can match secrets\n * (`emdash:preview_secret`, `plugin:`, `emdash:passkey_pending:`).\n */\nconst BACKUP_OPTION_PREFIXES = [\"site:\", \"emdash:site_\", \"emdash:locale\"];\n\n/**\n * Archive filename shape. Strict allowlist — the download/delete routes\n * interpolate this into a storage key, so it must never contain `/` or `..`.\n * The random suffix makes names unguessable (defense in depth on top of the\n * media route's backups/ deny) and avoids same-second collisions.\n */\nconst ARCHIVE_NAME_PATTERN =\n\t/^emdash-backup-\\d{4}-\\d{2}-\\d{2}T\\d{2}-\\d{2}-\\d{2}-[0-9a-f]{8}\\.json$/;\n\nexport function isValidArchiveName(name: string): boolean {\n\treturn ARCHIVE_NAME_PATTERN.test(name);\n}\n\n// ── Types ───────────────────────────────────────────────────────\n\nexport interface BackupSettings {\n\t/** Whether daily scheduled backups to storage are enabled. */\n\tenabled: boolean;\n\t/** How many archives to keep in storage (oldest pruned first). */\n\tretention: number;\n}\n\nexport interface BackupArchive {\n\t/** Filename within the backups/ prefix (no path separators). */\n\tname: string;\n\t/** Size in bytes. */\n\tsize: number;\n\t/** Last-modified timestamp (ISO). */\n\tlastModified: string;\n}\n\nconst DEFAULT_SETTINGS: BackupSettings = {\n\tenabled: false,\n\tretention: BACKUP_RETENTION_DEFAULT,\n};\n\nfunction clampRetention(value: number): number {\n\tif (!Number.isFinite(value)) return BACKUP_RETENTION_DEFAULT;\n\treturn Math.min(BACKUP_RETENTION_MAX, Math.max(BACKUP_RETENTION_MIN, Math.trunc(value)));\n}\n\n// ── Export ──────────────────────────────────────────────────────\n\n/**\n * Generate a full content backup as a JSON string.\n *\n * ponytail: the whole backup is materialized in memory. Fine for the sites\n * EmDash targets today; truly huge databases should use `wrangler d1 export`\n * (documented on the backups docs page). Upgrade path: stream table-by-table.\n */\nexport async function generateBackupJson(db: Kysely<Database>): Promise<string> {\n\tconst snapshot = await generateSnapshot(db, {\n\t\tincludeDrafts: true,\n\t\tincludeTrashed: true,\n\t\toptionPrefixes: BACKUP_OPTION_PREFIXES,\n\t});\n\n\treturn JSON.stringify({\n\t\tformat: \"emdash-backup\",\n\t\tformatVersion: 1,\n\t\temdashVersion: VERSION,\n\t\tgeneratedAt: snapshot.generatedAt,\n\t\tschema: snapshot.schema,\n\t\ttables: snapshot.tables,\n\t});\n}\n\n/** Derive the archive filename for a given date (plus a random suffix). */\nexport function archiveNameForDate(date: Date): string {\n\t// 2026-07-09T08:45:12.345Z → emdash-backup-2026-07-09T08-45-12-1a2b3c4d.json\n\tconst stamp = date.toISOString().slice(0, 19).replaceAll(\":\", \"-\");\n\tconst suffix = crypto.randomUUID().replaceAll(\"-\", \"\").slice(0, 8);\n\treturn `emdash-backup-${stamp}-${suffix}.json`;\n}\n\n// ── Settings ────────────────────────────────────────────────────\n\nexport async function getBackupSettings(db: Kysely<Database>): Promise<BackupSettings> {\n\tconst options = new OptionsRepository(db);\n\tconst stored = await options.get<Partial<BackupSettings>>(BACKUP_SETTINGS_KEY);\n\tif (!stored) return { ...DEFAULT_SETTINGS };\n\treturn {\n\t\tenabled: stored.enabled === true,\n\t\tretention: clampRetention(stored.retention ?? BACKUP_RETENTION_DEFAULT),\n\t};\n}\n\nexport async function updateBackupSettings(\n\tdb: Kysely<Database>,\n\tinput: { enabled: boolean; retention: number },\n): Promise<ApiResult<BackupSettings>> {\n\ttry {\n\t\tconst settings: BackupSettings = {\n\t\t\tenabled: input.enabled,\n\t\t\tretention: clampRetention(input.retention),\n\t\t};\n\t\tconst options = new OptionsRepository(db);\n\t\tawait options.set(BACKUP_SETTINGS_KEY, settings);\n\t\treturn { success: true, data: settings };\n\t} catch (error) {\n\t\tconsole.error(\"[backup] Failed to update settings:\", error);\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: ErrorCode.BACKUP_SETTINGS_ERROR, message: \"Failed to update backup settings\" },\n\t\t};\n\t}\n}\n\n// ── Archives in storage ─────────────────────────────────────────\n\n/**\n * List stored archives, newest first.\n *\n * ponytail: single unpaginated list. The retention cap (max 30) bounds the\n * archive count, so one page always suffices.\n */\nexport async function listBackupArchives(storage: Storage): Promise<ApiResult<BackupArchive[]>> {\n\ttry {\n\t\tconst result = await storage.list({\n\t\t\tprefix: `${BACKUP_STORAGE_PREFIX}${BACKUP_FILE_PREFIX}`,\n\t\t\tlimit: 100,\n\t\t});\n\t\tconst archives = result.files\n\t\t\t.map((file) => ({\n\t\t\t\tname: file.key.slice(BACKUP_STORAGE_PREFIX.length),\n\t\t\t\tsize: file.size,\n\t\t\t\tlastModified: file.lastModified.toISOString(),\n\t\t\t}))\n\t\t\t.filter((archive) => isValidArchiveName(archive.name))\n\t\t\t.toSorted((a, b) => (a.name < b.name ? 1 : -1));\n\t\treturn { success: true, data: archives };\n\t} catch (error) {\n\t\tconsole.error(\"[backup] Failed to list archives:\", error);\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: ErrorCode.BACKUP_LIST_ERROR, message: \"Failed to list backup archives\" },\n\t\t};\n\t}\n}\n\n/**\n * Create a backup and store it as an archive, then prune old archives\n * beyond `retention`.\n */\nexport async function runBackupToStorage(\n\tdb: Kysely<Database>,\n\tstorage: Storage,\n\tretention: number,\n): Promise<ApiResult<BackupArchive>> {\n\ttry {\n\t\tconst json = await generateBackupJson(db);\n\t\tconst name = archiveNameForDate(new Date());\n\t\tconst body = new TextEncoder().encode(json);\n\n\t\tawait storage.upload({\n\t\t\tkey: `${BACKUP_STORAGE_PREFIX}${name}`,\n\t\t\tbody,\n\t\t\tcontentType: \"application/json\",\n\t\t});\n\n\t\tawait pruneArchives(storage, clampRetention(retention));\n\n\t\treturn {\n\t\t\tsuccess: true,\n\t\t\tdata: { name, size: body.byteLength, lastModified: new Date().toISOString() },\n\t\t};\n\t} catch (error) {\n\t\tconsole.error(\"[backup] Failed to create archive:\", error);\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: ErrorCode.BACKUP_CREATE_ERROR, message: \"Failed to create backup archive\" },\n\t\t};\n\t}\n}\n\n/** Delete archives beyond the newest `keep`. Failures are logged, not fatal. */\nasync function pruneArchives(storage: Storage, keep: number): Promise<void> {\n\tconst listed = await listBackupArchives(storage);\n\tif (!listed.success) return;\n\n\tfor (const archive of listed.data.slice(keep)) {\n\t\ttry {\n\t\t\tawait storage.delete(`${BACKUP_STORAGE_PREFIX}${archive.name}`);\n\t\t} catch (error) {\n\t\t\tconsole.error(`[backup] Failed to prune archive ${archive.name}:`, error);\n\t\t}\n\t}\n}\n\nexport async function deleteBackupArchive(\n\tstorage: Storage,\n\tname: string,\n): Promise<ApiResult<{ deleted: true }>> {\n\tif (!isValidArchiveName(name)) {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: ErrorCode.VALIDATION_ERROR, message: \"Invalid archive name\" },\n\t\t};\n\t}\n\ttry {\n\t\tawait storage.delete(`${BACKUP_STORAGE_PREFIX}${name}`);\n\t\treturn { success: true, data: { deleted: true } };\n\t} catch (error) {\n\t\tconsole.error(`[backup] Failed to delete archive ${name}:`, error);\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: ErrorCode.BACKUP_DELETE_ERROR, message: \"Failed to delete backup archive\" },\n\t\t};\n\t}\n}\n\n// ── Scheduled runs ──────────────────────────────────────────────\n\n/**\n * Run a scheduled backup if enabled and due. Called from the maintenance\n * tick alongside scheduled publishing and system cleanup — never from a\n * request. Never throws.\n *\n * ponytail: last-run bookkeeping is a plain read-then-write, so two isolates\n * ticking simultaneously could both back up. Worst case is a duplicate\n * archive that retention prunes; not worth a lock.\n */\nexport async function maybeRunScheduledBackup(\n\tdb: Kysely<Database>,\n\tstorage: Storage | undefined,\n): Promise<void> {\n\ttry {\n\t\tif (!storage) return;\n\n\t\tconst settings = await getBackupSettings(db);\n\t\tif (!settings.enabled) return;\n\n\t\tconst options = new OptionsRepository(db);\n\t\tconst lastRun = await options.get<string>(BACKUP_LAST_RUN_KEY);\n\t\tif (lastRun) {\n\t\t\tconst elapsed = Date.now() - Date.parse(lastRun);\n\t\t\tif (Number.isFinite(elapsed) && elapsed < SCHEDULED_BACKUP_INTERVAL_MS) return;\n\t\t}\n\n\t\tconst result = await runBackupToStorage(db, storage, settings.retention);\n\t\tif (result.success) {\n\t\t\tawait options.set(BACKUP_LAST_RUN_KEY, new Date().toISOString());\n\t\t\tconsole.log(`[backup] Scheduled backup stored: ${result.data.name}`);\n\t\t}\n\t} catch (error) {\n\t\tconsole.error(\"[backup] Scheduled backup failed:\", error);\n\t}\n}\n"],"mappings":";;;;;;;AAiCA,MAAa,wBAAwB;;;;;;AAOrC,MAAM,qBAAqB;;AAG3B,MAAa,sBAAsB;;AAGnC,MAAM,sBAAsB;;AAG5B,MAAM,+BAA+B,OAAU,KAAK;;AAGpD,MAAa,uBAAuB;AACpC,MAAa,uBAAuB;AACpC,MAAM,2BAA2B;;;;;;;AAQjC,MAAM,yBAAyB;CAAC;CAAS;CAAgB;CAAgB;;;;;;;AAQzE,MAAM,uBACL;AAED,SAAgB,mBAAmB,MAAuB;AACzD,QAAO,qBAAqB,KAAK,KAAK;;AAqBvC,MAAM,mBAAmC;CACxC,SAAS;CACT,WAAW;CACX;AAED,SAAS,eAAe,OAAuB;AAC9C,KAAI,CAAC,OAAO,SAAS,MAAM,CAAE,QAAO;AACpC,QAAO,KAAK,IAAI,sBAAsB,KAAK,IAAI,sBAAsB,KAAK,MAAM,MAAM,CAAC,CAAC;;;;;;;;;AAYzF,eAAsB,mBAAmB,IAAuC;CAC/E,MAAM,WAAW,MAAM,iBAAiB,IAAI;EAC3C,eAAe;EACf,gBAAgB;EAChB,gBAAgB;EAChB,CAAC;AAEF,QAAO,KAAK,UAAU;EACrB,QAAQ;EACR,eAAe;EACf,eAAe;EACf,aAAa,SAAS;EACtB,QAAQ,SAAS;EACjB,QAAQ,SAAS;EACjB,CAAC;;;AAIH,SAAgB,mBAAmB,MAAoB;AAItD,QAAO,iBAFO,KAAK,aAAa,CAAC,MAAM,GAAG,GAAG,CAAC,WAAW,KAAK,IAAI,CAEpC,GADf,OAAO,YAAY,CAAC,WAAW,KAAK,GAAG,CAAC,MAAM,GAAG,EAAE,CAC1B;;AAKzC,eAAsB,kBAAkB,IAA+C;CAEtF,MAAM,SAAS,MADC,IAAI,kBAAkB,GAAG,CACZ,IAA6B,oBAAoB;AAC9E,KAAI,CAAC,OAAQ,QAAO,EAAE,GAAG,kBAAkB;AAC3C,QAAO;EACN,SAAS,OAAO,YAAY;EAC5B,WAAW,eAAe,OAAO,aAAa,yBAAyB;EACvE;;AAGF,eAAsB,qBACrB,IACA,OACqC;AACrC,KAAI;EACH,MAAM,WAA2B;GAChC,SAAS,MAAM;GACf,WAAW,eAAe,MAAM,UAAU;GAC1C;AAED,QADgB,IAAI,kBAAkB,GAAG,CAC3B,IAAI,qBAAqB,SAAS;AAChD,SAAO;GAAE,SAAS;GAAM,MAAM;GAAU;UAChC,OAAO;AACf,UAAQ,MAAM,uCAAuC,MAAM;AAC3D,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM,UAAU;IAAuB,SAAS;IAAoC;GAC7F;;;;;;;;;AAYH,eAAsB,mBAAmB,SAAuD;AAC/F,KAAI;AAaH,SAAO;GAAE,SAAS;GAAM,OAZT,MAAM,QAAQ,KAAK;IACjC,QAAQ,GAAG,wBAAwB;IACnC,OAAO;IACP,CAAC,EACsB,MACtB,KAAK,UAAU;IACf,MAAM,KAAK,IAAI,MAAM,EAA6B;IAClD,MAAM,KAAK;IACX,cAAc,KAAK,aAAa,aAAa;IAC7C,EAAE,CACF,QAAQ,YAAY,mBAAmB,QAAQ,KAAK,CAAC,CACrD,UAAU,GAAG,MAAO,EAAE,OAAO,EAAE,OAAO,IAAI,GAAI;GACR;UAChC,OAAO;AACf,UAAQ,MAAM,qCAAqC,MAAM;AACzD,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM,UAAU;IAAmB,SAAS;IAAkC;GACvF;;;;;;;AAQH,eAAsB,mBACrB,IACA,SACA,WACoC;AACpC,KAAI;EACH,MAAM,OAAO,MAAM,mBAAmB,GAAG;EACzC,MAAM,OAAO,mCAAmB,IAAI,MAAM,CAAC;EAC3C,MAAM,OAAO,IAAI,aAAa,CAAC,OAAO,KAAK;AAE3C,QAAM,QAAQ,OAAO;GACpB,KAAK,GAAG,wBAAwB;GAChC;GACA,aAAa;GACb,CAAC;AAEF,QAAM,cAAc,SAAS,eAAe,UAAU,CAAC;AAEvD,SAAO;GACN,SAAS;GACT,MAAM;IAAE;IAAM,MAAM,KAAK;IAAY,+BAAc,IAAI,MAAM,EAAC,aAAa;IAAE;GAC7E;UACO,OAAO;AACf,UAAQ,MAAM,sCAAsC,MAAM;AAC1D,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM,UAAU;IAAqB,SAAS;IAAmC;GAC1F;;;;AAKH,eAAe,cAAc,SAAkB,MAA6B;CAC3E,MAAM,SAAS,MAAM,mBAAmB,QAAQ;AAChD,KAAI,CAAC,OAAO,QAAS;AAErB,MAAK,MAAM,WAAW,OAAO,KAAK,MAAM,KAAK,CAC5C,KAAI;AACH,QAAM,QAAQ,OAAO,GAAG,wBAAwB,QAAQ,OAAO;UACvD,OAAO;AACf,UAAQ,MAAM,oCAAoC,QAAQ,KAAK,IAAI,MAAM;;;AAK5E,eAAsB,oBACrB,SACA,MACwC;AACxC,KAAI,CAAC,mBAAmB,KAAK,CAC5B,QAAO;EACN,SAAS;EACT,OAAO;GAAE,MAAM,UAAU;GAAkB,SAAS;GAAwB;EAC5E;AAEF,KAAI;AACH,QAAM,QAAQ,OAAO,GAAG,wBAAwB,OAAO;AACvD,SAAO;GAAE,SAAS;GAAM,MAAM,EAAE,SAAS,MAAM;GAAE;UACzC,OAAO;AACf,UAAQ,MAAM,qCAAqC,KAAK,IAAI,MAAM;AAClE,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM,UAAU;IAAqB,SAAS;IAAmC;GAC1F;;;;;;;;;;;;AAeH,eAAsB,wBACrB,IACA,SACgB;AAChB,KAAI;AACH,MAAI,CAAC,QAAS;EAEd,MAAM,WAAW,MAAM,kBAAkB,GAAG;AAC5C,MAAI,CAAC,SAAS,QAAS;EAEvB,MAAM,UAAU,IAAI,kBAAkB,GAAG;EACzC,MAAM,UAAU,MAAM,QAAQ,IAAY,oBAAoB;AAC9D,MAAI,SAAS;GACZ,MAAM,UAAU,KAAK,KAAK,GAAG,KAAK,MAAM,QAAQ;AAChD,OAAI,OAAO,SAAS,QAAQ,IAAI,UAAU,6BAA8B;;EAGzE,MAAM,SAAS,MAAM,mBAAmB,IAAI,SAAS,SAAS,UAAU;AACxE,MAAI,OAAO,SAAS;AACnB,SAAM,QAAQ,IAAI,sCAAqB,IAAI,MAAM,EAAC,aAAa,CAAC;AAChE,WAAQ,IAAI,qCAAqC,OAAO,KAAK,OAAO;;UAE7D,OAAO;AACf,UAAQ,MAAM,qCAAqC,MAAM"}
+{"version":3,"file":"backup-rwVAl9NI.mjs","names":[],"sources":["../src/api/handlers/backup.ts"],"sourcesContent":["/**\n * Backup handlers — portable content backups, on demand and scheduled.\n *\n * A backup is the snapshot format (see `snapshot.ts`) wrapped in a small\n * envelope: all content (including drafts, scheduled, and trashed entries),\n * schema definitions, taxonomies, menus, widgets, revisions, media metadata,\n * and site settings.\n *\n * Deliberately NOT included:\n * - Users, sessions, credentials, API/OAuth tokens (auth data is neither\n *   portable nor safe in a user-downloadable file)\n * - Secrets (`emdash:preview_secret`, plugin config, passkey challenges)\n * - Media binaries (metadata only — the files live in the same bucket the\n *   scheduled archives are written to)\n *\n * For full point-in-time database recovery on Cloudflare, D1 Time Travel\n * covers the last 30 days out of the box; these backups complement it with\n * user-holdable, longer-lived archives.\n */\n\nimport type { Kysely } from \"kysely\";\n\nimport { OptionsRepository } from \"../../database/repositories/options.js\";\nimport type { Database } from \"../../database/types.js\";\nimport type { Storage } from \"../../storage/types.js\";\nimport { VERSION } from \"../../version.js\";\nimport { ErrorCode } from \"../errors.js\";\nimport type { ApiResult } from \"../types.js\";\nimport { generateSnapshot } from \"./snapshot.js\";\n\n// ── Constants ───────────────────────────────────────────────────\n\n/** Storage key prefix for scheduled/manual archives. */\nexport const BACKUP_STORAGE_PREFIX = \"backups/\";\n\n/**\n * Filename prefix within the backups/ folder. Included in the list() prefix\n * so LocalStorage (which matches directory + filename prefix, not flat keys\n * like S3/R2) finds the archives too.\n */\nconst BACKUP_FILE_PREFIX = \"emdash-backup-\";\n\n/** Options key holding the scheduled-backup settings. */\nexport const BACKUP_SETTINGS_KEY = \"emdash:backups\";\n\n/** Options key holding the ISO timestamp of the last scheduled run. */\nconst BACKUP_LAST_RUN_KEY = \"emdash:backups_last_run\";\n\n/** Minimum interval between scheduled backups (23h — daily with cron jitter). */\nconst SCHEDULED_BACKUP_INTERVAL_MS = 23 * 60 * 60 * 1000;\n\n/** Retention bounds for stored archives. */\nexport const BACKUP_RETENTION_MIN = 1;\nexport const BACKUP_RETENTION_MAX = 30;\nconst BACKUP_RETENTION_DEFAULT = 7;\n\n/**\n * Options-table key prefixes included in backups. Site settings plus the\n * site-identity keys (`emdash:site_title`, `emdash:site_tagline`,\n * `emdash:site_url`). Never widen this to a prefix that can match secrets\n * (`emdash:preview_secret`, `plugin:`, `emdash:passkey_pending:`).\n */\nconst BACKUP_OPTION_PREFIXES = [\"site:\", \"emdash:site_\", \"emdash:locale\"];\n\n/**\n * Archive filename shape. Strict allowlist — the download/delete routes\n * interpolate this into a storage key, so it must never contain `/` or `..`.\n * The random suffix makes names unguessable (defense in depth on top of the\n * media route's backups/ deny) and avoids same-second collisions.\n */\nconst ARCHIVE_NAME_PATTERN =\n\t/^emdash-backup-\\d{4}-\\d{2}-\\d{2}T\\d{2}-\\d{2}-\\d{2}-[0-9a-f]{8}\\.json$/;\n\nexport function isValidArchiveName(name: string): boolean {\n\treturn ARCHIVE_NAME_PATTERN.test(name);\n}\n\n// ── Types ───────────────────────────────────────────────────────\n\nexport interface BackupSettings {\n\t/** Whether daily scheduled backups to storage are enabled. */\n\tenabled: boolean;\n\t/** How many archives to keep in storage (oldest pruned first). */\n\tretention: number;\n}\n\nexport interface BackupArchive {\n\t/** Filename within the backups/ prefix (no path separators). */\n\tname: string;\n\t/** Size in bytes. */\n\tsize: number;\n\t/** Last-modified timestamp (ISO). */\n\tlastModified: string;\n}\n\nconst DEFAULT_SETTINGS: BackupSettings = {\n\tenabled: false,\n\tretention: BACKUP_RETENTION_DEFAULT,\n};\n\nfunction clampRetention(value: number): number {\n\tif (!Number.isFinite(value)) return BACKUP_RETENTION_DEFAULT;\n\treturn Math.min(BACKUP_RETENTION_MAX, Math.max(BACKUP_RETENTION_MIN, Math.trunc(value)));\n}\n\n// ── Export ──────────────────────────────────────────────────────\n\n/**\n * Generate a full content backup as a JSON string.\n *\n * ponytail: the whole backup is materialized in memory. Fine for the sites\n * EmDash targets today; truly huge databases should use `wrangler d1 export`\n * (documented on the backups docs page). Upgrade path: stream table-by-table.\n */\nexport async function generateBackupJson(db: Kysely<Database>): Promise<string> {\n\tconst snapshot = await generateSnapshot(db, {\n\t\tincludeDrafts: true,\n\t\tincludeTrashed: true,\n\t\toptionPrefixes: BACKUP_OPTION_PREFIXES,\n\t});\n\n\treturn JSON.stringify({\n\t\tformat: \"emdash-backup\",\n\t\tformatVersion: 1,\n\t\temdashVersion: VERSION,\n\t\tgeneratedAt: snapshot.generatedAt,\n\t\tschema: snapshot.schema,\n\t\ttables: snapshot.tables,\n\t});\n}\n\n/** Derive the archive filename for a given date (plus a random suffix). */\nexport function archiveNameForDate(date: Date): string {\n\t// 2026-07-09T08:45:12.345Z → emdash-backup-2026-07-09T08-45-12-1a2b3c4d.json\n\tconst stamp = date.toISOString().slice(0, 19).replaceAll(\":\", \"-\");\n\tconst suffix = crypto.randomUUID().replaceAll(\"-\", \"\").slice(0, 8);\n\treturn `emdash-backup-${stamp}-${suffix}.json`;\n}\n\n// ── Settings ────────────────────────────────────────────────────\n\nexport async function getBackupSettings(db: Kysely<Database>): Promise<BackupSettings> {\n\tconst options = new OptionsRepository(db);\n\tconst stored = await options.get<Partial<BackupSettings>>(BACKUP_SETTINGS_KEY);\n\tif (!stored) return { ...DEFAULT_SETTINGS };\n\treturn {\n\t\tenabled: stored.enabled === true,\n\t\tretention: clampRetention(stored.retention ?? BACKUP_RETENTION_DEFAULT),\n\t};\n}\n\nexport async function updateBackupSettings(\n\tdb: Kysely<Database>,\n\tinput: { enabled: boolean; retention: number },\n): Promise<ApiResult<BackupSettings>> {\n\ttry {\n\t\tconst settings: BackupSettings = {\n\t\t\tenabled: input.enabled,\n\t\t\tretention: clampRetention(input.retention),\n\t\t};\n\t\tconst options = new OptionsRepository(db);\n\t\tawait options.set(BACKUP_SETTINGS_KEY, settings);\n\t\treturn { success: true, data: settings };\n\t} catch (error) {\n\t\tconsole.error(\"[backup] Failed to update settings:\", error);\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: ErrorCode.BACKUP_SETTINGS_ERROR, message: \"Failed to update backup settings\" },\n\t\t};\n\t}\n}\n\n// ── Archives in storage ─────────────────────────────────────────\n\n/**\n * List stored archives, newest first.\n *\n * ponytail: single unpaginated list. The retention cap (max 30) bounds the\n * archive count, so one page always suffices.\n */\nexport async function listBackupArchives(storage: Storage): Promise<ApiResult<BackupArchive[]>> {\n\ttry {\n\t\tconst result = await storage.list({\n\t\t\tprefix: `${BACKUP_STORAGE_PREFIX}${BACKUP_FILE_PREFIX}`,\n\t\t\tlimit: 100,\n\t\t});\n\t\tconst archives = result.files\n\t\t\t.map((file) => ({\n\t\t\t\tname: file.key.slice(BACKUP_STORAGE_PREFIX.length),\n\t\t\t\tsize: file.size,\n\t\t\t\tlastModified: file.lastModified.toISOString(),\n\t\t\t}))\n\t\t\t.filter((archive) => isValidArchiveName(archive.name))\n\t\t\t.toSorted((a, b) => (a.name < b.name ? 1 : -1));\n\t\treturn { success: true, data: archives };\n\t} catch (error) {\n\t\tconsole.error(\"[backup] Failed to list archives:\", error);\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: ErrorCode.BACKUP_LIST_ERROR, message: \"Failed to list backup archives\" },\n\t\t};\n\t}\n}\n\n/**\n * Create a backup and store it as an archive, then prune old archives\n * beyond `retention`.\n */\nexport async function runBackupToStorage(\n\tdb: Kysely<Database>,\n\tstorage: Storage,\n\tretention: number,\n): Promise<ApiResult<BackupArchive>> {\n\ttry {\n\t\tconst json = await generateBackupJson(db);\n\t\tconst name = archiveNameForDate(new Date());\n\t\tconst body = new TextEncoder().encode(json);\n\n\t\tawait storage.upload({\n\t\t\tkey: `${BACKUP_STORAGE_PREFIX}${name}`,\n\t\t\tbody,\n\t\t\tcontentType: \"application/json\",\n\t\t});\n\n\t\tawait pruneArchives(storage, clampRetention(retention));\n\n\t\treturn {\n\t\t\tsuccess: true,\n\t\t\tdata: { name, size: body.byteLength, lastModified: new Date().toISOString() },\n\t\t};\n\t} catch (error) {\n\t\tconsole.error(\"[backup] Failed to create archive:\", error);\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: ErrorCode.BACKUP_CREATE_ERROR, message: \"Failed to create backup archive\" },\n\t\t};\n\t}\n}\n\n/** Delete archives beyond the newest `keep`. Failures are logged, not fatal. */\nasync function pruneArchives(storage: Storage, keep: number): Promise<void> {\n\tconst listed = await listBackupArchives(storage);\n\tif (!listed.success) return;\n\n\tfor (const archive of listed.data.slice(keep)) {\n\t\ttry {\n\t\t\tawait storage.delete(`${BACKUP_STORAGE_PREFIX}${archive.name}`);\n\t\t} catch (error) {\n\t\t\tconsole.error(`[backup] Failed to prune archive ${archive.name}:`, error);\n\t\t}\n\t}\n}\n\nexport async function deleteBackupArchive(\n\tstorage: Storage,\n\tname: string,\n): Promise<ApiResult<{ deleted: true }>> {\n\tif (!isValidArchiveName(name)) {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: ErrorCode.VALIDATION_ERROR, message: \"Invalid archive name\" },\n\t\t};\n\t}\n\ttry {\n\t\tawait storage.delete(`${BACKUP_STORAGE_PREFIX}${name}`);\n\t\treturn { success: true, data: { deleted: true } };\n\t} catch (error) {\n\t\tconsole.error(`[backup] Failed to delete archive ${name}:`, error);\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: ErrorCode.BACKUP_DELETE_ERROR, message: \"Failed to delete backup archive\" },\n\t\t};\n\t}\n}\n\n// ── Scheduled runs ──────────────────────────────────────────────\n\n/**\n * Run a scheduled backup if enabled and due. Called from the maintenance\n * tick alongside scheduled publishing and system cleanup — never from a\n * request. Never throws.\n *\n * ponytail: last-run bookkeeping is a plain read-then-write, so two isolates\n * ticking simultaneously could both back up. Worst case is a duplicate\n * archive that retention prunes; not worth a lock.\n */\nexport async function maybeRunScheduledBackup(\n\tdb: Kysely<Database>,\n\tstorage: Storage | undefined,\n): Promise<void> {\n\ttry {\n\t\tif (!storage) return;\n\n\t\tconst settings = await getBackupSettings(db);\n\t\tif (!settings.enabled) return;\n\n\t\tconst options = new OptionsRepository(db);\n\t\tconst lastRun = await options.get<string>(BACKUP_LAST_RUN_KEY);\n\t\tif (lastRun) {\n\t\t\tconst elapsed = Date.now() - Date.parse(lastRun);\n\t\t\tif (Number.isFinite(elapsed) && elapsed < SCHEDULED_BACKUP_INTERVAL_MS) return;\n\t\t}\n\n\t\tconst result = await runBackupToStorage(db, storage, settings.retention);\n\t\tif (result.success) {\n\t\t\tawait options.set(BACKUP_LAST_RUN_KEY, new Date().toISOString());\n\t\t\tconsole.log(`[backup] Scheduled backup stored: ${result.data.name}`);\n\t\t}\n\t} catch (error) {\n\t\tconsole.error(\"[backup] Scheduled backup failed:\", error);\n\t}\n}\n"],"mappings":";;;;;;;AAiCA,MAAa,wBAAwB;;;;;;AAOrC,MAAM,qBAAqB;;AAG3B,MAAa,sBAAsB;;AAGnC,MAAM,sBAAsB;;AAG5B,MAAM,+BAA+B,OAAU,KAAK;;AAGpD,MAAa,uBAAuB;AACpC,MAAa,uBAAuB;AACpC,MAAM,2BAA2B;;;;;;;AAQjC,MAAM,yBAAyB;CAAC;CAAS;CAAgB;CAAgB;;;;;;;AAQzE,MAAM,uBACL;AAED,SAAgB,mBAAmB,MAAuB;AACzD,QAAO,qBAAqB,KAAK,KAAK;;AAqBvC,MAAM,mBAAmC;CACxC,SAAS;CACT,WAAW;CACX;AAED,SAAS,eAAe,OAAuB;AAC9C,KAAI,CAAC,OAAO,SAAS,MAAM,CAAE,QAAO;AACpC,QAAO,KAAK,IAAI,sBAAsB,KAAK,IAAI,sBAAsB,KAAK,MAAM,MAAM,CAAC,CAAC;;;;;;;;;AAYzF,eAAsB,mBAAmB,IAAuC;CAC/E,MAAM,WAAW,MAAM,iBAAiB,IAAI;EAC3C,eAAe;EACf,gBAAgB;EAChB,gBAAgB;EAChB,CAAC;AAEF,QAAO,KAAK,UAAU;EACrB,QAAQ;EACR,eAAe;EACf,eAAe;EACf,aAAa,SAAS;EACtB,QAAQ,SAAS;EACjB,QAAQ,SAAS;EACjB,CAAC;;;AAIH,SAAgB,mBAAmB,MAAoB;AAItD,QAAO,iBAFO,KAAK,aAAa,CAAC,MAAM,GAAG,GAAG,CAAC,WAAW,KAAK,IAAI,CAEpC,GADf,OAAO,YAAY,CAAC,WAAW,KAAK,GAAG,CAAC,MAAM,GAAG,EAAE,CAC1B;;AAKzC,eAAsB,kBAAkB,IAA+C;CAEtF,MAAM,SAAS,MADC,IAAI,kBAAkB,GAAG,CACZ,IAA6B,oBAAoB;AAC9E,KAAI,CAAC,OAAQ,QAAO,EAAE,GAAG,kBAAkB;AAC3C,QAAO;EACN,SAAS,OAAO,YAAY;EAC5B,WAAW,eAAe,OAAO,aAAa,yBAAyB;EACvE;;AAGF,eAAsB,qBACrB,IACA,OACqC;AACrC,KAAI;EACH,MAAM,WAA2B;GAChC,SAAS,MAAM;GACf,WAAW,eAAe,MAAM,UAAU;GAC1C;AAED,QADgB,IAAI,kBAAkB,GAAG,CAC3B,IAAI,qBAAqB,SAAS;AAChD,SAAO;GAAE,SAAS;GAAM,MAAM;GAAU;UAChC,OAAO;AACf,UAAQ,MAAM,uCAAuC,MAAM;AAC3D,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM,UAAU;IAAuB,SAAS;IAAoC;GAC7F;;;;;;;;;AAYH,eAAsB,mBAAmB,SAAuD;AAC/F,KAAI;AAaH,SAAO;GAAE,SAAS;GAAM,OAZT,MAAM,QAAQ,KAAK;IACjC,QAAQ,GAAG,wBAAwB;IACnC,OAAO;IACP,CAAC,EACsB,MACtB,KAAK,UAAU;IACf,MAAM,KAAK,IAAI,MAAM,EAA6B;IAClD,MAAM,KAAK;IACX,cAAc,KAAK,aAAa,aAAa;IAC7C,EAAE,CACF,QAAQ,YAAY,mBAAmB,QAAQ,KAAK,CAAC,CACrD,UAAU,GAAG,MAAO,EAAE,OAAO,EAAE,OAAO,IAAI,GAAI;GACR;UAChC,OAAO;AACf,UAAQ,MAAM,qCAAqC,MAAM;AACzD,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM,UAAU;IAAmB,SAAS;IAAkC;GACvF;;;;;;;AAQH,eAAsB,mBACrB,IACA,SACA,WACoC;AACpC,KAAI;EACH,MAAM,OAAO,MAAM,mBAAmB,GAAG;EACzC,MAAM,OAAO,mCAAmB,IAAI,MAAM,CAAC;EAC3C,MAAM,OAAO,IAAI,aAAa,CAAC,OAAO,KAAK;AAE3C,QAAM,QAAQ,OAAO;GACpB,KAAK,GAAG,wBAAwB;GAChC;GACA,aAAa;GACb,CAAC;AAEF,QAAM,cAAc,SAAS,eAAe,UAAU,CAAC;AAEvD,SAAO;GACN,SAAS;GACT,MAAM;IAAE;IAAM,MAAM,KAAK;IAAY,+BAAc,IAAI,MAAM,EAAC,aAAa;IAAE;GAC7E;UACO,OAAO;AACf,UAAQ,MAAM,sCAAsC,MAAM;AAC1D,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM,UAAU;IAAqB,SAAS;IAAmC;GAC1F;;;;AAKH,eAAe,cAAc,SAAkB,MAA6B;CAC3E,MAAM,SAAS,MAAM,mBAAmB,QAAQ;AAChD,KAAI,CAAC,OAAO,QAAS;AAErB,MAAK,MAAM,WAAW,OAAO,KAAK,MAAM,KAAK,CAC5C,KAAI;AACH,QAAM,QAAQ,OAAO,GAAG,wBAAwB,QAAQ,OAAO;UACvD,OAAO;AACf,UAAQ,MAAM,oCAAoC,QAAQ,KAAK,IAAI,MAAM;;;AAK5E,eAAsB,oBACrB,SACA,MACwC;AACxC,KAAI,CAAC,mBAAmB,KAAK,CAC5B,QAAO;EACN,SAAS;EACT,OAAO;GAAE,MAAM,UAAU;GAAkB,SAAS;GAAwB;EAC5E;AAEF,KAAI;AACH,QAAM,QAAQ,OAAO,GAAG,wBAAwB,OAAO;AACvD,SAAO;GAAE,SAAS;GAAM,MAAM,EAAE,SAAS,MAAM;GAAE;UACzC,OAAO;AACf,UAAQ,MAAM,qCAAqC,KAAK,IAAI,MAAM;AAClE,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM,UAAU;IAAqB,SAAS;IAAmC;GAC1F;;;;;;;;;;;;AAeH,eAAsB,wBACrB,IACA,SACgB;AAChB,KAAI;AACH,MAAI,CAAC,QAAS;EAEd,MAAM,WAAW,MAAM,kBAAkB,GAAG;AAC5C,MAAI,CAAC,SAAS,QAAS;EAEvB,MAAM,UAAU,IAAI,kBAAkB,GAAG;EACzC,MAAM,UAAU,MAAM,QAAQ,IAAY,oBAAoB;AAC9D,MAAI,SAAS;GACZ,MAAM,UAAU,KAAK,KAAK,GAAG,KAAK,MAAM,QAAQ;AAChD,OAAI,OAAO,SAAS,QAAQ,IAAI,UAAU,6BAA8B;;EAGzE,MAAM,SAAS,MAAM,mBAAmB,IAAI,SAAS,SAAS,UAAU;AACxE,MAAI,OAAO,SAAS;AACnB,SAAM,QAAQ,IAAI,sCAAqB,IAAI,MAAM,EAAC,aAAa,CAAC;AAChE,WAAQ,IAAI,qCAAqC,OAAO,KAAK,OAAO;;UAE7D,OAAO;AACf,UAAQ,MAAM,qCAAqC,MAAM"}