emdash 0.37.0 → 0.39.0

package/dist/validation-DBy6WF94.mjs

@@ -0,0 +1,216 @@
+import { n as isMissingTableError } from "./db-errors-CBD5yMro.mjs";
+import { t as validateIdentifier } from "./validate-DANX1-Qi.mjs";
+import "./dialect-helpers-CtYdsX4W.mjs";
+import "./config-CGVeT8Hc.mjs";
+import "./base64-DvnNgP7e.mjs";
+import { n as chunks, t as SQL_BATCH_SIZE } from "./chunks-BmWyou79.mjs";
+import "./types-BkUg2yHx.mjs";
+import "./request-cache-DaMhSQdx.mjs";
+import "./fts-manager-DMb0sbIQ.mjs";
+import "./collection-slugs-cache-D9auiKmI.mjs";
+import "./capture-triggers-gxQxnxrJ.mjs";
+import "./activation-CaMfdBt1.mjs";
+import "./collection-deletion-C3Xixmkx.mjs";
+import "./content-refresh-BHLHJgyt.mjs";
+import { n as SchemaRegistry } from "./registry-CkuPoZs7.mjs";
+import "./hash-CLVFzWvx.mjs";
+import { r as generateZodSchema } from "./zod-generator-D_yHIWfs.mjs";
+import { sql } from "kysely";
+
+//#region src/api/handlers/validation.ts
+/**
+* Field-level validation for content create / update.
+*
+* Wires the existing `generateZodSchema()` pipeline (`schema/zod-generator.ts`)
+* into the handler boundary so REST and MCP both get the same enforcement:
+*
+*  - required fields must be present and non-empty
+*  - select / multiSelect values must match the configured options
+*  - reference fields must resolve to a real, non-trashed target
+*
+* Errors surface as `{ code: "VALIDATION_ERROR", message, details: { issues } }`.
+* The message lists every offending field so callers can fix everything in a
+* single round trip; `issues` carries the same failures one by one, with a
+* code and any bound that failed, so the admin can word them for editors.
+*/
+/** Treat `undefined`, `null`, and `""` as "not set". */
+function isMissing(value) {
+	return value === void 0 || value === null || value === "";
+}
+/**
+* Resolve the target collection slug for a reference field.
+*
+* Schema-defined reference fields (the static `reference()` factory in
+* `fields/reference.ts`) put the target in `options.collection`. The MCP
+* `schema_create_field` tool also puts it there. Tests and some admin paths
+* stash it inside `validation.collection` directly; we accept both.
+*/
+function getReferenceTargetCollection(field) {
+	const fromOptions = field.options?.collection;
+	if (typeof fromOptions === "string" && fromOptions.length > 0) return fromOptions;
+	const validation = field.validation;
+	if (validation && "collection" in validation) {
+		const fromValidation = validation.collection;
+		if (typeof fromValidation === "string" && fromValidation.length > 0) return fromValidation;
+	}
+}
+/**
+* Format a Zod issue path into a human-readable field reference, e.g.
+* `tags`, `tags.1`, `image.alt`.
+*/
+function formatIssuePath(path) {
+	if (path.length === 0) return "(root)";
+	return path.map((seg) => String(seg)).join(".");
+}
+function isSubFieldPath(path, fieldTypes) {
+	return path.length === 3 && fieldTypes.get(String(path[0])) === "repeater";
+}
+function isFieldOrSubFieldPath(path, fieldTypes) {
+	return path.length === 1 || isSubFieldPath(path, fieldTypes);
+}
+function fromZodIssue(issue, fieldTypes) {
+	const result = {
+		path: formatIssuePath(issue.path),
+		code: issue.code,
+		message: issue.message
+	};
+	switch (issue.code) {
+		case "invalid_type":
+		case "invalid_union":
+		case "invalid_value":
+			if (issue.input == null && isFieldOrSubFieldPath(issue.path, fieldTypes)) result.code = "required";
+			break;
+		case "too_small":
+			result.origin = issue.origin;
+			if (typeof issue.minimum === "number") result.minimum = issue.minimum;
+			if (issue.input === "" && isSubFieldPath(issue.path, fieldTypes)) result.code = "required";
+			break;
+		case "too_big":
+			result.origin = issue.origin;
+			if (typeof issue.maximum === "number") result.maximum = issue.maximum;
+			break;
+		case "invalid_format":
+			result.format = issue.format;
+			break;
+	}
+	return result;
+}
+/**
+* Validate `data` against the collection's field definitions.
+*
+* `partial: true` switches Zod into partial mode so updates can include
+* only the fields being changed without tripping required-field errors on
+* fields the caller didn't touch. Required fields that ARE present in
+* partial-mode data still get the empty-string check below.
+*/
+async function validateContentData(db, collection, data, options = {}) {
+	const collectionWithFields = await new SchemaRegistry(db).getCollectionWithFields(collection);
+	if (!collectionWithFields) return {
+		ok: false,
+		error: {
+			code: "COLLECTION_NOT_FOUND",
+			message: `Collection '${collection}' not found`
+		}
+	};
+	const issues = [];
+	const unsupportedField = collectionWithFields.fields.find((field) => field.unsupportedType);
+	if (unsupportedField?.unsupportedType) {
+		const { type, path } = unsupportedField.unsupportedType;
+		return {
+			ok: false,
+			error: {
+				code: "UNSUPPORTED_FIELD_TYPE",
+				message: `Collection '${collection}' field '${unsupportedField.slug}' uses unsupported field type '${type}' at '${path}'`
+			}
+		};
+	}
+	const knownFields = new Set(collectionWithFields.fields.map((f) => f.slug));
+	for (const key of Object.keys(data)) {
+		if (key.startsWith("_")) continue;
+		if (!knownFields.has(key)) issues.push({
+			path: key,
+			code: "unknown_field",
+			message: `unknown field on collection '${collection}'`
+		});
+	}
+	const baseSchema = generateZodSchema(collectionWithFields);
+	const parsed = (options.partial ? baseSchema.partial() : baseSchema).safeParse(data, { reportInput: true });
+	if (!parsed.success) {
+		const fieldTypes = new Map(collectionWithFields.fields.map((f) => [f.slug, f.type]));
+		for (const issue of parsed.error.issues) issues.push(fromZodIssue(issue, fieldTypes));
+	}
+	for (const field of collectionWithFields.fields) {
+		if (!field.required) continue;
+		const present = Object.hasOwn(data, field.slug);
+		if (options.partial && !present) continue;
+		if (data[field.slug] === "") issues.push({
+			path: field.slug,
+			code: "required",
+			message: "required (empty value not allowed)"
+		});
+	}
+	const refsByTarget = /* @__PURE__ */ new Map();
+	for (const field of collectionWithFields.fields) {
+		if (field.type !== "reference") continue;
+		if (options.partial && !Object.hasOwn(data, field.slug)) continue;
+		const value = data[field.slug];
+		if (isMissing(value)) continue;
+		if (typeof value !== "string") continue;
+		const target = getReferenceTargetCollection(field);
+		if (!target) continue;
+		const list = refsByTarget.get(target) ?? [];
+		list.push({
+			field: field.slug,
+			id: value
+		});
+		refsByTarget.set(target, list);
+	}
+	for (const [target, refs] of refsByTarget) {
+		try {
+			validateIdentifier(target, "reference target collection");
+		} catch {
+			for (const ref of refs) issues.push({
+				path: ref.field,
+				code: "invalid_reference_target",
+				message: `invalid reference target collection '${target}'`
+			});
+			continue;
+		}
+		const ids = [...new Set(refs.map((r) => r.id))];
+		const tableName = `ec_${target}`;
+		const found = /* @__PURE__ */ new Set();
+		let targetTableMissing = false;
+		for (const idChunk of chunks(ids, SQL_BATCH_SIZE)) try {
+			const rows = await sql`
+					SELECT id FROM ${sql.ref(tableName)}
+					WHERE id IN (${sql.join(idChunk)})
+					AND deleted_at IS NULL
+				`.execute(db);
+			for (const row of rows.rows) found.add(row.id);
+		} catch (error) {
+			if (isMissingTableError(error)) {
+				targetTableMissing = true;
+				break;
+			}
+			throw error;
+		}
+		for (const ref of refs) if (targetTableMissing || !found.has(ref.id)) issues.push({
+			path: ref.field,
+			code: "reference_not_found",
+			message: `target '${ref.id}' not found in collection '${target}'`
+		});
+	}
+	if (issues.length === 0) return { ok: true };
+	return {
+		ok: false,
+		error: {
+			code: "VALIDATION_ERROR",
+			message: issues.map((issue) => `${issue.path}: ${issue.message}`).join("; "),
+			details: { issues }
+		}
+	};
+}
+
+//#endregion
+export { validateContentData };
+//# sourceMappingURL=validation-DBy6WF94.mjs.map

package/dist/validation-DBy6WF94.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation-DBy6WF94.mjs","names":[],"sources":["../src/api/handlers/validation.ts"],"sourcesContent":["/**\n * Field-level validation for content create / update.\n *\n * Wires the existing `generateZodSchema()` pipeline (`schema/zod-generator.ts`)\n * into the handler boundary so REST and MCP both get the same enforcement:\n *\n *  - required fields must be present and non-empty\n *  - select / multiSelect values must match the configured options\n *  - reference fields must resolve to a real, non-trashed target\n *\n * Errors surface as `{ code: \"VALIDATION_ERROR\", message, details: { issues } }`.\n * The message lists every offending field so callers can fix everything in a\n * single round trip; `issues` carries the same failures one by one, with a\n * code and any bound that failed, so the admin can word them for editors.\n */\n\nimport { sql, type Kysely } from \"kysely\";\nimport type { z } from \"zod\";\n\nimport type { Database } from \"../../database/types.js\";\nimport { validateIdentifier } from \"../../database/validate.js\";\nimport { SchemaRegistry } from \"../../schema/registry.js\";\nimport type { Field } from \"../../schema/types.js\";\nimport { generateZodSchema } from \"../../schema/zod-generator.js\";\nimport { chunks, SQL_BATCH_SIZE } from \"../../utils/chunks.js\";\nimport { isMissingTableError } from \"../../utils/db-errors.js\";\n\n/**\n * One rejected value. `code` is `required`, `unknown_field`,\n * `reference_not_found` or `invalid_reference_target`, or else the Zod issue\n * code. Length, range and item-count failures carry `origin` and the bound,\n * format failures carry `format`.\n */\nexport interface ContentValidationIssue {\n\tpath: string;\n\tcode: string;\n\tmessage: string;\n\torigin?: string;\n\tminimum?: number;\n\tmaximum?: number;\n\tformat?: string;\n}\n\ntype ValidationResult =\n\t| { ok: true }\n\t| {\n\t\t\tok: false;\n\t\t\terror: {\n\t\t\t\tcode: \"VALIDATION_ERROR\" | \"COLLECTION_NOT_FOUND\" | \"UNSUPPORTED_FIELD_TYPE\";\n\t\t\t\tmessage: string;\n\t\t\t\tdetails?: { issues: ContentValidationIssue[] };\n\t\t\t};\n\t  };\n\n/** Treat `undefined`, `null`, and `\"\"` as \"not set\". */\nfunction isMissing(value: unknown): boolean {\n\treturn value === undefined || value === null || value === \"\";\n}\n\n/**\n * Resolve the target collection slug for a reference field.\n *\n * Schema-defined reference fields (the static `reference()` factory in\n * `fields/reference.ts`) put the target in `options.collection`. The MCP\n * `schema_create_field` tool also puts it there. Tests and some admin paths\n * stash it inside `validation.collection` directly; we accept both.\n */\nfunction getReferenceTargetCollection(field: Field): string | undefined {\n\tconst fromOptions = field.options?.collection;\n\tif (typeof fromOptions === \"string\" && fromOptions.length > 0) return fromOptions;\n\tconst validation = field.validation;\n\tif (validation && \"collection\" in validation) {\n\t\tconst fromValidation: unknown = (validation as { collection?: unknown }).collection;\n\t\tif (typeof fromValidation === \"string\" && fromValidation.length > 0) return fromValidation;\n\t}\n\treturn undefined;\n}\n\n/**\n * Format a Zod issue path into a human-readable field reference, e.g.\n * `tags`, `tags.1`, `image.alt`.\n */\nfunction formatIssuePath(path: ReadonlyArray<PropertyKey>): string {\n\tif (path.length === 0) return \"(root)\";\n\treturn path.map((seg) => String(seg)).join(\".\");\n}\n\nfunction isSubFieldPath(\n\tpath: ReadonlyArray<PropertyKey>,\n\tfieldTypes: ReadonlyMap<string, string>,\n): boolean {\n\treturn path.length === 3 && fieldTypes.get(String(path[0])) === \"repeater\";\n}\n\nfunction isFieldOrSubFieldPath(\n\tpath: ReadonlyArray<PropertyKey>,\n\tfieldTypes: ReadonlyMap<string, string>,\n): boolean {\n\treturn path.length === 1 || isSubFieldPath(path, fieldTypes);\n}\n\nfunction fromZodIssue(\n\tissue: z.core.$ZodIssue,\n\tfieldTypes: ReadonlyMap<string, string>,\n): ContentValidationIssue {\n\tconst result: ContentValidationIssue = {\n\t\tpath: formatIssuePath(issue.path),\n\t\tcode: issue.code,\n\t\tmessage: issue.message,\n\t};\n\tswitch (issue.code) {\n\t\tcase \"invalid_type\":\n\t\tcase \"invalid_union\":\n\t\tcase \"invalid_value\":\n\t\t\t// Zod reports a missing or null value as a type, union or option\n\t\t\t// mismatch. A key missing inside a value, such as a Portable Text\n\t\t\t// block's `_type`, leaves the value malformed rather than the field empty.\n\t\t\tif (issue.input == null && isFieldOrSubFieldPath(issue.path, fieldTypes)) {\n\t\t\t\tresult.code = \"required\";\n\t\t\t}\n\t\t\tbreak;\n\t\tcase \"too_small\":\n\t\t\tresult.origin = issue.origin;\n\t\t\tif (typeof issue.minimum === \"number\") result.minimum = issue.minimum;\n\t\t\t// A required repeater sub-field rejects \"\" as a one-character minimum.\n\t\t\tif (issue.input === \"\" && isSubFieldPath(issue.path, fieldTypes)) {\n\t\t\t\tresult.code = \"required\";\n\t\t\t}\n\t\t\tbreak;\n\t\tcase \"too_big\":\n\t\t\tresult.origin = issue.origin;\n\t\t\tif (typeof issue.maximum === \"number\") result.maximum = issue.maximum;\n\t\t\tbreak;\n\t\tcase \"invalid_format\":\n\t\t\tresult.format = issue.format;\n\t\t\tbreak;\n\t}\n\treturn result;\n}\n\n/**\n * Validate `data` against the collection's field definitions.\n *\n * `partial: true` switches Zod into partial mode so updates can include\n * only the fields being changed without tripping required-field errors on\n * fields the caller didn't touch. Required fields that ARE present in\n * partial-mode data still get the empty-string check below.\n */\nexport async function validateContentData(\n\tdb: Kysely<Database>,\n\tcollection: string,\n\tdata: Record<string, unknown>,\n\toptions: { partial?: boolean } = {},\n): Promise<ValidationResult> {\n\tconst registry = new SchemaRegistry(db);\n\tconst collectionWithFields = await registry.getCollectionWithFields(collection);\n\tif (!collectionWithFields) {\n\t\treturn {\n\t\t\tok: false,\n\t\t\terror: {\n\t\t\t\tcode: \"COLLECTION_NOT_FOUND\",\n\t\t\t\tmessage: `Collection '${collection}' not found`,\n\t\t\t},\n\t\t};\n\t}\n\n\tconst issues: ContentValidationIssue[] = [];\n\tconst unsupportedField = collectionWithFields.fields.find((field) => field.unsupportedType);\n\tif (unsupportedField?.unsupportedType) {\n\t\tconst { type, path } = unsupportedField.unsupportedType;\n\t\treturn {\n\t\t\tok: false,\n\t\t\terror: {\n\t\t\t\tcode: \"UNSUPPORTED_FIELD_TYPE\",\n\t\t\t\tmessage: `Collection '${collection}' field '${unsupportedField.slug}' uses unsupported field type '${type}' at '${path}'`,\n\t\t\t},\n\t\t};\n\t}\n\n\t// Detect unknown keys explicitly so callers get a useful error rather\n\t// than silently dropped data. Leading-underscore keys (e.g. `_slug`,\n\t// `_rev`) are reserved for internal handler/runtime use and aren't real\n\t// fields; skip them.\n\tconst knownFields = new Set(collectionWithFields.fields.map((f) => f.slug));\n\tfor (const key of Object.keys(data)) {\n\t\tif (key.startsWith(\"_\")) continue;\n\t\tif (!knownFields.has(key)) {\n\t\t\tissues.push({\n\t\t\t\tpath: key,\n\t\t\t\tcode: \"unknown_field\",\n\t\t\t\tmessage: `unknown field on collection '${collection}'`,\n\t\t\t});\n\t\t}\n\t}\n\n\t// Zod handles type, enum, length and missing-required (in non-partial\n\t// mode) checks. Empty-string handling for required string fields is\n\t// done as a separate pass below since Zod's `z.string()` accepts \"\".\n\tconst baseSchema = generateZodSchema(collectionWithFields);\n\tconst schema = options.partial ? baseSchema.partial() : baseSchema;\n\tconst parsed = schema.safeParse(data, { reportInput: true });\n\tif (!parsed.success) {\n\t\tconst fieldTypes = new Map(collectionWithFields.fields.map((f) => [f.slug, f.type]));\n\t\tfor (const issue of parsed.error.issues) {\n\t\t\tissues.push(fromZodIssue(issue, fieldTypes));\n\t\t}\n\t}\n\n\t// Empty-string-on-required check. In create mode (partial=false) Zod\n\t// already catches missing/null for required fields, but `z.string()`\n\t// happily accepts \"\". In update mode (partial=true) the field is only\n\t// checked if it's present in `data`.\n\tfor (const field of collectionWithFields.fields) {\n\t\tif (!field.required) continue;\n\t\tconst present = Object.hasOwn(data, field.slug);\n\t\tif (options.partial && !present) continue;\n\t\tif (data[field.slug] === \"\") {\n\t\t\tissues.push({\n\t\t\t\tpath: field.slug,\n\t\t\t\tcode: \"required\",\n\t\t\t\tmessage: \"required (empty value not allowed)\",\n\t\t\t});\n\t\t}\n\t}\n\n\t// Reference target existence. Only check fields that:\n\t//   - have a value (non-missing) in `data`\n\t//   - have a resolvable target collection\n\t//   - in partial mode: are present in `data`\n\t// Batch one IN-query per target collection to keep round-trips low.\n\tconst refsByTarget = new Map<string, { field: string; id: string }[]>();\n\tfor (const field of collectionWithFields.fields) {\n\t\tif (field.type !== \"reference\") continue;\n\t\tif (options.partial && !Object.hasOwn(data, field.slug)) continue;\n\t\tconst value = data[field.slug];\n\t\tif (isMissing(value)) continue;\n\t\tif (typeof value !== \"string\") continue; // Zod will have flagged this already\n\t\tconst target = getReferenceTargetCollection(field);\n\t\tif (!target) continue;\n\t\tconst list = refsByTarget.get(target) ?? [];\n\t\tlist.push({ field: field.slug, id: value });\n\t\trefsByTarget.set(target, list);\n\t}\n\n\tfor (const [target, refs] of refsByTarget) {\n\t\t// Validate the target collection slug before interpolating into raw\n\t\t// SQL — defense-in-depth even though slugs are already validated at\n\t\t// schema-create time.\n\t\ttry {\n\t\t\tvalidateIdentifier(target, \"reference target collection\");\n\t\t} catch {\n\t\t\tfor (const ref of refs) {\n\t\t\t\tissues.push({\n\t\t\t\t\tpath: ref.field,\n\t\t\t\t\tcode: \"invalid_reference_target\",\n\t\t\t\t\tmessage: `invalid reference target collection '${target}'`,\n\t\t\t\t});\n\t\t\t}\n\t\t\tcontinue;\n\t\t}\n\n\t\tconst ids = [...new Set(refs.map((r) => r.id))];\n\t\tconst tableName = `ec_${target}`;\n\n\t\t// Chunk the IN clause to stay below D1's bind-parameter limit. One\n\t\t// reference per request is the common case today; chunking makes the\n\t\t// helper safe if a future multiSelect-of-references is added.\n\t\tconst found = new Set<string>();\n\t\tlet targetTableMissing = false;\n\t\tfor (const idChunk of chunks(ids, SQL_BATCH_SIZE)) {\n\t\t\ttry {\n\t\t\t\tconst rows = await sql<{ id: string }>`\n\t\t\t\t\tSELECT id FROM ${sql.ref(tableName)}\n\t\t\t\t\tWHERE id IN (${sql.join(idChunk)})\n\t\t\t\t\tAND deleted_at IS NULL\n\t\t\t\t`.execute(db);\n\t\t\t\tfor (const row of rows.rows) {\n\t\t\t\t\tfound.add(row.id);\n\t\t\t\t}\n\t\t\t} catch (error) {\n\t\t\t\t// Missing table = the target collection table doesn't exist\n\t\t\t\t// (orphan reference). Treat all those references as missing.\n\t\t\t\t// Any other DB error (permissions, connection, syntax) must\n\t\t\t\t// propagate — silently dropping data integrity errors as\n\t\t\t\t// \"not found\" is exactly the bug F5 fixes.\n\t\t\t\tif (isMissingTableError(error)) {\n\t\t\t\t\ttargetTableMissing = true;\n\t\t\t\t\tbreak;\n\t\t\t\t}\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t}\n\t\tfor (const ref of refs) {\n\t\t\tif (targetTableMissing || !found.has(ref.id)) {\n\t\t\t\tissues.push({\n\t\t\t\t\tpath: ref.field,\n\t\t\t\t\tcode: \"reference_not_found\",\n\t\t\t\t\tmessage: `target '${ref.id}' not found in collection '${target}'`,\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\t}\n\n\tif (issues.length === 0) return { ok: true };\n\treturn {\n\t\tok: false,\n\t\terror: {\n\t\t\tcode: \"VALIDATION_ERROR\",\n\t\t\tmessage: issues.map((issue) => `${issue.path}: ${issue.message}`).join(\"; \"),\n\t\t\tdetails: { issues },\n\t\t},\n\t};\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuDA,SAAS,UAAU,OAAyB;AAC3C,QAAO,UAAU,UAAa,UAAU,QAAQ,UAAU;;;;;;;;;;AAW3D,SAAS,6BAA6B,OAAkC;CACvE,MAAM,cAAc,MAAM,SAAS;AACnC,KAAI,OAAO,gBAAgB,YAAY,YAAY,SAAS,EAAG,QAAO;CACtE,MAAM,aAAa,MAAM;AACzB,KAAI,cAAc,gBAAgB,YAAY;EAC7C,MAAM,iBAA2B,WAAwC;AACzE,MAAI,OAAO,mBAAmB,YAAY,eAAe,SAAS,EAAG,QAAO;;;;;;;AAS9E,SAAS,gBAAgB,MAA0C;AAClE,KAAI,KAAK,WAAW,EAAG,QAAO;AAC9B,QAAO,KAAK,KAAK,QAAQ,OAAO,IAAI,CAAC,CAAC,KAAK,IAAI;;AAGhD,SAAS,eACR,MACA,YACU;AACV,QAAO,KAAK,WAAW,KAAK,WAAW,IAAI,OAAO,KAAK,GAAG,CAAC,KAAK;;AAGjE,SAAS,sBACR,MACA,YACU;AACV,QAAO,KAAK,WAAW,KAAK,eAAe,MAAM,WAAW;;AAG7D,SAAS,aACR,OACA,YACyB;CACzB,MAAM,SAAiC;EACtC,MAAM,gBAAgB,MAAM,KAAK;EACjC,MAAM,MAAM;EACZ,SAAS,MAAM;EACf;AACD,SAAQ,MAAM,MAAd;EACC,KAAK;EACL,KAAK;EACL,KAAK;AAIJ,OAAI,MAAM,SAAS,QAAQ,sBAAsB,MAAM,MAAM,WAAW,CACvE,QAAO,OAAO;AAEf;EACD,KAAK;AACJ,UAAO,SAAS,MAAM;AACtB,OAAI,OAAO,MAAM,YAAY,SAAU,QAAO,UAAU,MAAM;AAE9D,OAAI,MAAM,UAAU,MAAM,eAAe,MAAM,MAAM,WAAW,CAC/D,QAAO,OAAO;AAEf;EACD,KAAK;AACJ,UAAO,SAAS,MAAM;AACtB,OAAI,OAAO,MAAM,YAAY,SAAU,QAAO,UAAU,MAAM;AAC9D;EACD,KAAK;AACJ,UAAO,SAAS,MAAM;AACtB;;AAEF,QAAO;;;;;;;;;;AAWR,eAAsB,oBACrB,IACA,YACA,MACA,UAAiC,EAAE,EACP;CAE5B,MAAM,uBAAuB,MADZ,IAAI,eAAe,GAAG,CACK,wBAAwB,WAAW;AAC/E,KAAI,CAAC,qBACJ,QAAO;EACN,IAAI;EACJ,OAAO;GACN,MAAM;GACN,SAAS,eAAe,WAAW;GACnC;EACD;CAGF,MAAM,SAAmC,EAAE;CAC3C,MAAM,mBAAmB,qBAAqB,OAAO,MAAM,UAAU,MAAM,gBAAgB;AAC3F,KAAI,kBAAkB,iBAAiB;EACtC,MAAM,EAAE,MAAM,SAAS,iBAAiB;AACxC,SAAO;GACN,IAAI;GACJ,OAAO;IACN,MAAM;IACN,SAAS,eAAe,WAAW,WAAW,iBAAiB,KAAK,iCAAiC,KAAK,QAAQ,KAAK;IACvH;GACD;;CAOF,MAAM,cAAc,IAAI,IAAI,qBAAqB,OAAO,KAAK,MAAM,EAAE,KAAK,CAAC;AAC3E,MAAK,MAAM,OAAO,OAAO,KAAK,KAAK,EAAE;AACpC,MAAI,IAAI,WAAW,IAAI,CAAE;AACzB,MAAI,CAAC,YAAY,IAAI,IAAI,CACxB,QAAO,KAAK;GACX,MAAM;GACN,MAAM;GACN,SAAS,gCAAgC,WAAW;GACpD,CAAC;;CAOJ,MAAM,aAAa,kBAAkB,qBAAqB;CAE1D,MAAM,UADS,QAAQ,UAAU,WAAW,SAAS,GAAG,YAClC,UAAU,MAAM,EAAE,aAAa,MAAM,CAAC;AAC5D,KAAI,CAAC,OAAO,SAAS;EACpB,MAAM,aAAa,IAAI,IAAI,qBAAqB,OAAO,KAAK,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;AACpF,OAAK,MAAM,SAAS,OAAO,MAAM,OAChC,QAAO,KAAK,aAAa,OAAO,WAAW,CAAC;;AAQ9C,MAAK,MAAM,SAAS,qBAAqB,QAAQ;AAChD,MAAI,CAAC,MAAM,SAAU;EACrB,MAAM,UAAU,OAAO,OAAO,MAAM,MAAM,KAAK;AAC/C,MAAI,QAAQ,WAAW,CAAC,QAAS;AACjC,MAAI,KAAK,MAAM,UAAU,GACxB,QAAO,KAAK;GACX,MAAM,MAAM;GACZ,MAAM;GACN,SAAS;GACT,CAAC;;CASJ,MAAM,+BAAe,IAAI,KAA8C;AACvE,MAAK,MAAM,SAAS,qBAAqB,QAAQ;AAChD,MAAI,MAAM,SAAS,YAAa;AAChC,MAAI,QAAQ,WAAW,CAAC,OAAO,OAAO,MAAM,MAAM,KAAK,CAAE;EACzD,MAAM,QAAQ,KAAK,MAAM;AACzB,MAAI,UAAU,MAAM,CAAE;AACtB,MAAI,OAAO,UAAU,SAAU;EAC/B,MAAM,SAAS,6BAA6B,MAAM;AAClD,MAAI,CAAC,OAAQ;EACb,MAAM,OAAO,aAAa,IAAI,OAAO,IAAI,EAAE;AAC3C,OAAK,KAAK;GAAE,OAAO,MAAM;GAAM,IAAI;GAAO,CAAC;AAC3C,eAAa,IAAI,QAAQ,KAAK;;AAG/B,MAAK,MAAM,CAAC,QAAQ,SAAS,cAAc;AAI1C,MAAI;AACH,sBAAmB,QAAQ,8BAA8B;UAClD;AACP,QAAK,MAAM,OAAO,KACjB,QAAO,KAAK;IACX,MAAM,IAAI;IACV,MAAM;IACN,SAAS,wCAAwC,OAAO;IACxD,CAAC;AAEH;;EAGD,MAAM,MAAM,CAAC,GAAG,IAAI,IAAI,KAAK,KAAK,MAAM,EAAE,GAAG,CAAC,CAAC;EAC/C,MAAM,YAAY,MAAM;EAKxB,MAAM,wBAAQ,IAAI,KAAa;EAC/B,IAAI,qBAAqB;AACzB,OAAK,MAAM,WAAW,OAAO,KAAK,eAAe,CAChD,KAAI;GACH,MAAM,OAAO,MAAM,GAAmB;sBACpB,IAAI,IAAI,UAAU,CAAC;oBACrB,IAAI,KAAK,QAAQ,CAAC;;MAEhC,QAAQ,GAAG;AACb,QAAK,MAAM,OAAO,KAAK,KACtB,OAAM,IAAI,IAAI,GAAG;WAEV,OAAO;AAMf,OAAI,oBAAoB,MAAM,EAAE;AAC/B,yBAAqB;AACrB;;AAED,SAAM;;AAGR,OAAK,MAAM,OAAO,KACjB,KAAI,sBAAsB,CAAC,MAAM,IAAI,IAAI,GAAG,CAC3C,QAAO,KAAK;GACX,MAAM,IAAI;GACV,MAAM;GACN,SAAS,WAAW,IAAI,GAAG,6BAA6B,OAAO;GAC/D,CAAC;;AAKL,KAAI,OAAO,WAAW,EAAG,QAAO,EAAE,IAAI,MAAM;AAC5C,QAAO;EACN,IAAI;EACJ,OAAO;GACN,MAAM;GACN,SAAS,OAAO,KAAK,UAAU,GAAG,MAAM,KAAK,IAAI,MAAM,UAAU,CAAC,KAAK,KAAK;GAC5E,SAAS,EAAE,QAAQ;GACnB;EACD"}

package/dist/version-B57E4Uo7.mjs

@@ -0,0 +1,7 @@
+//#region src/version.ts
+const VERSION = "0.39.0";
+const COMMIT = "b1447c95";
+
+//#endregion
+export { VERSION as n, COMMIT as t };
+//# sourceMappingURL=version-B57E4Uo7.mjs.map

package/dist/version-B57E4Uo7.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-B57E4Uo7.mjs","names":[],"sources":["../src/version.ts"],"sourcesContent":["/**\n * Build-time version constants, replaced by tsdown/Vite `define`.\n * Falls back to \"dev\" when running uncompiled (tests, dev).\n */\n\ndeclare const __EMDASH_VERSION__: string;\ndeclare const __EMDASH_COMMIT__: string;\n\nexport const VERSION: string =\n\ttypeof __EMDASH_VERSION__ !== \"undefined\" ? __EMDASH_VERSION__ : \"dev\";\n\nexport const COMMIT: string = typeof __EMDASH_COMMIT__ !== \"undefined\" ? __EMDASH_COMMIT__ : \"dev\";\n"],"mappings":";AAQA,MAAa;AAGb,MAAa"}

package/dist/widgets-wQ7Xcgq8.mjs

@@ -0,0 +1,126 @@
+import { n as peekRequestCache, r as requestCached } from "./request-cache-DaMhSQdx.mjs";
+import { i as widgetAreaTag } from "./chrome-tags-D7LGB91U.mjs";
+import { s as getDb } from "./loader-t4TxaFiQ.mjs";
+import { t as getWidgetComponents$1 } from "./components-DIl9Qzh6.mjs";
+
+//#region src/widgets/index.ts
+/**
+* Get a widget area by name, with all its widgets.
+*
+* Single query with a left join rather than area-then-widgets so the
+* common case costs one round-trip. An area with no widgets yields one
+* row with null widget columns, which we skip when mapping.
+*/
+async function getWidgetArea(name) {
+	return requestCached(`widget-area:${name}`, async () => {
+		const prefetched = peekRequestCache("widget-areas");
+		if (prefetched) try {
+			return (await prefetched).find((area) => area.name === name) ?? null;
+		} catch {}
+		const rows = await (await getDb()).selectFrom("_emdash_widget_areas as a").leftJoin("_emdash_widgets as w", "w.area_id", "a.id").select([
+			"a.id as a_id",
+			"a.name as a_name",
+			"a.label as a_label",
+			"a.description as a_description",
+			"w.id as w_id",
+			"w.type as w_type",
+			"w.title as w_title",
+			"w.content as w_content",
+			"w.menu_name as w_menu_name",
+			"w.component_id as w_component_id",
+			"w.component_props as w_component_props",
+			"w.area_id as w_area_id",
+			"w.sort_order as w_sort_order",
+			"w.created_at as w_created_at"
+		]).where("a.name", "=", name).orderBy("w.sort_order", "asc").execute();
+		const first = rows[0];
+		if (!first) return null;
+		const widgets = [];
+		for (const row of rows) {
+			if (row.w_id === null) continue;
+			const widgetRow = {
+				id: row.w_id,
+				type: row.w_type,
+				title: row.w_title,
+				content: row.w_content,
+				menu_name: row.w_menu_name,
+				component_id: row.w_component_id,
+				component_props: row.w_component_props,
+				area_id: row.w_area_id,
+				sort_order: row.w_sort_order,
+				created_at: row.w_created_at
+			};
+			widgets.push(rowToWidget(widgetRow));
+		}
+		return {
+			id: first.a_id,
+			name: first.a_name,
+			label: first.a_label,
+			description: first.a_description ?? void 0,
+			widgets
+		};
+	});
+}
+/**
+* Get a widget area by name with a Workers edge-cache hint.
+*
+* Use the returned `cacheHint` with `Astro.cache.set()` so pages that render
+* this widget area can be purged automatically when its widgets change.
+*/
+async function getWidgetAreaWithCacheHint(name) {
+	return {
+		data: await getWidgetArea(name),
+		cacheHint: { tags: [widgetAreaTag(name)] }
+	};
+}
+/**
+* Get all widget areas with their widgets
+*/
+async function getWidgetAreas() {
+	const db = await getDb();
+	const areaRows = await db.selectFrom("_emdash_widget_areas").selectAll().execute();
+	const widgetRows = await db.selectFrom("_emdash_widgets").selectAll().$castTo().orderBy("sort_order", "asc").execute();
+	const widgetsByArea = /* @__PURE__ */ new Map();
+	for (const row of widgetRows) {
+		if (!widgetsByArea.has(row.area_id)) widgetsByArea.set(row.area_id, []);
+		widgetsByArea.get(row.area_id).push(rowToWidget(row));
+	}
+	return areaRows.map((areaRow) => ({
+		id: areaRow.id,
+		name: areaRow.name,
+		label: areaRow.label,
+		description: areaRow.description ?? void 0,
+		widgets: widgetsByArea.get(areaRow.id) || []
+	}));
+}
+/**
+* Get available widget components (for admin UI)
+*/
+function getWidgetComponents() {
+	return getWidgetComponents$1();
+}
+/**
+* Convert a widget row to the API type
+*/
+function rowToWidget(row) {
+	const widget = {
+		id: row.id,
+		type: row.type,
+		title: row.title ?? void 0
+	};
+	if (row.type === "content" && row.content) try {
+		widget.content = JSON.parse(row.content);
+	} catch {}
+	if (row.type === "menu" && row.menu_name) widget.menuName = row.menu_name;
+	if (row.type === "component" && row.component_id) {
+		widget.componentId = row.component_id;
+		if (row.component_props) try {
+			widget.componentProps = JSON.parse(row.component_props);
+		} catch {}
+	}
+	return widget;
+}
+
+//#endregion
+export { rowToWidget as a, getWidgetComponents as i, getWidgetAreaWithCacheHint as n, getWidgetAreas as r, getWidgetArea as t };
+//# sourceMappingURL=widgets-wQ7Xcgq8.mjs.map

package/dist/widgets-wQ7Xcgq8.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"widgets-wQ7Xcgq8.mjs","names":["getComponentRegistry"],"sources":["../src/widgets/index.ts"],"sourcesContent":["import { widgetAreaTag } from \"../cache/chrome-tags.js\";\nimport { getDb } from \"../loader.js\";\nimport type { CacheHint } from \"../query.js\";\nimport { peekRequestCache, requestCached } from \"../request-cache.js\";\nimport { getWidgetComponents as getComponentRegistry } from \"./components.js\";\nimport type { Widget, WidgetArea, WidgetRow, WidgetComponentDef } from \"./types.js\";\n\nexport type {\n\tWidget,\n\tWidgetArea,\n\tWidgetType,\n\tWidgetComponentDef,\n\tPropDef,\n\tCreateWidgetAreaInput,\n\tCreateWidgetInput,\n\tUpdateWidgetInput,\n\tReorderWidgetsInput,\n} from \"./types.js\";\n\n/**\n * Get a widget area by name, with all its widgets.\n *\n * Single query with a left join rather than area-then-widgets so the\n * common case costs one round-trip. An area with no widgets yields one\n * row with null widget columns, which we skip when mapping.\n */\nexport async function getWidgetArea(name: string): Promise<WidgetArea | null> {\n\treturn requestCached(`widget-area:${name}`, async () => {\n\t\tconst prefetched = peekRequestCache<WidgetArea[]>(\"widget-areas\");\n\t\tif (prefetched) {\n\t\t\ttry {\n\t\t\t\tconst areas = await prefetched;\n\t\t\t\treturn areas.find((area) => area.name === name) ?? null;\n\t\t\t} catch {\n\t\t\t\t// Optional prefetch failure must still allow the scoped read.\n\t\t\t}\n\t\t}\n\n\t\tconst db = await getDb();\n\t\tconst rows = await db\n\t\t\t.selectFrom(\"_emdash_widget_areas as a\")\n\t\t\t.leftJoin(\"_emdash_widgets as w\", \"w.area_id\", \"a.id\")\n\t\t\t.select([\n\t\t\t\t\"a.id as a_id\",\n\t\t\t\t\"a.name as a_name\",\n\t\t\t\t\"a.label as a_label\",\n\t\t\t\t\"a.description as a_description\",\n\t\t\t\t\"w.id as w_id\",\n\t\t\t\t\"w.type as w_type\",\n\t\t\t\t\"w.title as w_title\",\n\t\t\t\t\"w.content as w_content\",\n\t\t\t\t\"w.menu_name as w_menu_name\",\n\t\t\t\t\"w.component_id as w_component_id\",\n\t\t\t\t\"w.component_props as w_component_props\",\n\t\t\t\t\"w.area_id as w_area_id\",\n\t\t\t\t\"w.sort_order as w_sort_order\",\n\t\t\t\t\"w.created_at as w_created_at\",\n\t\t\t])\n\t\t\t.where(\"a.name\", \"=\", name)\n\t\t\t.orderBy(\"w.sort_order\", \"asc\")\n\t\t\t.execute();\n\n\t\tconst first = rows[0];\n\t\tif (!first) return null;\n\t\tconst widgets: Widget[] = [];\n\t\tfor (const row of rows) {\n\t\t\tif (row.w_id === null) continue; // area has no widgets (left-join null row)\n\t\t\t// Left-join makes every w_* column nullable in the type; at runtime\n\t\t\t// they're all non-null once w_id is (we match on widgets.area_id, so\n\t\t\t// a widget row always has the not-null columns filled). Cast is the\n\t\t\t// price of that structural fact.\n\t\t\t// eslint-disable-next-line typescript/no-unsafe-type-assertion -- left-join row is non-null when w_id is set; see above\n\t\t\tconst widgetRow = {\n\t\t\t\tid: row.w_id,\n\t\t\t\ttype: row.w_type,\n\t\t\t\ttitle: row.w_title,\n\t\t\t\tcontent: row.w_content,\n\t\t\t\tmenu_name: row.w_menu_name,\n\t\t\t\tcomponent_id: row.w_component_id,\n\t\t\t\tcomponent_props: row.w_component_props,\n\t\t\t\tarea_id: row.w_area_id,\n\t\t\t\tsort_order: row.w_sort_order,\n\t\t\t\tcreated_at: row.w_created_at,\n\t\t\t} as WidgetRow;\n\t\t\twidgets.push(rowToWidget(widgetRow));\n\t\t}\n\n\t\treturn {\n\t\t\tid: first.a_id,\n\t\t\tname: first.a_name,\n\t\t\tlabel: first.a_label,\n\t\t\tdescription: first.a_description ?? undefined,\n\t\t\twidgets,\n\t\t};\n\t});\n}\n\n/**\n * Get a widget area by name with a Workers edge-cache hint.\n *\n * Use the returned `cacheHint` with `Astro.cache.set()` so pages that render\n * this widget area can be purged automatically when its widgets change.\n */\nexport async function getWidgetAreaWithCacheHint(name: string): Promise<{\n\tdata: WidgetArea | null;\n\tcacheHint: CacheHint;\n}> {\n\tconst data = await getWidgetArea(name);\n\treturn { data, cacheHint: { tags: [widgetAreaTag(name)] } };\n}\n\n/**\n * Get all widget areas with their widgets\n */\nexport async function getWidgetAreas(): Promise<WidgetArea[]> {\n\tconst db = await getDb();\n\t// Get all areas\n\tconst areaRows = await db.selectFrom(\"_emdash_widget_areas\").selectAll().execute();\n\n\t// Get all widgets\n\tconst widgetRows = await db\n\t\t.selectFrom(\"_emdash_widgets\")\n\t\t.selectAll()\n\t\t.$castTo<WidgetRow>()\n\t\t.orderBy(\"sort_order\", \"asc\")\n\t\t.execute();\n\n\t// Group widgets by area\n\tconst widgetsByArea = new Map<string, Widget[]>();\n\tfor (const row of widgetRows) {\n\t\tif (!widgetsByArea.has(row.area_id)) {\n\t\t\twidgetsByArea.set(row.area_id, []);\n\t\t}\n\t\twidgetsByArea.get(row.area_id)!.push(rowToWidget(row));\n\t}\n\n\t// Combine\n\treturn areaRows.map((areaRow) => ({\n\t\tid: areaRow.id,\n\t\tname: areaRow.name,\n\t\tlabel: areaRow.label,\n\t\tdescription: areaRow.description ?? undefined,\n\t\twidgets: widgetsByArea.get(areaRow.id) || [],\n\t}));\n}\n\n/**\n * Get available widget components (for admin UI)\n */\nexport function getWidgetComponents(): WidgetComponentDef[] {\n\treturn getComponentRegistry();\n}\n\n/**\n * Convert a widget row to the API type\n */\nexport function rowToWidget(row: WidgetRow): Widget {\n\tconst widget: Widget = {\n\t\tid: row.id,\n\t\ttype: row.type,\n\t\ttitle: row.title ?? undefined,\n\t};\n\n\t// Type-specific fields\n\tif (row.type === \"content\" && row.content) {\n\t\ttry {\n\t\t\twidget.content = JSON.parse(row.content);\n\t\t} catch {\n\t\t\t// Invalid JSON, ignore\n\t\t}\n\t}\n\n\tif (row.type === \"menu\" && row.menu_name) {\n\t\twidget.menuName = row.menu_name;\n\t}\n\n\tif (row.type === \"component\" && row.component_id) {\n\t\twidget.componentId = row.component_id;\n\t\tif (row.component_props) {\n\t\t\ttry {\n\t\t\t\twidget.componentProps = JSON.parse(row.component_props);\n\t\t\t} catch {\n\t\t\t\t// Invalid JSON, ignore\n\t\t\t}\n\t\t}\n\t}\n\n\treturn widget;\n}\n"],"mappings":";;;;;;;;;;;;;AA0BA,eAAsB,cAAc,MAA0C;AAC7E,QAAO,cAAc,eAAe,QAAQ,YAAY;EACvD,MAAM,aAAa,iBAA+B,eAAe;AACjE,MAAI,WACH,KAAI;AAEH,WADc,MAAM,YACP,MAAM,SAAS,KAAK,SAAS,KAAK,IAAI;UAC5C;EAMT,MAAM,OAAO,OADF,MAAM,OAAO,EAEtB,WAAW,4BAA4B,CACvC,SAAS,wBAAwB,aAAa,OAAO,CACrD,OAAO;GACP;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA,CAAC,CACD,MAAM,UAAU,KAAK,KAAK,CAC1B,QAAQ,gBAAgB,MAAM,CAC9B,SAAS;EAEX,MAAM,QAAQ,KAAK;AACnB,MAAI,CAAC,MAAO,QAAO;EACnB,MAAM,UAAoB,EAAE;AAC5B,OAAK,MAAM,OAAO,MAAM;AACvB,OAAI,IAAI,SAAS,KAAM;GAMvB,MAAM,YAAY;IACjB,IAAI,IAAI;IACR,MAAM,IAAI;IACV,OAAO,IAAI;IACX,SAAS,IAAI;IACb,WAAW,IAAI;IACf,cAAc,IAAI;IAClB,iBAAiB,IAAI;IACrB,SAAS,IAAI;IACb,YAAY,IAAI;IAChB,YAAY,IAAI;IAChB;AACD,WAAQ,KAAK,YAAY,UAAU,CAAC;;AAGrC,SAAO;GACN,IAAI,MAAM;GACV,MAAM,MAAM;GACZ,OAAO,MAAM;GACb,aAAa,MAAM,iBAAiB;GACpC;GACA;GACA;;;;;;;;AASH,eAAsB,2BAA2B,MAG9C;AAEF,QAAO;EAAE,MADI,MAAM,cAAc,KAAK;EACvB,WAAW,EAAE,MAAM,CAAC,cAAc,KAAK,CAAC,EAAE;EAAE;;;;;AAM5D,eAAsB,iBAAwC;CAC7D,MAAM,KAAK,MAAM,OAAO;CAExB,MAAM,WAAW,MAAM,GAAG,WAAW,uBAAuB,CAAC,WAAW,CAAC,SAAS;CAGlF,MAAM,aAAa,MAAM,GACvB,WAAW,kBAAkB,CAC7B,WAAW,CACX,SAAoB,CACpB,QAAQ,cAAc,MAAM,CAC5B,SAAS;CAGX,MAAM,gCAAgB,IAAI,KAAuB;AACjD,MAAK,MAAM,OAAO,YAAY;AAC7B,MAAI,CAAC,cAAc,IAAI,IAAI,QAAQ,CAClC,eAAc,IAAI,IAAI,SAAS,EAAE,CAAC;AAEnC,gBAAc,IAAI,IAAI,QAAQ,CAAE,KAAK,YAAY,IAAI,CAAC;;AAIvD,QAAO,SAAS,KAAK,aAAa;EACjC,IAAI,QAAQ;EACZ,MAAM,QAAQ;EACd,OAAO,QAAQ;EACf,aAAa,QAAQ,eAAe;EACpC,SAAS,cAAc,IAAI,QAAQ,GAAG,IAAI,EAAE;EAC5C,EAAE;;;;;AAMJ,SAAgB,sBAA4C;AAC3D,QAAOA,uBAAsB;;;;;AAM9B,SAAgB,YAAY,KAAwB;CACnD,MAAM,SAAiB;EACtB,IAAI,IAAI;EACR,MAAM,IAAI;EACV,OAAO,IAAI,SAAS;EACpB;AAGD,KAAI,IAAI,SAAS,aAAa,IAAI,QACjC,KAAI;AACH,SAAO,UAAU,KAAK,MAAM,IAAI,QAAQ;SACjC;AAKT,KAAI,IAAI,SAAS,UAAU,IAAI,UAC9B,QAAO,WAAW,IAAI;AAGvB,KAAI,IAAI,SAAS,eAAe,IAAI,cAAc;AACjD,SAAO,cAAc,IAAI;AACzB,MAAI,IAAI,gBACP,KAAI;AACH,UAAO,iBAAiB,KAAK,MAAM,IAAI,gBAAgB;UAChD;;AAMV,QAAO"}