emdash 0.37.0 → 0.39.0

package/dist/manifest-schema-BNWwR8Vd.mjs

@@ -1,301 +0,0 @@
-import { z } from "zod";
-import { Permissions } from "@emdash-cms/auth";
-import { capabilitiesToDeclaredAccess, declaredAccessToCapabilities } from "@emdash-cms/plugin-types";
-
-//#region src/plugins/manifest-schema.ts
-/**
-* Zod schema for PluginManifest validation
-*
-* Used to validate manifest.json from plugin bundles at every parse site:
-* - Client-side download (marketplace.ts extractBundle)
-* - R2 load (api/handlers/marketplace.ts loadBundleFromR2)
-* - CLI publish preview (cli/commands/publish.ts readManifestFromTarball)
-* - Marketplace ingest extends this with publishing-specific fields
-*/
-/**
-* Current capability names — the ones authors should use going forward.
-* See `PluginCapability` in `types.ts` for documentation of each.
-*/
-const CURRENT_PLUGIN_CAPABILITIES = [
-	"network:request",
-	"network:request:unrestricted",
-	"content:read",
-	"content:write",
-	"taxonomies:read",
-	"media:read",
-	"media:write",
-	"users:read",
-	"email:send",
-	"hooks.email-transport:register",
-	"hooks.email-events:register",
-	"hooks.page-fragments:register"
-];
-/**
-* Legacy capability names accepted during the deprecation window.
-* Normalized to current names via `normalizeCapability()` in types.ts
-* before reaching the runtime. Plugin authors are warned at bundle/validate
-* and hard-failed at publish.
-*/
-const DEPRECATED_PLUGIN_CAPABILITIES = [
-	"network:fetch",
-	"network:fetch:any",
-	"read:content",
-	"write:content",
-	"read:media",
-	"write:media",
-	"read:users",
-	"email:provide",
-	"email:intercept",
-	"page:inject"
-];
-/**
-* Full set of accepted capability strings — current + deprecated.
-*
-* The manifest schema accepts both during the transition. The runtime only
-* ever sees current names because `normalizeCapability()` rewrites legacy
-* names at every external boundary (definePlugin, adaptSandboxEntry).
-*/
-const PLUGIN_CAPABILITIES = [...CURRENT_PLUGIN_CAPABILITIES, ...DEPRECATED_PLUGIN_CAPABILITIES];
-/** Must stay in sync with FieldType in schema/types.ts */
-const FIELD_TYPES = [
-	"string",
-	"text",
-	"number",
-	"integer",
-	"boolean",
-	"datetime",
-	"select",
-	"multiSelect",
-	"portableText",
-	"image",
-	"file",
-	"reference",
-	"json",
-	"slug",
-	"repeater"
-];
-const HOOK_NAMES = [
-	"plugin:install",
-	"plugin:activate",
-	"plugin:deactivate",
-	"plugin:uninstall",
-	"content:beforeSave",
-	"content:afterSave",
-	"content:beforeDelete",
-	"content:afterDelete",
-	"content:afterPublish",
-	"content:afterUnpublish",
-	"content:afterRestore",
-	"content:afterSchedule",
-	"content:afterUnschedule",
-	"media:beforeUpload",
-	"media:afterUpload",
-	"cron",
-	"email:beforeSend",
-	"email:deliver",
-	"email:afterSend",
-	"comment:beforeCreate",
-	"comment:moderate",
-	"comment:afterCreate",
-	"comment:afterModerate",
-	"page:metadata",
-	"page:fragments"
-];
-/**
-* Structured hook entry for manifest — name plus optional metadata.
-* During a transition period, both plain strings and objects are accepted.
-*/
-const manifestHookEntrySchema = z.object({
-	name: z.enum(HOOK_NAMES),
-	exclusive: z.boolean().optional(),
-	priority: z.number().int().optional(),
-	timeout: z.number().int().positive().optional()
-});
-/**
-* Structured route entry for manifest — name plus optional metadata.
-* Both plain strings and objects are accepted; strings are normalized
-* to `{ name }` objects via `normalizeManifestRoute()`.
-*/
-/** Route names must be safe path segments — alphanumeric, hyphens, underscores, forward slashes */
-const routeNamePattern = /^[a-zA-Z0-9][a-zA-Z0-9_\-/]*$/;
-const manifestRouteEntrySchema = z.object({
-	name: z.string().min(1).regex(routeNamePattern, "Route name must be a safe path segment"),
-	public: z.boolean().optional(),
-	permission: z.string().refine((permission) => permission in Permissions).optional(),
-	cacheControl: z.string().min(1).optional()
-});
-const pluginJsonSchema = z.record(z.string(), z.unknown());
-const pluginMcpConfigSchema = z.object({ tools: z.array(z.object({
-	name: z.string().min(1).max(64).regex(/^[a-zA-Z0-9_-]+$/, "Invalid MCP tool name"),
-	description: z.string().min(1),
-	route: z.string().min(1).regex(routeNamePattern, "Route name must be a safe path segment"),
-	permission: z.string().refine((permission) => permission in Permissions),
-	destructive: z.boolean(),
-	inputSchema: pluginJsonSchema,
-	outputSchema: pluginJsonSchema.optional()
-})) });
-/** Index field names must be valid identifiers to prevent SQL injection via JSON path expressions */
-const indexFieldName = z.string().regex(/^[a-zA-Z][a-zA-Z0-9_]*$/);
-const storageCollectionSchema = z.object({
-	indexes: z.array(z.union([indexFieldName, z.array(indexFieldName)])),
-	uniqueIndexes: z.array(z.union([indexFieldName, z.array(indexFieldName)])).optional()
-});
-const baseSettingFields = {
-	label: z.string(),
-	description: z.string().optional()
-};
-const settingFieldSchema = z.discriminatedUnion("type", [
-	z.object({
-		...baseSettingFields,
-		type: z.literal("string"),
-		default: z.string().optional(),
-		multiline: z.boolean().optional()
-	}),
-	z.object({
-		...baseSettingFields,
-		type: z.literal("number"),
-		default: z.number().optional(),
-		min: z.number().optional(),
-		max: z.number().optional()
-	}),
-	z.object({
-		...baseSettingFields,
-		type: z.literal("boolean"),
-		default: z.boolean().optional()
-	}),
-	z.object({
-		...baseSettingFields,
-		type: z.literal("select"),
-		options: z.array(z.object({
-			value: z.string(),
-			label: z.string()
-		})),
-		default: z.string().optional()
-	}),
-	z.object({
-		...baseSettingFields,
-		type: z.literal("secret")
-	}),
-	z.object({
-		...baseSettingFields,
-		type: z.literal("url"),
-		default: z.string().optional(),
-		placeholder: z.string().optional()
-	}),
-	z.object({
-		...baseSettingFields,
-		type: z.literal("email"),
-		default: z.string().optional(),
-		placeholder: z.string().optional()
-	})
-]);
-const adminPageSchema = z.object({
-	path: z.string(),
-	label: z.string(),
-	icon: z.string().optional()
-});
-const dashboardWidgetSchema = z.object({
-	id: z.string(),
-	size: z.enum([
-		"full",
-		"half",
-		"third"
-	]).optional(),
-	title: z.string().optional()
-});
-const pluginAdminConfigSchema = z.object({
-	entry: z.string().optional(),
-	settingsSchema: z.record(z.string(), settingFieldSchema).optional(),
-	pages: z.array(adminPageSchema).optional(),
-	widgets: z.array(dashboardWidgetSchema).optional(),
-	fieldWidgets: z.array(z.object({
-		name: z.string().min(1),
-		label: z.string().min(1),
-		fieldTypes: z.array(z.enum(FIELD_TYPES)),
-		elements: z.array(z.object({
-			type: z.string(),
-			action_id: z.string(),
-			label: z.string().optional()
-		}).loose()).optional()
-	})).optional()
-});
-/**
-* An operation's constraint object. Open vocabulary: keys the runtime
-* recognises are enforced, others are advisory. The bundler emits `{}` for a
-* granted operation; presence (not value) signals the grant.
-*/
-const accessConstraints = z.record(z.string(), z.unknown());
-/**
-* Structured trust contract embedded in the bundle manifest. Mirrors
-* `DeclaredAccess` in `@emdash-cms/plugin-types`. Categories are host
-* subsystems; operations are modes of participation.
-*/
-const declaredAccessSchema = z.object({
-	content: z.object({
-		read: accessConstraints.optional(),
-		write: accessConstraints.optional()
-	}).optional(),
-	taxonomies: z.object({ read: accessConstraints.optional() }).optional(),
-	media: z.object({
-		read: accessConstraints.optional(),
-		write: accessConstraints.optional()
-	}).optional(),
-	network: z.object({ request: z.object({ allowedHosts: z.array(z.string()).min(1).optional() }).optional() }).optional(),
-	email: z.object({
-		send: accessConstraints.optional(),
-		events: accessConstraints.optional(),
-		transport: accessConstraints.optional()
-	}).optional(),
-	page: z.object({ fragments: accessConstraints.optional() }).optional(),
-	users: z.object({ read: accessConstraints.optional() }).optional()
-});
-/**
-* Zod schema matching the PluginManifest interface from types.ts.
-*
-* Every JSON.parse of a manifest.json should validate through this.
-*
-* `declaredAccess` is the trust contract; `capabilities`/`allowedHosts` are the
-* runtime's enforcement currency. Apply `reconcileManifestAccess` after parsing
-* to make them consistent (declaredAccess authoritative when present). Kept a
-* plain object (no `.transform`) because callers `.pick()`/`.extend()` it.
-*/
-const pluginManifestSchema$1 = z.object({
-	id: z.string().min(1),
-	version: z.string().min(1),
-	declaredAccess: declaredAccessSchema.optional(),
-	capabilities: z.array(z.enum(PLUGIN_CAPABILITIES)),
-	allowedHosts: z.array(z.string()),
-	storage: z.record(z.string(), storageCollectionSchema),
-	hooks: z.array(z.union([z.enum(HOOK_NAMES), manifestHookEntrySchema])),
-	routes: z.array(z.union([z.string().min(1).regex(routeNamePattern, "Route name must be a safe path segment"), manifestRouteEntrySchema])),
-	mcp: pluginMcpConfigSchema.optional(),
-	admin: pluginAdminConfigSchema
-});
-/**
-* Reconcile a parsed manifest's trust contract with its enforcement currency.
-* `declaredAccess` is authoritative: when present, `capabilities`/`allowedHosts`
-* are re-derived from it so what the runtime enforces always matches what was
-* recorded and consented to. A pre-migration bundle without `declaredAccess`
-* has it derived from the legacy capability list instead. The result always
-* carries both, mutually consistent. Apply this at every bundle-parse site.
-*/
-function reconcileManifestAccess$1(manifest) {
-	return manifest.declaredAccess ? {
-		...manifest,
-		...declaredAccessToCapabilities(manifest.declaredAccess)
-	} : {
-		...manifest,
-		declaredAccess: capabilitiesToDeclaredAccess(manifest.capabilities, manifest.allowedHosts)
-	};
-}
-/**
-* Normalize a manifest route entry — plain strings become `{ name }` objects.
-*/
-function normalizeManifestRoute(entry) {
-	if (typeof entry === "string") return { name: entry };
-	return entry;
-}
-
-//#endregion
-export { reconcileManifestAccess$1 as a, pluginManifestSchema$1 as i, PLUGIN_CAPABILITIES as n, normalizeManifestRoute as r, HOOK_NAMES as t };
-//# sourceMappingURL=manifest-schema-BNWwR8Vd.mjs.map

package/dist/manifest-schema-BNWwR8Vd.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"manifest-schema-BNWwR8Vd.mjs","names":["pluginManifestSchema","reconcileManifestAccess"],"sources":["../src/plugins/manifest-schema.ts"],"sourcesContent":["/**\n * Zod schema for PluginManifest validation\n *\n * Used to validate manifest.json from plugin bundles at every parse site:\n * - Client-side download (marketplace.ts extractBundle)\n * - R2 load (api/handlers/marketplace.ts loadBundleFromR2)\n * - CLI publish preview (cli/commands/publish.ts readManifestFromTarball)\n * - Marketplace ingest extends this with publishing-specific fields\n */\n\nimport { Permissions } from \"@emdash-cms/auth\";\nimport {\n\tcapabilitiesToDeclaredAccess,\n\tdeclaredAccessToCapabilities,\n} from \"@emdash-cms/plugin-types\";\nimport { z } from \"zod\";\n\nimport type { PluginManifest } from \"./types.js\";\n\n// ── Enum values (must stay in sync with types.ts) ───────────────\n\n/**\n * Current capability names — the ones authors should use going forward.\n * See `PluginCapability` in `types.ts` for documentation of each.\n */\nexport const CURRENT_PLUGIN_CAPABILITIES = [\n\t\"network:request\",\n\t\"network:request:unrestricted\",\n\t\"content:read\",\n\t\"content:write\",\n\t\"taxonomies:read\",\n\t\"media:read\",\n\t\"media:write\",\n\t\"users:read\",\n\t\"email:send\",\n\t\"hooks.email-transport:register\",\n\t\"hooks.email-events:register\",\n\t\"hooks.page-fragments:register\",\n] as const;\n\n/**\n * Legacy capability names accepted during the deprecation window.\n * Normalized to current names via `normalizeCapability()` in types.ts\n * before reaching the runtime. Plugin authors are warned at bundle/validate\n * and hard-failed at publish.\n */\nexport const DEPRECATED_PLUGIN_CAPABILITIES = [\n\t\"network:fetch\",\n\t\"network:fetch:any\",\n\t\"read:content\",\n\t\"write:content\",\n\t\"read:media\",\n\t\"write:media\",\n\t\"read:users\",\n\t\"email:provide\",\n\t\"email:intercept\",\n\t\"page:inject\",\n] as const;\n\n/**\n * Full set of accepted capability strings — current + deprecated.\n *\n * The manifest schema accepts both during the transition. The runtime only\n * ever sees current names because `normalizeCapability()` rewrites legacy\n * names at every external boundary (definePlugin, adaptSandboxEntry).\n */\nexport const PLUGIN_CAPABILITIES = [\n\t...CURRENT_PLUGIN_CAPABILITIES,\n\t...DEPRECATED_PLUGIN_CAPABILITIES,\n] as const;\n\n/** Must stay in sync with FieldType in schema/types.ts */\nconst FIELD_TYPES = [\n\t\"string\",\n\t\"text\",\n\t\"number\",\n\t\"integer\",\n\t\"boolean\",\n\t\"datetime\",\n\t\"select\",\n\t\"multiSelect\",\n\t\"portableText\",\n\t\"image\",\n\t\"file\",\n\t\"reference\",\n\t\"json\",\n\t\"slug\",\n\t\"repeater\",\n] as const;\n\nexport const HOOK_NAMES = [\n\t\"plugin:install\",\n\t\"plugin:activate\",\n\t\"plugin:deactivate\",\n\t\"plugin:uninstall\",\n\t\"content:beforeSave\",\n\t\"content:afterSave\",\n\t\"content:beforeDelete\",\n\t\"content:afterDelete\",\n\t\"content:afterPublish\",\n\t\"content:afterUnpublish\",\n\t\"content:afterRestore\",\n\t\"content:afterSchedule\",\n\t\"content:afterUnschedule\",\n\t\"media:beforeUpload\",\n\t\"media:afterUpload\",\n\t\"cron\",\n\t\"email:beforeSend\",\n\t\"email:deliver\",\n\t\"email:afterSend\",\n\t\"comment:beforeCreate\",\n\t\"comment:moderate\",\n\t\"comment:afterCreate\",\n\t\"comment:afterModerate\",\n\t\"page:metadata\",\n\t\"page:fragments\",\n] as const;\n\n/**\n * Structured hook entry for manifest — name plus optional metadata.\n * During a transition period, both plain strings and objects are accepted.\n */\nconst manifestHookEntrySchema = z.object({\n\tname: z.enum(HOOK_NAMES),\n\texclusive: z.boolean().optional(),\n\tpriority: z.number().int().optional(),\n\ttimeout: z.number().int().positive().optional(),\n});\n\n/**\n * Structured route entry for manifest — name plus optional metadata.\n * Both plain strings and objects are accepted; strings are normalized\n * to `{ name }` objects via `normalizeManifestRoute()`.\n */\n/** Route names must be safe path segments — alphanumeric, hyphens, underscores, forward slashes */\nconst routeNamePattern = /^[a-zA-Z0-9][a-zA-Z0-9_\\-/]*$/;\n\nconst manifestRouteEntrySchema = z.object({\n\tname: z.string().min(1).regex(routeNamePattern, \"Route name must be a safe path segment\"),\n\tpublic: z.boolean().optional(),\n\tpermission: z\n\t\t.string()\n\t\t.refine((permission) => permission in Permissions)\n\t\t.optional(),\n\tcacheControl: z.string().min(1).optional(),\n});\n\nconst pluginJsonSchema = z.record(z.string(), z.unknown());\nconst mcpToolNamePattern = /^[a-zA-Z0-9_-]+$/;\nconst pluginMcpConfigSchema = z.object({\n\ttools: z.array(\n\t\tz.object({\n\t\t\tname: z.string().min(1).max(64).regex(mcpToolNamePattern, \"Invalid MCP tool name\"),\n\t\t\tdescription: z.string().min(1),\n\t\t\troute: z.string().min(1).regex(routeNamePattern, \"Route name must be a safe path segment\"),\n\t\t\tpermission: z.string().refine((permission) => permission in Permissions),\n\t\t\tdestructive: z.boolean(),\n\t\t\tinputSchema: pluginJsonSchema,\n\t\t\toutputSchema: pluginJsonSchema.optional(),\n\t\t}),\n\t),\n});\n\n// ── Sub-schemas ─────────────────────────────────────────────────\n\n/** Index field names must be valid identifiers to prevent SQL injection via JSON path expressions */\nconst indexFieldName = z.string().regex(/^[a-zA-Z][a-zA-Z0-9_]*$/);\n\nconst storageCollectionSchema = z.object({\n\tindexes: z.array(z.union([indexFieldName, z.array(indexFieldName)])),\n\tuniqueIndexes: z.array(z.union([indexFieldName, z.array(indexFieldName)])).optional(),\n});\n\nconst baseSettingFields = {\n\tlabel: z.string(),\n\tdescription: z.string().optional(),\n};\n\nconst settingFieldSchema = z.discriminatedUnion(\"type\", [\n\tz.object({\n\t\t...baseSettingFields,\n\t\ttype: z.literal(\"string\"),\n\t\tdefault: z.string().optional(),\n\t\tmultiline: z.boolean().optional(),\n\t}),\n\tz.object({\n\t\t...baseSettingFields,\n\t\ttype: z.literal(\"number\"),\n\t\tdefault: z.number().optional(),\n\t\tmin: z.number().optional(),\n\t\tmax: z.number().optional(),\n\t}),\n\tz.object({ ...baseSettingFields, type: z.literal(\"boolean\"), default: z.boolean().optional() }),\n\tz.object({\n\t\t...baseSettingFields,\n\t\ttype: z.literal(\"select\"),\n\t\toptions: z.array(z.object({ value: z.string(), label: z.string() })),\n\t\tdefault: z.string().optional(),\n\t}),\n\tz.object({ ...baseSettingFields, type: z.literal(\"secret\") }),\n\tz.object({\n\t\t...baseSettingFields,\n\t\ttype: z.literal(\"url\"),\n\t\tdefault: z.string().optional(),\n\t\tplaceholder: z.string().optional(),\n\t}),\n\tz.object({\n\t\t...baseSettingFields,\n\t\ttype: z.literal(\"email\"),\n\t\tdefault: z.string().optional(),\n\t\tplaceholder: z.string().optional(),\n\t}),\n]);\n\nconst adminPageSchema = z.object({\n\tpath: z.string(),\n\tlabel: z.string(),\n\ticon: z.string().optional(),\n});\n\nconst dashboardWidgetSchema = z.object({\n\tid: z.string(),\n\tsize: z.enum([\"full\", \"half\", \"third\"]).optional(),\n\ttitle: z.string().optional(),\n});\n\nconst pluginAdminConfigSchema = z.object({\n\tentry: z.string().optional(),\n\tsettingsSchema: z.record(z.string(), settingFieldSchema).optional(),\n\tpages: z.array(adminPageSchema).optional(),\n\twidgets: z.array(dashboardWidgetSchema).optional(),\n\tfieldWidgets: z\n\t\t.array(\n\t\t\tz.object({\n\t\t\t\tname: z.string().min(1),\n\t\t\t\tlabel: z.string().min(1),\n\t\t\t\tfieldTypes: z.array(z.enum(FIELD_TYPES)),\n\t\t\t\telements: z\n\t\t\t\t\t.array(\n\t\t\t\t\t\tz\n\t\t\t\t\t\t\t.object({\n\t\t\t\t\t\t\t\ttype: z.string(),\n\t\t\t\t\t\t\t\taction_id: z.string(),\n\t\t\t\t\t\t\t\tlabel: z.string().optional(),\n\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\t.loose(),\n\t\t\t\t\t)\n\t\t\t\t\t.optional(),\n\t\t\t}),\n\t\t)\n\t\t.optional(),\n});\n\n// ── declaredAccess ──────────────────────────────────────────────\n\n/**\n * An operation's constraint object. Open vocabulary: keys the runtime\n * recognises are enforced, others are advisory. The bundler emits `{}` for a\n * granted operation; presence (not value) signals the grant.\n */\nconst accessConstraints = z.record(z.string(), z.unknown());\n\n/**\n * Structured trust contract embedded in the bundle manifest. Mirrors\n * `DeclaredAccess` in `@emdash-cms/plugin-types`. Categories are host\n * subsystems; operations are modes of participation.\n */\nconst declaredAccessSchema = z.object({\n\tcontent: z\n\t\t.object({ read: accessConstraints.optional(), write: accessConstraints.optional() })\n\t\t.optional(),\n\ttaxonomies: z.object({ read: accessConstraints.optional() }).optional(),\n\tmedia: z\n\t\t.object({ read: accessConstraints.optional(), write: accessConstraints.optional() })\n\t\t.optional(),\n\tnetwork: z\n\t\t.object({\n\t\t\t// allowedHosts: absent = unrestricted; present = host-restricted. Reject\n\t\t\t// an empty array (which the decoder would otherwise have to treat as\n\t\t\t// deny-all) to match the record lexicon's `minLength: 1` and keep the\n\t\t\t// \"absent vs empty\" distinction from ever reaching enforcement ambiguous.\n\t\t\trequest: z.object({ allowedHosts: z.array(z.string()).min(1).optional() }).optional(),\n\t\t})\n\t\t.optional(),\n\temail: z\n\t\t.object({\n\t\t\tsend: accessConstraints.optional(),\n\t\t\tevents: accessConstraints.optional(),\n\t\t\ttransport: accessConstraints.optional(),\n\t\t})\n\t\t.optional(),\n\tpage: z.object({ fragments: accessConstraints.optional() }).optional(),\n\tusers: z.object({ read: accessConstraints.optional() }).optional(),\n});\n\n// ── Main schema ─────────────────────────────────────────────────\n\n/**\n * Zod schema matching the PluginManifest interface from types.ts.\n *\n * Every JSON.parse of a manifest.json should validate through this.\n *\n * `declaredAccess` is the trust contract; `capabilities`/`allowedHosts` are the\n * runtime's enforcement currency. Apply `reconcileManifestAccess` after parsing\n * to make them consistent (declaredAccess authoritative when present). Kept a\n * plain object (no `.transform`) because callers `.pick()`/`.extend()` it.\n */\nexport const pluginManifestSchema = z.object({\n\tid: z.string().min(1),\n\tversion: z.string().min(1),\n\tdeclaredAccess: declaredAccessSchema.optional(),\n\tcapabilities: z.array(z.enum(PLUGIN_CAPABILITIES)),\n\tallowedHosts: z.array(z.string()),\n\tstorage: z.record(z.string(), storageCollectionSchema),\n\t/**\n\t * Hook declarations — accepts both plain name strings (legacy) and\n\t * structured objects with exclusive/priority/timeout metadata.\n\t * Plain strings are normalized to `{ name }` objects after parsing.\n\t */\n\thooks: z.array(z.union([z.enum(HOOK_NAMES), manifestHookEntrySchema])),\n\t/**\n\t * Route declarations — accepts both plain name strings and\n\t * structured objects with public metadata.\n\t * Plain strings are normalized to `{ name }` objects after parsing.\n\t */\n\troutes: z.array(\n\t\tz.union([\n\t\t\tz.string().min(1).regex(routeNamePattern, \"Route name must be a safe path segment\"),\n\t\t\tmanifestRouteEntrySchema,\n\t\t]),\n\t),\n\tmcp: pluginMcpConfigSchema.optional(),\n\tadmin: pluginAdminConfigSchema,\n});\n\nexport type ValidatedPluginManifest = z.infer<typeof pluginManifestSchema>;\n\n/**\n * Reconcile a parsed manifest's trust contract with its enforcement currency.\n * `declaredAccess` is authoritative: when present, `capabilities`/`allowedHosts`\n * are re-derived from it so what the runtime enforces always matches what was\n * recorded and consented to. A pre-migration bundle without `declaredAccess`\n * has it derived from the legacy capability list instead. The result always\n * carries both, mutually consistent. Apply this at every bundle-parse site.\n */\nexport function reconcileManifestAccess(manifest: ValidatedPluginManifest): PluginManifest {\n\tconst reconciled: ValidatedPluginManifest = manifest.declaredAccess\n\t\t? { ...manifest, ...declaredAccessToCapabilities(manifest.declaredAccess) }\n\t\t: {\n\t\t\t\t...manifest,\n\t\t\t\tdeclaredAccess: capabilitiesToDeclaredAccess(manifest.capabilities, manifest.allowedHosts),\n\t\t\t};\n\t// Block Kit admin elements are typed as `unknown` by the Zod schema (their\n\t// Element shape is validated at render time), so the validated manifest\n\t// needs a structural cast up to the runtime PluginManifest.\n\t// eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion -- admin elements are unknown[] in Zod; Element type checked at render time\n\treturn reconciled as unknown as PluginManifest;\n}\n\n/**\n * Normalize a manifest hook entry — plain strings become `{ name }` objects.\n */\nexport function normalizeManifestHook(\n\tentry: string | { name: string; exclusive?: boolean; priority?: number; timeout?: number },\n): { name: string; exclusive?: boolean; priority?: number; timeout?: number } {\n\tif (typeof entry === \"string\") {\n\t\treturn { name: entry };\n\t}\n\treturn entry;\n}\n\n/**\n * Normalize a manifest route entry — plain strings become `{ name }` objects.\n */\nexport function normalizeManifestRoute(\n\tentry: string | { name: string; public?: boolean; permission?: string; cacheControl?: string },\n): {\n\tname: string;\n\tpublic?: boolean;\n\tpermission?: string;\n\tcacheControl?: string;\n} {\n\tif (typeof entry === \"string\") {\n\t\treturn { name: entry };\n\t}\n\treturn entry;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAyBA,MAAa,8BAA8B;CAC1C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;;;;;;;AAQD,MAAa,iCAAiC;CAC7C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;;;;;;;;AASD,MAAa,sBAAsB,CAClC,GAAG,6BACH,GAAG,+BACH;;AAGD,MAAM,cAAc;CACnB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AAED,MAAa,aAAa;CACzB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;;;;;AAMD,MAAM,0BAA0B,EAAE,OAAO;CACxC,MAAM,EAAE,KAAK,WAAW;CACxB,WAAW,EAAE,SAAS,CAAC,UAAU;CACjC,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU;CACrC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU;CAC/C,CAAC;;;;;;;AAQF,MAAM,mBAAmB;AAEzB,MAAM,2BAA2B,EAAE,OAAO;CACzC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,kBAAkB,yCAAyC;CACzF,QAAQ,EAAE,SAAS,CAAC,UAAU;CAC9B,YAAY,EACV,QAAQ,CACR,QAAQ,eAAe,cAAc,YAAY,CACjD,UAAU;CACZ,cAAc,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CAC1C,CAAC;AAEF,MAAM,mBAAmB,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC;AAE1D,MAAM,wBAAwB,EAAE,OAAO,EACtC,OAAO,EAAE,MACR,EAAE,OAAO;CACR,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,MAJR,oBAIkC,wBAAwB;CAClF,aAAa,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC9B,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,kBAAkB,yCAAyC;CAC1F,YAAY,EAAE,QAAQ,CAAC,QAAQ,eAAe,cAAc,YAAY;CACxE,aAAa,EAAE,SAAS;CACxB,aAAa;CACb,cAAc,iBAAiB,UAAU;CACzC,CAAC,CACF,EACD,CAAC;;AAKF,MAAM,iBAAiB,EAAE,QAAQ,CAAC,MAAM,0BAA0B;AAElE,MAAM,0BAA0B,EAAE,OAAO;CACxC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,eAAe,CAAC,CAAC,CAAC;CACpE,eAAe,EAAE,MAAM,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,eAAe,CAAC,CAAC,CAAC,CAAC,UAAU;CACrF,CAAC;AAEF,MAAM,oBAAoB;CACzB,OAAO,EAAE,QAAQ;CACjB,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC;AAED,MAAM,qBAAqB,EAAE,mBAAmB,QAAQ;CACvD,EAAE,OAAO;EACR,GAAG;EACH,MAAM,EAAE,QAAQ,SAAS;EACzB,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,WAAW,EAAE,SAAS,CAAC,UAAU;EACjC,CAAC;CACF,EAAE,OAAO;EACR,GAAG;EACH,MAAM,EAAE,QAAQ,SAAS;EACzB,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,KAAK,EAAE,QAAQ,CAAC,UAAU;EAC1B,KAAK,EAAE,QAAQ,CAAC,UAAU;EAC1B,CAAC;CACF,EAAE,OAAO;EAAE,GAAG;EAAmB,MAAM,EAAE,QAAQ,UAAU;EAAE,SAAS,EAAE,SAAS,CAAC,UAAU;EAAE,CAAC;CAC/F,EAAE,OAAO;EACR,GAAG;EACH,MAAM,EAAE,QAAQ,SAAS;EACzB,SAAS,EAAE,MAAM,EAAE,OAAO;GAAE,OAAO,EAAE,QAAQ;GAAE,OAAO,EAAE,QAAQ;GAAE,CAAC,CAAC;EACpE,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,CAAC;CACF,EAAE,OAAO;EAAE,GAAG;EAAmB,MAAM,EAAE,QAAQ,SAAS;EAAE,CAAC;CAC7D,EAAE,OAAO;EACR,GAAG;EACH,MAAM,EAAE,QAAQ,MAAM;EACtB,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,aAAa,EAAE,QAAQ,CAAC,UAAU;EAClC,CAAC;CACF,EAAE,OAAO;EACR,GAAG;EACH,MAAM,EAAE,QAAQ,QAAQ;EACxB,SAAS,EAAE,QAAQ,CAAC,UAAU;EAC9B,aAAa,EAAE,QAAQ,CAAC,UAAU;EAClC,CAAC;CACF,CAAC;AAEF,MAAM,kBAAkB,EAAE,OAAO;CAChC,MAAM,EAAE,QAAQ;CAChB,OAAO,EAAE,QAAQ;CACjB,MAAM,EAAE,QAAQ,CAAC,UAAU;CAC3B,CAAC;AAEF,MAAM,wBAAwB,EAAE,OAAO;CACtC,IAAI,EAAE,QAAQ;CACd,MAAM,EAAE,KAAK;EAAC;EAAQ;EAAQ;EAAQ,CAAC,CAAC,UAAU;CAClD,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,CAAC;AAEF,MAAM,0BAA0B,EAAE,OAAO;CACxC,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,gBAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,CAAC,UAAU;CACnE,OAAO,EAAE,MAAM,gBAAgB,CAAC,UAAU;CAC1C,SAAS,EAAE,MAAM,sBAAsB,CAAC,UAAU;CAClD,cAAc,EACZ,MACA,EAAE,OAAO;EACR,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE;EACvB,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE;EACxB,YAAY,EAAE,MAAM,EAAE,KAAK,YAAY,CAAC;EACxC,UAAU,EACR,MACA,EACE,OAAO;GACP,MAAM,EAAE,QAAQ;GAChB,WAAW,EAAE,QAAQ;GACrB,OAAO,EAAE,QAAQ,CAAC,UAAU;GAC5B,CAAC,CACD,OAAO,CACT,CACA,UAAU;EACZ,CAAC,CACF,CACA,UAAU;CACZ,CAAC;;;;;;AASF,MAAM,oBAAoB,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC;;;;;;AAO3D,MAAM,uBAAuB,EAAE,OAAO;CACrC,SAAS,EACP,OAAO;EAAE,MAAM,kBAAkB,UAAU;EAAE,OAAO,kBAAkB,UAAU;EAAE,CAAC,CACnF,UAAU;CACZ,YAAY,EAAE,OAAO,EAAE,MAAM,kBAAkB,UAAU,EAAE,CAAC,CAAC,UAAU;CACvE,OAAO,EACL,OAAO;EAAE,MAAM,kBAAkB,UAAU;EAAE,OAAO,kBAAkB,UAAU;EAAE,CAAC,CACnF,UAAU;CACZ,SAAS,EACP,OAAO,EAKP,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,EACrF,CAAC,CACD,UAAU;CACZ,OAAO,EACL,OAAO;EACP,MAAM,kBAAkB,UAAU;EAClC,QAAQ,kBAAkB,UAAU;EACpC,WAAW,kBAAkB,UAAU;EACvC,CAAC,CACD,UAAU;CACZ,MAAM,EAAE,OAAO,EAAE,WAAW,kBAAkB,UAAU,EAAE,CAAC,CAAC,UAAU;CACtE,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,UAAU,EAAE,CAAC,CAAC,UAAU;CAClE,CAAC;;;;;;;;;;;AAcF,MAAaA,yBAAuB,EAAE,OAAO;CAC5C,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE;CACrB,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC1B,gBAAgB,qBAAqB,UAAU;CAC/C,cAAc,EAAE,MAAM,EAAE,KAAK,oBAAoB,CAAC;CAClD,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC;CACjC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,wBAAwB;CAMtD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,KAAK,WAAW,EAAE,wBAAwB,CAAC,CAAC;CAMtE,QAAQ,EAAE,MACT,EAAE,MAAM,CACP,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,kBAAkB,yCAAyC,EACnF,yBACA,CAAC,CACF;CACD,KAAK,sBAAsB,UAAU;CACrC,OAAO;CACP,CAAC;;;;;;;;;AAYF,SAAgBC,0BAAwB,UAAmD;AAW1F,QAV4C,SAAS,iBAClD;EAAE,GAAG;EAAU,GAAG,6BAA6B,SAAS,eAAe;EAAE,GACzE;EACA,GAAG;EACH,gBAAgB,6BAA6B,SAAS,cAAc,SAAS,aAAa;EAC1F;;;;;AAuBJ,SAAgB,uBACf,OAMC;AACD,KAAI,OAAO,UAAU,SACpB,QAAO,EAAE,MAAM,OAAO;AAEvB,QAAO"}

package/dist/media-BBm8Wg3f.mjs

@@ -1,318 +0,0 @@
-import { o as decodeCursor, s as encodeCursor } from "./types-CQPWhPxE.mjs";
-import { n as normalizeFocalPoint } from "./focal-point-BeWFo6Xx.mjs";
-import { sql } from "kysely";
-import { ulid } from "ulidx";
-
-//#region src/database/repositories/media.ts
-/** Escape LIKE wildcard characters and the escape char itself in user-supplied values */
-function escapeLike(value) {
-	return value.replaceAll("\\", "\\\\").replaceAll("%", "\\%").replaceAll("_", "\\_");
-}
-/**
-* Normalize a mimeType filter (string or array) into a clean string[].
-* Entries that are empty strings are dropped.
-*/
-function normalizeMimeFilter(input) {
-	if (!input) return [];
-	return (Array.isArray(input) ? input : [input]).filter((entry) => typeof entry === "string" && entry.length > 0).map((entry) => entry.endsWith("/") ? entry.toLowerCase() : entry.split(";")[0].trim().toLowerCase());
-}
-/**
-* Build a WHERE clause that matches `mime_type` against any of the given
-* filter entries — exact equality for full MIMEs, LIKE prefix for entries
-* ending in "/".
-*/
-function mimeMatchExpr(eb, filters) {
-	return eb.or(filters.map((entry) => entry.endsWith("/") ? sql`mime_type LIKE ${`${escapeLike(entry)}%`} ESCAPE '\\'` : eb("mime_type", "=", entry)));
-}
-const UPLOAD_ATTEMPT_CLEANUP_AGE_MS = 3600 * 1e3;
-const UPLOAD_ATTEMPT_CLEANUP_BATCH_SIZE = 100;
-/**
-* Media repository for database operations
-*/
-var MediaRepository = class {
-	constructor(db) {
-		this.db = db;
-	}
-	/**
-	* Create a new media item
-	*/
-	async create(input) {
-		const id = ulid();
-		const now = (/* @__PURE__ */ new Date()).toISOString();
-		const row = {
-			id,
-			filename: input.filename,
-			mime_type: input.mimeType,
-			size: input.size ?? null,
-			width: input.width ?? null,
-			height: input.height ?? null,
-			focal_x: null,
-			focal_y: null,
-			alt: input.alt ?? null,
-			caption: input.caption ?? null,
-			storage_key: input.storageKey,
-			content_hash: input.contentHash ?? null,
-			blurhash: input.blurhash ?? null,
-			dominant_color: input.dominantColor ?? null,
-			status: input.status ?? "ready",
-			created_at: now,
-			author_id: input.authorId ?? null,
-			folder_id: input.folderId ?? null
-		};
-		await this.db.insertInto("media").values(row).execute();
-		return this.rowToItem(row);
-	}
-	/**
-	* Create a pending media item (for signed URL upload flow)
-	*/
-	async createPending(input) {
-		return this.create({
-			...input,
-			status: "pending"
-		});
-	}
-	async createUploadAttempt(mediaId, storageKey) {
-		const now = (/* @__PURE__ */ new Date()).toISOString();
-		await this.db.insertInto("_emdash_media_upload_attempts").values({
-			media_id: mediaId,
-			storage_key: storageKey,
-			status: "active",
-			created_at: now,
-			updated_at: now
-		}).execute();
-	}
-	async hasUploadAttempt(storageKey) {
-		return await this.db.selectFrom("_emdash_media_upload_attempts").select("storage_key").where("storage_key", "=", storageKey).executeTakeFirst() !== void 0;
-	}
-	async claimUploadAttemptForCleanup(storageKey) {
-		const result = await this.db.updateTable("_emdash_media_upload_attempts").set({
-			status: "cleanup",
-			updated_at: (/* @__PURE__ */ new Date()).toISOString()
-		}).where("storage_key", "=", storageKey).where((eb) => eb.not(eb.exists(eb.selectFrom("media").select("media.id").whereRef("media.storage_key", "=", "_emdash_media_upload_attempts.storage_key")))).executeTakeFirst();
-		return Number(result.numUpdatedRows ?? 0) > 0;
-	}
-	async deleteUploadAttempt(storageKey) {
-		await this.db.deleteFrom("_emdash_media_upload_attempts").where("storage_key", "=", storageKey).execute();
-	}
-	async deleteCompletedUploadAttempts() {
-		const result = await this.db.deleteFrom("_emdash_media_upload_attempts").where((eb) => eb.exists(eb.selectFrom("media").select("media.id").whereRef("media.id", "=", "_emdash_media_upload_attempts.media_id").whereRef("media.storage_key", "=", "_emdash_media_upload_attempts.storage_key").where("media.status", "=", "ready"))).executeTakeFirst();
-		return Number(result.numDeletedRows ?? 0);
-	}
-	async findUploadAttemptsForCleanup(maxAgeMs = UPLOAD_ATTEMPT_CLEANUP_AGE_MS, limit = UPLOAD_ATTEMPT_CLEANUP_BATCH_SIZE) {
-		const cutoff = new Date(Date.now() - maxAgeMs).toISOString();
-		return (await this.db.selectFrom("_emdash_media_upload_attempts").select("storage_key").where((eb) => eb.or([eb("status", "=", "cleanup"), eb("created_at", "<", cutoff)])).where((eb) => eb.not(eb.exists(eb.selectFrom("media").select("media.id").whereRef("media.storage_key", "=", "_emdash_media_upload_attempts.storage_key")))).orderBy("created_at", "asc").limit(limit).execute()).map((row) => row.storage_key);
-	}
-	async publishPendingStorageKey(id, expectedStorageKey, storageKey, contentHash) {
-		const result = await this.db.updateTable("media").set({
-			storage_key: storageKey,
-			...contentHash !== void 0 ? { content_hash: contentHash } : {}
-		}).where("id", "=", id).where("status", "=", "pending").where("storage_key", "=", expectedStorageKey).where((eb) => eb.exists(eb.selectFrom("_emdash_media_upload_attempts").select("storage_key").where("media_id", "=", id).where("storage_key", "=", storageKey).where("status", "=", "active"))).executeTakeFirst();
-		return Number(result.numUpdatedRows ?? 0) > 0;
-	}
-	/**
-	* Confirm upload (mark as ready)
-	*/
-	async confirmUpload(id, metadata, expectedStorageKey) {
-		const updates = { status: "ready" };
-		if (metadata?.width !== void 0) updates.width = metadata.width;
-		if (metadata?.height !== void 0) updates.height = metadata.height;
-		if (metadata?.size !== void 0) updates.size = metadata.size;
-		if (metadata?.blurhash !== void 0) updates.blurhash = metadata.blurhash;
-		if (metadata?.dominantColor !== void 0) updates.dominant_color = metadata.dominantColor;
-		if (metadata?.contentHash !== void 0) updates.content_hash = metadata.contentHash;
-		let query = this.db.updateTable("media").set(updates).where("id", "=", id).where("status", "=", "pending");
-		if (expectedStorageKey !== void 0) query = query.where("storage_key", "=", expectedStorageKey);
-		const row = await query.returningAll().executeTakeFirst();
-		return row ? this.rowToItem(row) : null;
-	}
-	/**
-	* Mark upload as failed
-	*/
-	async markFailed(id, expectedStorageKey) {
-		let query = this.db.updateTable("media").set({ status: "failed" }).where("id", "=", id);
-		if (expectedStorageKey !== void 0) query = query.where("status", "=", "pending").where("storage_key", "=", expectedStorageKey);
-		const row = await query.returningAll().executeTakeFirst();
-		return row ? this.rowToItem(row) : null;
-	}
-	/**
-	* Find media by ID
-	*/
-	async findById(id) {
-		const row = await this.db.selectFrom("media").selectAll().where("id", "=", id).executeTakeFirst();
-		return row ? this.rowToItem(row) : null;
-	}
-	/**
-	* Find media by filename
-	* Useful for idempotent imports
-	*/
-	async findByFilename(filename) {
-		const row = await this.db.selectFrom("media").selectAll().where("filename", "=", filename).executeTakeFirst();
-		return row ? this.rowToItem(row) : null;
-	}
-	async findAvailableFilename(filename) {
-		const exists = async (candidate) => Boolean(await this.db.selectFrom("media").select("id").where(sql`lower(filename)`, "=", candidate.toLowerCase()).executeTakeFirst());
-		if (!await exists(filename)) return filename;
-		const extensionIndex = filename.lastIndexOf(".");
-		const hasExtension = extensionIndex > 0;
-		const extension = hasExtension ? filename.slice(extensionIndex) : "";
-		const stem = hasExtension ? filename.slice(0, extensionIndex) : filename;
-		let copyNumber = 2;
-		let candidate = `${stem}-${copyNumber}${extension}`;
-		while (await exists(candidate)) {
-			copyNumber += 1;
-			candidate = `${stem}-${copyNumber}${extension}`;
-		}
-		return candidate;
-	}
-	/**
-	* Find media by content hash
-	* Used for deduplication - same content = same hash
-	*/
-	async findByContentHash(contentHash) {
-		const row = await this.db.selectFrom("media").selectAll().where("content_hash", "=", contentHash).where("status", "=", "ready").executeTakeFirst();
-		return row ? this.rowToItem(row) : null;
-	}
-	/**
-	* Find many media items with cursor pagination
-	*
-	* Uses keyset pagination (cursor-based) for consistent results.
-	* The cursor encodes the created_at and id of the last item.
-	*/
-	async findMany(options = {}) {
-		const limit = Math.min(options.limit || 50, 100);
-		let query = this.applyListFilters(this.db.selectFrom("media"), options).selectAll().orderBy("created_at", "desc").orderBy("id", "desc").limit(limit + 1);
-		if (options.cursor) {
-			const { orderValue: createdAt, id: cursorId } = decodeCursor(options.cursor);
-			query = query.where((eb) => eb.or([eb("created_at", "<", createdAt), eb.and([eb("created_at", "=", createdAt), eb("id", "<", cursorId)])]));
-		}
-		const rows = await query.execute();
-		const hasMore = rows.length > limit;
-		const items = rows.slice(0, limit).map((row) => this.rowToItem(row));
-		let nextCursor;
-		if (hasMore && items.length > 0) {
-			const lastItem = items.at(-1);
-			nextCursor = encodeCursor(lastItem.createdAt, lastItem.id);
-		}
-		return {
-			items,
-			nextCursor
-		};
-	}
-	async findPage(options) {
-		const limit = Math.min(options.limit || 50, 100);
-		const offset = (options.page - 1) * limit;
-		const filtered = this.applyListFilters(this.db.selectFrom("media"), options);
-		const rows = await filtered.selectAll().orderBy("created_at", "desc").orderBy("id", "desc").limit(limit).offset(offset).execute();
-		const count = await filtered.select((eb) => eb.fn.count("id").as("count")).executeTakeFirst();
-		return {
-			items: rows.map((row) => this.rowToItem(row)),
-			totalCount: Number(count?.count ?? 0)
-		};
-	}
-	/**
-	* Update media metadata
-	*/
-	async update(id, input) {
-		if (!await this.findById(id)) return null;
-		const updates = {};
-		if (input.alt !== void 0) updates.alt = input.alt;
-		if (input.caption !== void 0) updates.caption = input.caption;
-		if (input.width !== void 0) updates.width = input.width;
-		if (input.height !== void 0) updates.height = input.height;
-		if (input.folderId !== void 0) updates.folder_id = input.folderId;
-		if (input.focalX !== void 0 && input.focalY !== void 0) {
-			updates.focal_x = input.focalX;
-			updates.focal_y = input.focalY;
-		}
-		if (Object.keys(updates).length > 0) await this.db.updateTable("media").set(updates).where("id", "=", id).execute();
-		return this.findById(id);
-	}
-	async replaceReadyFile(id, expectedStorageKey, input) {
-		const row = await this.db.updateTable("media").set({
-			size: input.size,
-			width: input.width,
-			height: input.height,
-			content_hash: input.contentHash,
-			blurhash: null,
-			dominant_color: null,
-			focal_x: null,
-			focal_y: null
-		}).where("id", "=", id).where("status", "=", "ready").where("storage_key", "=", expectedStorageKey).returningAll().executeTakeFirst();
-		return row ? this.rowToItem(row) : null;
-	}
-	/**
-	* Delete media item
-	*/
-	async deleteWithStorageKey(id) {
-		const deleted = await this.db.deleteFrom("media").where("id", "=", id).returning("storage_key").executeTakeFirst();
-		if (deleted) return deleted.storage_key;
-		return null;
-	}
-	async delete(id) {
-		return await this.deleteWithStorageKey(id) !== null;
-	}
-	/**
-	* Count media items
-	*/
-	async count(mimeType) {
-		const filters = normalizeMimeFilter(mimeType);
-		let query = this.db.selectFrom("media").select((eb) => eb.fn.count("id").as("count"));
-		if (filters.length > 0) query = query.where((eb) => mimeMatchExpr(eb, filters));
-		const result = await query.executeTakeFirst();
-		return Number(result?.count || 0);
-	}
-	applyListFilters(query, options) {
-		const mimeFilters = normalizeMimeFilter(options.mimeType);
-		if (mimeFilters.length > 0) query = query.where((eb) => mimeMatchExpr(eb, mimeFilters));
-		const term = options.q?.trim();
-		if (term) {
-			const pattern = `%${escapeLike(term)}%`;
-			query = query.where(sql`lower(filename)`, "like", sql`lower(${pattern}) escape '\\'`);
-		}
-		if (options.status !== "all") query = query.where("status", "=", options.status ?? "ready");
-		if (options.folderId === null) query = query.where("folder_id", "is", null);
-		else if (options.folderId !== void 0) query = query.where("folder_id", "=", options.folderId);
-		return query;
-	}
-	/**
-	* Delete pending uploads older than the given age.
-	* Pending uploads that were never confirmed indicate abandoned upload flows.
-	*
-	* Returns the storage keys of deleted rows so callers can remove the
-	* corresponding files from object storage.
-	*/
-	async cleanupPendingUploads(maxAgeMs = 3600 * 1e3) {
-		const cutoff = new Date(Date.now() - maxAgeMs).toISOString();
-		return (await this.db.deleteFrom("media").where("status", "=", "pending").where("created_at", "<", cutoff).returning("storage_key").execute()).map((r) => r.storage_key);
-	}
-	/**
-	* Convert database row to MediaItem
-	*/
-	rowToItem(row) {
-		const focalPoint = normalizeFocalPoint(row.focal_x, row.focal_y);
-		return {
-			id: row.id,
-			filename: row.filename,
-			mimeType: row.mime_type,
-			size: row.size,
-			width: row.width,
-			height: row.height,
-			focalX: focalPoint?.focalX ?? null,
-			focalY: focalPoint?.focalY ?? null,
-			alt: row.alt,
-			caption: row.caption,
-			storageKey: row.storage_key,
-			contentHash: row.content_hash,
-			blurhash: row.blurhash,
-			dominantColor: row.dominant_color,
-			status: row.status,
-			createdAt: row.created_at,
-			authorId: row.author_id,
-			folderId: row.folder_id
-		};
-	}
-};
-
-//#endregion
-export { MediaRepository as t };
-//# sourceMappingURL=media-BBm8Wg3f.mjs.map