emdash 0.37.0 → 0.39.0

package/dist/astro/routes/api/sections/_slug_.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"_slug_.mjs","names":[],"sources":["../../../../../src/astro/routes/api/sections/[slug].ts"],"sourcesContent":["/**\n * Section by slug endpoints\n *\n * GET    /_emdash/api/sections/:slug - Get section\n * PUT    /_emdash/api/sections/:slug - Update section\n * DELETE /_emdash/api/sections/:slug - Delete section\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport {\n\thandleSectionDelete,\n\thandleSectionGet,\n\thandleSectionUpdate,\n} from \"#api/handlers/sections.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { updateSectionBody } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\tconst db = emdash.db;\n\tconst { slug } = params;\n\n\tconst denied = requirePerm(user, \"sections:read\");\n\tif (denied) return denied;\n\n\tif (!slug) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"slug is required\", 400);\n\t}\n\n\ttry {\n\t\tconst result = await handleSectionGet(db, slug);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to fetch section\", \"SECTION_GET_ERROR\");\n\t}\n};\n\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\tconst db = emdash.db;\n\tconst { slug } = params;\n\n\tconst denied = requirePerm(user, \"sections:manage\");\n\tif (denied) return denied;\n\n\tif (!slug) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"slug is required\", 400);\n\t}\n\n\ttry {\n\t\tconst body = await parseBody(request, updateSectionBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleSectionUpdate(db, slug, body);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update section\", \"SECTION_UPDATE_ERROR\");\n\t}\n};\n\nexport const DELETE: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\tconst db = emdash.db;\n\tconst { slug } = params;\n\n\tconst denied = requirePerm(user, \"sections:manage\");\n\tif (denied) return denied;\n\n\tif (!slug) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"slug is required\", 400);\n\t}\n\n\ttry {\n\t\tconst result = await handleSectionDelete(db, slug);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to delete section\", \"SECTION_DELETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;AAoBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAClB,MAAM,KAAK,OAAO;CAClB,MAAM,EAAE,SAAS;CAEjB,MAAM,SAAS,YAAY,MAAM,gBAAgB;AACjD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,KACJ,QAAO,SAAS,oBAAoB,oBAAoB,IAAI;AAG7D,KAAI;AAEH,SAAO,aADQ,MAAM,iBAAiB,IAAI,KAAK,CACpB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,oBAAoB;;;AAI3E,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAClB,MAAM,KAAK,OAAO;CAClB,MAAM,EAAE,SAAS;CAEjB,MAAM,SAAS,YAAY,MAAM,kBAAkB;AACnD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,KACJ,QAAO,SAAS,oBAAoB,oBAAoB,IAAI;AAG7D,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,kBAAkB;AACxD,MAAI,aAAa,KAAK,CAAE,QAAO;AAG/B,SAAO,aADQ,MAAM,oBAAoB,IAAI,MAAM,KAAK,CAC7B;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,4BAA4B,uBAAuB;;;AAI/E,MAAa,SAAmB,OAAO,EAAE,QAAQ,aAAa;CAC7D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAClB,MAAM,KAAK,OAAO;CAClB,MAAM,EAAE,SAAS;CAEjB,MAAM,SAAS,YAAY,MAAM,kBAAkB;AACnD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,KACJ,QAAO,SAAS,oBAAoB,oBAAoB,IAAI;AAG7D,KAAI;AAEH,SAAO,aADQ,MAAM,oBAAoB,IAAI,KAAK,CACvB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,4BAA4B,uBAAuB"}
+{"version":3,"file":"_slug_.mjs","names":[],"sources":["../../../../../src/astro/routes/api/sections/[slug].ts"],"sourcesContent":["/**\n * Section by slug endpoints\n *\n * GET    /_emdash/api/sections/:slug - Get section\n * PUT    /_emdash/api/sections/:slug - Update section\n * DELETE /_emdash/api/sections/:slug - Delete section\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport {\n\thandleSectionDelete,\n\thandleSectionGet,\n\thandleSectionUpdate,\n} from \"#api/handlers/sections.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { updateSectionBody } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\tconst db = emdash.db;\n\tconst { slug } = params;\n\n\tconst denied = requirePerm(user, \"sections:read\");\n\tif (denied) return denied;\n\n\tif (!slug) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"slug is required\", 400);\n\t}\n\n\ttry {\n\t\tconst result = await handleSectionGet(db, slug);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to fetch section\", \"SECTION_GET_ERROR\");\n\t}\n};\n\nexport const PUT: APIRoute = async ({ params, request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\tconst db = emdash.db;\n\tconst { slug } = params;\n\n\tconst denied = requirePerm(user, \"sections:manage\");\n\tif (denied) return denied;\n\n\tif (!slug) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"slug is required\", 400);\n\t}\n\n\ttry {\n\t\tconst body = await parseBody(request, updateSectionBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleSectionUpdate(db, slug, body);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update section\", \"SECTION_UPDATE_ERROR\");\n\t}\n};\n\nexport const DELETE: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\tconst db = emdash.db;\n\tconst { slug } = params;\n\n\tconst denied = requirePerm(user, \"sections:manage\");\n\tif (denied) return denied;\n\n\tif (!slug) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"slug is required\", 400);\n\t}\n\n\ttry {\n\t\tconst result = await handleSectionDelete(db, slug);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to delete section\", \"SECTION_DELETE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;AAoBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAClB,MAAM,KAAK,OAAO;CAClB,MAAM,EAAE,SAAS;CAEjB,MAAM,SAAS,YAAY,MAAM,gBAAgB;AACjD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,KACJ,QAAO,SAAS,oBAAoB,oBAAoB,IAAI;AAG7D,KAAI;AAEH,SAAO,aADQ,MAAM,iBAAiB,IAAI,KAAK,CACpB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,2BAA2B,oBAAoB;;;AAI3E,MAAa,MAAgB,OAAO,EAAE,QAAQ,SAAS,aAAa;CACnE,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAClB,MAAM,KAAK,OAAO;CAClB,MAAM,EAAE,SAAS;CAEjB,MAAM,SAAS,YAAY,MAAM,kBAAkB;AACnD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,KACJ,QAAO,SAAS,oBAAoB,oBAAoB,IAAI;AAG7D,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,kBAAkB;AACxD,MAAI,aAAa,KAAK,CAAE,QAAO;AAG/B,SAAO,aADQ,MAAM,oBAAoB,IAAI,MAAM,KAAK,CAC7B;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,4BAA4B,uBAAuB;;;AAI/E,MAAa,SAAmB,OAAO,EAAE,QAAQ,aAAa;CAC7D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAClB,MAAM,KAAK,OAAO;CAClB,MAAM,EAAE,SAAS;CAEjB,MAAM,SAAS,YAAY,MAAM,kBAAkB;AACnD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,KACJ,QAAO,SAAS,oBAAoB,oBAAoB,IAAI;AAG7D,KAAI;AAEH,SAAO,aADQ,MAAM,oBAAoB,IAAI,KAAK,CACvB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,4BAA4B,uBAAuB"}

package/dist/astro/routes/api/sections/index.mjs

@@ -1,17 +1,19 @@
-import "../../../../dialect-helpers-BSbfaO3F.mjs";
-import "../../../../config-C3EBstHi.mjs";
-import "../../../../base64-CvLhUKQv.mjs";
-import "../../../../types-CQPWhPxE.mjs";
-import "../../../../loader-Z8vl7zTq.mjs";
-import { i as handleSectionList, t as handleSectionCreate } from "../../../../sections-B_nYvlwn.mjs";
-import { a as unwrapResult, i as requireDb, r as handleError } from "../../../../error-DFrQjppn.mjs";
-import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-Ckpg-Qfp.mjs";
-import "../../../../media-BHjus86Y.mjs";
-import { I as createSectionBody, z as sectionsListQuery } from "../../../../redirects-BLNOWQTn.mjs";
-import "../../../../relations-C4htk5sb.mjs";
-import "../../../../status-B777-dXz.mjs";
+import "../../../../dialect-helpers-CtYdsX4W.mjs";
+import "../../../../config-CGVeT8Hc.mjs";
+import "../../../../base64-DvnNgP7e.mjs";
+import "../../../../types-BkUg2yHx.mjs";
+import "../../../../request-cache-DaMhSQdx.mjs";
+import "../../../../loader-t4TxaFiQ.mjs";
+import { i as handleSectionList, t as handleSectionCreate } from "../../../../sections-BIpd4Cxf.mjs";
+import { a as unwrapResult, i as requireDb, r as handleError } from "../../../../error-CCTCskie.mjs";
+import { i as parseQuery, n as parseBody, t as isParseError } from "../../../../parse-Cr379Av9.mjs";
+import "../../../../redirects-BCiTaIQ-.mjs";
+import { A as createSectionBody, N as sectionsListQuery } from "../../../../entry-lock-D3C99MXS.mjs";
+import "../../../../comments-BVzzt6x5.mjs";
+import "../../../../relations-B4w-G5U9.mjs";
+import "../../../../status-DLoBmcDz.mjs";
 import "../../../../api/schemas/index.mjs";
-import { r as requirePerm } from "../../../../authorize-Bkf_UHhD.mjs";
+import { r as requirePerm } from "../../../../authorize-BXpfMpp0.mjs";
 
 //#region src/astro/routes/api/sections/index.ts
 const prerender = false;

package/dist/astro/routes/api/sections/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../src/astro/routes/api/sections/index.ts"],"sourcesContent":["/**\n * Sections list and create endpoints\n *\n * GET  /_emdash/api/sections - List all sections (with filters)\n * POST /_emdash/api/sections - Create section\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport { handleSectionCreate, handleSectionList } from \"#api/handlers/sections.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { createSectionBody, sectionsListQuery } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ url, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\tconst db = emdash.db;\n\n\tconst denied = requirePerm(user, \"sections:read\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst query = parseQuery(url, sectionsListQuery);\n\t\tif (isParseError(query)) return query;\n\n\t\tconst result = await handleSectionList(db, query);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to fetch sections\", \"SECTION_LIST_ERROR\");\n\t}\n};\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\tconst db = emdash.db;\n\n\tconst denied = requirePerm(user, \"sections:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst body = await parseBody(request, createSectionBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleSectionCreate(db, body);\n\t\treturn unwrapResult(result, 201);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create section\", \"SECTION_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;AAeA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CACvD,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAClB,MAAM,KAAK,OAAO;CAElB,MAAM,SAAS,YAAY,MAAM,gBAAgB;AACjD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,QAAQ,WAAW,KAAK,kBAAkB;AAChD,MAAI,aAAa,MAAM,CAAE,QAAO;AAGhC,SAAO,aADQ,MAAM,kBAAkB,IAAI,MAAM,CACtB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,4BAA4B,qBAAqB;;;AAI7E,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAClB,MAAM,KAAK,OAAO;CAElB,MAAM,SAAS,YAAY,MAAM,kBAAkB;AACnD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,kBAAkB;AACxD,MAAI,aAAa,KAAK,CAAE,QAAO;AAG/B,SAAO,aADQ,MAAM,oBAAoB,IAAI,KAAK,EACtB,IAAI;UACxB,OAAO;AACf,SAAO,YAAY,OAAO,4BAA4B,uBAAuB"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../src/astro/routes/api/sections/index.ts"],"sourcesContent":["/**\n * Sections list and create endpoints\n *\n * GET  /_emdash/api/sections - List all sections (with filters)\n * POST /_emdash/api/sections - Create section\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { handleError, requireDb, unwrapResult } from \"#api/error.js\";\nimport { handleSectionCreate, handleSectionList } from \"#api/handlers/sections.js\";\nimport { isParseError, parseBody, parseQuery } from \"#api/parse.js\";\nimport { createSectionBody, sectionsListQuery } from \"#api/schemas.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ url, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\tconst db = emdash.db;\n\n\tconst denied = requirePerm(user, \"sections:read\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst query = parseQuery(url, sectionsListQuery);\n\t\tif (isParseError(query)) return query;\n\n\t\tconst result = await handleSectionList(db, query);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to fetch sections\", \"SECTION_LIST_ERROR\");\n\t}\n};\n\nexport const POST: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst dbErr = requireDb(emdash?.db);\n\tif (dbErr) return dbErr;\n\tconst db = emdash.db;\n\n\tconst denied = requirePerm(user, \"sections:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst body = await parseBody(request, createSectionBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleSectionCreate(db, body);\n\t\treturn unwrapResult(result, 201);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create section\", \"SECTION_CREATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;AAeA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,KAAK,aAAa;CACvD,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAClB,MAAM,KAAK,OAAO;CAElB,MAAM,SAAS,YAAY,MAAM,gBAAgB;AACjD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,QAAQ,WAAW,KAAK,kBAAkB;AAChD,MAAI,aAAa,MAAM,CAAE,QAAO;AAGhC,SAAO,aADQ,MAAM,kBAAkB,IAAI,MAAM,CACtB;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,4BAA4B,qBAAqB;;;AAI7E,MAAa,OAAiB,OAAO,EAAE,SAAS,aAAa;CAC5D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,QAAQ,UAAU,QAAQ,GAAG;AACnC,KAAI,MAAO,QAAO;CAClB,MAAM,KAAK,OAAO;CAElB,MAAM,SAAS,YAAY,MAAM,kBAAkB;AACnD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,kBAAkB;AACxD,MAAI,aAAa,KAAK,CAAE,QAAO;AAG/B,SAAO,aADQ,MAAM,oBAAoB,IAAI,KAAK,EACtB,IAAI;UACxB,OAAO;AACf,SAAO,YAAY,OAAO,4BAA4B,uBAAuB"}

package/dist/astro/routes/api/settings/backups/archives/_name_.mjs

@@ -1,11 +1,12 @@
-import "../../../../../../base64-CvLhUKQv.mjs";
-import "../../../../../../types-CQPWhPxE.mjs";
-import "../../../../../../options-BHPeIbBd.mjs";
-import { t as ErrorCode } from "../../../../../../errors-DsVoDUjJ.mjs";
-import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../../error-DFrQjppn.mjs";
-import "../../../../../../snapshot--OCDTqdb.mjs";
-import { a as deleteBackupArchive, c as isValidArchiveName, r as BACKUP_STORAGE_PREFIX } from "../../../../../../backup-rwVAl9NI.mjs";
-import { r as requirePerm } from "../../../../../../authorize-Bkf_UHhD.mjs";
+import "../../../../../../dialect-helpers-CtYdsX4W.mjs";
+import "../../../../../../options-D5WcorD5.mjs";
+import "../../../../../../base64-DvnNgP7e.mjs";
+import "../../../../../../types-BkUg2yHx.mjs";
+import { t as ErrorCode } from "../../../../../../errors-W3PA8HqB.mjs";
+import { a as unwrapResult, r as handleError, t as apiError } from "../../../../../../error-CCTCskie.mjs";
+import "../../../../../../snapshot-C32Xuv3o.mjs";
+import { a as deleteBackupArchive, c as isValidArchiveName, r as BACKUP_STORAGE_PREFIX } from "../../../../../../backup-BsPQdwnS.mjs";
+import { r as requirePerm } from "../../../../../../authorize-BXpfMpp0.mjs";
 
 //#region src/astro/routes/api/settings/backups/archives/[name].ts
 const prerender = false;

package/dist/astro/routes/api/settings/backups/archives/_name_.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"_name_.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/settings/backups/archives/[name].ts"],"sourcesContent":["/**\n * Backup archives — download / delete\n *\n * GET    /_emdash/api/settings/backups/archives/:name — download an archive.\n * DELETE /_emdash/api/settings/backups/archives/:name — delete an archive.\n *\n * `name` is validated against the strict archive-filename pattern before it\n * touches a storage key, so path traversal into other prefixes is impossible.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError, unwrapResult } from \"#api/error.js\";\nimport { ErrorCode } from \"#api/errors.js\";\nimport {\n\tBACKUP_STORAGE_PREFIX,\n\tdeleteBackupArchive,\n\tisValidArchiveName,\n} from \"#api/handlers/backup.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst name = params.name ?? \"\";\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"backups:manage\");\n\tif (denied) return denied;\n\n\tif (!emdash.storage) {\n\t\treturn apiError(\"STORAGE_NOT_CONFIGURED\", \"No storage backend is configured\", 503);\n\t}\n\n\tif (!isValidArchiveName(name)) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"Invalid archive name\", 400);\n\t}\n\n\ttry {\n\t\tconst result = await emdash.storage.download(`${BACKUP_STORAGE_PREFIX}${name}`);\n\t\treturn new Response(result.body, {\n\t\t\tstatus: 200,\n\t\t\theaders: {\n\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t\"Content-Disposition\": `attachment; filename=\"${name}\"`,\n\t\t\t\t\"Cache-Control\": \"private, no-store\",\n\t\t\t\t\"X-Content-Type-Options\": \"nosniff\",\n\t\t\t},\n\t\t});\n\t} catch (error) {\n\t\tif (error instanceof Error && error.message.toLowerCase().includes(\"not found\")) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"Archive not found\", 404);\n\t\t}\n\t\treturn handleError(error, \"Failed to download archive\", ErrorCode.BACKUP_DOWNLOAD_ERROR);\n\t}\n};\n\nexport const DELETE: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst name = params.name ?? \"\";\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"backups:manage\");\n\tif (denied) return denied;\n\n\tif (!emdash.storage) {\n\t\treturn apiError(\"STORAGE_NOT_CONFIGURED\", \"No storage backend is configured\", 503);\n\t}\n\n\treturn unwrapResult(await deleteBackupArchive(emdash.storage, name));\n};\n"],"mappings":";;;;;;;;;;AAqBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,OAAO,OAAO,QAAQ;AAE5B,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,OAAO,QACX,QAAO,SAAS,0BAA0B,oCAAoC,IAAI;AAGnF,KAAI,CAAC,mBAAmB,KAAK,CAC5B,QAAO,SAAS,oBAAoB,wBAAwB,IAAI;AAGjE,KAAI;EACH,MAAM,SAAS,MAAM,OAAO,QAAQ,SAAS,GAAG,wBAAwB,OAAO;AAC/E,SAAO,IAAI,SAAS,OAAO,MAAM;GAChC,QAAQ;GACR,SAAS;IACR,gBAAgB;IAChB,uBAAuB,yBAAyB,KAAK;IACrD,iBAAiB;IACjB,0BAA0B;IAC1B;GACD,CAAC;UACM,OAAO;AACf,MAAI,iBAAiB,SAAS,MAAM,QAAQ,aAAa,CAAC,SAAS,YAAY,CAC9E,QAAO,SAAS,aAAa,qBAAqB,IAAI;AAEvD,SAAO,YAAY,OAAO,8BAA8B,UAAU,sBAAsB;;;AAI1F,MAAa,SAAmB,OAAO,EAAE,QAAQ,aAAa;CAC7D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,OAAO,OAAO,QAAQ;AAE5B,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,OAAO,QACX,QAAO,SAAS,0BAA0B,oCAAoC,IAAI;AAGnF,QAAO,aAAa,MAAM,oBAAoB,OAAO,SAAS,KAAK,CAAC"}
+{"version":3,"file":"_name_.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/settings/backups/archives/[name].ts"],"sourcesContent":["/**\n * Backup archives — download / delete\n *\n * GET    /_emdash/api/settings/backups/archives/:name — download an archive.\n * DELETE /_emdash/api/settings/backups/archives/:name — delete an archive.\n *\n * `name` is validated against the strict archive-filename pattern before it\n * touches a storage key, so path traversal into other prefixes is impossible.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError, unwrapResult } from \"#api/error.js\";\nimport { ErrorCode } from \"#api/errors.js\";\nimport {\n\tBACKUP_STORAGE_PREFIX,\n\tdeleteBackupArchive,\n\tisValidArchiveName,\n} from \"#api/handlers/backup.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst name = params.name ?? \"\";\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"backups:manage\");\n\tif (denied) return denied;\n\n\tif (!emdash.storage) {\n\t\treturn apiError(\"STORAGE_NOT_CONFIGURED\", \"No storage backend is configured\", 503);\n\t}\n\n\tif (!isValidArchiveName(name)) {\n\t\treturn apiError(\"VALIDATION_ERROR\", \"Invalid archive name\", 400);\n\t}\n\n\ttry {\n\t\tconst result = await emdash.storage.download(`${BACKUP_STORAGE_PREFIX}${name}`);\n\t\treturn new Response(result.body, {\n\t\t\tstatus: 200,\n\t\t\theaders: {\n\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t\"Content-Disposition\": `attachment; filename=\"${name}\"`,\n\t\t\t\t\"Cache-Control\": \"private, no-store\",\n\t\t\t\t\"X-Content-Type-Options\": \"nosniff\",\n\t\t\t},\n\t\t});\n\t} catch (error) {\n\t\tif (error instanceof Error && error.message.toLowerCase().includes(\"not found\")) {\n\t\t\treturn apiError(\"NOT_FOUND\", \"Archive not found\", 404);\n\t\t}\n\t\treturn handleError(error, \"Failed to download archive\", ErrorCode.BACKUP_DOWNLOAD_ERROR);\n\t}\n};\n\nexport const DELETE: APIRoute = async ({ params, locals }) => {\n\tconst { emdash, user } = locals;\n\tconst name = params.name ?? \"\";\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"backups:manage\");\n\tif (denied) return denied;\n\n\tif (!emdash.storage) {\n\t\treturn apiError(\"STORAGE_NOT_CONFIGURED\", \"No storage backend is configured\", 503);\n\t}\n\n\treturn unwrapResult(await deleteBackupArchive(emdash.storage, name));\n};\n"],"mappings":";;;;;;;;;;;AAqBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,QAAQ,aAAa;CAC1D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,OAAO,OAAO,QAAQ;AAE5B,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,OAAO,QACX,QAAO,SAAS,0BAA0B,oCAAoC,IAAI;AAGnF,KAAI,CAAC,mBAAmB,KAAK,CAC5B,QAAO,SAAS,oBAAoB,wBAAwB,IAAI;AAGjE,KAAI;EACH,MAAM,SAAS,MAAM,OAAO,QAAQ,SAAS,GAAG,wBAAwB,OAAO;AAC/E,SAAO,IAAI,SAAS,OAAO,MAAM;GAChC,QAAQ;GACR,SAAS;IACR,gBAAgB;IAChB,uBAAuB,yBAAyB,KAAK;IACrD,iBAAiB;IACjB,0BAA0B;IAC1B;GACD,CAAC;UACM,OAAO;AACf,MAAI,iBAAiB,SAAS,MAAM,QAAQ,aAAa,CAAC,SAAS,YAAY,CAC9E,QAAO,SAAS,aAAa,qBAAqB,IAAI;AAEvD,SAAO,YAAY,OAAO,8BAA8B,UAAU,sBAAsB;;;AAI1F,MAAa,SAAmB,OAAO,EAAE,QAAQ,aAAa;CAC7D,MAAM,EAAE,QAAQ,SAAS;CACzB,MAAM,OAAO,OAAO,QAAQ;AAE5B,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,OAAO,QACX,QAAO,SAAS,0BAA0B,oCAAoC,IAAI;AAGnF,QAAO,aAAa,MAAM,oBAAoB,OAAO,SAAS,KAAK,CAAC"}

package/dist/astro/routes/api/settings/backups/archives/index.mjs

@@ -1,10 +1,11 @@
-import "../../../../../../base64-CvLhUKQv.mjs";
-import "../../../../../../types-CQPWhPxE.mjs";
-import "../../../../../../options-BHPeIbBd.mjs";
-import { a as unwrapResult, t as apiError } from "../../../../../../error-DFrQjppn.mjs";
-import "../../../../../../snapshot--OCDTqdb.mjs";
-import { d as runBackupToStorage, s as getBackupSettings } from "../../../../../../backup-rwVAl9NI.mjs";
-import { r as requirePerm } from "../../../../../../authorize-Bkf_UHhD.mjs";
+import "../../../../../../dialect-helpers-CtYdsX4W.mjs";
+import "../../../../../../options-D5WcorD5.mjs";
+import "../../../../../../base64-DvnNgP7e.mjs";
+import "../../../../../../types-BkUg2yHx.mjs";
+import { a as unwrapResult, t as apiError } from "../../../../../../error-CCTCskie.mjs";
+import "../../../../../../snapshot-C32Xuv3o.mjs";
+import { d as runBackupToStorage, s as getBackupSettings } from "../../../../../../backup-BsPQdwnS.mjs";
+import { r as requirePerm } from "../../../../../../authorize-BXpfMpp0.mjs";
 
 //#region src/astro/routes/api/settings/backups/archives/index.ts
 const prerender = false;

package/dist/astro/routes/api/settings/backups/archives/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/settings/backups/archives/index.ts"],"sourcesContent":["/**\n * Backup archives — create\n *\n * POST /_emdash/api/settings/backups/archives — generate a backup and store\n * it in the storage backend under `backups/`, pruning archives beyond the\n * configured retention.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, unwrapResult } from \"#api/error.js\";\nimport { getBackupSettings, runBackupToStorage } from \"#api/handlers/backup.js\";\n\nexport const prerender = false;\n\nexport const POST: APIRoute = async ({ locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"backups:manage\");\n\tif (denied) return denied;\n\n\tif (!emdash.storage) {\n\t\treturn apiError(\"STORAGE_NOT_CONFIGURED\", \"No storage backend is configured\", 503);\n\t}\n\n\tconst settings = await getBackupSettings(emdash.db);\n\treturn unwrapResult(await runBackupToStorage(emdash.db, emdash.storage, settings.retention), 201);\n};\n"],"mappings":";;;;;;;;;AAcA,MAAa,YAAY;AAEzB,MAAa,OAAiB,OAAO,EAAE,aAAa;CACnD,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,OAAO,QACX,QAAO,SAAS,0BAA0B,oCAAoC,IAAI;CAGnF,MAAM,WAAW,MAAM,kBAAkB,OAAO,GAAG;AACnD,QAAO,aAAa,MAAM,mBAAmB,OAAO,IAAI,OAAO,SAAS,SAAS,UAAU,EAAE,IAAI"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../../src/astro/routes/api/settings/backups/archives/index.ts"],"sourcesContent":["/**\n * Backup archives — create\n *\n * POST /_emdash/api/settings/backups/archives — generate a backup and store\n * it in the storage backend under `backups/`, pruning archives beyond the\n * configured retention.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, unwrapResult } from \"#api/error.js\";\nimport { getBackupSettings, runBackupToStorage } from \"#api/handlers/backup.js\";\n\nexport const prerender = false;\n\nexport const POST: APIRoute = async ({ locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"backups:manage\");\n\tif (denied) return denied;\n\n\tif (!emdash.storage) {\n\t\treturn apiError(\"STORAGE_NOT_CONFIGURED\", \"No storage backend is configured\", 503);\n\t}\n\n\tconst settings = await getBackupSettings(emdash.db);\n\treturn unwrapResult(await runBackupToStorage(emdash.db, emdash.storage, settings.retention), 201);\n};\n"],"mappings":";;;;;;;;;;AAcA,MAAa,YAAY;AAEzB,MAAa,OAAiB,OAAO,EAAE,aAAa;CACnD,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI,CAAC,OAAO,QACX,QAAO,SAAS,0BAA0B,oCAAoC,IAAI;CAGnF,MAAM,WAAW,MAAM,kBAAkB,OAAO,GAAG;AACnD,QAAO,aAAa,MAAM,mBAAmB,OAAO,IAAI,OAAO,SAAS,SAAS,UAAU,EAAE,IAAI"}

package/dist/astro/routes/api/settings/backups/export.mjs

@@ -1,11 +1,12 @@
-import "../../../../../base64-CvLhUKQv.mjs";
-import "../../../../../types-CQPWhPxE.mjs";
-import "../../../../../options-BHPeIbBd.mjs";
-import { t as ErrorCode } from "../../../../../errors-DsVoDUjJ.mjs";
-import { r as handleError, t as apiError } from "../../../../../error-DFrQjppn.mjs";
-import "../../../../../snapshot--OCDTqdb.mjs";
-import { i as archiveNameForDate, o as generateBackupJson } from "../../../../../backup-rwVAl9NI.mjs";
-import { r as requirePerm } from "../../../../../authorize-Bkf_UHhD.mjs";
+import "../../../../../dialect-helpers-CtYdsX4W.mjs";
+import "../../../../../options-D5WcorD5.mjs";
+import "../../../../../base64-DvnNgP7e.mjs";
+import "../../../../../types-BkUg2yHx.mjs";
+import { t as ErrorCode } from "../../../../../errors-W3PA8HqB.mjs";
+import { r as handleError, t as apiError } from "../../../../../error-CCTCskie.mjs";
+import "../../../../../snapshot-C32Xuv3o.mjs";
+import { i as archiveNameForDate, o as generateBackupJson } from "../../../../../backup-BsPQdwnS.mjs";
+import { r as requirePerm } from "../../../../../authorize-BXpfMpp0.mjs";
 
 //#region src/astro/routes/api/settings/backups/export.ts
 const prerender = false;

package/dist/astro/routes/api/settings/backups/export.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"export.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/settings/backups/export.ts"],"sourcesContent":["/**\n * One-click backup download\n *\n * GET /_emdash/api/settings/backups/export — generate a fresh backup and\n * stream it as a JSON download. Read-only (nothing is stored), so GET is\n * appropriate despite the cost of generating the payload.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError } from \"#api/error.js\";\nimport { ErrorCode } from \"#api/errors.js\";\nimport { archiveNameForDate, generateBackupJson } from \"#api/handlers/backup.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"backups:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst json = await generateBackupJson(emdash.db);\n\t\treturn new Response(json, {\n\t\t\tstatus: 200,\n\t\t\theaders: {\n\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t\"Content-Disposition\": `attachment; filename=\"${archiveNameForDate(new Date())}\"`,\n\t\t\t\t// Session-specific full-content export — never cacheable anywhere.\n\t\t\t\t\"Cache-Control\": \"private, no-store\",\n\t\t\t\t\"X-Content-Type-Options\": \"nosniff\",\n\t\t\t},\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to generate backup\", ErrorCode.BACKUP_EXPORT_ERROR);\n\t}\n};\n"],"mappings":";;;;;;;;;;AAeA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,aAAa;CAClD,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,OAAO,MAAM,mBAAmB,OAAO,GAAG;AAChD,SAAO,IAAI,SAAS,MAAM;GACzB,QAAQ;GACR,SAAS;IACR,gBAAgB;IAChB,uBAAuB,yBAAyB,mCAAmB,IAAI,MAAM,CAAC,CAAC;IAE/E,iBAAiB;IACjB,0BAA0B;IAC1B;GACD,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,6BAA6B,UAAU,oBAAoB"}
+{"version":3,"file":"export.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/settings/backups/export.ts"],"sourcesContent":["/**\n * One-click backup download\n *\n * GET /_emdash/api/settings/backups/export — generate a fresh backup and\n * stream it as a JSON download. Read-only (nothing is stored), so GET is\n * appropriate despite the cost of generating the payload.\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError } from \"#api/error.js\";\nimport { ErrorCode } from \"#api/errors.js\";\nimport { archiveNameForDate, generateBackupJson } from \"#api/handlers/backup.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"backups:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst json = await generateBackupJson(emdash.db);\n\t\treturn new Response(json, {\n\t\t\tstatus: 200,\n\t\t\theaders: {\n\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t\"Content-Disposition\": `attachment; filename=\"${archiveNameForDate(new Date())}\"`,\n\t\t\t\t// Session-specific full-content export — never cacheable anywhere.\n\t\t\t\t\"Cache-Control\": \"private, no-store\",\n\t\t\t\t\"X-Content-Type-Options\": \"nosniff\",\n\t\t\t},\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to generate backup\", ErrorCode.BACKUP_EXPORT_ERROR);\n\t}\n};\n"],"mappings":";;;;;;;;;;;AAeA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,aAAa;CAClD,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,OAAO,MAAM,mBAAmB,OAAO,GAAG;AAChD,SAAO,IAAI,SAAS,MAAM;GACzB,QAAQ;GACR,SAAS;IACR,gBAAgB;IAChB,uBAAuB,yBAAyB,mCAAmB,IAAI,MAAM,CAAC,CAAC;IAE/E,iBAAiB;IACjB,0BAA0B;IAC1B;GACD,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,6BAA6B,UAAU,oBAAoB"}

package/dist/astro/routes/api/settings/backups/index.mjs

@@ -1,12 +1,13 @@
-import "../../../../../base64-CvLhUKQv.mjs";
-import "../../../../../types-CQPWhPxE.mjs";
-import "../../../../../options-BHPeIbBd.mjs";
-import { t as ErrorCode } from "../../../../../errors-DsVoDUjJ.mjs";
-import { a as unwrapResult, n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-DFrQjppn.mjs";
-import { n as parseBody, t as isParseError } from "../../../../../parse-Ckpg-Qfp.mjs";
-import "../../../../../snapshot--OCDTqdb.mjs";
-import { f as updateBackupSettings, l as listBackupArchives, n as BACKUP_RETENTION_MIN, s as getBackupSettings, t as BACKUP_RETENTION_MAX } from "../../../../../backup-rwVAl9NI.mjs";
-import { r as requirePerm } from "../../../../../authorize-Bkf_UHhD.mjs";
+import "../../../../../dialect-helpers-CtYdsX4W.mjs";
+import "../../../../../options-D5WcorD5.mjs";
+import "../../../../../base64-DvnNgP7e.mjs";
+import "../../../../../types-BkUg2yHx.mjs";
+import { t as ErrorCode } from "../../../../../errors-W3PA8HqB.mjs";
+import { a as unwrapResult, n as apiSuccess, r as handleError, t as apiError } from "../../../../../error-CCTCskie.mjs";
+import { n as parseBody, t as isParseError } from "../../../../../parse-Cr379Av9.mjs";
+import "../../../../../snapshot-C32Xuv3o.mjs";
+import { f as updateBackupSettings, l as listBackupArchives, n as BACKUP_RETENTION_MIN, s as getBackupSettings, t as BACKUP_RETENTION_MAX } from "../../../../../backup-BsPQdwnS.mjs";
+import { r as requirePerm } from "../../../../../authorize-BXpfMpp0.mjs";
 import { z } from "zod";
 
 //#region src/astro/routes/api/settings/backups/index.ts

package/dist/astro/routes/api/settings/backups/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/settings/backups/index.ts"],"sourcesContent":["/**\n * Backup settings + archive listing\n *\n * GET /_emdash/api/settings/backups — scheduled-backup settings, stored\n *   archives, and whether a storage backend is available.\n * PUT /_emdash/api/settings/backups — update scheduled-backup settings.\n */\n\nimport type { APIRoute } from \"astro\";\nimport { z } from \"zod\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError, unwrapResult } from \"#api/error.js\";\nimport { ErrorCode } from \"#api/errors.js\";\nimport {\n\tBACKUP_RETENTION_MAX,\n\tBACKUP_RETENTION_MIN,\n\tgetBackupSettings,\n\tlistBackupArchives,\n\tupdateBackupSettings,\n\ttype BackupArchive,\n} from \"#api/handlers/backup.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"backups:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst settings = await getBackupSettings(emdash.db);\n\n\t\tlet archives: BackupArchive[] = [];\n\t\tconst storageAvailable = !!emdash.storage;\n\t\tif (emdash.storage) {\n\t\t\tconst listed = await listBackupArchives(emdash.storage);\n\t\t\tif (listed.success) archives = listed.data;\n\t\t}\n\n\t\treturn apiSuccess({ settings, archives, storageAvailable });\n\t} catch (error) {\n\t\treturn handleError(\n\t\t\terror,\n\t\t\t\"Failed to load backup settings\",\n\t\t\tErrorCode.BACKUP_SETTINGS_READ_ERROR,\n\t\t);\n\t}\n};\n\nconst settingsBody = z.object({\n\tenabled: z.boolean(),\n\tretention: z.number().int().min(BACKUP_RETENTION_MIN).max(BACKUP_RETENTION_MAX),\n});\n\nexport const PUT: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"backups:manage\");\n\tif (denied) return denied;\n\n\tconst body = await parseBody(request, settingsBody);\n\tif (isParseError(body)) return body;\n\n\treturn unwrapResult(await updateBackupSettings(emdash.db, body));\n};\n"],"mappings":";;;;;;;;;;;;AAwBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,aAAa;CAClD,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,WAAW,MAAM,kBAAkB,OAAO,GAAG;EAEnD,IAAI,WAA4B,EAAE;EAClC,MAAM,mBAAmB,CAAC,CAAC,OAAO;AAClC,MAAI,OAAO,SAAS;GACnB,MAAM,SAAS,MAAM,mBAAmB,OAAO,QAAQ;AACvD,OAAI,OAAO,QAAS,YAAW,OAAO;;AAGvC,SAAO,WAAW;GAAE;GAAU;GAAU;GAAkB,CAAC;UACnD,OAAO;AACf,SAAO,YACN,OACA,kCACA,UAAU,2BACV;;;AAIH,MAAM,eAAe,EAAE,OAAO;CAC7B,SAAS,EAAE,SAAS;CACpB,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,qBAAqB,CAAC,IAAI,qBAAqB;CAC/E,CAAC;AAEF,MAAa,MAAgB,OAAO,EAAE,SAAS,aAAa;CAC3D,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;CAEnB,MAAM,OAAO,MAAM,UAAU,SAAS,aAAa;AACnD,KAAI,aAAa,KAAK,CAAE,QAAO;AAE/B,QAAO,aAAa,MAAM,qBAAqB,OAAO,IAAI,KAAK,CAAC"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../src/astro/routes/api/settings/backups/index.ts"],"sourcesContent":["/**\n * Backup settings + archive listing\n *\n * GET /_emdash/api/settings/backups — scheduled-backup settings, stored\n *   archives, and whether a storage backend is available.\n * PUT /_emdash/api/settings/backups — update scheduled-backup settings.\n */\n\nimport type { APIRoute } from \"astro\";\nimport { z } from \"zod\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, apiSuccess, handleError, unwrapResult } from \"#api/error.js\";\nimport { ErrorCode } from \"#api/errors.js\";\nimport {\n\tBACKUP_RETENTION_MAX,\n\tBACKUP_RETENTION_MIN,\n\tgetBackupSettings,\n\tlistBackupArchives,\n\tupdateBackupSettings,\n\ttype BackupArchive,\n} from \"#api/handlers/backup.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\n\nexport const prerender = false;\n\nexport const GET: APIRoute = async ({ locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"backups:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst settings = await getBackupSettings(emdash.db);\n\n\t\tlet archives: BackupArchive[] = [];\n\t\tconst storageAvailable = !!emdash.storage;\n\t\tif (emdash.storage) {\n\t\t\tconst listed = await listBackupArchives(emdash.storage);\n\t\t\tif (listed.success) archives = listed.data;\n\t\t}\n\n\t\treturn apiSuccess({ settings, archives, storageAvailable });\n\t} catch (error) {\n\t\treturn handleError(\n\t\t\terror,\n\t\t\t\"Failed to load backup settings\",\n\t\t\tErrorCode.BACKUP_SETTINGS_READ_ERROR,\n\t\t);\n\t}\n};\n\nconst settingsBody = z.object({\n\tenabled: z.boolean(),\n\tretention: z.number().int().min(BACKUP_RETENTION_MIN).max(BACKUP_RETENTION_MAX),\n});\n\nexport const PUT: APIRoute = async ({ request, locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"backups:manage\");\n\tif (denied) return denied;\n\n\tconst body = await parseBody(request, settingsBody);\n\tif (isParseError(body)) return body;\n\n\treturn unwrapResult(await updateBackupSettings(emdash.db, body));\n};\n"],"mappings":";;;;;;;;;;;;;AAwBA,MAAa,YAAY;AAEzB,MAAa,MAAgB,OAAO,EAAE,aAAa;CAClD,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,WAAW,MAAM,kBAAkB,OAAO,GAAG;EAEnD,IAAI,WAA4B,EAAE;EAClC,MAAM,mBAAmB,CAAC,CAAC,OAAO;AAClC,MAAI,OAAO,SAAS;GACnB,MAAM,SAAS,MAAM,mBAAmB,OAAO,QAAQ;AACvD,OAAI,OAAO,QAAS,YAAW,OAAO;;AAGvC,SAAO,WAAW;GAAE;GAAU;GAAU;GAAkB,CAAC;UACnD,OAAO;AACf,SAAO,YACN,OACA,kCACA,UAAU,2BACV;;;AAIH,MAAM,eAAe,EAAE,OAAO;CAC7B,SAAS,EAAE,SAAS;CACpB,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,qBAAqB,CAAC,IAAI,qBAAqB;CAC/E,CAAC;AAEF,MAAa,MAAgB,OAAO,EAAE,SAAS,aAAa;CAC3D,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,iBAAiB;AAClD,KAAI,OAAQ,QAAO;CAEnB,MAAM,OAAO,MAAM,UAAU,SAAS,aAAa;AACnD,KAAI,aAAa,KAAK,CAAE,QAAO;AAE/B,QAAO,aAAa,MAAM,qBAAqB,OAAO,IAAI,KAAK,CAAC"}

package/dist/astro/routes/api/settings/email.mjs

@@ -1,9 +1,9 @@
-import "../../../../base64-CvLhUKQv.mjs";
-import "../../../../types-CQPWhPxE.mjs";
-import { t as OptionsRepository } from "../../../../options-BHPeIbBd.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DFrQjppn.mjs";
-import { n as parseBody, t as isParseError } from "../../../../parse-Ckpg-Qfp.mjs";
-import { r as requirePerm } from "../../../../authorize-Bkf_UHhD.mjs";
+import { t as OptionsRepository } from "../../../../options-D5WcorD5.mjs";
+import "../../../../base64-DvnNgP7e.mjs";
+import "../../../../types-BkUg2yHx.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-CCTCskie.mjs";
+import { n as parseBody, t as isParseError } from "../../../../parse-Cr379Av9.mjs";
+import { r as requirePerm } from "../../../../authorize-BXpfMpp0.mjs";
 import { z } from "zod";
 import { escapeHtml } from "@emdash-cms/auth";
 

package/dist/astro/routes/api/settings.mjs

@@ -1,24 +1,26 @@
-import "../../../dialect-helpers-BSbfaO3F.mjs";
-import "../../../config-C3EBstHi.mjs";
-import "../../../after-CBU2vkoO.mjs";
-import "../../../object-cache-DVKnyOfy.mjs";
-import "../../../base64-CvLhUKQv.mjs";
-import "../../../types-CQPWhPxE.mjs";
-import "../../../media-BBm8Wg3f.mjs";
-import "../../../options-BHPeIbBd.mjs";
-import "../../../request-cache-DH9zdCOD.mjs";
-import { n as siteSettingsTag } from "../../../chrome-tags-D8fiZG94.mjs";
-import "../../../loader-Z8vl7zTq.mjs";
-import "../../../settings--wobrkkC.mjs";
-import { n as handleSettingsUpdate, t as handleSettingsGet } from "../../../settings-Cwm6o2jY.mjs";
-import { a as unwrapResult, r as handleError, t as apiError } from "../../../error-DFrQjppn.mjs";
-import { n as parseBody, t as isParseError } from "../../../parse-Ckpg-Qfp.mjs";
-import "../../../media-BHjus86Y.mjs";
-import { P as settingsUpdateBody } from "../../../redirects-BLNOWQTn.mjs";
-import "../../../relations-C4htk5sb.mjs";
-import "../../../status-B777-dXz.mjs";
+import "../../../dialect-helpers-CtYdsX4W.mjs";
+import "../../../config-CGVeT8Hc.mjs";
+import "../../../after-PcEvMY_6.mjs";
+import "../../../options-D5WcorD5.mjs";
+import "../../../base64-DvnNgP7e.mjs";
+import "../../../secrets-DNgVgz_e.mjs";
+import "../../../object-cache-DlSVbn5Y.mjs";
+import "../../../types-BkUg2yHx.mjs";
+import "../../../media-TBlKCwo7.mjs";
+import "../../../request-cache-DaMhSQdx.mjs";
+import { n as siteSettingsTag } from "../../../chrome-tags-D7LGB91U.mjs";
+import "../../../loader-t4TxaFiQ.mjs";
+import "../../../settings-DmroR53o.mjs";
+import { n as handleSettingsUpdate, t as handleSettingsGet } from "../../../settings-g2F2a3Ub.mjs";
+import { a as unwrapResult, r as handleError, t as apiError } from "../../../error-CCTCskie.mjs";
+import { n as parseBody, t as isParseError } from "../../../parse-Cr379Av9.mjs";
+import "../../../redirects-BCiTaIQ-.mjs";
+import { O as settingsUpdateBody } from "../../../entry-lock-D3C99MXS.mjs";
+import "../../../comments-BVzzt6x5.mjs";
+import "../../../relations-B4w-G5U9.mjs";
+import "../../../status-DLoBmcDz.mjs";
 import "../../../api/schemas/index.mjs";
-import { r as requirePerm } from "../../../authorize-Bkf_UHhD.mjs";
+import { r as requirePerm } from "../../../authorize-BXpfMpp0.mjs";
 
 //#region src/astro/routes/api/settings.ts
 const prerender = false;

package/dist/astro/routes/api/settings.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"settings.mjs","names":[],"sources":["../../../../src/astro/routes/api/settings.ts"],"sourcesContent":["/**\n * Site Settings API endpoint\n *\n * GET  /_emdash/api/settings - Get all site settings\n * POST /_emdash/api/settings - Update site settings\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError, unwrapResult } from \"#api/error.js\";\nimport { handleSettingsGet, handleSettingsUpdate } from \"#api/handlers/settings.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { settingsUpdateBody } from \"#api/schemas.js\";\nimport { siteSettingsTag } from \"#cache/chrome-tags.js\";\n\nexport const prerender = false;\n\n/**\n * GET /_emdash/api/settings\n *\n * Returns all site settings as a JSON object.\n * Unset values are undefined. Media references include resolved URLs.\n */\nexport const GET: APIRoute = async ({ locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"settings:read\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst result = await handleSettingsGet(emdash.db, emdash.storage);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to get settings\", \"SETTINGS_READ_ERROR\");\n\t}\n};\n\n/**\n * POST /_emdash/api/settings\n *\n * Updates site settings. Accepts a partial settings object.\n * Merges with existing settings and returns the updated settings.\n */\nexport const POST: APIRoute = async ({ request, locals, cache }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"settings:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst body = await parseBody(request, settingsUpdateBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleSettingsUpdate(emdash.db, emdash.storage, body);\n\t\tif (!result.success) return unwrapResult(result);\n\t\tif (cache?.enabled) await cache.invalidate({ tags: [siteSettingsTag()] });\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update settings\", \"SETTINGS_UPDATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAgBA,MAAa,YAAY;;;;;;;AAQzB,MAAa,MAAgB,OAAO,EAAE,aAAa;CAClD,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,gBAAgB;AACjD,KAAI,OAAQ,QAAO;AAEnB,KAAI;AAEH,SAAO,aADQ,MAAM,kBAAkB,OAAO,IAAI,OAAO,QAAQ,CACtC;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,0BAA0B,sBAAsB;;;;;;;;;AAU5E,MAAa,OAAiB,OAAO,EAAE,SAAS,QAAQ,YAAY;CACnE,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,kBAAkB;AACnD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,mBAAmB;AACzD,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,SAAS,MAAM,qBAAqB,OAAO,IAAI,OAAO,SAAS,KAAK;AAC1E,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAChD,MAAI,OAAO,QAAS,OAAM,MAAM,WAAW,EAAE,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;AACzE,SAAO,aAAa,OAAO;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,6BAA6B,wBAAwB"}
+{"version":3,"file":"settings.mjs","names":[],"sources":["../../../../src/astro/routes/api/settings.ts"],"sourcesContent":["/**\n * Site Settings API endpoint\n *\n * GET  /_emdash/api/settings - Get all site settings\n * POST /_emdash/api/settings - Update site settings\n */\n\nimport type { APIRoute } from \"astro\";\n\nimport { requirePerm } from \"#api/authorize.js\";\nimport { apiError, handleError, unwrapResult } from \"#api/error.js\";\nimport { handleSettingsGet, handleSettingsUpdate } from \"#api/handlers/settings.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { settingsUpdateBody } from \"#api/schemas.js\";\nimport { siteSettingsTag } from \"#cache/chrome-tags.js\";\n\nexport const prerender = false;\n\n/**\n * GET /_emdash/api/settings\n *\n * Returns all site settings as a JSON object.\n * Unset values are undefined. Media references include resolved URLs.\n */\nexport const GET: APIRoute = async ({ locals }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"settings:read\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst result = await handleSettingsGet(emdash.db, emdash.storage);\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to get settings\", \"SETTINGS_READ_ERROR\");\n\t}\n};\n\n/**\n * POST /_emdash/api/settings\n *\n * Updates site settings. Accepts a partial settings object.\n * Merges with existing settings and returns the updated settings.\n */\nexport const POST: APIRoute = async ({ request, locals, cache }) => {\n\tconst { emdash, user } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\tconst denied = requirePerm(user, \"settings:manage\");\n\tif (denied) return denied;\n\n\ttry {\n\t\tconst body = await parseBody(request, settingsUpdateBody);\n\t\tif (isParseError(body)) return body;\n\n\t\tconst result = await handleSettingsUpdate(emdash.db, emdash.storage, body);\n\t\tif (!result.success) return unwrapResult(result);\n\t\tif (cache?.enabled) await cache.invalidate({ tags: [siteSettingsTag()] });\n\t\treturn unwrapResult(result);\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to update settings\", \"SETTINGS_UPDATE_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAgBA,MAAa,YAAY;;;;;;;AAQzB,MAAa,MAAgB,OAAO,EAAE,aAAa;CAClD,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,gBAAgB;AACjD,KAAI,OAAQ,QAAO;AAEnB,KAAI;AAEH,SAAO,aADQ,MAAM,kBAAkB,OAAO,IAAI,OAAO,QAAQ,CACtC;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,0BAA0B,sBAAsB;;;;;;;;;AAU5E,MAAa,OAAiB,OAAO,EAAE,SAAS,QAAQ,YAAY;CACnE,MAAM,EAAE,QAAQ,SAAS;AAEzB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;CAGpE,MAAM,SAAS,YAAY,MAAM,kBAAkB;AACnD,KAAI,OAAQ,QAAO;AAEnB,KAAI;EACH,MAAM,OAAO,MAAM,UAAU,SAAS,mBAAmB;AACzD,MAAI,aAAa,KAAK,CAAE,QAAO;EAE/B,MAAM,SAAS,MAAM,qBAAqB,OAAO,IAAI,OAAO,SAAS,KAAK;AAC1E,MAAI,CAAC,OAAO,QAAS,QAAO,aAAa,OAAO;AAChD,MAAI,OAAO,QAAS,OAAM,MAAM,WAAW,EAAE,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;AACzE,SAAO,aAAa,OAAO;UACnB,OAAO;AACf,SAAO,YAAY,OAAO,6BAA6B,wBAAwB"}

package/dist/astro/routes/api/setup/admin-verify.mjs

@@ -1,19 +1,20 @@
-import "../../../../config-C3EBstHi.mjs";
-import "../../../../base64-CvLhUKQv.mjs";
-import "../../../../types-CQPWhPxE.mjs";
-import { t as OptionsRepository } from "../../../../options-BHPeIbBd.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DFrQjppn.mjs";
-import { n as parseBody, t as isParseError } from "../../../../parse-Ckpg-Qfp.mjs";
-import "../../../../media-BHjus86Y.mjs";
-import "../../../../redirects-BLNOWQTn.mjs";
-import { y as setupAdminVerifyBody } from "../../../../relations-C4htk5sb.mjs";
-import "../../../../status-B777-dXz.mjs";
+import "../../../../config-CGVeT8Hc.mjs";
+import { t as OptionsRepository } from "../../../../options-D5WcorD5.mjs";
+import "../../../../base64-DvnNgP7e.mjs";
+import "../../../../types-BkUg2yHx.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-CCTCskie.mjs";
+import { n as parseBody, t as isParseError } from "../../../../parse-Cr379Av9.mjs";
+import "../../../../redirects-BCiTaIQ-.mjs";
+import "../../../../entry-lock-D3C99MXS.mjs";
+import "../../../../comments-BVzzt6x5.mjs";
+import { y as setupAdminVerifyBody } from "../../../../relations-B4w-G5U9.mjs";
+import "../../../../status-DLoBmcDz.mjs";
 import "../../../../api/schemas/index.mjs";
-import { r as getPublicOrigin } from "../../../../public-url-CarhZJgf.mjs";
-import { n as validateAllowedOrigins, t as getConfiguredAllowedOrigins } from "../../../../allowed-origins-BGglilcs.mjs";
-import { n as createChallengeStore } from "../../../../challenge-store-DQN_Yrck.mjs";
-import { t as getPasskeyConfig } from "../../../../passkey-config-O_lj3y0k.mjs";
-import { t as SETUP_NONCE_COOKIE } from "../../../../setup-nonce-DZCFS2sn.mjs";
+import { r as getPublicOrigin } from "../../../../public-url-BWVHsfQv.mjs";
+import { n as validateAllowedOrigins, t as getConfiguredAllowedOrigins } from "../../../../allowed-origins-1Sa-2wZK.mjs";
+import { n as createChallengeStore } from "../../../../challenge-store-CkRdSdd8.mjs";
+import { t as getPasskeyConfig } from "../../../../passkey-config-BD-wMaCf.mjs";
+import { t as SETUP_NONCE_COOKIE } from "../../../../setup-nonce-Cb9-884O.mjs";
 import { Role, secureCompare } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 import { registerPasskey, verifyRegistrationResponse } from "@emdash-cms/auth/passkey";

package/dist/astro/routes/api/setup/admin-verify.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"admin-verify.mjs","names":[],"sources":["../../../../../src/astro/routes/api/setup/admin-verify.ts"],"sourcesContent":["/**\n * POST /_emdash/api/setup/admin/verify\n *\n * Complete admin creation by verifying the passkey registration\n */\n\nimport type { APIRoute } from \"astro\";\n\nexport const prerender = false;\n\nimport { Role, secureCompare } from \"@emdash-cms/auth\";\nimport { createKyselyAdapter } from \"@emdash-cms/auth/adapters/kysely\";\nimport { verifyRegistrationResponse, registerPasskey } from \"@emdash-cms/auth/passkey\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { getPublicOrigin } from \"#api/public-url.js\";\nimport { setupAdminVerifyBody } from \"#api/schemas.js\";\nimport { getConfiguredAllowedOrigins, validateAllowedOrigins } from \"#auth/allowed-origins.js\";\nimport { createChallengeStore } from \"#auth/challenge-store.js\";\nimport { getPasskeyConfig } from \"#auth/passkey-config.js\";\nimport { SETUP_NONCE_COOKIE } from \"#auth/setup-nonce.js\";\nimport { OptionsRepository } from \"#db/repositories/options.js\";\n\nexport const POST: APIRoute = async ({ cookies, request, locals }) => {\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Check if setup is already complete\n\t\tconst options = new OptionsRepository(emdash.db);\n\t\tconst setupComplete = await options.get(\"emdash:setup_complete\");\n\t\tconst isComplete = setupComplete === true || setupComplete === \"true\";\n\n\t\t// Check if any users exist\n\t\tconst adapter = createKyselyAdapter(emdash.db);\n\t\tconst userCount = await adapter.countUsers();\n\n\t\tif (userCount > 0) {\n\t\t\tif (isComplete) {\n\t\t\t\treturn apiError(\"SETUP_COMPLETE\", \"Setup already complete\", 400);\n\t\t\t}\n\t\t\treturn apiError(\"ADMIN_EXISTS\", \"Admin user already exists\", 400);\n\t\t}\n\n\t\t// `setup_complete` with ZERO users is a recoverable half-state —\n\t\t// see the matching guard in ./admin.ts. The verify step must\n\t\t// accept it too, or the wizard dies between its two calls.\n\n\t\t// Get setup state\n\t\tconst setupState = await options.get<{\n\t\t\tstep?: string;\n\t\t\temail?: string;\n\t\t\tname?: string | null;\n\t\t\tnonce?: string;\n\t\t}>(\"emdash:setup_state\");\n\n\t\tif (!setupState || setupState.step !== \"admin\") {\n\t\t\treturn apiError(\"INVALID_STATE\", \"Invalid setup state. Please restart setup.\", 400);\n\t\t}\n\n\t\t// Verify the session nonce. The cookie was minted by POST /setup/admin\n\t\t// and stored alongside setup_state; presenting a matching cookie is\n\t\t// proof that this verify call comes from the same browser that\n\t\t// started the admin step. Constant-time compare to avoid leaking the\n\t\t// stored value through timing.\n\t\tconst cookieNonce = cookies.get(SETUP_NONCE_COOKIE)?.value;\n\t\tif (!setupState.nonce || !cookieNonce || !secureCompare(cookieNonce, setupState.nonce)) {\n\t\t\treturn apiError(\n\t\t\t\t\"INVALID_STATE\",\n\t\t\t\t\"Setup session expired or tampered with. Please restart the admin step.\",\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\n\t\tif (!setupState.email) {\n\t\t\treturn apiError(\"INVALID_STATE\", \"Invalid setup state. Please restart setup.\", 400);\n\t\t}\n\n\t\t// Parse request body\n\t\tconst body = await parseBody(request, setupAdminVerifyBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Get passkey config\n\t\tconst url = new URL(request.url);\n\t\tconst siteName = (await options.get<string>(\"emdash:site_title\")) ?? undefined;\n\t\tconst siteUrl = getPublicOrigin(url, emdash?.config);\n\t\tconst allowedOrigins = validateAllowedOrigins(\n\t\t\tsiteUrl,\n\t\t\tgetConfiguredAllowedOrigins(emdash?.config),\n\t\t);\n\t\tconst passkeyConfig = getPasskeyConfig(url, siteName, siteUrl, allowedOrigins);\n\n\t\t// Verify the registration response\n\t\tconst challengeStore = createChallengeStore(emdash.db);\n\n\t\tconst verified = await verifyRegistrationResponse(\n\t\t\tpasskeyConfig,\n\t\t\tbody.credential,\n\t\t\tchallengeStore,\n\t\t);\n\n\t\t// Create the admin user\n\t\tconst user = await adapter.createUser({\n\t\t\temail: setupState.email,\n\t\t\tname: setupState.name ?? null,\n\t\t\trole: Role.ADMIN,\n\t\t\temailVerified: false, // No email verification for first user\n\t\t});\n\n\t\t// Register the passkey\n\t\tawait registerPasskey(adapter, user.id, verified, \"Setup passkey\");\n\n\t\t// Mark setup as complete\n\t\tawait options.set(\"emdash:setup_complete\", true);\n\n\t\t// Clean up setup state and the session nonce cookie\n\t\tawait options.delete(\"emdash:setup_state\");\n\t\tcookies.delete(SETUP_NONCE_COOKIE, { path: \"/_emdash/\" });\n\n\t\treturn apiSuccess({\n\t\t\tsuccess: true,\n\t\t\tuser: {\n\t\t\t\tid: user.id,\n\t\t\t\temail: user.email,\n\t\t\t\tname: user.name,\n\t\t\t\trole: user.role,\n\t\t\t},\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to verify admin setup\", \"SETUP_VERIFY_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAQA,MAAa,YAAY;AAgBzB,MAAa,OAAiB,OAAO,EAAE,SAAS,SAAS,aAAa;CACrE,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EAEH,MAAM,UAAU,IAAI,kBAAkB,OAAO,GAAG;EAChD,MAAM,gBAAgB,MAAM,QAAQ,IAAI,wBAAwB;EAChE,MAAM,aAAa,kBAAkB,QAAQ,kBAAkB;EAG/D,MAAM,UAAU,oBAAoB,OAAO,GAAG;AAG9C,MAFkB,MAAM,QAAQ,YAAY,GAE5B,GAAG;AAClB,OAAI,WACH,QAAO,SAAS,kBAAkB,0BAA0B,IAAI;AAEjE,UAAO,SAAS,gBAAgB,6BAA6B,IAAI;;EAQlE,MAAM,aAAa,MAAM,QAAQ,IAK9B,qBAAqB;AAExB,MAAI,CAAC,cAAc,WAAW,SAAS,QACtC,QAAO,SAAS,iBAAiB,8CAA8C,IAAI;EAQpF,MAAM,cAAc,QAAQ,IAAI,mBAAmB,EAAE;AACrD,MAAI,CAAC,WAAW,SAAS,CAAC,eAAe,CAAC,cAAc,aAAa,WAAW,MAAM,CACrF,QAAO,SACN,iBACA,0EACA,IACA;AAGF,MAAI,CAAC,WAAW,MACf,QAAO,SAAS,iBAAiB,8CAA8C,IAAI;EAIpF,MAAM,OAAO,MAAM,UAAU,SAAS,qBAAqB;AAC3D,MAAI,aAAa,KAAK,CAAE,QAAO;EAG/B,MAAM,MAAM,IAAI,IAAI,QAAQ,IAAI;EAChC,MAAM,WAAY,MAAM,QAAQ,IAAY,oBAAoB,IAAK;EACrE,MAAM,UAAU,gBAAgB,KAAK,QAAQ,OAAO;EAKpD,MAAM,gBAAgB,iBAAiB,KAAK,UAAU,SAJ/B,uBACtB,SACA,4BAA4B,QAAQ,OAAO,CAC3C,CAC6E;EAG9E,MAAM,iBAAiB,qBAAqB,OAAO,GAAG;EAEtD,MAAM,WAAW,MAAM,2BACtB,eACA,KAAK,YACL,eACA;EAGD,MAAM,OAAO,MAAM,QAAQ,WAAW;GACrC,OAAO,WAAW;GAClB,MAAM,WAAW,QAAQ;GACzB,MAAM,KAAK;GACX,eAAe;GACf,CAAC;AAGF,QAAM,gBAAgB,SAAS,KAAK,IAAI,UAAU,gBAAgB;AAGlE,QAAM,QAAQ,IAAI,yBAAyB,KAAK;AAGhD,QAAM,QAAQ,OAAO,qBAAqB;AAC1C,UAAQ,OAAO,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEzD,SAAO,WAAW;GACjB,SAAS;GACT,MAAM;IACL,IAAI,KAAK;IACT,OAAO,KAAK;IACZ,MAAM,KAAK;IACX,MAAM,KAAK;IACX;GACD,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,gCAAgC,qBAAqB"}
+{"version":3,"file":"admin-verify.mjs","names":[],"sources":["../../../../../src/astro/routes/api/setup/admin-verify.ts"],"sourcesContent":["/**\n * POST /_emdash/api/setup/admin/verify\n *\n * Complete admin creation by verifying the passkey registration\n */\n\nimport type { APIRoute } from \"astro\";\n\nexport const prerender = false;\n\nimport { Role, secureCompare } from \"@emdash-cms/auth\";\nimport { createKyselyAdapter } from \"@emdash-cms/auth/adapters/kysely\";\nimport { verifyRegistrationResponse, registerPasskey } from \"@emdash-cms/auth/passkey\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { getPublicOrigin } from \"#api/public-url.js\";\nimport { setupAdminVerifyBody } from \"#api/schemas.js\";\nimport { getConfiguredAllowedOrigins, validateAllowedOrigins } from \"#auth/allowed-origins.js\";\nimport { createChallengeStore } from \"#auth/challenge-store.js\";\nimport { getPasskeyConfig } from \"#auth/passkey-config.js\";\nimport { SETUP_NONCE_COOKIE } from \"#auth/setup-nonce.js\";\nimport { OptionsRepository } from \"#db/repositories/options.js\";\n\nexport const POST: APIRoute = async ({ cookies, request, locals }) => {\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Check if setup is already complete\n\t\tconst options = new OptionsRepository(emdash.db);\n\t\tconst setupComplete = await options.get(\"emdash:setup_complete\");\n\t\tconst isComplete = setupComplete === true || setupComplete === \"true\";\n\n\t\t// Check if any users exist\n\t\tconst adapter = createKyselyAdapter(emdash.db);\n\t\tconst userCount = await adapter.countUsers();\n\n\t\tif (userCount > 0) {\n\t\t\tif (isComplete) {\n\t\t\t\treturn apiError(\"SETUP_COMPLETE\", \"Setup already complete\", 400);\n\t\t\t}\n\t\t\treturn apiError(\"ADMIN_EXISTS\", \"Admin user already exists\", 400);\n\t\t}\n\n\t\t// `setup_complete` with ZERO users is a recoverable half-state —\n\t\t// see the matching guard in ./admin.ts. The verify step must\n\t\t// accept it too, or the wizard dies between its two calls.\n\n\t\t// Get setup state\n\t\tconst setupState = await options.get<{\n\t\t\tstep?: string;\n\t\t\temail?: string;\n\t\t\tname?: string | null;\n\t\t\tnonce?: string;\n\t\t}>(\"emdash:setup_state\");\n\n\t\tif (!setupState || setupState.step !== \"admin\") {\n\t\t\treturn apiError(\"INVALID_STATE\", \"Invalid setup state. Please restart setup.\", 400);\n\t\t}\n\n\t\t// Verify the session nonce. The cookie was minted by POST /setup/admin\n\t\t// and stored alongside setup_state; presenting a matching cookie is\n\t\t// proof that this verify call comes from the same browser that\n\t\t// started the admin step. Constant-time compare to avoid leaking the\n\t\t// stored value through timing.\n\t\tconst cookieNonce = cookies.get(SETUP_NONCE_COOKIE)?.value;\n\t\tif (!setupState.nonce || !cookieNonce || !secureCompare(cookieNonce, setupState.nonce)) {\n\t\t\treturn apiError(\n\t\t\t\t\"INVALID_STATE\",\n\t\t\t\t\"Setup session expired or tampered with. Please restart the admin step.\",\n\t\t\t\t400,\n\t\t\t);\n\t\t}\n\n\t\tif (!setupState.email) {\n\t\t\treturn apiError(\"INVALID_STATE\", \"Invalid setup state. Please restart setup.\", 400);\n\t\t}\n\n\t\t// Parse request body\n\t\tconst body = await parseBody(request, setupAdminVerifyBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Get passkey config\n\t\tconst url = new URL(request.url);\n\t\tconst siteName = (await options.get<string>(\"emdash:site_title\")) ?? undefined;\n\t\tconst siteUrl = getPublicOrigin(url, emdash?.config);\n\t\tconst allowedOrigins = validateAllowedOrigins(\n\t\t\tsiteUrl,\n\t\t\tgetConfiguredAllowedOrigins(emdash?.config),\n\t\t);\n\t\tconst passkeyConfig = getPasskeyConfig(url, siteName, siteUrl, allowedOrigins);\n\n\t\t// Verify the registration response\n\t\tconst challengeStore = createChallengeStore(emdash.db);\n\n\t\tconst verified = await verifyRegistrationResponse(\n\t\t\tpasskeyConfig,\n\t\t\tbody.credential,\n\t\t\tchallengeStore,\n\t\t);\n\n\t\t// Create the admin user\n\t\tconst user = await adapter.createUser({\n\t\t\temail: setupState.email,\n\t\t\tname: setupState.name ?? null,\n\t\t\trole: Role.ADMIN,\n\t\t\temailVerified: false, // No email verification for first user\n\t\t});\n\n\t\t// Register the passkey\n\t\tawait registerPasskey(adapter, user.id, verified, \"Setup passkey\");\n\n\t\t// Mark setup as complete\n\t\tawait options.set(\"emdash:setup_complete\", true);\n\n\t\t// Clean up setup state and the session nonce cookie\n\t\tawait options.delete(\"emdash:setup_state\");\n\t\tcookies.delete(SETUP_NONCE_COOKIE, { path: \"/_emdash/\" });\n\n\t\treturn apiSuccess({\n\t\t\tsuccess: true,\n\t\t\tuser: {\n\t\t\t\tid: user.id,\n\t\t\t\temail: user.email,\n\t\t\t\tname: user.name,\n\t\t\t\trole: user.role,\n\t\t\t},\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to verify admin setup\", \"SETUP_VERIFY_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAQA,MAAa,YAAY;AAgBzB,MAAa,OAAiB,OAAO,EAAE,SAAS,SAAS,aAAa;CACrE,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EAEH,MAAM,UAAU,IAAI,kBAAkB,OAAO,GAAG;EAChD,MAAM,gBAAgB,MAAM,QAAQ,IAAI,wBAAwB;EAChE,MAAM,aAAa,kBAAkB,QAAQ,kBAAkB;EAG/D,MAAM,UAAU,oBAAoB,OAAO,GAAG;AAG9C,MAFkB,MAAM,QAAQ,YAAY,GAE5B,GAAG;AAClB,OAAI,WACH,QAAO,SAAS,kBAAkB,0BAA0B,IAAI;AAEjE,UAAO,SAAS,gBAAgB,6BAA6B,IAAI;;EAQlE,MAAM,aAAa,MAAM,QAAQ,IAK9B,qBAAqB;AAExB,MAAI,CAAC,cAAc,WAAW,SAAS,QACtC,QAAO,SAAS,iBAAiB,8CAA8C,IAAI;EAQpF,MAAM,cAAc,QAAQ,IAAI,mBAAmB,EAAE;AACrD,MAAI,CAAC,WAAW,SAAS,CAAC,eAAe,CAAC,cAAc,aAAa,WAAW,MAAM,CACrF,QAAO,SACN,iBACA,0EACA,IACA;AAGF,MAAI,CAAC,WAAW,MACf,QAAO,SAAS,iBAAiB,8CAA8C,IAAI;EAIpF,MAAM,OAAO,MAAM,UAAU,SAAS,qBAAqB;AAC3D,MAAI,aAAa,KAAK,CAAE,QAAO;EAG/B,MAAM,MAAM,IAAI,IAAI,QAAQ,IAAI;EAChC,MAAM,WAAY,MAAM,QAAQ,IAAY,oBAAoB,IAAK;EACrE,MAAM,UAAU,gBAAgB,KAAK,QAAQ,OAAO;EAKpD,MAAM,gBAAgB,iBAAiB,KAAK,UAAU,SAJ/B,uBACtB,SACA,4BAA4B,QAAQ,OAAO,CAC3C,CAC6E;EAG9E,MAAM,iBAAiB,qBAAqB,OAAO,GAAG;EAEtD,MAAM,WAAW,MAAM,2BACtB,eACA,KAAK,YACL,eACA;EAGD,MAAM,OAAO,MAAM,QAAQ,WAAW;GACrC,OAAO,WAAW;GAClB,MAAM,WAAW,QAAQ;GACzB,MAAM,KAAK;GACX,eAAe;GACf,CAAC;AAGF,QAAM,gBAAgB,SAAS,KAAK,IAAI,UAAU,gBAAgB;AAGlE,QAAM,QAAQ,IAAI,yBAAyB,KAAK;AAGhD,QAAM,QAAQ,OAAO,qBAAqB;AAC1C,UAAQ,OAAO,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEzD,SAAO,WAAW;GACjB,SAAS;GACT,MAAM;IACL,IAAI,KAAK;IACT,OAAO,KAAK;IACZ,MAAM,KAAK;IACX,MAAM,KAAK;IACX;GACD,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,gCAAgC,qBAAqB"}

package/dist/astro/routes/api/setup/admin.mjs

@@ -1,18 +1,19 @@
-import "../../../../config-C3EBstHi.mjs";
-import "../../../../base64-CvLhUKQv.mjs";
-import "../../../../types-CQPWhPxE.mjs";
-import { t as OptionsRepository } from "../../../../options-BHPeIbBd.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DFrQjppn.mjs";
-import { n as parseBody, t as isParseError } from "../../../../parse-Ckpg-Qfp.mjs";
-import "../../../../media-BHjus86Y.mjs";
-import "../../../../redirects-BLNOWQTn.mjs";
-import { v as setupAdminBody } from "../../../../relations-C4htk5sb.mjs";
-import "../../../../status-B777-dXz.mjs";
+import "../../../../config-CGVeT8Hc.mjs";
+import { t as OptionsRepository } from "../../../../options-D5WcorD5.mjs";
+import "../../../../base64-DvnNgP7e.mjs";
+import "../../../../types-BkUg2yHx.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-CCTCskie.mjs";
+import { n as parseBody, t as isParseError } from "../../../../parse-Cr379Av9.mjs";
+import "../../../../redirects-BCiTaIQ-.mjs";
+import "../../../../entry-lock-D3C99MXS.mjs";
+import "../../../../comments-BVzzt6x5.mjs";
+import { v as setupAdminBody } from "../../../../relations-B4w-G5U9.mjs";
+import "../../../../status-DLoBmcDz.mjs";
 import "../../../../api/schemas/index.mjs";
-import { r as getPublicOrigin } from "../../../../public-url-CarhZJgf.mjs";
-import { n as createChallengeStore } from "../../../../challenge-store-DQN_Yrck.mjs";
-import { t as getPasskeyConfig } from "../../../../passkey-config-O_lj3y0k.mjs";
-import { n as SETUP_NONCE_MAX_AGE_SECONDS, t as SETUP_NONCE_COOKIE } from "../../../../setup-nonce-DZCFS2sn.mjs";
+import { r as getPublicOrigin } from "../../../../public-url-BWVHsfQv.mjs";
+import { n as createChallengeStore } from "../../../../challenge-store-CkRdSdd8.mjs";
+import { t as getPasskeyConfig } from "../../../../passkey-config-BD-wMaCf.mjs";
+import { n as SETUP_NONCE_MAX_AGE_SECONDS, t as SETUP_NONCE_COOKIE } from "../../../../setup-nonce-Cb9-884O.mjs";
 import { generateToken } from "@emdash-cms/auth";
 import { createKyselyAdapter } from "@emdash-cms/auth/adapters/kysely";
 import { generateRegistrationOptions } from "@emdash-cms/auth/passkey";

package/dist/astro/routes/api/setup/admin.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"admin.mjs","names":[],"sources":["../../../../../src/astro/routes/api/setup/admin.ts"],"sourcesContent":["/**\n * POST /_emdash/api/setup/admin\n *\n * Step 3 of setup: Start admin creation by returning passkey registration options\n */\n\nimport type { APIRoute } from \"astro\";\n\nexport const prerender = false;\n\nimport { generateToken } from \"@emdash-cms/auth\";\nimport { createKyselyAdapter } from \"@emdash-cms/auth/adapters/kysely\";\nimport { generateRegistrationOptions } from \"@emdash-cms/auth/passkey\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { getPublicOrigin } from \"#api/public-url.js\";\nimport { setupAdminBody } from \"#api/schemas.js\";\nimport { createChallengeStore } from \"#auth/challenge-store.js\";\nimport { getPasskeyConfig } from \"#auth/passkey-config.js\";\nimport { SETUP_NONCE_COOKIE, SETUP_NONCE_MAX_AGE_SECONDS } from \"#auth/setup-nonce.js\";\nimport { OptionsRepository } from \"#db/repositories/options.js\";\n\nexport const POST: APIRoute = async ({ cookies, request, locals }) => {\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Check if setup is already complete\n\t\tconst options = new OptionsRepository(emdash.db);\n\t\tconst setupComplete = await options.get(\"emdash:setup_complete\");\n\t\tconst isComplete = setupComplete === true || setupComplete === \"true\";\n\n\t\t// Check if any users exist\n\t\tconst adapter = createKyselyAdapter(emdash.db);\n\t\tconst userCount = await adapter.countUsers();\n\n\t\tif (userCount > 0) {\n\t\t\tif (isComplete) {\n\t\t\t\treturn apiError(\"SETUP_COMPLETE\", \"Setup already complete\", 400);\n\t\t\t}\n\t\t\treturn apiError(\"ADMIN_EXISTS\", \"Admin user already exists\", 400);\n\t\t}\n\n\t\t// `setup_complete` with ZERO users is a recoverable half-state (a\n\t\t// wiped/sanitised users table — e.g. a DB copied between\n\t\t// environments). /api/setup/status already resumes the wizard at\n\t\t// the admin step for exactly this state, so admin creation must be\n\t\t// allowed here too — rejecting on the stale flag alone leaves the\n\t\t// instance with no UI path to an admin account.\n\n\t\t// Parse request body\n\t\tconst body = await parseBody(request, setupAdminBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Preserve title/tagline from step 1 by reading existing setup state\n\t\t// before we overwrite it below.\n\t\tconst existingState = await options.get<Record<string, unknown>>(\"emdash:setup_state\");\n\n\t\t// Mint a fresh session nonce. This binds the follow-up\n\t\t// /setup/admin/verify call to the same browser that made this\n\t\t// request, so an unauthenticated attacker on another host cannot\n\t\t// substitute their own email into the setup state during the\n\t\t// setup window. Rotates on every call so a legitimate retry\n\t\t// always gets a working session.\n\t\tconst nonce = generateToken();\n\n\t\t// Get passkey config\n\t\tconst url = new URL(request.url);\n\t\tconst siteName = (await options.get<string>(\"emdash:site_title\")) ?? undefined;\n\t\tconst siteUrl = getPublicOrigin(url, emdash?.config);\n\t\tconst passkeyConfig = getPasskeyConfig(url, siteName, siteUrl);\n\n\t\t// Generate registration options\n\t\tconst challengeStore = createChallengeStore(emdash.db);\n\n\t\t// Create a temporary user object for registration options\n\t\t// (not persisted until passkey is verified)\n\t\tconst tempUser = {\n\t\t\tid: `setup-${Date.now()}`, // Temporary ID\n\t\t\temail: body.email.toLowerCase(),\n\t\t\tname: body.name || null,\n\t\t};\n\n\t\tconst registrationOptions = await generateRegistrationOptions(\n\t\t\tpasskeyConfig,\n\t\t\ttempUser,\n\t\t\t[], // No existing credentials\n\t\t\tchallengeStore,\n\t\t);\n\n\t\t// Store the nonce alongside the rest of the setup state, preserving\n\t\t// title/tagline from step 1. The verify endpoint will constant-time\n\t\t// compare the nonce with the incoming cookie.\n\t\tawait options.set(\"emdash:setup_state\", {\n\t\t\t...existingState,\n\t\t\tstep: \"admin\",\n\t\t\temail: body.email.toLowerCase(),\n\t\t\tname: body.name || null,\n\t\t\ttempUserId: tempUser.id,\n\t\t\tnonce,\n\t\t});\n\n\t\t// HttpOnly + SameSite=Strict + path-scoped. The cookie must not be\n\t\t// accessible to JS (nothing in the admin UI needs to read it) and\n\t\t// must not be sent on cross-site navigations. The /_emdash/ path\n\t\t// scope keeps it away from user-authored frontend code.\n\t\t//\n\t\t// Derive `secure` from the public origin, not the internal request\n\t\t// URL. Behind a TLS-terminating reverse proxy the internal hop is\n\t\t// often `http:` while the browser-facing origin is `https:` —\n\t\t// using `url.protocol` there would drop the Secure flag on a\n\t\t// sensitive cookie over the public HTTPS connection.\n\t\tconst publicOrigin = new URL(siteUrl);\n\t\tcookies.set(SETUP_NONCE_COOKIE, nonce, {\n\t\t\tpath: \"/_emdash/\",\n\t\t\thttpOnly: true,\n\t\t\tsameSite: \"strict\",\n\t\t\tsecure: publicOrigin.protocol === \"https:\",\n\t\t\tmaxAge: SETUP_NONCE_MAX_AGE_SECONDS,\n\t\t});\n\n\t\treturn apiSuccess({\n\t\t\tsuccess: true,\n\t\t\toptions: registrationOptions,\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create admin\", \"SETUP_ADMIN_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAQA,MAAa,YAAY;AAezB,MAAa,OAAiB,OAAO,EAAE,SAAS,SAAS,aAAa;CACrE,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EAEH,MAAM,UAAU,IAAI,kBAAkB,OAAO,GAAG;EAChD,MAAM,gBAAgB,MAAM,QAAQ,IAAI,wBAAwB;EAChE,MAAM,aAAa,kBAAkB,QAAQ,kBAAkB;AAM/D,MAFkB,MADF,oBAAoB,OAAO,GAAG,CACd,YAAY,GAE5B,GAAG;AAClB,OAAI,WACH,QAAO,SAAS,kBAAkB,0BAA0B,IAAI;AAEjE,UAAO,SAAS,gBAAgB,6BAA6B,IAAI;;EAWlE,MAAM,OAAO,MAAM,UAAU,SAAS,eAAe;AACrD,MAAI,aAAa,KAAK,CAAE,QAAO;EAI/B,MAAM,gBAAgB,MAAM,QAAQ,IAA6B,qBAAqB;EAQtF,MAAM,QAAQ,eAAe;EAG7B,MAAM,MAAM,IAAI,IAAI,QAAQ,IAAI;EAChC,MAAM,WAAY,MAAM,QAAQ,IAAY,oBAAoB,IAAK;EACrE,MAAM,UAAU,gBAAgB,KAAK,QAAQ,OAAO;EACpD,MAAM,gBAAgB,iBAAiB,KAAK,UAAU,QAAQ;EAG9D,MAAM,iBAAiB,qBAAqB,OAAO,GAAG;EAItD,MAAM,WAAW;GAChB,IAAI,SAAS,KAAK,KAAK;GACvB,OAAO,KAAK,MAAM,aAAa;GAC/B,MAAM,KAAK,QAAQ;GACnB;EAED,MAAM,sBAAsB,MAAM,4BACjC,eACA,UACA,EAAE,EACF,eACA;AAKD,QAAM,QAAQ,IAAI,sBAAsB;GACvC,GAAG;GACH,MAAM;GACN,OAAO,KAAK,MAAM,aAAa;GAC/B,MAAM,KAAK,QAAQ;GACnB,YAAY,SAAS;GACrB;GACA,CAAC;EAYF,MAAM,eAAe,IAAI,IAAI,QAAQ;AACrC,UAAQ,IAAI,oBAAoB,OAAO;GACtC,MAAM;GACN,UAAU;GACV,UAAU;GACV,QAAQ,aAAa,aAAa;GAClC,QAAQ;GACR,CAAC;AAEF,SAAO,WAAW;GACjB,SAAS;GACT,SAAS;GACT,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,0BAA0B,oBAAoB"}
+{"version":3,"file":"admin.mjs","names":[],"sources":["../../../../../src/astro/routes/api/setup/admin.ts"],"sourcesContent":["/**\n * POST /_emdash/api/setup/admin\n *\n * Step 3 of setup: Start admin creation by returning passkey registration options\n */\n\nimport type { APIRoute } from \"astro\";\n\nexport const prerender = false;\n\nimport { generateToken } from \"@emdash-cms/auth\";\nimport { createKyselyAdapter } from \"@emdash-cms/auth/adapters/kysely\";\nimport { generateRegistrationOptions } from \"@emdash-cms/auth/passkey\";\n\nimport { apiError, apiSuccess, handleError } from \"#api/error.js\";\nimport { isParseError, parseBody } from \"#api/parse.js\";\nimport { getPublicOrigin } from \"#api/public-url.js\";\nimport { setupAdminBody } from \"#api/schemas.js\";\nimport { createChallengeStore } from \"#auth/challenge-store.js\";\nimport { getPasskeyConfig } from \"#auth/passkey-config.js\";\nimport { SETUP_NONCE_COOKIE, SETUP_NONCE_MAX_AGE_SECONDS } from \"#auth/setup-nonce.js\";\nimport { OptionsRepository } from \"#db/repositories/options.js\";\n\nexport const POST: APIRoute = async ({ cookies, request, locals }) => {\n\tconst { emdash } = locals;\n\n\tif (!emdash?.db) {\n\t\treturn apiError(\"NOT_CONFIGURED\", \"EmDash is not initialized\", 500);\n\t}\n\n\ttry {\n\t\t// Check if setup is already complete\n\t\tconst options = new OptionsRepository(emdash.db);\n\t\tconst setupComplete = await options.get(\"emdash:setup_complete\");\n\t\tconst isComplete = setupComplete === true || setupComplete === \"true\";\n\n\t\t// Check if any users exist\n\t\tconst adapter = createKyselyAdapter(emdash.db);\n\t\tconst userCount = await adapter.countUsers();\n\n\t\tif (userCount > 0) {\n\t\t\tif (isComplete) {\n\t\t\t\treturn apiError(\"SETUP_COMPLETE\", \"Setup already complete\", 400);\n\t\t\t}\n\t\t\treturn apiError(\"ADMIN_EXISTS\", \"Admin user already exists\", 400);\n\t\t}\n\n\t\t// `setup_complete` with ZERO users is a recoverable half-state (a\n\t\t// wiped/sanitised users table — e.g. a DB copied between\n\t\t// environments). /api/setup/status already resumes the wizard at\n\t\t// the admin step for exactly this state, so admin creation must be\n\t\t// allowed here too — rejecting on the stale flag alone leaves the\n\t\t// instance with no UI path to an admin account.\n\n\t\t// Parse request body\n\t\tconst body = await parseBody(request, setupAdminBody);\n\t\tif (isParseError(body)) return body;\n\n\t\t// Preserve title/tagline from step 1 by reading existing setup state\n\t\t// before we overwrite it below.\n\t\tconst existingState = await options.get<Record<string, unknown>>(\"emdash:setup_state\");\n\n\t\t// Mint a fresh session nonce. This binds the follow-up\n\t\t// /setup/admin/verify call to the same browser that made this\n\t\t// request, so an unauthenticated attacker on another host cannot\n\t\t// substitute their own email into the setup state during the\n\t\t// setup window. Rotates on every call so a legitimate retry\n\t\t// always gets a working session.\n\t\tconst nonce = generateToken();\n\n\t\t// Get passkey config\n\t\tconst url = new URL(request.url);\n\t\tconst siteName = (await options.get<string>(\"emdash:site_title\")) ?? undefined;\n\t\tconst siteUrl = getPublicOrigin(url, emdash?.config);\n\t\tconst passkeyConfig = getPasskeyConfig(url, siteName, siteUrl);\n\n\t\t// Generate registration options\n\t\tconst challengeStore = createChallengeStore(emdash.db);\n\n\t\t// Create a temporary user object for registration options\n\t\t// (not persisted until passkey is verified)\n\t\tconst tempUser = {\n\t\t\tid: `setup-${Date.now()}`, // Temporary ID\n\t\t\temail: body.email.toLowerCase(),\n\t\t\tname: body.name || null,\n\t\t};\n\n\t\tconst registrationOptions = await generateRegistrationOptions(\n\t\t\tpasskeyConfig,\n\t\t\ttempUser,\n\t\t\t[], // No existing credentials\n\t\t\tchallengeStore,\n\t\t);\n\n\t\t// Store the nonce alongside the rest of the setup state, preserving\n\t\t// title/tagline from step 1. The verify endpoint will constant-time\n\t\t// compare the nonce with the incoming cookie.\n\t\tawait options.set(\"emdash:setup_state\", {\n\t\t\t...existingState,\n\t\t\tstep: \"admin\",\n\t\t\temail: body.email.toLowerCase(),\n\t\t\tname: body.name || null,\n\t\t\ttempUserId: tempUser.id,\n\t\t\tnonce,\n\t\t});\n\n\t\t// HttpOnly + SameSite=Strict + path-scoped. The cookie must not be\n\t\t// accessible to JS (nothing in the admin UI needs to read it) and\n\t\t// must not be sent on cross-site navigations. The /_emdash/ path\n\t\t// scope keeps it away from user-authored frontend code.\n\t\t//\n\t\t// Derive `secure` from the public origin, not the internal request\n\t\t// URL. Behind a TLS-terminating reverse proxy the internal hop is\n\t\t// often `http:` while the browser-facing origin is `https:` —\n\t\t// using `url.protocol` there would drop the Secure flag on a\n\t\t// sensitive cookie over the public HTTPS connection.\n\t\tconst publicOrigin = new URL(siteUrl);\n\t\tcookies.set(SETUP_NONCE_COOKIE, nonce, {\n\t\t\tpath: \"/_emdash/\",\n\t\t\thttpOnly: true,\n\t\t\tsameSite: \"strict\",\n\t\t\tsecure: publicOrigin.protocol === \"https:\",\n\t\t\tmaxAge: SETUP_NONCE_MAX_AGE_SECONDS,\n\t\t});\n\n\t\treturn apiSuccess({\n\t\t\tsuccess: true,\n\t\t\toptions: registrationOptions,\n\t\t});\n\t} catch (error) {\n\t\treturn handleError(error, \"Failed to create admin\", \"SETUP_ADMIN_ERROR\");\n\t}\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAQA,MAAa,YAAY;AAezB,MAAa,OAAiB,OAAO,EAAE,SAAS,SAAS,aAAa;CACrE,MAAM,EAAE,WAAW;AAEnB,KAAI,CAAC,QAAQ,GACZ,QAAO,SAAS,kBAAkB,6BAA6B,IAAI;AAGpE,KAAI;EAEH,MAAM,UAAU,IAAI,kBAAkB,OAAO,GAAG;EAChD,MAAM,gBAAgB,MAAM,QAAQ,IAAI,wBAAwB;EAChE,MAAM,aAAa,kBAAkB,QAAQ,kBAAkB;AAM/D,MAFkB,MADF,oBAAoB,OAAO,GAAG,CACd,YAAY,GAE5B,GAAG;AAClB,OAAI,WACH,QAAO,SAAS,kBAAkB,0BAA0B,IAAI;AAEjE,UAAO,SAAS,gBAAgB,6BAA6B,IAAI;;EAWlE,MAAM,OAAO,MAAM,UAAU,SAAS,eAAe;AACrD,MAAI,aAAa,KAAK,CAAE,QAAO;EAI/B,MAAM,gBAAgB,MAAM,QAAQ,IAA6B,qBAAqB;EAQtF,MAAM,QAAQ,eAAe;EAG7B,MAAM,MAAM,IAAI,IAAI,QAAQ,IAAI;EAChC,MAAM,WAAY,MAAM,QAAQ,IAAY,oBAAoB,IAAK;EACrE,MAAM,UAAU,gBAAgB,KAAK,QAAQ,OAAO;EACpD,MAAM,gBAAgB,iBAAiB,KAAK,UAAU,QAAQ;EAG9D,MAAM,iBAAiB,qBAAqB,OAAO,GAAG;EAItD,MAAM,WAAW;GAChB,IAAI,SAAS,KAAK,KAAK;GACvB,OAAO,KAAK,MAAM,aAAa;GAC/B,MAAM,KAAK,QAAQ;GACnB;EAED,MAAM,sBAAsB,MAAM,4BACjC,eACA,UACA,EAAE,EACF,eACA;AAKD,QAAM,QAAQ,IAAI,sBAAsB;GACvC,GAAG;GACH,MAAM;GACN,OAAO,KAAK,MAAM,aAAa;GAC/B,MAAM,KAAK,QAAQ;GACnB,YAAY,SAAS;GACrB;GACA,CAAC;EAYF,MAAM,eAAe,IAAI,IAAI,QAAQ;AACrC,UAAQ,IAAI,oBAAoB,OAAO;GACtC,MAAM;GACN,UAAU;GACV,UAAU;GACV,QAAQ,aAAa,aAAa;GAClC,QAAQ;GACR,CAAC;AAEF,SAAO,WAAW;GACjB,SAAS;GACT,SAAS;GACT,CAAC;UACM,OAAO;AACf,SAAO,YAAY,OAAO,0BAA0B,oBAAoB"}

package/dist/astro/routes/api/setup/dev-bypass.mjs

@@ -1,41 +1,45 @@
-import "../../../../dialect-helpers-BSbfaO3F.mjs";
-import "../../../../config-C3EBstHi.mjs";
-import "../../../../after-CBU2vkoO.mjs";
-import "../../../../object-cache-DVKnyOfy.mjs";
-import "../../../../content-DjvM0T92.mjs";
-import "../../../../slugify-B994zkXC.mjs";
-import "../../../../base64-CvLhUKQv.mjs";
-import "../../../../types-CQPWhPxE.mjs";
-import "../../../../media-BBm8Wg3f.mjs";
-import "../../../../taxonomy-tJepplLL.mjs";
-import { t as OptionsRepository } from "../../../../options-BHPeIbBd.mjs";
-import "../../../../redirect-CZkbozu9.mjs";
-import "../../../../request-cache-DH9zdCOD.mjs";
-import "../../../../byline-registry-Bpu9-MVs.mjs";
-import "../../../../field-defs-cache-BM4SIRqH.mjs";
-import "../../../../byline-DuhF7NWl.mjs";
-import "../../../../dist-89xCrGqi.mjs";
-import "../../../../fts-manager-Do1BlW2r.mjs";
-import "../../../../loader-Z8vl7zTq.mjs";
-import "../../../../capture-triggers-CNW1q3HK.mjs";
-import "../../../../activation-K0kGBWuJ.mjs";
-import "../../../../collection-deletion-Bj07NHbj.mjs";
-import "../../../../content-refresh-Bwp-8yGy.mjs";
-import "../../../../registry-AZAsRsor.mjs";
-import "../../../../media-usage-work-D6D9sMCA.mjs";
-import { n as repairContentMediaUsageCollection } from "../../../../content-repair-Czdp7jz5.mjs";
-import "../../../../settings--wobrkkC.mjs";
-import "../../../../ssrf-5sIM5jzl.mjs";
-import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-DFrQjppn.mjs";
-import "../../../../ssrf-Dg3cIT-b.mjs";
-import { t as validateSeed } from "../../../../validate-DE_LRwo9.mjs";
-import { t as applySeed } from "../../../../apply-B4SIOxR1.mjs";
-import { t as loadSeed } from "../../../../load-CawHjTOH.mjs";
-import { r as getPublicOrigin } from "../../../../public-url-CarhZJgf.mjs";
-import "../../../../api-tokens-BfYts-sq.mjs";
-import { n as handleApiTokenCreate, t as deleteApiTokensByName } from "../../../../api-tokens-BSsQACNe.mjs";
-import { t as escapeHtml } from "../../../../escape-HmHTC1Is.mjs";
-import { t as isSafeRedirect } from "../../../../redirect-CzqnLxK-.mjs";
+import "../../../../dialect-helpers-CtYdsX4W.mjs";
+import "../../../../config-CGVeT8Hc.mjs";
+import "../../../../datetime-normalization-PeiEdcRY.mjs";
+import "../../../../after-PcEvMY_6.mjs";
+import { t as OptionsRepository } from "../../../../options-D5WcorD5.mjs";
+import "../../../../base64-DvnNgP7e.mjs";
+import "../../../../secrets-DNgVgz_e.mjs";
+import "../../../../content-DZ3B5qtA.mjs";
+import "../../../../object-cache-DlSVbn5Y.mjs";
+import "../../../../slugify-T5GHH42D.mjs";
+import "../../../../types-BkUg2yHx.mjs";
+import "../../../../media-TBlKCwo7.mjs";
+import "../../../../taxonomy-Dj1vpw5E.mjs";
+import "../../../../resolve-BJIS8wKr.mjs";
+import "../../../../redirect-D2Yo-b6S.mjs";
+import "../../../../request-cache-DaMhSQdx.mjs";
+import "../../../../byline-registry-D6lWzXk6.mjs";
+import "../../../../field-defs-cache-B337z8UJ.mjs";
+import "../../../../byline-Doh-wt99.mjs";
+import "../../../../dist-2hDLsLeq.mjs";
+import "../../../../fts-manager-DMb0sbIQ.mjs";
+import "../../../../loader-t4TxaFiQ.mjs";
+import "../../../../collection-slugs-cache-D9auiKmI.mjs";
+import "../../../../capture-triggers-gxQxnxrJ.mjs";
+import "../../../../activation-CaMfdBt1.mjs";
+import "../../../../collection-deletion-C3Xixmkx.mjs";
+import "../../../../content-refresh-BHLHJgyt.mjs";
+import "../../../../registry-CkuPoZs7.mjs";
+import "../../../../media-usage-work-Cu5DqewW.mjs";
+import { n as repairContentMediaUsageCollection } from "../../../../content-repair-BVll5WNl.mjs";
+import "../../../../settings-DmroR53o.mjs";
+import "../../../../ssrf-Co1GGFZz.mjs";
+import { n as apiSuccess, r as handleError, t as apiError } from "../../../../error-CCTCskie.mjs";
+import "../../../../ssrf-BRpTDMV6.mjs";
+import { t as validateSeed } from "../../../../validate-BCP9HNDn.mjs";
+import { t as applySeed } from "../../../../apply-drpfmqrR.mjs";
+import { t as loadSeed } from "../../../../load-Cu5bvCZh.mjs";
+import { r as getPublicOrigin } from "../../../../public-url-BWVHsfQv.mjs";
+import { t as escapeHtml } from "../../../../escape-DN4Qmjsl.mjs";
+import "../../../../api-tokens-DS1VzN7_.mjs";
+import { n as handleApiTokenCreate, t as deleteApiTokensByName } from "../../../../api-tokens-BIXItFKV.mjs";
+import { t as isSafeRedirect } from "../../../../redirect-BrChFPIu.mjs";
 import { ulid } from "ulidx";
 
 //#region src/astro/routes/api/setup/dev-bypass.ts